Mockups: sidebar rename/remove and privileged access consent #215

New issue

Closed

opened 2026-10-14 11:26:54 +00:00 by kayg · 11 comments

kayg commented 2026-10-14 11:26:54 +00:00

Owner

Copy link

Two mockups (D162, owner approval before any product UI), built in apps/tracer on the test double, branch mockup-host-actions (base origin/mockup-preview-combo).

1. Rename and remove hosts and sessions in the sidebar: ?mock=1&proto=clusters&actions=1
2. Privileged access consent in the machine info popover: ?mock=1&proto=clusters&privilege=1

Owner's words (2026-10-14) are in the first comment. Screenshots and decisions follow in comments.

Two mockups (D162, owner approval before any product UI), built in apps/tracer on the test double, branch `mockup-host-actions` (base `origin/mockup-preview-combo`). 1. Rename and remove hosts and sessions in the sidebar: `?mock=1&proto=clusters&actions=1` 2. Privileged access consent in the machine info popover: `?mock=1&proto=clusters&privilege=1` Owner's words (2026-10-14) are in the first comment. Screenshots and decisions follow in comments.

palette-mockup-before-wheel-d-ink.png

208 KiB

palette-mockup-before-wheel-d-paper.png

196 KiB

palette-mockup-before-wheel-p393-ink.png

281 KiB

palette-typo-privlege-d-ink.png

231 KiB

a1-desktop-ink-3-tooltip.png

211 KiB

a1-desktop-ink-5-rename-session.png

290 KiB

a1-desktop-paper-7-remove-host.png

372 KiB

a1-phone-ink-1-swiped-session.png

240 KiB

a1-phone-ink-4-remove-host.png

250 KiB

p2-sudo-desktop-ink-1-consent.png

464 KiB

p2-sudo-desktop-ink-2-next.png

454 KiB

p2-wrong-desktop-ink-4-result.png

448 KiB

p2-bulk-desktop-ink-4-result.png

415 KiB

p2-denied-phone-paper-2-next.png

172 KiB

palette-mockup-before-wheel-p375-paper.png

218 KiB

palette-typo-privlege-d-paper.png

215 KiB

palette-typo-privlege-p375-paper.png

226 KiB

palette-typo-privlege-p393-ink.png

318 KiB

palette-wheel-scrolled-p393-ink.png

326 KiB

palette-words-mockup-privilege-p393-ink.png

334 KiB

pill-after-ink.png

5.3 KiB

pill-after-paper.png

5.1 KiB

pill-before-ink.png

4.5 KiB

pill-long-ink.png

6.1 KiB

pill-long-paper.png

5.9 KiB

privilege-bulk-d-paper.png

150 KiB

privilege-bulk-p393-ink.png

223 KiB

privilege-offline-p393-ink.png

216 KiB

palette-wheel-scrolled-d-paper.png

215 KiB

palette-wheel-scrolled-p375-paper.png

229 KiB

palette-words-mockup-privilege-d-ink.png

227 KiB

palette-words-mockup-privilege-d-paper.png

212 KiB

palette-words-mockup-privilege-p375-paper.png

236 KiB

pill-before-paper.png

4.3 KiB

privilege-bulk-d-ink.png

167 KiB

privilege-bulk-p375-paper.png

155 KiB

privilege-offline-d-ink.png

162 KiB

privilege-offline-d-paper.png

145 KiB

privilege-offline-p375-paper.png

156 KiB

privilege-root-p375-paper.png

148 KiB

privilege-sudo-d-ink.png

165 KiB

privilege-sudo-p375-paper.png

156 KiB

privilege-root-d-ink.png

162 KiB

privilege-root-d-paper.png

144 KiB

privilege-root-p393-ink.png

208 KiB

privilege-sudo-d-paper.png

148 KiB

privilege-sudo-p393-ink.png

223 KiB

privilege-tooltip-clear-of-field-d-ink.png

167 KiB

privilege-tooltip-clear-of-field-d-paper.png

148 KiB

palette-wheel-scrolled-d-ink.png

232 KiB

215-consent-sudo-d-ink.png

662 KiB

215-remove-confirm-d-ink.png

646 KiB

215-rename-in-place-d-ink.png

666 KiB

215-root-password-d-ink.png

650 KiB

215-row-hover-actions-d-ink.png

604 KiB

215-several-machines-d-ink.png

665 KiB

215-wrong-password-first-d-ink.png

662 KiB

215-consent-sudo-d-paper.png

573 KiB

215-remove-confirm-d-paper.png

539 KiB

215-rename-in-place-d-paper.png

558 KiB

215-root-password-d-paper.png

562 KiB

215-row-hover-actions-d-paper.png

535 KiB

215-wrong-password-first-d-paper.png

573 KiB

215-consent-sudo-p-ink.png

510 KiB

215-remove-confirm-p-ink.png

203 KiB

215-rename-in-place-p-ink.png

180 KiB

215-root-password-p-ink.png

510 KiB

215-row-hover-actions-p-ink.png

434 KiB

215-several-machines-p-ink.png

511 KiB

215-wrong-password-first-p-ink.png

510 KiB

215-row-hover-actions-p-paper.png

351 KiB

215-consent-sudo-p-paper.png

396 KiB

215-several-machines-d-paper.png

577 KiB

kayg commented 2026-10-14 13:08:05 +00:00

Author

Owner

Copy link

Branch mockup-host-actions (head 78ef9ef3, base origin/mockup-preview-combo), pushed, not merged, not deployed. Mockups need the owner's approval before product UI (D162).

Mockup URLs (test double, bun run build with INFRATERNAL_CLUSTERS_PREVIEW=1, then the preview server):

• Sidebar rename and remove: /?mock=1&proto=clusters&actions=1 (open the sidebar; hover a row; double-click; F2; Delete; palette: type "rename deploy")
• Privileged access consent: /?mock=1&proto=clusters&privilege=1 (press a window's pill, Host tab, "Access level: Limited"; palette: "Mockup: privilege - ..." picks the machine's behaviour: sudo, doas, only root, not allowed, wrong password first, offline, no answer, several selected)
• Both: &actions=1&privilege=1

Owner's words (2026-10-14)

1. "how do I rename/remove a host or session easily? i feel like i should be able to do that via the sidebar easily. basically double tap/double click on anything to rename it in place. and when hovered, I should get an action pill towards the right end of that item like info, rename, remove (all icons + warm tooltips)?"
2. "in the machine info pill, connection or session i don't know where we should display something like 'privileged agent' or something more user friendly with a tick or a cross. clicking on which should ask us, 'Currently the infraternal agent runs unprivileged. While privileged, it can manage a lot more. Do you consent privileged access?' with 3 icons ?, X, Tick. ? should link to our docs. X cancels, Tick starts the flow in-line and asks for either the sudo/doas password if those tools are installed and the user can sudo/doas, otherwise asks for root password directly. I want this mocked up."

Screenshots (2x, ink and paper, 1440x900, 393x852, 375x667; all states are in my scratch dir, ten key ones here)

Decisions I made, and why

• Touch reveals the pill by a swipe left, not a long press: the session manager's rows already do exactly this (shared swipeRow now), and a long press is the warm-tooltip gesture of every icon button and iOS text selection. Double tap renames (the sidebar waits 320 ms before closing on a phone so the second tap lands).
• A double-click renames the row the first click was on: opening a detached session moves it to the top of the list, so the second click lands on another row (found and fixed).
• Hosts keep their own name for everything that keys on it; the rename is a label shown in the sidebar, the machine popover and the window titles. Empty restores the default (a session's automatic name, a host's hostname).
• Remove host follows D219 (uninstalls the infraternal agent by default) and says so in plain words; one quiet line, "Keep the infraternal agent installed", turns the uninstall off. Remove session says what ends (the program running in it).
• Privilege state lives in the machine popover's Host tab as "Access level", a tick and "Full access" or a quiet cross and "Limited", under Login. It is the only place the machine's facts already are, it is findable (palette: "Allow full access on "), and the consent opens in place under the row (D141 H14: no popup, never automatic).
• Password step: "Your sudo password for kayg" / "Your doas password for kayg" when the machine says so, otherwise "The root password for "; when sudo is installed but not allowed, the same step says so in one line and asks for root (automatic fallback, no dead end). One quiet line: used once, never stored or logged. Wrong password: in place, field emptied, no shake. Offline or no answer: nothing changed, retry or close. Several selected: one consent and one password for all N hosts that allow sudo, one progress line each (H13).
• Info/Rename/Remove and the consent's three icons all use the shared warm tooltips and the shared confirmation buttons (tick primary, cross quiet).

Measurements (host load average 57 to 72 during the runs, so absolute numbers are inflated; the comparison is the same page with and without the feature)

• JavaScript transfer (D188, production build, mockups left out): critical 296,407 -> 296,597 B gzip (budget 307,200); deferred 49,046 -> 49,094 (51,200); on demand 84,043 -> 84,307 (largest chunk 15,946 -> 15,949 of 20,480). The mockup code itself is on demand and only in the preview build: sidebar actions 3.7 KB gzip, privilege 3.9 KB gzip.
• Idle: 60 fps with the sidebar open, unchanged. Hover over rows: found a layout per hovered row and a blur inside the sidebar's blur; removed. Remaining extra cost is the paint of one small pill (about 1.4x the plain sidebar's own hover cost per move in the A/B run, no long task).
• Pane text is crisp at rest (transform and opacity cleared once the spring ends; checked at 1.5 s).

Open questions for the owner

1. Remove host: is "Keep the infraternal agent installed" (a quiet line) the right way to offer the uninstall, or should removal always uninstall (D219) with no choice?
2. Opening a detached session moves it to the top of the sidebar list under the pointer. Should the list stay put while the sidebar is open (reorder when it closes)?
3. The session manager's rows rename with F2 or their Rename button only: a click there chooses the session and closes the manager, so a double-click cannot work. Fine?
4. The consent's ? link goes to /docs/privileges#access-level; that page does not exist yet (the mockup shows a toast). OK to write it with the feature?
5. Should Info, Rename and Remove appear in the ? shortcuts panel (F2, Delete, Command or Ctrl I on a focused row)?
6. Multi-select of machines (the "apply to all N hosts" case) has no place in the sidebar today; the mockup stands in for it from the palette. Where will selection live?

Branch `mockup-host-actions` (head 78ef9ef3, base `origin/mockup-preview-combo`), pushed, not merged, not deployed. Mockups need the owner's approval before product UI (D162). **Mockup URLs** (test double, `bun run build` with `INFRATERNAL_CLUSTERS_PREVIEW=1`, then the preview server): - Sidebar rename and remove: `/?mock=1&proto=clusters&actions=1` (open the sidebar; hover a row; double-click; F2; Delete; palette: type "rename deploy") - Privileged access consent: `/?mock=1&proto=clusters&privilege=1` (press a window's pill, Host tab, "Access level: Limited"; palette: "Mockup: privilege - ..." picks the machine's behaviour: sudo, doas, only root, not allowed, wrong password first, offline, no answer, several selected) - Both: `&actions=1&privilege=1` **Owner's words (2026-10-14)** 1. "how do I rename/remove a host or session easily? i feel like i should be able to do that via the sidebar easily. basically double tap/double click on anything to rename it in place. and when hovered, I should get an action pill towards the right end of that item like info, rename, remove (all icons + warm tooltips)?" 2. "in the machine info pill, connection or session i don't know where we should display something like 'privileged agent' or something more user friendly with a tick or a cross. clicking on which should ask us, 'Currently the infraternal agent runs unprivileged. While privileged, it can manage a lot more. Do you consent privileged access?' with 3 icons ?, X, Tick. ? should link to our docs. X cancels, Tick starts the flow in-line and asks for either the sudo/doas password if those tools are installed and the user can sudo/doas, otherwise asks for root password directly. I want this mocked up." **Screenshots (2x, ink and paper, 1440x900, 393x852, 375x667; all states are in my scratch dir, ten key ones here)**           **Decisions I made, and why** - Touch reveals the pill by a swipe left, not a long press: the session manager's rows already do exactly this (shared `swipeRow` now), and a long press is the warm-tooltip gesture of every icon button and iOS text selection. Double tap renames (the sidebar waits 320 ms before closing on a phone so the second tap lands). - A double-click renames the row the first click was on: opening a detached session moves it to the top of the list, so the second click lands on another row (found and fixed). - Hosts keep their own name for everything that keys on it; the rename is a label shown in the sidebar, the machine popover and the window titles. Empty restores the default (a session's automatic name, a host's hostname). - Remove host follows D219 (uninstalls the infraternal agent by default) and says so in plain words; one quiet line, "Keep the infraternal agent installed", turns the uninstall off. Remove session says what ends (the program running in it). - Privilege state lives in the machine popover's Host tab as "Access level", a tick and "Full access" or a quiet cross and "Limited", under Login. It is the only place the machine's facts already are, it is findable (palette: "Allow full access on <host>"), and the consent opens in place under the row (D141 H14: no popup, never automatic). - Password step: "Your sudo password for kayg" / "Your doas password for kayg" when the machine says so, otherwise "The root password for <host>"; when sudo is installed but not allowed, the same step says so in one line and asks for root (automatic fallback, no dead end). One quiet line: used once, never stored or logged. Wrong password: in place, field emptied, no shake. Offline or no answer: nothing changed, retry or close. Several selected: one consent and one password for all N hosts that allow sudo, one progress line each (H13). - Info/Rename/Remove and the consent's three icons all use the shared warm tooltips and the shared confirmation buttons (tick primary, cross quiet). **Measurements** (host load average 57 to 72 during the runs, so absolute numbers are inflated; the comparison is the same page with and without the feature) - JavaScript transfer (D188, production build, mockups left out): critical 296,407 -> 296,597 B gzip (budget 307,200); deferred 49,046 -> 49,094 (51,200); on demand 84,043 -> 84,307 (largest chunk 15,946 -> 15,949 of 20,480). The mockup code itself is on demand and only in the preview build: sidebar actions 3.7 KB gzip, privilege 3.9 KB gzip. - Idle: 60 fps with the sidebar open, unchanged. Hover over rows: found a layout per hovered row and a blur inside the sidebar's blur; removed. Remaining extra cost is the paint of one small pill (about 1.4x the plain sidebar's own hover cost per move in the A/B run, no long task). - Pane text is crisp at rest (transform and opacity cleared once the spring ends; checked at 1.5 s). **Open questions for the owner** 1. Remove host: is "Keep the infraternal agent installed" (a quiet line) the right way to offer the uninstall, or should removal always uninstall (D219) with no choice? 2. Opening a detached session moves it to the top of the sidebar list under the pointer. Should the list stay put while the sidebar is open (reorder when it closes)? 3. The session manager's rows rename with F2 or their Rename button only: a click there chooses the session and closes the manager, so a double-click cannot work. Fine? 4. The consent's ? link goes to `/docs/privileges#access-level`; that page does not exist yet (the mockup shows a toast). OK to write it with the feature? 5. Should Info, Rename and Remove appear in the `?` shortcuts panel (F2, Delete, Command or Ctrl I on a focused row)? 6. Multi-select of machines (the "apply to all N hosts" case) has no place in the sidebar today; the mockup stands in for it from the palette. Where will selection live?

kayg referenced this issue from a commit 2026-10-15 05:54:14 +00:00

taste: search forgives typos, no empty room for missing text, lists scroll under the wheel

kayg referenced this issue from a commit 2026-10-15 05:55:50 +00:00

palette: every query word matches on its own, punctuation is ignored, one typo is forgiven (#215)

kayg referenced this issue from a commit 2026-10-15 06:00:38 +00:00

decisions: D274 privileged access keeps the root agent; password sealed to the host, detected way in, every action recorded

kayg referenced this issue from a commit 2026-10-15 06:02:41 +00:00

decisions: D275 the wheel scrolls what is under it, split by direction

kayg referenced this issue from a commit 2026-10-15 06:03:11 +00:00

ui: the window pill hugs its content; a session name that cannot show takes no room (#215, D271)

kayg referenced this issue from a commit 2026-10-15 06:07:12 +00:00

decisions: D274 the privileged password is used once and never stored; downgrade made hard to reach

kayg referenced this issue from a commit 2026-10-15 06:09:22 +00:00

decisions: D275 the wheel moves along a column where nothing scrolls, and neighbours always peek

kayg referenced this issue from a commit 2026-10-15 06:12:57 +00:00

decisions: D274 downgrade behind admin-only search, two prompts and a typed name; D276 Inbox items are dismissable

kayg referenced this issue from a commit 2026-10-15 06:13:15 +00:00

decisions: D275 remove the phone "Full width" size; full screen covers one window alone

kayg referenced this issue from a commit 2026-10-15 06:18:53 +00:00

decisions: D274 downgrade needs a passkey and honours an organisation lock; second-admin approval is ee/

kayg referenced this issue from a commit 2026-10-15 06:23:27 +00:00

palette: hovering a row never scrolls the list (#215)

kayg referenced this issue from a commit 2026-10-15 06:23:27 +00:00

mockup(ui): a privilege scenario opens its consent at once; the consent's tips stay clear of the field (#215)

kayg referenced this issue from a commit 2026-10-15 06:29:46 +00:00

mockup(ui): privilege scenario hints fit the palette row (#215)

kayg commented 2026-10-15 07:03:09 +00:00

Author

Owner

Copy link

Designer round on mockup-preview-combo (base 3b8666f71). Commits, all pushed:

• 3c4dd2112 palette: every query word matches on its own, punctuation ignored, one typo forgiven
• b04d1bf51 ui: the window pill hugs its content (D271)
• cfd7dd97b palette: hovering a row never scrolls the list
• 93b6fc795 mockup(ui): a privilege scenario opens its consent at once; the consent's tips stay clear of the field
• a77a7ed44 mockup(ui): privilege scenario hints fit the palette row

Findings

1. Pill gap: the session name's flex-basis was a fixed 10ch, but the pill's width came from the name's own, shorter width. A name under 10ch always wrapped onto the clipped second line and still widened the pill, so the dot sat far from the host. Fix: basis = min(10ch, name length), a one-observer fallback that removes a name that cannot show, and no pill space for empty or generic names (shell names, default).
2. Palette wheel: the palette is not inside the canvas viewport (palette > terminal-screen, viewport is a sibling), so the canvas wheel handlers never see its events; session-ui's wheel close is on the viewport too. I could not reproduce a dead wheel in Chromium or Firefox. In WebKit a wheel scroll with a jittering pointer stalled (100,100,179,200,284,300); the cause is hover selection calling scrollIntoView. Hover no longer scrolls: 92,200,300,400. Production has the same code (core-screen.ts), so it has this too. Not verified on a real Safari or trackpad.
3. mockup privilege found nothing because the whole query was one substring and the colon in "Mockup: privilege" broke it. The entries are registered at page load; loading was not the cause.
   4/5. Scenarios open build-01's consent at once (password step for doas/root/denied, unreachable step for offline, bulk selection for bulk); hints rewritten. The consent buttons' warm tips go below the buttons, so never over the field; the shared tooltip now flips a wanted side only when it has no room.

Gates

• bun unit tests: palette-match 19 pass, window-card 19 pass; the ts gate's unit run: 293 pass, 1 fail (stops.test.ts "an empty graph rests on its centre", also fails on the base).
• Playwright: window-pill-fit 2 pass, host-actions-mockup privileged 9 pass, palette-wheel 1 pass. tsc clean.
• scripts/verify iterate stops at its first gate, the repository artifact size gate: FAIL (391 files over 200000 bytes), all committed review captures from earlier rounds (e.g. 3385f4e03), none from this work. I ran the later steps by hand: release deploy tests, latency self-test, vendored checksums, tracer tsc, unit tests, build and transfer budget. The Rust gates of iterate were not run.
• D188 budgets (not changed): critical gzip 296602 -> 297245 (+643) of 307200, brotli 246908 -> 247539 (+631) of 256000; critical identity +1581 bytes; deferred gzip +270 of 51200. onDemand class unchanged.

Evidence (mono UI, ink and paper, 1440x900, 393x852, 375x667): attached above. Pill "before" is the old look reproduced by switching the new rules off.

Designer round on `mockup-preview-combo` (base 3b8666f71). Commits, all pushed: - 3c4dd2112 palette: every query word matches on its own, punctuation ignored, one typo forgiven - b04d1bf51 ui: the window pill hugs its content (D271) - cfd7dd97b palette: hovering a row never scrolls the list - 93b6fc795 mockup(ui): a privilege scenario opens its consent at once; the consent's tips stay clear of the field - a77a7ed44 mockup(ui): privilege scenario hints fit the palette row Findings 1. Pill gap: the session name's flex-basis was a fixed 10ch, but the pill's width came from the name's own, shorter width. A name under 10ch always wrapped onto the clipped second line and still widened the pill, so the dot sat far from the host. Fix: basis = min(10ch, name length), a one-observer fallback that removes a name that cannot show, and no pill space for empty or generic names (shell names, default). 2. Palette wheel: the palette is not inside the canvas viewport (palette > terminal-screen, viewport is a sibling), so the canvas wheel handlers never see its events; session-ui's wheel close is on the viewport too. I could not reproduce a dead wheel in Chromium or Firefox. In WebKit a wheel scroll with a jittering pointer stalled (100,100,179,200,284,300); the cause is hover selection calling scrollIntoView. Hover no longer scrolls: 92,200,300,400. Production has the same code (core-screen.ts), so it has this too. Not verified on a real Safari or trackpad. 3. `mockup privilege` found nothing because the whole query was one substring and the colon in "Mockup: privilege" broke it. The entries are registered at page load; loading was not the cause. 4/5. Scenarios open build-01's consent at once (password step for doas/root/denied, unreachable step for offline, bulk selection for bulk); hints rewritten. The consent buttons' warm tips go below the buttons, so never over the field; the shared tooltip now flips a wanted side only when it has no room. Gates - bun unit tests: palette-match 19 pass, window-card 19 pass; the ts gate's unit run: 293 pass, 1 fail (stops.test.ts "an empty graph rests on its centre", also fails on the base). - Playwright: window-pill-fit 2 pass, host-actions-mockup privileged 9 pass, palette-wheel 1 pass. tsc clean. - `scripts/verify iterate` stops at its first gate, the repository artifact size gate: FAIL (391 files over 200000 bytes), all committed review captures from earlier rounds (e.g. 3385f4e03), none from this work. I ran the later steps by hand: release deploy tests, latency self-test, vendored checksums, tracer tsc, unit tests, build and transfer budget. The Rust gates of iterate were not run. - D188 budgets (not changed): critical gzip 296602 -> 297245 (+643) of 307200, brotli 246908 -> 247539 (+631) of 256000; critical identity +1581 bytes; deferred gzip +270 of 51200. onDemand class unchanged. Evidence (mono UI, ink and paper, 1440x900, 393x852, 375x667): attached above. Pill "before" is the old look reproduced by switching the new rules off.                                        

kayg referenced this issue from a commit 2026-10-15 07:07:58 +00:00

decisions: D279 several machines are selected with ⌘/Shift-click, long-press on phones, or in words

kayg referenced this issue from a commit 2026-10-15 17:14:57 +00:00

decisions: D286 the privileged-access upgrade mockup is approved

kayg referenced this issue 2026-10-28 17:53:56 +00:00

Orchestrator handover 2026-10-28: moving to a new machine #254

kayg referenced this issue 2026-10-28 18:00:45 +00:00

Orchestrator handover 2026-10-28: moving to a new machine #254

kayg referenced this issue 2026-10-30 17:36:12 +00:00

Orchestrator handover 2026-10-30: all work paused; mesh-first roadmap; Claude-only #262

kayg commented 2026-10-31 17:21:42 +00:00

Author

Owner

Copy link

Rebuilt on current dev for the owner's review. Branch mockups-2026-10-31, head 586cd2b13 (base dev 42ab33035, 2026-10-31). Test double only; nothing is real or saved. Not merged, not deployed. Old previews are gone; this replaces them.

Preview (NetBird, bound to infraternal-dev-02-std; index of every mockup: http://10.69.69.117:47650/mockups.html):

• http://10.69.69.117:47650/?mock=1&proto=clusters&scene=3&actions=1
• http://10.69.69.117:47650/?mock=1&proto=clusters&scene=3&privilege=1

How: Sidebar: hover a row, double-click, F2, Delete. Consent: press a window's pill, Host tab, Access level; palette "Mockup: privilege" picks the machine's behaviour. (The consent half was approved in D286.)

Note: Rebased only.

Captures are Chromium on the production build of the mockup, taken by apps/tracer/test/capture-mockups.ts; I have read them for wrong states, not judged them as final.

Desktop 1440×900 @2x, ink

Desktop 1440×900 @2x, paper

Phone 393×852 @3x, ink

Phone 393×852 @3x, paper (first state only)

Rebuilt on current dev for the owner's review. Branch `mockups-2026-10-31`, head `586cd2b13` (base dev `42ab33035`, 2026-10-31). Test double only; nothing is real or saved. Not merged, not deployed. Old previews are gone; this replaces them. **Preview** (NetBird, bound to infraternal-dev-02-std; index of every mockup: http://10.69.69.117:47650/mockups.html): - http://10.69.69.117:47650/?mock=1&proto=clusters&scene=3&actions=1 - http://10.69.69.117:47650/?mock=1&proto=clusters&scene=3&privilege=1 **How:** Sidebar: hover a row, double-click, F2, Delete. Consent: press a window's pill, Host tab, Access level; palette "Mockup: privilege" picks the machine's behaviour. (The consent half was approved in D286.) **Note:** Rebased only. Captures are Chromium on the production build of the mockup, taken by `apps/tracer/test/capture-mockups.ts`; I have read them for wrong states, not judged them as final. **Desktop 1440×900 @2x, ink**        **Desktop 1440×900 @2x, paper**        **Phone 393×852 @3x, ink**        **Phone 393×852 @3x, paper (first state only)**  

kayg referenced this issue 2026-10-31 17:32:45 +00:00

J19: mockups awaiting approval rebuilt on current dev at one URL #272

kayg commented 2026-10-31 17:32:54 +00:00

Author

Owner

Copy link

Update to the comment above: the branch head is now 57871651f (the preview at http://10.69.69.117:47650/mockups.html runs it). The captures above were taken one build earlier; the only difference is that the window terminals there hide their cursor until attached, a production change that was since removed from the branch. Gate output, what is left out, and the budget finding: #272.

Update to the comment above: the branch head is now `57871651f` (the preview at http://10.69.69.117:47650/mockups.html runs it). The captures above were taken one build earlier; the only difference is that the window terminals there hide their cursor until attached, a production change that was since removed from the branch. Gate output, what is left out, and the budget finding: #272.

kayg referenced this issue 2026-11-01 09:41:54 +00:00

Own context menu and swipe actions on rows (Views tree first) #242

kayg referenced this issue 2026-11-02 14:03:39 +00:00

Own context menu and swipe actions on rows (Views tree first) #242

kayg commented 2026-11-02 14:03:39 +00:00

Author

Owner

Copy link

J106 start (UI job, Sonnet 5.5, 2026-11-02). Owner approved today: "both sidebar rows and rename are approved" (#242 row menu and swipes; #215 sidebar rename/remove). This job builds both into the real product, no mock flag.

Branch row-actions-242-215, worktree ~/Developer/Worktrees/infraternal-j106, base origin/dev = 17d282a18. Reference: origin/mockups-2026-10-31 (heads 4c389a2f4 / 97597e740, J52 last iteration). Builds and browsers on the VMs only, through build-slot.

Coordination with J73 (#292)

git branch -r on origin and forgejo has no sidebar-292 (J73's branch lives on code-minipc01, not pushed), so there is nothing to build on. I keep to row actions: new shared files packages/ui/src/row-menu.ts, row-swipe.ts, row-confirm.ts (ported unchanged from the mockup head, so J73's planned copy of row-confirm.ts is the same file and merges clean if it is taken from 97597e740), toolbar/row-actions.ts, and a small change to toolbar/tree.ts. I do not touch session-tree.on-demand.ts (host rows without sessions, +, selection, drag): that stays J73's. J73: please do not copy row-confirm.ts from before 97597e740 (the alignTo fix).

What the code has, what it lacks (evidence)

Piece	State on dev	Plan
Session rename	inv.rename live; syncs through the canvas layout stream (#293 bf6d4cd52, on dev)	reuse
Host removal	adapters.hostRemoval exists (product.ts:201), server /remote/hosts/remove/{start,finish} (passkey proof)	reuse as the mockup's host-row "Remove host…"
End session	live-inventory.ts has can.end = false ("cannot end sessions until #100"); the server never signals a shim (contracts/wire.md), no leg-A verb	missing backend. I build the in-row End + left swipe behind can.end (the mockup already does), so they appear when #100 lands. Not inventing a backend.
Host rename	no server route, hosts are named by their enrolment	missing backend: host rename is left out (session rename only); the mock's host rename field is not ported.
Privileged access (Access level row, consent)	no route to change an agent's privilege	missing backend. Port the Access level row and consent card against an adapters.privilege interface that the product leaves unset (row absent) until the endpoint exists; Playwright drives a test adapter.

Plan

Step	What	Est.
1	Port row-menu / row-swipe / row-confirm / spring fling, CSS, tooltips needed (one commit per concern, no unrelated mockup-branch change: no UI-size rem conversion, no Mesh)	2 h
2	row-actions.ts + tree.ts: session/host/window rows; palette rows for the focused row	1.5 h
3	#215: hover action pill, double-click and F2 rename (shared inline-rename), Delete, remove-host in-row confirm	2 h
4	#215: Access level row in the Host tab + consent card, adapter-driven	2 h
5	Playwright, desktop 1440x900 and phone 393x852: right-click, long-press, Shift+F10, trackpad sideways scroll, left/right swipe, in-row End, hover pill, double-click, F2, Delete, consent; alignment (+-0.5 px) and in-row confirmation checks	3 h
6	Production-build screenshots DPR 2/3, scripts/verify fast, push, comment	2 h

Total about 12.5 h. I stop and report at 25 h.

**J106 start** (UI job, Sonnet 5.5, 2026-11-02). Owner approved today: "both sidebar rows and rename are approved" (#242 row menu and swipes; #215 sidebar rename/remove). This job builds both into the real product, no mock flag. Branch `row-actions-242-215`, worktree `~/Developer/Worktrees/infraternal-j106`, base `origin/dev` = `17d282a18`. Reference: `origin/mockups-2026-10-31` (heads `4c389a2f4` / `97597e740`, J52 last iteration). Builds and browsers on the VMs only, through `build-slot`. ## Coordination with J73 (#292) `git branch -r` on origin and forgejo has **no** `sidebar-292` (J73's branch lives on code-minipc01, not pushed), so there is nothing to build on. I keep to row actions: new shared files `packages/ui/src/row-menu.ts`, `row-swipe.ts`, `row-confirm.ts` (ported unchanged from the mockup head, so J73's planned copy of `row-confirm.ts` is the same file and merges clean if it is taken from `97597e740`), `toolbar/row-actions.ts`, and a small change to `toolbar/tree.ts`. I do not touch `session-tree.on-demand.ts` (host rows without sessions, `+`, selection, drag): that stays J73's. J73: please do not copy `row-confirm.ts` from before `97597e740` (the alignTo fix). ## What the code has, what it lacks (evidence) | Piece | State on dev | Plan | |---|---|---| | Session rename | `inv.rename` live; syncs through the canvas layout stream (#293 `bf6d4cd52`, on dev) | reuse | | Host removal | `adapters.hostRemoval` exists (`product.ts:201`), server `/remote/hosts/remove/{start,finish}` (passkey proof) | reuse as the mockup's host-row "Remove host…" | | End session | `live-inventory.ts` has `can.end = false` ("cannot end sessions until #100"); the server never signals a shim (`contracts/wire.md`), no leg-A verb | **missing backend**. I build the in-row End + left swipe behind `can.end` (the mockup already does), so they appear when #100 lands. Not inventing a backend. | | Host rename | no server route, hosts are named by their enrolment | **missing backend**: host rename is left out (session rename only); the mock's host rename field is not ported. | | Privileged access (Access level row, consent) | no route to change an agent's privilege | **missing backend**. Port the Access level row and consent card against an `adapters.privilege` interface that the product leaves unset (row absent) until the endpoint exists; Playwright drives a test adapter. | ## Plan | Step | What | Est. | |---|---|---| | 1 | Port `row-menu` / `row-swipe` / `row-confirm` / spring fling, CSS, tooltips needed (one commit per concern, no unrelated mockup-branch change: no UI-size rem conversion, no Mesh) | 2 h | | 2 | `row-actions.ts` + tree.ts: session/host/window rows; palette rows for the focused row | 1.5 h | | 3 | #215: hover action pill, double-click and F2 rename (shared `inline-rename`), Delete, remove-host in-row confirm | 2 h | | 4 | #215: Access level row in the Host tab + consent card, adapter-driven | 2 h | | 5 | Playwright, desktop 1440x900 and phone 393x852: right-click, long-press, Shift+F10, trackpad sideways scroll, left/right swipe, in-row End, hover pill, double-click, F2, Delete, consent; alignment (+-0.5 px) and in-row confirmation checks | 3 h | | 6 | Production-build screenshots DPR 2/3, `scripts/verify fast`, push, comment | 2 h | Total about 12.5 h. I stop and report at 25 h.

kayg referenced this issue 2026-11-02 14:26:59 +00:00

Own context menu and swipe actions on rows (Views tree first) #242

kayg commented 2026-11-02 14:26:59 +00:00

Author

Owner

Copy link

J106 progress (2026-11-02). Branch row-actions-242-215 (pushed), head bfaf96155; typecheck (bun run check) clean on dev-02 at 15bfac3c5.

