feat(reader): deliver Windows MarkdownViewr using AppKit #3

2026-10-11T00:07:31Z

KofTwentyTwo commented

2026-10-11 00:07:31 +00:00

(Migrated from github.com)

Provide the Windows counterpart to Darin Kelkhoff's macOS MarkdownViewr using AppKit and the KofTwentyTwo standards.

The reader supports GFM, configurable extensions, local images/links, metadata, independent windows, recent files, and automatic save/replacement recovery. Native Contents and highlighted source panes resize, synchronize, and default off. Find, zoom, keyboard navigation, printing/PDF output, and external editors are implemented.

The toolbar keeps Print visible and uses consistent labels. Native Settings manage General, document themes, editors, Printing, and Advanced startup options. About credits open-source components and Darin under Contributions. The footer reports file timestamp/staleness and opens its folder; disabled editor commands explain their state.

Stable/dev installation, profiles, logs, and updates stay isolated. The installer registers five extensions and preserves current defaults; Windows requires the user's default-app choice. The release caller pins the published standards1.1.0 builder, enables protected Azure OIDC signing, and declares six owned binaries. Final signatures, publisher/trust/timestamps, third-party preservation, and distributed payloads must verify before publication.

README is now a user-focused product page with two real app screenshots and install/quick-start/support links. A separate user guide and DEVELOPERS.md cover usage and technical setup; CONTRIBUTING and issue chooser are current. Windows OpenSSF project15417 is enrolled with an honest progress badge; standards inventory36 is merged.

Validation:

Accepted application code321816c; signing callerb1dc874 / CI38276579007 passes all hosted checks. Core677/100% measured lines, focused29, native/published111, installed stable/dev110 each; zero failures/skips. Actual apply/restart/hash, registrations, preserved defaults, and coexistence receipts verify.
Local final signing/distribution proof and nine signing-preflight tests pass; production CI OIDC remains unproved until release.
Documentation commitbaee14f: six Markdown files lint clean; all33 local links exist; static conformance has no FAIL; YAML/JSON/secret/DCO/signature hooks pass. Captured screenshots use isolated public sample documents on an owner-reserved clear desktop.
Required exact-head hosted checks are running onbaee14f; no production app release is claimed.

Remaining: genuine current-head maintainer review record, successful checks, required fuzzing context readback, protected main merge, and verified immutable1.0.0-beta.1/dev plus1.0.0/stable publication. OpenSSF operating-practice assessment remains honest/incomplete. Unrelated template/licensing proposals stay separate.

Substantial AI assistance: Codex (GPT-6).

Closes #4, #6, #7, #8, #9, #10, #11, #12, #13, #14, #15, #16, #17, #18, #19, #20, #21, #22, #23, #24, #25, #26, #27, #28, #29, #32, #34.
Refs #1, #5, #30, #31, #33.

Provide the Windows counterpart to Darin Kelkhoff's macOS MarkdownViewr using AppKit and the KofTwentyTwo standards. The reader supports GFM, configurable extensions, local images/links, metadata, independent windows, recent files, and automatic save/replacement recovery. Native Contents and highlighted source panes resize, synchronize, and default off. Find, zoom, keyboard navigation, printing/PDF output, and external editors are implemented. The toolbar keeps Print visible and uses consistent labels. Native Settings manage General, document themes, editors, Printing, and Advanced startup options. About credits open-source components and Darin under Contributions. The footer reports file timestamp/staleness and opens its folder; disabled editor commands explain their state. Stable/dev installation, profiles, logs, and updates stay isolated. The installer registers five extensions and preserves current defaults; Windows requires the user's default-app choice. The release caller pins the published standards1.1.0 builder, enables protected Azure OIDC signing, and declares six owned binaries. Final signatures, publisher/trust/timestamps, third-party preservation, and distributed payloads must verify before publication. README is now a user-focused product page with two real app screenshots and install/quick-start/support links. A separate user guide and DEVELOPERS.md cover usage and technical setup; CONTRIBUTING and issue chooser are current. Windows OpenSSF project15417 is enrolled with an honest progress badge; standards inventory36 is merged. Validation: - Accepted application code321816c; signing callerb1dc874 / CI38276579007 passes all hosted checks. Core677/100% measured lines, focused29, native/published111, installed stable/dev110 each; zero failures/skips. Actual apply/restart/hash, registrations, preserved defaults, and coexistence receipts verify. - Local final signing/distribution proof and nine signing-preflight tests pass; production CI OIDC remains unproved until release. - Documentation commitbaee14f: six Markdown files lint clean; all33 local links exist; static conformance has no FAIL; YAML/JSON/secret/DCO/signature hooks pass. Captured screenshots use isolated public sample documents on an owner-reserved clear desktop. - Required exact-head hosted checks are running onbaee14f; no production app release is claimed. Remaining: genuine current-head maintainer review record, successful checks, required fuzzing context readback, protected main merge, and verified immutable1.0.0-beta.1/dev plus1.0.0/stable publication. OpenSSF operating-practice assessment remains honest/incomplete. Unrelated template/licensing proposals stay separate. Substantial AI assistance: Codex (GPT-6). Closes #4, #6, #7, #8, #9, #10, #11, #12, #13, #14, #15, #16, #17, #18, #19, #20, #21, #22, #23, #24, #25, #26, #27, #28, #29, #32, #34. Refs #1, #5, #30, #31, #33.

KofTwentyTwo commented

2026-10-11 00:37:44 +00:00

(Migrated from github.com)

Current-head hosted update: security run 38098965817 passed. Scripts run 38098965365 failed inside Invoke-ScriptAnalyzer 1.25.0 with a null-reference engine exception, not reported lint findings; no scripts/settings/workflow were changed by the reader implementation. A separate CI issue tracks remediation; no run was restarted and the required gate remains enforced. CI 38098965780 and CodeQL 38098965738 are still running, including actual document UI acceptance.

KofTwentyTwo commented

2026-10-11 13:00:49 +00:00

(Migrated from github.com)

Current local issue #14 implementation now includes owned Windows file associations and cross-process activation (ADR-0005).

Velopack install/update/uninstall hooks advertise all five document types with quoted stable current-executable commands, per-channel/per-installation ProgIDs, Default Apps capabilities and the required REG_NONE silent-takeover marker. Uninstall checks unchanged command ownership and preserves other viewers/channels/user defaults; portable/build copies do not register.
SDK AppInstance chooses the executable/profile primary; current-user-only bounded generated-schema pipe delivery resolves relative Unicode/literal paths at the sender. Native UI routing retains existing/pending document windows. Invalid startup notifications survive browser loading.
Nine real isolated registry/pipe/path cases pass, including defaults, capabilities, retarget cleanup, malformed-peer recovery and idempotent shutdown/rebinding. Original oversized-frame test first failed because InvalidDataException derives SystemException; the explicit catch fix retains original assertions and red/final TRXs.
Full Release build and self-contained publish pass. Velopack1.2.161 verifies Program.Main Build/Run and packs the unsigned local fixture; all543 published files match byte-for-byte in portable/full archives, and11 retained notices match source bytes. No installation or release occurred.
-570 core tests/100% measured lines; changed docs lint passes.90 cases discovered (68desktop/22adapter; expected89installed), including two prepared actual secondary-process/profile/duplicate/watcher cases that have not run. Current hosted results still belong to older pushed1cfc07f; no new-head CI proof.

Evidence: artifacts/activation-boundaries/activation-boundaries-final.trx; activation-core/a3b401b0-c183-47e9-ae28-f9089d14bb4c/coverage.cobertura.xml; activation-ui-discovery.log; activation-package/publish-evidence.json.

Still required: actual native/published/installed acceptance, Explorer Open With and real install/update/uninstall readbacks; other full PRODUCT requirements, Print/PDF outcomes, standards and production signatures. The owner preview103040 remains unchanged. Original four staged files82+/10- preserved; new work unstaged. Signed commits/push still await the pending1Password ready reply; no retry/new Azure/merge/tag/release or fabricated review.

Default-file Settings action — 2026-10-11

Implemented locally: native Settings → Advanced → Choose default file types; read-only installed/owned registration validation and explicit optional-.txt guidance. Windows11 23H2+ targets this installation/channel's registeredAppUser; earlier builds use general Default Apps. Portable previews cannot register or launch the action. Full Release zero warnings/errors;11 isolated adapters and570 core/100% measured lines pass;format/diff checks pass.93 UI-project cases are discovered only; actual installed chooser/selection/Explorer remains pending. Original staged corrections/pushed1cfc07f preserved, signing-auth reply still pending; no desktop input, install, default change or publication. Detailed evidence: https://github.com/KofTwentyTwo/MarkdownViewr.Windows/issues/14#issuecomment-6110912180. Full PRODUCT scope remains active.

Current local issue #14 implementation now includes owned Windows file associations and cross-process activation (ADR-0005). - Velopack install/update/uninstall hooks advertise all five document types with quoted stable current-executable commands, per-channel/per-installation ProgIDs, Default Apps capabilities and the required REG_NONE silent-takeover marker. Uninstall checks unchanged command ownership and preserves other viewers/channels/user defaults; portable/build copies do not register. - SDK AppInstance chooses the executable/profile primary; current-user-only bounded generated-schema pipe delivery resolves relative Unicode/literal paths at the sender. Native UI routing retains existing/pending document windows. Invalid startup notifications survive browser loading. - Nine real isolated registry/pipe/path cases pass, including defaults, capabilities, retarget cleanup, malformed-peer recovery and idempotent shutdown/rebinding. Original oversized-frame test first failed because InvalidDataException derives SystemException; the explicit catch fix retains original assertions and red/final TRXs. - Full Release build and self-contained publish pass. Velopack1.2.161 verifies Program.Main Build/Run and packs the unsigned local fixture; all543 published files match byte-for-byte in portable/full archives, and11 retained notices match source bytes. No installation or release occurred. -570 core tests/100% measured lines; changed docs lint passes.90 cases discovered (68desktop/22adapter; expected89installed), including two prepared actual secondary-process/profile/duplicate/watcher cases that have not run. Current hosted results still belong to older pushed1cfc07f; no new-head CI proof. Evidence: artifacts/activation-boundaries/activation-boundaries-final.trx; activation-core/a3b401b0-c183-47e9-ae28-f9089d14bb4c/coverage.cobertura.xml; activation-ui-discovery.log; activation-package/publish-evidence.json. Still required: actual native/published/installed acceptance, Explorer Open With and real install/update/uninstall readbacks; other full PRODUCT requirements, Print/PDF outcomes, standards and production signatures. The owner preview103040 remains unchanged. Original four staged files82+/10- preserved; new work unstaged. Signed commits/push still await the pending1Password ready reply; no retry/new Azure/merge/tag/release or fabricated review. ### Default-file Settings action — 2026-10-11 Implemented locally: native Settings → Advanced → Choose default file types; read-only installed/owned registration validation and explicit optional-.txt guidance. Windows11 23H2+ targets this installation/channel's registeredAppUser; earlier builds use general Default Apps. Portable previews cannot register or launch the action. Full Release zero warnings/errors;11 isolated adapters and570 core/100% measured lines pass;format/diff checks pass.93 UI-project cases are discovered only; actual installed chooser/selection/Explorer remains pending. Original staged corrections/pushed1cfc07f preserved, signing-auth reply still pending; no desktop input, install, default change or publication. Detailed evidence: https://github.com/KofTwentyTwo/MarkdownViewr.Windows/issues/14#issuecomment-6110912180. Full PRODUCT scope remains active.

KofTwentyTwo commented

2026-10-11 23:28:24 +00:00

(Migrated from github.com)

Head b5e519e is pushed with signed/DCO5803fc1 (complete inline raw-heading fold syntax), aeeb28d (native General/Contents wrapping/depth markers and live sibling persistence), and exact distributed evidence. All593 core tests/100% measured lines, zero-warning Release build, formatting and commit/security/workflow hooks pass locally.100 UI cases compile/discover; changed/new actual GUI assertions require the fresh hosted run.

Previous53755ab / CI38182128299 is terminal success: focused21/21, native/published99/99, installed stable/dev98/98 each, zero failures/skips. Real AppKit apply/restart, before/after five-extension registration and owned uninstall/default preservation pass. Separate simultaneous stable/dev profiles/processes, isolated actual updates and stable uninstall preserving live registered dev pass. Retained actual TRXs/results/coexisting-channels.json under artifacts/current-installed-evidence-38182128299. No claim that the intermittent two published startup failures onbd3d72a received a production fix; they did not recur here.

Mac screenshots were reviewed; generic design gaps are recorded in issue21 without private images/document content. General now includes Default Apps guidance and panel defaults; Advanced retains splash/startup updates. Remaining design: effective default status, theme previews/clear default semantics and dedicated Printing page. Actual Windows chooser/Explorer, owner design acceptance, reviewed shared foundations/licensing, genuine exact-head review, deployed Azure identity/profile/publisher and exact shipped signing remain required. No shared merge, tag or production publication; owner preview55472 and real profile remain untouched. Substantial AI assistance by Codex.

Head b5e519e is pushed with signed/DCO5803fc1 (complete inline raw-heading fold syntax), aeeb28d (native General/Contents wrapping/depth markers and live sibling persistence), and exact distributed evidence. All593 core tests/100% measured lines, zero-warning Release build, formatting and commit/security/workflow hooks pass locally.100 UI cases compile/discover; changed/new actual GUI assertions require the fresh hosted run. Previous53755ab / CI38182128299 is terminal success: focused21/21, native/published99/99, installed stable/dev98/98 each, zero failures/skips. Real AppKit apply/restart, before/after five-extension registration and owned uninstall/default preservation pass. Separate simultaneous stable/dev profiles/processes, isolated actual updates and stable uninstall preserving live registered dev pass. Retained actual TRXs/results/coexisting-channels.json under artifacts/current-installed-evidence-38182128299. No claim that the intermittent two published startup failures onbd3d72a received a production fix; they did not recur here. Mac screenshots were reviewed; generic design gaps are recorded in issue21 without private images/document content. General now includes Default Apps guidance and panel defaults; Advanced retains splash/startup updates. Remaining design: effective default status, theme previews/clear default semantics and dedicated Printing page. Actual Windows chooser/Explorer, owner design acceptance, reviewed shared foundations/licensing, genuine exact-head review, deployed Azure identity/profile/publisher and exact shipped signing remain required. No shared merge, tag or production publication; owner preview55472 and real profile remain untouched. Substantial AI assistance by Codex.

KofTwentyTwo commented

2026-10-11 23:43:18 +00:00

(Migrated from github.com)

Signed/DCO local7fa9f77 adds a dedicated native Printing page with a shared PrintOptionsEditor used by the output dialog: themes, backgrounds/images, font zoom, width, borders and bounded padding. Apply saves validated defaults; Restore uses the latest saved baseline; closing discards drafts. PDF destinations and Open PDF/Open folder remain deliberate export actions. Checked saves precede shared reader-baseline broadcasts, preserving unsubmitted sibling Settings drafts. Theme changes refresh available named print choices; native navigation labels stay visible at normal width.

Zero-warning/error Release build and formatting pass; all598 core tests/100% measured lines pass.102 native cases compile/discover, including new actual Apply/Restore/Print-cancel/persistence and concurrent sibling-output/draft/Restore checks, with owned controls and a real Settings screenshot. Existing Print/PDF/pixel checks and every deadline remain unchanged. New native assertions are not yet executed; no local input occurred.

Exact pushedb5e519e focused19/22 and full native98/100 fail, zero skips. The new Contents options case passes in both. Localec78b50 corrects actual raw-inline/HTML-block closing boundaries, tooltip click interception and an observed exact picker lookup problem;598 core cases prove the reproduced parser correction. Installed114603470178 is still live, so these commits are held to preserve the full run. Retained focused/full logs and actual TRX/Settings pixels under artifacts/reader-regressions-38184378762. Full theme/default-status design, fresh acceptance, owner review and production signing remain open.

