f5090fcd9e
fix(site-runtime): reject invalid runtime actor names at the site gate and never let ActorOf escalate to the Deployment Manager (review 2026-10-21 01/SR-C1)
...
An instance unique name Akka refuses as a path element (space, '#', '/',
non-ASCII) made Context.ActorOf throw on the singleton's own thread; the
default Restart stopped every Instance Actor on the site. DeployCompileValidator
now checks the instance + script/alarm/native-source actor names with
ActorPath.IsValidPathElement (the Commons ActorNameRules mirror is stricter
than Akka for " ( ), pinned by a parity sweep), CreateInstanceActor catches
InvalidActorNameException and every caller reports it, and the Instance Actor
skips a refused child name like a compile failure.
2026-10-22 09:10:26 -04:00
b5cebf9fa6
fix(host): bind ConfigAuditOptions with ValidateOnStart on central (review 2026-10-21 08/G1 purge wiring)
2026-10-22 09:01:50 -04:00
c55128d83d
docs(centralui): 2026-10-21 review hardening (review 2026-10-21 07, 04/C4)
2026-10-22 09:00:49 -04:00
614aade610
fix(centralui): diagnose cache keyed on editor context; surface blocking-wait advisory as Monaco warning (review 2026-10-21 07/C-1, lane F)
2026-10-22 09:00:49 -04:00
5c8f6ff7aa
fix(centralui): bound script-analysis payload/concurrency; bound Test Run needs Deployer, site scope and audit row (review 2026-10-21 07/P-4, 07/C-2)
2026-10-22 09:00:49 -04:00
6644cf917d
fix(centralui): Topology live tick behind PollGate, refresh no longer unmounts tree (review 2026-10-21 07/P-2)
2026-10-22 09:00:49 -04:00
c429fb374b
perf(centralui): load template stubs/analysis projections instead of the full tracked graph (review 2026-10-21 07/P-1, 08/P1)
2026-10-22 09:00:49 -04:00
0ebfafa98b
fix(centralui): safe-invoke fire-and-forget calls in AlarmSummary and TreeView (review 2026-10-21 07/M-4)
2026-10-22 09:00:49 -04:00
420e934eb0
fix(centralui): cap retained event-log rows; hint keyword search 7-day window (review 2026-10-21 07/M-3, lane D follow-up)
2026-10-22 09:00:49 -04:00
b032d7fe48
fix(centralui): bound FlowDebugService script cache (review 2026-10-21 07/M-2)
2026-10-22 09:00:49 -04:00
bd0f87e523
fix(centralui): dispose ConfigurationAuditLog browser-time module (review 2026-10-21 07/M-1)
2026-10-22 09:00:49 -04:00
0bd856552c
fix(centralui): short negative TTL after a faulted pending-updates flight (review 2026-10-21 04/C4)
2026-10-22 09:00:49 -04:00
d36f360d35
fix(centralui): SessionExpiry skips redirect after dispose (review 2026-10-21 07/C-3)
2026-10-22 09:00:49 -04:00
1e3765ba6e
fix(host): NodeOptions-bound ports, central ESG cache TTL, hosted warm-up wiring; document AllowSingleNodeCluster as validation-only (review 2026-10-21 08/O5, 08/O4, 05/U3)
2026-10-22 09:00:49 -04:00
fa73ddb453
fix(inbound): background active-node-only method warm-up service (review 2026-10-21 05/U3)
2026-10-22 09:00:49 -04:00
4921ebb0c8
fix(host): distinguish secret-store fault from missing PSK secret (review 2026-10-21 05/U2)
2026-10-22 09:00:49 -04:00
12f815a7ea
fix(esg): short-TTL definition cache for central lookups (review 2026-10-21 05/P2)
2026-10-22 09:00:49 -04:00
ee8be8001e
fix(esg): JSON-serialise non-scalar GET/DELETE query parameters (review 2026-10-21 05/O2)
2026-10-22 09:00:49 -04:00
e93af5a21f
fix(inbound): single-use nonce on relay provenance proofs (review 2026-10-21 05/O1)
2026-10-22 09:00:49 -04:00
26baa5a170
fix(inbound): in-memory request buffering; relaying standby skips audit capture (review 2026-10-21 05/M4)
2026-10-22 09:00:49 -04:00
6c9dfaf700
fix(inbound): prune expired ApiMethodCache entries; pin exact-name scopes (review 2026-10-21 05/M3)
2026-10-22 09:00:49 -04:00
d7e87c0688
fix(inbound): single-flight method compile so concurrent first callers share one assembly (review 2026-10-21 05/M1)
2026-10-22 09:00:49 -04:00
37c25db2f1
fix(site-runtime): batch native-alarm deletes into the coalesced flush transaction; docs for scripts/cache/scheduler (review 2026-10-21 01/SR-P2)
2026-10-22 09:00:49 -04:00
010d2ea438
fix(site-runtime): ConfigureAwait(false) on remaining script helper awaits (review 2026-10-21 01/SR-U2)
2026-10-22 09:00:49 -04:00
4ff26a0614
fix(site-runtime): rate-limit shed Warning logs per script/alarm (review 2026-10-21 01/SR-P6)
2026-10-22 09:00:48 -04:00
7541a38762
fix(site-runtime): reuse exited detached worker slots in script scheduler (review 2026-10-21 01/SR-M1)
2026-10-22 09:00:48 -04:00
96cab3f3d7
fix(site-runtime): compile cache eviction counter+warning, configurable bound, never cache faulted compiles (review 2026-10-21 01/SR-M2)
2026-10-22 09:00:48 -04:00
b0a08bb63b
fix(auditlog): explicit permanent rejections on the ingest ack (IngestAck.rejected_event_ids, field 2) with a dedicated counter; reconciler ignores transient faults for abandonment; persist the served high-water mark; prune only on a non-empty enumeration (review 2026-10-21 06/PERF-1, 06/IMPL-1 adversarial follow-up)
2026-10-22 09:00:48 -04:00
38167bca88
fix(auditlog): prune per-site reconciliation state and pull-channel caches for sites absent from the enumeration; bound the abandoned-id set (review 2026-10-21 06/MEM-2)
2026-10-22 09:00:48 -04:00
9e7e19c3c1
fix(auditlog): reconciliation pull serves only unacked rows (PushAbandoned/Rejected push-exit states), central pages within a tick with set-based inserts; refused push rows leave the queue after N attempts (review 2026-10-21 06/PERF-1, 06/COR-3, 06/IMPL-1)
2026-10-22 09:00:48 -04:00
1da5d0bac4
fix(auditlog): page the site audit purge, bound incremental_vacuum per page, fail fast instead of parking writers on a full queue (review 2026-10-21 06/MEM-1)
2026-10-22 09:00:48 -04:00
268b55e350
fix(auditlog): do not log a graceful-stop OperationCanceledException at Error in the telemetry drains (review 2026-10-21 06/COR-2)
2026-10-22 09:00:48 -04:00
15496575bc
fix(communication): release the _activeStreams slot when relay ActorOf throws (review 2026-10-21 03/M-2)
2026-10-22 09:00:48 -04:00
dd60e236bd
fix(communication): ReconcileSite threads the gRPC call's cancellation into central reconcile work (review 2026-10-21 03/P-1b)
2026-10-22 09:00:48 -04:00
429ccb8d90
fix(communication): failback probe sentinel uses an illegal actor name so it can never match a real instance (review 2026-10-21 03/P-2 follow-up)
2026-10-22 09:00:48 -04:00
82976b7377
fix(communication): streaming endpoint lookups are generation-fenced and cannot strand their in-flight guards (review 2026-10-21 03/R-2 follow-up)
2026-10-22 09:00:48 -04:00
e0ebebac11
fix(communication): site-address load guard cannot wedge on an unexpected fault; lifecycle-cancelled loads log at Debug (review 2026-10-21 03/M-1 follow-up)
2026-10-22 09:00:48 -04:00
4456a04e81
fix(communication): failback probation is time-boxed and cleared on address change (review 2026-10-21 03/P-2 follow-up)
2026-10-22 09:00:48 -04:00
f4d328aecc
fix(communication): alarm aggregator reconcile tick does not reopen while a backoff reconnect is pending (double subscribe; surfaced by review 2026-10-21 03/R-2 work)
2026-10-22 09:00:48 -04:00
c5add11546
fix(communication): command-plane failback probes readiness with a real RPC; backoff resets only after a real call succeeds (review 2026-10-21 03/P-2)
2026-10-22 09:00:48 -04:00
017308a397
fix(communication): DebugStreamService drops the session on an InstanceNotFound snapshot (review 2026-10-21 03/M-3)
2026-10-22 09:00:48 -04:00
90306f0ccb
fix(communication): streaming consumers re-resolve site gRPC addresses on every reopen; spec matches (review 2026-10-21 03/R-2, 03/D-2)
2026-10-22 09:00:48 -04:00
3ed71167b3
fix(communication): site-address refresh gets an overlap guard, per-load deadline and monotonic sequence (review 2026-10-21 03/M-1)
2026-10-22 09:00:48 -04:00
b0a97a4b67
fix(communication): malformed site gRPC address keeps the old channel, never aborts the refresh tick or restarts CentralCommunicationActor (review 2026-10-21 03/R-1)
2026-10-22 09:00:48 -04:00
0fd9bcbce6
fix(communication): delete dead SiteAddressCacheLoaded.SiteContacts + legacy NodeA/B parse (review 2026-10-21 03/D-1)
2026-10-22 09:00:48 -04:00
004f3bd155
fix(configdb): delete dead repository members; completes 08/P8 for owned files (review 2026-10-21 08/P8; CentralUi members and tests went in the preceding P5 commit)
2026-10-22 08:33:09 -04:00
c6e4c7820a
fix(configdb): InstanceLocator single untracked projected join (review 2026-10-21 08/P7)
2026-10-22 08:33:09 -04:00
1d00d5f469
fix(configdb): deterministic config-audit paging (review 2026-10-21 08/P5)
2026-10-22 08:33:09 -04:00
036f341a9d
fix(configdb): opt-in config-audit retention purge + after-state size cap (review 2026-10-21 08/G1)
2026-10-22 08:33:09 -04:00
394234b450
fix(dcl): advance the session generation when a reconnect attempt is issued, not when its result is applied (review 2026-10-21 02/C1 follow-up)
2026-10-22 08:33:00 -04:00
Joseph Doherty