Conversation
…1001) Packs @parity/truapi and @parity/truapi-host at 95614da7, which adds the `profile` service and the optional `profile` host callbacks. The web WASM keeps the signing host, as before; lock hashes updated.
Serve the `profile` host callbacks. `profile.present` opens a bottom sheet attributed to the calling product, fetches the referenced blob through the host's own preimage path (bitswap or the configured gateway, CID-verified), decrypts it with AES-256-GCM and renders the avatar. The call resolves once the drawer is up; fetch and decrypt failures show in the drawer, and neither the image nor the reference's key returns to the product. Only raster formats render. References use Seity profile-core's `<cid>#<key><iv>` blob format, pinned by a vector produced with profile-core's primitives. Debug builds expose `window.__dotliPresentProfile(reference)` to open the same drawer without a product.
Contributor
Bundle Size ReportWarning Bundle budget exceeded — not a blocker, but please confirm the regression is intentional.
Eager path (module entry + modulepreloaded chunks):
Chunks over 500 KB:
All files
Commit: 810ca70 |
Contributor
⚡ Performance ReportCold StartOverall: 🟢 improved | p50: 11.91s → 8.87s (-25.5%) | p95: 13.31s → 9.28s (-30.3%) | Mann-Whitney: z=4.40 ✅ significant Phase breakdown
Warm StartOverall: 🔴 regressed | p50: 406ms → 6.24s (+1436.9%) | p95: 451ms → 6.57s (+1357.0%) | Mann-Whitney: z=4.40 ✅ significant Phase breakdown
Lukewarm Start (different site, same session)Overall: 🟢 improved | p50: 13.92s → 10.74s (-22.8%) | p95: 14.86s → 11.30s (-23.9%) | Mann-Whitney: z=4.40 ✅ significant Phase breakdown
Commit: 810ca70 | Outliers (>2x best) discarded before stats |
replghost
had a problem deploying
to
paseo.fyi
September 26, 2026 04:21 — with 
GitHub Actions
Failure
GitHub Actions
Failure
…d record, mood ring A `seity-contacts:v1:<lookupKey><seed>` reference names a registry slot, not a blob, so it stays the same while the profile behind it changes. The drawer now resolves one: read the slot from Seity's registry through raw contract storage (no runtime call), fetch and open the sealed record through the host preimage path, then fetch the avatar the record names as before. A bare `cid#key` reference keeps its existing path. The record's mood is drawn as a ring around the avatar (one WebGL program, static fallback, still under reduced motion) and lapses after its TTL. Pinned by Seity profile-core's contacts vector and by the registry's own storage-layout test. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
The host page does not own a light client; the protocol worker does, and the host reaches it by request, as name resolution already does. Add `resolveSeitySlot` beside `resolveOwner` (client proxy, iframe and shared worker handlers, request map, timeout) and have the drawer use it. The slot version crosses as a decimal string. Log why a drawer load failed (name and message only; nothing on that path carries the reference), which is how this was found. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…ust-core cbh/seity-contacts) Rebuild `vendor/truapi` and `vendor/truapi-host` from host-rust-core `298cf4286` (on #1001): `profile.disclose` / `retract` / `presentContact`, the Chat v2 profile relay, and the `ProfileDisclosure` and `ProfileReferencesReceived` core-storage slots. The web WASM keeps the signing host (`--no-default-features --features wasm-signing-host`); the lock carries the archive, client and WASM hashes of this build. Host storage policy for the two new slots: generation-scoped in private custody, their own local-storage keys (received references per chat product), and encrypted at rest as secret material, since both hold bearer capabilities. `turbo run typecheck lint test`: 39/39. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
The vendored host is built from cbh/seity-contacts, which is #1009 (stacked on #1001). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Merged
…ust-core#1001) Packs @parity/truapi and @parity/truapi-host at dcd38a0b: the Profile service moves from trait 20 to 22, clear of Contacts (#17) and Game (#990). Includes the Seity contacts methods folded in from #1009.
WebCrypto and the envelope decode run outside the fake clock, so a fixed number of timer advances raced them under CI load. Poll with vi.waitFor, which advances the fake timers per check and yields real time between.
replghost
had a problem deploying
to
paseo.fyi
September 26, 2026 20:22 — with
GitHub Actions
Failure
GitHub Actions
Failure
replghost
added a commit
that referenced
this pull request
Sep 27, 2026
…ce metrics for framebuffer apps
Forward browser #255 and refresh native vendor packages from #1001 at bd55ec2af4b5db75afaf827404f63d11f6881a02.
