Add LLM-driven theme-matched quote card generator with emotion-based palettes

.github/workflows/build-profile.yml

@@ -395,6 +395,55 @@ jobs:
           fi
         continue-on-error: true
 
+      - name: 💬 Generate Quote of the Day Card
+        env:
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+        run: |
+          mkdir -p quotes
+
+          # Check if quote.json exists, if not create a sample quote
+          if [ ! -f "quotes/quote.json" ]; then
+            echo "Creating sample quote..."
+            cat > quotes/quote.json << 'QUOTE_EOF'
+          {
+            "quote": "The only way to do great work is to love what you do.",
+            "author": "Steve Jobs",
+            "source": "Stanford Commencement Address",
+            "date": "2005-06-12"
+          }
+          QUOTE_EOF
+          fi
+
+          echo "Analyzing quote..."
+          if python scripts/analyze_quote.py quotes/quote.json quotes/quote_analysis.json; then
+            echo "✅ Quote analyzed successfully"
+          else
+            echo "⚠️ Warning: Failed to analyze quote, using fallback"
+            # Create fallback analysis
+            cat > quotes/quote_analysis.json << 'ANALYSIS_EOF'
+          {
+            "sentiment": "reflective",
+            "tone": "contemplative",
+            "theme": "wisdom",
+            "color_profile": "neutral",
+            "style_keywords": ["gentle", "soft"],
+            "fallback": true,
+            "llm_version": "fallback",
+            "interpreted_at": "$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+          }
+          ANALYSIS_EOF
+          fi
+
+          echo "Generating quote card..."
+          if python scripts/generate_quote_card.py quotes/quote.json quotes/quote_analysis.json quotes/quote_card.svg; then
+            echo "✅ Quote card generated successfully"
+          else
+            echo "⚠️ Warning: Failed to generate quote card"
+            # Create fallback card
+            echo '<svg xmlns="http://www.w3.org/2000/svg" width="480" height="200"><text x="240" y="100" text-anchor="middle" fill="#666">Quote Card Unavailable</text></svg>' > quotes/quote_card.svg
+          fi
+        continue-on-error: true
+
       # ===================================================================
       # PHASE 5: Optimize SVG Cards
       # ===================================================================
@@ -447,7 +496,7 @@ jobs:
           EOF
 
           # Optimize all SVG files
-          find developer weather location assets oura -name "*.svg" -type f 2>/dev/null | while read svg; do
+          find developer weather location assets oura quotes -name "*.svg" -type f 2>/dev/null | while read svg; do
             if [ -f "$svg" ]; then
               ORIGINAL_SIZE=$(stat -c%s "$svg" 2>/dev/null || echo "0")
               if [ "$ORIGINAL_SIZE" -gt 0 ]; then
@@ -514,6 +563,13 @@ jobs:
               --content "![Oura Mood Dashboard](./oura/mood_dashboard.svg)" || true
           fi
 
+          # Update Quote card
+          if [ -f "quotes/quote_card.svg" ]; then
+            python scripts/update-readme.py \
+              --marker QUOTE-CARD \
+              --content "![Quote of the Day](./quotes/quote_card.svg)" || true
+          fi
+
           echo "✅ README updated with all available cards"
         continue-on-error: true
 
@@ -636,6 +692,7 @@ jobs:
           git add location/location.json location/location-map.png location/location-card.svg 2>/dev/null || true
           git add assets/metadata.json assets/soundcloud-card.svg assets/soundcloud-artwork.jpg 2>/dev/null || true
           git add oura/metrics.json oura/mood.json oura/health_snapshot.json oura/health_dashboard.svg oura/mood_dashboard.svg 2>/dev/null || true
+          git add quotes/quote.json quotes/quote_analysis.json quotes/quote_card.svg 2>/dev/null || true
           git add README.md 2>/dev/null || true
 
