diff --git a/.mailmap b/.mailmap new file mode 100644 index 0000000..f08595b --- /dev/null +++ b/.mailmap @@ -0,0 +1,7 @@ +# Remap historical AI co-author trailers so repository contributors reflect human maintainers. +Daniel vendor model Opus 4.6 +Daniel vendor model Opus 4.6 (1M context) +Daniel vendor model Opus 4.7 (1M context) +Daniel vendor model Sonnet 4.5 +Daniel vendor model Sonnet 4.6 +Daniel vendor model Sonnet 4.6 (1M context) diff --git a/e2e/tests/auth-screen.spec.js b/e2e/tests/auth-screen.spec.js index 9ade9dc..4e31db7 100644 --- a/e2e/tests/auth-screen.spec.js +++ b/e2e/tests/auth-screen.spec.js @@ -21,10 +21,7 @@ test.describe('Unauthenticated auth screen', () => { }); test('register link is present but currently disabled (display:none)', async ({ page }) => { - // Daniel's instance has invite-only registration — the "Create account" - // link is explicitly hidden via inline style, so the HTML is there but - // users can't reach the register form through the UI. Verify the hidden - // state so flipping the style to re-enable it fails loudly. + // Invite-only registration hides the link while keeping the form in the DOM. await page.goto(E2E_BASE + '/'); await page.waitForSelector('#auth-screen', { timeout: 10000 }); const display = await page.locator('#show-register').evaluate(el => el.style.display); diff --git a/migrations/1777090000000_notes-trash.js b/migrations/1777090000000_notes-trash.js index acf7f16..d0dd9ff 100644 --- a/migrations/1777090000000_notes-trash.js +++ b/migrations/1777090000000_notes-trash.js @@ -1,12 +1,4 @@ -/** - * Soft-delete for personal_notes — Daniel asked for "deleted notes go to - * trash" so a slip of the finger doesn't lose work. Adds a deleted_at - * timestamp; NULL means active. Trash listing filters by NOT NULL, - * regular listing filters by NULL. - * - * Restore = clear deleted_at. Empty Trash = real DELETE. No retention - * policy yet — items stay in trash until the user empties it. - */ +// Adds soft-delete support for personal_notes via deleted_at. exports.up = (pgm) => { pgm.addColumn('personal_notes', { diff --git a/public/components/settings.html b/public/components/settings.html index fbf1794..4795bf7 100644 --- a/public/components/settings.html +++ b/public/components/settings.html @@ -214,14 +214,6 @@

Compliance & Usage

-

AWS Bedrock is available with a Business Associate Agreement (BAA) for HIPAA-eligible workloads.

-
    -
  • ✅ All connections use HTTPS/TLS encryption
    • -
  • ✅ Authentication with optional 2FA
    • -
  • ✅ No patient data stored on server beyond session
    • -
  • ✅ AWS Bedrock supports BAA for HIPAA compliance
    • -
  • ✅ Azure OpenAI supports BAA for HIPAA compliance
    • -

Important: Check with your institution's guidelines and policies before use. This tool is not intended for production clinical use without proper organizational authorization and provider BAAs in place. Use with caution.

diff --git a/public/js/learningHub.js b/public/js/learningHub.js index f0a468c..6244363 100644 --- a/public/js/learningHub.js +++ b/public/js/learningHub.js @@ -1,6 +1,17 @@ // ============================================================ // LEARNING HUB — User content feed, viewer, quizzes + Admin CMS // ============================================================ +import { + clearQuestionBlocks, + destroyOptionEditor, + destroyQuestionBlockEditors, + getTpHTML, + makeTpEditor +} from './learningHub/tiptapEditor.js'; +import { esc, sanitizeHtml } from './learningHub/sanitize.js'; +import { deleteJson, getJson, sendJson } from './learningHub/api.js'; +import { renderCategoryPills, renderEmptySearchMessage, renderFeed, renderSearchHeader } from './learningHub/feedRenderer.js'; + var loaded = false; var cmsLoaded = false; var currentContent = null; @@ -159,8 +170,7 @@ feedEl.innerHTML = '

Loading...

'; showFeed(); - fetch('/api/learning/feed', { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/learning/feed') .then(function(data) { if (!data.success) { feedEl.innerHTML = '

Failed to load

'; return; } renderFeed(data.content, feedEl); @@ -169,17 +179,12 @@ } function loadCategories() { - fetch('/api/learning/categories', { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/learning/categories') .then(function(data) { if (!data.success) return; var bar = document.getElementById('lh-categories'); if (!bar) return; - var html = ''; - data.categories.forEach(function(c) { - html += ''; - }); - bar.innerHTML = html; + bar.innerHTML = renderCategoryPills(data.categories); }); } @@ -189,8 +194,7 @@ feedEl.innerHTML = '

Loading...

