astraea

3 Commits 1 Branch 0 Tags

Author	SHA1	Message	Date
drjones	7a6ba23c99	v1.2 mobile PWA: installable app + mobile-first UI - Installable PWA: manifest.json (standalone, portrait, maskable icons), theme-color + apple-mobile-web-app meta, generated 192/512 PNG icons, service worker (network-first, never caches /api/). - Mobile UI (≤720px): sticky blurred header, agent grid -> horizontal snap-scroll carousel, fixed bottom composer with safe-area insets, modals -> full-screen bottom sheets, 16px inputs (no iOS zoom), bigger touch targets, icon-only header actions. - /app remains the app shell; / is the landing page.	2026-09-07 20:00:46 -07:00
drjones	f02124c9de	v1.1 security release: PBKDF2 passwords, session expiry, rate limiting, SSE streaming - store.py: passwords now PBKDF2-HMAC-SHA256 (390k iters, random salt, constant-time compare). Legacy unsalted-SHA256 hashes upgrade transparently on successful login — zero impact on existing users. - Sessions expire after 30 days (lazy cleanup on token lookup). - Rate limiting on register (5/hr/IP), login (10/15min per IP AND per username), chat (30/hr/IP) — SQLite-backed, shared across gunicorn workers. - Registration now requires 8+ char passwords. - New /api/chat/stream SSE endpoint: citations first ('meta'), streamed answer deltas, 'done'. Client auto-falls back to non-streaming. - nginx: proxy_buffering off for SSE.	2026-09-07 19:03:37 -07:00
drjones	9f9d812320	Astraea v1.0 — multi-agent WA family-law assistant Eight specialist agents over a 16-book verified WA law corpus (RAG with citations), per-user document vault, WA court-form PDF auto-fill, comms missions with DV safety guard, no-KYC auth, TTS. Self-hosted: Flask + SQLite + Ollama, stdlib-only RAG. Includes README, LICENSE (MIT + not-legal-advice notice), DEPLOY runbook, .gitignore.	2026-09-07 18:49:32 -07:00

Author

SHA1

Message

Date

drjones

7a6ba23c99

v1.2 mobile PWA: installable app + mobile-first UI

- Installable PWA: manifest.json (standalone, portrait, maskable icons),
  theme-color + apple-mobile-web-app meta, generated 192/512 PNG icons,
  service worker (network-first, never caches /api/).
- Mobile UI (≤720px): sticky blurred header, agent grid -> horizontal
  snap-scroll carousel, fixed bottom composer with safe-area insets,
  modals -> full-screen bottom sheets, 16px inputs (no iOS zoom), bigger
  touch targets, icon-only header actions.
- /app remains the app shell; / is the landing page.

2026-09-07 20:00:46 -07:00

drjones

f02124c9de

v1.1 security release: PBKDF2 passwords, session expiry, rate limiting, SSE streaming

- store.py: passwords now PBKDF2-HMAC-SHA256 (390k iters, random salt,
  constant-time compare). Legacy unsalted-SHA256 hashes upgrade transparently
  on successful login — zero impact on existing users.
- Sessions expire after 30 days (lazy cleanup on token lookup).
- Rate limiting on register (5/hr/IP), login (10/15min per IP AND per
  username), chat (30/hr/IP) — SQLite-backed, shared across gunicorn workers.
- Registration now requires 8+ char passwords.
- New /api/chat/stream SSE endpoint: citations first ('meta'), streamed
  answer deltas, 'done'. Client auto-falls back to non-streaming.
- nginx: proxy_buffering off for SSE.

2026-09-07 19:03:37 -07:00

drjones

9f9d812320

Astraea v1.0 — multi-agent WA family-law assistant

Eight specialist agents over a 16-book verified WA law corpus (RAG with citations),
per-user document vault, WA court-form PDF auto-fill, comms missions with DV
safety guard, no-KYC auth, TTS. Self-hosted: Flask + SQLite + Ollama, stdlib-only RAG.

Includes README, LICENSE (MIT + not-legal-advice notice), DEPLOY runbook, .gitignore.

2026-09-07 18:49:32 -07:00