patillacode/piruetas
patillacode/piruetas
1
0
Fork 0
Code Issues Pull requests Projects Releases 20 Packages 1 Wiki Activity Actions
20 releases 20 tags
  • v0.10.0 59df3cff3d

    v0.10.0
    All checks were successful
    Test and publish Docker image / test (push) Successful in 30s
    Details
    Test and publish Docker image / e2e (push) Successful in 2m13s
    Details
    Test and publish Docker image / build (push) Successful in 52s
    Details
    Stable

    patillacode released this 2026-04-24 16:11:16 +02:00 | 22 commits to main since this release

    v0.10.0: Data Management & Editor Links

    New features

    Data Management tab (/account/data)

    A new tab in the account settings gives you full control over your journal data.

    • Export entries: download a ZIP of your entries scoped to all time, a specific year, or a specific month.
      Exports are available in plain text (Markdown) or JSON. A preview step shows the entry count before the
      download begins.
    • Delete entries: bulk-delete entries by scope with the same preview flow, including a warning to export
      first. Destructive actions require explicit confirmation.
    • Export current entry: a quick-download button in the journal toolbar (and the slide-out sheet) lets you
      download the entry you're currently editing without leaving the page.

    Hyperlink support in the editor

    The Tiptap toolbar now includes a link button. Clicking it (or activating via the toolbar when text is
    selected) opens a modal to insert, edit, or remove a hyperlink. Keyboard shortcuts work: Enter to confirm,
    Escape to cancel, clicking the backdrop to dismiss.

    Changes

    • The account page is now split into two tabs: Security (password change) and Data (new data management).
    • The admin Users page has a cleaner UX: the reset-password form is hidden behind a click-to-reveal button,
      and delete confirmations are handled inline via JS rather than a blocking browser dialog. Page-level tab
      navigation now links Users ↔ Tasks.

    Internals

    • Added markdownify dependency for HTML→Markdown conversion in text exports.
    • New i18n strings for all added UI (EN + ES).
    • New unit test suite for account data routes (tests/test_account.py, 412 lines) and a new e2e suite for the
      data management tab (tests/e2e/test_data_management.py, 189 lines).
    Downloads
  • v0.9.0 3315b22520

    v0.9.0
    All checks were successful
    Test and publish Docker image / e2e (push) Successful in 2m2s
    Details
    Test and publish Docker image / test (push) Successful in 30s
    Details
    Test and publish Docker image / build (push) Successful in 43s
    Details
    Stable

    patillacode released this 2026-04-23 10:27:04 +02:00 | 23 commits to main since this release

    v0.9.0

    Features

    • Admin task scheduler: new /admin/tasks UI for running maintenance tasks on demand; tasks are defined in app/tasks.py and triggered from the admin panel
    • Self-hosted fonts and Tiptap: all web fonts (Inter, Lora, Cormorant Garamond) and the Tiptap editor bundle
      are now served locally; no external CDN requests at runtime
    • Share links: "Publish" renamed to "Share" consistently across the UI and codebase; clearer copy and improved share flow in the editor
    • Mobile improvements: new mobile-specific CSS (components/mobile.css), responsive calendar adjustments, and
      logo visibility fixes on small screens
    • Modal polish: dedicated components/modal.css, improved modal close behavior, and fixes for elements
      obscured behind open modals

    Improvements

    • Editor JS refactored for better async button handling and modal interaction safety
    • Responsive layout refined across breakpoints (nav, calendar, editor)
    • i18n strings extended and corrected for both en and es locales

    Testing

    • Test coverage raised to 100%
    • Playwright e2e suite now runs on both Chromium and Firefox in CI
    • New e2e tests covering the share/publish flow

    Infrastructure

    • Tiptap bundled via esbuild (scripts/build-tiptap.mjs); rebuild with just build-js
    • package.json / package-lock.json added for JS tooling
    • Docker image updated to copy bundled fonts and vendor JS
    Downloads
  • v0.8.0 04b8fdfaf4

    v0.8.0
    All checks were successful
    Test and publish Docker image / test (pull_request) Successful in 46s
    Details
    Test and publish Docker image / e2e (pull_request) Successful in 3m11s
    Details
    Test and publish Docker image / build (pull_request) Has been skipped
    Details
    Test and publish Docker image / test (push) Successful in 45s
    Details
    Test and publish Docker image / e2e (push) Successful in 1m52s
    Details
    Test and publish Docker image / build (push) Successful in 45s
    Details
    Stable

    patillacode released this 2026-04-21 22:36:03 +02:00 | 11 commits to main since this release

    v0.8.0

    Features

    Mobile navigation overhaul

    Replaced the cluttered mobile header with a clean minimal bar (logo + Publish button + "…" menu).
    Tapping "…" opens a native-style bottom sheet containing: copy link, theme toggle, language switcher, account, delete entry, and sign out.
    Desktop is unchanged.

