Skip to content

audit: integrate 2026-07-25 remediation plan - #26

Merged
rwang23 merged 32 commits into
mainfrom
Codex/audit-integration-20260727
Jul 27, 2026
Merged

audit: integrate 2026-07-25 remediation plan#26
rwang23 merged 32 commits into
mainfrom
Codex/audit-integration-20260727

Conversation

@rwang23

@rwang23 rwang23 commented Jul 27, 2026

Copy link
Copy Markdown
Owner

Scope

This is the integration branch for the 2026-07-25 audit plan. It combines the remediation work from #15 through #25 and is ready for one review and CI pass as a release candidate.

Closes #4, #5, #6, #7, #8, #9, #10, #11, #12, #13, and #14.

What changed

  • Makes generation hermetic and incremental, then validates generated output separately from source contracts.
  • Adds responsive screenshot presentations, focal-aware source art, and review records for the generated crops.
  • Strengthens Full Skin transactions, diagnostics, network/cache behavior, runtime compatibility, and release metadata.
  • Improves Theme Manager keyboard behavior, dialog handling, accessibility semantics, and evidence messaging.
  • Hardens workflow checks and governance around source-art provenance and runtime capture state.

Verification

  • npm run check
  • npm run a11y:check in apps/theme-manager
  • Isolated Gallery browser QA: 68 themes loaded, category filtering, details dialog, language switch, and responsive image variants.
  • workflow-lint.ps1

Evidence limits

The recorded Beta capture is from Full Skin runtime v2. The site now labels it as reference evidence and says that v3 requires a new capture. The local gallery:check script could not run because this host has no google-chrome executable name, but the same Gallery path passed in an isolated browser session.

rwang23 added 30 commits July 26, 2026 10:54
…erator' into Codex/audit-integration-20260727
…hortcuts' into Codex/audit-integration-20260727
…stics' into Codex/audit-integration-20260727

# Conflicts:
#	apps/theme-manager/src/renderer/app.js
#	apps/theme-manager/src/renderer/index.html
#	docs/CHANGELOG.md
…bility' into Codex/audit-integration-20260727

# Conflicts:
#	docs/CHANGELOG.md
#	package.json
#	scripts/generate-themes.mjs
#	scripts/validate.mjs
…data' into Codex/audit-integration-20260727

# Conflicts:
#	apps/theme-manager/src-tauri/src/catalog.rs
#	docs/CHANGELOG.md
#	docs/adapters.md
#	package.json
#	schemas/registry.schema.json
#	scripts/capture-full-skin-screenshots.mjs
#	scripts/lib/theme-generator.mjs
#	scripts/validate.mjs
#	site/assets/app.js
#	tests/repository.test.mjs
#	tests/source-contract.test.mjs
…rmance' into Codex/audit-integration-20260727

# Conflicts:
#	README.md
#	README.zh-CN.md
#	apps/theme-manager/src-tauri/src/catalog.rs
#	apps/theme-manager/src/renderer/app.js
#	docs/CHANGELOG.md
#	docs/architecture.md
#	docs/desktop-manager.md
#	scripts/lib/theme-generator.mjs
#	scripts/prepare-desktop.mjs
#	scripts/validate.mjs
#	site/assets/app.js
#	tests/source-contract.test.mjs
…dering' into Codex/audit-integration-20260727

# Conflicts:
#	apps/theme-manager/src-tauri/src/catalog.rs
#	docs/CHANGELOG.md
#	docs/art-direction.md
#	packages/full-skin/runtime.css
#	screenshots/codex-beta-26.715.3651.0/manifest.json
#	scripts/lib/source-art-contract.mjs
#	scripts/validate.mjs
#	tests/repository.test.mjs
#	tests/source-contract.test.mjs
#	themes/catalog.json
@rwang23
rwang23 marked this pull request as ready for review July 27, 2026 05:01
@rwang23
rwang23 merged commit e2ed6e8 into main Jul 27, 2026
11 checks passed

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 94e89f9896

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +492 to +494
if (forceRestartResolver) return Promise.resolve(false);
elements.forceRestartDialog.hidden = false;
elements.forceRestartConfirm.focus();

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep focus inside the restart confirmation

When graceful shutdown times out on Windows and this overlay opens, it is only a <div role="dialog"> whose opener removes hidden; unlike the persistence dialog, it never makes the app shell inert, traps Tab, or remembers and restores the trigger. Keyboard users can therefore tab or press Ctrl+K into the underlying app while this destructive confirmation remains displayed, and closing it does not return focus to the initiating control. Reuse a native <dialog> or apply the same fallback focus/inert lifecycle here.

AGENTS.md reference: AGENTS.md:L14-L14

Useful? React with 👍 / 👎.

This was referenced Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Build] Make theme generation incremental, streaming, and performance-budgeted

1 participant