Skip to content

Condense Relay and Pocket reference contracts - #903

Merged
nedtwigg merged 5 commits into
spec-cleanup-remote-contractsfrom
spec-cleanup-relay-pocket
Oct 2, 2026
Merged

nedtwigg merged 5 commits into
spec-cleanup-remote-contractsfrom
spec-cleanup-relay-pocket

Conversation

@nedtwigg

@nedtwigg nedtwigg commented Oct 2, 2026 •

Copy link
Copy Markdown
Member

Correct Relay, Pocket, self-hosting, and pairing-story references against the shipped code. Pocket scans pairing codes in its own storage context; rows have a primary action rather than exactly one action. Canonical Phase, RuntimeInfo, enrollment/status types, and registration validation own their inventories.

Qualify Unix file modes and Windows inherited permissions, point host persistence to its owning specs, and use the local-security pointer for clipboard storage limits. This layer changes only prose, source comments, and word budgets.

Validation: spec lint and 23 mutations; all 15 public-doc checks. Complete section/rationale audit with targeted source-symbol and message-direction checks. Stacked on #902.

Trimmed in review. Restored the checkRegistration step list in relay.md. Its order matters, because the challenge is redeemed before the origin check, so a wrong-origin registration still burns it. Dropped a rationale paragraph that duplicated security-local.md's Known gap.

🤖 Generated with Claude Code

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 2, 2026 •

Copy link
Copy Markdown

Deploying mouseterm with  Cloudflare Pages  Cloudflare Pages

Latest commit: 120ca96
Status: ✅  Deploy successful!
Preview URL: https://a574ce8a.mouseterm.pages.dev
Branch Preview URL: https://spec-cleanup-relay-pocket.mouseterm.pages.dev

View logs

@nedtwigg
nedtwigg added this pull request to stack #896 October 2, 2026 13:23
nedtwigg and others added 2 commits October 2, 2026 06:37
The PR collapsed relay.md's `checkRegistration` step list into "its code
owns check ordering", losing the one ordering fact a careful editor could
break: the challenge is redeemed before the origin check, so a
wrong-origin registration still burns its challenge. It also added a
mouse-and-clipboard rationale paragraph restating the Windows clipboard
ACL Known gap that security-local.md already owns.

Restore the step list from base, checked against `checkRegistration` in
remote-lib-common/src/remote/relay-common.ts (adding the optional `label`
the body also carries), state the redeem-before-origin rule, and drop the
duplicate rationale paragraph. Ratchet relay.md's budget by 50.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
# Conflicts:
#	scripts/spec-word-budgets.json
@nedtwigg
nedtwigg merged commit 5ce9132 into main Oct 2, 2026
16 of 19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants