Repository navigation

feat(update): orchestrated ocx update plan/apply contract (update.orchestrated/1) - #8103

Merged

lidge-jun merged 90 commits into

devfrom

feat/ocx-update-orchestrated

Nov 2, 2026

Merged

feat(update): orchestrated ocx update plan/apply contract (update.orchestrated/1)#8103
lidge-jun merged 90 commits into
devfrom
feat/ocx-update-orchestrated

Commits on Nov 2, 2026
- fix(cli): keep contract discovery on invoked package
  lidge-jun
  committed
  cd9b219
- fix(cli): defer shim repair for orchestrated inspection
  lidge-jun
  committed
  76ff50f
- feat(runtime): publish serving command in runtime record
  lidge-jun
  committed
  ff878cb
- docs(config): fit serving identity within doc budget
  lidge-jun
  committed
  fb65415
- feat(update): add canonical plan identity digest
  lidge-jun
  committed
  dc10580
- feat(update): add attested serving identity check
  lidge-jun
  committed
  9cb60eb
- feat(sync): guard sync with shared update mutex
  lidge-jun
  committed
  5ac827f
- feat(update): classify orchestrated plan observations
  lidge-jun
  committed
  4c11c1c
- feat(update): validate orchestration arguments
  lidge-jun
  committed
  6e0e14a
- fix(update): reject incomplete in-flight markers
  lidge-jun
  committed
  0849948
- feat(update): attest live serving records
  lidge-jun
  committed
  3649706
- feat(update): classify verified child outcomes
  lidge-jun
  committed
  cab89d8
- feat(update): verify active npm and bun trees passively
  lidge-jun
  committed
  4635d9c
- fix(sync): refuse uncertain update markers
  lidge-jun
  committed
  d62cc48
- fix(update): distinguish verified pnpm rollback from unchanged install
  lidge-jun
  committed
  876d8bc
- fix(update): validate orchestrated update entry arguments
  lidge-jun
  committed
  f8a2afc
- feat(update): verify active pnpm install after orchestration
  lidge-jun
  committed
  b97c311
- fix(update): reject malformed orchestration outcomes
  lidge-jun
  committed
  479fd7c
- docs(update): keep verification notes within structure budget
  lidge-jun
  committed
  26589e0
- refactor(update): share plan token with Node launcher
  lidge-jun
  committed
  6bd8aab
- feat(update): bound signal forwarding wait for update child
  lidge-jun
  committed
  96650dc
- wip(update): route orchestration through passive entry
  lidge-jun
  committed
  f8fad12
- feat(cli): expose versioned capability contracts
  lidge-jun
  committed
  610521b
- wip(update): connect observed facts to orchestrated plans
  lidge-jun
  committed
  b6648e4
- fix(update): check service installation in plan ownership
  lidge-jun
  committed
  86744b2
- test(update): exercise passive npm launcher plans
  lidge-jun
  committed
  6b95e39
- fix(update): report uncertain runtime ownership honestly
  lidge-jun
  committed
  8cd62f5
- wip(update): gate apply on planned identity and deadline
  lidge-jun
  committed
  7c6a58b
- fix(update): reject unsupported internal orchestration flags
  lidge-jun
  committed
  b815607
- test(update): verify internal flags fail closed in launchers
  lidge-jun
  committed
  a993689
- feat(update): observe child transaction overruns without interruption
  lidge-jun
  committed
  0ca4c1c
- fix(update): preserve distant watchdog deadlines
  lidge-jun
  committed
  05198cb
- feat(update): add orchestrated child session
  lidge-jun
  committed
  dd9f5e2
- feat(update): apply orchestrated Bun updates
  lidge-jun
  committed
  1bb6bfa
- fix(test): restore update recovery fixture isolation
  lidge-jun
  committed
  184ea15
- feat(update): add orchestrated npm and pnpm child mode
  lidge-jun
  committed
  188dee4
- feat(update): orchestrate npm and pnpm updates from launcher
  lidge-jun
  committed
  6539b80
- Describe orchestrated update in CLI discovery
  lidge-jun
  committed
  4d1d57c
- Document orchestrated update contracts
  lidge-jun
  committed
  ee8f652
- Show contracts in capabilities usage errors
  lidge-jun
  committed
  2563c59
- docs(devlog): record orchestrated update plan and audit folds
  lidge-jun
  committed
  aa63fbd
- test(update): rethrow unexpected marker read errors in overrun fixture
  lidge-jun
  committed
  2899d8e
- fix(update): skip shim repair for orchestrated children
