Skip to content

[2064 by GPT-5.6 Sol] Publish packaged Windows Connect READY through a bounded inherited stdout contract - #2069

Open
propr-dev[bot] wants to merge 8 commits into
1953-epic-desktop-transport-apifrom
2064/gpt-5.6-sol-publish-packaged-windows--20260902-1528-wdu
Open

[2064 by GPT-5.6 Sol] Publish packaged Windows Connect READY through a bounded inherited stdout contract#2069
propr-dev[bot] wants to merge 8 commits into
1953-epic-desktop-transport-apifrom
2064/gpt-5.6-sol-publish-packaged-windows--20260902-1528-wdu

Conversation

@propr-dev

@propr-dev propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

AI Implementation Summary

Closes #2064

Branch: 2064/gpt-5.6-sol-publish-packaged-windows--20260902-1528-wdu
Commits: ✅ Changes committed (5f687f7)


AI Processing Completed

Execution Details:

Summary:
Implemented issue #2064.

Key changes:

  • Added a validated, single-use READY publisher using bounded writeSync(1, ...) full-progress writes in packaged-connect-ready.mjs.
  • Wired publication after renderer discovery proof and before shutdown in main.ts.
  • Rejects duplicate READY records and children requiring forced termination.
  • Added bounded, failure-only milestone attribution without using evidence as READY authority.
  • Added native Windows inherited-pipe regression coverage, including partial/zero writes, broken pipes, schema errors, duplicates, clean closure, and live children.

Verification:

  • Focused suites: 32 passed.
  • Evidence/release guards: 32 passed.
  • TypeScript check passed.
  • Linux desktop package built successfully.
  • Full suite reached 343 passes; two unrelated pairing tests were cancelled under aggregate load and subsequently passed standalone, 10/10.
  • Packaged Linux smoke could not run because dbus-run-session is unavailable in this environment. Native Windows regressions execute within the ordinary-user Windows smoke gate.

Detailed Logs:

  • Conversation: 106 messages
  • Session: 01a062bc-e027-7890-8a11-a7c0cb66e45e

Log files stored at:

  • conversation: /tmp/claude-logs/issue-2064-2026-09-02T15-48-22-737Z-conversation.json
  • output: /tmp/claude-logs/issue-2064-2026-09-02T15-48-22-737Z-output.txt
Latest Conversation Messages

This PR was created automatically by ProPR after processing issue #2064.


💡 Need changes?

Comment on this PR to request refinements — the AI agent monitors comments and will update the implementation based on your feedback. Keep iterating until you're satisfied!

… through a b

Implemented by ProPR AI using gpt-5.6-sol model.

Implementation completed successfully.
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned linux-arm64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned linux-arm64 package
  • Result: failure
  • Commit: 5f687f7e8441 (5f687f7e844115b24cb75a665ee7c56ce4f06afb)
  • Details: View CI failure

Failure evidence

.github:25
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

Applied the requested follow-up changes in commit 422fadd

Summary of Changes

Fixed the CI failure in package-lock.json.

Root cause: the failed audit step flagged qs@6.15.3. Updated the lockfile to patched qs@6.16.0.

Verified:

  • npm run audit:runtime — 0 vulnerabilities
  • npm run desktop:audit:packaging — 0 vulnerabilities
  • Clean npm ci --ignore-scripts succeeds
  • git diff --check passes
  • Only package-lock.json changed; no commit created.

🤖 Implementation Details

  • Model: GPT-5.6 Sol (high)
  • Requested By: @propr-dev[bot]
  • Time: 3m 29s
  • Tokens: 462,258 (459,198 in / 3,060 out)
  • Cost: $0.54

Undo ChangesView Task Execution


💡 ProPR Slash Commands
Command Description Example
/merge Merge target branch into this PR and resolve conflicts /merge
/review Request an AI code review /review or /review claude-sonnet
/fix Implement fixes for issues found by /review /fix or /fix address the null check issue
/switch Change the AI model for this PR /switch claude-opus
/use Override the model for a single follow-up run /use claude-sonnet
/ultrafix Loop review→fix cycles until score goal is met /ultrafix or /ultrafix goal=8 max=10

