Skip to content

Launch same-extension commands with bounded context - #103

Merged
moikdev merged 6 commits into
mainfrom
enhancement/bounded-command-handoff
Nov 4, 2026
Merged

moikdev merged 6 commits into
mainfrom
enhancement/bounded-command-handoff

Conversation

@moikdev

@moikdev moikdev commented Nov 4, 2026

Copy link
Copy Markdown
Owner

Fixes #100.

Quick Translate previously stopped at unsupported launchCommand. Foreground same-extension launches now validate the installed target, configuration and bounded options, transfer copied arguments/plain JSON context/fallback into a fresh invocation, revoke the parent's raw input grant and acknowledge initiation. Retired parent operations cannot control the child. Disposed Back/Preferences controls also reject callbacks after recreation or a route round trip.

Real frozen Quick Translate now reaches its child, copies the exact observed output and returns to the unchanged owned source on tablet/phone 100%, phone 200% and short-landscape 200%. Edited input is test setup; this certifies neither physical typing nor translation quality. Background/cross-extension/menu-bar launches, Date/Buffer revival, full Store/platform parity and #101 paste fallback remain outside this change.

Validation: 44 final Android passes /34 whole cohorts /654 successful restoration checks; two common-harness old-app controls retain zero passes and 36 checks. Historical failures and the zero-execution evidence-directory preflight remain distinct. Host receipts record 289 JVM passes, 111 Python cases per mode, successful debug/benchmark builds and fresh lint 0 errors/55 warnings each. All ten packaged assets/notices are unchanged. The report and checkpoint bind 220 sources, 459 public files, 49 real capture sets and 667 original capture hashes. Current main/build/JVM sources match frozen app source 56134f31; final protocol instrumentation binds 73e719c6. APKs are distinct; no stamp-only equivalence is assumed.

Hosted exact-head CI and both independent gpt-6.1-sol/high audits remain pending; local results are separate. Merge requires those gates and an expected-head check.

Actual API36 Tinycast_Tablet_API_36 captures: phone 1080×2340/420dpi, tablet 1920×1200/240dpi; selected 200% functional smoke, without comprehensive typography/accessibility certification. Full source-return and error/callback limits are documented in the report.

Before: actual frozen Quick Translate stops at unsupported handoff

After: actual child result following the owned input edit

Exact provider output copied before source return

Unchanged owned external source and selection after return

Controlled retained-callback protocol after actual Activity recreation, using the same instrumentation on intermediate/repaired apps:

Before: invoking retained Back closes the recreated child

After: recreated child and copied context remain current

Owned Unicode context at 200% phone text before exact Copy

moikdev commented Nov 4, 2026

Copy link
Copy Markdown
Owner Author

Root local gate at exact head ac08c70: 44 final Android passes /34 whole cohorts /654 successful restoration checks; two final common-harness intended negatives /zero passes /36 checks. Overall retained executed evidence remains 65 attempts /60 passes /five failures /1,040 checks; the refused legacy preflight adds zero executions. Source/Git verification matched 220 current hashes, all 459 indexed public files, 49 raw selected triplets and preserved CRLF; all 87 public XMLs parse. Both final instrumentation variants compile and fresh lint is 0 errors/55 warnings each. JVM289 and Python111/mode retain their documented source reuse. All ten packaged assets/notices match the before app. Final root preservation reconfirmed the original 12 durable files and 528 evidence files on the same emulator boot, with the staging owner absent and adbd unprivileged. Original clipboard/snapshots/backups remain private. Independent full-change gpt-6.1-sol/high correctness/security and UX/provenance audits are next; exact-head hosted CI remains a separate merge gate.

moikdev commented Nov 4, 2026

Copy link
Copy Markdown
Owner Author

Independent correctness/security and collector-soundness audit completed at exact head ac08c70 using gpt-6.1-sol/high: scoped no findings. The reviewer independently checked the complete base-to-head change, affected callers, source/APK boundaries, 459 public files, 220 source hashes, 343 transforms, 116 projections, 667 retained capture hashes, 49 selected capture sets and recorded 44 final positives/654 restoration checks. Work remained read-only; recorded checks were inspected, not rerun, and private originals were excluded. The sole CI snapshot observed Android run 41891290088 still in progress. The separate UX/provenance audit and root's final exact-head gates remain required; merge is not cleared.

moikdev commented Nov 4, 2026

Copy link
Copy Markdown
Owner Author

Final root gate at reviewed head ac08c70: both independent full-change audits completed as gpt-6.1-sol/high with scoped no findings. The UX auditor viewed all 49 actual public PNGs and checked paired receipts, source/binary bindings, declared projections and retained accounting; the correctness auditor separately traced ownership, bounds, cancellation, acknowledgement/disposal and recovery. Both confirmed the exact clean checkout at startup and immediately before reporting, made no mutations, ran no tests and excluded private originals. Root independently read actual Android run 41891290088: matching head_sha, event pull_request, completed/success; local/android status 58076566712 is separately successful. PR head/base remain ac08c70/517a650d. Recorded local checks and limitations remain as documented. Root will use normal merge with the expected-head guard; this grants no broader parity or production clearance.

@moikdev
moikdev merged commit 987b78a into main Nov 4, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support bounded same-extension command handoff with explicit launch context

1 participant