Prepare 1.5.2 release

Author: AlexAgo83

README.md

@@ -2,7 +2,7 @@
 
 <p align="center">
   <a href="./LICENSE"><img src="https://img.shields.io/badge/license-MIT-4C8BF5" alt="MIT License" /></a>
-  <img src="https://img.shields.io/badge/version-v1.5.1-4C8BF5" alt="Version 1.5.1" />
+  <img src="https://img.shields.io/badge/version-v1.5.2-4C8BF5" alt="Version 1.5.2" />
   <img src="https://img.shields.io/badge/React-19-61DAFB?logo=react&logoColor=white" alt="React 19" />
   <img src="https://img.shields.io/badge/TypeScript-Strict-3178C6?logo=typescript&logoColor=white" alt="TypeScript Strict" />
   <img src="https://img.shields.io/badge/local--first-deepvault-0F766E" alt="Local first" />

changelogs/CHANGELOGS_1_5_2.md

@@ -0,0 +1,29 @@
+# Changelog (`1.5.1 -> 1.5.2`)
+
+Release date: 2026-05-06
+
+## Major Highlights
+
+- DeepVault Nexus 1.5.2 is a focused worker extraction patch over 1.5.1.
+- Microsoft Graph file-content downloads now follow redirects, restoring real binary/text retrieval for SharePoint content endpoints that return a download location instead of the file body directly.
+- Worker coverage now proves the Graph client is initialized with redirect following before extract-backed export logic consumes downloaded content.
+
+### Worker Extraction
+
+- `GraphClient` now creates its `httpx.Client` with `follow_redirects=True`.
+- The live export service can follow Graph `/content` redirects when downloading SharePoint file bodies for extract artifact creation.
+- Added a focused worker test that captures the Graph client initialization and verifies downloaded bytes and content type still flow through `get_bytes`.
+
+## Validation and Regression Evidence
+
+- `rtk python3 -m pytest worker/tests/test_live_export_service.py`
+- `rtk npm run test -- tests/changelogs.spec.ts`
+- `rtk npm run typecheck`
+- `rtk npm run lint`
+- `rtk npm run build`
+- `rtk npm run test`
+
+## Notes
+
+- This release does not change the corpus schema or the browser UI.
+- Existing extract artifacts do not need migration; rerunning live export is enough to benefit from redirected content downloads.

