120 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
james.maesandClaude Fable 5.1	cf9d53d786	release(scanner): prepare 1.0.2 (versionCode 4) notes and build instructions ... Supersedes the unpublished signed 1.0.1 (versionCode 3) candidate. The version is passed at build time (-PscannerVersionName=1.0.2 -PscannerVersionCode=4); the docs now name that pair everywhere 1.0.1 / 3 was the next build. Release notes in CHANGELOG.md: company sign-out now completes (device-session end ran before provider logout), user name shown after browser sign-in, app/OS version reported on heartbeat (effective with mobile-scanners server 1.6.0). Nothing is built, signed, tagged or published. This branch carries the local merges of PRs 17 and 18 and must be rebased after they merge. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-11-06 17:25:35 -06:00
james.maes	eeb9f63322	Merge pull request 'fix(scanner): report osVersion and appVersion on every heartbeat' (#18) from fix/refresh-device-versions into main scanner-v1.0.2	2026-11-06 23:23:22 +00:00
james.maes	f39f7a37d3	Merge pull request 'fix(auth): run provider logout before host session end; show OAuth user name' (#17) from fix/company-signout-before-session-end into main	2026-11-06 23:22:49 +00:00
james.maesandClaude Fable 5.1	f733a9906c	fix(scanner): report osVersion and appVersion on every heartbeat ... After the MC9400 in-place 1.0.0 to 1.0.1 update, scan receipts still showed appVersion 1.0.0: the host sent osVersion/appVersion only at enrollment and the server never refreshed them. MobileSessionApi now carries both values (Build.VERSION.RELEASE and BuildConfig.VERSION_NAME, blank values omitted, 200-character cap) on each heartbeat so a mobile-scanners 1.6 server refreshes the device record; older servers ignore the optional keys. MobileSessionTest verifies the heartbeat payload carries only the two version keys and no other device metadata. UI-API.md and SESSION-STATE.md record the change. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-11-06 10:40:03 -06:00
james.maesandClaude Fable 5.1	cf82dd5d78	fix(auth): run provider logout before host session end; show OAuth user name ... Company sign-out on the MC9400 (production APK, real Authentik) never opened the browser: QViewModel.performLogout ran the host beforeLogout hook (scanner device-session end, which runs the core logout server-side) before the provider logout request, so POST /qqq/v1/logout found no session and returned no nativeLogoutData. Company sign-out now requests the provider material first, then ends the host session (401 tolerated), then clears local state. Ordinary sign-out keeps the host-hook-first order. Browser login now adopts the server-reported values.user.name so Account no longer shows a blank current user. Adds QViewModelLogoutTest (ordering, failing host end, ordinary order, user name adoption, ManageSessionResponse.userName parsing) and documents the finding in AUTHENTICATION.md and SESSION-STATE.md. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-11-06 10:40:01 -06:00
james.maes	3325bd6061	Merge pull request 'test(scanner): verify immediate photo availability and preview' (#16) from test/available-scanner-photo-policy into main	2026-11-05 18:16:17 +00:00
james.maesandClaude Sonnet 5.5	9e06e1f3e9	test(scanner): verify immediate photo availability and preview ... Assert the Echo fixture's available captures and generic hosts' quarantine behavior. Scope thumbnail and preview checks to the newly uploaded photo. Update release and installation guidance with signed MC9400 qualification and the remaining native authentication and publication gates. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Signed-off-by: James Maes <james@kof22.com>	2026-11-05 11:55:19 -06:00
james.maes	c782aaaaba	Merge mobile record browsing and photo Actions ... Native table/record browsing, grouped and related records, record Actions photo attachment, saved-image previews, GS1 AIM metadata and navigation protection. Paired scanner/server review: QRun-IO/qbit-mobile-scanners#19.	2026-11-05 12:55:47 +00:00
james.maesandCodex	ab6e44cddd	docs: link record UX reviews and preserve archive navigation ... Co-Authored-By: Codex (GPT-6) <noreply@openai.com>	2026-11-05 06:29:24 -06:00
james.maesandCodex	476210ae22	feat: browse mobile records and attach photos through record actions ... Preserve table search, filters and paging; add grouped details, related-record tabs, formatted values and parent-scoped saved photo previews. Retain upload guards across rotation and support GS1 AIM metadata. Validate with 232 unit tests, clean lint, isolated native semantic acceptance and actual TC22 visual checks. Co-Authored-By: Codex (GPT-6) <noreply@openai.com>	2026-11-05 06:23:25 -06:00