    Delete modal

    Replaced the browser confirm() dialog with a proper in-page modal.
    If the entry is currently published, the modal warns that deleting will also remove the public link
    and handles the unpublish automatically before deleting.

    Alpha logo

    The Piruetas alpha logo image now appears alongside the wordmark in the header.
    On mobile, only the image is shown to conserve space.

    Playwright E2E test suite

    Full end-to-end coverage added: authentication (login, logout, rate limiting), journal (CRUD, images, share
    tokens), account (password change), and admin (user management, access control).

    CI: E2E job in Forgejo workflow

    The Forgejo CI pipeline now runs the Playwright E2E suite on every push.

    Fixes

    • Copy link button correctly hidden on mobile when entry is not published
    • Sign-out button properly hidden from mobile header (was leaking through an inline style)
    Downloads
  • v0.7.0 b7305ea4ed

    v0.7.0
    All checks were successful
    Test and publish Docker image / test (push) Successful in 45s
    Details
    Test and publish Docker image / build (push) Successful in 52s
    Details
    Stable

    patillacode released this 2026-04-21 16:55:26 +02:00 | 34 commits to main since this release

    What's new in 0.7.0

    Delete entries

    A trash icon now appears in the toolbar whenever the current day has a saved entry.
    One click (with a confirmation prompt) permanently deletes the entry and updates the calendar immediately.
    No more empty days showing as having content.

    Calendar legend

    A ? button in the bottom corner of the calendar expands an inline legend explaining the three visual states:
    today, shared entry, and days with content.

    Sidebar stats

    The left column now shows a writing streak (consecutive days with entries) and a monthly summary (entry count
    and word count) on every journal page.

    License

    Piruetas is now officially licensed under AGPL-3.0.
    A commercial license is available for proprietary use: contact patillacode (at) gmail (dot) com

    Frontend code quality

    Theme toggle, locale picker, and mobile navigation logic have been moved out of HTML templates into proper
    static JS files (ui.js, calendar.js), making the frontend easier to maintain.

    Downloads
  • v0.6.0 cf74c2ad3e

    v0.6.0
    All checks were successful
    Test and publish Docker image / test (push) Successful in 45s
    Details
    Test and publish Docker image / build (push) Successful in 42s
    Details
    Stable

    patillacode released this 2026-04-20 18:11:48 +02:00 | 35 commits to main since this release

    Security hardening, publishing flow redesign, and polish

    Security (9 fixes)

    • HSTS + Permissions-Policy headers added to all responses; HSTS only sent when SECURE_COOKIES=true
    • Session versioning: session_version column on User; token format updated to include version; stale tokens
      rejected on every request
    • Session invalidation on password change: admin reset and self-change both increment session_version,
      logging out all other devices; self-change re-issues cookie so the current session stays valid
    • Login CSRF: double-submit cookie pattern on GET /login → POST /login; requests without a matching token get
      403
    • Image magic byte validation: upload endpoint validates actual file bytes, not the client-supplied Content-Type
    • TRUST_PROXY setting: opt-in X-Forwarded-For support for correct IP detection behind nginx/Caddy/Traefik; rate limiter uses real IP when enabled
    • CSP nonces: per-request nonces replace unsafe-inline on script-src; Google Fonts and esm.sh (Tiptap) whitelisted
    • Image access control: /uploads/{user_id}/{filename} requires auth or a valid ?share_token linked to an entry owned by that user
    • Share token revocation: DELETE /journal/{date}/share endpoint clears the token; images embedded in shared entries are rewritten to include ?share_token so they load for unauthenticated viewers

    Publishing flow redesign

    Replaced the fragile share popup with a clean two-action model:

    • Publish/Unpublish toggle in the toolbar: primary action, clear state label
    • Copy link icon button: appears inline only when the entry is published, copies directly to clipboard with a
      toast; no popup, no URL input field
    • Both buttons work dynamically without page reload
    • Mobile nav button mirrors the same publish toggle

    UI & calendar polish

    • Calendar now distinguishes four day states: today (dot below number), written (accent strikethrough),
      shared/published (accent ring), active/current (solid fill); states stack, active overrides all
    • CSS split into modular component files

    i18n

    • All templates fully wired to the translation system (account page, admin users table, journal toolbar)
    • New keys: account, publish, unpublish, copy_link, change_password, admin_role, user_role, stop_sharing,
      delete_confirm

    Docs & CI

    • README rewritten with inline Docker Compose quick-start
    • CONFIGURATION.md added with full prose-style config reference
    • CI pipeline updated to run tests on every push to main, build and push Docker image only on version tags (v*)
    Downloads
  • v0.5.0 a863a64d10

    v0.5.0
    All checks were successful
    Test and publish Docker image / test (push) Successful in 31s
    Details
    Test and publish Docker image / build (push) Successful in 44s
    Details
    Stable

    patillacode released this 2026-04-18 18:50:43 +02:00 | 38 commits to main since this release

