Desktop shell: one exit path, one startup surface and a real tray probe by lidge-jun · Pull Request #5384 · lidge-jun/opencodex

feat(desktop): one exit path, one startup surface and a real tray probe

lidge-jun

committed

9861987

test(desktop): pin exit ownership, the startup surface and tray availability

lidge-jun

committed

92bddec

docs(structure): record the desktop shell's exit, startup and tray contracts

lidge-jun

committed

f434e33

fix(desktop): keep the macOS-only menu out of every other platform's build

lidge-jun

committed

4a63dc6

test(desktop): follow the shell contracts to where they now live

lidge-jun

committed

b3b59c6

docs(structure): state the tray verdict, registration and spawn rules exactly

lidge-jun

committed

e4d743b

test(desktop): follow claim_drain into the match that replaced its guard

lidge-jun

committed

08aa92f

feat(desktop): hold this installation's own id and read ownership by lane C's rule

lidge-jun

committed

d6130e1

test(desktop): read both halves of the ownership claim together

lidge-jun

committed

83cb5cc

docs(structure): record the app's half of the runtime-ownership claim

lidge-jun

committed

14e64a9

fix(desktop): drain before an update installs, and stop calling a failed drain a drain

lidge-jun

committed

a0f0e3c

fix(desktop): confirm the instance before owning it or sending it a credential

lidge-jun

committed

5e64205

test(desktop): pin the update order, the failure states and the instance check

lidge-jun

committed

56bf8f9

docs(structure): record the update order, the drain verdicts and the client policy

lidge-jun

committed

2ce8507

fix(desktop): let a refused restart be tried again

lidge-jun

committed

b9cde2a

test(desktop): follow finish_drain into its verdict argument

lidge-jun

committed

46de9cf

feat(desktop): resolve the runtime through the bundled CLI, and stop guessing

lidge-jun

committed

2f54d38

fix(desktop): stop the runtime with the bundled ocx stop, and read what it said

lidge-jun

committed

56cf8de

test(desktop): read both CLI contracts against the CLI that defines them

lidge-jun

committed

af2d42e

docs(structure): record that the shell resolves and stops through the CLI

lidge-jun

committed

a54092a

fix(desktop): follow the stop outcome into its own type

lidge-jun

committed

7c5f69e

fix(desktop): merge the app-origin rule rather than pick a side of it

lidge-jun

committed

2b81596

fix(desktop): give a foreign runtime its own widget state

lidge-jun

committed

68d6b0a

test(clients): follow the owner check into the install-state contract

lidge-jun

committed

576899f

Navigation Menu

Repository navigation

Desktop shell: one exit path, one startup surface and a real tray probe - #5384

Desktop shell: one exit path, one startup surface and a real tray probe#5384
lidge-jun merged 24 commits into
devfrom
codex/260921-lane-b-desktop-shell

Commits on Sep 21, 2026

feat(desktop): one exit path, one startup surface and a real tray probe

test(desktop): pin exit ownership, the startup surface and tray availability

docs(structure): record the desktop shell's exit, startup and tray contracts

fix(desktop): keep the macOS-only menu out of every other platform's build

test(desktop): follow the shell contracts to where they now live

docs(structure): state the tray verdict, registration and spawn rules exactly

test(desktop): follow claim_drain into the match that replaced its guard

feat(desktop): hold this installation's own id and read ownership by lane C's rule

test(desktop): read both halves of the ownership claim together

docs(structure): record the app's half of the runtime-ownership claim

fix(desktop): drain before an update installs, and stop calling a failed drain a drain

fix(desktop): confirm the instance before owning it or sending it a credential

test(desktop): pin the update order, the failure states and the instance check

docs(structure): record the update order, the drain verdicts and the client policy

fix(desktop): let a refused restart be tried again

test(desktop): follow finish_drain into its verdict argument

feat(desktop): resolve the runtime through the bundled CLI, and stop guessing

fix(desktop): stop the runtime with the bundled ocx stop, and read what it said

test(desktop): read both CLI contracts against the CLI that defines them

docs(structure): record that the shell resolves and stops through the CLI

fix(desktop): follow the stop outcome into its own type

fix(desktop): merge the app-origin rule rather than pick a side of it

fix(desktop): give a foreign runtime its own widget state

test(clients): follow the owner check into the install-state contract