Oikos releases

Added

• Bike icon: added bike icon to the calendar event icon selector (transport category), with translations for all 16 supported locales.

[0.51.0] - 2026-05-11

Added

• Split Expenses module: new tab inside Budget for managing shared expenses. Supports expense groups (household, couple, travel, event, shopping, general) with multiple split methods: equal, percentage, exact amounts, and shares. Balances are derived from an immutable ledger — amounts are stored as integer minor currency units (cents) to avoid floating-point errors.
• Settlements: record payments between group members with a debt-simplification algorithm that produces the minimal set of transfers to clear all balances.
• Recurring expenses: define expenses that repeat on a daily, weekly, monthly, or yearly schedule with automatic generation via an hourly scheduler.
• Guest accounts: invite people outside the family as restricted guests who can only access the Split module and see their own invited groups. Guests can be created from scratch or converted from existing contacts.
• Multi-currency support: each group has a default currency; individual expenses can use any currency with historical exchange rate snapshots for consistent balance reporting.
• Activity feed: per-group log of all expense, member, and settlement events.
• Polish locale: split-expenses strings added to the Polish (pl) translation.

What's New

Added

• Polish locale — full Polish (pl) translation covering all UI modules: tasks, calendar, shopping, meals, budget, notes, contacts, birthdays, recipes, documents, housekeeping, settings, and more. Polish is now selectable in Settings → Language.

This brings Oikos to 16 supported languages: German, English, Spanish, French, Italian, Swedish, Greek, Russian, Turkish, Chinese (Simplified), Japanese, Arabic, Hindi, Portuguese, Ukrainian, and now Polish.

Full Changelog: https://github.com/ulsklyc/oikos/blob/main/CHANGELOG.md

What's new

Housekeeping module

A new dedicated module for managing household staff workflows:

• Staff profiles — name, daily rate, calendar color, payment schedule, avatar
• Check-in / check-out — each visit creates a calendar event; check-out records the actual end time
• Recurring chore tracking — decay tasks with configurable frequency and urgency indicators
• Supply requests — linked directly to shopping lists
• Monthly visit log — with payment summary and per-visit extras tracking
• Payment task integration — optionally creates a task on each check-in; completing it marks the visit as paid

Document folders

Documents can now be organized into custom folders with a sidebar browser.

Calendar icon picker

Calendar events now support a custom icon from a curated Lucide set.

Full changelog: https://github.com/ulsklyc/oikos/blob/main/CHANGELOG.md

Changes

Changed

• Brand color: reverted the primary accent color from Amber back to Violet. The accent is now #6c3aed in light mode and #a78bfa in dark mode, applied consistently across all design tokens, the logo, all PWA icons (favicon, app icons, maskable icons, Apple touch icon), and the GitHub Pages documentation site. Semantic colors (warnings, notes module, meal-breakfast) remain unchanged.

Full changelog: https://github.com/ulsklyc/oikos/blob/main/CHANGELOG.md

Brand color refresh

The primary accent color has been updated from cool indigo (#4F46E5) to a rich, warm amber (#92400E in light mode, #FBBF24 in dark mode) across all design tokens, the logo, and the GitHub Pages documentation site.

Why this change? Indigo carried the aesthetic of a productivity tool — focused, corporate, digital. As Oikos has grown into a home for thousands of families, we wanted the visual identity to better reflect what the app actually is: a warm, shared space for everyday life together. Amber — deep and earthy in light environments, bright and inviting in dark ones — communicates exactly that. It evokes warmth, reliability, and the kind of unhurried intimacy that family life deserves.

From an accessibility standpoint, Amber-800 (#92400E) achieves a contrast ratio of 7.20:1 against white, exceeding the WCAG AA threshold and meeting WCAG AAA. The dark mode value (#FBBF24) maintains the same readability standard. The transition is purely cosmetic — no data, settings, or behavior has changed.

Logo: updated the gradient on docs/logo.svg and all inline SVG instances from violet (#8B5CF6 to #6C3AED) to amber (#B45309 to #92400E).

Fixed

• Settings: CalDAV and CardDAV "Add Account" modals now correctly display Cancel and Save buttons. Previously, the onSave callback ran immediately on modal open, triggering a required-fields validation error against empty fields and leaving the form with no way to submit. Fixes #128.

Added

• Multi-person assignment: tasks and calendar events can now be assigned to multiple family members simultaneously. A new task_assignments / event_assignments join table (migration v32) stores the assignments; existing single-user data is migrated automatically.
• Avatar stack: task cards, Kanban cards, and the calendar agenda view display stacked avatars for all assigned users (up to 3 visible, then a +N overflow badge).
• Shared UserMultiSelect component (public/components/user-multi-select.js): checkbox-based dropdown used in both the task modal and the calendar event modal; replaces the previous single-user select element.
• assigned_to filter extended: GET /api/v1/tasks?assigned_to= and GET /api/v1/calendar?assigned_to= now match any task/event where the user appears in the assignments list.

Changed

• API response for tasks and calendar events now includes assigned_users: [{id, display_name, color}] array alongside the legacy assigned_to / assigned_name / assigned_color fields.
• Recurring task completion copies all multi-person assignments to the new recurring instance.

Changes

Settings — Sync tab restructured

Open standards (CalDAV, CardDAV, ICS subscriptions) are now grouped first under a dedicated "CalDAV & CardDAV" section. Cloud services (Google Calendar, Apple Calendar) move to a secondary "Cloud Services" section below. Fixes a raw <h2> heading inside the CalDAV card, which caused inconsistent heading sizes compared to all other settings cards.

Shared sub-tabs navigation component

Extracted renderSubTabs() as a single reusable implementation for all sub-module navigation bars (public/utils/sub-tabs.js + public/styles/sub-tabs.css). Settings tabs and kitchen tabs now share the same pill-style bar with icons, labels, sticky positioning, horizontal scrolling, and group separators. Removes approximately 120 lines of duplicated CSS from kitchen-tabs.css and settings.css. New sub-module navigation can use renderSubTabs() directly without any additional CSS.

Test loader improvement

test-browser-loader.mjs now automatically resolves browser-absolute /utils/*.js imports to the public/ directory, removing the need for per-module manual stubs.