🤖 Generated by ProPR
Processing comment ID: 5512318317✓

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned linux-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned linux-x64 package
  • Result: failure
  • Commit: 5f687f7e8441 (5f687f7e844115b24cb75a665ee7c56ce4f06afb)
  • Details: View CI failure

Failure evidence

.github:25
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned win32-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned win32-x64 package
  • Result: failure
  • Commit: 5f687f7e8441 (5f687f7e844115b24cb75a665ee7c56ce4f06afb)
  • Details: View CI failure

Failure evidence

.github:25
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned win32-arm64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned win32-arm64 package
  • Result: failure
  • Commit: 5f687f7e8441 (5f687f7e844115b24cb75a665ee7c56ce4f06afb)
  • Details: View CI failure

Failure evidence

.github:25
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned darwin-arm64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned darwin-arm64 package
  • Result: failure
  • Commit: 5f687f7e8441 (5f687f7e844115b24cb75a665ee7c56ce4f06afb)
  • Details: View CI failure

Failure evidence

.github:25
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned darwin-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned darwin-x64 package
  • Result: failure
  • Commit: 5f687f7e8441 (5f687f7e844115b24cb75a665ee7c56ce4f06afb)
  • Details: View CI failure

Failure evidence

.github:25
Process completed with exit code 1.

…sor/worktrees/integry/propr/pr-2069-followup-2026-09-02T15-49-05/package-lock.json).

Fixed the CI failure in [package-lock.json](/tmp/git-processor/worktrees/integry/propr/pr-2069-followup-2026-09-02T15-49-05/package-lock.json).

Root cause: the [failed audit step](https://github.com/integry/propr/actions/runs/33650933723/job/100317490402) flagged `qs@6.15.3`. Updated the lockfile to patched `qs@6.16.0`.

Verified:

- `npm run audit:runtime` — 0 vulnerabilities
- `npm run desktop:audit:packaging` — 0 vulnerabilities
- Clean `npm ci --ignore-scripts` succeeds
- `git diff --check` passes
- Only `package-lock.json` changed; no commit created.

PR: #2069
Comment by: @propr-dev[bot] (ID: 5512318317)
Model: gpt-5.6-sol
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Analyzed the follow-up request by @propr-dev[bot]

Analysis Summary

The CI failure is fixed in package-lock.json.

Root cause: all five jobs failed audit:runtime because qs@6.15.3 has moderate vulnerabilities. The current branch already upgrades it to patched qs@6.16.0.

Verified:

  • Both audit gates report 0 relevant vulnerabilities.
  • npm ci --ignore-scripts succeeds.
  • All six package jobs have passed the previously failing audit step in the new CI run.
  • Worktree is clean; I made no additional commit or redundant changes.

No code changes were necessary based on the current state of the branch.


🤖 Analysis Details

  • Model: GPT-5.6 Sol (high)
  • Time: 3m 22s
  • Tokens: 217,993 (214,800 in / 3,193 out)
  • Cost: $0.39

View Task Execution


💡 ProPR Slash Commands
Command Description Example
/merge Merge target branch into this PR and resolve conflicts /merge
/review Request an AI code review /review or /review claude-sonnet
/fix Implement fixes for issues found by /review /fix or /fix address the null check issue
/switch Change the AI model for this PR /switch claude-opus
/use Override the model for a single follow-up run /use claude-sonnet
/ultrafix Loop review→fix cycles until score goal is met /ultrafix or /ultrafix goal=8 max=10

🤖 Generated by ProPR
Processing comment IDs: 5512320626✓, 5512321374✓, 5512329464✓, 5512330103✓, 5512330575✓

@integry integry removed the AI label Sep 2, 2026
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned linux-arm64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned linux-arm64 package
  • Result: failure
  • Commit: 422fadd219b5 (422fadd219b5214a83e60b46732ec1208c8b92e9)
  • Details: View CI failure

Failure evidence

.github:68
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Native Windows durability (x64)

Please investigate and fix this CI failure.

  • Check: Native Windows durability (x64)
  • Result: failure
  • Commit: 422fadd219b5 (422fadd219b5214a83e60b46732ec1208c8b92e9)
  • Details: View CI failure

Failure evidence

.github:59
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned linux-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned linux-x64 package
  • Result: failure
  • Commit: 422fadd219b5 (422fadd219b5214a83e60b46732ec1208c8b92e9)
  • Details: View CI failure

Failure evidence

.github:66
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Packaged Connect (win32-x64)

Please investigate and fix this CI failure.

