12 Commits

Include renames

Author	SHA1	Message	Date
mesalogo	59a28209d3	test: match storage cancellation behavior	2026-10-08 10:48:44 +08:00
mesalogo	9788b4cd8e	test: make cancellation fixture deterministic	2026-10-08 10:21:55 +08:00
mesalogo	c90ad2af6f	test: accept client readiness loss error	2026-10-08 09:57:54 +08:00
mesalogo	95ece25c37	test: reject calls after confirmed storage loss	2026-10-08 09:40:38 +08:00
mesalogo	c4ab83a7e3	test: wait for storage loss state before retry	2026-10-08 02:53:56 +08:00
mesalogo	7eb113028f	test: keep crash write messages unique	2026-10-08 02:37:31 +08:00
mesalogo	5ba127e332	test: accept storage readiness loss during crash	2026-10-08 02:16:49 +08:00
mesalogo	95f441958d	test: make storage loss rejection deterministic	2026-10-08 01:06:13 +08:00
mesalogo	384683e861	test: stabilize storage loss validation races	2026-10-08 00:39:03 +08:00
mesalogo	7eb51bd5ff	test: isolate utility process database permissions	2026-10-07 23:26:37 +08:00
mesalogo	8473189fe2	perf(concurrency): remove unsupported product admission limits	2026-10-07 15:52:07 +08:00
mesalogo	d80d42b032	feat(storage): move desktop SQLite ownership into a storage utility process ... Main no longer opens desktop business SQLite. A single utility-process storage owner holds the Assistant, Knowledge, attachment, document-result, remote-binding and native model-ledger databases and runs whole domain transactions; Main and Runtime callers use explicit async domain operations. - Remove the Main readWithFallback path and the supervision worker's separate business write connection; manifests are scanned read-only and committed by the sole writer. - Remote events are ACKed only after commit; process loss reports unconfirmed writes instead of replaying them. - Use native utilityProcess messaging with one in-flight bound (32) and ordered waiting instead of capacity rejection and retries. - Start the storage process before the window so startup overlaps. - Keep short tool output in memory and store full output once in owned storage; paging, branching, restart and deletion reuse that copy. - Put required runtime launch files under goodbuddy-prefixed owned temp directories and reclaim confirmed stale ones; stop writing duplicate parsed.md. - Add lint guards for SQLite ownership and architecture, concurrency acceptance fixtures, and maintenance/architecture documentation. Validation: typecheck and lint pass. Alternating baseline (edf019aa) vs candidate runs show no regression on single-session, C01, C02, C04 and a 5-minute C06; Main p99 drops from ~21 ms to ~16.7 ms under concurrency. Fresh portable copy (1.75M events) upgrade content unchanged; real-model output paging passes with 4 external requests. Full npm test runs had 1-9 different timing-sensitive failures per run that pass when rerun. Not covered: C03 review publication, C07 source body, app-level C05.	2026-10-06 15:40:18 +08:00