Full Changelog

https://github.com/ulsklyc/oikos/blob/main/CHANGELOG.md

Fixed

• Modal: add onClose callback to openModal() so promise-based modals (confirmModal, promptModal, selectModal) resolve correctly on Escape and overlay-click without duplicate event listeners.
• Modal: fix _initialFormTimeout leak — timeout is now tracked and cancelled on re-open or close, preventing stale dirty-check snapshots.
• Calendar: replace popup.innerHTML with insertAdjacentHTML in the event popup (project constraint); add truncateDescription() to cap long event descriptions at 500 characters.
• Validation: extend DATETIME_RE to accept ISO 8601 datetimes with milliseconds and timezone offsets; normalise datetime inputs to YYYY-MM-DDTHH:MM before storing.

Changed

• Docker: switch from named Docker volume to host-mounted bind mounts; DATA_DIR (default ./data) and BACKUP_DIR (default ./backups) can be set in .env to control storage locations.
• Startup log: include app version in the server start message.

Changed

• Documentation: SPEC.md updated to reflect v0.45–v0.47 changes — CardDAV Accounts and CardDAV Addressbook Selection tables added; Contacts table expanded with multi-value fields and CardDAV columns; new contact_phones, contact_emails, contact_addresses sub-tables documented; Birthdays table reflects configurable reminder offset columns; External Calendars table notes apple→caldav migration; Tasks module documents bulk actions; Contacts module documents CardDAV multi-account sync; Birthdays module reflects flexible reminder offsets; Settings module updated for Synchronization tab, module toggles, scheduled backups, and CardDAV UI.
• README: Birthdays feature description updated to reflect customizable reminder offsets; Backup feature description updated to mention automatic scheduled backups.

Removed

• Repository: archived implemented cleanup plan (docs/designs/2026-05-04-repo-cleanup-design.md → docs/archive/designs/); removed settings sidebar prototype HTML (docs/designs/2026-05-04-settings-sidebar-demo.html).

Changed

• Dependencies: updated express-rate-limit from 8.4.1 to 8.5.0 (async store initialization support) and tsdav from 2.1.8 to 2.2.0 (native fetch, enhanced OAuth token handling, improved CalDAV/CardDAV sync reliability, security improvements).

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.47.1...v0.47.2

Fixed

• Settings page crash: fixed ReferenceError "loadCalDAVAccounts is not defined" when opening Settings. Root cause: loadCalDAVAccounts and loadCardDAVAccounts were defined inside the render function but called from bindIcsEvents (outside render scope). Functions are now top-level exports with user parameter.

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.47.0...v0.47.1

Settings UX Overhaul & CardDAV UI

This release significantly improves the Settings experience with better organization and a complete user interface for CardDAV contact synchronization.

Added

• Settings UX overhaul: renamed Calendar tab to Synchronization with dedicated sections for Calendar Sync and Contact Sync. Improved information architecture with visual tab grouping using CSS separators between functional areas (module settings, synchronization, personal, administration).
• CardDAV UI: complete user interface for CardDAV contact synchronization in Settings. Add/delete CardDAV accounts (iCloud, Nextcloud, Radicale, Baikal), enable/disable individual addressbooks, manual sync trigger, real-time status indicators. Empty state onboarding for first-time setup.
• Status badges: visual sync status indicators (success, error, syncing) with animated spinner for active syncs across CalDAV and CardDAV integrations.

Changed

• Settings navigation: Calendar tab replaced by unified Synchronization tab containing both calendar and contact sync options. Existing CalDAV calendar accounts remain accessible in the Calendar Sync section.

Technical Details

• 21 files changed, 4267 insertions, 43 deletions
• All 109 tests passing
• i18n updates for all 14 supported locales
• Backward compatible with existing CalDAV setup

What's New

Flexible Birthday Reminders

Configure exactly when to be reminded of upcoming birthdays with:

• Preset offsets: none, at time, 15min, 1h, 1d, 2d, 1w, 2w
• Custom intervals: minutes, hours, days, or weeks
• Integrated UI in birthday modal
• Optional: disable reminders entirely

Bug Fixes

• Service worker now properly handles non-HTTP protocols (e.g., browser extensions)

Installation

Docker:

docker pull ghcr.io/ulsklyc/oikos:0.46.0

See Installation Guide for details.

Contributors

• @rafaelfoster for the birthday reminders feature (#123)

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.45.0...v0.46.0

CardDAV Contacts Integration

This release adds comprehensive CardDAV support for contacts with multi-account management and multi-value fields.

New Features

CardDAV Multi-Account Sync

• Connect multiple CardDAV servers (Nextcloud, iCloud, Radicale, Baikal) simultaneously
• 8 new API endpoints for account management under /api/v1/contacts/cardav/
• Per-addressbook enable/disable via checkboxes
• Test connections before saving
• Manual sync trigger per account
• Automatic addressbook discovery and refresh

Multi-Value Contact Fields

• Multiple phone numbers, email addresses, and physical addresses per contact
• Each entry has a label (mobile, work, home, etc.), value, and optional "primary" flag
• Atomic transaction support with replacement semantics on update
• Backward compatible with existing single-field contacts
• Full validation with length limits and format checks

Technical Details

• New service: server/services/cardav-sync.js
• New router: server/routes/cardav.js
• Extended router: server/routes/contacts.js (multi-value support)
• Database tables: carddav_accounts, carddav_addressbook_selection, contact_phones, contact_emails, contact_addresses
• 109 tests across 20 test suites (all passing)
• Full OpenAPI documentation

Related

• Pull Request: #122
• Migration: Automatic via server/db.js (Migration 30)

Full Changelog: https://github.com/ulsklyc/oikos/blob/main/CHANGELOG.md#0450---2026-05-04

Fixed

• CalDAV migration crash: fixed CHECK constraint violation during v0.44.0 migration that caused container restart loop. The apple→caldav external_source conversion now happens during table rebuild instead of before, preventing the constraint error (#119, #120).

Full changelog: https://github.com/ulsklyc/oikos/blob/main/CHANGELOG.md

Generic CalDAV Multi-Account Sync

This release replaces the single Apple CalDAV integration with a comprehensive multi-account CalDAV solution.

New Features

• Multiple CalDAV Accounts: Connect iCloud, Nextcloud, Radicale, Baikal, and any CalDAV-compatible server simultaneously
• Per-Account Calendar Selection: Choose which calendars to sync with checkboxes in Settings → Calendar
• Bidirectional Sync: Full two-way synchronization between Oikos and your CalDAV servers
• Outbound Target Selection: When creating events, optionally choose which CalDAV account/calendar to sync to
• Automatic Migration: Existing Apple CalDAV data is automatically migrated to the new system

Technical Changes

• New database tables: caldav_accounts, caldav_calendar_selection
• New backend service: server/services/caldav-sync.js
• New API routes: /calendar/caldav/*
• Enhanced UI in Settings and Calendar event modal
• 7 new comprehensive tests (all passing)

Documentation Updates

• README.md: Updated Calendar feature description
• docs/SPEC.md: Added new table schemas and updated Calendar module documentation
• Full i18n support in German and English

Fixes

• None (feature release)

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.43.0...v0.44.0

Closes #90

Added

• Automatic scheduled backups: database backups are now created automatically on a configurable cron schedule (default: 2 AM daily). Old backups are rotated automatically, keeping only the last N copies (default: 7). Configuration via .env variables: BACKUP_ENABLED, BACKUP_SCHEDULE, BACKUP_DIR, BACKUP_KEEP. Settings → Backup displays scheduler status, schedule, retention policy, last backup timestamp, and a manual trigger button.

Added

• Module toggles (Settings → General, admin-only): individual modules (Tasks, Calendar, Shopping, Meals, Recipes, Birthdays, Notes, Contacts, Budget, Documents) can be disabled to hide them from the navigation. Data is preserved and reappears when the module is re-enabled. Dashboard and Settings remain essential and cannot be disabled.
• Bulk actions for tasks (List view only): select multiple tasks via checkboxes and apply batch operations (mark done, mark open, archive, delete). Bulk select toggle appears in the toolbar; selected count and action bar appear when tasks are checked. Kanban view remains single-task oriented.

Added

• Birthday badge: the birthdays nav item now shows a badge when any family member has a birthday within the next 3 days.
• Recent filter chips: the task filter bar now shows up to three recently used filters as quick-access chips, persisted in localStorage.
• Calendar icon search: the event icon picker now includes a live search field to quickly find icons by keyword, with results grouped by category.
• Calendar icon categories: event icons are now organised into labelled category groups (transport, sports, health, nature, leisure, social, work, home, food, other).
• Repeat indicator on calendar events: events with a recurrence rule now display a small repeat icon in both month and week views.
• 3-day week view on mobile: the calendar week view automatically switches to a 3-day window on screens narrower than 640 px for better readability.
• Widget size presets: the dashboard widget size selector uses named presets (Tiny, Narrow, Standard, Large, Full) instead of raw grid dimension values.

Changed

• Required-field markers: title fields in the task, event, and budget modals now show a required-field asterisk via the .required-marker CSS class.
• Modal drag handle touch target: the bottom-sheet drag handle has a 44 px tall invisible hit area so it can be grabbed comfortably.
• Swipe affordance: list rows with swipe actions show a subtle chevron hint to signal the gesture.
• Budget tab height: budget tab buttons have a minimum height of 40 px to meet touch-target requirements.

Changed

• Typography tightening: page titles and modal titles use tighter letter-spacing (-0.5 px / -0.8 px on desktop) and text-wrap: balance to eliminate orphaned words on wrapped headings.
• Warm-tinted shadows: all elevation shadows (sm through xl) now use a warm-tinted base colour (rgba(18, 14, 8, …)) that matches the warm neutral palette instead of pure black.
• Button radius: regular buttons use --radius-md (12 px) instead of --radius-sm (8 px), creating a clear visual distinction from text inputs.
• Empty-state icons: icons in empty states pick up a 40 % tint of the current module accent colour, making them feel contextually connected to each module rather than uniformly grey.
• Search section labels: category headings inside the search overlay are now sentence-case instead of all-caps, improving readability.

Fixed

• Tabular figures: currency amounts (budget summary cards, transaction list, loan cards, chart rows), weather temperature, dashboard metrics, and calendar time labels now use font-variant-numeric: tabular-nums so digit columns remain visually aligned.

Added

• Budget loans tracker (PR #117 by @rafaelfoster): a new Loans tab in the Budget module lets you create instalment-based loans, record individual payments, track remaining balance and due months, and filter budget transactions by loan. Paid-off loans are automatically marked as closed. Full CRUD with confirmation modals.
• Dashboard widget sizes: each dashboard widget now has a configurable size (columns × rows). Sizes are persisted in user preferences and survive page reloads.
• Extended date formats: Settings → General now offers four additional date format options — MM.DD.YYYY, YYYY.MM.DD, YYYY/MM/DD, and DD/MM/YYYY — alongside the existing formats.

Fixed

• dmy date format preserved: the existing DD.MM.YYYY behaviour of the dmy preference is unchanged for all current users; a new DD/MM/YYYY option (dmy_slash) is available for those who want slashes.

Fixed

• Budget date picker: the date input in Budget → New Entry / Edit Entry now uses a native date picker on iOS and Android instead of a plain text field.

What's Changed

• Update swedish translation by @olsson82 in https://github.com/ulsklyc/oikos/pull/115

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.39.0...v0.39.1

What's Changed

• Added a user-configurable time format preference to the app and wired it through settings, storage, API preferences, and time entry/display paths. by @rafaelfoster in https://github.com/ulsklyc/oikos/pull/114

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.38.4...v0.39.0

Fixed

• Dashboard portrait mode on mobile: layout no longer overflows to landscape width; overflow: visible override in the Admin Dashboard Layout CSS block has been removed so the correct overflow: clip takes effect, and .app-content now uses overflow-x: hidden (instead of clip) to properly contain layout overflow at the scroll container level

Fixed

• Dashboard portrait mode on Android: horizontal scrollbar no longer appears due to subpixel overflow in the main scroll container (overflow-x: clip added to .app-content)

Fixed

• Recurring calendar events with FREQ=WEEKLY;INTERVAL=N;BYDAY=... (N > 1) now correctly skip N−1 weeks between occurrences instead of repeating every week

