Martin Vogel 62af5b87ee feat(ui): wire CodeAtlasWeb into the build, the dev-proxy contract and the CSP ...

Maintainer glue for the imported frontend; no product behaviour of the
UI itself changes.

- Makefile.cbm: `npm ci` runs with PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1.
  The UI's dev dependencies include playwright for its local browser
  proofs, and a plain install would download browsers that no build or
  gate launches.
- graph-ui/vite.config.ts: the dev server listens on 5173 with the two
  literal loopback origins, which is what
  tests/test_ui_dev_proxy_security.sh pins.
- graph-ui/index.html: lang="en"; the catalog is English.
- CSP: the directive string moves to http_server.h as CBM_UI_CSP_VALUE
  so a test can pin it, and connect-src now admits the two loopback
  services the UI may talk to when the reader starts them, the
  local-model sidecar on 127.0.0.1:4141 and the agent-event bridge on
  127.0.0.1:4142. Under connect-src 'self' both fetches were silently
  blocked in the embedded build. Every other host stays forbidden; a
  new httpd test asserts that the only hosts in the policy are those
  two loopback ports.
- scripts/security-ui.sh: two false positives that bit on the imported
  source. The analytics pattern matched the English word "plausible"
  (now plausible.io), and `\s` inside an ERE bracket is a literal
  backslash and 's', which cut every localhost URL at its first 's' and
  then failed the allowlist (now [:space:]).

Verified: httpd suite 64 passed; dev-proxy contract and UI security
audit pass; graph-ui builds and its 2024 vitest tests pass.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-09-05 20:15:13 +02:00

..

fixtures

fix(release): externalize runtime assets and harden VT verification

2026-08-08 17:35:05 +02:00

repro

fix(tests): portable env calls in the parallel-determinism repro

2026-08-03 01:51:30 +02:00

windows

fix(install,daemon): unbreak npx clients, group-writable homes, and legacy updaters

2026-08-11 13:37:32 +02:00

grammar_cases.h

Add per-grammar regression suite across all 159 grammars

2026-06-05 21:53:25 +02:00

scale_contract.sh

Add per-grammar regression suite across all 159 grammars

2026-06-05 21:53:25 +02:00

smoke_guard.sh

feat: add coverage-aware agent integrations

2026-07-13 01:50:03 +02:00

test_ac.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_activation_transaction.c

fix(install,daemon): unbreak npx clients, group-writable homes, and legacy updaters

2026-08-11 13:37:32 +02:00

test_agent_clients.c

test(pi): pin result wrap, error throw, and abort in generated adapter

2026-08-21 04:11:51 +02:00

test_agent_profiles.c

fix(install): declare a transport in generated Codex agent role TOMLs

2026-08-01 17:36:21 +04:00

test_arena.c

fix(arena): NULL-arena guard in cbm_arena_alloc; skip vendored/ dirs

2026-05-30 18:26:44 +02:00

test_artifact.c

fix(artifact): snapshot exports consistently and refuse corrupt imports

2026-07-11 03:28:32 +02:00

test_ast_profile.c

fix: char buf[1] = "X" → {'X'} for -Wunterminated-string-initialization on Windows/clang

2026-06-29 09:45:28 -06:00

test_build_dir_safety.sh

fix(daemon,win): CI-green fixes and a daemon-stability guard

2026-07-22 17:48:20 +02:00

test_c_lsp.c

fix(release): externalize runtime assets and harden VT verification

2026-08-08 17:35:05 +02:00

test_call_reference_contract.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_cli.c

test(cli): clean up before failing the install-plan receipt fixture

2026-08-20 21:36:57 +02:00

test_complexity.c

fix(test): convert forbidden SKIP()s in the complexity suite to policy forms

2026-08-17 00:16:15 +02:00

test_config_json_like.c

feat(cli): expand agent integration coverage

2026-07-13 01:50:02 +02:00

test_config_text_edit.c

fix: eliminate installer filesystem races

2026-07-14 21:13:52 +02:00

test_config_toml_edit.c

test(cli): cover v0.10.2 Codex hook upgrades

2026-08-15 10:37:24 +03:00

test_config_yaml_edit.c

fix(yaml): accept a UTF-8 BOM as a document prologue (#1656)

2026-08-17 04:54:14 +02:00

test_configlink.c

fix(configlink): order candidates canonically before the collector cap

2026-08-06 08:24:23 -04:00

test_convergence_probe.c

test(extract): bind the Java interface/enum method dedup fix (#1234)

2026-08-04 16:37:06 +02:00

test_cpp_index_hang.sh

Fix O(n^2) overload resolution in the C/C++ cross-LSP registry (#410)

2026-06-06 22:16:04 +02:00

test_cross_repo.c

fix(cross-repo): stop a "::missed" shadow row making a project unresolvable

2026-08-15 08:44:20 +02:00

test_cs_lsp_bench.c

fix(build): give sanitized-build detection one spelling and a backstop

2026-08-14 06:46:05 -04:00

test_cs_lsp.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_cypher.c

fix(test): retire the last stub-era ingest probes; unfork the cypher guard

2026-08-27 23:19:30 +02:00

test_daemon_application.c

fix(release): externalize runtime assets and harden VT verification

2026-08-08 17:35:05 +02:00

test_daemon_bootstrap.c

fix(daemon): let a shipped build relocate the rendezvous via CBM_RUNTIME_DIR

2026-08-14 20:04:08 +02:00

test_daemon_frontend.c

fix(build): give sanitized-build detection one spelling and a backstop

2026-08-14 06:46:05 -04:00

test_daemon_ipc.c

fix(daemon): admit a group-writable ancestor, and stop inventing an errno (#1537)

2026-08-12 12:47:59 +02:00

test_daemon_open_readiness.py

revert(release): re-embed runtime assets into the single shipped binary

2026-08-09 13:06:42 +02:00

test_daemon_runtime_contract.h

fix: stabilize cross-platform daemon coordination

2026-07-18 11:48:59 +02:00

test_daemon_runtime.c

fix(test): retire the last stub-era ingest probes; unfork the cypher guard

2026-08-27 23:19:30 +02:00

test_daemon_smoke.py

fix(install,daemon): unbreak npx clients, group-writable homes, and legacy updaters

2026-08-11 13:37:32 +02:00

test_daemon_version.c

feat: complete shared daemon lifecycle

2026-07-18 01:26:08 +02:00

test_daemon.c

feat: complete shared daemon lifecycle

2026-07-18 01:26:08 +02:00

test_destructive_ordering_contract.sh

test(install): pin that index deletion runs after every abortable step (#1558)

2026-08-13 14:04:51 +02:00

test_diagnostics.c

feat(diagnostics): make superlinear passes visible from an ordinary run

2026-08-16 13:12:25 +02:00

test_discover.c

Merge pull request #1203 from ibaldr89/fix/extensionless-shebang-language

2026-08-18 00:14:17 +02:00

test_dump_verify_io.c

Add post-dump plausibility gate returning status:degraded (#334)

2026-06-23 06:38:45 +09:00

test_dump_verify.c

Add post-dump plausibility gate returning status:degraded (#334)

2026-06-23 06:38:45 +09:00

test_dyn_array.c

Fix Windows build: add missing stdint.h include in test_dyn_array

2026-03-25 09:28:11 +01:00

test_edge_imports.c

fix(test): free the fixture project name before reindexing

2026-08-06 18:15:48 +02:00

test_edge_structural.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_edge_types_probe.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_extraction_imports.c

Add language-agnostic extraction reproduction suite (inheritance + imports)

2026-06-07 12:35:53 +02:00

test_extraction_inheritance.c

Fix CI lint: drop debug scaffolding, make lisp import walker iterative, apply clang-format

2026-06-08 22:55:23 +02:00

test_extraction.c

test(java): pin enum constants surviving alongside enum methods

2026-08-20 18:42:26 +02:00

test_fqn.c

fix(fqn): preserve full filename in File-node QNs so sibling files don't collide

2026-07-16 01:21:45 +02:00

test_framework.h

Forbid test skips and convert existing skips to hard failures

2026-06-05 21:53:25 +02:00

test_git_context.c

fix(test): guard git_context git helpers behind #ifndef _WIN32

2026-07-02 00:37:52 +02:00

test_gitignore.c

fix(test): guard the POSIX-only includes in the gitignore test

2026-08-06 03:30:32 +02:00

test_go_lsp.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_grammar_imports.c

Add per-grammar regression suite across all 159 grammars

2026-06-05 21:53:25 +02:00

test_grammar_labels.c

feat(sql): first-class Table/View nodes with FROM/JOIN lineage

2026-08-20 00:12:28 +02:00

test_grammar_probe_a.c

Add grammar-only probe suites (~35 code grammars); +1 new root-cause class

2026-06-07 19:13:01 +02:00

test_grammar_probe_b.c

Add grammar-only probe suites (~35 code grammars); +1 new root-cause class

2026-06-07 19:13:01 +02:00

test_grammar_probe_c.c

Add grammar-only probe suites (~35 code grammars); +1 new root-cause class

2026-06-07 19:13:01 +02:00

test_grammar_probe_d.c

fix(test): resolve 18 make-test regressions from the marathon batch

2026-06-27 16:23:26 +02:00

test_grammar_probe_e.c

Complete 159-grammar coverage: IDL/template/IaC/markup/remaining-code probes; +1 new class

2026-06-07 20:05:24 +02:00

test_grammar_probe_f.c

Complete 159-grammar coverage: IDL/template/IaC/markup/remaining-code probes; +1 new class

2026-06-07 20:05:24 +02:00

test_grammar_probe_g.c

feat(sql): first-class Table/View nodes with FROM/JOIN lineage

2026-08-20 00:12:28 +02:00

test_grammar_regression.c

Add Mojo language wiring

2026-07-08 00:05:19 +05:30

test_graph_buffer.c

fix(graph_buffer): merge duplicate-edge properties commutatively

2026-08-06 08:26:45 -04:00

test_hash_table.c

perf(foundation): swap CBMHashTable internals to Verstable v2.2.1

2026-05-21 22:52:16 +02:00

test_helpers.h

fix: harden daemon release paths and verification

2026-07-24 16:08:42 +02:00

test_hook_conflict_notice.sh

fix(test): isolate harness daemon runtimes

2026-08-17 22:07:11 +03:00

test_httpd.c

feat(ui): wire CodeAtlasWeb into the build, the dev-proxy contract and the CSP

2026-09-05 20:15:13 +02:00

test_incremental.c

fix(mcp): tell the truth about pre-publication index aborts

2026-08-28 02:07:53 +02:00

test_index_resilience.c

fix(index): preserve persisted coverage summaries

2026-07-28 20:46:29 +00:00

test_index_supervisor.c

fix(index): make a crashed worker's log survive and name the run

2026-08-14 20:01:06 +02:00

test_infrascan.c

fix: Reject filesystem paths in HTTP_CALLS route extraction so client routes can join server routes (#485)

2026-06-22 22:04:31 +02:00

test_integration.c

Merge remote-tracking branch 'origin/main' into feat/shared-coordination-daemon

2026-07-18 13:48:06 +02:00

test_java_lsp_coverage.c

feat(lsp): Java hybrid LSP resolver (type-aware calls, annotations, signatures)

2026-06-02 18:52:37 +02:00

test_java_lsp.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_kotlin_lsp.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_lang_contract.c

Merge pull request #1065 from tmonestudio/codex/fix-json-edge-properties

2026-08-20 19:11:33 +02:00

test_language.c

Merge pull request #605 from CooperSheroy/catalina/docs-contributing-current-suite-20260624

2026-07-31 03:42:43 +02:00

test_lock_registry.c

fix: harden cross-platform daemon startup smoke

2026-07-18 14:38:07 +02:00

test_log.c

fix(logging): use local log schema

2026-06-28 13:05:05 +02:00

test_lsp_resolution_probe.c

fix(test): free the fixture project name before reindexing

2026-08-06 18:15:48 +02:00

test_lz4.c

Resolve all clang-tidy, cppcheck, and clang-format warnings across 94 files

2026-03-15 22:37:34 +01:00

test_main.c

test(complexity): deterministic O(n^2) guard on work-counter ratios

2026-08-16 18:43:44 +02:00

test_makefile_ts_runtime_dependencies.sh

feat: complete shared daemon lifecycle

2026-07-18 01:26:08 +02:00

test_matrix_known_classes.c

Fix CI lint: drop debug scaffolding, make lisp import walker iterative, apply clang-format

2026-06-08 22:55:23 +02:00

test_matrix_new_constructs.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_mcp.c

fix(test): cancel-probe tools updated to the real ingest_traces contract

2026-08-27 22:51:35 +02:00

test_mcpb_bundle_contract.sh

ci: select release binaries before smoke testing

2026-08-13 19:16:19 +02:00

test_mcpb_registry_entries_contract.sh

fix(release): restore exec bits on the new mcpb scripts

2026-08-11 17:01:24 +02:00

test_mem.c

fix(mem): restore mimalloc's Linux arena-commit default (#1654)

