Luna: Split language/currency selector into two dropdowns #17

Open
luna wants to merge 28 commits from luna/design-10 into master

28 Commits

Author SHA1 Message Date
James 9a84da34a4 templates: split language/currency selector into two dropdowns
Replaces the combined locale dropdown in base.tmpl with two independent
selectors as requested in issue #10.

Changes:
- Split nav-dropdown--locale into nav-dropdown--language and nav-dropdown--currency
- Language dropdown: flag + 2-letter code (e.g., 🇺🇸 EN)
- Currency dropdown: symbol + 3-letter code (e.g., $ USD)
- Independent JavaScript state management for each selector
- Maintains localStorage persistence for both preferences

Design requirements met:
- Both dropdowns fit within nav bar without wrapping
- Mobile: stack vertically in hamburger menu (CSS already in place)
- 8px gap between selectors using existing spacing vars
- Maintains current hover/click behavior

fixes #10

Author: Luna <luna-20250409-001>
2026-04-09 03:43:26 -04:00
James 8400acffb9 Add Agent Dispatcher - runs on forge, polls Zurich Gitea
Simple Go binary that:
- Polls git.clavitor.ai every 60 seconds from forge
- Dispatches 1 task per minute max (rate limited)
- Priority order: CRITICAL > HIGH > NORMAL > LOW
- Writes task files to .agent-tasks/<agent>/issue-#.md
- Built-in web UI at http://forge:8098
- Full verbose logging to .agent-dispatcher.log
- No external deps (no Prometheus, etc.)

Files:
- forge/dispatcher/main.go (the dispatcher)
- forge/dispatcher/README.md (instructions)
- forge/dispatcher/go.mod

Monitoring:
- Web dashboard: http://localhost:8098 (auto-refresh)
- Live logs: tail -f .agent-dispatcher.log
- Task files: ls .agent-tasks/<agent>/
2026-04-09 01:33:10 -04:00
James e71a50d729 Update root CLAUDE.md - mention Gitea login in Quickstart
Agents need Gitea login to participate in workflow.
This is now the first step in Quickstart.md.
Updated description to reflect this.
2026-04-09 01:25:23 -04:00
James d3200fb2bf Fix QUICKSTART.md with foundation approach - tea CLI just works
Added one-time setup:
- Export GITEA_TOKEN
- tea login add

This is THE foundation for agent workflow. Without this, agents can't:
- Query their tasks programmatically
- Create PRs
- Participate in the Git workflow

Updated workflow section:
- Use tea CLI for task list and PR creation
- No scripts needed
- No asking permission
- Commit with 'Fixes #N', push, create PR, wait for review

Added building section:
- Standard vs commercial (-tags commercial)
- Test before committing

Now Hans can:
1. tea issues list --assignees hans (see tasks)
2. Fix code
3. tea pulls create (submit for review)

Foundation: tea CLI works.
2026-04-09 01:25:08 -04:00
James cd1644128f Capture workflow friction from Hans' first real test session
Real issues found:
1. Daily review script bugs (checker needed checking)
2. Tea CLI auth not documented (had to describe commands)
3. Go module structure confusing (telemetry standalone)
4. Done signal ambiguous (had to ask permission)
5. Build tags not in QUICKSTART
6. Issue state machine undocumented (who closes?)
7. No task pickup skill (had to guess priority)

Biggest: Agents can't fully query/modify Gitea programmatically.
Options: A) Full autonomy (skills needed), B) Assisted (current), C) Hybrid.

Immediate fixes needed in QUICKSTART.md and handbook documentation.
2026-04-09 01:22:01 -04:00
James b4aced5c03 telemetry: fix CRITICAL silent failures (Cardinal Rule #1)
Fixes #2, #3, #4

Issue #2 - Silent database errors in updateSpan():
- Add error handling for telemetry INSERT (ERR-TELEMETRY-004)
- Add error handling for all table/index creation (ERR-TELEMETRY-005 to -010)
- Return HTTP 500 to client on insert failure

Issue #3 - Silent failure in Kuma push:
- Return early on non-OK status from Kuma
- Proper error logging with body close handling

Issue #4 - Unchecked flush error in tarpit:
- Verify http.Flusher available before tarpit
- Log ERR-TELEMETRY-040 and abort if flusher unavailable
- Remove redundant flusher checks in loop

All changes: security failures are now LOUD (Cardinal Rule #1)

Author: Hans <hans-20250409-001>
2026-04-09 01:20:08 -04:00
James 6d5837c7b4 Fix daily-review.sh bugs found by Hans
- Fixed A1-A3 checks: paths were missing 'clavis/' prefix
  * Now uses explicit counting (wc -l) instead of fragile exit codes
  * Shows violation count and first 3 matches on failure
- Added cd to script directory so it runs from repo root
- Updated G1 (empty directories) to:
  * Exclude known placeholders (edition/commercial)
  * Show review list instead of hard fail
  * User decides if dirs should be deleted
- Script now properly reports PASS/FAIL for all checks
2026-04-09 01:14:36 -04:00
James b920203314 Address Hans' workflow feedback - make it actionable
1. Created QUICKSTART.md (60 second read vs 1295 line handbook)
   - Who you are, 4 session-start actions, critical rules
   - All CLAUDE.md files now reference QUICKSTART first

