Repository navigation

fix(fleet): lossless, honest live event stream across the fleet (#1770) - #1781

Merged

jeonghun-jj-lee merged 69 commits into

mainfrom

amico/issue-1770-fleet-event-stream

Oct 13, 2026

Merged

fix(fleet): lossless, honest live event stream across the fleet (#1770)#1781
jeonghun-jj-lee merged 69 commits into
mainfrom
amico/issue-1770-fleet-event-stream

Commits on Oct 12, 2026
- fix(fleet): fan-in serves every listener — one connection per listener, no eviction (#1772)
  amicode-ci
  committed
  1128140
- test(fleet): closing one fan-in listener closes only its own arms (#1772)
  amicode-ci
  committed
  b6c66fb
- test(fleet): reconcile updates every live fan-in connection on its cadence (#1772)
  amicode-ci
  committed
  dc0c310
- fix(fleet): cap concurrent fan-in listeners — refuse beyond it with a retryable 503, never evict (#1772)
  amicode-ci
  committed
  31db217
- test(fleet): two-listener harness — one local arm each, no re-open storm (#1772)
  amicode-ci
  committed
  691a8af
- test(fleet): #1264/#1601/#1617 hold per fan-in listener; retire single-origin notes (#1772)
  amicode-ci
  committed
  bebeba8
- feat(engine): stamp every global-stream frame with an <epoch>:<seq> id (#1776)
  amicode-ci
  committed
  d401ea0
- feat(engine): resume the global stream from a cursor via a shared replay buffer (#1776)
  amicode-ci
  committed
  a4cb720
- feat(engine): answer an unservable global-stream cursor with a reset frame (#1776)
  amicode-ci
  committed
  a13c802
- feat(engine): bound the global replay buffer by bytes and age, configurable by env (#1776)
  amicode-ci
  committed
  d2f51c9
- feat(engine): global-stream heartbeats carry server time and the current sequence (#1776)
  amicode-ci
  committed
  13e59af
- fix(engine): release a global-stream subscription when its client aborts (#1776)
  amicode-ci
  committed
  0589f1f
- test(engine): scratch-engine check of global-stream replay and abort release on the compiled binary (#1776)
  amicode-ci
  committed
  647e138
- refactor(engine): one release path for the global stream; log the disconnect after it (#1776)
  amicode-ci
  committed
  c6039fe
- Merge #1772: fan-in serves every listener — a second view no longer evicts the first (S1 of #1770)
  amicode-ci
  committed
  46c208c
- test(engine): deterministic global-stream harness — wildcard bind let a foreign 127.0.0.1 listener take the port (#1776)
  amicode-ci
  committed
  bf594cf
- Merge #1776: engine sequenced, replayable global event stream — epoch:seq ids, replay buffer, reset, abort release (S5 of #1770)
  amicode-ci
  committed
  30289ae
- feat(engine): sync copies are opt-in per global-stream subscription; the workspace control plane asks for them (#1778)
  amicode-ci
  committed
  dea6cd4
- feat(fleet): fan-in census line every 30 s — listeners, accepted/closed, evictions, per-arm traffic (#1771)
  amicode-ci
  committed
  f2b1b25
- test(fleet): census close reasons are the enumerated six; the real reader tells upstream end from error (#1771)
  amicode-ci
  committed
  7062f98
- test(fleet): census transitions log one line immediately with conn + arm; never per frame (#1771)
  amicode-ci
  committed
  5f8349f
- feat(fleet): log each ownership refresh's per-peer outcome, duration and entry count (#1771)
  amicode-ci
  committed
  c6c0e43
- test(fleet): the census adds no frame and changes no delivered byte — fleet-of-one and composite (#1771)
  amicode-ci
  committed
  cb427c0
- test(fleet): engine-shaped stream fixtures pinned to the engine wire; 10 MB frame in 64 KB chunks through the real reader (#1771)
  amicode-ci
  committed
  66306c4
- feat(engine): summary diffs carry no patch bodies on the wire; the per-turn diff view fetches a patch on expand (#1778)
  amicode-ci
  committed
  06eac85
- test(fleet): fan-in suites feed engine-shaped frames — id-less, sequenced, sync twin, heartbeat — not synthetic id: 1 (#1771)
  amicode-ci
  committed
  eb32273
- feat(engine): throttle shell output updates to <= 1 per 200 ms with a guaranteed final flush (#1778)
  amicode-ci
  committed
  6fdcbb7
- test(fleet): both fan-in boot branches log owner-map refresh outcomes and the census; tidy census line builder (#1771)
  amicode-ci
  committed
  7d40fec
- test(engine): fixture-turn byte report — largest live frame under 256 KB, total stream bytes before and after (#1778)
  amicode-ci
  committed
  7252573
- style(engine): prettier-format the #1778 tests (#1778)
  amicode-ci
  committed
  4f12b10
- Merge #1771: fan-in census line + engine-shaped stream fixtures (S0 of #1770)
  amicode-ci
  committed
  de4002b
- Merge #1778: engine burst-volume cuts — opt-in sync copies, patches on demand, throttled shell output (S7 of #1770)
  amicode-ci
  committed
  8291932
- fix(fleet): any data frame counts as delivered — a re-opened arm from an id-less engine announces its gap (#1773)
  amicode-ci
  committed
  925900e
- fix(fleet): a failed peer refresh keeps that peer's owner entries — routing and its event arm unchanged (#1774)
  amicode-ci
  committed
  7034b06
- fix(fleet): fleet-of-one local-arm loss severs the listener with a transport error, never a synthetic frame (#1773)
  amicode-ci
  committed
  ac38b74