'; showFeed(); - fetch('/api/learning/category/' + encodeURIComponent(slug), { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/learning/category/' + encodeURIComponent(slug)) .then(function(data) { if (!data.success) { feedEl.innerHTML = '

Category not found

'; return; } renderFeed(data.content, feedEl); @@ -206,25 +210,13 @@ ' Searching for "' + esc(q) + '"…' + ''; - fetch('/api/learning/search?q=' + encodeURIComponent(q), { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/learning/search?q=' + encodeURIComponent(q)) .then(function(data) { if (!data.success) { feedEl.innerHTML = '

Search failed

'; return; } - var header = '
' + - '' + - (data.content.length > 0 - ? '' + data.content.length + ' result' + (data.content.length !== 1 ? 's' : '') + ' for "' + esc(q) + '"' - : 'No results for "' + esc(q) + '"') + - '' + - '' + - '
'; + var header = renderSearchHeader(data.content.length, q); if (data.content.length === 0) { - feedEl.innerHTML = header + - '
' + - '' + - 'Try different keywords or browse by category' + - '
'; + feedEl.innerHTML = header + renderEmptySearchMessage(); } else { var tempEl = document.createElement('div'); renderFeed(data.content, tempEl); @@ -243,39 +235,8 @@ .catch(function() { feedEl.innerHTML = '