logics/INDEX.md

@@ -17,7 +17,7 @@
 | [adr_011_observability_audit_and_answer_traceability](architecture/adr_011_observability_audit_and_answer_traceability.md) | Observability, audit, and answer traceability | Proposed |  | architecture/adr_011_observability_audit_and_answer_traceability.md |
 | [adr_012_local_companion_runtime_for_explorer_and_chat](architecture/adr_012_local_companion_runtime_for_explorer_and_chat.md) | DeepVault - Navy runtime for explorer and chat | Proposed |  | architecture/adr_012_local_companion_runtime_for_explorer_and_chat.md |
 | [adr_013_hosted_backend_and_teams_chat_channel](architecture/adr_013_hosted_backend_and_teams_chat_channel.md) | Hosted backend and Teams chat channel | Proposed |  | architecture/adr_013_hosted_backend_and_teams_chat_channel.md |
-| [Sub](architecture/adr_014_deepvault_retrieval_ranking_quality_and_cost_policy.md) | Minimum threshold | Proposed |  | architecture/adr_014_deepvault_retrieval_ranking_quality_and_cost_policy.md |
+| [adr_014_deepvault_retrieval_ranking_quality_and_cost_policy](architecture/adr_014_deepvault_retrieval_ranking_quality_and_cost_policy.md) | Minimum threshold | Proposed |  | architecture/adr_014_deepvault_retrieval_ranking_quality_and_cost_policy.md |
 | [adr_015_deepvault_security_audit_logging_and_retention_boundaries](architecture/adr_015_deepvault_security_audit_logging_and_retention_boundaries.md) | DeepVault security audit logging and retention boundaries | Proposed |  | architecture/adr_015_deepvault_security_audit_logging_and_retention_boundaries.md |
 | [adr_016_deepvault_persistence_and_storage_layout](architecture/adr_016_deepvault_persistence_and_storage_layout.md) | DeepVault persistence and storage layout | Proposed |  | architecture/adr_016_deepvault_persistence_and_storage_layout.md |
 | [adr_017_bishop_llm_orchestration_after_local_grounding](architecture/adr_017_bishop_llm_orchestration_after_local_grounding.md) | Bishop LLM orchestration after local grounding | Accepted |  | architecture/adr_017_bishop_llm_orchestration_after_local_grounding.md |
@@ -186,7 +186,7 @@
 | [task_001_v1_local_companion_vertical_slice](tasks/task_001_v1_local_companion_vertical_slice.md) | V1 — DeepVault - Navy vertical slice | Done | 100% | tasks/task_001_v1_local_companion_vertical_slice.md |
 | [task_002_v1_ingestion_sync_and_retrieval_hardening](tasks/task_002_v1_ingestion_sync_and_retrieval_hardening.md) | V1 — Ingestion, sync, and retrieval hardening | Done | 100% | tasks/task_002_v1_ingestion_sync_and_retrieval_hardening.md |
 | [task_005_v1_local_development_and_validation_milestone](tasks/task_005_v1_local_development_and_validation_milestone.md) | V1 — Local development and validation milestone | Done | 100% | tasks/task_005_v1_local_development_and_validation_milestone.md |
-| [Pre](tasks/task_008_v1_retrieval_evaluation_set_and_quality_gates.md) | evaluation checklist (must pass before starting) | Done | 100% | tasks/task_008_v1_retrieval_evaluation_set_and_quality_gates.md |
+| [task_008_v1_retrieval_evaluation_set_and_quality_gates](tasks/task_008_v1_retrieval_evaluation_set_and_quality_gates.md) | Pre-evaluation checklist (must pass before starting) | Done | 100% | tasks/task_008_v1_retrieval_evaluation_set_and_quality_gates.md |
 | [task_009_local_hardening_and_v1_scope_evolution](tasks/task_009_local_hardening_and_v1_scope_evolution.md) | What is already done in V1 (do not re-implement) | Done | 100% | tasks/task_009_local_hardening_and_v1_scope_evolution.md |
 | [task_011_nexus_v1_1_shell_and_live_state_delivery](tasks/task_011_nexus_v1_1_shell_and_live_state_delivery.md) | Nexus V1.1 shell and live state delivery | Done | 100% | tasks/task_011_nexus_v1_1_shell_and_live_state_delivery.md |
 | [task_012_nexus_v1_1_remaining_polish_orchestration](tasks/task_012_nexus_v1_1_remaining_polish_orchestration.md) | Nexus V1.1 remaining polish orchestration | Done | 100% | tasks/task_012_nexus_v1_1_remaining_polish_orchestration.md |
@@ -219,4 +219,4 @@
 | [task_041_orchestrate_post_v1_3_consolidation_enrichment_ci_and_configuration_portability](tasks/task_041_orchestrate_post_v1_3_consolidation_enrichment_ci_and_configuration_portability.md) | Wave map | Done | 100% | tasks/task_041_orchestrate_post_v1_3_consolidation_enrichment_ci_and_configuration_portability.md |
 | [task_042_orchestrate_python_worker_foundation_and_runtime_migration](tasks/task_042_orchestrate_python_worker_foundation_and_runtime_migration.md) | Progress notes | Done | 100% | tasks/task_042_orchestrate_python_worker_foundation_and_runtime_migration.md |
 | [task_043_orchestrate_hosted_auth_access_and_deployment](tasks/task_043_orchestrate_hosted_auth_access_and_deployment.md) | Progress notes | Done | 100% | tasks/task_043_orchestrate_hosted_auth_access_and_deployment.md |
-| [task_044_orchestrate_extract_backed_analysis_pipeline](tasks/task_044_orchestrate_extract_backed_analysis_pipeline.md) | Orchestrate extract-backed analysis pipeline | Done | 100% | tasks/task_044_orchestrate_extract_backed_analysis_pipeline.md |
+| [task_044_orchestrate_extract_backed_analysis_pipeline](tasks/task_044_orchestrate_extract_backed_analysis_pipeline.md) | Wave map | Done | 100% | tasks/task_044_orchestrate_extract_backed_analysis_pipeline.md |

logics/backlog/item_089_worker_text_extract_artifacts_for_sharepoint_documents.md

@@ -1,11 +1,11 @@
 ## item_089_worker_text_extract_artifacts_for_sharepoint_documents - Worker text extract artifacts for SharePoint documents
 
-> From version: 1.5.1
+> From version: 1.5.2
 > Schema version: 1.0
 > Status: Done
-> Understanding: 98%
-> Confidence: 94%
-> Progress: 100%
+> Understanding: 99%
+> Confidence: 95%
+> Progress: 100% (release validation refreshed)
 > Complexity: High
 > Theme: Data / Worker / Corpus
 > Reminder: Update status, understanding, confidence, progress and linked request/task references when you edit this doc.
@@ -58,4 +58,5 @@ flowchart LR
 - Implemented `RuntimeStore.extract_artifact_relative_path(...)` and worker live export extract artifact writing under the configured runtime store.
 - Corpus documents now carry `extractionStatus`, `extractionReason`, and `extractPath` when exported from the Graph worker path.
 - Extended worker extraction beyond text-like files by downloading bounded binary content and extracting OOXML body text for DOCX/PPTX/XLSX, with optional PDF text extraction through `pypdf`.
+- Patched `GraphClient` to follow Microsoft Graph content download redirects, with focused test coverage proving extract downloads use `follow_redirects=True`.
 - `rtk python3 -m pytest worker/tests/test_live_export_service.py` passed with coverage for successful text extract, metadata-only unsupported source, and empty text download classified as unreadable.

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "deepvault-nexus",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "private": true,
   "type": "module",
   "scripts": {

package.json

@@ -12,6 +12,12 @@ export interface ParsedChangelog {
 }
 
 const CHANGELOG_ENTRIES: ChangelogEntry[] = [
+  {
+    version: '1.5.2',
+    title: 'DeepVault Nexus 1.5.2',
+    fileName: 'CHANGELOGS_1_5_2.md',
+    load: () => import('../../changelogs/CHANGELOGS_1_5_2.md?raw').then((module) => module.default as string),
+  },
   {
     version: '1.5.1',
     title: 'DeepVault Nexus 1.5.1',

src/data/changelogs.ts

@@ -48,7 +48,7 @@ def __init__(self, *, base_url: str, access_token: str, timeout_seconds: int) ->
         self._base_url = base_url.rstrip("/")
         self._access_token = access_token
         self._timeout_seconds = timeout_seconds
-        self._client = httpx.Client(timeout=timeout_seconds)
+        self._client = httpx.Client(timeout=timeout_seconds, follow_redirects=True)
 
     def close(self) -> None:
         self._client.close()

worker/app/services/live_export_service.py

@@ -9,7 +9,7 @@
 from worker.app.config import Settings
 from worker.app.infra.runtime_store import RuntimeStore
 from worker.app.services.corpus_service import CorpusService
-from worker.app.services.live_export_service import LiveExportConfig, LiveExportService
+from worker.app.services.live_export_service import GraphClient, LiveExportConfig, LiveExportService
 
 
 def build_service(tmp_path) -> LiveExportService:
@@ -22,6 +22,48 @@ def build_service(tmp_path) -> LiveExportService:
     return LiveExportService(settings=settings, runtime_store=runtime_store, corpus_service=corpus_service)
 
 
+def test_graph_client_follows_download_redirects(monkeypatch) -> None:
+    captured: Dict[str, object] = {}
+
+    class FakeResponse:
+        status_code = 200
+        text = "downloaded text"
+        content = b"downloaded bytes"
+        headers = {"content-type": "application/octet-stream"}
+
+        @staticmethod
+        def json() -> dict[str, object]:
+            return {}
+
+    class FakeHttpClient:
+        def __init__(self, *, timeout: int, follow_redirects: bool) -> None:
+            captured["timeout"] = timeout
+            captured["follow_redirects"] = follow_redirects
+
+        def request(self, method: str, url: str, headers: dict[str, str]) -> FakeResponse:
+            captured["method"] = method
+            captured["url"] = url
+            captured["headers"] = headers
+            return FakeResponse()
+
+        def close(self) -> None:
+            captured["closed"] = True
+
+    monkeypatch.setattr("worker.app.services.live_export_service.httpx.Client", FakeHttpClient)
+
+    client = GraphClient(base_url="https://graph.microsoft.com/v1.0", access_token="token", timeout_seconds=17)
+    content, content_type = client.get_bytes("/drives/drive-1/items/item-1/content")
+    client.close()
+
+    assert captured["follow_redirects"] is True
+    assert captured["timeout"] == 17
+    assert captured["url"] == "https://graph.microsoft.com/v1.0/drives/drive-1/items/item-1/content"
+    assert captured["headers"] == {"Authorization": "Bearer token"}
+    assert content == b"downloaded bytes"
+    assert content_type == "application/octet-stream"
+    assert captured["closed"] is True
+
+
 def test_live_export_service_runs_graph_export_and_publishes_artifacts(tmp_path, monkeypatch) -> None:
     service = build_service(tmp_path)
     progress: list[tuple[str, int, str]] = []