Integrate PathLab Forge 1.0.0-rc.1 candidate

.gitattributes

@@ -0,0 +1 @@
+src/test/resources/study/viewer-authoritative-v1.json text eol=lf

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, windows-latest, macos-latest]
+        os: [windows-latest, macos-latest]
 
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -48,6 +48,15 @@ jobs:
       - name: Frontend tests
         run: pnpm --dir frontend test
 
+      - name: Desktop dependency lock
+        run: pnpm --dir desktop install --frozen-lockfile
+
+      - name: Desktop boundaries and release receipt tests
+        run: pnpm --dir desktop test
+
+      - name: Desktop syntax
+        run: pnpm --dir desktop check
+
       - name: Test
         if: runner.os != 'Windows'
         run: ./gradlew --no-daemon test

.gitignore

@@ -43,7 +43,7 @@ Thumbs.db
 *.dzi
 
 # Runtime and packaging
-runtime/
+/runtime/
 dist/
 installers/
 *.dmg
@@ -55,3 +55,6 @@ installers/
 
 # Local evidence that may contain sensitive names
 docs/evidence/local/
+
+# Generated bundled Java service
+/desktop/resources/service/

AGENTS.md

@@ -2,7 +2,7 @@
 
 ## Purpose
 
-PathLab Forge is a standalone Windows/macOS desktop application. It performs computationally expensive WSI work locally and connects to PathLab Viewer through a versioned API, resumable tus upload and the `.plslide` package.
+PathLab Forge is a standalone Windows/macOS desktop application. It performs computationally expensive WSI work locally and connects to PathLab Viewer through a versioned desktop API, offset-aware transfer and verified OME artifacts; Teaching delivery explicitly uses static DZI packages.
 
 The separate PathLab Viewer repository owns the server library, storage accounting, package import, private preview, publication grants, folder/collection sharing, Trash, annotations and static delivery.
 
@@ -17,11 +17,11 @@ For every Codex run:
 5. `docs/integration/CURRENT_VIEWER_BASELINE.md` when a task depends on Viewer internals
 6. `docs/compatibility/OS_MATRIX.md` when platform behavior is involved
 
-Do not read or implement every future milestone.
+The approved release plan covers all non-AI milestones. Follow its dependency order and assigned worktree ownership.
 
 ## Current Viewer integration rules
 
-- New desktop APIs belong under `/api/v2/desktop`; tus remains `/api/v1/uploads/`.
+- Reuse the existing offset-aware desktop upload. New desktop contracts belong under `/api/v2/desktop`; retain reviewed compatibility routes where required.
 - Forge local states do not mirror Viewer states one-to-one.
 - Viewer’s MVP prepared flow reuses `uploading → queued → validating → converting → ready_private` and distinguishes the path through `ingest_mode`.
 - Forge uses local `SERVER_PROCESSING` while polling the exact server state separately.
@@ -52,16 +52,16 @@ PathLab Forge does not own:
 - public tile delivery;
 - Viewer library search, collections, sharing or Trash;
 - Viewer annotations;
-- student/teacher workflows;
+- Viewer course authority and learner records; Forge owns offline Study Pack authoring.
 - AI diagnosis;
 - fluorescence analysis;
-- Z-stack or time-series navigation;
+- Unsupported channel, Z-stack or time-series claims; qualified reader views are included.
 - PACS/DICOM integration;
 - automatic public publication by default.
 
 ## Working rules
 
-- Work on exactly one active-plan task.
+- Work on the assigned focused batch within the approved complete release plan.
 - Create a focused `codex/` branch.
 - Use test-driven development for behavior changes.
 - Prefer small interfaces and adapters over direct dependency coupling.
@@ -73,7 +73,7 @@ PathLab Forge does not own:
 - Preserve completed local packages across upload failures.
 - Never reconvert solely because upload failed.
 - Do not invent a Viewer API, schema, thumbnail policy or state transition that conflicts with the reviewed baseline.
-- Commit the completed task, return the required report, and stop.
+- Return commits, focused/full checks and evidence; continue coordinated work until the approved plan is handled.
 
 ## Resource defaults
 

CODEX_START_HERE.md

@@ -1,35 +1,13 @@
-# Codex Start Here — PathLab Forge
+# Start here: PathLab Forge desktop release
 
-The private repository already exists:
+Read `docs/plans/active/current.md` and `docs/plans/active/RELEASE_PROGRESS.md` first. The approved work is the complete non-AI Windows/macOS release, not the obsolete F1.1 foundation task.
 
-```text
-Enksodsoon/PathLab-Forge
-```
+Use Java 17, React, SQLite and the existing streaming pipeline. Electron owns the desktop window and service lifecycle. Normal delivery retains verified OME; Teaching delivery explicitly produces independently identified static DZI. Viewer remains authoritative for identity, permissions, privacy, publication and learner records.
 
-The integration plan has been re-based on the current PathLab Viewer library v2 architecture.
+Build in isolated `codex/` worktrees, with one integration owner and at most three active workers. Integrate focused commits and run checks on the combined head. Preserve user data and historical evidence. Never treat unverified runtime rights, signing, actual-platform testing, deployment or production verification as complete.
 
-## First Codex prompt
+Development: `gradlew test` runs Java tests and the production interface build. Run frontend tests separately with `pnpm test` in `frontend`, desktop checks with `pnpm test` and `pnpm check` in `desktop`, and repository policy with `scripts/verify-repo.ps1`. Use JDK 17 explicitly on machines whose default Java differs.
 
-Paste only this:
+`gradlew run --args=--serve` retains the browser/headless development mode. The packaged Electron app uses `--desktop`, bundled resources, private readiness and one-time local authorization. Development runtime discovery does not qualify a clean-machine release.
 
-```text
-Open Enksodsoon/PathLab-Forge.
-
-Read AGENTS.md and docs/plans/active/current.md. Work on Task F1.1 only: Java 17 build foundation and batch domain state machine.
-
-The active task is intentionally independent from PathLab Viewer implementation. Do not add QuPath, Bio-Formats, OpenSlide, libvips, JavaFX, SQLite, package schemas, server upload, WSI conversion, installers or later tasks.
-
-Use test-driven development exactly as specified:
-1. create the failing tests;
-2. run them and confirm the expected failure;
-3. implement the smallest complete solution;
-4. run focused and full checks;
-5. review scope and naming;
-6. commit Task F1.1;
-7. return the required TASK RESULT report;
-8. stop.
-```
-
-## Why the first task remains small
-
-PathLab Viewer now has folders, collections, storage accounting, cached thumbnails, publication grants, sharing and annotations. Those are server-owned systems. The first Forge task builds only a stable local batch state model, allowing later conversion and upload adapters to integrate without coupling the core to Viewer internals.
+Record acceptance receipts and remaining blockers in the progress register. No paid service, certificate purchase or cloud spend is automatic.

LICENSE_STATUS.md

@@ -1,6 +1,6 @@
 # License Status
 
-No final distribution license is selected yet.
+The approved target is GPL-3.0-or-later, subject to exact dependency and corresponding-source review. No final redistribution approval is granted yet.
 
 The application is intended to use open-source components that may impose redistribution or copyleft requirements. Before publishing source or installers, complete `docs/licensing/DEPENDENCY_REVIEW.md` and decide the compatible application license.
 

README.md

@@ -1,6 +1,6 @@
 # PathLab Forge
 
-**PathLab Forge** is the local desktop companion for PathLab Viewer.
+**PathLab Forge** is the local desktop companion for PathLab Viewer. The active non-AI Windows/macOS release is in development; see `docs/plans/active/current.md` and `docs/plans/active/RELEASE_PROGRESS.md` for current implementation and qualification.
 
 It opens supported whole-slide image datasets on Windows and macOS, lets the user inspect the correct image series, crop or downsample, renders standardized 8-bit RGB through a temporary pyramidal OME-TIFF, generates a compact PathLab-compatible DZI, processes slides in batch, and uploads prepared packages resumably.
 
@@ -9,10 +9,10 @@ PathLab Forge is deliberately separate from `PathLab-Viewer`.
 ```text
 PathLab Forge desktop
     -> local WSI read / view / crop / convert
-    -> temporary local OME-TIFF staging
-    -> verified .plslide with compact DZI + thumbnail
-    -> staging OME and loose DZI removed
-    -> HTTPS + tus
+    -> retained verified OME-TIFF artifact (normal delivery)
+    -> explicit Teaching delivery: separate verified DZI package + thumbnail
+    -> original sources and completed artifacts preserved
+    -> HTTPS + existing offset-aware desktop transfer
 PathLab Viewer server
     -> safe validation / import
     -> existing library folder or Unfiled
@@ -33,7 +33,7 @@ The latest Viewer is a folder-aware library rather than a flat upload list. Forg
 
 Forge does not replace any of those systems.
 
-## Run the viewer-first shell
+## Development browser mode (desktop release uses Electron)
 
 The desktop shell binds only to a
 random `127.0.0.1` port, opens a one-time launch URL, and establishes an HttpOnly,