Commit graph

33 commits

Author SHA1 Message Date
TheFlow
295647532e chore: bump cache version for deployment 2025-10-25 21:41:24 +13:00
TheFlow
fe7200c038 chore: bump cache version for deployment 2025-10-25 20:11:42 +13:00
TheFlow
4f889b073c fix(audit): fix timeline chart rendering with pixel heights and count labels
Fixed broken "Decisions Over Time" chart that wasn't displaying bars.

Root cause: Empty divs with percentage heights collapsed in flex containers.

Fixes applied:
1. **Pixel heights instead of percentages**
   - Calculate absolute pixel heights from h-48 container (192px)
   - Percentage heights don't work in flex containers with items-end

2. **Non-breaking space inside bars**
   - Added   to prevent empty div collapse
   - Even with height set, empty divs can collapse in some layouts

3. **Decision count labels**
   - Display count above each bar for exact numbers
   - Shows both visual proportion (bar height) and exact value (label)

4. **Minimum 10px height**
   - Ensures small values are always visible
   - Prevents bars from disappearing for low counts

5. **Wider bars**
   - Changed from max-w-16 (64px) to w-3/4 (75% width)
   - More visible and easier to interact with

Timeline modes working:
-  6-Hourly (24h) - 4 bars showing last 24 hours in 6-hour buckets
-  Daily (7d) - 7 bars showing last 7 days
-  Weekly (4w) - 4 bars showing last 4 weeks

All modes show current snapshot updated on refresh.

Files changed:
- public/js/admin/audit-analytics.js: Timeline rendering logic
- public/admin/audit-analytics.html: Updated cache version
- public/*.html: Cache version bump for consistency

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-25 12:22:55 +13:00
TheFlow
bb3d74006d chore: bump cache version for audit analytics fix 2025-10-25 11:51:21 +13:00
TheFlow
38687f4d27 chore: bump cache version for audit analytics improvements 2025-10-25 11:47:22 +13:00
TheFlow
79e873a1fb chore: bump cache version for deployment 2025-10-25 09:37:46 +13:00
TheFlow
fecc868797 chore: bump cache version again 2025-10-25 08:48:14 +13:00
TheFlow
649eda71e1 chore: bump cache version to 0.1.1 for JS changes 2025-10-25 08:47:54 +13:00
TheFlow
63c808e68b chore(cache): bump cache version for newsletter DELETE fix
Updated cache-busting version to force browser reload of fixed JavaScript.

Root cause: Browser serving cached version of newsletter-management.js
with old arrow function bug, even though production file had the fix.

Changes:
- Bumped version to 0.1.0.1761283486841 across all HTML files
- Updated public/admin/newsletter-management.html (missed by auto-script)
- Updated version.json and service worker

Related fix: Newsletter DELETE button sending [object Object]
Fixed in commit edb1540 but cached version prevented fix from loading.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-24 18:25:26 +13:00
TheFlow
c96441560b chore: bump cache version for CSRF fix deployment 2025-10-24 16:44:40 +13:00
TheFlow
ca8edb383b chore: bump cache version for production deployment 2025-10-24 16:35:41 +13:00
TheFlow
b036c14d84 fix(submissions): extract data from API response wrappers
CRITICAL FIX: Economist submission package was showing no data because
the frontend was storing the entire API response wrapper instead of
extracting the actual post and submission data.

Changes:
- submission-modal-enhanced.js: Extract .post from blog API response
- submission-modal-enhanced.js: Extract .data from submissions API response
- publications.routes.js: Restore original routes and add /targets endpoint
- Cache version bumped to force browser updates

Fixes: #economist-submission-data-missing
2025-10-24 16:35:10 +13:00
TheFlow
bda0de0ceb fix(cache): standardize cache version across all HTML files
Fixed inconsistent cache version parameters across admin pages.
All HTML files now use v=0.1.0.1761262254119 to ensure mobile
browsers fetch fresh assets.

