Poolr v0.6.5

Drive collaboration and workspace redesign. See docs/RELEASE_0.6.4.md for setup, signing-key migration and verification limits.

Poolr v0.6.4

Poolr 0.6.4 release candidate

User-visible changes

Redesigned dashboard and navigation; profile/team controls on the right; shared avatar/logo; collapsible sidebar; repaired theme controls and analysis-label wrapping; learning workspace; existing-review discovery from Protocol; native Drive workspace; team create/join/switch/end/reopen; encrypted identity recovery; signed membership and revisions; review conflict preservation; project-backed manuscript assignments, reviewer, due date, comments and checkpoints.

Data and security changes

Project normalization retains advanced-analysis branches and stable project IDs. Saves are serialized, use unique temporary files and do not delete the original on rename failure. Arbitrary file load/save is native-only. Obsolete HTTP Google token and browser-launch endpoints were removed. HTTP origins are allowlisted and JSON content is required for POSTs. The desktop applies a content security policy and external URLs are restricted to HTTP(S).

Rclone runs with explicit arguments, bounded output and timeouts. Immutable, signed files are exchanged instead of synchronizing an open database. Owner-signed policy revisions freeze accepted old-epoch changes; revoked members cannot mint new backdated changes accepted by updated clients. Local authority checkpoints reject rollback. Conflicting owner policies fail closed. Missing/cross-project revision parents cannot hide another review.

Validation and remaining release gates

Local checks: frontend production build, 42 frontend tests, 227 engine tests including actual rclone transport between isolated peers, Rust check and Clippy with warnings denied. Rerun after final modifications; CI is the authoritative record for the release commit. Existing frontend/.NET warnings are not a zero-warning claim.

Required before public release: successful artifacts for every matrix target, native install smoke tests, real two-account Google Drive/OAuth verification, screenshot refresh and update-install migration test. No thousand-user benchmark or independent security audit has been completed. Do not publish the draft as fully validated until these gates are satisfied.

Setup and migration

Use rclone-configured shared folders. Rclone handles OAuth, but Google still requires authorization and may require a custom OAuth client. Existing browser OAuth tokens are no longer used for collaboration. Local-only old discussion metadata is not silently transformed into verified team data. Export old drafts before migration.

Back up project files and identity vaults. The updater trust key was replaced because the earlier private key was unavailable. Old clients require a manual verified installation to establish the new trust key. Update signing does not imply Windows Authenticode or Apple notarization.

Known limits

Snapshot revisions are bounded to 1 MiB signed payloads and 10,000 objects per team. There is no automatic compaction, key rotation, rich-text CRDT merge, invitation email service, or background synchronization when the app is closed. Sync intervals are jittered approximately 45–60 seconds when visible/online. A failed transfer retains the local outbox. Editors/reviewers have equal content scope; only the owner changes assignments. The UI does not grant/revoke Google folder ACLs. Drive readers can read unencrypted content, writers can delete objects, and remote availability depends on the provider. Use Drive permissions and optional rclone crypt accordingly.

Linux AppImage packaging omits the optional .NET LTTng profiling provider, whose obsolete liblttng-ust.so.0 dependency is unavailable on modern distributions. Statistical execution, encryption and ordinary application logging remain enabled.

Validation update, 3 November 2026: live Google Drive transport passed using two separate Poolr identities with one configured Google account. Upload/download, shared review propagation and ended-team policy propagation succeeded; the disposable remote fixture was moved to Drive trash. This does not verify cross-account ACL behavior. The refreshed six-target installer matrix and signing checks passed at commit bca4e3b (workflow 41699119048). All 25 published draft assets and 11 updater signatures verified; the Linux x64 AppImage was installed and smoke-tested on Omarchy.

Linux AppImage and branding refresh

The first Linux AppImage bundled host display-stack libraries that conflict with newer Mesa/WebKit EGL initialization. Tauri CLI 2.12.1 or newer supplies the updated AppImage bundler. CI inspects the finished AppImage and fails if the incompatible bundled libwayland-client is present. The final Linux AppImage excludes that library, passed the CI check, and launched on the target Omarchy Wayland/Mesa laptop. WebKit stayed alive and the bundled engine health check succeeded. The same full native install/update acceptance is still outstanding for the other OS/architecture targets.

