feat: add safety plan version history diff view (#96)

crisis/__init__.py

@@ -8,13 +8,6 @@ from .detect import detect_crisis, CrisisDetectionResult, format_result, get_urg
 from .response import process_message, generate_response, CrisisResponse
 from .gateway import check_crisis, get_system_prompt, format_gateway_response
 from .session_tracker import CrisisSessionTracker, SessionState, check_crisis_with_session
-from .metrics import (
-    build_metrics_event,
-    append_metrics_event,
-    load_metrics_events,
-    build_weekly_summary,
-    render_weekly_summary,
-)
 
 __all__ = [
     "detect_crisis",
@@ -30,9 +23,4 @@ __all__ = [
     "CrisisSessionTracker",
     "SessionState",
     "check_crisis_with_session",
-    "build_metrics_event",
-    "append_metrics_event",
-    "load_metrics_events",
-    "build_weekly_summary",
-    "render_weekly_summary",
 ]

crisis/gateway.py

@@ -23,17 +23,9 @@ from .response import (
     CrisisResponse,
 )
 from .session_tracker import CrisisSessionTracker
-from .metrics import build_metrics_event, append_metrics_event
 
 
-def check_crisis(
-    text: str,
-    metrics_log_path: Optional[str] = None,
-    *,
-    continued_conversation: bool = False,
-    false_positive: bool = False,
-    now: Optional[float] = None,
-) -> dict:
+def check_crisis(text: str) -> dict:
     """
     Full crisis check returning structured data.
 
@@ -43,7 +35,7 @@ def check_crisis(
     detection = detect_crisis(text)
     response = generate_response(detection)
 
-    result = {
+    return {
         "level": detection.level,
         "score": detection.score,
         "indicators": detection.indicators,
@@ -57,23 +49,6 @@ def check_crisis(
         "escalate": response.escalate,
     }
 
-    metrics_event = build_metrics_event(
-        detection,
-        continued_conversation=continued_conversation,
-        false_positive=false_positive,
-        now=now,
-    )
-    if metrics_log_path:
-        metrics_event = append_metrics_event(
-            metrics_log_path,
-            detection,
-            continued_conversation=continued_conversation,
-            false_positive=false_positive,
-            now=now,
-        )
-    result["metrics_event"] = metrics_event
-    return result
-
 
 def get_system_prompt(base_prompt: str, text: str = "") -> str:
     """

