{}OPF
OpenPresentation/opf
DocsReferenceView source

PR backlog and public adoption checkpoint — 2026-09-09

The user authorized resolving older PRs as well as completing active adoption work. Closures below preserve branches and explicit remaining work; they do not hide security alerts or claim deferred features were implemented. The broader deterministic layout/font objective remains active.

Current disposition

All nine original PRs have a disposition below. Website recovery #18 and YAML migration #28 are now both merged and publicly verified. This section supersedes the pending gates retained in historical review notes.

YAML #28 merged as b922f2f89fdb1e68f0e71a7f1df638be9c5314d4, tree-identical to reviewed dfdede29458bea1afb13f7f07d5e1079f9e9e515. Linux/Windows application CI 34386017908, artifact CI 34386017825 and Bugbot pass. All eight Edge workflows pass on exact preview dpl_6dXvANdwpkPgRPQ31oSKhrGqFHbx (25.1s) and actual production dpl_9B4YfiTrX3YCvK632T9qwtPTYpMs (28.8s), READY on the merge. All 33 deployed font files and licenses match registry renderer 0.5.1; new public font report. This is offline editing/export/reimport evidence, not new native raster-equivalence evidence. The Arabic glyph gap remains explicit.

The owner's Data-Advantage Actions budget increase restored jobs. Subsequent Linux apt hash failures were resolved with a digest-pinned official Playwright image matching the installed 1.63.0 package; all Linux browser tests execute in it and native Windows checks remain. Core Windows harness #44 also merged as 94e4e019d28a1e16ac7e192b564596077dc2a6fa, after coordinated/core Node 20/24 and Windows/macOS packed-install/CLI CI plus review passed. Its earlier missing-helper fixture failure is fixed. No security alerts or required checks were suppressed, and no OPF package was republished.

Completed production milestone

  • Core PR #40 merged as 4913850e46f0e5fc5e7d17639d6d052c0644023b, tree-identical to reviewed a76dd2d57ab5b3da6e0a1e85d4a0a4e1e08025f7. Node 20/24 package/coordinated CI 34373052810 / 34373052839 and Bugbot pass.
  • Website PR #17 merged as 47e5b4c611a0de7ae6fbd9838bde0c800882ad87, tree-identical to reviewed 56069382de43c504e871cfc9d1e9cc88e83fb1ab. CI 34372811378 and Bugbot pass. Exact preview dpl_Hy7GLS92BjaaZt73unQG7E6sTJjp passes four Edge workflows (8.3s); production dpl_VkqwZ3Wj223SCWPCKX3oqowyT2PL is READY on the merge and all four public workflows pass (8.1s). Published changelog, actual installation command/six complete skills, mobile overflow and byte-matched registry showcase downloads are verified.
  • Gallery PR #23 merged as b28d33564d7da2836f5c5d2e060ea461a7ac96bb, tree-identical to reviewed 58dd6957c7508d9459007cea4616e9c811f17383. CI 34372810518 and Bugbot pass. Exact preview dpl_414aa1sAZehLg7xgdHefMH5zWhcv passes both Edge workflows (10.3s); production dpl_o1NLnSWDsaenu6pSRXfbzXRwLcHp is READY on the merge and both public workflows pass (12.3s), including all eight bundle resources and offline author/edit/undo/OPF/PPTX export/reimport.
  • pptx.dev PR #25 merged as ccb8f496eb6974886cc6130724ada1a19e3e28dc, tree-identical to reviewed 7b555a472e0e024c8cdf227e8b20ab4b8e3e7f68. Linux/Windows application CI 34378313574 and artifact CI 34378313595 pass, as does Bugbot. Exact READY preview dpl_5qQCSwRjygXAjpu2XKiTNBuHR7sX passes seven Edge workflows (22.3s). Production dpl_6LKa8XQ2435ifGbwBZNmzh7gdgkK is READY on the merge; all seven public Edge workflows pass (29.8s), and real sign-in mounts with no page errors or submission. All 33 public font files and licenses match the installed renderer 0.5.1 registry package; hash-bound report.

These are actual deployed renderer 0.5.1/PPTX 0.5.2 adoption results. No package was republished. Existing native fidelity limits remain unchanged.

Website recovery PR #18 subsequently merged as b098688a5c1c365d9f7c614703b692e6b62a5624, tree-identical to reviewed 14bb8559e26700b00e2a0a1459b4abd2151e2503. CI 34379591534 and Bugbot pass. Exact READY preview dpl_2r7ZbYpH3L5ZcsvpoYXFhgxkttrC passes six Edge workflows (22.4s); exact READY production dpl_GFPaPkbLuRuN7AKoGfqmjvzPbtGd passes all six public workflows (19.0s). The recovered playground, hosted references, complete clipboard titles and every advertised reference URL are now verified live. Final review.

The actual Author export downloaded during the public pptx.dev run also passes PowerPoint 16 native text/table edit, save/reopen and schema-valid reimport. Its raster was visually inspected; public-export native report binds the source, native-saved file and raster hashes to production ccb8f496. This one-slide native editability test does not establish arbitrary-file roundtrip or raster equivalence.

