feat: build the Windows MarkdownViewr application with AppKit #1

New Issue

2026-10-11T00:05:11Z

KofTwentyTwo commented

2026-10-11 00:05:11 +00:00

(Migrated from github.com)

Build MarkdownViewr for Windows using the AppKit foundation and KofTwentyTwo standards, with MarkdownViewr.Windows as the repository and markdownviewr-windows as the permanent app ID.

The initial GUI-only scaffold is published at ea234917fa. It builds with zero warnings; existing core tests pass 20/20 at 100% coverage; repository scripts pass 55/55. This is foundation evidence only: the greeting sample is still present and Markdown viewing has not been implemented.

Full reference scope and proposed Windows architecture are recorded in docs/PRODUCT.md, based on darinkelkhoff/markdownViewr commit 6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021. Discuss the desired first release with the owner before narrowing this scope.

Acceptance:

File opening/activation, multiple document windows and recent files.
GitHub Flavored Markdown, local resources and safe untrusted-content rendering.
Live reload preserving scroll, themes/editor/custom CSS and persistent settings.
TOC, collapsible headings, source synchronization, find and Windows/vim keyboard navigation.
YAML frontmatter modes, external editor integration and native print options.
AppKit shell services, deterministic core coverage, UI/security/installed update acceptance.
Reviewed standards integration and actual verified signed artifacts before a production release.

Substantial AI assistance: Codex (GPT-6). No release or finished-viewer claim.

Build MarkdownViewr for Windows using the AppKit foundation and KofTwentyTwo standards, with MarkdownViewr.Windows as the repository and markdownviewr-windows as the permanent app ID. The initial GUI-only scaffold is published at ea234917fa9fbdd3391b55e316169e6f6f40014c. It builds with zero warnings; existing core tests pass 20/20 at 100% coverage; repository scripts pass 55/55. This is foundation evidence only: the greeting sample is still present and Markdown viewing has not been implemented. Full reference scope and proposed Windows architecture are recorded in docs/PRODUCT.md, based on darinkelkhoff/markdownViewr commit 6d08bc9d27d7d7b2c2fa95bb282da330b8cf9021. Discuss the desired first release with the owner before narrowing this scope. Acceptance: - File opening/activation, multiple document windows and recent files. - GitHub Flavored Markdown, local resources and safe untrusted-content rendering. - Live reload preserving scroll, themes/editor/custom CSS and persistent settings. - TOC, collapsible headings, source synchronization, find and Windows/vim keyboard navigation. - YAML frontmatter modes, external editor integration and native print options. - AppKit shell services, deterministic core coverage, UI/security/installed update acceptance. - Reviewed standards integration and actual verified signed artifacts before a production release. Substantial AI assistance: Codex (GPT-6). No release or finished-viewer claim.

KofTwentyTwo commented

2026-10-11 00:08:38 +00:00

(Migrated from github.com)

Foundation published on main ea23491, signed topic 85004f1 pushed and bootstrap documentation draft opened. Repository Validate now returns SettingsVerified=true for all 16 producer-bound contexts. Local build has zero warnings; 20 existing core tests/100% coverage and 55 script tests pass. Initial hosted security passed; remaining exact CI/CodeQL/scripts jobs are still being observed. The greeting is still scaffold content: viewer implementation and the owner product discussion remain open.

Foundation published on main ea23491, signed topic 85004f1 pushed and bootstrap documentation draft opened. Repository Validate now returns SettingsVerified=true for all 16 producer-bound contexts. Local build has zero warnings; 20 existing core tests/100% coverage and 55 script tests pass. Initial hosted security passed; remaining exact CI/CodeQL/scripts jobs are still being observed. The greeting is still scaffold content: viewer implementation and the owner product discussion remain open.

KofTwentyTwo commented

2026-10-11 00:36:13 +00:00

(Migrated from github.com)

Signed/DCO commit f1756d21ed is pushed in draft PR #3.

The first reader now replaces the greeting/crash controls: Windows picker/Ctrl+O, literal launch file, GFM rendering and manual reload. Added explicit HTML sanitation, script/native-capability denial, resource interception, and final image-handle containment. Core: 56 passing tests at 100% measured line coverage. Native file adapter: six passing tests, including an actual outside-root junction. Zero-warning build, format, docs lint and commit hooks pass.

Actual browser acceptance remains pending: desktop reservation was requested, and hosted current-head jobs have started. No screenshots or browser security acceptance are claimed yet. Keep this issue open until acceptance is demonstrated. Full port scope in #1, production signing and release publication remain separate unfinished work.

Signed/DCO commit f1756d21ede53e95a7ff5ef8bd1490ef9495cb25 is pushed in draft PR #3. The first reader now replaces the greeting/crash controls: Windows picker/Ctrl+O, literal launch file, GFM rendering and manual reload. Added explicit HTML sanitation, script/native-capability denial, resource interception, and final image-handle containment. Core: 56 passing tests at 100% measured line coverage. Native file adapter: six passing tests, including an actual outside-root junction. Zero-warning build, format, docs lint and commit hooks pass. Actual browser acceptance remains pending: desktop reservation was requested, and hosted current-head jobs have started. No screenshots or browser security acceptance are claimed yet. Keep this issue open until acceptance is demonstrated. Full port scope in #1, production signing and release publication remain separate unfinished work.

KofTwentyTwo commented

2026-10-11 01:01:12 +00:00

(Migrated from github.com)

Signed/DCO commit 09d14e6b78 is pushed in draft PR #3.

Automatic reload now uses a debounced containing-directory subscription, handles replacement/rename/deletion/recreation, retains the last readable snapshot, and retries brief editor locks. Relative scroll preservation matches the reference's behavior when document height changes. Core scheduling keeps picker selections and coalesces save notifications.

Local proof: zero-warning build; 82 core tests at 100% measured line coverage; 12 real native file/watcher tests; formatting/docs/hooks pass. New browser save/recovery/lock/scroll/network tests await exact-head hosted results. No local GUI input run or screenshot is claimed.

Previous reader f1756d2 fully passed hosted CI including 13 native/UI tests and both installed update channels; CodeQL/security also passed. PSScriptAnalyzer engine crash remains open in #5. Keep #4/#6 open pending their new browser scenarios; full scope in #1 remains unfinished. No failed run restarted, no merge or release published.

Signed/DCO commit 09d14e6b78ee9abff3f44a035f8fd7bded15a578 is pushed in draft PR #3. Automatic reload now uses a debounced containing-directory subscription, handles replacement/rename/deletion/recreation, retains the last readable snapshot, and retries brief editor locks. Relative scroll preservation matches the reference's behavior when document height changes. Core scheduling keeps picker selections and coalesces save notifications. Local proof: zero-warning build; 82 core tests at 100% measured line coverage; 12 real native file/watcher tests; formatting/docs/hooks pass. New browser save/recovery/lock/scroll/network tests await exact-head hosted results. No local GUI input run or screenshot is claimed. Previous reader f1756d2 fully passed hosted CI including 13 native/UI tests and both installed update channels; CodeQL/security also passed. PSScriptAnalyzer engine crash remains open in #5. Keep #4/#6 open pending their new browser scenarios; full scope in #1 remains unfinished. No failed run restarted, no merge or release published.

KofTwentyTwo commented

2026-10-11 01:30:28 +00:00

(Migrated from github.com)

Signed/DCO theme milestone 0507ca5 and working-area fix fa0df78 are pushed to draft PR #3. All 20 pinned original JSON palettes are embedded unchanged and their full MIT notice ships with the app. Document palette selection persists independently of the shell theme and retains the viewport. Local build is zero-warning; 117 core tests/100% coverage, formatting and docs/hooks pass.

