3 Commits

Author	SHA1	Message	Date
Scott Idem	cf277f822e	feat: Inter font, weight 450, bumped base sizes across all pages ... - Load Inter variable font from Google Fonts on all 5 HTML pages - font-weight: 450 on body (between regular and medium — fixes thin feel) - -webkit-font-smoothing: antialiased for cleaner screen rendering - Base font size: normal 16→17px, large 18→19px, small 14→15px - Applies consistently to main UI, login, setup, settings, and help pages Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-26 22:20:10 -04:00
Scott Idem	0cf0d65e9e	feat: session naming, username/persona rename, help page, contrast fixes ... - Session name field: PATCH /sessions/{id} endpoint, inline rename button in UI - Persona rename: inline ✏ toggle form in settings, POST /settings/persona/rename - Username rename: inline form in settings, POST /settings/username (renames home dir, forces re-login) - Help page: dedicated /help route replacing modal, collapsible sections - Per-persona isolation: files.py and session_store.py now scope to correct user/persona - Contrast/visibility: muted text bumped to slate-400+, session rename btn at 0.4 opacity Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-23 23:10:12 -04:00
Scott Idem	a9bbb668b5	feat: session auth + per-user/persona UI at /{user}/{persona} ... Replaces nginx basic auth with a proper per-user session system: - auth_utils.py: bcrypt password hashing, JWT cookie creation/decode - auth_middleware.py: validates JWT cookie on all routes except /login, /health, /static/, and webhook endpoints (/channels/, /webhook/) - routers/ui.py: GET /login, POST /login, POST /logout, GET /{username}/{persona} — serves index.html with CORTEX_CONFIG injected - static/login.html: minimal login form (dark theme, matches UI) - main.py: registers SessionAuthMiddleware + ui.router - config.py: jwt_secret, jwt_expire_days settings - manage_passwords.py: CLI tool to set/check/list user passwords - app.js: reads window.CORTEX_CONFIG (user + persona), sends both on every /chat and /orchestrate request; persona name shown in header; logout button (⏏) added to header - requirements.txt: bcrypt, PyJWT, python-multipart - .env.default: JWT_SECRET, JWT_EXPIRE_DAYS documented - tests: client fixture injects JWT cookie; security test assertions updated for URL-normalized path traversal paths (still secure, codes differ) All 80 tests pass. Setup for a new user: python manage_passwords.py set scott python manage_passwords.py set holly Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-20 22:54:12 -04:00