Let a person see, authorize, close and hold what the connector runs - #741

Closed

jorgemanrubia wants to merge 50 commits into

connect-outboxfrom

connect-operator-commands

Commits on Sep 17, 2026

Hold, operator decisions and migration commands in the connector ledger
jorgemanrubia
committed
656a8f2
Rename the operator tests' admit helper beside the dispatcher's
jorgemanrubia
committed
31ceb2a
Add connect status, doctor, redispatch, discard, release, shadow promote, import and --hold
jorgemanrubia
committed
fe870c1
Test the operator commands
jorgemanrubia
committed
47845a8
Account for the operator commands in the smoke coverage
jorgemanrubia
committed
644faa8
Assert the dispatcher is offered nothing under the hold
jorgemanrubia
committed
1abc245
Authorize a terminal move by a decision row; address the adversarial and Copilot reviews
jorgemanrubia
committed
9ab3bfa
Test that only this record's own later discard lets it close
jorgemanrubia
committed
3f4847b
Recognize a finished promote by its decision, not the hold's cause
jorgemanrubia
committed
d7c1ba3
Keep a superseded task from taking follow-ups, and let an import withdraw every waiting redispatch
jorgemanrubia
committed
926e897
Preallocate the crash table
jorgemanrubia
committed
e579a83
Rebase onto card 20's new head: one CheckPrivateFile, the dispatch token checked when it is bound
jorgemanrubia
committed
eb99cc6
Close the second adversarial review: nothing asks for a decision already made
jorgemanrubia
committed
ce9f151
Give the schema tamper in the migration test a context
jorgemanrubia
committed
7beaf99
Guard the migration with the instance lock, and refuse an edit that names no path
jorgemanrubia
committed
c3d6fd8
Close the fourth adversarial review: one lock for an import, a notice rendered at the send, no follow-up under the hold
jorgemanrubia
committed
40fc541
Return only an error from the refusal helpers, and mark the migrating open
jorgemanrubia
committed
1c8cdb7
Re-render a completion notice only when a person decided one of its events
jorgemanrubia
committed
0ed774e
Ask the driver's one-owner rule before acting on a recorded worker
jorgemanrubia
committed
dd6dff6
Close the fifth adversarial review: say what became of a worker exactly
jorgemanrubia
committed
e1dc6e5
Close the sixth review round: authorized blocked records are decided, and status and doctor claim only what they check
jorgemanrubia
committed
c87755f
An authorization answers for the outcome it was made on
jorgemanrubia
committed
93ab880
Close an imported done outcome for good, and refuse a ledger a newer build wrote
jorgemanrubia
committed
51a7517
Refuse a newer ledger on the connector's own open, and record what an import actually did
jorgemanrubia
committed
6fa6cf3
Regenerate the CLI surface after the rebase
jorgemanrubia
committed
7f77956
Never date an authorization before the block it answers for
jorgemanrubia
committed
1d3cf55
Teach the basecamp-connect skill the operator commands, and point a missing shadow ledger at the shadow run
jorgemanrubia
committed
c8752cd
Close review round ten: the skill and the command catalog match the commands, doctor ends its server's whole group
jorgemanrubia
committed
b67dd55
Own the doctor's MCP server process outright, so its group is ended before it is reaped, race-free
jorgemanrubia
committed
20025ad
Name the held state in the dispatch lifecycle test's exhaustive switch
jorgemanrubia
committed
4c5519c
Refuse a shadowing token before a redispatch touches the ledger, and read a reconciliation file whole
jorgemanrubia
committed
c1b604d
Say the pointer lines exist but are not this skill's yet, and label doctor's timeout seam
jorgemanrubia
committed
93ed837
Speak the CLI's JSON in the decision commands, and say what the hold does not stop
jorgemanrubia
committed
e28c5cf
Prove a discard withdraws a redispatch still waiting for its task
jorgemanrubia
committed
10468a7
Assert the withdrawn authorization itself
jorgemanrubia
committed
9a1e405
Report the task token's taker in status, as the worker is reported
jorgemanrubia
committed
7c66028
Keep the CLI building where the one-owner rule does not run
jorgemanrubia
committed
fe11ddf
Finish a canceled guard, and say what waits when the task was already superseded
jorgemanrubia
committed
bda9d9e
Hand a worker nothing new under the hold, and say the lock file is only a lock file
jorgemanrubia
committed
75a4c23
Fail doctor for what the run command refuses: worktrees, and a platform the connector does not run on
jorgemanrubia
committed
c02672a
Say what doctor does not write, and quote the profile in the command it prints
jorgemanrubia
committed
19ad2a4
Validate a reconciliation wherever it comes from, and say what a pid check cannot answer
jorgemanrubia
committed
f67ec26
Silence contextcheck on the import validation subtests
jorgemanrubia
committed
62a2888
A hold is not a failed task, and a canceled guard is dated when it was canceled
jorgemanrubia
committed
e292e73
Withhold, do not fail: the dispatcher reads a hold's refusal as a hold
jorgemanrubia
committed
df2c4d6
Take the connector's lock even when a promote has nothing left to move
jorgemanrubia
committed
4d91c1a
Say the retained worktrees are unavailable, not that there are none
jorgemanrubia
committed
29abedc
Refuse the other first hand-off under the hold: a worker's first pull
jorgemanrubia
committed
aba1db5

Commits on Sep 18, 2026