Unify shared runtime and clarify control UX for 0.8.7

[eggplantiny]

Conn's browser harness and desktop previously owned different collaboration paths, and similar permission cards made shared-screen access, control and command execution hard to distinguish. This moves both hosts onto one production UI/runtime and makes each decision's scope stable and visible.

• Extract the common Svelte UI/runes and Rust owner/session boundary. Package a locally runnable web host with matching UI and MCP CLI.
• Carry the native Mac long-input deadlock fix and evidence; preserve ordered output before exit, including a measured slow-consumer run.
• Fix false input_pending blocks after empty-line editing and prevent agent input from appending to remaining human text. Retain no human input bytes or hidden buffers.
• Keep admission above the terminal, morph control requests from the Conn badge, and keep command review below. Collapse preserves a request; typed letters do not approve commands; broader grants require explicit scope disclosure.
• Freeze approval reasons/actions per request and reject stale profile/foreground grants. Use actual SSH executable identity for direct and compound entry, without inspecting credentials or arguments.
• Prevent focus from panning the entire app, keep compact decision buttons visible, resolve fulfilled preparation cards promptly, and apply the Linux WebKit startup workaround with an explicit override.
• Prepare 0.8.7 with a verified standalone Linux web archive in the release matrix.

Validation on Linux: 282 Rust tests (1 ignored), 66 UI tests, 10 real Rust/web/persistent-MCP flows, 23 local input cases, 24 direct SSH and 24 compound SSH cases, 85 grid/cursor comparisons, 984 checkpoint cases, 21 app-lifetime checks, 81 release-tooling tests, owner/UI boundaries, frontend/site builds, demo typecheck, and executable web-bundle smoke. A separate 64 MiB slow-output run completed in 20.61 seconds with all bytes before exit (88,508 KiB maximum process RSS).

The queue remains unbounded; finite load evidence is not an unlimited-memory guarantee. Incoming Mac native evidence is at 5df5e36; the new UI and additional core fixes have not been interactively rerun on a physical Mac. The user's gateway, physical IME, native notification center and native IPC fault injection remain separate acceptance work. Signing, notarization and download/updater checks will be verified through the release workflow before publishing.

See the bilingual validation record and screenshots for scope and limitations. This addresses the reproductions in #65; broader shell/native acceptance remains explicitly documented.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
conn	Skipped		Sep 22, 2026 4:59pm UTC