🎉 Release v0.8.0

This release adds production-ready Docker deployment, complete user authentication, and a 4-layer API protection system.

🐳 Docker Deployment

• Production-ready containerization with docker-compose
• Health checks and container-specific Alembic configuration
• Comprehensive deployment documentation

🔐 Authentication System

• Complete user authentication flow (signup, login, password reset)
• Profile management UI
• Flutter auth pages with AuthGate widget
• Backend password reset router and validation utilities

🛡️ API Protection (4-Layer System)

Prevents AI agents from downgrading GPT-5 to GPT-4 or adding unsupported parameters:

1. Runtime validation in config.py
2. Import-time validation in openai.py
3. Pre-commit hook: validate_no_model_downgrades.py
4. Pre-commit hook: validate_api_payload_structure.py

📚 Documentation

• docs/DOCKER.md - Docker deployment guide
• docs/AUTHENTICATION.md - Auth system documentation
• docs/AI_AGENT_PROTECTION.md - API protection details
• QUICKSTART_AUTH.md - Quick start guide

🧪 Test Infrastructure

• Organized test scripts in tests/manual/
• Test scripts now use environment variables (no hardcoded secrets)
• New scripts/test/Test-AuthFlow.ps1 for auth flow testing

🔧 Technical Improvements

• Fixed all OpenAI providers to use October 2025 Responses API
• Enhanced user schemas and auth endpoints
• Updated Flutter dependencies and regenerated platform plugins
• Repository cleanup and secret removal

Full Changelog: v0.1.0-m4...v0.8.0

Highlights

• Accuracy harness + label-triggered comment workflow (PR 20 comment)
• Latency bench workflow + docs (PR 21 comment)
• Hosting quickstart doc for demo flags (SERVE_FLUTTER_WEB=1, ALLOW_DEV_CORS=1)

Assets

• build_web.zip (Flutter web bundle)

v0.1.0-m3 — Reader V0

What's new

• Reader V0 slice with tap-to-analyze, lemma+morph tokens, optional LSJ glosses & Smyth anchors, and BYOK client UX.
• Demo packaging: SERVE_FLUTTER_WEB=1 mounts client/flutter_reader/build/web at /app/; scripts in scripts/dev/run_demo.{sh,ps1} bootstrap DB, run migrations from the root alembic.ini, build the Flutter web bundle, and launch Uvicorn with ALLOW_DEV_CORS=1.
• CI publishes the Flutter web bundle artefact (build_web.zip) on tags matching v0.1.0-*.

How to try it

1. scripts/dev/run_demo.sh (Unix) or scripts/dev/run_demo.ps1 (PowerShell)
2. Open http://127.0.0.1:8000/app/
3. Optional LSJ/Smyth data via /reader/analyze?include={"lsj":true,"smyth":true}

Env flags default off; enable SERVE_FLUTTER_WEB=1 and ALLOW_DEV_CORS=1 only for local demo builds.