Skip to content

Hold selected-account leases through desktop child reaping - #771

Merged
Meta-Develop merged 3 commits into
mainfrom
codex/selected-use-lease-custody-20261029
Oct 29, 2026
Merged

Meta-Develop merged 3 commits into
mainfrom
codex/selected-use-lease-custody-20261029

Conversation

@Meta-Develop

Copy link
Copy Markdown
Owner

Stacked on #762 (validated authority response envelopes); GitHub retargets this PR to main once #762 merges.

First slice of #720.

  • In-process provider launches validate and lease the frozen selected binding before adapter preparation or credential lookup.
  • The child and its lease move together to the desktop reaper; a confirmed exit releases the lease and an unknown exit keeps the use barrier.
  • Socket-backed provider launch stays unsupported until a service-owned operation exists.
  • Synthetic regressions cover child lifetime, normal and nonzero exits, stale bindings, pre-spawn failures and wait errors.

Validation: core and desktop formatting and six exact core tests passed on Linux; the desktop tests and platform checks run in CI.

Refs #720.

Use a shared response validator that requires matching nonempty request IDs, the supported protocol version and exactly one result or error before either authority client consumes a response. Strict desktop decoding is preserved and validation diagnostics never include remote values.

- Add core and framed-client regressions for malformed envelopes and local selection preservation.

Validation: formatting and six exact core/root regressions passed on Linux; desktop client tests, Clippy and the platform suites run in this PR's CI.
Stacked on #762 (validated authority response envelopes); GitHub retargets this PR to main once #762 merges.

First slice of #720.

- In-process provider launches validate and lease the frozen selected binding before adapter preparation or credential lookup.
- The child and its lease move together to the desktop reaper; a confirmed exit releases the lease and an unknown exit keeps the use barrier.
- Socket-backed provider launch stays unsupported until a service-owned operation exists.
- Synthetic regressions cover child lifetime, normal and nonzero exits, stale bindings, pre-spawn failures and wait errors.

Validation: core and desktop formatting and six exact core tests passed on Linux; the desktop tests and platform checks run in CI.
@Meta-Develop
Meta-Develop changed the base branch from codex/authority-response-validation-20261029 to main October 29, 2026 16:15
@Meta-Develop
Meta-Develop merged commit d582d2f into main Oct 29, 2026
2 of 15 checks passed
@Meta-Develop
Meta-Develop deleted the codex/selected-use-lease-custody-20261029 branch October 29, 2026 18:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant