- The agent prompt's username field is user-editable. It was passed
straight to `auth::authenticate`, so a request scoped to specific
accounts (e.g. root only) could have its PAM conversation redirected
to any local user. `resolve_user` now accepts only the `unix-user`
identities from `BeginAuthentication` (empty = the prefilled default);
anything else re-shows the prompt with an explanation. PAM still has to
clear polkit's own authorization, but this closes the foot-gun at the
one place the identity list is known.
- A failed single-instance lock now exits(1) instead of continuing: a
second agent would `serve_at` the same object path, and a prompt held
by a process that couldn't take the lock is ambiguous state.
bread-app is the GTK bootstrap new tools should use instead of another
copied main.rs: com.breadway.* app id, singleton lock, optional
gtk_popup re-export, optional bread.command.<app>.** listen loop.
Tests cover app-id helpers and command-verb parse. Existing apps are
not migrated.
bread-polkit is an own PolicyKit1 session authentication agent with a
bread-theme GTK4 password prompt (not a polkit-gnome wrapper).
Autostart via contrib/bread-polkit.desktop or exec-once. Not a bakery
product; not added to the BOS ISO lockfile.
