Skip to content

feat(multiverse): private immutable Desktop Stop transport - #7343

Draft
loganj wants to merge 1 commit into
feat/desktop-capabilities-fff852bdfrom
feat/desktop-stop-transport-fab2f134
Draft

loganj wants to merge 1 commit into
feat/desktop-capabilities-fff852bdfrom
feat/desktop-stop-transport-fab2f134

Conversation

@loganj

@loganj loganj commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator

Remote Stop 1/5 — 488 changed lines

NIP-44 owner-to-self kinds 50180/50181, authenticated envelope/correlation, private relay ingress/query/fanout, explicit same-event redelivery without repeated relay effects.

Migration 0048 requires deployment scheduling: rebuilding generated search_tsv rewrites events under ACCESS EXCLUSIVE and rebuilds GIN. Fresh and populated upgrades exclude these ciphertext kinds. Migration is not run on deployed databases by this PR.

Draft status and validation

Part of the dependent Multiverse Remote Stop stack on #7333. Not merge-ready or deployed. Ordinary host Stop only; Start/Restart/Move placement and launch-side broker integration remain follow-on work. No native two-Desktop acceptance has been performed.

Aggregate candidate 9ce501a671822cf6c8511a0c3687aad8eb56acb7: full Desktop JS 6,255 passed; full native 3,171 passed, 19 ignored, plus 7 CSP and 3 mixer integration tests; Desktop production build passed (OSS feature variant, not a normal internal release DMG). Workspace/all-target Clippy, Rust/Tauri formatting, Desktop static checks and web checks passed in the aggregate just ci attempt. just ci is incomplete: isolated mobile dependency resolution cannot reach pub.dev; no broad-green claim. Static code review was performed directly; no independent human approval claimed.

Relay/DB validation on exact aggregate product head 9ce501a6 passed all 343 selected PostgreSQL tests, including private storage/query, exact stored request redelivery only to authenticated owner/correct community, and populated migration upgrade. Database discovery guard passes. Two unrelated full-package failures also reproduce at unchanged parent 08fbf9c9: relay mesh echo returns 504 rather than 200, and DB observability source guard finds .fetch_all(pool). No weakening/repair of those checks is included.

Originating conversation: buzz://message?channel=f45d3304-dcf0-44e8-a46d-bcd63b235fbc&id=46556e0bda64b5875ddd6791ccb39797d470c3a7d8512912fd876742eb899d46

Keep exact-request retry owner/community private without repeating relay side effects. Exclude request/result ciphertext from search on fresh and upgraded databases.

Signed-off-by: Logan Johnson <loganj@squareup.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant