Code Flow Studio 0.3.0 — located diagnostics

Code Flow Studio 0.3.0 — polyglot source evidence

By Jason Stys. Adds native coverage and exact unused-code locations across all eleven non-Python execution adapters, in addition to existing Python support.

• Original file/line/column, rule and source hashes for native unused candidates, with controller path/range/hash binding.
• Real language-specific coverage: V8/TypeScript maps, GCC, Rust/LLVM, JaCoCo, Coverlet, Xdebug, Bash command entries, SQLite statement starts and assembly DWARF/Callgrind.
• UI and escaped HTML expose tool/metric, partial/blocked/unknown states, missing source lines and native branch counts/IDs without inventing destination arcs.
• Fixed, pinned/audited tools run inside the existing restricted worker, separate from baseline timing/RSS. Independently authored positive/negative location oracles cover every adapter.
• No account/history migration, automatic source changes or user-data collection. Public providers remain opt-in; downloaded applications remain unsigned development builds.

Worker update required: build code-flow-worker:0.2.0 from this release's runner directory on an already working authorized Docker engine. Missing isolation stays blocked; the app neither repairs Docker nor executes targets on the host. These are bounded flat CLI adapters, not universal frameworks or public hostile-code sandbox support.

Read polyglot evidence, validation, security and private operation. Roll back by reinstalling the prior release and restoring a separately verified encrypted backup if needed; no database migration is introduced. Do not downgrade while an app instance is open. Existing histories remain revision-bound and are not recalculated automatically.

Verified release source: c098778. Validation passed: 148 unit tests, 40 isolated-worker scenarios, all 12 private-account adapters, 18 cross-browser checks and six account journeys. All three OS release builds passed actual packaged-app checks. Six checksum records match GitHub asset SHA-256 digests. See the release audit.

Code Flow Studio 0.2.1 — located diagnostics

Code Flow Studio 0.2.1 — located diagnostics

By Jason Stys. This patch adds original-file line/column references and source snapshot hashes to static warnings, all-supplied-Python-file syntax checks, conservative Python unused-code/unreachable-statement checks, and bounded recognized compiler/runtime references. Wrong-answer failures without source evidence remain explicitly unlocated.

Python coverage now preserves per-file uncovered lines and missing branch arcs, including unimported supplied modules when discovered by coverage.py. TypeScript runtime source maps point back to original source. Evidence has readable UI/HTML tables; JSON/ZIP preserve the same fields. Old history remains readable with explicit legacy notices; no database migration or account-data deletion occurs.

Dependency audits also identified and patched the development-server Vite advisory range and certifi's outdated trust bundle. See validation and the contract for measurements, bounds and unsupported cases.

Use only the package for your OS; verify its SHA-256 checksum. Packages remain unsigned development builds. Existing account/vault data stays outside the application folder; back it up with the encrypted-archive feature before upgrading. Locked-workspace/OS trust limitations are unchanged. No public backend, telemetry or automatic AI/source upload was added.

Worker update: rebuild the trusted worker (docker build -t code-flow-worker:0.1.0 runner) on an already working authorized local engine to obtain new coverage fields. Old worker reports retain legacy notices. Missing isolation is still blocked; there is no host execution fallback. Python-only built-in coverage/unused checks do not claim universal language/dead-code/bug detection.

Code Flow Studio 0.2.0 — private local accounts

Code Flow Studio 0.2.0

By Jason Stys — GitHub, contact.

Real local accounts, independent vault phrases, encrypted locked source/history/API settings, per-session key proof, login recovery, safe account deletion, contextual help and token-free local browser access. Offline editor, static review and saved revisions work without Docker. Explicit own-provider routing/consent supports compatible OpenAI, Anthropic and Ollama APIs; model proposals remain unverified until independently tested.

OS packages: Windows x64 per-user NSIS installer/portable ZIP, macOS ARM64 DMG/archive and Linux x64 AppImage/archive, each with SHA-256 checksum and bundled third-party notices. The complete extracted portable directory is required. No Python/Node/IntelliJ setup for end users.

Packages are unsigned, not notarized or independently certified. No public backend/mobile native installer is provided. Actual compiler jobs require the reviewed local Docker image; no host fallback or Docker repair occurs. Training is a separate optional workflow. Active source/memory is plaintext accessible to the local OS/admin; locked encryption is not zero-knowledge hosting. Save revisions before lock. Cold-back up the entire private root, not only its encrypted archive. Read the installation, recovery and security documentation before use.