chore: record demo deploy and npm release 1.1.0

TASKS.md

@@ -4,13 +4,13 @@
 
 | Field | Value |
 |---|---|
-| Status | Complete in source; live demo deploy and npm publish open (see below) |
+| Status | Complete (source and live demo); npm publication tracked below |
 | Priority | High |
 | Task | Merge Terry Sweetser's PRs #2 and #4 (fixes #3), credit him, then fix the remaining counting and matching gaps, update the phrase lists, sync the demo with the engine and improve the docs. |
 | Acceptance criterion | #2 and #4 merged with green CI; #3 closed; overlapping phrases counted once; curly quotes, German umlauts and inflections matched; list-style patterns capped; demo uses the real engine; README, CHANGELOG and package.json credit the contributor; `npm test` green on Node 18-24. |
-| Evidence | 2026-10-03: fork CI runs approved, all green; #2 merged as 9070435, #4 as 18e6657, #3 closed automatically, thank-you comments posted on both PRs. Follow-up branch `feat/detector-accuracy-v1.1`: 62 unit tests and 7 CLI regression tests pass locally (Node 22); packed tarball installs and runs; demo checked in a browser (desktop and 375 px, pasted HTML is escaped). Human sample texts keep their scores; sample slop drops from 79 to 46 (EN) and from 96 to 58 (DE). |
-| Blocker | Live demo (Cloudflare Pages, direct upload) needs a maintainer deploy. npm publish needs the maintainer's npm login. |
-| Next step | Deploy `demo/` to the `slop-radar-demo` Pages project, then publish 1.1.0 to npm and close #1. |
+| Evidence | 2026-10-03: fork CI runs approved, all green; #2 merged as 9070435, #4 as 18e6657, #3 closed automatically, thank-you comments posted on both PRs. Follow-up branch `feat/detector-accuracy-v1.1`: 62 unit tests and 7 CLI regression tests pass locally (Node 22); packed tarball installs and runs; demo checked in a browser (desktop and 375 px, pasted HTML is escaped). Human sample texts keep their scores; sample slop drops from 79 to 46 (EN) and from 96 to 58 (DE). 2026-10-04: `demo/` from main `e373c91` deployed to the `slop-radar-demo` Pages project (deployment `b7912b96`); live page verified: header 437 EN + 210 DE phrases, examples score 20 PURE SLOP / 58 SUSPICIOUS / 98 HUMAN, no console errors. Previous deployment `92db286a` is the rollback target. Wrangler was logged out afterwards. |
+| Blocker | None for this item. |
+| Next step | None; see npm publication. |
 | Continuation context | Engine: `src/engine.ts` (pure, browser-safe), loaded by `src/detector.ts`. Demo files in `demo/lib/` are generated by `npm run build:demo`; CI fails when they are stale. Scoring changes are listed in CHANGELOG.md under 1.1.0. |
 
 ## npm publication (#1)
@@ -21,7 +21,7 @@
 | Priority | Medium |
 | Task | Publish slop-radar to npm so `npm install -g slop-radar` and `npx slop-radar` work. |
 | Acceptance criterion | `npm view slop-radar version` returns 1.1.0; `npx slop-radar --version` works on a clean machine; issue #1 closed with a note. |
-| Evidence | 2026-10-03: the name `slop-radar` is free on npm; `npm pack` produces a 34-file tarball (dist, database, README, LICENSE) that installs and runs; CI smoke-tests the packed tarball. |
-| Blocker | Requires the maintainer's npm account (`npm login`). |
-| Next step | `npm login`, then `npm publish` from a clean checkout of main. |
-| Continuation context | Until then the README documents `npx github:renefichtmueller/slop-radar` and clone + `npm install -g .` (both verified 2026-10-03). `npm install -g github:...` fails under npm 10: the global git install runs `prepare` without devDependencies (`tsc: command not found`). |
+| Evidence | 2026-10-03: the name `slop-radar` is free on npm; `npm pack` produces a 34-file tarball (dist, database, README, LICENSE) that installs and runs; CI smoke-tests the packed tarball. 2026-10-04: README switched to npm install (#7); maintainer logged in via npm web login; `npm publish --dry-run` OK (25.1 kB, 34 files); `npm publish` returned 403: the account has no two-factor authentication, which npm requires for publishing. |
+| Blocker | The maintainer must enable two-factor authentication on the npm account (account setting). |
+| Next step | Enable npm 2FA, then run `npm publish --auth-type=web` from a clean checkout of main and confirm the 2FA prompt; then close #1. |
+| Continuation context | The README already documents `npm install -g slop-radar` (#7), so it is wrong until the publish succeeds; working fallbacks are `npx github:renefichtmueller/slop-radar` and clone + `npm install -g .` (verified 2026-10-03). `npm install -g github:...` fails under npm 10 (global git installs run `prepare` without devDependencies). |

TIME_LOG.md

@@ -3,3 +3,4 @@
 | Date | Agent | Duration | Description | Issue |
 |---|---|---|---|---|
 | 2026-10-03 | Claude | 0h 55m | Reviewed #3/#4, approved fork CI, merged #2 and #4, thanked the contributor; v1.1.0: engine rewrite (longest match, Unicode boundaries, quote and umlaut normalization, German inflections, pattern caps, density scoring, linear-time overlap check), +197 EN / +83 DE phrases, demo on the real engine, CI, README, CHANGELOG, contributor credit; fixed the GitHub install docs after verifying installs on a clean prefix (#6) | #1, #3 |
+| 2026-10-04 | Claude | 0h 35m | Merged #6 and #7, deployed the demo to Cloudflare Pages and verified it live, npm login and publish attempt (blocked: account needs 2FA), private mirror sync prepared | #1 |