Repository navigation
Flip the fleet default to Remote-SSH (ADR 0025 terminus) #1279
Description
Important
Problem — ADR 0025 adopts Remote-SSH as the target default but gates the flip behind P1 (the FSP lifeboat, #1267), P2/P3 (the companion + auto-switch, #1269), and the opt-in posture (#1268). The flip itself — and its abort branch — needs an owner; it is excluded from both parent scopes.
Approach — When P1–P3 are in and the P2 go/no-go (#1269-S1) is feasible, change the default posture for a fleet client to Remote-SSH, with auto-DOWN to the lifeboat on bad links. If P2 was ruled infeasible, do NOT flip — Remote-SSH stays opt-in and the thin client remains default (the recorded abort branch).
Approaches considered — flipping earlier (rejected: a bad link would freeze the editor with no lifeboat).
Scope — in: the default-posture change gated on the prerequisites; the abort branch. · out: the mechanisms themselves (owned by #1267/#1268/#1269).
Acceptance Criteria
- With P1–P3 merged and P2 ruled feasible, a fleet client defaults to the Remote-SSH posture.
- A degraded/dropped link auto-DOWNs to the thin-client lifeboat (via Posture-driven auto-switch: Remote-SSH ↔ thin-client lifeboat on link quality (needs a UI-kind extension split) #1269) — the default is never left stranded on a bad link.
- If P2 was ruled infeasible, the default remains thin-client and Remote-SSH stays opt-in (the abort branch), recorded.
- Existing thin-client-only fleet clients are not regressed by the default change.
Testing Decisions
A posture-default resolution test gated on the prerequisite signals, plus an abort-branch test (P2-infeasible → thin-client default). Extends the posture-resolution surface.
Key Decisions
- The flip is gated on the prerequisites AND the P2 go/no-go — not a standalone toggle.
- The abort branch is a first-class outcome, not a failure.
Constraints & Invariants
- No flip without the lifeboat (P1) and the auto-switch (P3) in place.
Prior Art
- ADR 0025; Fleet client: native Explorer shows host files via an amico-host:// FileSystemProvider (with honest capability label) #1267 (P1), Remote-SSH as a first-class fleet posture (opt-in) — host-native tooling on the durable hub #1268 (posture), Posture-driven auto-switch: Remote-SSH ↔ thin-client lifeboat on link quality (needs a UI-kind extension split) #1269 (P2/P3).
Source
- Design of record ADR 0025 (terminus) · Blocked by Fleet client: native Explorer shows host files via an amico-host:// FileSystemProvider (with honest capability label) #1267, Remote-SSH as a first-class fleet posture (opt-in) — host-native tooling on the durable hub #1268, Posture-driven auto-switch: Remote-SSH ↔ thin-client lifeboat on link quality (needs a UI-kind extension split) #1269.
Activity