  • Check: Packaged Connect (win32-x64)
  • Result: failure
  • Commit: 422fadd219b5 (422fadd219b5214a83e60b46732ec1208c8b92e9)
  • Details: View CI failure

Failure evidence

.github:37
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned win32-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned win32-x64 package
  • Result: failure
  • Commit: 422fadd219b5 (422fadd219b5214a83e60b46732ec1208c8b92e9)
  • Details: View CI failure

Failure evidence

.github:60
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Packaged Connect (win32-arm64)

Please investigate and fix this CI failure.

  • Check: Packaged Connect (win32-arm64)
  • Result: failure
  • Commit: 422fadd219b5 (422fadd219b5214a83e60b46732ec1208c8b92e9)
  • Details: View CI failure

Failure evidence

.github:37
Process completed with exit code 1.

@integry integry added the AI label Sep 2, 2026
@integry

integry commented Sep 2, 2026

Copy link
Copy Markdown
Owner

Ultrafix the proven Windows authority-inspection hang on exact head 422fadd. The synchronous fd-1 READY publisher is not the current root cause; preserve it.

Exact win32-x64 job 100319214547 reaches the unchanged 240-second parent deadline and emits:

  • desktop.app.ready
  • desktop.renderer.ready
  • config-read STARTED/PASSED
  • authority-inspection STARTED
    with no authority-inspection PASSED/FAILED, status-resolution, connect proof, or READY. Therefore the app never reaches READY publication.

Static root cause:
runWindowsReadOnlyInspection serially calls spawnSync PowerShell once per authority target, allowing 60 seconds each under a 240-second cumulative cap. Hosted alternate-user cold starts can consume the entire parent READY budget across multiple targets. A Promise timeout around this synchronous loop cannot interrupt it.

Required correction:

  • Replace the serial spawnSync-per-target inspection with a genuinely asynchronous, bounded Windows batch that starts the existing one-target PowerShell brokers concurrently, or an equivalently secure single-broker batch.
  • Preserve each already-open pinned target as the broker's inherited standard-input HANDLE; do not put paths, handle values, identities, SIDs, environment, or target metadata into argv, command line, logs, or untrusted temp files.
  • Use one fixed wall-clock authority-inspection deadline no longer than the existing 60-second per-inspection bound, not N times the bound. Do not extend the 240-second READY timeout.
  • Bound aggregate stdout/stderr bytes and entry count exactly. Parse each result against its expected fixed index/kind/identity, revalidate every pinned descriptor and the held PowerShell executable, preserve deterministic result ordering, and reject missing/duplicate/extra results.
  • On any spawn, timeout, output, parse, or identity failure, terminate/drain every owned broker within a short bound and return only an existing or narrowly extended fixed Windows-native stage. Prove zero broker process remains.
  • Add native x64/ARM64 regressions with deliberately slow concurrent fixtures showing N targets complete within one wall bound; cover one hung broker, early failure while siblings run, output overflow, reorder/duplicate/missing result, and cleanup/tree zero.
  • Keep ordinary-user execution, actual native authority inspection, protected authority policy, snapshot pinning, config/status semantics, synchronous exact-byte READY publication, strict READY validation, all current security boundaries, and Linux/Darwin behavior.

Composition with #2056:

Run real ordinary-user packaged Connect on native win32-x64 and win32-ARM64. It must pass authority-inspection, status-resolution, connect proof, exactly one READY record, clean exit/drain, and zero owned process tree. Report exact job IDs and first fixed stage if either remains.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

Applied the requested follow-up changes in commit bde1c5e

Summary of Changes

Implemented the Windows authority-inspection ultrafix without committing.

Key changes:

  • Replaced serial spawnSync inspection with concurrent asynchronous PowerShell brokers sharing one 60-second wall deadline.
  • Preserved pinned descriptors as inherited stdin handles and removed target metadata from broker command lines.
  • Added aggregate output/entry bounds, deterministic ordering, identity and executable revalidation, sibling termination/drain, and fixed spawn:cleanup.
  • Added x64/ARM64 native PowerShell regressions for slow concurrency, hangs, early failure, overflow, reordered/missing/duplicate results, and zero remaining brokers.
  • Removed top-level lastMilestone; milestones now remain bounded diagnostic records.
  • Preserved synchronous exact-byte READY publication and the 240-second parent deadline.

Verification:

  • Desktop suite: 348 passed, 7 platform-skipped.
  • Platform-safe Connect: 88/88 passed.
  • Focused authority/harness: 23/23 passed.
  • CLI typecheck and lint passed.
  • git diff --check passed.

Native packaged Windows runs cannot execute on this Linux host, so no new x64/ARM64 job IDs or remaining fixed stages are available. The existing workflow now runs the new regressions and ordinary-user packaged smoke on both architectures.


🤖 Implementation Details

  • Model: GPT-5.6 Sol (high)
  • Requested By: @integry
  • Time: 28m 14s
  • Tokens: 14,661,890 (14,617,947 in / 43,943 out)
  • Cost: $9.82

Undo ChangesView Task Execution


💡 ProPR Slash Commands
Command Description Example
/merge Merge target branch into this PR and resolve conflicts /merge
/review Request an AI code review /review or /review claude-sonnet
/fix Implement fixes for issues found by /review /fix or /fix address the null check issue
/switch Change the AI model for this PR /switch claude-opus
/use Override the model for a single follow-up run /use claude-sonnet
/ultrafix Loop review→fix cycles until score goal is met /ultrafix or /ultrafix goal=8 max=10

🤖 Generated by ProPR
Processing comment ID: 5512533916✓

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned win32-arm64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned win32-arm64 package
  • Result: failure
  • Commit: 422fadd219b5 (422fadd219b5214a83e60b46732ec1208c8b92e9)
  • Details: View CI failure

Failure evidence

.github:61
Process completed with exit code 1.

propr-dev Bot pushed a commit that referenced this pull request Sep 2, 2026
…windows-connect-smoke.ps1](/home/node/workspace/apps/desktop/scripts/run-packaged-windows-connect-smoke.ps1:143):

Implemented the focused attribution split in [run-packaged-windows-connect-smoke.ps1](/home/node/workspace/apps/desktop/scripts/run-packaged-windows-connect-smoke.ps1:143):

- Added `redirect-open`, `redirect-timeout`, and `redirect-child-exit`.
- Preserved the existing timeout and all post-redirection authority predicates.
- Added hostile-output and totality coverage in [windows-packaged-connect-staging.test.mjs](/home/node/workspace/apps/desktop/scripts/windows-packaged-connect-staging.test.mjs:300).
- Allowed only `ready-duplicate` and `child-remained-alive`.
- Explicitly rejects top-level `lastMilestone`; record-contained milestones cannot authorize READY.
- No production launcher or authority behavior changed.

Validation passed: focused Node tests (17 passed, 16 Windows-skipped), ESLint, and `git diff --check`.

Existing exact-head native evidence:

- x64 job `100321658992`: first predicate `start-process-launch`.
- ARM64 job `100321659185`: first predicate `start-process-launch`.

Post-split native jobs require the system-generated commit, so no portable redirection correction was made without specific `redirect-open` or `redirect-child-exit` evidence. A read-only `git fetch` of #2069 was permission-blocked at `FETCH_HEAD`; composition was audited successfully through `gh pr diff`.

PR: #2056
Comment by: @integry (ID: 5512538687)
Model: gpt-5.6-sol
propr-dev Bot pushed a commit that referenced this pull request Sep 2, 2026
…ing.

Implemented the narrow follow-up without committing or merging.