james.maes	464814f922	Merge pull request 'docs: publish signed Mobile preview installation details' (#14) from docs/scanner-preview-publication into main	2026-11-05 00:10:27 +00:00
james.maesandClaude Sonnet 5.5	c555d9a9ec	docs: publish signed mobile preview installation details ... Record the byte-verified Gitea preview assets while retaining the outstanding production HTTPS qualification. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 17:53:49 -06:00
james.maes	3eef6431ca	Merge pull request 'docs: record scanner signing and direct installation' (#13) from james.maes/docs/scanner-production-signing into main scanner-v1.0.0	2026-11-04 23:13:39 +00:00
james.maesandClaude Sonnet 5.5	9418c03c4b	docs: reconcile scanner setup and release status ... Clarify local demo and signed APK installation, record device acceptance and signing custody, and archive superseded status logs. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 13:29:13 -06:00
james.maesandClaude Sonnet 5.5	bcbd1b4e98	docs: record scanner signing and direct installation ... Record the selected APK/MDM channel, recovery-verified QRun signing identity and verified local 1.0.0 artifact. Add direct installation and enrollment instructions for the initial devices. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 10:28:29 -06:00
james.maesandClaude Sonnet 5.5	f58e28b0c2	docs: clarify production scanner signing on Gitea ... Replace the unselected GitHub release instructions with the actual Gradle signing inputs, Gitea SDK publication scope, key custody and channel decisions. Record operator-reported manual acceptance and preserve the development-to- production signer migration distinction. No keys, workflows or runtime change. Checked against the Gradle configuration, current Gitea caller and official Android signing documentation; git diff --check passes. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 09:44:13 -06:00
james.maes	0ae2101f08	Merge pull request 'Add branded scanner host with live connection diagnostics' (#8) from feature/mobile-scanner-host into main ... Reviewed-on: #8	2026-11-03 23:21:42 +00:00
james.maes	1f5fd2ef95	Merge pull request 'Add semantic Echo workflows and scanner device UX' (#10) from james.maes/echo-semantic-choices-review into feature/mobile-scanner-host ... Reviewed-on: #10	2026-11-03 23:06:12 +00:00
james.maesandClaude Sonnet 5.5	2c7394a62f	fix(android): clear scanner feedback when starting a new run ... Reset per-process widget state with the rest of the process view model. A regression proves that step transitions retain feedback while reset drops it. Verified 57 mobileapp JVM tests, scanner lint, debug assembly and source standards. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 16:46:33 -06:00
james.maesandClaude Sonnet 5.5	9cf789c5b1	docs: align scanner setup with current forge and release policy ... Correct Java and QQQ requirements, distinguish Gitea checks from legacy workflows, and retain the owner's deferred signing and distribution decision. Documentation only; runtime code and installed APK are unchanged. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 16:20:39 -06:00
james.maesandClaude Sonnet 5.5	4d11a9a626	docs: record verified scanner and server completion gates ... Record the installed APK, passed primary Android CI and RC.21 consumer verification. Keep owner publication, physical acceptance, native provider qualification and deferred signing distinct from completed source work. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 15:58:35 -06:00
james.maesandClaude Sonnet 5.5	f72b90d08c	feat(scanner): complete device UX and Authentik acceptance harness ... Add scan value and symbology feedback, optional status wallpaper and managed server/orientation configuration, proven AIM profile readback, and administrator-controlled viewing UI. Extend native Echo acceptance for per-scan copies and add an opt-in real-provider Authentik harness isolated to the disposable test package. Verified: 222 JVM tests, lint with zero errors/warnings, debug/E2E/test APK builds, 23 Node tests and source standards. Updated TC22 Echo acceptance passes ten stages with simulated input/printing. Actual Authentik desktop acceptance passes; native Authentik and physical trigger/print validation remain pending. Normal TC22 updated with the matching signer and data preserved. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 15:07:44 -06:00
forge-recovery	b75fdac881	ci: enroll shared Gitea Android lifecycle	2026-11-02 21:25:12 +00:00
forge-recoveryandCodex	6980c4f7c3	ci: enroll the shared read-only Android publication producer ... Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 19:58:10 +00:00
