diff --git a/docs/reference/plans/2026-07-22-mobile-hybrid-webview-implementation-checklist.md b/docs/reference/plans/2026-07-22-mobile-hybrid-webview-implementation-checklist.md index a9da98647c6..8433aee9131 100644 --- a/docs/reference/plans/2026-07-22-mobile-hybrid-webview-implementation-checklist.md +++ b/docs/reference/plans/2026-07-22-mobile-hybrid-webview-implementation-checklist.md @@ -1945,9 +1945,9 @@ package verification pass. The latest privacy-hardening package is `8f452c7b95e729c7fc9a9cc8d10f39717459c9f3571eaf7843a8427b1b809341`: 50 assets, 9,134,984 raw bytes, and 2,644,462 gzip bytes. The full mobile suite passes 582 files / 3,453 tests with 2 expected skips. The current full root run -passes 3,831 files / 40,242 tests with 70 expected skips except for one -unrelated load-sensitive remote-control timing assertion; its complete -26-test file passes in a 2.9-second isolated rerun. +passes 3,839 files / 40,326 tests with 71 expected skips except for one +unrelated load-sensitive remote-runtime socket setup failure; its complete +one-test file passes in a 194-millisecond isolated rerun. | Date | Workstream | Evidence | Result | | ---------- | ----------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -2326,6 +2326,7 @@ unrelated load-sensitive remote-control timing assertion; its complete | 2026-07-28 | Page persistence | Packaging and verification share rejection of runtime code generation plus Web Storage, IndexedDB, CacheStorage, cookie, WebSQL, and origin-private filesystem/storage access | Focused policy/package/page-source tests pass; mobile and RNW typechecks, focused lint, max-lines, formatting, diff hygiene, and exact build `bcd9c95e…` verification pass | | 2026-07-28 | Privacy boundaries | Fixed page-host label; credential/file-path URL sanitization and navigation rejection; build-path rejection; value-free transport, pairing, Tasks, clipboard, dictation, and terminal logs | 23 focused root tests, 25 focused mobile tests, full 580-file mobile suite / 3,449 tests with 2 skips, typechecks, lint, max-lines, formatting, diff hygiene, and exact build `e0ad7c7d…` pass | | 2026-07-29 | Hosted authority | Exact-path hosted aliases for native client/host-store authority; fixed-category terminal/inbound diagnostics; bridge credential-field rejection; telemetry, fixture, and credential-authority package policy | 5 focused files / 62 tests, full 582-file mobile suite / 3,453 tests with 2 skips, all typechecks/lints/55 gates, and exact build `8f452c7b…` pass | +| 2026-07-29 | Rebase | Rebased all 51 migration commits onto `origin/main` at `1df8aa560`; branch divergence `0/51`; rebuilt and independently verified the hosted package | Passed without conflicts; exact build remains `8f452c7b…`, 50 assets, 9,134,984 raw bytes, and 2,644,462 gzip bytes | | 2026-07-27 | Android private origin | Exact Debug APK at reserved HTTPS origin, main-frame fragment validation, hosted History API fragment retention, deliberate-red network/navigation corpus, and real routed terminal snapshot | Passed; `/h/.../session/...#` retained, zero sentinel observations, bridge loaded one real tab, and fresh logcat had no prior exceptions | | 2026-07-27 | RNW package | Exact-source build and independent verifier after hosted History API session binding | Passed; build `8b5c9b64b4caa778603ff4e3845a7f3df9c6ed0f027560cd5447ed259ebbb0e8`, 49 assets, 9,178,634 raw bytes, 2,662,870 gzip bytes | | 2026-07-27 | Validation | Focused bridge/origin/history tests, mobile and mobile-web typechecks/lints, max-lines ratchet, Android JVM/process tests, exact Debug assembly, and diff hygiene | Passed; 34 focused tests, 17 Android JVM tests, 577 Gradle tasks, and no new max-lines bypass | @@ -2849,5 +2850,6 @@ unrelated load-sensitive remote-control timing assertion; its complete | 2026-07-28 | Complete | Hosted page URL construction no longer accepts a paired-host identifier. Browser results, events, and snapshots remove credentials and local file paths; hosted navigation rejects credential-bearing URLs. Packaging rejects build-machine paths. Mobile logs retain only reviewed protocol, state, count, and category fields. The full mobile suite passes 580 files / 3,449 tests with 2 skips, and build `e0ad7c7d…` verifies at 50 assets / 9,301,460 raw / 2,692,026 gzip bytes. | | 2026-07-29 | Finding | The hosted RNW package still contained native host-token storage, pairing cleanup, and logical-client transport implementations because reused screens statically imported their default native bindings even when hosted adapters supplied the runtime behavior. No credential value was embedded or intentionally executed, but the page package retained authority code it did not own. | | 2026-07-29 | Complete | Hosted-only Metro resolution now substitutes inert `client-context` and `host-store` modules by exact resolved source path without changing the shared UI. The executable policy rejects native credential-authority, telemetry, and fixture markers. Initial messages reject privileged host fields; terminal and inbound diagnostics retain only fixed categories and non-string measurements. Build `8f452c7b…` verifies with 50 assets / 9,134,984 raw / 2,644,462 gzip bytes. | -| 2026-07-29 | Complete | Focused validation passes 5 files / 62 tests. The full mobile suite passes 582 files / 3,453 tests with 2 skips. All project typechecks, root/mobile/mobile-web lint, native/type-aware audits, 55 reliability gates, localization, max-lines, formatting, package verification, and diff hygiene pass. A full root run passes 3,831 files / 40,242 tests with 70 skips except one unrelated load-sensitive remote-control timing assertion; its complete 26-test file passes in 2.9 seconds isolated. | -| 2026-07-29 | Next | Rebase onto current `origin/main`, rebuild and reverify the exact package, then continue exact release-app DOM/corpus injection, broader live two-host/topology races, native crash-report review, and independent security review. | +| 2026-07-29 | Complete | Focused validation passes 5 files / 62 tests. The full mobile suite passes 582 files / 3,453 tests with 2 skips. All project typechecks, root/mobile/mobile-web lint, native/type-aware audits, 55 reliability gates, localization, max-lines, formatting, package verification, and diff hygiene pass. The post-rebase full root run passes 3,839 files / 40,326 tests with 71 skips except one unrelated load-sensitive remote-runtime socket setup failure; its one-test file passes in 194 ms isolated. | +| 2026-07-29 | Complete | Rebased all 51 migration commits without conflict onto `origin/main` at `1df8aa560`; the branch is zero behind. The exact hosted package rebuild remains `8f452c7b…` with 50 assets / 9,134,984 raw / 2,644,462 gzip bytes and passes independent verification. | +| 2026-07-29 | Next | Continue exact release-app DOM/corpus injection, broader live two-host/topology races, native crash-report review, and independent security review. | diff --git a/docs/reference/plans/2026-07-22-mobile-hybrid-webview-single-pr-migration.md b/docs/reference/plans/2026-07-22-mobile-hybrid-webview-single-pr-migration.md index e42232f3c15..4347226d41e 100644 --- a/docs/reference/plans/2026-07-22-mobile-hybrid-webview-single-pr-migration.md +++ b/docs/reference/plans/2026-07-22-mobile-hybrid-webview-single-pr-migration.md @@ -150,7 +150,7 @@ prototype: inventory entry, and fixtures are removed. The production `/hybrid` route, production bridge clients, native fallback, and Experimental Settings entry remain intentionally until the external cutover gates pass. -- The 44-commit branch is rebased onto `origin/main` at `3f5328755` and remains +- The 51-commit branch is rebased onto `origin/main` at `1df8aa560` and remains zero behind. Upstream native-chat launch-draft, transcript identity, loading, reconnect, and orchestration behavior is retained in both native and hosted adapters. diff --git a/docs/reference/plans/2026-07-27-mobile-hybrid-webview-remaining-work.md b/docs/reference/plans/2026-07-27-mobile-hybrid-webview-remaining-work.md index 6488dcdb4aa..e1c24d6ba62 100644 --- a/docs/reference/plans/2026-07-27-mobile-hybrid-webview-remaining-work.md +++ b/docs/reference/plans/2026-07-27-mobile-hybrid-webview-remaining-work.md @@ -102,8 +102,8 @@ pixels and 0.910 mean channel difference; Review passes at 2.134% and 1.947, within the 3% / 4 budgets. The packaged document opts into native safe-area insets, and nested syntax text retains the native effective font behavior. -The migration is based on `origin/main` at `3f5328755`; the final rebase is -complete and the branch is 44 commits ahead and zero behind. Post-rebase +The migration is based on `origin/main` at `1df8aa560`; the final rebase is +complete and the branch is 51 commits ahead and zero behind. Post-rebase validation now passes 576 mobile files / 3,440 tests with 2 expected skips. The latest root run passes 3,829 files / 40,205 tests with 70 expected skips except for one load-sensitive 30-second dynamic-import timeout; its isolated 2-test @@ -318,10 +318,10 @@ The production package now verifies as `8f452c7b…`: 50 assets, 9,134,984 raw bytes, and 2,644,462 gzip bytes. The full mobile suite passes 582 files / 3,453 tests with 2 expected skips. All project typechecks; root, mobile, and mobile-web lint; all 55 reliability gates; localization; max-lines; formatting; -and package verification pass. The full root run passes 3,831 files / 40,242 -tests with 70 expected skips except for one unrelated load-sensitive -remote-control timing assertion; its complete 26-test file passes in a -2.9-second isolated rerun. +and package verification pass. The post-rebase full root run passes 3,839 files +/ 40,326 tests with 71 expected skips except for one unrelated load-sensitive +remote-runtime socket setup failure; its complete one-test file passes in a +194-millisecond isolated rerun. The mirrored native package-store suites now pass 120 concurrent cache flows per platform. The expanded same-host matrix covers competing distinct generations,