Commit graph

186 commits

Author SHA1 Message Date
Vadym Samoilenko
84dcfc46b9 fix(auth): registration bypasses email gate — add setAuth() to properly init React state
Previously Register.tsx wrote auth_token directly to localStorage without
calling setToken/setUser in AuthContext. This made isAuthenticated=true
(computed from localStorage) while user=null (React state), so ProtectedRoute's
user.email_verified check was never reached.

- AuthContext: add setAuth(token, userData) that syncs both localStorage and React state
- Register: use setAuth() instead of direct localStorage write
- Register: add !registered guard to auto-redirect effect to prevent bypassing check-inbox screen

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 19:32:29 +01:00
Vadym Samoilenko
2ae08f6d0a fix(mobile): admin CreditSettings + AIConfig form grids responsive 2026-05-24 19:08:35 +01:00
Vadym Samoilenko
8edc291b59 fix(mobile): responsive tabs grid-cols, FocusGroupSession fixed height, MyUsage table scroll 2026-05-24 19:07:44 +01:00
Vadym Samoilenko
aac5764999 feat(auth): hard-gate routes behind email verification — VerifyRequired page + ProtectedRoute guard 2026-05-24 18:54:36 +01:00
Vadym Samoilenko
9659c58286 fix(auth): banner persists after email verification — add refreshUser() to flush sessionStorage cache 2026-05-24 18:49:35 +01:00
Vadym Samoilenko
3f7f6fb621 fix(backend): get_settings fills missing DEFAULTS keys for stale config documents 2026-05-24 18:08:02 +01:00
Vadym Samoilenko
9eca0fbd52 fix(i18n): dashboard welcome greeting — remove {{name}} interpolation dupe 2026-05-24 18:07:59 +01:00
Vadym Samoilenko
0a90a285e7 feat(i18n): UserCreator + FocusGroupModerator tab labels — EN/UK/RU 2026-05-24 18:07:56 +01:00
Vadym Samoilenko
8ec9a123b0 feat(i18n): landing LivePreview + UseCases sections — EN/UK/RU 2026-05-24 18:07:53 +01:00
Vadym Samoilenko
8df1e6c5b1 fix(landing): credit tooltip — Tooltip → Popover for click-triggered behaviour 2026-05-24 18:07:49 +01:00
Vadym Samoilenko
769e4323a2 feat(ui): language switcher — active label + dropdown for others 2026-05-24 18:07:46 +01:00
Vadym Samoilenko
ab28ebd765 feat(i18n): login, register, focus group setup, persona editor — EN/UK/RU
- Login.tsx: auth.login_heading, login_subtitle, email_or_username_label,
  password_label, signing_in, sign_in_button, no_account_q, create_one_free
- Register.tsx: full form labels, check-inbox screen, toast messages,
  data processing consent, plan badge credits (all 3 locales)
- SetupTab.tsx: session name, research brief, topics, duration, model,
  thinking depth, verbosity, materials — new focus_group_setup namespace
- PersonaEditor.tsx: all form labels, section headings, OCEAN traits,
  goals/frustrations/motivations, think-feel-do, scenarios, toast messages —
  new persona_editor namespace
- Locale files: 80+ new keys across EN/UK/RU

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 17:39:44 +01:00
Vadym Samoilenko
802c004ca4 feat(i18n): full EN/UK/RU coverage — app pages, landing, AppLayout switcher
- Add LanguageSwitcher to AppLayout header (all authenticated pages)
- Fix Pricing tooltip: remove nested TooltipProvider (broken hover popup)
- Landing: FAQ, HowItWorks, Comparison, Testimonials, FeatureGrid, Footer
- App pages: Dashboard, Admin, MyUsage, Billing
- Toast messages: FocusGroups, SyntheticUsers, FocusGroupSession (28 toasts)
- New namespaces: faq, how_it_works, comparison, testimonials, features,
  footer, dashboard, admin, usage, billing, focus_groups, synthetic_users,
  focus_group_session — 130+ keys across EN/UK/RU