Hosted acceptance is running on exact head fa0df78 (CI 38101906688). The theme test now checks saved selection and retained content; a follow-up strengthens this to actual painted colors and a retained fixture screenshot. User-theme editing/custom CSS/font controls remain open in this issue. No release or signing claim.

Signed/DCO theme milestone 0507ca5 and working-area fix fa0df78 are pushed to draft PR #3. All 20 pinned original JSON palettes are embedded unchanged and their full MIT notice ships with the app. Document palette selection persists independently of the shell theme and retains the viewport. Local build is zero-warning; 117 core tests/100% coverage, formatting and docs/hooks pass. Hosted acceptance is running on exact head fa0df78 (CI 38101906688). The theme test now checks saved selection and retained content; a follow-up strengthens this to actual painted colors and a retained fixture screenshot. User-theme editing/custom CSS/font controls remain open in this issue. No release or signing claim.

KofTwentyTwo commented

2026-10-11 02:23:44 +00:00

(Migrated from github.com)

Signed 443b4928ee is pushed to draft PR #3, including native outline/section controls, persisted frontmatter, and two targeted CI/input fixes. No merge/tag/release was performed.

Reader/reload and editable themes previously passed full hosted checks and both installed channels. Current outline core: 161 tests/100% line coverage; zero-warning build and formatting pass. 5c3988e hosted 31/33 UI passed, including heading jumps and independent nested collapse across theme/reload. New fixes preserve the frontmatter/table/physical resize assertions; actual-current-head checks are pending.

Full remaining scope: finish these UI checks and analyzer workaround validation; source pane and synchronized navigation, find/vim keys, configurable external editors, print options/state restoration, multiple windows/recents/Windows associations; audit syntax highlighting, document links and remaining theme-management parity; standards ownership/conformance and reviewed AppKit API adoption; real authorized Azure signing and final artifact validation. Shared standards MAINTAINERS.md currently lists AppKit/gclo but not this application; registration requires its reviewed PR. Human acknowledgement and actual signed release evidence remain required. The full port goal is still active.

Signed 443b4928eed46641c759012e741a27723e943826 is pushed to draft PR #3, including native outline/section controls, persisted frontmatter, and two targeted CI/input fixes. No merge/tag/release was performed. Reader/reload and editable themes previously passed full hosted checks and both installed channels. Current outline core: 161 tests/100% line coverage; zero-warning build and formatting pass. 5c3988e hosted 31/33 UI passed, including heading jumps and independent nested collapse across theme/reload. New fixes preserve the frontmatter/table/physical resize assertions; actual-current-head checks are pending. Full remaining scope: finish these UI checks and analyzer workaround validation; source pane and synchronized navigation, find/vim keys, configurable external editors, print options/state restoration, multiple windows/recents/Windows associations; audit syntax highlighting, document links and remaining theme-management parity; standards ownership/conformance and reviewed AppKit API adoption; real authorized Azure signing and final artifact validation. Shared standards MAINTAINERS.md currently lists AppKit/gclo but not this application; registration requires its reviewed PR. Human acknowledgement and actual signed release evidence remain required. The full port goal is still active.

KofTwentyTwo commented

2026-10-11 02:53:05 +00:00

(Migrated from github.com)

Signed/pushed 9ff820f477 adds an optional native read-only source pane. It shows literal Markdown, including frontmatter/HTML/code, uses the reader's committed snapshot on reload, persists visibility/preferred width and preserves reading space with both sidebars. Browser scripts/messages/host objects remain disabled; no new dependency or bridge.

Local gates: 166 core tests, 100% measured core lines, zero-warning build, format/docs/hooks passed. Added hosted literal/read-only/settings/reload/hide acceptance. Authoritative CI 38106466328 and CodeQL 38106466305 are being observed; scripts 38106466038 passed. No local input.

This is one implementation increment. Synchronized headings/scroll/collapse, paired find and vim keys remain open, as does real source-divider acceptance. Full PRODUCT.md scope is unchanged. PR #3 remains draft; no merge or release.

Signed/pushed 9ff820f4773c54573c1d24028ba489328bf2e9c6 adds an optional native read-only source pane. It shows literal Markdown, including frontmatter/HTML/code, uses the reader's committed snapshot on reload, persists visibility/preferred width and preserves reading space with both sidebars. Browser scripts/messages/host objects remain disabled; no new dependency or bridge. Local gates: 166 core tests, 100% measured core lines, zero-warning build, format/docs/hooks passed. Added hosted literal/read-only/settings/reload/hide acceptance. Authoritative CI 38106466328 and CodeQL 38106466305 are being observed; scripts 38106466038 passed. No local input. This is one implementation increment. Synchronized headings/scroll/collapse, paired find and vim keys remain open, as does real source-divider acceptance. Full PRODUCT.md scope is unchanged. PR #3 remains draft; no merge or release.

KofTwentyTwo commented

2026-10-11 03:01:45 +00:00

(Migrated from github.com)

Signed/pushed 4bf0b81b85 with zero-warning build/format/docs/hooks passed. Exact current CI 38106991467 and CodeQL 38106991641 are running; no local physical input.

Prior 9ff820f CI 38106466328 finished: 31/34 loose and 31/34 published UI, no skips. Build/format/CodeQL/scripts/security passed. Installed channels were not reached. Captured native events narrow the failures:

Markdown frontmatter receives a handled press and unhandled release, but no click.
Outline starts and completes its real drag, but no movement delta appears.
The native source element is absent from accessibility traversal after WebView2.

The follow-up injects actual Windows MOVE input through existing FlaUI APIs instead of SetCursorPos-only movement, and declares source controls before WebView2 without changing their visual columns. Mode/table/exact-target/70-pixel resize assertions stay intact; source acceptance also tests a real divider drag. New entered/exited/moved traces retain evidence if another failure remains. This is an implementation correction awaiting proof, not a passed-acceptance claim.

Full source synchronization/find/vim and PRODUCT.md scope remain active; PR #3 remains draft. No merge/tag/release/Azure retries.

Signed/pushed 4bf0b81b85e99a9f583c5e60b7276e49b423b114 with zero-warning build/format/docs/hooks passed. Exact current CI 38106991467 and CodeQL 38106991641 are running; no local physical input. Prior 9ff820f CI 38106466328 finished: 31/34 loose and 31/34 published UI, no skips. Build/format/CodeQL/scripts/security passed. Installed channels were not reached. Captured native events narrow the failures: - Markdown frontmatter receives a handled press and unhandled release, but no click. - Outline starts and completes its real drag, but no movement delta appears. - The native source element is absent from accessibility traversal after WebView2. The follow-up injects actual Windows MOVE input through existing FlaUI APIs instead of SetCursorPos-only movement, and declares source controls before WebView2 without changing their visual columns. Mode/table/exact-target/70-pixel resize assertions stay intact; source acceptance also tests a real divider drag. New entered/exited/moved traces retain evidence if another failure remains. This is an implementation correction awaiting proof, not a passed-acceptance claim. Full source synchronization/find/vim and PRODUCT.md scope remain active; PR #3 remains draft. No merge/tag/release/Azure retries.

KofTwentyTwo commented

2026-10-11 03:35:09 +00:00

(Migrated from github.com)

Signed/pushed 4f4280921c implements paired source/browser find: bounded literal terms, one occurrence count, native highlights, actual source ranges, wrapping controls, Ctrl+F/Enter/Shift+Enter/Escape and query/reload guards. Search temporarily reveals sections and restores prior/explicit choices. Native finder API uses the pinned SDK; no new dependency, document script or message bridge. 179 core tests/100% lines, zero-warning build/format/hooks passed. A one-line ADR heading lint correction is prepared locally and now passes all six documentation files.

Exact current CI 38108596329 and CodeQL 38108596346 are live; scripts 38108595778/security 38108596376 passed. New hosted tests drive physical Ctrl+F from browser focus, native source ranges, real viewport wrap, collapse restoration, hostile-looking literal query/reload and physical fragment reveal. No local input or retry/cancellation.

