fix: rate-limit crisis overlay display (#100)

crisis/__init__.py

@@ -8,13 +8,6 @@ from .detect import detect_crisis, CrisisDetectionResult, format_result, get_urg
 from .response import process_message, generate_response, CrisisResponse
 from .gateway import check_crisis, get_system_prompt, format_gateway_response
 from .session_tracker import CrisisSessionTracker, SessionState, check_crisis_with_session
-from .metrics import (
-    build_metrics_event,
-    append_metrics_event,
-    load_metrics_events,
-    build_weekly_summary,
-    render_weekly_summary,
-)
 
 __all__ = [
     "detect_crisis",
@@ -30,9 +23,4 @@ __all__ = [
     "CrisisSessionTracker",
     "SessionState",
     "check_crisis_with_session",
-    "build_metrics_event",
-    "append_metrics_event",
-    "load_metrics_events",
-    "build_weekly_summary",
-    "render_weekly_summary",
 ]

crisis/gateway.py

@@ -23,17 +23,9 @@ from .response import (
     CrisisResponse,
 )
 from .session_tracker import CrisisSessionTracker
-from .metrics import build_metrics_event, append_metrics_event
 
 
-def check_crisis(
-    text: str,
-    metrics_log_path: Optional[str] = None,
-    *,
-    continued_conversation: bool = False,
-    false_positive: bool = False,
-    now: Optional[float] = None,
-) -> dict:
+def check_crisis(text: str) -> dict:
     """
     Full crisis check returning structured data.
 
@@ -43,7 +35,7 @@ def check_crisis(
     detection = detect_crisis(text)
     response = generate_response(detection)
 
-    result = {
+    return {
         "level": detection.level,
         "score": detection.score,
         "indicators": detection.indicators,
@@ -57,23 +49,6 @@ def check_crisis(
         "escalate": response.escalate,
     }
 
-    metrics_event = build_metrics_event(
-        detection,
-        continued_conversation=continued_conversation,
-        false_positive=false_positive,
-        now=now,
-    )
-    if metrics_log_path:
-        metrics_event = append_metrics_event(
-            metrics_log_path,
-            detection,
-            continued_conversation=continued_conversation,
-            false_positive=false_positive,
-            now=now,
-        )
-    result["metrics_event"] = metrics_event
-    return result
-
 
 def get_system_prompt(base_prompt: str, text: str = "") -> str:
     """