# Conflicts: # README.md # packages/ui/src/components/overlays/SigningDialog.tsx # packages/ui/src/host-callbacks/Contacts.ts # packages/ui/src/styles/signing.css
replghost
added a commit
that referenced
this pull request
Oct 4, 2026
replghost
added a commit
that referenced
this pull request
Oct 4, 2026
replghost
added a commit
that referenced
this pull request
Oct 4, 2026
replghost
added a commit
that referenced
this pull request
Oct 4, 2026
This branch had an error being deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Current repair qualification — 2026-10-02
bdb7e068e1d2925e38dc9f7f5222536ddd5d07a8. Prior main baseline:f4012c50c3400d1186c332ad2ae50298cefd153d.3a364f1157177f7d1ae4839241488d5c9276ed1d(seity). Complete matching SDK/host packages remain 0.23.0; no mixed or hand-patched Wasm bundle. Generated client bytes are unchanged. Production:wasm-signing-host; separate testing bundle:wasm-signing-host,test-host.5442571f6770f05d97a1ed3c3a0ab96ca1df7c15d77ee168130d53853523db2ddist/generated/client.js02e193761518364624e9dd53a41dd7cbddf4b5d8482f3e93489b51edd05766304442b38a45f987e38dfe1df98f04b57c4de90add4b1c182793556efdedc12edbd7934abc194e9ab30679498426ece50e331eefaa22e6ba830e2b4667b978761618cd9daa1b4d0ad970e968fed708bf3b310dc853c56f2545939aba54d9fba100Native correction and causal limits
Bulletin mortal signatures now anchor to a finalized checkpoint, while nonce/runtime state comes from the freshest available signing snapshot. A checkpoint at least 64 blocks behind is rejected before broadcast. Regression coverage verifies the actual signature with a newer nonce and older finalized checkpoint, and the expiry boundary. Existing transaction retries/deadlines are unchanged; no chain error is suppressed. The affected test fixture uses
parking_lot::Mutex.The former Seity
Extrinsic marked as invalidrun used noncanonical best-block anchors, but retained evidence lacks the signed bytes and typed pool reason. Fork-sensitive mortality was a real correctness hazard; it is not claimed as the conclusively proved cause of that historical failure. Prior hosted Factory/Genesis timeout causes also remain unproved. No broker/readiness workaround, prewarming, extra retry, or timeout increase was added.Final exact-head hosted checks
Real-runtime local verification
All six consumers passed configured build, typecheck and lint. The later README-only formatting correction passed targeted Prettier checks and did not change runtime source or canonical native package bytes. Original full Wallet→Chat→Seity test sequences, without test retries, added waits, or prewarming:
0a24db4aa189adad7b93f9ff508c7949e39196ee301a235ba13248ef4281e9e3d859919fb6cfbe06d3dc8a41807c36b8bcdf001c47eccb9735305499Wallet's tested head is final. Chat and Seity tested heads precede documentation-only formatting merges; native/Wasm pins and runtime code are unchanged. Factory, Genesis-after-navigation and Submit passed on all three. These bounded passes do not establish the cause or elimination of the older hosted timeouts. Prior SharedWorker lifecycle, Chat/profile, Peer and JAM runtime proofs remain historical at their recorded heads; they were not all rerun on these artifacts.
Final hosted retest: failures remain
error; it is not evidence of a chain rejection. Retained traces include People-chain/local development sockets but do not expose the Asset Hub gateway WebSocket exchange, so these new failures do not establish an upstream or broker cause.paseo-bulletin-next-ipfs.polkadot.io. The zero-failure host-settings gate correctly failed.Doom: criterion corrected, backend matrix still unqualified
The user explicitly approved 35 FPS sustained over 30 seconds, with one frame of sampling-boundary tolerance:
frames + 1 >= elapsedMs * 35 / 1000. This replaces the instantaneousFPS >= 35sample; it is an acceptance-criterion change, not a runtime speedup. Runtime and displayed FPS are unchanged; raw samples are not rounded to force a pass. Update p95 <28.6ms, cold/warm first-frame limits <3,000/<1,000ms, audio and translation-cache checks remain. The revised official RPC benchmark passed once before the vendor replacement.The later isolated matrix used the rebuilt base pair at frontend
238ab5fa739788b2eb948ba1f807a1876edbacad, with fresh owned Chrome profiles and no concurrent builds/E2E:Distinct diagnostics found no presentation loss in a later instrumented 24-second shared-worker sample and observed a successful hidden RPC new-document reload. Neither diagnostic supersedes the failures or qualifies performance. No evidence-proved runtime fix, guest rebuild, speculative tuning, or further unchanged gate rerun was made. The original strict RPC failure and every new failure remain retained. Next causal capture must instrument the original early 30-second window and distinguish warm lifecycle states before proposing a runtime fix.
Retention and rollout boundary
Local verification used
paseo-next-v2, the pinned host-playground fixturef56294cea4430163bf16ec068844b1327441073c, and existing private QA identities. All three corrected sequences paired on their first existing setup attempt. A prior local launch failure and a misconfigured Previewnet-product run (34 passed, 20 skipped, 8 Chain/Contract failures) are retained separately, not presented as reproductions of the hosted Genesis timeout. Private traces/auth/signers were not published.The first repair heads also exposed a README formatting failure (corrected by documentation-only commits) and a PVM cache-unit-test 5,000ms timeout. No cache runtime/test change, limit increase, or causal claim was made for that isolated timeout. Older in-flight runs superseded by the formatting correction remain recorded as cancelled, not passed.
No PR merge, force push, deployment, environment approval, SDK/npm/product/guest publication, or rollback was performed by this repair. JAM remains JAM-TEST-INSTANCE, never JAM-PUBLIC-DEVNET. The user-owned
deploy: paseo.fyilabel is retained; repair-triggered deployment runs 36970790399 and 36971286469 were cancelled before deployment. The earlier rollout audit is retained below: an older workflow deployed56cea5d37577bf82684fb5c6b6e4ba81d2142938; this record does not claim live remained unchanged historically.Historical integration qualification (superseded; retained verbatim)
Current merged-main refresh and qualification — 2026-10-01
b03e83616857f4e4745d479776dde43cdfa6267a; base:feat/chat-v2-host-runtime. Includes merged mainf4012c50c3400d1186c332ad2ae50298cefd153dand fix: protocol iframe and SharedWorker chains on the pool, and every chain client recovers from halts #313. No separate/unmerged fix: protocol iframe and SharedWorker chains on the pool, and every chain client recovers from halts #313 boundary remains.94f597becce31682a374e4aabc546e4a9ad61103, including native mainbda6ac518c8cc59319491b12e4e23b96777375fd. Complete canonical SDK/host artifact-generation pin:978b7d3e46b92d8983e733a3f39b2862968d0ef5. Later native changes are tests/docs/iOS-only, not SDK/Wasm inputs; the generation pin intentionally differs from the latest source head.web-wasm-signing-hostwithouttest-host, with testing Wasm separate. No hand-edited generated declarations or mixed variants. No package publication.5442571f6770f05d97a1ed3c3a0ab96ca1df7c15d77ee168130d53853523db2ddist/generated/client.js(notdist/index.js)02e193761518364624e9dd53a41dd7cbddf4b5d8482f3e93489b51edd05766308bd67c12ee9303c802b94d7b65c4c800c5cbe338a78311cb6786270a0c06ca63c47f65213982969e4a42ae02fdf08ae621fc50fcfc30f3feb74a5878260bed63Stack and hosted qualification
Wallet → PVM → Chat → Seity; PVM → Peer; JAM contains both Seity and Peer. All updates used fresh-fetch ancestry checks and ordinary pushes. User worktrees, metadata and canonical repositories were preserved.
70845db96bdd21409310daeff5e471b74ab5a1c9.351e5d73fab803a0fd2a4007ce2d2557aebaff05.bb9ad3d8921c63cf62c98b9029289f458b1a67a2.b03e83616857f4e4745d479776dde43cdfa6267a.44ed4f830a2c8f86990e02fb061c802aa389b0bc.dcdef40499119183aed82a39f784ef740d494341.Exact-head hosted results: functional 89 passed, 3 skipped; E2E 41 passed, 1 flaky, 20 skipped; 3 passed in the cold-start suite. Tests run.
Hosted E2E retained one flaky Chain → Chain Spec: Genesis Hash case: it failed on the first attempt and passed the existing CI retry. No retry setting was changed.
Performance Tests runs the cold-start suite, not the strict Doom matrix below. Existing thresholds, retries, deadlines and skips were not relaxed. Native current-head Core CI has 22 passed jobs and 2 path-filter skips; full iOS application CI is not claimed for the latest native heads.
Local and actual-runtime evidence
main-refresh-terminal-verified-pvm.json/ screenshot.main-refresh-pvm-transport.json/ screenshot.main-refresh-seity-live.jsonand screenshot.Strict Doom matrix — retained failure
Fresh isolated visible headless Chromium profiles; cold cache miss, real compiler, nonzero audio, and 360 frame updates for each backend. Warm reload uses a new document in the owned iframe: cache hit and zero translation. Gates remain FPS ≥35, p95 <28.6ms, cold first frame <3000ms, warm first frame <1000ms.
