chore: advance TopFiles owner onto current scan/navigation owner - #373
Draft
seonghobae wants to merge 44 commits into
Draft
chore: advance TopFiles owner onto current scan/navigation owner#373seonghobae wants to merge 44 commits into
seonghobae wants to merge 44 commits into
Conversation
* chore(deps-dev): bump vitest from 4.1.11 to 5.0.0 Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.11 to 5.0.0. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/vitest) --- updated-dependencies: - dependency-name: vitest dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * fix(ci): complete Vitest 5 runtime migration * fix(deps): refresh vulnerable nanoid lock entry * fix(ci): preserve Tauri release feature flags on Windows --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seongho Bae <me@seonghobae.me>
…lima) (#267) * test: judge provider shutdown by primary process evidence * fix: judge provider shutdown by primary process state * test: reuse primary runtime shutdown guard * fix: rely on bound OneDrive item evidence * docs: record measured reclaim and podman corruption * test: allow already-stopped OneDrive unpin admission * fix: allow OneDrive unpin when app is already stopped * test: veto merged worktree authority when PR is open * feat: verify GitHub PR commit membership * fix: prioritize open pull request worktrees * test: fail closed on capped PR commit evidence * fix: accept GitHub search repository name field * fix: fail closed at GitHub commit page cap * test: require v4 worktree audit schema * fix: version PR membership audit schema * revert: preserve worktree audit public docs * fix: preserve v4 worktree audit schema * test: align worktree audit CLI with v4 schema * test: require frontend git worktree audit v4 contract * fix: align frontend git worktree audit v4 contract * test: allow exact stale-open head under cutoff authority * fix: preserve stale PR cleanup authority * test: preserve stale worktree used by another open PR * test: model open PR identities without changing stale-head key * fix: bind stale worktrees to exact open PR identities * test: bind stale PR identities to shared heads * fix: bind stale PR authority to exact identities * test: align stale PR identity fixtures * test: align worktree schema identity fixture * test: order worktree identity fixtures correctly * test: add shared git worktree audit v4 contract * test: bind frontend audit schema to shared contract * test: bind runtime audit output to shared contract * test: bound aggregate GitHub worktree evidence time * test: reject stale Photos-library duplicate authority * fix: reapply managed Photos exclusion before duplicate reclaim * refactor: share one GitHub evidence deadline * fix: bound worktree audit forge evidence by one deadline * fix: close stale worktree and duplicate mutation gaps * fix(container): pin Docker prune authority to endpoint * fix(duplicates): bind deletion to staged identity * fix(duplicates): retain removal failure evidence * docs(adr): remove trailing whitespace * fix(container): preserve indeterminate mutation receipts * fix(runtime-storage): isolate blocking maintenance waits * fix(containers): preserve Docker context TLS authority * fix(duplicates): surface staged recovery files * fix(duplicates): rehash staged candidates before removal * feat(podman): port privacy-safe desktop evidence * fix(container): bind volume reclaim to explicit ownership * fix(container): require owned stopped resources * fix(container): persist immutable prune receipts * fix: keep container orphan reclaim evidence portable * test: bind Docker name fixtures to ownership evidence * test: keep read-only image audit unbound * fix: separate Podman network membership authority * test: require age gate for obsolete extensions * fix: enforce age gate for obsolete extensions * test: reproduce first-run receipt directory failure * fix: create first-run receipt parents * test: separate native obsolete discovery from age policy * test: preserve open duplicate after staging * fix: recheck duplicate active use after staging * feat(cleanup): reclaim BuildKit and JS build artifacts Bind Docker BuildKit cleanup to a fresh reclaimable-set fingerprint and reuse the guarded development-artifact flow for common JavaScript build outputs. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(cleanup): detect active paths in process arguments Extend the shared active-use gate with bounded process argument evidence so closed scripts under generated directories remain protected. Co-Authored-By: Claude <noreply@anthropic.com> Signed-off-by: Seongho Bae <me@seonghobae.me> * test: reject generic .build cleanup authority * fix: exclude generic .build from cleanup authority * fix(cleanup): ignore active-use probe self pid Keep process argument evidence for other processes while preventing CLI cleanup from classifying its own target argument as active use. Co-Authored-By: Claude <noreply@anthropic.com> Signed-off-by: Seongho Bae <me@seonghobae.me> * test: require bound approval for permanent dev cleanup * fix: bind permanent dev cleanup to reviewed plan * test: preserve runtime recovery receipt across refresh failure * fix: preserve runtime maintenance receipts across refresh failures * feat(safety): enforce ontology retention vetoes * test(dev-artifacts): borrow approval root * feat(safety): protect bound files and tagged Cargo caches * fix(cleanup): recognize native Cargo target layouts * fix(cleanup): bound Cargo cache tag reads * test: reject unowned cargo-like target trees * fix: require authoritative cargo target evidence * test: protect non-UTF8 sidecar targets * test: exercise non-UTF8 protection sidecars * fix: preserve non-UTF8 protection