Almirah 0.4.1 → 0.4.3

data/lib/almirah/templates/css/main.css

@@ -1,3 +1,8 @@
+html {
+    /* Leave room for the fixed #top_nav so in-page anchor links
+       are not hidden behind it when navigating to them. */
+    scroll-padding-top: 40px;
+}
 body {
     font-family: Verdana, sans-serif;
     font-size: 12px;
@@ -72,6 +77,9 @@ table.markdown_table td{
 table.markdown_table tr.current_status td {
     background-color: #ffffee;
 }
+table.markdown_table td.scope_date {
+    white-space: nowrap;
+}
 table.controlled{
     border: 1px solid #e4e4e4;
     border-collapse: collapse;
@@ -139,6 +147,163 @@ table.controlled td.item_text{
     max-width: 100%;
     max-height: 300px;
 }
+.workitem_gantt {
+    --gantt-owner-width: 120px;
+    --gantt-day-width: 26px;
+    --gantt-month-h: 18px;
+    overflow: auto;
+    max-height: 420px;
+    margin-bottom: 16px;
+    border: 1px solid #e1e4e8;
+}
+.workitem_gantt .gantt_grid {
+    display: grid;
+    gap: 0;
+    width: max-content;
+    padding: 4px;
+}
+.workitem_gantt .gantt_corner,
+.workitem_gantt .gantt_owner,
+.workitem_gantt .gantt_owner_tracking,
+.workitem_gantt .gantt_band_corner,
+.workitem_gantt .gantt_buffer {
+    position: sticky;
+    left: 0;
+    background: #fff;
+    padding: 2px 8px;
+    font-weight: 600;
+    white-space: nowrap;
+    border-right: 1px solid #e1e4e8;
+    z-index: 2;
+}
+.workitem_gantt .gantt_corner {
+    top: 0;
+    border-bottom: 1px solid #bbb;
+    z-index: 3;
+}
+.workitem_gantt .gantt_month_head {
+    position: sticky;
+    top: 0;
+    background: #fff;
+    text-align: center;
+    font-size: 11px;
+    font-weight: 600;
+    color: #57606a;
+    border-bottom: 1px solid #e1e4e8;
+    border-left: 1px solid #d0d7de;
+    white-space: nowrap;
+    overflow: hidden;
+    z-index: 1;
+}
+.workitem_gantt .gantt_day_head {
+    position: sticky;
+    top: var(--gantt-month-h);
+    background: #fff;
+    text-align: center;
+    font-size: 11px;
+    color: #57606a;
+    border-bottom: 1px solid #bbb;
+    z-index: 1;
+}
+/* Weekday-holiday highlight in the Chart.js palette red (ADR-205 amendment):
+   the column carries the buffer bar's diagonal stripe texture, in red; the
+   header stays a solid tint so the day number reads. */
+.workitem_gantt .gantt_day_head.gantt_nonworking { background: rgba(255, 99, 132, 0.22); color: #b23a52; }
+.workitem_gantt .gantt_day_head.gantt_friday { background: rgb(225, 241, 250); }
+.workitem_gantt .gantt_nonworking_col {
+    background: repeating-linear-gradient(45deg,
+        rgba(255, 99, 132, 0.20), rgba(255, 99, 132, 0.20) 5px,
+        rgba(255, 99, 132, 0.07) 5px, rgba(255, 99, 132, 0.07) 10px);
+}
+.workitem_gantt .gantt_friday_col { background: rgb(225, 241, 250); }
+.workitem_gantt .gantt_bar,
+.workitem_gantt .gantt_track_bar {
+    font-size: 11px;
+    line-height: 1.5;
+    margin: 1px;
+    padding: 1px 5px;
+    border-radius: 3px;
+    overflow: hidden;
+    white-space: nowrap;
+    text-overflow: ellipsis;
+    color: #fff;
+    cursor: default;
+}
+.workitem_gantt .gantt_todo { background: #9aa5b1; }
+.workitem_gantt .gantt_inprogress { background: #ffffdd; color: #333; box-shadow: inset 0 0 0 1px #bbb; }
+.workitem_gantt .gantt_done { background: #cfc; color: #57606a; box-shadow: inset 0 0 0 1px #e1e4e8; }
+.workitem_gantt .gantt_blocked { box-shadow: inset 0 0 0 1px #bbb; }
+.workitem_gantt .gantt_critical { outline: 1px solid #9a6700; outline-offset: -1px; } /* buffer-bar amber (dark) */
+.workitem_gantt .gantt_release_band {
+    text-align: center;
+    font-size: 11px;
+    font-weight: 600;
+    color: #57606a;
+    background: #eef1f4;
+    border-bottom: 1px solid #e1e4e8;
+    border-left: 1px solid #d0d7de;
+    padding: 2px 4px;
+    white-space: nowrap;
+    overflow: hidden;
+    text-overflow: ellipsis;
+}
+.workitem_gantt .gantt_buffer { color: #9a6700; }
+.critical_chain { margin-bottom: 16px; }
+.critical_chain h2 { font-size: 1.1em; margin-bottom: 6px; }
+.critical_chain .cc_group { margin: 8px 0; }
+.critical_chain .cc_group h3 { font-size: 0.95em; margin: 4px 0; }
+.critical_chain table.cc_chain { border-collapse: collapse; margin: 4px 0; }
+.critical_chain table.cc_chain th,
+.critical_chain table.cc_chain td { border: 1px solid #e1e4e8; padding: 2px 8px; text-align: left; font-size: 12px; }
+.critical_chain .cc_buffer,
+.critical_chain .cc_consumed,
+.critical_chain .cc_projected,
+.critical_chain .cc_finish { margin: 2px 0; font-size: 12px; }
+.critical_chain .cc_consumed { color: #57606a; }
+.critical_chain .cc_finish { font-weight: 600; }
+.critical_chain .cc_unestimated { color: #9a6700; font-style: italic; font-size: 12px; }
+.critical_chain .cc_group_body { display: flex; flex-wrap: wrap; gap: 24px; align-items: flex-start; }
+.critical_chain .cc_plan { flex: 1 1 320px; }
+.critical_chain .cc_fever { flex: 1 1 360px; max-width: 480px; height: 320px; position: relative; }
+.critical_chain .cc_fever .fever_canvas { width: 100%; height: 100%; }
+.workitem_gantt .gantt_buffer_bar {
+    font-size: 11px;
+    line-height: 1.5;
+    margin: 1px;
+    padding: 1px 5px;
+    border-radius: 3px;
+    text-align: center;
+    overflow: hidden;
+    white-space: nowrap;
+    text-overflow: ellipsis;
+    color: #9a6700;
+    background: repeating-linear-gradient(45deg, #ffe9b3, #ffe9b3 5px, #fff3d4 5px, #fff3d4 10px);
+    box-shadow: inset 0 0 0 1px #e0c068;
+    cursor: default;
+}
+.workitem_gantt .gantt_today { border-left: 2px solid #d33; z-index: 5; pointer-events: none; }
+/* Plan-vs-actual tracking lanes (ADR-213): hidden until the toolbar toggle adds
+   show-actuals; a hidden lane's grid tracks collapse to zero height. */
+.workitem_gantt .gantt_tracking_lane { display: none; }
+.workitem_gantt.show-actuals .gantt_tracking_lane { display: block; }
+.workitem_gantt .gantt_owner_tracking { font-weight: 400; font-style: italic; color: #57606a; }
+.workitem_gantt .gantt_track_committed { background: #b0b6bd; }
+.workitem_gantt .gantt_track_logged { background: #36a2eb; }
+.gantt_container .gantt_toolbar {
+    display: flex;
+    justify-content: flex-end;
+    gap: 6px;
+    padding: 4px 0;
+}
+.gantt_container .gantt_actuals_toggle {
+    font-size: 12px;
+    padding: 3px 10px;
+    border: 1px solid #d0d7de;
+    border-radius: 4px;
+    background: #f6f8fa;
+    cursor: pointer;
+}
+.gantt_container .gantt_actuals_toggle:hover { background: #eef1f4; }
 table.controlled:not(.odd-even) tbody tr:nth-child(odd) { background-color:#f6f7f8; }
 table.controlled:not(.odd-even) tbody tr:nth-child(even) { background-color: #fff; }
 table.controlled:not(.odd-even) tbody tr:nth-child(odd):hover,
@@ -224,7 +389,9 @@ img{
     background: #EEEEEE;
     border: 1px solid #ddd;
     position: fixed;
-    height: 100%;       /* 100% Full-height */
+    top: 0;             /* Anchor top and bottom so the pane spans exactly the   */
+    bottom: 0;          /* viewport; padding/border stay inside the border box so */
+                        /* overflow-y scroll can reach the last items.            */
     visibility: hidden;
     z-index: 1;
     overflow-y: auto;

