Code Flow Studio 0.2.1 — located diagnostics

Code Flow Studio 0.2.1 — located diagnostics

By Jason Stys. This patch adds original-file line/column references and source snapshot hashes to static warnings, all-supplied-Python-file syntax checks, conservative Python unused-code/unreachable-statement checks, and bounded recognized compiler/runtime references. Wrong-answer failures without source evidence remain explicitly unlocated.

Python coverage now preserves per-file uncovered lines and missing branch arcs, including unimported supplied modules when discovered by coverage.py. TypeScript runtime source maps point back to original source. Evidence has readable UI/HTML tables; JSON/ZIP preserve the same fields. Old history remains readable with explicit legacy notices; no database migration or account-data deletion occurs.

Dependency audits also identified and patched the development-server Vite advisory range and certifi's outdated trust bundle. See validation and the contract for measurements, bounds and unsupported cases.

Use only the package for your OS; verify its SHA-256 checksum. Packages remain unsigned development builds. Existing account/vault data stays outside the application folder; back it up with the encrypted-archive feature before upgrading. Locked-workspace/OS trust limitations are unchanged. No public backend, telemetry or automatic AI/source upload was added.

Worker update: rebuild the trusted worker (docker build -t code-flow-worker:0.1.0 runner) on an already working authorized local engine to obtain new coverage fields. Old worker reports retain legacy notices. Missing isolation is still blocked; there is no host execution fallback. Python-only built-in coverage/unused checks do not claim universal language/dead-code/bug detection.