release: v1.25.1 WorkerBus reliability patch

.github/SECURITY.md

@@ -4,8 +4,8 @@
 
 | Version | Supported |
 | --- | --- |
-| `main` (v1.25.0) | ✅ Full support |
-| `1.3.x – 1.24.3` | ⚠️ Best effort (upgrade strongly recommended) |
+| `main` (v1.26.0) | ✅ Full support |
+| `1.3.x – 1.25.0` | ⚠️ Best effort (upgrade strongly recommended) |
 | `< 1.3.0` | ❌ Not supported |
 
 Maintainer-facing documentation (CI, contributing, architecture) is indexed in [`README.md`](README.md#-documentation-hub) and enumerated in [`AUDIT.md`](AUDIT.md).

AGENTS.md

@@ -11,7 +11,7 @@
 - **Primary deploy target:** Static SPA on GitHub Pages (`/WorldScript-Studio/` base path)
 - **Secondary targets:** Vercel (root base) and Cloudflare Pages via edge builds (`pnpm run build:edge`)
 - **Desktop:** Tauri 2 bundles for Linux (AppImage), macOS (DMG), and Windows (MSI); auto-updater enabled via `latest.json`
-- **Version:** `1.25.0`
+- **Version:** `1.26.0`
 - **License:** MIT
 
 The app supports a multi-provider AI stack (Gemini, OpenAI, Claude, Grok, OpenRouter, Ollama, WebLLM, ONNX Runtime Web, Transformers.js), four AI execution modes (Hybrid / Cloud / Local / Eco), real-time collaboration with E2E encryption, a Plot Board v2 with swimlane/canvas/timeline modes, character/world management, manuscript export, voice dictation, and a 19-locale i18n layer.

AUDIT.md

@@ -2,7 +2,7 @@
 
 **Date:** 2026-04-17 (baseline); **follow-up chain:** … → 2026-05-28 (v1.19.0 — Security/Voice/RTL/Logger B-1..B-8) → **2026-05-30 (B-1 passphrase UX + CI unblock)** → **2026-05-31 (i18n audit + settings features + CI stabilization)** → **2026-05-31 (Edge-AI Perfection Cycle — Phases 0-7 complete)** → **2026-06-01 (Post-crash session: CI stabilisation + 14 CodeAnt AI fixes + E2E hardening)** → **2026-06-02 (Perf Phase 2.3 — pipeline-LRU unification + PR #69 CodeAnt fixes)** → **2026-06-03 (WorkerBus v2 Phase 3 — Rust TaskSupervisor + Tauri-build unblock)** → **2026-06-06 (Phase 3 i18n Expansion — ja/zh/pt/el + Intl APIs)** → **2026-06-09 (v1.21 Deep Audit Correction — Whisper WASM download UI + 3 CodeAnt fixes + CloudSync LWW)** → **2026-06-09 (feat/deep-audit-v1.21 — CSP hardening, zh locale ≤5% EN, coverage Batches A/B/C, VoiceActivityCoordinator B-2 bridge)** → **2026-06-11 (Ultimate Copilot v2 Phase 2+3 — markdown, sidebar, Apply-to-chapter, InlineAnnotation, ProForge chip; PR #110+#111)** → **2026-06-11 (v1.22.0 release — OpenRouter Cloud 5 provider, AI Execution Modes hybrid/cloud/local/eco, AiModeIndicator, SW cache-invalidation fix)** → **2026-06-13/14 (v1.23 perfection batch — OpenRouter + AI-Execution-Mode settings sections localized/modernized, i18n single-brace interpolation bug-class fix + `i18nPlaceholders` regression guard, bundle split + budget tightening PR #130)** → **2026-06-16 (v1.23.0 release — rebrand StoryCraft → WorldScript Studio, local-first data foundation ADR-0008, Tauri blank-screen + asset-URL fixes, AI error taxonomy + retry hardening, command-palette & local-AI settings localization, WorldScript W monogram icons)** → **2026-06-16 (post-release documentation perfection pass — corpus sync, metric reconciliation, history archival, dependabot hardening)** → **2026-06-17 (Language expansion — +6 locales fi/sv/hu/is/eu/fa (RTL); PR #174 merged; `LanguageSelector` exonym localization via `portal.language.names.*`; portal chrome 100 % for the 6 new langs; README/AUDIT/CHANGELOG docs sync)** → **2026-07-28 (v1.24.1 — Local-AI reliability fixes #266, Dependabot backlog triage, Issue #60 audit closeout, security/build hardening)** → **2026-07-29 (v1.24.2, PR #284 — CSP functional-truth, desktop crypto, and doc-truth hardening; the local-inference stack had been silently non-functional in production for two months; merged and tagged)** → **2026-07-30 (v1.24.3, WorkerBus v2 worker-generation consolidation — 5 stacked PRs #286–288/#290–291 + independent #289 recovered after an interrupted merge queue; ADR-0015; merged and tagged)**
 **Scope:** Full application, repository configuration, CI/CD, documentation, release validation
-**Current version:** **v1.25.0** — released 2026-07-31; post-release WorkerBus timeout/memory-tier work and native notifications are included on `main`. **2869 keys × 19 locales**. On 2026-08-01, the residual audit identified and corrected the live-queue lifetime leak with an authoritative bounded scheduler; historical release sections below remain historical.
+**Current version:** **v1.26.0** — the WorkerBus inactivity watchdog and memory-tier sizing, native desktop notifications, and the residual audit's authoritative bounded-scheduler correction are consolidated into this minor release. **2869 keys × 19 locales**. Historical release sections below remain historical.
 
 **Quality gate (2026-06-17 — language expansion +6 locales):** lint ✅ · typecheck ✅ · i18n:check ✅ (**2716 keys × 17 locales** — fi/sv/hu/is/eu + fa RTL) · placeholder guard ✅ (17 bundles) · targeted unit tests ✅ (LanguageSelector 9 · I18nContext 59 · i18nPlaceholders 33). `LanguageSelector` exonym labels localized via `portal.language.names.*` (native endonym stays hardcoded by design). **Bulk translation completed** for all 10 Beta locales (glossary v2.0, ~44 anchor terms/locale; placeholder-masked, checkpointed): post-run coverage fi 91 % · sv 90 % · hu 91 % · is 92 % · eu 92 % · fa 93 % · ja 99 % · zh 100 % · pt 98 % · el 97 % (Beta MT; human native review tracked). Two bulk-script bugs fixed: (1) `glossaryTranslate` partial-match left ~1,300 strings partially English → now exact-match only; (2) `--all` mangled `help.json` rich HTML → `help.json` excluded from `--all` (`ALL_SKIP`) and kept English fallback for the 6 new langs (tag-dense markup isn't MT-safe; human-review task). New `docs/TRANSLATION-GUIDE.md` + `I18N-GLOSSARY.md` v2.0.
 

