wangxuming/makelore
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

docs(web-search): record client review and artifact proof

Browse Source
This commit is contained in:
brother7
2026-09-01 05:16:09 +08:00
parent 4de3feefe4
commit b9a1441cc8
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
.project-docs/30-worklog/tasks/20260831-web-search-client-integration-7d2f5b94.md
View File

@@ -51,6 +51,10 @@
- Product commit: `49de82c4860fd0b377070279b6411237dc6b9564`; source and product trees are exact-equal at `d40e90619406b822485ef2729e373fc4587a42d1` before this Integration Documentation Gate removes the duplicate foreign task record.
- The remediation is limited to `electron/services/web-search-client.ts` and its focused tests. It makes HTTP 429 non-retryable from status before bounded body parsing, enforces a true streamed 1 MiB bound, closes result/billing/error combinations, and accepts only bounded absolute HTTP(S) source URLs without userinfo.
- The clean source branch retains its complete task record. This coordinator checkpoint removes only its cherry-picked duplicate and advances the frontier for fresh fixed-range review.
- Fresh R2 review over `0a86ec825a5803bf7e037d3b23c39be23238c43d...4de3feefe451dc34dc46b323e2ea5e0b4e4840e8` completed with both axes PASS and zero actionable findings.
- Standards task `20260901-web-search-rev01-client-standards-r2-7a2e4c91` reviewed the full range and remediation boundary with zero Standards/Fowler findings.
- Spec task `20260901-web-search-rev01-client-spec-r2-6b7e4a2c` confirmed all four response-boundary findings closed and rechecked admission, reconciliation, trusted Main identity, envelope, parent-only materialization, composition, package proof, and exclusions.
- The exact reviewed head `4de3feefe451dc34dc46b323e2ea5e0b4e4840e8` was packaged locally for Windows without publish. Artifact verification embedded the same exact commit and retained fail-closed production trust; no live Provider or production credential was used.
## Verification
@@ -66,10 +70,11 @@
- MLW-03 full unit suite passed 214 files / 1,751 tests with two staged-runtime skips; pressure passed 1/1. Typecheck, scoped lint, full lint (zero errors and the unchanged five warnings), Vite builds, Electron Windows 6/6, and target Marketplace/Project Plugins/Skill E2E 4/4 passed.
- Clean source HEAD Windows packaging and verification passed. `verify:artifact:win` embedded exact commit `52f6a0b148403c822a09880467f81416a181b259`; installer size was 208,252,221 bytes with SHA-256 `2D027DB5BE00336F1EB45D882519F971EB791014A1930C5FBED93FE6B15B6303`. `verify:artifact:pi` passed the real app.asar Web Search route/receipt/provider-authority proof; inherited Pi cross-platform/real-provider waivers remain unchanged.
- Client remediation TDD recorded eight exact red cases and finished with `16/16` focused tests; adjacent response/admission tests passed `27/27`. The full unit suite passed `1,759` tests with two staged-runtime skips and pressure passed `1/1`; typecheck passed and lint reported zero errors plus the unchanged five warnings. Source diff, documentation, sole-parent, clean-worktree, and `READY_FOR_INTEGRATION` gates passed.
- Fresh Client R2 Standards and Spec reviews both passed with zero findings. The exact-head Windows build/package passed; `verify:artifact:win`, `verify:artifact:pi`, and `verify:publish-runtime` passed. The installer is 208,252,520 bytes with SHA-256 `2492F88BB6F813834ECD24B392EB8337220E131E746547851393E4885C4B5BEF`; `app.asar` is 131,258,191 bytes with SHA-256 `27EFABBB741F0A62CB58452801DD1D8893B8E5131EA1D30F74D610DEAD3F7A1D`. The inherited Pi cross-platform/real-provider evidence remains an explicit partial-pass waiver, not a Web Search failure.
## Follow-ups
- Run fresh fixed-range Standards and Spec review from client base `0a86ec825a5803bf7e037d3b23c39be23238c43d` through the clean post-remediation documentation frontier. XWS-01 remains closed until both fresh axes and both repositories pass.
- Client implementation and fixed-range review are complete. XWS-01 remains externally blocked because its twelve live groups require disposable PostgreSQL 16 and an exact packaged signed-in environment; do not substitute SQLite. The paid OpenAI group and production activation remain separate explicit HOLDs.
- Keep real PostgreSQL, the live paid OpenAI XWS-01 group, and production activation closed pending their explicit external inputs and user authorization.
## Promotion Candidates