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 16:23:36 +01:00
Vadym Samoilenko
8e763cca75 fix: add .dockerignore to exclude node_modules from build context
Without .dockerignore, COPY . . was overwriting the npm ci install
with the server's stale node_modules, causing Rollup to pick up the
wrong @radix-ui/react-slot version.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 15:34:18 +01:00
Vadym Samoilenko
8cc643b331 fix: npm overrides for @radix-ui/react-slot — dedupe all nested to 1.2.4
Fixes Docker build failure: react-progress brought react-primitive@2.1.4
which needs createSlot from react-slot >=1.2.0. npm overrides ensure
single 1.2.4 copy is used everywhere, no nested conflicts.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 15:32:17 +01:00
Vadym Samoilenko
b9ba1e902e fix: update @radix-ui/react-slot to 1.2.4 — createSlot export for Docker build
npm ci in Docker resolved react-progress's nested react-primitive which
requires createSlot from react-slot >=1.2.0.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 15:23:52 +01:00
Vadym Samoilenko
183a3cb2ff feat: full report export — LLM executive summary + transcript + themes
GET /api/focus-groups/{id}/report/download generates a markdown report
with AI-written executive summary, key themes with quotes, and full
transcript. Frontend adds "Export Full Report" button to ThemesPanel.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 15:08:40 +01:00
Vadym Samoilenko
ef7ac32a2b fix: audit — crash fixes, SSRF, API key leak, whitelist merge, stale closure
Frontend:
- SetupTab: restore missing Input import (runtime crash on render)
- SetupTab: wrap onSubmit in event adapter — button outside <form> passed undefined
- Pricing: load() → useCallback, add to useEffect deps (stale closure)
- Pricing: credits_label hardcoded string → t() interpolation

Backend:
- admin/ai-config/test: remove endpoint/api_key from request body (SSRF fix)
  — endpoint and key now read exclusively from DB or env vars
- admin/ai-config/test: str(exc) → sanitized message, full exc logged server-side only
  (prevents API key leak via OpenAI SDK error context)
- admin/ai-config PUT: whitelist allowed fields on provider/model merge
  (prevents injection of arbitrary keys into DB document)
- admin/ai-config PUT: validate active_provider/model are non-empty strings
- admin.py: move deferred imports (time, os, AsyncOpenAI) to module level
- billing.py: guard get_json() with or {} (prevents AttributeError on empty body)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 14:51:56 +01:00
Vadym Samoilenko
de990fb486 fix: remove unused eslint-disable, fix AIConfigTab updateProvider type
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 14:34:00 +01:00
Vadym Samoilenko
d05480610d feat(admin): AI model catalog — provider config, model routing, test connection
- app_settings.py: add ai_providers[], active_provider, active_main/mini_model to DEFAULTS
- admin.py: GET/PUT /api/admin/ai-config (API key masked on read, preserved if not updated)
           POST /api/admin/ai-config/test (latency + connection check)
- AIConfigTab.tsx: provider dropdown, endpoint/key fields, models table with role+enabled toggles,
                   main/mini routing selects, "Test connection" with live latency feedback
- Admin.tsx: add "AI Config" tab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 14:32:23 +01:00
Vadym Samoilenko
14f63a3e0c feat(seo): react-helmet-async, JSON-LD, robots.txt, sitemap, llms.txt
- HelmetProvider wraps App; PageMeta component for per-page title/description/OG/noindex
- Index.tsx: Organization + SoftwareApplication JSON-LD structured data
- Login, Register: noindex meta
- public/robots.txt: Allow /, Disallow app routes, Sitemap pointer
- public/sitemap.xml: static sitemap for landing sections
- public/llms.txt: Cohorta description for ChatGPT Search / Perplexity

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 14:29:42 +01:00
Vadym Samoilenko
31d25a9293 feat(i18n): add EN/uk/ru support with language switcher in navbar
- Install i18next, react-i18next, i18next-browser-languagedetector
- src/i18n/index.ts: init with localStorage → navigator detection, fallback EN
- Locales: en/uk/ru common.json covering nav, hero, pricing, auth namespaces
- LanguageSwitcher component (EN/UA/RU pill buttons) — desktop header + mobile menu
- Hero, Pricing, Header: all public-facing strings wrapped in t()

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 14:27:37 +01:00
Vadym Samoilenko
b457afdfa6 feat(focus-groups): redesign setup form — text rewrite + accordion for AI settings
- All copy updated: "Session name", "What are you researching?", "Key topics to explore",
  "Session length", "Thinking depth", "Response length", "Attach materials (optional)"
- llm_model, reasoning_effort, verbosity moved into collapsible "Advanced settings" accordion
- Word-count indicators now float inside textareas (absolute overlay) instead of below
- Removed duplicate amber text blocks and redundant FormDescriptions
- FocusGroupModerator header: "AI Focus Group Moderator" → "Set Up Your Research Session"

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 14:22:53 +01:00
Vadym Samoilenko
c8d4591117 feat: form redesign — Synthetic Users (Epic 3)
AI Recruiter form:
- Word-count indicator floats inside textarea corner (absolute overlay)
- Model dropdown: compact label "Model", removed description, shorter option text
- personaCount: removed description, label → "Number of personas"

Manual Creation form:
- Behavioral Attributes (4): Slider → Input[type=number] inline with label+% suffix
- OCEAN traits (5): Slider → Input[type=number] with description below
- userCount header: +/- buttons → single Input[type=number] (w-16, centered)
- TabsList: sticky top-0 z-10 so tabs stay visible while scrolling
- Removed unused Slider and Sliders imports