The supplied wordmark is used in the expanded workspace and README, with a white wordmark for dark appearance. First launch follows the OS appearance preference; a saved in-app choice takes precedence. The collapsed navigation always shows the pin mark, with contrast variants for light and dark appearance. Generated Windows, macOS and Linux app icons use the pin on a light tile so the mark remains legible across OS themes. Four browser-preview combinations (expanded/collapsed × light/dark) were checked after the CSS correction.

poolr v0.6.3

Poolr v0.6.3 — Commercial Platform & Team Collaboration Release

Poolr v0.6.3 delivers a comprehensive commercial overhaul of Google Identity, Bring-Your-Own-Storage (BYOS) Google Drive cloud synchronization, enterprise Role-Based Access Control (RBAC), concurrent editing protections, and audit-grade research governance.

---

1. Google OAuth & Identity Resolution

• Prominent Google Sign-in: Placed directly in the application header, first-run onboarding screen, and user profile dropdown.
• Real Token Validation: Replaced brittle JWT client-side decoding with live Bearer verification against https://www.googleapis.com/oauth2/v3/userinfo to reliably retrieve user profiles and Google avatars.
• Dynamic Configuration: Users and institutions can configure their own Google Client ID in Settings → Cloud & Accounts.

2. Structured Google Drive BYOS Engine

• Clean Workspace Organization: Reviews are stored under My Drive/Poolr Workspace/Projects/{Title}_{UUID}/ to prevent cluttering users' personal drives.
• Multipart MIME Uploads: Implemented RFC 2387 multipart uploads for creating (POST) and updating (PATCH) files, preventing data loss and payload truncation.
• Dedicated Subfiles: Automatically organizes and synchronizes:
  • changelog.json: PRISMA 2020 revision delta history
  • permissions.json: Role-Based Access Control matrix
  • comments.json: Cross-phase reviewer discussion threads
  • authorship.json: ICMJE & CRediT active-time tracking ledger
  • manuscript.json: Collaborative manuscript workspace state
• Team Permissions & Discovery: Integrates with Google Drive Permissions API (POST /files/{id}/permissions) for sharing with colleagues (writer, commenter, reader) and discovering team reviews (sharedWithMe).

3. Role-Based Access Control (RBAC)

• Four Distinct Roles:
  • Owner: Full project governance, team invitations, permissions management, and Google Drive sharing.
  • Lead Methodologist / Editor: PICO definition, data extraction, synthesis adjustments, and manuscript authorship.
  • Reviewer: Title/abstract screening, full-text screening, and risk of bias assessments.
  • Auditor / Viewer: Read-only oversight for external auditors, journal reviewers, and students.
• Enforced across all primary synthesis actions and export workflows.

4. Concurrent Edit Protection & Conflict Resolution

• Section Soft Locks: Informs collaborators when a section (e.g. Data Extraction, RoB, Meta-Analysis) is being actively edited.
• Append-Only Delta Logging: Every modification is recorded as a structured ChangeDelta containing timestamp, author, section, field, and diff description for Cochrane/PRISMA compliance.
• 3-Way Visual Conflict Resolver: Automatically detects conflicting concurrent updates and displays an interactive modal ([Keep Mine], [Accept Teammate's], or [Custom Merge]).

5. Reviewer Discussions & Universal Commenting

• Inline Step Drawers: Embedded StepCommentsButton in the headers of Protocol, Screening, Extraction, Risk of Bias, Meta-Analysis, and Manuscript.
• Allows co-reviewers to discuss inclusion ambiguities, discrepancy resolutions, and extraction questions with threaded replies and resolution states.

6. ICMJE & CRediT Authorship Tracking

• Automatic background heartbeat monitors active time per contributor by review section.
• Generates publication-ready authorship reports adhering to International Committee of Medical Journal Editors (ICMJE) and Contributor Roles Taxonomy (CRediT) guidelines, with 1-click Markdown export.

7. Collaborative Manuscript Studio

• Transformed ManuscriptHelper into a live authoring studio featuring Markdown editor, formatting toolbar, data/citation insertion from review phases, section contributor assignment, word count, and reading time metrics.
• Export options include Markdown (.md), Microsoft Word (.doc), and browser print / PDF.

8. Windows WebView2 Transparent Window Bugfix

• Resolved transparent window / white screen issue on Windows WebView2 startup by setting "transparent": false in tauri.conf.json and adding solid dark/light fallback background colors to html, body, and #root.

9. Proprietary License & Legal Shield

• Updated closed-source proprietary license and legal documents for Muhammad Haris Awan (d/b/a The Method Lab).
• Includes corporate successor assignment clauses, unilateral rights to introduce paid subscription plans and paywalls without grandfathering, Bring-Your-Own-Storage disclaimers, and scientific/medical evidence synthesis disclaimers.

