fixed things 2

Author: stuchain

docs/release/guides/reproducible-builds.md

@@ -162,6 +162,6 @@ Lock the base image digest (e.g. `python:3.13.7-slim@sha256:...`) for full repro
 
 ## Related Documentation
 
-- [Release Deployment Runbook](../release/release-deployment-runbook.md) – Full release process and build
-- [Checksum Signing](../release/checksum-signing.md) – GPG signing of SHA256SUMS
-- [Key Management](../release/key-management.md) – Certificate handling
+- [Release Deployment Runbook](../release-deployment-runbook.md) – Full release process and build
+- [Checksum Signing](../checksum-signing.md) – GPG signing of SHA256SUMS
+- [Key Management](../key-management.md) – Certificate handling

docs/roadmap.md

@@ -0,0 +1,7 @@
+# Roadmap
+
+High-level planning and roadmap are maintained in the release section:
+
+- **[Maintenance Roadmap](release/maintenance-roadmap.md)** — Refactors, upgrades, tech-debt backlog, and review cadence.
+
+For release planning and schedule, see [Release Schedule](release/release-schedule.md) and [Release Strategy](release/release-strategy.md).

src/cuepoint/services/onboarding_service.py

@@ -188,4 +188,4 @@ def _set_state(
                 onboarding_dismissed=onboarding_dismissed,
                 onboarding_version=onboarding_version,
             )
-        )
+        )

src/cuepoint/ui/dialogs/run_summary_dialog.py

@@ -56,8 +56,16 @@ def _setup_ui(self) -> None:
         # Single line: playlist + key stats
         stats = (
             f"{self._summary.total_tracks} tracks, {self._summary.matched} matched"
-            + (f", {self._summary.unmatched} unmatched" if self._summary.unmatched else "")
-            + (f", {self._summary.low_confidence} low confidence" if self._summary.low_confidence else "")
+            + (
+                f", {self._summary.unmatched} unmatched"
+                if self._summary.unmatched
+                else ""
+            )
+            + (
+                f", {self._summary.low_confidence} low confidence"
+                if self._summary.low_confidence
+                else ""
+            )
             + f" — {self._summary.duration_sec:.1f}s"
         )
         if self._summary.error_count or self._summary.warning_count:

src/cuepoint/ui/dialogs/settings_dialog.py

@@ -91,7 +91,9 @@ def init_ui(self):
 
         # Connect change signals to update Apply button state
         self.config_panel.settings_changed.connect(self._update_apply_button)
-        self.config_panel.preflight_check.stateChanged.connect(self._update_apply_button)
+        self.config_panel.preflight_check.stateChanged.connect(
+            self._update_apply_button
+        )
         self.config_panel.checkpoint_every_spin.valueChanged.connect(
             self._update_apply_button
         )

src/cuepoint/ui/main_window.py

@@ -1234,7 +1234,9 @@ def create_menu_bar(self) -> None:
         diagnostics_menu.addAction(report_issue_action)
 
         test_sentry_action = QAction("Send &test event to Sentry", self)
-        test_sentry_action.setToolTip("Send a test error to Sentry to verify reporting is working")
+        test_sentry_action.setToolTip(
+            "Send a test error to Sentry to verify reporting is working"
+        )
         test_sentry_action.triggered.connect(self._on_test_sentry_report)
         diagnostics_menu.addAction(test_sentry_action)
 
@@ -1898,7 +1900,7 @@ def _on_test_sentry_report(self) -> None:
                     self,
                     "Sentry test",
                     "Error reporting is off.\n\n"
-                    "Enable it in Settings → Privacy → \"Send error reports to help fix bugs\", "
+                    'Enable it in Settings → Privacy → "Send error reports to help fix bugs", '
                     "then try again.",
                     QMessageBox.Ok,
                 )
@@ -3086,13 +3088,16 @@ def _download_and_install_update(self, update_info: Dict) -> None:
                         )
                         return
                 else:
-                    logger.warning("Update has no checksum in appcast (e.g. EdDSA only)")
+                    logger.warning(
+                        "Update has no checksum in appcast (e.g. EdDSA only)"
+                    )
                     reply = QMessageBox.warning(
                         self,
                         "Update Not Verified",
                         "This update does not include a checksum in the feed, so the download could not be verified.\n\n"
                         "You can install anyway (download was over HTTPS from the release server), or open the release page to download manually.",
-                        QMessageBox.StandardButton.Ok | QMessageBox.StandardButton.Cancel,
+                        QMessageBox.StandardButton.Ok
+                        | QMessageBox.StandardButton.Cancel,
                         QMessageBox.StandardButton.Ok,
                     )
                     if reply != QMessageBox.StandardButton.Ok:
@@ -3145,9 +3150,7 @@ def _show_manual_install_dialog(
         msg.setWindowTitle(title)
         msg.setText(message)
         msg.addButton(QMessageBox.StandardButton.Cancel)
-        update_btn = msg.addButton(
-            "Update manually", QMessageBox.ButtonRole.ActionRole
-        )
+        update_btn = msg.addButton("Update manually", QMessageBox.ButtonRole.ActionRole)
         msg.exec()
         if msg.clickedButton() == update_btn:
             self._open_installer_folder(installer_path)
@@ -3220,8 +3223,7 @@ def _install_update(self, installer_path: str) -> None:
             logging.error(f"Update installation failed: {e}")
             self._show_manual_install_dialog(
                 "Installation Error",
-                f"Failed to install update:\n\n{str(e)}\n\n"
-                "Please install manually.",
+                f"Failed to install update:\n\n{str(e)}\n\nPlease install manually.",
                 installer_path,
             )
 

src/cuepoint/update/update_checker.py

@@ -189,13 +189,17 @@ def _fetch_appcast(self, url: str, timeout: int) -> bytes:
             try:
                 try:
                     import certifi
+
                     ssl_context = ssl.create_default_context(cafile=certifi.where())
                 except ImportError:
                     ssl_context = ssl.create_default_context()
             except Exception as ssl_error:
                 import logging
+
                 logger = logging.getLogger(__name__)
-                logger.error(f"Failed to create SSL context: {ssl_error}", exc_info=True)
+                logger.error(
+                    f"Failed to create SSL context: {ssl_error}", exc_info=True
+                )
                 raise UpdateCheckError(f"SSL context creation failed: {ssl_error}")
 
             # Fetch with timeout
@@ -204,13 +208,18 @@ def _fetch_appcast(self, url: str, timeout: int) -> bytes:
                     request, timeout=timeout, context=ssl_context
                 ) as response:
                     if response.status != 200:
-                        raise UpdateCheckError(f"HTTP {response.status}: {response.reason}")
+                        raise UpdateCheckError(
+                            f"HTTP {response.status}: {response.reason}"
+                        )
 
                     return response.read()
             except TimeoutError as timeout_error:
                 import logging
+
                 logger = logging.getLogger(__name__)
-                logger.error(f"Request timeout fetching appcast from {url}: {timeout_error}")
+                logger.error(
+                    f"Request timeout fetching appcast from {url}: {timeout_error}"
+                )
                 raise UpdateCheckError(f"Request timeout: {timeout_error}")
 
         except urllib.error.URLError as e:
@@ -338,8 +347,10 @@ def _parse_item(self, item: ET.Element) -> Optional[Dict]:
             checksum = enclosure.get(f"{{{self.SPARKLE_NS}}}sha256")
             if checksum:
                 checksum = checksum.strip().lower()
-            if not checksum and signature and PackageIntegrityVerifier.is_sha256_hex(
-                signature.strip().lower()
+            if (
+                not checksum
+                and signature
+                and PackageIntegrityVerifier.is_sha256_hex(signature.strip().lower())
             ):
                 checksum = signature.strip().lower()
             if checksum and not PackageIntegrityVerifier.is_sha256_hex(checksum):
@@ -529,7 +540,9 @@ def _find_latest_update(self, items: List[Dict]) -> Optional[Dict]:
             elif base_comparison == 0:
                 # Same base version (e.g. 1.0.0 vs 1.0.0-feb10): do not offer as update.
                 # Only offer when base version increases (e.g. 1.0.0 -> 1.0.2).
-                logger.debug(f"Same base version: {base_candidate} == {base_current}, skipping")
+                logger.debug(
+                    f"Same base version: {base_candidate} == {base_current}, skipping"
+                )
                 continue
             # else: base_comparison < 0, candidate is older, skip
 

src/cuepoint/update/update_installer.py

@@ -200,9 +200,7 @@ def _install_windows(self, installer_path: Path) -> tuple[bool, Optional[str]]:
 
             # Fallback: Launch installer directly (visible, no /S)
             if not launcher_ps1 or not launcher_ps1.exists():
-                logger.info(
-                    "Launcher script not found, launching installer directly"
-                )
+                logger.info("Launcher script not found, launching installer directly")
                 logger.info("Note: Installer will detect if app is running")
                 logger.info(f"Installer path: {installer_path}")
                 logger.info(f"Installer absolute path: {installer_path.resolve()}")