Summary

Full project audit and improvement pass covering infrastructure, security, design system, and UX.

Infrastructure & Quality

• CI/Release: Remove redundant auto-tag.yml, unify GH_TOKEN, fix GH Actions security patterns
• Security: Fix command injection in plugin install (exec → execFile)
• TypeScript: Standardize all 16 tsconfigs to extend base with strict mode + noUncheckedIndexedAccess
• ESLint: Enable typed linting with no-floating-promises (0 warnings across entire codebase)
• Electron: Upgrade 29 → 35 (Chromium 134, Node.js 22)
• Dependencies: Sync lucide-react, TypeScript, fumadocs (15→16), remove stale @types/react override
• Tests: Add 3 renderer store test suites (51 total desktop tests)

Design System

• Primitives: Button (4 variants), Toast (4 types), Modal (glass effect, portal)
• Typography tokens: font-weight, line-height, letter-spacing
• Token consistency: Replace ~60 hardcoded spacing values with --space-* tokens across 14 CSS modules
• Button consolidation: Replace 30+ ad-hoc button styles with Button primitive in all settings sections
• AiSection: Migrate inline styles to CSS module classes

UX Improvements

• Save indicator: "Saving..."/"Saved" in editor + flush pending saves before app close
• Toast notifications: Plugin install/uninstall/toggle success/error feedback
• AI errors: Humanize raw error codes to actionable user guidance
• Update banner: Non-intrusive notification when updates are available
• Settings reset: "Reset to Defaults" button in settings sidebar
• Welcome screen: First-run onboarding with feature highlights
• Sync progress: Pending change count, status, and retry in sidebar footer

Features

• Advanced search: Collapsible filter bar with status pills, tag dropdown, sort controls
• Plugin marketplace: Wire BrowseTab to API, download + install from URL, offline fallback
• Table rendering: Complete CSS for editor/preview parity (WYSIWYG widget, insert modal, sortable headers)
• Document export: YAML frontmatter, per-note file export (Cmd+Shift+E), improved HTML conversion (tables, blockquotes, images, ordered lists)

Test plan

• pnpm typecheck — 17/17 workspaces pass
• pnpm test — 16/16 tasks, 93 tests pass
• pnpm lint — 0 floating promise warnings
• pnpm install — clean, no broken symlinks
• Electron 35 native deps rebuild successfully

🤖 Generated with Claude Code

Summary by CodeRabbit

• New Features

  • Added first-run onboarding experience with welcome screen
  • Implemented note export to file with YAML metadata
  • Added collapsible filter bar for note list organization
  • Introduced in-app update notification banner
  • Added plugin marketplace with offline fallback capability
  • Implemented end-to-end encryption key management UI
  • Added toast notification system for user feedback

• Bug Fixes

  • Strengthened plugin installation security with validation and path traversal checks
  • Improved pre-push hook performance by removing test execution
  • Fixed promise handling across multiple components to prevent warnings

• Dependencies

  • Updated build tooling and GitHub Actions to latest versions
  • Updated documentation framework packages