[ohgeeceee]

What changed

• Add Tauri's signed updater and process plugins for the desktop app.
• Check for a signed update from the latest published GitHub release when the app starts.
• Do not check or restart while connected to a vehicle. If a connection starts during a download, defer restart until it is disconnected.
• Configure the release workflow to sign updater bundles and upload latest.json after each platform build.
• Document the one-time signing secret setup. The matching private key is stored only in the local ignored .tauri-private/ directory and is not in this PR.

Verification

• JavaScript: 1,136 passed, 1 skipped.
• Python backend: 275 passed.
• TOML lint: passed.
• Updater bundle built and parsed successfully; Tauri JSON config validated.
• Rust tests could not complete locally because this machine lacks libdbus-1-dev; CI will run them on its configured Linux runner.

Release setup

Before the next release, add TAURI_SIGNING_PRIVATE_KEY to repository Actions secrets using .tauri-private/beemuu-updater.key. Keep it backed up securely. No issue linked.

[ecc-tools]

ECC Tools / Security Evidence

Commit: 105dafaaadb0ec8488d5753fe7c352b74b03d066

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 14 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Risk Taxonomy

Commit: 105dafaaadb0ec8488d5753fe7c352b74b03d066

PR taxonomy review recommended (neutral)

Detected 3 PR taxonomy bucket(s): Security Evidence, Install Manifest Integrity, CI/CD Recommendation.

Scanned 14 changed file(s).

Roadmap taxonomy buckets:

Security Evidence

Security-sensitive changes should carry explicit scanner, code-scanning, or focused regression evidence.

Signals:

• 1 security-sensitive path(s) changed

Paths:

• .github/workflows/release.yml

Install Manifest Integrity

Install manifests, plugin metadata, and shipped skills should stay synchronized with user-facing setup guidance.

Signals:

• 2 install or manifest path(s) changed

Paths:

• package-lock.json
• package.json

CI/CD Recommendation

CI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work.

Signals:

• Regression coverage may lag behind the diff
• Runtime config changes may ship without example or template updates
• CI workflow changes may ship without failure-mode evidence
• 3 CI or workflow path(s) changed

Paths:

• .github/workflows/release.yml
• package-lock.json
• package.json
• src-tauri/Cargo.toml
• src-tauri/capabilities/default.json
• src-tauri/src/lib.rs
• src-tauri/tauri.conf.json
• src/index.html

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Reference Set Readiness

Commit: 105dafaaadb0ec8488d5753fe7c352b74b03d066

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 14 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Hosted Promotion Readiness

Commit: 105dafaaadb0ec8488d5753fe7c352b74b03d066

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 14 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Config Audit

Commit: 105dafaaadb0ec8488d5753fe7c352b74b03d066

No changed-config issues detected (success)

Scanned 1 config file(s) present at this commit across 1 changed config path(s) and found no issues in the supported security rules.

Changed config files:

• .github/workflows/release.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Harness Audit

Commit: 105dafaaadb0ec8488d5753fe7c352b74b03d066

No harness issues detected (success)

Scanned 1 changed config file(s) and found no harness issues.

Changed config files:

• .github/workflows/release.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-19T12:29:16.987611Z	105dafa	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 105dafaaad

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Restore the corrupted application sources

The new Cargo.lock is a 60 KB non-UTF-8 blob rather than TOML, so cargo metadata --locked fails with stream did not contain valid UTF-8 and every release build stops before compilation. The same corruption replaced src/index.html and src/js/main.js, leaving the shipping web UI non-parseable as well; restore valid source versions of all three files before merging.

AGENTS.md reference: AGENTS.md:L3-L7

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Defer Windows installation until the vehicle disconnects

When a Windows user connects to a vehicle while this download is in progress, downloadAndInstall() launches the installer and exits the application before execution can reach relaunchWhenIdle; the Tauri updater API explicitly documents that Windows behavior. Split this into download(), wait for isConnected() to become false, and only then call install() so an active diagnostic session is not terminated.

AGENTS.md reference: AGENTS.md:L3-L7

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Expose the actual vehicle connection state

No executable script in this commit defines window.beeemuuIsConnected; the existing connection flag is local to main.js. Consequently this expression always returns false, so both the pre-download guard and the post-download idle wait are bypassed on every platform, allowing an update to interrupt an active vehicle session. Export the real connection state or obtain it through an existing state API.

AGENTS.md reference: AGENTS.md:L3-L7

Useful? React with 👍 / 👎.