Converge version lifecycle authority across product entry points

[luokerenx4]

OpenAlice entry points could disagree about product identity, release eligibility and the operation being recovered. A backend launched from another package directory could report that package's version; managed-template apply accepted stable-to-beta downgrades; CLI presentation hid blocked decisions; completed coordination history could mask unfinished native activation.

This change removes competing decisions and uses the existing update-lifecycle package and effect owners:

• Root product identity reaches backend, CLI, Guardian and desktop builds. Delete cwd searches, fake versions, duplicate provenance parsing, the unused UI version define and the CLI package's separately authored version. Bundle the desktop relay's shared reader so build injection reaches the installed artifact.
• Resolve installation ownership at the actual launch entry. Source stays development, desktop uses its own build/mode, and native CLI uses its installed receipt. Missing receipts cannot become source/stable installations. Remove exported default provenance and TUI stable fallback; remote planning requires resolved caller identity.
• Managed-template discovery, plans, tools, UI and locked apply consume shared eligibility. Remove private ordering and equality-only conclusions. Unknown identity cannot authorize mutation; Skill reconciliation retains content fingerprints and explicit source selections retain exact commits.
• Preserve selection status/reason through CLI, backend, native, relay and UI. App-only and coordinated installs use the existing review/approve/resume control entry. Delete direct-install IPC/preload/demo paths and duplicated native wire types. Status/resume/abandon/startup select the same unfinished owner with explicit parent/child receipt identity.
• Release preparation, candidate validation, feed naming and publication consume shared policy. Delete private JS parsers and manual root/CLI synchronization. The serialized publisher requires forward release or exact-current mirror intent and rechecks the observed head before mutable writes. Dependency-free Bash/PowerShell bootstrap grammar is verified through real planning against shared policy.

Validation against dev 2bbcf878:

• Complete pnpm test: 897 files passed; 7,659 tests passed, 7 skipped. The critical gate accepted all 15 required assertions at implementation commit 13890850 with a clean tree. Root, CLI, desktop, UI, shared policy, Guardian and integration typechecks passed. The final TUI fixture annotation correction also passed its 97-test suite and integration typecheck; it changes no runtime behavior.
• Actual backend/CLI imports from repository and desktop cwd both report 0.94.1 and source/development ownership. Source Electron startup passes missing and unavailable Recent cases.
• Unsigned packaged macOS arm64 Electron passes resource inspection and all 13 Workspace acceptance checks, including native handoff restart/readiness, update inventory, real PTY/CLI transport, scheduled managed Pi execution and cleanup. Separated packaged Electron reports client 0.94.1 while connected to the real published 0.94.1-beta.2 backend, without taking local project ownership.
• Native macOS arm64 Bun 1.4.2 archive passes actual CLI/Guardian/backend startup, isolated Agent PTYs and same-version payload activation/readiness. Raw version --json reports 0.94.1 and null installation provenance. Final content identity: dbe6024c9f5e629e; archive SHA-256: 1cde99aab2a7d3a1d9507496f4b751b37cc3c3fb5dc34abecaa595459b74acd4.
• Actual Guardian ownership/takeover/crash/forced-recovery acceptance passes. Disposable Linux SSH acceptance passes installed-versus-active beta.2-to-stable activation and interrupted-controller reconnect without reinstall/restart. Docker installer and interactive playground pass plan, decline without state, approved install and invocation.
• Bash and actual PowerShell each pass 44 manifest/exact-version grammar cases. PowerShell ran on macOS. Real Workspace Git/tool acceptance covers rejected downgrades without mutation and forward beta-to-stable application; the complete suite includes these cases. Publication tests run the production upload shell against local object-store transport, including changed-head refusal before mutable writes. Real demo Settings owner review was exercised; the complete UI owner suite previously passed 357 files / 2,062 tests.

Artifact acceptance caught and repaired two real wiring failures: externalized shared identity escaped desktop build injection, and native launch environment cleanup erased cli-server ownership before the readiness loop. Neither was bypassed with version defaults or weaker readiness. The installer test's executable lookup also now rejects directories (PowerShell's tr locale directory is not the tr command).

Remaining adapters are format or effect boundaries: shipped provenance schemas and the HTTP hasUpdate projection; Bash/PowerShell bootstrap without a JS prerequisite; native feed transport/download/signature/handoff; exact source/content reconciliation. No new manager, persisted version record or parallel runner is introduced.

Implementation and local acceptance are complete; the canonical plan and its active index entry are removed per repository convention. The maintainer accepted this change; it was merged to dev. Related defects #1705, #1706, #1717 and #1721 are closed with the acceptance evidence above. Windows/Intel native packaging and signed installer replacement/publication were not exercised locally; macOS unsigned/package and PowerShell grammar evidence do not certify those platform release gates. No release was published, no user configuration was changed, and the existing user Electron/#1704 preview was left running.

Fixes #1705
Fixes #1706
Fixes #1717
Fixes #1721

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
openalice-demo	Ready	Preview	Oct 1, 2026 9:03pm UTC