Search error

'; }); } - function renderFeed(items, feedEl) { - if (!items || items.length === 0) { - feedEl.innerHTML = '
No content yet. Check back soon!
'; - return; - } - - feedEl.innerHTML = items.map(function(item) { - var typeIcon = item.content_type === 'quiz' ? 'fa-clipboard-question' : item.content_type === 'pearl' ? 'fa-gem' : item.content_type === 'presentation' ? 'fa-presentation-screen' : 'fa-file-alt'; - var typeColor = item.content_type === 'quiz' ? 'var(--amber)' : item.content_type === 'pearl' ? 'var(--purple, #8b5cf6)' : item.content_type === 'presentation' ? '#065f46' : 'var(--blue)'; - var quizBadge = item.question_count > 0 ? ' ' + item.question_count + ' Q' : ''; - var catBadge = item.category_name ? '' + esc(item.category_name) + '' : 'Uncategorized'; - var date = item.created_at ? new Date(item.created_at).toLocaleDateString() : ''; - - return '
' + - '
' + - '' + - '
' + - '
' + esc(item.title) + '
' + - '
' + - (item.subject ? '' + esc(item.subject) + '' : '') + - (item.author_name ? 'by ' + esc(item.author_name) + '' : '') + - '' + date + '' + - '
' + - '
' + - '
' + catBadge + quizBadge + '
' + - '
' + - '
'; - }).join(''); - } - function loadContent(slug) { - fetch('/api/learning/content/' + encodeURIComponent(slug), { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/learning/content/' + encodeURIComponent(slug)) .then(function(data) { if (!data.success) { showToast(data.error || 'Content not found', 'error'); return; } currentContent = data.content; @@ -446,12 +407,7 @@ showLoading('Submitting quiz...'); - fetch('/api/learning/submit-quiz', { - method: 'POST', - headers: getAuthHeaders(), - body: JSON.stringify({ contentId: currentContent.id, answers: answers }) - }) - .then(function(r) { return r.json(); }) + sendJson('/api/learning/submit-quiz', 'POST', { contentId: currentContent.id, answers: answers }) .then(function(data) { hideLoading(); if (!data.success) { showToast(data.error || 'Submit failed', 'error'); return; } @@ -621,8 +577,7 @@ updateAiOptions(editorType); // Hide WebDAV tab if Nextcloud not configured - fetch('/api/auth/me', { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/auth/me') .then(function(d) { var tab = document.getElementById('lh-ai-tab-webdav'); if (tab) tab.style.display = (d.user && d.user.nextcloud_url) ? '' : 'none'; @@ -715,8 +670,7 @@ if (list) list.innerHTML = '
Loading...
'; if (pathLabel) pathLabel.textContent = _aiWebdavCurrentPath; - fetch('/api/admin/learning/webdav-browse?path=' + encodeURIComponent(_aiWebdavCurrentPath), { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/admin/learning/webdav-browse?path=' + encodeURIComponent(_aiWebdavCurrentPath)) .then(function(data) { if (!data.success) { if (list) list.innerHTML = '
' + esc(data.error) + '
'; return; } if (pathLabel) pathLabel.textContent = data.path; @@ -849,9 +803,10 @@ if (!data.success) { showToast(data.error || 'Generation failed', 'error'); return; } // Presentation returns marpMarkdown directly; others return content{} var payload = data.contentType === 'presentation' ? data : data.content; - applyAiContent(payload, contentType); - closeAiPanel(); - showToast('Content generated! Review and save.', 'success'); + return applyAiContent(payload, contentType).then(function() { + closeAiPanel(); + showToast('Content generated! Review and save.', 'success'); + }); }) .catch(function(err) { hideBusy(); @@ -881,7 +836,7 @@ content.questions.forEach(function(q) { addQuestionBlock(q); }); } } - return; + return applyAiCategory(content.category_name || content.category); } // Fill title @@ -903,6 +858,44 @@ content.questions.forEach(function(q) { addQuestionBlock(q); }); } } + return applyAiCategory(content.category_name || content.category); + } + + function applyAiCategory(categoryName) { + categoryName = (categoryName || '').trim(); + if (!categoryName) return Promise.resolve(); + + var sel = document.getElementById('lh-cms-edit-category'); + if (!sel) return Promise.resolve(); + + var existing = findCategoryOption(sel, categoryName); + if (existing) { + sel.value = existing.value; + return Promise.resolve(); + } + + return sendJson('/api/admin/learning/categories', 'POST', { name: categoryName }) + .then(function(data) { + if (!data.success || !data.id) throw new Error(data.error || 'Category creation failed'); + var opt = document.createElement('option'); + opt.value = data.id; + opt.textContent = categoryName; + sel.appendChild(opt); + sel.value = String(data.id); + loadCmsCategories(); + loadCategories(); + }) + .catch(function(err) { + showToast('Generated category was not created: ' + err.message, 'error'); + }); + } + + function findCategoryOption(sel, categoryName) { + var wanted = categoryName.toLowerCase(); + for (var i = 0; i < sel.options.length; i++) { + if ((sel.options[i].textContent || '').trim().toLowerCase() === wanted) return sel.options[i]; + } + return null; } function toggleRefineBar(forceShow) { @@ -926,12 +919,7 @@ toggleRefineBar(false); showBusy('Refining content...'); - fetch('/api/admin/learning/ai-refine', { - method: 'POST', - headers: getAuthHeaders(), - body: JSON.stringify({ content: currentBody, instructions: instructions, model: model }) - }) - .then(function(r) { return r.json(); }) + sendJson('/api/admin/learning/ai-refine', 'POST', { content: currentBody, instructions: instructions, model: model }) .then(function(data) { hideBusy(); if (!data.success) { showToast(data.error || 'Refine failed', 'error'); return; } @@ -942,8 +930,7 @@ } function loadCmsStats() { - fetch('/api/admin/learning/stats', { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/admin/learning/stats') .then(function(data) { if (!data.success) return; var s = data.stats; @@ -957,8 +944,7 @@ } function loadCmsCategories() { - fetch('/api/admin/learning/categories', { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/admin/learning/categories') .then(function(data) { if (!data.success) return; var container = document.getElementById('lh-cms-categories'); @@ -998,12 +984,7 @@ var input = document.getElementById('lh-cms-cat-name'); if (!input || !input.value.trim()) { showToast('Enter category name', 'error'); return; } - fetch('/api/admin/learning/categories', { - method: 'POST', - headers: getAuthHeaders(), - body: JSON.stringify({ name: input.value.trim() }) - }) - .then(function(r) { return r.json(); }) + sendJson('/api/admin/learning/categories', 'POST', { name: input.value.trim() }) .then(function(data) { if (data.success) { input.value = ''; @@ -1023,8 +1004,7 @@ return; } window.__confirmDeleteCat = null; - fetch('/api/admin/learning/categories/' + id, { method: 'DELETE', headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + deleteJson('/api/admin/learning/categories/' + id) .then(function(data) { if (data.success) { loadCmsCategories(); loadCategories(); showToast('Category deleted', 'info'); } else showToast(data.error || 'Failed', 'error'); @@ -1036,8 +1016,7 @@ if (!container) return; container.innerHTML = '

Loading...

