From fb88508d8cec48e3ee7f254baea1835708ea4b67 Mon Sep 17 00:00:00 2001 From: Codev contributors Date: Fri, 9 Oct 2026 16:01:27 -0400 Subject: [PATCH] Refresh Release 2 checkpoint after PR 57 --- DESIGN.md | 2 +- docs/release-plan-2026-10.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/DESIGN.md b/DESIGN.md index 93849153..b211026a 100644 --- a/DESIGN.md +++ b/DESIGN.md @@ -1197,7 +1197,7 @@ Run after phases 1 to 5 and again before every release, as its own change set. **Q3-60 MCP transcript details (2026-10-08, PR head `6a6514f`).** A headless Avalonia regression verifies that tool, prompt, resource, and resource-template operations share a collapsed natural-language group, expand to correctly named rows, and expose readable untrusted results without raw output envelopes. The focused UI test passed locally; Windows Avalonia UI tests passed 67/67 non-live tests on the exact PR head. Hosted four-RID preview [#37846994789](https://github.com/jay23606/codev/actions/runs/37846994789) passed the packaged Windows prompt/resource/template interaction, including its initially collapsed state and successful expansion; Linux and both macOS package previews also passed. Native macOS/Linux UI readability and interaction remain open. **Q3-65 malformed MCP settings recovery (2026-10-08, product head `e9a2e54`).** The MCP settings editor reopens bounded raw JSON after syntax errors and preserves valid JSON containing wrongly typed or invalid server fields instead of silently converting those entries to placeholders. It explains that the source remains unchanged and permits replacement only after a valid save. Case-insensitive duplicate IDs are identified before saving; failed duplicate saves preserve the source, while the user can correct and reload the list. Files above the 1 MiB editing cap open with an explicit warning and an empty replacement; the original remains unchanged until a valid replacement is saved. If a directory occupies the MCP settings path, Codev reports the conflict, names the path, and explains how to move or rename it. Avalonia tests cover malformed syntax, wrongly typed fields, duplicate IDs, oversized files, source preservation, rejected duplicate saves, and reload after repair; a Core regression rejects a directory collision instead of treating the path as missing. The .NET 10 Release Avalonia suite passed 65 tests (12 opt-in live tests skipped); Core passed 1,030 tests (2 opt-in live tests skipped). Exact-head [Windows/Linux/macOS CI](https://github.com/jay23606/codev/actions/runs/37824930302) and [four-target package preview](https://github.com/jay23606/codev/actions/runs/37824930304) passed. Packaged Windows UI Automation verifies malformed JSON, invalid fields, duplicates, oversized files, and the directory-collision guidance with the isolated file path exposed accessibly. Native settings interaction and a true permission-denied read remain unverified. **Q3 local packaged Auto/MCP follow-up (2026-10-08, PR head `ce30d08`, product code `e9a2e54`, Windows 11, .NET 10.0.401).** A fresh self-contained win-x64 build passed the complete packaged UI smoke on its second attempt using an isolated temporary data root and loopback-only mock Ollama/MCP fixtures. The smoke applied an instruction-risk file proposal without review; ran the screenshot-matched destructive command in Auto and then blocked it under an exact Deny without a prompt; denied an MCP tool in Ask without invoking the server; and completed stdio and Streamable HTTP echo calls in Auto without approval. It also covered MCP settings recovery, persisted display/font settings, profile editing, search and sidebar operations, collapsed activity expansion, mode cycling, and native backup dialogs. The first attempt exposed intermittent SendKeys text loss before the Auto/MCP segment; the repeat passed. This gives local packaged UI/executor evidence for R1-Q3-02, 36, 59, and 61, but used a deterministic Ollama mock rather than real inference. Keep those end-to-end rows open for real-model interaction, broader permission cases, SSE/OAuth, and native Mac/Linux checks; no conclusion about general Auto or MCP behavior should be drawn from this single completed mock-backed run. - **Hosted packaged conversation-find proof (2026-10-09, PR #57 head `e72a4e1`).** Windows/Linux/macOS CI [passed](https://github.com/jay23606/codev/actions/runs/37981218664), including Avalonia headless UI tests on all three operating systems. The four-target desktop/CLI preview [passed](https://github.com/jay23606/codev/actions/runs/37981218523) for win-x64, linux-x64, osx-arm64, and osx-x64; release publication was skipped because this is an unmerged PR. Windows UI Automation selected an earlier transcript result and closed/reopened the search panel. Linux Xvfb verified AT-SPI focus and Ctrl+Shift+F routing, activated the earlier prompt, closed search, and found the shortcut in F1. Both macOS window-server targets searched and activated that prompt with Cmd+Shift+F and closed the panel after the multi-action Auto smoke. The Linux keyboard test no longer starts Orca: two earlier runs reported no Orca focus event even though AT-SPI confirmed the search field was focused, so that flaky screen-reader gate was not allowed to block keyboard interaction coverage. Native Linux/macOS input and screen-reader behavior remain unverified; R1-Q3-03 stays open. + **Hosted packaged conversation-find proof (2026-10-09, PR #57 merged as `a4077d7`).