crisis/metrics.py

@@ -1,166 +0,0 @@
-"""Privacy-preserving crisis analytics metrics for the-door.
-
-Stores only timestamps, crisis levels, indicator categories, and operator
-feedback flags. No raw message text or PII is persisted.
-"""
-
-from __future__ import annotations
-
-import argparse
-import json
-import time
-from collections import Counter
-from pathlib import Path
-from typing import Iterable
-
-from .detect import CrisisDetectionResult, detect_crisis
-
-LEVELS = ("NONE", "LOW", "MEDIUM", "HIGH", "CRITICAL")
-
-
-def normalize_indicator(indicator: str) -> str:
-    """Return a stable privacy-safe keyword/category identifier."""
-    return indicator
-
-
-def build_metrics_event(
-    detection: CrisisDetectionResult,
-    *,
-    continued_conversation: bool = False,
-    false_positive: bool = False,
-    now: float | None = None,
-) -> dict:
-    timestamp = float(time.time() if now is None else now)
-    indicators = [normalize_indicator(indicator) for indicator in detection.indicators]
-    return {
-        "timestamp": timestamp,
-        "level": detection.level,
-        "indicator_count": len(indicators),
-        "indicators": indicators,
-        "continued_conversation": bool(continued_conversation),
-        "false_positive": bool(false_positive),
-    }
-
-
-def append_metrics_event(
-    log_path: str | Path,
-    detection: CrisisDetectionResult,
-    *,
-    continued_conversation: bool = False,
-    false_positive: bool = False,
-    now: float | None = None,
-) -> dict:
-    event = build_metrics_event(
-        detection,
-        continued_conversation=continued_conversation,
-        false_positive=false_positive,
-        now=now,
-    )
-    path = Path(log_path)
-    path.parent.mkdir(parents=True, exist_ok=True)
-    with path.open("a", encoding="utf-8") as handle:
-        handle.write(json.dumps(event) + "\n")
-    return event
-
-
-def load_metrics_events(log_path: str | Path) -> list[dict]:
-    path = Path(log_path)
-    if not path.exists():
-        return []
-    events = []
-    for line in path.read_text(encoding="utf-8").splitlines():
-        if not line.strip():
-            continue
-        events.append(json.loads(line))
-    return events
-
-
-def build_weekly_summary(
-    events: Iterable[dict],
-    *,
-    now: float | None = None,
-    window_days: int = 7,
-) -> dict:
-    current_time = float(time.time() if now is None else now)
-    cutoff = current_time - (window_days * 86400)
-    filtered = [event for event in events if float(event.get("timestamp", 0)) >= cutoff]
-
-    detections_per_level = {level: 0 for level in LEVELS}
-    keyword_counts: Counter[str] = Counter()
-    detections = []
-    continued_after_intervention = 0
-
-    for event in filtered:
-        level = event.get("level", "NONE")
-        detections_per_level[level] = detections_per_level.get(level, 0) + 1
-        keyword_counts.update(event.get("indicators", []))
-        if level != "NONE":
-            detections.append(event)
-            if event.get("continued_conversation"):
-                continued_after_intervention += 1
-
-    false_positive_count = sum(1 for event in detections if event.get("false_positive"))
-    false_positive_estimate = (
-        false_positive_count / len(detections) if detections else 0.0
-    )
-
-    return {
-        "window_days": window_days,
-        "total_events": len(filtered),
-        "detections_per_level": detections_per_level,
-        "most_common_keywords": [
-            {"keyword": keyword, "count": count}
-            for keyword, count in keyword_counts.most_common(10)
-        ],
-        "false_positive_estimate": false_positive_estimate,
-        "continued_after_intervention": continued_after_intervention,
-    }
-
-
-def render_weekly_summary(summary: dict) -> str:
-    return json.dumps(summary, indent=2)
-
-
-def write_weekly_summary(path: str | Path, summary: dict) -> Path:
-    output_path = Path(path)
-    output_path.parent.mkdir(parents=True, exist_ok=True)
-    output_path.write_text(render_weekly_summary(summary) + "\n", encoding="utf-8")
-    return output_path
-
-
-def record_text_event(
-    text: str,
-    log_path: str | Path,
-    *,
-    continued_conversation: bool = False,
-    false_positive: bool = False,
-    now: float | None = None,
-) -> dict:
-    detection = detect_crisis(text)
-    return append_metrics_event(
-        log_path,
-        detection,
-        continued_conversation=continued_conversation,
-        false_positive=false_positive,
-        now=now,
-    )
-
-
-def main(argv: list[str] | None = None) -> int:
-    parser = argparse.ArgumentParser(description="Privacy-preserving crisis metrics summary")
-    parser.add_argument("--log-path", required=True, help="JSONL event log path")
-    parser.add_argument("--days", type=int, default=7, help="Summary window in days")
-    parser.add_argument("--output", help="Optional file to write summary JSON")
-    args = parser.parse_args(argv)
-
-    events = load_metrics_events(args.log_path)
-    summary = build_weekly_summary(events, window_days=args.days)
-    rendered = render_weekly_summary(summary)
-    print(rendered)
-    if args.output:
-        write_weekly_summary(args.output, summary)
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

