Skip to content

Verify native installer candidates before draft release attachment - #186

Merged
BunsDev merged 27 commits into
mainfrom
release-candidates
Oct 12, 2026
Merged

BunsDev merged 27 commits into
mainfrom
release-candidates

Conversation

@BunsDev

@BunsDev BunsDev commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

The release workflow currently attaches macOS artifacts without joining the native Windows/Linux acceptance receipts. This change verifies the exact tagged installer bytes and their source/run identity before attaching five installers, checksums and an acceptance manifest to a draft release.

  • Reuse native Windows/Linux jobs and bind installed-app reports to their verified candidate manifests.
  • Require all three signed macOS update scenarios; reject missing, tampered, stale, symlinked or failed candidate inputs.
  • Preserve unsigned Windows status and manual Windows/Linux updates. Exclude private upgrade fixtures and refuse public releases or drafts containing assets.

Validation on signed 83cb612, reconciled with protected main c7382013:

  • Fresh local build and workspace typechecks passed; 1,405 unit tests passed, 15 skipped. All 639 tracked files stayed unchanged. Independent composition review found no issues; the final history-only main reconciliation retained the exact verified tree.
  • Both fresh hosted macOS runs passed 1,404 unit tests with 16 skips, 274 desktop E2E tests, and seven site tests, including all six window-lifecycle regressions. PR run, push run.
  • Both fresh native iPhone runs passed all 28 UI tests, including paired Mac approval/follow-up, ignored-first-tap navigation, and the offline demo workspace. PR run, push run.
  • Native Windows/Linux CI passed. Five evidence archives match GitHub sizes and digests. The tested merge a445ce96 has parents c7382013 and 83cb612 and exactly the same tree as this head.
  • Windows passed 16 CLI/PTY tests and three installed launches. Linux passed four CLI and seven terminal tests, eight package launches, and three KWallet5 launches. Reports retain nativeChecksPassed: true, installerAcceptance: pending, and their account/session limitations.
  • Both installer archives were independently verified in memory. Their manifests exactly match the installed-app receipts, and the Windows EXE, Linux AppImage and Debian package sizes and SHA256 hashes all match. Full installer bytes were not retained locally.

Desktop 0.0.10 and iPhone build 5 are preserved; version preparation remains separate. All six checks on the final head passed; the Vercel preview also completed successfully. The first approved signed tag, actual signed macOS update acceptance and publication remain pending. Authenticated native accounts, full graphical/PAM sessions, KWallet6 and historical migration retain their documented acceptance gaps. Reconcile the separately owned v0.0.11 release #184 before choosing release source/version. Published v0.0.10 needs manual installation of the first updater-enabled release. This PR creates no tag or public release.

Preserve raw drafts, pending originals, and attachment ownership through
sends, owner removal, restart preparation, and uncertain update recovery.
Gate release artifacts on disposable signed macOS acceptance.

Coven-Harness: Codex / gpt-6-astra
Reconcile prompt-cache usage measurement with durable draft recovery and verified macOS updates. Make the hosted draft fixtures wait for an accepted, persisted edit and select seeded threads explicitly. Preserve failure recovery assertions and native acceptance limits.

Coven-Harness: Codex / gpt-6-astra
Select the intended CLI explicitly after restoring a saved draft and observe Store menu delivery while Settings remains open. Preserve shutdown, transcript, tab and guest-isolation assertions.

Verified six focused cases and the full 270 desktop plus seven site E2E suite; application source matches the prior build, typecheck and 1,352 passing unit tests.

Coven-Harness: Codex / gpt-6-astra
Retain the warm-cache routing changes and Settings visibility precondition alongside explicit shutdown backend selection and observed Store menu delivery.

Verified full build and workspace typechecks, 1,362 unit tests with 15 skips, all 270 desktop E2E cases and seven site cases on the combined source.

Coven-Harness: Codex / gpt-6-astra
Recover the reviewed approval safety patch on the current updater integration. Keep compound or incomplete allows waiting for a human and explain when Jev was not consulted. Preserve the default-off gate and the documented quoted-test-name evaluation limit.

Verified full build and workspace typechecks, 1,376 unit tests with 15 skips, 271 desktop E2E cases and seven site cases. Only reviewed documentation changed after those checks.

Coven-Harness: Codex / gpt-6-astra
Bind tagged macOS, Windows and Linux candidates to source, run, hashes and native acceptance receipts. Preserve pending account and session limits in the draft release manifest.

Coven-Harness: Codex / gpt-6-astra
Reconcile the protected PR181 squash on main. The resulting tree is identical to the signed approval recovery already verified with full build, typechecks, 1,376 unit passes, 15 skips, 271 desktop cases and seven site cases.