'; - fetch('/api/admin/learning/content', { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/admin/learning/content') .then(function(data) { if (!data.success) return; if (data.content.length === 0) { @@ -1101,168 +1080,6 @@ renderCmsContentList(filtered); } - // ── Tiptap editor helpers ────────────────────────────────── - var T = window.Tiptap || {}; - - function buildTpToolbar(mini, isOption) { - var btns; - if (isOption) { - btns = '' + - '' + - ''; - } else if (mini) { - btns = '' + - '' + - '' + - ''; - } else { - btns = '' + - '' + - '' + - '' + - '' + - '' + - '' + - '' + - '' + - '' + - '' + - '' + - '' + - '' + - '' + - ''; - } - return '
' + btns + '
' + - ''; - } - - function wireTpToolbar(wrap, editor) { - var linkBar = wrap.querySelector('.tp-link-bar'); - var linkInput = wrap.querySelector('.tp-link-input'); - - wrap.querySelector('.tp-toolbar').addEventListener('mousedown', function(e) { - var btn = e.target.closest('.tp-btn[data-cmd]'); - if (!btn) return; - e.preventDefault(); - var cmd = btn.dataset.cmd; - switch (cmd) { - case 'bold': editor.chain().focus().toggleBold().run(); break; - case 'italic': editor.chain().focus().toggleItalic().run(); break; - case 'underline': editor.chain().focus().toggleUnderline().run(); break; - case 'strike': editor.chain().focus().toggleStrike().run(); break; - case 'h2': editor.chain().focus().toggleHeading({ level: 2 }).run(); break; - case 'h3': editor.chain().focus().toggleHeading({ level: 3 }).run(); break; - case 'bulletList': editor.chain().focus().toggleBulletList().run(); break; - case 'orderedList': editor.chain().focus().toggleOrderedList().run(); break; - case 'blockquote': editor.chain().focus().toggleBlockquote().run(); break; - case 'codeBlock': editor.chain().focus().toggleCodeBlock().run(); break; - case 'clear': editor.chain().focus().unsetAllMarks().clearNodes().run(); break; - case 'link': - if (linkBar.style.display === 'none') { - linkInput.value = editor.getAttributes('link').href || ''; - linkBar.style.display = 'flex'; - setTimeout(function() { linkInput.focus(); }, 0); - } else { - linkBar.style.display = 'none'; - } - break; - } - updateTpState(wrap, editor); - }); - - wrap.querySelector('.tp-link-apply').addEventListener('mousedown', function(e) { - e.preventDefault(); - var url = linkInput.value.trim(); - if (url) editor.chain().focus().setLink({ href: url }).run(); - linkBar.style.display = 'none'; - }); - wrap.querySelector('.tp-link-remove').addEventListener('mousedown', function(e) { - e.preventDefault(); - editor.chain().focus().unsetLink().run(); - linkBar.style.display = 'none'; - }); - wrap.querySelector('.tp-link-cancel').addEventListener('mousedown', function(e) { - e.preventDefault(); - linkBar.style.display = 'none'; - }); - linkInput.addEventListener('keydown', function(e) { - if (e.key === 'Enter') { e.preventDefault(); wrap.querySelector('.tp-link-apply').dispatchEvent(new MouseEvent('mousedown')); } - if (e.key === 'Escape') linkBar.style.display = 'none'; - }); - } - - function updateTpState(wrap, editor) { - wrap.querySelectorAll('.tp-btn[data-cmd]').forEach(function(btn) { - var a = false; - switch (btn.dataset.cmd) { - case 'bold': a = editor.isActive('bold'); break; - case 'italic': a = editor.isActive('italic'); break; - case 'underline': a = editor.isActive('underline'); break; - case 'strike': a = editor.isActive('strike'); break; - case 'h2': a = editor.isActive('heading', { level: 2 }); break; - case 'h3': a = editor.isActive('heading', { level: 3 }); break; - case 'bulletList': a = editor.isActive('bulletList'); break; - case 'orderedList': a = editor.isActive('orderedList'); break; - case 'blockquote': a = editor.isActive('blockquote'); break; - case 'codeBlock': a = editor.isActive('codeBlock'); break; - case 'link': a = editor.isActive('link'); break; - } - btn.classList.toggle('active', a); - }); - } - - function makeTpEditor(wrap, existingHtml, mini, isOption) { - wrap.innerHTML = buildTpToolbar(mini, isOption) + '
'; - var ed = new T.Editor({ - element: wrap.querySelector('.tp-content'), - extensions: [ - T.StarterKit, - T.Link.configure({ openOnClick: false, autolink: true }), - T.Underline - ], - content: existingHtml || '', - onUpdate: function() { updateTpState(wrap, ed); }, - onSelectionUpdate: function() { updateTpState(wrap, ed); } - }); - wireTpToolbar(wrap, ed); - return ed; - } - - function getTpHTML(editor) { - if (!editor) return ''; - var html = editor.getHTML(); - return (html === '