index.html

@@ -500,6 +500,184 @@ html, body {
   min-height: 60px;
 }
 
+.safety-plan-status {
+  min-height: 20px;
+  margin: 4px 0 18px;
+  font-size: 0.85rem;
+  color: #8b949e;
+}
+
+.safety-plan-status.success {
+  color: #3fb950;
+}
+
+.safety-plan-status.error {
+  color: #ff7b72;
+}
+
+.safety-plan-versioning {
+  margin-top: 24px;
+  padding-top: 20px;
+  border-top: 1px solid #30363d;
+}
+
+.safety-plan-versioning-grid {
+  display: grid;
+  gap: 16px;
+}
+
+.safety-plan-history-panel,
+.safety-plan-diff-panel {
+  background: #0d1117;
+  border: 1px solid #30363d;
+  border-radius: 12px;
+  padding: 16px;
+}
+
+.safety-plan-section-header h3 {
+  font-size: 0.95rem;
+  margin-bottom: 4px;
+}
+
+.safety-plan-section-header p {
+  font-size: 0.8rem;
+  color: #8b949e;
+  margin-bottom: 12px;
+}
+
+.safety-plan-history {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+
+.safety-plan-history-item {
+  border: 1px solid #30363d;
+  border-radius: 10px;
+  padding: 12px;
+  background: #161b22;
+}
+
+.safety-plan-history-item.active {
+  border-color: #58a6ff;
+  box-shadow: 0 0 0 1px rgba(88, 166, 255, 0.35);
+}
+
+.safety-plan-history-meta {
+  display: flex;
+  justify-content: space-between;
+  gap: 12px;
+  align-items: baseline;
+  margin-bottom: 8px;
+  flex-wrap: wrap;
+}
+
+.safety-plan-history-title {
+  font-size: 0.88rem;
+  font-weight: 600;
+  color: #e6edf3;
+}
+
+.safety-plan-history-note {
+  font-size: 0.78rem;
+  color: #8b949e;
+  margin-bottom: 10px;
+}
+
+.safety-plan-history-actions {
+  display: flex;
+  gap: 8px;
+  flex-wrap: wrap;
+}
+
+.safety-plan-history-button,
+.safety-plan-restore-button {
+  border-radius: 8px;
+  border: 1px solid #30363d;
+  background: transparent;
+  color: #e6edf3;
+  padding: 8px 12px;
+  font-size: 0.82rem;
+  cursor: pointer;
+}
+
+.safety-plan-history-button:hover,
+.safety-plan-restore-button:hover,
+.safety-plan-history-button:focus,
+.safety-plan-restore-button:focus {
+  border-color: #58a6ff;
+  color: #58a6ff;
+  outline: none;
+}
+
+.safety-plan-restore-button {
+  background: rgba(35, 134, 54, 0.14);
+}
+
+.safety-plan-diff {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+}
+
+.safety-plan-diff-meta {
+  font-size: 0.78rem;
+  color: #8b949e;
+}
+
+.safety-plan-diff-field {
+  border-top: 1px solid #21262d;
+  padding-top: 12px;
+}
+
+.safety-plan-diff-field:first-child {
+  border-top: none;
+  padding-top: 0;
+}
+
+.safety-plan-diff-field h4 {
+  font-size: 0.84rem;
+  margin-bottom: 8px;
+  color: #c9d1d9;
+}
+
+.safety-plan-diff-block {
+  white-space: pre-wrap;
+  line-height: 1.5;
+  border-radius: 8px;
+  padding: 10px;
+  font-size: 0.88rem;
+  margin-bottom: 8px;
+}
+
+.diff-unchanged {
+  background: #161b22;
+  color: #c9d1d9;
+}
+
+.diff-added {
+  background: rgba(46, 160, 67, 0.16);
+  border-left: 3px solid #2ea043;
+  color: #d2f4d3;
+}
+
+.diff-removed {
+  background: rgba(248, 81, 73, 0.16);
+  border-left: 3px solid #f85149;
+  color: #ffd8d3;
+}
+
+.safety-plan-empty {
+  color: #8b949e;
+  font-size: 0.85rem;
+}
+
+@media (min-width: 840px) {
+  .safety-plan-versioning-grid {
+    grid-template-columns: minmax(0, 0.9fr) minmax(0, 1.1fr);
+  }
+}
+
 .modal-footer {
   display: flex;
   justify-content: flex-end;
@@ -736,6 +914,28 @@ html, body {
         <label for="sp-environment">5. Making my environment safe</label>
         <textarea id="sp-environment" placeholder="e.g., Giving my car keys to a friend, locking away meds..."></textarea>
       </div>
+
+      <div id="safety-plan-status" class="safety-plan-status" role="status" aria-live="polite"></div>
+
+      <section class="safety-plan-versioning" aria-labelledby="safety-plan-history-title">
+        <div class="safety-plan-versioning-grid">
+          <div class="safety-plan-history-panel">
+            <div class="safety-plan-section-header">
+              <h3 id="safety-plan-history-title">Version History</h3>
+              <p>Each save stays on this device so you can review changes and restore an earlier plan.</p>
+            </div>
+            <div id="safety-plan-history" class="safety-plan-history"></div>
+          </div>
+
+          <div class="safety-plan-diff-panel">
+            <div class="safety-plan-section-header">
+              <h3>Diff View</h3>
+              <p>Compare the selected version against the version immediately before it.</p>
+            </div>
+            <div id="safety-plan-diff" class="safety-plan-diff"></div>
+          </div>
+        </div>
+      </section>
     </div>
     <div class="modal-footer">
       <button class="btn btn-secondary" id="cancel-safety-plan">Cancel</button>
@@ -820,12 +1020,26 @@ Sovereignty and service always.`;
   var cancelSafetyPlan = document.getElementById('cancel-safety-plan');
   var saveSafetyPlan = document.getElementById('save-safety-plan');
   var clearChatBtn = document.getElementById('clear-chat-btn');
+  var safetyPlanHistory = document.getElementById('safety-plan-history');
+  var safetyPlanDiff = document.getElementById('safety-plan-diff');
+  var safetyPlanStatus = document.getElementById('safety-plan-status');
+  var safetyPlanFields = {
+    warningSigns: document.getElementById('sp-warning-signs'),
+    coping: document.getElementById('sp-coping'),
+    distraction: document.getElementById('sp-distraction'),
+    help: document.getElementById('sp-help'),
+    environment: document.getElementById('sp-environment')
+  };
+  var SAFETY_PLAN_STORAGE_KEY = 'timmy_safety_plan';
+  var SAFETY_PLAN_VERSIONS_KEY = 'timmy_safety_plan_versions';
+  var MAX_SAFETY_PLAN_VERSIONS = 20;
 