Changes:
- Updated all 12 admin HTML files to consistent cache version
- Updated all 17 public HTML files via update-cache-version script
- Service worker version: 0.1.1
- Version.json: 0.1.1

This ensures service worker cache invalidation triggers properly
and all pages reference matching asset versions.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-24 12:34:39 +13:00
TheFlow
9b4d2acc5d fix(cache): increment service worker version to force mobile cache refresh
Updated service worker cache version from 0.1.1 to 0.1.2 to force
mobile browsers to invalidate old cached assets. This ensures users
see the latest calendar.js with enhanced error handling.

Also updated version.json to match with relevant changelog entries
for mobile calendar fixes and DeepL integration.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-24 12:25:40 +13:00
TheFlow
7291f816cd chore: bump cache version to 0.1.0.1761261456822
- Updated all HTML cache parameters
- Fixed calendar.html version tags
- Forces mobile browsers to fetch new calendar.js with error handling
2025-10-24 12:18:34 +13:00
TheFlow
b44686579a chore: bump cache version after submissions controller fix
- Updated to v0.1.1 to force browser refresh
- Ensures users get fixed submissions controller code
- Removed BlogPost populate() calls that caused 500 errors
2025-10-24 10:27:57 +13:00
TheFlow
7f865fbe70 fix(blog-curation-enhanced): add null check for publication dropdown
- Fixed TypeError when page loads in Pre-Submission section
- publication-target element only exists in Generate section
- Cache version updated
2025-10-24 10:02:31 +13:00
TheFlow
eb666a2504 debug: add console logging to track Le Monde loading
- Added detailed console logs to track submission loading
- Check if API response is ok
- Log all submissions found
- Log filtering logic for standalone submissions
- Cache version updated
2025-10-24 09:53:14 +13:00
TheFlow
d3074f87a3 fix(blog-validation): show Le Monde standalone submission package
- Modified loadValidationArticles() to load standalone submissions (no blogPostId)
- Updated rendering to handle both blog posts and standalone packages
- Fixed API endpoint from /api/blog/posts/:id to /api/blog/admin/:id
- Standalone packages show with purple 'STANDALONE PACKAGE' badge
- Button text changes to 'View Package' for standalone submissions
- Cache version bumped to 0.1.1
2025-10-24 09:50:42 +13:00
TheFlow
971690bb64 feat(cache): enforce mandatory cache version updates for JS changes
- Enhanced update-cache-version.js to update service worker and version.json
- Added inst_075 governance instruction (HIGH persistence)
- Integrated cache check into deployment script (Step 1/5)
- Created CACHE_MANAGEMENT_ENFORCEMENT.md documentation
- Bumped version to 0.1.1
- Updated all HTML cache parameters

BREAKING: Deployment now blocks if JS changed without cache update
2025-10-24 09:43:20 +13:00
TheFlow
46f3d6e7c6 feat(blog): add Manage Submission modal for publication tracking
Implements comprehensive submission tracking workflow for blog posts
targeting external publications. This feature enables systematic
management of submission packages and progress monitoring.

Frontend:
- Add submission-modal.js with complete modal implementation
- Modal includes publication selector (22 ranked publications)
- 4-item submission checklist (cover letter, pitch, notes, bio)
- Auto-save on blur with success indicators
- Progress bar (0-100%) tracking completion
- Requirements display per publication
- Update blog-validation.js with event handlers
- Update cache versions (HTML, service worker, version.json)

Backend:
- Add GET /api/blog/:id/submissions endpoint
- Add PUT /api/blog/:id/submissions endpoint (upsert logic)
- Implement getSubmissions and updateSubmission controllers
- Fix publications controller to use config helper functions
- Integration with SubmissionTracking MongoDB model