2026-08-16 03:23:05 +02:00

test_node_creation_probe.c

Drop the nim grammar and refresh language counts

2026-06-12 02:17:39 +02:00

test_nomic_blob_generator_contract.sh

fix(build): stop blob regeneration from reverting the ELF stack hardening

2026-08-20 21:20:44 +02:00

test_parallel_harness_contract.sh

test: make three Windows nondeterminisms deterministic

2026-07-29 17:05:10 +02:00

test_parallel.c

feat(pipeline): serialize and publish per-file LSP surfaces

2026-08-03 17:44:52 +02:00

test_parent_watchdog.sh

fix(test): isolate harness daemon runtimes

2026-08-17 22:07:11 +03:00

test_parse_coverage.c

test(parse-coverage): free the extraction results in the #1610 tests

2026-08-15 17:22:59 +02:00

test_path_alias.c

fix(pipeline): honor discovery exclusions in pkgmap/path-alias/envscan walks

2026-07-03 19:57:01 +02:00

test_perl_lsp.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_php_lsp.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_pipeline.c

feat(dbt): extract dbt model lineage from Jinja-templated SQL

2026-08-20 10:23:48 +02:00

test_platform.c

fix(platform): isolate concurrent temporary directories

2026-08-14 06:11:05 +03:00

test_private_file_lock.c

feat: complete shared daemon lifecycle

2026-07-18 01:26:08 +02:00

test_project_lock.c

feat: complete shared daemon lifecycle

2026-07-18 01:26:08 +02:00

test_py_lsp_bench.c

test(bench): make the py-lsp time budget a liveness backstop, not a perf gate

2026-08-10 16:40:31 +02:00

test_py_lsp_scale.c

fix(watcher): FILETIME-precision dirty signatures; flaky-family rebuilds

2026-08-28 09:14:40 +02:00

test_py_lsp_stress.c

feat(py_lsp): close all stress gaps — lambda, dict-dispatch, async, callable, next, kwargs

2026-05-09 14:16:15 +02:00

test_py_lsp.c

wip: capture remaining semantic reference regressions

2026-07-18 15:52:50 +02:00

test_registry.c

Merge pull request #1371 from Joseph-MingEn/fix/py-aliased-from-import-calls

2026-08-18 11:19:19 +02:00

test_release_archive_extractor_contract.sh

feat(release): ship MCPB bundles and publish them to the MCP Registry (#1246)

2026-08-11 17:01:24 +02:00

test_release_candidate_derivation_contract.sh

feat(ci): add a third release candidate (debug-stripped) as an extra VT draw

2026-08-13 23:52:21 +02:00

test_release_gate_chain_contract.sh

test: gate-chain contract pins the explicit-result conditions

2026-08-18 22:30:28 +02:00

test_route_canon.c

fix(routes): canonicalize path parameters so client calls match handlers

2026-06-23 13:52:08 -03:00

test_runtime_isolation_contract.sh

fix(test): isolate harness daemon runtimes

2026-08-17 22:07:11 +03:00

test_rust_lsp.c

fix: preserve semantic graph relationships

2026-07-18 15:52:50 +02:00

test_scope.c

wip: capture remaining semantic reference regressions

2026-07-18 15:52:50 +02:00

test_script_exec_bit_contract.sh

fix(ci): mark the new lane scripts executable, and let the contract see them

2026-08-03 15:42:32 +02:00

test_security_fuzz_harness.sh

fix(test): isolate harness daemon runtimes

2026-08-17 22:07:11 +03:00

test_security_strings_allowlist.sh

fix(security-strings): audit .mcpb manifests as structured text, not as binaries

2026-08-12 20:57:43 +02:00

test_security.c

fix(release): externalize runtime assets and harden VT verification

2026-08-08 17:35:05 +02:00

test_semantic.c

feat: complete shared daemon lifecycle

2026-07-18 01:26:08 +02:00

test_shell_line_endings.sh

fix(build): LF contract for extensionless git hooks + a line-ending guard

2026-08-18 11:21:36 +02:00

test_simhash.c

test(similarity): cover the empty-graph qsort null base (#1367)

2026-08-06 18:33:13 +02:00

test_slab_alloc.c

test: add 56 unit tests for semantic, slab_alloc, and ast_profile modules

2026-06-28 21:57:35 -06:00

test_smoke_fixture_contract.sh

test(cli): neutralize ambient client home overrides in the C runner

2026-08-13 16:36:27 -04:00

test_soak_daemon_recovery_contract.sh

fix(test-infra): repair the native Windows soak transport and release checks

2026-07-25 00:37:05 +02:00

test_spawn_no_window_contract.sh

fix(windows): suppress the console window on the last spawn site (#1427)

