Enforce an optional TLP release ceiling at the single export chokepoint
so no format (PDF/PPTX/HTML) can bypass it. Classifying a deck stays
optional; the gate only blocks decks classified above the configured
ceiling, and is off by default.
- ClassificationPolicy + ExportDecision: pure, tested decision logic
(release ceiling, fail-closed; null = no gate).
- ExportService.export() evaluates the policy first and refuses without
building or writing anything when blocked.
- Persist the ceiling as maxReleaseExportTlpKey in app settings/prefs
(default off) with a setter on SettingsNotifier.
- Export dialog runs the same check up front and explains a blocked
export before any work starts; app shell builds the policy from
settings.
- Tests: classification_policy_test plus export_service chokepoint tests
asserting a blocked export fails and writes no file.
- Docs: CHANGELOG, README, USER_GUIDE, ARCHITECTURE, SECURITY.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
New export target: a single offline .html rendered from the deck's Marp
Markdown. Bundles (inlines) marked, highlight.js, MathJax (tex-svg, no font
files) and mermaid, so code highlighting, LaTeX math and mermaid diagrams all
render in any browser with no network access.
- MarpHtmlService splits the deck on `---`, strips front-matter, and inlines
the vendored libraries (assets/web_export/) with a </script> breakout guard.
The asset loader is injectable for testing.
- ExportFormat.html wired through ExportService (no rasterization needed),
the export dialog (new button, skips slide rendering) and app_shell
(passes the generated Markdown). Export dialog is now scrollable.
Note: rendered with marked, not Marp Core, so theme fidelity differs from the
in-app preview / PDF / PPTX; the win is a portable, dependency-free deck.
Tests: slide splitting, library inlining, breakout escaping, and an
end-to-end .html export.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
PPTX export now writes each slide's speaker notes into the PowerPoint notes
pane (notesSlide parts + a notesMaster, wired through content-types and
relationships). Slides without notes stay note-free, so the machinery is
omitted entirely when no slide has notes. Note text is XML-escaped and
multi-line notes become separate paragraphs.
Also drop the README line pointing at the removed ci.yml workflow.
Tests: notes embedded only for noted slides, text present and escaped,
slide links to its notesSlide, and all (including notes) XML well-formed.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Privacy: replace the runtime google_fonts fetch with a locally bundled
EB Garamond (variable TTFs + OFL license), so the app no longer contacts
Google's servers. Removes the google_fonts dependency.
PDF export:
- Add a normal/compressed image-quality choice in the export dialog.
Compressed re-encodes slides as JPEG (q60) at 1280px for a small handout,
saved as a separate "-compact" file.
- Add a configurable export directory (Settings → Exportmap); when unset,
exports land next to the deck as before.
- Prefix every export with a UTC timestamp (YYYYMMDDHHMMSS) so exports sort
chronologically and never overwrite each other.
Tests: export service (compression, output dir, timestamp) and an export
dialog widget test asserting the quality choice renders.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Flutter desktop app for building Marp presentations via structured
slide editors, with live preview, fullscreen presenter, and PDF/PPTX
export. Includes Makefile quality gate, CI workflow, and full test suite.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
