fix(android): reject self-provider picker roots - #446

Open

veryCrunchy wants to merge 223 commits into

fix/durable-upload-scheduling-recovery-stackfrom

fix/picker-provider-feedback

Commits on Sep 9, 2026

feat(accounts): add platform credential slots
veryCrunchy
committed
93631d6
chore(changelog): link pull request
veryCrunchy
committed
cf90d81
fix(accounts): serialize credential lifecycle state
veryCrunchy
committed
32f6c79
fix(accounts): preserve retained account recovery
veryCrunchy
committed
eee6c83
fix(android): defer retained-account uploads
veryCrunchy
committed
d62cea8
fix(accounts): harden credential recovery races
veryCrunchy
committed
5f17d3f
fix(accounts): coordinate background account work
veryCrunchy
committed
83ea0d9
fix(accounts): close credential lifecycle races
veryCrunchy
committed
04c2a0a
fix(accounts): close remaining removal races
veryCrunchy
committed
4f6fa2a
fix(accounts): preserve credential recovery invariants
veryCrunchy
committed
1c31b71
fix(accounts): retire account-bound transfer resources
veryCrunchy
committed
cec7136
fix(accounts): preserve active resource identity
veryCrunchy
committed
1e404f6
fix(android): serialize account-bound writebacks
veryCrunchy
committed
6a1f33e
fix(accounts): retain credential recovery paths
veryCrunchy
committed
5dcc9c0
fix(android): close credential recovery gaps
veryCrunchy
committed
30941b0
fix(accounts): close remaining transition races
veryCrunchy
committed
3965ead
fix(accounts): retire removed account resources
veryCrunchy
committed
b477088
fix(accounts): close recovery transition gaps
veryCrunchy
committed
32fd78b
fix(accounts): harden credential recovery boundaries
veryCrunchy
committed
1cbd3fc
fix(accounts): serialize account-bound mutations
veryCrunchy
committed
5040557
fix(accounts): preserve removal recovery state
veryCrunchy
committed
de408fa
fix(accounts): preflight account-bound transitions
veryCrunchy
committed
44e8071
fix(accounts): close retained-session safety gaps
veryCrunchy
committed
4a851d9
fix(accounts): finish committed account transitions
veryCrunchy
committed
0e96293
fix(accounts): isolate credential recovery mutations
veryCrunchy
committed
aa76381
fix(accounts): preflight sync ownership on removal
veryCrunchy
committed
6b9ff27
fix(accounts): reject unsupported desktop registries
veryCrunchy
committed
262127b
fix(accounts): retain removal cleanup ownership
veryCrunchy
committed
628d2ca
fix(accounts): finish removal recovery
veryCrunchy
committed
db72523
fix(accounts): harden transition recovery
veryCrunchy
committed
d4db556
fix(accounts): harden damaged state recovery
veryCrunchy
committed
9ecd00c
fix(accounts): complete removal isolation
veryCrunchy
committed
b54d88d
test(accounts): verify durable root cleanup
veryCrunchy
committed
f721f91
fix(accounts): harden removal recovery
veryCrunchy
committed
f198eb0
fix(accounts): fail closed on recovery tombstones
veryCrunchy
committed
8b11831
test(accounts): split removal recovery coverage
veryCrunchy
committed
10157c7
fix(accounts): quiesce Linux writes before removal
veryCrunchy
committed
fbc8764
fix(accounts): persist desktop cleanup markers first
veryCrunchy
committed
5e6da1b
fix(accounts): recover Android accounts before enumeration
veryCrunchy
committed
0eb5e5d
fix(accounts): retry Android removal cleanup
veryCrunchy
committed
97e9e13
test(desktop): inject FUSE ownership in lifecycle tests
veryCrunchy
committed
a847037
fix(accounts): harden Android removal recovery
veryCrunchy
committed
83e6b7b
fix(uploads): preserve retained account queues
veryCrunchy
committed
d6dfd46
fix(accounts): journal desktop credential transitions
veryCrunchy
committed
8c370d3
refactor(desktop): decouple Linux cleanup lifecycle
veryCrunchy
committed
c405223
fix(desktop): clear recovered Cloud Files failures
veryCrunchy
committed
908507d
fix(accounts): preserve distinct legacy cleanup keys
veryCrunchy
committed
5b536d7
test(desktop): invoke lifecycle failures explicitly
veryCrunchy
committed
48f99de
fix(desktop): count lazy hydration as live
veryCrunchy
committed
84298c4
fix(accounts): quarantine malformed removal journals
veryCrunchy
committed
260d2bd
fix(accounts): close Android removal races
veryCrunchy
committed
1daa249
fix(desktop): finish sign-out after revocation
veryCrunchy
committed
2d6fcb6
fix(sync): retire account SAF state safely
veryCrunchy
committed
9d9e98f
fix(sharing): defer uploads for unreadable accounts
veryCrunchy
committed
dc2635c
fix(desktop): quiesce Cloud Files on sign-out
veryCrunchy
committed
99ab7be
refactor(accounts): share retained identity policy
veryCrunchy
committed
1f03da9
fix(desktop): return quiescence outcome
veryCrunchy
committed
eb003fb
