documentation-hub 5.7.2

package/dist/electron/main.js

@@ -0,0 +1,5 @@
+"use strict";
+require("electron");
+require("fs");
+require("path");
+require("./main-CXkNtyv-.js");

package/dist/electron/preload.js

@@ -0,0 +1 @@
+"use strict";const r=require("electron"),c={minimizeWindow:()=>r.ipcRenderer.invoke("window-minimize"),maximizeWindow:()=>r.ipcRenderer.invoke("window-maximize"),closeWindow:()=>r.ipcRenderer.invoke("window-close"),isMaximized:()=>r.ipcRenderer.invoke("window-is-maximized"),isFullscreen:()=>r.ipcRenderer.invoke("window-is-fullscreen"),getAppVersion:()=>r.ipcRenderer.invoke("app-version"),getPlatform:()=>r.ipcRenderer.invoke("platform"),openDevTools:()=>r.ipcRenderer.invoke("open-dev-tools"),setAlwaysOnTop:e=>r.ipcRenderer.invoke("window-set-always-on-top",e),isAlwaysOnTop:()=>r.ipcRenderer.invoke("window-is-always-on-top"),onAlwaysOnTopChanged:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("window-always-on-top-changed",n),()=>r.ipcRenderer.removeListener("window-always-on-top-changed",n)},selectDocuments:()=>r.ipcRenderer.invoke("select-documents"),processDocument:e=>r.ipcRenderer.invoke("process-document",e),showInFolder:e=>r.ipcRenderer.invoke("show-in-folder",e),openDocument:e=>r.ipcRenderer.invoke("open-document",e),getFileStats:e=>r.ipcRenderer.invoke("get-file-stats",e),restoreFromBackup:(e,n)=>r.ipcRenderer.invoke("restore-from-backup",{backupPath:e,targetPath:n}),getPathsForFiles:e=>e.map(n=>r.webUtils.getPathForFile(n)),selectFolder:()=>r.ipcRenderer.invoke("select-folder"),copyFilesToFolder:(e,n)=>r.ipcRenderer.invoke("copy-files-to-folder",{filePaths:e,destinationFolder:n}),getDownloadsPath:()=>r.ipcRenderer.invoke("get-downloads-path"),createFolder:e=>r.ipcRenderer.invoke("create-folder",e),copyFileToFolder:(e,n)=>r.ipcRenderer.invoke("copy-file-to-folder",{sourcePath:e,destFolder:n}),createReportZip:(e,n)=>r.ipcRenderer.invoke("create-report-zip",{folderPath:e,zipName:n}),openOutlookEmail:(e,n)=>r.ipcRenderer.invoke("open-outlook-email",{subject:e,attachmentPath:n}),extractDocumentText:e=>r.ipcRenderer.invoke("document:extract-text",e),readFileAsBuffer:e=>r.ipcRenderer.invoke("file:read-buffer",e),selectFiles:()=>r.ipcRenderer.invoke("hyperlink:select-files"),processHyperlinkDocument:(e,n)=>r.ipcRenderer.invoke("hyperlink:process-document",{filePath:e,options:n}),batchProcessDocuments:(e,n)=>r.ipcRenderer.invoke("hyperlink:batch-process",{filePaths:e,options:n}),validateApi:e=>r.ipcRenderer.invoke("hyperlink:validate-api",{apiUrl:e}),callPowerAutomateApi:(e,n,o)=>r.ipcRenderer.invoke("hyperlink:call-api",{apiUrl:e,payload:n,timeout:o}),cancelOperation:e=>r.ipcRenderer.invoke("hyperlink:cancel-operation",{operationId:e}),onBatchProgress:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("hyperlink:batch-progress",n),()=>r.ipcRenderer.removeListener("hyperlink:batch-progress",n)},onWindowMaximized:e=>{const n=o=>e();return r.ipcRenderer.on("window-maximized",n),()=>r.ipcRenderer.removeListener("window-maximized",n)},onWindowUnmaximized:e=>{const n=o=>e();return r.ipcRenderer.on("window-unmaximized",n),()=>r.ipcRenderer.removeListener("window-unmaximized",n)},onWindowFullscreen:e=>{const n=o=>e();return r.ipcRenderer.on("window-fullscreen",n),()=>r.ipcRenderer.removeListener("window-fullscreen",n)},onWindowUnfullscreen:e=>{const n=o=>e();return r.ipcRenderer.on("window-unfullscreen",n),()=>r.ipcRenderer.removeListener("window-unfullscreen",n)},exportSettings:()=>r.ipcRenderer.invoke("export-settings"),importSettings:()=>r.ipcRenderer.invoke("import-settings"),saveExportData:(e,n)=>r.ipcRenderer.invoke("save-export-data",{filePath:e,data:n}),backup:{create:e=>r.ipcRenderer.invoke("backup:create",e),restore:(e,n)=>r.ipcRenderer.invoke("backup:restore",{backupPath:e,targetPath:n}),list:e=>r.ipcRenderer.invoke("backup:list",e),delete:e=>r.ipcRenderer.invoke("backup:delete",e),cleanup:e=>r.ipcRenderer.invoke("backup:cleanup",e),cleanupAll:()=>r.ipcRenderer.invoke("backup:cleanup-all"),verify:e=>r.ipcRenderer.invoke("backup:verify",e),getStorageInfo:()=>r.ipcRenderer.invoke("backup:storage-info"),setConfig:e=>r.ipcRenderer.invoke("backup:set-config",e)},dictionary:{initialize:()=>r.ipcRenderer.invoke("dictionary:initialize"),configureSync:e=>r.ipcRenderer.invoke("dictionary:configure-sync",e),setCredentials:e=>r.ipcRenderer.invoke("dictionary:set-credentials",e),sync:()=>r.ipcRenderer.invoke("dictionary:sync"),startScheduler:e=>r.ipcRenderer.invoke("dictionary:start-scheduler",e),stopScheduler:()=>r.ipcRenderer.invoke("dictionary:stop-scheduler"),lookup:e=>r.ipcRenderer.invoke("dictionary:lookup",e),batchLookup:e=>r.ipcRenderer.invoke("dictionary:batch-lookup",e),getStatus:()=>r.ipcRenderer.invoke("dictionary:get-status"),retrieveFromSharePoint:e=>r.ipcRenderer.invoke("dictionary:retrieve-from-sharepoint",{fileUrl:e}),sharePointLogin:()=>r.ipcRenderer.invoke("dictionary:sharepoint-login"),isSharePointAuthenticated:()=>r.ipcRenderer.invoke("dictionary:is-sharepoint-authenticated"),onSyncProgress:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("dictionary:sync-progress",n),()=>r.ipcRenderer.removeListener("dictionary:sync-progress",n)},onSyncComplete:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("dictionary:sync-complete",n),()=>r.ipcRenderer.removeListener("dictionary:sync-complete",n)}},display:{getAllDisplays:()=>r.ipcRenderer.invoke("display:get-all-displays"),identifyMonitors:()=>r.ipcRenderer.invoke("display:identify-monitors"),openComparison:(e,n,o)=>r.ipcRenderer.invoke("display:open-comparison",{backupPath:e,processedPath:n,monitorIndex:o})},checkForUpdates:()=>r.ipcRenderer.invoke("check-for-updates"),downloadUpdate:()=>r.ipcRenderer.invoke("download-update"),installUpdate:()=>r.ipcRenderer.invoke("install-update"),getCurrentVersion:()=>r.ipcRenderer.invoke("get-app-version"),setUpdateProvider:e=>r.ipcRenderer.invoke("update:set-provider",e),testSharePointConnection:e=>r.ipcRenderer.invoke("update:test-sharepoint-connection",e),sharePointLogin:()=>r.ipcRenderer.invoke("update:sharepoint-login"),sharePointLogout:()=>r.ipcRenderer.invoke("update:sharepoint-logout"),onUpdateChecking:e=>{const n=o=>e();return r.ipcRenderer.on("update-checking",n),()=>r.ipcRenderer.removeListener("update-checking",n)},onUpdateAvailable:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("update-available",n),()=>r.ipcRenderer.removeListener("update-available",n)},onUpdateNotAvailable:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("update-not-available",n),()=>r.ipcRenderer.removeListener("update-not-available",n)},onUpdateError:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("update-error",n),()=>r.ipcRenderer.removeListener("update-error",n)},onUpdateDownloadProgress:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("update-download-progress",n),()=>r.ipcRenderer.removeListener("update-download-progress",n)},onUpdateDownloaded:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("update-downloaded",n),()=>r.ipcRenderer.removeListener("update-downloaded",n)},onUpdateFallbackMode:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("update-fallback-mode",n),()=>r.ipcRenderer.removeListener("update-fallback-mode",n)},onUpdateExtracting:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("update-extracting",n),()=>r.ipcRenderer.removeListener("update-extracting",n)},onUpdateStatus:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("update-status",n),()=>r.ipcRenderer.removeListener("update-status",n)},openUpdateInBrowser:()=>r.ipcRenderer.invoke("open-update-in-browser"),checkZscalerStatus:()=>r.ipcRenderer.invoke("check-zscaler-status"),getCertificatePath:()=>r.ipcRenderer.invoke("get-certificate-path"),getInstalledCertificates:()=>r.ipcRenderer.invoke("get-installed-certificates"),importCertificate:()=>r.ipcRenderer.invoke("import-certificate"),autoDetectCertificates:()=>r.ipcRenderer.invoke("auto-detect-certificates"),removeCertificate:e=>r.ipcRenderer.invoke("remove-certificate",e),testGitHubConnection:()=>r.ipcRenderer.invoke("test-github-connection"),openExternal:e=>r.ipcRenderer.invoke("open-external",e),on:(e,n)=>{if(!