mirror of
https://github.com/stablyai/orca.git
synced 2026-11-06 03:57:35 +00:00
* fix(runtime): plan delegated children over the device file as it is now An unchanged child removed on disk skipped the save and its merge, so its stale token was handed back. The upsert now adopts external edits first and mints a fresh child; a parent removed on disk mints none. * fix(runtime): a delegated phone stops authenticating once its desktop is gone Removing a desktop's row on disk (or any removal short of revokeRuntimeAccess's cascade) left its delegated phone rows valid. Token and per-request principal auth now refuse a delegated child whose parent device is no longer in the registry. * fix(runtime): keep devices another writer adds while our own quarantine is unwritten While quarantinedUntilWritten is set, the save no longer skips the disk read; it merges with no known baseline, so the file's absence revokes nothing but a device the pairing CLI added since is kept.