refactor(hosted-web): establish runtime feature boundaries - #252

Draft

777genius wants to merge 942 commits into

devfrom

refactor/hosted-web-feature-boundaries

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 2, 2026

feat(hosted-web): add durable coordination event stream
777genius
committed
da8fc35
feat(hosted-web): add hosted approvals surface
777genius
committed
f47a97b
feat(hosted-web): add bounded diagnostics surface
777genius
committed
6e44272
fix(hosted-web): satisfy approvals contract lint
777genius
committed
0f25b65
feat(hosted-web): admit hosted product routes
777genius
committed
decd85b
feat(hosted-web): add authenticated query context
777genius
committed
57ecfbd
feat(hosted-web): add process anchor supervision
777genius
committed
d9ef5bc
feat(hosted-web): add approvals renderer boundary
777genius
committed
6396f6d
feat(hosted-web): add approvals authority boundary
777genius
committed
04a1260
feat(hosted-web): add bounded diagnostics adapters
777genius
committed
83ef907
feat(hosted-web): add task-board authority boundary
777genius
committed
b80b3ad
feat(hosted-web): add atomic authority storage
777genius
committed
7a0480e
feat(hosted-web): add task board renderer
777genius
committed
a426292
feat(hosted-web): mount browser task board
777genius
committed
5e817ff
feat(hosted-web): stream durable coordination events
777genius
committed
90b5fb3

Commits on Aug 3, 2026

feat(hosted-web): build terminal-free browser artifact
777genius
committed
9fa01e3
feat(hosted-web): reconcile coordination event streams
777genius
committed
d8c4514
feat(hosted-web): mount authenticated diagnostics
777genius
committed
f17ec32
feat(hosted-web): add capability readiness projection
777genius
committed
c50a93f
fix(hosted-web): restore canonical CI ratchets
777genius
committed
893dc29
fix(hosted-web): satisfy readiness lint contracts
777genius
committed
5207e3c
fix(hosted-readiness): inject deadline scheduler
777genius
committed
c62bb98
fix(ci): update broken pnpm pin
777genius
committed
8ef65c0
feat(hosted-web): mount task board reads and lifecycle commands
777genius
committed
0348a8f
fix(deps): refresh security-pinned transitive packages
777genius
committed
52471ad

Commits on Aug 4, 2026

refactor(team-messages): own persistence in feature boundary
777genius
committed
5328945
fix(hosted-web): isolate hosted secondary entrypoints
777genius
committed
09158e4
refactor(renderer): isolate team API seams
777genius
committed
a157874
refactor(features): narrow team data capabilities
777genius
committed
03f3483
fix(ci): restore source size ratchets
777genius
committed
0d0c614
fix(ci): align legacy source size caps
777genius
committed
7d5116c
feat(hosted-web): add browser team messaging
777genius
committed
fd8c8ab
feat(hosted-web): add browser task mutations
777genius
committed
468c669
feat(hosted-web): persist durable approval authority
777genius
committed
558b2f6
feat(hosted-web): reconcile external task and message writes
777genius
committed
c4e14f4
fix(hosted-web): simplify external writer timestamp checks
777genius
committed
47a5964

Commits on Aug 5, 2026

feat(hosted-web): harden container isolation
777genius
committed
9676452
fix(hosted-web): type container verifier contract
777genius
committed
5767c12
feat(hosted-web): complete team console messaging
777genius
committed
d410e47
test(hosted-web): align current schema assertions
777genius
committed
f708401
test(hosted-web): align task board composition assertion
777genius
committed
2ba2f41
feat(hosted-web): add secure member log stream
777genius
committed
0e82bd7
fix(hosted-web): harden member log redaction
777genius
committed
419bce3

Commits on Aug 6, 2026

feat(hosted-web): add durable task mutation authority
777genius
committed
e07bf2c
feat(hosted-web): connect task mutations to browser workspace
777genius
committed
1fc37b6
feat(hosted-web): bridge runtime permission approvals
777genius
committed
ddb2969
refactor(hosted-web): unify team HTTP application host
777genius
committed
c6b1a24
test(hosted-web): refresh canonical architecture ratchets
777genius
committed
b52093d
fix(hosted-web): satisfy main composition lint
777genius
committed
1876e2e
feat(hosted-web): persist task mutation authority
777genius
committed
86b827b
refactor(hosted-web): extract team data capabilities
777genius
committed
9d7bd08
fix(hosted-web): restore canonical CI
777genius
committed
4a1e285
fix(deps): upgrade Electron and Nuxt security patches
777genius
committed
f603743
feat(hosted-web): add authorized workspace registry
777genius
committed
6796909
feat(hosted-web): add team configuration management
777genius
committed
e0e610e
fix(hosted-web): export task board page path
777genius
committed
0553064
feat(hosted-lifecycle): gate commands on orchestrator readiness
777genius
committed
db699ad
fix(hosted-runtime): preserve instance lock upgrades
777genius
committed
cbaafd5
test(hosted-web): add production browser e2e
777genius
committed
d535db5