Changed

• Docs: SPEC.md — family_documents and family_document_access tables added; calendar_events extended with icon and four attachment columns; contacts and birthdays extended with family_user_id; Tasks status includes archived; Documents module section added; Calendar section updated with icons, file attachments, and overlapping event rendering; Settings section updated with Backup Management tab and family member contact fields
• Docs: BACKLOG.md — completed features table brought up to date through v0.38.0 (v0.30.0–v0.38.0 entries added)
• Docs: README.md — Backup entry added to the feature table; Documents entry updated with exact category count
• Docs: CONTRIBUTING.md — innerHTML security note updated to reflect current insertAdjacentHTML/replaceChildren/esc() pattern; individual test-suite commands listed

Added

• FAB entry animation now stops after 5 page views (long loop progressive reduction)
• Search keyboard shortcut hint (/) hides permanently after first keyboard use
• Success toasts are suppressed after 50 successful saves to reduce noise for power users
• Empty state CTA button fades in with a short delay to draw attention as the primary action
• Form fields pulse with a red glow on the second or subsequent validation failure on the same field
• Shopping quick-add input shows a brief accent-colour glow after each successful item add

Changed

• Search bar in More sheet: added hover, active, and focus states with accent colour highlight and subtle scale feedback
• Search bar icon changes to accent colour on hover and press for clearer trigger affordance
• Keyboard shortcut hint (/) shown inside search bar on desktop as discoverability signal

Changed

• Bottom navigation: Tasks replaces Search as a primary tab bar item
• More menu: layout changed from two columns to a three-column grid (two rows of three)
• Search: embedded as a narrow bar at the top of the More sheet instead of a standalone bottom-nav button

What's Changed

• Consistent upload option in the calendar, and fiz images rendering by @rafaelfoster in https://github.com/ulsklyc/oikos/pull/110

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.36.1...v0.37.0

Fixed

• Date input: default date format changed from US (MM/DD/YYYY) to day-month-year (DD.MM.YYYY) for new users
• Date input: dot-separated dates (DD.MM.YYYY) are now accepted in addition to slash-separated dates
• Date input: dmy placeholder and display format updated to use dots instead of slashes

Added

• Navigation: Kitchen (Meals/Recipes/Shopping) is now grouped as a single "Küche" entry in the desktop sidebar, consistent with the mobile bottom bar
• UX: empty states in Tasks, Notes, Contacts, Shopping, Recipes and Budget now include a primary CTA button that triggers the page FAB
• UX: friendlyError(err) helper added to window.oikos; unhandled promise rejections now show status-code-aware messages (offline, forbidden, not found, server error, timeout) instead of raw error text
• i18n: five new common.error* keys (offline, forbidden, notFound, server, timeout) added to all 15 locale files

Changed

• Navigation: more-button icon changed from grid-2x2 to ellipsis (matches the sheet it opens)
• Navigation: desktop sidebar expands labels at 1 280 px instead of 1 440 px
• UX: search overlay input field is now at the top, results below (standard top-to-bottom scan path)
• UX: touch targets for kitchen tabs and shopping list tabs raised to 44 px (iOS minimum)
• UX: dashboard metric values enlarged to xl/bold and labels styled as 2xs/uppercase for clearer data hierarchy
• Onboarding: step 2 text and icon updated to accurately describe the navigation structure (···-button and module groups); step 3 text and icon updated to explain the FAB and swipe gestures

What's Changed

• Added a system Backup and Restore tool by @rafaelfoster in https://github.com/ulsklyc/oikos/pull/109

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.34.1...v0.35.0

Fixed

• Kitchen tabs bar disappeared after navigating to Shopping, because the page overwrote the container a second time after loading data

Added

• Navigation: new "Küche" (Kitchen) button in the bottom bar groups Meals, Recipes and Shopping behind a single entry point with a persistent tab bar inside each sub-module
• Navigation: new "Suche" (Search) button added to the bottom bar for one-tap access to the search overlay
• Kitchen tabs bar: sticky segment-control (Meals / Recipes / Shopping) injected at the top of each sub-module page; remembers the last active tab via sessionStorage
• Keyboard shortcuts: g k navigates to Kitchen (last tab), g k m → Meals, g k r → Recipes, g k s → Shopping
• i18n: nav.kitchen, nav.search and shortcuts.goKitchen keys added to all 15 locale files

Changed

• Navigation: bottom bar reorganised — Dashboard, Calendar, Küche, Suche, Mehr (5 items)
• Navigation: Meals, Recipes and Shopping removed from the More sheet; they are accessible via the Kitchen tab bar and the sidebar on desktop
• More sheet: reduced from 3-column to 2-column grid for larger touch targets; search trigger removed
• More sheet: drag-handle added at the top; swipe-down gesture closes the sheet

Changed

• Navigation: removed the dedicated Search button from the bottom bar; the bottom bar now shows three primary module links plus the More button
• Navigation: the More sheet now opens with a full-width pill-shaped search trigger at the top, replacing the grid-cell search item
• Search: the search overlay input field is now positioned at the bottom of the screen (thumb zone) instead of the top

Added

• Calendar: overlapping timed events in week and day views now render side-by-side using a column-layout algorithm instead of stacking on top of each other
• Calendar: events support optional file attachments (images, PDFs, and office documents up to 5 MB); images are shown inline in the event popup, other files as a download link
• Birthdays: redesigned edit modal with photo avatar and name/date fields displayed side by side

Fixed

• Calendar: attachment i18n keys are fully translated in all 15 locales (German translation added; Portuguese diacritics corrected)

Added

• Typography: Plus Jakarta Sans variable font (200–800 weight) self-hosted under public/fonts/ — consistent branding across all platforms with no CDN dependency at runtime
• Dashboard: visual hierarchy for primary widgets — Tasks and Calendar always span two columns; Weather and Shopping span two columns at the three-column breakpoint only
• Dashboard: subtle accent border on primary (wide) widgets using the active module accent colour

Changed

• Module toolbars (Tasks, Notes, Calendar, Contacts, Shopping) are now sticky — they remain visible at the top while scrolling long lists

Fixed

• Sticky toolbars: changed overflow: hidden to overflow: clip on Calendar, Notes, Contacts, and Shopping page roots so position: sticky works correctly on child toolbar elements
• Dashboard: explicit grid-column: span 1 for secondary widgets at the 768 px (two-column) breakpoint to prevent implicit layout jumps

Changed

• Bottom navigation restructured: Dashboard, Tasks, Calendar as first three primary slots; Search promoted to a dedicated fourth bottom-nav button (no longer buried in the More sheet)
• Sidebar tooltips added for the collapsed mode (1024–1439 px) — hovering an icon now shows a label tooltip so module names remain discoverable without expanding the sidebar

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.32.0...v0.32.1

Added

• Documents: new Family Documents module — upload, search, and manage family files (PDF, images, text, Office) with grid/list view, per-document visibility (family, selected members, private), category tagging (medical, school, identity, insurance, finance, home, vehicle, legal, travel, pets, warranty, taxes, work, other), archive/restore, and download actions (#104)
• Documents: drag-and-drop upload area in the new-document modal (#104)
• Tasks: archive button on task cards; archived status supported in kanban view and filter (#104)
• Tasks: inline reminder preset UI — offset from due date/time with 15 min, 1 h, 1 d, 2 d, 1 w, 2 w, or custom offset presets (#104)
• i18n: Documents and updated Tasks keys translated in all 15 locales

Fixed

• Modal: discard-changes confirmation no longer corrupts overlay state when a confirm dialog is triggered from within another modal (#104)
• RRule: "Until" date field moved inside the recurrence options row for better layout (#104)

What's Changed

• feat: add edit button for ICS subscriptions by @ulsklyc in https://github.com/ulsklyc/oikos/pull/102

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.31.1...v0.31.2

Fixed

• Settings: birthday date fields (profile, new member, edit member) now use the native date picker on iOS
• Birthdays: birth date field now uses the native date picker on iOS

What's Changed

• This PR improves family/account management and calendar event customization. by @rafaelfoster in https://github.com/ulsklyc/oikos/pull/99

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.30.3...v0.31.0

Changed

• Birthdays: all family members can now view, edit, and delete any birthday entry regardless of who created it

Fixed

• Calendar: date inputs in the event modal reverted from type="text" to type="date", restoring the native date picker on iOS and other mobile browsers

What's Changed

Fixed

• i18n/el: corrected typo Διδαγραφή → Διαγραφή in recipes.deleteConfirm (fix was missing from v0.30.0 release build)

What's Changed

Added

• i18n: recipe strings translated in 13 locales (ar, el, es, fr, hi, it, ja, pt, ru, sv, tr, zh, uk) — contributed by @baragoon
• i18n: emptyHint.recipes added to all updated locales; Ukrainian locale additionally gains full emptyHint translations for all modules
• i18n: nav.recipes translated in all 13 locales

Fixed

• i18n/el: corrected typo Διδαγραφή → Διαγραφή in recipes.deleteConfirm

Special thanks to @baragoon for contributing the i18n translations!

Fixed

• Dashboard: weather widget background gradient was overridden by the higher-specificity .dashboard .widget rule, causing white text on a white background in light mode

Changed

• Docs: SPEC updated with Reminders, Birthdays, and Family Management tables and module sections; Users table reflects family_role and avatar_data columns
• Docs: README lists Reminders and Birthdays in the feature tagline and Highlights section
• Docs: BACKLOG completed-features table brought up to date through v0.29.1

What's Changed

• chore(deps): bump express-rate-limit from 8.3.2 to 8.4.1 in the production-dependencies group by @dependabot[bot] in https://github.com/ulsklyc/oikos/pull/94

New Contributors

• @dependabot[bot] made their first contribution in https://github.com/ulsklyc/oikos/pull/94

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.29.0...v0.29.1

What's Changed

• Improves the calendar event customization experience with persisted event icons and a richer reminder/date handling flow by @rafaelfoster in https://github.com/ulsklyc/oikos/pull/95

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.28.1...v0.29.0

Fixed

• Google Calendar: upsertGoogleEvents used db.transaction() instead of db.get().transaction(), causing a TypeError: Cannot read properties of undefined (reading 'status') on every initial sync — no events were imported

Added

• Navigation: sidebar nav items now show a native tooltip in the icon-only breakpoint (1024–1279 px), making all 11 modules discoverable without labels
• PWA: offline banner appears at the top of the screen when the device loses connectivity, and hides automatically when the connection is restored
• Desktop: global keyboard shortcuts — / (search), n (new), ? (shortcut overview), g d/t/c/s/n (navigate to module)
• Dashboard: widget order is now adjustable via drag-and-drop in the Customize modal; order is persisted in user preferences
• UX: deleteWithUndo utility in ux.js — birthdays deletion now offers an undo toast identical to tasks, notes, contacts, and meals
• UX: contextual onboarding hints added to empty states in all modules (tasks, contacts, notes, budget, shopping, birthdays, recipes)

Changed

• Dashboard: widget title icons use --color-text-secondary instead of the module accent color, reducing visual noise when all widgets are visible
• Performance: reminders.css is now lazy-loaded on demand instead of being included in every page load

Fixed

• UI: modal close button increased from 40 px to 44 px to meet Apple HIG minimum tap target
• UI: .widget__link elements now have a 44 px minimum touch target height with correct padding
• CSS: removed dead .fab CSS block — all pages use .page-fab
• UX: toasts can now be dismissed by swiping horizontally (> 40 px)

Fixed

• Google Calendar: null/undefined items returned by the Google API are now skipped instead of crashing the sync with a TypeError
• Google Calendar: the OAuth callback now awaits the initial sync before redirecting, so sync failures are correctly shown as an error in the UI instead of a false success

What's Changed

• Adds a more family-oriented member management flow and profile customization. by @rafaelfoster in https://github.com/ulsklyc/oikos/pull/91

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.26.5...v0.27.0

Changed

• Birthdays: increased maximum photo upload size from ~0.9 MB to 5 MB

Changed

• Dashboard: weather widget is now the first entry in the default widget order
• Dashboard: widgets in the same grid row now share the same height (via flex stretch), eliminating the patchwork gaps between shorter and taller widgets

Fixed

• Birthdays: "Discard changes?" dialog appeared immediately after successfully saving a birthday because closeModal() was called without force: true, triggering the dirty-form check on a programmatic close
• Dashboard (PWA): widget items (tasks, events, meals, notes, birthdays, shopping lists) occasionally blocked vertical swipe-to-scroll; added touch-action: pan-y so the browser passes vertical pan gestures through to the scroll container

