v1.5.0: review workflow, correctness fixes, Word tracked changes, calmer UI

.github/workflows/ci.yml

@@ -24,4 +24,5 @@ jobs:
         run: |
           python3 scripts/build.py
           node scripts/check.mjs
-          git diff --exit-code site/index.html DocDiff.html
+          git diff --exit-code site DocDiff.html
+          test -z "$(git status --porcelain -- site DocDiff.html)" || { git status --short -- site DocDiff.html; echo "Commit the rebuilt files"; exit 1; }

.github/workflows/pages.yml

@@ -18,11 +18,18 @@ jobs:
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
       - uses: actions/setup-node@v4
         with:
           node-version: '22'
-      - name: Verify security and standalone invariants
-        run: node scripts/check.mjs
+      - name: Build and verify that the committed bundle is current
+        run: |
+          python3 scripts/build.py
+          node scripts/check.mjs
+          git diff --exit-code site DocDiff.html
+          test -z "$(git status --porcelain -- site DocDiff.html)" || { git status --short -- site DocDiff.html; echo "Commit the rebuilt files"; exit 1; }
 
   deploy:
     if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main'

.github/workflows/release.yml

@@ -0,0 +1,40 @@
+name: Release
+
+# Pushing a tag like v1.5.0 builds the bundle, verifies it, and publishes a
+# GitHub release with DocDiff.html attached. Release notes are read from
+# docs/releases/<tag>.md (title on the first line as "# <title>").
+on:
+  push:
+    tags: ['v*']
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+      - name: Build and verify standalone bundle
+        run: |
+          python3 scripts/build.py
+          node scripts/check.mjs
+          git diff --exit-code site DocDiff.html
+          test -z "$(git status --porcelain -- site DocDiff.html)" || { git status --short -- site DocDiff.html; echo "Commit the rebuilt files"; exit 1; }
+      - name: Publish release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ github.ref_name }}
+        run: |
+          notes="docs/releases/${TAG}.md"
+          test -f "$notes" || { echo "Missing $notes"; exit 1; }
+          title="$(head -n 1 "$notes" | sed 's/^# *//')"
+          tail -n +2 "$notes" > /tmp/notes.md
+          gh release create "$TAG" DocDiff.html --title "$title" --notes-file /tmp/notes.md --verify-tag

.gitignore

@@ -1,3 +1,4 @@
 .DS_Store
 node_modules/
 *.log
+.claude/worktrees/

CLAUDE.md

@@ -4,11 +4,18 @@
 
 Everything that appears on GitHub is in English: `README.md` and docs, the repository description, release titles and release notes, commit messages, pull request titles and descriptions, issue and review comments, and code comments. Write English even when the request came in German.
 
-The UI itself is bilingual (`de` and `en` in `src/template.html`), auto-detecting the browser language with a one-click `DE` / `EN` toggle in the header bar. Domain-specific German legal and construction terms (`Urkalkulation`, `Zuschlag`, `Pauschalfestpreis`) stay in German inside the German sample fixtures.
+The UI itself is bilingual (`de` and `en` in `src/js/01-i18n.js`), auto-detecting the browser language with a one-click `DE` / `EN` toggle in the header bar. Domain-specific German legal and construction terms (`Urkalkulation`, `Zuschlag`, `Pauschalfestpreis`) stay in German inside the German sample fixtures.
 
 ## Build & Verification
 
-Always edit `src/template.html` and run:
+Always edit the sources and run the build plus checks:
+
+- `src/template.html`: page shell, `<head>`, and static markup
+- `src/styles.css`: all app styles
+- `src/js/*.js`: app code, concatenated in file-name order into one classic `<script>` (shared scope, no modules)
+
+Never hand-edit `DocDiff.html`, `site/index.html` or `site/en/index.html`; they are generated. The hosted pages are pinned to German (`/`) and English (`/en/`); the offline `DocDiff.html` follows the browser language.
+
 
 ```sh
 python3 scripts/build.py

CONTRIBUTING.md

@@ -3,12 +3,12 @@
 Thanks for helping improve Doc Diff. Every change is judged by two questions: does it keep the comparison fast and clear, and does it preserve the strict zero-network, single-file privacy guarantee?
 
 - **Open an issue first** for anything larger than a bug fix so we can align on the approach before you write code.
-- **Edit `src/template.html`, then rebuild.** Never hand-edit `DocDiff.html` or `site/index.html` directly; both are generated by `python3 scripts/build.py`.
+- **Edit the sources (`src/template.html`, `src/styles.css`, `src/js/*.js`), then rebuild.** Never hand-edit `DocDiff.html`, `site/index.html` or `site/en/index.html` directly; they are generated by `python3 scripts/build.py`.
 - **Keep the privacy & standalone invariants intact:**
   - `Content-Security-Policy` must keep `connect-src 'none'` and `form-action 'none'`.
   - Zero external CDN scripts, external stylesheets, or remote font URLs.
   - Zero persistence of user documents (`localStorage`, `sessionStorage`, `indexedDB`, or `document.cookie` are forbidden).
-- **Every UI string exists in both German (`de`) and English (`en`).** Update both dictionaries in `src/template.html`.
+- **Every UI string exists in both German (`de`) and English (`en`).** Update both dictionaries in `src/js/01-i18n.js`.
 - **Everything on GitHub is in English:** commits, pull requests, issues, docs, and release notes (see [CLAUDE.md](CLAUDE.md)).
 - **Run the build and verification checks before opening a pull request:**