Older PR disposition

  • Core #16 (TypeScript 7) closed without merging. Reproduced tsup 8.5.1 / legacy compiler API declaration failure on Windows Node 24.20.0. Issue #41 preserves tooling migration, packed consumer checks and minimum-runtime acceptance criteria.
  • pptx.dev #19 (Commander 15) closed without merging. Rechecked registry engines: Node >=22.12.0 conflicts with the CLI's >=20 promise. Issue #26 tracks a Commander 14.0.3 review and minimum-runtime CI, without dropping Node 20 or suppressing future advisories.
  • pptx.dev draft #6 closed without merging. Issue #27 inventories its 27-file copy/navigation work and requires reconciliation with actual anonymous local workflows. Old claims that Author is a shell and every workbench is REST-powered must not replace current behavior. This is explicit remaining work, not a completed copy migration.
  • Website #4 closed as superseded by #18, branch codex/reference-playground-recovery-20260909, 09ece59c0eb2866815cac1c10640a648c3798784. The recovery merge preserves the original history, adds the missing validator playground and hosted reference pages, fixes the missing clipboard title, and extends the existing generated LLM bundle without downgrading dependencies or duplicating routes. Build: 624 pages/619 unique sitemap URLs. Six local Edge workflows pass (6.6s); exact READY preview dpl_SUesrpxHpEugpu74qejmReznpFhg passes all six (14.3s), including actual clipboard text with Windows newline normalization, TOC targets/scrolling, offline validation and current schema/example discovery. CI 34375590128 passes; final Bugbot/merge/public deployment remain gates.
  • Core #13 merged as 15f6bec9bdb1a21420c658aaa8da9449b491c38c, tree-identical to reviewed 161401dafd6ce4f2d1b50b3d864b6afd8765a24d, with main merged, lock conflicts resolved and current security patches retained. Core/CLI typechecks and tests pass on Windows Node 20/24 after applying the existing LF checkout policy to the old worktree. The new TypeScript consumer test reaches payloads through the exported Presentation type: valid nested/rich content compiles; arbitrary extra object properties/indexing is rejected, matching the existing schema. The observable type tightening is explicitly Unreleased in CHANGELOG; never republish 0.7.0. Core Node 20/24 CI 34376506941, coordinated renderer/editor/converter Node 20/24 CI 34376506991, and Windows/macOS Node 20/24 CLI CI 34376506928 all pass. Final compatibility review. An unrelated Windows local-link harness failure (symlink privilege / npm batch spawning) remains to fix separately.
  • pptx.dev #20 closed as superseded by #28, branch codex/yaml5-migration-20260909, 6c19b11. The official v5 migration changes exports, bundled types and loader semantics; namespace imports, explicit core schema with merge support, empty frontmatter handling and preservation/security tests are implemented. Browser tests exposed and fixed JSON downloads containing the YAML/Markdown buffer, font disposal preventing offline malformed-source recovery, and deferred YAML grammar loading failing on first offline use. On the merged adoption base: frozen installation, 596 tests/61 files, typecheck, production build, audit with zero reported vulnerabilities and eight local Edge workflows (18.6s) pass. CI/review/exact preview/public verification remain gates. Multilingual content is preserved in source/downloads, while the default Carlito missing-Arabic-glyph error remains explicit; this does not establish multilingual rendering.

Historical review corrections and gates, resolved above

The owner restored the Data-Advantage Actions budget after the initial YAML failure below. Run 34382820569 attempt 2 is executing on Linux and Windows, and final Bugbot review has been requested once. The newest audit finds only three active PRs across all seven repositories: YAML #28 and core layout #43 / Windows harness #44. All nine original PRs have a disposition. Layout #43 subsequently passed every check/review and merged as 1cc549183c6fd2e885f06410471e7142be69410a; no package was published.

Merged PR #25 clears stale ghost proposals/format errors after shared navigation. Its first preview caught a delayed account-widget chunk after going offline. Disabling UI prefetch globally broke actual sign-in; a narrowed version still risked signed-in widgets and client navigation. Both changes were rejected before merge. The final revision restores the original Clerk provider entirely and changes the offline worker test to await the configured SDK's loaded UI version. CI retains browser failure traces and gives initial font/preview readiness a bounded 20-second wait. Both review threads are resolved; final exact-head review. Anonymous checks do not establish signed-in account behavior.

Website #18's final review found an advertised /docs/reference/cli URL without a corresponding source route. Hosted discovery now uses exactly the source-doc directory/filter, and a compatibility alias cannot overwrite a real hosted CLI document. Absent/present CLI fixture checks plus real HTTP checks of every advertised reference URL pass. A stalled review was manually restarted once; the final review and public verification are complete as recorded above.

YAML #28 is now e9f21ec007d3e382234c7bd8e062bc062fad471f. Non-finite values and cyclic aliases return actionable errors instead of changing JSON content. Linux CI 34380362278 exposed unconditional Escape interception; b248297 fixed it and passed both Linux/Windows CI 34381496268, eight exact-preview workflows (26.1s) and three repetitions of the four Inspector/worker workflows (12 runs). Review then found comment-only Markdown frontmatter. The latest fix uses the parser to distinguish zero/one/multiple documents and preserves exact title/body through comment-only Markdown, SVG recovery and actual JSON downloads. Local 598 tests/61 files, fresh build and all eight Edge workflows pass. Exact READY preview dpl_CEw5yBz6cv622CbHvHfzNYvVqz5x passes eight workflows (25.8s). CI 34382820569 ran no steps: both jobs were refused because GitHub reports failed account payments or a spending-limit issue. Keep the PR open; restore GitHub Billing & plans, rerun exact-head Linux/Windows CI, finish review, then merge and verify production. This migration is not deployed publicly.

A fresh GitHub audit finds zero open Dependabot security alerts in all seven repositories. No security alert has been dismissed or disabled. Notification grouping/scheduling from the prior milestone remains. The authenticated Vercel CLI resolved the previous dashboard dependency: all three public-site projects now have gitComments.onCommit=false and gitComments.onPullRequest=false, with deployment creation still enabled and commit status reporting not disabled. Fresh read-back verification is recorded in the settings report. The existing status checks retain deployment results/preview links; only redundant comment notifications were changed. GitHub security alerts, CI and review checks remain enabled.