2026-08-07 14:58:22 +02:00

test_sqlite_writer.c

fix(sqlite_writer): publish rebuilt db atomically

2026-07-13 11:43:00 +03:00

test_stack_overflow.c

fix(tests): include <signal.h> in test_stack_overflow.c

2026-08-10 12:57:34 +01:00

test_store_arch.c

fix(store): clamp ADR render cursor to prevent stack overflow

2026-07-19 12:35:58 +05:30

test_store_bulk.c

Fix Windows bulk test + dual MCP config location + CONTRIBUTING.md

2026-03-20 20:32:38 +01:00

test_store_checkpoint.c

Merge remote-tracking branch 'origin/main' into qa/call-reference-rebase

2026-08-01 01:29:20 +02:00

test_store_edges.c

fix(graph): IMPORTS edges keyed by local_name across buffer, store and dump

2026-07-03 20:16:39 +02:00

test_store_nodes.c

feat(dbt): extract dbt model lineage from Jinja-templated SQL

2026-08-20 10:23:48 +02:00

test_store_pragmas.c

feat(mcp): tree-format tool output, exactly-once pagination, lean defaults

2026-07-17 22:32:53 +02:00

test_store_search.c

fix(store): reject null search handles

2026-07-13 01:48:29 +02:00

test_str_intern.c

Add 480+ tests, fix 3 bugs discovered by new test coverage

2026-03-24 23:48:23 +01:00

test_str_util.c

fix(foundation): properly escape JSON control characters as \u00XX

2026-06-24 20:33:52 +05:30

test_subprocess.c

fix(subprocess): back off exponentially when the kernel says "try again"

2026-08-13 00:21:13 +02:00

test_traces.c

Add 480+ tests, fix 3 bugs discovered by new test coverage

2026-03-24 23:48:23 +01:00

test_ts_lsp.c

perf(ts): memoize expression-type evaluation per node

2026-08-17 00:16:16 +02:00

test_type_rep.c

Fix uninitialized template-arg arrays binding stack garbage into type graphs

2026-06-10 12:11:02 +02:00

test_ui_dev_proxy_security.sh

daemon: permanent lifecycle, daemon-backed CLI/hooks, real-Windows hardening, long-path launcher transactions

2026-07-21 15:32:15 +02:00

test_ui.c

feat(ui): who can help — authorship as evidence, never a scoreboard

2026-08-28 00:39:57 +02:00

test_userconfig.c

Add missing platform.h include for cbm_safe_getenv in userconfig test

2026-04-06 14:34:07 +02:00

test_vendored_integrity_contract.sh

fix(release): externalize runtime assets and harden VT verification

2026-08-08 17:35:05 +02:00

test_venue_parity_contract.sh

test(venue): re-home the isolated-release-download guard

2026-08-09 17:17:05 +02:00

test_version_cohort.c

fix(win): reconcile the C suite with the managed-launcher contract

2026-07-23 00:53:41 +02:00

test_vm_worktree_manifest.sh

fix(release): externalize runtime assets and harden VT verification

2026-08-08 17:35:05 +02:00

test_vmem.c

Forbid test skips and convert existing skips to hard failures

2026-06-05 21:53:25 +02:00

test_vt_candidate_selection_contract.sh

fix(ci): finish the three-candidate wiring and restore full-surface VT scanning

2026-08-14 00:21:31 +02:00

test_vt_gate_policy_contract.sh

fix(ci): publish VT evidence under the marker the gate actually writes

2026-08-14 04:40:07 +02:00

test_vt_release_notes_contract.sh

fix(ci): release notes report the shipped binary, not every candidate

2026-08-14 12:48:40 +02:00

test_watcher.c

fix(watcher): FILETIME-precision dirty signatures; flaky-family rebuilds

2026-08-28 09:14:40 +02:00

test_windows_bundle_contract.sh

style(windows): clang-format the threaded ancestor signatures

2026-08-14 14:32:28 +02:00

test_worker_error_response.sh

fix(test): isolate harness daemon runtimes

2026-08-17 22:07:11 +03:00

test_worker_pool.c

Make parallel_for_actually_parallel deterministic

2026-06-06 19:48:48 +02:00

test_worker_watchdog.sh

fix(test): isolate harness daemon runtimes

2026-08-17 22:07:11 +03:00

test_workspace.c

feat(foundation): per-project request manifest with content-keyed approval

2026-08-06 18:00:08 +02:00

test_yaml.c

Add 480+ tests, fix 3 bugs discovered by new test coverage

2026-03-24 23:48:23 +01:00

test_zstd.c

feat: add persistent artifact storage for team sharing

2026-04-15 23:56:03 +02:00