[TimeToBuildBob]

Summary

Device-identity integration for ActivityWatch/activitywatch#302, stacked on schema #786 at d74c27eb425b. Do not merge before #786. Remains draft: Python parity and full identity acceptance are incomplete.

• Exact-first, bidirectional hostname-metadata aliases preserve stored names/history. Ambiguity fails closed; creation and rename cannot redirect an existing unscoped alias.
• Authoritative (device_id, id) bucket cache; scoped worker requests retain scope through event/list/export/query operations and restore it after errors. Reader signatures include hostname repairs.
• Device-scoped query/cache identities, CRUD/list, events/count/delete, heartbeat, streamed JSON/CSV export and route-bound JSON import. Local UUID and local select the same storage namespace; peer hostname="!local" is rejected.
• Legacy JSON/multipart import normalizes this server UUID before resolution/merge. This does not migrate pre-existing literal-UUID ownership rows.
• 87a8619: complete local-plus-stored-peer catalogue and lossless grouped list/export/import. Grouped envelopes use {"devices":{"<source-device-id>":{"buckets":{"<bucket-id>":{...}}}}}. Local sentinel is exported as source UUID, so importing on another server cannot silently localize source history. Events serialize one row at a time from one worker transaction to a private tempfile before HTTP success. Full envelope identity preflight precedes writes; runtime failures can leave earlier groups imported, with cache invalidation on failure. Peer hostname is a deterministic representative of bucket metadata, not a latest-name registry.

Routes

• GET /api/0/devices — local UUID (including empty server) and stored peers
• GET /api/0/devices/buckets — grouped metadata
• GET /api/0/devices/export, POST /api/0/devices/import — grouped transfer
• /api/0/devices/{device_id}/buckets — GET
• /api/0/devices/{device_id}/buckets/{id} — GET/POST/DELETE
• Corresponding /events, /events/{event_id}, /events/count, /events/delete and /heartbeat?pulsetime=...
• /api/0/devices/{device_id}/buckets/{id}/export and /export/csv
• /api/0/devices/{device_id}/export, /import, /query

Both global duplicate-name creation and duplicate-cache-load guards remain. Still missing: Python addressing parity, enabled same-name coexistence and full backend-specific migration/reader acceptance. Watcher rollout and V2 segment import remain separate follow-ups. No production database or published package changed.

Verification at 87a8619

• cargo test -p aw-datastore -p aw-query -p aw-server: passed, including 11 device HTTP fixtures. Additional configured API-key fixture covering all four grouped routes passed separately.
• Catalogue/list and grouped-transfer fixtures failed with 404 before implementation, then passed. Tests verify source UUID ownership on a different destination, idempotence, full-envelope identity preflight and no writes for invalid envelopes.
• Earlier fixtures cover scoped CRUD/event/heartbeat isolation, ambiguous global aliases, forged ownership, UUID/local equivalence, query invalidation, invalid inputs, bulk limits, separately decoded URL components, streamed JSON/CSV scope, scoped import, guarded collisions and real SQLite/WAL reader/reopen behavior.
• cargo clippy -p aw-datastore -p aw-query -p aw-server --lib --bins -- -D warnings, formatting, whitespace and normal commit hooks passed. Web UI not built. Strict all-target Clippy is not claimed green (pre-existing query test-fixture warning).
• Independent read-only cheap-model review of this slice found no concrete bug. Earlier reviews found and led to regression-tested repairs for peer !local metadata, import UUID normalization and collision status.
• Brain make test-fast: 1505 passed / 1 skipped; make typecheck: 286 package and 1803 script files passed. These are not Rust coverage. Upstream current-head CI/review remains separate.

The Greptile 2/5 summary reviews def5ea9, not current head. All three named findings already have individual replies and pushed repairs: rename protection 96b1e34, creation/write agreement and hostname-sensitive reader refresh 1216619, retained through later integration. Heartbeat rename/delete invalidation is separately owned by #826.

[greptile-apps]

Confidence Score: 2/5

[High impact] The changes reach bucket storage and the server’s device-scoped data routes.

The PR needs fixes before merging because tests cannot compile and device-scoped writes can remove another device's events.

Findings

1.  Test fixtures cannot compile ▶
2.  Scoped writes remove peer events ▶
3.  Creation acknowledges another device's bucket ▶

Summary

Adds hostname aliases and device-scoped APIs while preserving stored bucket names.

• Bucket aliases keep old and hostname-tagged names on one history.
• Device-scoped routes keep bucket, event, and query calls with one owner.
• Device lists and grouped transfers preserve each bucket’s source identity.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Request[Device-scoped request] --> Normalize[Normalize local UUID]
  Normalize --> Handle[Scoped datastore handle]
  Handle --> Worker[Serialized worker]
  Worker --> Resolve[Resolve exact name or hostname alias]
  Resolve --> Bucket[Stored bucket row]
  Bucket --> Events[Read or write events]
  Worker --> Export[Grouped export]
  Export --> UUID[Replace local sentinel with source UUID]
  UUID --> File[Stage JSON in private tempfile]

Loading

_{Reviews (2) · Last reviewed commit: "Merge origin/master into feat/device-add..." · Reviewed by Greptile}

[TimeToBuildBob]

The 2/5 summary reviews def5ea9, not current head 1e0a3c5. Its three findings already have pushed repairs and individual replies: rename alias protection in 96b1e34; creation/write target agreement and hostname-sensitive reader refresh in 1216619, retained through the later cache/routing changes. I checked the current source and all three named regression tests; I did not rerun tests in this monitoring pass.

The implementation owner is actively extending this draft in the same leased worktree. I left that work untouched and handed back the review refresh for the next verified push. No additional fix or Greptile retrigger from this dispatch; the old score is not evidence that the current head has passed review.

