GlycemicGPT

v0.10.0

📱 Mobile

✨ New Features

• feat: web + mobile meal comorbidity nutrition (saturated fat, sugars, sodium) @jlengelbrecht (#795)
• feat: surface glucose-relevant meal nutrition with never-dose guardrails @jlengelbrecht (#791)
• feat: meal-vision safety-language hardening @jlengelbrecht (#753)
• feat: Milestone H — empirical confidence, identity gating & auditability (H1–H3) @jlengelbrecht (#747)
• feat(mobile): meal capture → estimate → correct → save (Meal Intelligence) @jlengelbrecht (#738)

📝 Other Changes

• ci(android): run instrumented tests on an emulator in CI @jlengelbrecht (#786)
• test(meal): end-to-end coverage for the meal-logging core loop and failure modes @jlengelbrecht (#783)
• chore: sync release 0.9.0 from main to develop @glycemicgpt-merge (#718)

🌐 Web

✨ New Features

• feat: web meal estimate provenance panel (how this was estimated) @jlengelbrecht (#794)
• feat: web common-foods management and save/link from a meal @jlengelbrecht (#793)
• feat: web meal carb correction and food-identity confirmation @jlengelbrecht (#792)
• feat: web meal management view (list, detail, delete, photo upload + serving) @jlengelbrecht (#789)
• feat(api): surface long-acting basal injections in TDD, AI context, and insulin views @jlengelbrecht (#744)
• feat(api): add per-connection Glooko cgm_sync_enabled toggle (doses-only mode) @chris-clem (#733)

🐛 Bug Fixes

• fix(deps): patch 18 OSV-flagged transitive CVEs across api/web/sidecar @jlengelbrecht (#750)

📡 API

✨ New Features

• feat(api): gate local AI vision models on a measured carb-estimation bar @jlengelbrecht (#788)
• feat(api): ground branded restaurant items against published chain nutrition @jlengelbrecht (#787)
• feat(api): verify AI-cited meal carb figures against logged meals @jlengelbrecht (#765)
• feat(api): ground meal-photo carb estimates against history + USDA/OFF @jlengelbrecht (#746)
• feat(api): surface logged meals in chat and daily brief @jlengelbrecht (#745)
• feat(api): auto-generate daily briefs on a schedule @chris-clem (#743)
• feat(api): record long-acting (basal) pen injections from Glooko @chris-clem (#740)
• feat(api): meal correction loop + common foods @jlengelbrecht (#737)
• feat(api): food_records model + photo carb-estimation pipeline @jlengelbrecht (#736)
• feat(api): ingest smart-pen insulin doses (NovoPen 6 / Echo Plus) via Glooko @chris-clem (#726)

🐛 Bug Fixes

• fix(api): deterministic, self-excluding own-history meal recall @jlengelbrecht (#784)
• fix(api): harden meal-identity clustering against verbose descriptions @jlengelbrecht (#766)
• fix(api): make tzlocal an explicit dependency @jlengelbrecht (#752)
• fix(api): show large pen doses (60U bound) and dedupe Glooko doses across sources @jlengelbrecht (#731)
• fix(api): count non-pump insulin doses past the pump IoB anchor @jlengelbrecht (#730)
• fix(api): harden Glooko host validation, 421 posture, and dose ingestion bounds @jlengelbrecht (#729)
• fix(api): follow Glooko EU sub-cluster redirect when resolving the API host @chris-clem (#725)
• fix(api): fail closed on Redis outage for single-use token consumption @jlengelbrecht (#720)

📝 Other Changes

• test(api): assert a single Alembic head (CI guard) @jlengelbrecht (#739)

🤖 Sidecar

💥 Breaking Changes

• fix(sidecar): require SIDECAR_API_KEY at startup, fail closed on missing auth @jlengelbrecht (#719)

✨ New Features

• feat(sidecar): per-provider vision support + carb-estimation eval harness (Meal Intelligence) @jlengelbrecht (#735)

🐛 Bug Fixes

• fix(sidecar): route codex (ChatGPT subscription) chat through codex exec --json @jlengelbrecht (#749)
• fix(sidecar): install ca-certificates so codex (ChatGPT subscription) works @jlengelbrecht (#748)

🔒 Security

📝 Other Changes

• ci(security): suppress false-positive AES-ECB SAST finding in vendored SAKE crypto (#695/#696) @jlengelbrecht (#751)

🏗️ Infrastructure

💥 Breaking Changes

• chore(ci): stop auto-labeler flagging templated PRs as breaking changes @jlengelbrecht (#732)

✨ New Features

• feat(evals): variance-aware vision-carb eval harness + adversarial food set @jlengelbrecht (#754)

🐛 Bug Fixes

• fix(infra): loopback-bind dev Postgres/Redis, add Redis auth, fix k8s pgvector @jlengelbrecht (#721)

📝 Other Changes

• chore: sync changelog update from main to develop @glycemicgpt-merge (#717)

🐳 Container Images

| Image | Tags |
|-------|------|
| ghcr.io/glycemicgpt/glycemicgpt-api | 0.10.0, latest |
| ghcr.io/glycemicgpt/glycemicgpt-web | 0.10.0, latest |
| ghcr.io/glycemicgpt/glycemicgpt-sidecar | 0.10.0, latest |

Pull commands:

docker pull ghcr.io/glycemicgpt/glycemicgpt-api:0.10.0
docker pull ghcr.io/glycemicgpt/glycemicgpt-web:0.10.0
docker pull ghcr.io/glycemicgpt/glycemicgpt-sidecar:0.10.0