chore(release): v1.28.9 — document chat in the coach dialog

Chatting about a document opens the coach chat dialog scoped to that document,
entered from a neutral icon in the document's top-right (matching insights),
instead of a separate inline panel. The document chat's stricter footing is
unchanged — one document only, no health-record context, no tools, plain text.

CHANGELOG.md

@@ -2,6 +2,15 @@
 
 ## [Unreleased]
 
+## [1.28.9] — 2026-07-09 — Document chat in the coach dialog
+
+Chatting about a document now opens the coach chat dialog, scoped to that
+document ("Chatting about: …"), instead of a separate inline panel. The entry
+is a neutral icon in the top-right of the document, matching the insights
+surface. The document chat keeps its stricter footing unchanged — it reads only
+the one document, carries no health-record context, uses no tools, and renders
+as plain text.
+
 ## [1.28.8] — 2026-07-09 — Documents: automatic when set, cleaner when not
 
 With automatic AI reading turned on, a document is read on upload — so the

docs/api/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: HealthLog API
-  version: 1.28.8
+  version: 1.28.9
   description: >-
     Self-hosted personal-health-tracking PWA — public API surface for the iOS native client and external ingest.
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "healthlog",
-  "version": "1.28.8",
+  "version": "1.28.9",
   "description": "Self-hosted personal-health-tracking PWA with Withings integration, AI insights, and doctor-report PDF export.",
   "license": "PolyForm-Noncommercial-1.0.0",
   "homepage": "https://healthlog.dev",

public/sw.js

@@ -36,7 +36,7 @@ try {
 // v1.4.38.4 → v1.4.42. Do not hand-edit; bump `package.json` and rebuild.
 const CACHE_VERSION =
   (typeof self !== "undefined" && self.__APP_VERSION__) ||
-  /* @sw-version-fallback */ "v1.28.8";
+  /* @sw-version-fallback */ "v1.28.9";
 const STATIC_CACHE = `healthlog-static-${CACHE_VERSION}`;
 const PAGE_CACHE = `healthlog-pages-${CACHE_VERSION}`;
 // v1.18.6 — read-only data cache for a curated allowlist of safe GET `/api/*`