Done, one commit per concern:

1. 33e91b0c9 merge of sidebar-pill-259 (#259, scope added by the owner) onto origin/dev 17d282a18. Conflicts: the two inline-rename.ts modules (dev's account card and #259's) are now one field: #259's beginInlineRename / placeOverName / onDoubleActivate; dev's inlineRename(target, …) stays as a thin wrapper over it (account card unchanged), .ui-rename-input became .ui-inline-rename. Data path of a rename stays dev's (#293).
2. 08c1cef27 shared row-menu.ts + row-confirm.ts (+ Spring.fling, window menu opening at a point, danger row), ported from 97597e740.
3. 7eefe5674 toolbar/row-actions.ts + tree wiring: right-click, long press, Shift+F10/menu key, trackpad/touch swipes, End asks in its row, Rename through BranchedMenu.rename(id) (the shared field), palette rows for the focused row.
4. 79da821ac hover action pill, F2, Delete (#215).
5. kv-list panel + 15bfac3c5 Access level row and consent (#215, D286).
6. bfaf96155 Playwright specs (row-menu, row-gestures, row-ask, replacement-alignment, row-swipe-continuity, sidebar-rename-remove, access-level).

Missing backends (not invented):

• End session: the product inventory has can.end = false (#100; no leg-A verb, contracts/wire.md: the server never signals a shim). The in-row End, the left swipe and Delete-on-a-session are built behind can.end; in the product they do not appear until #100 lands (the test double can end).
• Privileged access: no server endpoint raises the agent's privileges with a once-used secret. The row and consent are built against Adapters.privilege (sessions/privilege.ts, a PrivilegeService); the product leaves it unset, so the "Access level" row does not show. The test double implements it (?privilege=<scenario>).
• Host removal and host rename are real: removal uses adapters.hostRemoval (/remote/hosts/remove/*, passkey flow, so it asks in its own card, not in the row); a host renames through mesh.node.rename (#259), so only a host the Mesh knows has Rename.
• The consent's ? goes to the Docs view when it exists; there is no "privileges" docs page yet.

One decision for the owner: on touch the #215 mockup revealed the action pill with a left swipe; #242 gives the left swipe to End/Close. I kept #242's swipes and the long-press menu on touch; the hover pill is pointer-only.

Next: run the new specs, production-build screenshots at DPR 2/3, scripts/verify fast.

**J106 progress** (2026-11-02). Branch `row-actions-242-215` (pushed), head `bfaf96155`; typecheck (`bun run check`) clean on dev-02 at `15bfac3c5`. Done, one commit per concern: 1. `33e91b0c9` merge of `sidebar-pill-259` (#259, scope added by the owner) onto `origin/dev` `17d282a18`. Conflicts: the two `inline-rename.ts` modules (dev's account card and #259's) are now **one** field: #259's `beginInlineRename` / `placeOverName` / `onDoubleActivate`; dev's `inlineRename(target, …)` stays as a thin wrapper over it (account card unchanged), `.ui-rename-input` became `.ui-inline-rename`. Data path of a rename stays dev's (#293). 2. `08c1cef27` shared `row-menu.ts` + `row-confirm.ts` (+ `Spring.fling`, window menu opening at a point, danger row), ported from `97597e740`. 3. `7eefe5674` `toolbar/row-actions.ts` + tree wiring: right-click, long press, Shift+F10/menu key, trackpad/touch swipes, End asks in its row, Rename through `BranchedMenu.rename(id)` (the shared field), palette rows for the focused row. 4. `79da821ac` hover action pill, F2, Delete (#215). 5. kv-list `panel` + `15bfac3c5` Access level row and consent (#215, D286). 6. `bfaf96155` Playwright specs (row-menu, row-gestures, row-ask, replacement-alignment, row-swipe-continuity, sidebar-rename-remove, access-level). **Missing backends (not invented):** - **End session**: the product inventory has `can.end = false` (#100; no leg-A verb, `contracts/wire.md`: the server never signals a shim). The in-row End, the left swipe and Delete-on-a-session are built behind `can.end`; in the product they do not appear until #100 lands (the test double can end). - **Privileged access**: no server endpoint raises the agent's privileges with a once-used secret. The row and consent are built against `Adapters.privilege` (`sessions/privilege.ts`, a `PrivilegeService`); the product leaves it unset, so the "Access level" row does not show. The test double implements it (`?privilege=<scenario>`). - **Host removal** and **host rename** are real: removal uses `adapters.hostRemoval` (`/remote/hosts/remove/*`, passkey flow, so it asks in its own card, not in the row); a host renames through `mesh.node.rename` (#259), so only a host the Mesh knows has Rename. - The consent's `?` goes to the Docs view when it exists; there is no "privileges" docs page yet. **One decision for the owner:** on touch the #215 mockup revealed the action pill with a left swipe; #242 gives the left swipe to End/Close. I kept #242's swipes and the long-press menu on touch; the hover pill is pointer-only. Next: run the new specs, production-build screenshots at DPR 2/3, `scripts/verify fast`.

kayg referenced this issue 2026-11-02 14:27:00 +00:00

Sidebar account pill drifts up from the bottom; rename Mesh hosts by double-tap #259

kayg commented 2026-11-02 19:03:04 +00:00

Author

Owner

Copy link

J106 evidence for #215: sidebar rename/remove and the privileged-access consent, in the real product (production build, Chromium headless, test double; branch row-actions-242-215). 1440×900 DPR 2 and 393×852 DPR 3, ink and paper; read at full size, not judged as final.

Shown: the hover pill (Rename and End on a session, left of its marks so their tooltips stay; the pill's third button is the stop square, as in the row menu), the rename field at the label's x, the host menu, and the Access level row with the consent (question, ?/×/✓, then the password step) on desktop and phone.

Note: the consent and its row appear only on an instance that provides a privilege service; the product has none yet (no server endpoint), so the screenshots are of the test double (?privilege=sudo).

**J106 evidence for #215: sidebar rename/remove and the privileged-access consent, in the real product** (production build, Chromium headless, test double; branch `row-actions-242-215`). 1440×900 DPR 2 and 393×852 DPR 3, ink and paper; read at full size, not judged as final. Shown: the hover pill (Rename and End on a session, left of its marks so their tooltips stay; the pill's third button is the stop square, as in the row menu), the rename field at the label's x, the host menu, and the Access level row with the consent (question, ?/×/✓, then the password step) on desktop and phone. Note: the consent and its row appear only on an instance that provides a privilege service; the product has none yet (no server endpoint), so the screenshots are of the test double (`?privilege=sudo`).           

desktop-ink-hover-pill.png

359 KiB

desktop-ink-rename-field.png

357 KiB

desktop-ink-host-menu.png

408 KiB

desktop-ink-access-level-limited.png

620 KiB

desktop-ink-consent.png

576 KiB

desktop-ink-consent-password.png

570 KiB

desktop-paper-hover-pill.png

302 KiB

desktop-paper-rename-field.png

304 KiB

desktop-paper-consent.png

499 KiB

phone-ink-consent.png

405 KiB

phone-paper-consent.png

332 KiB

kayg referenced this issue 2026-11-02 19:27:13 +00:00

Own context menu and swipe actions on rows (Views tree first) #242

kayg commented 2026-11-02 19:27:13 +00:00

Author

Owner

Copy link

J106 finish. Branch row-actions-242-215, head 82c54c678, pushed (base origin/dev 17d282a18, merged with dev 99668d8ab along the way). Built into the real product, no mock flag. Evidence screenshots (production build, DPR 2 and 3) are in the two comments above on #242 and #215.

What is built

• #259 brought in as the base: merge of sidebar-pill-259; the two inline-rename.ts modules (dev's and #259's) are now one field (#259's beginInlineRename; dev's inlineRename is a thin wrapper, .ui-rename-input is gone). Rename's data path is dev's (#293).
• #242: right-click, long press, Shift+F10 / menu key, trackpad sideways scroll, left and right swipes; End asks in its own row starting at the label's x; the continuous right swipe; every action of the focused row is a palette row. Escape closes a revealed row or the question first.
• #215: hover pill (Rename, End/Remove; pointer only), double click and double tap rename (through the shared field), F2, Delete, remove host; "Access level" row and the consent from a window's pill → Host tab; palette "Allow full access on ".
• Row actions, menu, swipes and pill load with the sidebar (on-demand chunk), not with the canvas.

Missing backends (not invented, see earlier comment): End session (inventory can.end is false, #100): End, the left swipe and Delete-on-a-session do not appear in the product until it lands; privileged access (no server endpoint): the row and consent exist behind Adapters.privilege, unset in the product; host rename works only for hosts the Mesh knows (mesh.node.rename); host removal uses the existing passkey flow (its own card, not in-row). The consent's "?" goes to the Docs view; there is no privileges docs page yet.

For the owner: on touch #215's mockup revealed the pill with a left swipe, #242 gives the left swipe to End/Close: I kept #242's swipes and the long-press menu on touch; the pill is hover-only.

Tests (Playwright, production build, test double; desktop 1440×900 and phone 393×852): row-menu, row-gestures, row-ask, replacement-alignment (≤ 0.5 px, DPR 2 and 3), row-swipe-continuity, sidebar-rename-remove, access-level, plus #259's mesh-rename adapted to dev. Last full set (head 91440dc79): 94 passed, 4 failed: 3 in sessions-canvas.spec.ts (lines 170, 370, 479) fail identically on unmodified origin/dev 17d282a18 (measured: 3 failed / 19 passed there), and the 4th (double click on an exited session whose list re-sorts) was fixed afterwards; sidebar-rename-remove.spec.ts on 82c54c678: 10 passed.

Gate: scripts/verify fast does NOT pass: one failure, the deferred JavaScript budget. The full gate ran on 8c548ce0c (dev-02); since then only TypeScript changed (git diff 8c548ce0c HEAD -- crates Cargo.toml Cargo.lock scripts is empty). Rust part, verbatim:

| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| gate architecture         | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+
x86_64: size 22422864 bytes; baseline 22418256; delta +4608 bytes (report only, D243 amended 2026-11-01)
aarch64: size 20454096 bytes; baseline 20453280; delta +816 bytes (report only)

TypeScript part re-run on the final head (82c54c678, tsc and every bun test group: 0 fail), then:

JavaScript transfer, critical: identity=1006850 gzip=313843/327680 brotli=261710/273408 bytes
JavaScript transfer, deferred: identity=179031 gzip=62025/61440 brotli=54702/55296 bytes
JavaScript transfer, onDemand: identity=304405 gzip=121081/20480 brotli=107917/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-f7w4g32v.js: gzip=15464/20480 brotli=13803/18432 bytes (class total gzip=121081 brotli=107917, not limited)
error: production deferred JavaScript exceeds its compressed transfer budget

Measured against dev (99668d8ab, same command): critical 311,046 gzip, deferred 61,276 (164 B under its cap), onDemand 109,459. Before I moved the row code on demand the deferred class was 68,009; now it is 62,025, i.e. 585 B gzip over the 60 KiB cap (brotli is under). By the source diff the rest is the Mesh host rename of #259 and the tree's rename routing; I did not measure it per module, and I did not touch the gate. Needs the orchestrator/owner: ratchet the deferred cap (D188 rule: measured size rounded up to a KiB plus a margin) or tell me what to cut.

Commits (oldest first):

82c54c678 test(tracer): the rename double click aims at the name, as a person does (#215)
03701a66c ui: a double click is still one when the second release lands on the gap the rebuilt list left (#259, #215)
91440dc79 details: the consent pane stays in view while it grows into the popover (#215)
86ad8dc65 ui: a double click renames the row the first press was on, even if the list re-sorted under the pointer (#259, #215)
73f0710cc perf: the row menu, swipes and hover pill load with the sidebar, not with the canvas (D188, #242, #215)
8e0150821 sidebar: the pill ends a session with the stop square, and hides while the name is being edited (#215)
2f4ab7945 details: the consent pane spans the whole row and is brought into view when it opens (#215)
a61603233 ui: a double click renames even when the first click rebuilt the list (#259, #215)
8c548ce0c sidebar: the hover pill sits left of a row's marks and notes, which keep their tooltips (#215, #259)
1f041d24f Merge origin/dev (99668d8ab) into row-actions-242-215
30094bf01 test(tracer): opt-in review captures of the row menu, swipes, rename and consent (#242, #215)
2fe75432f test(tracer): #259's rename checks follow dev's connection icon and the renamable sessions (#259, #212, #215)
fa3131756 ui: a rename field takes the free room after a name that a clip cuts short (#259, #215)
99668d8ab Merge decisions-2026-11-02: D163 GotaTun on Linux, D317 docs structure
1d8af5c4a decisions: D163 Linux engine is GotaTun; D317 user docs structure
cdff83eb0 Merge taste-2026-11-02: owner review rows from 2026-11-02
9ef53bbb9 taste: windows start at the layout's size and never overlap
d67670c56 taste: descriptions say what a thing does, not what state it is in
d251c0ad8 taste: content sits inside its container with an even inset
69ba50588 taste: Settings rows scroll as a whole, not window by window
203fd67d3 taste: pill menus centre on their pill; no dead buttons
4c8e22611 taste: windows keep their natural width and the canvas scrolls; popovers follow their anchor
a479a8760 Merge size-baseline-ratchet: static size baselines match current dev (D243)
a8926703a verify: ratchet the static size baselines to the current dev measurement (D243)
c85e53e54 ui: a rename field on a fine pointer types in the size of the name it replaces (#259, #215)
3213ae21a palette: "Allow full access on <host>" opens the machine's consent (#215, D286)
3f2c9aeab test(tracer): every gesture and key of the sidebar's row menu, swipes, rename and consent (#242, #215)
0a4dd245b details: an "Access level" row and a consent that asks before the agent gets full access (#215, D286)
fea95e752 ui: a key/value row can carry a pane that opens under it (#215, D160)
5784444f1 sidebar: an action pill on hover, F2 renames and Delete removes the focused row (#215)
1b3992370 sidebar: right-click, long press, Shift+F10 and swipes on rows; End asks in its row (#242, D309)
a6498b99c ui: one row menu and swipe component, and the in-row question, for every list of rows (#242, D309)
294042b56 Merge fix-dev-red: dev green again after #291 (#307)
d7984ca7d ui: the anchored popover opens at a point, the window menu gets a danger row
9919b28b1 ui: a spring can be flung, so a released drag carries on from the finger's speed (#242, D70)
33e91b0c9 Merge sidebar-pill-259: rename Mesh hosts in place, detached icon, pinned account pill (#259)
502d0fc7e Stabilize clean shim exit observation under load #307
f15a74866 Fix J96 server test regressions after #291
66d25769d sidebar: the tick, cross and dot on a session row get a tooltip in plain words (#259)
e60f12434 test: the sidebar's tick, cross and dot explain themselves in a tooltip (#259)
44b3256f1 sidebar: a detached session shows an icon, not the word (#259)
648cc7774 test: a detached session in the sidebar shows an icon with a "Detached" tooltip (#259)
85cb920ee test: the rename field and the widened name pill never overlap the → pill (#259)
9fe1b7041 ui: the inline rename field stays inside the name's own box (#259)
c747d9fbb test: the rename field must not sit under the status dot (#259)
e86c2baf2 test: opt-in review captures of the pinned sidebar pill (#259)
845aa3e2c test: browser spec for renaming Mesh hosts in place (#259)
126c97190 palette: "Rename <host>" for the Mesh's hosts (#259)
16756de44 sidebar: rename a Mesh host by double click or double tap in the Views tree (#259)
cae06fe17 mesh: rename a host by double click or double tap on its card (#259)
ce31a7b52 ui: field placed over a name, and a double tap that survives a rebuilt list (#259)
e3d803ff2 mesh: rename a host through mesh.node.rename in the Mesh API adapter (#259)
711032f75 ui: one inline-rename field and one double-tap gesture for every in-place rename (#259)
0172555f7 sidebar: the account pill stays pinned once the inbox card has come and gone (#259)

VM cleanup: my Rust and tracer build dirs on dev-02 are deleted; worktrees ~/worktrees/j106* remain until the orchestrator prunes them.

**J106 finish.** Branch `row-actions-242-215`, head **`82c54c678`**, pushed (base `origin/dev` `17d282a18`, merged with dev `99668d8ab` along the way). Built into the real product, no mock flag. Evidence screenshots (production build, DPR 2 and 3) are in the two comments above on #242 and #215. **What is built** - #259 brought in as the base: merge of `sidebar-pill-259`; the two `inline-rename.ts` modules (dev's and #259's) are now one field (#259's `beginInlineRename`; dev's `inlineRename` is a thin wrapper, `.ui-rename-input` is gone). Rename's data path is dev's (#293). - #242: right-click, long press, Shift+F10 / menu key, trackpad sideways scroll, left and right swipes; End asks in its own row starting at the label's x; the continuous right swipe; every action of the focused row is a palette row. Escape closes a revealed row or the question first. - #215: hover pill (Rename, End/Remove; pointer only), double click and double tap rename (through the shared field), F2, Delete, remove host; "Access level" row and the consent from a window's pill → Host tab; palette "Allow full access on <host>". - Row actions, menu, swipes and pill load with the sidebar (on-demand chunk), not with the canvas. **Missing backends (not invented, see earlier comment):** End session (inventory `can.end` is false, #100): End, the left swipe and Delete-on-a-session do not appear in the product until it lands; privileged access (no server endpoint): the row and consent exist behind `Adapters.privilege`, unset in the product; host rename works only for hosts the Mesh knows (`mesh.node.rename`); host removal uses the existing passkey flow (its own card, not in-row). The consent's "?" goes to the Docs view; there is no privileges docs page yet. **For the owner:** on touch #215's mockup revealed the pill with a left swipe, #242 gives the left swipe to End/Close: I kept #242's swipes and the long-press menu on touch; the pill is hover-only. **Tests** (Playwright, production build, test double; desktop 1440×900 and phone 393×852): `row-menu`, `row-gestures`, `row-ask`, `replacement-alignment` (≤ 0.5 px, DPR 2 and 3), `row-swipe-continuity`, `sidebar-rename-remove`, `access-level`, plus #259's `mesh-rename` adapted to dev. Last full set (head `91440dc79`): 94 passed, 4 failed: 3 in `sessions-canvas.spec.ts` (lines 170, 370, 479) fail identically on unmodified `origin/dev` `17d282a18` (measured: 3 failed / 19 passed there), and the 4th (double click on an exited session whose list re-sorts) was fixed afterwards; `sidebar-rename-remove.spec.ts` on `82c54c678`: 10 passed. **Gate: `scripts/verify fast` does NOT pass: one failure, the deferred JavaScript budget.** The full gate ran on `8c548ce0c` (dev-02); since then only TypeScript changed (`git diff 8c548ce0c HEAD -- crates Cargo.toml Cargo.lock scripts` is empty). Rust part, verbatim: ``` | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | gate architecture | PASS | | static builds | PASS | +---------------------------+--------------+ x86_64: size 22422864 bytes; baseline 22418256; delta +4608 bytes (report only, D243 amended 2026-11-01) aarch64: size 20454096 bytes; baseline 20453280; delta +816 bytes (report only) ``` TypeScript part re-run on the final head (`82c54c678`, `tsc` and every `bun test` group: 0 fail), then: ``` JavaScript transfer, critical: identity=1006850 gzip=313843/327680 brotli=261710/273408 bytes JavaScript transfer, deferred: identity=179031 gzip=62025/61440 brotli=54702/55296 bytes JavaScript transfer, onDemand: identity=304405 gzip=121081/20480 brotli=107917/18432 bytes JavaScript transfer, onDemand largest chunk chunk-f7w4g32v.js: gzip=15464/20480 brotli=13803/18432 bytes (class total gzip=121081 brotli=107917, not limited) error: production deferred JavaScript exceeds its compressed transfer budget ``` Measured against dev (`99668d8ab`, same command): critical 311,046 gzip, deferred **61,276** (164 B under its cap), onDemand 109,459. Before I moved the row code on demand the deferred class was 68,009; now it is 62,025, i.e. **585 B gzip over the 60 KiB cap** (brotli is under). By the source diff the rest is the Mesh host rename of #259 and the tree's rename routing; I did not measure it per module, and I did not touch the gate. **Needs the orchestrator/owner: ratchet the deferred cap (D188 rule: measured size rounded up to a KiB plus a margin) or tell me what to cut.** Commits (oldest first): ``` 82c54c678 test(tracer): the rename double click aims at the name, as a person does (#215) 03701a66c ui: a double click is still one when the second release lands on the gap the rebuilt list left (#259, #215) 91440dc79 details: the consent pane stays in view while it grows into the popover (#215) 86ad8dc65 ui: a double click renames the row the first press was on, even if the list re-sorted under the pointer (#259, #215) 73f0710cc perf: the row menu, swipes and hover pill load with the sidebar, not with the canvas (D188, #242, #215) 8e0150821 sidebar: the pill ends a session with the stop square, and hides while the name is being edited (#215) 2f4ab7945 details: the consent pane spans the whole row and is brought into view when it opens (#215) a61603233 ui: a double click renames even when the first click rebuilt the list (#259, #215) 8c548ce0c sidebar: the hover pill sits left of a row's marks and notes, which keep their tooltips (#215, #259) 1f041d24f Merge origin/dev (99668d8ab) into row-actions-242-215 30094bf01 test(tracer): opt-in review captures of the row menu, swipes, rename and consent (#242, #215) 2fe75432f test(tracer): #259's rename checks follow dev's connection icon and the renamable sessions (#259, #212, #215) fa3131756 ui: a rename field takes the free room after a name that a clip cuts short (#259, #215) 99668d8ab Merge decisions-2026-11-02: D163 GotaTun on Linux, D317 docs structure 1d8af5c4a decisions: D163 Linux engine is GotaTun; D317 user docs structure cdff83eb0 Merge taste-2026-11-02: owner review rows from 2026-11-02 9ef53bbb9 taste: windows start at the layout's size and never overlap d67670c56 taste: descriptions say what a thing does, not what state it is in d251c0ad8 taste: content sits inside its container with an even inset 69ba50588 taste: Settings rows scroll as a whole, not window by window 203fd67d3 taste: pill menus centre on their pill; no dead buttons 4c8e22611 taste: windows keep their natural width and the canvas scrolls; popovers follow their anchor a479a8760 Merge size-baseline-ratchet: static size baselines match current dev (D243) a8926703a verify: ratchet the static size baselines to the current dev measurement (D243) c85e53e54 ui: a rename field on a fine pointer types in the size of the name it replaces (#259, #215) 3213ae21a palette: "Allow full access on <host>" opens the machine's consent (#215, D286) 3f2c9aeab test(tracer): every gesture and key of the sidebar's row menu, swipes, rename and consent (#242, #215) 0a4dd245b details: an "Access level" row and a consent that asks before the agent gets full access (#215, D286) fea95e752 ui: a key/value row can carry a pane that opens under it (#215, D160) 5784444f1 sidebar: an action pill on hover, F2 renames and Delete removes the focused row (#215) 1b3992370 sidebar: right-click, long press, Shift+F10 and swipes on rows; End asks in its row (#242, D309) a6498b99c ui: one row menu and swipe component, and the in-row question, for every list of rows (#242, D309) 294042b56 Merge fix-dev-red: dev green again after #291 (#307) d7984ca7d ui: the anchored popover opens at a point, the window menu gets a danger row 9919b28b1 ui: a spring can be flung, so a released drag carries on from the finger's speed (#242, D70) 33e91b0c9 Merge sidebar-pill-259: rename Mesh hosts in place, detached icon, pinned account pill (#259) 502d0fc7e Stabilize clean shim exit observation under load #307 f15a74866 Fix J96 server test regressions after #291 66d25769d sidebar: the tick, cross and dot on a session row get a tooltip in plain words (#259) e60f12434 test: the sidebar's tick, cross and dot explain themselves in a tooltip (#259) 44b3256f1 sidebar: a detached session shows an icon, not the word (#259) 648cc7774 test: a detached session in the sidebar shows an icon with a "Detached" tooltip (#259) 85cb920ee test: the rename field and the widened name pill never overlap the → pill (#259) 9fe1b7041 ui: the inline rename field stays inside the name's own box (#259) c747d9fbb test: the rename field must not sit under the status dot (#259) e86c2baf2 test: opt-in review captures of the pinned sidebar pill (#259) 845aa3e2c test: browser spec for renaming Mesh hosts in place (#259) 126c97190 palette: "Rename <host>" for the Mesh's hosts (#259) 16756de44 sidebar: rename a Mesh host by double click or double tap in the Views tree (#259) cae06fe17 mesh: rename a host by double click or double tap on its card (#259) ce31a7b52 ui: field placed over a name, and a double tap that survives a rebuilt list (#259) e3d803ff2 mesh: rename a host through mesh.node.rename in the Mesh API adapter (#259) 711032f75 ui: one inline-rename field and one double-tap gesture for every in-place rename (#259) 0172555f7 sidebar: the account pill stays pinned once the inbox card has come and gone (#259) ``` VM cleanup: my Rust and tracer build dirs on dev-02 are deleted; worktrees `~/worktrees/j106*` remain until the orchestrator prunes them.

kayg referenced this issue 2026-11-02 19:27:13 +00:00

Sidebar account pill drifts up from the bottom; rename Mesh hosts by double-tap #259

kayg commented 2026-11-02 19:45:27 +00:00

Author

Owner

Copy link

Decision recorded (owner, 2026-11-02, J106 round 2): on touch, #242's swipes (left = End/Close, right = Open beside) and the long-press menu win; #215's swipe-to-reveal pill is not built. The hover action pill is pointer-only (hover and a fine pointer). The backends flagged earlier (End behind #100, privileged access with no endpoint) stay hidden in the product.

Round 2 progress (branch row-actions-242-215, head 187f81759): deferred JS is cut, not the cap raised. Per-module numbers are in the commit messages of 59f6f46e2 and 3b05ee668. Deferred gzip 62,041 → 60,107 B (cap 61,440, headroom 1,333 B; brotli 52,994 of 55,296); merged with J100's ui-no-overshoot-scroll 58,696 B. Running verify fast and the browser specs on this head now.

**Decision recorded (owner, 2026-11-02, J106 round 2):** on touch, #242's swipes (left = End/Close, right = Open beside) and the long-press menu win; #215's swipe-to-reveal pill is not built. The hover action pill is pointer-only (hover and a fine pointer). The backends flagged earlier (End behind #100, privileged access with no endpoint) stay hidden in the product. **Round 2 progress (branch `row-actions-242-215`, head `187f81759`):** deferred JS is cut, not the cap raised. Per-module numbers are in the commit messages of `59f6f46e2` and `3b05ee668`. Deferred gzip 62,041 → 60,107 B (cap 61,440, headroom 1,333 B; brotli 52,994 of 55,296); merged with J100's `ui-no-overshoot-scroll` 58,696 B. Running `verify fast` and the browser specs on this head now.

kayg referenced this issue 2026-11-02 19:45:27 +00:00

Own context menu and swipe actions on rows (Views tree first) #242

kayg commented 2026-11-03 02:37:12 +00:00

Author

Owner

Copy link

J106 round 2 finish. Branch row-actions-242-215, head 5fa6334d7, pushed. Based on and merged with dev 816f9ab3e (J100 merged; also docs sections #311 and recovery #309). The cap is not raised: the code is cut.

Deferred JS (gzip bytes, bun run build && bun transfer-budget.ts)

	dev 816f9ab3e	this head
deferred	59,889 / 61,440 (brotli 52,786 / 55,296)	58,737 / 61,440 (brotli 51,856 / 55,296): headroom 2,703 B, brotli 3,440 B
critical	311,553 / 327,680	313,050
onDemand largest chunk	15,447 / 20,480	15,472

Per module, against dev 816f9ab3e (identity B / estimated gzip B: each module's share of its chunk by bytes in the output, from the bundler's metafile; head 9b3365e02, the last numbers are within 20 B of this head):

• deferred: toolbar/tree.ts +495 / +170 (the hooks only: loader of the row actions, the openRename hook, the phone's close delay), sessions/live.ts +62 / +30, mesh/lazy.ts +40 / +15, mesh/index.ts +39 / +15, toolbar/palette.ts +36 / +18, model/reconcile.ts +27 / +13, views/world.ts -146 / -37, toolbar/viewlist.ts -2,092 / -693, pill-morph.ts -2,719 / -994 (both now on demand behind a thin hook).
• critical: branched.ts +1,126 / +636, double-activate.ts (the gesture, new) +759 / +430, tooltip.ts +239 / +105, icons.ts +158 / +61, spring.ts +51 / +21, core-screen.ts +35 / +18 (13.2 KB under its cap).
• on demand now (no longer in either class): the rename field (inline-rename.on-demand.ts), toolbar/row-rename.on-demand.ts, mesh/rename.on-demand.ts, toolbar/palette-hosts.on-demand.ts (remove host, allow full access, rename a Mesh host rows), toolbar/viewlist.on-demand.ts, and with them the row menu, swipes, pill and the in-row question.
  Merged with J100 alone (before J100 reached dev, ui-no-overshoot-scroll onto this branch): deferred 58,696.
  Lesson recorded in the commit message: a dynamic import from deferred code of a module that on-demand chunks also import statically is turned into a static link by the bundler and moves nothing, so every importer of an on-demand module has to be on demand too.

Behaviour notes. Right-click, swipes and the pill attach a few milliseconds after the sidebar first opens (#tree[data-rows="ready"]); a double click before that does nothing. The view list opens from the first tap (it waits for its small chunk if idle loading has not finished). The palette's host rows are fetched as the canvas comes up. The row swipe has no bounce now (J100's rule; it did not compile against the new spring type, found by merging).

Gate: scripts/verify fast exit 0 on 5fa6334d7 (dev-02), verbatim:

5fa6334d7 test(tracer): the typing check puts the focus back on the page instead of waiting for a textarea (#259)
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| SSH runtime test helper   | PASS         |
| real-binary fixture paths | PASS         |
| test                      | PASS         |
| SSH inode reuse fixture   | PASS         |
| shim process-per-user     | PASS         |
| cargo-deny                | PASS         |
| gate architecture         | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Compiler metadata generator checks
8452:PT_INTERP: absent; size: 22468304 bytes; baseline 22418256; delta +50048 bytes (report only, D243 amended 2026-11-01)
8488:PT_INTERP: absent; size: 20487864 bytes; baseline 20453280; delta +34584 bytes (report only, D243 amended 2026-11-01)
9617:JavaScript transfer, critical: identity=1005057 gzip=313050/327680 brotli=261034/273408 bytes
9618:JavaScript transfer, deferred: identity=168016 gzip=58737/61440 brotli=51856/55296 bytes
9619:JavaScript transfer, onDemand: identity=325049 gzip=130653/20480 brotli=116421/18432 bytes
9620:JavaScript transfer, onDemand largest chunk chunk-jvsymf4e.js: gzip=15472/20480 brotli=13810/18432 bytes (class total gzip=130653 brotli=116421, not limited)
9235: 517 pass 9236: 0 fail 9446: 107 pass 9447: 0 fail 9517: 17 pass 9518: 0 fail 9708: 39 pass 9709: 0 fail VERIFY_EXIT=0

(Earlier runs failed on this branch and were fixed, in order: a tsc error in the row spring vs the no-overshoot type; two unit tests (the palette rename test and a cubic-bezier overshoot in the swipe icon, caught by J100's no-overshoot.test.ts); a Rust vt_credit test and a 5 s unit test timeout on a loaded machine, each passing when rerun alone and in the next full run.)

Browser specs (production build, test double, 1440×900 / 393×852; last full run on 75078b6d7): 194 passed, 12 failed. Eleven fail identically on unmodified dev 816f9ab3e (measured there: canvas.spec 302, 345, 626; clusters.spec 702, 837; glass-ghost 4 cases; sessions-canvas 170 and the manager-on-demand check), and the twelfth, "another device typed last" (sessions-canvas), was a focus race that fails about half the runs on dev (5 of 9) and every run here; fixed in the spec (the focus probe shows build-01's textarea holding the focus while nix-cache is active) and passing 4 of 4 on 5fa6334d7. palette-polish (375×667) and mesh-rename desktop failed in some runs and pass in the final one; the palette label measured 57.866 px on dev as well.

Commits of this round (oldest first):

5fa6334d7 test(tracer): the typing check puts the focus back on the page instead of waiting for a textarea (#259)
75078b6d7 test(tracer): "typing takes the size over" types into the window it is about (#259)
433b2781b test(tracer): #259's tree rename checks wait for the row actions to attach (#259, #215)
8faf00970 palette: the host rows' chunk is fetched as the palette is installed, not at idle (D188, #215)
b0cea3b72 test(tracer): the row-menu right-click check waits for the menu before Escape (#242)
1da414c09 test, ui: the palette rename test follows the Mesh rename module; the armed swipe icon eases without overshoot (#215, #242)
2690c3346 ui: the row spring is typed as a SpringConfig, so it compiles against the no-overshoot spring (#242)
9b3365e02 Merge origin/dev (816f9ab3e, J100 merged) into row-actions-242-215
816f9ab3e Merge ui-no-overshoot-scroll: no elastic overshoot; wheel scrolls the content under it (#308, D275)
fae83a7b1 sidebar: row actions announce when they are attached; the palette's host rows load promptly (D188, #242, #215)
b5099e3be Merge docs/j114-sections: user docs in D317 sections (#311)
79a43ae3c ui: the row spring states `bounce: 0`, which both the current and the no-overshoot spring types accept (#242)
0ef98fea8 docs: one heading per setting, with its default and range only in its quick facts (#311, D317)
7dd462e9e docs: sections, nested addresses, redirects and a check for "?" targets (#311, D317)
4b40ac8b4 tracer: moving a window and the free canvas's gestures load on demand (D188, #308)
187f81759 Merge origin/dev (92ee8d5ea) into row-actions-242-215
3464c4e13 ui: the row swipe settles without a bounce (#242, TASTE "No overshoot, ever")
3b05ee668 perf: the view list and its pill morph load on demand behind a thin hook (D188)
59f6f46e2 perf: the rename field, the tree's rename routing, the Mesh host rename and the host rows of the palette load on demand (D188, #215, #259)
92ee8d5ea Merge fix-recovery-restart: account recovery always waits 24 measured hours (#309, D25)
77616905a Checkpoint measured recovery progress each minute and at shutdown (#309)
52ad241ae Confirm recovery countdown readiness with server status (#309, D25)
c56854dbb tracer: wheel specs and TASTE rule for the wheel over docs pages and terminals (D275, #308)
7788d5bd8 tracer: a vertical wheel scrolls the content under the pointer; no elastic bump at the ends (D275, #308)
c400f6f94 taste: no overshoot, ever (#308)
214f4eea4 tracer: a unit check rejects springs and easings that overshoot (#308)
7dd27c0b7 ui: every spring is critically damped and every curve ends without overshoot (#308)
716183781 Send recovery completion notice in revoked socket teardown (#309)
3b0123b4b Measure recovery waits with persisted monotonic uptime (#309, D25)
8440d50e9 Restart expired recovery with fresh safety deadlines (#309)

VM: my ~/worktrees/j106* worktrees and targets on dev-02 are pruned.