2. Created scripts/daily-review.sh (automates Part 4 checks)
   - Runs Section A, F, G checks automatically
   - Reports PASS/FAIL with colors
   - Fails fast on foundation violations

3. Added workflow section to handbook
   - Where to find tasks (git.clavitor.ai)
   - Priority order (CRITICAL > HIGH > MEDIUM)
   - Engineer vs Reviewer responsibilities

4. Created tasks skill (.claude/skills/tasks/SKILL.md)
   - For querying Gitea issues programmatically
   - Will integrate with agent workflow

5. Updated all 11 CLAUDE.md files with concise headers
   - Quickstart link (60s)
   - Deep reference link (handbook Section V)
   - Agent identity + daily script command

Hans' feedback addressed:
-  Handbook too long → QUICKSTART.md
-  Daily review manual → automated script
-  Vague instructions → specific script + task query
-  No task queue → skill created
2026-04-09 01:10:39 -04:00
James fd27a9d173 Add workflow section: where to find tasks and review process
- Gitea issues location (tea CLI and web UI)
- Priority order (CRITICAL > HIGH > MEDIUM/LOW)
- Engineer workflow (pick up issue → branch → PR → wait for review)
- Reviewer workflow (Yurii, Victoria, Arthur review PRs)
- You merge approved PRs
2026-04-09 01:06:20 -04:00
James d10c3f8e23 Update Yurii CLI docs based on feedback
- Documented monorepo structure (use johan/clavitor, not sub-repos)
- Added --assignees plural flag (not --assignee)
- Added Known Limitations section:
  * Labels don't show in list view (workaround: tea issues view)
  * User discovery is hard (provided valid usernames)
  * 'no gitea login' noise (safe to ignore)
- Added file paths in descriptions (clavis/clavis-telemetry/main.go)
- Added curl command to list labels via API
2026-04-09 00:51:16 -04:00
James 3e9b82af4d Add Yurii's Gitea CLI workflow documentation
- tea CLI installed (/usr/local/bin/tea)
- Login with admin token
- Issue creation commands for audits
- Review workflow for engineer PRs
- Explicit can/cannot do rules
- Complete example session
2026-04-09 00:44:14 -04:00
James 68dcc2f2f4 telemetry: fix Cardinal Rule violations - add unique error codes
Fixes 4 Cardinal Rule violations identified by Yurii audit:

- ERR-TELEMETRY-001/002/003: Fatal error codes for DB init, CA loading, cert verify
- ERR-TELEMETRY-010/011/012/013/014: Database error handling in updateSpan()
- ERR-TELEMETRY-020/021/022: ntfy alert error codes with context
- ERR-TELEMETRY-030/031/032/033: Kuma push error handling (was silent)

Per CLAVITOR-AGENT-HANDBOOK.md Part 1:
- Every error now has unique ERR-TELEMETRY-XXX code
- Database errors in updateSpan() no longer silent
- Kuma push failures now logged (was silent with misleading comment)
- All errors include actionable context

Assignee: Hans
Auditor: Yurii
Refs: issues/001, issues/002, issues/003, issues/004
2026-04-08 18:05:00 -04:00
James 460d56dfb9 Add Shakib (Bangladesh) and Yurii (Russian) to agent personas
- Shakib: QA / Test Engineering — test coverage, regression detection
- Yurii: Code & Principle Review — architecture alignment, PR review
- Shakib triggered by: tests/*, coverage/, *_test.go
- Yurii triggered by: PRs touching security or principles (mandatory review)
- 15 agents total — diverse global roster
2026-04-08 15:37:52 -04:00
James 96f98ef807 Rename mobile agent: Maya → Xiao (晓)
Xiao (Chinese: 晓) means 'dawn/morning' - fitting for mobile.
Distinct from Western names (Sarah, Charles, Maria, James, etc.).
Short, memorable outlier in the agent roster.
2026-04-08 15:30:52 -04:00
James b327d86ee9 Add Maya as dedicated mobile agent
- Added Maya to agent persona table (iOS/Android specialist)
- Updated directory mapping: clavis-android/ios → Maya
- Updated clavis-ios/CLAUDE.md → You are Maya
- Updated clavis-android/CLAUDE.md → You are Maya
- James now focused solely on browser extensions
2026-04-08 15:30:06 -04:00
James 9860a679d4 Update all CLAUDE.md files to reference CLAVITOR-AGENT-HANDBOOK.md
Updated 13 CLAUDE.md files across all subprojects:
- Root CLAUDE.md → Section I (Culture)
- clavis-vault/CLAUDE.md → Section V: clavis-vault (Sarah)
- clavis-cli/CLAUDE.md → Section V: clavis-cli (Charles)
- clavis-chrome/firefox/safari/CLAUDE.md → Section V: Browser extensions (James)
- clavis-crypto/CLAUDE.md → Section V: clavis-crypto (Maria)
- clavis-ios/android/CLAUDE.md → Section V: Mobile (James)
- clavis-telemetry/CLAUDE.md → Section V: clavis-telemetry (Hans)
- clavitor.ai/CLAUDE.md → Section V: clavitor.ai/admin (Emma)
- clavitor.ai/admin/CLAUDE.md → Section V: clavitor.ai/admin (Emma)
- clavis-vault/edition/CLAUDE.md → Section V: clavis-vault (Sarah)