Previous 4bf0b81 fully passed CI 38106991467: 34 native/published, stable/dev 33 each, no skips, covering the two prior input failures and source pane/physical resize. Retained evidence in artifacts/native-move-installed-38106991467.

New find acceptance is unproven until its exact results. Source synchronized headings/scroll/collapse and vim keys remain #10 scope, along with the full PRODUCT.md editor/print/multiwindow/activation/reference/standards/signing work. PR #3 remains draft; no merge or publication.

Signed/pushed 4f4280921cfc87551843a03e4067e6dfe7456ceb implements paired source/browser find: bounded literal terms, one occurrence count, native highlights, actual source ranges, wrapping controls, Ctrl+F/Enter/Shift+Enter/Escape and query/reload guards. Search temporarily reveals sections and restores prior/explicit choices. Native finder API uses the pinned SDK; no new dependency, document script or message bridge. 179 core tests/100% lines, zero-warning build/format/hooks passed. A one-line ADR heading lint correction is prepared locally and now passes all six documentation files. Exact current CI 38108596329 and CodeQL 38108596346 are live; scripts 38108595778/security 38108596376 passed. New hosted tests drive physical Ctrl+F from browser focus, native source ranges, real viewport wrap, collapse restoration, hostile-looking literal query/reload and physical fragment reveal. No local input or retry/cancellation. Previous 4bf0b81 fully passed CI 38106991467: 34 native/published, stable/dev 33 each, no skips, covering the two prior input failures and source pane/physical resize. Retained evidence in artifacts/native-move-installed-38106991467. New find acceptance is unproven until its exact results. Source synchronized headings/scroll/collapse and vim keys remain #10 scope, along with the full PRODUCT.md editor/print/multiwindow/activation/reference/standards/signing work. PR #3 remains draft; no merge or publication.

KofTwentyTwo commented

2026-10-11 03:42:23 +00:00

(Migrated from github.com)

Signed/DCO correction pushed as 7d7c712c63. Previous 4f42809 producer CI 38108596329 is terminal: 36/38 native/UI and published tests pass. Native source selections, literal query handling, viewport wrap, collapse restoration and reload pass; Ctrl+F from browser focus and the fragment fixture remain pending. Installed stable/dev were not reached in that producer.

The correction registers Ctrl+F on the loaded window and identifies the generated browser heading separately from the visible sidebar label. Physical key/link click and outcome assertions remain. Zero-warning build, format, documentation lint and hooks pass; core unchanged from 179 tests/100% lines. New exact runs: CI 38109196556, CodeQL 38109196555, scripts 38109196208, security 38109196631; PR gates 38109196606 already passed. Observe those producers without cancelling/restarting them on elapsed time.

PR #3 remains draft; full PRODUCT.md scope, synchronized source/collapse and vim, editor/printing/windows/activation, parity/standards and deferred actual signing remain. No local desktop input, merge, tag or release.

Signed/DCO correction pushed as 7d7c712c6365fd6a036c572de3b51b49c6daa1ea. Previous 4f42809 producer CI 38108596329 is terminal: 36/38 native/UI and published tests pass. Native source selections, literal query handling, viewport wrap, collapse restoration and reload pass; Ctrl+F from browser focus and the fragment fixture remain pending. Installed stable/dev were not reached in that producer. The correction registers Ctrl+F on the loaded window and identifies the generated browser heading separately from the visible sidebar label. Physical key/link click and outcome assertions remain. Zero-warning build, format, documentation lint and hooks pass; core unchanged from 179 tests/100% lines. New exact runs: CI 38109196556, CodeQL 38109196555, scripts 38109196208, security 38109196631; PR gates 38109196606 already passed. Observe those producers without cancelling/restarting them on elapsed time. PR #3 remains draft; full PRODUCT.md scope, synchronized source/collapse and vim, editor/printing/windows/activation, parity/standards and deferred actual signing remain. No local desktop input, merge, tag or release.

KofTwentyTwo commented

2026-10-11 04:00:38 +00:00

(Migrated from github.com)

Signed/DCO head 9edd982e41 is pushed with configured editor commit 574b574 and the composed-browser hit correction. Local 195 core tests/100% lines, zero-warning build, formatting, changed-doc lint and hooks pass. Current exact runs: CI 38110140930, CodeQL 38110140899, scripts 38110140480, security 38110140895; PR gates 38110140931 passed. Observe these producers; native/published 41-test and both installed-channel acceptance remain pending.

Previous 2292603 CI 38109719180 is terminal: native/published 37/38, no skips. Physical browser-focus Ctrl+F, actual source selections, wrap/viewport/reload/collapse pass. Remaining link diagnostic proved ElementFromPoint returned owned DocumentView despite the pointer inside the exact hyperlink bounds. The corrected fixture requires exact link bounds and its owned provider, retains physical Down/Up, and still requires the actual hidden heading/body to become visible. Installed channels were not reached in that producer.

Configured editor receives one literal ArgumentList file value with UseShellExecute=false; native Save/Cancel/open, missing editor/document handling and actual fixture-process UI tests are included. Full editor-list/folder parity remains #11. Source sync/collapse and vim remain #10. Full PRODUCT.md scope remains active, with PR #3 draft and current-head human review/actual production signing still required. No local GUI input, merge/tag/release or Azure attempt.

Signed/DCO head 9edd982e4111ec6d5e585e04725c82e39279cb39 is pushed with configured editor commit 574b574 and the composed-browser hit correction. Local 195 core tests/100% lines, zero-warning build, formatting, changed-doc lint and hooks pass. Current exact runs: CI 38110140930, CodeQL 38110140899, scripts 38110140480, security 38110140895; PR gates 38110140931 passed. Observe these producers; native/published 41-test and both installed-channel acceptance remain pending. Previous 2292603 CI 38109719180 is terminal: native/published 37/38, no skips. Physical browser-focus Ctrl+F, actual source selections, wrap/viewport/reload/collapse pass. Remaining link diagnostic proved ElementFromPoint returned owned DocumentView despite the pointer inside the exact hyperlink bounds. The corrected fixture requires exact link bounds and its owned provider, retains physical Down/Up, and still requires the actual hidden heading/body to become visible. Installed channels were not reached in that producer. Configured editor receives one literal ArgumentList file value with UseShellExecute=false; native Save/Cancel/open, missing editor/document handling and actual fixture-process UI tests are included. Full editor-list/folder parity remains #11. Source sync/collapse and vim remain #10. Full PRODUCT.md scope remains active, with PR #3 draft and current-head human review/actual production signing still required. No local GUI input, merge/tag/release or Azure attempt.

KofTwentyTwo commented

2026-10-11 04:31:58 +00:00

(Migrated from github.com)

Progress on draft PR #3: 5a9af63 now has full retained acceptance (CI 38110726381): native/published 41/41 and installed stable/dev 40/40 each, zero skips. Paired find, physical Ctrl+F, repeated local-fragment reveal and actual configured-editor fixture launch/cancel/missing executable passed. Update fixtures are synthetic/unsigned.

Signed/DCO dfc41a7 adds the required vim reading/find/heading commands with native focus/modifier/layout guards and timed prefixes. Local 239 core tests/100% lines, zero-warning build, formatting/docs/hooks pass. Exact hosted CI 38111842026 is pending with three additional physical-key tests. Source heading/scroll/collapse synchronization remains unimplemented, and full PRODUCT.md scope is still active. No merge or production release.