** Windows/Linux/macOS CI [passed](https://github.com/jay23606/codev/actions/runs/37981218664), including Avalonia headless UI tests on all three operating systems. The four-target desktop/CLI preview [passed](https://github.com/jay23606/codev/actions/runs/37981218523) for win-x64, linux-x64, osx-arm64, and osx-x64; publication was skipped because the check ran on an unmerged PR head. The merged main commit's Windows/Linux/macOS CI also passed [#37982990888](https://github.com/jay23606/codev/actions/runs/37982990888). Windows UI Automation selected an earlier transcript result and closed/reopened the search panel. Linux Xvfb verified AT-SPI focus and Ctrl+Shift+F routing, activated the earlier prompt, closed search, and found the shortcut in F1. Both macOS window-server targets searched and activated that prompt with Cmd+Shift+F and closed the panel after the multi-action Auto smoke. The Linux keyboard test no longer starts Orca: two earlier runs reported no Orca focus event even though AT-SPI confirmed the search field was focused, so that flaky screen-reader gate was not allowed to block keyboard interaction coverage. Native Linux/macOS input and screen-reader behavior remain unverified; R1-Q3-03 stays open. The tag workflow now loads [`docs/release-notes.md`](docs/release-notes.md) as its human-written release body and appends GitHub-generated change notes, so the Auto permission boundary and preview limitations travel with the published assets. Update that file for each release before tagging. diff --git a/docs/release-plan-2026-10.md b/docs/release-plan-2026-10.md index a2836e31..87233f01 100644 --- a/docs/release-plan-2026-10.md +++ b/docs/release-plan-2026-10.md @@ -40,7 +40,7 @@ The Release 1 ledger leaves 65 manual workflows open, including native macOS/Lin ## Release 2: early stabilization -**Current main checkpoint (2026-10-09, merge head `c4f1158`).** PRs #41–#50 are merged. Recent product work includes broader Auto command execution subject to exact Deny rules, persisted conversation and child-session sidebar reordering, and release-download corrections. PR #45's top-level drag/drop regression passed Windows/Linux/macOS CI [#37957023785](https://github.com/jay23606/codev/actions/runs/37957023785) and the four-target packaged preview [#37957023813](https://github.com/jay23606/codev/actions/runs/37957023813). Documentation checkpoint PR #47 passed cross-platform CI [#37958594236](https://github.com/jay23606/codev/actions/runs/37958594236) and all four packaged previews [#37958594126](https://github.com/jay23606/codev/actions/runs/37958594126); the macOS ARM64 UI smoke passed on a targeted rerun after its first attempt found the mock model unavailable. PR #48 made Markdown-only PRs skip packaged previews while retaining CI; its CI [#37960605451](https://github.com/jay23606/codev/actions/runs/37960605451), all-four-target preview [#37960605629](https://github.com/jay23606/codev/actions/runs/37960605629), and post-merge CI [#37961292079](https://github.com/jay23606/codev/actions/runs/37961292079) passed. PR #49 recorded that all eight current README latest-download URLs returned HTTP 200; it ran cross-platform CI without a packaged preview, and post-merge CI [#37962127398](https://github.com/jay23606/codev/actions/runs/37962127398) passed. PR #50 refreshed this checkpoint after those workflow and download-link changes; post-merge Windows/Linux/macOS CI [#37963098154](https://github.com/jay23606/codev/actions/runs/37963098154) passed. No local packaged smoke was run for PRs #47–#50. GitHub lists no open issues or pull requests at this check; continue collecting user reports through the release's normal feedback channels. Clean-machine installation, physical accessibility, and native macOS/Linux interaction remain explicit limitations. Keep the October 11 freeze and October 13 Release 2 target below. +**Current main checkpoint (2026-10-09, merge head `a4077d7`).** PRs #41–#57 are merged. Recent work includes broader Auto command execution with exact Deny rules, persisted conversation and child-session sidebar reordering, scoped profile path normalization, and transcript search interaction coverage across Windows/Linux/macOS. PR #45's drag/drop feature passed Windows/Linux/macOS CI [#37957023785](https://github.com/jay23606/codev/actions/runs/37957023785) and the four-target packaged preview [#37957023813](https://github.com/jay23606/codev/actions/runs/37957023813). PR #48 made Markdown-only PRs skip packaged previews while retaining cross-platform CI; PRs #49–#52 recorded download, checkpoint, and release-note updates. PR #53 added a cross-group drop rejection test, PR #54 documented its boundary coverage, PR #55 normalized scoped profile read paths, and PR #56 added traversal-denial tests. PR #57's exact-head Windows/Linux/macOS CI [#37981218664](https://github.com/jay23606/codev/actions/runs/37981218664) and four-RID package preview [#37981218523](https://github.com/jay23606/codev/actions/runs/37981218523) passed; post-merge main CI [#37982990888](https://github.com/jay23606/codev/actions/runs/37982990888) passed. This checkpoint adds no local packaged smoke; the hosted tests and package previews above are the recorded automated interaction evidence. GitHub lists no open issues or pull requests at this check; keep collecting install reports through the release's normal feedback channels. Clean-machine installation, physical accessibility, and native macOS/Linux interaction remain explicit limitations. Keep the October 11 freeze and October 13 Release 2 target below. Target Release 2 for **Tuesday, October 13, 2026** (Day 5 after the October 8 publication; acceptable window: Day 3–5). On October 9–10 (Days 1–2), collect install reports, triage reproducible issues, and fix release blockers. On October 11 (Day 3), freeze the candidate and run exact-head Windows/Linux/macOS CI plus all four packaged desktop/CLI checks. The desktop-preview workflow runs for pull requests with non-Markdown changes, version tags, and explicit candidate dispatch; Markdown-only PRs still run Windows/Linux/macOS CI but skip the four packaged interaction smokes. Regular merges to `main` do not repeat the packaged previews. Dispatch that workflow once against the frozen main commit before tagging. Use a local desktop smoke only if a release-critical interaction is not covered by hosted UI checks and focused tests; routine local runs stay disabled. Publish on October 12–13 only if exact-head checks pass, update the release notes for verified changes and remaining limitations, and confirm all eight README latest-download links. If a blocker moves the candidate, move Release 2 to Day 3–5 after the verified fix.