' || html === '') ? '' : html; - } - - function destroyTpEditor(editor) { - if (editor && typeof editor.destroy === 'function') editor.destroy(); - } - - function destroyOptionEditor(row) { - if (!row || !row._optEditor) return; - destroyTpEditor(row._optEditor); - row._optEditor = null; - } - - function destroyQuestionBlockEditors(block) { - if (!block) return; - destroyTpEditor(block._questionEditor); - block._questionEditor = null; - block.querySelectorAll('.lh-option-row').forEach(destroyOptionEditor); - } - - function clearQuestionBlocks(container) { - if (!container) return; - container.querySelectorAll('.lh-question-block').forEach(destroyQuestionBlockEditors); - container.innerHTML = ''; - } - // ── Body editor ──────────────────────────────────────────── function initBodyEditor() { var wrap = document.getElementById('lh-body-editor'); @@ -1375,8 +1192,7 @@ if (!contentId) return; // Load existing content - fetch('/api/admin/learning/content/' + contentId, { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/admin/learning/content/' + contentId) .then(function(data) { if (!data.success) { showToast('Failed to load', 'error'); return; } var c = data.content; @@ -1487,8 +1303,7 @@ showLoading('Saving...'); - fetch(url, { method: method, headers: getAuthHeaders(), body: JSON.stringify(payload) }) - .then(function(r) { return r.json(); }) + sendJson(url, method, payload) .then(function(data) { if (!data.success) { hideLoading(); showToast(data.error || 'Save failed', 'error'); return; } var contentId = id || data.id; @@ -1521,17 +1336,12 @@ url = '/api/admin/learning/content/' + contentId + '/questions'; } - fetch(url, { - method: method, - headers: getAuthHeaders(), - body: JSON.stringify({ - question_text: q.question_text, - question_type: q.question_type, - explanation: q.explanation, - options: q.options - }) + sendJson(url, method, { + question_text: q.question_text, + question_type: q.question_type, + explanation: q.explanation, + options: q.options }) - .then(function(r) { return r.json(); }) .then(function() { saveQuestions(contentId, questions, index + 1, callback); }) @@ -1570,8 +1380,7 @@ var id = document.getElementById('lh-cms-edit-id').value; if (!id) return; hideDeleteConfirm(); - fetch('/api/admin/learning/content/' + id, { method: 'DELETE', headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + deleteJson('/api/admin/learning/content/' + id) .then(function(data) { if (data.success) { showToast('Content deleted', 'info'); @@ -1596,8 +1405,7 @@ // Open slide modal for a published presentation in the user-facing viewer function openSlidesFromSlug(slug) { showBusy('Loading slides...'); - fetch('/api/learning/content/' + encodeURIComponent(slug) + '/slides', { headers: getAuthHeaders() }) - .then(function(r) { return r.json(); }) + getJson('/api/learning/content/' + encodeURIComponent(slug) + '/slides') .then(function(data) { hideBusy(); if (!data.success) { showToast(data.error || 'Could not load slides', 'error'); return; } @@ -1612,11 +1420,7 @@ showBusy('Rendering slides...'); - fetch('/api/admin/learning/preview-slides', { - method: 'POST', headers: getAuthHeaders(), - body: JSON.stringify({ markdown: md }) - }) - .then(function(r) { return r.json(); }) + sendJson('/api/admin/learning/preview-slides', 'POST', { markdown: md }) .then(function(data) { hideBusy(); if (!data.success) { showToast(data.error || 'Preview failed', 'error'); return; } @@ -1799,30 +1603,3 @@ // Set option text value after insertion (can't use value="" on nested input via innerHTML) row.querySelector('.lh-opt-text').value = opt ? opt.option_text || '' : ''; } - - // ── Helpers ────────────────────────────────────────────────── - function esc(str) { - if (!str) return ''; - return String(str).replace(/&/g, '&').replace(//g, '>').replace(/"/g, '"'); - } - - function sanitizeHtml(html) { - // DOMPurify is loaded from cdnjs via