**J106 round 2 finish.** Branch `row-actions-242-215`, head **`5fa6334d7`**, pushed. Based on and merged with dev `816f9ab3e` (J100 merged; also docs sections #311 and recovery #309). The cap is not raised: the code is cut. **Deferred JS (gzip bytes, `bun run build && bun transfer-budget.ts`)** | | dev 816f9ab3e | this head | |---|---|---| | deferred | 59,889 / 61,440 (brotli 52,786 / 55,296) | **58,737** / 61,440 (brotli 51,856 / 55,296): headroom **2,703 B**, brotli 3,440 B | | critical | 311,553 / 327,680 | 313,050 | | onDemand largest chunk | 15,447 / 20,480 | 15,472 | Per module, against dev 816f9ab3e (identity B / estimated gzip B: each module's share of its chunk by bytes in the output, from the bundler's metafile; head `9b3365e02`, the last numbers are within 20 B of this head): - **deferred:** `toolbar/tree.ts` +495 / +170 (the hooks only: loader of the row actions, the `openRename` hook, the phone's close delay), `sessions/live.ts` +62 / +30, `mesh/lazy.ts` +40 / +15, `mesh/index.ts` +39 / +15, `toolbar/palette.ts` +36 / +18, `model/reconcile.ts` +27 / +13, `views/world.ts` -146 / -37, **`toolbar/viewlist.ts` -2,092 / -693, `pill-morph.ts` -2,719 / -994** (both now on demand behind a thin hook). - **critical:** `branched.ts` +1,126 / +636, `double-activate.ts` (the gesture, new) +759 / +430, `tooltip.ts` +239 / +105, `icons.ts` +158 / +61, `spring.ts` +51 / +21, `core-screen.ts` +35 / +18 (13.2 KB under its cap). - **on demand now (no longer in either class):** the rename field (`inline-rename.on-demand.ts`), `toolbar/row-rename.on-demand.ts`, `mesh/rename.on-demand.ts`, `toolbar/palette-hosts.on-demand.ts` (remove host, allow full access, rename a Mesh host rows), `toolbar/viewlist.on-demand.ts`, and with them the row menu, swipes, pill and the in-row question. Merged with J100 alone (before J100 reached dev, `ui-no-overshoot-scroll` onto this branch): deferred 58,696. Lesson recorded in the commit message: a dynamic import from deferred code of a module that on-demand chunks also import statically is turned into a static link by the bundler and moves nothing, so every importer of an on-demand module has to be on demand too. **Behaviour notes.** Right-click, swipes and the pill attach a few milliseconds after the sidebar first opens (`#tree[data-rows="ready"]`); a double click before that does nothing. The view list opens from the first tap (it waits for its small chunk if idle loading has not finished). The palette's host rows are fetched as the canvas comes up. The row swipe has no bounce now (J100's rule; it did not compile against the new spring type, found by merging). **Gate: `scripts/verify fast` exit 0** on `5fa6334d7` (dev-02), verbatim: ``` 5fa6334d7 test(tracer): the typing check puts the focus back on the page instead of waiting for a textarea (#259) | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | SSH runtime test helper | PASS | | real-binary fixture paths | PASS | | test | PASS | | SSH inode reuse fixture | PASS | | shim process-per-user | PASS | | cargo-deny | PASS | | gate architecture | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Compiler metadata generator checks 8452:PT_INTERP: absent; size: 22468304 bytes; baseline 22418256; delta +50048 bytes (report only, D243 amended 2026-11-01) 8488:PT_INTERP: absent; size: 20487864 bytes; baseline 20453280; delta +34584 bytes (report only, D243 amended 2026-11-01) 9617:JavaScript transfer, critical: identity=1005057 gzip=313050/327680 brotli=261034/273408 bytes 9618:JavaScript transfer, deferred: identity=168016 gzip=58737/61440 brotli=51856/55296 bytes 9619:JavaScript transfer, onDemand: identity=325049 gzip=130653/20480 brotli=116421/18432 bytes 9620:JavaScript transfer, onDemand largest chunk chunk-jvsymf4e.js: gzip=15472/20480 brotli=13810/18432 bytes (class total gzip=130653 brotli=116421, not limited) 9235: 517 pass 9236: 0 fail 9446: 107 pass 9447: 0 fail 9517: 17 pass 9518: 0 fail 9708: 39 pass 9709: 0 fail VERIFY_EXIT=0 ``` (Earlier runs failed on this branch and were fixed, in order: a `tsc` error in the row spring vs the no-overshoot type; two unit tests (the palette rename test and a `cubic-bezier` overshoot in the swipe icon, caught by J100's `no-overshoot.test.ts`); a Rust `vt_credit` test and a 5 s unit test timeout on a loaded machine, each passing when rerun alone and in the next full run.) **Browser specs** (production build, test double, 1440×900 / 393×852; last full run on `75078b6d7`): 194 passed, 12 failed. Eleven fail identically on unmodified dev `816f9ab3e` (measured there: `canvas.spec` 302, 345, 626; `clusters.spec` 702, 837; `glass-ghost` 4 cases; `sessions-canvas` 170 and the manager-on-demand check), and the twelfth, "another device typed last" (`sessions-canvas`), was a focus race that fails about half the runs on dev (5 of 9) and every run here; fixed in the spec (the focus probe shows build-01's textarea holding the focus while nix-cache is active) and passing 4 of 4 on `5fa6334d7`. `palette-polish` (375×667) and `mesh-rename` desktop failed in some runs and pass in the final one; the palette label measured 57.866 px on dev as well. Commits of this round (oldest first): ``` 5fa6334d7 test(tracer): the typing check puts the focus back on the page instead of waiting for a textarea (#259) 75078b6d7 test(tracer): "typing takes the size over" types into the window it is about (#259) 433b2781b test(tracer): #259's tree rename checks wait for the row actions to attach (#259, #215) 8faf00970 palette: the host rows' chunk is fetched as the palette is installed, not at idle (D188, #215) b0cea3b72 test(tracer): the row-menu right-click check waits for the menu before Escape (#242) 1da414c09 test, ui: the palette rename test follows the Mesh rename module; the armed swipe icon eases without overshoot (#215, #242) 2690c3346 ui: the row spring is typed as a SpringConfig, so it compiles against the no-overshoot spring (#242) 9b3365e02 Merge origin/dev (816f9ab3e, J100 merged) into row-actions-242-215 816f9ab3e Merge ui-no-overshoot-scroll: no elastic overshoot; wheel scrolls the content under it (#308, D275) fae83a7b1 sidebar: row actions announce when they are attached; the palette's host rows load promptly (D188, #242, #215) b5099e3be Merge docs/j114-sections: user docs in D317 sections (#311) 79a43ae3c ui: the row spring states `bounce: 0`, which both the current and the no-overshoot spring types accept (#242) 0ef98fea8 docs: one heading per setting, with its default and range only in its quick facts (#311, D317) 7dd462e9e docs: sections, nested addresses, redirects and a check for "?" targets (#311, D317) 4b40ac8b4 tracer: moving a window and the free canvas's gestures load on demand (D188, #308) 187f81759 Merge origin/dev (92ee8d5ea) into row-actions-242-215 3464c4e13 ui: the row swipe settles without a bounce (#242, TASTE "No overshoot, ever") 3b05ee668 perf: the view list and its pill morph load on demand behind a thin hook (D188) 59f6f46e2 perf: the rename field, the tree's rename routing, the Mesh host rename and the host rows of the palette load on demand (D188, #215, #259) 92ee8d5ea Merge fix-recovery-restart: account recovery always waits 24 measured hours (#309, D25) 77616905a Checkpoint measured recovery progress each minute and at shutdown (#309) 52ad241ae Confirm recovery countdown readiness with server status (#309, D25) c56854dbb tracer: wheel specs and TASTE rule for the wheel over docs pages and terminals (D275, #308) 7788d5bd8 tracer: a vertical wheel scrolls the content under the pointer; no elastic bump at the ends (D275, #308) c400f6f94 taste: no overshoot, ever (#308) 214f4eea4 tracer: a unit check rejects springs and easings that overshoot (#308) 7dd27c0b7 ui: every spring is critically damped and every curve ends without overshoot (#308) 716183781 Send recovery completion notice in revoked socket teardown (#309) 3b0123b4b Measure recovery waits with persisted monotonic uptime (#309, D25) 8440d50e9 Restart expired recovery with fresh safety deadlines (#309) ``` VM: my `~/worktrees/j106*` worktrees and targets on dev-02 are pruned.

kayg referenced this issue 2026-11-06 13:12:33 +00:00

Promote an existing rootless infraternal agent to root: no server path yet (D139, D18, D274) #399

kayg commented 2026-11-08 19:04:29 +00:00

Author

Owner

Copy link

Closed by the orchestrator during the 2026-11-09 night housekeeping (owner order: "close stale prs/issues"). The work has landed on dev, and the latest note here is a finish or merge note (J387 inventory on #436). Reopen if anything is still missing.

