From 3623418fe3078a5e025850acb892e3a67efe2d02 Mon Sep 17 00:00:00 2001 From: debont80 Date: Thu, 2 Jul 2026 17:08:20 -0400 Subject: [PATCH] docs(audit): fix stale Deferred entries for metadata editing + PO-token auto-mint Both shipped (ROADMAP.md Phase L/P) but CODE-AUDIT.md's Deferred section still listed them as pending. Co-Authored-By: Claude Sonnet 5 --- CODE-AUDIT.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/CODE-AUDIT.md b/CODE-AUDIT.md index 158e70a..3a22d9f 100644 --- a/CODE-AUDIT.md +++ b/CODE-AUDIT.md @@ -2546,8 +2546,10 @@ Security & correctness audit (2026-06-23): - Designed app icon before v1.0 (placeholder shipped). - Migrate JSON stores to better-sqlite3 if a user indexes many large channels. -- Metadata editing (`--parse-metadata`/`--replace-in-metadata`) — held pending a live recipe. -- PO-token WebView auto-minting — only the `--extractor-args` plumbing shipped. +- ~~Metadata editing (`--parse-metadata`/`--replace-in-metadata`)~~ — done: `--replace-in-metadata` in + `DownloadOptionsForm.tsx` (ROADMAP.md "Metadata editing before download"). +- ~~PO-token WebView auto-minting~~ — done: [poToken.ts](src/main/poToken.ts) opens a hardened + BrowserWindow on the shared login session and mints the token automatically (ROADMAP.md "Reliability"). - ~~Taskbar overlay badge (needs a drawn `NativeImage`)~~ — done (W11): [badge.ts](src/main/badge.ts). - i18n — deliberately deferred (note: UI strings are hard-coded throughout). - Code signing — **non-goal**: no certificate will be purchased, so builds ship unsigned and the SmartScreen -- 2.47.3