Fixed

• Dashboard: KPI summary bar removed — it duplicated the same widget categories (tasks, calendar, birthdays…) that are already visible as full widgets directly below
• Dashboard: replaced the two-column main/side workspace layout with the established flat responsive grid so all widgets are consistently left-aligned across all screen sizes in the web view

Fixed

• Dashboard: path is not defined crash on every navigation — renderPage() referenced a bare path variable instead of route.path
• Dashboard: shopping lists widget caused a server-side SQL error (HAVING clause on non-aggregate query) resulting in an empty widget for all users

Added

• Birthdays module: track family birthdays with name, birth date, optional photo and notes; each entry is automatically synced to the calendar as a yearly recurring event and to the reminder system
• Birthdays dashboard widget: shows the next upcoming birthdays at a glance with age and days-until labels
• Family Participants dashboard widget: displays the number of users added to the family with avatar initials
• Budget Overview dashboard widget: shows monthly income, expenses, balance, savings rate and top expense category
• Dashboard widget customisation extended to include the three new widgets (birthdays, budget, family)
• Settings › General: admin option to set a custom application name shown in the sidebar, browser title and login screen
• Birthday translations across all 16 supported locales

Changed

• Service worker: mutable JS and CSS assets now use network-first caching to eliminate stale-asset issues after deployments

Fixed

• Test suite: makeInput mock in test-modal-utils.js now implements setAttribute/removeAttribute so blur-validation tests correctly verify the new aria-invalid attribute behaviour

Added

• Navigation: a dedicated screen-reader announcer (aria-live="polite") announces the page name on every route change instead of reading the entire page content

Changed

• Color pickers (notes, calendar): swatches now use role="radiogroup" with localized color names instead of hex codes, aria-checked reflects the selected state, and Arrow keys navigate between options
• Navigation badges: badge counts are now hidden from screen readers (aria-hidden); the parent nav link's aria-label is updated to include the count in plain text
• Main content area: removed aria-live="polite" from <main> — it was causing screen readers to read the full page on every navigation

Fixed

• Form validation: aria-invalid="true" is now set on invalid inputs in all modals and on the login form so screen readers can announce field errors

Changed

• Tasks: completing a task now animates the strikethrough line instead of snapping it on instantly
• Modal: save button shows a spinner during async API calls; the spinner disappears immediately if form validation fails, and on API error when the button is re-enabled
• Toast: the Undo button now gives tactile press feedback (scale + removes browser tap highlight) for reliable interaction within the 5-second window

Added

• Navigation: the "More" button now shows the name and icon of the active secondary module instead of the generic label, making it clear which module is open
• Dashboard: first-time onboarding overlay guides new users through the app's three core navigation areas

Changed

• Navigation: renamed "Pinnwand" to "Notizen" for clarity
• Login: submit button shows a spinner during authentication; empty fields are highlighted individually with red borders instead of a single generic error message

Fixed

• Modal: closing a modal when the form has unsaved changes no longer double-fires the guard due to a missing _isClosing flag; the close button now uses an arrow-function listener to avoid stale closure issues

Added

• Modal: closing a modal (via Escape, swipe, overlay click, or X button) now shows a "Discard changes?" confirmation dialog when the form has been modified since it was opened; saving or deleting bypasses the prompt

Changed

• Delete actions in all seven modules (tasks, notes, budget, calendar, contacts, meals, recipes) and shopping list deletion no longer show a confirmation dialog; instead the item is removed immediately and a toast with an Undo button gives a 5-second window to reverse the action before the API call is made

Changed

• Docs: SPEC.md updated to reflect all changes since v0.24.0 — Budget Entries table now documents subcategory column and DB-backed category FK; new Budget Categories, Budget Subcategories, and API Tokens data-model tables added; Settings section updated with API Tokens tab, corrected language list (added Japanese, Arabic, Hindi, Portuguese), and tab count (six → seven); Budget module section now covers subcategories, custom categories, and all new endpoints; new API Documentation section documents OpenAPI 3.0 spec and authentication options; design tokens --blur-2xs and --module-reminders added to Colors section
• Docs: README.md Highlights updated — Budget Tracking now mentions DB-backed subcategories; new API Tokens entry added

Changed

• Dashboard: empty widget states now render as a compact inline row (icon + text) instead of a centred column, saving ~40px of vertical space per empty widget on mobile

Fixed

• Dashboard: widget body bottom padding increased from 12px to 16px for slightly more breathing room
• Dashboard: widget reordering in "Anpassen" modal now uses the View Transition API for smooth animations; respects prefers-reduced-motion

Added

• API token authentication: admins can create named Bearer / X-API-Key tokens for external integrations; tokens are SHA-256-hashed at rest, support optional expiry and revocation, and track last-used timestamp
• Settings: new "API Tokens" section for admins to create and revoke tokens; the full token value is shown only once immediately after creation
• OpenAPI 3.0 specification served at /api/v1/openapi.json and /openapi.json (download via ?download=1)
• Budget: new endpoints GET /api/v1/budget/categories and GET /api/v1/budget/categories/:key/subcategories with optional ?lang= localisation

Changed

• server/logger.js now serialises Error objects into structured JSON fields (name, message, stack) instead of logging {}

Added

• Accessibility: layout.css now has a @media (prefers-contrast: more) block — ghost and secondary buttons get explicit borders, cards lose decorative shadows, form inputs get a 2px border, focus rings become thicker (3px, 4px offset), and active nav items get an underline as a colour-independent indicator

Fixed

• Design tokens: corrected --sidebar-width-expanded comment from 1280px+ to 1440px+ to match the actual breakpoint in layout.css

Added

• Design tokens: --blur-2xs: blur(2px) added to the blur scale — fills the gap below --blur-xs (4px), used for subtle overlay blurs
• Design tokens: --module-reminders: #0E7490 (Cyan-700, WCAG AA) added for the reminders feature; dark mode variant #22D3EE (Cyan-400)

Fixed

• Design tokens: hardcoded blur(16px), blur(2px), and blur(12px) in layout.css replaced with var(--blur-md), var(--blur-2xs), and var(--blur-sm) — prefers-reduced-transparency now correctly disables all backdrop-filter effects including bottom nav, more-sheet backdrop, and sticky headers
• Accessibility: layout.css now has a prefers-reduced-transparency block for .nav-bottom, .more-backdrop, and .sticky-header — these three elements previously kept their backdrop-filter active even when the user requested reduced transparency
• Reminders: reminder bell icon in toasts now uses var(--module-reminders) instead of the generic var(--color-accent)

