Desktop shell: one exit path, one startup surface and a real tray probe - #5384

Merged

lidge-jun merged 24 commits into

devfrom

codex/260921-lane-b-desktop-shell

Sep 21, 2026

Commits on Sep 21, 2026

feat(desktop): one exit path, one startup surface and a real tray probe
lidge-jun
committed
9861987
test(desktop): pin exit ownership, the startup surface and tray availability
lidge-jun
committed
92bddec
docs(structure): record the desktop shell's exit, startup and tray contracts
lidge-jun
committed
f434e33
fix(desktop): keep the macOS-only menu out of every other platform's build
lidge-jun
committed
4a63dc6
test(desktop): follow the shell contracts to where they now live
lidge-jun
committed
b3b59c6
docs(structure): state the tray verdict, registration and spawn rules exactly
lidge-jun
committed
e4d743b
test(desktop): follow claim_drain into the match that replaced its guard
lidge-jun
committed
08aa92f
feat(desktop): hold this installation's own id and read ownership by lane C's rule
lidge-jun
committed
d6130e1
test(desktop): read both halves of the ownership claim together
lidge-jun
committed
83cb5cc
docs(structure): record the app's half of the runtime-ownership claim
lidge-jun
committed
14e64a9
fix(desktop): drain before an update installs, and stop calling a failed drain a drain
lidge-jun
committed
a0f0e3c
fix(desktop): confirm the instance before owning it or sending it a credential
lidge-jun
committed
5e64205
test(desktop): pin the update order, the failure states and the instance check
lidge-jun
committed
56bf8f9
docs(structure): record the update order, the drain verdicts and the client policy
lidge-jun
committed
2ce8507
fix(desktop): let a refused restart be tried again
lidge-jun
committed
b9cde2a
test(desktop): follow finish_drain into its verdict argument
lidge-jun
committed
46de9cf
feat(desktop): resolve the runtime through the bundled CLI, and stop guessing
lidge-jun
committed
2f54d38
fix(desktop): stop the runtime with the bundled ocx stop, and read what it said
lidge-jun
committed
56cf8de
test(desktop): read both CLI contracts against the CLI that defines them
lidge-jun
committed
af2d42e
docs(structure): record that the shell resolves and stops through the CLI
lidge-jun
committed
a54092a
fix(desktop): follow the stop outcome into its own type
lidge-jun
committed
7c5f69e
fix(desktop): merge the app-origin rule rather than pick a side of it
lidge-jun
committed
2b81596
fix(desktop): give a foreign runtime its own widget state
lidge-jun
committed
68d6b0a
test(clients): follow the owner check into the install-state contract
lidge-jun
committed
576899f

Navigation Menu

Desktop shell: one exit path, one startup surface and a real tray probe - #5384

Desktop shell: one exit path, one startup surface and a real tray probe#5384
lidge-jun merged 24 commits into
devfrom
codex/260921-lane-b-desktop-shell

Commits on Sep 21, 2026

feat(desktop): one exit path, one startup surface and a real tray probe

test(desktop): pin exit ownership, the startup surface and tray availability

docs(structure): record the desktop shell's exit, startup and tray contracts

fix(desktop): keep the macOS-only menu out of every other platform's build

test(desktop): follow the shell contracts to where they now live

docs(structure): state the tray verdict, registration and spawn rules exactly

test(desktop): follow claim_drain into the match that replaced its guard

feat(desktop): hold this installation's own id and read ownership by lane C's rule

test(desktop): read both halves of the ownership claim together

docs(structure): record the app's half of the runtime-ownership claim

fix(desktop): drain before an update installs, and stop calling a failed drain a drain

fix(desktop): confirm the instance before owning it or sending it a credential

test(desktop): pin the update order, the failure states and the instance check

docs(structure): record the update order, the drain verdicts and the client policy

fix(desktop): let a refused restart be tried again

test(desktop): follow finish_drain into its verdict argument

feat(desktop): resolve the runtime through the bundled CLI, and stop guessing

fix(desktop): stop the runtime with the bundled ocx stop, and read what it said

test(desktop): read both CLI contracts against the CLI that defines them

docs(structure): record that the shell resolves and stops through the CLI

fix(desktop): follow the stop outcome into its own type

fix(desktop): merge the app-origin rule rather than pick a side of it

fix(desktop): give a foreign runtime its own widget state

test(clients): follow the owner check into the install-state contract