bacfb852b8
All five agents died mid-flight (three on session limits, two on 529s), but their worktrees held real work — 17 files. Salvaged everything, wrote the missing pieces, and finished the integration by hand. PROFILES + RANK User gains display_name, bio, gender, avatar_form, avatar_hue and profile_public — all nullable, so every existing row including the guest `wanderer-` accounts stays valid with no backfill. The avatar is procedural (a GhostForm plus a hue, drawn by the same GhostGlyph that renders entities): no uploads means no moderation surface, no EXIF and no blob storage, and an `avatar_url` still slots in later without changing anything. rank.py converts encounters, essence and favor into one "standing" currency and maps it onto six one-word titles. An encounter is worth ten points to ten essence's one, because contact is what the app is about — a seeker who only buys unlocks climbs very slowly. Negative essence and favor floor at zero rather than subtracting, so a bad judgment can never demote you: rank is a record of what you have done. Level 1 costs exactly one encounter, so a new hunter sees the bar move after their first séance. Privacy invariants, verified live rather than assumed: - `email` is returned by GET /api/profile/me and by nothing else. Confirmed against the running server: zero occurrences in both public payloads. - A hidden profile 404s rather than 403s — confirming the account exists would leak exactly what hiding it was meant to prevent. WHISPERS BETWEEN HUNTERS Plain text, no attachments, no editing. Guests can RECEIVE but not send: that gives registering a felt purpose beyond keeping a codex, and closes the obvious spam vector since guest accounts are free and automatic. Verified live: alice→bob delivers, a guest send returns 403, and a third party's conversation list comes back empty — no cross-user leak. Message bodies are rendered as text nodes, never as HTML, and wrap with overflow-wrap:anywhere so a long unbroken string can't blow out the layout. THE ENCOUNTER RECORD The Codex already knew all of this — Entity.discovered_by has always been recorded and every contact was already an entity_sightings row. Nobody ever showed it. Now an entity page names its summoner and lists every hunter who has met it. Hunters who opted out of a public profile are still COUNTED but not linkable: an anonymous contact is still a contact, so a spirit's history stays honest without exposing anyone. Live on production data: Mabel Crump, discovered by Charly, 1 encounter; Charly ranks channeler (level 2) from 5 real sightings — all computed from data that was already sitting there. 385 frontend tests pass; i18n parity holds across both languages. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
47 lines
2.4 KiB
Python
47 lines
2.4 KiB
Python
import uuid
|
|
from datetime import datetime, timezone
|
|
|
|
from sqlalchemy import Boolean, DateTime, Float, Integer, String
|
|
from sqlalchemy.orm import Mapped, mapped_column
|
|
|
|
from app.db import Base
|
|
|
|
|
|
class User(Base):
|
|
__tablename__ = "users"
|
|
|
|
id: Mapped[uuid.UUID] = mapped_column(primary_key=True, default=uuid.uuid4)
|
|
username: Mapped[str] = mapped_column(String(32), unique=True, index=True)
|
|
password_hash: Mapped[str] = mapped_column(String(255))
|
|
email: Mapped[str | None] = mapped_column(String(255), nullable=True)
|
|
|
|
# --- hunter profile ---------------------------------------------------
|
|
# All nullable so every pre-existing row — including the guest
|
|
# `wanderer-` accounts minted by the open door — stays valid without a
|
|
# backfill. Absent values are treated as "not set" and fall back at the
|
|
# serialization layer, never here.
|
|
#
|
|
# The avatar is procedural: a GhostForm plus a hue, rendered by the same
|
|
# GhostGlyph component that draws entities. No uploads means no
|
|
# moderation surface, no EXIF stripping and no blob storage — and if a
|
|
# real image is ever wanted, an `avatar_url` slots in beside these
|
|
# without changing anything else.
|
|
display_name: Mapped[str | None] = mapped_column(String(48), nullable=True)
|
|
bio: Mapped[str | None] = mapped_column(String(280), nullable=True)
|
|
gender: Mapped[str | None] = mapped_column(String(16), nullable=True)
|
|
avatar_form: Mapped[str | None] = mapped_column(String(16), nullable=True)
|
|
avatar_hue: Mapped[int | None] = mapped_column(Integer, nullable=True)
|
|
# Hides the profile from /api/hunters and 404s the public page. It does
|
|
# NOT stop messages arriving — privacy here is about being browsed, not
|
|
# about being unreachable.
|
|
profile_public: Mapped[bool] = mapped_column(Boolean, default=True, nullable=False)
|
|
essence: Mapped[int] = mapped_column(Integer, default=0)
|
|
# Workstream B (character-depth-ghost-log spec): hidden per-user score,
|
|
# nudged by judgment correctness, clamped to [-1.0, 1.0] everywhere it's
|
|
# written (see app.judgment.clamp_favor). Read back as a small bias on
|
|
# new entities' trait rolls at mint time (app.judgment.apply_favor_bias).
|
|
favor: Mapped[float] = mapped_column(Float, default=0.0)
|
|
created_at: Mapped[datetime] = mapped_column(
|
|
DateTime(timezone=True), default=lambda: datetime.now(timezone.utc)
|
|
)
|