  lidge-jun
  committed
  7103af8
- fix(update): recheck deadline after attestation
  lidge-jun
  committed
  c6ef78e
- fix(update): keep orchestrated worker alive on signals
  lidge-jun
  committed
  457c62f
- fix(update): isolate plan registry caches
  lidge-jun
  committed
  6eada60
- fix(update): admit sync for a fresh home
  lidge-jun
  committed
  dde2365
- fix(update): retain verified install on recovery failure
  lidge-jun
  committed
  3d345e9
- docs(update): remove trailing plan blank line
  lidge-jun
  committed
  cd5aa73
- fix(update): fail closed on interrupted worker exit
  lidge-jun
  committed
  45283fe
- test(update): exercise isolated registry cache writes
  lidge-jun
  committed
  a42dcaa
- test(update): cover fresh home plan observation
  lidge-jun
  committed
  b0f80d8
- test(update): bound fake installer lifetime
  lidge-jun
  committed
  c2a7eaf
- test(update): signal the real Bun installer worker
  lidge-jun
  committed
  f434986
- test(update): align launcher probes with orchestrated entry
  lidge-jun
  committed
  ee09151
- Merge remote-tracking branch 'origin/dev' into feat/ocx-update-orchestrated
  lidge-jun
  committed
  4d9f3e8
- fix(update): honor tag in orchestrated apply
  lidge-jun
  committed
  e762bef
- fix(update): keep sync launcher passive before mutex
  lidge-jun
  committed
  184f84f
- fix(update): retain Bun install outcome on recovery failure
  lidge-jun
  committed
  443d2cf
- fix(update): retain install proof when runtime probe throws
  lidge-jun
  committed
  e21fb9f
- fix(update): retain fence for live installer marker
  lidge-jun
  committed
  be154ae
- test(update): exercise preview tag in Bun worker
  lidge-jun
  committed
  50cc987
- test(update): align launcher source oracles with orchestration
  lidge-jun
  committed
  dd9bbfd
- test(update): align launcher provenance and inspection oracles
  lidge-jun
  committed
  8f58071
- fix(client): tolerate unavailable serving command on startup
  lidge-jun
  committed
  829fa70
- fix(update): fence timed installer process groups
  lidge-jun
  committed
  4d798c9
- docs(update): keep supervision contract within budget
  lidge-jun
  committed
  6b20975
- fix(update): fence untracked Windows installer supervision
  lidge-jun
  committed
  f6a6a64
- fix(update): refuse existing installer markers
  lidge-jun
  committed
  a37135d
- fix(update): guard legacy updates against sync
  lidge-jun
  committed
  e6eaedd
- fix(update): fence installer launches by time bound
  lidge-jun
  committed
  0e9de81
- fix(update): retain fence for group-only supervision
  lidge-jun
  committed
  220c0ac
- test(update): align fixtures with installer fences
  lidge-jun
  committed
  ce1f12a
- docs(devlog): record review r3 resolutions
  lidge-jun
  committed
  9672f54
- fix(sync): distinguish sync mutex contention
  lidge-jun
  committed
  8e3e97c
- fix(sync): emit JSON when update guard refuses
  lidge-jun
  committed
  877fa95
- fix(update): reject malformed orchestrated switches early
  lidge-jun
  committed
  270e573
- fix(update): release confirmed installer fences
  lidge-jun
  committed
  71a36ba
- fix(update): retain fence after uncertain pnpm mutation
  lidge-jun
  committed
  2e257d9
- fix(sync): hold update mutex across desktop handoff
  lidge-jun
  committed
  4143f3d
- fix(update): keep installer supervisor library free of entry-point effects
  lidge-jun
  committed
  be0be43
- Supervise pnpm update process trees
  lidge-jun
  committed
  050981c
- Propagate unconfirmed installer termination
  lidge-jun
  committed
  3bd302e
- Keep sync mutex fenced while delegated child lives
  lidge-jun
  committed
  eba381b
- Exercise stale delegate fence for both update lanes
  lidge-jun
  committed
  7114cb8
- Avoid signalling a settled delegate fixture
  lidge-jun
  committed
  ffd2d91
- Report delegated lease liveness accurately
  lidge-jun
  committed
  2672574
- Clean up only delegate files created by this lease
  lidge-jun
  committed
  88647b9
- Fix Bun lease fixture supervisor protocol
  lidge-jun
  committed
  132e196
- Fix uncertain delegated sync lease refusal
  lidge-jun
  committed
  b298402

Commits

Commits on Nov 2, 2026