Files
orca/src
Neil 1e6e9fbef2 fix(crash): disarm the recovery arm on a manual reload, and pin the wiring
Two gaps found by adversarial round 5.

The arm could be consumed by the user's own reload. A recovery reload
that stalls short of renderer_bootstrap_rendered without tripping the
breaker leaves the arm set; a Cmd+R or View > Reload within 30s then
boots, consumes it, and stamps details.rendererAutoRecovered on a crash
the USER healed - dismissing its burst siblings too. The disarm goes in
both onBeforeReload bodies (createMainWindow's shortcut and the app menu
wire them separately) and inside the existing main-window guard, since
the menu path reloads whichever window has focus.

The arm/disarm call sites had no coverage at all: deleting them left the
full src/main suite green, so the earlier regression tests pinned the
module functions and not the wiring. index.ts cannot be imported by a
test (app-level side effects at module scope), so this follows the
repo's existing answer - a bounded, code-anchored source assertion,
mutation-verified to kill each of the four call sites individually.
2026-08-01 05:38:40 -07:00
..