Files
orca/src
Neil 067a0dd1b4 fix(runtime): delegated devices follow the device file, and quarantine keeps external adds (#36222)
* fix(runtime): plan delegated children over the device file as it is now

An unchanged child removed on disk skipped the save and its merge, so
its stale token was handed back. The upsert now adopts external edits
first and mints a fresh child; a parent removed on disk mints none.

* fix(runtime): a delegated phone stops authenticating once its desktop is gone

Removing a desktop's row on disk (or any removal short of
revokeRuntimeAccess's cascade) left its delegated phone rows valid.
Token and per-request principal auth now refuse a delegated child whose
parent device is no longer in the registry.

* fix(runtime): keep devices another writer adds while our own quarantine is unwritten

While quarantinedUntilWritten is set, the save no longer skips the disk
read; it merges with no known baseline, so the file's absence revokes
nothing but a device the pairing CLI added since is kept.
2026-10-29 21:29:32 -07:00
..