Repository navigation
Prepare complete Study Buddy 0.2.4-alpha release batch - #53
Merged
Merged
Conversation
- Add exhaustive course/activity inventory and semantic source search - Preserve evidence, coverage, temporal scope, and quiz safety contracts - Add local Moodle test-service tooling and regression coverage
- Add canonical task catalog with generated desktop parity checks - Route generation, search, repair and interactive workflows through effective policies - Harden and document real Moodle lab acceptance
- Set the T3Code desktop identity and build version - Replace Study Buddy package scripts and dependencies with desktop build configuration
- Add evidence-scoped author/delegate workflows with fixed compatibility mode - Persist operation budgets, checkpoints, policy fingerprints, and transport metrics - Add model fallback and regression coverage
…tudy Buddy into fix/dev-source-broker-v0.2.3
HabsaTheDog
changed the title
HabsaTheDog
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Prepare the complete accumulated Study Buddy batch as
0.2.4-alpha, preserving the historical0.2.3-alphatag and public releases. Integrate the reviewed remote security/Windows fixes with local browser pairing and pin public UI commit8e3d0f7e48f2187adf3d106aa662dd5aed9e10e1. The inventory records every queued change, branch disposition and evidence limitation.Keep assembled bundles unpromoted until exact Windows/Fedora installed acceptance. Promotion now binds the source/UI commits and both manifest/checksum digests without changing accepted bundle bytes; packaging rejects version/source metadata mismatches. Website provenance work is prepared in its owning repository and remains undeployed.
Validation: root TypeScript and 1,825 tests/four existing skips (initial broad-run timeouts retained; both unchanged files pass bounded retries); UI formatting/lint, all13 typechecks and 3,984 tests/five existing skips; changed pairing browser20/20; scoped web-layout13/13; release contracts23/23; policies/license/SBOM/dependency audits and independent source review pass. CI on this exact PR head, final merged-source packaging, clean Windows/Fedora acceptance, owner testing and public download verification remain mandatory before publication/promotion.
Final dependency follow-up patches DOMPurify3.4.16, Hono4.13.7 and ip-address10.7.1: all seven feasible shipped medium/low alerts are resolved in the selected graph. Frozen install, production audit0/474dependencies,95focused tests, seven real dependency security assertions, focused web/server/scripts typechecks and independent lock/advisory review pass. Earlier full UI suite belongs to the parent graph; exact-head CI remains mandatory. Build-only sprintf-js alert245 has no upstream fix and is explicitly deferred, with final staged-package/SBOM absence verification pending.
CI follow-up: Ubuntu on167dd70 exposed seven historical-version CLI fixtures after the metadata guard was added. The test-only repair derives source version/tag expectations and explicitly rejects valid mismatched versions; runtime guard remains unchanged. CLI integration9/9, contracts/assets23/23, root TypeScript and independent review pass. Failure logs are retained; fresh exact-head CI is required before merge/build.
Windows CI follow-up: on9adc95f Ubuntu and all other required checks passed; Windows had one real graph render timeout (1,809pass/20skip). Logs show test-file concurrency despite the intended shellworker flag. The repair enforces serial Windows files in Vitest configuration and gives only that real-render fixture a60second budget with55second subprocess cancellation, preserving retry assertions and adding aPDFsignature check. Graph33/33, TypeScript,5workflow/security tool checks and independent review pass. Fresh Windows CI remains required.
Windows second follow-up: b514412 passed all graph tests with file serialization effective; one negative drag/drop fixture exceeded the default5second test budget. The four intentional readiness-rejection cases each exhaust the unchanged production4second wait and now have a scoped10second test budget for Chromium overhead. Conflicting-clone tests additionally require no controls, refused filling, unchanged responses and no submission. Drag/drop17/17 (19.70s), TypeScript and independent review pass; all other required checks on b514412 passed. Fresh exact-head CI remains required.