Commits on Aug 7, 2026

fix(hosted-web): scope E2E artifact env
777genius
committed
4a36380
refactor(hosted-web): split target image admission policy
777genius
committed
5e688fd
refactor(hosted-web): split container hardening contracts
777genius
committed
27aa636
test(windows): avoid locked CLI fixture hardlink
777genius
committed
92f00b9
fix(hosted-web): remove redundant route result await
777genius
committed
7e1e4d4
fix(ci): preserve noninteractive hosted E2E context
777genius
committed
edc6380
fix(deps): patch legacy js-yaml releases
777genius
committed
c782bb7
fix(e2e): repair hosted service bootstrap
777genius
committed
e051295
fix(e2e): avoid hosted port selection race
777genius
committed
d7b4ce2
feat(hosted): add operator surfaces
777genius
committed
031d9a0
fix(hosted-web): classify generic port collisions atomically
777genius
committed
3e523fb
fix(hosted-web): preserve task drafts across mutations
777genius
committed
85ab089
fix(hosted-web): secure lifecycle socket authorization
777genius
committed
5c2230a
fix(hosted-web): use Docker-assigned E2E port
777genius
committed
44482b6
fix(hosted-web): publish Docker-assigned Caddy port
777genius
committed
8b36eed
feat(hosted-web): bind lifecycle authority to orchestrator
777genius
committed
a54aca5
test(team-runtime): stabilize launch matrix cancellation
777genius
committed
d3d9421
fix(hosted-e2e): publish Caddy on atomic loopback port
777genius
committed
d0a638d
fix(hosted-runtime): align lifecycle CI contracts
777genius
committed
e24dfb7
fix(hosted-e2e): use Docker-assigned Caddy port
777genius
committed
a61fa96
fix(codex-runtime): retry transient install downloads
777genius
committed
d3c23af
feat(hosted-web): share route admission across adapters
777genius
committed
4e8c896
feat(hosted-web): add team configuration workspace
777genius
committed
2abb0a8
fix(hosted-e2e): validate dynamic Caddy publication
777genius
committed
a892c89
feat(hosted-teams): persist team configuration authority
777genius
committed
c71bcfb

Commits on Aug 8, 2026

feat(hosted-teams): compose team configuration HTTP
777genius
committed
e7c853d
feat(team-runtime-control): enforce hosted runtime authority
777genius
committed
bdad51b
fix(hosted-e2e): publish dynamic Caddy HTTPS port
777genius
committed
bdb7f79
fix(hosted-web): clear runtime renderer CI violations
777genius
committed
1ee104b
refactor(internal-storage): extract hosted team worker client
777genius
committed
b8c15b3
fix(hosted-web): use Docker-assigned E2E port
777genius
committed
d537eb9
fix(hosted-web): restore CI security ratchets
777genius
committed
9a70fa2
fix(hosted-web): publish Docker-assigned E2E port
777genius
committed
97c1bd5
feat(hosted-web): harden stopped-stack recovery
777genius
committed
0fe92aa
fix(hosted-web): publish random E2E port
777genius
committed
8174aac
fix(landing): update nanoid 3 override
777genius
committed
f0bce69
fix(hosted-web): preserve recovery fixture permissions
777genius
committed
88e383a
fix(architecture): admit hosted renderer facets
777genius
committed
8cf6b92
feat(hosted-web): add operator surface controller
777genius
committed
26fabfd
fix(hosted-web): publish e2e https on a dynamic port
777genius
committed
72b0b2a
test(hosted-web): assert dynamic e2e https publication
777genius
committed
2c7699f
fix(runtime): release Windows CLI process handles
777genius
committed
4d9f6cd
fix(hosted-recovery): restore fixture permissions before cleanup
777genius
committed
4493b0c
refactor(runtime): keep child process utility within size cap
777genius
committed
57cf572

Commits on Aug 11, 2026

feat(hosted-web): complete hosted v1 workflows
777genius
committed
cb1deb9
chore: sync dev into hosted web branch
777genius
committed
462339d
fix(hosted-web): restore CI gates
777genius
committed
e9ec1cf
fix(hosted-web): preserve explicit compose bind guards
777genius
committed
55a5d17
test(hosted-web): enforce current lifecycle environment policy
777genius
committed
3fe2d3c
fix(hosted-web): restore frozen phase zero evidence
777genius
committed
83c113b
test(hosted-web): exempt frozen evidence from source size
777genius
committed
180be4c
test(hosted-web): freeze phase zero source fixtures
777genius
committed
b92e8d0
fix(hosted-web): type compose regression fixture
777genius
committed
f2cc1d4

Commits on Aug 12, 2026

ci(hosted-web): enforce frozen evidence integrity
777genius
committed
209c92f
test(team): await launch matrix teardown
777genius
committed
ca7c179

Commits on Aug 13, 2026

feat(hosted): add approval and lifecycle operator flows
777genius
committed
4b75a22
refactor(hosted): split oversized authority modules
777genius
committed
ff07821
test(hosted): align extracted authority contracts
777genius
committed
4242e3d
fix(hosted): stabilize production E2E readiness
777genius
committed
5bcd4d4
feat(hosted): authorize external event invalidations
777genius
committed
d2867df
refactor(hosted-access): split HTTP authorization helpers
777genius
committed
60f96a7
fix(storage): harden approval schema migrations
777genius
committed
d6b4fa4
fix(storage): reject case-variant approval shadows
777genius
committed
c0f2ad8
fix(storage): preserve migration interface contract
777genius
committed
08cec56
style(storage): keep migrations within size guard
777genius
committed
9bd0961
feat(hosted): synchronize workspace event refresh
777genius
committed
aaccc2e
fix(hosted): include event bootstrap adapters
777genius
committed
d809c6e
test(hosted): align architecture ratchets
777genius
committed
7f1ae85
style(storage): preserve migration import groups
777genius
committed
1a14159
fix(hosted-e2e): fence pairing drain revocation
777genius
committed
76c112d
fix(hosted): admit completed bootstrap requests
777genius
committed
4d8f154
refactor(renderer): isolate hosted team composition
777genius
committed
662d998
fix(hosted-e2e): isolate auth drain socket
777genius
committed
1230205
test(hosted-e2e): harden drain proof permissions
777genius
committed
715f6c0
test(hosted-e2e): await authenticated phase 8 UI
777genius
committed
8bfe3f4
fix(hosted-e2e): expose initial lifecycle control state
777genius
committed
7507f5d
feat(hosted): harden approval delivery foundation
777genius
committed
d1633fa
refactor(storage): split approval worker forwarding
777genius
committed
a68c1d3
fix(storage): remove redundant reconciliation casts
777genius
committed
bbb7c2b
fix(hosted): remove redundant owner generation cast
777genius
committed
958bc57
feat(hosted-runtime): pin reviewed OpenCode artifact contract
777genius
committed
780efa9
fix(hosted-runtime): satisfy runtime pin CI gates
777genius
committed
7741519
chore(hosted): preserve phase8 durability checkpoint
777genius
committed
821bec7
fix(hosted-runtime): clear remaining validation gates
777genius
committed
981da59
Merge remote-tracking branch 'origin/refactor/hosted-web-feature-boundaries' into fix/phase8-external-writer-durability-v2
777genius
committed
03c59f6
fix(storage): clear durability lint gates
777genius
committed
15cb931
fix(deps): correct nanoid lock integrity
777genius
committed
c44abac
Merge remote-tracking branch 'origin/refactor/hosted-web-feature-boundaries' into fix/phase8-external-writer-durability-v2
777genius
committed
f287a5b
fix(hosted): harden external writer recovery
777genius
committed
f4e6dd7
style(hosted-runtime): sort public imports
777genius
committed
7edd14c
refactor(hosted-runtime): isolate installer composition
777genius
committed
32b425e