Version: 1.8.4

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-24 01:55:06 +13:00
TheFlow
b69b7167a9 feat(leader): WCAG accessibility with 9 accordions, keyboard navigation
- Converted all 9 accordion divs to semantic <button> elements
- Added ARIA attributes: aria-expanded, aria-controls, id for each button
- Accordion content: role="region" and aria-labelledby for screen readers
- Keyboard support: Enter and Space keys toggle accordions (WAI-ARIA pattern)
- Mobile optimization: 44px/48px touch targets, touch-action: manipulation
- iOS tap feedback: -webkit-tap-highlight-color
- Footer i18n: No footer object in leader.json (uses common.json correctly)
- Updated leader-page.js with keyboard handlers and ARIA state management
- Version 1.5.0

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-23 00:19:23 +13:00
TheFlow
50d1644bf4 feat(implementer): WCAG accessibility, diagrams, mobile optimization
- Added diagrams from public tractatus-framework repo: architecture-main-flow.svg (6.6KB), trigger-decision-tree.svg (6.7KB)
- Diagram sizing: max-width 600px for readable display, responsive width 100%
- Fixed skip link: Added <main id="main-content"> wrapper for proper accessibility
- Quick navigation: 44px touch targets, flex-wrap for mobile, aria-label="Page sections"
- Download buttons: Descriptive ARIA labels, 44px minimum height
- Code blocks: Added role="region" and descriptive ARIA labels to all 6 service examples
- Mobile optimization: -webkit-overflow-scrolling, 11px code font on small screens, 16px body prevents iOS zoom
- API examples verified accurate against actual BoundaryEnforcer.service.js implementation
- CSP compliance: Moved diagram sizing to CSS class instead of inline styles
- Version 1.4.0

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-23 00:12:55 +13:00
TheFlow
7a4603b3a6 feat(researcher): WCAG compliance, Berlin/Weil foundations, fixed footer i18n
- Full WCAG accessibility: ARIA attributes (aria-expanded, aria-controls), keyboard navigation (Enter/Space)
- Reframed research context: Berlin/Weil as primary intellectual foundation (moral pluralism, categorical imperative)
- Bibliography with proper academic citations: Weil (The Need for Roots, Gravity and Grace), Berlin (Four Essays on Liberty)
- Fixed footer i18n: Implemented recursive deepMerge() to preserve nested translation objects
- Root cause: Shallow merge {...obj1, ...obj2} was overwriting entire footer object from common.json
- Consolidated all footer translations in common.json, removed from page-specific files
- Mobile optimization: 44px/48px touch targets, touch-action: manipulation, responsive design
- Progressive enhancement: <noscript> fallback for JavaScript-disabled users
- Version 1.3.0

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-22 23:56:37 +13:00
TheFlow
9936247bdb refactor: remove website pages from public/
REMOVED: 7 website feature files from public/

Website Pages (4):
- docs-viewer.html - Website documentation viewer
- media-inquiry.html - Media inquiry form
- media-triage-transparency.html - Media triage page
- researcher.html - "For Researchers" landing page

Website Features (3):
- service-worker.js - PWA service worker
- test-pressure-chart.html - Test page
- version.json - Website version tracking

RETAINED in public/:
- Admin UI (4 pages): login, dashboard, rule-manager, hooks-dashboard
- Admin JS (8 files): auth, dashboard, rule manager, hooks, projects
- Framework components: pressure-chart, interactive-diagram, navbar-admin
- Framework demos (5): 27027, boundary, classification, deliberation, tractatus
- CSS/fonts for admin UI
- Architecture diagrams (images/)

PURPOSE: public/ now contains ONLY framework admin UI and demos,
not website pages for the Tractatus project.

🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-21 21:34:57 +13:00
TheFlow
9d390da76b style(ui): update theme, branding, and GitHub repository links
Update UI across all pages with:
- New favicon and brand icons (favicon-new.svg, tractatus-icon-new.svg)
- Theme CSS integration (tractatus-theme.min.css)
- Correct GitHub repository links (AgenticGovernance/tractatus)
- PWA manifest updates
- Consistent branding colors and gradients

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-19 12:48:29 +13:00
TheFlow
3449882285 refactor: rewrite Copilot Q&A in measured, evidence-based tone
Rewrote Copilot governance answer to match the restrained, analytical tone of the leader page, removing overconfident American-style assertions.

Key changes:
- Opening: "creates significant liability exposure" → "raises structural questions about governance"
- Removed dramatic scenarios: "Post-incident: 'How did this get approved?' No audit trail. No answer."
- Removed unvalidated cost claims (£500k-£2M settlements, specific ROI figures)
- Added development context: "proof-of-concept validated in a single project context"
- Changed assertions to observations: "will cause" → "may create", "is" → "raises questions about"
- Removed sales pitch language: "Case closed", "catastrophic liability exposure"
- Added honest limitations: "If your rules are inadequate...Tractatus enforces those inadequacies architecturally"
- Changed CTA: Removed "pro bono offer" for removed "show you exactly where your exposure is"
- Used cautious framing: "Whether this constitutes 'compliance-grade' evidence depends on your regulatory context"

Tone now matches leader page:
- Measured, intellectual engagement
- Evidence-based claims with context
- Acknowledges uncertainty
- Focuses on structural governance questions
- No prescriptive assertions

Version: 1.1.0 → 1.1.1

User feedback: "I like your overconfident American attitude. It has its place on this planet, but not here."

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-14 14:19:46 +13:00
TheFlow
89114ac126 feat: add Copilot governance Q&A for General Counsel and AI VPs
Added strategically positioned question addressing governance gaps in Copilot deployments for client correspondence:

Question (ID: 2):
"We're deploying Copilot across our organisation for client correspondence—what governance gaps should concern us, and how does Tractatus address them?"

Answer highlights:
- Liability exposure: unauthorised commitments, confidentiality breaches
- Regulatory compliance gaps: GDPR Article 22, SOC 2 CC2.1
- Tractatus as governance layer above Copilot
- Compliance-grade audit trails
- Phased implementation path (observation → soft → hard enforcement)
- Board-ready cost-benefit analysis
- Architectural vs aspirational governance distinction

Target audience: General Counsel, AI Vice President, Executive Leadership
Placement: Second question in Leader section (prominent positioning)
Keywords: copilot, microsoft, client, correspondence, deployment, governance, risk, liability, compliance, audit, general counsel, legal

Version: 1.0.9 → 1.1.0
Files modified:
- public/js/faq.js (new question ~1,400 words)
- public/service-worker.js (version bump)
- public/version.json (changelog update)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-14 14:09:54 +13:00
TheFlow
869e89f71d docs: update maintenance guide with FAQ modal scrollbar troubleshooting
Added comprehensive troubleshooting section documenting the FAQ modal scrollbar issue resolution (October 2025):

- Root cause: Flexbox height calculation failure in modal context
- Failed approaches: 6+ different CSS/HTML attempts documented
- Working solution: Explicit max-height with inline overflow-y
- Key insight: Explicit inline styles > flexbox in complex modals
- Lessons learned: Diagnose first, stop guessing after 2-3 failures
- Related issues: Pattern may affect other modals using flexbox

Files updated:
- CLAUDE_Tractatus_Maintenance_Guide.md (v2.1.1)
- public/faq.html (lines 578-580: modal structure)
- public/faq.html (lines 295-316: scrollbar CSS)
- public/service-worker.js (version 1.0.8)
- public/version.json (v1.0.8 with changelog)

This documentation will help future sessions avoid multi-hour troubleshooting cycles by understanding the root cause immediately.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-14 13:54:46 +13:00
TheFlow
f724d34f78 fix: update CSP to allow cdnjs.cloudflare.com resources
## Critical Bug Fix
All CDN resources (marked.js, highlight.js) were blocked by CSP causing:
- FAQ markdown rendering failures
- No syntax highlighting for code blocks
- Plain text display instead of formatted HTML

## Changes Made

### Backend (src/server.js)
Updated helmet CSP configuration to allow cdnjs.cloudflare.com:
- scriptSrc: added https://cdnjs.cloudflare.com
- styleSrc: added https://cdnjs.cloudflare.com
- connectSrc: added https://cdnjs.cloudflare.com (was missing)
- fontSrc: added https://cdnjs.cloudflare.com

### Frontend (nginx production config)
Fixed nginx add_header inheritance issue:
- Duplicated security headers in HTML location block
- Nginx quirk: add_header in location block overrides parent headers
- Both server block AND location block now have full CSP

### Root Cause
Two-part issue:
1. CSP didn't include cdnjs.cloudflare.com (blocking external resources)
2. Nginx HTML location block used add_header, overriding parent security headers

## Testing
Verified with curl:
- Local: CSP headers include cdnjs.cloudflare.com 
- Production: CSP headers include cdnjs.cloudflare.com 

## Version
- Bumped to 1.0.6
- Force update enabled

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-14 13:01:11 +13:00
TheFlow
be59c6dd52 fix: inline FAQ markdown rendering and add inst_040
## Bug Fixes
- Fixed inline FAQ markdown rendering with error handling
- Added try-catch around marked.parse() for inline FAQs
- Added fallback to plain text with line breaks on parse failure
- Enhanced logging for FAQ rendering diagnostics

## New Instruction (inst_040)
Created rule requiring complete coverage when user says "all":
- "update all pages" means EVERY page, not representative subset
- Must identify complete scope before starting
- Verify ALL items processed before marking complete
- Ask user to prioritize if scope >20 items

## Rationale
User reported inline FAQs showing raw markdown instead of formatted HTML.
Root cause: createInlineFAQItemHTML lacked error handling that was added
to createFAQItemHTML in previous version. Both functions now have consistent
error handling with logging.

User directive: When saying "all", Claude must not choose subset.

## Version
- Bumped to 1.0.5
- Force update enabled
- Synced inst_040 to production

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-14 12:51:08 +13:00
TheFlow
720594199e fix: FAQ modal scrolling and standardize footers
## FAQ Modal Fixes
- Fix modal scrolling: changed max-h-[85vh] to h-[85vh] with min-h-0
- Added flex-shrink-0 to modal header for proper flex behavior
- Users can now scroll through all 30 FAQ questions (was stuck at 8)
- Enhanced markdown parsing with error handling and fallback

## UI Improvements
- Removed Quick Actions section from FAQ page per user request
- Standardized footer across 7 user-facing pages
- Added Newsletter link under Community section in all footers

## Pages Updated
- faq.html, researcher.html, implementer.html, leader.html
- about.html, media-inquiry.html, case-submission.html

## Version
- Bumped to 1.0.4 with force update enabled
- Service worker cache updated

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-14 12:46:23 +13:00
TheFlow
f19154c9e6 feat: add version control system and PWA support
Implements cache busting and progressive web app features:

**Version Management:**
- version.json manifest with changelog tracking
- Service worker with automatic update checking (hourly)
- Update notification UI with changelog display
- Configurable forced updates after timeout
- Cache control headers for optimal performance

**PWA Features:**
- manifest.json with app shortcuts
- Apple touch icon support
- "Add to Home Screen" functionality
- Offline support via service worker

**Cache Strategy:**
- HTML: 5-minute cache with revalidation
- CSS/JS: 1-year immutable cache
- Images: 1-year immutable cache
- version.json/service-worker.js: no-cache

**Integration:**
- All main pages updated with PWA meta tags
- Version manager loaded on all user-facing pages
- Production deployment successful

Users who previously visited the site will now automatically receive
update notifications when version changes.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-14 10:53:29 +13:00