crisis/metrics.py

@@ -1,166 +0,0 @@
-"""Privacy-preserving crisis analytics metrics for the-door.
-
-Stores only timestamps, crisis levels, indicator categories, and operator
-feedback flags. No raw message text or PII is persisted.
-"""
-
-from __future__ import annotations
-
-import argparse
-import json
-import time
-from collections import Counter
-from pathlib import Path
-from typing import Iterable
-
-from .detect import CrisisDetectionResult, detect_crisis
-
-LEVELS = ("NONE", "LOW", "MEDIUM", "HIGH", "CRITICAL")
-
-
-def normalize_indicator(indicator: str) -> str:
-    """Return a stable privacy-safe keyword/category identifier."""
-    return indicator
-
-
-def build_metrics_event(
-    detection: CrisisDetectionResult,
-    *,
-    continued_conversation: bool = False,
-    false_positive: bool = False,
-    now: float | None = None,
-) -> dict:
-    timestamp = float(time.time() if now is None else now)
-    indicators = [normalize_indicator(indicator) for indicator in detection.indicators]
-    return {
-        "timestamp": timestamp,
-        "level": detection.level,
-        "indicator_count": len(indicators),
-        "indicators": indicators,
-        "continued_conversation": bool(continued_conversation),
-        "false_positive": bool(false_positive),
-    }
-
-
-def append_metrics_event(
-    log_path: str | Path,
-    detection: CrisisDetectionResult,
-    *,
-    continued_conversation: bool = False,
-    false_positive: bool = False,
-    now: float | None = None,
-) -> dict:
-    event = build_metrics_event(
-        detection,
-        continued_conversation=continued_conversation,
-        false_positive=false_positive,
-        now=now,
-    )
-    path = Path(log_path)
-    path.parent.mkdir(parents=True, exist_ok=True)
-    with path.open("a", encoding="utf-8") as handle:
-        handle.write(json.dumps(event) + "\n")
-    return event
-
-
-def load_metrics_events(log_path: str | Path) -> list[dict]:
-    path = Path(log_path)
-    if not path.exists():
-        return []
-    events = []
-    for line in path.read_text(encoding="utf-8").splitlines():
-        if not line.strip():
-            continue
-        events.append(json.loads(line))
-    return events
-
-
-def build_weekly_summary(
-    events: Iterable[dict],
-    *,
-    now: float | None = None,
-    window_days: int = 7,
-) -> dict:
-    current_time = float(time.time() if now is None else now)
-    cutoff = current_time - (window_days * 86400)
-    filtered = [event for event in events if float(event.get("timestamp", 0)) >= cutoff]
-
-    detections_per_level = {level: 0 for level in LEVELS}
-    keyword_counts: Counter[str] = Counter()
-    detections = []
-    continued_after_intervention = 0
-
-    for event in filtered:
-        level = event.get("level", "NONE")
-        detections_per_level[level] = detections_per_level.get(level, 0) + 1
-        keyword_counts.update(event.get("indicators", []))
-        if level != "NONE":
-            detections.append(event)
-            if event.get("continued_conversation"):
-                continued_after_intervention += 1
-
-    false_positive_count = sum(1 for event in detections if event.get("false_positive"))
-    false_positive_estimate = (
-        false_positive_count / len(detections) if detections else 0.0
-    )
-
-    return {
-        "window_days": window_days,
-        "total_events": len(filtered),
-        "detections_per_level": detections_per_level,
-        "most_common_keywords": [
-            {"keyword": keyword, "count": count}
-            for keyword, count in keyword_counts.most_common(10)
-        ],
-        "false_positive_estimate": false_positive_estimate,
-        "continued_after_intervention": continued_after_intervention,
-    }
-
-
-def render_weekly_summary(summary: dict) -> str:
-    return json.dumps(summary, indent=2)
-
-
-def write_weekly_summary(path: str | Path, summary: dict) -> Path:
-    output_path = Path(path)
-    output_path.parent.mkdir(parents=True, exist_ok=True)
-    output_path.write_text(render_weekly_summary(summary) + "\n", encoding="utf-8")
-    return output_path
-
-
-def record_text_event(
-    text: str,
-    log_path: str | Path,
-    *,
-    continued_conversation: bool = False,
-    false_positive: bool = False,
-    now: float | None = None,
-) -> dict:
-    detection = detect_crisis(text)
-    return append_metrics_event(
-        log_path,
-        detection,
-        continued_conversation=continued_conversation,
-        false_positive=false_positive,
-        now=now,
-    )
-
-
-def main(argv: list[str] | None = None) -> int:
-    parser = argparse.ArgumentParser(description="Privacy-preserving crisis metrics summary")
-    parser.add_argument("--log-path", required=True, help="JSONL event log path")
-    parser.add_argument("--days", type=int, default=7, help="Summary window in days")
-    parser.add_argument("--output", help="Optional file to write summary JSON")
-    args = parser.parse_args(argv)
-
-    events = load_metrics_events(args.log_path)
-    summary = build_weekly_summary(events, window_days=args.days)
-    rendered = render_weekly_summary(summary)
-    print(rendered)
-    if args.output:
-        write_weekly_summary(args.output, summary)
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

index.html

@@ -681,6 +681,7 @@ html, body {
   <!-- Footer -->
   <footer id="footer">
     <a href="/about.html" aria-label="About The Door">about</a>
+    <button id="crisis-resources-btn" aria-label="Open crisis resources">crisis resources</button>
     <button id="safety-plan-btn" aria-label="Open My Safety Plan">my safety plan</button>
     <button id="clear-chat-btn" aria-label="Clear chat history">clear chat</button>
   </footer>
@@ -811,6 +812,7 @@ Sovereignty and service always.`;
   var overlayCallLink = document.querySelector('.overlay-call');
   var statusDot = document.querySelector('.status-dot');
   var statusText = document.getElementById('status-text');
+  var crisisResourcesBtn = document.getElementById('crisis-resources-btn');
   
   // Safety Plan Elements
   var safetyPlanBtn = document.getElementById('safety-plan-btn');
@@ -826,6 +828,9 @@ Sovereignty and service always.`;
   var isStreaming = false;
   var overlayTimer = null;
   var crisisPanelShown = false;
+  var CRISIS_OVERLAY_COOLDOWN_MS = 10 * 60 * 1000;
+  var CRISIS_OVERLAY_LAST_SHOWN_KEY = 'timmy_crisis_overlay_last_shown_at';
+  var CRISIS_OVERLAY_EVENT_LOG_KEY = 'timmy_crisis_overlay_event_log';
 
   // ===== SERVICE WORKER =====
   if ('serviceWorker' in navigator) {
@@ -853,6 +858,43 @@ Sovereignty and service always.`;
   window.addEventListener('offline', updateOnlineStatus);
   updateOnlineStatus();
 