Commits on Aug 14, 2026

fix(storage): repair external writer durability ledger
777genius
committed
b502064
fix(deps): update landing nanoid override
777genius
committed
dc1a7f9
Merge remote-tracking branch 'origin/refactor/hosted-web-feature-boundaries' into fix/phase8-external-writer-durability-v2
777genius
committed
a0c48d7
feat(hosted): catalogue external inbox writes
777genius
committed
4b955c0
feat(hosted): wire external writer reconciliation
777genius
committed
1ba0e76
refactor(hosted): split external writer composition
777genius
committed
42a37d8
fix(hosted): prevent external writer read starvation
777genius
committed
167e023
fix(hosted): avoid identity snapshot read contention
777genius
committed
36c0498
fix(hosted): bind identity reads to live storage
777genius
committed
19bf99b
fix(hosted): fence app-owned task observations
777genius
committed
66e6a59
style(hosted): satisfy source size guard
777genius
committed
296701e
fix(hosted): restore identity storage isolation
777genius
committed
bae1299
fix(hosted): read live identities without writes
777genius
committed
b405614
fix(storage): close read workers reliably
777genius
committed
8d8bfdd
fix(hosted): resolve identity worker in standalone
777genius
committed
941bed7
fix(hosted): preserve external identity inventory capability
777genius
committed
1acb6c6
fix(hosted): type identity gateway capabilities
777genius
committed
a6a2d8d
chore(hosted): preserve read diagnostics in evidence
777genius
committed
0fa0dcb
fix(hosted): accept committed no-op task writes
777genius
committed
5c6597f
style(hosted): keep standalone within size guard
777genius
committed
216c841
fix(hosted): isolate lifecycle SSE proof
777genius
committed
f8458de
fix(storage): make v27 migration replay-safe
777genius
committed
31b69a8
refactor(storage): hide hosted identity backend
777genius
committed
3d1d378
fix(e2e): preserve provider file readability
777genius
committed
a9f761e
fix(e2e): rotate lifecycle owner on restart
777genius
committed
4b73c0a
fix(e2e): expire cursor below retention floor
777genius
committed
34596db
test(e2e): force browser stream backpressure
777genius
committed
3d003cc
test(architecture): freeze external writer exports
777genius
committed
3aa4487
test(e2e): propagate browser stream backpressure
777genius
committed
7c5eeb6
fix(hosted): contain identity snapshot read failures
777genius
committed
85e4531
Merge pull request #441 from 777genius/fix/phase8-external-writer-durability-v2
777genius
authored
0388ab4
ci: declare minimal workflow permissions
777genius
committed
f667da3
feat(approvals): admit signed owner route catalogs
777genius
committed
4f949ad
refactor(hosted): split owner admission contracts
777genius
committed
f36967f
fix(hosted): satisfy owner route type checks
777genius
committed
ea14dfd
test(hosted): follow owner admission split
777genius
committed
016c6cd
feat(hosted): mount signed approval routes
777genius
committed
843d817
test(hosted): follow production route admission
777genius
committed
44ada5b
fix(hosted): bind approval routes to signed owners
777genius
committed
6639ff9
fix(hosted): restore owner admission size gate
777genius
committed
29af0e4
style(hosted): keep owner admission within gate
777genius
committed
ab40fa8
feat(approvals): publish trusted runtime admission
777genius
committed
f542fdf
fix(approvals): harden trusted runtime admission
777genius
committed
1b5b3ef
fix(approvals): wire trusted admission lifecycle
777genius
committed
4bc4910
fix(hosted): wire production approval panel
777genius
committed
ccc688e
test(hosted): satisfy approval panel lint
777genius
committed
5ff3d96
fix(approvals): respect provisioning boundaries
777genius
committed
53a9b42

Commits on Aug 15, 2026

Commits on Aug 20, 2026

Commits on Aug 21, 2026

fix(runtime): fail closed on recycled Unix process groups
777genius
committed
8693e96
merge: integrate Unix process identity remediation
777genius
authored
c28be1f
refactor(runtime): isolate Unix process ownership proof
777genius
committed
620e0f5
test(hosted): pin cross-repo approval wire golden
777genius
committed
17e51cb
merge: integrate dev into hosted web PR
777genius
committed
1492ba3
fix(renderer): preserve source size ratchet
777genius
committed
e1b4dc9
fix(ci): restore merged quality ratchets
777genius
committed
65691e5
fix(ci): keep formatted sources within ratchets
777genius
committed
9fc2546
fix(ci): restore merged renderer contracts
777genius
committed
fc5c004
fix(ci): tighten team detail size ratchet
777genius
committed
318248f
test(ci): refresh provisioning export contracts
777genius
committed
da72b57
test(e2e): retry partial lifecycle traces
777genius
committed
9233aeb

Commits on Aug 22, 2026

fix(evidence): refresh electron auth artifacts
777genius
committed
14bba03
fix(evidence): refresh renderer parity closure
777genius
committed
695b1a5
chore: merge dev into hosted web branch
777genius
committed
597884f
test: stabilize external writer watch paths on macos
777genius
committed
647ee71
chore(hosted-runtime): repin verified OpenCode artifacts
777genius
committed
85e3036
docs(hosted-runtime): document OpenCode downstream policy
777genius
committed
e0b5299
test(hosted): wait for auth recovery after restart
777genius
committed
d21d04e
ci(hosted): track OpenCode upstream drift
777genius
committed
4da8b7d
test(hosted): preserve SSE reconnect after restart
777genius
committed
fe80c3e
feat(approvals): coordinate owner lifecycle
777genius
committed
af3af21
fix(approvals): close lifecycle admission gaps
777genius
committed
de94553
fix(approvals): await malformed-owner revocation
777genius
committed
630fcf6
fix(approvals): require confirmed lifecycle revocation
777genius
committed
97c5334
docs(hosted): authorize actual-owner closure phase
777genius
committed
1ff1cee
docs(hosted): authorize activation v1 product seam
777genius
committed
9322322
feat(hosted): authenticate approval activation
777genius
committed
6afaa85
fix(hosted): sort activation envelope imports
777genius
committed
3df37aa