Jinwoo-H
cc99be19dc
docs(plans): STA-7948 — async reads on both sides, unknown reset verdicts stay unknown
2026-09-21 18:23:48 -04:00
Jinwoo-H
35130efac6
docs(plans): STA-7948 — verdict application owns the toast takedown and the open scope
2026-09-21 17:48:52 -04:00
Jinwoo-H
986bb36120
docs(plans): STA-7948 — Fix keeps the toast up; null verdict clears the open scope
2026-09-21 17:36:44 -04:00
Jinwoo-H
1f02a1029a
docs(plans): scope the folder-access notice per folder class, gate reset, prompt deadline
2026-09-21 17:02:57 -04:00
Jinwoo-H
883e2f27b5
docs(macos): STA-7948 — verdict is a named enum after the elegance review
2026-09-21 15:07:35 -04:00
Jinwoo-H
da59536de7
docs(macos): STA-7948 — the group a restart cannot help is ~12%, not a third; split later denials by the denying daemon's version
2026-09-21 14:53:53 -04:00
Jinwoo-H
4386375424
docs(macos): STA-7948 dialog as built — footer actions, reset-permission step, what is known about the stuck third
2026-09-21 13:13:57 -04:00
Jinwoo-H
bda8e6b9fd
docs(macos): final STA-7948 UX — one-line toast, guided fix dialog, fresh-daemon probe
2026-09-21 03:37:04 -04:00
Jinwoo-H
27dabcbe90
docs(macos): fold PostHog field data into the STA-7948 plan and drop the helper probe
...
daemon_pty_cwd_denied fired for 1,438 users in 21 days (2.8% of users adopting
a different-version daemon, 96% on Documents/Desktop/Downloads), so the daemon's
existing verdict already observes the failure and the helper probe for old
daemons has no population left to cover. A fresh same-version daemon ended the
denial for about 69% of observable users; the notice copy now tells the rest to
re-allow the folder.
2026-09-21 01:25:33 -04:00
Jinwoo-H
f7e129ffe6
docs(macos): finalize the STA-7948 daemon folder-access plan on live evidence
...
Replace the helper-first recovery design with a two-layer plan: an in-daemon
opendir verdict plus a notice on the existing attribution poll (ship now), and
the helper probe for already-deployed old daemons (evidence-gated). Record the
2026-09-21 measurements: on Documents, access(2) passes while opendir gets
EPERM, so the current accessSync verdict is blind to the incident's folder
class; daemon-spawned login shells carry the daemon's grant; the login wrapper
is unconditional in production.
2026-09-21 00:59:44 -04:00
Jinjing
56f816936e
docs: prioritize macOS daemon recovery
2026-09-19 16:29:07 -07:00
Jinjing
96c954f3be
chore: remove force-added design docs from docs/ ( #11891 )
...
Keep only the durable docs already allowlisted for tracking
(STYLEGUIDE, assets, localized readme, and reference compatibility
guides). Drop feature design notes, plans, and repro artifacts that
were force-added past the existing docs ignore rules.
2026-08-01 00:33:20 -07:00
Jinjing and OrcaWin
5f7807497e
feat(ssh): bound relay PTY output end to end ( #11005 )
...
* docs: design SSH relay PTY backpressure
* fix(ssh): bound relay frame decoding
* fix(relay): bound PTY output publication
* fix(ssh): bound PTY model admission
* fix(ssh): settle closed model admissions
* feat(ssh): negotiate bounded PTY consumer sessions
* fix(ssh): fence exit on renderer settlement
* feat(ssh): track PTY source credit end to end
* fix(ssh): recover bounded PTY output across reconnect
* feat(ssh): complete relay PTY output backpressure
* fix(ssh): close final PTY source credit races
* docs(ssh): record final backpressure validation
* feat(ssh): complete relay PTY source-credit lifecycle
* test(ssh): complete provider notification fixture
* fix(ssh): preserve terminal source credit across rotation
* fix(ssh): fail closed on recovery cancellation
* fix(ssh): prioritize mux control writes after drain
* fix(ssh): retire canceled relay restore deliveries
* fix(ssh): order exit cancellation cleanup
* fix(ssh): gate provisional source activation
* test(ssh): register mux drain-priority coverage
* fix(ssh): type stale owner recovery mismatches
* fix(ssh): close projection replacement races
* fix(relay): contain streaming edge failures
* fix(ssh): secure relay endpoint credentials
* docs(ssh): reconcile final backpressure lifecycle
* fix(ssh): bound main IPC output lifecycle
* fix(ssh): close recovery ownership gaps
* docs(ssh): record exact artifact validation
* fix(ssh): reject reclaimed snapshot replacements
* fix(ssh): fence model admission across reconnect
* fix(ssh): contain migration failure per PTY
* docs(ssh): record final exact-head validation
* test(ssh): align deploy fixtures with credential publication
* feat(ssh): add per-target bounded output setting
* fix(ssh): close source recovery review gaps
* fix(ssh): latch source credit environment override
* feat(ssh): make PTY source credit the default
* docs(ssh): record always-on relay validation
* docs(ssh): bind validation to current main
* test(ssh): grant source credit in IPC fixture
* test(ssh): grant source credit in fake relay
---------
Co-authored-by: OrcaWin <293788423+OrcaWin@users.noreply.github.com >
2026-07-29 17:03:15 -07:00
Jinwoo-H
Jinjing
