-
coreci-bot released this
2026-09-27 10:08:07 +00:00 | 61 commits to main since this releaseREQ-7-005 complete. mypy 2.3.1 adopted for ai-service (D-058 relaxed-first: check_untyped_defs, warn_unused_ignores — 215 errors found and resolved: ~140 fixed at source incl. 8+ genuine bugs the gate caught, 34 scoped+reasoned suppressions; all 27 original type:ignore dispositioned; tests included, not excluded; wired into pnpm typecheck as the 6th gate). recharts upgraded 2.15.4 → 3.10.1 (the deprecated direct dep resolved; 2 one-line Tooltip-formatter fixes; build 248/248 with chart SSR verified; no rollback). Deprecated-transitive audit: 4 dev-only entries remain (Storybook docgen chain + c8/test-exclude), none actionable within NFR budget — recorded. Zero warnings maintained; filterwarnings allowlist still exactly 2.
Downloads
-
2026-09-27 05:41:03 +00:00 | 64 commits to main since this releaseREQ-7-004 complete. ESLint live across all 6 workspaces (was: no JS/TS linting at all — turbo lint was a no-op for 5 of 6). Flat config: eslint 10 + typescript-eslint + react-hooks core rules; 20 violations fixed; every eslint-disable now enforced-and-meaningful (5 orphans resolved, 3 kept with justification, 1 new TDZ-load-bearing suppression). All 80 inert Python noqa removed; 6 live ones fixed at source; RUF100 enforced in the select set. Dead exports gone (ai-scenarios.ts, NavItem/ThemeConfig, Spawn, MicControl). Version single-source: pyproject 0.6.3 → FastAPI(version=version) via importlib.metadata + tomllib fallback, pinned by 2 tests. engines fields everywhere. Zero orphaned suppressions repo-wide.
Downloads
-
2026-09-27 04:36:14 +00:00 | 67 commits to main since this releaseREQ-7-003 complete. Zero-warning pytest suite (was 1,716 warnings/run). session.query()→session.exec() at all 14 SQLModel deprecation sites. All 14 ResourceWarning sites closed at source (UploadFile close in both upload routes — the marketplace route restructured so form.close() spans every guard path; sandbox-agent socket close on failed handshake). filterwarnings = error-first with exactly 2 module+message-scoped upstream ignores. The policy flip caught and fixed a real harness leak (AsyncKillableProxy.stop()). Full suite: 669 passed, ZERO warnings.
Downloads
-
2026-09-27 03:24:29 +00:00 | 70 commits to main since this releaseREQ-7-002 complete. Evidence-based suite composition: 10 trivial tests cut (1 py tautology + 9 web local-grep pins, per-assertion D-057 triage recorded); 8 cross-boundary/regression pins kept in pins.test.ts (CWD-independent). Duplicated harness infra consolidated into tests/helpers/ (free_port ×5, userns probe ×10 sites, uvicorn serve ×6, KillableProxy → two semantics-distinct helpers per G-101, wirePosting ×2). Deterministic waits replace sleeps where hooks exist; :542 load-starvation poll untouched (G-102). Sandbox droppings swept (4.6 MiB) + session-end autouse sweeps. Counts: 669 py / 44 web / 64 cli.
Downloads
-
2026-09-26 17:40:08 +00:00 | 73 commits to main since this releaseREQ-7-001 complete. Coverage measured in all three workspaces (pytest 95% branch, web 95.9%, cli 76.9%). pytest-timeout signal method 60s global / 180s marked tiers — both probe-proven. Markers fast/real_server/userns under --strict-markers, mechanism-verified (G-105). Fast subset: 621 tests / 55.4s. Web tests inside the turbo pipeline. CLI E2E env-gated. Leak fixes probe-proven. Baseline counts: 670 py / 53 web / 64 cli.
Downloads
-
2026-09-26 16:13:26 +00:00 | 76 commits to main since this releasePhase 0 of milestone v0.7 (Test Harness Review, NFR refinement-only).
- SPECIFY: REQ-7-001..005 (harness wiring, suite composition, warning elimination, lint hygiene, type/dep hardening)
- CLARIFY: D-052..D-061 auto-decided
- RESEARCH: harness/warning/suppression census (conclusions 44-50)
- PLAN: 6 phases, D-062 wave order
- GRILL: 1×P0 + 6×P1 amendments applied (G-101..G-110)
- MVP/UX: verified (developer-facing surface, happy path, acceptance criteria)
Downloads
-
2026-09-26 15:46:00 +00:00 | 82 commits to main since this releaseFound deploying v0.6 to production:
nextcraft deployreported success but never updated the checkout. Whengit fetchfailed, deploy silently continued on the current checkout — rebuilding and verifying the OLD code as if it were an upgrade. Fixed: a failed fetch now fails the deploy loudly (nothing downstream runs), and after a successful pull HEAD is verified against origin/main (a clone silently behind the remote fails with a clear message). CLI 63/63 (+3 regression pins). NOTE: the host binary must be reinstalled for this fix to take effect — the NEW binary is what fails loudly; the currently installed one still has the silent path. See release assets for the updated binary.Downloads
-
2026-09-26 15:06:41 +00:00 | 84 commits to main since this releaseMilestone v0.6 — Marketplace Engine (COMPLETE)
The real marketplace backend behind the existing surfaces. All 6 requirements shipped across 6 patches on the v0.5.x line:
- P1 (v0.5.1) — Postings backend (REQ-6-001): 6th SQLite store family (six tables), PostingSource adapter contract + seeded corpus (20 postings + 10 employers ported once from mock-data), /v1/marketplace/* public API, REAL apply route replacing the G-18 501 stub (gate composition D-043 preserved: allowlist → verified-18+ → rate caps; idempotent duplicates), fail-closed admin surface (SecretStr, constant-time bytes compare; unset token = 403 + loud boot warning), web client shells reading real data at runtime (G-101 placeholder-shell export + FastAPI catch-all — the grill-caught E87 build break fixed before execute).