- Fixed the PS5.1 fixture producer in [run-packaged-windows-connect-smoke.ps1](/tmp/git-processor/worktrees/integry/propr/pr-2056-followup-2026-09-02T16-21-10/apps/desktop/scripts/run-packaged-windows-connect-smoke.ps1:1851). Root cause: it relied on implicit PowerShell exit-state semantics after writing stderr, while `Start-Process` flattened its argument array into one command line. The producer now uses one quoted `ArgumentList` string and explicitly exits `0`. This follows documented [Start-Process serialization](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/start-process?view=powershell-5.1) and [EncodedCommand/exit semantics](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_powershell_exe?view=powershell-5.1).
- Added native regressions in [windows-packaged-connect-staging.test.mjs](/tmp/git-processor/worktrees/integry/propr/pr-2056-followup-2026-09-02T16-21-10/apps/desktop/scripts/windows-packaged-connect-staging.test.mjs:1467) for exact producer success and forced exit `23` mapping exclusively to `redirect-child-exit`.
- Updated only the audited `qs` lock entry to 6.16.0 in [package-lock.json](/tmp/git-processor/worktrees/integry/propr/pr-2056-followup-2026-09-02T16-21-10/package-lock.json:12022). Its patch-id exactly matches PR #2069.

Validation:

- Focused suite: 17 passed, 17 Windows-only skipped.
- Desktop script suite: 133 passed, 23 platform-skipped.
- ESLint and `git diff --check`: passed.
- Clean `npm ci --ignore-scripts`: passed.
- Desktop packaging audit: 0 vulnerabilities.
- The live root runtime audit now reports an unrelated `fast-uri` advisory; it was left unchanged per the explicit no-unrelated-dependency-churn requirement.

The corrected native x64/ARM64 and Packaged Connect runs require the system-created remote commit; dispatching now would only rerun the stale `c0c40b3` head. The stale [x64](https://github.com/integry/propr/actions/runs/33653868291/job/100327395998) and [ARM64](https://github.com/integry/propr/actions/runs/33653868291/job/100327395958) jobs both confirm the prior deterministic `redirect-child-exit` failure.

PR: #2056
Comment by: @propr-dev[bot] (ID: 5512754752)
Comment by: @integry (ID: 5512755188)
Model: gpt-5.6-sol
…ut committing.

Implemented the Windows authority-inspection ultrafix without committing.

Key changes:

- Replaced serial `spawnSync` inspection with concurrent asynchronous PowerShell brokers sharing one 60-second wall deadline.
- Preserved pinned descriptors as inherited stdin handles and removed target metadata from broker command lines.
- Added aggregate output/entry bounds, deterministic ordering, identity and executable revalidation, sibling termination/drain, and fixed `spawn:cleanup`.
- Added x64/ARM64 native PowerShell regressions for slow concurrency, hangs, early failure, overflow, reordered/missing/duplicate results, and zero remaining brokers.
- Removed top-level `lastMilestone`; milestones now remain bounded diagnostic records.
- Preserved synchronous exact-byte READY publication and the 240-second parent deadline.

Verification:

- Desktop suite: 348 passed, 7 platform-skipped.
- Platform-safe Connect: 88/88 passed.
- Focused authority/harness: 23/23 passed.
- CLI typecheck and lint passed.
- `git diff --check` passed.

Native packaged Windows runs cannot execute on this Linux host, so no new x64/ARM64 job IDs or remaining fixed stages are available. The existing workflow now runs the new regressions and ordinary-user packaged smoke on both architectures.

PR: #2069
Comment by: @integry (ID: 5512533916)
Model: gpt-5.6-sol
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned linux-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned linux-x64 package
  • Result: failure
  • Commit: bde1c5ea3f4e (bde1c5ea3f4e2a9eb410a5cedd81f76f50b92b57)
  • Details: View CI failure

Failure evidence

.github:27
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Native Windows durability (x64)

Please investigate and fix this CI failure.

  • Check: Native Windows durability (x64)
  • Result: failure
  • Commit: 55eb9231c625 (55eb9231c625647bdeb3072d3d5d7130400adfa3)
  • Details: View CI failure

Failure evidence

.github:59
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned win32-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned win32-x64 package
  • Result: failure
  • Commit: 55eb9231c625 (55eb9231c625647bdeb3072d3d5d7130400adfa3)
  • Details: View CI failure

Failure evidence

.github:60
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Packaged Connect (win32-arm64)

Please investigate and fix this CI failure.