Coven-Harness: Codex / gpt-6-astra
@vercel

vercel Bot commented Oct 12, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
modex Ready Ready Preview Oct 12, 2026 3:07pm UTC

Request Review

Recover the pending beta approval documentation onto the current updater delivery. Record the historical Mac and Companion beta decisions while retaining production App Review and physical installation limits.

Verified full build, workspace typechecks and 1,362 unit passes with 15 skips. Documentation-only change.

Coven-Harness: Codex / gpt-6-astra
Recover the pending merge-proof fix on current main. A branch that merged main before landing can prove delivery through complete tree equality with its recorded single-parent squash commit. Require the existing ownership, exact PR identity, clean-state and verified archive checks before removal.

Verified full build, workspace typechecks and 1,366 unit passes with 15 skips, including the success and refusal regressions.

Coven-Harness: Codex / gpt-6-astra
Retain the historical beta approval documentation alongside the reviewed approval guards. Product, test and build inputs match the verified approval recovery; the combined build, type checks and full unit suite pass.

Coven-Harness: Codex / gpt-6-astra
Retain exact-tree pruning proof alongside the reviewed approval and beta status changes. The combined build, workspace type checks and full unit suite pass; application and E2E inputs match the verified approval recovery.

Coven-Harness: Codex / gpt-6-astra
Verify the combined approval, beta documentation and worktree maintenance source with the release candidate checks. Refresh native receipt evidence and preserve the remaining signed-tag and account acceptance gates.

Coven-Harness: Codex / gpt-6-astra
Reconcile the actual main squash without changing the verified combined source tree. Build, workspace type checks and 1,376 unit tests passed before this ancestry-only merge.

Coven-Harness: Codex / gpt-6-astra
Wait for the displayed branch after launch and every project switch before testing owner-removal admission. Keep production refusal behavior and pre-debounce draft assertions unchanged.

Coven-Harness: Codex / gpt-6-astra
Retain the recovered pruning proof and beta documentation with the verified CI readiness fix. Combined build, workspace typechecks and 1,380 unit tests passed; application and E2E inputs match the verified 271-desktop and 7-site source.

Coven-Harness: Codex / gpt-6-astra
Reuse the bounded navigation action helper for initial and reset demo opening, and exercise ignored first opening and Back actions. Keep the historical failure cause and native verification gate explicit.

Coven-Harness: Codex / gpt-6-astra
Preserve the historical beta approval record and all remaining native acceptance gates.

Coven-Harness: Codex / gpt-6-astra
Retain the reviewed exact squash-tree proof and beta status record.

Coven-Harness: Codex / gpt-6-astra
Observe one native size transition when renderer dimensions stay stale despite
correct native bounds. Preserve the original polling budget, require both sizes
to settle, and restore native bounds when the renderer cannot recover. Cover
minimum-size recovery, transient divergence, and permanent mismatch.

Coven-Harness: Codex / gpt-6-astra
Preserve the historical beta approval scope while carrying the tested native and renderer geometry correction.

Coven-Harness: Codex / gpt-6-astra
Preserve the exact squash delivery proof and lifecycle guards while carrying the tested native and renderer geometry correction.

Coven-Harness: Codex / gpt-6-astra
Check that the original thread row has disappeared before querying Back readiness, preserving both destination conditions and the existing retry budget.

Coven-Harness: Codex / gpt-6-astra
Preserve the historical beta scope and previously verified application inputs while carrying the reviewed iPhone predicate ordering correction.

Coven-Harness: Codex / gpt-6-astra
Preserve pruning proof and lifecycle guards while carrying the reviewed destination predicate ordering.

Coven-Harness: Codex / gpt-6-astra
The complete source tree is unchanged from the reviewed and verified squash-proof recovery; integrate actual protected-main history before delivery.

Coven-Harness: Codex / gpt-6-astra
Integrate the reviewed PR188 source while retaining desktop 0.0.10 and iPhone build 5.

Verified build, typechecks and 1,405 unit tests (15 skipped); desktop and site inputs match the previously verified 274 plus 7 test run.

Coven-Harness: Codex / gpt-6-astra
Merge the delivered PR188 squash without changing the verified source tree.

Coven-Harness: Codex / gpt-6-astra
@BunsDev
BunsDev marked this pull request as ready for review October 12, 2026 14:59
@BunsDev
BunsDev merged commit 3add7ef into main Oct 12, 2026
7 checks passed

This branch was successfully deployed

1 active deployment
Preview — 83cb612f Deployed Oct 12, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant