galaxy/migration-docs/current-state.md

Current State — as of 2026-07-09

Git State

• Branch: master
• HEAD: 40bd86f6 — "Adding logging when we crash in bedrock, adding open AI request translator changes and AI page settings cleanup"
• Remote: Up to date with origin/master
• Other branches: feat/warp-parity (remote only)
• Tags: v1.6.3 (latest)

Uncommitted Changes

Two modified files (NOT yet committed):

notarize.sh (diff)

-    --keychain-profile notarytool-profile \
+    --apple-id "g.brancovici@samsung.com" \
+    --team-id "3JU72Z7Y3J" \
+    --password "cowi-fved-uajk-arsk" \

package.sh (diff)

-    --keychain-profile notarytool-profile \
+    --apple-id "g.brancovici@samsung.com" \
+    --team-id "3JU72Z7Y3J" \
+    --password "cowi-fved-uajk-arsk" \

Why: The keychain profile notarytool-profile was lost (keychain reset). Replaced with inline credentials because Galaxy terminal can't write to keychain (no interactive auth entitlement). These changes have been tested — full build-release.sh completed successfully with them.

What Was Just Completed

• Pulled latest code (840bc4d → 40bd86f6, massive update with Warp rebase)
• Fixed notarization scripts to use inline credentials
• Successfully built a signed+notarized release DMG (target/release/bundle/osx/Galaxy.dmg)

What's Next (Pending Work)

Immediate

• Commit the script changes — notarize.sh and package.sh credential fix (George hasn't asked for commit yet)
• George may re-run build-release.sh — he asked for clean build instructions

Backlog (from May code review — still open)

1. [HIGH] Gate dump_error_snapshot behind GALAXY_BEDROCK_DIAGNOSTICS=1 env var
2. [HIGH] Fix error_dump_directory using compile-time CARGO_MANIFEST_DIR in release builds
3. [HIGH] Install script fetches Homebrew/rustup from HEAD without pinning
4. [MED] Silent mutex poisoning in dump_error_snapshot
5. [MED] Captured lines buffer unbounded by bytes
6. [MED] is_retryable uses fragile string matching
7. [MED] rotate_if_needed double-renames
8. [MED] read_file_tail blocks async runtime
9. [LOW] Integer overflow in token sum cast to u32
10. [LOW] Race condition in install script's pkill → rm -rf
11. [LOW] git pull --ff-only fails silently on diverged branches

Build Output Location

target/release/bundle/osx/Galaxy.app   # Signed app bundle
target/release/bundle/osx/Galaxy.dmg   # Signed + notarized DMG (distributable)