  • Check: Packaged Connect (win32-arm64)
  • Result: failure
  • Commit: 55eb9231c625 (55eb9231c625647bdeb3072d3d5d7130400adfa3)
  • Details: View CI failure

Failure evidence

.github:37
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned win32-arm64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned win32-arm64 package
  • Result: failure
  • Commit: 55eb9231c625 (55eb9231c625647bdeb3072d3d5d7130400adfa3)
  • Details: View CI failure

Failure evidence

.github:61
Process completed with exit code 1.

…eb9231c`.

Implemented the narrow harness correction on exact head `55eb9231c`.

- Removed `runWindowsNativeTimingProbe` and probe telemetry from the gating ordinary-user path in [verify-windows-standard-user-connect.mjs](/tmp/git-processor/worktrees/integry/propr/pr-2069-followup-2026-09-02T17-56-37/scripts/verify-windows-standard-user-connect.mjs:116).
- Preserved fixed 60/135/240-second contracts, status predicates, stderr rejection, and bounded secret-free diagnostics.
- Added regressions proving the path never invokes the timing probe and exercises `ready` plus `authority-malformed` mapping in [windowsStandardUserConnectHarness.test.ts](/tmp/git-processor/worktrees/integry/propr/pr-2069-followup-2026-09-02T17-56-37/test/windowsStandardUserConnectHarness.test.ts:482).
- Production authority/supervisor code and lockfile were untouched.

Validation passed:

- Harness regressions: 9/9
- Authority/supervisor tests: 18/18
- Platform-safe Connect: 92/92
- Packaged lifecycle/READY: 32/32
- Native durability: 115/115
- CLI typecheck
- Linux x64 desktop packaging
- `git diff --check`

Target-native Windows x64/ARM64 ordinary-user and packaged Connect, Linux ARM64, and Darwin x64/ARM64 smoke reruns remain for CI. This Linux x64 container lacks `dbus-run-session`/`xvfb-run`, so packaged Linux launch could not run locally. No commit was created.

PR: #2069
Comment by: @integry (ID: 5514001116)
Model: gpt-5.6-sol
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Windows Connect Discovery (ordinary user, Node 22)

Please investigate and fix this CI failure.

  • Check: Windows Connect Discovery (ordinary user, Node 22)
  • Result: failure
  • Commit: b52e788fe165 (b52e788fe16507c33f1146c39f7dadb14f8ce31b)
  • Details: View CI failure

Failure evidence

.github:74
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned linux-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned linux-x64 package
  • Result: failure
  • Commit: b52e788fe165 (b52e788fe16507c33f1146c39f7dadb14f8ce31b)
  • Details: View CI failure

Failure evidence

.github:66
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned linux-arm64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned linux-arm64 package
  • Result: failure
  • Commit: b52e788fe165 (b52e788fe16507c33f1146c39f7dadb14f8ce31b)
  • Details: View CI failure

Failure evidence

.github:68
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Native Windows durability (x64)

Please investigate and fix this CI failure.

  • Check: Native Windows durability (x64)
  • Result: failure
  • Commit: b52e788fe165 (b52e788fe16507c33f1146c39f7dadb14f8ce31b)
  • Details: View CI failure

Failure evidence

.github:59
Process completed with exit code 1.

@integry integry added the AI label Sep 2, 2026
@integry

integry commented Sep 2, 2026

Copy link
Copy Markdown
Owner

Follow-up on exact head b52e788fe16507c33f1146c39f7dadb14f8ce31b. Fresh native ordinary-user job 100365540949 proves the timing-probe correction worked: the real ready path and authority-malformed mapping are reached. It then spends the remainder of the outer 120-second bound in authority-oversized and exits only with the harness diagnostic:

{"scenario":"authority-oversized","stage":"schema","nativeStage":null,"status":null,"reasonCodes":[]}

The oversized case must remain mandatory. The existing portable supervisor overflow tests pass, so first isolate the async two-round fakeAuthorityChild lifecycle rather than weakening production.

  1. Add a deterministic, short-bound regression that drives the same async fake-authority child/production generation path used by authority-oversized, publishes 128 KiB + 1, and proves it rejects promptly as parent:utf8, closes/drains stdout and stderr, terminates/destroys stdin/control, emits child terminal state exactly once, and leaves no referenced timer/stream/child handle.
  2. Correct the fake child’s close/kill/backpressure/control lifecycle so a kill caused by overflow before revalidation fully terminates all three stdio streams and the child exactly once. Keep kill idempotent and make write/end/error/EPIPE ordering total. Do not replace this with a synchronous mock and do not reduce the payload below the production cap.
  3. Preserve the real production runWindowsInspectionBrokerBatch behavior unless a focused regression demonstrates a production bug. Do not raise the fixed 60s inspection, 5s cleanup, 135s scenario, 240s packaged, or outer workflow bounds.
  4. Preserve the ready first scenario, every authority failure case, exact status/reason/stderr assertions, bounded secret-free native diagnostic allowlist, one-broker/fixed-fd/two-round production design, and 55eb corrections. Do not change the lockfile.
  5. Run focused async broker/control/overflow tests, the ordinary-user harness test, CLI typecheck, and git diff --check. Required native acceptance is that x64 and ARM64 ordinary-user product scenarios reach ready, authority-malformed, authority-oversized, and complete the entire matrix without timeout or leaked work. Report the exact new head and leave unmerged for independent audit.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

Applied the requested follow-up changes in commit 77f6aae

Summary of Changes

Implemented the async authority-oversized lifecycle correction without changing production broker behavior, timeout bounds, workflows, or lockfile.

Changes:

  • Fixed fakeAuthorityChild termination, stdio draining, control destruction, backpressure ordering, and idempotent terminal emission in windowsConnectProcessMock.mjs.
  • Added a short-bound regression publishing exactly 128 KiB + 1 and proving parent:utf8, complete stdio cleanup, single exit/close, idempotent kill, failed post-kill control, and zero remaining referenced resources in windowsStandardUserConnectHarness.test.ts.

Validation passed:

  • Async broker/control/overflow: 18/18
  • Ordinary-user harness: 10/10
  • CLI typecheck
  • Normal two-round fake-authority revalidation smoke
  • git diff --check
  • Production authority source and package-lock.json unchanged

Exact checked-out head remains b52e788fe16507c33f1146c39f7dadb14f8ce31b; changes are intentionally uncommitted and unmerged. Native x64/ARM64 ordinary-user acceptance requires the Windows CI runners.


🤖 Implementation Details

  • Model: GPT-5.6 Sol (high)
  • Requested By: @integry
  • Time: 8m 18s
  • Tokens: 1,513,098 (1,494,621 in / 18,477 out)
  • Cost: $1.73

Undo ChangesView Task Execution


💡 ProPR Slash Commands
Command Description Example
/merge Merge target branch into this PR and resolve conflicts /merge
/review Request an AI code review /review or /review claude-sonnet
/fix Implement fixes for issues found by /review /fix or /fix address the null check issue
/switch Change the AI model for this PR /switch claude-opus
/use Override the model for a single follow-up run /use claude-sonnet
/ultrafix Loop review→fix cycles until score goal is met /ultrafix or /ultrafix goal=8 max=10

🤖 Generated by ProPR
Processing comment ID: 5514238705✓

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned win32-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned win32-x64 package
  • Result: failure
  • Commit: b52e788fe165 (b52e788fe16507c33f1146c39f7dadb14f8ce31b)
  • Details: View CI failure

Failure evidence

.github:60
Process completed with exit code 1.

@integry integry removed the AI label Sep 2, 2026
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Packaged Connect (win32-arm64)

Please investigate and fix this CI failure.

  • Check: Packaged Connect (win32-arm64)
  • Result: failure
  • Commit: b52e788fe165 (b52e788fe16507c33f1146c39f7dadb14f8ce31b)
  • Details: View CI failure

Failure evidence

.github:37
Process completed with exit code 1.

…ction without changing production broker behavior, timeout bounds, workflows, or lockfile.

Implemented the async `authority-oversized` lifecycle correction without changing production broker behavior, timeout bounds, workflows, or lockfile.

Changes:

- Fixed `fakeAuthorityChild` termination, stdio draining, control destruction, backpressure ordering, and idempotent terminal emission in [windowsConnectProcessMock.mjs](/tmp/git-processor/worktrees/integry/propr/pr-2069-followup-2026-09-02T18-15-25/test/fixtures/windowsConnectProcessMock.mjs:118).
- Added a short-bound regression publishing exactly 128 KiB + 1 and proving `parent:utf8`, complete stdio cleanup, single exit/close, idempotent kill, failed post-kill control, and zero remaining referenced resources in [windowsStandardUserConnectHarness.test.ts](/tmp/git-processor/worktrees/integry/propr/pr-2069-followup-2026-09-02T18-15-25/test/windowsStandardUserConnectHarness.test.ts:329).