[TimeToBuildBob]

Follow-up a3c3d64: CI compile failed because master's new Bucket fixtures (test_merge_subwatcher_fields, legacy_clean tests) omitted device_id. Stamped "local". cargo test --workspace --no-run now compiles; test_merge_subwatcher_fields and legacy_clean tests passed locally.

[TimeToBuildBob]

Convergence adjudication deferred by the freshness gate. Rechecked 2026-10-23 17:44 UTC: current head 9a8bf770aef3fc0c1a80764acfeafd029853a5c8 is 20 commits ahead of Greptile’s latest reviewed commit cd6c7eff3d0b9835e5fe5fd41a360a3a335f5680, confirmed by the summary footer, submitted review and GitHub compare. There is no bob-ai-review marker in the paginated conversation.

No findings classified, dismissed or resolved in this adjudication pass; no review retrigger or merge. The detector reports round_convergence.stable_rounds = 0. All seven current-head checks pass: format, Clippy, Linux/macOS/Windows, Android and coverage. Passing CI does not establish review coverage. This is not a merge recommendation: await an automatic review covering the current head before convergence adjudication.

Updated this existing deferral rather than adding another status comment. Earlier checks at a3c3d64, 6f9efed, a9e5f61 and d9b1805 also failed the same freshness gate; subsequent implementation pushes do not themselves establish review coverage.

[codecov]

Codecov Report

❌ Patch coverage is 96.03869% with 86 lines in your changes missing coverage. Please review.
✅ Project coverage is 87.33%. Comparing base (656f3c9) to head (ad9c02b).
⚠️ Report is 225 commits behind head on master.

Files with missing lines	Patch %	Lines
aw-datastore/tests/bucket_resolution.rs	93.28%	28 Missing ⚠️
aw-datastore/src/datastore.rs	93.24%	15 Missing ⚠️
aw-datastore/src/worker.rs	86.95%	12 Missing ⚠️
aw-server/src/endpoints/import.rs	84.48%	9 Missing ⚠️
aw-datastore/src/recovery.rs	77.77%	4 Missing ⚠️
aw-datastore/tests/datastore.rs	99.00%	4 Missing ⚠️
aw-datastore/src/export.rs	75.00%	3 Missing ⚠️
aw-server/src/endpoints/device.rs	93.87%	3 Missing ⚠️
aw-server/tests/api.rs	98.21%	3 Missing ⚠️
aw-datastore/src/legacy_import.rs	84.61%	2 Missing ⚠️
... and 2 more

Additional details and impacted files

@@             Coverage Diff             @@
##           master     #836       +/-   ##
===========================================
+ Coverage   70.81%   87.33%   +16.51%     
===========================================
  Files          51       94       +43     
  Lines        2916    14938    +12022     
===========================================
+ Hits         2065    13046    +10981     
- Misses        851     1892     +1041     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[TimeToBuildBob]

Integration update at ee18948 (fix 6f9efed): reproduced both current correctness findings before repair. A forged explicit event ID moved a different device’s event (200); guarded peer creation returned 304 although scoped GET was 404. Whole-batch ID ownership preflight now precedes insertion, covering event and heartbeat inserts while preserving same-bucket replacement. Rejected batches leave no accepted prefix. Guarded peer creation and import collision return 409. Datastore/query/server suites and production-target strict Clippy pass; 14 device HTTP tests and 14 resolver fixtures pass. ee18948 verifies scoped alias privacy uses the stored bucket name without filtering a different peer name. Compilation was already repaired by a3c3d64. Both duplicate-name guards remain; no full same-name acceptance or release claim. Shared real-HTTP fixtures in ActivityWatch/aw-server#200 pass both transfer directions and alias/query/heartbeat behavior (8 cases).

[TimeToBuildBob]

Further guarded acceptance is pushed through a3bca14. 1a16373 keys heartbeat cache/invalidation/privacy fallback by (device_id, stored id); an internal same-name fixture reproduced cross-device cached event-ID failure before repair. 9a81923 includes ownership in reader signatures (old schemas remain supported), with real open-reader ownership-repair coverage. a3bca14 propagates signature/reload failures instead of serving stale identity: a real-file fixture reproduces a rejected ambiguous catalogue, verifies reads/list fail closed, then verifies recovery after repair. Full datastore/query/server suites and strict production-target Clippy pass; 16 resolver fixtures pass. Both duplicate-name guards remain. Remaining work is coherent same-name legacy-index/list/export/rename integration plus the complete acceptance matrix. #826 remains separately owned; its delete/rename invalidation will need the pair keys. No production migration or complete identity claim.

[TimeToBuildBob]

Guarded continuation pushed through d9b1805. Three reproduced repairs: 8c95cad scopes hostname repair and verifies open-reader aliases; 3e9f4ec retains local authority through legacy Python import/canonicalization/dedup with caller-scope restoration; f47b8c9 refreshes migration destinations before mutation, rejecting a newly created peer destination without changing history. d9b1805 adds exact v6→v7 row/name/archive/event-association preservation, including pre-epoch nanoseconds and binary archive bytes; existing migration code passes.

Local verification: datastore/query/server 348 passed / 2 ignored, strict production-target Clippy and formatting passed; workspace test targets compile; aw-sync 221 passed; eight shared real-HTTP Python/Rust cases pass (distinct stored names sharing aliases). Normal hooks passed. Both duplicate-name guards remain; this is not enabled same-name coexistence, completed identity acceptance, upstream release or production migration. Contributor-owned #826 remains separate and its eventual invalidation integration must use pair keys. Deferred recovery retains fresh rollback backups on incomplete attempts; no completion markers or retained history were weakened.