test(desktop): prove callback drain ordering
veryCrunchy
committed
d8bb7af
fix(desktop): disable reads after failed FUSE unmount
veryCrunchy
committed
3008c67
fix(android): recover credential slots before selection
veryCrunchy
committed
9963216
fix(android): complete account retirement cleanup
veryCrunchy
committed
ee428b0
fix(desktop): harden account removal recovery
veryCrunchy
committed
7f37455
fix(accounts): preserve unreadable retained slots
veryCrunchy
committed
e75f752
fix(android): quiesce account file cache reads
veryCrunchy
committed
2253d2e
fix(accounts): preserve desktop rollback selection
veryCrunchy
committed
4f13f42
fix(accounts): retry desktop removal cleanup
veryCrunchy
committed
aa4e460
fix(desktop): remove accounts without loading secrets
veryCrunchy
committed
036511d
fix(windows): purge removed Cloud Files roots
veryCrunchy
committed
81e33d9
fix(android): revoke handoffs across account transitions
veryCrunchy
committed
bc5a26e
fix(accounts): retain preview cleanup recovery
veryCrunchy
committed
b2b1f83
test(accounts): fix preview cleanup fixtures
veryCrunchy
committed
9065961
fix(accounts): clear unreadable active ownership
veryCrunchy
committed
1b0a940
fix(accounts): preserve unreadable removal rollback
veryCrunchy
committed
56d4800
fix(accounts): retain original preview retry identity
veryCrunchy
committed
396609f
fix(uploads): retain jobs for unreadable account registry
veryCrunchy
committed
d447aa4
fix(desktop): recover malformed cleanup phases
veryCrunchy
committed
5221e8d
fix(android): finish committed account selection
veryCrunchy
committed
a37b2c4
fix(accounts): purge retained mutation recovery
veryCrunchy
committed
ea9acbd
fix(accounts): persist mutation cleanup retries
veryCrunchy
committed
330ed9f
fix(account): purge private state after removal
veryCrunchy
committed
ba32b37
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
139c220
fix(account): serialize private-state publication
veryCrunchy
committed
8858e08
fix(account): purge removal residual state
veryCrunchy
committed
e04fd66
fix(desktop): clear legacy handoffs on removal
veryCrunchy
committed
a2d4b09
test(android): make media cleanup deterministic
veryCrunchy
committed
6c240a4
fix(account): close residual cleanup races
veryCrunchy
committed
71c60c8
fix(desktop): reserve external handoff cache budget
veryCrunchy
committed
8c51d43
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
3ea964b
fix(desktop): recover credential removals
veryCrunchy
committed
ecaf99e
fix(desktop): validate handoff paths portably
veryCrunchy
committed
cb6c6e6
fix(accounts): retire deck draft state
veryCrunchy
committed
bcd1836
fix(desktop): delete read-only handoff copies
veryCrunchy
committed
bf4f21f
fix(accounts): harden retained account recovery
veryCrunchy
committed
5598786
fix(accounts): gate credential recovery transitions
veryCrunchy
committed
8e55759
chore(architecture): lower Android service baseline
veryCrunchy
committed
c167e28
fix(android): serialize conditional file creation
veryCrunchy
committed
f501e08
test(android): cover offline account recovery policy
veryCrunchy
committed
bc317fa
refactor(desktop): preserve compact session boundary
veryCrunchy
committed
449489f
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
f3a26a1
fix(accounts): purge removed private state
veryCrunchy
committed
6383844
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
ca9b1d9
fix(accounts): purge private state on removal
veryCrunchy
committed
c4b9068
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
c54a0ad
fix(accounts): fence private cache retirement
veryCrunchy
committed
7055dd5
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
f2c5359
fix(accounts): finish private state cleanup
veryCrunchy
committed
2f09ad2
fix(desktop): clear removed account state
veryCrunchy
committed
32f97e9
fix(ui): validate workspace cleanup identity
veryCrunchy
committed
fd10112
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
a626ade
fix(accounts): close remaining retirement races
veryCrunchy
committed
f3c0647
fix(accounts): close desktop cleanup gaps
veryCrunchy
committed
412f36b
fix(accounts): quiesce android private activity
veryCrunchy
committed
5d63343
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
31c7c7e
fix(android): reuse account lease for provider mutation lookups
veryCrunchy
committed
eadef3d
fix(android): preserve account-owned background uploads
veryCrunchy
committed
3bdd646
chore(changelog): link account background upload fix
veryCrunchy
committed
a770194
docs(platform): bind uploads to supplied sessions
veryCrunchy
committed
1843de9
refactor(platform): keep upload contract compact
veryCrunchy
committed
2f7800b
fix(android): honor durable upload account lease
veryCrunchy
committed
3de794e
refactor(android): own durable upload execution
veryCrunchy
committed
f63bda7
fix(uploads): recover worker account metadata
veryCrunchy
committed
d400a48
fix(uploads): defer ambiguous account recovery
veryCrunchy
committed
5cfe4d8
fix(uploads): retire removed account work
veryCrunchy
committed
47a915e
refactor(accounts): keep registry adapter bounded
veryCrunchy
committed
41ade6c
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
7b9e6cc
refactor(accounts): keep Android services bounded
veryCrunchy
committed
d5c6611
refactor(android): keep upload resolution bounded
veryCrunchy
committed
c7a93dc
fix(uploads): contain corrupt registry preference
veryCrunchy
committed
b04f8b6
fix(uploads): retry corrupt registry preference
veryCrunchy
committed
93752cf
refactor(platform): keep recovery contract bounded
veryCrunchy
committed
54386f6
fix(accounts): preserve background recovery state
veryCrunchy
committed
7367e96
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
d815af9
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
58ee098
fix(platform): honor the source size ceiling
veryCrunchy
committed
147e3c4
fix(uploads): quarantine unreadable queues
veryCrunchy
committed
bfcfd0f
fix(uploads): stop retrying malformed registries
veryCrunchy
committed
3f6a01a
fix(android): preserve queued upload scheduling
veryCrunchy
committed
c37a6f5
chore(changelog): link upload scheduling fix
veryCrunchy
committed
017ac03
fix(android): restore queued uploads at startup
veryCrunchy
committed
4706996
fix(android): retain startup upload retries
veryCrunchy
committed
f6c447d
fix(android): retain upload reconciliation after journal errors
veryCrunchy
committed
508eb69
fix(android): defer uploads during credential recovery
veryCrunchy
committed
1ab9847
fix(uploads): skip WorkManager-owned recovery jobs
veryCrunchy
committed
291f796
fix(uploads): bound credential recovery retries
veryCrunchy
committed
f6f1ca9
fix(uploads): recover registry before worker rejection
veryCrunchy
committed
01a43e8
fix(uploads): keep credential recovery deferred
veryCrunchy
committed
a75a06b
fix(uploads): bound startup recovery diagnostics
veryCrunchy
committed
8969213
fix(uploads): wake failed scheduling recovery
veryCrunchy
committed
e2c0806
fix(uploads): wake recovery after worker failure
veryCrunchy
committed
984982c
fix(uploads): close recovery wakeup races
veryCrunchy
committed
6feb0d9
fix(uploads): centralize queued status recovery
veryCrunchy
committed
3b0c3f8
fix(uploads): back off worker recovery
veryCrunchy
committed
428514b
fix(uploads): defer transient source failures
veryCrunchy
committed
19aa454
fix(uploads): fail permanently unavailable sources
veryCrunchy
committed
4b51467
fix(uploads): release cancelled unowned selections
veryCrunchy
committed
adfea37
fix(uploads): retry terminal capability cleanup
veryCrunchy
committed
b413b94
fix(uploads): retain pending capability cleanup
veryCrunchy
committed
4a1c61c
test(uploads): cover legacy cleanup marker
veryCrunchy
committed
2cdfd55
fix(uploads): recover pending capability cleanup
veryCrunchy
committed
0e2cb3e
test(uploads): keep cleanup cancellation test void
veryCrunchy
committed
d7f9b4b
fix(uploads): decouple terminal cleanup recovery
veryCrunchy
committed
7c54894
fix(uploads): validate persisted cleanup marker
veryCrunchy
committed
c08afb5
fix(uploads): run terminal cleanup offline
veryCrunchy
committed
5de864e
fix(uploads): preserve cleanup with corrupt registry
veryCrunchy
committed
f03c0fb
fix(uploads): retain unreadable capability metadata
veryCrunchy
committed
06d3590
fix(uploads): clean cancelled picker grants
veryCrunchy
committed
e2cd3e0
fix(uploads): release undelivered picker selections
veryCrunchy
committed
baa3271
fix(uploads): recover orphaned picker grants
veryCrunchy
committed
4a4eba7
fix(uploads): preserve immediate recovery intent
veryCrunchy
committed
989b704
fix(uploads): enforce picker capability limit
veryCrunchy
committed
ff8222a
fix(uploads): consume scheduling wakeups atomically
veryCrunchy
committed
eba8536
fix(uploads): defer capability metadata read failures
veryCrunchy
committed
29b63fd
fix(uploads): reject malformed capability metadata
veryCrunchy
committed
96e90b0
fix(uploads): isolate malformed picker capabilities
veryCrunchy
committed
9b60b71
fix(uploads): protect owned malformed capabilities
veryCrunchy
committed
b20aceb
test(uploads): split account resolution coverage
veryCrunchy
committed
3af2a62
fix(uploads): reject corrupt capability ciphertext
veryCrunchy
committed
df6d4b2
refactor(platform): preserve service size boundary
veryCrunchy
committed
d276894
chore(website): refresh marketing captures

