fix(holder): a handover must not freeze the config it was started with - #356

Open

codeslake wants to merge 43 commits into

cnighswonger:mainfrom

codeslake:fix/handover-rereads-config

Commits on Aug 24, 2026

fix(holder): a handover must not freeze the config it was started with

codeslake
and
claude
committed
19e5104

Commits on Aug 25, 2026

Give a holder handover its own signal, and its own drain budget

codeslake
and
claude
committed
b1b1409
Say that a key absent from the handover env is inherited, not unset

codeslake
and
claude
committed
ca3727a
Warn that the shutdown's stdout line cannot name the arm in a log

codeslake
and
claude
committed
e99215d
End a handover drain when the bytes stop, not when a clock does

codeslake
and
claude
committed
663c1d6
Say what a forced close cut, and cover the operator stop that had no test

codeslake
and
claude
committed
fa791c5
End a handover drain per connection, not per port

codeslake
and
claude
committed
e9f7071
Kill the arrival-stamp guard with a test, not with a comment

codeslake
and
claude
committed
adc7950
Trim the drain comments to the invariants they carry

codeslake
and
claude
committed
ace5963
Age a connection from arrival only when it has written nothing

codeslake
and
claude
committed
71971d1
Trim the arrival-scope comments to their invariants

codeslake
and
claude
committed
9b2d33b
Split the stall's cut on bytes delivered, not on headers buffered

codeslake
and
claude
committed
74e0d9e
Trim the byte-split comments to their invariants

codeslake
and
claude
committed
faa0a50
Count a stall-ended connection once, and pin the count with a case

codeslake
and
claude
committed
fb7dd92
Do not report a cut for a reply that had already ended itself

codeslake
and
claude
committed
1fa7b6c
Trim the ended-itself guard to its two invariants

codeslake
and
claude
committed
f81474c
Say what the FIN case actually pins, and rename the stall case

codeslake
and
claude
committed
e358b67
Document the drain rewrite and its window

codeslake
and
claude
committed
3723935
fix(test): classify() must survive a probe that answers with a status code

codeslake
and
claude
committed
35ac847
fix(drain): deliver a finished-but-unflushed reply instead of severing it

codeslake
and
claude
committed
e0ed7a7
fix(drain): a forced close says how long each cut connection had been quiet

codeslake
and
claude
committed
68524b0
fix(test): remove the handover-env scratch dirs the suite was leaking

codeslake
and
claude
committed
c5a08d8
fix(drain): the budget defers to the stall test instead of cutting live replies

codeslake
and
claude
committed
9ab02c4
fix(test): end the standby relays this file causes to arm

codeslake
and
claude
committed
75fa262
test: inventory the extensions that append to a file

codeslake
and
claude
committed
b729aba
feat(drain): say how much was owed when the drain started

codeslake
and
claude
committed
10d8759
fix(drain): a stop under a live holder waits for its replies instead of cutting

codeslake
and
claude
committed
9f0f0bf
test: a stop case must not bet on throughput to reach its own premise

codeslake
and
claude
committed
6eeb2e8

Commits on Aug 26, 2026

fix(handover-env): honour a line only once its newline is written

codeslake
and
claude
committed
dbcc494
fix(drain): unbind at once, and report silence rather than age

codeslake
and
claude
committed
af31733
docs(changelog): the unbind and the half-written handover line

codeslake
and
claude
committed
24fc446
refactor(drain): count the owed set, do not copy it

codeslake
and
claude
committed
9ea363c
test(drain): pin the owed count, not only the shape of the line

codeslake
and
claude
committed
374e1b3
fix(drain): a reply that ended itself is not a cut, but it is still owed

codeslake
and
claude
committed
91f6f4d
fix(handover-env): the file must not be able to move itself

codeslake
and
claude
committed
90245a4
docs: name the arm that keeps the ceiling, and the drainer a stop leaves

codeslake
and
claude
committed
2b63220
test(handover-env): a mode-000 file is readable by root

codeslake
and
claude
committed
0175316
fix(drain): the route tally still rendered an authority, userinfo and all

codeslake
and
claude
committed
9d15e1d
fix(drain): a negative budget cut every owed connection on the first tick

codeslake
and
claude
committed
7640515
fix(drain): whitespace was still the guillotine, and a shape filter cannot hide an authority

codeslake
and
claude
committed
14c2587
fix(proxy): retire the forward-mode vote when the drain ends, not when it starts

codeslake
and
claude
committed
622b117

Commits on Sep 5, 2026