Restricted data UI - share modal stays usable for restricted workspaces - #308

Merged

Maximo-Guk merged 24 commits into

mainfrom

restricted-data-followups

Sep 11, 2026

Commits on Sep 11, 2026

Restricted data part 5: UI changes.

Maximo-Guk
and
claude
committed
ff703cc
Retain a consumed share key so a failed open can retry.

Maximo-Guk
and
claude
committed
d8b511a
Bugfix: Identity-key retained share keys and clear them on logout.

Maximo-Guk
and
claude
committed
ab9b0f5
Bugfix: Abandon a superseded workspace open before it creates a capability.

Maximo-Guk
and
claude
committed
2e2ee04
Bugfix: Bind the retained share key to the session that captured it.

Maximo-Guk
and
claude
committed
b73aeaa
Bugfix: Invalidate a pending share-key stamp on discard and logout.

Maximo-Guk
and
claude
committed
b3d9eaf
Bugfix: Clear a retained share key as soon as the keyed open succeeds.

Maximo-Guk
and
claude
committed
bbe0d13
Bugfix: Don't let a superseded keyed open clear a newer attempt's retained key.

Maximo-Guk
and
claude
committed
42ed372
Bugfix: Let a cancelled keyed open clear its own retained share key.

Maximo-Guk
and
claude
committed
bb998f1
Bugfix: Void a cleared share key's own pending stamp without touching other keys'.

Maximo-Guk
and
claude
committed
de13d27
Bugfix: Bail a cancelled attempt before it mutates newer retention.

Maximo-Guk
and
claude
committed
233a834
Bugfix: Scope attempt-owned share-key clears by capture, not raw key.

Maximo-Guk
and
claude
committed
67db6c5
Mitigate duplicated-tab replay of a retained share key.

Maximo-Guk
and
claude
committed
70471b2
Restate the retained-share-key rationale for one-step redemption.

Maximo-Guk
and
claude
committed
7e42712
Bugfix: Supersede an older capture's pending share-key stamp on a newer capture.

Maximo-Guk
and
claude
committed
3e274ea
Bugfix: Let a broadcast share-key clear reach a live duplicate's in-memory key.

Maximo-Guk
and
claude
committed
741f9cd
Bugfix: Remove an older capture's stored share-key entry when a newer capture begins.

Maximo-Guk
and
claude
committed
5fd19cd
Bugfix: Broadcast the clear of a share-key entry skipped by an unresolvable identity.

Maximo-Guk
and
claude
committed
1b83fc5
Reword the restricted-data sharing warning to match role-scoped verification.

Maximo-Guk
and
claude
committed
6accb14
Bugfix: Broadcast the clear of a share-key entry displaced by a newer capture.

Maximo-Guk
and
claude
committed
a648582
Bugfix: Clear an unjudged retained share key when its keyless open confirms after cancellation.

Maximo-Guk
and
claude
committed
ea9a275
Bugfix: Leave another workspace's in-memory share key alone on a keyless success.

Maximo-Guk
and
claude
committed
b0899b8
Trim the retained-share-key comments.

Maximo-Guk
and
claude
committed
e2e6790
Remove client-side share-key retention.

Maximo-Guk
and
claude
committed
dc3c4b0

Navigation Menu

Restricted data UI - share modal stays usable for restricted workspaces - #308

Restricted data UI - share modal stays usable for restricted workspaces#308
Maximo-Guk merged 24 commits into
mainfrom
restricted-data-followups

Commits on Sep 11, 2026

Restricted data part 5: UI changes.

Retain a consumed share key so a failed open can retry.

Bugfix: Identity-key retained share keys and clear them on logout.

Bugfix: Abandon a superseded workspace open before it creates a capability.

Bugfix: Bind the retained share key to the session that captured it.

Bugfix: Invalidate a pending share-key stamp on discard and logout.

Bugfix: Clear a retained share key as soon as the keyed open succeeds.

Bugfix: Don't let a superseded keyed open clear a newer attempt's retained key.

Bugfix: Let a cancelled keyed open clear its own retained share key.

Bugfix: Void a cleared share key's own pending stamp without touching other keys'.

Bugfix: Bail a cancelled attempt before it mutates newer retention.

Bugfix: Scope attempt-owned share-key clears by capture, not raw key.

Mitigate duplicated-tab replay of a retained share key.

Restate the retained-share-key rationale for one-step redemption.

Bugfix: Supersede an older capture's pending share-key stamp on a newer capture.

Bugfix: Let a broadcast share-key clear reach a live duplicate's in-memory key.

Bugfix: Remove an older capture's stored share-key entry when a newer capture begins.

Bugfix: Broadcast the clear of a share-key entry skipped by an unresolvable identity.

Reword the restricted-data sharing warning to match role-scoped verification.

Bugfix: Broadcast the clear of a share-key entry displaced by a newer capture.

Bugfix: Clear an unjudged retained share key when its keyless open confirms after cancellation.

Bugfix: Leave another workspace's in-memory share key alone on a keyless success.

Trim the retained-share-key comments.

Remove client-side share-key retention.