Batch 460 wave 2: upload cancel and teardown fixes, quota SQL, trusted-proxies docs (BACKLOG #3740, #3764) by wshallwshall · Pull Request #2645 · MEFORORG/MessageFoundry

The zoned trusted-proxy refusal names the zoned-hop gap; serve's proxy log line says what it trusts

wshallwshall

committed

7fbe96a

ADR 0151 D-1 says what forwarded_allow_ips holds; CONFIGURATION.md states the zoned-hop gap

wshallwshall

committed

90f5ab5

Upload-quota release takes the uploader; the reserve reads its budget in one aggregate

wshallwshall

committed

8fa1b5e

A cancelled upload's file removal no longer holds the quota lock unbounded; the straggler drain reads its defaults when it runs

wshallwshall

committed

73b21de

Upload and outliving-operation text: the create row's kept duplicate, both lifespans' drains, the schema DDL's drop, and engine shard qualified

wshallwshall

committed

7a7b28e

Review round 1: the zoned-hop caveat echoes no zone, covers the host-bits path, and states its cost once

wshallwshall

committed

cb7e4de

Upload-quota release ids are keyword-only; fakes check placeholder counts

wshallwshall

committed

791df0d

Upload-quota release prose states its bounds; edge test cleans up on failure

wshallwshall

committed

2efc4de

Review round 2: the zoned-hop docs name the right host, recommend no /128, and point at one source

wshallwshall

committed

eec940c

Review round 1: the removal gets its own bound and an ERROR at it, the 0.5.2 note correction moves to a fragment, and text rewrapped

wshallwshall

committed

d5804d7

Review round 2: a late removal withdraws its ERROR at WARNING, and the residuals and the outliving arms are stated plainly

wshallwshall

committed

f7cd683

Merge remote-tracking branch 'origin/b460w2-3740-uploads-text' into batch/b460-wave2

wshallwshall

committed

be0a0e1

Merge remote-tracking branch 'origin/b460w2-3740-store-sql' into batch/b460-wave2

wshallwshall

committed

6ffebcd

Merge remote-tracking branch 'origin/b460w2-3764-hygiene' into batch/b460-wave2

wshallwshall

committed

16cb782

Teardown: the upload drain settles long operations first, skips heartbeat touches, and the step list is pinned

wshallwshall

committed

4583bf0

The upload drain cancels a held touch once, and counts only ledger calls in its warning

wshallwshall

committed

b11908f

The upload drain cancels held touches before its settle, and a cancelled heartbeat cancels its touch once

wshallwshall

committed

98cdc0e

Merge remote-tracking branch 'origin/b460w2-3740-teardown-r' into batch/b460-wave2

wshallwshall

committed

c204103

Navigation Menu

Repository navigation

Batch 460 wave 2: upload cancel and teardown fixes, quota SQL, trusted-proxies docs (BACKLOG #3740, #3764) - #2645

Batch 460 wave 2: upload cancel and teardown fixes, quota SQL, trusted-proxies docs (BACKLOG #3740, #3764)#2645
wshallwshall merged 26 commits into
mainfrom
batch/b460-wave2

Commits on Oct 29, 2026

The zoned trusted-proxy refusal names the zoned-hop gap; serve's proxy log line says what it trusts

ADR 0151 D-1 says what forwarded_allow_ips holds; CONFIGURATION.md states the zoned-hop gap

Upload-quota release takes the uploader; the reserve reads its budget in one aggregate

A cancelled upload's file removal no longer holds the quota lock unbounded; the straggler drain reads its defaults when it runs

Upload and outliving-operation text: the create row's kept duplicate, both lifespans' drains, the schema DDL's drop, and engine shard qualified

Review round 1: the zoned-hop caveat echoes no zone, covers the host-bits path, and states its cost once

Upload-quota release ids are keyword-only; fakes check placeholder counts

Upload-quota release prose states its bounds; edge test cleans up on failure

Review round 2: the zoned-hop docs name the right host, recommend no /128, and point at one source

Review round 1: the removal gets its own bound and an ERROR at it, the 0.5.2 note correction moves to a fragment, and text rewrapped

Review round 2: a late removal withdraws its ERROR at WARNING, and the residuals and the outliving arms are stated plainly

Merge remote-tracking branch 'origin/b460w2-3740-uploads-text' into batch/b460-wave2

Merge remote-tracking branch 'origin/b460w2-3740-store-sql' into batch/b460-wave2

Merge remote-tracking branch 'origin/b460w2-3764-hygiene' into batch/b460-wave2

Teardown: the upload drain settles long operations first, skips heartbeat touches, and the step list is pinned

The upload drain cancels a held touch once, and counts only ledger calls in its warning

The upload drain cancels held touches before its settle, and a cancelled heartbeat cancels its touch once

Merge remote-tracking branch 'origin/b460w2-3740-teardown-r' into batch/b460-wave2

Commits on Oct 30, 2026

Merge origin/main into batch/b460-wave2

Cancelled-pair removals run on their own capped pool, and the next save waits for them instead of the cancelled one spinning

Review round 1 on the removal pool: the drain names a removal still running, waits are per uploader, and a failed start is logged

Review round 2 on the removal pool: every save waits again, the drain names only what its wait leaves, and the withdrawal is logged from the thread

The upload straggler drain settles only the upload.create rows, not every long operation

settle takes a required label, and the step comment states what the narrowing costs

Settle prose states the design against main, not against an unshipped revision

Merge origin/main into batch/b460-wave2