Signed/DCO local7fa9f77 adds a dedicated native Printing page with a shared PrintOptionsEditor used by the output dialog: themes, backgrounds/images, font zoom, width, borders and bounded padding. Apply saves validated defaults; Restore uses the latest saved baseline; closing discards drafts. PDF destinations and Open PDF/Open folder remain deliberate export actions. Checked saves precede shared reader-baseline broadcasts, preserving unsubmitted sibling Settings drafts. Theme changes refresh available named print choices; native navigation labels stay visible at normal width. Zero-warning/error Release build and formatting pass; all598 core tests/100% measured lines pass.102 native cases compile/discover, including new actual Apply/Restore/Print-cancel/persistence and concurrent sibling-output/draft/Restore checks, with owned controls and a real Settings screenshot. Existing Print/PDF/pixel checks and every deadline remain unchanged. New native assertions are not yet executed; no local input occurred. Exact pushedb5e519e focused19/22 and full native98/100 fail, zero skips. The new Contents options case passes in both. Localec78b50 corrects actual raw-inline/HTML-block closing boundaries, tooltip click interception and an observed exact picker lookup problem;598 core cases prove the reproduced parser correction. Installed114603470178 is still live, so these commits are held to preserve the full run. Retained focused/full logs and actual TRX/Settings pixels under artifacts/reader-regressions-38184378762. Full theme/default-status design, fresh acceptance, owner review and production signing remain open.

KofTwentyTwo commented

2026-10-11 23:44:49 +00:00

(Migrated from github.com)

Signed/DCO headb2ecc8c is pushed: ec78b50 corrects complete inline title syntax across Markdig HTML blocks plus the observed tooltip/picker input problems;7fa9f77 adds native Printing settings sharing the output editor and checked default saves. All598 core tests pass with100% measured line coverage; Release build has zero warnings/errors; formatting and commit/security/workflow hooks pass.102 native cases compile/discover, including actual Apply/Restore/dialog-cancel and concurrent sibling output/draft preservation checks. Fresh hosted native/distributed execution is required; no local input occurred.

Exact previousb5e519e / CI38184378762 is terminal: focused19/22, native98/100 and published98/100, zero skips. General/Contents options case passes in focused/full. Published actual TRX confirms the same raw-inline fold and physical source-click/alignment failures; installed lifecycle phase is not reached. Retain current-installed-b5e519e.log and actual artifacts/TRX under artifacts/current-installed-evidence-38184378762. Previous53755ab remains the fully green distributed/registration/coexistence checkpoint, with unsigned fixtures.

Headb2ecc8c was pushed only after preserving terminal evidence. Existing assertions/cases/deadlines remain; no failed check disabled, fabricated human review, shared merge, Azure retry, tag or production release. Remaining: fresh exact-head acceptance and Settings screenshots, effective default-viewer status, theme palette/default clarity, owner acceptance, actual Windows chooser/Explorer and reviewed/licensed/signed production release requirements.

Signed/DCO headb2ecc8c is pushed: ec78b50 corrects complete inline title syntax across Markdig HTML blocks plus the observed tooltip/picker input problems;7fa9f77 adds native Printing settings sharing the output editor and checked default saves. All598 core tests pass with100% measured line coverage; Release build has zero warnings/errors; formatting and commit/security/workflow hooks pass.102 native cases compile/discover, including actual Apply/Restore/dialog-cancel and concurrent sibling output/draft preservation checks. Fresh hosted native/distributed execution is required; no local input occurred. Exact previousb5e519e / CI38184378762 is terminal: focused19/22, native98/100 and published98/100, zero skips. General/Contents options case passes in focused/full. Published actual TRX confirms the same raw-inline fold and physical source-click/alignment failures; installed lifecycle phase is not reached. Retain current-installed-b5e519e.log and actual artifacts/TRX under artifacts/current-installed-evidence-38184378762. Previous53755ab remains the fully green distributed/registration/coexistence checkpoint, with unsigned fixtures. Headb2ecc8c was pushed only after preserving terminal evidence. Existing assertions/cases/deadlines remain; no failed check disabled, fabricated human review, shared merge, Azure retry, tag or production release. Remaining: fresh exact-head acceptance and Settings screenshots, effective default-viewer status, theme palette/default clarity, owner acceptance, actual Windows chooser/Explorer and reviewed/licensed/signed production release requirements.

KofTwentyTwo commented

2026-10-11 23:56:00 +00:00

(Migrated from github.com)

Signed/DCO local24a464e adds effective .md default-viewer status to General. Windows' read-only AssocQueryStringW/ASSOCSTR_PROGID query is bounded to1024 Unicode characters; the exact edition/install must retain its owned registration. Registration alone is not Default, another edition/retargeted command is not Default, and unavailable results remain Unknown. Refresh runs when returning from Windows Settings or explicitly. No defaults/UserChoice/hash writes or competing-app paths are read/displayed. ADR0005/threat model document the boundary.

Seven actual read-only API/isolated registry tests pass; zero-warning Release build/format/hooks pass.105 native cases compile/discover; updated General status/refresh and new true-truncation tooltip/physical-heading tests remain unexecuted. The commit is held to preserve currently live full native114606533948 and installed114606533825.

Exact pushedb2ecc8c / CI38185403701 focused23/24 fails, zero skips: actual TRX proves both new Printing apply/restore/cancel/concurrent-draft cases, raw-inline folding, picker cancellation and Contents options pass. Remaining physical source/reader alignment still fails; retained actual evidence includes a short-title tooltip. The new refinement limits full-title tips to genuinely trimmed native labels with an explicit placement target and preserves mouse invocation diagnostics, without changing any existing assertion/deadline. Fresh native/distributed acceptance is required before claiming resolution. Retain current-focused-b2ecc8c.log and artifacts/reader-regressions-38185403701.

Actual Windows user-selected default/Explorer, theme previews/default clarity, owner acceptance, genuine review and production signing remain required; no release is published.

Signed/DCO local24a464e adds effective `.md` default-viewer status to General. Windows' read-only AssocQueryStringW/ASSOCSTR_PROGID query is bounded to1024 Unicode characters; the exact edition/install must retain its owned registration. Registration alone is not Default, another edition/retargeted command is not Default, and unavailable results remain Unknown. Refresh runs when returning from Windows Settings or explicitly. No defaults/UserChoice/hash writes or competing-app paths are read/displayed. ADR0005/threat model document the boundary. Seven actual read-only API/isolated registry tests pass; zero-warning Release build/format/hooks pass.105 native cases compile/discover; updated General status/refresh and new true-truncation tooltip/physical-heading tests remain unexecuted. The commit is held to preserve currently live full native114606533948 and installed114606533825. Exact pushedb2ecc8c / CI38185403701 focused23/24 fails, zero skips: actual TRX proves both new Printing apply/restore/cancel/concurrent-draft cases, raw-inline folding, picker cancellation and Contents options pass. Remaining physical source/reader alignment still fails; retained actual evidence includes a short-title tooltip. The new refinement limits full-title tips to genuinely trimmed native labels with an explicit placement target and preserves mouse invocation diagnostics, without changing any existing assertion/deadline. Fresh native/distributed acceptance is required before claiming resolution. Retain current-focused-b2ecc8c.log and artifacts/reader-regressions-38185403701. Actual Windows user-selected default/Explorer, theme previews/default clarity, owner acceptance, genuine review and production signing remain required; no release is published.

KofTwentyTwo commented

2026-10-12 00:13:38 +00:00

(Migrated from github.com)

Signed/DCO head1bfab22 is pushed after exactb2ecc8c CI38185403701 became terminal. It includes24a464e effective default-viewer status and1bfab22 native theme palette/state/default controls plus fixture cleanup. General reports the actual effective .md selection with bounded read-only Windows ProgID querying, exact installed/edition ownership and manual/activation refresh. Seven actual non-GUI API/isolated registry tests pass.

Theme rows show five validated color previews with hexadecimal accessible names/tooltips and textual Built-in/edited/Custom, Enabled/Disabled and Default labels. Native default radio selection enables the selected choice inside the copied draft; Save applies the existing saved DocumentTheme to open/new readers, Cancel discards it. Existing edit/copy/import/restore behaviors remain. The new actual native case checks painted Nord swatch pixels, default/enabled states, save/reopen and retains a Settings screenshot.106 native cases compile/discover; zero-warning Release build, format and hooks pass. Core unchanged598/100% measured lines.

Previousb2ecc8c focused23/24 and native101/102 fail, zero skips, only source physical alignment. Both Printing cases/raw-inline folds/picker/Contents options pass in completed suites. Published process reaches unchanged600seconds without final TRX; its process log records alignment failure and ten failed exits. No installed lifecycle outcome. Exact pinned FlaUI source uses CloseMainWindow plus5-second wait; fixture teardown now closes every owned PID window before the unchanged close/kill fallback. No cases/assertions/deadlines removed or expanded. Retain current-native/current-installed-b2ecc8c logs and actual artifact bundle38185403701.

Fresh exact1bfab22 CI38187115859 is live; pr-gates/security pass, scripts/CodeQL live. Actual default/status/palette/trim-only tooltip and full published/installed runtime remain pending. Owner design acceptance, actual Windows chooser/Explorer, shared/license and genuine head review, deployed Azure profile/identity and shipped signature trust remain required. No local GUI input, preview55472 changes, Azure retry, shared merge, tag or production publication.

Signed/DCO head1bfab22 is pushed after exactb2ecc8c CI38185403701 became terminal. It includes24a464e effective default-viewer status and1bfab22 native theme palette/state/default controls plus fixture cleanup. General reports the actual effective .md selection with bounded read-only Windows ProgID querying, exact installed/edition ownership and manual/activation refresh. Seven actual non-GUI API/isolated registry tests pass. Theme rows show five validated color previews with hexadecimal accessible names/tooltips and textual Built-in/edited/Custom, Enabled/Disabled and Default labels. Native default radio selection enables the selected choice inside the copied draft; Save applies the existing saved DocumentTheme to open/new readers, Cancel discards it. Existing edit/copy/import/restore behaviors remain. The new actual native case checks painted Nord swatch pixels, default/enabled states, save/reopen and retains a Settings screenshot.106 native cases compile/discover; zero-warning Release build, format and hooks pass. Core unchanged598/100% measured lines. Previousb2ecc8c focused23/24 and native101/102 fail, zero skips, only source physical alignment. Both Printing cases/raw-inline folds/picker/Contents options pass in completed suites. Published process reaches unchanged600seconds without final TRX; its process log records alignment failure and ten failed exits. No installed lifecycle outcome. Exact pinned FlaUI source uses CloseMainWindow plus5-second wait; fixture teardown now closes every owned PID window before the unchanged close/kill fallback. No cases/assertions/deadlines removed or expanded. Retain current-native/current-installed-b2ecc8c logs and actual artifact bundle38185403701. Fresh exact1bfab22 CI38187115859 is live; pr-gates/security pass, scripts/CodeQL live. Actual default/status/palette/trim-only tooltip and full published/installed runtime remain pending. Owner design acceptance, actual Windows chooser/Explorer, shared/license and genuine head review, deployed Azure profile/identity and shipped signature trust remain required. No local GUI input, preview55472 changes, Azure retry, shared merge, tag or production publication.

KofTwentyTwo commented

2026-10-12 00:19:30 +00:00

(Migrated from github.com)

Signed/DCO local49f0556 restores the trusted DocumentHeading Tag on the new Contents content Grid. The retained b2ecc8c screenshot shows the last row still selected while reader/source remain at the middle after repeat activation. ItemClick identifies the clicked FrameworkElement; repeating the selected row does not generate SelectionChanged. The older TextBlock content carried the heading Tag, while the new Grid did not. Restoring it is a narrow metadata correction; the unchanged physical Source_BidirectionalScroll case must verify it. Zero-warning Release/build-format/hooks pass.

Correct the earlier diagnostic inference: InputDiagnostics.GetCurrentPoint(sender) reports client coordinates. Comparing110,307 directly to screen-space row bounds was invalid; the titlebar/client origin explains the difference. Tooltip presence did not prove click interception, and placement alone did not resolve it. Trim-only tips remain the intended UX; do not describe the remaining alignment bug as resolved yet.

Exact pushed1bfab22 CI38187115859 is live (focused114611732025, native114611732252, installed114611732224); preserve it before pushing local49f0556. It contains truthful General default status, native palette/default controls and owned-fixture cleanup;106 native cases compile/discover. Previousb2 focused23/24/native101/102 fail only alignment, zero skips; published600-second timeout has no final TRX or installed lifecycle outcome. Actual logs/artifacts retained. No local input, unrelated-window closure, Azure retry, shared merge, tags or release publication.

Signed/DCO local49f0556 restores the trusted DocumentHeading Tag on the new Contents content Grid. The retained b2ecc8c screenshot shows the last row still selected while reader/source remain at the middle after repeat activation. ItemClick identifies the clicked FrameworkElement; repeating the selected row does not generate SelectionChanged. The older TextBlock content carried the heading Tag, while the new Grid did not. Restoring it is a narrow metadata correction; the unchanged physical Source_BidirectionalScroll case must verify it. Zero-warning Release/build-format/hooks pass. Correct the earlier diagnostic inference: InputDiagnostics.GetCurrentPoint(sender) reports client coordinates. Comparing110,307 directly to screen-space row bounds was invalid; the titlebar/client origin explains the difference. Tooltip presence did not prove click interception, and placement alone did not resolve it. Trim-only tips remain the intended UX; do not describe the remaining alignment bug as resolved yet. Exact pushed1bfab22 CI38187115859 is live (focused114611732025, native114611732252, installed114611732224); preserve it before pushing local49f0556. It contains truthful General default status, native palette/default controls and owned-fixture cleanup;106 native cases compile/discover. Previousb2 focused23/24/native101/102 fail only alignment, zero skips; published600-second timeout has no final TRX or installed lifecycle outcome. Actual logs/artifacts retained. No local input, unrelated-window closure, Azure retry, shared merge, tags or release publication.

KofTwentyTwo commented

2026-10-12 00:24:46 +00:00

(Migrated from github.com)

Exact pushed1bfab22 / CI38187115859 focused23/26 fails, zero skips. The new palette/default case cannot find ThemeChoice:Nord; existing future-schema/export case cannot find ThemeChoice:Owned future. The taller native rows leave these choices virtualized offscreen. Signed/DCO localb1f8af7 scrolls the owned ThemeList through its native Scroll pattern until the same exact automation ID is realized, then uses the same native selection. All value assertions/cases and10-second deadline remain; Release/format/hooks pass. Fresh runtime is required.

The long-title tooltip/physical heading test passes, as do both Printing cases, raw-inline folding, picker cancellation and Contents options. Physical source/reader alignment still fails on1bfab22; signed local49f0556 restores the trusted heading Tag on the Contents content Grid for repeat ItemClick. Client pointer diagnostics were not screen-space coordinates; the earlier tooltip-interception inference was not established. Retain current-focused-1bfab22.log and actual focused TRX/artifacts38187115859.

Full native114611732252 and installed114611732224 remain live; local49f0556/b1f8af7 are held until terminal. No installed/signature outcome inferred and no checks/assertions/deadlines changed. Reference ContentView/SettingsView/ThemeManager cached text matches the immutable6d08bc9 blobs after newline/BOM normalization. No local input, owner preview change, Azure retry, shared merge, tag or publication.

Exact pushed1bfab22 / CI38187115859 focused23/26 fails, zero skips. The new palette/default case cannot find ThemeChoice:Nord; existing future-schema/export case cannot find ThemeChoice:Owned future. The taller native rows leave these choices virtualized offscreen. Signed/DCO localb1f8af7 scrolls the owned ThemeList through its native Scroll pattern until the same exact automation ID is realized, then uses the same native selection. All value assertions/cases and10-second deadline remain; Release/format/hooks pass. Fresh runtime is required. The long-title tooltip/physical heading test passes, as do both Printing cases, raw-inline folding, picker cancellation and Contents options. Physical source/reader alignment still fails on1bfab22; signed local49f0556 restores the trusted heading Tag on the Contents content Grid for repeat ItemClick. Client pointer diagnostics were not screen-space coordinates; the earlier tooltip-interception inference was not established. Retain current-focused-1bfab22.log and actual focused TRX/artifacts38187115859. Full native114611732252 and installed114611732224 remain live; local49f0556/b1f8af7 are held until terminal. No installed/signature outcome inferred and no checks/assertions/deadlines changed. Reference ContentView/SettingsView/ThemeManager cached text matches the immutable6d08bc9 blobs after newline/BOM normalization. No local input, owner preview change, Azure retry, shared merge, tag or publication.

