tractatus/src
TheFlow 4557f4b420 fix(docs): require document_type and audience before publishing
Documents could be set to visibility: 'public' without document_type,
audience, or status fields — either via bulk migration scripts or the
upload-document.js script. This allowed internal session logs to appear
in the public docs UI.

Safeguards added:
- Document.publish() now rejects if document_type or audience is missing
- Document.publish() now sets status: 'current' automatically
- upload-document.js requires --type and --category flags (was optional)
- upload-document.js sets status: 'current' and document_type on insert

Also archived 2 internal Phase 5 PoC session documents that were
incorrectly public, and set status: 'current' on 4 legitimate public
documents that were missing it.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 18:48:48 +13:00
..
config chore: add optimal submission timing to publication targets config 2025-10-26 11:34:27 +13:00
controllers fix: Optimize docs page API (7MB→19KB), fix categories, add MI translations 2026-02-11 10:14:02 +13:00
middleware docs(auth): add RBAC explanation to requireRole middleware 2025-10-28 12:44:56 +13:00
models fix(docs): require document_type and audience before publishing 2026-02-22 18:48:48 +13:00
routes fix: Fix CI pipeline - add MongoDB service and fix integration tests 2026-02-07 18:37:30 +13:00
services feat: Add performance degradation detection to context pressure monitoring 2025-11-04 16:30:13 +13:00
utils feat(security): implement attack surface exposure prevention (inst_084) 2025-10-27 12:11:43 +13:00
server.js fix: Prevent cache-control middleware from caching API responses 2026-02-09 15:57:18 +13:00