Progress on draft PR #3: 5a9af63 now has full retained acceptance (CI 38110726381): native/published 41/41 and installed stable/dev 40/40 each, zero skips. Paired find, physical Ctrl+F, repeated local-fragment reveal and actual configured-editor fixture launch/cancel/missing executable passed. Update fixtures are synthetic/unsigned. Signed/DCO dfc41a7 adds the required vim reading/find/heading commands with native focus/modifier/layout guards and timed prefixes. Local 239 core tests/100% lines, zero-warning build, formatting/docs/hooks pass. Exact hosted CI 38111842026 is pending with three additional physical-key tests. Source heading/scroll/collapse synchronization remains unimplemented, and full PRODUCT.md scope is still active. No merge or production release.

KofTwentyTwo commented

2026-10-11 04:41:34 +00:00

(Migrated from github.com)

Signed/DCO 6bf125d pushes the physical-focus fixture correction. Prior dfc41a7 / CI 38111842026 is terminal: native 41/44, zero skips; all existing tests pass, while the three new vim cases failed before their first reading command. App logs show empty or outline-button logical focus after UIA SetFocus. The new fixture uses real MOVE/Down/Up inside exact owned browser bounds/provider; app focus guards and actual viewport/heading/find/query assertions remain unchanged. Published acceptance timed out at 180 seconds without TRX; installed channels were not reached. Exact logs and fixture evidence retained.

Current native/published/installed proof is pending under CI 38112298176 (native job 114390204742, installed 114390204514). Local zero-warning build, format, changed-doc lint and signed/DCO hooks pass; unchanged core remains 239 tests/100% lines. CodeQL 38112298279, scripts 38112297896, security 38112298300 and PR gates 38112298282 are exact current-head checks. Full PRODUCT.md scope remains active, including source synchronization; no local desktop input, merge or release.

Signed/DCO 6bf125d pushes the physical-focus fixture correction. Prior dfc41a7 / CI 38111842026 is terminal: native 41/44, zero skips; all existing tests pass, while the three new vim cases failed before their first reading command. App logs show empty or outline-button logical focus after UIA SetFocus. The new fixture uses real MOVE/Down/Up inside exact owned browser bounds/provider; app focus guards and actual viewport/heading/find/query assertions remain unchanged. Published acceptance timed out at 180 seconds without TRX; installed channels were not reached. Exact logs and fixture evidence retained. Current native/published/installed proof is pending under CI 38112298176 (native job 114390204742, installed 114390204514). Local zero-warning build, format, changed-doc lint and signed/DCO hooks pass; unchanged core remains 239 tests/100% lines. CodeQL 38112298279, scripts 38112297896, security 38112298300 and PR gates 38112298282 are exact current-head checks. Full PRODUCT.md scope remains active, including source synchronization; no local desktop input, merge or release.

KofTwentyTwo commented

2026-10-11 04:55:09 +00:00

(Migrated from github.com)

Vim acceptance is fully verified on 6bf125d / CI 38112298176: native/published 44/44 and installed stable/dev 43/43 each, zero skips. Retained TRX, JSON, logs and fixture screenshots prove real reading key/viewport/heading/find behavior and actual AppKit channel apply/restart. Four byte gates verify 536 files per payload. Fixtures remain synthetic/unsigned.

Signed/DCO a0d8fe7 and b0f3b86 are now pushed. DocumentOutline carries parser-derived original UTF-16 source anchors through sanitation, covering Setext/fences/raw HTML/duplicates/frontmatter/newlines/Unicode and denied authored identities; markers are removed before presentation. Line ends are indexed once, including a 300-heading single-line regression. Local 255 core tests/100% lines, zero-warning build, format/docs/hooks pass. Current source-head CI 38113042618 and associated checks are pending. Full synchronized source heading/scroll/collapse UI remains unfinished; keep #10 and full PRODUCT.md scope open. No local desktop input, merge or release.

Vim acceptance is fully verified on 6bf125d / CI 38112298176: native/published 44/44 and installed stable/dev 43/43 each, zero skips. Retained TRX, JSON, logs and fixture screenshots prove real reading key/viewport/heading/find behavior and actual AppKit channel apply/restart. Four byte gates verify 536 files per payload. Fixtures remain synthetic/unsigned. Signed/DCO a0d8fe7 and b0f3b86 are now pushed. DocumentOutline carries parser-derived original UTF-16 source anchors through sanitation, covering Setext/fences/raw HTML/duplicates/frontmatter/newlines/Unicode and denied authored identities; markers are removed before presentation. Line ends are indexed once, including a 300-heading single-line regression. Local 255 core tests/100% lines, zero-warning build, format/docs/hooks pass. Current source-head CI 38113042618 and associated checks are pending. Full synchronized source heading/scroll/collapse UI remains unfinished; keep #10 and full PRODUCT.md scope open. No local desktop input, merge or release.

KofTwentyTwo commented

2026-10-11 05:21:38 +00:00

(Migrated from github.com)

Signed/DCO source-sync increment ddb98ac286 pushed to draft PR #3.

Implemented literal nested source folding and bidirectional heading-anchor scroll mapping, retaining canonical snapshots, exact native find selections and independent fold restoration across find/reload. Fixed host numeric geometry is bounded/current-page/query guarded; authored scripts/messages/host objects remain disabled. Local 300 core tests/100% measured lines, zero-warning build, format, docs and normal commit hooks pass. No local desktop input.

Current acceptance pending on exact CI 38114492408; CodeQL 38114492440, scripts 38114491920, security 38114492422, PR gates 38114492445. Two new hosted tests assert actual native/browser glyph/viewport positions, physical source scrolling and fold/find/reload restoration: 46 native/published and 45 per installed channel expected, not yet verified.

Previous b0f3b86 / CI 38113042618 fully SUCCESS, including retained published 44/44 and installed stable/dev 43/43, zero failures/skips. Source-provenance artifacts retained. Keep #10 open for new acceptance and multiline/same-line raw-heading/reference audit. Full PRODUCT.md scope remains active; AppKit 0.1.0 unchanged. No merge/tag/release or Azure attempt; unsigned synthetic fixtures do not prove production signing.

Signed/DCO source-sync increment ddb98ac286baaa0f26eae590d9d375a6baefab31 pushed to draft PR #3. Implemented literal nested source folding and bidirectional heading-anchor scroll mapping, retaining canonical snapshots, exact native find selections and independent fold restoration across find/reload. Fixed host numeric geometry is bounded/current-page/query guarded; authored scripts/messages/host objects remain disabled. Local 300 core tests/100% measured lines, zero-warning build, format, docs and normal commit hooks pass. No local desktop input. Current acceptance pending on exact CI 38114492408; CodeQL 38114492440, scripts 38114491920, security 38114492422, PR gates 38114492445. Two new hosted tests assert actual native/browser glyph/viewport positions, physical source scrolling and fold/find/reload restoration: 46 native/published and 45 per installed channel expected, not yet verified. Previous b0f3b86 / CI 38113042618 fully SUCCESS, including retained published 44/44 and installed stable/dev 43/43, zero failures/skips. Source-provenance artifacts retained. Keep #10 open for new acceptance and multiline/same-line raw-heading/reference audit. Full PRODUCT.md scope remains active; AppKit 0.1.0 unchanged. No merge/tag/release or Azure attempt; unsigned synthetic fixtures do not prove production signing.

KofTwentyTwo commented

2026-10-11 05:30:40 +00:00

(Migrated from github.com)

Native source-sync ddb98ac / CI 38114492408 is terminal: native and published 42/46 each, four failures, zero skips; installed channels were not reached. Actual paired source selections prove WinUI uses one CR per line break; the previous CRLF projection shifted offsets and heading positions. Retained logs and published TRX: artifacts/source-sync-ui-38114492408.log, artifacts/source-sync-installed-38114492408.log and artifacts/source-sync-failed-installed-38114492408.