data/lib/almirah/templates/scripts/main.js

@@ -25,7 +25,9 @@ function openNav() {
         document.getElementById("searchInput").style.display = "block";
       }
     }else{
-      if (document.title.includes("Traceability Matrix:")){
+      var navPane = document.getElementById('nav_pane');
+      var hasNav = navPane && navPane.innerHTML.trim() !== "";
+      if (document.title.includes("Traceability Matrix:") || !hasNav){
         document.getElementById('document_tree_menu_item').style.display = "none";
       } else {
         document.getElementById('document_tree_menu_item').style.display = "block";
@@ -74,7 +76,10 @@ function openNav() {
   
       modal.style.display = "block";
       modalImg.src = clicked.src;
-      captionText.innerHTML = clicked.alt;
+      // Author-supplied alt text: insert as plain text, never as HTML (ADR-188).
+      // Reading clicked.alt yields the decoded value, so innerHTML here would
+      // re-parse author markup as live DOM (DOM-based XSS).
+      captionText.textContent = clicked.alt;
   }
   
   function modal_close_OnClick(clicked){

data/lib/almirah/templates/scripts/orama_search.js

@@ -1,6 +1,18 @@
 // Do search only on the Index Page
 import { create, search, insert } from 'https://unpkg.com/@orama/orama@3.1.18/dist/browser/index.js'
 
+// Author-derived values are treated as untrusted (ADR-188). Every result field
+// is inserted with safe DOM interfaces (createTextNode / property assignment) and
+// never parsed as HTML, and any URL is admitted only if it is a relative reference
+// or uses an allowed scheme; otherwise the link is rendered inert.
+const ALLOWED_URL_SCHEMES = ['http', 'https', 'mailto'];
+function safeUrl(url) {
+    const s = (url == null ? '' : String(url)).trim();
+    const m = s.match(/^([a-z][a-z0-9+.-]*):/i);
+    if (!m) return s;                                  // relative path or anchor
+    return ALLOWED_URL_SCHEMES.includes(m[1].toLowerCase()) ? s : '#';
+}
+
 // Create DB
 const db = await create({
     schema: {
@@ -87,19 +99,20 @@ async function search_onKeyUp(){
             let cell = document.createElement("td");
             let i = document.createElement("i");
                 i.classList.add("fa","fa-file-text-o");
-                i.style.backgroundColor = "#" + doc_color;
+                if (/^[0-9a-fA-F]{3,8}$/.test(doc_color)) {
+                    i.style.backgroundColor = "#" + doc_color;
+                }
                 cell.appendChild(i);
             let textnode = document.createTextNode("\xa0" + doc_title);
             cell.appendChild(textnode);
             row.appendChild(cell)
             cell = document.createElement("td");
             
-            const a = document.createElement('a'); 
+            const a = document.createElement('a');
             const link = document.createTextNode(heading_text)
             a.appendChild(link);
             a.title = heading_text;
-            a.href = heading_url;
-            document.body.appendChild(a); 
+            a.href = safeUrl(heading_url);
 
             cell.appendChild(a);
             row.appendChild(cell)

data/lib/almirah.rb

@@ -54,8 +54,7 @@ class CLI < Thor
 end
 
 class Almirah
-  attr_accessor :project
-  attr_accessor :project_utility
+  attr_accessor :project, :project_utility
 
   def initialize(project_folder)
     config = ProjectConfiguration.new project_folder

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: Almirah
 version: !ruby/object:Gem::Version
-  version: 0.4.1
+  version: 0.4.3
 platform: ruby
 authors:
 - Oleksandr Ivanov
@@ -73,28 +73,38 @@ files:
 - lib/almirah/doc_items/markdown_list.rb
 - lib/almirah/doc_items/markdown_table.rb
 - lib/almirah/doc_items/paragraph.rb
+- lib/almirah/doc_items/scope_table.rb
 - lib/almirah/doc_items/source_code_paragraph.rb
 - lib/almirah/doc_items/text_line.rb
 - lib/almirah/doc_items/todo_block.rb
+- lib/almirah/doc_items/work_item.rb
 - lib/almirah/doc_parser.rb
 - lib/almirah/doc_types/base_document.rb
 - lib/almirah/doc_types/coverage.rb
+- lib/almirah/doc_types/critical_chain_page.rb
 - lib/almirah/doc_types/decision.rb
+- lib/almirah/doc_types/decision_grouping.rb
 - lib/almirah/doc_types/decisions_overview.rb
 - lib/almirah/doc_types/implementation.rb
 - lib/almirah/doc_types/index.rb
 - lib/almirah/doc_types/persistent_document.rb
+- lib/almirah/doc_types/planning_dates.rb
 - lib/almirah/doc_types/protocol.rb
 - lib/almirah/doc_types/source_file.rb
 - lib/almirah/doc_types/specification.rb
 - lib/almirah/doc_types/traceability.rb
 - lib/almirah/dom/doc_section.rb
 - lib/almirah/dom/document.rb
+- lib/almirah/html_safe.rb
 - lib/almirah/link_registry.rb
 - lib/almirah/navigation_pane.rb
 - lib/almirah/project.rb
+- lib/almirah/project/critical_chain.rb
 - lib/almirah/project/doc_linker.rb
+- lib/almirah/project/fever_chart.rb
 - lib/almirah/project/project_data.rb
+- lib/almirah/project/work_item_scheduler.rb
+- lib/almirah/project/working_calendar.rb
 - lib/almirah/project_configuration.rb
 - lib/almirah/project_template.rb
 - lib/almirah/project_utility.rb
@@ -124,7 +134,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.1
+rubygems_version: 4.0.6
 specification_version: 4
 summary: Almirah
 test_files: []