Repository navigation
Add startup welcome messages and feedback links - #8
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 384f37b9ea
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| return not self.IsNameplateAugmentationBlockedInCurrentContext | ||
| or self:IsNameplateAugmentationBlockedInCurrentContext() | ||
| end, | ||
| canMutate = LibChev.CanMutateOwnedRegion, |
There was a problem hiding this comment.
When C_RestrictedActions.CheckAllowProtectedFunctions(region, true) denies a mutation while the coarse restriction predicates are inactive, this policy still authorizes every feedback-window setter because CanMutateOwnedRegion checks only accessibility and IsProtected. Unlike the existing debug UI policy in Core.lua, the feedback UI never delegates to CanMutateNameplateFrame, so clicking a feedback link can attempt denied mutations; the surrounding pcall can provide the chat fallback but cannot make those attempts taint-safe. Compose the owned-region check with the addon's native permission check before allowing mutations.
AGENTS.md reference: AGENTS.md:L9-L10
Useful? React with 👍 / 👎.
Add the approved startup announcement with the installed version, supported client families, settings command, and addon-specific CurseForge/GitHub feedback links. Print once per login/UI reload through the shared private welcome controller. Clicking a feedback label selects only the fixed destination URL in a compact native-style copy window; unavailable registration or restricted UI falls back to plain URLs.
Vendor exact libchev 1.2.0 and pin CI to the same revision. Announcements run after normal startup and skip unavailable helpers so a partial installation cannot stop addon activation. The handlers accept only their own two fixed link payloads and never traverse foreign link/context tables.
Validation: 118 tests pass in both orders under Lua 5.1/5.2; client profiles, all Lua parsing, TOC paths, vendor hashes, release-script syntax and diff checks pass. NoPoizen additionally passes seven startup/copy-window/client smoke profiles and Python package/source tests. Live rendering remains separate.