sidecars * feat(cleanup): prove uv Git cache trash * fix: recognize native trash cache collisions * test: tolerate filesystems rejecting non-utf8 names * fix: expose build cache prune in container CLI * fix: support current Colima storage status * fix: allow complete active-use probes for large caches * fix(cleanup): bound cache probes and report trim failures Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test: expose truncated container mutation receipts * fix(cache): recognize native trash collision names Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test: preserve completed runtime recovery receipts * fix: preserve completed runtime recovery receipt * test: preserve truncated orphan mutation evidence * test: converge truncated mutation receipt regression * test: distinguish restart completion from recovery success * fix: separate runtime restart receipt from recovery success * fix: report runtime recovery only after reachability proof * fix: preserve runtime maintenance receipts across refresh failure * feat(cache): reclaim inactive Edge signing clones Catalog the current macOS user-session signing clone root, preserve active clones, and permit only identity-bound direct cache children across the protected var boundary. Purge only structurally verified Edge app bundles without following internal symlinks; explicit protection markers remain authoritative. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test: reject public build-cache prune authority * fix: suppress unsafe build-cache prune authority * feat(cache): add in-use-aware uv cache pruning Recognize native uv archive caches in Trash and run uv cache prune from a private verified executable copy without force. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(cloud): snapshot large iCloud databases on APFS Use the mandatory macOS copy-on-write clone path for large CloudDocs databases while retaining the bounded byte-copy limit on other platforms. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(cloud): distinguish idle iCloud progress headers Treat File Provider aggregate progress headers as idle unless they include a provider-reported incomplete fraction. Preserve timeout, truncation, and stalled-operation blockers. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test: reject internal broad build-cache prune * fix(cloud): complete bounded iCloud activity probes Keep fileproviderctl's native limited dump while allowing the observed 44-second, 2.3 MB result to finish within a 60-second, 4 MiB bound. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * fix: make build-cache execution fail closed * fix: compile fail-closed build-cache boundary * fix(container): reject broad build-cache prune internally Keep the normal module boundary and reject build-cache execution in the shared mutation function so every caller fails closed without include wrappers. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test: require exact BuildKit cache pruning * test: bind BuildKit prune to reviewed ID filter * fix: prune exact BuildKit cache records * revert: preserve container reclaim documentation surface * test: strip orphan approvals without mutation command * fix: strip approvals without public mutation authority * feat(cloud): add evidence-bound iCloud provider recovery Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test: make BuildKit cache inventory read-only * test: prove BuildKit inventory stays non-mutating * fix(container): bound exact BuildKit prune by filter size Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test: pin Docker context deletion to immutable endpoint * fix: prevent Docker context authority drift during prune * fix: close CLI Docker context mutation bypass * test: keep Docker CLI authority policy compile-safe * test: enforce Colima CLI mutation fail-closed * test: reject mutable volume-name deletion authority * fix: make reusable volume identities read-only * fix: block mutable volume execution in CLI * fix: block mutable volume execution in Tauri * fix: restore container authority documentation * feat(cache): reclaim guarded FileProvider temporary data Add exact catalog selection, object-bound target cleanup, largest-first probing, and structural Trash proof for macOS FileProvider SQLite temporary copies. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test: keep default Docker orphan audit visible * fix: restore read-only default Docker orphan audit * test: preserve OneDrive pre-unpin runtime state * feat: model provider runtime state restoration * feat: expose provider runtime-state contract * fix: preserve OneDrive stopped state after unpin * fix(git): allow complete clone evidence collection Use the existing maximum bounded command budget for standalone clone PR evidence so repositories with many registered worktrees do not fail before revalidation completes. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test(container): fix Docker context JSON fixtures Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * test: reject stopping concurrently started OneDrive * fix: preserve concurrently started OneDrive * test: recheck clone approval at mutation boundary * fix: expire clone approval before mutation * test: expose unsafe OneDrive quit escalation * fix: fail closed when OneDrive quit identity changes * test: preserve partial runtime recovery receipt * fix: retain partial runtime recovery receipt * test: prevent container inspect prune overlap * fix: serialize container orphan maintenance actions * test: keep partial recovery distinct from completion * fix: distinguish partial recovery from completion * test: bind BuildKit cleanup copy to exact IDs * fix: describe exact BuildKit cache cleanup scope * fix(git): pace worktree PR evidence searches Serialize commit searches below the authenticated GitHub Search API rate so large worktree sets fail closed only on real evidence errors. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * feat(safety): bind retained ontology classes to paths Add a fail-closed, path-redacted CLI that writes deletion-veto markers only for retained classes in the bundled ontology. Signed-off-by: Seongho Bae <me@seonghobae.me> Commit-Message-Assisted-by: Claude (via Claude Code) * feat(container): bind native daemon cleanup authority Allow the cleanup CLI to execute only when an absolute Docker binary and explicit daemon host are pinned. Bind the host digest into the exact approval phrase so approvals cannot cross daemon endpoints. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * test: require blocking runtime storage inspection * fix(cache): require scoped shared-temp audits Reject broad shared temporary directory cleanup at the common cache mutation boundary. Git repositories and business artifacts under shared temp must pass their purpose-specific evidence workflows instead. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * test: reproduce docker-host PATH default failure * fix: resolve default docker binary from PATH * test: reproduce overlapping cleanup confirmation * fix(cache): protect user temporary roots Require purpose-specific evidence for both the per-user OS temporary root and the shared temporary root. Generic cache cleanup remains available for bounded named caches. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * fix: lock container cleanup before confirmation * fix: isolate runtime storage inspection on blocking worker * fix: register blocking runtime storage inspection * test: bind runtime storage inspection to registered worker boundary * test: match exact runtime storage handler registration * fix: keep runtime storage IPC wrapper out of coverage build * fix(worktree): withhold incomplete removal approval Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(runtime): remove duplicate storage inspection command Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * feat(worktree): prune missing registrations safely Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(worktree): reproduce bounded removal audits Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(worktree): keep batch PR authority stable Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(git): bound large worktree PR evidence via REST Replace branch-by-branch GraphQL PR discovery and commit search with bounded paginated GitHub REST evidence while preserving repository, count, timeout, open-PR veto, and authoritative commit-list checks. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * perf(git): skip searches for exact PR heads Derive exact open and completed PR membership from the bounded REST list, then reserve rate-limited commit search for worktree HEADs not already bound to an exact pull-request head. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * test: preserve worktree audit limits at removal boundary * fix: preserve worktree audit limits during removal * test: never restart an installed Colima runtime * fix(git): stream bounded PR head evidence Normalize only required pull-request fields through paginated gh jq output and parse the resulting NDJSON stream, avoiding raw REST payload growth on repositories with many pull requests. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(git): admit bounded hour-long forge audits Keep the short default while allowing an explicit one-hour shared GitHub evidence budget for repositories whose registered worktrees cannot be verified within five minutes. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * chore(test): keep timeout boundary diff focused Restore the existing test formatting while retaining only the one-hour invalid-boundary case. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(git): admit large authoritative PR histories Allow up to ten thousand paginated commit SHAs per pull request while retaining bounded output, exact SHA validation, and fail-closed overflow behavior. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * fix(cli): document build-cache orphan category * fix(git): scope PR membership to worktree heads Intersect exact repository-wide pull-request evidence with registered worktree HEADs before enforcing worktree bounds or performing fallback commit searches. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * feat(container): reclaim unreferenced Docker images Enumerate every Docker image with a full identity, prove zero references across the complete current container set, and reuse exact-ID live revalidation and immutable-host receipts for deletion. Signed-off-by: Seongho Bae <seonghobae@users.noreply.github.com> Commit-Message-Assisted-by: Claude (via Claude Code) * test: disclose unmerged worktree cleanup authority * fix: disclose closed PR cleanup scope * test: retain closed PR dependency disclosure * fix: retain closed PR connection disclosure * test: reject hour-scale git subprocess deadlines * fix: bound worktree local subprocess deadlines * refactor: expose bounded worktree public boundary * fix: make worktree timeout wrapper compile-safe * fix: separate GitHub evidence and local command budgets * refactor: preserve worktree active-use visibility * test: require complete automatic cache disclosure * fix: disclose complete automatic cache scope * test: restore bounded git subprocess timeout * test: align cache cleanup scope contract * test: exercise stale clone plan timeout boundary * fix: bound stale clone reclaim subprocesses * test: reproduce ontology protection