release: v0.17.2 — Settings page + .env editor removal

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: DavidsonGomes

CHANGELOG.md

@@ -5,6 +5,25 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.17.2] - 2026-04-12
+
+### Added
+
+- **Settings page** — new `/settings` page in the dashboard with three tabs: Workspace config (`workspace.yaml`), Routines management (`routines.yaml`), and Reference (CLAUDE.md, Makefile, Commands)
+- **Workspace config UI** — edit workspace name, owner, company, language (20 locales), timezone, and dashboard port
+- **Routines toggle & inline edit** — enable/disable routines with toggle switches, edit schedules inline, grouped by frequency (daily/weekly/monthly)
+- **Settings backend API** — 9 new endpoints for workspace and routine CRUD with audit logging and scheduler reload via sentinel file
+- **API patch method** — `api.patch()` added to frontend API helper
+
+### Changed
+
+- **Config page replaced by Settings** — old `/config` removed, `/config` redirects to `/settings`
+- **Sidebar updated** — "Settings" added as first item in System group
+
+### Removed
+
+- **.env editor** — removed from both frontend and backend (security risk; use terminal for .env changes)
+
 ## [0.17.1] - 2026-04-12
 
 ### Added

cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evoapi/evo-nexus",
-  "version": "0.17.1",
+  "version": "0.17.2",
   "description": "Unofficial open source toolkit for Claude Code — AI-powered business operating system",
   "keywords": [
     "claude-code",

dashboard/backend/app.py

@@ -175,6 +175,7 @@ def auth_middleware():
 from routes.triggers import bp as triggers_bp
 from routes.backups import bp as backups_bp
 from routes.providers import bp as providers_bp
+from routes.settings import bp as settings_bp
 
 app.register_blueprint(overview_bp)
 app.register_blueprint(workspace_bp)
@@ -196,6 +197,7 @@ def auth_middleware():
 app.register_blueprint(triggers_bp)
 app.register_blueprint(backups_bp)
 app.register_blueprint(providers_bp)
+app.register_blueprint(settings_bp)
 
 # --------------- Social Auth blueprints ---------------
 from auth.youtube import bp as youtube_auth_bp

dashboard/backend/routes/config.py

@@ -1,8 +1,7 @@
 """Config endpoint — CLAUDE.md, ROUTINES.md, ROADMAP.md, .env, commands, Makefile."""
 
 import re
-from flask import Blueprint, jsonify, request, Response, abort
-from flask_login import login_required
+from flask import Blueprint, jsonify, Response, abort
 from routes._helpers import WORKSPACE, safe_read
 
 bp = Blueprint("config", __name__)
@@ -74,68 +73,6 @@ def list_commands():
     return jsonify(commands)
 
 
-@bp.route("/api/config/env")
-@login_required
-def get_env():
-    """Read .env file as structured key-value pairs."""
-    content = safe_read(WORKSPACE / ".env")
-    if content is None:
-        return jsonify({"entries": [], "raw": ""})
-
-    entries = []
-    for line in content.splitlines():
-        stripped = line.strip()
-        if not stripped or stripped.startswith("#"):
-            entries.append({"type": "comment", "value": line})
-        elif "=" in stripped:
-            key, _, val = stripped.partition("=")
-            entries.append({"type": "var", "key": key.strip(), "value": val.strip()})
-        else:
-            entries.append({"type": "comment", "value": line})
-
-    return jsonify({"entries": entries, "raw": content})
-
-
-@bp.route("/api/config/env", methods=["PUT"])
-@login_required
-def update_env():
-    """Update .env file. Accepts {entries: [...]} or {raw: "..."}."""
-    from models import has_permission, audit
-    from flask_login import current_user
-
-    if not has_permission(current_user.role, "config", "manage"):
-        abort(403)
-
-    data = request.get_json()
-    env_path = WORKSPACE / ".env"
-
-    if "raw" in data:
-        # Raw text mode
-        env_path.write_text(data["raw"])
-    elif "entries" in data:
-        # Structured mode
-        lines = []
-        for entry in data["entries"]:
-            if entry.get("type") == "comment":
-                lines.append(entry.get("value", ""))
-            else:
-                key = entry.get("key", "")
-                val = entry.get("value", "")
-                if key:
-                    lines.append(f"{key}={val}")
-        env_path.write_text("\n".join(lines) + "\n")
-
-    # Reload dotenv in current process
-    try:
-        from dotenv import load_dotenv
-        load_dotenv(env_path, override=True)
-    except Exception:
-        pass
-
-    audit(current_user, "env_updated", "config", "Updated .env file")
-    return jsonify({"status": "saved"})
-
-
 @bp.route("/api/config/makefile")
 def parse_makefile():
     content = safe_read(WORKSPACE / "Makefile")