@dailephd/my-frontend-observer 0.9.0 → 0.9.1

package/docs/reports/v0.9.1-pre-release-readiness.md

@@ -0,0 +1,206 @@
+# v0.9.1 Pre-release Readiness
+
+## 1. VERDICT
+
+`PASS_V0_9_1_PR_RUN_A_COMPLETE`
+
+This report records the first complete cross-platform readiness proof for the
+v0.9.1 maintenance candidate. It is not final merged-master readiness. A new
+complete PR workflow is required after this report is committed because the
+report changes the candidate package.
+
+## 2. Repository identity
+
+- Repository: `dailephd/my-frontend-observer`
+- Local repository: `C:\Users\daile\Projects\my-frontend-observer`
+- Branch: `feature/v0.9.1-pwa-hard-gate-isolation`
+- Implementation entry HEAD: `fbc081d6387cdb3aeacd79f5ed82bdcd8812fd93`
+- Base before integration: `985d0ce47a070fd9f84eae478f4098df00d57bd8`
+- Feature contains base: PASS
+
+## 3. v0.9.1 maintenance scope
+
+v0.9.1 is a test and validation maintenance patch. It makes the PWA server-down
+HARD GATE independently reproducible and adds the permanent command
+`npm run test:pwa-hard-gate`. No production PWA behavior is intentionally
+changed.
+
+## 4. v0.9.0 baseline
+
+The package baseline remains `0.9.0`. `package.json`, `package-lock.json`, and
+`package-lock.json` `packages[""].version` all remain `0.9.0`.
+
+## 5. Batch 1 implementation
+
+Batch 1 is recorded in
+`docs/reports/v0.9.1-batch1-pwa-hard-gate-isolation.md`. The implementation
+isolates the server-down PWA test from prior test order, persistent Chromium
+profiles, and prior service-worker cache state.
+
+## 6. Batch 2 permanent gate integration
+
+Batch 2 is recorded in
+`docs/reports/v0.9.1-batch2-hard-gate-validation-integration.md`. The isolated
+gate is exposed as `npm run test:pwa-hard-gate` and is included in
+`npm run test:security`. No workflow YAML change was required.
+
+## 7. Product-change audit
+
+The implementation diff changes tests, scripts/package metadata, and
+documentation only. No intended changes occur under `src/`, `viewer/src/`, or
+`viewer/vite.config.ts`.
+
+- `PRODUCT_FILES_CHANGED = false`
+- `PRODUCT_SEMANTICS_CHANGED = false`
+- `PRODUCT_DEFECT_DISCOVERED = false`
+- `PRODUCT_CHANGE_REQUIRED = false`
+
+## 8. Isolated hard-gate invariant
+
+The prior readiness predicate was:
+
+```text
+registration?.active !== undefined
+```
+
+At failure time, active registration state was `null` and the current page
+controller was `null`. The old predicate falsely passed because `null !==
+undefined`. The corrected proof requires:
+
+```text
+registration.active !== null
+navigator.serviceWorker.controller !== null
+```
+
+The experiment also proves shell precache, zero `/api/` cache entries, live
+evidence visibility, actual server unavailability, offline shell rendering,
+evidence becoming unavailable, and stale evidence remaining absent.
+
+## 9. Local validation
+
+All required local commands passed:
+
+```text
+npm run test:pwa-hard-gate
+npm run typecheck
+npm run lint
+npm test
+npm run test:browser
+npm run test:security
+npm run build
+npm run check:docs
+npm pack --dry-run
+```
+
+The local security chain executed and passed `npm run test:pwa-hard-gate`.
+`LOCAL_SECURITY_CHAIN_ISOLATED_HARD_GATE = PASS`.
+
+## 10. PR_RUN_A identity
+
+- PR: #16
+- URL: https://github.com/dailephd/my-frontend-observer/pull/16
+- Event: `pull_request`
+- Head branch: `feature/v0.9.1-pwa-hard-gate-isolation`
+- Head SHA: `fbc081d6387cdb3aeacd79f5ed82bdcd8812fd93`
+- Run ID: `35624170324`
+- Run URL: https://github.com/dailephd/my-frontend-observer/actions/runs/35624170324
+- Conclusion: PASS
+
+## 11. Candidate package identity
+
+- Filename: `dailephd-my-frontend-observer-0.9.0.tgz`
+- SHA-256: `63ba0cee49dc976cd55515ae387c7d1e46b226fd090eb931483c9be3a92bfa5c`
+- File count: `370`
+- Package version: `0.9.0`
+- Candidate head SHA: `fbc081d6387cdb3aeacd79f5ed82bdcd8812fd93`
+
+The same exact candidate was verified by the Windows, Linux, and macOS smoke
+jobs.
+
+## 12. Candidate Linux security result
+
+The candidate job passed its security unit tests, browser security tests, and
+the final isolated gate invocation. Its log includes the exact command
+`npm run test:pwa-hard-gate`, one HARD GATE test passed with six focused tests
+skipped, and no failure.
+
+## 13. Windows exact-package result
+
+PASS. The Windows smoke job downloaded the candidate artifact, verified the
+candidate SHA-256, and passed packed observation, packed v0.8.1 project/viewer,
+and packed v0.9 annotation smoke.
+
+## 14. Linux exact-package result
+
+PASS. The Linux smoke job downloaded the candidate artifact, verified the
+candidate SHA-256, and passed packed observation, packed v0.8.1 project/viewer,
+and packed v0.9 annotation smoke.
+
+## 15. macOS exact-package result
+
+PASS. The macOS smoke job downloaded the candidate artifact, verified the
+candidate SHA-256, and passed packed observation, packed v0.8.1 project/viewer,
+and packed v0.9 annotation smoke.
+
+## 16. Windows tutorial result
+
+PASS. All four existing v0.9 Observer tutorials passed through
+`@dailephd/my-dev-kit-lab@0.4.9`.
+
+## 17. Linux tutorial result
+
+PASS. All four existing v0.9 Observer tutorials passed through
+`@dailephd/my-dev-kit-lab@0.4.9`.
+
+## 18. macOS tutorial result
+
+PASS. All four existing v0.9 Observer tutorials passed through
+`@dailephd/my-dev-kit-lab@0.4.9`.
+
+## 19. Package-content audit
+
+The npm dry-run and exact candidate contents exclude implementation tests,
+temporary PWA profiles, temporary evidence roots, `.my-dev-kit-workflow/`,
+`examples/v09-demo/`, and generated tutorial artifacts. Normal `dist`, docs,
+license, README, changelog, and package metadata remain present.
+
+## 20. Schema/dependency/version audit
+
+- Observation schema: `1.2.0`
+- Comparison schema: `1.0.0`
+- Frontend contract schema: `1.0.0`
+- Evaluation schema: `1.0.0`
+- Bounded agent context schema: `1.0.0`
+- External reference schema: `1.0.0`
+- Visual annotation schema: `1.0.0`
+- Viewer protocol: `1.3.0`
+- `DEPENDENCY_CHANGED = false`
+- `PACKAGE_VERSION_CHANGED = false`
+- Package version: `0.9.0`
+
+## 21. Readiness-report candidate mutation
+
+This tracked report changes the candidate bytes because it is included under
+`docs/`. The report must therefore be committed and pushed, followed by a new
+complete PR workflow against the report-containing head.
+
+## 22. PR_RUN_B
+
+Not started at report creation. PR_RUN_B is required after the report commit
+and must pass the candidate, all three exact-package smoke jobs, and all three
+tutorial jobs.
+
+## 23. Integration handoff
+
+Integration is not yet authorized by this report alone. After PR_RUN_B passes,
+merge PR #16 using the repository merge-commit convention. Preserve both the
+implementation branch and the planning branch.
+
+## 24. Remaining exact-master validation
+
+After the merge, manually dispatch `Pre-release readiness` on the exact merged
+`master` SHA because the workflow does not run automatically on pushes to
+`master`. Require the complete seven-job matrix, verify the isolated hard gate
+again in the Linux candidate job, and leave local `master` at that validated
+merged SHA. Version bumping, tagging, publishing, GitHub Release creation, and
+release-branch creation remain out of scope.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dailephd/my-frontend-observer",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "license": "MIT",
   "publishConfig": {
     "access": "public"
@@ -34,7 +34,8 @@
     "lint": "eslint .",
     "test": "vitest run --passWithNoTests",
     "test:browser": "vitest run --config vitest.browser.config.ts --passWithNoTests",
-    "test:security": "vitest run tests/unit/policy.test.ts tests/unit/viewerServer.test.ts tests/unit/viewerEvidenceServer.test.ts tests/unit/referenceViewerServer.test.ts tests/unit/contextViewerServer.test.ts tests/unit/paths.test.ts tests/unit/evidenceDiscovery.test.ts tests/unit/projectWorkflow.test.ts tests/unit/projectCheckService.test.ts tests/unit/projectCheckResult.test.ts tests/unit/viewerAuthoringSecurity.test.ts tests/unit/viewerAnnotationAuthoring.test.ts tests/unit/viewerAnnotationEvidence.test.ts tests/unit/viewerAnnotationContractPromotion.test.ts tests/unit/viewerAnnotationReferenceMaterialization.test.ts tests/unit/evidenceDiscoveryTempDirectories.test.ts && vitest run --config vitest.browser.config.ts tests/browser/chromiumAdapter.test.ts tests/browser/pwaHardening.test.ts tests/browser/projectCheckWorkflow.test.ts",
+    "test:security": "vitest run tests/unit/policy.test.ts tests/unit/viewerServer.test.ts tests/unit/viewerEvidenceServer.test.ts tests/unit/referenceViewerServer.test.ts tests/unit/contextViewerServer.test.ts tests/unit/paths.test.ts tests/unit/evidenceDiscovery.test.ts tests/unit/projectWorkflow.test.ts tests/unit/projectCheckService.test.ts tests/unit/projectCheckResult.test.ts tests/unit/viewerAuthoringSecurity.test.ts tests/unit/viewerAnnotationAuthoring.test.ts tests/unit/viewerAnnotationEvidence.test.ts tests/unit/viewerAnnotationContractPromotion.test.ts tests/unit/viewerAnnotationReferenceMaterialization.test.ts tests/unit/evidenceDiscoveryTempDirectories.test.ts && vitest run --config vitest.browser.config.ts tests/browser/chromiumAdapter.test.ts tests/browser/pwaHardening.test.ts tests/browser/projectCheckWorkflow.test.ts && npm run test:pwa-hard-gate",
+    "test:pwa-hard-gate": "vitest run --config vitest.browser.config.ts tests/browser/pwaHardening.test.ts -t \"HARD GATE\"",
     "check:docs": "node scripts/check-docs.mjs"
   },
   "devDependencies": {