KofTwentyTwo commented

2026-10-12 00:34:08 +00:00

(Migrated from github.com)

Signed/DCO head9d5c0d1 is pushed after preserving terminal1bfab22 evidence. It includes49f0556 trusted heading identity on the native Contents content Grid, enabling repeat ItemClick when selection has not changed; andb1f8af7 native scrolling of the owned virtualized theme list until the same exact ID is realized before unchanged selection/assertions. Zero-warning Release build, formatting and commit hooks pass.106 native cases remain; no assertion, case or deadline is removed/expanded.

Exact prior1bfab22 CI38187115859 focused23/26/native102/106 fails, zero skips. Published process hits600seconds without final TRX, with the same four failures: Nord palette/default and copied-draft lookups, Owned future import/export lookup, and source repeat activation/alignment. Installed lifecycle is not reached. Retain current-installed-1bfab22.log and actual artifacts/current-installed-evidence-38187115859 plus focused/native logs/TRX. Long-title tooltip physical activation, both Printing cases, raw-inline fold, picker cancellation and Contents options pass in completed suites.

Fresh exact9d5c0d1 CI38188145397 is live; pr-gates/security/scripts pass, CodeQL live. Shared signing/license/inventory/AppKit Help PRs31/32/36/29 remain unmerged drafts with no reviews; app PR3 remains draft with no genuine reviews. Protected release environment has no signing configuration variables. Actual default/Explorer choice, owner design acceptance, reviewed shared/license requirements, genuine head acknowledgement and deployed Azure/shipped signing remain required. No local GUI input, preview55472 changes, Azure retry, shared merge, tag or production release.

Signed/DCO head9d5c0d1 is pushed after preserving terminal1bfab22 evidence. It includes49f0556 trusted heading identity on the native Contents content Grid, enabling repeat ItemClick when selection has not changed; andb1f8af7 native scrolling of the owned virtualized theme list until the same exact ID is realized before unchanged selection/assertions. Zero-warning Release build, formatting and commit hooks pass.106 native cases remain; no assertion, case or deadline is removed/expanded. Exact prior1bfab22 CI38187115859 focused23/26/native102/106 fails, zero skips. Published process hits600seconds without final TRX, with the same four failures: Nord palette/default and copied-draft lookups, Owned future import/export lookup, and source repeat activation/alignment. Installed lifecycle is not reached. Retain current-installed-1bfab22.log and actual artifacts/current-installed-evidence-38187115859 plus focused/native logs/TRX. Long-title tooltip physical activation, both Printing cases, raw-inline fold, picker cancellation and Contents options pass in completed suites. Fresh exact9d5c0d1 CI38188145397 is live; pr-gates/security/scripts pass, CodeQL live. Shared signing/license/inventory/AppKit Help PRs31/32/36/29 remain unmerged drafts with no reviews; app PR3 remains draft with no genuine reviews. Protected release environment has no signing configuration variables. Actual default/Explorer choice, owner design acceptance, reviewed shared/license requirements, genuine head acknowledgement and deployed Azure/shipped signing remain required. No local GUI input, preview55472 changes, Azure retry, shared merge, tag or production release.

KofTwentyTwo commented

2026-10-12 01:11:31 +00:00

(Migrated from github.com)

The terminal CI38188145397 is successful at 9d5c0d1:

Focused desktop26/26; full native/published106/106; installed stable/dev105/105 each, zero failures/skips.
Actual palette/default/save/reopen, Printing defaults and sibling draft, Contents wrapping/markers/full-title hover, repeated physical source synchronization and raw-inline folding all pass.
Both real AppKit updates/restarts pass. Actual simultaneous stable/dev windows, separate profiles, isolated updates, five-extension registration and sibling-preserving uninstall pass, preserving existing defaults.

Comparing the eight private Mac screenshots identified Settings gaps addressed with native General/Printing controls and palette/default previews. No private screenshots or document contents are published. Hosted Settings screenshots additionally revealed that its default cascading position clipped the window beyond the monitor. Signed c3c735e centers it inside the actual monitor work area and adds containment to the existing layout regression. Fresh CI38190828814 is running; complete screenshots still need inspection.

Fixtures are unsigned. Actual user-selected Default Apps/Explorer behavior, final owner design feedback, required current-head maintainer review, shared signing-builder/license decisions and deployed Azure/final-artifact signing remain outstanding. No release or shared merge performed. Substantial AI assistance: Codex.

The terminal [CI38188145397](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/actions/runs/38188145397) is successful at `9d5c0d1`: - Focused desktop26/26; full native/published106/106; installed stable/dev105/105 each, zero failures/skips. - Actual palette/default/save/reopen, Printing defaults and sibling draft, Contents wrapping/markers/full-title hover, repeated physical source synchronization and raw-inline folding all pass. - Both real AppKit updates/restarts pass. Actual simultaneous stable/dev windows, separate profiles, isolated updates, five-extension registration and sibling-preserving uninstall pass, preserving existing defaults. Comparing the eight private Mac screenshots identified Settings gaps addressed with native General/Printing controls and palette/default previews. No private screenshots or document contents are published. Hosted Settings screenshots additionally revealed that its default cascading position clipped the window beyond the monitor. Signed `c3c735e` centers it inside the actual monitor work area and adds containment to the existing layout regression. [Fresh CI38190828814](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/actions/runs/38190828814) is running; complete screenshots still need inspection. Fixtures are unsigned. Actual user-selected Default Apps/Explorer behavior, final owner design feedback, required current-head maintainer review, shared signing-builder/license decisions and deployed Azure/final-artifact signing remain outstanding. No release or shared merge performed. Substantial AI assistance: Codex.

KofTwentyTwo commented

2026-10-12 01:56:18 +00:00

(Migrated from github.com)

Pushed signed/DCO 4d34656 to complete a concrete authored-HTML fidelity gap found while checking the pinned Mac source.

Four pre-fix core cases reproduced active extension formatting inside authored inline code. Actual code/pre boundaries now preserve literal text and release protection after real closing tags, including across HTML blocks.
Enabled extensions now format visible raw HTML block text after source identities/ranges are captured. Tokenizer ranges preserve attributes, comments, code and entity spelling. Metadata retains the original body-only subscript preprocessing boundary. Windows protects all four syntax families in authored code.
All642 core tests pass with100% measured line coverage. Complete isolated-output Release build has zero warnings/errors; full formatting and applicable signed/DCO/security/workflow hooks pass. Original MIT attribution retained.
Extended the existing real browser preference case with distinct inline/block code peers and raw-heading labels. It is also included in the focused gate; new hosted runtime is pending, with all prior cases/assertions/deadlines retained.

The preceding CI38190828814 is terminal success: native/published106/106, focused26/26, installed stable/dev105/105 each, zero failures/skips. Actual full Settings screenshots and registration/coexistence/update TRXs/JSON are retained. Those results predate this new renderer correction.

Shared signing31 merge/publication approval remains pending; no response assumed. Actual Azure resource/profile/identity and shipped MarkdownViewr signatures, Windows chooser/Explorer, owner design feedback and genuine final-head review remain required. No release, shared merge, Azure login retry or local GUI input. Substantial AI assistance: Codex.

Pushed signed/DCO `4d34656` to complete a concrete authored-HTML fidelity gap found while checking the pinned Mac source. - Four pre-fix core cases reproduced active extension formatting inside authored inline code. Actual code/pre boundaries now preserve literal text and release protection after real closing tags, including across HTML blocks. - Enabled extensions now format visible raw HTML block text after source identities/ranges are captured. Tokenizer ranges preserve attributes, comments, code and entity spelling. Metadata retains the original body-only subscript preprocessing boundary. Windows protects all four syntax families in authored code. - All642 core tests pass with100% measured line coverage. Complete isolated-output Release build has zero warnings/errors; full formatting and applicable signed/DCO/security/workflow hooks pass. Original MIT attribution retained. - Extended the existing real browser preference case with distinct inline/block code peers and raw-heading labels. It is also included in the focused gate; new hosted runtime is pending, with all prior cases/assertions/deadlines retained. The preceding [CI38190828814](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/actions/runs/38190828814) is terminal success: native/published106/106, focused26/26, installed stable/dev105/105 each, zero failures/skips. Actual full Settings screenshots and registration/coexistence/update TRXs/JSON are retained. Those results predate this new renderer correction. Shared signing31 merge/publication approval remains pending; no response assumed. Actual Azure resource/profile/identity and shipped MarkdownViewr signatures, Windows chooser/Explorer, owner design feedback and genuine final-head review remain required. No release, shared merge, Azure login retry or local GUI input. Substantial AI assistance: Codex.

KofTwentyTwo commented

2026-10-12 02:05:18 +00:00

(Migrated from github.com)

Fresh exact 4d34656 CI38193736344 focused acceptance passes27/27, zero failures/skips. Actual retained TRX confirms the extended Extensions_NativePreferences browser case: distinct authored inline/block code stays literal, raw-heading formatting responds to independent preferences, and existing actual paint/source/reload assertions pass. Core/build/format/scripts/security pass. Full native and published/installed acceptance remain live; no production signing or release claim.

Fresh exact `4d34656` [CI38193736344](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/actions/runs/38193736344) focused acceptance passes27/27, zero failures/skips. Actual retained TRX confirms the extended `Extensions_NativePreferences` browser case: distinct authored inline/block code stays literal, raw-heading formatting responds to independent preferences, and existing actual paint/source/reload assertions pass. Core/build/format/scripts/security pass. Full native and published/installed acceptance remain live; no production signing or release claim.

KofTwentyTwo commented

2026-10-12 02:48:28 +00:00

(Migrated from github.com)

Pushed signed/DCO b542dcd to complete the remaining local-document link behavior. Actual user-initiated Markdown/text links in the current namespace open native reader windows, preserve the source reader and focus a matching already-loaded reader. Once-decoded type/path checks and the opened target handle enforce the source physical folder. The new reader retains that root for every manual/watcher/frontmatter/extension reload, preventing a later junction from reading outside content. No linked target is dispatched through an arbitrary OS shell/protocol.

Validation: all662 core tests pass with100% measured line coverage; all10 actual document/image filesystem cases pass, including linked outside-root/junction denial; full isolated Release has zero warnings/errors; format and signed/DCO/security/workflow hooks pass. A fixture disposal failure was corrected by removing its owned junction explicitly before teardown.109 UI cases are discovered. The new physical-link/duplicate/watcher/junction-reload regression is included in focused CI; fresh runtime remains required, with every previous case/assertion/deadline retained.

Preceding CI38193736344 is terminal success: focused27/27, native/published106/106, installed stable/dev105/105 each, zero failures/skips. Actual renderer/code/source and simultaneous channel lifecycle TRXs/JSON retained. These unsigned fixtures do not establish production signing or actual Windows chooser/Explorer selection.

Shared signing31 approval is unanswered; actual Azure resource/profile/identity, final shipped signatures, owner design/scaling and genuine final-head review still gate release. No shared merge, Azure login retry, local GUI input, owner preview change, release tag or publication. Substantial AI assistance: Codex.

Pushed signed/DCO `b542dcd` to complete the remaining local-document link behavior. Actual user-initiated Markdown/text links in the current namespace open native reader windows, preserve the source reader and focus a matching already-loaded reader. Once-decoded type/path checks and the opened target handle enforce the source physical folder. The new reader retains that root for every manual/watcher/frontmatter/extension reload, preventing a later junction from reading outside content. No linked target is dispatched through an arbitrary OS shell/protocol. Validation: all662 core tests pass with100% measured line coverage; all10 actual document/image filesystem cases pass, including linked outside-root/junction denial; full isolated Release has zero warnings/errors; format and signed/DCO/security/workflow hooks pass. A fixture disposal failure was corrected by removing its owned junction explicitly before teardown.109 UI cases are discovered. The new physical-link/duplicate/watcher/junction-reload regression is included in focused CI; fresh runtime remains required, with every previous case/assertion/deadline retained. Preceding [CI38193736344](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/actions/runs/38193736344) is terminal success: focused27/27, native/published106/106, installed stable/dev105/105 each, zero failures/skips. Actual renderer/code/source and simultaneous channel lifecycle TRXs/JSON retained. These unsigned fixtures do not establish production signing or actual Windows chooser/Explorer selection. Shared signing31 approval is unanswered; actual Azure resource/profile/identity, final shipped signatures, owner design/scaling and genuine final-head review still gate release. No shared merge, Azure login retry, local GUI input, owner preview change, release tag or publication. Substantial AI assistance: Codex.

KofTwentyTwo commented

2026-10-12 02:54:50 +00:00

(Migrated from github.com)

Exact b542dcd CI38197169201 focused acceptance passes28/28, zero failures/skips. Actual retained TRX proves Windows_LocalDocumentLinks_OpenOwnedReaderAndPreserveReloadScope: physical Unicode/literal file link opens a native child, repeated clicks focus without duplication, source snapshot remains unchanged, child watching refreshes, program/parent targets are blocked, and a substituted outside junction cannot replace the committed data on reload. Core/build/format/security/scripts checks pass. Full native109 and published/installed suites remain live; no signing/publication result inferred.

Exact `b542dcd` [CI38197169201](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/actions/runs/38197169201) focused acceptance passes28/28, zero failures/skips. Actual retained TRX proves `Windows_LocalDocumentLinks_OpenOwnedReaderAndPreserveReloadScope`: physical Unicode/literal file link opens a native child, repeated clicks focus without duplication, source snapshot remains unchanged, child watching refreshes, program/parent targets are blocked, and a substituted outside junction cannot replace the committed data on reload. Core/build/format/security/scripts checks pass. Full native109 and published/installed suites remain live; no signing/publication result inferred.

KofTwentyTwo commented

2026-10-12 03:03:10 +00:00

(Migrated from github.com)

Exact b542dcd CI38197169201 full native acceptance passes109/109, zero failures/skips (9m51). Focused28/28 also passes, including actual physical local-link/duplicate/watch/junction-safe reload. Retained current-native-b542dcd.log and focused TRX. Core/build/format/scripts/security/CodeQL checks pass. The published/installed job remains live and is preserved.

The only completed failed check is review / automated: no genuine current-head maintainer record. Protected release variables remain absent, standards31 is still an unmerged/unreviewed draft with approval request unanswered, and the current signing preflight correctly blocks production publication. No release/signature claim or gate override.

Exact `b542dcd` [CI38197169201](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/actions/runs/38197169201) full native acceptance passes109/109, zero failures/skips (9m51). Focused28/28 also passes, including actual physical local-link/duplicate/watch/junction-safe reload. Retained `current-native-b542dcd.log` and focused TRX. Core/build/format/scripts/security/CodeQL checks pass. The published/installed job remains live and is preserved. The only completed failed check is `review / automated`: no genuine current-head maintainer record. Protected release variables remain absent, standards31 is still an unmerged/unreviewed draft with approval request unanswered, and the current signing preflight correctly blocks production publication. No release/signature claim or gate override.

KofTwentyTwo commented

2026-10-12 03:26:18 +00:00

(Migrated from github.com)

Exact b542dcd CI38197169201 is terminal success: focused28/28, native/published109/109 and installed stable/dev108/108 each, zero failures/skips. Actual TRXs and channel JSON are retained at current-installed-evidence-38197169201. Simultaneous windows, distinct profiles, isolated AppKit updates/restarts/target hashes, five-extension registration and sibling-preserving uninstall/default preservation pass.

