5 Commits

Author	SHA1	Message	Date
lerko	ceb29fdd7b	chore: mark all audit phases complete in TODO	2026-05-20 20:54:57 -04:00
lerko	8663beeb96	fix: harden API, DB, and web layer from audit findings ... - Cap list API limit at 200 to prevent unbounded queries - Sanitize markdown output with DOMPurify to prevent XSS - Add v4 migration with indexes on deleted_at and modified_at - Fix v2 migration swallowed ALTER TABLE errors - Tighten ~/.nib directory permissions to 0o700	2026-05-20 20:41:53 -04:00
lerko	e66b7d19f6	chore: tidy before tag ... Update .gitignore (add .local/, remove stale spec entry). Remove TODO.md (moved to .local/done/). Remove docs/ISSUE_TEMPLATE.md (moved to .local/).	2026-05-16 23:20:58 -04:00
lerko	f26716a9ee	feat(ui): phase 4 — promote modal polish, TODO complete ... - Promote modal: colored glyphs, type names, hint descriptions per type - Show truncated entry body in promote modal subtitle - Mark all redesign phases complete in TODO.md	2026-05-16 09:37:32 -04:00
lerko	dda8426113	feat(ui): phase 1 — layout, tokens, header, rail redesign ... - Switch mono font from Monaspace Neon to JetBrains Mono - Grid layout 192px | 1fr | 400px (was 180/320) - Move capture bar from header to bottom of center panel - Add search input to header center - Redesign tag rail: grid items with arrow/dot/name/count - Add intent section (grab/read/fill) in cards view rail - Add --a-str token, toast component - Logo 16px 700 weight	2026-05-16 09:25:35 -04:00