replacement race * fix: bind ontology protection to current object identity * test: reject protection of replaced filesystem objects * fix: reject replaced targets before ontology binding * test: reject misleading temp reclaim execute surface * chore: remove misplaced temp reclaim regression * test: expose ontology protection replacement race * fix: reject replaced ontology targets before binding * test(safety): make path replacement deterministic Signed-off-by: Seongho Bae <me@seonghobae.me> * fix(cache): scope targeted plans before measurement Signed-off-by: Seongho Bae <me@seonghobae.me> * fix(cleanup): preserve tagged and shared runtime assets Signed-off-by: Seongho Bae <me@seonghobae.me> * fix(cleanup): bound buildkit audit evidence Signed-off-by: Seongho Bae <me@seonghobae.me> * docs: record verified pnpm cache reclaim Signed-off-by: Seongho Bae <me@seonghobae.me> * test: update build cache public fixture Signed-off-by: Seongho Bae <me@seonghobae.me> * test: align build cache prune fixture Signed-off-by: Seongho Bae <me@seonghobae.me> * fix(organize): block metadata-free classification fallback * fix cloud projection pair writer contention * fix podman network contract fixture * docs: align container orphan authority ADR * test: align Podman ownership fixture with receipt contract * test: match Docker image inspect fixture contract * fix: preserve truncated orphan mutation evidence * test: stabilize github evidence timeout fixture * test: align open pull request fixture with gh api * fix: add bounded OneDrive quit fallback * test: track OneDrive graceful quit fallback * fix: keep iCloud recovery CLI portable * ci: install lsof for duplicate audit tests * ci: isolate mutation test fixtures from protected tmp * ci: limit cargo test parallelism * ci: reduce Rust test artifact disk use * fix: remove internal runtime term from recovery copy * test: align contracts with current cleanup and release checks --------- Signed-off-by: Seongho Bae <me@seonghobae.me> Co-authored-by: opencode-agent[bot] <219766164+opencode-agent[bot]@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com>
chore: adopt current release foundation into scan/navigation owner
chore: advance scan/navigation owner onto current foundation
chore: adopt current shared Test owner into scan/navigation owner
chore: advance scan/navigation owner onto current shared Test owner
|
Important Draft PR not reviewedDraft PRs are not automatically reviewed by default.
To automatically review draft PRs, update your CodeRabbit configuration: reviews:
auto_review:
drafts: trueThanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This was referenced Sep 9, 2026
This was referenced Sep 9, 2026
Adopt the tested scan-unavailable-root guard into the canonical scan/navigation owner without changing filesystem or deletion authority.
Contributor
Author
|
@coderabbitai review |
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Current-lineage TopFiles accessibility integration parent. Exact head remains
7011c2c330d8ea20bf5a5520f43bf4338ee4c3ed. Predecessorda079fe365c2189e9d12df556114939bf9f6eaeb, Test34439672546, is terminal SUCCESS; that historical evidence does not transfer automatically to descendants.This parent rejected the earlier focus-outline-only hypothesis after review showed visible focus geometry alone did not explain document horizontal overflow. Browser owner #375 exact
7f178131ab1e75ddf325a93133eda4e8ca75ee54, Test34527975282, supplied the realistic buyer RED: 68/68 Vitest files and 271/271 tests passed, Chrome launched, thentop-files-page-horizontal-overflow:375failed.The downstream responsive lineage repaired that RED without weakening assertions. Current child #379 exact
5b533ca665d12c4efbe9f633dc9a4055b11ad129contains component-local long-token/intrinsic sizing fixes plus the separate #388 browser-lifecycle repair:/json/versionbrowser CDP,Browser.close, launched-process exit wait, abnormal-only process-group fallback, and one-shot profile removal without retry widening. Exact Test34572975401is terminal SUCCESS on that current child. Issue #388 is closed completed.Dependent #380 exact
6b5b587b432b52ef3f47b0f2b95d621ff70b70b3is ordinary/non-force stacked on #379 and has only the deliberate TopFiles accessibility delta relative to it. Exact Test34573067654is terminal SUCCESS: Ubuntu Rust/backend/cloud/archive/npm/frontend/browser/build, Windows, macOS and real llama.cpp are GREEN, and the browser diagnostic reacquired sequential keyboard reachability, visible focus, PageDown scrolling, fragment continuity and inherited responsive/state scenarios. These downstream exact-head successes do not convert this #373 head into independently tested GREEN.Broader issue #340 remains open after the Chrome lineage repair. #390 exact
0930488ccd1f4945332a6616334663c4b26f5706, Test34585802287, is terminal SUCCESS for explicit CJK/root font fallback. #392/#396/#398 are terminal-GREEN for the versioned translation ledger/cache foundation, immutable bundled-resource admission, and bounded fixed-resource Tauri projection. DiskSage still lacks native SQLite translation persistence/cache population, actual screen-wide stable-key rendering, locale-selection and explicit missing-message/fallback policy, realistic KO/EN/JA/ZH/VI/ES/DE/FR normal/loading/empty/error/permission + keyboard/focus + long-copy/CJK expansion acceptance, and Windows WebView2/macOS WebKit native-shell evidence. UI Delivery Gate remains FAIL.Keep Draft. No force-push, destructive rebase, self-approval, global clipping, tolerance widening, source/SSR substitution for real browser evidence, teardown-error suppression, keyboard-access removal, downstream evidence transfer, or gate weakening.