[fglock]

Summary

• Fix the Mojolicious controller and WebSocket lifetimes regress with #1642 integration #1794 Mojolicious controller and WebSocket lifetime regressions and the Catalyst upload tempfile is deleted during request in #1642 integration #1795 Catalyst upload tempfile lifetime regression, with project-owned regression coverage.
• Preserve callback captures while Perl containers own callbacks and release captured request graphs after their final owner disappears.
• Track direct hash-entry and array-element owner slots, including replacement, aliasing, and removal paths; strengthen lifecycle root proofs and scope-exit cleanup.
• Synchronize scalar container-owner metadata accessed from concurrent Perl threads.
• Implement writable Internals::SvREFCNT compatibility, with a unit regression test validated against blead Perl and both PerlOnJava backends.
• Add hash- and array-element scalar-reference regressions for exact Perl-visible owner-count transitions (1 → 2 → 1), final release, weak clearing, and exactly-once DESTROY.
• Add true refaliasing coverage proving aliases to aggregate cells do not add an extra referent owner.
• Follow typed hash/array owner slots toward Perl roots before using the whole-root reachability fallback, including DESTROY resurrection checks; Java regressions verify nested owner chains require zero root queries and snapshots.
• Retain scalar-reference contents when copied into array/hash elements and release them when the final owner disappears; add a seven-assertion standard-Perl regression.
• Cover dynamic localization of returned scalar references, including exact B::svref_2object count and final destruction on restoration.
• Advance the Rewrite reference counting with complete Perl-compatible ownership semantics #1649 ownership rewrite through aggregate-slot recovery. The broader rewrite remains incomplete: scalar/proxy ownership migration and removal of cleanup reachability fallbacks remain next steps.
• make ci creates the Windows runner's root-relative tmp directory for existing tests that use POSIX /tmp paths and uses four Gradle workers on Windows to finish the full shard set within the step budget. Unix worker defaults remain two.
• Keep this PR in draft while Phase 2 continues.

Current progress (2026-10-23)

• The ownership branch includes the careful merge of origin/master through aeda28344, preserving the Catalyst Catalyst upload tempfile is deleted during request in #1642 integration #1795 fix and overlapping owner-slot reachability changes.
• Plain-array and hash tails in nested list assignment now transfer through the destination's owner-aware store path. Displaced values are released, scalar and container slots are registered, and tied/autovivifying hashes use their normal assignment path.
• Immutable code commit 85daddac0 passes nice -n 19 make in 17m20s. The array-tail and hash-tail Perl regressions each pass 4/4 on system Perl, JVM, and interpreter.
• The hash-tail regression fails all four assertions on the unfixed parent on both backends. Controller lifetime, WebSocket server push, Catalyst upload tempfile lifetime, and Catalyst global-destruction cleanup regressions pass on JVM and interpreter; Catalyst files report 24/24 and 3/3 assertions respectively.
• Hosted Linux and Windows checks pass on preceding head c1167ffbd. GitHub has not attached a check run to current PR head 993d5875e; this PR remains draft. Phase 2 is incomplete because lifecycle dispatch still uses RuntimeBase.refCount and owner-slot accounting is not yet the default across scalar/proxy and aggregate paths.

Validation

• nice -n 19 make — passed on immutable code commit 85daddac0 in 17m20s. All unit shards, the WebSocket task, and Joni packaging passed.
• MortalListAggregateOwnerSlotRootChainTest — passed in the full unit gate; nested hash owner slots restored the count with zero root queries and zero graph snapshots.
• DestroyDispatchOwnerSlotRootChainTest — passed in the full unit gate; a nested hash owner proves resurrection with zero root queries and zero graph snapshots.
• scalar_reference_return_owner_lifetime.t — 7/7 on blead Perl 5.45.4, JVM, and interpreter; the unfixed PerlOnJava candidate failed the aggregate-retention assertion on both backends.
• scalar_reference_localized_owner_lifetime.t — 6/6 on blead Perl 5.45.4, JVM, and interpreter, including an exact refcount match during localization and exactly-once destruction after restoration.
• hash_element_scalar_reference_lifetime.t — 3/3 on blead Perl 5.45.4, JVM, and interpreter.
• hash_element_scalar_reference_refcount.t — 6/6 on blead Perl 5.45.4, JVM, and interpreter; exact 1 → 2 → 1 ownership counts matched Perl.
• array_element_scalar_reference_refcount.t — 6/6 on blead Perl 5.45.4, JVM, and interpreter; exact counts and final release matched Perl.
• aggregate_scalar_alias_refcount.t — 8/8 on blead Perl 5.45.4, JVM, and interpreter; array and hash refaliases preserve Perl counts and release once.
• Historical GitHub Actions run 39552652526 for head 59d14d58c.
• nice -n 19 make check-links — passed after the ownership design status update on 5550984a1.
• dev/tools/tests/ci_workflow_contract.t — 23/23 passed on blead Perl 5.45.4.
• make -n ci OS=Windows_NT — confirms Windows temp setup precedes the build and Gradle is configured for four workers.
• GitHub Actions run 39513358260 passed: Windows make ci in 52m13s and the focused Windows thread gate; Ubuntu make ci, thread compatibility, and SBOM gates.
• Follow-up run 39520815459 passed on head b3f963739: Windows make ci in 68m21s and the focused thread gate; Ubuntu build, thread compatibility, and SBOM gates.
• internals_svrefcnt_write.t — 6/6 on blead Perl; the unfixed PerlOnJava parent failed all six assertions; fixed JVM and interpreter backends pass.
• ordinary_aggregate_element_owner_refcount.t — 11/11 on blead Perl 5.45.4, JVM, and interpreter.
• mojolicious_controller_destroy_after_finish.t — passed on JVM and interpreter in the post-fix focused runner; full Make also passed.
• mojolicious_websocket_server_push_lifetime.t — passed on JVM and interpreter in the post-fix focused runner; the full Make WebSocket lifetime integration test passed.
• catalyst_request_body_tempfile_lifetime.t — 24/24 on JVM and interpreter after the ownership fix.
• refcount/issue_1794_controller_owner_release.t — 3/3 on blead Perl 5.45.4, JVM, and interpreter.
• timeout 1800 nice -n 19 ./jcpan -t HTML::Tree — 23 files / 989 tests passed, including unchanged t/refloop.t (8/8).
• catalyst_request_body_tempfile_global_destroy.t — 3/3 on JVM and interpreter after the ownership fix.
• list_assignment_array_tail_lifetime.t — 4/4 on system Perl, JVM, and interpreter.
• list_assignment_hash_tail_lifetime.t — 4/4 on system Perl, JVM, and interpreter; all four assertions fail on the unfixed JVM/interpreter parent.
• nice -n 19 make check-links — passed after the progress and changelog updates.
• Earlier validated thread gates: JVM virtual 1925/1925, interpreter virtual 1925/1925, and platform focused 485/485. These were run before the final Mojolicious controller and WebSocket lifetimes regress with #1642 integration #1794 interpreter cleanup changes.

Test plan

• Validate Perl-level regressions with blead Perl 5.45.4.
• Run the focused Mojolicious regressions on JVM and interpreter with loopback access.
• Run the Catalyst tempfile regression on JVM and interpreter.
• Validate writable Internals::SvREFCNT on blead Perl, JVM, and interpreter, including parent failure evidence.
• Validate hash- and array-element scalar-reference refcount regressions with blead Perl and both backends.
• Run full nice -n 19 make on immutable code commit ecc5efd37.
• Validate true aggregate refaliasing counts and cleanup on blead Perl and both backends.
• Run the HTML-Tree integration suite, including t/refloop.t.
• Run make check-links after the design-doc update.
• Confirm GitHub Actions on latest PR head 993d5875e.
• Continue Phase 2 owner-slot migration and its acceptance tests.