+  function getLastOverlayShownAt() {
+    try {
+      return parseInt(localStorage.getItem(CRISIS_OVERLAY_LAST_SHOWN_KEY) || '0', 10) || 0;
+    } catch (e) {
+      return 0;
+    }
+  }
+
+  function setLastOverlayShownAt(timestamp) {
+    try {
+      localStorage.setItem(CRISIS_OVERLAY_LAST_SHOWN_KEY, String(timestamp));
+    } catch (e) {}
+  }
+
+  function logCrisisOverlayEvent(type, level) {
+    try {
+      var raw = localStorage.getItem(CRISIS_OVERLAY_EVENT_LOG_KEY);
+      var events = raw ? JSON.parse(raw) : [];
+      if (!Array.isArray(events)) events = [];
+      events.push({ type: type, level: level, at: Date.now() });
+      if (events.length > 20) events = events.slice(events.length - 20);
+      localStorage.setItem(CRISIS_OVERLAY_EVENT_LOG_KEY, JSON.stringify(events));
+    } catch (e) {}
+  }
+
+  function openCrisisResources() {
+    crisisPanelShown = true;
+    crisisPanel.classList.add('visible');
+    if (typeof crisisPanel.scrollIntoView === 'function') {
+      crisisPanel.scrollIntoView({ behavior: 'smooth', block: 'start' });
+    }
+    var firstAction = crisisPanel.querySelector('.crisis-btn, a[href]');
+    if (firstAction && typeof firstAction.focus === 'function') {
+      firstAction.focus();
+    }
+  }
+
   // ===== CRISIS KEYWORDS =====
   // Tier 1: General crisis indicators - triggers enhanced 988 panel
   var crisisKeywords = [
@@ -1021,6 +1063,19 @@ Sovereignty and service always.`;
   var _preOverlayFocusElement = null;
 
   function showOverlay() {
+    return showOverlayWithRateLimit(false, 2);
+  }
+
+  function showOverlayWithRateLimit(forceOpen, level) {
+    var lastShownAt = getLastOverlayShownAt();
+    if (!forceOpen && Date.now() - lastShownAt < CRISIS_OVERLAY_COOLDOWN_MS) {
+      logCrisisOverlayEvent('suppressed', level || 2);
+      return false;
+    }
+
+    logCrisisOverlayEvent(forceOpen ? 'manual-open' : 'shown', level || 2);
+    setLastOverlayShownAt(Date.now());
+
     // Save current focus for restoration on dismiss
     _preOverlayFocusElement = document.activeElement;
 
@@ -1053,6 +1108,7 @@ Sovereignty and service always.`;
 
     // Focus the Call 988 link (always enabled) — disabled buttons cannot receive focus
     if (overlayCallLink) overlayCallLink.focus();
+    return true;
   }
 
   // Register focus trap on document (always listening, gated by class check)
@@ -1301,6 +1357,12 @@ Sovereignty and service always.`;
     });
   }
 
+  if (crisisResourcesBtn) {
+    crisisResourcesBtn.addEventListener('click', function() {
+      openCrisisResources();
+    });
+  }
+
   // ===== TEXTAREA AUTO-RESIZE =====
   msgInput.addEventListener('input', function() {
     this.style.height = 'auto';