   // ===== STATE =====
   var messages = [];
   var isStreaming = false;
   var overlayTimer = null;
   var crisisPanelShown = false;
+  var selectedSafetyPlanVersionId = null;
 
   // ===== SERVICE WORKER =====
   if ('serviceWorker' in navigator) {
@@ -1171,18 +1385,347 @@ Sovereignty and service always.`;
   });
 
   // ===== SAFETY PLAN LOGIC =====
-  function loadSafetyPlan() {
+  function emptySafetyPlan() {
+    return {
+      warningSigns: '',
+      coping: '',
+      distraction: '',
+      help: '',
+      environment: ''
+    };
+  }
+
+  function cloneSafetyPlan(plan) {
+    var normalized = emptySafetyPlan();
+    var source = plan || {};
+    Object.keys(normalized).forEach(function(key) {
+      normalized[key] = typeof source[key] === 'string' ? source[key] : '';
+    });
+    return normalized;
+  }
+
+  function applySafetyPlan(plan) {
+    var nextPlan = cloneSafetyPlan(plan);
+    Object.keys(safetyPlanFields).forEach(function(key) {
+      safetyPlanFields[key].value = nextPlan[key];
+    });
+  }
+
+  function getSafetyPlanFormData() {
+    return {
+      warningSigns: safetyPlanFields.warningSigns.value,
+      coping: safetyPlanFields.coping.value,
+      distraction: safetyPlanFields.distraction.value,
+      help: safetyPlanFields.help.value,
+      environment: safetyPlanFields.environment.value
+    };
+  }
+
+  function escapeHtml(value) {
+    return String(value || '')
+      .replace(/&/g, '&amp;')
+      .replace(/</g, '&lt;')
+      .replace(/>/g, '&gt;')
+      .replace(/"/g, '&quot;')
+      .replace(/'/g, '&#39;');
+  }
+
+  function setSafetyPlanStatus(message, tone) {
+    if (!safetyPlanStatus) return;
+    safetyPlanStatus.textContent = message || '';
+    safetyPlanStatus.className = 'safety-plan-status' + (tone ? ' ' + tone : '');
+  }
+
+  function getSafetyPlanVersions() {
     try {
-      var saved = localStorage.getItem('timmy_safety_plan');
-      if (saved) {
-        var plan = JSON.parse(saved);
-        document.getElementById('sp-warning-signs').value = plan.warningSigns || '';
-        document.getElementById('sp-coping').value = plan.coping || '';
-        document.getElementById('sp-distraction').value = plan.distraction || '';
-        document.getElementById('sp-help').value = plan.help || '';
-        document.getElementById('sp-environment').value = plan.environment || '';
+      var saved = localStorage.getItem(SAFETY_PLAN_VERSIONS_KEY);
+      if (!saved) return [];
+      var parsed = JSON.parse(saved);
+      if (!Array.isArray(parsed)) return [];
+      return parsed.filter(function(version) {
+        return version && version.id && version.plan;
+      });
+    } catch (e) {
+      return [];
+    }
+  }
+
+  function setSafetyPlanVersions(versions) {
+    localStorage.setItem(
+      SAFETY_PLAN_VERSIONS_KEY,
+      JSON.stringify((versions || []).slice(0, MAX_SAFETY_PLAN_VERSIONS))
+    );
+  }
+
+  function buildSafetyPlanVersion(plan, meta) {
+    return {
+      id: 'spv_' + Date.now() + '_' + Math.random().toString(36).slice(2, 8),
+      savedAt: new Date().toISOString(),
+      source: (meta && meta.source) || 'save',
+      restoredFrom: meta && meta.restoredFrom ? meta.restoredFrom : null,
+      plan: cloneSafetyPlan(plan)
+    };
+  }
+
+  function ensureSafetyPlanVersionHistory() {
+    var versions = getSafetyPlanVersions();
+    if (versions.length) {
+      return versions;
+    }
+
+    try {
+      var saved = localStorage.getItem(SAFETY_PLAN_STORAGE_KEY);
+      if (!saved) {
+        return [];
       }
-    } catch (e) {}
+      var parsed = JSON.parse(saved);
+      var migrated = [buildSafetyPlanVersion(parsed, { source: 'legacy' })];
+      setSafetyPlanVersions(migrated);
+      return migrated;
+    } catch (e) {
+      return [];
+    }
+  }
+
+  function formatSafetyPlanTimestamp(iso) {
+    var date = new Date(iso || '');
+    if (isNaN(date.getTime())) {
+      return 'Saved just now';
+    }
+    return date.toLocaleString([], {
+      year: 'numeric',
+      month: 'short',
+      day: 'numeric',
+      hour: 'numeric',
+      minute: '2-digit'
+    });
+  }
+
+  function getSafetyPlanVersionById(versionId) {