3 people	e255b7341d	feat(scanner): send immutable raw bytes to compatible semantic servers ... Capture exact SDK bytes before callback return and submit them through the existing process API only after same-server mobile-scanners 1.5 discovery. Preserve legacy server payloads and pending event retries; redact capture string representations. Verify 185 JVM tests, zero lint errors or warnings, debug/E2E builds and QA test compilation. Hardware AIM extraction and native delivery qualification remain open; the operator installation is unchanged. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 10:56:59 -06:00
james.maesandClaude Sonnet 5.5	ffc5b493fa	docs: record verified local Echo setup and remaining release gates ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 07:53:42 -06:00
james.maesandClaude Sonnet 5.5	fb3cc5d2f8	fix(android): send native request origins for cookie sessions ... Derive Origin from each QQQ request URL after caller headers so strict same-origin servers accept session heartbeats and process actions. Verify 174 JVM tests, lint, APK build, and actual TC22 sign-in, Echo setup and cancellation without clearing data. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 07:10:00 -06:00
james.maesandClaude Sonnet 5.5	47a923a712	test(android): verify Echo document selection on native forms ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 21:21:44 -06:00
forge-recovery	a2f0080755	Merge pull request 'Merge retained GitHub work into the Gitea primary branch' (#9) from migration/github-cutoff-reconcile-20261101 into feature/echo-scanner-presentation	2026-11-01 23:05:30 +00:00
james.maesandClaude Sonnet 5.5	c55d3002b0	test(ci): run no-device Echo guards ... Run the eight fixture, device-identity and redaction guards in the existing verify lane without introducing device operations or additional dependencies. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 16:12:32 -06:00
james.maesandClaude	3bec46d35a	feat(android): render semantic process choices for Echo ... Load named possible values through the published process API, honor dependent fields, discard stale responses and keep errors retryable. Add isolated native Echo coverage for setup, two accepted scans, recreation and Apps cancellation. Validation: 169 JVM tests, zero-warning lint, 8 guard tests, source standards and real TC22 simulated Echo E2E pass; all 86 requests match the published semantic API. Physical printing remains pending. Co-Authored-By: Claude <noreply@anthropic.com>	2026-11-01 15:49:03 -06:00
james.maesandGPT-6 Codex	de3f6f6b03	docs(echo): record tested presentation and integration gates ... Record the167-case client checkpoint and actual installed About verification while keeping owner-adapter/native/physical gates explicit. Co-Authored-By: GPT-6 Codex <noreply@openai.com>	2026-11-01 12:41:23 -06:00
james.maesandCodex	cd8c9f2a8c	docs(scanner): document semantic Echo presentation hints ... Describe the optional1.4 hints and unchanged receipt rules; correct the trusted EMDK path and avoid stale fixed demo-version claims. Co-Authored-By: Codex <noreply@openai.com>	2026-11-01 12:34:10 -06:00
james.maesandCodex	6293886f59	feat(scanner): honor semantic acknowledgment and manual-entry hints ... Read optional bounded acknowledgmentLabel and Boolean manualEntryEnabled from SCANNER metadata. Existing servers retain Saved scan and manual entry; Echo can show Print queued and hide unsupported manual input. Hardware eligibility, receipt identity and lifecycle are unchanged. Validation:167 JVM tests, strict Kotlin compilation, lint0errors/0warnings and debug assembly pass. Native Echo acceptance remains with the final real-server integration cohort. Co-Authored-By: Codex <noreply@openai.com>	2026-11-01 12:32:44 -06:00
james.maesandCodex	625a275de3	fix(quality): apply client standards review and add Query About ... Preserve ownership notices, replace wildcard imports, document source contracts, enforce source checks and strict Kotlin warnings, and apply the repository native formatter policy. Correct typed widget state and callback registration with regression coverage. Add bundled Query artwork, public Dogfooding and Query links, version and license access under Settings About. Validation:163 JVM cases,46 TC22 sample native cases, QA compilation, APK builds and lint0errors/0warnings. Full formatter CI and actual external-provider Android acceptance remain explicit. Co-Authored-By: Codex <noreply@openai.com>	2026-11-01 11:38:09 -06:00
james.maesandCodex	1127e4e4fa	test: isolate location permissions in scanner UI acceptance ... Include diagnostics UI acceptance in the hosted suite. Pregrant location only for disposable E2E scenarios and preserve session-monitor denied telemetry with explicit revocation and a handled-request marker. Production and QA permissions are untouched; the actual Android prompt remains separate acceptance. Co-Authored-By: Codex (GPT-6) <noreply@openai.com>	2026-11-01 10:41:04 -06:00
james.maesandCodex	3fee63f795	feat: improve diagnostics and default foreground location on ... Replace the raw log dialog with readable full-screen status/activity, filtering and copy/share controls. Persist explicit location choices and request Android permission once for default-on foreground reporting. Verified 159 JVM tests, zero-warning lint, APK builds and the focused TC22 diagnostics interaction test; actual GPS fix and real-provider acceptance remain pending. Co-Authored-By: Codex (GPT-6) <noreply@openai.com>	2026-11-01 10:29:41 -06:00
james.maesandCodex	1c766bf062	feat: validate native OAuth sessions and support company sign-out ... Require negotiated original-nonce validation for native OAuth and add optional state-bound AppAuth provider logout. Preserve TABLE login and local QQQ sign-out. Verified 151 JVM tests, lint, APK builds and 28 disposable TC22 native tests; real-provider and paired-server acceptance remain pending. Co-Authored-By: Codex (GPT-6) <noreply@openai.com>	2026-11-01 09:45:52 -06:00
james.maesandCodex	8d8e500bf2	docs: reconcile current scanner release acceptance ... Record passing portrait-default CI and physical Code128 evidence separately from pending provider, QR, camera and device acceptance. Preserve historical checkpoints and explicit dependency adoption limits. Co-Authored-By: Codex <noreply@openai.com>	2026-11-01 06:39:59 -06:00
james.maesandCodex	2e0fd962a7	docs: publish a verified leading-zero QR test fixture ... Co-Authored-By: Codex <noreply@openai.com>	2026-11-01 06:27:17 -06:00
james.maesandOpenAI Codex	7de2b5088f	fix: default the scanner to portrait orientation ... Use Portrait when no valid orientation preference is saved; preserve all explicit user choices, including System default. Cover missing, invalid, explicit and platform orientation behavior in four focused tests. Focused tests, debug lint (zero errors/warnings) and debug assembly pass. A matching-signer in-place TC22 update preserved login/enrollment and Android reports the normal activity requested portrait. Record exact physical Code128 evidence and fully green prior native CI separately. Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-11-01 05:44:14 -06:00
james.maesandOpenAI Codex	229fce30a1	test: wait for completed logout before fresh sign-in ... Wait for the final signed-out message and enabled login action before clicking once. Retain fresh-login and new-session assertions in the real-server session scenario and opt-in device-screen acceptance. The previous PR native run passed all seven scenarios; its duplicate push run timed out after clicking the logout label. This test-readiness correction is independently reviewed and both native test packages compile. New hosted execution is required; no product fix is claimed. Record the independent release-automation review, external configuration gaps and current operator upgrade/projection acceptance boundaries. Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-11-01 04:58:00 -06:00
james.maesandOpenAI GPT-6.1	5ba87f49d2	test: synchronize rotation and add opt-in screen acceptance ... Wait for applied landscape configuration before explicit recreation and assert the barcode draft after both transitions. Retain focused unlocked input requirements while allowing brief physical-test focus changes. Add a manual-only QA device-screen acceptance path with three actual OS consent rounds, real Home-frame comparison, Stop, lease expiry and forced logout. Protect existing app IDs/ports and compile QA tests in CI. Use non-streaming physical installs and actionable timeout diagnostics. QA and E2E packages compile, runner syntax/actionlint and opt-in/protected port negative controls pass. Actual screen consent and synchronized native scenario execution remain pending; no production code changed. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-11-01 04:24:15 -06:00
james.maesandOpenAI GPT-6.1	e04fdb2d21	fix: retain fresh screen frames and gate sharing startup ... Drain ImageReader continuously while retaining only one latest image, release replaced buffers, snapshot acquisition time before encoding, and keep Share disabled until service binding finishes. Pin hosted acceptance to the verified additive server1.2 source1041693. Pass137 JVM tests, lint/all package builds, fresh APK inspection and TC22 ordinary-UID forged-input rejection. Independent follow-up review found no concrete issue. Paired server consumer/provenance and all15 browser cases pass. Actual OS consent/device capture remains unverified. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 21:51:12 -05:00