Evidence:
main-refresh-isolated-doom-{rpc-gateway,smoldot-direct,smoldot-shared-worker}.jsonand screenshots. Earlier hidden-tab and concurrent-QA failures remain recorded; no clock/rounding/threshold change or failure-only rerun was used to erase them.Other retained limits
Extrinsic marked as invalid). One UI call caused the existing two native broadcast attempts; both validated then invalidated. No matching included Submit was found in the inspected canonical block range. [INFERENCE] Noncanonical mortality anchors may explain invalidation, but the exact cause is unproved without the unretained signed extrinsic bytes. Evidence:main-refresh-seity-submit-diagnosis.json. Passing hosted E2E does not erase this local failure.main-refresh-seity-factory-diagnosis.json. No added retries, deadline changes, or unsupported cause claim.Rollout boundary
Not an all-green rollout qualification. The refreshed heads were not deployed, and this qualification granted no environment approval. No PR merge, SDK/npm publication, or guest/product publication was performed. JAM remains JAM-TEST-INSTANCE. All three refresh-triggered JAM Deploy runs were cancelled before rollout; latest final-head cancellation. Other branches have no deployment labels.
The live environment changed during qualification: older Deploy run 36945647296, attempt 3 was approved under GitHub account
replghost, explicitly checked out baseline56cea5d37577bf82684fb5c6b6e4ba81d2142938, and recorded deployment success at 2026-10-02 01:19:01 UTC. Its later published-product smoke failed. The operator/client/session behind that account is unproven; this qualification granted no approval and performed no rollback. The observed live content hash changed from4a7caf047fb7f350c1833039b93ba634698a47c56f051b8c7fc0525d4c59a5c8to5882695ee20df5d24a6ed2feb9e997f176fe27ecf4eafe742fabb39eba92885f; these are content hashes, not Git SHAs, and their exact byte-level mapping to a source commit is unproven.Earlier deployment authorizations/results below are historical evidence, not approval to deploy this refreshed stack.
Historical integration qualification (superseded; retained verbatim)
Current-main integration qualification (2026-10-01)
abb08d91deadd79e00c652b5ffd69d30232547e5. Includes main74bb603e518ace149a846124f6e7353aca198c57, propagated through feat(wallet): add an opt-in debug-only browser test wallet #238 → feat(polkavm): run App Manifest v2 runtimes in Dotli #185 → feat(chat): restore separate Chat authority integration above PolkaVM #255 → feat(profile): show product-referenced Seity profiles in a host drawer #287 and feat(polkavm): run App Manifest v2 runtimes in Dotli #185 → feat(polkavm): JamPeerTransport over WebTransport for JAM apps (layer atop #185) #290, then combined in chore(deploy): Seity layer + JamPeerTransport (#287 + #290) #291. All six heads are published by normal ancestry-guarded pushes; no history rewrite.f031658066d19e85b829aa786dad682e22b41197; complete feature-specific artifacts, signing-only browser Wasm, and separate testing Wasm. Native base #540 CI and Peer #1010 CI are green. No npm or guest publication.117ef1eb2928a470e65e48c05b5bf22e8ab29c02(successful deployment and smoke, deployment ID6778272827). Hosted smoke passed 8/8 published products and 19/19 wallet-free capabilities. Independent fresh HTTPS Chromium sessions confirmed Build0.6.0 (117ef1e)and playable Doom with advancing frames/input/audio on smoldot-direct, RPC gateway, and an actual SharedWorker, with zero browser exceptions. All three screenshots and geometry checks show the 384 px frame meeting the 360 px debug panel without a gap. An actual retained productionc4a08e9session waited for consent, navigated exactly once after Reload, retained the URL plus localStorage/IndexedDB/product-cache markers, and resumed playable Doom on117ef1ewith an activated controlling worker, no waiting worker, and zero exceptions. This is an actual release upgrade, not a substituted worker-script test. Local JSON/screenshots are retained underdotli-community-worktrees/paseo-fixed-doom-*andpaseo-debug-fix-retained-*. No other environment was approved; no PR merge, force push, npm release, or on-chain guest publication.Earlier sections are historical implementation and qualification records.
Latest dependency refresh qualification (2026-09-30)
3b7b95e4bf5fdcf71976dcc48a51c0addca68efa; normal merges and ancestry-guarded pushes only, no history rewrite.f031658066d19e85b829aa786dad682e22b41197. Feature-specific 0.23.0 client/host/WASM artifacts remain unchanged; this source pin is intentionally not relabeled as the refreshed upstream branch head.Earlier implementation and qualification history follows; the versions and heads above describe this refresh.
Seity layer on top of #255. Consumes paritytech/trinity-user-agents#1001 (
profileservice).What it does
profilehost callbacks.profile.present({ reference })opens a bottom-sheet drawer attributed to the calling product, fetches the referenced blob through the host's own preimage path (bitswap or the configured gateway, CID-verified), decrypts it (AES-256-GCM) and renders the avatar.<cid>#<key><iv>blob reference, pinned by a vector produced with profile-core's primitives.window.__dotliPresentProfile(reference)opens the same drawer without a product.Vendor
f031658066d19e85b829aa786dad682e22b41197(#1001), including matching wallet WASM withwasm-signing-host, nottest-host.vendor/truapi-host.lock.jsonpins archives, generated-client/WASM digests, features, and source provenance.Scope limits
Qualification
Branch-CI-qualified head:
cc8845395006c4b21435c334b381caf19de7c99c.Current-head checks pass, including unit, functional, and live E2E, type-checking, production builds, and full-history secret scanning. This qualifies branch CI, not deployment of the new Profile contract. Deployment evidence is qualified separately in #291.
After pulling these local-file SDK dependencies, use
bun install --force --frozen-lockfileto replace Bun's cached packages.Artifact and release boundary: the prior refresh-qualified SDK source was
6778214613f0b9d1db1ccc1029cd078d7ff0139d; the final lock now pinsf031658066d19e85b829aa786dad682e22b41197, including the subsequent native Chat review fixes. Client/host archives were packed from canonical generated and compiled outputs of that exact source, with matching wallet/testing WASM. The generated client is byte-identical to the intermediate sharing build; the wallet runtime was refreshed. Exact archive/client/WASM digests are recorded in the lock.Package version 0.23.0 does not mean the old wire contract is unchanged. The generated client declares TrUAPI version 3, Profile
disclose/presentContactV2 andplaceContactAvatarsV3, includingChatApps,App, andContactsaudiences. Browser integration includes the Contacts picker, audience-wide consent, and encrypted wallet/chain-scopedProfilePersonalReferencesReceivedstorage.The user explicitly selected Deploy new sharing APIs to experimental paseo.fyi. The earlier combined #291 deployment at
032e97128983570eac9c32d6cd9dd8a41d181bca, built from host sourceaf087f734be4d65d9363e68e43bf134145ae0085, passes 8/8 product scenarios and 19/19 wallet-free capabilities. Independent fresh Chromium verification of that combined release passes feature discovery, JSON storage round-trip, and live chain-genesis lookup. This does not qualify a live Profile/Contacts/avatar-sharing or own-profile/avatar-fetch scenario, nor is it a fresh-browser smoke of this branch alone.The earlier combined #291 malformed-reference smoke remains limited to that rejection path. Historical deployment
57aaf948a7b9d9fb6f35b9a731ad9cad9856a859and host source08a08fbd921b56fd3ce36f6db3aad6f993bba784retain their own evidence; those results are not reassigned to the newer artifact set.Startup applies URL-selected protocol settings before wallet/debug hooks and drains shared-mode writes before iframe replacement or startup-triggered reload. Testnet published-product smoke starts without opting in; production
dot.liremains default-off and its smoke uses Settings and Save & Apply and existing product assertions are unchanged. Failure-only deployed smoke traces and screenshots are retained for three days.Secret scanning retains the default rules and full-history scan. The public resolver mapping-slot vector is exempted only when both its exact value and test path match; a boundary smoke confirms changed values and the same value elsewhere remain detectable.
Experimental execution defaults
PolkaVM execution defaults on for test environments (
paseo.fyi,paseo.li, previews, and localhost) and off for productiondot.li. Settings → Experimental → PolkaVM apps explicitly overrides either default; existing saved opt-outs and opt-ins remain authoritative. This is an execution gate, not build-time exclusion of runtime assets or Firebase-controlled eligibility. Product permissions remain separate from the execution setting.Testnet product smoke exercises fresh visits without opting in; production
dot.listill uses the explicit Settings opt-in.The current combined default-on release,
76eb846e, passes 8/8 published products without a testnet opt-in and 19/19 wallet-free capabilities. Independent fresh Chromium observed that exact release, ran Doom with the default enabled, and preserved an existing testnet opt-out across reload. This is combined #291 deployment evidence, not a deployed smoke of this branch alone.