12 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
adrianbonpin	7adad7cbc8	feat(security): encrypt profile passwords at rest with AES-GCM ... Passwords are now encrypted with Web Crypto AES-GCM (256-bit) before being stored in browser.storage.local. The random key is persisted so it survives browser/service-worker restarts (otherwise old ciphertext could never be decrypted). Encryption/decryption happen in the background via encrypt-password/decrypt-password messages; autoLogin decrypts on the fly and falls back to a legacy plaintext password for pre-encryption profiles. The popup never reveals a stored password and preserves it when editing with a blank field. Removes the plaintext-password-at-rest smell flagged in the design review. Note: this is at-rest obfuscation-level security (the key ships with the extension); the extension only talks to the school portal.	2026-08-20 12:27:57 +08:00
adrianbonpin	eb7087d506	feat(progress): live status bar + % complete during exports ... Adds a progress bar below the export buttons showing the current step (reading table, fetching course descriptions i/N, profile, year level, building file) with a 0-100% fill. Threads an onProgress callback through scrapeStudyLoad and resolveYearLevel. Buttons disable during export to prevent double-triggers; bar clears ~3s after success.	2026-08-20 09:02:15 +08:00
adrianbonpin	90e4107bf0	fix(year-level): prefer units-passed standing over calendar-year history count ... The grade-history method counted distinct academic years, which over-advanced standing for students who repeated/failed a year (e.g. showing Year 5 when the student is genuinely Year 4, since a partial 2025 year didn't advance them). Reorder the hybrid so the UNITS math (total prospectus units minus still-lacking units = units actually passed) is primary, and View Grades history is only a fallback when units data is unavailable.	2026-08-20 08:54:55 +08:00
adrianbonpin	3067335274	ci: run tests on v1.4.0 feature branch	2026-08-20 06:45:36 +08:00
adrianbonpin	53d5ca6d04	feat(v1.4.0): CSV/Excel/JSON/NextUp exports + hybrid smart year standing ... - Export modules (export-csv/json/xlsx) mirroring the PDF layout, plus a Next Up import CSV matching the raycast/nextup column contract. - Hybrid Year Level: View Grades history (exact per-semester standing), falling back to units math (prospectus total - lacking), then profile. Popup adds a year-mode setting (auto/custom/off). - On-page button row now offers PDF / CSV / Excel / JSON / Next Up. - Bump version to 1.4.0. - Tag-only build workflow with an optional AMO sign step for a signed .xpi; separate ci.yml keeps tests on pushes/PRs. - Tests: year-standing parser tests + export tests (CSV quoting, JSON schema, XLSX structure); CI validates XLSX via openpyxl.	2026-08-20 06:45:21 +08:00
adrianbonpin	89fd587c21	fix: use blob URL for Firefox downloads (data: URLs access-denied) (#3) v1.3.0	2026-08-18 20:12:20 +00:00
adrianbonpin	d08b1d75aa	ci: use Gitea API for releases (softprops/action-gh-release targets GitHub, fails on Gitea with 405)	2026-08-19 03:25:12 +08:00
adrianbonpin	9cc4fa5c97	ISMIS Helper: cross-browser build, CI, PDF fixes, Chrome download fix ... Squash merge of feat/ismis-helper into prod.	2026-08-18 19:13:49 +00:00
adrianbonpin	a778840845	Add ISMIS Helper implementation plan	2026-08-18 15:16:07 +08:00
adrianbonpin	c585188a34	Spec: scrape PDF header from My Profile page	2026-08-18 15:12:43 +08:00
adrianbonpin	5ed5a5974e	Spec self-review: add NOTE column and header-field source	2026-08-18 15:08:56 +08:00
adrianbonpin	793748abe5	Add ISMIS Helper design spec	2026-08-18 15:08:06 +08:00