## October 7 two-person checklist: combined candidate

**Candidate:** commit `2ca21608ad402da796e6399317ed93ce204288d5` on test branch [`codex/team-dogfood-integration`](https://github.com/githubnext/ace2/tree/codex/team-dogfood-integration), Canary 0.0.15 (no version bump), publishing off. **No signed installer exists for it.** - [Run 37538321016](https://github.com/githubnext/ace2/actions/runs/37538321016) was cancelled at the user's request during app notarization. There had been about 14 minutes with no output; see #167. - [Retry 37540590863](https://github.com/githubnext/ace2/actions/runs/37540590863) failed in the first of two notarizations: the app ZIP, at `release.ts:135`. Submission `697b5f49-4827-4e50-83e2-4e3f80a6ec0d` reached `notarytool`'s 1200-second wait timeout before processing completed. It was a timeout, not a rejection, and its later status at Apple is unknown. Publishing was skipped and the run has no artifacts. Details are on [#167](https://github.com/githubnext/ace2/issues/167#issuecomment-6026938024).

That commit is the original base `6dc0f1c` plus these exact heads, all merged cleanly with no integration patches: - #157 `54e2bc1`: project and teammate grouping - #159 `a476c32`: watch recovery and the delete race (#153) - #160 `14c6923`: peer messaging (#57) - #161 `b30e9f6`: collaborator invocation UI and events - #165 `cf89a0f`: persistent drafts (#77)

Since then, #157, #159 and #165 have been merged to main at these same heads (not by this check). #160 and #161 are still open drafts.

### Solo checks passed on Oct 6 (one host, owner only) - **Static checks:** `bun types` and `bun run ci` pass on the combined tree. - **Transport** (raw watcher events, real workers, `claude-haiku-4-5`): - With sharing off, an agent's say posts and its invoke is refused. After the owner turns sharing on, the invoke runs. - Watchers receive `shared` changes live. After a worker kill (including mid-run), a crash, and a host restart or crash, they get a complete, consistent replay and later events. - `host.sock` is reclaimed after a crash. The CLI-only fallback still enforces the destination sharing setting. - **Mounted app** (two owner contexts on one gateway): - A real socket close followed by a sharing change, and a durable worker kill: the open page catches up without reload, showing each message and the model reply once. - Agent say and invoke with sharing off, then on. The author is stamped `agent.<source channel id>@<login>`. - Drafts (Unicode, multiline, formatted) restore after a quick page close and reopen; each chat and the dashboard keep only their own; Send without a provider is blocked and keeps the draft; a sent message's text is cleared. - Deleting a selected channel: no worker restart, no storage errors. A later agent message to the deleted channel is refused. - See each PR's own validation: #159, #161, #165. - **Not covered solo:** a second host or login, peer paths, and teammate-only views. A native attempt at this commit rendered the dashboard pixels, but exact-target automation was too limited to gain native draft, sharing or grouping acceptance ([#73 comment](https://github.com/githubnext/ace2/issues/73#issuecomment-6026757352)). Native acceptance stays manual tomorrow (items 1, 4 and 8 below). Hosted channels are not covered either; their outbound messaging is tracked separately in #13.

### Two-person and native acceptance (in order) 1. **Install:** this needs a signed, notarized build. None exists yet, so this step and the native items are blocked until one does. When there is one, check its DMG SHA-256 against its `release.json`. Then install it manually per [docs/updates.md](https://github.com/githubnext/ace2/blob/2ca21608ad402da796e6399317ed93ce204288d5/docs/updates.md#experience): stop Ace Helper before replacing the existing app, then reopen Ace. Settings → Updates confirms only the version. Both Macs must be on the same team tailnet, with Ace Helper running. 2. **Grouping (#157):** each host lists the other's channels. The shared repository shows as one project, under the right teammate's section. Create and Archive inactive act only on your own host. 3. **Identity:** each person's messages show their own Tailscale login. Channel details show the right owner, and avatars match each GitHub login. 4. **Sharing (#161):** with sharing off, the teammate sees the read-only state live. Their Ace/@ace draft is held with its attachment, Switch to Chat works, and plain chat posts. Their invoke is refused with no run. With sharing on, their invoke runs on the owner's host. 5. **Content:** post text and an image in each other's channels. Ask an agent for a one-line change in a disposable project, then open its diff from both hosts. 6. **Messaging (#160, #57):** A's agent runs `channels` and sees B's channel with its id, host, owner, state and project. It messages B's channel by id, first as a say, then as an invoke. - B shows the author `agent.<A-id>@<A-login>`. The invoke is refused while B's sharing is off and runs once it is on. - B's agent replies by id. After A's channel is renamed, the reply still lands. - Interrupting A's worker during delivery causes no duplicate on replay. 7. **Recovery (#159, #153):** while each person watches the other's channel: - kill its worker, including mid-run; - drop Wi-Fi or Tailscale for 30 seconds or more; - sleep and wake each Mac.

Each time, check without reloading: no duplicates, the sharing state is current, and new events arrive. 8. **Drafts (#165, #77), native:** on each Mac, type a Unicode, multiline, formatted draft in a chat and on the dashboard. Quit normally and relaunch, then repeat with a quit right after typing. Both drafts come back exactly, each in its own place. A sent message clears its draft; a failed invocation keeps it. 9. **Directory offline** (only if a team directory is configured): channels on a sleeping or quit host show as offline. An agent's message to one of them fails without queuing anything. After wake, the channels are reachable again.

Separate follow-ups, not fixed by this candidate: #166, #162, #164. Leave this issue open until every item passes.