Signed/DCO correction 90b5406fe4 is now pushed after the previous producer ended. The model uses native CR offsets and subtracts only original CRLF extra characters, preserving canonical snapshot/query positions. Fold fixture compares literal Setext text after newline normalization; all actual viewport, physical-wheel, fold/find/reload and exact selection assertions remain. Local 300 tests/100% measured lines, zero-warning build, format/docs/hooks pass.

Exact current checks: CI 38114958970, CodeQL 38114958995, scripts 38114958655, security 38114958984, PR gates 38114958973. Hosted 46 native/published and 45 per installed channel remain pending; #10 and full PRODUCT.md remain open. Published AppKit 0.1.0 unchanged; no local desktop input, merge/tag/release or Azure attempt.

Native source-sync ddb98ac / CI 38114492408 is terminal: native and published 42/46 each, four failures, zero skips; installed channels were not reached. Actual paired source selections prove WinUI uses one CR per line break; the previous CRLF projection shifted offsets and heading positions. Retained logs and published TRX: artifacts/source-sync-ui-38114492408.log, artifacts/source-sync-installed-38114492408.log and artifacts/source-sync-failed-installed-38114492408. Signed/DCO correction 90b5406fe47c07fc8602a101a14d4c53e2b5b709 is now pushed after the previous producer ended. The model uses native CR offsets and subtracts only original CRLF extra characters, preserving canonical snapshot/query positions. Fold fixture compares literal Setext text after newline normalization; all actual viewport, physical-wheel, fold/find/reload and exact selection assertions remain. Local 300 tests/100% measured lines, zero-warning build, format/docs/hooks pass. Exact current checks: CI 38114958970, CodeQL 38114958995, scripts 38114958655, security 38114958984, PR gates 38114958973. Hosted 46 native/published and 45 per installed channel remain pending; #10 and full PRODUCT.md remain open. Published AppKit 0.1.0 unchanged; no local desktop input, merge/tag/release or Azure attempt.

KofTwentyTwo commented

2026-10-11 05:39:02 +00:00

(Migrated from github.com)

Current signed/DCO head 2dc509dcfa pushed with physical SourceText focus and an additional actual source-glyph alignment assertion before the existing source-to-reader viewport assertion. Numeric source geometry diagnostics now include actual offset changes and previous offsets. No app scroll behavior or original viewport/physical-wheel requirement is weakened. Local build/format/docs/hooks pass; core unchanged from 300 tests/100% measured lines.

Previous 90b5406 / CI 38114958970 is terminal: native and published 45/46, one failure/no skips. Native CR mapping fixes exact paired-find selections, fold/find/reload restoration and reader-to-source alignment. The remaining failure follows an unfocused UIA ScrollIntoView request with no subsequent native geometry event; current fixture must prove actual native movement before evaluating reverse mapping. Installed channels were not reached. Logs/TRX retained at artifacts/source-sync-cr-failed-installed-38114958970 and artifacts/source-sync-cr-*-38114958970.log.

Current exact producers: CI 38115411266, CodeQL 38115411093, scripts 38115410579, security 38115411111, PR gates 38115411139. Expected 46 native/published and 45 per installed channel remain pending. Full PRODUCT.md and #10 stay open, including raw multiline/same-line source audit. Editor parity audit is in #11. Published AppKit 0.1.0 unchanged; no local GUI input, Azure attempt, merge/tag/release or fabricated human acknowledgement.

Current signed/DCO head 2dc509dcfa96afbd6c0e812ca621b23a917c6937 pushed with physical SourceText focus and an additional actual source-glyph alignment assertion before the existing source-to-reader viewport assertion. Numeric source geometry diagnostics now include actual offset changes and previous offsets. No app scroll behavior or original viewport/physical-wheel requirement is weakened. Local build/format/docs/hooks pass; core unchanged from 300 tests/100% measured lines. Previous 90b5406 / CI 38114958970 is terminal: native and published 45/46, one failure/no skips. Native CR mapping fixes exact paired-find selections, fold/find/reload restoration and reader-to-source alignment. The remaining failure follows an unfocused UIA ScrollIntoView request with no subsequent native geometry event; current fixture must prove actual native movement before evaluating reverse mapping. Installed channels were not reached. Logs/TRX retained at artifacts/source-sync-cr-failed-installed-38114958970 and artifacts/source-sync-cr-*-38114958970.log. Current exact producers: CI 38115411266, CodeQL 38115411093, scripts 38115410579, security 38115411111, PR gates 38115411139. Expected 46 native/published and 45 per installed channel remain pending. Full PRODUCT.md and #10 stay open, including raw multiline/same-line source audit. Editor parity audit is in #11. Published AppKit 0.1.0 unchanged; no local GUI input, Azure attempt, merge/tag/release or fabricated human acknowledgement.

KofTwentyTwo commented

2026-10-11 05:55:07 +00:00

(Migrated from github.com)

Current local issue #14 implementation now includes owned Windows file associations and cross-process activation (ADR-0005).

Velopack install/update/uninstall hooks advertise all five document types with quoted stable current-executable commands, per-channel/per-installation ProgIDs, Default Apps capabilities and the required REG_NONE silent-takeover marker. Uninstall checks unchanged command ownership and preserves other viewers/channels/user defaults; portable/build copies do not register.
SDK AppInstance chooses the executable/profile primary; current-user-only bounded generated-schema pipe delivery resolves relative Unicode/literal paths at the sender. Native UI routing retains existing/pending document windows. Invalid startup notifications survive browser loading.
Nine real isolated registry/pipe/path cases pass, including defaults, capabilities, retarget cleanup, malformed-peer recovery and idempotent shutdown/rebinding. Original oversized-frame test first failed because InvalidDataException derives SystemException; the explicit catch fix retains original assertions and red/final TRXs.
Full Release build and self-contained publish pass. Velopack1.2.161 verifies Program.Main Build/Run and packs the unsigned local fixture; all543 published files match byte-for-byte in portable/full archives, and11 retained notices match source bytes. No installation or release occurred.
-570 core tests/100% measured lines; changed docs lint passes.90 cases discovered (68desktop/22adapter; expected89installed), including two prepared actual secondary-process/profile/duplicate/watcher cases that have not run. Current hosted results still belong to older pushed1cfc07f; no new-head CI proof.

Evidence: artifacts/activation-boundaries/activation-boundaries-final.trx; activation-core/a3b401b0-c183-47e9-ae28-f9089d14bb4c/coverage.cobertura.xml; activation-ui-discovery.log; activation-package/publish-evidence.json.

Still required: actual native/published/installed acceptance, Explorer Open With and real install/update/uninstall readbacks; other full PRODUCT requirements, Print/PDF outcomes, standards and production signatures. The owner preview103040 remains unchanged. Original four staged files82+/10- preserved; new work unstaged. Signed commits/push still await the pending1Password ready reply; no retry/new Azure/merge/tag/release or fabricated review.

Default-file Settings action — 2026-10-11

Implemented locally: native Settings → Advanced → Choose default file types; read-only installed/owned registration validation and explicit optional-.txt guidance. Windows11 23H2+ targets this installation/channel's registeredAppUser; earlier builds use general Default Apps. Portable previews cannot register or launch the action. Full Release zero warnings/errors;11 isolated adapters and570 core/100% measured lines pass;format/diff checks pass.93 UI-project cases are discovered only; actual installed chooser/selection/Explorer remains pending. Original staged corrections/pushed1cfc07f preserved, signing-auth reply still pending; no desktop input, install, default change or publication. Detailed evidence: https://github.com/KofTwentyTwo/MarkdownViewr.Windows/issues/14#issuecomment-6110912180. Full PRODUCT scope remains active.

