4 Commits

Include renames

Author	SHA1	Message	Date
mollusk	f46b2cacc7	build(appimage): harden thin bundle workflow ... Keep host multimedia libraries out of the AppImage, document the exact Ubuntu build inputs, and resolve Rust 1.97 release-gate warnings.	2026-08-14 18:05:00 -04:00
molluskandClaude Fable 5	5927148ee4	chat: enforce shared text policy at UI, sign point, and gossip ingress ... Chat-hardening plan Phase 1. The chat body policy (2,000-char + 8 KiB ceilings, single-pass control/whitespace normalization) moves from the UI layer into src/sanitize.rs and is now enforced at every trust boundary: cap_chat_input bounds the live input (oversized paste), the gossip sign point re-sanitizes so non-UI callers can't bypass policy, and gossip ingress rejects oversized raw text before sanitizing (admit_chat_text) and drops messages with neither visible text nor an attachment. The incoming chat author label now uses the strict name sanitizer until Phase 2 roster-binds it. +8 tests (532 lib green). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-17 18:36:21 -04:00
molluskandClaude Opus 4.8	d0a16cb8b9	style: apply cargo fmt across the crate (A20) ... The repo never enforced rustfmt, so formatting had drifted broadly. This is a single mechanical `cargo fmt` pass over the whole crate (no behavioral change; lib suite green, 493 passed). Going forward fmt should be enforced (planned CI fmt --check step). Part of the 0.6.1 hygiene pass. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-29 02:11:44 -04:00
molluskandClaude Opus 4.8	32ee00178e	W21 Phase 2: drag-selectable chat messages (per-message) ... Add `SelectableRichText`, a custom iced widget that mirrors `rich_text` (linkified spans + A13 link clicks) and adds per-message drag selection, Ctrl/Cmd+C copy, and Ctrl/Cmd+A select-all. Swap it in for the chat body element; the chat row and attachment layout are unchanged. Selection offsets are paragraph-global byte offsets (matching cosmic-text's hit_test), which equals a single global range because sanitize_chat keeps every message on one logical line. Pure seam `selected_substring` / `select_all` is unit-tested incl. unicode/emoji byte boundaries. Highlight quads are computed from public Paragraph primitives, falling back to a whole-message span_bounds union if sub-range rects can't be derived. Only one message holds a selection at a time: each widget clears its own selection on a left-press that lands outside its bounds. Right-click menu (Part B) intentionally deferred — native Ctrl/Cmd+C/A is the path. Implemented by Codex on branch, reviewed/committed by Claude. 464 lib tests, clippy --all-targets clean, release green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-27 16:44:22 -04:00