- P2 (v0.5.2) — AI tagging (REQ-6-002): skills/seniority/category via the D-020 structured pipeline (mock-first, cloud-free tests; skills bounded at 10, extra=forbid honesty), tag-on-ingest with honest failure semantics, re-tag overwrite on edit, facets data-driving the filter sidebar.
- P3 (v0.5.3) — Semantic vector search (REQ-6-003): EmbeddingProvider protocol (deterministic 256-dim feature-hash mock; OpenAI-compatible real path with key redaction — probe-corrected: ollama-cloud exposes no /embeddings; G-11 boot-safe), SQLite-local float32 vectors with lazy re-embed on model change, hybrid facet+cosine ranking, computed match scores ONLY in search context, skill-breakdown explanations.
- P4 (v0.5.4) — Enrichment + resume (REQ-6-004/005): append-only employer enrichment with per-field provenance markers (manual > llm > raw merge-on-read — LLM copy visibly marked, never displayed as ingested fact), enrich-on-first-publish; resume parsing (pypdf — the only new dependency) with honest bounds (2MB, text-layer-required, no OCR), DRAFT-then-confirm review gate with shape re-validation, raw bytes never stored or logged.
- P5 (v0.5.5) — SEO (REQ-6-006): build-time metadata + OG + JSON-LD on the static set, client JobPosting/Organization JSON-LD on runtime pages, dynamic /sitemap.xml + /robots.txt (request-time enumeration; API beats the static mount; every URL resolves 200; XML-escaped, forgery-hardened; fail-honest unset-origin behavior).
- P6 (v0.5.6) — Final review + audit: review CLEAN (zero P0s; all grill bindings G-101..G-110 honored; milestone must-haves MH-M1..M6 met; admin-token bytes-compare + catch-order hardening applied in-phase), audit PASS (reconstruction clean, file/branch/commit discipline intact, zero secrets in history).
Known open items (post-ship, non-blocking): landing/stack-detail OG metadata incomplete; JSON-LD </script>-escape defense-in-depth; small concurrent-apply race window (constraint holds; retry succeeds); pilot-scale perf notes within the documented ≤10⁴ bound.
Suites: 670 backend tests (+182 over v0.5), web 53/53, CLI 61/61, typecheck green, ruff clean, static export builds.
Ops note: deploy hosts need
corepack enable --install-directory ~/.local/binon PATH for the CLI (the v0.4.6 discovery expects it).Downloads
-
2026-09-23 09:44:43 +00:00 | 78 commits to main since this releaseMilestone v0.6 Phase 5 (REQ-6-006): dynamic /sitemap.xml + /robots.txt served request-time by the ai-service (API routes beat the static export — verified in single-port mode; every sitemap URL resolves 200 via the G-101 placeholder shells; published-only enumeration; XML-escaped, forgery-hardened). Build-time metadata + OG + ItemList/Organization JSON-LD on the static set (board, pricing, catalog); client-side JobPosting/Organization JSON-LD on runtime pages (JS-crawler limitation recorded). Unset AI_PUBLIC_BASE_URL fails honest: empty sitemap set, robots omits the Sitemap directive, loud boot warning. Suites: 667 backend (+11), web 53/53, typecheck green, ruff clean, export builds with metadata verified in out/.
Downloads
-
2026-09-23 00:36:16 +00:00 | 79 commits to main since this releaseMilestone v0.6 Phase 4 (REQ-6-004/005). Enrichment: append-only employer_enrichment rows with per-field provenance (manual > llm > ingested-raw merge-on-read); every enriched field carries a visible {value, source} marker — LLM copy is never displayed as ingested fact; enrich-on-first-publish trigger (exactly once); founder manual-override route. Resume: PDF/TXT/MD ≤2MB upload with text-layer-required honesty (no OCR), D-020 draft extraction, explicit confirm gate before ANY persistence (learner_profile store table, shape re-validated), raw bytes never stored or logged. Dashboard profile auto-fill panel; employer profile provenance badges. Suites: 656 backend (+29), web 52/52, typecheck green, ruff clean, export builds.
Downloads