["window-maximized","window-unmaximized","window-fullscreen","window-unfullscreen","window-always-on-top-changed","hyperlink:batch-progress","dictionary:sync-progress","dictionary:sync-complete","update-checking","update-available","update-not-available","update-error","update-download-progress","update-downloaded","update-fallback-mode","update-extracting","update-status","update-manual-download","debug-network-request","debug-cert-error","debug-network-error","debug-tls-error","certificate-check-complete","certificate-configured"].includes(e))return console.error(`[Preload] Blocked IPC listener on disallowed channel: ${e}`),()=>{};const i=(d,...t)=>n(...t);return r.ipcRenderer.on(e,i),()=>r.ipcRenderer.removeListener(e,i)},removeListener:(e,n)=>{["window-maximized","window-unmaximized","window-fullscreen","window-unfullscreen","window-always-on-top-changed","hyperlink:batch-progress","dictionary:sync-progress","dictionary:sync-complete","update-checking","update-available","update-not-available","update-error","update-download-progress","update-downloaded","update-fallback-mode","update-extracting","update-status","update-manual-download","debug-network-request","debug-cert-error","debug-network-error","debug-tls-error","certificate-check-complete","certificate-configured"].includes(e)&&r.ipcRenderer.removeListener(e,n)},onDebugNetworkRequest:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("debug-network-request",n),()=>r.ipcRenderer.removeListener("debug-network-request",n)},onDebugCertError:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("debug-cert-error",n),()=>r.ipcRenderer.removeListener("debug-cert-error",n)},onDebugNetworkError:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("debug-network-error",n),()=>r.ipcRenderer.removeListener("debug-network-error",n)},onDebugTLSError:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("debug-tls-error",n),()=>r.ipcRenderer.removeListener("debug-tls-error",n)},onUpdateManualDownload:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("update-manual-download",n),()=>r.ipcRenderer.removeListener("update-manual-download",n)},onCertificateCheckComplete:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("certificate-check-complete",n),()=>r.ipcRenderer.removeListener("certificate-check-complete",n)},onCertificateConfigured:e=>{const n=(o,i)=>e(i);return r.ipcRenderer.on("certificate-configured",n),()=>r.ipcRenderer.removeListener("certificate-configured",n)}};r.contextBridge.exposeInMainWorld("electronAPI",c);

package/dist/index.html

@@ -0,0 +1,27 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/png" href="./icon.png" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://localhost:*; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' ws://localhost:* http://localhost:*"
+    />
+    <title>Documentation Hub</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+    <link
+      href="https://fonts.googleapis.com/css2?family=Inter:wght@100..900&display=swap"
+      rel="stylesheet"
+    />
+    <script type="module" crossorigin src="./assets/index-8xUe8ptc.js"></script>
+    <link rel="modulepreload" crossorigin href="./assets/vendor-react-BVZ_anCF.js">
+    <link rel="modulepreload" crossorigin href="./assets/vendor-ui-BU7NfluV.js">
+    <link rel="modulepreload" crossorigin href="./assets/vendor-charts-RkGK5ROP.js">
+    <link rel="stylesheet" crossorigin href="./assets/index-RYyJqF7O.css">
+  </head>
+  <body>
+    <div id="root"></div>
+  </body>
+</html>

package/docs/CODEBASE_ANALYSIS_REPORT.md

@@ -0,0 +1,309 @@
+# Documentation Hub - Codebase Architecture Review
+
+**Version:** 3.3.0
+**Analysis Date:** 2025-11-28
+**Analyst:** DiaTech
+
+---
+
+## 1. Executive Summary
+
+Documentation Hub is a professional-grade Electron desktop application for document processing workflows, built with React 19, TypeScript 5.9, and Vite 7. The application features session-based document management, hyperlink processing with PowerAutomate API integration, comprehensive styling controls, and robust backup/recovery mechanisms.
+
+**Key Strengths:**
+- Solid security fundamentals (context isolation, secure IPC, path validation)
+- Comprehensive error handling with recovery mechanisms
+- Well-organized component architecture with proper state management
+- Sophisticated corporate network support (Zscaler, proxy, certificate handling)
+
+**Areas for Improvement:**
+- Test infrastructure needs configuration (addressed in this review)
+- Some type safety gaps in IndexedDB and Electron API layers
+- Minor security enhancements needed (URL protocol validation, credential masking)
+
+---
+
+## 2. Architecture Diagram
+
+```mermaid
+graph TB
+    subgraph Electron Main Process
+        MAIN[main.ts<br/>IPC Handlers: 47 channels]
+        PRELOAD[preload.ts<br/>Context Bridge]
+        UPDATER[customUpdater.ts<br/>Auto-update + Fallbacks]
+        BACKUP[BackupService.ts<br/>SHA-256 Checksums]
+        PROXY[proxyConfig.ts<br/>Corporate Network]
+        ZSCALER[zscalerConfig.ts<br/>Certificate Detection]
+    end
+
+    subgraph React Frontend
+        APP[App.tsx<br/>Router + Providers]
+
+        subgraph Contexts
+            THEME[ThemeContext<br/>UI Customization]
+            SESSION[SessionContext<br/>1930 lines - Core State]
+            STATS[GlobalStatsContext<br/>Analytics + History]
+            SETTINGS[UserSettingsContext<br/>Preferences]
+        end
+
+        subgraph Pages
+            DASH[Dashboard]
+            CURR[CurrentSession]
+            DOCS[Documents]
+            SET[Settings]
+            ANALYTICS[Analytics]
+        end
+
+        subgraph Services
+            WORD[WordDocumentProcessor<br/>Main Orchestrator]
+            DOCX[DocXMLaterProcessor<br/>DOCX Abstraction]
+            HYPER[HyperlinkService<br/>API Integration]
+            SNAP[DocumentSnapshotService<br/>IndexedDB Snapshots]
+        end
+    end
+
+    subgraph Storage
+        IDB[(IndexedDB<br/>Sessions + Stats)]
+        LS[(localStorage<br/>Settings + Theme)]
+        FS[(File System<br/>Backups)]
+    end
+
+    MAIN --> PRELOAD
+    PRELOAD --> APP
+    MAIN --> UPDATER
+    MAIN --> BACKUP
+    MAIN --> PROXY
+    MAIN --> ZSCALER
+
+    APP --> THEME
+    APP --> SESSION
+    APP --> STATS
+    APP --> SETTINGS
+
+    SESSION --> WORD
+    WORD --> DOCX
+    WORD --> HYPER
+    WORD --> SNAP
+
+    SESSION --> IDB
+    STATS --> IDB
+    THEME --> LS
+    SETTINGS --> LS
+    BACKUP --> FS
+```
+
+---
+
+## 3. Code Quality Assessment
+
+| Area | Score | Details |
+|------|-------|---------|
+| **Type Safety** | 4/5 | Strong TypeScript usage with strict mode. Some `any` returns in IndexedDB (line 442) and Electron API (line 111). |
+| **Error Handling** | 4.5/5 | Comprehensive try-catch, backup recovery, graceful degradation. Minor gaps in storage cleanup. |
+| **Testing** | 2/5 | Test infrastructure exists but was misconfigured. Fixtures missing. Coverage needs improvement. |
+| **Performance** | 4/5 | O(1) lookups, connection pooling, debounced persistence, virtual lists. Some unnecessary re-renders possible. |
+| **Maintainability** | 4/5 | Well-organized, good separation of concerns. SessionContext too large (1930 lines). |
+
+---
+
+## 4. Findings Table
+
+| ID | Issue | Severity | Location | Recommendation |
+|----|-------|----------|----------|----------------|
+| **CRITICAL** |||||
+| C-1 | Missing Jest configuration | Critical | Root | Fixed: Added jest.config.js |
+| C-2 | Hyperlink index tracking bug | High | WordDocumentProcessor.ts:568 | Fix `i % 10` to use actual hyperlink index |
+| C-3 | Incomplete storage cleanup | High | DocumentSnapshotService.ts:446 | Implement oldest-first deletion algorithm |
+| **SECURITY** |||||
+| S-1 | URL protocol validation missing | Medium | preload.ts:194 | Add protocol whitelist for openExternal() |
+| S-2 | Weak certificate validation | Medium | main.ts:1561 | Validate X.509 structure, not just string check |