---

Installers & Distribution

• Windows: MSI (x64, x86, ARM64) + NSIS (.exe) installer
• macOS: DMG (Apple Silicon & Intel)
• Linux: DEB & RPM packages
• All native engines bundled self-contained with zero runtime dependencies.

poolr v0.6.2

Poolr v0.6.2 - Hotfix Release

Hotfix Changes

• ProfileSetup Avatar: Selected avatar now properly fills the circle
• Terms Agreement: Added Agree to Terms checkbox to welcome screen
• License Display: Changed MIT License to The Method Lab in UI
• Version Bump: Updated version display to 0.6.2

Phase 1: AI Provider OAuth + Dynamic Models

• Removed free tier labels (all providers now bring-your-own-key)
• Dynamic model refresh from /models endpoints
• OAuth support for Google Gemini
• Added DeepSeek, xAI Grok, Cohere providers
• Connected/Disconnected status indicators

Phase 2: License Change + Legal

• License MIT → Proprietary (The Method Lab)
• Terms of Service, Privacy Policy, EULA pages
• Legal Center UI

Phase 3: Google Sync + Collaboration

• Google Sign-In OAuth
• Google Drive bi-directional sync
• Team collaboration with comments, activity feed

What's Changed

• feat(all-phases): License + Legal + Google Sync + Team Collaboration by @harisawan-bit in #60

Full Changelog: v0.6.1...v0.6.2

poolr v0.6.1

What's Fixed

6 Stress-Test Crashes Resolved (HTTP 500 → 400)

• DiagnosticFigures: Null guards for PlotInput Effs/Vars/Names in Galbraith() and Baujat() methods
• ClusterDetectionEngine: Validation that variances count matches effects count
• LeagueMatrixEngine: Null/empty matrix validation
• MultilevelNmaEngine: Minimum study count guard (>= 2 treatments AND >= 2 valid studies) before matrix operations
• MultiArmNmaEngine: Minimum edge count guard before matrix operations

Auto-Updater (New)

• Rust: tauri-plugin-updater v2 registered in lib.rs with UpdaterState for rate-limiting
• Frontend: useUpdater() hook with daily check, UpdateModal for user confirmation
• App.tsx: Animated update banner with one-click update trigger
• Settings: Updates tab with auto-update toggle and manual check button

Maintenance

• Version sync: Poolr.Engine.Api.csproj 0.5.7 → 0.6.1 (matches actual app version)
• Eliminated all 33 CS8629 Nullable value type may be null warnings
• 214 unit tests pass, build clean

Installers

• Windows: MSI (x64, x86, ARM64) + NSIS (x64, x86, ARM64)
• macOS: DMG (Apple Silicon, Intel)
• Linux: DEB (Ubuntu/Debian/Mint), RPM (Fedora/RHEL/openSUSE)

Full Changelog: v0.6.0...v0.6.1

poolr v0.6.0

What's Changed

• chore(deps): bump the frontend-deps group in /frontend with 10 updates by @dependabot[bot] in #52
• chore(deps): bump the cargo-deps group in /src-tauri with 3 updates by @dependabot[bot] in #51
• chore(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #50

New Contributors

• @dependabot[bot] made their first contribution in #52

Full Changelog: v0.5.8...v0.6.0

poolr v0.5.8

What's Changed

• feat: complete end-to-end SRMA researcher workflow and diagnostics suite by @harisawan-bit in #44
• chore: institutional open-source standards, governance, and visual assets by @harisawan-bit in #45
• fix(v0.5.8): critical import parser fix + comprehensive UI overhaul by @harisawan-bit in #53

Full Changelog: v0.5.7...v0.5.8

poolr v0.5.7 — Complete PRISMA 2020 Platform & Diagnostics Suite

poolr v0.5.7 — Complete PRISMA 2020 Platform & Diagnostics Suite

An institutional-grade release establishing mathematical parity with gold-standard R packages, zero compiler warnings, zero CI errors, an interactive diagnostic figure studio with Cochrane robvis visualizations, automated PRISMA 2020 flow-syncing, Trial Sequential Analysis, specialized meta-analysis hubs, and a universal manuscript export center.

