fix: cap request bodies, link login error, add book-form retry, guard double add

Limit request bodies to 1 MiB (413 JSON), wire aria-describedby on the login form, add Retry and cancellation to the book form load, disable Add entry while a note POST is in flight, and poll pg_isready in README. Claude-Session: https://claude.ai/code/session_01M9MLit5Ko3X4s7rzC5Kv7X
2026-10-02 14:36:14 -05:00
parent 35ad0b13e2
commit 2512c67893
9 changed files with 72 additions and 13 deletions
@@ -14,7 +14,7 @@ Optionally set `PASSWORD_PEPPER` (≥ 32 chars). Without it, a development peppe
 ```bash
 mise trust && mise install                     # Python 3.14, Node 24
 docker compose up -d db                        # postgres:16 on 127.0.0.1:5432
-docker compose exec -T db pg_isready -U postgres   # repeat until it reports "accepting connections"
+until docker compose exec -T db pg_isready -U postgres; do sleep 1; done
 mise exec -- python -m venv .venv && .venv/bin/pip install -r backend/requirements.txt
 mise exec -- npm install
 .venv/bin/python backend/app.py                # API on :5000