james.maesandOpenAI GPT-6.1	fbf9a30a51	feat: add consent-based device screen viewing ... Add an optional nonexported MediaProjection foreground service, one-time operator consent and session/lease/mode-bound frame upload. Preserve legacy app-content defaults and stop capture on bounded lifetime or host/session loss. Clarify physical scan polling deadline failures. Initial gates pass135 JVM tests, lint and all package builds. Paired server39 tests and six real-HTTP cases pass with historical API baselines preserved. Changed-client static review found no reportable findings. Actual consent/device acceptance and frame/UI refinements remain open; this is a source checkpoint, not a production release. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 21:38:12 -05:00
james.maesandOpenAI GPT-6.1	6f25562919	test: diagnose hosted Back window focus failures ... Report bounded own-window flags, focused-owner category, and network dialog visibility when the existing five-second focus guard fails. Keep real Back injection and its focus requirement unchanged. Sample instrumentation compilation passes. CircleCI's three failures remain unresolved pending a fresh diagnostic run. Record the completed data-preserving local API1.9 upgrade and unverified physical scan attempt. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 21:23:34 -05:00
james.maesandOpenAI GPT-6.1	6845abc528	test: select explicit scan-probe package targets ... Map accepted control values to compile-time QA/E2E package literals before constructing broadcasts. Unknown targets still return before any send, and marker validation/actions/permissions/counts remain unchanged. This makes the existing allowlist boundary explicit to static analysis without suppressing CodeQL or forwarding the caller's target string. Probe build/lint and the distinct-signer ordinary-UID device acceptance pass: eight forged broadcasts create no extra process steps or records, and the manual positive control saves. Production APKs are unchanged. Static triage and fresh hosted analysis remain separate evidence. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 20:50:24 -05:00
james.maesandOpenAI GPT-6.1	d316567fdc	feat: secure Zebra scanning and unify mobile Back routing ... Use the optional device-provided EMDK service for normal scanner input, with exact compile-only SDK provenance and no shipped vendor classes. Keep synthetic scan broadcasts confined to the disposable E2E variant. Pause input behind overlays and lost focus, and share live drawer-first Back routing across every process/application handler and toolbar arrow. Replace inherited Auth0/Coil prereleases with reviewed stable versions. Invalidate standard generated notices on dependency graph changes and retain strict runtime/license checks. Pin hosted acceptance to the source-qualified API 1.9 core/server tuple with runtime provenance. Validation: 127 JVM tests, 34 TC22 shared native cases, eight-overlay native regression, and ordinary-UID/distinct-signer injection rejection pass. Eight forged broadcasts cause no process/record mutation; a real manual positive control saves through the API. All package/lint gates, four-APK notice/DEX/native/manifest inspection, focused independent source review, workflow syntax and staged secret checks pass. Actual hardware triggers, configured provider, optional files deployment and final signing/distribution remain separate documented release gates. No normal operator installation or data was changed by these tests. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 20:18:41 -05:00
james.maesandOpenAI GPT-6.1	df532ff514	fix: isolate operator login and logout lifecycles ... Bind password and legacy Auth0 responses to their initiating origin, metadata and generation. Defer cookie adoption, consume exchanges once, and revoke known abandoned sessions at their original server. Make local logout independent of provider callbacks and idempotent across overlapping calls, delayed storage and screen remounts. Exclude sample session storage from backup and transfer, and restrict sample cleartext environments to debug builds. Document the remaining trusted-scanner input finding and the real-provider acceptance boundary. Validation:109 JVM tests and scanner lint pass;32 selected TC22 native tests pass, including ten new authentication lifecycle regressions. Packaged unsigned sample release denies cleartext and backup, with all ten cloud/device-transfer exclusions. Operator installation is unchanged. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 17:37:39 -05:00
james.maesandOpenAI GPT-6.1	7e0cbee4fe	build: align the verified Gradle wrapper with 8.7 ... Replace the older official bootstrap with the checksum-verified8.7 JAR, keeping the configured distribution version and hash unchanged. Record upstream provenance and the distinction from a complete binary audit. Co-Authored-By: OpenAI GPT-6.1 (Codex) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-31 17:37:16 -05:00