Fixed

• Design tokens: added missing --shadow-xl and --shadow-xs tokens (with dark mode variants) — resolves undefined CSS custom property references in kanban drag ghost and dashboard widget toggle
• Design tokens: --color-surface-raised replaced with --color-surface-hover in dashboard.css — was undefined, causing unstyled hover states in the widget customizer
• Design tokens: --color-text replaced with --color-text-primary in dashboard.css — was undefined, causing invisible text on hover in the widget customizer
• Design tokens: hardcoded font-weight values (700, 500, 600) in reminders.css replaced with --font-weight-bold, --font-weight-medium, --font-weight-semibold

Fixed

• Accessibility: Skip-to-content link added — keyboard users can bypass navigation and jump directly to main content
• Accessibility: Removed role="presentation" from modal overlay — restores screen reader access and resolves conflict with existing aria-label
• Accessibility: Search overlay now traps keyboard focus — tabbing can no longer escape the overlay into the hidden page
• Interaction: Modal swipe-to-close — dragging flag stays active on upswing so the panel snaps back correctly instead of getting stuck
• Rendering: SVG gradient IDs in the logo are now unique per render — prevents DOM ID collisions on multiple mounts
• Touch targets: .btn--icon-sm minimum size raised from 36×36 px to 44×44 px (--target-base) — meets iOS minimum touch target guideline
• Design tokens: Added --target-base: 44px; documented --target-sm: 32px as visual-only (not a touch target)

Added

• Budget: expense categories are now stored in the database (budget_categories table) as stable English slugs, replacing hardcoded German strings
• Budget: subcategory support for all expense entries — 35 predefined subcategories across 8 top-level categories (housing, food, transport, personal_health, leisure, shopping_clothing, education, financial_other)
• Budget: users can add custom categories and subcategories directly from the entry modal via inline "+ category" / "+ subcategory" buttons
• Budget: new API endpoints POST /api/v1/budget/categories and POST /api/v1/budget/categories/:key/subcategories for custom category/subcategory creation
• Budget: subcategory displayed alongside category in each entry's metadata line
• Budget: CSV export now includes a subcategory column and English column headers
• i18n: all 14 non-German locales extended with new budget category keys (catHousing, catTransport, catPersonalHealth, catShoppingClothing, catFinancialOther) and all 35 subcategory label keys
• All server-side log messages and API error strings translated from German to English — contributed by @rafaelfoster

Changed

• Budget category labels for existing entries migrated to new slug keys via DB migration 15; display names remain fully localised through the i18n system

Fixed

• Italian (it) locale: translated all missing strings in the recipes section (nav.recipes, meals.savedRecipeLabel, meals.savedRecipePlaceholder, meals.saveAsRecipe, meals.recipeScaleLabel, and all recipes.* keys) — contributed by @albanobattistella

Changed

• Design tokens: replaced all remaining hardcoded color and size values in layout.css, glass.css, dashboard.css, and reminders.css with CSS custom properties
• Design tokens: added --text-2xs, --color-overlay-glass, --color-backdrop-glass, --glass-border-overlay, --glass-highlight-mid, --glass-inset-bottom-base, --glass-inset-bottom-hover, --glass-inset-thumb, and --glass-inset-input to tokens.css

Fixed

• All non-German locales (ar, el, en, es, fr, hi, it, ja, pt, ru, sv, tr, uk, zh): added missing translation keys for nav.more, calendar.ics.reset/resetToast, settings.ics.*, tasks.filter*, tasks.swiped*, search.*, and reminders.* — these were falling back to German strings for all non-German users

What's Changed

• fix: update swedish translation by @olsson82 in https://github.com/ulsklyc/oikos/pull/81

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.23.13...v0.23.14

Security

• Installer: replaced template-literal URL construction with the URL constructor when setting the final "Open Oikos" link, eliminating a potential DOM-based XSS vector (CodeQL js/xss-through-dom, GitHub Advisory #7)

Fixed

• iOS PWA: bottom navigation bar gap resolved by removing overflow: hidden from <html> (iOS Safari bug: this property clips position: fixed descendants) and restoring the body::after fill approach; nav bar height is no longer inflated by the safe area padding

Fixed

• iOS PWA: bottom navigation bar now extends into the home indicator safe area via padding-bottom: env(safe-area-inset-bottom), reliably eliminating the gap at the screen bottom

Fixed

• iOS PWA: safe area fill now uses the same surface color as the bottom navigation bar, so it matches in both light and dark mode

Fixed

• iOS PWA: a body::after pseudo-element now fills the home indicator safe area with the same glass background as the bottom navigation, eliminating the gap between the nav bar and the screen edge

Fixed

• iOS PWA: bottom navigation bar now extends into the home indicator safe area, removing the gap between the nav and the screen edge

Fixed

• Navigation: sidebar logo now uses the official docs/logo.svg artwork (house + chimney on gradient background) instead of a generic Lucide home icon; gradient colors are driven by CSS tokens

Changed

• Dashboard: greeting widget now adapts its gradient to the time of day — warm amber-orange in the morning (before 11:00), indigo during the day, and violet in the evening (after 18:00)
• Dashboard: FAB speed-dial open/close rotation now uses a spring cubic-bezier for a more natural feel
• Navigation: sidebar logo is now a proper SVG house icon on a gradient background instead of the CSS letter placeholder

Changed

• Dashboard: each widget now uses its module accent color (green for tasks, violet for calendar, orange for meals, pink for shopping, amber for notes) for its header icon, badge, and link instead of the global indigo accent
• Dashboard: meal slots now display their type-specific color (amber for breakfast, green for lunch, indigo for dinner, orange for snack) on icon and label when a meal is planned
• Dashboard: pinned note cards now show a subtle background tint matching the note's color
• Dashboard: widget and card hover lift increased from 1 px to 2 px for more perceptible feedback on desktop
• Navigation: active bottom-nav tab now shows a pill-shaped highlight behind the icon for a clearer location indicator
• Shopping widget: progress bar height increased from 4 px to 6 px for better visual weight
• Empty state icons inside widgets now use the tertiary text color instead of the disabled color for improved visibility

