mirror of
https://github.com/stablyai/orca.git
synced 2026-09-22 08:02:28 +00:00
host-store: write AsyncStorage metadata before SecureStore token to avoid orphaned keychain tokens on crash. mobile IPC: coalesce repeated getPairingQR calls onto a single pending device token via new DeviceRegistry.getOrCreatePendingDevice. Findings addressed: - [high] mobile/src/transport/host-store.ts — saveHost orders Keychain write before AsyncStorage — orphaned tokens on crash - [low] src/main/ipc/mobile.ts:84-95 — getPairingQR creates a device token on every call, leaking pre-paired entries Rebased onto current main to resolve conflicts; preserved tokenCache.set added on main. Co-authored-by: orca-bot <bot@stably.ai>