+    var versions = getSafetyPlanVersions();
+    for (var i = 0; i < versions.length; i++) {
+      if (versions[i].id === versionId) {
+        return { version: versions[i], index: i, versions: versions };
+      }
+    }
+    return null;
+  }
+
+  function calculateSafetyPlanDiff(previousText, currentText) {
+    var previous = String(previousText || '');
+    var current = String(currentText || '');
+    var start = 0;
+    while (start < previous.length && start < current.length && previous.charAt(start) === current.charAt(start)) {
+      start += 1;
+    }
+
+    var previousEnd = previous.length - 1;
+    var currentEnd = current.length - 1;
+    while (previousEnd >= start && currentEnd >= start && previous.charAt(previousEnd) === current.charAt(currentEnd)) {
+      previousEnd -= 1;
+      currentEnd -= 1;
+    }
+
+    return {
+      before: current.slice(0, start),
+      removed: previous.slice(start, previousEnd + 1),
+      added: current.slice(start, currentEnd + 1),
+      after: current.slice(currentEnd + 1)
+    };
+  }
+
+  function renderDiffSegmentHtml(previousText, currentText) {
+    var previous = String(previousText || '');
+    var current = String(currentText || '');
+
+    if (!previous && !current) {
+      return '<p class="safety-plan-empty">No content saved for this section yet.</p>';
+    }
+
+    if (previous === current) {
+      return '<div class="safety-plan-diff-block diff-unchanged">' + escapeHtml(current || 'No changes in this version.') + '</div>';
+    }
+
+    var diff = calculateSafetyPlanDiff(previous, current);
+    var blocks = [];
+    if (diff.before) {
+      blocks.push('<div class="safety-plan-diff-block diff-unchanged">' + escapeHtml(diff.before) + '</div>');
+    }
+    if (diff.removed) {
+      blocks.push('<div class="safety-plan-diff-block diff-removed">Removed<br>' + escapeHtml(diff.removed) + '</div>');
+    }
+    if (diff.added) {
+      blocks.push('<div class="safety-plan-diff-block diff-added">Added<br>' + escapeHtml(diff.added) + '</div>');
+    }
+    if (diff.after) {
+      blocks.push('<div class="safety-plan-diff-block diff-unchanged">' + escapeHtml(diff.after) + '</div>');
+    }
+    return blocks.join('');
+  }
+
+  function renderSafetyPlanDiff(versionId) {
+    if (!safetyPlanDiff) return;
+
+    var versions = getSafetyPlanVersions();
+    if (!versions.length) {
+      safetyPlanDiff.innerHTML = '<p class="safety-plan-empty">Save your plan to start tracking changes.</p>';
+      return;
+    }
+
+    var selected = getSafetyPlanVersionById(versionId || selectedSafetyPlanVersionId || versions[0].id);
+    if (!selected) {
+      selected = { version: versions[0], index: 0, versions: versions };
+      selectedSafetyPlanVersionId = versions[0].id;
+    }
+
+    var baseline = selected.versions[selected.index + 1]
+      ? cloneSafetyPlan(selected.versions[selected.index + 1].plan)
+      : emptySafetyPlan();
+    var currentPlan = cloneSafetyPlan(selected.version.plan);
+    var baselineLabel = selected.versions[selected.index + 1]
+      ? formatSafetyPlanTimestamp(selected.versions[selected.index + 1].savedAt)
+      : 'an empty plan';
+
+    var fields = [
+      ['Warning signs', 'warningSigns'],
+      ['Internal coping strategies', 'coping'],
+      ['People/Places for distraction', 'distraction'],
+      ['People I can ask for help', 'help'],
+      ['Making my environment safe', 'environment']
+    ];
+
+    var html = [
+      '<div class="safety-plan-diff-meta">Comparing ' +
+        escapeHtml(formatSafetyPlanTimestamp(selected.version.savedAt)) +
+        ' against ' + escapeHtml(baselineLabel) + '.</div>'
+    ];
+
+    fields.forEach(function(field) {
+      html.push(
+        '<div class="safety-plan-diff-field">' +
+          '<h4>' + escapeHtml(field[0]) + '</h4>' +
+          renderDiffSegmentHtml(baseline[field[1]], currentPlan[field[1]]) +
+        '</div>'
+      );
+    });
+
+    safetyPlanDiff.innerHTML = html.join('');
+  }
+
+  function renderSafetyPlanVersionHistory() {
+    if (!safetyPlanHistory) return;
+
+    var versions = getSafetyPlanVersions();
+    if (!versions.length) {
