adrianbonpin/ismis-helper

fix(release): URL-encode release asset names #5

Closed

adrianbonpin wants to merge 6 commits from fix/release-asset-name-encoding into prod

Author	SHA1	Message	Date
adrianbonpin	43ee3e035e	fix(release): URL-encode release asset names ci / test (pull_request) Successful in 44s Details The release upload passed basename() raw in the name= query param, so a '+' in the signed xpi filename (ismis-helper-1.4.0-an+fx.xpi) was URL-decoded to a space ('ismis-helper-1.4.0-an fx.xpi'). Encode the name with urllib.parse.quote before the request.	2026-08-20 12:48:37 +08:00
adrianbonpin	7adad7cbc8	feat(security): encrypt profile passwords at rest with AES-GCM ci / test (push) Successful in 57s Details ci / test (pull_request) Successful in 52s Details Passwords are now encrypted with Web Crypto AES-GCM (256-bit) before being stored in browser.storage.local. The random key is persisted so it survives browser/service-worker restarts (otherwise old ciphertext could never be decrypted). Encryption/decryption happen in the background via encrypt-password/decrypt-password messages; autoLogin decrypts on the fly and falls back to a legacy plaintext password for pre-encryption profiles. The popup never reveals a stored password and preserves it when editing with a blank field. Removes the plaintext-password-at-rest smell flagged in the design review. Note: this is at-rest obfuscation-level security (the key ships with the extension); the extension only talks to the school portal.	2026-08-20 12:27:57 +08:00
adrianbonpin	eb7087d506	feat(progress): live status bar + % complete during exports ci / test (push) Successful in 39s Details ci / test (pull_request) Successful in 44s Details Adds a progress bar below the export buttons showing the current step (reading table, fetching course descriptions i/N, profile, year level, building file) with a 0-100% fill. Threads an onProgress callback through scrapeStudyLoad and resolveYearLevel. Buttons disable during export to prevent double-triggers; bar clears ~3s after success.	2026-08-20 09:02:15 +08:00
adrianbonpin	90e4107bf0	fix(year-level): prefer units-passed standing over calendar-year history count ci / test (push) Successful in 2m21s Details ci / test (pull_request) Successful in 38s Details The grade-history method counted distinct academic years, which over-advanced standing for students who repeated/failed a year (e.g. showing Year 5 when the student is genuinely Year 4, since a partial 2025 year didn't advance them). Reorder the hybrid so the UNITS math (total prospectus units minus still-lacking units = units actually passed) is primary, and View Grades history is only a fallback when units data is unavailable.	2026-08-20 08:54:55 +08:00
adrianbonpin	3067335274	ci: run tests on v1.4.0 feature branch ci / test (push) Successful in 2m9s Details ci / test (pull_request) Successful in 42s Details	2026-08-20 06:45:36 +08:00
adrianbonpin	53d5ca6d04	feat(v1.4.0): CSV/Excel/JSON/NextUp exports + hybrid smart year standing - Export modules (export-csv/json/xlsx) mirroring the PDF layout, plus a Next Up import CSV matching the raycast/nextup column contract. - Hybrid Year Level: View Grades history (exact per-semester standing), falling back to units math (prospectus total - lacking), then profile. Popup adds a year-mode setting (auto/custom/off). - On-page button row now offers PDF / CSV / Excel / JSON / Next Up. - Bump version to 1.4.0. - Tag-only build workflow with an optional AMO sign step for a signed .xpi; separate ci.yml keeps tests on pushes/PRs. - Tests: year-standing parser tests + export tests (CSV quoting, JSON schema, XLSX structure); CI validates XLSX via openpyxl.	2026-08-20 06:45:21 +08:00