mirror of
https://github.com/stablyai/orca.git
synced 2026-10-09 16:02:46 +00:00
A host restart while a launch waited for its agent to be ready left the launch
recorded as unknown, so a retry was refused ("couldn't confirm") although the
agent was running. The record is now written twice: when the surface exists,
with the launch as it stands and a prompt result that says only what creating
the surface settled, and again when the prompt result is known. The first
write is fired without waiting; the store commits in order.
Every request now carries one caller identity stamped by the dispatcher from
what the transport proved: the runtime socket is the local CLI, the desktop's
IPC channel is the desktop, a paired socket is its device. Params never set
it. The desktop is therefore admitted to replay-safe launches under its own
namespace instead of being refused, and existing CLI and device namespaces keep
their strings so saved rows still replay.
Admission opens only the record store, through its own slot; the chat host is
built on that same store, and stopping the runtime closes the slot whether or
not a host was built.