All references now point to the 5-section handbook structure.
2026-04-08 15:24:51 -04:00
James 44aa3df859 Create CLAVITOR-AGENT-HANDBOOK.md with 5 sections
Restructured from CLAVITOR-PRINCIPLES.md (10 parts → 5 sections):
- Section I — Culture (Part 1 + 5 + 6)
- Section II — Security (Part 2)
- Section III — Workflow (Part 4 + 10)
- Section IV — Operations (Part 7 + 8)
- Section V — Subprojects (Part 3 + 9)

No content lost, only reordered with new section headers.
1,515 lines (was 1,472) — 43 lines added for headers.
2026-04-08 15:20:39 -04:00
James 75f16ee05e Add George (market research) to agent personas
- George: Competitive analysis, pricing, positioning, ICP — analytical, curious, business-minded
- Directory mapping: research/*, competitive/*, pricing/*
2026-04-08 14:43:52 -04:00
James c0dbb11393 Add Hans (NOC/Operations) to agent personas
- Hans: Infrastructure, monitoring, POP health, alerts — calm under pressure, systematic, proactive
- Directory mapping: operations/*, monitoring/*, noc/*
2026-04-08 14:43:39 -04:00
James 7cdf9e30db Add Hugo (legal) to agent personas
- Hugo: Compliance, privacy policy, terms, licensing — cautious, precise, risk-aware
- Directory mapping: legal/*, LICENSE*, PRIVACY*
2026-04-08 14:43:08 -04:00
James ca3e92355b Add 'How agents know their name' section to Part 10
- Directory-based auto-detection (clavis-vault = Sarah, etc.)
- Override via user statement or .agent-name file
- Explicit confirmation when uncertain
2026-04-08 14:42:29 -04:00
James 44d43f86f9 Add Luna (design) and Thomas (tech writing) to agent personas
- Luna: UI/UX, CSS, visual systems — aesthetic, user-empathetic
- Thomas: Technical writing, guides, API docs — clear, pedagogical
2026-04-08 14:41:32 -04:00
James f4e85890e7 Update Part 10: Persona-based agent names
- Sarah (vault), Charles (CLI), Maria (crypto), James (extensions)
- Emma (central), Arthur (architecture), Victoria (security)
- Each with specialty and voice characteristics
- Session format: name-YYYYMMDD-NNN
- Release notes read like a team roster
2026-04-08 14:40:56 -04:00
James 2ca963abc0 Add agent naming convention to Part 10
- Use functional names (vault-agent, cli-agent, crypto-agent) not model names
- Added agent identity section to PR template
- Commit signature format: vault-agent <session-id>
- Table mapping subprojects to agent names
2026-04-08 14:40:17 -04:00
James 2fc48d9637 Add agent-authored PR workflow to Part 10
- Agent PR workflow with full context requirements
- PR template for agents with security checklist
- Session ID tracking for audit trail
- Human review requirements for security-critical changes
- Future state: limited auto-merge authority
2026-04-08 14:34:43 -04:00
James 00f21464c3 Add Part 10 — Git workflow
- Commit message format (imperative mood, 50 char subject, area prefixes)
- Commit early/often philosophy
- When to amend vs. new commit
- Push guidelines (never force main, destructive operations need approval)
- Repository hygiene (what to commit, .gitignore maintenance)
- Signed commits noted for future
2026-04-08 13:53:52 -04:00
James 199495cdd8 Add Part 8 (Compliance) and Part 9 (Localization) with user feedback
- F30/F31: Added FIPS 140-3, CGO avoidance, compiler optimizations (Cardinal Rule #3.5)
- F32: Differentiated audit retention: 7 years (paying) vs 90 days (non-paying)
- F33: Noted Zurich central addresses cross-border compliance
- F34: RTL explicitly not a priority
- F35: Form field detection kept unaddressed as core evolving feature
- F36: Already agreed on LLM methodology
2026-04-08 13:52:59 -04:00
James 724f64bda5 Update CLAVITOR-PRINCIPLES.md with all feedback fixes
- Added document version header (F25)
- Added test fixture key material rule with 32x same byte pattern (F21)
- Added LLM-only checks, removed grep emphasis (F26)
- Fixed Section A duplication and renumbered sections
- Fixed 'entire universe' -> 'primary universe' (F28)
- Fixed key tier table formatting (F29)
- Added escalation path with permanent ban rules (F23)
- Added note about master_key/L3/P3 being exceptionally rare terms
- Added Section C for test fixture security
- Created lib/errors.go with event registry and error handling flow
2026-04-08 13:48:54 -04:00