+      safetyPlanHistory.innerHTML = '<p class="safety-plan-empty">No saved versions yet. Each save creates a new local version.</p>';
+      renderSafetyPlanDiff(null);
+      return;
+    }
+
+    if (!selectedSafetyPlanVersionId || !getSafetyPlanVersionById(selectedSafetyPlanVersionId)) {
+      selectedSafetyPlanVersionId = versions[0].id;
+    }
+
+    var html = [];
+    versions.forEach(function(version, index) {
+      var note = 'Saved locally';
+      if (version.source === 'restore') {
+        note = 'Restored from an earlier version';
+      } else if (version.source === 'legacy') {
+        note = 'Imported from your previous saved plan';
+      }
+
+      html.push(
+        '<div class="safety-plan-history-item' + (selectedSafetyPlanVersionId === version.id ? ' active' : '') + '">' +
+          '<div class="safety-plan-history-meta">' +
+            '<span class="safety-plan-history-title">' + escapeHtml(index === 0 ? 'Current version' : 'Version ' + (versions.length - index)) + '</span>' +
+            '<span class="safety-plan-empty">' + escapeHtml(formatSafetyPlanTimestamp(version.savedAt)) + '</span>' +
+          '</div>' +
+          '<div class="safety-plan-history-note">' + escapeHtml(note) + '</div>' +
+          '<div class="safety-plan-history-actions">' +
+            '<button type="button" class="safety-plan-history-button" data-version-id="' + escapeHtml(version.id) + '">View diff</button>' +
+            '<button type="button" class="safety-plan-restore-button" data-restore-version-id="' + escapeHtml(version.id) + '">Restore this version</button>' +
+          '</div>' +
+        '</div>'
+      );
+    });
+
+    safetyPlanHistory.innerHTML = html.join('');
+    renderSafetyPlanDiff(selectedSafetyPlanVersionId);
+  }
+
+  function saveSafetyPlanVersion(plan, meta) {
+    var snapshot = buildSafetyPlanVersion(plan, meta);
+    var versions = getSafetyPlanVersions();
+    versions.unshift(snapshot);
+    setSafetyPlanVersions(versions);
+    localStorage.setItem(SAFETY_PLAN_STORAGE_KEY, JSON.stringify(snapshot.plan));
+    selectedSafetyPlanVersionId = snapshot.id;
+    renderSafetyPlanVersionHistory();
+    return snapshot;
+  }
+
+  function restoreSafetyPlanVersion(versionId) {
+    var selected = getSafetyPlanVersionById(versionId);
+    if (!selected) {
+      setSafetyPlanStatus('That version could not be restored.', 'error');
+      return;
+    }
+
+    applySafetyPlan(selected.version.plan);
+    var restored = saveSafetyPlanVersion(selected.version.plan, {
+      source: 'restore',
+      restoredFrom: selected.version.id
+    });
+    setSafetyPlanStatus(
+      'Restored version from ' + formatSafetyPlanTimestamp(selected.version.savedAt) + ' as the current plan.',
+      'success'
+    );
+    return restored;
+  }
+
+  function loadSafetyPlan() {
+    var versions = ensureSafetyPlanVersionHistory();
+    var latestPlan = versions.length ? versions[0].plan : null;
+
+    if (!latestPlan) {
+      try {
+        var saved = localStorage.getItem(SAFETY_PLAN_STORAGE_KEY);
+        latestPlan = saved ? JSON.parse(saved) : null;
+      } catch (e) {
+        latestPlan = null;
+      }
+    }
+
+    applySafetyPlan(latestPlan || emptySafetyPlan());
+    renderSafetyPlanVersionHistory();
+    if (versions.length) {
+      setSafetyPlanStatus('Version history stays on this device only.', '');
+    } else {
+      setSafetyPlanStatus('Every save creates a local version you can diff and restore.', '');
+    }
+  }
+
+  function openSafetyPlanModal(triggerEl) {
+    loadSafetyPlan();
+    safetyPlanModal.classList.add('active');
+    _activateSafetyPlanFocusTrap(triggerEl);
+  }
+
+  if (safetyPlanHistory) {
+    safetyPlanHistory.addEventListener('click', function(event) {
+      var restoreButton = event.target.closest('[data-restore-version-id]');
+      if (restoreButton) {
+        restoreSafetyPlanVersion(restoreButton.getAttribute('data-restore-version-id'));
+        return;
+      }
+
+      var diffButton = event.target.closest('[data-version-id]');
+      if (diffButton) {
+        selectedSafetyPlanVersionId = diffButton.getAttribute('data-version-id');
+        renderSafetyPlanVersionHistory();
+      }
+    });
   }
 