Changed

• Docs: web installer (node tools/installer/install-server.js) is now Option A in all installation guides (README.md, docs/installation.md, GitHub Pages docs/install.html); the pre-built Docker image method is relabelled Option B and the build-from-source method Option C

Fixed

• Weather widget: wind speed is no longer multiplied by 3.6 when OPENWEATHER_UNITS=imperial (the API already returns mph; the conversion was only correct for metric/standard)
• Weather widget: wind unit label now shows mph for imperial and km/h for metric/standard instead of always showing km/h

Fixed

• Calendar: ICS-synced events now render at the correct local hour and day in week/day/month/agenda views; day-matching and hour-positioning previously used raw string slices which returned UTC values instead of browser-local time for events stored with a Z suffix

Security

• Installer: host and port inputs are now validated against a strict hostname regex and integer range check (1–65535) before being used in any DOM sink or URL template — prevents XSS-through-DOM (CodeQL js/xss-through-dom alert #7)

Added

• Calendar: external_calendars DB table (migration v14) stores display name and color per synced Google/Apple calendar; calendar_events gains a calendar_ref_id FK used for join-based name/color lookup in all calendar and dashboard queries
• Calendar: Google and Apple sync services now fetch the calendar's display name and background color via upsertExternalCalendar() and persist them to the new table
• Calendar: event popup, agenda, month, week, and day views now show the external calendar name as a colored event-cal-label badge when cal_name is present
• Calendar: event popup and dashboard events list now display the event location using fmtLocation() which strips RFC 5545 backslash-escapes and normalizes semicolons/newlines to comma-separated inline text
• Utils: fmtLocation(raw) helper added to html.js for normalizing ICS LOCATION property strings
• i18n: task due-date keys (tasks.overdue, tasks.dueSoon, tasks.dueToday, tasks.dueTomorrow, tasks.noDueDate) added to all 16 supported locale files

Changed

• Dashboard: widget headers flattened — glass card replaced with transparent surface + bottom border; clock icon added to the urgent-tasks chip; overdue and due-soon counts computed separately using effectiveDue() for accuracy
• Glass toolbar (desktop ≥ 1024 px): rounded card style replaced with flat background + border-top: 3px solid var(--module-accent) + bottom border only, consistent with other page toolbars
• Shopping and Budget page headers: border-top: 3px solid var(--module-accent) accent stripe added, matching the visual language of all other module headers
• Calendar agenda: event color indicator changed from a 10 px circle to a 3 px full-height left bar, matching the dashboard upcoming-events style
• Tasks: filter panel now defaults to status: 'open' on first load instead of showing all tasks including completed ones
• SW cache: bumped to oikos-shell-v50 / oikos-pages-v45 / oikos-assets-v45; strategy changed from Stale-While-Revalidate to Cache-First with post-update bypass window

Fixed

• Tasks / Dashboard: sort order now strictly follows effective due date ascending; overdue tasks always surface first; priority used only as tiebreaker. Server-side sort moved to JavaScript for timezone-correct due_time handling
• Tasks: due date chip now shows the time component when due_time is set; overdue/soon/today/tomorrow states computed against current moment rather than midnight
• Dashboard: widget navigation links changed from <a href> to <button type="button"> to prevent iOS Safari touch-event interception
• Dashboard: FAB shortcut buttons now programmatically open the target page's add modal directly without requiring a second tap
• Dashboard: task items open a quick-action sheet (Edit / Mark done) instead of navigating directly
• Calendar: week-view allday row no longer stretches column widths when event titles are long
• Calendar: incorrect || 'var(--color-accent)' color fallback removed from all five event rendering sites
• Modal: sheet swipe adds a 10 px dead zone; touchend transform reset deferred via requestAnimationFrame — fixes iOS buttons not responding after a partial swipe
• Modal: race condition fixed where opening a confirm dialog before the previous close animation finished caused its buttons to be permanently unresponsive
• Router: page auto-reloads 8 s after the SW-update toast is shown
• Layout: modal overlay overflow: hidden; form inputs get min-width: 0; box-sizing: border-box to prevent overflow in two-column grid containers
• PWA: double padding-bottom on PWA bottom nav removed, fixing extra gap on iPhone safe-area screens
• Reminders: field grid changed to repeat(2, minmax(0, 1fr)) to prevent content overflow

What's Changed

• fix(docs): update setup commands formatting for better readability by @baragoon in https://github.com/ulsklyc/oikos/pull/76

Full Changelog: https://github.com/ulsklyc/oikos/compare/v0.22.2...v0.22.3

Fixed

• Locale file (de.json) no longer causes a JSON parse error that made the app completely unusable. The recipes.deleteConfirm value contained a bare ASCII double-quote inside a JSON string, which prematurely terminated the string and broke every page load.
• ICS calendar subscriptions now respect the COUNT parameter in RRULE (RFC 5545). Previously, events with a limited number of occurrences (e.g. RRULE:FREQ=WEEKLY;COUNT=3) were incorrectly shown as upcoming because the expansion loop iterated to the sync window end regardless of the occurrence limit.

Fixed

• App no longer gets stuck on the "Oikos" splash screen when opened in a new tab. Two root causes addressed: (1) sw.js was not updated in v0.22.0, so the browser kept the old Service Worker and served stale cached files via Stale-While-Revalidate — cache versions are now bumped (shell v35, pages v30) to force reinstallation and fresh file delivery. (2) A fatal error in initI18n() (e.g. locale fetch failure while offline) left the splash screen visible forever — the router IIFE now catches such errors, hides the splash screen, and renders a recoverable error state.
• Service Worker now pre-caches /pages/recipes.js and /styles/recipes.css introduced in v0.22.0, enabling offline access to the Recipes page.

Added

• Recipes module: create, edit, duplicate, and delete reusable recipes with title, notes, a recipe link, and a per-ingredient category. Accessible via the new /recipes route and nav entry.
• "Add to meal plan" action on recipe cards navigates to Meals and pre-fills the modal with the selected recipe.
• Meals modal: select a saved recipe to auto-fill title, notes, URL, and ingredients; scale ingredient quantities by a numeric factor; save the current meal as a new recipe in one click.
• GET/POST /api/v1/recipes, PUT/DELETE /api/v1/recipes/:id REST endpoints with full validation and ingredient sync.
• Migration 13: recipes and recipe_ingredients tables; recipe_id FK column on meals.