+| S-3 | Credentials not masked in logs | Medium | proxyConfig.ts:118 | Mask password in log output |
+| S-4 | GitHub certs trusted without pinning | Medium | main.ts:576 | Consider certificate pinning |
+| **TYPE SAFETY** |||||
+| T-1 | IndexedDB returns `any` type | Medium | indexedDB.ts:442 | Return `SerializedSession \| null` |
+| T-2 | processDocument returns `unknown` | Medium | electron.ts:111 | Type as `ProcessingResult` |
+| T-3 | Missing null check in truncate | Medium | indexedDB.ts:721 | Add `doc?.processingResult?.changes` guard |
+| **ARCHITECTURE** |||||
+| A-1 | SessionContext too large | Medium | SessionContext.tsx | Split into SessionListContext + SessionProcessingContext |
+| A-2 | 16 useState calls in ThemeContext | Low | ThemeContext.tsx:51-146 | Consider useReducer |
+| A-3 | Toast timeout not cleaned up | Low | useToast.tsx:22 | Add cleanup on unmount |
+| A-4 | Global state for installer path | Low | customUpdater.ts:302 | Use class property instead |
+| **PERFORMANCE** |||||
+| P-1 | getTodayStats returns new object | Low | GlobalStatsContext:246 | Memoize return value |
+| P-2 | Multiple theme useEffect hooks | Low | ThemeContext:150-342 | Consolidate into fewer effects |
+| **DEPRECATED** |||||
+| D-1 | Deprecated session fields | Low | session.ts:202-216 | Remove `appendContentId`, `contentIdToAppend` |
+
+---
+
+## 5. Priority Actions (Impact/Effort Ranked)
+
+### 1. Fix Jest Configuration ✅ DONE
+- **Impact:** High - Enables test development and CI/CD
+- **Effort:** Low
+- **Status:** Completed in this review
+
+### 2. Fix Hyperlink Index Tracking Bug
+- **Impact:** High - Incorrect change reports affect user trust
+- **Effort:** Low
+- **Location:** `src/services/document/WordDocumentProcessor.ts:568, 613, 686`
+- **Fix:** Store hyperlink index during extraction, pass through to change tracking
+
+### 3. Add URL Protocol Validation
+- **Impact:** High - Security vulnerability
+- **Effort:** Low
+- **Location:** `electron/preload.ts:194`
+- **Fix:**
+```typescript
+openExternal: (url: string) => {
+  const parsed = new URL(url);
+  if (!['http:', 'https:', 'mailto:'].includes(parsed.protocol)) {
+    throw new Error('Only http/https/mailto URLs allowed');
+  }
+  return shell.openExternal(url);
+}
+```
+
+### 4. Implement Storage Cleanup
+- **Impact:** Medium - Prevents storage exhaustion
+- **Effort:** Medium
+- **Location:** `src/services/document/DocumentSnapshotService.ts:446-466`
+- **Fix:** Implement oldest-first deletion when exceeding 100MB limit
+
+### 5. Improve Type Safety in IndexedDB
+- **Impact:** Medium - Better developer experience
+- **Effort:** Low
+- **Location:** `src/utils/indexedDB.ts:442`
+- **Fix:** Change return type from `any` to `SerializedSession | null`
+
+---
+
+## 6. Technical Debt Inventory
+
+### Immediate (Next Sprint)
+- [ ] Fix hyperlink index tracking (C-2)
+- [ ] Add URL protocol validation (S-1)
+- [ ] Mask credentials in logs (S-3)
+- [ ] Fix IndexedDB type safety (T-1, T-2, T-3)
+
+### Short-term (Next Release)
+- [ ] Implement storage cleanup (C-3)
+- [ ] Validate X.509 certificates (S-2)
+- [ ] Split SessionContext (A-1)
+- [ ] Add toast cleanup (A-3)
+
+### Medium-term (Backlog)
+- [ ] Refactor ThemeContext with useReducer (A-2)
+- [ ] Add certificate pinning (S-4)
+- [ ] Memoize GlobalStats selectors (P-1)
+- [ ] Remove deprecated session fields (D-1)
+- [ ] Consolidate theme effects (P-2)
+
+### Long-term (Future Consideration)
+- [ ] Add comprehensive test coverage (target 80%)
+- [ ] Implement memory leak detection
+- [ ] Add performance monitoring
+- [ ] Consider Web Workers for large document processing
+
+---
+
+## 7. Module Summary
+
+### Electron Layer (8 files, ~4,500 lines)
+| Module | Responsibility | Key Concerns |
+|--------|---------------|--------------|
+| main.ts | IPC handlers, window management | 47 IPC channels, security settings |
+| preload.ts | Context bridge API | URL validation needed |
+| customUpdater.ts | Auto-update with 4 fallback strategies | Global state usage |
+| BackupService.ts | SHA-256 checksums, 7-day retention | Clean implementation |
+| proxyConfig.ts | Corporate proxy detection | Credential logging concern |
+| zscalerConfig.ts | Certificate discovery (12 locations) | Complex but comprehensive |
+
+### React Layer (45+ components, ~10,000 lines)
+| Module | Responsibility | Key Concerns |
+|--------|---------------|--------------|
+| SessionContext | Core state management (1930 lines) | Too large, should split |
+| ThemeContext | UI customization | Many useState calls |
+| GlobalStatsContext | Analytics + history | Good connection pooling |
+| WordDocumentProcessor | Document pipeline orchestrator | Index tracking bug |
+| HyperlinkService | PowerAutomate API integration | Good retry logic |
+| DocumentSnapshotService | IndexedDB snapshots | Storage cleanup incomplete |
+
+### Utilities (13 files, ~2,500 lines)
+| Module | Responsibility | Key Concerns |
+|--------|---------------|--------------|
+| indexedDB.ts | Connection pool + persistence | Type safety gaps |
+| logger.ts | Structured logging + sanitization | Unix path pattern incomplete |
+| pathSecurity.ts | Path traversal prevention | Excellent defense-in-depth |
+| urlSanitizer.ts | XSS prevention | Good protocol whitelist |
+| MemoryMonitor.ts | Heap tracking + checkpoints | Duplicate field |
+
+---
+
+## 8. Recommendations Summary
+
+### Security
+1. Validate URL protocols before opening external links
+2. Validate X.509 certificate structure on import
+3. Mask proxy credentials in log output
+4. Consider certificate pinning for GitHub updates
+
+### Code Quality
+1. Fix Jest configuration for test development
+2. Fix hyperlink index tracking in change reports
+3. Improve IndexedDB return types
+4. Add null checks in session truncation
+
+### Architecture
+1. Split SessionContext into smaller focused contexts
+2. Refactor ThemeContext to use useReducer
+3. Consolidate theme-related useEffect hooks
+4. Clean up toast timeouts on unmount
+
+### Performance
+1. Memoize GlobalStats selector returns
+2. Implement storage cleanup to prevent exhaustion
+3. Consider lazy loading for heavy components
+4. Add memory leak detection
+
+---
+
+## 9. Appendix: IPC Channel Reference
+
+<details>
+<summary>Click to expand IPC channel list (47 total)</summary>
+
+### Window Management (6)
+- `window-minimize`, `window-maximize`, `window-close`
+- `window-is-maximized`, `window-is-fullscreen`, `app-version`
+
+### File Operations (9)
+- `select-documents`, `process-document`, `show-in-folder`
+- `open-document`, `get-file-stats`, `restore-from-backup`
+- `file:read-buffer`, `document:extract-text`, `open-comparison-window`
+
+### Hyperlink Processing (5)
+- `hyperlink:select-files`, `hyperlink:process-document`
+- `hyperlink:batch-process`, `hyperlink:validate-api`, `hyperlink:cancel-operation`
+
+### Backup Management (8)
+- `backup:create`, `backup:restore`, `backup:list`, `backup:delete`
+- `backup:cleanup`, `backup:cleanup-all`, `backup:verify`, `backup:storage-info`
+
+### Certificate Management (7)
+- `check-zscaler-status`, `get-certificate-path`, `get-installed-certificates`
+- `import-certificate`, `auto-detect-certificates`, `remove-certificate`, `test-github-connection`
+
+### Auto-Updater (4)
+- `check-for-updates`, `download-update`, `install-update`, `open-update-in-browser`
+
+### Settings & Misc (8)
+- `export-settings`, `import-settings`, `save-export-data`
+- `platform`, `open-dev-tools`, window events
+
+</details>
+
+---
+
+**Report Generated By:** DiaTech
+**Commit:** See git history for fixes applied during review

package/docs/DEBUG_LOGGING_GUIDE.md

@@ -0,0 +1,244 @@
+# Debug Logging Guide - Document Processing Issues
+
+## Overview
+