Current local issue #14 implementation now includes owned Windows file associations and cross-process activation (ADR-0005). - Velopack install/update/uninstall hooks advertise all five document types with quoted stable current-executable commands, per-channel/per-installation ProgIDs, Default Apps capabilities and the required REG_NONE silent-takeover marker. Uninstall checks unchanged command ownership and preserves other viewers/channels/user defaults; portable/build copies do not register. - SDK AppInstance chooses the executable/profile primary; current-user-only bounded generated-schema pipe delivery resolves relative Unicode/literal paths at the sender. Native UI routing retains existing/pending document windows. Invalid startup notifications survive browser loading. - Nine real isolated registry/pipe/path cases pass, including defaults, capabilities, retarget cleanup, malformed-peer recovery and idempotent shutdown/rebinding. Original oversized-frame test first failed because InvalidDataException derives SystemException; the explicit catch fix retains original assertions and red/final TRXs. - Full Release build and self-contained publish pass. Velopack1.2.161 verifies Program.Main Build/Run and packs the unsigned local fixture; all543 published files match byte-for-byte in portable/full archives, and11 retained notices match source bytes. No installation or release occurred. -570 core tests/100% measured lines; changed docs lint passes.90 cases discovered (68desktop/22adapter; expected89installed), including two prepared actual secondary-process/profile/duplicate/watcher cases that have not run. Current hosted results still belong to older pushed1cfc07f; no new-head CI proof. Evidence: artifacts/activation-boundaries/activation-boundaries-final.trx; activation-core/a3b401b0-c183-47e9-ae28-f9089d14bb4c/coverage.cobertura.xml; activation-ui-discovery.log; activation-package/publish-evidence.json. Still required: actual native/published/installed acceptance, Explorer Open With and real install/update/uninstall readbacks; other full PRODUCT requirements, Print/PDF outcomes, standards and production signatures. The owner preview103040 remains unchanged. Original four staged files82+/10- preserved; new work unstaged. Signed commits/push still await the pending1Password ready reply; no retry/new Azure/merge/tag/release or fabricated review. ### Default-file Settings action — 2026-10-11 Implemented locally: native Settings → Advanced → Choose default file types; read-only installed/owned registration validation and explicit optional-.txt guidance. Windows11 23H2+ targets this installation/channel's registeredAppUser; earlier builds use general Default Apps. Portable previews cannot register or launch the action. Full Release zero warnings/errors;11 isolated adapters and570 core/100% measured lines pass;format/diff checks pass.93 UI-project cases are discovered only; actual installed chooser/selection/Explorer remains pending. Original staged corrections/pushed1cfc07f preserved, signing-auth reply still pending; no desktop input, install, default change or publication. Detailed evidence: https://github.com/KofTwentyTwo/MarkdownViewr.Windows/issues/14#issuecomment-6110912180. Full PRODUCT scope remains active.

KofTwentyTwo commented

2026-10-11 14:00:55 +00:00

(Migrated from github.com)

A fresh Release x64 build passed with zero warnings/errors and is open for owner review in the new “README.md — MarkdownViewr” window. The older Debug/AGENTS.md window remains open.

This build includes the local Settings, 50/50 source split, toolbar, attribution/Help and wider Print/PDF options. Source highlighting is still in progress: its core draft compiles, but the native source view is not wired yet. The prior 538 tests/100% coverage result predates that draft; new tests remain required.

Launch responsiveness was confirmed; no automated desktop input or new distributed acceptance ran. The reported system Print/PDF failures remain unverified. Signed commits/push are still waiting on the existing 1Password authentication request. #1 remains open.

A fresh Release x64 build passed with zero warnings/errors and is open for owner review in the new “README.md — MarkdownViewr” window. The older Debug/AGENTS.md window remains open. This build includes the local Settings, 50/50 source split, toolbar, attribution/Help and wider Print/PDF options. Source highlighting is still in progress: its core draft compiles, but the native source view is not wired yet. The prior 538 tests/100% coverage result predates that draft; new tests remain required. Launch responsiveness was confirmed; no automated desktop input or new distributed acceptance ran. The reported system Print/PDF failures remain unverified. Signed commits/push are still waiting on the existing 1Password authentication request. #1 remains open.

KofTwentyTwo commented

2026-10-11 18:41:39 +00:00

(Migrated from github.com)

Pushed signed/DCO implementation 0eb3a0e to draft PR #3. Current local gates: zero-warning Release,582 core tests/100% measured lines,25 adapter tests, formatting and self-contained publish. Current native/published/installed acceptance is now queued in hosted CI; no current runtime or production-signing claim.

Native Settings pages/defaults, labeled toolbar, loaded-snapshot footer, disabled-editor explanation and open-source About changes are implemented. Source-hover regression remains unresolved and has an actual native pointer/color acceptance case. Default-file registration/routing is implemented with five passing isolated registry tests; actual installed chooser/Explorer lifecycle remains pending. Do not close affected issues before actual acceptance. Full stable1.0/dev goal remains active.

Pushed signed/DCO implementation `0eb3a0e` to draft PR #3. Current local gates: zero-warning Release,582 core tests/100% measured lines,25 adapter tests, formatting and self-contained publish. Current native/published/installed acceptance is now queued in hosted CI; no current runtime or production-signing claim. Native Settings pages/defaults, labeled toolbar, loaded-snapshot footer, disabled-editor explanation and open-source About changes are implemented. Source-hover regression remains unresolved and has an actual native pointer/color acceptance case. Default-file registration/routing is implemented with five passing isolated registry tests; actual installed chooser/Explorer lifecycle remains pending. Do not close affected issues before actual acceptance. Full stable1.0/dev goal remains active.

KofTwentyTwo commented

2026-10-11 19:01:51 +00:00

(Migrated from github.com)

Signed/DCO0ed608e is pushed to PR#3. Separate stable/dev package IDs and actual installed-channel title/data/log identities are implemented, with edition-aware isolated fixtures. Distinct navy Markdown icon is generated through AppKit BrandTool;9 ICO frames validated and256px visually inspected. WinUI3 source-project MIT credit is included while full proprietary package notices remain distributed.

Current local gates: zero-warning Release,586 core tests/100% measured lines,format,55 script tests,two changed-script analyzer partitions and normal signing/DCO/secret/workflow hooks pass. Current native/distributed/installed acceptance remains pending;0eb3a0e previously failed25/97 native cases and published timing. Azure trust must use the verified immutable repository subject. Precise administrator actions are documented; no actual Azure/signature or release-completion claim.

Signed/DCO0ed608e is pushed to PR#3. Separate stable/dev package IDs and actual installed-channel title/data/log identities are implemented, with edition-aware isolated fixtures. Distinct navy Markdown icon is generated through AppKit BrandTool;9 ICO frames validated and256px visually inspected. WinUI3 source-project MIT credit is included while full proprietary package notices remain distributed. Current local gates: zero-warning Release,586 core tests/100% measured lines,format,55 script tests,two changed-script analyzer partitions and normal signing/DCO/secret/workflow hooks pass. Current native/distributed/installed acceptance remains pending;0eb3a0e previously failed25/97 native cases and published timing. Azure trust must use the verified immutable repository subject. Precise administrator actions are documented; no actual Azure/signature or release-completion claim.

KofTwentyTwo commented

2026-10-11 19:20:19 +00:00

(Migrated from github.com)

Signed/DCO commit05bf612 is pushed to feat/windows-viewer/PR#3. It fixes the full-page outer body width reset, aligns Contents/Print with the other48px toolbar hit targets, uses the observed exact Open picker filename field1148 and tests the actual outline-depth control. Pixel checks sample the owned WebView; native width/scroll/font assertions are unchanged and now retain precise failure evidence. No cases are skipped.

Local gates: zero-warning Release build,586 core tests,100% measured core line coverage, full formatting and all commit/security/workflow hooks pass. Exact prior CI38166230860: source-hover passes; full native74/97,23failures,0skips; published suite exceeds600seconds before installed outcomes. A focused hosted reader-regressions job now covers these current paths alongside the full suite. Native/distributed/signature/review/release acceptance is still pending; no production release published.

Owner preview PID55472 remains responsive and untouched. Its portable output predates the latest candidate fixes. Existing Azure setup is preserved; precise repository-specific verification, immutable OIDC trust and profile-scoped role commands are in docs/azure-signing-admin.md, with no Azure mutations performed.

Signed/DCO commit05bf612 is pushed to feat/windows-viewer/PR#3. It fixes the full-page outer body width reset, aligns Contents/Print with the other48px toolbar hit targets, uses the observed exact Open picker filename field1148 and tests the actual outline-depth control. Pixel checks sample the owned WebView; native width/scroll/font assertions are unchanged and now retain precise failure evidence. No cases are skipped. Local gates: zero-warning Release build,586 core tests,100% measured core line coverage, full formatting and all commit/security/workflow hooks pass. Exact prior CI38166230860: source-hover passes; full native74/97,23failures,0skips; published suite exceeds600seconds before installed outcomes. A focused hosted reader-regressions job now covers these current paths alongside the full suite. Native/distributed/signature/review/release acceptance is still pending; no production release published. Owner preview PID55472 remains responsive and untouched. Its portable output predates the latest candidate fixes. Existing Azure setup is preserved; precise repository-specific verification, immutable OIDC trust and profile-scoped role commands are in docs/azure-signing-admin.md, with no Azure mutations performed.

KofTwentyTwo commented

2026-10-11 19:59:09 +00:00

(Migrated from github.com)

Signed/DCO 9fdfc2d is pushed to PR#3. Exact prior 8abbd4d/CI38168946288 improved full native acceptance from84 to93/97; focused10/12,zero skips. Build/core/format/security/CodeQL pass. Actual PDFs/screenshots/TRX retained in artifacts/reader-regressions-38168946288.

Four full-native failures remain: source reopening, repeated heading navigation, four-file import and source focus alignment. Focused palette also records an initial Light-color variant; published acceptance reproduces a disconnected-peer timeout and exceeds600seconds before installed results.

The current correction uses the supported native Toggle action; navigates the actual picker folder before entering all four quoted filenames (old field truncated expanded absolute paths); and compares heading navigation against its original1rem scroll inset. Physical hover and exact native/JSON assertions remain. Zero-warning Release build, format,55 Pester boundary cases and both module analyzer partitions pass. Exact-head CI38170170551 is running, not claimed green. Live main now requires reader-regressions with its GitHub Actions binding; all previous protections preserved.

Installed Default Apps/Explorer/lifecycle, distributed stable/dev isolation, final signing and genuine current-head maintainer review remain required. Owner preview55472 is preserved; no desktop input, Azure onboarding, signatures or release publication claimed.

Signed/DCO `9fdfc2d` is pushed to PR#3. Exact prior `8abbd4d`/CI38168946288 improved full native acceptance from84 to93/97; focused10/12,zero skips. Build/core/format/security/CodeQL pass. Actual PDFs/screenshots/TRX retained in artifacts/reader-regressions-38168946288. Four full-native failures remain: source reopening, repeated heading navigation, four-file import and source focus alignment. Focused palette also records an initial Light-color variant; published acceptance reproduces a disconnected-peer timeout and exceeds600seconds before installed results. The current correction uses the supported native Toggle action; navigates the actual picker folder before entering all four quoted filenames (old field truncated expanded absolute paths); and compares heading navigation against its original1rem scroll inset. Physical hover and exact native/JSON assertions remain. Zero-warning Release build, format,55 Pester boundary cases and both module analyzer partitions pass. Exact-head CI38170170551 is running, not claimed green. Live main now requires reader-regressions with its GitHub Actions binding; all previous protections preserved. Installed Default Apps/Explorer/lifecycle, distributed stable/dev isolation, final signing and genuine current-head maintainer review remain required. Owner preview55472 is preserved; no desktop input, Azure onboarding, signatures or release publication claimed.

KofTwentyTwo commented

2026-10-11 20:18:33 +00:00

(Migrated from github.com)

Signed/DCO 2fe5853, efe14af and dbda6d4 are pushed to PR#3. Exact-head CI38171433458 is running.

The current native pipe fix has actual red/green evidence: defer the real server continuation until its same-user client closes; the unfixed next ConnectAsync times out10seconds. Release accepted native connections even after a broken read clears IsConnected. Four cases plus25runs/100tests now pass locally, with zero failures/skips. No deadline/retry/assertion was relaxed.

Prior9fdfc2d focused14/15 passes source reopening, four-file import and heading commands; full native and published are93/97,4failures,zero skips. They reproduce pipe disconnection, initial source color, nested outline and source focus variants. Published now completes inside the original600second bound, but red tests prevent installed outcomes. These full variants are not superseded by focused passes.

Queued post-theme source repaint and numeric test-only focus diagnostics address the remaining source investigation; the tagged probe must be removed after diagnosis. All observed cases remain in the required focused gate. Local Release/format/55 script tests/both analyzer partitions pass. Owner preview55472 stays responsive and untouched. Production signatures, current-head human review and final stable1.0/dev publication remain pending.

Signed/DCO `2fe5853`, `efe14af` and `dbda6d4` are pushed to PR#3. Exact-head CI38171433458 is running. The current native pipe fix has actual red/green evidence: defer the real server continuation until its same-user client closes; the unfixed next ConnectAsync times out10seconds. Release accepted native connections even after a broken read clears IsConnected. Four cases plus25runs/100tests now pass locally, with zero failures/skips. No deadline/retry/assertion was relaxed. Prior9fdfc2d focused14/15 passes source reopening, four-file import and heading commands; full native and published are93/97,4failures,zero skips. They reproduce pipe disconnection, initial source color, nested outline and source focus variants. Published now completes inside the original600second bound, but red tests prevent installed outcomes. These full variants are not superseded by focused passes. Queued post-theme source repaint and numeric test-only focus diagnostics address the remaining source investigation; the tagged probe must be removed after diagnosis. All observed cases remain in the required focused gate. Local Release/format/55 script tests/both analyzer partitions pass. Owner preview55472 stays responsive and untouched. Production signatures, current-head human review and final stable1.0/dev publication remain pending.

KofTwentyTwo commented

2026-10-12 14:03:40 +00:00

(Migrated from github.com)

Signing milestone recorded in signed/DCO 313d258.

Authenticated readback verifies the existing signing resource and certificate profile.
A separate secretless application CI identity now has release-environment-only federation and profile-scoped signing permission. Existing shared identities and security controls were preserved.
Protected release configuration is set and independently read back.
Real local signing test: six disposable owned build binaries, SHA256 and RFC3161/SHA256 timestamps. All six pass SignTool verification with zero warnings/errors; expected publisher, trust, timestamps and SHA256 digest checks pass. Running owner previews were untouched.

This proves representative local signing under the existing authorized interactive identity. CI OIDC authentication and final installer/archive signing remain unproved. The reviewed shared signing builder must be published and pinned before protected release integration. No stable 1.0 or dev release was published.

Exact 321816c acceptance is terminal success: focused 29, native/published 111 each, installed stable/dev 110 each, zero failures/skips. Actual updates/restarts and coexistence/default-preservation receipts pass. 313d258 changes documentation only; fresh checks are pending.

Signing milestone recorded in signed/DCO `313d258`. - Authenticated readback verifies the existing signing resource and certificate profile. - A separate secretless application CI identity now has release-environment-only federation and profile-scoped signing permission. Existing shared identities and security controls were preserved. - Protected release configuration is set and independently read back. - Real local signing test: six disposable owned build binaries, SHA256 and RFC3161/SHA256 timestamps. All six pass SignTool verification with zero warnings/errors; expected publisher, trust, timestamps and SHA256 digest checks pass. Running owner previews were untouched. This proves representative local signing under the existing authorized interactive identity. CI OIDC authentication and final installer/archive signing remain unproved. The reviewed shared signing builder must be published and pinned before protected release integration. No stable 1.0 or dev release was published. Exact `321816c` acceptance is terminal success: focused 29, native/published 111 each, installed stable/dev 110 each, zero failures/skips. Actual updates/restarts and coexistence/default-preservation receipts pass. `313d258` changes documentation only; fresh checks are pending.

KofTwentyTwo commented

2026-10-12 14:38:23 +00:00

(Migrated from github.com)

Local final-package signing proof completed without installing or publishing the test package.

Using the exact reviewed signing wrapper at standards e3aaed4, pinned Velopack 1.2.161 and the signed six-binary 321816c input, produced a distinct disposable installer, portable ZIP and full update package. The strict distribution gate passes expected publisher/trust, SHA256 digests and RFC3161 timestamps for owned binaries and generated helpers, preserves third-party binary bytes, and verifies the signed installer embeds the exact full package. Final checksums were generated after signing. Evidence remains local under artifacts/signing-proof-321816c; owner preview binaries/profiles are unchanged.

This is actual local packaging integration under the authorized interactive signer. New CI OIDC authentication and protected release execution remain unproved; no stable 1.0/dev publication or installed signed-release acceptance is claimed.

Separately, current 313d258 installed job failed during dependency restore before tests. Its actual process-1 log is retained; the job has been retried once on the same commit with full original test cases/deadlines. Preserve the live attempt. Standards PR #31 is updated to current main and has terminal green exact-head CI; its genuine human review/publication is pending. Draft license proposal #32 now uses unused EX-0013, remains proposed, and has green checks; no exception was approved or activated.

Local final-package signing proof completed without installing or publishing the test package. Using the exact reviewed signing wrapper at standards `e3aaed4`, pinned Velopack 1.2.161 and the signed six-binary `321816c` input, produced a distinct disposable installer, portable ZIP and full update package. The strict distribution gate passes expected publisher/trust, SHA256 digests and RFC3161 timestamps for owned binaries and generated helpers, preserves third-party binary bytes, and verifies the signed installer embeds the exact full package. Final checksums were generated after signing. Evidence remains local under `artifacts/signing-proof-321816c`; owner preview binaries/profiles are unchanged. This is actual local packaging integration under the authorized interactive signer. New CI OIDC authentication and protected release execution remain unproved; no stable 1.0/dev publication or installed signed-release acceptance is claimed. Separately, current `313d258` installed job failed during dependency restore before tests. Its actual process-1 log is retained; the job has been retried once on the same commit with full original test cases/deadlines. Preserve the live attempt. Standards PR #31 is updated to current main and has terminal green exact-head CI; its genuine human review/publication is pending. Draft license proposal #32 now uses unused EX-0013, remains proposed, and has green checks; no exception was approved or activated.

KofTwentyTwo commented

2026-10-12 15:18:53 +00:00

(Migrated from github.com)

Release publication is explicitly authorized. The maintainer personally confirmed review/resolution of standards PR #31; it is merged as a verified signed commit. Its main CI exposed six helper references to the former branch-only SHA after squash merge. The exact online scanner reproduces six HIGH findings; minimal follow-up standards PR #39 repins only those six references to byte-identical helpers on signed main and passes the same online gate plus every hosted required check. Human review confirmation for that small correction is pending; no security rule is bypassed.

The app's same-head CI retry is now terminal success. Actual retained TRXs: published 111/111, installed stable/dev 110/110 each, zero failures/skips. Actual update/restart receipts and coexisting-channel/default-preservation checks pass. This fixes no application assertion; the original failed attempt stalled during dependency restore before tests.

Concrete standards release preflight is tracked in KofTwentyTwo/standards#40: full live conformance has no FAIL, official standards Best Practices project shows passing/100%, and both pre-minor parser campaigns pass 10000 iterations/160000 assertions each with actual process exit 0. Code mutation coverage is explicitly unmeasured, not invented. The checklist is not ready-labeled until corrected main gates/version proposal and genuine review complete.

Production stable 1.0 and dev publication remain pending the published reviewed builder, its adoption and actual protected CI signing, final-head app maintainer-owned review record, and Windows-specific Best Practices enrollment/assessment. Real local final signed distribution proof remains retained; owner previews untouched. No fake review, badge, vulnerability waiver or release claim.

Release publication is explicitly authorized. The maintainer personally confirmed review/resolution of standards PR #31; it is merged as a verified signed commit. Its main CI exposed six helper references to the former branch-only SHA after squash merge. The exact online scanner reproduces six HIGH findings; minimal follow-up standards PR #39 repins only those six references to byte-identical helpers on signed main and passes the same online gate plus every hosted required check. Human review confirmation for that small correction is pending; no security rule is bypassed. The app's same-head CI retry is now terminal success. Actual retained TRXs: published 111/111, installed stable/dev 110/110 each, zero failures/skips. Actual update/restart receipts and coexisting-channel/default-preservation checks pass. This fixes no application assertion; the original failed attempt stalled during dependency restore before tests. Concrete standards release preflight is tracked in KofTwentyTwo/standards#40: full live conformance has no FAIL, official standards Best Practices project shows passing/100%, and both pre-minor parser campaigns pass 10000 iterations/160000 assertions each with actual process exit 0. Code mutation coverage is explicitly unmeasured, not invented. The checklist is not ready-labeled until corrected main gates/version proposal and genuine review complete. Production stable 1.0 and dev publication remain pending the published reviewed builder, its adoption and actual protected CI signing, final-head app maintainer-owned review record, and Windows-specific Best Practices enrollment/assessment. Real local final signed distribution proof remains retained; owner previews untouched. No fake review, badge, vulnerability waiver or release claim.

KofTwentyTwo commented

2026-10-12 16:25:18 +00:00

(Migrated from github.com)

Shared standards1.1.0 is now actually published and verified: https://github.com/KofTwentyTwo/standards/releases/tag/v1.1.0. Its signed merge is93b1d616; releaseCI38275622522 and every downloaded asset checksum/provenance check pass.

Application signing caller is committed/pushed in b1dc8743b8. It enables protected OIDC signing with the explicit six-file ownership catalog; nine preflight tests, actual configured-variable preflight, changed-document lint, online workflow security/syntax and commit hooks pass. Full unchanged appCI38276579007 is running. Application code stays at the fully accepted321816c implementation; local signed final distribution proof already passes. No application1.0/dev release is published yet.

Remaining owner steps: actual final-head app review record, two-row inventory PR36 review/merge and the real Windows OpenSSF enrollment URL. Final production CI identity/signature verification remains required. Keep scope to publication and preserve owner previews; no redesign or additional features.

Shared standards1.1.0 is now actually published and verified: https://github.com/KofTwentyTwo/standards/releases/tag/v1.1.0. Its signed merge is93b1d616; releaseCI38275622522 and every downloaded asset checksum/provenance check pass. Application signing caller is committed/pushed in b1dc8743b878d970fcadeeba2511b889fbace148. It enables protected OIDC signing with the explicit six-file ownership catalog; nine preflight tests, actual configured-variable preflight, changed-document lint, online workflow security/syntax and commit hooks pass. Full unchanged appCI38276579007 is running. Application code stays at the fully accepted321816c implementation; local signed final distribution proof already passes. No application1.0/dev release is published yet. Remaining owner steps: actual final-head app review record, two-row inventory PR36 review/merge and the real Windows OpenSSF enrollment URL. Final production CI identity/signature verification remains required. Keep scope to publication and preserve owner previews; no redesign or additional features.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/MarkdownViewr.Windows#1