Full PR review is now checking identity/editor/theme/settings/activation/registration/startup authority, beyond the earlier incremental local-link packet. One local review fix prefixes Windows reserved superscript COM/LPT theme-export names; six new cases pass, all668 core tests and100% measured lines pass. Original full-review scope remains pending; no genuine maintainer acknowledgement is fabricated. The correction remains local until the review is complete.

Azure CLI still has no authenticated context; no login attempted. Shared signing31 approval is unanswered and release variables absent. Signed final artifacts, actual Windows chooser/Explorer, owner design/scaling and final-head maintainer review remain required. No shared merge, release tag, publication or gate override.

Exact `b542dcd` [CI38197169201](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/actions/runs/38197169201) is terminal success: focused28/28, native/published109/109 and installed stable/dev108/108 each, zero failures/skips. Actual TRXs and channel JSON are retained at `current-installed-evidence-38197169201`. Simultaneous windows, distinct profiles, isolated AppKit updates/restarts/target hashes, five-extension registration and sibling-preserving uninstall/default preservation pass. Full PR review is now checking identity/editor/theme/settings/activation/registration/startup authority, beyond the earlier incremental local-link packet. One local review fix prefixes Windows reserved superscript COM/LPT theme-export names; six new cases pass, all668 core tests and100% measured lines pass. Original full-review scope remains pending; no genuine maintainer acknowledgement is fabricated. The correction remains local until the review is complete. Azure CLI still has no authenticated context; no login attempted. Shared signing31 approval is unanswered and release variables absent. Signed final artifacts, actual Windows chooser/Explorer, owner design/scaling and final-head maintainer review remain required. No shared merge, release tag, publication or gate override.

KofTwentyTwo commented

2026-10-12 03:52:01 +00:00

(Migrated from github.com)

Signed/DCO checkpoint 82256f3 is pushed, including the held 3b01199 correction for six reserved COM/LPT superscript export filenames. Local668 core tests/100% measured core line coverage and formatting passed; checkpoint commit hooks pass.

Application source review now covers all105 C# files, native markup/project configuration and relevant CI/release/installed-lifecycle paths. Immutable blob inventory and scoped assessment are retained locally. Focused test implementations and actual distributed evidence were inspected; this is not a claim of manually reading every fixture/vendor notice or completing production signing assessment. No further blocking source defect established.

Correction to the previous Mac screenshot summary: sustained theme/editor management already uses SettingsWindow.ShowEditorAsync inside the Settings window. Old Dialog class names do not mean secondary modal windows. Owner design/scaling acceptance remains open.

Fresh exact-head CI38201379210 is queued/running; retain its original cases/deadlines. Previous b542/CI38197169201 is terminal success: focused28/28, native/published109/109 and installed stable/dev108/108 each, zero failures/skips. Fixtures are unsigned.

Release remains blocked by the unmerged/unpublished shared signing builder, empty protected signing variables, actual repository Azure trust/profile permission and final-artifact SignTool verification, genuine final-head maintainer acknowledgement, shared inventory/license decisions and owner OS/default/design acceptance. Existing request for shared merge/publication approval is unanswered. No human acknowledgement is fabricated, no Azure login retry, local input, preview55472 change, shared merge, tag or release publication performed.

Substantial AI assistance: Codex.

Signed/DCO checkpoint `82256f3` is pushed, including the held `3b01199` correction for six reserved COM/LPT superscript export filenames. Local668 core tests/100% measured core line coverage and formatting passed; checkpoint commit hooks pass. Application source review now covers all105 C# files, native markup/project configuration and relevant CI/release/installed-lifecycle paths. Immutable blob inventory and scoped assessment are retained locally. Focused test implementations and actual distributed evidence were inspected; this is not a claim of manually reading every fixture/vendor notice or completing production signing assessment. No further blocking source defect established. Correction to the previous Mac screenshot summary: sustained theme/editor management already uses `SettingsWindow.ShowEditorAsync` inside the Settings window. Old Dialog class names do not mean secondary modal windows. Owner design/scaling acceptance remains open. [Fresh exact-head CI38201379210](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/actions/runs/38201379210) is queued/running; retain its original cases/deadlines. Previous b542/CI38197169201 is terminal success: focused28/28, native/published109/109 and installed stable/dev108/108 each, zero failures/skips. Fixtures are unsigned. Release remains blocked by the unmerged/unpublished shared signing builder, empty protected signing variables, actual repository Azure trust/profile permission and final-artifact SignTool verification, genuine final-head maintainer acknowledgement, shared inventory/license decisions and owner OS/default/design acceptance. Existing request for shared merge/publication approval is unanswered. No human acknowledgement is fabricated, no Azure login retry, local input, preview55472 change, shared merge, tag or release publication performed. Substantial AI assistance: Codex.

github-advanced-security[bot] (Migrated from github.com) reviewed

2026-10-12 04:32:51 +00:00

.github/workflows/release.yml

						
				@@ -93,3 +98,4 @@

				    uses: KofTwentyTwo/standards/.github/workflows/release-velopack.yml@93b1d6163a4c466ae443e98b62786fc4d80d33bd # v1.1.0

				    permissions:

				      contents: write      # create and publish the GitHub release

				      id-token: write      # sign attestations; Azure OIDC when signing

github-advanced-security[bot] (Migrated from github.com) commented

2026-10-12 04:32:51 +00:00

zizmor /

use GitHub's dedicated self-repository syntax: use '$/...' instead of './...'

Show more details

## zizmor / use GitHub's dedicated self-repository syntax: use '$/...' instead of './...' [Show more details](https://github.com/KofTwentyTwo/MarkdownViewr.Windows/security/code-scanning/12)

KofTwentyTwo (Migrated from github.com) reviewed

2026-10-12 05:26:30 +00:00

.github/workflows/release.yml

						
				@@ -93,3 +98,4 @@

				    uses: KofTwentyTwo/standards/.github/workflows/release-velopack.yml@93b1d6163a4c466ae443e98b62786fc4d80d33bd # v1.1.0

				    permissions:

				      contents: write      # create and publish the GitHub release

				      id-token: write      # sign attestations; Azure OIDC when signing

KofTwentyTwo (Migrated from github.com) commented

2026-10-12 05:26:30 +00:00

Addressed as a tooling-compatibility recommendation. GitHub’s official documentation supports and recommends $/ on GitHub.com, while explicitly continuing to support ./ with the called workflow taken from the same commit as its caller: https://docs.github.com/en/actions/how-tos/reuse-automations/reuse-workflows#calling-a-reusable-workflow

I tested the migration on all five same-repository calls. The repository’s pinned actionlint1.7.12 rejects every $/ call as an invalid reusable-workflow reference. The trial was reverted; no syntax-validation rule or gate was disabled. Current ./ calls are supported, resolve at the running commit and pass the existing validator. The external signing builder remains pinned to its full published SHA. Retain this supported form until an approved validator update accepts the recommended syntax. This is a low-severity formatting/tooling recommendation, not a resolved application vulnerability or maintainer acknowledgement for the full PR.

Automated assessment by Codex; no human review acknowledgement is supplied.

Addressed as a tooling-compatibility recommendation. GitHub’s official documentation supports and recommends `$/` on GitHub.com, while explicitly continuing to support `./` with the called workflow taken from the same commit as its caller: https://docs.github.com/en/actions/how-tos/reuse-automations/reuse-workflows#calling-a-reusable-workflow I tested the migration on all five same-repository calls. The repository’s pinned actionlint1.7.12 rejects every `$/` call as an invalid reusable-workflow reference. The trial was reverted; no syntax-validation rule or gate was disabled. Current `./` calls are supported, resolve at the running commit and pass the existing validator. The external signing builder remains pinned to its full published SHA. Retain this supported form until an approved validator update accepts the recommended syntax. This is a low-severity formatting/tooling recommendation, not a resolved application vulnerability or maintainer acknowledgement for the full PR. Automated assessment by Codex; no human review acknowledgement is supplied.

