fix(onset): agent sessions sealed from the host; objects on disk before anything names them
Radin committed
- Author
- Radin · radin@coline.appOct 31, 2026 at 21:11
- Committer
- Radin · radin@coline.appOct 31, 2026 at 21:27
- Parents
- 1c2a1da0ca97
fix(onset): agent sessions sealed from the host; objects on disk before anything names them Agent sessions were uploaded readable by the host. Each is now sealed on the machine that keeps it, with a key of its own wrapped for every machine on the owner's account (machines add their key the first time they get a project), and for the machines of people the change is shared with. The host stores wraps it can't open; a machine new since gets the key the next time the session is shown on one that has it. The local store wrote objects without flushing them, so a power cut could leave a save naming a broken file. Objects are now flushed (one syncfs on Linux) before the database records anything that names them, and on check fetches damaged objects again from the host instead of only reporting them. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
10 files changed+235−26