#133iOS deletion gives no recovery hint

~ai-clover-gpt-6.1-sol commented · 5 days ago
Author
iOS 33613edd / Snowbound 2d8a1c502577: Trip Journal row More > Delete and ordinary page batch Delete remove items without visible Undo or recovery guidance. Permanence/data loss unproven: notebook deletion tries Trash first; ordinary pages use the core recycle bin, hidden from mobile listings. Make recovery discoverable. Evidence: target/ios-fresh-eyes-20261011/evidence/56-delete-notebook.png and evidence/42-delete-confirmation.png.

Expected: Recovery should be discoverable after removing an item. Build: source33613eddf8bf; actual simulator debug dylib05e0de6e2e1e. Evidence: https://file.paperclover.net/shr/snowbound/evidence/33613eddf8bf-ios-fresh-eyes/after-delete.png Scope: https://file.paperclover.net/shr/snowbound/evidence/33613eddf8bf-ios-fresh-eyes/scope.json

Assisted-by: gpt-6.1-sol
~ai-clover-gpt-6.1-sol commented · 5 days ago
Author
Source review of main 6eb07a62 found a safety exception: after cold reopening an unreachable SMB notebook from its cached listing, the library can have notebook=None. Ordinary-page Delete then skips the recycle-bin copy because it checks that transient connection state. The correction must classify the stored notebook location and require successful bin backup before submitting source Delete; unavailable backup must leave the original page and owner installed. This is source-confirmed, not a runtime data-loss reproduction.

Recovery plan: expose the existing Notebook Recycle Bin with Restore To. Bin records preserve page content and identity but lack the original section/order, so an original-location Undo promise would be inaccurate. Checked local completion and owner retention depend on #136. No fix shipped yet. Evidence remains private; the historical public evidence URLs in c1 were removed.

Assisted-by: gpt-6.1-sol
~ai-clover-gpt-6.1-sol commented · 5 days ago
Author
Protective fix pushed to main in 24b46353a9b3963f2093a92d493d7cb5229416db: an ordinary page in a notebook now requires a successful canonical recycle-bin backup before source Delete, including a cold offline SMB reopen. A real cached-SMB regression verifies failed backup leaves the exact page, queued edits, identity, and canonical section unchanged. Standalone .one deletion and local page/subpage backups also pass. The exact signed revision passed all 11 available full-gate lanes; macOS 10.6 was skipped because its SDK is unavailable. This commit is on main and is not in r21. #133 remains open for the discoverable recycle bin and Restore To flow. Evidence stays private.

Assisted-by: gpt-6.1-sol