disclosure-bureau/web/package.json

51 lines
1.3 KiB
JSON
Raw Normal View History

{
"name": "disclosure-bureau-web",
"version": "0.1.0",
"private": true,
"scripts": {
"dev": "next dev",
"build": "next build",
"start": "next start",
"lint": "next lint",
"preprocess": "tsx scripts/preprocess.ts"
},
"dependencies": {
"@assistant-ui/react": "^0.14.0",
"@radix-ui/react-dialog": "^1.1.0",
"@radix-ui/react-tooltip": "^1.1.0",
"@react-sigma/core": "^5.0.0",
"@react-sigma/layout-forceatlas2": "^5.0.0",
W0+W1+W1.2: security hardening, observability, autocomplete, glitchtip, forgejo CI W0 — security hardening (5 fixes verified live on disclosure.top) - middleware: gate /api/admin/* same as /admin/* (F1) - imgproxy: tighten LOCAL_FILESYSTEM_ROOT from / to /var/lib/storage (F2) - studio: real basic-auth label (bcrypt hash, middleware reference) (F3) - relations: ENABLE ROW LEVEL SECURITY + public SELECT policy (F4) - migration 0003: fold is_searchable + hybrid_search update into canonical (TD#2) W1 — observability + resilience + autocomplete - studio: HOSTNAME=0.0.0.0 so Next.js binds on loopback for healthcheck - compose: PG_POOL_MAX=20, CLAUDE_CODE_OAUTH_TOKEN gated by separate env - claude-code.ts: subprocess timeout configurable (CLAUDE_CODE_TIMEOUT_MS) - openrouter.ts: retry with exponential backoff + Retry-After + in-memory circuit breaker (promotes FALLBACK after CB_THRESHOLD failures) - lib/logger.ts: pino logger (NDJSON prod / pretty dev) + withRequest helper - middleware: mints correlation_id, stamps x-correlation-id response header, emits structured http_request log per /api/* call - messages/route.ts: switch to structured logger - 60_meili_index.py: push documents + chunks into Meilisearch - /api/search/autocomplete: parallel meili search (docs + chunks), 5-8ms p50 - search-autocomplete.tsx: debounced dropdown wired into search-panel W1.2 — Glitchtip + Forgejo self-hosted - compose: glitchtip-redis + glitchtip-web + glitchtip-worker (v4.2) - compose: forgejo + forgejo-runner (server v9, runner v6) with group_add=988 - @sentry/nextjs SDK wired (instrumentation.ts + sentry.{client,server}.config.ts) - /api/admin/throw smoke endpoint (gated by W0-F1 middleware) - Synthetic event ingestion verified at glitchtip.disclosure.top - forgejo.disclosure.top up, repo discadmin/disclosure-bureau created, runner registered (labels: ubuntu-latest, docker) - .forgejo/workflows/ci.yml: typecheck + lint + build + npm audit + python syntax + compose validation Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-23 21:18:42 +00:00
"@sentry/nextjs": "^10.53.1",
"@supabase/ssr": "^0.10.3",
"@supabase/supabase-js": "^2.105.4",
"framer-motion": "^11.11.0",
"graphology": "^0.25.4",
"graphology-layout-forceatlas2": "^0.10.1",
"gray-matter": "^4.0.3",
"lucide-react": "^0.460.0",
"next": "^15.1.0",
"pg": "^8.13.1",
W0+W1+W1.2: security hardening, observability, autocomplete, glitchtip, forgejo CI W0 — security hardening (5 fixes verified live on disclosure.top) - middleware: gate /api/admin/* same as /admin/* (F1) - imgproxy: tighten LOCAL_FILESYSTEM_ROOT from / to /var/lib/storage (F2) - studio: real basic-auth label (bcrypt hash, middleware reference) (F3) - relations: ENABLE ROW LEVEL SECURITY + public SELECT policy (F4) - migration 0003: fold is_searchable + hybrid_search update into canonical (TD#2) W1 — observability + resilience + autocomplete - studio: HOSTNAME=0.0.0.0 so Next.js binds on loopback for healthcheck - compose: PG_POOL_MAX=20, CLAUDE_CODE_OAUTH_TOKEN gated by separate env - claude-code.ts: subprocess timeout configurable (CLAUDE_CODE_TIMEOUT_MS) - openrouter.ts: retry with exponential backoff + Retry-After + in-memory circuit breaker (promotes FALLBACK after CB_THRESHOLD failures) - lib/logger.ts: pino logger (NDJSON prod / pretty dev) + withRequest helper - middleware: mints correlation_id, stamps x-correlation-id response header, emits structured http_request log per /api/* call - messages/route.ts: switch to structured logger - 60_meili_index.py: push documents + chunks into Meilisearch - /api/search/autocomplete: parallel meili search (docs + chunks), 5-8ms p50 - search-autocomplete.tsx: debounced dropdown wired into search-panel W1.2 — Glitchtip + Forgejo self-hosted - compose: glitchtip-redis + glitchtip-web + glitchtip-worker (v4.2) - compose: forgejo + forgejo-runner (server v9, runner v6) with group_add=988 - @sentry/nextjs SDK wired (instrumentation.ts + sentry.{client,server}.config.ts) - /api/admin/throw smoke endpoint (gated by W0-F1 middleware) - Synthetic event ingestion verified at glitchtip.disclosure.top - forgejo.disclosure.top up, repo discadmin/disclosure-bureau created, runner registered (labels: ubuntu-latest, docker) - .forgejo/workflows/ci.yml: typecheck + lint + build + npm audit + python syntax + compose validation Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-23 21:18:42 +00:00
"pino": "^10.3.1",
"react": "^19.0.0",
"react-dom": "^19.0.0",
"react-markdown": "^9.0.0",
"remark-gfm": "^4.0.0",
"remark-wiki-link": "^2.0.1",
"sharp": "^0.33.5",
"sigma": "^3.0.0"
},
"devDependencies": {
W5.4 (Phase 3B): sitemap + robots + Article schema + magazine reading view GEO/SEO surface area: app/robots.ts (new — Next.js dynamic robots) Explicitly ALLOWS major AI crawlers: GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-Web, anthropic-ai, PerplexityBot, Perplexity-User, Google-Extended, Applebot-Extended, CCBot, DuckAssistBot, YouBot, Bytespider, Amazonbot. The site exists to be cited by LLMs answering UAP/UFO questions — we want them in. /api/admin/, /admin/, /auth/ disallowed for everyone. app/sitemap.ts (new — Next.js dynamic sitemap) Lists 9 top-level routes + every /d/<doc> + every /c/<slug> from the filesystem + up to 500 entity URLs per class (event, person, uap_object, location, organization), sorted with summary-enriched entities first. ~3000 URLs total at current corpus size. lastModified honours summary_generated_at so crawlers re-index when entities are re-enriched. app/c/[slug]/page.tsx (rewritten — magazine reading view) - generateMetadata: per-case title, description (auto-extracted from the locale-preferred lead paragraph), canonical URL, hreflang alternate, OpenGraph article type with publishedTime, Twitter card. - JSON-LD Article schema embedded at end of page: schema.org Article + Organization publisher + inLanguage + isAccessibleForFree. This is what makes the case appear as a citable source in Google AI Overviews / Perplexity / ChatGPT search. - Reading view rewritten: display-serif headline (Fraunces), italic blockquotes with gold accent, prose-typography styling, no more detective stats line, no more "written by case-writer@detective" attribution. Locale-aware: PT-BR pulls topic_pt_br + lead in PT, English mirror. tailwind.config.ts + @tailwindcss/typography plugin + font-display family wired to var(--font-display) (Fraunces) package.json + "@tailwindcss/typography" devDependency Phase 3A note: bulk entity enrichment hit Claude OAuth weekly quota mid-run. 6 events + 3 uap_objects landed bilingual summaries before the quota exhausted. UI gracefully splits enriched vs bare entities so /sightings shows the magazine-grade cards (Kenneth Arnold 1947, Roswell, Maury Island, Joseph Perry 1960 lunar photo, Civil Defense Director 1966, etc.) on top of a compact table of the rest. Re-run when quota refreshes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-24 19:09:50 +00:00
"@tailwindcss/typography": "^0.5.19",
"@types/node": "^22.7.0",
"@types/pg": "^8.11.10",
"@types/react": "^19.0.0",
"@types/react-dom": "^19.0.0",
"autoprefixer": "^10.4.20",
"graphology-types": "^0.24.8",
"postcss": "^8.4.47",
"tailwindcss": "^3.4.14",
"tsx": "^4.19.0",
"typescript": "^5.6.0"
}
}