Bump sqlalchemy from 2.0.51 to 2.0.52

.dockerignore

@@ -0,0 +1,43 @@
+# Secrets and local-only files — never bake these into the image.
+# The app reads all config via os.environ, populated by docker-compose's
+# env_file directive at container start; it never reads a file from disk,
+# so excluding .env here doesn't change runtime behavior at all.
+.env
+.env.*
+!.env.example
+
+# Git metadata — large, irrelevant to the running app, and would otherwise
+# ship the full commit history inside every built image.
+.git/
+.gitignore
+.gitattributes
+
+# Runtime data — volume-mounted at /app/data and /app/csv-data; baking in
+# whatever happens to be on the build host's disk at build time would be
+# both useless (shadowed by the volume mount) and a data leak.
+data/
+csv-data/
+
+# Python cache / virtual envs
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.pytest_cache/
+.venv/
+venv/
+
+# Docs — only needed for GitHub's README rendering, not by the running app
+docs/
+
+# Local design references — not part of the app
+designidea.webp
+
+# OS cruft
+.DS_Store
+Thumbs.db
+desktop.ini
+
+# Editor/tooling
+.worktrees/
+.superpowers/

.env.example

@@ -4,14 +4,34 @@
 # Flask
 SECRET_KEY=change-me-to-a-long-random-string
 
+# Timezone the container's clock (and therefore the 3:00 AM nightly scheduler)
+# runs on. Without this, the container defaults to UTC regardless of where
+# it's hosted, so "3:00 AM" silently means 3:00 AM UTC, not your local time.
+# Use an IANA name, e.g. America/Toronto, America/New_York, Europe/London.
+# See: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
+TZ=America/Toronto
+
 # Feature flags
 USE_AI_WOD=false
 
-# Anthropic API key — only needed if USE_AI_WOD=true. When set, the daily
-# WOD's warm-up/cool-down/coaching notes are written by Claude instead of
-# the static templates. Get a key at https://console.anthropic.com/
+# Optional AI "coach's read" on the Insights page. When true (and a key is set
+# below), Claude writes a short first-person synthesis of your computed
+# insights. The insight cards themselves are always rule-based and show either
+# way. Off by default.
+USE_AI_INSIGHTS=false
+
+# Anthropic API key — needed only if USE_AI_WOD=true or USE_AI_INSIGHTS=true.
+# When set, the daily WOD's warm-up/cool-down/coaching notes and/or the
+# Insights coach's read are written by Claude instead of static text.
+# Get a key at https://console.anthropic.com/
 ANTHROPIC_API_KEY=
 
+# Background scheduler — nightly Concept2 sync, PB recalc, badge eval, and DB
+# backup. On by default. Set to false on a secondary/dev instance so it doesn't
+# run the nightly jobs (and send duplicate notification emails) alongside the
+# instance that owns your live data.
+RUN_SCHEDULER=true
+
 # Concept2 API
 C2_CLIENT_ID=
 C2_CLIENT_SECRET=

.github/dependabot.yml

@@ -0,0 +1,28 @@
+version: 2
+updates:
+  # Python dependencies (requirements.txt, requirements-dev.txt)
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+
+  # Docker base image (Dockerfile)
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+
+  # GitHub Actions used in .github/workflows/
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"

.github/workflows/tests.yml

@@ -0,0 +1,26 @@
+name: Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  pytest:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.11"
+          cache: "pip"
+          cache-dependency-path: requirements-dev.txt
+
+      - name: Install dependencies
+        run: pip install -r requirements-dev.txt
+
+      - name: Run tests
+        run: pytest -v

.gitignore

@@ -33,6 +33,14 @@ csv-data/
 # Project spec files
 row-tracker-spec.md
 docs/redesign-spec.md
+docs/superpowers/
+docs/marketing-plan.md
+
+# Local design references
+designidea.webp
 
 # Local git worktrees
 .worktrees/
+
+# Local-only deploy trigger (references personal homelab; not for the public repo)
+deploy.sh