mirror of
https://github.com/stablyai/orca.git
synced 2026-10-29 08:07:18 +00:00
Two gaps found by adversarial round 5. The arm could be consumed by the user's own reload. A recovery reload that stalls short of renderer_bootstrap_rendered without tripping the breaker leaves the arm set; a Cmd+R or View > Reload within 30s then boots, consumes it, and stamps details.rendererAutoRecovered on a crash the USER healed - dismissing its burst siblings too. The disarm goes in both onBeforeReload bodies (createMainWindow's shortcut and the app menu wire them separately) and inside the existing main-window guard, since the menu path reloads whichever window has focus. The arm/disarm call sites had no coverage at all: deleting them left the full src/main suite green, so the earlier regression tests pinned the module functions and not the wiring. index.ts cannot be imported by a test (app-level side effects at module scope), so this follows the repo's existing answer - a bounded, code-anchored source assertion, mutation-verified to kill each of the four call sites individually.