chore(release): v1.32.13 — withhold malformed status assessment output

Bump to 1.32.13, regenerate the OpenAPI version stamp, and record the
CHANGELOG entry for the truncated-assessment fix.

Refs #608

CHANGELOG.md

@@ -2,6 +2,29 @@
 
 ## [Unreleased]
 
+## [1.32.13] — 2026-07-24
+
+An Insights assessment card no longer shows the raw model output when a response
+comes back incomplete. If the underlying text was cut off, the card now falls
+back to its computed summary instead of printing the unfinished data.
+
+- **A cut-off assessment stays hidden.** The per-metric assessment cards, like
+  the one for resting pulse, ask the model for a small structured reply and then
+  read the summary out of it. When that reply arrived truncated, the reader
+  could see the whole envelope on the card, including the property name, the
+  braces, the quotes, and the escaped line breaks. The card now recognises an
+  incomplete or malformed reply and serves the deterministic summary it already
+  falls back to when no model text is available, so the raw output never reaches
+  you.
+- **Plain-text assessments are untouched.** A model that answers in an ordinary
+  sentence rather than the structured shape is still shown as written, so this
+  change only affects broken replies and leaves normal ones exactly as before.
+- **The same guard covers the other cards.** Medication compliance and the
+  derived-score assessments read their summary the same way, so they now hold
+  back a broken reply too rather than persisting it as the day's text.
+
+Thanks to @lutzkind for reporting this one.
+
 ## [1.32.12] — 2026-07-24
 
 A mood you log late in the evening now lands on the day you logged it, in your

docs/api/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: HealthLog API
-  version: 1.32.12
+  version: 1.32.13
   description: >-
     Self-hosted personal-health-tracking PWA — public API surface for the iOS native client and external ingest.
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "healthlog",
-  "version": "1.32.12",
+  "version": "1.32.13",
   "description": "Self-hosted personal-health-tracking PWA with Withings integration, AI insights, and doctor-report PDF export.",
   "license": "PolyForm-Noncommercial-1.0.0",
   "homepage": "https://healthlog.dev",

public/sw.js

@@ -36,7 +36,7 @@ try {
 // v1.4.38.4 → v1.4.42. Do not hand-edit; bump `package.json` and rebuild.
 const CACHE_VERSION =
   (typeof self !== "undefined" && self.__APP_VERSION__) ||
-  /* @sw-version-fallback */ "v1.32.12";
+  /* @sw-version-fallback */ "v1.32.13";
 const STATIC_CACHE = `healthlog-static-${CACHE_VERSION}`;
 const PAGE_CACHE = `healthlog-pages-${CACHE_VERSION}`;
 // v1.18.6 — read-only data cache for a curated allowlist of safe GET `/api/*`