frostdev-ops · Oct 31, 2026 · Oct 31, 2026 · Oct 31, 2026 · Oct 31, 2026 · Oct 31, 2026
diff --git a/.github/pins/chromium.pins b/.github/pins/chromium.pins
@@ -0,0 +1,5 @@
+# The Chromium that .github/pins/playwright.pins's playwright-core installs, checked by tools/dev/ci-chromium.js before it runs. Each hash
+# matches Google's Chrome for Testing zip of that version, unpacked.
+chromium-1243 153.0.8010.12 linux-x64 de81033ef46a2ebc03cd1865fccace6f7955ba3b8b45adb4e485ecf51ebdceac
+chromium-1243 153.0.8010.12 darwin-arm64 37eeed7899f5e4b2524e05af529c8ca9ca4dce83ffee579b85b92ec04dc797a4
+chromium-1243 153.0.8010.12 win32-x64 bdb90fb4515be221f8b2b9abe8fb3f9f8cd3af6fd06873872e4ccc921ddc28db
diff --git a/ci/ffmpeg.pins → .github/pins/ffmpeg.pins b/ci/ffmpeg.pins → .github/pins/ffmpeg.pins
diff --git a/.github/pins/playwright.pins b/.github/pins/playwright.pins
@@ -0,0 +1,4 @@
+# The Playwright the browser gate installs (.github/workflows/browser.yml), checked by tools/vendor/npm-integrity.js. To upgrade,
+# change PLAYWRIGHT there, copy each package's `npm view <name>@<version> dist.integrity` here, and repin .github/pins/chromium.pins and .github/pins/ffmpeg.pins.
+playwright@1.63.0 sha512-+7ziBLidS4NaNCdt57SUDT+wYmmd5fmiQejUic/kb+YsYSCPyOOE9sebzMjNmQrsnNpDJqd4WHvV/8lfKfUDUg==
+playwright-core@1.63.0 sha512-rYCsBF/M5HjUch52bbtVONEFjv6Xu8sm8h72dNlR5bzIE1fvC/bxgspzkjSfU+MweEMmPM8KJebG6nnyxo5mCg==
diff --git a/.github/workflows/browser.yml b/.github/workflows/browser.yml
@@ -20,21 +20,21 @@ jobs:
         with:
           node-version: 26
 
-      # Install scripts off; every package checked against ci/playwright.pins, and Chromium/FFmpeg against ci/*.pins,
+      # Install scripts off; every package checked against .github/pins/playwright.pins, and Chromium/FFmpeg against .github/pins/*.pins,
       # before either runs.
       - name: Install the pinned Playwright
         run: |
           echo "NODE_PATH=$RUNNER_TEMP/playwright/node_modules" >> "$GITHUB_ENV"
           echo "PLAYWRIGHT_BROWSERS_PATH=$RUNNER_TEMP/ms-playwright" >> "$GITHUB_ENV"
           npm install --prefix "$RUNNER_TEMP/playwright" --no-save --no-package-lock --ignore-scripts --no-audit --no-fund --registry https://registry.npmjs.org/ "playwright@$PLAYWRIGHT"
-          node scripts/npm-integrity.js "$RUNNER_TEMP/playwright/node_modules/.package-lock.json" ci/playwright.pins playwright playwright-core
+          node tools/vendor/npm-integrity.js "$RUNNER_TEMP/playwright/node_modules/.package-lock.json" .github/pins/playwright.pins playwright playwright-core
       - name: Install its Chromium
         run: |
           PLAYWRIGHT_SKIP_VALIDATE_HOST_REQUIREMENTS=1 "$RUNNER_TEMP/playwright/node_modules/.bin/playwright" install --with-deps --no-shell chromium
-          node scripts/ci-chromium.js
+          node tools/dev/ci-chromium.js
 
-      - name: Settings, popup, sites and pointer checks
-        run: nice -n 10 node scripts/ci-browser-checks.js "$RUNNER_TEMP/browser-evidence"
+      - name: Settings, popup, sites, pointer and agent link checks
+        run: nice -n 10 node tools/dev/ci-browser-checks.js "$RUNNER_TEMP/browser-evidence"
 
       - name: Keep the logs and screenshots
         if: failure()

diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml
@@ -32,13 +32,13 @@ jobs:
 
       # A tag that names another version would attach a zip of the manifest's version to the wrong release.
       - name: Check the tag names the manifest's version
-        run: test "v$(node -p 'require("./manifest.json").version')" = "${GITHUB_REF_NAME%%-rc*}"
+        run: test "v$(node -p 'require("./extension/manifest.json").version')" = "${GITHUB_REF_NAME%%-rc*}"
 
       - name: Validate the tagged source
         run: node --test
 
       - name: Build the Chrome zip
-        run: ./package.sh
+        run: tools/build/package.sh
 
       - name: Hand the zip to the release job
         uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -53,7 +53,7 @@ jobs:
       # The worker's code takes crypto from the browser, and Node 18 has no global one: the flag gives the test files one.
       # The helper processes they start run without it.
       - name: MCP and agent tests
-        run: node ${{ matrix.node == 18 && '--experimental-global-webcrypto' || '' }} --test test/mcp-*.test.js test/agent-*.test.js
+        run: node ${{ matrix.node == 18 && '--experimental-global-webcrypto' || '' }} --test test/agents/mcp-*.test.js test/*/agent-*.test.js
 
       # As browser.yml installs it: scripts off, every package and both builds checked against their pins before any of
       # it runs. No --with-deps: on Windows it only adds a media pack.
@@ -63,15 +63,15 @@ jobs:
           echo "NODE_PATH=$RUNNER_TEMP/playwright/node_modules" >> "$GITHUB_ENV"
           echo "PLAYWRIGHT_BROWSERS_PATH=$RUNNER_TEMP/ms-playwright" >> "$GITHUB_ENV"
           npm install --prefix "$RUNNER_TEMP/playwright" --no-save --no-package-lock --ignore-scripts --no-audit --no-fund --registry https://registry.npmjs.org/ "playwright@$PLAYWRIGHT"
-          node scripts/npm-integrity.js "$RUNNER_TEMP/playwright/node_modules/.package-lock.json" ci/playwright.pins playwright playwright-core
+          node tools/vendor/npm-integrity.js "$RUNNER_TEMP/playwright/node_modules/.package-lock.json" .github/pins/playwright.pins playwright playwright-core
       - name: Install its Chromium
         if: matrix.node == 26
         run: |
           node "$RUNNER_TEMP/playwright/node_modules/playwright/cli.js" install --no-shell chromium
-          node scripts/ci-chromium.js
+          node tools/dev/ci-chromium.js
       - name: A real native-messaging host in Chromium
         if: matrix.node == 26
-        run: node scripts/mcp-windows-check.js "$RUNNER_TEMP/mcp-windows-evidence"
+        run: node checks/agents/mcp-windows-check.js "$RUNNER_TEMP/mcp-windows-evidence"
       - name: Keep the check's evidence
         if: failure() && matrix.node == 26
         uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2

diff --git a/.gitignore b/.gitignore
@@ -3,7 +3,7 @@ dist/
 release/
 safari/**/xcuserdata/
 *.xcuserstate
-assets/ads/
+extension/assets/ads/
 
 # Local secrets (e.g. cloudflare-r2.env for the share relay)
 *.env

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,36 @@ All notable changes to Glaze are documented here. The format follows
 
 ## [Unreleased]
 
+## [4.0.1] — 2026-10-31
+
+### Added
+
+- Chrome and Safari: **Google Calendar sync** (Settings → Sharing) keeps a calendar named Glaze in step with Export calendar (.ics), touching nothing else. Off until you connect.
+- **Google Drive** in Settings → Writer → Papers (Chrome, Edge, Brave, Firefox and Safari; off until you connect). **From Google Drive** opens a file in Documents or attaches it to a Blackboard submission; **Save to Google Drive** saves a document's file or a paper as a Google Doc, never overwriting one edited outside Glaze; **Sync to Google Drive** keeps your documents and what Back up… covers in a Glaze folder, across devices; large files sync in pieces; only a document over 64 MB or a record over 32 MB stays on this device, marked **Too large to sync**. Glaze reaches only the files it made or you pick. Disconnect is per device.
+- Blackboard, in Settings → Course tabs: **Open course tabs ahead of time** (a tab opens from a page already loaded), **Keep Course Content ready** (back from an item is instant, at the same place) and **Load course data ahead of time**.
+- Blackboard: **Open pages instantly** (Settings → Course pages → Blackboard Dashboard) shows your last view of Grades, Courses, Activity and a course's Content, Announcements and Gradebook while Blackboard loads. **Show pages loading at once** answers each click.
+- PDFs: Highlight, Pen, Text, Image, Shapes and signatures, and a pages panel to move, turn, delete, add or import pages.
+- Blackboard: **Attach from Documents** adds your documents to a submission. Workbooks from .xlsm export and submit as .xlsm.
+- Canvas: **Open in Glaze** on PDF, slide and spreadsheet files (Settings → Documents). Slides: **Print with notes…**
+- Documents cards show spreadsheet charts, 3-D pies and columns included.
+
+### Changed
+
+- Blackboard: a click shows the next page at once, a page loads behind one loading layout in your Look (no grey screen or stacked spinners), and Glaze's bar, footer, notes and panels never push the page. To Do, grades and the sidebar appear from saved data once Blackboard confirms it's you.
+- A PDF keeps one copy, its latest marked-up version.
+- Saved PDF and slide previews offer **Open in Documents**; an unsaved spreadsheet stays read-only.
+- Imports show progress at once and store large files faster.
+
+### Fixed
+
+- Writer: Feedback answers in your draft's language, its citation checks work in all six languages, and a failed comment shows the rubric rating instead of withholding the grade.
+- Documents: Close in a document goes back to your documents.
+- Writer: a tab opened while Glaze saves settings gets Glaze; a viewer that fails goes back to Blackboard's editor.
+- Canvas's document viewer: pen marks stay put on zoom, and Undo takes back Clear page.
+- Agents: only Glaze's background can change an app's pairing or the name in its approval window.
+- Firefox: a site whose access you took back is no longer retried.
+- The announcement pop-up has Close in its footer; a note with very many line breaks opens.
+
 ## [4.0.0] — 2026-10-30
 
 ### Added

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -2,7 +2,7 @@
 
 ## Development loop
 
-1. `chrome://extensions` → **Developer mode** → **Load unpacked** → pick this folder.
+1. `chrome://extensions` → **Developer mode** → **Load unpacked** → pick the `extension` folder.
 2. Edit a file.
 3. Hit the reload arrow on the Glaze card, then reload your Blackboard Ultra or Canvas tab.
 
@@ -11,15 +11,19 @@ extension reload. Run `node --test` before sending a change.
 
 ## Layout
 
-- `content.js` — runs on Ultra, Canvas and Moodle pages: adds the stylesheets, applies settings, the DOM sweep, tooltips and the extras. What only one site does is in its part, `content-ultra.js` or `content-canvas.js`, listed before `content.js` for that site (Moodle has none); each site's first script has its own budget (`test/perf-budget.test.js`).
-- `theme.css` (palette and page polish), `motion.css` (motion levels), `extras.css` (backgrounds and extras).
-- `defaults.js` — the settings schema, defaults, presets and `GZ_SANITIZE`. `lib/` — pure helpers with tests in `test/`, plus `scene.js` (the animated backgrounds) and the vendored `three.js`.
-- `popup.*`, `options.*`, `ui.*` — the popup, the editor and what they share. `preview.html` is the editor's mock Ultra page.
+The whole tree, with diagrams: [docs/layout.md](docs/layout.md).
+
+- `extension/` — the extension as the stores ship it; the paths below are inside it. `checks/` holds the browser checks and `test/` the unit tests, each by feature area; `tools/` the build, release, vendor, fidelity and dev scripts.
+- `content/content.js` — runs on Ultra, Canvas and Moodle pages: adds the stylesheets, applies settings, the DOM sweep, tooltips and the extras. What only one site does is in its part, `content/content-ultra.js` or `content/content-canvas.js`, listed before `content.js` for that site (Moodle has none); each site's first script has its own budget (`test/platform/perf-budget.test.js`).
+- `content/theme.css` (palette and page polish), `content/motion.css` (motion levels), `content/extras.css` (backgrounds and extras).
+- `content/defaults.js` — the settings schema, defaults, presets and `GZ_SANITIZE`.
+- One folder per feature area: `looks/`, `navigation/`, `courses/`, `planner/`, `writer/`, `documents/`, `ai/`, `agents/`, `sharing/`, `mods/`, `pet/`, `settings/`, with `core/` shared by all and `background/` the worker. An area's helpers sit at its top, with tests in `test/<area>/`; the code that touches the LMS page is in `<area>/page/`. `looks/scene.js` draws the animated backgrounds; third-party code (three.js, pdf.js, ProseMirror …) is in `vendor/`.
+- `popup.html`, `options.html` (their scripts in `settings/`) and `core/ui.*` — the popup, the editor and what they share. `preview.html` is the editor's mock Ultra page.
 - [Development](docs/development.md) — architecture, supported build paths, feature gates and release requirements.
 
 ## Conventions
 
-- No build step, no dependencies, no bundler. Vanilla JS, plain CSS, files loaded directly. The exceptions are `lib/three.js`, a checked-in, tree-shaken, readable three.js (`scripts/vendor-three.sh` rebuilds it), lottie-web's official readable light canvas player in `lib/lottie/` (`scripts/vendor-lottie.sh` fetches it by a pinned hash), pdf.js in `lib/pdfjs/` and Tesseract in `lib/tesseract/` (`scripts/vendor-pdfjs.sh`, `scripts/vendor-tesseract.sh`), ProseMirror as one readable bundle in `lib/pm.js` and `lib/pm.css` (`scripts/vendor-prosemirror.sh`), harper.js in `lib/harper/` (`scripts/vendor-harper.sh`), and Writer's paper fonts in `lib/fonts/` (`scripts/vendor-paper-fonts.sh`); only an upgrade needs any of them.
+- No build step, no dependencies, no bundler. Vanilla JS, plain CSS, files loaded directly. The exceptions are `vendor/three.js`, a checked-in, tree-shaken, readable three.js (`tools/vendor/vendor-three.sh` rebuilds it), lottie-web's official readable light canvas player in `vendor/lottie/` (`tools/vendor/vendor-lottie.sh` fetches it by a pinned hash), pdf.js in `vendor/pdfjs/` and Tesseract in `vendor/tesseract/` (`tools/vendor/vendor-pdfjs.sh`, `tools/vendor/vendor-tesseract.sh`), ProseMirror as one readable bundle in `vendor/pm.js` and `vendor/pm.css` (`tools/vendor/vendor-prosemirror.sh`), harper.js in `vendor/harper/` (`tools/vendor/vendor-harper.sh`), and Writer's paper fonts in `vendor/fonts/` (`tools/vendor/vendor-paper-fonts.sh`); only an upgrade needs any of them.
 - Keep diffs small and focused. One change per PR.
 - Defaults live in exactly one place: `defaults.js`. Don't duplicate a colour or a toggle elsewhere.
 - Every setting reaches the page as a `--gz-*` variable or an `html[data-gz-*]` attribute. CSS matches on those; it never waits on JavaScript.