[02/06] feat(core): add functions exec sandbox runtime - #4
Draft
HeavenllyDemon wants to merge 1 commit into
Draft
Conversation
HeavenllyDemon
force-pushed
the
feat/functions-exec-01-foundations
branch
from
August 18, 2026 13:15
bf1b550 to
13c96f1
Compare
HeavenllyDemon
force-pushed
the
feat/functions-exec-02-runtime
branch
from
August 18, 2026 13:15
1ddf672 to
24fa831
Compare
HeavenllyDemon
changed the title
HeavenllyDemon
added a commit
that referenced
this pull request
Aug 20, 2026
USER LIVE-GATE FIX #4, research half: does LOK paint an infinite grid past a spreadsheet's used range, the way Excel/Calc's own UI does? Answered empirically against our real vendored LOK pin, not assumed — OfficeHelperLiveTests.testGateXlsxTilesPastTheUsedRangeEmpiricalInfinite GridProbe requests gate.xlsx tiles at the used-range edge and ~20 tiles beyond it: both come back as a clean, gridded, non-blank canvas (PNG dump), unchanged all the way out. paintPartTile genuinely renders empty cells there; nothing needed faking client-side. Implementation: OfficeTileCanvasView.effectiveExtentTwips extends the scrollable bound by 2 extra screens per axis, for spreadsheets only (isSpreadsheet, read once from the open document's type — presentations/ documents have real fixed page bounds and were never probed for this). One computed property feeds BOTH the scroll clamp (clampedOriginX/Y) and performSubscribe's churn-audit skip-check (officeClampViewportToDocumentExtent's call site) so they cannot disagree — the trap being guarded against: if scrolling reached further than the skip-check's own clamp, the margin would be scrollable but its tiles would never actually get requested (placeholders forever, just moved past the new margin instead of past sizeTwips). That widened skip-check interacts with fix #3's whole-document residency sweep at a small, fully-resident spreadsheet's own edge: the fixed subscribeMarginPoints overscan now genuinely touches real, never- prefetched margin tiles, so a resident document's post-fill scroll near its edge now costs exactly one further subscribe (a one-time margin warm), not the prior zero. testResidentDocumentIsPrefetchedWholeIn... NoFurtherRequests is amended (not weakened) into a two-phase pin proving exactly that: one warm, then genuine silence once the touched slice is also cached — the "no chatter for zero benefit" invariant's spirit holds, only its letter moved.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Second PR in the ordered functions.exec stack; targets #3. Adds a private macOS Seatbelt worker runtime, exact dev/compiled CLI worker dispatch, and focused protocol/runtime tests. No model-visible tool registration, daemon wiring, nested dispatch, provider, or protocol/client surface is introduced.
Verification:
Core TypeScript still reports only the six pre-existing approvals.test.ts diagnostics. A nested Seatbelt execution cannot run inside the enclosing host sandbox, so the generated profile is unit-tested and the worker route is tested separately.