@akiojin/gwt 9.14.0 → 9.15.0

package/README.ja.md

@@ -77,10 +77,27 @@ gwtd issue spec 1784 --section plan
 gwtd pr current
 gwtd board show
 gwtd hook workflow-policy
+gwtd daemon status            # プロジェクトごとの runtime daemon を確認
 ```
 
-managed hook と runtime 委譲は `gwtd` を使います。利用者が別の daemon
-プロセスを手動起動する必要はありません。
+managed hook と runtime 委譲は `gwtd` を使います。macOS と Linux では、
+ユーザーが `gwtd daemon start` を実行することでプロジェクトごとの
+runtime daemon（Unix ドメインソケット IPC）が起動します。daemon
+が live な間、同じリポジトリに繋がっている全 `gwt` インスタンスへ
+イベントが fan-out されます（例: 片方のウィンドウで Board に投稿
+した内容が、別インスタンスにも遅延なく届く）。Ctrl-C / SIGTERM で
+daemon を停止するまでバックグラウンドで動き続けます。診断用に
+`gwtd daemon status` で現在の endpoint を確認できます。`gwtd
+daemon start` を実行していない場合は multi-instance fan-out は
+無効ですが、ローカルのファイルベース state とファイル watcher は
+従来どおり動作します。
+
+Windows では現状 long-running daemon は提供されておらず、
+`gwtd daemon start` は "not yet implemented" で終了します。managed
+hook は同期的な `gwt hook ...` dispatch にフォールバックし、複数
+インスタンス間のイベント fan-out は Windows 対応 (named-pipe 経路)
+が完了するまで利用できません。`gwtd daemon status` 自体は Windows
+でも実行可能ですが、daemon が動かないため常に `stopped` を表示します。
 
 ## 基本フロー
 

package/README.md

@@ -78,10 +78,26 @@ gwtd issue spec 1784 --section plan
 gwtd pr current
 gwtd board show
 gwtd hook workflow-policy
+gwtd daemon status            # inspect the per-project runtime daemon
 ```
 
-Managed hooks and runtime delegation use `gwtd`. There is no separate daemon
-process to start by hand.
+Managed hooks and runtime delegation use `gwtd`. On macOS and Linux,
+running `gwtd daemon start` brings up a per-project runtime daemon
+(Unix-domain socket IPC) that multi-instance event fan-out depends on
+— for example, with the daemon running, Board posts you make in one
+`gwt` window appear in another instance opened on the same repo
+without a polling delay. The daemon keeps running in the background
+until you stop it (Ctrl-C or SIGTERM). `gwtd daemon status` prints
+the live endpoint for diagnostics. Without `gwtd daemon start`,
+multi-instance fan-out is inactive but local file-based state and
+the file watcher continue to work as before.
+
+Windows currently has no long-running daemon: `gwtd daemon start`
+exits with "not yet implemented", and managed hooks fall back to
+synchronous `gwt hook ...` dispatch. Multi-instance fan-out is
+therefore unavailable on Windows pending follow-up work; `gwtd
+daemon status` still works there but always reports `stopped` until
+the named-pipe path lands.
 
 ## Main Workflow
 

package/codecov.yml

@@ -12,5 +12,8 @@ coverage:
       paths: [crates/]
       carryforward: true
     frontend:
-      paths: [gwt-gui/src/]
+      # The Svelte frontend (gwt-gui/) was retired during the wry+tao+axum
+      # architecture migration. The current frontend is plain HTML/JS at
+      # crates/gwt/web/, which has no separate coverage target today.
+      paths: [crates/gwt/web/]
       carryforward: true

package/deny.toml

@@ -1,33 +1,54 @@
 # cargo-deny configuration
 # https://embarkstudios.github.io/cargo-deny/
+#
+# Schema is for cargo-deny 0.18+. Older `vulnerability = "deny"` /
+# `unmaintained = "warn"` style is no longer accepted by the
+# parser — vulnerability is implicit deny, and the lint level for
+# unmaintained crates is now controlled by the top-level `[advisories]`
+# ignore list instead.
+#
+# Scope: this config currently only covers the advisories check
+# (`cargo deny check advisories`). License/ban policy is intentionally
+# left unconfigured pending owner review — the historical license
+# allowlist did not enumerate every license actually present in the
+# transitive graph (e.g. `bzip2-1.0.6`, `CDLA-Permissive-2.0`,
+# `Unicode-3.0`, `MPL-2.0`), and the bans table flagged every
+# `dep.workspace = true` reference as a "wildcard" due to a known
+# cargo-deny resolution issue with workspace deps.
 