Native Desktop Installers

Platform	Architecture	Package	Download Link
Windows	x64 (Standard)	.msi / .exe	poolr_0.5.7_x64_en-US.msi · poolr_0.5.7_x64-setup.exe
Windows	ARM64 (Snapdragon / Surface)	.msi / .exe	poolr_0.5.7_arm64_en-US.msi · poolr_0.5.7_arm64-setup.exe
Windows	x86 (32-bit Legacy)	.msi / .exe	poolr_0.5.7_x86_en-US.msi · poolr_0.5.7_x86-setup.exe
macOS	Apple Silicon (M1/M2/M3/M4)	.dmg	poolr_0.5.7_aarch64.dmg
macOS	Intel x64	.dmg	poolr_0.5.7_x64.dmg
Linux	x86_64 (Debian / Ubuntu / Mint)	.deb	poolr_0.5.7_amd64.deb
Linux	x86_64 (Fedora / RHEL / openSUSE)	.rpm	poolr-0.5.7-1.x86_64.rpm

---

What's New in v0.5.7

1. Interactive Figure Studio & Vector Graphics

• Cochrane robvis Figures: Real-time vector SVG Traffic Light and Weighted Summary Bar figures adhering to McGuinness & Higgins (2021) standards with 1-click SVG download.
• Contour-Enhanced Funnel Plots: Maps statistical significance zones (p < 0.10, p < 0.05, p < 0.01) to distinguish publication bias from small-study effects.
• Outlier & Diagnostic Plots: Galbraith radial plots (outlier detection), L'Abbé plots (event-rate scatter), and Baujat plots (heterogeneity contribution vs effect influence).

2. Statistical Rigor & Advanced Engines

• 95% Prediction Interval: Higgins (2009) & IntHout (2016) random-effects prediction intervals prominently displayed alongside pooled effects.
• Trial Sequential Analysis (TSA): Calculates Required Information Size (RIS), cumulative Z-curve, and O'Brien-Fleming monitoring boundary crossing status.
• Model Averaging (Multimodel Inference): Computes AICc-weighted pooled estimates across DL, REML, Paule-Mandel, Empirical Bayes, Hunter-Schmidt, and Sidik-Jonkman estimators.
• Specialized Analyses Hub: Dedicated modals for Dose-Response (spline), Survival RMST, Health Economics (ICER/INMB), Adverse Events, and Decision Curve Analysis (DCA).

3. Screening, Extraction & PRISMA 2020 Flow

• Promote Included to Full-Text: 1-click promotion of title/abstract includes directly to full-text screening.
• Priority Screening: Machine-learning-assisted ranking of unreviewed citations against PICO criteria.
• Inter-Rater Reliability: 2x2 contingency table calculating Cohen's Kappa, 95% CI, observed agreement, Landis & Koch ratings, and copyable methods statements.
• Auto-Sync PRISMA Flow: Automatically extracts counts across identification, screening, and extraction into the PRISMA 2020 Sankey flow.
• Cochrane Summary of Findings: Automated GRADE evidence grading with OIS imprecision downgrades and copyable Markdown.

4. Universal Manuscript & Replication Export

• 1-click export of PRISMA 2020 Word Manuscripts (.docx), LaTeX journal templates (.tex), interactive standalone HTML reports (.html), R (metafor) replication scripts (.R), Stata scripts (.do), Python scripts (.py), BibTeX (.bib), and RIS (.ris).

5. Engine Zero-Warning Gate & Parity Fixes

• Eliminated all 39 nullable dereference compiler warnings across 15 engine files (0 warnings, 0 errors).
• Fixed DCA division-by-zero, degrees of freedom in pre-post effect size, linear cost difference pooling, and Freeman-Tukey double arcsine variance.
• Replaced mock literature generator with real NCBI E-utilities (PubMed), OpenAlex, Crossref, and ClinicalTrials.gov integrations.

poolr v0.5.6

Full Changelog: v0.5.5...v0.5.6

poolr v0.5.5

v0.5.5 — AI Integration, Study Type Modes, Advanced Methods

AI Integration

• Multi-provider support (OpenRouter, Token Router, OpenAI, Anthropic, Gemini, Mistral, Together, Groq, Perplexity, Custom)
• Free tier with daily request limits and usage tracking
• AI-assisted screening with multi-model pooling
• PDF auto-extraction via AI
• AI status in dock

Study Type Modes

• Standard Meta-Analysis (default)
• Network Meta-Analysis (SUCRA, league table, node-splitting)
• IPD Meta-Analysis (patient-level data)
• Multilevel Meta-Analysis (dependent effect sizes)
• Diagnostic Accuracy (SROC, HSROC, Fagan nomogram)
• Proportions/Rates (logit/arcsine transforms)
• Qualitative Synthesis (thematic coding)
• Manual Mode (full control)

UI Overhaul

• Settings page (AI, databases, appearance, screening, export)
• Dynamic dock based on study type
• MeSH browser, grey literature search
• JBI Critical Appraisal Checklist
• Living systematic reviews
• Conflict resolution dashboard

What's Changed

• release: v0.5.5 — AI integration, study type modes, advanced MA methods, settings page by @harisawan-bit in #40

Full Changelog: v0.5.4...v0.5.5