[lahfir]

Adds the Linux adapter through the same CLI, C library, and npm packages as macOS and Windows. AT-SPI observation and ref actions cover GNOME, X11, and Wayland, with explicit platform limits. Target identity and delivery reporting distinguish safe refusals, confirmed effects, and uncertain writes.

The adapter shares visibility and actionability evidence, avoids unsafe bulk Qt property reads, attributes launch handoffs to a proven owner, and uses process-bound GTK exports where ordinary accessibility dispatch blocks in a nested modal loop. Combo selection verifies the committed owner value instead of popup highlighting. Optional monitor reads cannot hold a completed snapshot until its deadline. Clipboard ownership retains security checks while reclaiming proven stale records.

Shared changes include bounded asynchronous Windows placement verification, more precise delivery dispositions, ref-action resolution and recovery, text-sensitive typing deadlines, pointer geometry, and session cleanup. Toolkit coordinate semantics use the toolkit's own AT-SPI declaration; application names and versions do not select runtime behavior.

Validation of the integrated repairs:

• Final Linux library suite: 2,163 passed, zero failed, 233 intentionally ignored native/environment cases. Core 1,515, macOS 765 and FFI 183 unit tests passed; CLI/integration tests, Clippy, formatting, source rules, architecture isolation and Windows-target core compilation passed. Native Windows runtime and live macOS E2E were not rerun for the Linux-only follow-up. A macOS test-only socket-name collision was reproduced with a frozen clock and fixed by separating concurrent phases; all three affected tests and the full 765-test macOS unit suite pass.
• Earlier private X11 and Wayland ref-table pass totals are superseded by the strict gate integrated through test: enforce snapshot promises in linux ref contracts #308. Corrected native Wayland results are GTK3 33 passed/3 failed, GTK4 21 passed/9 failed, and Qt 35 passed/4 failed; the Qt combo row also records unexercised collapse setup. The corrected private X11 gate reports GTK3 37 passed, GTK4 21 passed/9 failed, and Qt 36 passed/3 failed. Window-workflow evidence is separate: Openbox and Mutter each passed six VM legs before the last Wayland-specific fixes, and the final release passed native Wayland GTK3 dialog/Save chooser workflows. Independent native regressions cover menu inventory, explicit headed Qt choice commitment, GTK4 entry focus and clipped-viewport refusal.
• The ref contract keeps snapshot-derived expectations unchanged. An advertised action that refuses fails rather than becoming a passing refusal; fixture close requires a successful response and both independent effects. Both regressions fail before repair and pass afterward; test: enforce snapshot promises in linux ref contracts #308 passes all 21 focused tests and the 344-test harness suite (one skip). No automatic headed fallback is permitted. Native Wayland Qt combo opening requires a user input serial; backend discovery failure remains an error. Semantic menu activation does not require global pointer coordinates, while physical delivery retains its geometry checks.
• A headless stranger workflow created, saved, reopened and extended a note, verified through independent file contents and a fresh complete snapshot. Earlier seven-sample snapshot latency after warm-up was 33.4/37.2/42.1 ms min/median/max versus 32.2/40.5/48.1 ms baseline. A completed snapshot under withheld RandR replies dropped from 2.025 s to 35–95 ms. These measurements precede the final Wayland fixes.

Measured limits remain visible in the strict failures: GTK 3.24.41 retains stale Atk FOCUSED state after three reset workflows despite correct Gtk focus and delivered effects (L41-30); GTK4 entry activation does not emit the requested callback (L41-22), and tab/list native selection indices cannot be safely inferred from accessible indices (L41-9/L41-12). Qt popup-row selection can highlight without committing the combo value (L41-13), and native Wayland popup opening requires an input serial (L41-29). No raw-state masking, speculative selection write, synthetic headless input or ineffective reset delay was added. A viewport crossing display boundaries is conservatively refused even if the display union covers it.

This is the Linux-to-main promotion PR. Repair PRs #302–#308 are integrated; final CI and review refer to head d5cc0cc. Promotion awaits human approval.

Use Squash and merge: older commits on this branch are unsigned.

[greptile-apps]

Confidence Score: 5/5

[High impact] The latest repairs appear safe to merge, with both numbered findings addressed and no new blocking issue found.

Summary

This PR adds Linux support through the CLI, C library and npm package.

The latest update tightens the Linux test gate:

• Linux desktop commands can inspect apps and carry out supported actions.
• Operation results show what was targeted and how delivery ended.
• Linux CLI and FFI packages include the clipboard-owner helper.

No new actionable issues were established in the changes since the previous review. Tests were inspected, not run.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Snapshot promises an action] --> B[Run the action]
  B --> C{Successful response?}
  C -->|No| F[Fail the row]
  C -->|Yes| D{Both independent effects appear?}
  D -->|No| F
  D -->|Yes| E[Pass the row]

Loading

_{Reviews (16) · Last reviewed commit: "test: enforce snapshot promises in linux..." · Reviewed by Greptile}

[lahfir]

Delivered through #311. That PR's head contains this branch's tip (2212399), and its squash landed on main as 4c598cd. After main was merged back in (fbb38ba), this PR has no changes against main, and main requires linear history, so there is nothing left to merge. The Linux adapter ships in 1.0.0 (#322).