54 Commits

Include renames

Author	SHA1	Message	Date
james.maes	4f96071157	Merge pull request 'fix(echo): make approved scanner photos available immediately' (#22) from fix/approved-scanner-photo-availability into develop	2026-11-07 13:12:15 +00:00
james.maesandClaude Sonnet 5.5	6cb8e34c5d	build: publish the Record Files bridge with the base through one reactor ... The root pom becomes the packaging-pom reactor (qbit-mobile-scanners-reactor), the single <revision> source and parent of base/ and integrations/record-files, so one root mvn deploy publishes the reactor POM, qbit-mobile-scanners and qbit-mobile-scanners-record-files at one version. Consumer POMs are flattened so the version is resolved. Pins: QQQ 4.1.0-RC.22, qbit-record-files 0.1.0-RC.1, qbit-collaboration 1.1.0-RC.1 (all verified in the Gitea registry); the SNAPSHOT/feature coordinates and the qqq.frozen.version override are gone. Checkstyle config stays at the repository root. demo/ and examples/ stay standalone. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-06 17:30:45 -06:00
james.maesandClaude Fable 5.1	01b9705428	fix: refresh device versions on heartbeat (mobile-scanners 1.6) ... An in-place app or OS update left the device record and every later scan reporting the enrollment-time appVersion, because only enrollment wrote manufacturer/model/osVersion/appVersion. Extension 1.6 adds the same optional fields to MobileScannersHeartbeatRequestV1; the heartbeat updates the approved device record only when a sent value differs, and scans copy the refreshed record. Omitted, null or blank values keep the enrolled values. Adds the 1.6.0 OpenAPI baseline and contract tests. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-11-06 10:44:17 -06:00
james.maesandClaude Sonnet 5.5	1f8e3196fe	fix(echo): make approved scanner photos available immediately ... Opt the Echo host into the scoped captured-photo policy while preserving quarantine for other intake. Allow only the demo administrator to release earlier captures through the normal audited action. Cover approval, parent and retained-content access, and record the verified device behavior and remaining public dependency and release gates. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Signed-off-by: James Maes <james@kof22.com>	2026-11-05 17:29:34 -06:00
james.maesandClaude Sonnet 5.5	ae3fd7be06	fix: preserve stored file metadata and verify restore authorization ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-05 07:37:05 -06:00
james.maesandCodex	61b30cddc3	docs: record final integrated mobile verification and reviews ... Co-Authored-By: Codex (GPT-6) <noreply@openai.com>	2026-11-05 06:32:02 -06:00
james.maesandCodex	c10edf4046	chore: integrate current scanner baseline and record UX evidence ... Preserve upstream publication metadata, contract baseline and recovery guidance while reconciling the completed local TC22 record UX work. Co-Authored-By: Codex (GPT-6) <noreply@openai.com>	2026-11-05 06:26:29 -06:00
james.maesandCodex	323b8d9866	feat: add rich mobile record fixtures and photo previews ... Add synthetic grouped orders, related items and history, parent-scoped photo grants, and isolated native fixture support. Co-Authored-By: Codex (GPT-6) <noreply@openai.com>	2026-11-05 06:15:04 -06:00
james.maesandClaude	31f4823269	docs: reconcile scanner release evidence and recovery guidance ... Freeze the mobile-scanners 1.5 contract baseline and align publication metadata with Gitea. Co-Authored-By: Claude <noreply@anthropic.com>	2026-11-05 05:49:28 -06:00
james.maesandGPT-6	0b0875f40a	docs: record GS1 source publication for Forge ... Co-Authored-By: GPT-6 <noreply@openai.com>	2026-11-04 19:26:16 -06:00
james.maesandGPT-6	1874c64b0f	feat: duplicate GS1-128 labels with printed interpretation ... Preserve scanner evidence, derive canonical GS1 renderer input and HRI, publish a separate GS1 template, and expose read-only Echo records through normal metadata. Verified with 188 composed server tests and isolated native acceptance. Co-Authored-By: GPT-6 <noreply@openai.com>	2026-11-04 19:17:38 -06:00
james.maesandClaude Sonnet 5.5	df0ff73dae	docs: reconcile scanner and Echo demo handoff ... Document the current local server, semantic contract, accepted TC22 tests and signed APK status. Separate production follow-up from the working demo and archive superseded logs. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 13:29:31 -06:00
james.maesandClaude Sonnet 5.5	0936c1ba58	fix: use released Printing for Echo ... Set both Echo Printing defaults to 1.0.0 and align setup documentation with the published scanner/Android packages and operator-reported manual acceptance. Both module validation and Checkstyle checks pass. All 94 Java inputs match the coherent build that passed 198 tests with released Printing 1.0.0. Standalone document/files/scripting publication remains separately tracked. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 09:44:16 -06:00
james.maesandClaude Sonnet 5.5	8c18f218a8	ci: enable scanner development snapshots ... Enable only the develop snapshot publication policy and record the verified integration state. Stable, RC, feature and hotfix publication remain disabled. Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 17:13:57 -06:00
james.maesandClaude Sonnet 5.5	090e3c1135	docs: correct scanner and Echo setup instructions ... Describe EMDK and optional AIM evidence, public QQQ RC.21 with qualified owner inputs, current Gitea review links, and implemented profile tooling. Remove stale test counts while retaining the physical acceptance limits. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 16:20:49 -06:00
james.maesandClaude Sonnet 5.5	c0e27b36fd	build: adopt published QQQ RC.21 across scanner modules ... Align the optional Record Files tests with BOM-managed JUnit engine and parameterized support, avoiding the older API/newer engine mismatch. Verified 182 scanner/demo/files/Echo tests with public QQQ dependencies, 179 Generation tests and 16 bridge tests with qualified owner inputs, and all 15 real admin browser scenarios. Owner QBit release inputs and physical acceptance remain open as documented. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 15:57:37 -06:00
james.maesandClaude Sonnet 5.5	45f9cbddb1	feat(echo): add per-scan copies and photo capture ... Ask for an optional copy quantity at setup, defaulting to one, and bind it to every scan and retry through document generation and printing. Preserve barcode symbology/AIM context, add scanner-fidelity document support, and compose authorized Echo scan photo capture. Verified against the qualified dependency cohort: 377 unique server/owner tests across module runs. Native TC22 Echo acceptance passed ten stages and 116 semantic requests with simulated input and printing. Public dependency publication and physical output validation remain open. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 14:57:43 -06:00
3 people	e2ebc21ab2	feat(scanners): preserve raw scan metadata in semantic context ... Add optional AIM and canonical raw-byte fields to mobile-scanners 1.5 with nullable H2 storage, exact event retry binding, input consumption and generated backward-compatible schemas. Preserve barcode text and server-derived attribution. Verify 135 scanner, native HTTP, Echo and composed demo tests with Checkstyle. Correct stale demo status without claiming physical output or full barcode qualification. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 10:56:58 -06:00
3 people	e3b775ec3f	fix(echo): align generation and renderer output limits ... Propagate each demo renderer cap into Generation so requests do not exceed the bridge limit. Bound the composed acceptance renderer and verify a nondefault cap. Old wiring reproduces three failures; all 74 library/demo tests pass with the fix. A real local synthetic Echo event reached the Windows spooler; physical trigger, paper output and rescan remain unconfirmed. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 09:59:56 -06:00
james.maesandCodex	341b058725	docs(echo): record verified barcode rendering and test images ... Record real renderer output and independent pixel decoding for the published 4x1 template. Physical print acceptance and release gates remain open. Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 09:04:55 -06:00
james.maesandClaude Sonnet 5.5	b337d01eac	test(echo): generate inert credentials for demo fixtures ... Replace five synthetic token literals with generated test values and retain exact historical Gitleaks fingerprints without broad exclusions. Production validation is unchanged. Verified redacted history and staged scans plus all27 composed demo tests. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 08:08:51 -06:00
james.maesandClaude Sonnet 5.5	f0f4731cc0	docs: distinguish ready Echo setup from remaining release gates ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 07:58:07 -06:00
james.maesandClaude Sonnet 5.5	ca6e4dd20c	fix(echo): run composed qbits in the local scanner server ... Reuse the existing local development database without resetting accounts or device approval. Accept valid loopback ports forwarded over USB while retaining origin and cross-site checks. Verify 27 demo tests and live forwarded-host acceptance. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 06:56:17 -06:00
james.maes	16755f68cb	docs(echo): record native document-choice acceptance	2026-11-01 21:24:53 -06:00
james.maesandClaude Sonnet 5.5	8da274e52b	feat(echo): select and retain a document for each scan run ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 21:15:07 -06:00
james.maesandClaude Sonnet 5.5	101efc846b	fix(mobile): scope device binding to the requesting extension ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 20:36:22 -06:00
james.maes	a1e1cd47f1	docs(echo): record verified tests and remaining physical gate	2026-11-01 19:48:03 -06:00
james.maesandClaude Sonnet 5.5	912040dfbc	fix(echo): preserve print receipts and safely retry unpinned scans ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 19:46:29 -06:00
james.maesandClaude Sonnet 5.5	4bc88a404a	feat(echo): compose retained scan-to-print application ... Use owner printer/media, generation, retained-file and cold renderer contracts. Add runnable local host and authenticated native HTTP acceptance for two scans, retained outputs, accepted jobs, idempotent retry and leaving the process. Preserve actor locks and direct-write denial while supporting core READ probes. Verified Echo33 and full demo22 with Checkstyle; physical output and public dependency/CI release gates remain open. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 18:33:55 -06:00
james.maesandClaude Sonnet 5.5	707e1ab8ba	fix(scanner): compare effective security key membership ... Initialize Collaboration keys during authentication before verified device capture. Preserve rejection of actual authority changes. Verified scanner50, demo7 and native Record Files18 with Checkstyle. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 17:32:09 -06:00
james.maesandClaude Sonnet 5.5	bbc1fbf080	fix(scanner): retain verified session with unchanged authority ... Preserve verified session identity across repeated capture while rechecking current approval, binding, session reference and authority before returning. Reject changed credential ceilings or grants, including mutations during real table hooks. Validation: full scanner 49 and demo HTTP 7 tests pass with zero Checkstyle violations against the private process-identity core. Strict files-owner finalize acceptance remains pending. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 16:00:25 -06:00
james.maesandClaude	de8ba6315c	fix(ci): avoid analyzer crash in verification output ... Simplify verification hashtable expressions and report each analyzed file while preserving fatal analysis errors. All six scripts pass PSScriptAnalyzer 1.25.0 with zero findings; parser and isolated path regression pass. Co-Authored-By: Claude <noreply@anthropic.com>	2026-11-01 15:39:01 -06:00
james.maesandGPT-6 Codex	040329e110	feat(scanner): publish semantic Echo presentation hints ... Add optional extension1.4 acknowledgmentLabel and manualEntryEnabled metadata with existing defaults. Echo declares Print queued and hides manual input without changing hardware capture or receipt predicates. Validation:69 server/demo/files cases plus2 canonical contract cases pass; released baselines unchanged. Echo15 strict tests pass with the qualified1.4 scanner companion, and Android167 JVM/lint/debug checks pass. Actual owner adapters and physical printing remain pending. Co-Authored-By: GPT-6 Codex <noreply@openai.com>	2026-11-01 12:39:35 -06:00
james.maesandCodex	b156ab7c50	feat(scans): expose authoritative per-scan process context ... Publish additive mobile extension1.3 scanContext with exact decoder type, value, event and server-derived attribution for downstream actions. Consume transient inputs to prevent inherited types, require reopening pre1.3 saved processes, and reject changed type/source/app/process retries. Add a narrow verified capture facade for host applications such as Echo. Validation:44root,7HTTPdemo,18optionalfiles and2contract-generation cases pass with Checkstyle; released baselines unchanged. Echo implementation remains uncommitted and separate. Co-Authored-By: Codex <noreply@openai.com>	2026-11-01 12:04:12 -06:00
james.maesandCodex	0b53f342e5	fix(quality): enforce scanner server source standards ... Complete copyright and source layout corrections, analyze optional PowerShell tools, add privacy-safe structured failure diagnostics, and close a test-stream ownership gap. Validation: enabled Checkstyle and clean compilation with 39 server, 6 HTTP demo and 18 optional Record Files cases passing in an isolated coherent API1.10 snapshot. Production and physical acceptance gates remain explicit. Co-Authored-By: Codex <noreply@openai.com>	2026-11-01 11:21:46 -06:00
james.maesandCodex	6e792eea63	docs: record final coherent scanner upload qualification ... Record the final signed core dependency cohort, fresh scanner/demo/upload/browser results and exhaustive artifact comparison. Preserve the separate files-owner release, production dependency adoption and physical-device gates. Co-Authored-By: Codex <noreply@openai.com>	2026-11-01 07:45:58 -06:00
james.maesandCodex	1a3e33ba28	docs: reconcile server and client release gates ... Record the verified source and operator runtime separately, including current CI, trusted scanning and transitional upload qualification. Retain pending real-provider, device, immutable dependency and final distribution requirements. Co-Authored-By: Codex <noreply@openai.com>	2026-11-01 06:40:03 -06:00
james.maesandOpenAI Codex	2de8470499	docs: reconcile current mobile release acceptance gates ... Record exact API1.9/mobile1.2 consumer and published source evidence, physical scanner and screen-consent limits, current hosted login test follow-up, optional Record Files compatibility and deferred signing. Preserve earlier checkpoints as history instead of current release claims. Documentation only; diff checks and staged secret scanning pass. Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-11-01 04:58:32 -06:00
james.maesandOpenAI GPT-6.1	1041693872	feat: add mode-bound device screen viewing contract ... Advertise optional APP_CONTENT and DEVICE_SCREEN modes in extension1.2. Bind session, viewer demand, lease and frame modes; clear prior pixels and demand on mode changes. Preserve omitted-mode app-content defaults, approval, administrator authorization, replay checks and resource limits. Pass39 server and six real-HTTP demo tests with normal Checkstyle. Historical1.0/1.1 API baselines and qualified core JAR hashes remain unchanged. Independent source review found no introduced security issue. Android consent/projection acceptance remains a separate device gate. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 21:40:06 -05:00
