Skip to content

feat(daemon): serialize local revocation and browser registration - #427

Open
iuyo5678 wants to merge 1 commit into
feat/local-pairing-03-handshakefrom
feat/local-pairing-04-lifecycle
Open

iuyo5678 wants to merge 1 commit into
feat/local-pairing-03-handshakefrom
feat/local-pairing-04-lifecycle

Conversation

@iuyo5678

@iuyo5678 iuyo5678 commented Oct 13, 2026 •

Copy link
Copy Markdown
Collaborator

Serializes final authorization and browser registration with device revocation. A successful revocation closes the socket and pending calls and removes the browser's sessions; replacement activation uses the same cleanup. Online peers also check persisted revocation every second. Rotation requests cannot cross an in-flight activation commit.

Adds local authentication summaries to status, recent unpaired-attempt diagnostics, pairing guidance, and a warning for trust-local mode.

Validation: 452 CLI unit tests passed (1 existing ignored); 13 local WebSocket tests including pair → activation → business handshake → tool call → revoke → close; 12 daemon-discovery tests and 3 maintenance tests passed. Includes a deliberate pause between final authorization and registration, and a persisted-state reload test. Workspace Clippy and schema generation passed. A real-process revoke-during-update regression is included in #431; the cross-platform browser release matrix remains required.

Stack: 4/9. Base: #426. Default policy remains Warn until PR8's release prerequisites are met.

Stack order: #424 → #425 → #426 → #427 → #428 → #429 → #430 → #431 → #432. Each PR targets the preceding branch; PR8 and PR9 retain their release prerequisites.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants