Fix Claude CLI streaming: pass-through SSE strings, handle assistant/tool_use events, non-streaming via --output-format json

Bump version to 0.99.57; add Claude CLI proxy mode

- Add aisbf/cli_mode.py: detect claude binary in PATH at startup
- Add ClaudeCliSessionManager: per-user isolated temp config dirs with
  10-minute idle cleanup and asyncio subprocess-based request proxying
- Add ClaudeProviderHandler CLI methods: _get_cli_credentials,
  _messages_to_cli_prompt, _handle_cli_streaming_request,
  _handle_cli_request, _oauth_tokens_to_cli_credentials
- Wire CLI mode check into _handle_request_with_model; falls through to
  HTTP API mode when no CLI credentials are configured
- Add 'Use Claude CLI mode' checkbox in provider config (both admin and
  user templates): derives credentials from existing OAuth2 tokens
- Add explicit CLI credentials file upload (file_type=cli_credentials);
  DB users: stored in user_oauth2_credentials; admin: path in providers.json
- Update Claude provider warning notices to scope risk to HTTP API mode
  and clarify that claude -p is permitted by Claude's terms of service
- Update CHANGELOG.md, DOCUMENTATION.md, README.md

- Fix ReferenceError: url_for is not defined in pricing JS (was calling
  server-side Jinja2 helper from client-side JavaScript)
- Add new POST /dashboard/subscribe/{tier_id} endpoint with smart payment
  logic: deducts from wallet if sufficient, otherwise charges saved Stripe
  card for the exact plan amount; returns clear error when neither is
  available
- Add POST /dashboard/subscribe/free for downgrade flow
- Fix plan description field names (max_requests_day → max_requests_per_day,
  etc.) across pricing.html and subscription.html; numbers now formatted
  with thousands separators
- Fix pricing card layout so a single plan is centered and capped in width
  instead of stretching full-screen
- Add is_default and is_active to get_user_tier() return dict
- Add upgrade CTA banner in dashboard overview subscription section when
  higher plans are available
- Add subscription hint banner in wallet page
- Add new Usage & Quotas page (/dashboard/usage) with progress bars for
  daily/monthly requests, providers, rotations, autoselections, and tokens;
  bars warn at 75% and turn red at 90%
- Add Usage link to main nav and account dropdown
- Register usage.html in setup.py data_files

- Add Reply-To header using sender's email for all contact submissions
- Show email input in contact modal for non-logged-in users
- Allow unauthenticated contact form submissions (email required)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

- Replace relative DOCUMENTATION.md links in README with absolute Gitea URLs (/blob/master/)
- Update dashboard about page regex to rewrite both relative and absolute doc links
- Bump version to 0.99.52
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

- Add /dashboard/profile/upload-pic/chunk endpoint: assembles chunks server-side,
  validates MIME type and 5 MB limit, base64-encodes and stores in DB + session
- Remove profile_pic from the form POST (was limited by proxy body size limits)
- Profile template: file input triggers JS chunked upload, shows progress bar and
  inline status; client-side pre-check for size/type before any network request
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

- Add DatabaseManager.placeholder property returning '?' (SQLite) or '%s' (MySQL)
- Fix paypal_handler.py: payment_methods INSERT
- Fix service.py: payment_methods INSERT for PayPal vault
- Fix subscription/manager.py: all SQL in create/upgrade/downgrade/cancel_subscription
- Fix subscription/renewal.py: all SQL in process_renewals/_renew_subscription/_cancel_subscription
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

- Replace invalid 'ON CONFLICT DO NOTHING' (PostgreSQL) with 'INSERT IGNORE' (MySQL)
  for user_crypto_wallets upsert
- Use repr() and full traceback in exception logging so blank-message exceptions
  are still diagnosable
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

- get_user_by_id and get_user_by_email now include profile_pic in SELECT
- Store profile_pic in session on login and update it on profile save
- base.html and user_index.html use session.profile_pic, falling back to gravatar
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

TEXT maxes at 64 KB; base64-encoded images easily exceed that.
Migration auto-widens existing installations on next startup.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

v0.99.51: security hardening — bcrypt passwords, rate limiting, auth fixes, safe cache serialisation

- Migrate password hashing from SHA-256 to bcrypt with backward-compatible auto-upgrade on login
- Add login rate limiting (10 attempts / 5 min window, 10 min lockout) per IP+username
- Force password change when default admin/admin credentials are detected (C3)
- Fix /api/admin/* middleware to require valid admin session instead of unconditional bypass (C5)
- Replace pickle serialisation in all cache backends (Redis, SQLite, MySQL, File) with JSON-first encoding; legacy pickle data still readable (H9)
- Fix PayPal webhook: implement 6 previously empty handler stubs with real wallet credit/debit logic (H1)
- Fix Stripe: remove no-op _handle_payment_succeeded stub, fix real implementation to use WalletManager (C7)
- Fix crypto address derivation race condition via BEGIN EXCLUSIVE / SELECT FOR UPDATE (H6)
- Fix PayPal webhook verification: return False (not True) when webhook_id not configured (C6)
- Fix pre-existing password reset flow using non-existent DB methods
- Fix CORS: allow_credentials=False to be compatible with wildcard origins
- Fix session cookie flags: same_site=lax, https_only via AISBF_HTTPS env var
- Fix background task GC: hold strong references to prevent premature task collection
- Remove dead Jinja2 environment and commented-out analytics init code
- Apply XSS escaping to user-controlled innerHTML in analytics and autoselects dashboard templates
- Update docs: security warnings in README and DEBUG_GUIDE, missing endpoints in ENDPOINTS.md
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Add wallet support to MCP endpoints: implement wallet balance and transaction tools for both global and user-specific MCP access, update documentation with wallet MCP tools and examples

Complete documentation refactoring: updated CHANGELOG with wallet system and docs reorganization, fixed PYPI.md versions, added wallet API examples to API_EXAMPLES.md

Fix token access documentation: global tokens can only access global endpoints, not user-specific endpoints

Fix token access documentation: clarify that user tokens can access global endpoints, global tokens have admin access

Complete documentation reorganization: move donations to README top, reduce README size, add comprehensive wallet documentation, fix directory tree, remove duplications

Task 7: Implement wallet operations, top up flow, auto top up logic, subscription renewal integration with all tests

- Update _renew_subscription() to check wallet first before payment method
- Add wallet debit for renewal amount with transaction logging
- Implement auto top up trigger when balance insufficient
- Add renewal retry after successful auto top up
- Maintain grace period and existing error handling
- Add trigger_auto_topup function to scheduler.py
- Add test cases for wallet renewal flow

- Add _create_wallet_tables() migration method in PaymentMigrations class
- user_wallets table with balance, currency, auto topup configuration
- wallet_transactions table with full transaction history
- Add proper table indexes for performance
- Update test_migrations.py to verify new tables exist
- All migration tests passing