Closed by the orchestrator during the 2026-11-09 night housekeeping (owner order: "close stale prs/issues"). The work has landed on dev, and the latest note here is a finish or merge note (J387 inventory on #436). Reopen if anything is still missing.

kayg closed this issue 2026-11-08 19:04:29 +00:00

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

j470b-server-mesh-rejoin

mesh-compat-382

j444b-d381-key-wins-flood

j461b-macos-utun-reader-thread

j475b-remove-host-motion

fix-reconnect-new-link

j481-d380

dev

j479-mesh-soak

fix/j476-host-facts

j475-motion-pill-split

j470-mac-node-join

root-upgrade-d376

j474-review-merge

latency-targets-120hz

nightly-suite-shards

gotatun-pin-j469

macos-utun-reader-thread

fix-flood-echo-stall

wip/j416

motion-fast-ease-out

mesh-addhost-j259

takeover-close-terminals-d368

kbd-instant-followups

fix-trust-key-double-click

nightly-suite-partial-report

appwin-icons-j207

rusqlite-slice1

swipe-content-first-d374

mesh-mtu-381

addhost-instant-open

glass-contrast-d365-mock

glass-contrast-d365

signout-followups-442

fix-startup-toast-red

research-gotatun-matrix-j317

themes-sync-j304

fix-load-flakes

fix-nix-zig-patch

fix-compute01-browser-baseline

ratchet-size-baseline-419

predict-auto-d130

revoke-coverage-d367

nightly-suite-queue-timeout

nightly-browser-suite

fix-rustsec-2026-0459

fonts-ioskeley-obel

log-retention-d375

fix-kbd-no-anim-427

fix-dev-red-specs-2

takeover-proof-305-j205

wip/j410-server-pump

ui-consistency-d372

fix-osc52-clipboard

libghostty-vt-1.0

forget-retired-host-d369

j404-merge-426

fix-setup-lock-race

fix-touch-select-426

revoke-access-report-ui

fix-predictive-echo-specs

fix-selinux-agent-exec

wip/j395-checkpoint2

wip/j395

j391-review-scratch

ui-consistency-j195-deferred-rebased

fix-rustc-paths-421

decisions-wording-341

fix-install-suite-red

fix-dev-rtt-specs

fix-pending-removal-align

fix-privileged-skip

fix-install-suite-404

review-j368

mesh-dns-j254

revoke-access-report-d356b

revoke-privilege-round5

fix-removal-confirm

review-j360

gotatun-rotation-367

deps-refresh-340

review-j354

review-J351

review-j350

addhost-takeover-d359

revoke-report-items-347

revoke-end-sessions-d362

review-j348

size-mesh-ssh-346

size-trim-337

revoke-access-diff-d356

j259-pre-rebase-b06c5a6

j305-ended-at-start-spec

addhost-sudo-consent

fix-layout-real-specs-411

fix-shell-open-411

fix-console-hosts-373

fix-shell-exit

fuzz-host-name-353

fix-host-details-410

macos-filter-j197

research-gotatun-tricks

revoke-p3-j216l

stale-state-pill

revoke-followups-j216k

revoke-progress-j216e

backup/macos01-20261106/lume/j197

backup/macos01-20261106/lume/appwin-icons-j207-stash0

backup/macos01-20261106/claude/stash-0

backup/macos01-20261106/claude/stash-1

backup/macos01-20261106/claude/J80-macos-s1

backup/macos01-20261106/claude/J80

backup/macos01-20261106/claude/J80-slice1-20261102

backup/macos01-20261106/claude/J16b-appwin-on-dev

backup/macos01-20261106/claude/appwin-launch-idle-146

backup/macos01-20261106/claude/J80-s1-run

wip/j259

trust-285-p3c

runtime-lock-j216f

mesh-ssh-p3-j175

tun-proof-p3b

trust-285-p3

terminal-polish-j271

tun-proof-p3

ssh-install-flakes-j216i

fuzz-fixes-j264

trust-285-a

trust-285-b

restart-oversized-fixture-j198

backup/macos01-20261106/lume/appwin-icons-j207

restart-bound-j216h

up-preflight-p3-j198

backup/macos01-20261106/lume/j251

up-preflight-j198

wip/up-preflight-j198-j245-p2

wip/up-preflight-j198-j245-p1

agent-fsync-offloop-j196

wip/up-preflight-j198-j245

settings-offscreen-j231

wip/up-preflight-j198-j226-inspection

wip/j103f

themes-j206

wip/up-preflight-j198-j226

flakes-j216c

backup/macos01-20261106/claude/j197

flakes-j216b

backup/macos01-20261106/claude/j197-red

wip/up-preflight-j198-review

flakes-j216

backup/macos01-20261106/claude/appwin-icons-j207

engineering-j208b

appwin-mock-j209

toast-stack-j165

engineering-j208

decisions-d351

decisions-d350

decisions-d349

appearance-presets-mock-j129

decisions-d348

docs-audit-spec

doc-coverage-baseline-raise

decisions-d347

decisions-d346b

decisions-d346

j88h-profile

ui-consistency-j195-deferred

ui-consistency-j195

engineering-practices-j194

preferred-login-ui-j166

signin-pools-263-j174

macos-node-265-s1

decisions-d345

decisions-d344

proxy-cgroup-j164

verify-quick-fuzz-329

proxy-start-io-j168

timing-flakes-j163

up-263-s1

mcp-events-j147

verify-quick-fuzz-j158

proxy-p3-j159

agent-resource-j157-detect

wip/j103d-final

remote-cancel-hang-j155

proxy-traefik-281-j62d

j149-verify-quick

proxy-traefik-281-j62b

j150-drop-unnamed

wip/j79d-red-r4

wip/j103d-d332

rootless-toast-j142

wip/j103d-head

wip/j103d

j125c-mcp

macos-build-j136

backup/macos01-20261106/claude/j136

wip/j79d-red-cli

wip/j79d-red-server

j121-link-liveness

j118c-tracer-failures

wip/j79c-head

release-desktop-j131

j124c-signed-macos

wip/j79c-red-p3

wip/j79c-red-p23

wip/j79c-red-p22

merge-j128-check

perf-deferred-j128

sidebar-toggle-260

j127-shortcut-changed-dot

j125-mcp

j118-tracer-failures

j126-account-summary

settings-sections-mock-j92

j120-pinch-lock

sidebar-292

backup/macos01-20261106/claude/j120

taste-2026-11-03

row-actions-242-215

backup/macos01-20261106/claude/stash-0-untracked

backup/macos01-20261106/claude/J80-265-s1-run

backup/macos01-20261106/claude/J80-macos-s1-20261102

j112-canvas-commands

ui-no-overshoot-scroll

fix-recovery-restart

backup/macos01-20261106/claude/stash-1-untracked

taste-2026-11-02

size-baseline-ratchet

machine-cards-structure-j108

j109-boot-copy-mockups

fix-dev-red

wip/up-263-s1

j95b-settings-rows

proxy-traefik-281

j95-option-rows

docs-human-j91

docs-keys-palette

fix-flood-1013-270-j38d

mesh-ssh-s1

mesh-ssh-s0

addhost-d291-tunnel

test-stability-load

mesh-relay-220

repro-296

shim-thp-off-24

mesh-pins-258-v2

mesh-dns

signin-d311-merged

docs-pages

ui-size-283

fix-ui-batch-specs

wip/j12b-edge-update

gate-on-arm

fix-rename-sync-293

trust-285-j60b

fix-focus-ring-clip

integ-ui-1101

edge-update-v2

signin-d311

taste-2026-11-01

layout-per-tab-250

ui-approved-splitopt-224

ui-approved-splitopt-224-on-dev

icon-text-centre-282

ui-approved-189-212-216

research-reverse-proxy

transfer-budget-320

review-mesh-pins-258-r2

sidebar-pill-259

review-mesh-relay-220

wip/j12-edge-update-v2

nix-package

status-crash-loop-237

fix-dev-test-failures

fix-fixture-socket-path

wip/mesh-relay-220-pre-dev-advance-rebase

fix-canvas-side-clip

research-head-to-head

frosted-real-256

review-mesh-pins-258

wip/mesh-relay-220-pre-final-rebase

review-layout-per-tab-250-r2

broad-suite-triage

nix-devshell

review-status-crash-loop-237-r3

wip/nix-devshell-pre-p3

taste-frosted-real

wip/code-serve-demo-2026-10-30

wip/code-serve-glass-2026-10-30

wip/code-serve-clusters-2026-10-30

wip/code-merge-release94-dev-2026-10-30

wip/rproxy-delta-scratch-2026-10-30

wip/stale-note-257-staged-2026-10-30

wip/d241-size-staged-2026-10-30

review-broad-suite-207

wip/mesh-pins-258-pre-split

wip/mesh-relay-220-pre-rebase

mesh-measure-220

plan-211-update

review-edge-autoupdate-r3

perf24-reconnect

review-stale-note-r2

release-prod-live

d241-shell-marker

review-mesh-pins-server-258

review-revocation-r3

review-setup-token-r2

review-sync-journal-r3

wip/review-mesh-pins-258-prune-review-1995fee46

frosted-scroll-256

sync-journal-r3

revocation-per-account-wip

review-tokio-asyncfd-0386

review-sync-p3s

wip/stash-8by64-stash0-2026-10-30

mesh-drag-r2

setup-token-data-wip

release-9-4

auth-busy-1013

mesh-view-overlap

sync-p3s

review-auth-busy-wake

review-readd-r8-wip

mesh-drag-bounds

audit-auth-93

app-windows-stream-start

review-authority-cap-r3

app-windows-r7-measure

readd-minimal-r6

readd-minimal-r5

app-windows-r7-soak

readd-minimal-r4

app-windows-r7

app-windows-r6

readd-minimal-r3

readd-minimal-r2

readd-minimal

merge-release8-dev

review-busy-page-liveness-r2

review-busy-page-liveness

mesh-view-trim

review-authority-read-retry-r2

review-remove-uninstall-r2

release-retry-reattach

release-retry

review-remove-uninstall

review-authority-read-retry

app-windows-ship

mesh-autoswitch-p2

mesh-ssh

mesh-relay

mesh-macos-node

screen-and-control

session-labels

review-real-logins-r5

review-real-logins-r4

review-real-logins-r3

shim-memory-r2

review-real-logins-r2

shim-memory

shadow-addhost-instant

shadow-real-logins

shadow-same-session-flood

shadow-prod-perf-fix

hosts-from-server

app-windows-real

app-windows-transport

release-prod-6w

mesh-policy-verify

quiet-close-toast

dev-merge-r4

review-mesh-agent-transport

review-app-windows-transport

settings-roundtrip

review-release-pipeline-r4

mesh-agent-transport

ended-strip-fix

review-audit-ca-update-d244

settings-rows

phone-width

signout-clear

fix-restart-tests

dev-merge-rp

signer-hardening

review-audit-ca-update

terminal-fidelity

review-audit-ca-update-wip

mesh-integrate

review-mesh-agent-transport-515d3712

review-mesh-dataplane-feec1988

mesh-dataplane

signout

research-canvas-node

wip/review-renderer-cost

wip/review-terminal-fidelity

padlock-glyph

review-release-pipeline-2e95b689

phone-polish

sidebar-polish

inbox-generic

review-mesh-dataplane-378d4055

prod-batch

ui-inbox

ui-ca-unlock

ui-machine-sections

review-mesh-dataplane-a5f744fb

tls-session-prod

session-bounds-prod

fix-dead-session

session-bounds

tls-session

palette-polish

shortcuts-d222

research-appmeta

phone-gutter

ui-centre-button

wip/ui-centre-button

wip/tls-session

review-addhost-breakit

ui-platform

renderer-cost

remote-agents

mesh-api

ssh-bootstrap

prod-hotfix2

prod-fixes

review-remote-agents

review-mesh-dataplane

session-life

research-browser

review-mesh-api

research-capture

review-mesh-api-round3

review-mesh-api-round1

gate-stability

review-gate-stability

review-relay-direct

review-mesh-api-findings

proto-sessions

font-picker

proto-addhost

proto-windows

mesh-core

latency-gate

research-bsd

research-discovery

keytray-mods

mock-core

ui-tweaks

fix-motion-sel

fix-motion

integrate2

fix-robust

t-web

t-server

vt-ghostty

fix-snap-echo

t-web-auth

review-vt2

t-agent

lane-protocol

lane-shim

lane-auth

s1-base

s1-contracts

s1-workspace

No results found.

Labels

Clear labels   

launch-qa

Findings from launch QA.

No labels

launch-qa

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

kayg/infraternal#215

No description provided.