Phases 5 to 14: ink, pages, tables, search, audio, math, import, intelligence, hardening, release by XrxcGH · Pull Request #16 · XrxcGH/OpenNote

XrxcGH · 2026-10-04T02:24:44Z

Brings Phases 5 to 14 from beta into main, as beta 6 (0.1.0-beta.6). Phases 5 to 12 are built and in beta testing; 13 and 14 are built but not complete (the beta period, code signing, and the update key are the owner's).

What each phase adds

5 Ink: pens, highlighter, stroke and partial erasers, lasso, shapes, and palm rejection.
6 Page views and export: flow, paginated, and canvas views; paper and backgrounds; PDF (WebView2 PrintToPdf), image, and Word export; print; slides; gallery; reading aids.
7 Smart tables and charts, 10 math and the grapher, and tool windows (timers, calculator, Upcoming).
8 Search and links: search panel and index, quick switcher, page links, backlinks, and tags.
9 Audio: recording with time stamps, flags, trim, and system audio, kept as page assets.
11 Import and export: Obsidian, Markdown, Word, HTML, and more, into notebook folders.
12 On-device intelligence: text in pictures, read aloud, summaries, and handwriting to text, each off per person until turned on.
13 Hardening and privacy: crash reports with consent, self-check, feedback file, safe start, and Work offline.
14 Release pipeline: release workflow, signing, SBOM, checksums, and winget (not run: needs the owner's keys).
main's Phase 4 fixes and brand work were merged into beta first; main's brand drawings and styles won where both changed.

Quality-of-life features and Connectors

Nine lanes built 142 of the 168 inventoried features: ink 21/24, typed notes 18/18, page views 11/11, tables, math, and study 26/28, search and links 9/9, audio 14/16, import and export 13/26, intelligence 9/15, shell 21/21. The 26 not built and 15 that need the owner's accounts or a format decision are listed in the beta notes.
The owner's fixes: no date text box on new pages (series pages too), text and text boxes on the rules of lined, grid, and dot paper, and a page area that shrinks with the window.
Settings > Connectors: sign-in in the system browser with PKCE, tokens in Windows Credential Manager, scrubbed from logs and feedback. No client IDs ship; docs/CONNECTORS.md explains registration.
Four lanes were stopped mid-feature; their work was committed as left (it passed the type check): tables-math-study, search-links, import-export (Share as a file, back end only), and the shell's tree Sort menu.

How it was checked

Run once on the merged branch: tokens, typecheck, lint, Prettier, npm test, cargo fmt, cargo clippy -D warnings, cargo test --workspace (2577 passed, 0 failed), app:build, and the bundle budget. Merge fallout was fixed in its own commits: a duplicate flag-id type, feature-boundary imports, a Ctrl+H clash in the OneNote set, arrow keys in floating text boxes, clippy findings, and a snake-case field.
Bundle limits raised to fit: start-up JS 297.4 KB gzipped (limit 300), CSS 21.0 KB (22).
Start-up smoke of the release exe on a throwaway profile: setup, a new page with no date text box, both splitters and window sizes from 1500 to 480 px, lined paper with text on the rules, Settings and Connectors, and each main entry point once; no console errors.
Not tested by agents: everything past start-up. No Playwright suites, component tests, or real-device tests; 4 timing-sensitive unit tests failed while Cargo was building and were not rerun.

Owner's checklist

docs/testing/beta-4-checklist.md starts with running on a throwaway profile, then goes riskiest first: save and restart, ink with the palm on the screen, export, and recording.

Known problems

Start-up bundle grew by about 47 KB; the Tags pane chunk is 157 KB.
Ruled paper's print path was checked in code, not printed; text-box width has no upper limit on the canvas.
Playwright layout.spec.ts (compact title bar) and page.walk.spec.ts (strict "Table" locator) need updates.
A recording's .timeline file is not a core asset; duplicating a page copies the audio but not the timeline.
interop.exportPdf stays off: the Export dialog's PDF choice is not wired to the PDF writer yet.
Building needs CMake for Opus (the Build Tools copy works).

🤖 Generated with Claude Code

github-advanced-security

CodeQL found more than 20 potential problems in the proposed changes. Check the Files changed tab for more details.