+Added diagnostic logging to trace three issues:
+
+1. Blank lines missing after 1x1 tables
+2. TOC showing placeholder instead of generated entries
+3. Wrong bullet symbols (squares instead of user-selected)
+
+## What Was Added
+
+### 1. Blank Lines After 1x1 Tables (Lines 705-730)
+
+**Logs to Watch:**
+
+```
+=== DEBUG: BLANK LINES AFTER 1x1 TABLES CHECK ===
+  preserveBlankLinesAfterHeader2Tables option: [true/false]
+  removeParagraphLines option: [true/false]
+```
+
+**Key Diagnostics:**
+
+- If `preserveBlankLinesAfterHeader2Tables: false` → Issue is in UI option propagation
+- If `preserveBlankLinesAfterHeader2Tables: true` → Check the result object:
+  ```
+  ✓ Processed X 1x1 tables: Added Y blank lines, Marked Z existing blank lines as preserved
+  ```
+- If `tablesProcessed = 0` → No 1x1 tables detected (possible detection bug in docxmlater)
+- If `blankLinesAdded > 0` but lines still missing → Check preserved paragraph removal
+
+### 2. Preserved Paragraph Removal Check (Line 1698)
+
+**Logs to Watch:**
+
+```
+⚠️ Paragraph X or Y is PRESERVED - skipping deletion
+```
+
+**Key Diagnostics:**
+
+- If you see this log for paragraphs after 1x1 tables → Good, preservation is working
+- If you DON'T see this log → Preserved flag is not being set by `ensureBlankLinesAfter1x1Tables()`
+- This indicates a bug in docxmlater's markAsPreserved functionality
+
+### 3. TOC Option Propagation (Lines 955-973)
+
+**Logs to Watch:**
+
+```
+=== DEBUG: TOC OPTION CHECK ===
+  operations object defined: [true/false]
+  updateTocHyperlinks value: [true/false/undefined]
+```
+
+**Key Diagnostics:**
+
+- If `operations object defined: false` → UI is not passing operations object
+- If `updateTocHyperlinks value: false` → Option is not being set by UI checkbox
+- If `updateTocHyperlinks value: true`:
+
+  ```
+  ✓ Replaced X Table of Contents element(s) with generated entries
+  ```
+
+  - If X = 0 → No TOC field exists in document
+  - If X > 0 → TOC was replaced successfully, but placeholder may be from a different source
+
+### 4. Bullet Uniformity Execution (Lines 818-848, 2830-2835)
+
+**Logs to Watch:**
+
+```
+=== DEBUG: BULLET UNIFORMITY CHECK ===
+  bulletUniformity option: [true/false]
+  listBulletSettings defined: [true/false]
+  Indentation levels: X
+    Level 0: bulletChar="•" (or default), symbolIndent=0.25, textIndent=0.5
+```
+
+**Then during execution:**
+
+```
+=== DEBUG: BULLET UNIFORMITY EXECUTION ===
+  Creating X bullet list levels
+  Bullet characters: "•" (U+2022), "○" (U+25CB), etc.
+  Level 0: bulletChar="•", symbolIndent=0.25", textIndent=0.5"
+```
+
+**Key Diagnostics:**
+
+- If `bulletUniformity: false` → Option not enabled in UI
+- If `listBulletSettings defined: false` → Settings not being passed from UI
+- Check bullet character values:
+  - Square (■) = U+25A0 or U+F0A0 (wrong)
+  - Correct bullet (•) = U+2022
+  - Default Symbol font bullet = U+F0B7
+- If creating levels but bullets still wrong → Check if NumberingLevel is using correct font
+
+## How to Use This Logging
+
+### Step 1: Process a Document
+
+1. Enable the problematic options:
+   - ✓ Preserve blank lines after Header 2 tables
+   - ✓ Update TOC hyperlinks
+   - ✓ Bullet uniformity
+2. Process a test document
+3. Open the console/log viewer
+
+### Step 2: Analyze Each Issue
+
+#### Issue 1: Blank Lines After 1x1 Tables
+
+**Look for this sequence:**
+
+```
+=== DEBUG: BLANK LINES AFTER 1x1 TABLES CHECK ===
+  preserveBlankLinesAfterHeader2Tables option: true  ← Should be true
+  removeParagraphLines option: true
+
+=== ENSURING BLANK LINES AFTER 1x1 TABLES ===
+  Calling doc.ensureBlankLinesAfter1x1Tables() with markAsPreserved=true
+✓ Processed 5 1x1 tables: Added 3 blank lines, Marked 2 existing blank lines as preserved
+  DEBUG: Result details - {"tablesProcessed":5,"blankLinesAdded":3,"existingLinesMarked":2}
+
+=== REMOVING EXTRA PARAGRAPH LINES ===
+  DEBUG: Before removal - total paragraphs: 150
+⚠️ Paragraph 45 or 46 is PRESERVED - skipping deletion  ← Should see this for each preserved line
+  DEBUG: After removal - total paragraphs: 140
+Removed 10 extra paragraph lines
+```
+
+**Possible Root Causes:**
+
+1. **Option is false** → UI not passing option correctly
+2. **No tables processed** → docxmlater not detecting 1x1 tables (check table detection logic)
+3. **Blank lines added but then removed** → Preserved flag not working (check preservation in paragraph removal)
+4. **No "PRESERVED" warnings** → markAsPreserved not setting flag correctly
+
+#### Issue 2: TOC Placeholder
+
+**Look for this sequence:**
+
+```
+=== DEBUG: TOC OPTION CHECK ===
+  operations object defined: true  ← Should be true
+  updateTocHyperlinks value: true  ← Should be true
+
+=== GENERATING/UPDATING TABLE OF CONTENTS ===
+  Calling doc.replaceTableOfContents() on file: C:\...\document.docx
+✓ Replaced 1 Table of Contents element(s) with generated entries
+```
+
+**Possible Root Causes:**
+
+1. **Option value is false/undefined** → UI checkbox not setting operations.updateTocHyperlinks
+2. **Replaced 0 elements** → No TOC field in document (need to insert TOC field in Word first)
+3. **Replaced > 0 but still shows placeholder** → May be a different TOC field or cached view in Word
+
+#### Issue 3: Wrong Bullet Symbols
+
+**Look for this sequence:**
+
+```
+=== DEBUG: BULLET UNIFORMITY CHECK ===
+  bulletUniformity option: true  ← Should be true
+  listBulletSettings defined: true  ← Should be true
+  Indentation levels: 3
+    Level 0: bulletChar="•", symbolIndent=0.25, textIndent=0.5  ← Check character
+
+=== APPLYING BULLET AND NUMBERED LIST UNIFORMITY ===
+=== DEBUG: BULLET UNIFORMITY EXECUTION ===
+  Creating 3 bullet list levels
+  Bullet characters: "•" (U+2022), "○" (U+25CB), "▪" (U+25AA)  ← Check Unicode values
+  Level 0: bulletChar="•", symbolIndent=0.25", textIndent=0.5"
+```
+
+**Possible Root Causes:**
+
+1. **Square symbol (■) appearing:**
+   - Check if UI is passing wrong character (U+25A0 instead of U+2022)
+   - Check if font is Symbol (uses different code points)
+   - Check if NumberingLevel is overriding bulletChar with default
+2. **Correct character logged but wrong in document:**
+   - Font issue (Calibri vs Symbol vs Verdana)
+   - NumberingLevel not respecting bulletChar parameter
+   - XML corruption in numbering.xml
+
+### Step 3: Report Findings
+
+For each issue, report:
+
+1. What the logs showed
+2. Which diagnostic condition matched
+3. The suspected root cause
+4. Where in the code the fix is needed
+
+## Expected Next Steps
+
+Based on log output, we may need to:
+
+1. **For blank lines issue:**
+   - Fix UI option passing if preserveBlankLinesAfterHeader2Tables is false
+   - Debug docxmlater's ensureBlankLinesAfter1x1Tables() if no tables detected
+   - Fix preserved paragraph detection in removeExtraParagraphLines()
+
+2. **For TOC issue:**
+   - Fix UI operations.updateTocHyperlinks checkbox binding
+   - Verify TOC field exists in Word document
+   - Check Word's field cache/update mechanism
+
+3. **For bullet symbols:**
+   - Correct bulletChar value in UI settings
+   - Fix font handling in NumberingLevel creation
+   - Verify XML injection in numbering.xml
+
+## Quick Reference: Log Patterns
+
+### ✓ Success Patterns
+
+```
+✓ Processed 5 1x1 tables: Added 3 blank lines
+⚠️ Paragraph X is PRESERVED - skipping deletion
+✓ Replaced 1 Table of Contents element(s)
+Bullet characters: "•" (U+2022)
+```
+
+### ⚠️ Warning Patterns
+
+```
+⚠️ preserveBlankLinesAfterHeader2Tables is FALSE
+⚠️ No TOC elements found in document
+bulletUniformity option: false
+```
+
+### ❌ Error Patterns
+
+```
+Processed 0 1x1 tables (should have found some)
+operations object defined: false (should be true)
+listBulletSettings defined: false (should be true)
+```