13 Commits

Author	SHA1	Message	Date
Codex_B	10e39b8331	feat: add health monitoring endpoint	2026-03-06 15:46:08 +00:00
Mark	d0a550fee6	feat(comments): v2 — HTMX, Turnstile, reactions, design refresh ... - Extract comment templates into reusable partials (_comment.html, _comment_form.html, _comment_list.html, _reply_form.html, etc.) - Add HTMX progressive enhancement: inline form submission with partial responses, delta polling for live updates, form reset on success, success/moderation toast feedback - Integrate Cloudflare Turnstile for invisible bot protection: server-side token validation with hostname check, fail-closed on errors/timeouts, feature-flagged via TURNSTILE_SECRET_KEY env var - Auto-approve comments that pass Turnstile; keep manual approval as fallback when Turnstile is disabled (model default stays False) - Add CommentReaction model with UniqueConstraint for session-based anonymous reactions (heart/thumbs-up), toggle support, separate rate-limit bucket (20/min) - Add comment poll endpoint (GET /comments/poll/<id>/?after_id=N) for HTMX delta polling without duplicates - Update CSP middleware to allow challenges.cloudflare.com in script-src, connect-src, and frame-src - Self-host htmx.min.js (v2.0.4) to minimize CSP surface area - Add django-htmx middleware and requests to dependencies - Add Unapprove bulk action to Wagtail admin for moderation - Extend PII purge command to anonymize reaction session_key - Design refresh: neon glow avatars, solid hover shadows, gradient section header, cyan reply borders, grid-pattern empty state, neon-pink focus glow on form inputs - Add turnstile_site_key to template context via context processor - 18 new tests covering HTMX contracts, Turnstile success/failure/ timeout/hostname-mismatch, polling deltas, reaction toggle/dedup/ rate-limit, CSP headers, and PII purge extension Closes #43 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-03 22:52:59 +00:00
Mark	906206d4cd	feat: implement article search with PostgreSQL full-text search ... - Configure Wagtail database search backend with English search config - Add django.contrib.postgres to INSTALLED_APPS for full PG FTS support - Expand ArticlePage.search_fields: body_text (excl. code blocks), AutocompleteField(title), RelatedFields(tags), FilterFields - Add search view at /search/?q= with query guards (strip, max 200 chars, empty/whitespace handling) and pagination preserving query param - Replace nav Subscribe CTA with compact search box (desktop + mobile) - Add search box to article index page alongside category/tag filters - Create search results template reusing article_card component - Add update_index to deploy entrypoint for automated reindexing - Update existing tests for nav change, add comprehensive search tests Closes #41 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-03 21:25:11 +00:00
Mark	e2f71a801c	Add category taxonomy and navigation integration ... Implements Issue #35 with category snippets, article category routing, category-aware templates, and category RSS feeds with tests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-03 11:20:07 +00:00
codex_a	155c8f7569	fix: nav/footer wireframe, honeypot CSP, explore topics, comment E2E coverage ... - Replace nav inline newsletter form with Subscribe CTA link per wireframe - Remove newsletter form from footer; add Connect section with social/RSS links - Fix honeypot inputs using hidden attribute (inline style blocked by CSP) - Add available_tags to HomePage.get_context for Explore Topics section - Add data-comment-form attribute to main comment form for reliable locating - Seed approved comment in E2E content for reply flow testing - Expand test_comments.py: moderation message, not-immediately-visible, missing fields, reply form visible, reply submission - Make COMMENT_RATE_LIMIT_PER_MINUTE configurable; set 100 in dev to prevent E2E test exhaustion; update rate limit unit test with override_settings - Update newsletter/home E2E tests to reflect nav form removal - Update unit test to assert no nav/footer newsletter forms Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-01 12:17:55 +00:00
codex_a	221c8c19c2	fix: migrate STATICFILES_STORAGE to STORAGES for Django 5.2 compat ... Django 5.1+ removes STATICFILES_STORAGE in favour of the STORAGES dict. The old setting was silently ignored on Django 5.2, causing StaticFilesStorage (the default) to be used instead of CompressedManifestStaticFilesStorage. Result: no content-hashed filenames, no staticfiles.json manifest, and Cloudflare caching /static/css/styles.css indefinitely with no cache busting on deploy. Fix: use STORAGES in base.py (CompressedManifestStaticFilesStorage) and development.py (plain StaticFilesStorage, whitenoise disabled in dev). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-01 11:47:37 +00:00
codex_a	0cbac68ec1	feat: add production deploy pipeline and fix dev CSS ... Dev: - Add tailwind install + build to docker-compose startup so CSS is built inside the container — not dependent on local filesystem Production (docker-compose.prod.yml): - Gunicorn on 127.0.0.1:8001, bind-mounted static/media to host paths so Caddy can serve them directly - Runs migrate, tailwind build, collectstatic on startup Settings (production.py): - Disable SECURE_SSL_REDIRECT (Caddy handles redirects; Django would loop) - Add CSRF_TRUSTED_ORIGINS for nohypeai.net CI (.gitea/workflows/ci.yml): - Add push-to-main trigger - Add deploy job: SSHes to lintel-prod-01 as deploy, runs deploy/deploy.sh Server config (deploy/): - deploy/caddy/nohype.caddy — Caddy site config for nohypeai.net - deploy/sum-nohype.service — systemd unit for the compose stack - deploy/deploy.sh — deploy script (pull, build, restart) One-time manual steps required on lintel-prod-01 (need root): sudo cp deploy/sum-nohype.service /etc/systemd/system/ sudo cp deploy/caddy/nohype.caddy /etc/caddy/sites-enabled/ sudo systemctl daemon-reload && sudo systemctl enable sum-nohype sudo systemctl reload caddy Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-02-28 21:34:13 +00:00
codex_a	a598727888	fix: fix all dev static/media serving issues ... - Remove WhiteNoise from MIDDLEWARE in development: it intercepts /static/ requests and serves from STATIC_ROOT, which is empty without collectstatic. Django's runserver serves static files natively with DEBUG=True. - Switch to StaticFilesStorage in dev: no manifest required. - Add media URL pattern in DEBUG mode: runserver does not serve MEDIA_ROOT automatically, so uploaded images were 404ing in local dev. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-02-28 20:57:54 +00:00
codex_a	f950e3cd5e	fix: use plain StaticFilesStorage in dev settings ... CompressedManifestStaticFilesStorage requires collectstatic to generate a manifest before it can serve anything. Dev containers never run collectstatic so every static asset 404s. Override to StaticFilesStorage in dev so Django serves files directly from STATICFILES_DIRS and app static directories. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-02-28 20:46:23 +00:00
Mark	14db1bb57e	fix(ci): address PR blockers and move CI/nightly off sqlite	2026-02-28 16:38:37 +00:00
Codex_B	36ac487cbd	Resolve PR review gaps across comments, security, feeds, and UX	2026-02-28 13:47:21 +00:00
Codex_B	6fc28f9d9a	Implement newsletter double opt-in email flow and CSP nonce headers	2026-02-28 12:37:32 +00:00
Codex_B	b5f0f40c4c	Scaffold containerized Django/Wagtail app with core features	2026-02-28 11:52:59 +00:00