Repository navigation
fix(upstream): integrate compatible fixes and catalog tooling - #2
Conversation
Upgrade certificate verification, bundled roots and the WebSocket TLS stack. Preserve Flowdepth dependencies and reconnect handling while adapting HTTPS proxy connections. Upstream-Commit: 0f870dc06091e56fb100700f85115a24c5466414
Upstream-Commit: 82e3cf5186d8fdd56f745a118e379853be07b16e
Upstream-Commit: 35610562c9b9c6242b654f814125c58818840105
Upstream-Commit: 4e3b93fef8a49b060260e540740e2e97fa526021
Adapt the upstream cursor behavior to Flowdepth drawing state. Upstream-Commit: 005caded90256fe38b8185cde5d3c537b401a0bd
|
Warning Review limit reachedYou've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Next included review available in 53 minutes. View limit details
No actionable comments were generated in the recent review. Walkthrough
Merge Risk:
|
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 63e7a4599d
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
CodeRabbit Verify cannot start because this repository is not enabled for PR Verify. Enable PR testing in Verify settings. CodeRabbit Verify can be triggered again using the |
|
@coderabbitai full review |
Action performed
|
|



Description
Selectively integrate compatible changes from
flowsurface-rs/flowsurfacethrough50c06caac0cf7ce9c3bcaabcf99fbd4e4e0f6746(fetched November 3, 2026). Flowdepth previously reviewed upstream throughee32572and retains its own chart architecture.catalogcommand with deterministic metadata, relative paths and SHA-256 checksums.Attribution and integration decisions
Each imported commit retains upstream author akenshaw akenshaw@pm.me and original author date, with its full source SHA in an
Upstream-Committrailer. Commit titles follow Flowdepth conventions; the committer records integration. Existing project lineage, licenses, branding and ownership are preserved. This is a selective port, not a declaration that upstream history is fully merged.82e3cf50f870dc1.0.11rather than upstream's1.0.10; unrelated package versions remain unchanged. Cargo also normalizes several Windows dependency edges to the existingwindows-sys 0.61.2.4b7e95e6ce58af27024dc4e3b93f0e6d71e005cade3561056c2761617a56fb250c06caOlder previously reviewed changes (multi-ticker Time & Sales, packaging, Windows multi-window policy and chart rewrite) remain outside this integration.
Motivation
Bring upstream fixes and compatible tooling into Flowdepth while preserving its order-flow extensions, options analytics, saved layouts and attribution. Reordering panels should not cause redundant market stream reconnections.
Type of change
Checks performed
Passed on Windows using pinned Rust 1.95.0 and
RUSTFLAGS="-D warnings"against final commit3ad5733:cargo fmt --all -- --checkcargo check --workspace --all-targets --all-features --lockedcargo clippy --workspace --all-targets --all-features --locked -- -D warningscargo test --workspace --all-targets --all-features --locked— 421 passed, 0 failed, 11 ignored by the suite.cargo run --locked -p flowsurface-indicator-engine --bin flowsurface-indicator -- test data/indicators/sources --namespace core— 9 sources passed.cargo run --locked -p flowsurface-indicator-engine --bin flowsurface-indicator -- test indicators/sources --namespace catalog— 27 sources passed.git diff --check origin/developAlso compared author name, email and original author date for all five imported commits against their source commits; all match. Linux/macOS validation is left to CI.
Regression tests cover subscription ordering across exchanges, reversed pane order and duplicate consumers, plus catalog ordering, repeatable bytes, source hashes, output preservation on validation failure and source overwrite protection.
Review follow-up: reproduced Codex finding
discussion_r4458244154on Windows withalpha.INDoverwriting the temporaryalpha.indfixture before the fix. Commit3ad5733rejects all eight ASCII case variants of.ind, with regression coverage confirming the source remains unchanged. It also replaces theto_strclosure with a method reference, addressing Sonar issueAaGiddinsY6qkvQcIrfs. The complete quality gate above was rerun successfully after the fix.Manual testing notes: Desktop GUI and live exchange/proxy connections were not exercised.
UI evidence
No screenshots: the GUI was not launched. Visible changes are cursor feedback and axis zoom sensitivity.
AI assistance
AI assistance: Codex reviewed upstream changes, resolved the lockfile conflict, adapted drawing cursor behavior, added regression tests, fixed mixed-case source overwrite protection after review and prepared the integration commits and PR. The imported implementations retain original upstream authorship.
Compatibility and data impact
No saved-layout or market-cache schema changes. Existing quantity preferences, indicators and recovery behavior remain intact. The new catalog command explicitly writes a requested JSON file and does not install indicators or contact an online catalog. TLS trust roots and certificate validation change with the dependency upgrade; no live exchange or HTTPS proxy connection was tested.