    Bug fixes

    • Share link privacy fix: shared journal entries were exposing all entries to the viewer instead of only the intended one
    • Database path misconfiguration warning: DATABASE_URL with three slashes (sqlite:///) resolves relative to
      the app working directory, silently bypassing the volume mount and losing data on container restarts;
      the app now logs a warning at startup if the DB path falls outside DATA_DIR

    Other changes

    • Updated logo: optimised alpha PNG (5 MB → 478 KB) and added dark variant
    • README logo link fix
    Downloads
  • v0.4.0 e9596a0f5f

    v0.4.0
    All checks were successful
    Test and publish Docker image / test (push) Successful in 30s
    Details
    Test and publish Docker image / build (push) Successful in 42s
    Details
    Stable

    patillacode released this 2026-04-18 11:36:25 +02:00 | 42 commits to main since this release

    Mobile improvements

    Shared entries with images now load correctly on Android
    Images in shared entries were served behind authentication, causing Android browsers (Telegram, Firefox) to
    receive a redirect to the login page when loading the image, making the page appear blank.
    Images are now public; UUID filenames remain the security boundary.

    Share button accessible in portrait mode
    The share button was hidden off-screen in portrait mode.
    It now lives in the header nav on mobile and is always reachable regardless of screen width or orientation.

    Date picker on mobile
    Tapping the date in the mobile navigation bar opens a slide-up calendar sheet. Tap any day to navigate to it,
    or tap the backdrop to dismiss.

    Language selector
    Replaced the ambiguous EN/ES text toggle with a flag <select> (🇬🇧 / 🇪🇸) clearer at a glance and visible on
    mobile (the previous link was hidden by the nav collapse rule).

    Editor toolbar

    Replaced text labels (Link, Undo, Redo, Image) with minimal SVG icons.
    Buttons are now evenly distributed across the full toolbar width on both desktop and mobile; separators removed.

    Bug fixes

    • Fixed webmanifest href pointing to a 404 path
    Downloads
  • v0.3.0 4580ac28df

    v0.3.0
    All checks were successful
    Test and publish Docker image / test (push) Successful in 31s
    Details
    Test and publish Docker image / build (push) Successful in 42s
    Details
    Stable

    patillacode released this 2026-04-18 03:36:31 +02:00 | 44 commits to main since this release

    What's new

    Demo mode

    A built-in demo user can now be enabled via environment variables. When active, the demo account is
    auto-created at startup and its content is wiped on a configurable interval (default: every 30 minutes) via an
    asyncio background loop, no cron jobs or external schedulers needed.

    Try it at piruetas.patilla.es, log in with demo / mysupersecretpassword.

    README

    Added screenshots of both light and dark themes, a live demo link, and the full demo configuration reference.

    Bug fixes

    • Fixed a startup crash where appuser couldn't write to .venv due to /app ownership
    • Disabled uv cache to resolve a non-root runtime error in Docker

    Configuration (new env vars)

    Variable Default Description
    DEMO_ENABLED false Enable demo user and content reset loop
    DEMO_USERNAME demo Demo account username
    DEMO_PASSWORD demo Demo account password
    DEMO_RESET_INTERVAL 1800 Seconds between content wipes
    Downloads
  • v0.2.0 d2bf9f193b

    v0.2.0
    All checks were successful
    Test and publish Docker image / test (push) Successful in 30s
    Details
    Test and publish Docker image / build (push) Successful in 33s
    Details
    Stable

    patillacode released this 2026-04-18 02:33:30 +02:00 | 48 commits to main since this release

    v0.2.0 — Rootless Container, Health Endpoint & Tests
    Security, observability, and quality improvements.

    • Container now runs as non-root user (appuser, uid/gid 1000)
    • Added GET /health endpoint for container healthchecks and uptime monitoring
    • Test suite: 27 tests covering auth, journal CRUD, admin, share flow, and multi-user isolation
    Downloads
  • v0.1.0 b7351181e2

    v0.1.0
    All checks were successful
    Test and publish Docker image / build (push) Successful in 34s
    Details
    Test and publish Docker image / test (push) Successful in 28s
    Details
    Stable

    patillacode released this 2026-04-18 02:00:32 +02:00 | 49 commits to main since this release

    v0.1.0 — Initial Release
    Initial release of Piruetas - a minimalistic, self-hosted diary and journaling app.

    • Day-per-page navigation
    • Rich text editing via Tiptap
    • Multi-user support with admin account
    • SQLite storage with full data control
    • FastAPI backend with Jinja2 templating
    • Docker image available at forgejo.patilla.es/patillacode/piruetas:latest
    Downloads