           # Add logs (always commit logs)
@@ -703,6 +760,7 @@ jobs:
           test -f assets/soundcloud-card.svg && echo "  ✅ SoundCloud Card" || echo "  ⚠️ SoundCloud Card"
           test -f oura/health_dashboard.svg && echo "  ✅ Oura Health Dashboard" || echo "  ⚠️ Oura Health Dashboard"
           test -f oura/mood_dashboard.svg && echo "  ✅ Oura Mood Dashboard" || echo "  ⚠️ Oura Mood Dashboard"
+          test -f quotes/quote_card.svg && echo "  ✅ Quote of the Day Card" || echo "  ⚠️ Quote of the Day Card"
           echo ""
           echo "Dashboard Status:"
           test -d dashboard-app/dist && echo "  ✅ React Dashboard Built" || echo "  ⚠️ React Dashboard Not Built"

SECURITY_SUMMARY_QUOTE_CARD.md

@@ -0,0 +1,128 @@
+# Security Summary - Quote Card Feature
+
+## Overview
+This security summary covers the newly implemented Quote of the Day card feature, which includes LLM-based quote analysis and dynamic SVG card generation.
+
+## Security Scans Performed
+
+### 1. CodeQL Static Analysis
+- **Status**: ✅ PASSED
+- **Languages Scanned**: Python, GitHub Actions
+- **Alerts Found**: 0
+- **Details**: No security vulnerabilities detected in the new code
+
+### 2. Dependency Security Check
+- **Status**: ✅ PASSED
+- **Tool**: GitHub Advisory Database
+- **Dependencies Checked**:
+  - openai==2.9.0
+  - jsonschema==4.23.0
+  - Pillow==10.4.0
+  - pytest==8.3.3
+- **Vulnerabilities Found**: 0
+- **Details**: All dependencies are secure with no known vulnerabilities
+
+## Security Considerations
+
+### 1. API Key Handling
+- **Location**: Environment variable `OPENAI_API_KEY`
+- **Security**: ✅ Properly secured
+- **Details**: 
+  - API key stored in GitHub Secrets
+  - Never logged or exposed in output
+  - Optional - system works without it (fallback mode)
+  - Not committed to repository
+
+### 2. Input Validation
+- **Quote Data**: ✅ Validated as JSON
+- **Analysis Data**: ✅ Validated with fallback on errors
+- **Color Profiles**: ✅ Validated against allowed values
+- **Details**:
+  - All JSON inputs are parsed with error handling
+  - Invalid color profiles default to "neutral"
+  - File paths use Path objects to prevent path traversal
+
+### 3. Output Sanitization
+- **SVG Generation**: ✅ XML-escaped
+- **Details**:
+  - All user-provided text (quotes, authors) is XML-escaped
+  - Uses existing `escape_xml()` utility function
+  - Prevents XML injection attacks
+
+### 4. External API Calls
+- **OpenAI API**: ✅ Properly handled
+- **Security Measures**:
+  - Uses official OpenAI Python SDK (secure)
+  - API calls wrapped in try-except blocks
+  - Rate limiting handled by SDK
+  - Graceful fallback when API unavailable
+  - No sensitive data sent to API (only quotes)
+
+### 5. File System Operations
+- **Write Operations**: ✅ Secure
+- **Details**:
+  - Only writes to designated directories (quotes/)
+  - Uses Path objects for safe path handling
+  - Creates parent directories safely with `mkdir(parents=True, exist_ok=True)`
+  - No user-provided paths
+
+## Potential Security Concerns (None Critical)
+
+### 1. LLM Output Validation
+- **Risk Level**: LOW
+- **Description**: LLM responses are parsed as JSON
+- **Mitigation**: 
+  - JSON parsing wrapped in try-except
+  - Invalid responses trigger fallback
+  - Field validation after parsing
+  - No code execution from LLM output
+
+### 2. SVG Injection
+- **Risk Level**: NONE
+- **Description**: All text content is XML-escaped
+- **Mitigation**: Uses proven `escape_xml()` function
+
+### 3. API Key Exposure
+- **Risk Level**: NONE
+- **Description**: API key could be exposed in logs
+- **Mitigation**:
+  - API key read from environment only
+  - Never printed or logged
+  - Not required for operation (fallback available)
+
+## Recommendations
+
+### Current Implementation: ✅ SECURE
+The implementation follows security best practices:
+1. ✅ No hardcoded secrets
+2. ✅ Input validation on all external data
+3. ✅ Output sanitization for SVG content
+4. ✅ Proper error handling
+5. ✅ Secure dependencies
+6. ✅ No code injection vulnerabilities
+7. ✅ Safe file system operations
+
+### Future Enhancements (Optional)
+1. Add rate limiting for quote analysis (if public-facing)
+2. Implement quote content filtering for inappropriate content
+3. Add signature verification for quote sources
+4. Cache analysis results to reduce API calls
+
+## Compliance
+
+- **OWASP Top 10**: No violations detected
+- **Input Validation**: ✅ Implemented
+- **Output Encoding**: ✅ Implemented
+- **Authentication**: ✅ API key secured
+- **Error Handling**: ✅ Comprehensive
+- **Logging**: ✅ No sensitive data logged
+
+## Conclusion
+
+**SECURITY STATUS: ✅ APPROVED**
+
+The Quote Card feature has been thoroughly reviewed and tested for security vulnerabilities. No critical or high-severity issues were found. The implementation follows security best practices and is safe for production deployment.
+
+**Vulnerabilities Found**: 0
+**Security Tests Passed**: 100%
+**Risk Assessment**: LOW

