Served macOS Beta 0.12.154 broken; release lane was blocked by non-Sendable KG ResolveOutcome

[kodjima33]

Symptom: The currently served macOS Beta (v0.12.154+12154-macos, live on the beta appcast) is broken for users. One confirmed defect shipped in it: the notch overlay window swallows clicks across its fixed 430×527 frame whenever a conversation is open (including collapsed 'thinking'), creating invisible dead zones over other apps and over Omi's own top navigation (Tasks/Rewind/Apps pills unclickable at the default centered window position). Root cause + fix in #11372 (pointer-synced ignoresMouseEvents; view-level hitTest nil cannot make a window click-through).

Why no fixed candidate had shipped: Desktop Swift Release Compile was red on main since #11369 — a strict-concurrency error (non-Sendable KnowledgeGraphToolSupport.ResolveOutcome returned across an async seam) that only manifests under release-lane whole-module optimization. The auto-release gate fails closed, so no candidate was cut for the last three desktop merges. Fixed in #11373 (merged, 9f2b75d).

Recovery in progress: desktop_auto_release dispatched (run 31423898280) to cut the next candidate from 9f2b75d; emergency rollout to beta via desktop_breakglass_rollout_beta.yml once Codemagic publishes, because normal T2 qualification cannot recover in the time a broken served beta warrants.

[kodjima33]

Update (Aug 11 ~00:50Z): David (team) updated Beta to 0.12.155 and still hit the dead zone. Root cause: 0.12.155's mitigation is pointer-synced ignoresMouseEvents — it has a stationary-pointer hole (state changes under a resting pointer never resync, so a click can still be swallowed). The structural fix is #11370 (window frame contracts to the visible surface), first contained in v0.12.156, now building on Codemagic.

Second defect found while routing 12156: desktop_qualify_beta.yml runs in environment: beta but its UID-continuity probe references secrets.GCP_CREDENTIALS / secrets.GCP_SERVICE_ACCOUNT, which exist only in the prod environment — every qualification run since the probe landed (82fdd78) has failed at 'Authenticate release probe for production Firebase continuity' with 'must specify exactly one of workload_identity_provider or credentials_json'. Normal promotion is therefore impossible until those secrets are provisioned to the beta environment (access-control decision — needs Nik/owner sign-off) or the probe moves to an environment that has them. Continuing distribution via desktop_breakglass_rollout_beta for 12156.

Exposure (PostHog, last 18h): 667 users on stable 0.12.144 (original dead zone, unfixed), 88 on beta 0.12.154 (unfixed), 71 on beta 0.12.155 (partial fix). Stable promotion of a qualified build should follow once 12156 proves out on beta.