Repository navigation

feat(desktop): add recoverable hosted community deletion - #7959

Closed

TheSentinel454 wants to merge 87 commits into

mainfrom

elrond/community-delete-desktop-draft

Commits on Sep 25, 2026

Add owner deletion admission control plane

TheSentinel454
and
codex
committed
a84a32f
Fence archived community owner rotation

TheSentinel454
and
codex
committed
acf5612
Allow privileged abort at the reversible deletion boundary

TheSentinel454
and
claude
committed
4432b57
Reject owner deletion rows that omit provenance

TheSentinel454
and
claude
committed
3edd594
Reach each owner-delete rejection guard separately

TheSentinel454
and
claude
committed
2abeed3
Add typed deletion drain operator CronJob

TheSentinel454
and
codex
committed
6d82d2b
Cover operator-bound signing and replay on owner delete

TheSentinel454
and
claude
committed
1cef1ed
Automate owner deletion preparation

committed
99c26f9
Reject reserved deletion job pod labels

TheSentinel454
and
codex
committed
d9c153f
Record that owner deletion consent is an operator assertion

TheSentinel454
and
claude
committed
8ebe3b8
Harden owner deletion preparation coverage

committed
98f4e91
Correct the deletion drain runbook's operational claims

TheSentinel454
and
claude
committed
494d574
Serialize owner convergence before deletion abort

TheSentinel454
and
claude
committed
e5b3d46

Commits on Sep 28, 2026

Test blocked owner deletion preparation guards
Elrond
committed
b02926e
Cover deletion drain chart contracts

TheSentinel454
and
codex
committed
e6714ec
Bound operator CronJob names

TheSentinel454
and
codex
committed
1037263
Clarify deletion job workload identity

TheSentinel454
and
codex
committed
7e3e142
Scope video menu probes to emitted messages

TheSentinel454
and
codex
committed
dfd5db4
Renumber owner deletion admission migration
codex
committed
fcd831e
Merge main and reconcile owner deletion migration assertions
Elrond
committed
c237fd4
docs: clarify community deletion abort boundary
Elrond
committed
1f1b5f4
Merge #7818 dependency refresh into #7827
codex
committed
8956cf8
Merge refreshed #7827 dependency into #7830
codex
committed
b689026
Merge main readiness changes and retain test credential annotation
Elrond
committed
9f6f720
Merge refreshed admission base into operator cron
Elrond
committed
464a4e6
Merge refreshed operator cron base into owner preparation
Elrond
committed
53c78cd
test(deletion): synchronize lease-loss cancellation
codex
committed
dc0a125
Add typed deletion drain operator CronJob

TheSentinel454
and
codex
committed
e56f4d4
Reject reserved deletion job pod labels

TheSentinel454
and
codex
committed
0731205
Correct the deletion drain runbook's operational claims

TheSentinel454
and
claude
committed
5c3af3b
Cover deletion drain chart contracts

TheSentinel454
and
codex
committed
d791f86
Bound operator CronJob names

TheSentinel454
and
codex
committed
c0a392a
Clarify deletion job workload identity

TheSentinel454
and
codex
committed
cdef026
Scope video menu probes to emitted messages

TheSentinel454
and
codex
committed
38db86b
Merge rebased operator CronJob base without changing owner preparation
Elrond
committed
9c175de
test(desktop): await channel head before scroll summary check
codex
committed
131ef21
Merge commit '131ef21a253367db5e092fd6a392398e4b6eae93' into elrond/publish-7830-refresh
Elrond
committed
c18281b
test(desktop): record transient snapshot before fallback
codex
committed
5650ae7
Merge sidebar snapshot test repair from operator cron base
Elrond
committed
d8c920c
Merge main and retain upstream scroll readiness fix
Elrond
committed
7a26420
Merge main-refreshed operator cron base
Elrond
committed
3c8def0
feat: add owner deletion receipt and quota reservation
codex
committed
e024135
feat(desktop): add hosted community deletion flow
codex
committed
0720b0a
fix: route deletion receipts through writer acquisition
codex
committed
3a7f9ab
fix(desktop): retain ambiguous deletion recovery
codex
committed
0f733da
fix: route deletion receipts through writer acquisition
codex
committed
a1c9794
docs: describe authoritative owner quota projection
codex
committed
b50d7f8
test: advance migration lock expectation to 0053
codex
committed
0a4717d
test: cover aborted owner quota reservation
codex
committed
340ca56
test: abort quota fixture through store contract
codex
committed
546b686
docs: describe authoritative owner quota projection
codex
committed
d385c1f
test: advance migration lock expectation to 0053
codex
committed
2b35ca0
test: cover aborted owner quota reservation
codex
committed
96692c4
test: abort quota fixture through store contract
codex
committed
9485cdf
Merge main into owner deletion auto-prepare
codex
committed
f79fa81

Commits on Sep 29, 2026

Merge current main into owner deletion foundation
codex
committed
c5edf47
chore: reserve migration 0054 for deletion quota
codex
committed
99fa5ae
Merge owner deletion foundation and current main
codex
committed
3b94325
fix(relay): return stable deletion lifecycle conflicts
codex
committed
bd95c4a
Merge reconciled Relay into Desktop deletion flow
codex
committed
a77fc33
fix community deletion recovery fencing
codex
committed
b925d6a
fix deletion admission and quota lifecycle proof
codex
committed
0d7798c
merge relay deletion review corrections
codex
committed
4ba7f3f
Merge merged owner preparation foundation into relay deletion draft
codex
committed
225a11c
Merge reconciled relay into published Desktop deletion draft
codex
committed
2cc6c4e
Fence hosted deletion recovery by request and account generation
codex
committed
529064b
fix(db): restore owner deletion approval authority fence
codex
committed
37e9b68
Merge owner preparation authority repair into Desktop deletion draft
codex
committed
944142f
Merge current main into owner deletion relay draft
codex
committed
5071879
refactor(relay): make owner delete the idempotent recovery call; add lifetime owner cap
Elrond
committed
7400268
fix(db): make the lifetime owner cap absolute and rustfmt the quota test
Elrond
committed
c35c74f
docs(relay): state limit_reached for both owner caps and pin the can_create contract
Elrond
committed
63623fe
test(relay): pin that a changed acknowledgement version replay is unsupported, not a conflict
Elrond
committed
59375c0
docs(relay): note ack-version dependency of resend recovery
codex
committed
bb59f0e
docs(relay): ack version is a code constant that also gates execution
codex
committed
e21151f
Merge updated relay deletion dependency into desktop draft
codex
committed
5f5d6a1
Replace desktop deletion receipts with explicit same-request checks
codex
committed
4a90914
Hide quota-blocked hosted Create and simplify native command checks
codex
committed
0736b70
Retain deletion recovery when native error status is missing
codex
committed
2224c12
Restore same-request deletion recovery without owner-list gate
codex
committed
c3b4891

Commits on Sep 30, 2026

Merge origin/main into desktop deletion draft
codex
committed
467e34a
fix(desktop): retain hosted deletion across owner switches
codex
committed
047f7c2
fix(desktop): guard hosted deletion across identities
codex
committed
75c7612
fix(desktop): reconcile accepted deletion on refresh
codex
committed
20e7015
refactor(desktop): keep deletion refresh within file-size policy
codex
committed
e5f56aa
fix(desktop): retain confirmed aborts across refresh failures
codex
committed
e2d23ca
fix(desktop): preserve account refresh across identity mismatch
codex
committed
c8bf273