Validation passed:

- Async broker/control/overflow: 18/18
- Ordinary-user harness: 10/10
- CLI typecheck
- Normal two-round fake-authority revalidation smoke
- `git diff --check`
- Production authority source and `package-lock.json` unchanged

Exact checked-out head remains `b52e788fe16507c33f1146c39f7dadb14f8ce31b`; changes are intentionally uncommitted and unmerged. Native x64/ARM64 ordinary-user acceptance requires the Windows CI runners.

PR: #2069
Comment by: @integry (ID: 5514238705)
Model: gpt-5.6-sol
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Windows Connect Discovery (ordinary user, Node 22)

Please investigate and fix this CI failure.

  • Check: Windows Connect Discovery (ordinary user, Node 22)
  • Result: failure
  • Commit: 77f6aaebf0d0 (77f6aaebf0d0e1cf68b93bcbe5f1271c1eb2dc13)
  • Details: View CI failure

Failure evidence

.github:74
Process completed with exit code 1.

@integry integry added the AI label Sep 2, 2026
@integry

integry commented Sep 2, 2026

Copy link
Copy Markdown
Owner

/ultrafix goal=9 max=10

First-release scope is macOS and Linux. Review and fix only genuine shared, macOS, or Linux defects. Do not change production behavior, weaken tests, or widen security contracts to accommodate Windows-only CI failures; Windows is being tracked as a separate follow-up. Preserve the fixed-FD, one-broker, two-round authority protocol, exact 128 KiB overflow rejection, secret-free diagnostics, and canonical lockfile.

@propr-dev propr-dev Bot added the ultrafix label Sep 2, 2026
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

🔄 Ultrafix loop started (goal: 9/10, max cycles: 10)

First action: /review

💡 Tip: Remove the ultrafix label from this PR to stop further ultrafix cycles.

@integry integry removed the AI label Sep 2, 2026
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned linux-arm64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned linux-arm64 package
  • Result: failure
  • Commit: 77f6aaebf0d0 (77f6aaebf0d0e1cf68b93bcbe5f1271c1eb2dc13)
  • Details: View CI failure

Failure evidence

.github:68
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Native Windows durability (x64)

Please investigate and fix this CI failure.

  • Check: Native Windows durability (x64)
  • Result: failure
  • Commit: 77f6aaebf0d0 (77f6aaebf0d0e1cf68b93bcbe5f1271c1eb2dc13)
  • Details: View CI failure

Failure evidence

.github:59
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned linux-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned linux-x64 package
  • Result: failure
  • Commit: 77f6aaebf0d0 (77f6aaebf0d0e1cf68b93bcbe5f1271c1eb2dc13)
  • Details: View CI failure

Failure evidence

.github:66
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Packaged Connect (win32-arm64)

Please investigate and fix this CI failure.

  • Check: Packaged Connect (win32-arm64)
  • Result: failure
  • Commit: 77f6aaebf0d0 (77f6aaebf0d0e1cf68b93bcbe5f1271c1eb2dc13)
  • Details: View CI failure

Failure evidence

.github:37
Process completed with exit code 1.

@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned win32-x64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned win32-x64 package
  • Result: failure
  • Commit: 77f6aaebf0d0 (77f6aaebf0d0e1cf68b93bcbe5f1271c1eb2dc13)
  • Details: View CI failure

Failure evidence

.github:60
Process completed with exit code 1.

@integry integry removed the ultrafix label Sep 2, 2026
@propr-dev

propr-dev Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

CI failed: Validate unsigned win32-arm64 package

Please investigate and fix this CI failure.

  • Check: Validate unsigned win32-arm64 package
  • Result: failure
  • Commit: 77f6aaebf0d0 (77f6aaebf0d0e1cf68b93bcbe5f1271c1eb2dc13)
  • Details: View CI failure

Failure evidence

.github:61
Process completed with exit code 1.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant