Repository navigation
fix(desktop): isolate packaged macOS maintenance profiles - #29
Conversation
|
Important
This repository does not receive automatic reviews because it has fewer than 10 stars.
 |
|
Automated independent technical review — Luna child, no human vote or reviewer request. Reviewed frozen patch SHA2567ee031ee09b69a4f79aa06b6f48be3e67a2cdaa00c2222d77108223143023a2b, now exact head a717317/treea1986570b65affad1a2938c319fe1fa36abc6b26 (remote tree matches locally reconstructed tested tree). No source blockers found after repairing root case aliases/marker symlinks, inherited state/OTLP paths, cloud/service context propagation and the separate WebSocket SCM construction path. Reviewed 12 focused passing tests and terminal exit0 server/desktop/shared typechecks, changed-file lint/format and diff checks. Electron-backed Clerk tests were unavailable locally; normal exact-head CI must cover them. This review does not establish native GUI/runtime, rollback, release or installation acceptance. |
|
Exact publication head is now f60ae72; the only additional commit is empty and preserves reviewed/tested treea1986570b65affad1a2938c319fe1fa36abc6b26. Normal CI has no runs/checks despite active enabled CI and an ordinary nonforce synchronization plus same-PR close/reopen through existing authenticated gh. No merge/check waiver. Release continuation and exact external actions: #20 (comment) . First local Knip and Electron installation attempts encountered cloud DNS/proxy failures; they are not passes. Required normal hosted CI and native artifact acceptance remain pending. |
|
CI event/authentication reconciliation and exact conditional current-actor handoff: #20 (comment) . Exact head f60ae72/base59152d9d; CI blob284d8e3a18f115f4183d6b5abcddebaf0dbc2221 identical main/head, default opened/synchronize/reopened eligible. Prior close/reopen actually used keyring-backed user OAuth gh (nullStack65), not an Actions token; cause of zero runs remains unknown. No repeated toggle/empty source change performed. A proven-distinct existing current actor route may use the guarded same-PR reopened event documented there; otherwise event-delivery diagnosis is necessary. Workflow ID362291206 is not a run ID. CodeRabbit success is not normal CI. Source/test/review/native Windows evidence and original failures preserved; no checkless merge or provisional application. |
|
Original distinct browser event outcome collected; no retrigger. Verified close32977297494/reopen32977304728 onOct11 08:19:57/08:20:11UTC at unchanged f60ae72/base59152d9d. Bounded reads through08:23:52UTC still0 Actions runs/0checkruns; CodeRabbit only. Direct GitHub Actions enabled/CI362291206active; CIbytes identical. Prepared precise UNSENT support repro with internal event-trace question, response requestIDs, actual lastCIrun and inference limits: #20 (comment) . Prior actor-route-unavailable condition superseded; no another actor/toggle requested. No check waiver/source change/merge/build/host effect. ENV sole installer's currentlyrunning32347ecd Windows-contract qualification remains unduplicated; final installed outcome not claimed. |
|
Continuation reconciliation, 2026-11-01 17:35 UTC: #29 is merged at96c7bf6475ca96ea02c8b09f938c693ae7cb3266. Exact merge-SHA check collection is empty; this is not CI green, packaged/native installation or Electron acceptance. Release/native qualification remains with existing PR20/ENV owners; no workflow enablement, packaging, install or host mutation performed here. Changed dependent lane #28 remains OPEN/DRAFT atbb9c9376b381529b08e4fc4da9f9579f0d8ee7a2 and conflicts with current main96c7bf6475ca96ea02c8b09f938c693ae7cb3266. Canonical retained-owner RESULT6561102612 records its sole DRAIN2 source custody, clean checkout, retained fixture/recording uncertainty, missing current assignment-bound auth/budget admission for execution/review, and missing screenshots/recovery/native acceptance. Its prior focused passes do not validate the unperformed current-main merge. Same-owner management continuation already occurred according to that receipt; it was not resumed by this hosted continuation. No duplicate writer/collector, old PRTRACE restart, paid fallback, draft promotion or merge attempted. Exact existing ChatGPT-owner lifecycle/resume is unavailable through supported tools in this context. |
Add packaged macOS
--isolation-root <absolute-directory>for a disposable maintenance profile. The app claims an empty owned root, rejects home overlap and symlinks, sets Electron home/appData/userData/sessionData before startup and the single-instance lock, and passes a reduced environment and profile state directory to backend launches and restarts.Isolation mode disables account-backed providers, cloud relay/auth, SCM discovery and PR adapters, device discovery, SSH, browser import, credential storage, updates and telemetry. The WebSocket discovery layer uses a lazy disabled service so it cannot construct live adapters. The affected provider readiness fixture now uses temporary paths.
Validation: 12 focused tests passed; server, desktop and shared typechecks, changed-file lint/format and diff checks passed. Independent Luna technical review found no source blockers. Electron-backed Clerk coverage was unavailable locally and remains required in normal CI, which installs Electron. Earlier typecheck and fixture failures are retained in the delivery evidence.
Release/native qualification stays with PR20. This source repair requires a successor digest-bound candidate; existing run37646685913 and its limited native receipts remain historical evidence for their exact bytes. Source landing does not establish native acceptance, promotion or installation.