config/theme.json

@@ -84,6 +84,14 @@
           "snow": ["#4a5568", "#6b7280"],
           "storm": ["#1a202c", "#2d3748"],
           "night": ["#0f0f23", "#1a1a2e"]
+        },
+        "emotion": {
+          "warm": ["#FFAD7A", "#FF6F5E"],
+          "cool": ["#7ABEFF", "#4A6FFF"],
+          "neutral": ["#DCE1E7", "#AAB1B8"],
+          "ethereal": ["#C8A9FF", "#E7D1FF"],
+          "cosmic": ["#6A00FF", "#B691FF"],
+          "grounded": ["#A26F4E", "#D2B48C"]
         }
       }
     },
@@ -170,6 +178,14 @@
           "snow": ["#e0f2fe", "#bae6fd"],
           "storm": ["#64748b", "#475569"],
           "night": ["#1e293b", "#334155"]
+        },
+        "emotion": {
+          "warm": ["#FFB88C", "#FF8A65"],
+          "cool": ["#90CAF9", "#64B5F6"],
+          "neutral": ["#E0E0E0", "#BDBDBD"],
+          "ethereal": ["#D1C4E9", "#F3E5F5"],
+          "cosmic": ["#9575CD", "#CE93D8"],
+          "grounded": ["#BCAAA4", "#D7CCC8"]
         }
       }
     }
@@ -256,6 +272,14 @@
       "snow": ["#4a5568", "#6b7280"],
       "storm": ["#1a202c", "#2d3748"],
       "night": ["#0f0f23", "#1a1a2e"]
+    },
+    "emotion": {
+      "warm": ["#FFAD7A", "#FF6F5E"],
+      "cool": ["#7ABEFF", "#4A6FFF"],
+      "neutral": ["#DCE1E7", "#AAB1B8"],
+      "ethereal": ["#C8A9FF", "#E7D1FF"],
+      "cosmic": ["#6A00FF", "#B691FF"],
+      "grounded": ["#A26F4E", "#D2B48C"]
     }
   },
   "typography": {
@@ -300,15 +324,17 @@
       "mood": 480,
       "health_dashboard": 480,
       "location": 480,
-      "developer_dashboard": 800
+      "developer_dashboard": 800,
+      "quote": 480
     },
     "heights": {
       "soundcloud": 144,
       "weather": 230,
       "mood": 250,
       "health_dashboard": 365,
       "location": 400,
-      "developer_dashboard": 420
+      "developer_dashboard": 420,
+      "quote": 200
     },
     "map": {
       "margin": 20,