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 14:18:32 +01:00
Vadym Samoilenko
d679691cc3 feat: OG image, meta tags, dynamic pricing from admin
Epic 1 — OG-image & SEO base:
- Replace wrong og-image.png with branded 1200×630 Cohorta design
- index.html: full title, og:type/url/image dimensions, twitter:card, canonical

Epic 2 — Pricing from admin panel:
- Pricing.tsx: remove hardcoded DEFAULT_PACKS; add loading skeleton and error+retry state
- Features list and personas/sessions counts computed from API credits/costs
- billing.py /packs: also returns persona_cost and run_cost for frontend math
- app_settings.py: add popular:True to pro pack default

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-24 14:11:42 +01:00
Vadym Samoilenko
3ec9aeaf42 fix: page titles invisible on dark bg — text-slate-900 → text-foreground
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 23:12:14 +01:00
Vadym Samoilenko
f4dc3074c0 feat: compass/crosshair SVG decorations across landing page, fix email from noreply→hello
- CompassBg: 8 compass marks scattered across full page height with brand amber
  accent on inner ring, faded crosshair lines, cardinal ticks — z-index 0 (behind content)
- Index.tsx: CompassBg rendered as absolute layer inside relative wrapper
- email_service: EMAIL_FROM default hello@ (noreply triggers spam filters)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 23:06:42 +01:00
Vadym Samoilenko
969198adde fix: logo SVG in navbar, scroll-to-top at root level, threshold 100px
- Header: replace banner PNG with Logo SVG mark (44px) + Cohorta wordmark — crisp at all sizes
- ScrollToTop: moved from PublicLayout to App.tsx root — works on all pages,
  avoids position:fixed breakage from framer-motion transform ancestors
- ScrollToTop: threshold 100px → appears sooner after scroll

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 23:00:34 +01:00
Vadym Samoilenko
4e910704bc fix: billing idempotency atomic, logo in navbar, dark bg on app pages, Home btn, resend-verification
- billing: atomic upsert-based idempotency (fixes TOCTOU + crash-between-ops race)
- billing: payment_id uses `or` to handle explicit null payment_intent
- Header: logo h-[44px] contained within navbar frame, remove md overflow
- Header: Home button scrolls to top when already on /
- Header: useMemo limelightItems to prevent useLayoutEffect thrash on scroll
- Header: remove dead scrolled ternary (py-2 : py-2)
- Hero: remove md:pt-[176px] gap (logo no longer overflows)
- LimelightNav: clearTimeout cleanup, remove items from effect deps
- SyntheticUsers/FocusGroups: bg-slate-50 → bg-background (dark theme fix)
- api.ts + Dashboard: resendVerification passes user email (fixes 400 error)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:55:06 +01:00
Vadym Samoilenko
28bb04a2b2 fix: import datetime class in User.save() — NameError blocked all registration
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:47:13 +01:00
Vadym Samoilenko
c0df44a049 fix: responsive navbar logo, AppLayout SVG logo, landing prices from API
- Header: logo h-48px mobile / h-168px desktop, md:self-start overflow
- PublicLayout: main pt-80px to match new header height
- Hero: -mt-80px cancels PublicLayout pt, responsive inner pt
- AppLayout: replace PNG logo (black box) with SVG mark + text
- billing.py: add public GET /billing/packs endpoint
- api.ts + Pricing.tsx: fetch packs from API, fallback to defaults

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:38:44 +01:00
Vadym Samoilenko
614493b58e fix: navbar pill fixed 64px, logo top-anchored overflows below frame
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:31:01 +01:00
Vadym Samoilenko
bce8b4e3db fix: logo 4x larger (168px), remove hero min-h-screen gap
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:25:44 +01:00
Vadym Samoilenko
c0536df9e2 feat: logo banner in navbar, 45px hero gap, navbar sized to logo
- Move cohorta-banner.png into navbar left slot (height 42px, w-auto)
- Navbar py-2/py-1.5 sized to logo — no left spacer needed
- PublicLayout main: pt-20 → pt-[58px] to match new navbar height
- Hero: mt/pt offsets updated to 58px; content starts 45px below navbar
- Hero: banner block removed (now lives in navbar)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:22:27 +01:00
Vadym Samoilenko
31391bbae4 fix: hero justify-start, banner 400px height, pt-3 top gap
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:19:05 +01:00
Vadym Samoilenko
5c61ee9d36 fix: banner full hero width above grid, scroll-to-top threshold 200px
- Banner moved outside the grid to full max-w-7xl width — naturally ~240px tall at desktop
- Removed banner from left column (no longer constrained to 50% column width)
- ScrollToTop visibility threshold: 400px → 200px (appears after ~1 screen scroll)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:13:14 +01:00
Vadym Samoilenko
6083a1e53c fix: stripe webhook idempotency + payment_status guard
- Check payment_status == "paid" before granting credits — prevents granting
  credits for unpaid/pending checkout sessions
- Idempotency guard: query credit_transactions for existing ref.stripe_payment_id
  before processing — Stripe retries webhooks on timeout, this prevents double credits

