refactor: make Runtime Host the sole Message admission authority - #3803

Merged

Astro-Han merged 27 commits into

mainfrom

fix/canonical-message-projection

Aug 26, 2026

Commits on Aug 26, 2026

fix: reconcile client messages by canonical identity
Astro-Han
committed
7077c6b
test: assert Desktop follow-up message identity
Astro-Han
committed
3ed9310
fix(desktop): reconcile submitted messages by canonical identity
Astro-Han
committed
4ef0dd0
fix(cli): submit messages through host admission
Astro-Han
committed
f681dc3
fix(desktop): narrow WorkHub exact send results
Astro-Han
committed
ff98b1d
refactor(desktop): separate message admission from exact turns
Astro-Han
committed
c70a37c
fix: reconcile transient messages from Host outcomes
Astro-Han
committed
7073a08
fix(cli): preserve canonical message projection through recovery
Astro-Han
committed
19e6e8f
fix(desktop): keep transient messages outside Turn authority
Astro-Han
committed
242a368
fix(desktop): reconcile transient messages from host proof
Astro-Han
committed
2ef7ab9
fix(cli): keep host projection transient until canonical
Astro-Han
committed
b43f765
fix(desktop): keep live message projection single-owned
Astro-Han
committed
e76b3e5
fix(desktop): preserve host transient ordering
Astro-Han
committed
6a940d3
fix: reconcile transient messages from durable proof
Astro-Han
committed
3d2fa53
refactor: make Runtime Host the sole Message admission authority
Astro-Han
committed
4c56f5e
fix(desktop): retire a Follow Up the Host refused outright
Astro-Han
committed
2c87427
refactor: narrow two Message admission shapes to what reads them
Astro-Han
committed
5f0efb0
test: fold the repeated driver and dependency scaffolding into one fixture each
Astro-Han
committed
3db67af
fix(desktop): migrate the remount E2E off the removed steer channel
Astro-Han
committed
b3eb826
fix(cli): give Host admission a single ordered client stream
Astro-Han
committed
952e29b
fix(desktop): bind the exact-Turn arm to the Turn Runtime Host named
Astro-Han
committed
6aa12ac
fix(desktop): carry the Host admission answer through to its caller
Astro-Han
committed
3e98f70
fix(cli): project the Skill receipt Runtime Host answers a submit with
Astro-Han
committed
a16582c
fix(runtime-host): bind exact-Turn intent into durable Message identity
Astro-Han
committed
dd25ed9
refactor(desktop): require a caller-owned identity on the submit IPC
Astro-Han
committed
752dde6
test(desktop): drop the message-state double the transient fixture replaced
Astro-Han
committed
8270fa6
refactor(runtime-host): keep the submitted Turn intent as one durable value
Astro-Han
committed
fadadb4

Navigation Menu

Uh oh!

refactor: make Runtime Host the sole Message admission authority - #3803

refactor: make Runtime Host the sole Message admission authority#3803
Astro-Han merged 27 commits into
mainfrom
fix/canonical-message-projection

Commits on Aug 26, 2026

fix: reconcile client messages by canonical identity

test: assert Desktop follow-up message identity

fix(desktop): reconcile submitted messages by canonical identity

fix(cli): submit messages through host admission

fix(desktop): narrow WorkHub exact send results

refactor(desktop): separate message admission from exact turns

fix: reconcile transient messages from Host outcomes

fix(cli): preserve canonical message projection through recovery

fix(desktop): keep transient messages outside Turn authority

fix(desktop): reconcile transient messages from host proof

fix(cli): keep host projection transient until canonical

fix(desktop): keep live message projection single-owned

fix(desktop): preserve host transient ordering

fix: reconcile transient messages from durable proof

refactor: make Runtime Host the sole Message admission authority

fix(desktop): retire a Follow Up the Host refused outright

refactor: narrow two Message admission shapes to what reads them

test: fold the repeated driver and dependency scaffolding into one fixture each

fix(desktop): migrate the remount E2E off the removed steer channel

fix(cli): give Host admission a single ordered client stream

fix(desktop): bind the exact-Turn arm to the Turn Runtime Host named

fix(desktop): carry the Host admission answer through to its caller

fix(cli): project the Skill receipt Runtime Host answers a submit with

fix(runtime-host): bind exact-Turn intent into durable Message identity

refactor(desktop): require a caller-owned identity on the submit IPC

test(desktop): drop the message-state double the transient fixture replaced

refactor(runtime-host): keep the submitted Turn intent as one durable value