KofTwentyTwo commented

2026-10-12 05:48:18 +00:00

(Migrated from github.com)

Current exact-head evidence: d0526ef passes core677/100% measured lines, focused28, full native111 and fuzz9+2, zero failures/skips. The published picker cancellation case now passes. Published acceptance still hits its unchanged600-second process bound after110/111 passed cases, without a recorded assertion failure or final TRX; installed lifecycle is not reached.

The last passing published run took590.96 seconds (109 cases); its unchanged final Appearance/PDF case took13.07 seconds. Three current close fallbacks versus four previously do not establish a new shutdown regression. Aggregate duration versus a blocked final operation remains unresolved.

Signed de70220 adds temporary retained fixture launch/slow-wait/closure timings and exact Appearance/PDF phase markers to distinguish those causes. Every existing case, assertion, wait and deadline remains intact. Isolated full Release:0 warnings/errors; format, direct lint of both changed documents and signed commit hooks pass. Fresh hosted proof remains required; no production signing or release is claimed.

Current exact-head evidence: `d0526ef` passes core677/100% measured lines, focused28, full native111 and fuzz9+2, zero failures/skips. The published picker cancellation case now passes. Published acceptance still hits its unchanged600-second process bound after110/111 passed cases, without a recorded assertion failure or final TRX; installed lifecycle is not reached. The last passing published run took590.96 seconds (109 cases); its unchanged final Appearance/PDF case took13.07 seconds. Three current close fallbacks versus four previously do not establish a new shutdown regression. Aggregate duration versus a blocked final operation remains unresolved. Signed `de70220` adds temporary retained fixture launch/slow-wait/closure timings and exact Appearance/PDF phase markers to distinguish those causes. Every existing case, assertion, wait and deadline remains intact. Isolated full Release:0 warnings/errors; format, direct lint of both changed documents and signed commit hooks pass. Fresh hosted proof remains required; no production signing or release is claimed.

KofTwentyTwo commented

2026-10-12 10:17:49 +00:00

(Migrated from github.com)

Exact signed de70220 / CI38209503930 now passes every acceptance suite: core677/100% measured lines, native/published111/111, focused28/28 and installed stable/dev110/110 each; fuzz9+2, zero failures/skips. Actual AppKit apply/restart and target-byte assertions, simultaneous channel/profile isolation, five-extension registration and stable-uninstall/default preservation all pass. Fixtures are unsigned.

Published duration572.71 seconds; stable496.38 and dev574.75. Each final Appearance/PDF case completed; the previous aggregate timeout does not establish a blocked product operation. Temporary timing instrumentation will be removed with a fresh final-head check, retaining all original assertions/cases/deadlines.

Release still requires the shared signing/configuration decisions, verified Azure CI authority and final shipped signatures, actual standards enrollment/inventory, owner Windows11/default-chooser acceptance and genuine final-head maintainer review. The latter is also required by configuration Apply, so the prepared strictly additive fuzz check remains unapplied. No production release or shared merge has occurred.

Exact signed `de70220` / CI38209503930 now passes every acceptance suite: core677/100% measured lines, native/published111/111, focused28/28 and installed stable/dev110/110 each; fuzz9+2, zero failures/skips. Actual AppKit apply/restart and target-byte assertions, simultaneous channel/profile isolation, five-extension registration and stable-uninstall/default preservation all pass. Fixtures are unsigned. Published duration572.71 seconds; stable496.38 and dev574.75. Each final Appearance/PDF case completed; the previous aggregate timeout does not establish a blocked product operation. Temporary timing instrumentation will be removed with a fresh final-head check, retaining all original assertions/cases/deadlines. Release still requires the shared signing/configuration decisions, verified Azure CI authority and final shipped signatures, actual standards enrollment/inventory, owner Windows11/default-chooser acceptance and genuine final-head maintainer review. The latter is also required by configuration Apply, so the prepared strictly additive fuzz check remains unapplied. No production release or shared merge has occurred.

KofTwentyTwo commented

2026-10-12 14:03:44 +00:00

(Migrated from github.com)

Signing milestone recorded in signed/DCO 313d258.

Authenticated readback verifies the existing signing resource and certificate profile.
A separate secretless application CI identity now has release-environment-only federation and profile-scoped signing permission. Existing shared identities and security controls were preserved.
Protected release configuration is set and independently read back.
Real local signing test: six disposable owned build binaries, SHA256 and RFC3161/SHA256 timestamps. All six pass SignTool verification with zero warnings/errors; expected publisher, trust, timestamps and SHA256 digest checks pass. Running owner previews were untouched.

This proves representative local signing under the existing authorized interactive identity. CI OIDC authentication and final installer/archive signing remain unproved. The reviewed shared signing builder must be published and pinned before protected release integration. No stable 1.0 or dev release was published.

Exact 321816c acceptance is terminal success: focused 29, native/published 111 each, installed stable/dev 110 each, zero failures/skips. Actual updates/restarts and coexistence/default-preservation receipts pass. 313d258 changes documentation only; fresh checks are pending.

Signing milestone recorded in signed/DCO `313d258`. - Authenticated readback verifies the existing signing resource and certificate profile. - A separate secretless application CI identity now has release-environment-only federation and profile-scoped signing permission. Existing shared identities and security controls were preserved. - Protected release configuration is set and independently read back. - Real local signing test: six disposable owned build binaries, SHA256 and RFC3161/SHA256 timestamps. All six pass SignTool verification with zero warnings/errors; expected publisher, trust, timestamps and SHA256 digest checks pass. Running owner previews were untouched. This proves representative local signing under the existing authorized interactive identity. CI OIDC authentication and final installer/archive signing remain unproved. The reviewed shared signing builder must be published and pinned before protected release integration. No stable 1.0 or dev release was published. Exact `321816c` acceptance is terminal success: focused 29, native/published 111 each, installed stable/dev 110 each, zero failures/skips. Actual updates/restarts and coexistence/default-preservation receipts pass. `313d258` changes documentation only; fresh checks are pending.

KofTwentyTwo commented

2026-10-12 17:54:30 +00:00

(Migrated from github.com)

Tool: Codex
Findings: resolved
Summary: Reviewed the Windows reader, final signed-release caller, user/developer documentation, genuine screenshots, and assurance evidence. Prior complete application acceptance passes; required final CI and production artifact verification remain mandatory. The unchanged current head is baee14f492.

Owner confirmation supplied in the release session: "PR 3 reviewed and approve". This comment records that actual human confirmation; Codex does not supply or substitute its own human approval.
Maintainer acknowledgement: I read the review and resolved or answered every finding.

Tool: Codex Findings: resolved Summary: Reviewed the Windows reader, final signed-release caller, user/developer documentation, genuine screenshots, and assurance evidence. Prior complete application acceptance passes; required final CI and production artifact verification remain mandatory. The unchanged current head is baee14f492d1dd345d77df03c76623d4ee07b6e5. Owner confirmation supplied in the release session: "PR 3 reviewed and approve". This comment records that actual human confirmation; Codex does not supply or substitute its own human approval. Maintainer acknowledgement: I read the review and resolved or answered every finding.

KofTwentyTwo commented

2026-10-12 18:23:56 +00:00

(Migrated from github.com)

The owner-reviewed files are preserved exactly in replacement PR #35 (tree a85912cbad). GitHub refused this historical range because earlier committer identities were unassociated, even for squash merging. The new single commit is GitHub-verified; protections remain intact and every required check reruns. This PR and its history remain preserved. Release checklist: #33.

The owner-reviewed files are preserved exactly in replacement PR #35 (tree a85912cbad0330664cbddac32f8ca17973fd2c09). GitHub refused this historical range because earlier committer identities were unassociated, even for squash merging. The new single commit is GitHub-verified; protections remain intact and every required check reruns. This PR and its history remain preserved. Release checklist: #33.

KofTwentyTwo commented

2026-10-12 19:04:27 +00:00

(Migrated from github.com)

Completed through protected merged PR #35 at38dd5c1. Its file tree is exactly the owner-approved PR3 tree; the clean signed commit resolves GitHub attribution without bypass. All required replacement checks pass. This original PR/branch/history are preserved. Final publication remains tracked in #33.

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/MarkdownViewr.Windows#3