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:10:25 +01:00
Vadym Samoilenko
b923605ea7 fix: UK London branding, restore wavy bg, limelight scroll-tracking, banner size, scroll-to-top btn
- Replace all EU-hosted/Lisbon/GDPR-safe text → UK hosted/London/GDPR compliant (Footer, FinalCTA, LegalStub, About)
- Hero: remove GridGlowCanvas, restore wavy-lines + glow-orb background
- Hero: banner full column width, height clamp(120px, 14vw, 200px)
- Header: LimelightNav now tracks scroll position — detects #product / #pricing sections, updates activeIndex in real time
- Header: whitespace-nowrap on Log in + Get started buttons
- Add ScrollToTop floating button — appears after 400px scroll, framer-motion fade+scale, fixed bottom-right

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:08:52 +01:00
Vadym Samoilenko
f66d726e07 feat: required Terms + Data Processing consent on register, consent timestamps in admin
- Register form: two required checkboxes (Terms of Service / Privacy Policy + UK GDPR data processing)
- Zod schema uses z.literal(true) — form won't submit until both are checked
- Backend: validates accept_terms + accept_data_processing flags (400 if missing)
- User.save() writes created_at, consent_terms_at, consent_data_processing_at to MongoDB
- Admin UsersTab: Registered column, email verified badge, consent timestamps in edit dialog
- Fix: EU-hosted → UK hosted badge in register form

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:06:43 +01:00
Vadym Samoilenko
fe59c42f0a feat: limelight navbar, grid-glow hero bg, UK hosted trust badges
- Remove logo mark from navbar; center LimelightNav with sliding orange limelight indicator
- Replace static hero bg (wavy lines + glow-orb) with animated GridGlowCanvas (grid + drifting amber glows)
- Hero banner moved into left content column, sized proportionally (clamp 72-120px)
- Hero trust line replaced with pill badges: UK hosted · GDPR compliant · Results in 5 min
- Remove TrustBar ("Built on enterprise infrastructure") section entirely
- Fix Bulk Export card: .PDF → .JSON (matches actual export formats: markdown/csv/json)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 22:02:33 +01:00
Vadym Samoilenko
83924901e6 fix: hero banner no bg, bigger image clamp(200,28vw,400px), full width 2026-05-23 21:48:32 +01:00
Vadym Samoilenko
af9db666d2 fix: nginx no-cache for SPA root, favicon cache-bust ?v=2 2026-05-23 21:45:02 +01:00
Vadym Samoilenko
5c2ba7503e feat: full-width hero banner with transparent logo on dark bg 2026-05-23 21:42:59 +01:00
Vadym Samoilenko
37f3cf1704 fix: remove dark bg from logo PNG (Pillow alpha), drop mix-blend-mode 2026-05-23 21:32:56 +01:00
Vadym Samoilenko
2d6c715c5b feat: header mark-only icon, logo banner in hero via screen blend, favicon update
- Header nav: SVG C-mark only (no PNG box, no dark bg)
- Hero: full logo PNG banner below nav with mix-blend-mode:screen (removes dark bg)
- favicon.svg: updated C-mark colours to match rebrand

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 21:31:12 +01:00
Vadym Samoilenko
aa2c66dbe9 fix: logo height sm 28→70px (×2.5) 2026-05-23 21:27:36 +01:00
Vadym Samoilenko
0a55eed687 fix: replace logo PNG with correct Cohorta.png lockup
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 21:23:27 +01:00
Vadym Samoilenko
b7065cfe78 fix: correct emails, AImpress LTD links, cookie banner, wavy bg, credits math
- All hello@cohorta.ai-impress.comhello@ai-impress.com
- All AImpress LTD instances now link to https://ai-impress.com/
- Cookie consent banner (bottom sheet, accept/decline, localStorage)
- Hero background: grid → wavy SVG lines
- Fix credits math: 50cr = 5 personas × 2cr + 1 session × 40cr (not 25 personas)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 21:20:43 +01:00
Vadym Samoilenko
868df66f76 feat: replace SVG logo with PNG lockup (Cohorta copy.png) in horizontal variant
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 21:08:42 +01:00
Vadym Samoilenko
93bc2f953d fix: smaller header logo (sm size) + remove stale .ico favicon fallback
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 21:06:31 +01:00