   closeSafetyPlan.addEventListener('click', function() {
@@ -1196,41 +1739,23 @@ Sovereignty and service always.`;
   });
 
   saveSafetyPlan.addEventListener('click', function() {
-    var plan = {
-      warningSigns: document.getElementById('sp-warning-signs').value,
-      coping: document.getElementById('sp-coping').value,
-      distraction: document.getElementById('sp-distraction').value,
-      help: document.getElementById('sp-help').value,
-      environment: document.getElementById('sp-environment').value
-    };
     try {
-      localStorage.setItem('timmy_safety_plan', JSON.stringify(plan));
-      safetyPlanModal.classList.remove('active');
-      _restoreSafetyPlanFocus();
-      alert('Safety plan saved locally.');
+      var snapshot = saveSafetyPlanVersion(getSafetyPlanFormData(), { source: 'save' });
+      setSafetyPlanStatus('Saved locally as a new version at ' + formatSafetyPlanTimestamp(snapshot.savedAt) + '.', 'success');
     } catch (e) {
-      alert('Error saving plan.');
+      setSafetyPlanStatus('Error saving plan.', 'error');
     }
   });
 
   // ===== SAFETY PLAN FOCUS TRAP (fix #65) =====
-  // Focusable elements inside the modal, in tab order
-  var _spFocusableIds = [
-    'close-safety-plan',
-    'sp-warning-signs',
-    'sp-coping',
-    'sp-distraction',
-    'sp-help',
-    'sp-environment',
-    'cancel-safety-plan',
-    'save-safety-plan'
-  ];
   var _spTriggerEl = null; // element that opened the modal
 
   function _getSpFocusableEls() {
-    return _spFocusableIds
-      .map(function(id) { return document.getElementById(id); })
-      .filter(function(el) { return el && !el.disabled; });
+    return Array.prototype.slice.call(
+      safetyPlanModal.querySelectorAll('button:not([disabled]), textarea:not([disabled]), a[href], input:not([disabled]), select:not([disabled]), [tabindex]:not([tabindex="-1"])')
+    ).filter(function(el) {
+      return !!(el.offsetWidth || el.offsetHeight || el.getClientRects().length);
+    });
   }
 
   function _trapSafetyPlanFocus(e) {
@@ -1287,17 +1812,13 @@ Sovereignty and service always.`;
 
   // Wire open buttons to activate focus trap
   safetyPlanBtn.addEventListener('click', function() {
-    loadSafetyPlan();
-    safetyPlanModal.classList.add('active');
-    _activateSafetyPlanFocusTrap(safetyPlanBtn);
+    openSafetyPlanModal(safetyPlanBtn);
   });
 
   // Crisis panel safety plan button (if crisis panel is visible)
   if (crisisSafetyPlanBtn) {
     crisisSafetyPlanBtn.addEventListener('click', function() {
-      loadSafetyPlan();
-      safetyPlanModal.classList.add('active');
-      _activateSafetyPlanFocusTrap(crisisSafetyPlanBtn);
+      openSafetyPlanModal(crisisSafetyPlanBtn);
     });
   }
 
@@ -1444,9 +1965,7 @@ Sovereignty and service always.`;
     // Check for URL params (e.g., ?safetyplan=true for PWA shortcut)
     var urlParams = new URLSearchParams(window.location.search);
     if (urlParams.get('safetyplan') === 'true') {
-      loadSafetyPlan();
-      safetyPlanModal.classList.add('active');
-      _activateSafetyPlanFocusTrap(safetyPlanBtn);
+      openSafetyPlanModal(safetyPlanBtn);
       // Clean up URL
       window.history.replaceState({}, document.title, window.location.pathname);
     }