obiente-automations[bot]
authored and
veryCrunchy
committed
323ed12
fix(uploads): bound capability recovery
veryCrunchy
committed
97e529d
fix(uploads): coalesce terminal recovery
veryCrunchy
committed
815a974
fix(uploads): quarantine unknowable capability cleanup
veryCrunchy
committed
94b3f5c
fix(uploads): terminate quarantined cleanup
veryCrunchy
committed
f4216a3
fix(uploads): bound storage and preserve recovery backoff
veryCrunchy
committed
d553758
fix(uploads): finish stable malformed-peer cleanup
veryCrunchy
committed
50db150
fix(android): reject self-provider picker roots
veryCrunchy
committed
e8c0717
chore(changelog): record picker provider guard
veryCrunchy
committed
65b0aff
fix(android): preflight self-provider sync roots
veryCrunchy
committed
7bcfee5
fix(android): recover legacy picker roots safely
veryCrunchy
committed
af7d7bc
fix(android): prepare account removal before lease
veryCrunchy
committed
75da6a5
fix(android): bind provider recovery to removed account
veryCrunchy
committed
b5c8ccb
refactor(android): split picker persistence helpers
veryCrunchy
committed
32925b6
fix(android): retain unclassified download recovery
veryCrunchy
committed
6d34a92
fix(android): revalidate account removal under lease
veryCrunchy
committed
8a45c14
fix(android): harden legacy provider retirement
veryCrunchy
committed
472976e
fix(android): recover moved provider directories
veryCrunchy
committed
ef91456
refactor(android): preserve sync engine boundary
veryCrunchy
committed
8e3b47b
fix(android): order provider recovery account fencing
veryCrunchy
committed
4fb89d4
fix(android): scope legacy SAF retirement completion
veryCrunchy
committed
2fa9a3d
fix(android): prepare malformed reset before lease
veryCrunchy
committed
70a4c3e
fix(accounts): fence complete dynamic read lifetimes
veryCrunchy
committed
fc550cf
fix(accounts): persist credential rollback completion
veryCrunchy
committed
ef0f432
fix(deck): retire legacy drafts before replacement
veryCrunchy
committed
6fe80d0
fix(deck): retain legacy submission tombstones during cleanup
veryCrunchy
committed
a64f83b
Merge branch 'feature/account-credential-slots' into fix/account-background-isolation
veryCrunchy
committed
8d1c884
fix(android): reuse recovery lease for provider range reads
veryCrunchy
committed
bd11db7
chore(android): tighten document provider size baseline
veryCrunchy
committed
923cf9f
fix(android): bound upload scheduling recovery passes
veryCrunchy
committed
2530237
Merge branch 'fix/account-background-isolation' into fix/durable-upload-scheduling-recovery-stack
veryCrunchy
committed
c568dca
test(android): group scheduling monitor regressions by owner
veryCrunchy
committed
1662b7a
Merge branch 'fix/durable-upload-scheduling-recovery-stack' into fix/picker-provider-feedback
veryCrunchy
committed
7f93ecb
fix(android): coalesce cleanup recovery self wakeups
veryCrunchy
committed
9d2c9f0
Merge branch 'fix/durable-upload-scheduling-recovery-stack' into fix/picker-provider-feedback
veryCrunchy
committed
606098f

Commits on Sep 13, 2026

fix(android): fence account removal and provider recovery reads
veryCrunchy
committed
400adb2

Uh oh!

Commits

Commits on Sep 9, 2026