233 commits

Author	SHA1	Message	Date
Ullrich Schäfer	d9eee37e39	build(deps): bump the production group across 1 directory with 35 updates ... Bumps 35 dependencies in the production group; lockfile regenerated and deduped against latest main. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-13 09:29:56 +02:00
Ullrich Schäfer	b45e69885d	poi-index: map-core selectors, planner.pois schema, /api/pois route + client, metrics ... Replace the planner's Overpass proxy with a self-hosted POI index: - map-core POI categories become structured tag selectors (single source of truth) + osmium filter / classification helpers - planner.pois PostGIS table (centroid points, GiST + category indexes) - /api/pois serving route (session + same-origin + rate limit, 100 cap) - lib/pois.ts client (renamed from overpass.ts; GET, quantized bbox) - metrics: poi_api_requests_total + DB-collected index rows/age gauges; drop overpass_* metrics - remove /api/overpass proxy + dead OVERPASS_URLS on the planner service (Journal surface backfill still uses it via code default) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-12 22:38:03 +02:00
dependabot[bot]	ae585290be	build(deps): bump the production group with 18 updates ... Bumps the production group with 18 updates: | Package | From | To | | --- | --- | --- | | [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.0` | | [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.61.0` | `8.61.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.9` | | [@logtape/logtape](https://github.com/dahlia/logtape/tree/HEAD/packages/logtape) | `2.1.4` | `2.1.5` | | [isbot](https://github.com/omrilotan/isbot) | `5.1.42` | `5.1.43` | | [@sentry/cli](https://github.com/getsentry/sentry-cli) | `3.5.0` | `3.5.1` | | [expo](https://github.com/expo/expo/tree/HEAD/packages/expo) | `56.0.11` | `56.0.12` | | [expo-location](https://github.com/expo/expo/tree/HEAD/packages/expo-location) | `56.0.17` | `56.0.18` | | [expo-notifications](https://github.com/expo/expo/tree/HEAD/packages/expo-notifications) | `56.0.17` | `56.0.18` | | [expo-router](https://github.com/expo/expo/tree/HEAD/packages/expo-router) | `56.2.10` | `56.2.11` | | [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `4.1.8` | `4.1.9` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.8` | `4.1.9` | | [@garmin/fitsdk](https://github.com/garmin/fit-javascript-sdk) | `21.205.0` | `21.208.0` | | [pg-boss](https://github.com/timgit/pg-boss) | `12.19.1` | `12.20.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.58.0` | `10.59.0` | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.53.1` | `10.59.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.21` | `22.20.0` | Updates `@playwright/test` from 1.60.0 to 1.61.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.0) Updates `playwright` from 1.60.0 to 1.61.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.0) Updates `typescript-eslint` from 8.61.0 to 8.61.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.1/packages/typescript-eslint) Updates `vitest` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest) Updates `@logtape/logtape` from 2.1.4 to 2.1.5 - [Changelog](https://github.com/dahlia/logtape/blob/main/CHANGES.md) - [Commits](https://github.com/dahlia/logtape/commits/2.1.5/packages/logtape) Updates `isbot` from 5.1.42 to 5.1.43 - [Changelog](https://github.com/omrilotan/isbot/blob/main/CHANGELOG.md) - [Commits](https://github.com/omrilotan/isbot/compare/v5.1.42...v5.1.43) Updates `@sentry/cli` from 3.5.0 to 3.5.1 - [Release notes](https://github.com/getsentry/sentry-cli/releases) - [Changelog](https://github.com/getsentry/sentry-cli/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-cli/compare/3.5.0...3.5.1) Updates `expo` from 56.0.11 to 56.0.12 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo) Updates `expo-location` from 56.0.17 to 56.0.18 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-location) Updates `expo-notifications` from 56.0.17 to 56.0.18 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-notifications) Updates `expo-router` from 56.2.10 to 56.2.11 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-router) Updates `@vitest/browser` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/browser) Updates `@vitest/browser-playwright` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/browser-playwright) Updates `@garmin/fitsdk` from 21.205.0 to 21.208.0 - [Release notes](https://github.com/garmin/fit-javascript-sdk/releases) - [Commits](https://github.com/garmin/fit-javascript-sdk/compare/21.205.0...21.208.0) Updates `pg-boss` from 12.19.1 to 12.20.0 - [Release notes](https://github.com/timgit/pg-boss/releases) - [Commits](https://github.com/timgit/pg-boss/compare/12.19.1...12.20.0) Updates `@sentry/node` from 10.58.0 to 10.59.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.58.0...10.59.0) Updates `@sentry/react` from 10.53.1 to 10.59.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.53.1...10.59.0) Updates `@types/node` from 22.19.21 to 22.20.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.61.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: playwright dependency-version: 1.61.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: typescript-eslint dependency-version: 8.61.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: vitest dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@logtape/logtape" dependency-version: 2.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: isbot dependency-version: 5.1.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@sentry/cli" dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo dependency-version: 56.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-location dependency-version: 56.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-notifications dependency-version: 56.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-router dependency-version: 56.2.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@vitest/browser" dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@garmin/fitsdk" dependency-version: 21.208.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: pg-boss dependency-version: 12.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/node" dependency-version: 10.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/react" dependency-version: 10.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@types/node" dependency-version: 22.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-21 08:32:18 +00:00
Ullrich Schäfer	3a1c34317d	route-surface-breakdown (Phase 1): Planner-path surface/waytype bars ... Synchronous path + rendering for the surface/waytype breakdown: - map-core `computeSurfaceBreakdown(coords, surfaces, highways)` → distance- weighted metres per surface + waytype category (unit-tested); - `SurfaceBreakdownSchema` in @trails-cool/api; - nullable `surfaceBreakdown` jsonb on routes + activities; - Planner `SaveToJournalButton` computes it from the BRouter waytags already in routeData and sends it; `api.save-to-journal` forwards it; the journal route callback validates + persists (journal is the authoritative validator); - `SurfaceBreakdown` component (stacked bars per dimension, map-core palettes, legend category · % · km largest-first, unknown → "other", hidden when empty) on route + activity detail; journal gains a @trails-cool/map-core dep; - i18n journal.surface.* (en + de). Phase 2 (async Overpass backfill + SSE for imports/uploads, and the e2e that seeds a breakdown) follows in a separate PR. Tests: computeSurfaceBreakdown unit (map-core 36); SurfaceBreakdown component (jsdom, journal 326). typecheck + lint green; verified in the browser. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-14 18:46:49 +02:00
dependabot[bot]	19160bbe82	build(deps): Bump the production group across 1 directory with 21 updates ... Bumps the production group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.9.17` | `2.9.18` | | [@logtape/logtape](https://github.com/dahlia/logtape/tree/HEAD/packages/logtape) | `2.1.1` | `2.1.3` | | [isbot](https://github.com/omrilotan/isbot) | `5.1.41` | `5.1.42` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.10` | `8.0.11` | | [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer) | `8.0.0` | `8.0.1` | | [@expo/metro-runtime](https://github.com/expo/expo) | `56.0.14` | `56.0.15` | | [@maplibre/maplibre-react-native](https://github.com/maplibre/maplibre-react-native) | `11.3.3` | `11.3.4` | | [expo](https://github.com/expo/expo/tree/HEAD/packages/expo) | `56.0.9` | `56.0.11` | | [expo-constants](https://github.com/expo/expo/tree/HEAD/packages/expo-constants) | `56.0.17` | `56.0.18` | | [expo-dev-client](https://github.com/expo/expo/tree/HEAD/packages/expo-dev-client) | `56.0.19` | `56.0.20` | | [expo-file-system](https://github.com/expo/expo/tree/HEAD/packages/expo-file-system) | `56.0.7` | `56.0.8` | | [expo-linking](https://github.com/expo/expo/tree/HEAD/packages/expo-linking) | `56.0.13` | `56.0.14` | | [expo-location](https://github.com/expo/expo/tree/HEAD/packages/expo-location) | `56.0.16` | `56.0.17` | | [expo-notifications](https://github.com/expo/expo/tree/HEAD/packages/expo-notifications) | `56.0.16` | `56.0.17` | | [expo-router](https://github.com/expo/expo/tree/HEAD/packages/expo-router) | `56.2.9` | `56.2.10` | | [expo-sqlite](https://github.com/expo/expo/tree/HEAD/packages/expo-sqlite) | `56.0.4` | `56.0.5` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.0` | `6.43.1` | | [pg-boss](https://github.com/timgit/pg-boss) | `12.18.2` | `12.18.3` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.56.0` | `10.57.0` | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.53.1` | `10.57.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.20` | `22.19.21` | Updates `turbo` from 2.9.17 to 2.9.18 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](https://github.com/vercel/turborepo/compare/v2.9.17...v2.9.18) Updates `@logtape/logtape` from 2.1.1 to 2.1.3 - [Changelog](https://github.com/dahlia/logtape/blob/main/CHANGES.md) - [Commits](https://github.com/dahlia/logtape/commits/2.1.3/packages/logtape) Updates `isbot` from 5.1.41 to 5.1.42 - [Changelog](https://github.com/omrilotan/isbot/blob/main/CHANGELOG.md) - [Commits](https://github.com/omrilotan/isbot/compare/v5.1.41...v5.1.42) Updates `nodemailer` from 8.0.10 to 8.0.11 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodemailer/nodemailer/compare/v8.0.10...v8.0.11) Updates `@types/nodemailer` from 8.0.0 to 8.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/nodemailer) Updates `@types/nodemailer` from 8.0.0 to 8.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/nodemailer) Updates `@expo/metro-runtime` from 56.0.14 to 56.0.15 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits) Updates `@maplibre/maplibre-react-native` from 11.3.3 to 11.3.4 - [Release notes](https://github.com/maplibre/maplibre-react-native/releases) - [Changelog](https://github.com/maplibre/maplibre-react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/maplibre/maplibre-react-native/compare/v11.3.3...v11.3.4) Updates `expo` from 56.0.9 to 56.0.11 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo) Updates `expo-constants` from 56.0.17 to 56.0.18 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-constants) Updates `expo-dev-client` from 56.0.19 to 56.0.20 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-dev-client) Updates `expo-file-system` from 56.0.7 to 56.0.8 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-file-system/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-file-system) Updates `expo-linking` from 56.0.13 to 56.0.14 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-linking) Updates `expo-location` from 56.0.16 to 56.0.17 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-location) Updates `expo-notifications` from 56.0.16 to 56.0.17 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-notifications) Updates `expo-router` from 56.2.9 to 56.2.10 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-router) Updates `expo-sqlite` from 56.0.4 to 56.0.5 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-sqlite/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-sqlite) Updates `@codemirror/view` from 6.43.0 to 6.43.1 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `pg-boss` from 12.18.2 to 12.18.3 - [Release notes](https://github.com/timgit/pg-boss/releases) - [Commits](https://github.com/timgit/pg-boss/compare/12.18.2...12.18.3) Updates `@sentry/node` from 10.56.0 to 10.57.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.56.0...10.57.0) Updates `@sentry/react` from 10.53.1 to 10.57.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.53.1...10.57.0) Updates `@types/node` from 22.19.20 to 22.19.21 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@codemirror/view" dependency-version: 6.43.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@expo/metro-runtime" dependency-version: 56.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@logtape/logtape" dependency-version: 2.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@maplibre/maplibre-react-native" dependency-version: 11.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@sentry/node" dependency-version: 10.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/react" dependency-version: 10.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@types/node" dependency-version: 22.19.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@types/nodemailer" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@types/nodemailer" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: expo dependency-version: 56.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-constants dependency-version: 56.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-dev-client dependency-version: 56.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-file-system dependency-version: 56.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-linking dependency-version: 56.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-location dependency-version: 56.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-notifications dependency-version: 56.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-router dependency-version: 56.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-sqlite dependency-version: 56.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: isbot dependency-version: 5.1.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: nodemailer dependency-version: 8.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: pg-boss dependency-version: 12.18.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: turbo dependency-version: 2.9.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-11 19:22:35 +00:00
Ullrich Schäfer	c3454641df	security: validate Planner callback URL to close an SSRF sink ... The session callbackUrl becomes a server-side fetch target in api.save-to-journal (POSTed with the callback bearer token, and the journal's response is reflected to the caller). The /new query-param loader already validated it, but the programmatic POST /api/sessions entry point — anonymous, since the Planner is stateless — stored it unvalidated. An attacker could make the Planner backend POST to arbitrary hosts, including 169.254.169.254 and other internal targets. - validateFetchUrl now blocks private / loopback / link-local / CGNAT / cloud-metadata hosts (IPv4, IPv6, IPv4-mapped) when an explicit allowlist isn't set. Gated on NODE_ENV=production && !E2E (the requireSecret idiom) so the dev/e2e journal-on-localhost save flow is unaffected. An explicit PLANNER_CALLBACK_ALLOWED_HOSTS still takes precedence and remains the full-closure control (it also stops DNS-name-to-private rebinding, which literal blocking does not). - POST /api/sessions now validates callbackUrl exactly as /new does. - api.save-to-journal re-validates immediately before the fetch (defense in depth: covers sessions persisted before this change and narrows the create→save rebinding window). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 22:18:18 +02:00
Ullrich Schäfer	765c9f49a8	remove the map and ui shim packages ... Both failed the deletion test in the telling direction: - @trails-cool/ui: Button/Input/Card had zero consumers — both apps roll their own elements inline. The only live part was a 6-line styles.css (the Tailwind entry + one keyframe), which now lives in each app as app/styles.css. - @trails-cool/map: MapView and RouteLayer had zero consumers; the package was otherwise a re-export of two map-core constants, and the two import sites now use @trails-cool/map-core directly. The "map components go in @trails-cool/map" convention had drifted long ago — the real map components live in apps/planner/app/components. CLAUDE.md's repository structure and conventions updated to match reality (including pointing shared-type guidance at the post-#515 sources: db row types, api contracts, Waypoint in types). Dockerfiles no longer COPY the deleted package manifests. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 07:47:59 +02:00
Ullrich Schäfer	bf0f7f8d9f	Merge branch 'main' into planner-route-data-seam	2026-06-10 01:48:18 +02:00
dependabot[bot]	154dccf312	chore(deps): Bump node from 25-slim to 26-slim in /apps/planner ... Bumps node from 25-slim to 26-slim. --- updated-dependencies: - dependency-name: node dependency-version: 26-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-09 23:36:01 +00:00
Ullrich Schäfer	3b9672e0ff	planner: give the Yjs document a typed schema seam ... The routeData Y.Map's ~15 string keys (geojson, coordinates, segmentBoundaries, road metadata, profile, colorMode, baseLayer, overlays, poiCategories) were read and written raw at ~30 call sites, each with its own JSON parsing and casts; parseJsonArray existed twice and waypoint extraction four times. GPX assembly was duplicated between SaveToJournalButton and ExportButton, so the saved plan and the exported file could silently diverge. - new lib/route-data.ts owns the routeData (+ noGoAreas) schema: typed read/write, JSON encoding internal, ColorMode moves here (re-exported from ColoredRoute for existing importers) - new lib/gpx-export.ts owns GPX assembly: buildRouteGpx / buildPlanGpx / buildDayGpxFiles / hasDayBreaks; multi-day splitting becomes a pure, tested function - waypoint-ymap.ts gains extractWaypoints / extractWaypointData; the four hand-rolled copies (use-routing, use-waypoint-manager, WaypointSidebar, use-days) now share it, and WaypointSidebar's moveWaypoint reuses the round-trip helpers instead of re-listing every waypoint field - all hooks/components consume the seam; no raw routeData key strings remain outside route-data.ts Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 01:35:04 +02:00
dependabot[bot]	a4582654e1	chore(deps): bump the production group across 1 directory with 30 updates ... Bumps the production group with 29 updates in the / directory: | Package | From | To | | --- | --- | --- | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.15` | `19.2.17` | | [@expo/fingerprint](https://github.com/expo/expo/tree/HEAD/packages/@expo/fingerprint) | `0.19.3` | `0.19.4` | | [@fission-ai/openspec](https://github.com/Fission-AI/OpenSpec) | `1.3.1` | `1.4.1` | | [fit-file-parser](https://github.com/jimmykane/fit-parser) | `3.0.1` | `3.0.2` | | [i18next](https://github.com/i18next/i18next) | `26.3.0` | `26.3.1` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.60.0` | `8.60.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.7` | `4.1.8` | | [isbot](https://github.com/omrilotan/isbot) | `5.1.40` | `5.1.41` | | [@expo/metro-runtime](https://github.com/expo/expo) | `56.0.13` | `56.0.14` | | [@maplibre/maplibre-react-native](https://github.com/maplibre/maplibre-react-native) | `11.3.0` | `11.3.3` | | [@sentry/cli](https://github.com/getsentry/sentry-cli) | `3.4.3` | `3.5.0` | | [expo-constants](https://github.com/expo/expo/tree/HEAD/packages/expo-constants) | `56.0.16` | `56.0.17` | | [expo-dev-client](https://github.com/expo/expo/tree/HEAD/packages/expo-dev-client) | `56.0.18` | `56.0.19` | | [expo-location](https://github.com/expo/expo/tree/HEAD/packages/expo-location) | `56.0.15` | `56.0.16` | | [expo-notifications](https://github.com/expo/expo/tree/HEAD/packages/expo-notifications) | `56.0.15` | `56.0.16` | | [expo-router](https://github.com/expo/expo/tree/HEAD/packages/expo-router) | `56.2.8` | `56.2.9` | | [react-native-reanimated](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated) | `4.4.0` | `4.4.1` | | [react-test-renderer](https://github.com/facebook/react/tree/HEAD/packages/react-test-renderer) | `19.2.6` | `19.2.7` | | [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `4.1.7` | `4.1.8` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.7` | `4.1.8` | | [@react-router/dev](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev) | `7.16.0` | `7.17.0` | | [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) | `7.16.0` | `7.17.0` | | [@react-router/serve](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-serve) | `7.16.0` | `7.17.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.55.0` | `10.56.0` | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.53.1` | `10.56.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.19` | `22.19.20` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` | | [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.16.0` | `7.17.0` | Updates `react` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `@types/react` from 19.2.15 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@expo/fingerprint` from 0.19.3 to 0.19.4 - [Changelog](https://github.com/expo/expo/blob/main/packages/@expo/fingerprint/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/@expo/fingerprint) Updates `@fission-ai/openspec` from 1.3.1 to 1.4.1 - [Release notes](https://github.com/Fission-AI/OpenSpec/releases) - [Changelog](https://github.com/Fission-AI/OpenSpec/blob/main/CHANGELOG.md) - [Commits](https://github.com/Fission-AI/OpenSpec/compare/v1.3.1...v1.4.1) Updates `fit-file-parser` from 3.0.1 to 3.0.2 - [Changelog](https://github.com/jimmykane/fit-parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/jimmykane/fit-parser/commits) Updates `i18next` from 26.3.0 to 26.3.1 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](https://github.com/i18next/i18next/compare/v26.3.0...v26.3.1) Updates `typescript-eslint` from 8.60.0 to 8.60.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/typescript-eslint) Updates `vitest` from 4.1.7 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) Updates `isbot` from 5.1.40 to 5.1.41 - [Changelog](https://github.com/omrilotan/isbot/blob/main/CHANGELOG.md) - [Commits](https://github.com/omrilotan/isbot/compare/v5.1.40...v5.1.41) Updates `@expo/metro-runtime` from 56.0.13 to 56.0.14 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits) Updates `@maplibre/maplibre-react-native` from 11.3.0 to 11.3.3 - [Release notes](https://github.com/maplibre/maplibre-react-native/releases) - [Changelog](https://github.com/maplibre/maplibre-react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/maplibre/maplibre-react-native/compare/v11.3.0...v11.3.3) Updates `@sentry/cli` from 3.4.3 to 3.5.0 - [Release notes](https://github.com/getsentry/sentry-cli/releases) - [Changelog](https://github.com/getsentry/sentry-cli/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-cli/compare/3.4.3...3.5.0) Updates `expo-constants` from 56.0.16 to 56.0.17 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-constants/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-constants) Updates `expo-dev-client` from 56.0.18 to 56.0.19 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-dev-client) Updates `expo-location` from 56.0.15 to 56.0.16 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-location) Updates `expo-notifications` from 56.0.15 to 56.0.16 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-notifications) Updates `expo-router` from 56.2.8 to 56.2.9 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-router) Updates `react-native-reanimated` from 4.4.0 to 4.4.1 - [Release notes](https://github.com/software-mansion/react-native-reanimated/releases) - [Changelog](https://github.com/software-mansion/react-native-reanimated/blob/main/packages/react-native-reanimated/RELEASE.md) - [Commits](https://github.com/software-mansion/react-native-reanimated/commits/4.4.1/packages/react-native-reanimated) Updates `@types/react` from 19.2.15 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-test-renderer` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-test-renderer) Updates `@vitest/browser` from 4.1.7 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/browser) Updates `@vitest/browser-playwright` from 4.1.7 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/browser-playwright) Updates `@react-router/dev` from 7.16.0 to 7.17.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dev/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/dev@7.17.0/packages/react-router-dev) Updates `@react-router/node` from 7.16.0 to 7.17.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@7.17.0/packages/react-router-node) Updates `@react-router/serve` from 7.16.0 to 7.17.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-serve/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/serve@7.17.0/packages/react-router-serve) Updates `@sentry/node` from 10.55.0 to 10.56.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.55.0...10.56.0) Updates `@sentry/react` from 10.53.1 to 10.56.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.53.1...10.56.0) Updates `@types/node` from 22.19.19 to 22.19.20 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `react-dom` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `react-router` from 7.16.0 to 7.17.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@7.17.0/packages/react-router) Updates `vite` from 7.3.3 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@expo/fingerprint" dependency-version: 0.19.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@fission-ai/openspec" dependency-version: 1.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: fit-file-parser dependency-version: 3.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: i18next dependency-version: 26.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: typescript-eslint dependency-version: 8.60.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: isbot dependency-version: 5.1.41 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@expo/metro-runtime" dependency-version: 56.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@maplibre/maplibre-react-native" dependency-version: 11.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@sentry/cli" dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: expo-constants dependency-version: 56.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-dev-client dependency-version: 56.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-location dependency-version: 56.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-notifications dependency-version: 56.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-router dependency-version: 56.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-native-reanimated dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-test-renderer dependency-version: 19.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@vitest/browser" dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@react-router/dev" dependency-version: 7.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@react-router/node" dependency-version: 7.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@react-router/serve" dependency-version: 7.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/node" dependency-version: 10.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/react" dependency-version: 10.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@types/node" dependency-version: 22.19.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-router dependency-version: 7.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-07 09:48:14 +00:00
dependabot[bot]	2e6a83b063	chore(deps): bump the production group with 28 updates ... Bumps the production group with 28 updates: | Package | From | To | | --- | --- | --- | | [@expo/fingerprint](https://github.com/expo/expo/tree/HEAD/packages/@expo/fingerprint) | `0.19.2` | `0.19.3` | | [eslint](https://github.com/eslint/eslint) | `10.4.0` | `10.4.1` | | [fit-file-parser](https://github.com/jimmykane/fit-parser) | `3.0.0` | `3.0.1` | | [i18next](https://github.com/i18next/i18next) | `26.2.0` | `26.3.0` | | [turbo](https://github.com/vercel/turborepo) | `2.9.14` | `2.9.16` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.4` | `8.60.0` | | [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.0` | `13.3.1` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.8` | `8.0.10` | | [@expo/metro-runtime](https://github.com/expo/expo) | `56.0.12` | `56.0.13` | | [@maplibre/maplibre-react-native](https://github.com/maplibre/maplibre-react-native) | `11.2.1` | `11.3.0` | | [@sentry/react-native](https://github.com/getsentry/sentry-react-native) | `8.12.0` | `8.13.0` | | [expo-constants](https://github.com/expo/expo/tree/HEAD/packages/expo-constants) | `56.0.15` | `56.0.16` | | [expo-crypto](https://github.com/expo/expo/tree/HEAD/packages/expo-crypto) | `56.0.3` | `56.0.4` | | [expo-dev-client](https://github.com/expo/expo/tree/HEAD/packages/expo-dev-client) | `56.0.15` | `56.0.18` | | [expo-linking](https://github.com/expo/expo/tree/HEAD/packages/expo-linking) | `56.0.11` | `56.0.13` | | [expo-location](https://github.com/expo/expo/tree/HEAD/packages/expo-location) | `56.0.13` | `56.0.15` | | [expo-notifications](https://github.com/expo/expo/tree/HEAD/packages/expo-notifications) | `56.0.13` | `56.0.15` | | [expo-router](https://github.com/expo/expo/tree/HEAD/packages/expo-router) | `56.2.6` | `56.2.8` | | [react-native-reanimated](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated) | `4.3.1` | `4.4.0` | | [react-native-safe-area-context](https://github.com/AppAndFlow/react-native-safe-area-context) | `5.7.0` | `5.8.0` | | [react-native-worklets](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-worklets) | `0.8.3` | `0.9.1` | | [yjs](https://github.com/yjs/yjs) | `13.6.30` | `13.6.31` | | [@react-router/dev](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev) | `7.15.1` | `7.16.0` | | [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) | `7.15.1` | `7.16.0` | | [@react-router/serve](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-serve) | `7.15.1` | `7.16.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.53.1` | `10.55.0` | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.53.1` | `10.55.0` | | [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.15.1` | `7.16.0` | Updates `@expo/fingerprint` from 0.19.2 to 0.19.3 - [Changelog](https://github.com/expo/expo/blob/main/packages/@expo/fingerprint/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/@expo/fingerprint) Updates `eslint` from 10.4.0 to 10.4.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v10.4.0...v10.4.1) Updates `fit-file-parser` from 3.0.0 to 3.0.1 - [Changelog](https://github.com/jimmykane/fit-parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/jimmykane/fit-parser/commits) Updates `i18next` from 26.2.0 to 26.3.0 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](https://github.com/i18next/i18next/compare/v26.2.0...v26.3.0) Updates `turbo` from 2.9.14 to 2.9.16 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](https://github.com/vercel/turborepo/compare/v2.9.14...v2.9.16) Updates `typescript-eslint` from 8.59.4 to 8.60.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/typescript-eslint) Updates `@simplewebauthn/server` from 13.3.0 to 13.3.1 - [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases) - [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md) - [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.1/packages/server) Updates `nodemailer` from 8.0.8 to 8.0.10 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodemailer/nodemailer/compare/v8.0.8...v8.0.10) Updates `@expo/metro-runtime` from 56.0.12 to 56.0.13 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits) Updates `@maplibre/maplibre-react-native` from 11.2.1 to 11.3.0 - [Release notes](https://github.com/maplibre/maplibre-react-native/releases) - [Changelog](https://github.com/maplibre/maplibre-react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/maplibre/maplibre-react-native/compare/v11.2.1...v11.3.0) Updates `@sentry/react-native` from 8.12.0 to 8.13.0 - [Release notes](https://github.com/getsentry/sentry-react-native/releases) - [Changelog](https://github.com/getsentry/sentry-react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-react-native/compare/8.12.0...8.13.0) Updates `expo-constants` from 56.0.15 to 56.0.16 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-constants/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-constants) Updates `expo-crypto` from 56.0.3 to 56.0.4 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-crypto/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-crypto) Updates `expo-dev-client` from 56.0.15 to 56.0.18 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-dev-client/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-dev-client) Updates `expo-linking` from 56.0.11 to 56.0.13 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-linking/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-linking) Updates `expo-location` from 56.0.13 to 56.0.15 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-location/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-location) Updates `expo-notifications` from 56.0.13 to 56.0.15 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-notifications/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-notifications) Updates `expo-router` from 56.2.6 to 56.2.8 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-router/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-router) Updates `react-native-reanimated` from 4.3.1 to 4.4.0 - [Release notes](https://github.com/software-mansion/react-native-reanimated/releases) - [Changelog](https://github.com/software-mansion/react-native-reanimated/blob/main/packages/react-native-reanimated/RELEASE.md) - [Commits](https://github.com/software-mansion/react-native-reanimated/commits/4.4.0/packages/react-native-reanimated) Updates `react-native-safe-area-context` from 5.7.0 to 5.8.0 - [Release notes](https://github.com/AppAndFlow/react-native-safe-area-context/releases) - [Commits](https://github.com/AppAndFlow/react-native-safe-area-context/compare/v5.7.0...v5.8.0) Updates `react-native-worklets` from 0.8.3 to 0.9.1 - [Release notes](https://github.com/software-mansion/react-native-reanimated/releases) - [Commits](https://github.com/software-mansion/react-native-reanimated/commits/worklets-0.9.1/packages/react-native-worklets) Updates `yjs` from 13.6.30 to 13.6.31 - [Release notes](https://github.com/yjs/yjs/releases) - [Commits](https://github.com/yjs/yjs/compare/v13.6.30...v13.6.31) Updates `@react-router/dev` from 7.15.1 to 7.16.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dev/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/dev@7.16.0/packages/react-router-dev) Updates `@react-router/node` from 7.15.1 to 7.16.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@7.16.0/packages/react-router-node) Updates `@react-router/serve` from 7.15.1 to 7.16.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-serve/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/serve@7.16.0/packages/react-router-serve) Updates `@sentry/node` from 10.53.1 to 10.55.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.53.1...10.55.0) Updates `@sentry/react` from 10.53.1 to 10.55.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.53.1...10.55.0) Updates `react-router` from 7.15.1 to 7.16.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@7.16.0/packages/react-router) --- updated-dependencies: - dependency-name: "@expo/fingerprint" dependency-version: 0.19.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: eslint dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: fit-file-parser dependency-version: 3.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: i18next dependency-version: 26.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: turbo dependency-version: 2.9.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: typescript-eslint dependency-version: 8.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: "@simplewebauthn/server" dependency-version: 13.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: nodemailer dependency-version: 8.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@expo/metro-runtime" dependency-version: 56.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@maplibre/maplibre-react-native" dependency-version: 11.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/react-native" dependency-version: 8.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: expo-constants dependency-version: 56.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-crypto dependency-version: 56.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-dev-client dependency-version: 56.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-linking dependency-version: 56.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-location dependency-version: 56.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-notifications dependency-version: 56.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-router dependency-version: 56.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-native-reanimated dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: react-native-safe-area-context dependency-version: 5.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: react-native-worklets dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: yjs dependency-version: 13.6.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@react-router/dev" dependency-version: 7.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@react-router/node" dependency-version: 7.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@react-router/serve" dependency-version: 7.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/node" dependency-version: 10.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/react" dependency-version: 10.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: react-router dependency-version: 7.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-31 08:37:04 +00:00
Ullrich Schäfer	10deae88c9	fix: extensionless server-side imports + lint rule to catch them ... ## Symptom Grafana's \`app-crash-log\` alert fires on every deploy. The Loki query that backs it (\`ERR_|FATAL|uncaughtException|…\`) matches: Error [ERR_MODULE_NOT_FOUND]: Cannot find module '/app/apps/journal/app/lib/logger.server' imported from '/app/apps/journal/app/lib/email.server.ts' A real bug, not a false positive: \`email.server.ts\` line 2 was \`import { logger } from \"./logger.server\"\` — no extension. ## Why typecheck didn't catch it \`tsconfig.base.json\` sets \`moduleResolution: \"bundler\"\`. The bundler resolver accepts extensionless relative imports because Vite / esbuild / webpack resolve them at build time. TypeScript was happy. Production runs \`node --experimental-strip-types server.ts\`, which uses Node's NodeNext ESM resolver — strict about extensions. The two resolvers disagree silently for files Node loads directly (server.ts, \`.server.ts\` modules dynamically imported from it, and jobs). ## Fix 1. **Added \`.ts\` extensions to the 4 broken imports** I could find: - \`apps/journal/app/lib/email.server.ts\` → \`./logger.server.ts\` (the actual deploy-blocker) - \`apps/planner/app/lib/brouter.ts\` → \`./route-merge.ts\`, \`./http.server.ts\` - \`apps/planner/app/lib/use-nearby-pois.ts\` → \`./overpass.ts\` - \`packages/map/src/MapView.tsx\` → \`./layers.ts\` (caught by the rule) 2. **Added \`eslint-plugin-import-x\` with \`import-x/extensions: always\`**, scoped to files Node actually executes raw: - \`apps/*/server.ts\` - \`apps/*/app/lib/**/*.server.ts\` - \`apps/*/app/jobs/**/*.ts\` - \`packages/*/src/**/*.{ts,tsx}\` Ignored: route-scoped \`*.server.ts\` files (bundled by Vite into the React Router build, never loaded by Node), and test files (Vitest's own resolver). ## What's still possible - Non-\`.server.ts\` files in \`app/lib\` (e.g. \`legal.ts\`, \`actor-iri.ts\`) could still ship extensionless imports. They're not in the lint scope. If one breaks at runtime we can extend the glob — for now they tend to be tiny utility modules that don't import other relatives. - The deeper fix would be \`moduleResolution: nodenext\` for server-side tsconfig, or bundling the server code so Node never sees raw \`.ts\`. Bigger surgery; the lint rule covers the failure mode for now. Full repo: pnpm typecheck / lint / test all green after \`pnpm install\`. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-26 08:08:19 +02:00
Ullrich Schäfer	7918ba052a	chore(ts): drop the last 2 \eslint-disable\ comments in prod code ... After this, \`grep -rn 'eslint-disable' apps/ packages/\` returns 0 (excluding tests and node_modules). **\`apps/planner/app/lib/brouter.ts\`** — \`while (true)\` in \`readBodyWithCap\` tripped \`no-constant-condition\`. Replaced with \`for (;;)\` which the rule explicitly allows. No behavior change. **\`packages/gpx/src/parse.ts\`** — the sync \`parseGpx\` exported a fallback path that did \`require(\"linkedom\")\` for non-browser sync use, with an \`eslint-disable\` for \`no-require-imports\`. It was dead code: \`packages/gpx/src/index.ts\` only re-exports \`parseGpxAsync\`, and grepping the monorepo finds no caller of the sync version. Deleted the function entirely; \`getDOMParser\` (the async helper) still serves the async path with a clean ESM \`await import(\"linkedom\")\`. Full repo: pnpm typecheck / lint / test all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-26 07:34:09 +02:00
Ullrich Schäfer	a724f862b8	chore(ts): drop two more redundant casts ... - RouteMapThumbnail.client.tsx: `{ type: 'Feature', ... } as unknown as GeoJsonObject` → `as GeoJsonObject`. The literal already satisfies the type; the unknown bridge was unnecessary. - use-yjs.ts:102: keep the coercion (y-websocket's `.on()` signature doesn't include the legacy `"synced"` event even though the runtime still fires it), but document why with a comment so future readers don't try to drop it.	2026-05-26 01:02:49 +02:00
Ullrich Schäfer	985ec54023	chore(ts): replace 7 \as unknown as\ shims with proper types ... Most of the existing coercions are legitimate (Drizzle raw-SQL row shapes, linkedom DOMParser interop, fit-file-parser's loose \`any\` callback API) — leaving those is honest. The ones cleaned up here were shims around APIs that have real types we just hadn't wired: - **\`window.__leafletMap\`** (4 sites: MapHelpers.tsx, SessionView.tsx ×3) Added \`Window\` declaration in \`apps/planner/app/types/global.d.ts\`. Callers now use plain \`window.__leafletMap\` typed as \`L.Map | undefined\`. - **\`L.markerClusterGroup\`** (PoiPanel.tsx) — leaflet.markercluster augments the global \`L\` namespace at runtime but ships no types. Added a \`declare module \"leaflet\"\` block in the same global.d.ts with a minimal signature for what we actually use. - **\`L.DomEvent.preventDefault / .stop\`** taking a Leaflet event rather than a native one (PlannerMap.tsx, RouteInteraction.tsx, NoGoAreaLayer.tsx). Leaflet events carry the native event under \`.originalEvent\`; using that drops the cast entirely. - **\`_creds as unknown as OAuthCredentials\`** orphan in wahoo/webhook.ts — \`_creds\` was unused inside the callback (the void-cast was a no-op preserving the type for documentation). Replaced with \`async ()\`, dropped the unused import. Net: 26 \`as unknown as\` / \`as any\` sites → 19, all remaining ones gated by external lib interop or Drizzle raw-SQL. Full repo: pnpm typecheck / lint / test all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-26 01:02:25 +02:00
Ullrich Schäfer	e1c696d598	Merge branch 'main' into fix/planner-brouter-response-size	2026-05-26 00:53:52 +02:00
Ullrich Schäfer	6f2b4450df	fix(planner/brouter): cap upstream response size to 10MB ... Planner-audit #9. \`fetchSegment\` previously \`await response.json()\` on any body BRouter returned. A misbehaving or compromised upstream could OOM the planner process by returning gigabytes of JSON. New \`readBodyWithCap()\`: - Reject upfront when \`content-length\` declares over the cap. - Stream the body and abort the reader once received bytes exceed the cap (handles the case where upstream lies about content-length or omits it). Cap chosen at 10 MB — real per-segment GeoJSON is <100 KB; even the longest realistic multi-day route stays well under 2 MB. Above 10 MB is upstream bug or abuse; we'd rather error. Applied to both \`fetchSegment\` (GeoJSON path) and \`computeSegmentGpx\` (GPX path). Tests: 3 cases (within cap, content-length over cap, streamed body mid-cap abort).	2026-05-26 00:48:45 +02:00
Ullrich Schäfer	6f18ce8099	fix(planner): bound /api/sessions listing (default 50, max 200) ... Addresses planner-audit #8. `listSessions()` had no LIMIT — every call to `GET /api/sessions` returned every non-closed session and did a full table scan ordered by last_activity. On a long-running planner host that's both a memory cliff and a query-plan footgun. Now: defaults to 50 rows, clamps to [1, 200], accepts `?limit=` for pagination-light scenarios. `sessions_last_activity_idx` (added in #438) backs the ORDER BY + LIMIT efficiently.	2026-05-26 00:46:38 +02:00
Ullrich Schäfer	0917de6080	fix(planner): keep journal callback token off the client (#2 Phase A) ... The Save-to-Journal flow had the browser fetch the journal with a \`Bearer \${callbackToken}\` header. The JWT was visible in DevTools, exfiltratable via any XSS or browser extension, and the planner's \`loader\` shipped it down to the client as part of the page payload. Now: - **New action**: \`POST /api/save-to-journal\` (\`routes/api.save-to-journal.ts\`). Body: \`{ sessionId, gpx }\`. The action loads \`callbackUrl\` + \`callbackToken\` from \`planner.sessions\` (set at /new time when the user came from the journal), POSTs to the journal server-to-server with the Bearer, and forwards the response. - **\`SaveToJournalButton\`**: drops the \`callbackUrl\` + \`callbackToken\` props. Takes \`sessionId\` only and POSTs to the planner action. - **\`session.\$id.tsx\` loader**: stops returning \`callbackUrl\` / \`callbackToken\` to the client. Returns a single \`hasJournalCallback\` boolean so the button still knows whether to render. - **\`SessionView\`**: same prop simplification. Trust model is unchanged: the same \`sessionId\` that grants Yjs membership grants save authority. Knowing the URL = ability to act. The action only adds a server-side hop so the JWT never reaches browser JS. Phase B (jti single-use enforcement on the journal side) follows in a separate PR — needs a journal DB column + verifier change. Full repo: pnpm typecheck / lint / test all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-26 00:29:24 +02:00
Ullrich Schäfer	4e2c5f7d6b	fix(planner): require session row before accepting Yjs WebSocket upgrade ... Addresses planner-audit #1 (CRITICAL — WebSocket joins unauthenticated) with the narrow fix. The upgrade handler used to immediately \`handleUpgrade\` for any \`/sync/<id>\` path, then \`getOrLoadDoc\` *created* a Y.Doc on demand. An attacker connecting to random sessionIds could: - exhaust process memory by spinning up Y.Doc objects for sessions that don't exist (no DB row backed them), and - resurrect closed/expired sessions by reconnecting (closed rows were still cacheable to \`docs\`). Now: the upgrade handler calls \`getSession(sessionId)\` first (\`SELECT \\* FROM planner.sessions WHERE id = ? AND closed = false\`). Missing or closed → \`socket.destroy()\` before handshake. DB unreachable also closes — fail closed; the client reconnects after backoff. Costs one DB roundtrip per upgrade. Upgrades are rare vs message volume, so the overhead is negligible. Note: we are NOT adding a join token. The planner is anonymous-by-design (see CLAUDE.md \"sessions are anonymous and ephemeral\") — knowing the URL still equals membership. The check here only guards against attacker-supplied sessionIds with no backing row. Full repo: pnpm typecheck / lint / test all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-26 00:24:16 +02:00
Ullrich Schäfer	2b0717fe21	fix(planner): cap per-WS-frame + per-session Yjs doc size ... Addresses planner audit #5 — a connected client could feed unlimited waypoints / no-go / notes into the Yjs doc, growing the in-memory map and the persisted \`sessions.yjs_state\` blob until OOM or DB blowout. Two guards: 1. **Per-frame**: \`MAX_MESSAGE_BYTES = 256 KB\`. Anything bigger arrives from a buggy or hostile client — a single waypoint add is hundreds of bytes. Oversized frame → \`ws.close(1008)\` and drop the message. 2. **Per-doc**: \`MAX_DOC_BYTES = 5 MB\`. After a sync-message apply succeeds, recompute \`Y.encodeStateAsUpdate(doc).byteLength\`. If it crossed the cap, mark the session \"quarantined\": close every connected client (\`1008 policy violation\`), and short-circuit subsequent handleMessage calls so no further bytes can be applied and the debounced save can't write an oversized blob to Postgres. The 5 MB limit is generous — a typical multi-day route's serialized state is well under 100 KB. The cap exists to make abuse expensive, not to constrain real use. Exports \`MAX_MESSAGE_BYTES\`, \`MAX_DOC_BYTES\`, and \`docByteSize\` for testing. Tests cover: - constants are positive and ordered - docByteSize is 0 for unknown sessions - a realistic 500-waypoint route stays well under the cap - ~6MB of garbage in a Y.Text trips the cap (smoke test for the guard) Full repo: pnpm typecheck / lint / test all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-26 00:13:01 +02:00
Ullrich Schäfer	51e6b8a0d7	fix(planner): validate callback/returnUrl + cap session URL-param payloads ... Addresses planner audit #3 (SSRF via callbackUrl) and #7 (URL-param size). Two attack surfaces hardened: 1. /new loader — \`callback\`, \`token\`, \`returnUrl\`, \`gpx\` query params now validated: - callbackUrl: must be a valid absolute http(s) URL ≤ 2048 chars. If \`PLANNER_CALLBACK_ALLOWED_HOSTS\` is set (comma-separated), the host must match — defense-in-depth SSRF guard for self- hosted instances. Unset = no allowlist (dev / open self-host). - token: max 2048 chars. - returnUrl: must be a same-origin path or absolute http(s) URL ≤ 2048 chars. Rejects \`javascript:\`, \`data:\`, and protocol-relative \`//host\` (which would resolve to a remote origin on HTTPS pages). - gpx: ≤ 2 MB encoded. Invalid input throws 400 from the loader. 2. /session/:id default-export component — \`waypoints\`, \`noGoAreas\`, \`notes\`, \`returnUrl\` URL params now bounded before \`JSON.parse\` / use: - waypoints / noGoAreas: ≤ 50KB each; over-cap returns undefined (component starts with empty initial state, same as malformed). - notes: ≤ 10KB. - returnUrl: ≤ 2KB + same scheme rules as #1. Pulled the URL validation into \`lib/url-validation.server.ts\` so both routes (and any future caller) share the same rules. Tests: \`url-validation.server.test.ts\` (14 cases — schemes, allowlist, length caps, protocol-relative guards, env parsing). Full repo: pnpm typecheck / lint / test all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-26 00:05:47 +02:00
Ullrich Schäfer	d70d6ee8a8	fix(planner/brouter): add 30s timeout to outbound fetch ... Mirrors journal PR #5. `fetchSegment()` and `computeSegmentGpx()` in lib/brouter.ts called `fetch()` with no AbortSignal — a hung or slow BRouter would stall the request handler indefinitely. New `lib/http.server.ts::fetchWithTimeout()` (same as the journal's helper) wraps fetch with `AbortSignal.timeout(30_000)`, composable with a caller-supplied signal via `AbortSignal.any()`. Tests: lib/http.server.test.ts (2 cases — timeout abort, happy path).	2026-05-25 23:53:19 +02:00
Ullrich Schäfer	edb618fe40	fix(sentry): remove hardcoded DSN fallbacks; supply via env in CI ... Self-hosted instances no longer inherit the trails.cool flagship Sentry DSNs. Code paths now read DSN strictly from env — unset = no Sentry init, no events sent. Flagship continues to report unchanged: cd-apps.yml and cd-staging.yml inject the public DSNs as workflow env vars, which feed into: - runtime via \`infrastructure/app.env\` / \`staging.env\` (\`SENTRY_DSN_JOURNAL\` / \`SENTRY_DSN_PLANNER\` → compose env per service) - build time via docker build-arg \`VITE_SENTRY_DSN\` (journal only; planner has no client Sentry init). Sentry DSNs are public-by-design (transmitted unencrypted from the client JS bundle), so embedding them as plaintext workflow env vars is no worse than the runtime exposure. Forks should replace these with their own DSNs or remove the workflow env lines to ship Sentry-free. Files changed: - apps/journal/server.ts: \`process.env.SENTRY_DSN\` only, no fallback - apps/planner/server.ts: same - apps/journal/app/lib/sentry.client.ts: \`import.meta.env.VITE_SENTRY_DSN\` only; falsy = skip init - apps/journal/Dockerfile: new \`ARG VITE_SENTRY_DSN\` baked into build - infrastructure/docker-compose.yml: pass \`SENTRY_DSN\` per service - infrastructure/docker-compose.staging.yml: same - .github/workflows/cd-apps.yml: workflow env + build-arg + app.env echo - .github/workflows/cd-staging.yml: same Full repo: pnpm typecheck, pnpm lint, pnpm test, journal build all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-25 23:07:07 +02:00
Ullrich Schäfer	4f902accd7	fix(planner): fail-loud DATABASE_URL + dedicated /health pool ... Mirrors #422 (fail-loud DB URL) and #430 (health-check pool reuse) for the planner app, which still had: - two \`process.env.DATABASE_URL ?? \"postgres://trails:trails@localhost:5432/trails\"\` call sites that would silently boot a misconfigured prod against localhost - a /health handler that opened a fresh postgres client + connection on every probe (no pool, per-call TCP/TLS handshake) Both now route through @trails-cool/db's \`getDatabaseUrl()\` (refuses to start in production if unset / matches the dev default; E2E=true is the opt-out) and a module-level singleton client (max: 2, idle_timeout: 30). Full repo: pnpm typecheck, pnpm lint, pnpm test all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-25 22:49:16 +02:00
Ullrich Schäfer	4ba98fa8f2	feat(planner): per-request requestId propagated through logs ... Mirrors PR #429 for the planner app. Each HTTP request now gets a requestId (inbound X-Request-Id honored, otherwise a fresh UUID), echoed on the response, and propagated to every downstream log call via AsyncLocalStorage + pino's \`mixin\`. Tests: planner logger.server.test.ts (2 cases, same shape as the journal version). Full repo: pnpm typecheck, pnpm lint, pnpm test all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-25 22:43:58 +02:00
Ullrich Schäfer	f05165c594	fix(sentry): make DSN env-driven so self-hosters can opt out ... The Sentry DSNs were hardcoded in journal/server.ts, planner/server.ts, and journal/app/lib/sentry.client.ts. Self-hosted instances inheriting the trails.cool flagship DSN would silently ship their errors to our Sentry account. Now each init site reads its DSN from env: - journal/server.ts: SENTRY_DSN (server runtime env) - planner/server.ts: SENTRY_DSN (server runtime env) - journal/app/lib/sentry.client.ts: VITE_SENTRY_DSN (build-time bake) The flagship DSN is kept as the fallback so the production deploy keeps reporting without an infra change — but self-hosters can: - set SENTRY_DSN=\"\" / VITE_SENTRY_DSN=\"\" to ship their own builds without Sentry, or - set SENTRY_DISABLED=true to skip init entirely at runtime, or - set SENTRY_DSN=/VITE_SENTRY_DSN= to their own DSN. Follow-up: a future PR can remove the hardcoded fallbacks once infrastructure/docker-compose.yml + the cd-apps.yml workflow are wired to pass SENTRY_DSN explicitly. That requires SOPS edits + workflow changes I want isolated from this purely-code change. Full repo: pnpm typecheck, pnpm lint, pnpm test all green. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-24 12:24:54 +02:00
dependabot[bot]	01d8f433f1	Bump the production group with 14 updates ... Bumps the production group with 14 updates: | Package | From | To | | --- | --- | --- | | [@expo/fingerprint](https://github.com/expo/expo/tree/HEAD/packages/@expo/fingerprint) | `0.16.7` | `0.19.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.3` | `8.59.4` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.6` | `4.1.7` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.7` | `8.0.8` | | [@sentry/cli](https://github.com/getsentry/sentry-cli) | `3.4.2` | `3.4.3` | | [@sentry/react-native](https://github.com/getsentry/sentry-react-native) | `8.11.1` | `8.12.0` | | [react-native-safe-area-context](https://github.com/AppAndFlow/react-native-safe-area-context) | `5.7.0` | `5.8.0` | | [react-native-screens](https://github.com/software-mansion/react-native-screens) | `4.25.0` | `4.25.2` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.15` | | [ws](https://github.com/websockets/ws) | `8.20.1` | `8.21.0` | | [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `4.1.6` | `4.1.7` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.6` | `4.1.7` | | [@garmin/fitsdk](https://github.com/garmin/fit-javascript-sdk) | `21.202.0` | `21.205.0` | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.51.0` | `10.53.1` | Updates `@expo/fingerprint` from 0.16.7 to 0.19.2 - [Changelog](https://github.com/expo/expo/blob/main/packages/@expo/fingerprint/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/@expo/fingerprint) Updates `typescript-eslint` from 8.59.3 to 8.59.4 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.4/packages/typescript-eslint) Updates `vitest` from 4.1.6 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/vitest) Updates `nodemailer` from 8.0.7 to 8.0.8 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodemailer/nodemailer/compare/v8.0.7...v8.0.8) Updates `@sentry/cli` from 3.4.2 to 3.4.3 - [Release notes](https://github.com/getsentry/sentry-cli/releases) - [Changelog](https://github.com/getsentry/sentry-cli/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-cli/compare/3.4.2...3.4.3) Updates `@sentry/react-native` from 8.11.1 to 8.12.0 - [Release notes](https://github.com/getsentry/sentry-react-native/releases) - [Changelog](https://github.com/getsentry/sentry-react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-react-native/compare/8.11.1...8.12.0) Updates `react-native-safe-area-context` from 5.7.0 to 5.8.0 - [Release notes](https://github.com/AppAndFlow/react-native-safe-area-context/releases) - [Commits](https://github.com/AppAndFlow/react-native-safe-area-context/compare/v5.7.0...v5.8.0) Updates `react-native-screens` from 4.25.0 to 4.25.2 - [Release notes](https://github.com/software-mansion/react-native-screens/releases) - [Commits](https://github.com/software-mansion/react-native-screens/compare/4.25.0...4.25.2) Updates `@types/react` from 19.2.14 to 19.2.15 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `ws` from 8.20.1 to 8.21.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/8.20.1...8.21.0) Updates `@vitest/browser` from 4.1.6 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/browser) Updates `@vitest/browser-playwright` from 4.1.6 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/browser-playwright) Updates `@garmin/fitsdk` from 21.202.0 to 21.205.0 - [Release notes](https://github.com/garmin/fit-javascript-sdk/releases) - [Commits](https://github.com/garmin/fit-javascript-sdk/compare/21.202.0...21.205.0) Updates `@sentry/react` from 10.51.0 to 10.53.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.51.0...10.53.1) --- updated-dependencies: - dependency-name: "@expo/fingerprint" dependency-version: 0.19.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: typescript-eslint dependency-version: 8.59.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: vitest dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: nodemailer dependency-version: 8.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@sentry/cli" dependency-version: 3.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@sentry/react-native" dependency-version: 8.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: react-native-safe-area-context dependency-version: 5.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: react-native-screens dependency-version: 4.25.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@types/react" dependency-version: 19.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: ws dependency-version: 8.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@vitest/browser" dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@garmin/fitsdk" dependency-version: 21.205.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/react" dependency-version: 10.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-24 08:31:11 +00:00
Ullrich Schäfer	9e2ca5595e	Centralize waypoint Yjs serialization in waypointFromYMap/waypointToYMap ... Introduce waypoint-ymap.ts with typed helpers so all Yjs↔Waypoint conversions go through one place. New Waypoint fields now only need to be added once rather than in every consumer. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-18 21:02:27 +02:00
Ullrich Schäfer	02f8a8be44	Propagate waypoint notes through session init, save-to-journal, and Journal display ... - use-yjs: seed note from initialWaypoints on session open - api.sessions: include note in initialWaypoints type - SaveToJournalButton: include note in GPX waypoints on save - Journal routes.: map and display waypoint notes Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-18 20:52:12 +02:00
Ullrich Schäfer	aef67aab7a	Include waypoint note in GPX export and extractWaypoints type ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-18 07:38:55 +02:00
Ullrich Schäfer	845301f0ae	Persist waypoint note from GPX drag-drop import ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-18 07:30:31 +02:00
Ullrich Schäfer	c2abb64ee0	Add per-waypoint notes and nearby POI snap to Planner ... - `note` field on Waypoint type, stored in Yjs Y.Map and exported as `<desc>` inside `<wpt>` in GPX - Inline textarea note editing in WaypointSidebar with auto-resize, character counter (500 max), save-on-blur, Escape cancel - Note indicator dot on map markers; note tooltip on hover - `useNearbyPois` hook: fetches POIs within 500m of selected waypoint via Overpass proxy, 500ms debounce, AbortController, 60s rate-limit suppression - NearbyPoiMarkers component: renders POI markers on map for selected waypoint with snap-to-POI on click - Nearby section in WaypointSidebar: list with snap buttons, spinner, empty/rate-limited states, "Show more" toggle (5 → all) - Unit tests for fetchNearbyPois bbox geometry and snap-to-POI Yjs transaction behaviour Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-17 23:58:21 +02:00
Ullrich Schäfer	861701e881	Show POI details (phone, website, opening hours) on Journal route detail page ... Waypoints snapped to OSM POIs in the Planner now carry their metadata all the way through to the Journal: - Extend Waypoint type with osmId and poiTags fields - Extract osmId/poiTags from Yjs Y.Map in ExportButton and SaveToJournalButton - Encode POI metadata as <trails:poi> extensions in GPX <wpt> elements - Parse <trails:poi> extensions back in the GPX parser - Display phone, website, opening hours, address on Journal route detail - E2E test for the full roundtrip; seed endpoint now defaults to public visibility Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-17 23:32:38 +02:00
dependabot[bot]	78a986b946	Bump the production group with 40 updates ... Bumps the production group with 40 updates: | Package | From | To | | --- | --- | --- | | [expo](https://github.com/expo/expo/tree/HEAD/packages/expo) | `55.0.23` | `55.0.24` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.59.1` | `1.60.0` | | [@sentry/vite-plugin](https://github.com/getsentry/sentry-javascript-bundler-plugins) | `5.2.1` | `5.3.0` | | [eslint](https://github.com/eslint/eslint) | `10.3.0` | `10.4.0` | | [i18next](https://github.com/i18next/i18next) | `26.0.10` | `26.2.0` | | [playwright](https://github.com/microsoft/playwright) | `1.59.1` | `1.60.0` | | [react-i18next](https://github.com/i18next/react-i18next) | `17.0.7` | `17.0.8` | | [turbo](https://github.com/vercel/turborepo) | `2.9.12` | `2.9.14` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.2` | `8.59.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.6` | | [@maplibre/maplibre-react-native](https://github.com/maplibre/maplibre-react-native) | `11.1.1` | `11.2.1` | | [@sentry/cli](https://github.com/getsentry/sentry-cli) | `3.4.1` | `3.4.2` | | [@sentry/react-native](https://github.com/getsentry/sentry-react-native) | `8.11.0` | `8.11.1` | | [expo-crypto](https://github.com/expo/expo/tree/HEAD/packages/expo-crypto) | `55.0.14` | `55.0.15` | | [expo-dev-client](https://github.com/expo/expo/tree/HEAD/packages/expo-dev-client) | `55.0.32` | `55.0.34` | | [expo-dev-menu](https://github.com/expo/expo/tree/HEAD/packages/expo-dev-menu) | `55.0.27` | `55.0.29` | | [expo-device](https://github.com/expo/expo/tree/HEAD/packages/expo-device) | `55.0.16` | `55.0.17` | | [expo-file-system](https://github.com/expo/expo/tree/HEAD/packages/expo-file-system) | `55.0.19` | `55.0.20` | | [expo-localization](https://github.com/expo/expo/tree/HEAD/packages/expo-localization) | `55.0.13` | `55.0.14` | | [expo-location](https://github.com/expo/expo/tree/HEAD/packages/expo-location) | `55.1.9` | `55.1.10` | | [expo-navigation-bar](https://github.com/expo/expo/tree/HEAD/packages/expo-navigation-bar) | `55.0.12` | `55.0.13` | | [expo-notifications](https://github.com/expo/expo/tree/HEAD/packages/expo-notifications) | `55.0.22` | `55.0.23` | | [expo-secure-store](https://github.com/expo/expo/tree/HEAD/packages/expo-secure-store) | `55.0.13` | `55.0.14` | | [expo-splash-screen](https://github.com/expo/expo/tree/HEAD/packages/expo-splash-screen) | `55.0.20` | `55.0.21` | | [expo-sqlite](https://github.com/expo/expo/tree/HEAD/packages/expo-sqlite) | `55.0.15` | `55.0.16` | | [expo-system-ui](https://github.com/expo/expo/tree/HEAD/packages/expo-system-ui) | `55.0.17` | `55.0.18` | | [expo-web-browser](https://github.com/expo/expo/tree/HEAD/packages/expo-web-browser) | `55.0.15` | `55.0.16` | | [react-native-screens](https://github.com/software-mansion/react-native-screens) | `4.24.0` | `4.25.0` | | [use-latest-callback](https://github.com/satya164/use-latest-callback) | `0.3.3` | `0.3.4` | | [@codemirror/view](https://github.com/codemirror/view) | `6.42.1` | `6.43.0` | | [ws](https://github.com/websockets/ws) | `8.20.0` | `8.20.1` | | [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `4.1.5` | `4.1.6` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.5` | `4.1.6` | | [@react-router/dev](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev) | `7.15.0` | `7.15.1` | | [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) | `7.15.0` | `7.15.1` | | [@react-router/serve](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-serve) | `7.15.0` | `7.15.1` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.52.0` | `10.53.1` | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.51.0` | `10.53.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.18` | `22.19.19` | | [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.15.0` | `7.15.1` | Updates `expo` from 55.0.23 to 55.0.24 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo) Updates `@playwright/test` from 1.59.1 to 1.60.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](https://github.com/microsoft/playwright/compare/v1.59.1...v1.60.0) Updates `@sentry/vite-plugin` from 5.2.1 to 5.3.0 - [Release notes](https://github.com/getsentry/sentry-javascript-bundler-plugins/releases) - [Changelog](https://github.com/getsentry/sentry-javascript-bundler-plugins/blob/main/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript-bundler-plugins/compare/5.2.1...5.3.0) Updates `eslint` from 10.3.0 to 10.4.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v10.3.0...v10.4.0) Updates `i18next` from 26.0.10 to 26.2.0 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](https://github.com/i18next/i18next/compare/v26.0.10...v26.2.0) Updates `playwright` from 1.59.1 to 1.60.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](https://github.com/microsoft/playwright/compare/v1.59.1...v1.60.0) Updates `react-i18next` from 17.0.7 to 17.0.8 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](https://github.com/i18next/react-i18next/compare/v17.0.7...v17.0.8) Updates `turbo` from 2.9.12 to 2.9.14 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](https://github.com/vercel/turborepo/compare/v2.9.12...v2.9.14) Updates `typescript-eslint` from 8.59.2 to 8.59.3 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.3/packages/typescript-eslint) Updates `vitest` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest) Updates `@maplibre/maplibre-react-native` from 11.1.1 to 11.2.1 - [Release notes](https://github.com/maplibre/maplibre-react-native/releases) - [Changelog](https://github.com/maplibre/maplibre-react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/maplibre/maplibre-react-native/compare/v11.1.1...v11.2.1) Updates `@sentry/cli` from 3.4.1 to 3.4.2 - [Release notes](https://github.com/getsentry/sentry-cli/releases) - [Changelog](https://github.com/getsentry/sentry-cli/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-cli/compare/3.4.1...3.4.2) Updates `@sentry/react-native` from 8.11.0 to 8.11.1 - [Release notes](https://github.com/getsentry/sentry-react-native/releases) - [Changelog](https://github.com/getsentry/sentry-react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-react-native/compare/8.11.0...8.11.1) Updates `expo-crypto` from 55.0.14 to 55.0.15 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-crypto/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-crypto) Updates `expo-dev-client` from 55.0.32 to 55.0.34 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-dev-client/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-dev-client) Updates `expo-dev-menu` from 55.0.27 to 55.0.29 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-dev-menu/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-dev-menu) Updates `expo-device` from 55.0.16 to 55.0.17 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-device/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-device) Updates `expo-file-system` from 55.0.19 to 55.0.20 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-file-system/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-file-system) Updates `expo-localization` from 55.0.13 to 55.0.14 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-localization/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-localization) Updates `expo-location` from 55.1.9 to 55.1.10 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-location/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-location) Updates `expo-navigation-bar` from 55.0.12 to 55.0.13 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-navigation-bar/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-navigation-bar) Updates `expo-notifications` from 55.0.22 to 55.0.23 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-notifications/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-notifications) Updates `expo-secure-store` from 55.0.13 to 55.0.14 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-secure-store/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-secure-store) Updates `expo-splash-screen` from 55.0.20 to 55.0.21 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-splash-screen/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-splash-screen) Updates `expo-sqlite` from 55.0.15 to 55.0.16 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-sqlite/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-sqlite) Updates `expo-system-ui` from 55.0.17 to 55.0.18 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-system-ui/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-system-ui) Updates `expo-web-browser` from 55.0.15 to 55.0.16 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-web-browser/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-web-browser) Updates `react-native-screens` from 4.24.0 to 4.25.0 - [Release notes](https://github.com/software-mansion/react-native-screens/releases) - [Commits](https://github.com/software-mansion/react-native-screens/compare/4.24.0...4.25.0) Updates `use-latest-callback` from 0.3.3 to 0.3.4 - [Release notes](https://github.com/satya164/use-latest-callback/releases) - [Changelog](https://github.com/satya164/use-latest-callback/blob/main/CHANGELOG.md) - [Commits](https://github.com/satya164/use-latest-callback/compare/v0.3.3...v0.3.4) Updates `@codemirror/view` from 6.42.1 to 6.43.0 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `ws` from 8.20.0 to 8.20.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/8.20.0...8.20.1) Updates `@vitest/browser` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/browser) Updates `@vitest/browser-playwright` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/browser-playwright) Updates `@react-router/dev` from 7.15.0 to 7.15.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dev/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/dev@7.15.1/packages/react-router-dev) Updates `@react-router/node` from 7.15.0 to 7.15.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@7.15.1/packages/react-router-node) Updates `@react-router/serve` from 7.15.0 to 7.15.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-serve/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/serve@7.15.1/packages/react-router-serve) Updates `@sentry/node` from 10.52.0 to 10.53.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.52.0...10.53.1) Updates `@sentry/react` from 10.51.0 to 10.53.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.51.0...10.53.1) Updates `@types/node` from 22.19.18 to 22.19.19 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `react-router` from 7.15.0 to 7.15.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@7.15.1/packages/react-router) --- updated-dependencies: - dependency-name: expo dependency-version: 55.0.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@playwright/test" dependency-version: 1.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/vite-plugin" dependency-version: 5.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: eslint dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: i18next dependency-version: 26.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: playwright dependency-version: 1.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production - dependency-name: react-i18next dependency-version: 17.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: turbo dependency-version: 2.9.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: typescript-eslint dependency-version: 8.59.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: vitest dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@maplibre/maplibre-react-native" dependency-version: 11.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/cli" dependency-version: 3.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@sentry/react-native" dependency-version: 8.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-crypto dependency-version: 55.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-dev-client dependency-version: 55.0.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-dev-menu dependency-version: 55.0.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-device dependency-version: 55.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-file-system dependency-version: 55.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-localization dependency-version: 55.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-location dependency-version: 55.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-navigation-bar dependency-version: 55.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-notifications dependency-version: 55.0.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-secure-store dependency-version: 55.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-splash-screen dependency-version: 55.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-sqlite dependency-version: 55.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-system-ui dependency-version: 55.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-web-browser dependency-version: 55.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-native-screens dependency-version: 4.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: use-latest-callback dependency-version: 0.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@codemirror/view" dependency-version: 6.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: ws dependency-version: 8.20.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@vitest/browser" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@react-router/dev" dependency-version: 7.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@react-router/node" dependency-version: 7.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@react-router/serve" dependency-version: 7.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@sentry/node" dependency-version: 10.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/react" dependency-version: 10.53.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@types/node" dependency-version: 22.19.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-router dependency-version: 7.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-17 08:45:54 +00:00
Ullrich Schäfer	eb30dddbfc	Ignore .vitest-attachments in planner ... Vitest browser mode writes ephemeral screenshot attachments here during test runs; only the __screenshots__/ reference snapshots belong in the repo. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 19:53:42 +02:00
stigi	78a5a37214	chore: update visual snapshots [skip ci]	2026-05-10 17:15:46 +00:00
Ullrich Schäfer	7c924827c9	Add initial visual snapshots and fix update script flag ... Generate baseline screenshots (macOS/Chromium) for the elevation-chart visual regression suite. The CI update-visual-snapshots workflow will overwrite these with Linux variants on the first run. Also fix the test:visual:update script: --update-snapshots is not a valid Vitest 4 flag; the correct short form is -u. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 19:09:00 +02:00
Ullrich Schäfer	76028d277d	Remove invalid oxc.transform config from browser vitest config ... OxcOptions doesn't have a transform key — Vite 8 handles TSX automatically. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 19:05:15 +02:00
Ullrich Schäfer	fcc4f88379	Fix Vitest browser provider setup and test cleanup ... - Add @vitest/browser-playwright; use playwright() factory (not string) - Import page from vitest/browser (not deprecated @vitest/browser/context) - Add afterEach(cleanup) so each test gets a fresh DOM - Use oxc transform for JSX instead of esbuild (avoids Vite 8 warning) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 19:01:24 +02:00
Ullrich Schäfer	34529a9432	Split ElevationChart + PlannerMap into deep modules; add visual regression testing ... ElevationChart (1013 lines) split into: - elevation-chart-draw.ts — pure drawElevationChart(ctx, w, h, params) function - use-elevation-data.ts — useElevationData(routeData) hook - ElevationChart.tsx — ~300 lines, interaction + render only PlannerMap (869 lines) split into: - MapHelpers.tsx — 7 Leaflet sub-components (MapExposer, RouteFitter, MapClickHandler, CursorTracker, NoGoAreaButton, OverlaySync, PoiRefresher) - use-waypoint-manager.ts — all waypoint CRUD + route data sync - use-gpx-drop.ts — GPX drag-and-drop hook - PlannerMap.tsx — ~200 lines, orchestration only Add Vitest browser visual regression tests for drawElevationChart via @vitest/browser + Playwright (toMatchScreenshot). Tests cover plain, grade, elevation, surface color modes plus hover and drag-select states. Add update-visual-snapshots.yml workflow: triggered by workflow_dispatch or the `update-snapshots` PR label; commits snapshots back to the branch. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 16:41:23 +02:00
Ullrich Schäfer	e387e1f798	Deepen three architectural seams: FIT consolidation, host election extraction, injectable db ... - Extract shared fitToGpx into connected-services/fit.ts (FIT is a Garmin open standard used by Wahoo, Coros, Garmin — not provider-specific) - Add importActivity() to sync/imports.server.ts so providers call one function instead of createActivity + recordImport separately; eliminates direct dependency on activities.server.ts from provider adapters - Update wahoo importer + webhook to use both shared helpers - Extract useHostElection(yjs) hook from useRouting so host election is independently testable without mounting the full routing stack - Add setDb() to journal db.ts for module-level injection in unit tests Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-10 15:52:31 +02:00
dependabot[bot]	9cc08a725a	Bump the production group with 41 updates ... Bumps the production group with 41 updates: | Package | From | To | | --- | --- | --- | | [expo](https://github.com/expo/expo/tree/HEAD/packages/expo) | `55.0.19` | `55.0.23` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.5` | `19.2.0` | | [@expo/fingerprint](https://github.com/expo/expo/tree/HEAD/packages/@expo/fingerprint) | `0.16.6` | `0.16.7` | | [i18next](https://github.com/i18next/i18next) | `26.0.8` | `26.0.10` | | [react-i18next](https://github.com/i18next/react-i18next) | `17.0.6` | `17.0.7` | | [turbo](https://github.com/vercel/turborepo) | `2.9.8` | `2.9.12` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.1` | `8.59.2` | | [isbot](https://github.com/omrilotan/isbot) | `5.1.39` | `5.1.40` | | [zod](https://github.com/colinhacks/zod) | `4.4.2` | `4.4.3` | | [@expo/metro-runtime](https://github.com/expo/expo) | `55.0.10` | `55.0.11` | | [@gorhom/bottom-sheet](https://github.com/gorhom/react-native-bottom-sheet) | `5.2.13` | `5.2.14` | | [@maplibre/maplibre-react-native](https://github.com/maplibre/maplibre-react-native) | `11.0.2` | `11.1.1` | | [@sentry/react-native](https://github.com/getsentry/sentry-react-native) | `8.10.0` | `8.11.0` | | [expo-constants](https://github.com/expo/expo/tree/HEAD/packages/expo-constants) | `55.0.15` | `55.0.16` | | [expo-dev-client](https://github.com/expo/expo/tree/HEAD/packages/expo-dev-client) | `55.0.30` | `55.0.32` | | [expo-dev-menu](https://github.com/expo/expo/tree/HEAD/packages/expo-dev-menu) | `55.0.26` | `55.0.27` | | [expo-device](https://github.com/expo/expo/tree/HEAD/packages/expo-device) | `55.0.15` | `55.0.16` | | [expo-file-system](https://github.com/expo/expo/tree/HEAD/packages/expo-file-system) | `55.0.17` | `55.0.19` | | [expo-linking](https://github.com/expo/expo/tree/HEAD/packages/expo-linking) | `55.0.14` | `55.0.15` | | [expo-location](https://github.com/expo/expo/tree/HEAD/packages/expo-location) | `55.1.8` | `55.1.9` | | [expo-router](https://github.com/expo/expo/tree/HEAD/packages/expo-router) | `55.0.13` | `55.0.14` | | [expo-splash-screen](https://github.com/expo/expo/tree/HEAD/packages/expo-splash-screen) | `55.0.19` | `55.0.20` | | [expo-status-bar](https://github.com/expo/expo/tree/HEAD/packages/expo-status-bar) | `55.0.5` | `55.0.6` | | [expo-system-ui](https://github.com/expo/expo/tree/HEAD/packages/expo-system-ui) | `55.0.16` | `55.0.17` | | [expo-web-browser](https://github.com/expo/expo/tree/HEAD/packages/expo-web-browser) | `55.0.14` | `55.0.15` | | [react-native-gesture-handler](https://github.com/software-mansion/react-native-gesture-handler) | `2.31.1` | `2.31.2` | | [react-native-reanimated](https://github.com/software-mansion/react-native-reanimated/tree/HEAD/packages/react-native-reanimated) | `4.3.0` | `4.3.1` | | [jest-expo](https://github.com/expo/expo/tree/HEAD/packages/jest-expo) | `55.0.16` | `55.0.17` | | [react-test-renderer](https://github.com/facebook/react/tree/HEAD/packages/react-test-renderer) | `19.2.5` | `19.2.6` | | [@codemirror/view](https://github.com/codemirror/view) | `6.41.1` | `6.42.1` | | [@react-router/dev](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev) | `7.14.2` | `7.15.0` | | [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) | `7.14.2` | `7.15.0` | | [@react-router/serve](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-serve) | `7.14.2` | `7.15.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.51.0` | `10.52.0` | | [@sentry/react](https://github.com/getsentry/sentry-javascript) | `10.51.0` | `10.52.0` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.2.4` | `4.3.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.17` | `22.19.18` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.5` | `19.2.6` | | [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.14.2` | `7.15.0` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.2.4` | `4.3.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.2` | `7.3.3` | Updates `expo` from 55.0.19 to 55.0.23 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo) Updates `react` from 19.2.5 to 19.2.0 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react) Updates `@expo/fingerprint` from 0.16.6 to 0.16.7 - [Changelog](https://github.com/expo/expo/blob/main/packages/@expo/fingerprint/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/@expo/fingerprint) Updates `i18next` from 26.0.8 to 26.0.10 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](https://github.com/i18next/i18next/compare/v26.0.8...v26.0.10) Updates `react-i18next` from 17.0.6 to 17.0.7 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](https://github.com/i18next/react-i18next/compare/v17.0.6...v17.0.7) Updates `turbo` from 2.9.8 to 2.9.12 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](https://github.com/vercel/turborepo/compare/v2.9.8...v2.9.12) Updates `typescript-eslint` from 8.59.1 to 8.59.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/typescript-eslint) Updates `isbot` from 5.1.39 to 5.1.40 - [Changelog](https://github.com/omrilotan/isbot/blob/main/CHANGELOG.md) - [Commits](https://github.com/omrilotan/isbot/compare/v5.1.39...v5.1.40) Updates `zod` from 4.4.2 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](https://github.com/colinhacks/zod/compare/v4.4.2...v4.4.3) Updates `@expo/metro-runtime` from 55.0.10 to 55.0.11 - [Changelog](https://github.com/expo/expo/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits) Updates `@gorhom/bottom-sheet` from 5.2.13 to 5.2.14 - [Release notes](https://github.com/gorhom/react-native-bottom-sheet/releases) - [Changelog](https://github.com/gorhom/react-native-bottom-sheet/blob/master/CHANGELOG.md) - [Commits](https://github.com/gorhom/react-native-bottom-sheet/compare/v5.2.13...v5.2.14) Updates `@maplibre/maplibre-react-native` from 11.0.2 to 11.1.1 - [Release notes](https://github.com/maplibre/maplibre-react-native/releases) - [Changelog](https://github.com/maplibre/maplibre-react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/maplibre/maplibre-react-native/compare/v11.0.2...v11.1.1) Updates `@sentry/react-native` from 8.10.0 to 8.11.0 - [Release notes](https://github.com/getsentry/sentry-react-native/releases) - [Changelog](https://github.com/getsentry/sentry-react-native/blob/main/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-react-native/compare/8.10.0...8.11.0) Updates `expo-constants` from 55.0.15 to 55.0.16 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-constants/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-constants) Updates `expo-dev-client` from 55.0.30 to 55.0.32 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-dev-client/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-dev-client) Updates `expo-dev-menu` from 55.0.26 to 55.0.27 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-dev-menu/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-dev-menu) Updates `expo-device` from 55.0.15 to 55.0.16 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-device/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-device) Updates `expo-file-system` from 55.0.17 to 55.0.19 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-file-system/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-file-system) Updates `expo-linking` from 55.0.14 to 55.0.15 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-linking/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-linking) Updates `expo-location` from 55.1.8 to 55.1.9 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-location/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-location) Updates `expo-router` from 55.0.13 to 55.0.14 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-router/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-router) Updates `expo-splash-screen` from 55.0.19 to 55.0.20 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-splash-screen/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-splash-screen) Updates `expo-status-bar` from 55.0.5 to 55.0.6 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-status-bar/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-status-bar) Updates `expo-system-ui` from 55.0.16 to 55.0.17 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-system-ui/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-system-ui) Updates `expo-web-browser` from 55.0.14 to 55.0.15 - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-web-browser/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/expo-web-browser) Updates `react-native-gesture-handler` from 2.31.1 to 2.31.2 - [Release notes](https://github.com/software-mansion/react-native-gesture-handler/releases) - [Commits](https://github.com/software-mansion/react-native-gesture-handler/compare/v2.31.1...v2.31.2) Updates `react-native-reanimated` from 4.3.0 to 4.3.1 - [Release notes](https://github.com/software-mansion/react-native-reanimated/releases) - [Changelog](https://github.com/software-mansion/react-native-reanimated/blob/main/packages/react-native-reanimated/RELEASE.md) - [Commits](https://github.com/software-mansion/react-native-reanimated/commits/4.3.1/packages/react-native-reanimated) Updates `jest-expo` from 55.0.16 to 55.0.17 - [Changelog](https://github.com/expo/expo/blob/main/packages/jest-expo/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/jest-expo) Updates `react-test-renderer` from 19.2.5 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-test-renderer) Updates `@codemirror/view` from 6.41.1 to 6.42.1 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@react-router/dev` from 7.14.2 to 7.15.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dev/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/dev@7.15.0/packages/react-router-dev) Updates `@react-router/node` from 7.14.2 to 7.15.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@7.15.0/packages/react-router-node) Updates `@react-router/serve` from 7.14.2 to 7.15.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-serve/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/serve@7.15.0/packages/react-router-serve) Updates `@sentry/node` from 10.51.0 to 10.52.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.51.0...10.52.0) Updates `@sentry/react` from 10.51.0 to 10.52.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/10.51.0...10.52.0) Updates `@tailwindcss/vite` from 4.2.4 to 4.3.0 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/packages/@tailwindcss-vite) Updates `@types/node` from 22.19.17 to 22.19.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `react-dom` from 19.2.5 to 19.2.6 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-dom) Updates `react-router` from 7.14.2 to 7.15.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@7.15.0/packages/react-router) Updates `tailwindcss` from 4.2.4 to 4.3.0 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/packages/tailwindcss) Updates `vite` from 7.3.2 to 7.3.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.3/packages/vite) --- updated-dependencies: - dependency-name: expo dependency-version: 55.0.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react dependency-version: 19.2.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@expo/fingerprint" dependency-version: 0.16.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: i18next dependency-version: 26.0.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: react-i18next dependency-version: 17.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: turbo dependency-version: 2.9.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: typescript-eslint dependency-version: 8.59.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: isbot dependency-version: 5.1.40 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@expo/metro-runtime" dependency-version: 55.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@gorhom/bottom-sheet" dependency-version: 5.2.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@maplibre/maplibre-react-native" dependency-version: 11.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/react-native" dependency-version: 8.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: expo-constants dependency-version: 55.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-dev-client dependency-version: 55.0.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-dev-menu dependency-version: 55.0.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-device dependency-version: 55.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-file-system dependency-version: 55.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-linking dependency-version: 55.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-location dependency-version: 55.1.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-router dependency-version: 55.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-splash-screen dependency-version: 55.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-status-bar dependency-version: 55.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-system-ui dependency-version: 55.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: expo-web-browser dependency-version: 55.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-native-gesture-handler dependency-version: 2.31.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-native-reanimated dependency-version: 4.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: jest-expo dependency-version: 55.0.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: react-test-renderer dependency-version: 19.2.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production - dependency-name: "@codemirror/view" dependency-version: 6.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@react-router/dev" dependency-version: 7.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@react-router/node" dependency-version: 7.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@react-router/serve" dependency-version: 7.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/node" dependency-version: 10.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@sentry/react" dependency-version: 10.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@types/node" dependency-version: 22.19.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-dom dependency-version: 19.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: react-router dependency-version: 7.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: tailwindcss dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: vite dependency-version: 7.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-10 08:42:40 +00:00
Ullrich Schäfer	c89c5798bb	Add packages/fit to journal and planner Dockerfiles ... The deps stage was missing the COPY for packages/fit/package.json, so @trails-cool/fit was absent from the workspace at install time and @garmin/fitsdk could not be resolved during the journal build. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-01 08:10:15 +02:00
Ullrich Schäfer	2e5606458d	Fix Planner/Journal healthchecks; auto-clean compose orphans ... The compose healthcheck for both apps was `curl -sf http://localhost:.../health`, but node:25-slim (Debian trixie-slim) ships neither curl nor wget, so the check always reported the containers as `unhealthy` even while they were happily serving 200s. Install curl in both Dockerfiles. Separately, today's flagship BRouter cleanup (PR #297) left an orphan `brouter` container behind because cd-infra's `docker compose up -d <list>` doesn't pass `--remove-orphans`. I had to remove it by hand. Pass the flag in both cd-infra and cd-apps so future service deletions clean up on the next deploy. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-24 18:28:04 +02:00
Ullrich Schäfer	c0c3ce98d0	Cache BRouter segments client-side, fetch only the diff ... Moving one waypoint previously re-fetched all N-1 segments of the route through /api/route every time, because the server-side computeRoute recomputes the whole route from scratch. Under rapid edits this piles up on BRouter's thread pool and wastes BRouter+Planner cycles on segments the caller already has. This change keeps a host-local LRU segment cache in the Planner tab, keyed by (from, to, profile, noGoHash). On each computeRoute: - build the pair list from the current waypoints - split into cached vs. missing by looking up each pair key - if any missing, POST { pairs: missing, … } to the new /api/route-segments endpoint and populate the cache with its ordered raw BRouter responses - merge cache-ordered segments into an EnrichedRoute client-side via mergeGeoJsonSegments (moved to a pure, isomorphic route-merge.ts) - write to yjs.routeData exactly as before Typical drag of one waypoint in a 10-waypoint route drops from 9 BRouter fetches to 2. A session re-entering a cached arrangement (undo/redo) short-circuits the server entirely. Profile/no-go changes invalidate all keys and trigger a full refetch, matching prior behavior. Yjs stays out of the cache: segments are bulky and CRDT sync of large blobs hurts more than it helps. The elected host owns the cache; on host handover the new host pays one full recompute. Backwards-compat: /api/route is unchanged for external callers (e2e integration tests, the Journal demo-bot's format=gpx path). Server-side it now delegates to the shared fetchSegments helper. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-24 17:57:54 +02:00
Ullrich Schäfer	f283401076	Stop BRouter contention kills under rapid editing ... When a user rapidly moves waypoints in the Planner, BRouter's thread-priority watchdog kills older in-flight requests to free a thread for newer ones, surfacing to the user as "operation killed by thread-priority-watchdog" errors. Two fixes: 1. Bump the BRouter thread pool on the dedicated host from 4 to 16. `BROUTER_THREADS` is now a Dockerfile ENV (default 4 for flagship/CI/dev) overridden to 16 in `infrastructure/brouter-host/`. The host has 32 GB of RAM and idle cores; 4 threads was a flagship-era constraint that no longer applies. 2. Cancel the previous in-flight `/api/route` request when a new one starts. `use-routing.ts` now keeps an `AbortController` in a ref, aborts it at the top of each `computeRoute`, and bails quietly on `AbortError` so the newer call drives state. Together these eliminate both the "real" contention (at the BRouter level) and the wasted work (BRouter computing a route the client no longer cares about). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-24 17:43:15 +02:00
Ullrich Schäfer	c49047fd33	BRouter host compose + Planner auth + cd-brouter rewrite ... Lands sections 3-5 of the relocate-brouter-to-dedicated-host change: everything needed to run BRouter on the dedicated Hetzner Robot host and have the Planner talk to it with the shared-secret header. Does NOT flip the cutover — the flagship BRouter stays warm during soak. ## BRouter host compose (section 3) New `infrastructure/brouter-host/` — a standalone compose project that runs as the `trails` user on `ullrich.is`: - `docker-compose.yml` — brouter + caddy sidecar. BRouter has no host port; caddy binds only to `10.0.1.10:17777` (vSwitch IP). Every service explicitly overrides the host's default Loki logging driver to `json-file` so logs don't leak to the operator's personal Loki. - `Caddyfile` — single-purpose reverse proxy that requires `X-BRouter-Auth: ${BROUTER_AUTH_TOKEN}` on every request. `auto_https off` (vSwitch-only); default access log format omits request headers, so the token is never written to disk. - `download-segments.sh` — crawls brouter.de, pulls planet-wide RD5 tiles via `wget -N` (incremental). Idempotent, safe to cron. - `README.md` — one-shot provisioning + token rotation + rollback notes. `docker/brouter/Dockerfile` is patched to honor `JAVA_OPTS` (was hardcoded `-Xmx1024M` in CMD). Default keeps the flagship's current heap; compose on the dedicated host overrides to `-Xmx8g` for planet scale on a 32 GB box. ## Planner shared-secret header (section 4) `apps/planner/app/lib/brouter.ts`: - Module-level guard: throws at startup in production if `BROUTER_AUTH_TOKEN` is unset. - `authHeaders()` helper (reads env at call time, so tests can `vi.stubEnv` without module reset). - Header attached on both `computeRoute` (per-segment) and `computeSegmentGpx`. 3 new unit tests cover header attachment + the no-token path. `infrastructure/docker-compose.yml` passes `BROUTER_AUTH_TOKEN` to the Planner service, and makes `BROUTER_URL` overridable via SOPS so the cutover is a one-variable flip. ## cd-brouter workflow (section 5) Rewritten to deploy to the dedicated host: - SSH as `trails@${BROUTER_DEPLOY_HOST}` on port `${BROUTER_DEPLOY_SSH_PORT}` (2232) using `${BROUTER_DEPLOY_SSH_KEY}`. - Decrypts SOPS, extracts ONLY `BROUTER_AUTH_TOKEN` into a `.env` file, scp'd alongside the compose project. - `paths:` trigger now includes `infrastructure/brouter-host/**`. - Segment download is NOT run here — first-time seed is a manual operator step (multi-hour). Routine re-runs are cron-able on the dedicated host. - Grafana annotation step preserved (reaches flagship Grafana as before). ## What's NOT here - `brouter:` service on the flagship is intentionally left in place (removed in section 7.5 after the 48 h soak window post-cutover). - Observability (section 6) — Prometheus scrape + Loki shipping from the dedicated host — comes in a follow-up PR. - Cutover itself (section 7) — flip `BROUTER_URL`, verify, remove the flagship brouter — is an operator action gated on first-time provisioning + smoke testing. ## Verification `pnpm typecheck && pnpm lint && pnpm test` all clean; planner build passes (the CI regression from #286 was fixed in #290). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-23 22:52:48 +02:00
Ullrich Schäfer	458b0a8a4c	Fix planner build: move Overpass upstream fetch to overpass.server.ts ... Route files in React Router only get server-code stripped from a specific set of exports (loader/action/middleware/headers). The overpass failover work added a `fetchWithFailover` named export to `app/routes/api.overpass.ts` for unit tests, but that export pulls in `metrics.server` (prom-client registry, etc.) — which then leaks into the client bundle and fails the production build with: [plugin react-router:dot-server] Error: Server-only module referenced by client 'app/lib/metrics.server' imported by route 'app/routes/api.overpass.ts' Move the upstream fetch logic and its config constants into `app/lib/overpass.server.ts`. The `.server.ts` naming makes the server-only boundary explicit, and tests now import from the lib instead of from the route. The route keeps only its `action` export (plus the per-instance LRU cache, which is internal to the module and not exported). Tests: 85 passing (no behavior changes). Build: planner + journal both succeed. Typecheck + lint clean. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-23 22:40:15 +02:00