james.maesandOpenAI GPT-6.1	bf174a6fe7	docs: record coherent API 1.9 demo acceptance ... Document the exact source tuple, runtime provenance and fifteen passing record/bulk browser cases. Correct the scope summary for implemented fleet/session/location and optional camera integration features. Retain actual provider, hardware and immutable release limitations. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 19:04:19 -05:00
james.maesandOpenAI GPT-6.1	b14d925b74	fix: use the QQQ-managed JUnit engine in the demo ... The demo's explicit Jupiter 5.11.4 aggregate pulled an older test API while the QQQ BOM selected engine 6.0.2, preventing test discovery. Use the managed engine directly so its API and platform remain aligned with the selected core, matching the core project's dependency pattern. XML and diff checks pass; fresh consumer verification and runtime provenance remain required. No tests or BOM controls are disabled. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 19:00:03 -05:00
james.maesandOpenAI GPT-6.1	0ef7a28354	fix: align demo transitive dependencies with selected QQQ BOM ... Import the QQQ BOM in the demo so qqq.version controls transitive core, Javalin and OpenAPI versions as well as the direct RDBMS dependency. The installed scanner POM retains its own default property; a consumer's command-line override alone does not change that transitive model. Strict private runtime verification caught the mixed RC.20/new-core classpath and older Guava. XML and diff checks pass; fresh consumer tests, runtime provenance and browser acceptance are pending. No shared Maven artifacts or operator runtime were changed. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 18:57:44 -05:00
james.maesandOpenAI GPT-6.1	a8ed10865e	fix: preserve UTC instants in H2 migrations ... Set the migration session to UTC in the canonical H2 schema before converting legacy zoned timestamps. Direct schema consumers and the demo initializer now share the same policy without depending on the workstation time zone. Add a file-backed America/Chicago child-JVM regression across DST and unusual offsets, checking all migrated timestamp fields, repeated initialization, password hashes, approval and exact barcode strings. The old SQL reproduces the timestamp shift in an isolated shadow resource. Validation: fresh root/demo reactor verifies 37 plus 5 tests and Checkstyle, without installing artifacts or restarting the operator runtime. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 16:18:30 -05:00
james.maesandOpenAI GPT-6.1	bf98f84fe3	build: qualify the matched record files dependency candidate ... Adopt the explicitly verified 0515 bundle in its own isolated cache, including the matched core logging correction. Preserve earlier candidates and evidence. Retain runtime/source hashes and fresh 37-base/18-integration test results, document Jobs migration boundaries and the unpublished dependency CI gate. Validation: Checkstyle, runtime duplicate checks, path/junction regression, PowerShell parsing, staged whitespace and secret scanning pass. This does not publish upstream dependencies or upgrade an operator runtime. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 15:01:19 -05:00
james.maesandOpenAI GPT-6.1	1df7bbd180	fix: reject heartbeats from unapproved devices ... Check device approval before observing heartbeat activity, including the trailing-slash route accepted by Javalin. Rejected heartbeats cannot create sessions or advance device and session presence. Keep approval-state reads available to the enrolled device. Both failures were reproduced before correction. Validation: 37 root tests and four demo tests pass, including real HTTP pending/revoked assertions, unchanged presence, trailing-slash handling and standalone file-H2 presence. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 07:45:49 -05:00
james.maesandOpenAI GPT-6.1	092655051d	test: qualify standalone file-backed presence and viewing ... Exercise the actual demo main in a non-UTC child JVM across the presence expiry window, and record the current guarded integration and TC22 acceptance boundaries. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 05:49:17 -05:00
james.maesandOpenAI GPT-6	5dd3cd78c4	feat: add device sessions and record file integration ... Add native device profiles, presence and location, session activity and screen viewing, and record/bulk session termination. Include the optional Record Files bridge and isolated HTTP contract evidence; final authorization-guard adoption and production qualification remain documented gates. Co-Authored-By: OpenAI GPT-6 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 04:12:11 -05:00
james.maesandOpenAI GPT-6	a49724384f	docs: record semantic and TC22 acceptance results ... Co-Authored-By: OpenAI GPT-6 (Codex) <noreply@openai.com>	2026-10-30 18:31:14 -05:00
james.maesandOpenAI GPT-6	7dd02b8874	feat: register mobile scanners semantic UI API ... Co-Authored-By: OpenAI GPT-6 (Codex) <noreply@openai.com>	2026-10-30 18:13:53 -05:00
james.maesandOpenAI GPT-6	69ada88621	fix: support record and bulk device administration ... Co-Authored-By: OpenAI GPT-6 (Codex) <noreply@openai.com>	2026-10-30 16:14:43 -05:00