release: merge dev into main

[quan0715]

Summary

• Promote the latest dev branch to main.
• Includes auth provider consolidation, QAuth/NYCU login documentation and showcase updates, and score precision fixes.
• Includes the exam monitoring/auth refresh changes already merged into dev.

Verification

• PR feat: refresh auth providers and score precision #196 CI green before merging into dev: Static Analysis & Build, Backend Unit Tests, Frontend Unit Tests, Integration Tests, Judge Tests, MCP Server Tests.
• Local frontend coverage passed: npm run test:coverage.
• Local pre-push checks passed for branch codex/auth-experience-refresh; E2E remains skipped by hook as configured.

[Copilot]

Copilot wasn't able to review this pull request because it exceeds the maximum number of files (300). Try reducing the number of changed files and requesting a review from Copilot again.

[chatgpt-codex-connector]

💡 Codex Review

QJudge/reports/qjudge-paper-experiments/exam3-subjective-deepseek-flash-20260610-154401/per_student_scores.csv

Line 106 in f22dd6f

A141087林哲勗,38.0,51,1.0,2.0,2.0,3.0,4.0,2.0,1.0,2.0,2.5,3.0,3.0,1.0,3.0,0.5,2.0,2.0,4.0,0.0

Remove committed student-identifying grade exports

This generated export contains student identifiers/names alongside total and per-question scores. When this commit is pushed to a shared or public repo, those grades become available to anyone with repo access and are hard to purge from history. Please remove these reports from the commit or replace them with anonymized fixtures.

---

QJudge/backend/apps/judge/io_judge.py

Lines 186 to 188 in f22dd6f

	kwargs: dict[str, Any] = {"timeout": self.docker_timeout}
	try:
	client = docker.DockerClient(**kwargs)

Restore DOCKER_HOST support for the judge

In deployments that set DOCKER_HOST (still documented in example.env) to point the judge at a non-default Docker daemon/socket, kwargs now only contains timeout and the setting is no longer defined, so docker.DockerClient(**kwargs) falls back to the default local socket and judging fails when that socket is unavailable. Please keep passing base_url from env/settings or update the deployment config/docs.

---

QJudge/.env.example

Line 38 in f22dd6f

# AUTH_PROVIDER_OPTIONS_JSON=[{"key":"nycu","type":"oidc","category":"campus","display_name":"NYCU 國立陽明交通大學","display_name_i18n_key":"auth.providers.nycu","logo_url":"/illustrations/nycu-logo.png"}]

Wire the documented auth provider override

The new example advertises AUTH_PROVIDER_OPTIONS_JSON as an override for public login method metadata, but /api/v1/auth/options ultimately returns the hard-coded provider registry and no backend code reads this env var. In deployments that set it to hide unconfigured providers or customize labels/logos, the frontend will ignore the override and still render the built-in provider list. Please implement the setting or remove it from the examples.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".