toga-ai 1.0.604 → 1.0.606

package/knowledge/1.0/apps/tools/INDEX.md

@@ -3,14 +3,14 @@
 | Doc | Summary | Files |
 |-----|---------|-------|
 | [Tools (1.0 Internal-Tools App) Architecture](architecture.md) | **Tools** is a standalone 1.0 (`App_`) application that houses many small internal tools behind simple interfaces, gated by Client_True staff persona. | tools/index.php, tools/.ebextensions/020_setup_git_libraries.config, tools/_/app/framework.php, tools/_/app/frameworkindex.php, tools/assets/img/favicon/favicon.ico, tools/assets/img/favicon/favicon-32x32.png, tools/assets/img/favicon/favicon-16x16.png, tools/assets/img/favicon/apple-touch-icon.png, tools/_/app/auth.php, tools/_/app/nav.php, tools/common/header.php, tools/common/footer.php, tools/mvc/get.php, tools/mvc/_TEMPLATE/get.php, tools/docs/ADDING_A_TOOL.md, tools/assets/css/theme.css, tools/assets/js/theme.js |
-| [ClickUp Sprint Dashboard (tools /clickup/react)](features/clickup-sprint-dashboard.md) | A native **ClickUp sprint dashboard** in the 1.0 `tools` app at route `/clickup/react`, built for a wall-mounted **TV display** ("TOGa IQ" internal sprint metri | tools/_/app/clickup/sprint.php, tools/v2/sprints/tile/index.php, tools/v2/sprints/current/index.php, tools/v2/sprints/status-breakdown/index.php, tools/v2/sprints/worktype-breakdown/index.php, tools/v2/sprints/points-by-dev/index.php, tools/v2/sprints/burndown/index.php, tools/assets/clickup/sprint-dashboard.html, tools/mvc/clickup/react/get.php, tools/mvc/login/get.php, tools/_/app/nav.php |
+| [Developer Dashboard (ClickUp Sprint, tools /developer)](features/clickup-sprint-dashboard.md) | A native **ClickUp sprint dashboard** in the 1.0 `tools` app at route `/developer` (the **"Developer Dashboard"**, renamed from `/clickup/react` / "Clickup" — s | tools/_/app/clickup/sprint.php, tools/v2/sprints/tile/index.php, tools/v2/sprints/current/index.php, tools/v2/sprints/status-breakdown/index.php, tools/v2/sprints/worktype-breakdown/index.php, tools/v2/sprints/points-by-dev/index.php, tools/v2/sprints/burndown/index.php, tools/assets/clickup/sprint-dashboard.html, tools/mvc/developer/get.php, tools/mvc/login/get.php, tools/_/app/nav.php |
 | [CloudFront Client Setup](features/cloudfront-client-setup.md) | An SSO-gated admin tool at **`/devops/cloudfront-clients`** in the Tools 1.0 app that onboards a client onto **CloudFront + Route 53 across multiple AWS account | tools/_/app/devops/cloudfront.php, tools/mvc/devops/cloudfront-clients/get.php, tools/mvc/devops/cloudfront-clients/post.php, tools/assets/js/cloudfront-clients.js, tools/assets/css/cloudfront-clients.css, tools/_/app/nav.php, tools/_/app/frameworkindex.php, tools/config.production.ini |
 | [Design Demo Admin](features/design-demo-admin.md) | A self-serve admin UI at **`/design`** in the SSO-protected **Tools** app that lets the design team publish self-contained "Claude Design" HTML exports as **ver | tools/_/app/design/github.php, tools/mvc/design/get.php, tools/mvc/design/post.php, tools/assets/css/design.css, tools/assets/js/design.js, tools/_/app/frameworkindex.php, tools/_/app/nav.php, tools/composer.json |
 | [Tools — Developers Folder (UUID & Password Generators)](features/developer-tools.md) | The first two tools shipped in the Tools app, both under the **Developers** folder and gated to personas **Development Team** / **TOGa Technology**. | tools/mvc/developers/uuid/get.php, tools/mvc/developers/password/get.php, tools/mvc/developers/password/post.php |
 | [/errors Curation Console (Tools → shared Core Logs DB)](features/errors-curation-console.md) | Internal-only triage/curation screen for the 2.0 Issue/Event error-reporting pipeline, built as a 1.0 Tools MVC page reading the **shared Core Logs DB** through | tools/mvc/errors/get.php, tools/mvc/errors/post.php, tools/mvc/errors/issue/get.php, tools/assets/css/style.css, tools/_/app/nav.php, tools/config.production.ini |
 | [Legacy Email Notifier (tools /email-migration/notify)](features/legacy-email-notifier.md) | An SSO-gated admin tool at **`/email-migration/notify`** (nav group **Email Migration** > **Legacy Notifier**, personas `['TOGa Technology','Development Team']` | tools/mvc/email-migration/notify/get.php, tools/mvc/email-migration/notify/post.php, tools/_/app/nav.php |
 | [Tools MVC — Routing, CSRF & App_Database Access Patterns](features/mvc-data-access-patterns.md) | The load-bearing 1.0 (`App_`) framework conventions a developer needs when adding a page to the Tools app — URL routing, CSRF, and DB access through `App_Databa | tools/_/app/nav.php, tools/mvc/get.php, library/app/error.php, library/app/database.php |
-| [OneUptime Monitor Status Panel & Outage Alerting (tools /clickup/react)](features/oneuptime-monitor-status-panel.md) | A live **operational monitor column** on the wall-display dashboard at `/clickup/react`. | tools/assets/clickup/sprint-dashboard.html, tools/mvc/clickup/react/get.php |
+| [OneUptime Monitor Status Panel & Outage Alerting (tools /developer)](features/oneuptime-monitor-status-panel.md) | A live **operational monitor column** on the wall-display dashboard at `/developer` (the route was renamed from `/clickup/react` — the internal asset path `asse | tools/assets/clickup/sprint-dashboard.html, tools/_/app/clickup/monitors.php, tools/v2/monitors/status/index.php, tools/mvc/developer/get.php |
 | [Tools Persona-Gated Navigation (App_Nav)](features/persona-gated-navigation.md) | `App_Nav` is the Tools app's two-level, **persona-gated** navigation. | tools/_/app/nav.php, tools/mvc/get.php |
 | [Tools SAML SSO Consumer & Persona-Gated Auth (App_Auth)](features/saml-sso-auth.md) | `App_Auth` is the Tools app's authentication layer: it consumes the SAML gateway `?saml=` handoff (see the 2.0 SAML downstream integration contract), establishe | tools/_/app/auth.php, tools/mvc/sso/initiate/get.php, tools/mvc/sso/get.php, tools/mvc/login/get.php, tools/mvc/login/post.php, tools/mvc/logout/get.php, tools/mvc/get.php, tools/config.production.ini, tools/config.local.ini |
 | [Talos Knowledge Base Admin UI (KB Documents + Vocabulary)](features/talos-kb-documents-admin.md) | > **PER-AI-MODEL, DATA-DRIVEN SCOPING (2026-07-29).** The KB-documents and Vocabulary admin > UIs were refactored from a single hard-coded **"development-team"* | tools/mvc/talos/kb-documents/get.php, tools/mvc/talos/kb-documents/post.php, tools/mvc/talos/knowledge-bases/get.php, tools/mvc/talos/knowledge-bases/post.php, tools/mvc/talos/vocabulary/get.php, tools/mvc/talos/vocabulary/post.php, tools/_/app/talos/s3.php, tools/_/app/talos/bedrock.php, tools/_/app/pg.php, tools/_/app/model/true/aimodels.php, tools/_/app/model/true/vectorindexes.php, tools/_/app/model/true/aimodels_vectorindexes.php, tools/_/app/worker.php, tools/_/app/nav.php, tools/config.production.ini, tools/config.alpha.ini, tools/.platform/httpd/conf.d/timeouts.conf, tools/.platform/hooks/prebuild/01-install-php-pgsql.sh, tools/.platform/hooks/postdeploy/01-restart-php.sh |

package/knowledge/1.0/apps/tools/architecture.md

@@ -117,21 +117,29 @@ authenticated user gets the dashboard's explicit empty-state (see
 
 ## Wall-display routes & third-party browser dependencies
 
-Tools is no longer only a click-through internal-tool shell: `/clickup/react` is an
-**unattended wall display** that holds a full-screen colour state **indefinitely** — an ambient,
-always-on status surface rather than a page someone visits (see
+Tools is no longer only a click-through internal-tool shell: `/developer` (renamed from
+`/clickup/react`) is an **unattended wall display** that holds a full-screen colour state
+**indefinitely** — an ambient, always-on status surface rather than a page someone visits (see
 `features/clickup-sprint-dashboard.md` and `features/oneuptime-monitor-status-panel.md`). Two
 architectural consequences:
 
-- **One cross-origin browser dependency.** Every other fetch in this app is same-origin and
-  authenticated by the SSO session cookie. The monitor column is the sole exception: the browser
-  POSTs directly to the OneUptime **public** status-page API on another host (CORS-open, no
-  credentials, raw JSON — not the api2 envelope). Nothing proxies it server-side today, so an
-  upstream CORS or availability change breaks that panel in the browser with no server-side signal.
-- **Iframed pages carry their own permission policy.** `mvc/clickup/react/get.php` embeds its
-  asset in an iframe, and browser autoplay policy is scoped **per-iframe** — an iframed page that
-  must play audio needs `allow="… autoplay"` on the frame or it is blocked silently. Unattended
-  displays additionally never receive the user gesture browsers require before audio plays.
+- **No cross-origin browser dependency any more — it is server-proxied.** Every fetch in this app
+  is now same-origin and authenticated by the SSO session cookie, including the monitor column:
+  the browser GETs `/v2/monitors/status/` (`App_Clickup_Monitors`), and the server does the
+  cross-origin POST to the OneUptime **public** status-page API, reduces ~250 KB → ~1 KB, caches
+  ~5s (APCu) and returns the api2 envelope. This removed the app's last cross-origin browser
+  dependency and the CORS / edge-cache / autoplay coupling it carried; the status-page ID moved
+  from a hardcoded HTML constant into config (`[oneuptime] status_page_id`, default
+  `DEFAULT_STATUS_PAGE_ID`).
+- **Iframed pages carry their own permission policy.** `mvc/developer/get.php` embeds its asset in
+  an iframe, and browser autoplay policy is scoped **per-iframe** — an iframed page that must play
+  audio needs `allow="… autoplay"` on the frame or it is blocked silently. Unattended displays
+  additionally never receive the user gesture browsers require before audio plays.
+- **`crypto.randomUUID()` is undefined on a non-secure origin.** Browser code served over plain
+  HTTP by hostname/LAN IP (not `localhost`) has no secure context, so `crypto.randomUUID()` and
+  `crypto.subtle` throw. The dashboard now guards its per-request `transactionId` behind a helper
+  (randomUUID → `getRandomValues` v4 → non-crypto id); any browser code in this app that must run
+  over a non-secure origin must do the same rather than call `crypto.randomUUID` unguarded.
 
 ## Adding a tool
 
@@ -157,11 +165,15 @@ Create `mvc/<folder>/<tool>/get.php` (copy `mvc/_TEMPLATE/get.php`), add one ent
   workflow's clear_env gotcha); a rotation does not un-expose git history. (Location only — no
   value recorded here.)
 - **SSO initiation + replay defense are open items** — see `features/saml-sso-auth.md`.
-- **Unproxied third-party polling from the browser (`/clickup/react`).** The monitor column pulls
-  ~250 KB from OneUptime every 5s — ~3 MB/min **per open tab** — to render about six numbers, and
-  hardcodes the status-page ID in the HTML asset. Recommended fix: a small server-side endpoint
-  (e.g. `/v2/monitors/status/`) that fetches, reduces and caches ~5s, moving the ID into config and
-  removing the cross-origin dependency. Advisory, not scheduled.
+- **~~Unproxied third-party polling from the browser~~ (resolved 2026-08-18).** The monitor column
+  used to pull ~250 KB from OneUptime cross-origin every poll (per open tab) and hardcode the
+  status-page ID in the HTML. It is now served by a same-origin server-side proxy
+  `/v2/monitors/status/` (`App_Clickup_Monitors`) that fetches, reduces to ~1 KB and caches ~5s
+  (APCu), with the status-page ID in config — one upstream fetch shared across all tabs, no
+  cross-origin dependency. See `features/oneuptime-monitor-status-panel.md`. **Framework gotcha
+  found building it (prod incident CV-2):** never call `curl_close()` in App_ code — it is
+  deprecated in PHP 8.5 and the strict error handler promotes that `E_DEPRECATED` to a fatal
+  (500). It is a no-op since PHP 8.0; drop it (or `unset($ch)`).
 - **Framework-level Sentry error reporting is an open gap.** Prod printed "Sentry is not
   installed" because `sentry/sentry` was missing from `composer.json` (added `^4.10`; sibling
   apps use `^4.10`/`^4.19`). But even with Sentry in `vendor/`, the 1.0 framework does **not**
@@ -170,6 +182,13 @@ Create `mvc/<folder>/<tool>/get.php` (copy `mvc/_TEMPLATE/get.php`), add one ent
   composer package must `require_once` the autoloader itself.
 
 ## Change history
+- 2026-08-18 — Renamed the wall-display route `/clickup/react` → `/developer` ("Developer
+  Dashboard"; folder `mvc/clickup/react/` → `mvc/developer/`, old route now 404s). Removed the
+  app's last cross-origin browser dependency: the OneUptime monitor column is now a same-origin
+  server-side proxy `/v2/monitors/status/` (`App_Clickup_Monitors`, ~250 KB→~1 KB, APCu ~5s,
+  status-page ID in config), resolving the "unproxied third-party polling" known issue. Recorded
+  the `curl_close()`-is-fatal-in-PHP-8.5-under-the-strict-handler framework gotcha (prod incident
+  CV-2) and the `crypto.randomUUID()` non-secure-origin gotcha. (jcardinal)
 - 2026-08-14 — Corrected the session model: sessions were on the file handler on per-instance
   local disk (not Redis as previously assumed), so every deploy logged everyone out; moved to the
   shared ElastiCache Redis `rediscluster` handler via `App_Framework_Tools::startSession()`

package/knowledge/1.0/apps/tools/features/clickup-sprint-dashboard.md

@@ -1,12 +1,12 @@
 ---
-title: ClickUp Sprint Dashboard (tools /clickup/react)
+title: Developer Dashboard (ClickUp Sprint, tools /developer)
 framework: "1.0"
 repo: tools
 project: Tools
 client: shared
 type: feature
 status: active
-updated: 2026-08-14
+updated: 2026-08-18
 owners: [kyalamarthi, jcardinal]
 files:
   - tools/_/app/clickup/sprint.php
@@ -17,7 +17,7 @@ files:
   - tools/v2/sprints/points-by-dev/index.php
   - tools/v2/sprints/burndown/index.php
   - tools/assets/clickup/sprint-dashboard.html
-  - tools/mvc/clickup/react/get.php
+  - tools/mvc/developer/get.php
   - tools/mvc/login/get.php
   - tools/_/app/nav.php
 related:
@@ -32,12 +32,13 @@ related:
 
 ## Summary
 
-A native **ClickUp sprint dashboard** in the 1.0 `tools` app at route `/clickup/react`,
-built for a wall-mounted **TV display** ("TOGa IQ" internal sprint metrics). It replaces a
+A native **ClickUp sprint dashboard** in the 1.0 `tools` app at route `/developer` (the
+**"Developer Dashboard"**, renamed from `/clickup/react` / "Clickup" — see the rename note
+below), built for a wall-mounted **TV display** ("TOGa IQ" internal sprint metrics). It replaces a
 standalone Node/Express prototype from a prior session, folding the dashboard into `tools`
 so it runs on the existing App\_ framework + SSO with no separate service.
 
-The page is now a **two-column split**: this sprint board at 80%, and an operational
+The page is now a **two-column split**: this sprint board at 75%, and an operational
 **monitor status column** filling the rest — documented separately in
 [OneUptime Monitor Status Panel](./oneuptime-monitor-status-panel.md). The sprint board itself
 was left byte-for-byte unchanged when that landed (its component was renamed `SprintBoard` and
@@ -60,7 +61,7 @@ connection (registry string `'db_team'`, from the `[database_team]` config secti
 (`{success, data, errors}`) so the tool is a faithful stand-in for api2.
 
 **Auth is done by hand as JSON**, not the HTML auth card: `App_Auth::isLoggedIn()` +
-`App_Nav::personasForRoute('/clickup/react')` + `hasAnyPersona`; on failure it returns a
+`App_Nav::personasForRoute('/developer')` + `hasAnyPersona`; on failure it returns a
 JSON **401/403** so the fetch-based UI gets a clean error instead of an HTML login page.
 
 Two 1.0-framework gotchas this engine had to work around (both reusable beyond this
@@ -87,6 +88,11 @@ Babel-standalone from CDN, JSX inside a `<script type="text/babel">`. **No build
 npm, no bundler.** It fetches `/v2/sprints/*` **same-origin**, so the SSO session cookie
 authenticates the calls automatically. Do not mistake this for a bundled React app.
 
+**Charts fill the card width.** Sprint Burndown and Sprint Points By Dev use
+`preserveAspectRatio="none"` (was `"xMidYMid meet"`) so the SVGs stretch left-to-right to fill
+the card instead of letterboxing with side margins. Tradeoff: text stretches slightly —
+acceptable on a wall TV.
+
 ### Retiring a work type or a departed developer — filter client-side, not in the mock
 
 Two `ALL_CAPS` constants near the top of the HTML drop rows from the **live** API responses,
@@ -113,18 +119,45 @@ dropped alongside STRETCH — with that category retired it tracked "Committed"
 earn a second line. The legend derives from the `BURNDOWN_SERIES` constant, so it updated
 itself; add or remove a line there rather than editing the legend.
 
-### Embed page — `mvc/clickup/react/get.php`
+### Embed page — `mvc/developer/get.php`
 
 A PHP MVC view that `requireAuth`s, then embeds `sprint-dashboard.html` in an iframe
-(cache-busted by `filemtime`). Heading "Clickup Dashboard", subtitle notes the data is
-"…refreshed every 5 min." The frame is `allow="fullscreen; autoplay"` — **autoplay is
-load-bearing**, not decorative: it is what lets the monitor column's outage beeps sound (see
+(cache-busted by `filemtime`). Heading "Developer Dashboard", iframe titled likewise. The frame
+is `allow="fullscreen; autoplay"` — **autoplay is load-bearing**, not decorative: it is what lets
+the monitor column's outage beeps sound (see
 [the monitor panel doc](./oneuptime-monitor-status-panel.md)).
 
+**Full-screen lives on the parent page, not inside the React frame.** The in-frame "Full screen"
+/ "Exit" buttons were removed; a single "Full screen" button now sits on `mvc/developer/get.php`
+(left-aligned, padding below) and fullscreens the **iframe element** itself (Esc or a second click
+exits; label toggles). `.cur-frame:fullscreen{position:fixed;width:100vw;height:100vh}` sizes it.
+The old **"Live"** pill and its pulse CSS were removed.
+
+### Route/name rename — `/clickup/react` → `/developer`
+
+The nav label "Clickup" → **"Developer"** and the route `/clickup/react` → **`/developer`**; the
+route folder moved `mvc/clickup/react/` → `mvc/developer/` (the old route now 404s "Page Not
+Found", verified). Every persona lookup was updated from `personasForRoute('/clickup/react')` to
+`'/developer'` in `nav.php`, `mvc/developer/get.php`, `sprint.php`, and `monitors.php`.
+**Deliberately left unchanged (not user-facing):** the internal asset path
+`assets/clickup/sprint-dashboard.html`, the `App_Clickup_*` class names, and the
+`_/app/clickup/` folder.
+
+### DEV-only mock-alert previewer — `MONITOR_MOCK_MODE`
+
+Separate from `USE_MOCK`. When `MONITOR_MOCK_MODE` is true, an on-screen **clickable badge**
+(Prev / Next / numbered dots) steps canned monitor scenarios (all-operational → one/two degraded
+→ offline → mixed), driving the monitor panel, standing edge tint, center popup and Web-Audio
+beeps exactly as a live transition would — so the alert states can be reviewed without a real
+outage. Keyboard (m / ← / → / 0-9) also works but only when the iframe holds focus (unreliable in
+an iframe), which is why the clickable buttons are the primary control. **Must be `false` for any
+deployed build.** (Reusable note: driving canned MODELS through the same alert hook is a clean way
+to demo edge-triggered alerts.)
+
 ### Nav — `_/app/nav.php`
 