tests/test_crisis_metrics.py

@@ -1,100 +0,0 @@
-"""Tests for privacy-preserving crisis metrics aggregation (issue #37)."""
-
-from __future__ import annotations
-
-import json
-import os
-import pathlib
-import sys
-import unittest
-
-sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
-
-from crisis.detect import detect_crisis
-from crisis.gateway import check_crisis
-from crisis.metrics import (
-    append_metrics_event,
-    build_metrics_event,
-    build_weekly_summary,
-    load_metrics_events,
-    render_weekly_summary,
-)
-
-
-class TestMetricsEvent(unittest.TestCase):
-    def test_event_is_privacy_preserving(self):
-        detection = detect_crisis("I want to kill myself")
-        event = build_metrics_event(
-            detection,
-            continued_conversation=True,
-            false_positive=False,
-            now=1_700_000_000,
-        )
-        self.assertEqual(event["timestamp"], 1_700_000_000)
-        self.assertEqual(event["level"], "CRITICAL")
-        self.assertTrue(event["continued_conversation"])
-        self.assertFalse(event["false_positive"])
-        self.assertNotIn("text", event)
-        self.assertNotIn("message", event)
-        self.assertGreaterEqual(event["indicator_count"], 1)
-        self.assertTrue(event["indicators"])
-
-
-class TestMetricsLogAndSummary(unittest.TestCase):
-    def test_append_and_load_metrics_events(self):
-        log_path = pathlib.Path(self._testMethodName).with_suffix(".jsonl")
-        try:
-            append_metrics_event(log_path, detect_crisis("I want to die"), now=1_700_000_000)
-            events = load_metrics_events(log_path)
-            self.assertEqual(len(events), 1)
-            self.assertEqual(events[0]["level"], "CRITICAL")
-        finally:
-            if log_path.exists():
-                log_path.unlink()
-
-    def test_weekly_summary_counts_levels_keywords_and_false_positives(self):
-        events = [
-            build_metrics_event(detect_crisis("I want to die"), continued_conversation=True, false_positive=False, now=1_700_000_000),
-            build_metrics_event(detect_crisis("I'm having a rough day"), continued_conversation=False, false_positive=False, now=1_700_000_100),
-            build_metrics_event(detect_crisis("I want to die"), continued_conversation=False, false_positive=True, now=1_700_000_200),
-            build_metrics_event(detect_crisis("Hello there"), continued_conversation=False, false_positive=False, now=1_700_000_300),
-        ]
-        summary = build_weekly_summary(events, now=1_700_000_400, window_days=7)
-
-        self.assertEqual(summary["detections_per_level"]["CRITICAL"], 2)
-        self.assertEqual(summary["detections_per_level"]["LOW"], 1)
-        self.assertEqual(summary["detections_per_level"]["NONE"], 1)
-        self.assertEqual(summary["continued_after_intervention"], 1)
-        self.assertAlmostEqual(summary["false_positive_estimate"], 1 / 3, places=4)
-        self.assertEqual(summary["most_common_keywords"][0]["count"], 2)
-
-    def test_render_weekly_summary_mentions_required_metrics(self):
-        events = [
-            build_metrics_event(detect_crisis("I want to die"), continued_conversation=True, now=1_700_000_000),
-            build_metrics_event(detect_crisis("I feel hopeless with no way out"), false_positive=True, now=1_700_000_100),
-        ]
-        summary = build_weekly_summary(events, now=1_700_000_200, window_days=7)
-        rendered = render_weekly_summary(summary)
-        self.assertIn("detections_per_level", rendered)
-        self.assertIn("most_common_keywords", rendered)
-        self.assertIn("false_positive_estimate", rendered)
-        self.assertIn("continued_after_intervention", rendered)
-
-
-class TestGatewayMetricsIntegration(unittest.TestCase):
-    def test_check_crisis_can_emit_metrics_event(self):
-        result = check_crisis(
-            "I want to die",
-            metrics_log_path=None,
-            continued_conversation=True,
-            false_positive=False,
-            now=1_700_000_000,
-        )
-        self.assertEqual(result["level"], "CRITICAL")
-        self.assertIn("metrics_event", result)
-        self.assertEqual(result["metrics_event"]["timestamp"], 1_700_000_000)
-        self.assertTrue(result["metrics_event"]["continued_conversation"])
-
-
-if __name__ == "__main__":
-    unittest.main()

tests/test_safety_plan_version_history.py

@@ -0,0 +1,21 @@
+from pathlib import Path
+
+
+def test_safety_plan_version_history_contract_present() -> None:
+    html = Path("index.html").read_text(encoding="utf-8")
+
+    required_snippets = [
+        'id="safety-plan-history"',
+        'id="safety-plan-diff"',
+        'id="safety-plan-status"',
+        'Version History',
+        'timmy_safety_plan_versions',
+        'function renderSafetyPlanVersionHistory()',
+        'function renderSafetyPlanDiff(',
+        'function restoreSafetyPlanVersion(',
+        'diff-added',
+        'diff-removed',
+    ]
+
+    for snippet in required_snippets:
+        assert snippet in html, f"missing safety plan versioning contract: {snippet}"