CHANGELOG.md

@@ -7,6 +7,44 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.26.0] — 2026-08-01
+
+### Added
+
+- **Opt-in native desktop notifications** now report completed encrypted-library and manuscript
+  exports, updater readiness, and ProForge stage completion through the Tauri notification plugin.
+  Permission is requested only after the user enables the setting, web builds remain a no-op, and
+  the settings migration defaults existing installations to disabled. (#306)
+
+### Changed
+
+- **Local-inference worker capacity now follows the detected memory tier**: low-memory devices use
+  one inference worker, the default remains two, and high-memory devices may use three. Detection
+  failures safely retain the two-worker default. (#305)
+- **`WorkerBus` is now an authoritative, event-driven priority scheduler.** Tasks dispatch only
+  after leaving the bounded queue; worker availability events replace animation-frame polling;
+  retries re-enter the scheduler without duplicating logical handles; and an eight-task critical
+  reserve bounds total queue growth while retaining emergency capacity. (#307)
+
+### Fixed
+
+- **Worker tasks can no longer remain pending indefinitely after queue saturation or inactivity.**
+  The progress-rearmed inactivity watchdog now starts at enqueue, covers both queue wait and active
+  execution, retries recoverable timeouts, and replaces presumed-wedged workers without returning
+  them to the idle pool. Worker-construction, replacement, cancellation, retry-backpressure,
+  shutdown, and pool-termination failures all settle through one cleanup path. (#305, #307)
+- **Completed tasks are removed from live scheduler state**, so more than 32 lifetime submissions
+  no longer trigger false `BACKPRESSURE`; priority order and FIFO-within-tier are preserved under
+  saturation, and completed progress iterators terminate instead of hanging. (#307)
+- **The E2E API-key setup helper uses an exact configured-status match**, avoiding strict-locator
+  ambiguity between the status badge and its descriptive label. (#307)
+
+### Tests
+
+- Added direct regressions for queue drain and reuse, priority ordering, critical reserve bounds,
+  queued and active timeouts, fresh retry tokens, cancellation, shutdown, pool termination,
+  constructor/replacement failures, listener/timer cleanup, and progress-iterator completion.
+
 ## [1.25.0] — 2026-07-31
 
 ### Added

README.md

@@ -9,7 +9,7 @@
   <img src="https://img.shields.io/badge/TypeScript-7.x_(tsgo)-3178C6?logo=typescript&logoColor=white" alt="TypeScript 7 (tsgo)">
   <img src="https://img.shields.io/badge/AI-Gemini_%7C_OpenAI_%7C_OpenRouter_%7C_Ollama_%7C_WebLLM-4285F4?logo=google" alt="Gemini · OpenAI · OpenRouter · Ollama · WebLLM">
   <img src="https://img.shields.io/badge/Local_AI-WebGPU_%7C_ONNX_%7C_Transformers.js-8B5CF6" alt="WebGPU · ONNX · Transformers.js">
-  <img src="https://img.shields.io/badge/Version-v1.25.0-6366F1" alt="v1.25.0">
+  <img src="https://img.shields.io/badge/Version-v1.26.0-6366F1" alt="v1.26.0">
   <img src="https://img.shields.io/badge/Storage-IndexedDB_v8-F59E0B" alt="IndexedDB v8">
   <img src="https://img.shields.io/badge/PWA-v3.0-5BB974?logo=pwa" alt="PWA v3.0">
   <img src="https://img.shields.io/badge/i18n-19_locales-2869_keys-0EA5E9" alt="i18n 19 locales — 2869 keys">

package.json

@@ -1,7 +1,7 @@
 {
   "name": "worldscript-studio",
   "private": true,
-  "version": "1.25.0",
+  "version": "1.26.0",
   "description": "WorldScript Studio — offline-first, AI-powered creative writing application.",
   "author": "QNBS",
   "keywords": [

public/sw.js

@@ -6,7 +6,7 @@
 // ============================================================
 
 // QNBS-v3 (CodeRabbit): version bump auto-synced from package.json by scripts/sync-sw-version.mjs — every CACHE_STATIC/CACHE_DYNAMIC name changes too, so this alone invalidates all prior caches on next activate.
-const APP_VERSION   = '1.25.0';
+const APP_VERSION   = '1.26.0';
 const CACHE_STATIC  = `worldscript-static-v${APP_VERSION}`;
 const CACHE_DYNAMIC = `worldscript-dynamic-v${APP_VERSION}`;
 const CACHE_IMAGES  = `worldscript-images-v${APP_VERSION}`;

src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "worldscript-studio"
-version = "1.25.0"
+version = "1.26.0"
 description = "AI-powered creative writing and world-building application"
 authors = ["QNBS"]
 license = "MIT"

src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "../node_modules/@tauri-apps/cli/config.schema.json",
   "productName": "WorldScript Studio",
-  "version": "1.25.0",
+  "version": "1.26.0",
   "identifier": "com.worldscript.studio",
   "build": {
     "frontendDist": "../dist",