2 Commits

Include renames

Author	SHA1	Message	Date
binglua	45f1d2e701	fix(privacy): zero third-party requests from browser (v0.2.2) ... - Remove Google Fonts links from web dashboard and testpage: opening the page no longer sends requests (IP/UA) to Google; system font stack renders identically, works offline and loads faster in CN - Override default python-httpx User-Agent with a browser UA on all Xiaomi requests (matches cookie-based login origin, removes script fingerprint) - PRIVACY.md: document zero-CDN frontend and minimal outbound headers	2026-09-03 22:47:34 +08:00
binglua	2dd32f1ee6	feat: REST API with API keys, QR login, and web dashboard (v0.2.0) ... - REST API (FastAPI): all data endpoints, sync (foreground/background), coverage stats, interactive docs at /docs - API key system: exchange Xiaomi credentials for mif_sk_* keys (multi-account contexts, last-used tracking, prefix revocation); static key via MI_FITNESS_API_KEY, admin endpoints via MI_FITNESS_ADMIN_KEY - QR code login: reverse-engineered Xiaomi universal QR flow (sid=xiaomiio), auto-issues API key after scan confirmation - Built-in web dashboard (Flask): visual console for all endpoints, key management, QR login; reverse proxy with server-side key relay - Standalone testpage/ console (python app.py, no install needed) - Fix: pin mcp<2 (SDK 2.x removed Server.list_tools, broke startup) - CI: install [all,dev] extras; docs: full technical documentation and QR login implementation guide	2026-09-03 22:28:31 +08:00