LineLoom v1.2.3 — Live Ignore Policy Safety Preview

LineLoom v1.2.3 — Live Ignore Policy Safety Pre-release

GitHub-only pre-release. This VSIX uses genuine VS Code pre-release channel metadata. It is not a stable release, Visual Studio Marketplace update, or Open VSX update.

What's new

• Recheck live ignore files: before reusing a cached allow decision, verify applicable root and nested .gitignore / .lineloomignore metadata, including ignore files that were previously absent. This helps when VS Code filesystem watchers are delayed or missed.
• Verify rule bytes: keep in-memory SHA-256 fingerprints for existing ignore-policy files and compare their current bytes before reusing a permission decision. This catches equal-size/equal-modification-time rewrites.
• Bounded parallel checks: up to eight independent ancestor policy-read tasks run concurrently, preserving root-to-leaf rule ordering without unbounded I/O.
• Fail-closed reads: unreadable, unexpectedly large, inconsistent or changed policy sources deny completion rather than treating them as absent.
• Automated regressions: unit coverage for bounded ordering/concurrency, watcher create/change/delete, metadata-preserving policy edits, deeply nested scopes and the actual VS Code inline provider with mocked local Ollama. Protected fixtures must not send /api/generate requests.

These are defense-in-depth improvements, not a guarantee that filesystem checks and inference dispatch are atomic. A policy edit cannot retract snippets already transmitted to an approved endpoint. Scanning each policy source has filesystem-read and SHA-256 overhead; actual latency on physical workstations and network-backed project folders has not been independently measured.

Included artifacts

• LineLoom-1.2.3.vsix — genuine VS Code pre-release extension, ID SanskarCodes.lineloom.
• LineLoom-1.2.3.sha256 — SHA-256 of the exact VSIX file.

In Visual Studio Code, choose Extensions → … → Install from VSIX… and open the VSIX. Use a disposable VS Code profile for preview evaluation. The full Visual Studio IDE's VSIX Installer is not the correct installer.

Manual QA outstanding

The publisher workflow checks package/lockfile identity, unit tests, typecheck, lint, source inventory, site tests, Linux mocked VS Code extension host, high-severity dependency audit, genuine pre-release VSIX archive, checksum, isolated VS Code CLI installation and a checksum-pinned published v1.2.0 stable → v1.2.3 preview CLI upgrade with synthetic preference preservation.

Still unverified: hands-on Windows/macOS/Linux editor installs and upgrades; real Ollama response quality, latency and cancellation; actual workstation filesystem-watcher timing; screen-reader/keyboard accessibility; and privacy behavior on arbitrary real user workspaces. Do not test sensitive private projects with an experimental preview.

The latest GitHub stable release remains v1.2.0. The earlier v1.2.2 GitHub pre-release remains available. Neither the Visual Studio Marketplace nor Open VSX is updated by this workflow.

See the v1.2.3 development and verification plan, privacy rules and hands-on acceptance tracker.