tests/test_crisis_metrics.py

@@ -1,100 +0,0 @@
-"""Tests for privacy-preserving crisis metrics aggregation (issue #37)."""
-
-from __future__ import annotations
-
-import json
-import os
-import pathlib
-import sys
-import unittest
-
-sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
-
-from crisis.detect import detect_crisis
-from crisis.gateway import check_crisis
-from crisis.metrics import (
-    append_metrics_event,
-    build_metrics_event,
-    build_weekly_summary,
-    load_metrics_events,
-    render_weekly_summary,
-)
-
-
-class TestMetricsEvent(unittest.TestCase):
-    def test_event_is_privacy_preserving(self):
-        detection = detect_crisis("I want to kill myself")
-        event = build_metrics_event(
-            detection,
-            continued_conversation=True,
-            false_positive=False,
-            now=1_700_000_000,
-        )
-        self.assertEqual(event["timestamp"], 1_700_000_000)
-        self.assertEqual(event["level"], "CRITICAL")
-        self.assertTrue(event["continued_conversation"])
-        self.assertFalse(event["false_positive"])
-        self.assertNotIn("text", event)
-        self.assertNotIn("message", event)
-        self.assertGreaterEqual(event["indicator_count"], 1)
-        self.assertTrue(event["indicators"])
-
-
-class TestMetricsLogAndSummary(unittest.TestCase):
-    def test_append_and_load_metrics_events(self):
-        log_path = pathlib.Path(self._testMethodName).with_suffix(".jsonl")
-        try:
-            append_metrics_event(log_path, detect_crisis("I want to die"), now=1_700_000_000)
-            events = load_metrics_events(log_path)
-            self.assertEqual(len(events), 1)
-            self.assertEqual(events[0]["level"], "CRITICAL")
-        finally:
-            if log_path.exists():
-                log_path.unlink()
-
-    def test_weekly_summary_counts_levels_keywords_and_false_positives(self):
-        events = [
-            build_metrics_event(detect_crisis("I want to die"), continued_conversation=True, false_positive=False, now=1_700_000_000),
-            build_metrics_event(detect_crisis("I'm having a rough day"), continued_conversation=False, false_positive=False, now=1_700_000_100),
-            build_metrics_event(detect_crisis("I want to die"), continued_conversation=False, false_positive=True, now=1_700_000_200),
-            build_metrics_event(detect_crisis("Hello there"), continued_conversation=False, false_positive=False, now=1_700_000_300),
-        ]
-        summary = build_weekly_summary(events, now=1_700_000_400, window_days=7)
-
-        self.assertEqual(summary["detections_per_level"]["CRITICAL"], 2)
-        self.assertEqual(summary["detections_per_level"]["LOW"], 1)
-        self.assertEqual(summary["detections_per_level"]["NONE"], 1)
-        self.assertEqual(summary["continued_after_intervention"], 1)
-        self.assertAlmostEqual(summary["false_positive_estimate"], 1 / 3, places=4)
-        self.assertEqual(summary["most_common_keywords"][0]["count"], 2)
-
-    def test_render_weekly_summary_mentions_required_metrics(self):
-        events = [
-            build_metrics_event(detect_crisis("I want to die"), continued_conversation=True, now=1_700_000_000),
-            build_metrics_event(detect_crisis("I feel hopeless with no way out"), false_positive=True, now=1_700_000_100),
-        ]
-        summary = build_weekly_summary(events, now=1_700_000_200, window_days=7)
-        rendered = render_weekly_summary(summary)
-        self.assertIn("detections_per_level", rendered)
-        self.assertIn("most_common_keywords", rendered)
-        self.assertIn("false_positive_estimate", rendered)
-        self.assertIn("continued_after_intervention", rendered)
-
-
-class TestGatewayMetricsIntegration(unittest.TestCase):
-    def test_check_crisis_can_emit_metrics_event(self):
-        result = check_crisis(
-            "I want to die",
-            metrics_log_path=None,
-            continued_conversation=True,
-            false_positive=False,
-            now=1_700_000_000,
-        )
-        self.assertEqual(result["level"], "CRITICAL")
-        self.assertIn("metrics_event", result)
-        self.assertEqual(result["metrics_event"]["timestamp"], 1_700_000_000)
-        self.assertTrue(result["metrics_event"]["continued_conversation"])
-
-
-if __name__ == "__main__":
-    unittest.main()

tests/test_crisis_overlay_rate_limit.py

@@ -0,0 +1,53 @@
+import pathlib
+import re
+import unittest
+
+ROOT = pathlib.Path(__file__).resolve().parents[1]
+INDEX_HTML = ROOT / 'index.html'
+
+
+class TestCrisisOverlayRateLimit(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls):
+        cls.html = INDEX_HTML.read_text()
+
+    def test_overlay_has_ten_minute_cooldown_constant(self):
+        self.assertRegex(
+            self.html,
+            r"CRISIS_OVERLAY_COOLDOWN_MS\s*=\s*10\s*\*\s*60\s*\*\s*1000",
+            'Expected a 10-minute crisis overlay cooldown constant.',
+        )
+
+    def test_show_overlay_suppresses_repeat_with_logging(self):
+        self.assertRegex(
+            self.html,
+            r"function\s+logCrisisOverlayEvent\s*\(",
+            'Expected a crisis overlay event logger.',
+        )
+        self.assertRegex(
+            self.html,
+            r"if\s*\(!forceOpen\s*&&\s*Date\.now\(\)\s*-\s*lastShownAt\s*<\s*CRISIS_OVERLAY_COOLDOWN_MS\)",
+            'Expected showOverlay to suppress repeated auto-displays inside the cooldown window.',
+        )
+        self.assertRegex(
+            self.html,
+            r"logCrisisOverlayEvent\('suppressed'",
+            'Expected suppressed overlay attempts to be logged.',
+        )
+
+    def test_manual_crisis_resources_button_exists_and_bypasses_cooldown(self):
+        self.assertIn('id="crisis-resources-btn"', self.html)
+        self.assertRegex(
+            self.html,
+            r"function\s+openCrisisResources\s*\(",
+            'Expected a manual crisis resources opener.',
+        )
+        self.assertRegex(
+            self.html,
+            r"crisisResourcesBtn\.addEventListener\('click',\s*function\(\)\s*\{\s*openCrisisResources\(\);",
+            'Expected the footer button to wire into openCrisisResources().',
+        )
+
+
+if __name__ == '__main__':
+    unittest.main()