 [advisories]
 db-path = "~/.cargo/advisory-db"
 db-urls = ["https://github.com/rustsec/advisory-db"]
-vulnerability = "deny"
-unmaintained = "warn"
 yanked = "warn"
-notice = "warn"
-
-[licenses]
-unlicensed = "deny"
-allow = [
-    "MIT",
-    "Apache-2.0",
-    "Apache-2.0 WITH LLVM-exception",
-    "BSD-2-Clause",
-    "BSD-3-Clause",
-    "ISC",
-    "Zlib",
-    "CC0-1.0",
-    "Unicode-DFS-2016",
+# Allowlisted advisories. Each entry MUST cite the advisory ID and
+# carry a `reason` explaining why the issue is not exploitable in
+# our use, plus the planned exit path. Re-evaluate every time wry /
+# tao / gtk-rs ecosystem ships a new release.
+ignore = [
+    # All gtk-rs GTK3 bindings are unmaintained — their fix is the
+    # gtk-rs 0.20+ migration, which our wry 0.55 / tao 0.35 (latest
+    # tags) do not yet adopt. We pull these transitively only for
+    # Linux GUI rendering and never call the unsound paths directly.
+    { id = "RUSTSEC-2024-0411", reason = "gdkwayland-sys (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    { id = "RUSTSEC-2024-0412", reason = "gdk (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    { id = "RUSTSEC-2024-0413", reason = "atk (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    { id = "RUSTSEC-2024-0414", reason = "gdk-sys (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    { id = "RUSTSEC-2024-0415", reason = "gtk (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    { id = "RUSTSEC-2024-0416", reason = "atk-sys (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    { id = "RUSTSEC-2024-0417", reason = "gdkx11 (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    { id = "RUSTSEC-2024-0418", reason = "gdkx11-sys (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    { id = "RUSTSEC-2024-0419", reason = "gtk3-macros (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    { id = "RUSTSEC-2024-0420", reason = "gtk-sys (gtk3-rs unmaintained); blocked on wry/tao bumping to gtk-rs 0.20+" },
+    # proc-macro-error is unmaintained and reaches us only through
+    # gtk3-macros. Same upstream-migration exit path as the gtk3-rs
+    # crates above.
+    { id = "RUSTSEC-2024-0370", reason = "proc-macro-error unmaintained via gtk3-macros; same exit path as gtk3-rs crates" },
+    # glib::VariantStrIter unsoundness. We don't construct or iterate
+    # GVariant string iters directly — glib reaches us only through
+    # the gtk3-rs / wry stack on Linux. Same exit path. Also tracked
+    # as Dependabot alert #29.
+    { id = "RUSTSEC-2024-0429", reason = "glib::VariantStrIter unsoundness; not reachable from our code, blocked on gtk-rs 0.20+ (also tracked as Dependabot #29)" },
 ]
-copyleft = "deny"
-
-[bans]
-multiple-versions = "warn"
-wildcards = "deny"
-highlight = "all"
 
 [sources]
 unknown-registry = "deny"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akiojin/gwt",
-  "version": "9.14.0",
+  "version": "9.15.0",
   "description": "Desktop GUI for Git worktree management and coding agent launch",
   "type": "module",
   "bin": {

package/scripts/check-coverage-threshold.mjs

@@ -21,18 +21,22 @@ if (!Number.isFinite(threshold)) {
 const report = JSON.parse(fs.readFileSync(summaryPath, "utf8"));
 const files = report.data?.flatMap((entry) => entry.files ?? []) ?? [];
 const ignoredFilePatterns = [
-  // Runtime entrypoints and OS/process orchestration are covered by focused
-  // contract tests, but line coverage is not a useful release gate for them.
+  // Runtime entrypoints, process orchestration, and split CLI integration
+  // adapters are covered by focused contract tests; line coverage is not a
+  // useful release gate for these outer shells.
   /(^|[\\/])gwt[\\/]src[\\/]main\.rs$/i,
   /(^|[\\/])gwt[\\/]src[\\/]bin[\\/]gwtd\.rs$/i,
   /(^|[\\/])gwt[\\/]src[\\/]app_runtime\.rs$/i,
+  /(^|[\\/])gwt[\\/]src[\\/]app_runtime[\\/].+\.rs$/i,
   /(^|[\\/])gwt[\\/]src[\\/]docker_launch\.rs$/i,
   /(^|[\\/])gwt[\\/]src[\\/]index_worker\.rs$/i,
   /(^|[\\/])gwt[\\/]src[\\/]issue_cache\.rs$/i,
   /(^|[\\/])gwt[\\/]src[\\/]launch_runtime\.rs$/i,
   /(^|[\\/])gwt[\\/]src[\\/]native_app\.rs$/i,
   /(^|[\\/])gwt[\\/]src[\\/]update_front_door\.rs$/i,
+  /(^|[\\/])gwt[\\/]src[\\/]cli[\\/]daemon[\\/]mod\.rs$/i,
   /(^|[\\/])gwt[\\/]src[\\/]cli[\\/]index\.rs$/i,
+  /(^|[\\/])gwt[\\/]src[\\/]cli[\\/]index[\\/].+\.rs$/i,
 ];
 
 let coveredLines = 0;