Documents could be set to visibility: 'public' without document_type, audience, or status fields — either via bulk migration scripts or the upload-document.js script. This allowed internal session logs to appear in the public docs UI. Safeguards added: - Document.publish() now rejects if document_type or audience is missing - Document.publish() now sets status: 'current' automatically - upload-document.js requires --type and --category flags (was optional) - upload-document.js sets status: 'current' and document_type on insert Also archived 2 internal Phase 5 PoC session documents that were incorrectly public, and set status: 'current' on 4 legitimate public documents that were missing it. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| config | ||
| controllers | ||
| middleware | ||
| models | ||
| routes | ||
| services | ||
| utils | ||
| server.js | ||