Skip to content

feat(desktop): authenticated idempotent remote Stop receiver - #7345

Draft
loganj wants to merge 1 commit into
feat/desktop-stop-fence-fab2f134from
feat/desktop-stop-receiver-fab2f134
Draft

loganj wants to merge 1 commit into
feat/desktop-stop-fence-fab2f134from
feat/desktop-stop-receiver-fab2f134

Conversation

@loganj

@loganj loganj commented Sep 4, 2026 •

Copy link
Copy Markdown
Collaborator

Remote Stop 3/5 — 460 changed lines

Native IPC binds active owner/community, local installation, agent delegation and local backend before durable admission + ordinary Stop. Consumed duplicates return exact saved signed result; crash/eviction returns Unknown without repeating effect. Outcome history is bounded without pruning agent admission fences. Tests exercise actual production receiver with SQLite reopening, wrong owner/community/host, failed Stop, unowned agent and crash-after-admission.

Draft status and validation

Part of the dependent Multiverse Remote Stop stack on #7333. Not merge-ready or deployed. Ordinary host Stop only; Start/Restart/Move placement and launch-side broker integration remain follow-on work. No native two-Desktop acceptance has been performed.

Aggregate candidate 9ce501a671822cf6c8511a0c3687aad8eb56acb7: full Desktop JS 6,255 passed; full native 3,171 passed, 19 ignored, plus 7 CSP and 3 mixer integration tests; Desktop production build passed (OSS feature variant, not a normal internal release DMG). Workspace/all-target Clippy, Rust/Tauri formatting, Desktop static checks and web checks passed in the aggregate just ci attempt. just ci is incomplete: isolated mobile dependency resolution cannot reach pub.dev; no broad-green claim. Static code review was performed directly; no independent human approval claimed.

Relay/DB validation on exact aggregate product head 9ce501a6 passed all 343 selected PostgreSQL tests, including private storage/query, exact stored request redelivery only to authenticated owner/correct community, and populated migration upgrade. Database discovery guard passes. Two unrelated full-package failures also reproduce at unchanged parent 08fbf9c9: relay mesh echo returns 504 rather than 200, and DB observability source guard finds .fetch_all(pool). No weakening/repair of those checks is included.

Originating conversation: buzz://message?channel=f45d3304-dcf0-44e8-a46d-bcd63b235fbc&id=46556e0bda64b5875ddd6791ccb39797d470c3a7d8512912fd876742eb899d46

Bind owner delegation, installation, agent and community before ordinary Stop. Persist admission before effects and retain exact signed outcomes for retries across reopening and bounded eviction.

Signed-off-by: Logan Johnson <loganj@squareup.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant