[BunsDev]

Two findings from the CF-6 review on #279: who answered (finding 9) and a card left open at a crash (finding 3).

Who answered (finding 9)

• Switching a thread to YOLO answers the approvals already waiting. Each one was saved as answered by this Mac's window, even when the phone set YOLO. A desktop paired through the host was recorded as the window, too.
• The phone's policy route now passes "phone" through setApprovals, and the runner's YOLO switch answers as whoever made the change.
• Commands that arrive through the desktop host carry no IPC event, so thread:answer, thread:answer-question and thread:update record "paired-desktop" for them.
• The card says "Answered from a paired desktop." under such an answer. docs/human-requests.md lists the three values and the YOLO rule.

A card open at a crash (finding 3)

• Test only. On 396b17c, the phone's first poll after a crash answered delta: true with 0 items, so the card stayed actionable.
• Harden the event journal against failed writes, crashes and oversized frames (CF-6, journal mechanics) #309 gives the journal a new id after an unclean shutdown, so the old cursor reloads to a snapshot that the same read settles. test/request-crash.test.ts fails on 396b17c and passes on this base, which has Harden the event journal against failed writes, crashes and oversized frames (CF-6, journal mechanics) #309.
• A clean quit, which stops the turn before the journal closes, passes either way and is the control case.

Red first

• the companion policy test (by was undefined);
• the answerNote case;
• the new test/request-attribution.test.ts (updateThread had no by option);
• the Store e2e (no note under the paired desktop's approval);
• test/request-crash.test.ts on 396b17c (delta: true, items: 0).

Checks (30ac266, on main at c345779, which includes #309)

• With pnpm 10.34.5 and Node 24.18.1: pnpm install --frozen-lockfile, pnpm build and pnpm typecheck all passed.
• Root pnpm test: desktop 1,658 tests, with 1,642 passed, 16 skipped (the existing ones) and 0 failed. Every other suite passed: 109, 16, 21, 10 and 16.
• e2e: store-desktop, human-requests, approvals, approval-policy, event-journal and companion passed 20/20, after pnpm --filter @modex/store-desktop build.

Not in this PR

• Finding 4 (sent before the write) and finding 7 (withdrawn shows as Denied on the iPhone) are Make CF-3 answer delivery receipts truthful #316's.
• Finding 10 (a failed save strands the request) is reproduced, and it's waiting on Make CF-3 answer delivery receipts truthful #316's rewrite of answer().
• Finding 6 (older paired desktops show nothing for a question): Val chose a capability field over a protocol bump. That work is in progress on its own branch.
• Finding 11 is Read the thread again when the Mac refuses an answer from the phone (CF-6) #318.
• The full classification is on #279.
• Native gates are unchanged: live providers, a physical iPhone, Windows and Linux, the 8 MB slow-stream drop, and power loss.

Coven-Harness: Claude Code / claude-opus-5-5

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
modex	Ready	Preview	Oct 19, 2026 7:36pm UTC

[github-code-quality]

Code coverage overview

Languages: TypeScript

TypeScript / code-coverage-agent

main 58b468d	cf6-residue faa69d7	+/-
63%	63%	0%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.