Peter Steinberger 9eae43bd37 refactor(infra): move exec approvals into the shared SQLite state DB (#114063) ...

* refactor(infra): move exec approvals into the shared SQLite state DB

Delete the file-runtime exec-approvals store (exec-approvals.json + .lock
sidecar machinery) on both runtimes and make the reserved
exec_approvals_config singleton row canonical. Doctor owns the one-time
import with claim/verify/receipt discipline; runtime fails closed with a
doctor instruction while un-migrated legacy state exists. The wire CAS
contract, socket semantics, and gateway auth-token derivations are
unchanged. Kills the #113929 lock-contention bug class structurally and
nets around -2.9k lines.

* fix(infra): green CI gates and retire file-era exec approvals tests

Break the migration-type import cycle with a leaf contract, regenerate the
plugin-SDK API and native i18n baselines for the intentional surface change,
drop unused exports, and replace the macOS file-era approvals test suite with
SQLite-backed behavior coverage per the obsolete-internals test policy.

* chore: green max-lines ratchet, native i18n baseline, and unused-export scan

2026-07-26 06:39:23 -04:00

..

acp.md

refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)

2026-07-21 20:28:43 -07:00

canvas.md

fix(ci): make plugin SDK API manifest mergeable (#110228)

2026-07-18 00:16:39 +01:00

database-first.md

refactor(infra): move exec approvals into the shared SQLite state DB (#114063)

2026-07-26 06:39:23 -04:00

operator-approvals.md

fix(docs-i18n): protect split product links

2026-07-15 13:50:06 -04:00