Preserve Editor data and isolate late collaboration responses

.github/workflows/editor-build.yml

@@ -231,6 +231,9 @@ jobs:
         uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
           python-version: "3.13"
+      - name: Check Windows manifest reparse boundaries
+        if: runner.os == 'Windows'
+        run: python -m unittest discover -s editor/tests -p "test_manifest.py" -v
       - name: Install Qt on Windows x64
         if: matrix.artifact == 'windows-x64'
         uses: jurplel/install-qt-action/action@48d3ad6db93f3627c8ee7a0454bc6f3744f7e730 # v4.3.1, direct Node 24 action

CHANGELOG.md

@@ -1,5 +1,21 @@
 # Editor changelog
 
+## Unreleased maintenance
+
+- Show Python interpreter startup errors immediately and allow subsequent SDK checks instead of remaining stuck in the running state.
+- Generate the explicit loopback HTTP opt-in for local Python SDK integrations and health checks while retaining HTTPS requirements for remote endpoints.
+- Correct the install command to use the independent `json-api-forge-client` package, including YoungLion/DDM extras.
+- Preserve exact signed 64-bit JSON integers in Visual properties and reject extra values or fields in a single property input.
+- Keep selected chat text when an incoming message refreshes a conversation at the bottom of the view.
+- Preserve SQL row-count guards and operation cache invalidation targets when compiling mutation graphs; reject malformed guard and invalidation values.
+- Add a native cross-component contract check that compares generated exampleApps transition graphs with their complete RPC operation definitions.
+- Correlate each call-start and ticket request independently so delayed failures from a previous space or earlier attempt cannot cancel a new call, including returning to the same space.
+- Reject unsafe manifest paths and malformed SHA-256 records before scanning or hashing; block symbolic links and Windows reparse/junction boundaries without entering them during source fallback scans.
+- Discard responses, retries and pending attachment work from an earlier account session so late login/profile/download results cannot replace credentials, sign out a new account or save private files after the session changes.
+- Correlate message refresh requests individually so returning to a space cannot let an older snapshot or error overwrite its current conversation.
+- Correlate shared-file and note list refreshes individually so returning to a space/project, or refreshing notes twice, cannot let an older response replace the current list or display an obsolete error.
+- Keep these changes separate from the frozen v0.5.2 publication candidate.
+
 ## [0.5.2] — 2026-10-04
 
 - Added an interruptible sidebar animation that resizes the document workspace along with navigation.

CONTRIBUTING.md

@@ -26,6 +26,13 @@ passwords, founder setup secrets, bearer sessions or call tickets. Native
 plugin changes must preserve path containment, no-symlink, digest, API-version,
 declared-permission and explicit-enable checks.
 
+For cross-component graph checks, set `FORGE_EDITOR_EXAMPLES_APP_ROOT` to the
+`app` directory of a separately checked-out exampleApps branch, then run
+`forge_editor_tests graphExamplesCompilerContract` from the native build.
+The check compiles every domain-transition graph and compares the entire
+resulting operation with its target RPC definition. It skips when the variable
+is absent; the Editor source distribution does not include the example apps.
+
 Pull requests should explain behavior, compatibility, security impact, tests
 and packaging impact. Contribution forks are permitted only within the narrow
 collaboration exception described by the project license.

MANIFEST.sha256

@@ -7,18 +7,18 @@
 033f593849cbcfc2b4077a62e9145f0819be2280b5ca9e8f519209bbf1699fbc  .github/PULL_REQUEST_TEMPLATE.md
 f53bda57f03c1c41428b26bbdd775cf4f4620a88436b13ef5b295c864647e3d1  .github/dependabot.yml
 d0a53d7732fa29299125f15146bdde0446514287c1a4932ff238c094ffbb7c47  .github/release.yml
-dd91ab7369ff945ad9fba70c4a62460cb4e14c5d6aed9a05fcb7c85d4a39d7b2  .github/workflows/editor-build.yml
+27d18adae60406b2adb00ec80e4c4eddc39a11e7c29066e1a990a52479ab514a  .github/workflows/editor-build.yml
 51339bf046de296de42332ec06054b426c1541342a3b76ae46ee446c6f1ba5e9  .github/workflows/editor-codeql.yml
 af795a365fc479fbc7d4aedd6cf90fc0990da0181d15cd3854da34c2b861b765  .gitignore
 09094d533067dddbaf48b9c021ec594292ddc875e8f93735e44dcff9ab62bf55  AI_USAGE_POLICY.md
 759da1adabb4d60f41e3b678452af42192ee3a2c9cc40b0d30522153df374708  AUTHORS.md
 08a52d0ba592af11dfd45e217bd0f11e9a925043ee1f43c144e85d48f6559660  BRAND.md
-cf776572f2de00492197f3ecb13d39a85cc4955ff281a7c4e6684decf1da1eb9  CHANGELOG.md
+008a84aa3ea17a647cc05e519bec2d8f38742722815aa8a07df308757759348f  CHANGELOG.md
 c1e12824e5f0cb70bcd405b005625b07e4a7e1a8f110e5242768725711dea676  CITATION.cff
 d5c61448d613124dd312e4a78cee516c60f29dc3034eeb8ac55bd10fcf64e005  CMakeLists.txt
 3687086aeb50202ab381acb9334a48fe3f72ba2f294ebf1f52bb34c9b84f54f5  CMakePresets.json
 ea87ab99ee7120f85aba29aa86365691dbeb12a1c15ace2b07bd4cbf90942af2  CODE_OF_CONDUCT.md
-5ae93d46cd55cef66898eef018c7996ad732e38b74afb498bf295d78ab074c14  CONTRIBUTING.md
+0595cd55bb59291490cca59e96bbd193f403cc88a0ffc03e8c6901c89feab194  CONTRIBUTING.md
 8ddc6cc3010510fdc12fe7e7203a49f1f6a772c37c9e6d867d2f76e527d710c5  CONTRIBUTOR_LICENSE_AGREEMENT.md
 af80eadad7eab7c270043428ef05a0d01c66f58f64d9a3687d59cb958d0b26bf  EDITOR-FIX-2026-10-03.md
 7df4943aeac91fdbce54c774af3d4802e5068e345e6062c2622566a357456c7d  EDITOR-FIX-v0.5.1.md
@@ -75,9 +75,9 @@ c2fcb9d3d16c6bc879863ac5124615383c2ccea261c2522fdfdd20e4404c88c9  editor/resourc
 1218abc85dbce25d414b6a936b238019edecf4c440729285738718de11d158ce  editor/resources/styles/dark.qss
 13bc7533e16a1c69a2d4962eb81c48784f11357420bb0581523b9f3ce44d4aff  editor/resources/templates/catalog.json
 d4f81573e7196e0f02956a2892eafe85c4185f7c2fea6f8f62fab38c0b445751  editor/resources/windows.rc
-4ada539eac8b3790b51ef32c0972122056db2f7126eadc51fc510aa07b8575a4  editor/src/ApiClient.cpp
-7ace57059c2d4477f38606795156667b5498359da68bcb660aa3d909899ecc9d  editor/src/ApiClient.hpp
-b76a8ea9286cecab41f304ffb69aca5555cef8a79c8fe31aa68e294ab6a12b2e  editor/src/ChatView.cpp
+eca4ce9a5a36f2d54d0784b50348eb2a5a9f1d60a8eabb76ebaade9b5d365cdb  editor/src/ApiClient.cpp
+3a19a353eb6bca3d0242e77838e6079e280620838e1a05eb5cbc0f994c78fc0c  editor/src/ApiClient.hpp
+097417cb676f46a79b7ac07978dd9715c95705a9bf2354fc099010e792133291  editor/src/ChatView.cpp
 fb6cdb4d0031b11aa3afc5e60ddb415a373d924bc7824d30f8eecf65591e3f5f  editor/src/ChatView.hpp
 4de9f9c93e7bc1adec1406f263087f05811188fd2a81acdc529d2ef6b1c19ce1  editor/src/CodeEditor.cpp
 80394ea4964e8a998352da50c8bfbef13ed501e7570171eaf306beed05721633  editor/src/CodeEditor.hpp
@@ -87,7 +87,7 @@ fb6cdb4d0031b11aa3afc5e60ddb415a373d924bc7824d30f8eecf65591e3f5f  editor/src/Cha
 1b1e95f90299859e7b87a7f0bc6175dec52b22a3299df712aab68ede1a0c3892  editor/src/DocumentCodec.hpp
 450e22bdd8403d0ea286d695a26e684d8798ad60b75d8b2261b569c90d2f9b5d  editor/src/EditorSettings.cpp
 3d9622521038c72e2ba9fb511d0233e7487dc8b682e87aa73f596cab4eab225a  editor/src/EditorSettings.hpp
-42165378095dc89a6ef06a86605b7593c54f35ba913d9d589da8bb2744e3ed1c  editor/src/GraphModel.cpp
+e7e74e7850a3186fff7fcd00ff4efd4e0875c4e170f0312d6624fb557c619280  editor/src/GraphModel.cpp
 278cb28cb3652b378386e090cbccf06d22275ce2abdd2fae8acfb5c41e792de1  editor/src/GraphModel.hpp
 3016f23550982ea5c6204e66ae82f89b415a6313d96eddf10b3dc980025bad9b  editor/src/JsonHighlighter.cpp
 e10c36a5ff946825cd3ee736a5e93255fb1b05f0ad8ecc329b3c5f45fdcb53b0  editor/src/JsonHighlighter.hpp
@@ -99,26 +99,27 @@ d88d5018d225bc55fcfa8d5e7115ad15ef65640ab87b651e64fc7e3001c06191  editor/src/Nod
 8783c3a3141fe5dbae4ff39b8765e0ecc9741d63f92e0bb2dda7a515707a06b0  editor/src/PluginCatalogClient.hpp
 d07cf05b6c850e4cfeede18f32b8b6744bfc1af6fa965d54bffee0c84ca80241  editor/src/PluginManager.cpp
 5c00f7ae3a0ee421d57137a145205615726a71576e2e23ca4b831884986d516b  editor/src/PluginManager.hpp
-d68cff49e8c4816430db1844be1d388159cacb3741dfc6a6f3764ea9c91748b6  editor/src/PythonSdkPanel.cpp
+e1409ab312d2bb9e15451d15d2da3d9f9088883d197f9fb3a9c6a8731fdd47d9  editor/src/PythonSdkPanel.cpp
 1fdcebef6bccf297074a6fe23d5d3da4e51f33148409793fe33459d78e746ef6  editor/src/PythonSdkPanel.hpp
 33ea00abbda668bc8dfc58b4530aa7b5dec5b3c3dbf430ab7e552b2e8c4f7d7f  editor/src/SafeZipReader.cpp
 9199472d7380299b49848d002e600f20bdcdd021c68da5fea0005261013f2930  editor/src/SafeZipReader.hpp
-dbc5f65e1e7f9fd35789b2b640229c861b16b08dc348cccaf197c1be91cad284  editor/src/TeamWorkspace.cpp
-fe1857e3fff6f1b8394d0069924a461c333e745be37d659cec52e8fa4b3d2f9c  editor/src/TeamWorkspace.hpp
+63549a78ad9e590a6b2fc8a3a33871190a416a5a3bb8083d55c9fefa7459f41a  editor/src/TeamWorkspace.cpp
+5809a561faa3910df83f64a01fe9c6d2fd71687859cb705343b2273fc2c4c704  editor/src/TeamWorkspace.hpp
 036228cf2017139c3c8040092368bfa319eb8ad1019221303c92408ea20d2787  editor/src/TemplateManager.cpp
 a4d95987722b71f6f5e0573e92efee307402872ae83341d559d502f56948ed3a  editor/src/TemplateManager.hpp
 ebe5aa708c199c5171b5456f2b8e387444296f472f61725648a7e2fa20e5b0b7  editor/src/UiSizing.hpp
-4cef5d201f9de38ece0fcd45bcb4278fdea3d04881f8fb8b8d93dfbabc8b2ad1  editor/src/VisualDesigner.cpp
+ac0f0dba8d1363b08ee6a43d38f01faab3287ebae1faa72da2d2993ac810d831  editor/src/VisualDesigner.cpp
 2915fae2b3abae41015ed6c1b53a47eb20c5801422be511a2bd2a5545e34583d  editor/src/VisualDesigner.hpp
 f481e5cbe4f1d28e724e448863ccee8307e98a159791cd7b348ea31f2b123b48  editor/src/main.cpp
 e2aa41034ce77b1e91a63de94a46516f6197eee8d6afd643595295d49a1d779d  editor/tests/ZipFixtureWriter.hpp
 affa4bcf9e111a6268b38f6cce443a36d8226bba89d50f7076d13b1fbd46f5b7  editor/tests/run_server_contract.py
+11a0a51208e840879f37e2389be0437135d2af77b3714af582c2ced962011d54  editor/tests/test_manifest.py
 4f2a2a940e8ae21033bc273c99073522013b17b33558278e00231f1eda2a8c2f  editor/tests/test_packaging.py
 4f043b560c3e49e9e8cbfbcf07242c020768bd203dab26d476e7a96cbdec05bf  editor/tests/test_release_assets.py
 e7804622971a88473783057160bb7e328783bef6645a467d1155e3a95aa9d64f  editor/tests/test_windows_installer.py
-76840f657930474417db9dbf6c41cef0359a977ac2c416ee35cb7223071c5187  editor/tests/tst_editor_core.cpp
-045e2bb13085806d1afa4e02d810261a099531b27467fa54d158adc191f94cb7  editor/tests/tst_editor_ui.cpp
+aa09642aa2df3dac3ab9b7296c37743b3f3db66c0ff5ac3fe7a373724eae8491  editor/tests/tst_editor_core.cpp
+2a8d993ebd5f302eb347f76ffa06dded910c2ed7ead2ffe363c18a9e8ac068c0  editor/tests/tst_editor_ui.cpp
 18d8673b83d59483a1abb47d685f263a52b1f0dbdc9fa1ed6d56e80de2822e34  editor/third_party/puff/README.md
 5b9d75aeb5baf3575415bc6ade3f2a02e50b6b971b3f8b4fda2b03543bc6e52f  editor/third_party/puff/puff.c
 969b7be2a930db0cdcb19b0e5b29ae6741f5a8f663b6dba6d647e12ec60cfa8e  editor/third_party/puff/puff.h
-c5dfebccb4d838941b4ccfe30823e7c0109131bdcdb6c8752ef8eb8be3329e09  scripts/check_manifest.py
+2089316476893395e59a81bdff32dbec1df8fc3e0f01d5163d78a4c2780fd97d  scripts/check_manifest.py