Rewrite the status text around pull request #16 and the hand tests still pending. List what the app does by area, each with its help page, and show six real screenshots. Add a Try the beta section (build, SmartScreen, a throwaway profile, the hand test checklist), refresh the repository map with the strings, help, screens, and testing folders, and add the new docs to the documentation table. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

+  return html
+    .replace(/<(script|style)[\s\S]*?<\/\1>/gi, '')
+    .replace(/<br\s*\/?>|<\/(p|div|li|tr|h[1-6])>/gi, '\n')
+    .replace(/<li[^>]*>/gi, '- ')
+    .replace(/<[^>]+>/g, '')


+  return html
+    .replace(/<(script|style)[\s\S]*?<\/\1>/gi, '')


+              clean(cell.children.map((one) => inline(one, cx)).join(''))
+                .replace(/\|/g, '\\|')


+  text
+    .replace(/<[^>]*>/g, '')


+    const { html } = exportHtml(page, { player: plan });
+    expect(html).toContain(`script-src 'sha256-${sha256Base64(PLAYER_SCRIPT)}'`);
+    expect(html).toContain("media-src 'self' file:");
+    expect(html.match(/<script>/g)).toHaveLength(1);


+    let page = page_id();
+    let dir = plain_section(&mem, &page);
+    let fs = sealed_on(&mem);
+    fs.protect(&dir, "S1", "correct horse").unwrap();


+    let page = page_id();
+    let dir = plain_section(&mem, &page);
+    let fs = sealed_on(&mem);
+    fs.protect(&dir, "S1", "correct horse").unwrap();


+    let page = page_id();
+    let dir = plain_section(&mem, &page);
+    let fs = sealed_on(&mem);
+    fs.protect(&dir, "S1", "pw").unwrap();


+    let page = page_id();
+    let dir = plain_section(&mem, &page);
+    let fs = sealed_on(&mem);
+    fs.protect(&dir, "S1", "pw").unwrap();


+    let page = page_id();
+    let dir = plain_section(&mem, &page);
+    let fs = sealed_on(&mem);
+    fs.protect(&dir, "S1", "pw").unwrap();


+    let page = page_id();
+    let dir = plain_section(&mem, &page);
+    let fs = sealed_on(&mem);
+    fs.protect(&dir, "S1", "pw").unwrap();


+    let page = page_id();
+    let dir = plain_section(&mem, &page);
+    let fs = sealed_on(&mem);
+    fs.protect(&dir, "S1", "pw").unwrap();


+    let page = page_id();
+    let dir = plain_section(&mem, &page);
+    let fs = sealed_on(&mem);
+    fs.protect(&dir, "S1", "pw").unwrap();


+#[test]
+fn a_hostile_header_cost_is_refused_before_any_work() {
+    let content = crypto::new_key().unwrap();
+    let mut header = crypto::new_header("S1", &content, "pw").unwrap();


+#[test]
+fn a_protected_section_keeps_no_plain_text_anywhere_and_opens_only_with_its_password() {
+    let f = fixture();
+    f.core.protect_section(&f.root, f.section, "correct horse").unwrap();


+
+    #[test]
+    fn a_style_seals_and_opens_with_its_key() {
+        let key = [7u8; 32];


+
+    #[test]
+    fn a_wrong_key_and_damage_both_fail_the_same_way() {
+        let sealed = seal(&[1u8; 32], STYLE).expect("sealed");


+    #[test]
+    fn a_wrong_key_and_damage_both_fail_the_same_way() {
+        let sealed = seal(&[1u8; 32], STYLE).expect("sealed");
+        assert_eq!(open(&[2u8; 32], &sealed).unwrap_err(), StyleError::Unreadable);


+        for at in [0, MAGIC.len(), HEADER, sealed.len() - 1] {
+            let mut damaged = sealed.clone();
+            damaged[at] ^= 1;
+            assert_eq!(open(&[1u8; 32], &damaged).unwrap_err(), StyleError::Unreadable);


+            damaged[at] ^= 1;
+            assert_eq!(open(&[1u8; 32], &damaged).unwrap_err(), StyleError::Unreadable);
+        }
+        assert_eq!(open(&[1u8; 32], &sealed[..HEADER]).unwrap_err(), StyleError::Unreadable);


+            assert_eq!(open(&[1u8; 32], &damaged).unwrap_err(), StyleError::Unreadable);
+        }
+        assert_eq!(open(&[1u8; 32], &sealed[..HEADER]).unwrap_err(), StyleError::Unreadable);
+        assert_eq!(open(&[1u8; 32], b"").unwrap_err(), StyleError::Unreadable);


A help page and a FEATURES.md section for the solvers window, shorter sentences and wrapped lines where the checks asked, and named suppressions for the long messages and the panels that share state. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

A UI spec inserts a 3D graph and a parametric graph, turns and traces them, and opens the Vectors, Solids of revolution, and Projectile simulator windows. The tool fields keep to their grid cells, and the chosen view shows as pressed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

A number column can carry a unit such as kN, MPa, or N·m. Cells typed in another unit of the same kind convert to it, so totals and formulas add like with like, and a unit of the wrong kind is flagged. The column can write values in engineering notation or with SI prefixes. Units, prefixes, and conversions live in core/units, shared with the circuit solver. Set from the table's Format menu or the command palette. On in Beta. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…case Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>