 Registered under the **"Dashboard"** nav folder as
-`['label'=>'Clickup','route'=>'/clickup/react']`, persona-gated like every folder (see
+`['label'=>'Developer','route'=>'/developer']`, persona-gated like every folder (see
 [persona-gated-navigation](./persona-gated-navigation.md)). The old Power BI embed nav entry
 (`/clickup/dashboard`) was **removed** — the page file stays on disk, just unlinked — because
 the React dashboard supersedes it.
@@ -195,6 +228,19 @@ the React dashboard supersedes it.
   unaffected — the live API returns `points`. One-word fix (`count:` → `points:`) if anyone
   needs the mock; deliberately left alone as out of scope.
 
+- **`USE_MOCK = true` renders the WHOLE dashboard from fixtures and makes ZERO API calls** — this
+  was the real "all systems operational / no live data" bug (the master mock switch had been left
+  `true`). Diagnostic symptom set: green status + a suspiciously round monitor count ("37
+  monitors" is literally the `MONITOR_MOCK.total` constant, not live data) + **zero network
+  requests** + identical output across private / cache-cleared windows. Distinct from
+  `MONITOR_MOCK_MODE` (the alert previewer above) and from the broken `StatusChart` mock below.
+  Fix is `USE_MOCK = false`. It was diagnosed by inspecting the running server directly (curl of
+  the served asset + the `/v2` route), not through the browser.
+- **`crypto.randomUUID()` crashes the page to a black screen on a non-secure origin.** The page
+  stamps a per-request `transactionId` header with `crypto.randomUUID()`, which exists **only in a
+  secure context**; over plain HTTP by hostname/LAN IP it is `undefined` and throws before React
+  mounts. Guarded by a `transactionId()` helper (randomUUID → getRandomValues v4 → non-crypto id).
+  Full write-up in [the monitor panel doc](./oneuptime-monitor-status-panel.md).
 - **The old Power BI embed page (`mvc/clickup/dashboard/get.php`) keeps ~6 fixed colour
   literals on purpose — do NOT theme them.** Its card/frame colour `#0b1020` is matched to the
   embedded Power BI report canvas so nothing flashes white while the iframe loads. Themed
@@ -203,6 +249,17 @@ the React dashboard supersedes it.
   [App-Wide Colour Theme](./theme-light-dark.md).
 
 ## Change history
+- 2026-08-18 — **Renamed to the "Developer Dashboard" at `/developer`** (was "Clickup" /
+  `/clickup/react`; route folder moved `mvc/clickup/react/` → `mvc/developer/`, old route now
+  404s; all `personasForRoute` refs updated; internal `assets/clickup/…` path + `App_Clickup_*`
+  names left unchanged). Full-screen control moved from the React frame to the parent page (it
+  fullscreens the iframe element) and the "Live" pill was removed. Charts now
+  `preserveAspectRatio="none"` to fill the card width. Added the DEV-only `MONITOR_MOCK_MODE`
+  alert previewer (clickable badge stepping canned scenarios). Recorded two gotchas: the real
+  all-green-no-fetch bug was `USE_MOCK = true` (whole dashboard from fixtures, zero API calls, "37
+  monitors" = `MONITOR_MOCK.total`), and `crypto.randomUUID()` black-screening the page on a
+  non-secure origin. Monitor column now widened to 75% and fed by a server-side proxy (see the
+  monitor panel doc). (jcardinal)
 - 2026-08-14 — Retired the **STRETCH** work type (KPI tile, colour, Work Type slice) and removed
   the blue **"All"** burndown series, leaving Target + Committed; added the client-side
   `RETIRED_WORK_TYPES` / `FORMER_DEVS` response filters (editing the `USE_MOCK` fixtures does