- fix(fleet): past the retention window a peer's owner entries expire and its arm closes with the named unavailable comment (#1774)
  amicode-ci
  committed
  71dd6d2
- test(fleet): a successful refresh replaces a peer's owner entries authoritatively, and ends its unavailability (#1774)
  amicode-ci
  committed
  8bdaa1a
- fix(fleet): fan-in and proxies error-close a lost stream — only graceful shutdown ends a listener cleanly (#1773)
  amicode-ci
  committed
  da2f958
- fix(fleet): the arm reader treats a non-200 upstream as an error, never a clean end or frames (#1773)
  amicode-ci
  committed
  c10c399
- fix(fleet): an unknown-owner session request is tried locally first; a local miss is a retryable owner-unknown 503, not a 404 (#1774)
  amicode-ci
  committed
  7011432
- fix(fleet): the client treats an unexpected end of the global stream as a gap and forces a resync (#1773)
  amicode-ci
  committed
  e5186c6
- test(fleet): a just-created local session routes locally, and a remote create's pending binding survives a failed peer refresh (#1774)
  amicode-ci
  committed
  6668193
- docs(fleet): fan-in comments name the #1773 sever path (#1773)
  amicode-ci
  committed
  6a13937
- fix(fleet): the owner-map refresh line says what the map did with a failed peer's entries — retained, expired, dropped, unavailable (#1774)
  amicode-ci
  committed
  1c901c5
- refactor(fleet): an outcome-less owner-map update just forgets peer retention; feed docs describe the per-peer contract (#1774)
  amicode-ci
  committed
  df193f3
- Merge #1773: every lost stretch of events forces a resync — no silent gaps (S2 of #1770)
  amicode-ci
  committed
  bf64938
- Merge #1774: ownership map keeps a peer's sessions across a failed refresh (S3 of #1770)
  amicode-ci
  committed
  1491f3e
Commits on Oct 13, 2026
- test(fleet): installer write-mode runs reach launchctl only through a recording seam (#1775)
  amicode-ci
  committed
  edfa917
- fix(fleet): the installer generates one SSH forward agent per attached peer (#1775)
  amicode-ci
  committed
  3a45963
- fix(fleet): a hand-installed peer forward is replaced with a backup, never silently deleted (#1775)
  amicode-ci
  committed
  f342847
- fix(fleet): a re-opened arm resumes from its last engine id — the upstream replays the stretch, no gap, no resync (#1777)
  amicode-ci
  committed
  ac340bc
- fix(fleet): the healthcheck checks every per-peer forward agent the way it checks the hub tunnel (#1775)
  amicode-ci
  committed
  0bb0c61
- fix(fleet): the installer retires the session-wide multiplex-flag agent and unsets the leaked variable (#1775)
  amicode-ci
  committed
  8d67baa
- docs(fleet): the installer header and fleet README describe the per-peer forwards (#1775)
  amicode-ci
  committed
  c42fe5c
- fix(fleet): the client resumes from the SSE id and checks contiguity per origin — a hole or a reset resyncs, a replayed frame is never applied twice (#1777)
  amicode-ci
  committed
  1b94618
- test(fleet): an upstream reset on any arm is exactly one gap for its namespace; fleet-of-one passes the engine's reset frame verbatim (#1777)
  amicode-ci
  committed
  ca96336
- test(fleet): fleet-of-one over real sockets — across a link loss and its replayed re-open the listener holds the engine's bytes, bare ids included, and nothing else (#1777)
  amicode-ci
  committed
  4089797
- test(fleet): a reconnecting listener's last SSE id — bare engine id or composite — resumes every arm from its own engine id, and each engine replays (#1777)
  amicode-ci
  committed
  9c97fb9
- test(fleet): two-peer E2E on two scratch engines — killing the peer link mid-turn and restoring it leaves the observer's transcript identical to a fresh load (#1777)
  amicode-ci
  committed
  56e0020
- docs(fleet): fan-in comments name the resume path and say what an overflow drop still costs (#1777)
  amicode-ci
  committed
  e9756d6
- Merge #1775: installer-managed per-peer SSH forwards with standard keepalives + healthcheck; tests never reach real launchctl (S4 of #1770, fixes #1783)
  amicode-ci
  committed
  3a6be6a
- Merge #1777: lossless resume end to end — relays and client resume from engine ids (S6 of #1770)
  amicode-ci
  committed
  8965094
- perf(fleet): the relay splits SSE frames in linear time — only the new chunk is scanned (#1779)
  amicode-ci
  committed
  22c4ad7
- perf(app): the global-stream reader splits SSE frames in linear time — only new text is normalized and searched (#1779)
  amicode-ci
  committed
  da83442
- fix(fleet): the relay ends a frame at a CRLF blank line too, split across chunks or not, and relays it verbatim (#1779)
  amicode-ci
  committed
  3b901f0
- fix(app): the global-stream reader holds a chunk's trailing CR for the next chunk, so a CRLF split across chunks never ends a frame early (#1779)
  amicode-ci
  committed
  bffbf18
- test(fleet): both readers' framing pinned unchanged — multi-line data, event names, ids, retry fields, cut at every byte (#1779)
  amicode-ci
  committed
  ca888d9
- test(app): the reader test uses the SDK's typed retry knob, not an untyped pass-through (#1779)
  amicode-ci
  committed
  bb11b8f
- Merge #1779: linear-time SSE frame splitting in the relay and app readers (S8 of #1770)
  amicode-ci
  committed
  aef761a

Commits

Commits on Oct 12, 2026

Commits on Oct 13, 2026