+1

docs/claude-memory/README.md

View file Reviewed

··· 57 57 - [leveva channel-merge works](leveva-channel-merge-works.md) — split-then-merge of two independent same-name channels preserves both members + op on HEAD; couldn't repro "remote member missing" post-129; two-node port-lock is process-local (use unique ports per test binary) 58 58 - [leveva LINK_VERSION 021- staleness](leveva-link-version-021-staleness.md) — recurring pre-existing red: PASS-greeting tests/snapshots go stale vs server::LINK_VERSION (021- prefix); fix as a separate prep commit, git-stash to confirm pre-existing 59 59 - [leveva S2S handshake diagnostics](leveva-link-version-021-staleness.md) — read_link_handshake now surfaces a peer's ERROR refusal + EOF/port hints + a 30s idle timeout (was a blind "did not complete"); a connect{} to a client port like 6667 is the classic cause 60 60 + - [leveva TS + link fixes (slices 131-133)](leveva-ts-and-link-fixes-131-133.md) — connect-dedup (LinkingSet, no re-dial mid-handshake glare) + server-intro broadcast (announce_linked_peer to siblings); channel-ts/user-ts CAPAB tokens carry timestamps as ENCAP-wrapped unix-NANOSECONDS, oldest wins (deop younger chanops / evict younger nick to its UID); the USERTS-before-UNICK buffering + the cross-task Envelope::ForceNick primitive

+56

docs/claude-memory/leveva-ts-and-link-fixes-131-133.md

View file Reviewed

··· 1 1 + --- 2 2 + name: leveva-ts-and-link-fixes-131-133 3 3 + description: P11 slices 131-133 — S2S link-establishment fixes (connect dedup + server-intro broadcast) and channel-ts/user-ts timestamp propagation (oldest wins); the ENCAP-ns TS pattern + the ForceNick cross-task primitive 4 4 + metadata: 5 5 + node_type: memory 6 6 + type: project 7 7 + originSessionId: 38e01f00-bed4-46fd-983a-cf57b6a18eca 8 8 + --- 9 9 + 10 10 + P11 slices 131–133 (2026-06-13), all leveva-native (no oracle differential for the new bits): 11 11 + 12 12 + **131 — link-establishment fixes (two production glare bugs from nophica/althyk logs).** 13 13 + - `link::LinkingSet` (per-`ServerContext` `linking` field): names with an outbound dial in 14 14 + flight. `try_begin(name)`→RAII `LinkGuard` or `None` if already dialing. `dial_server` (the 15 15 + single chokepoint for ALL outbound dials) skips if already linked, else holds a guard for the 16 16 + task's life; `auto_connect_loop` folds `linking.contains` into the `is_linked` predicate. Closes 17 17 + the re-dial-while-mid-handshake glare (`… (Operation now in progress)` = EINPROGRESS). Extends 18 18 + [[leveva-outgoing-autoconnect]]. 19 19 + - `s2s::server::announce_linked_peer(ctx, new_peer)` broadcasts `:<our_sid> SERVER <name> <hop+1> 20 20 + <sid> …` to every OTHER peer (split-horizon), called from `serve_linked_peer` after `peers.link`. 21 21 + The burst introduces known servers TO the new peer; `handle_server` only relays DEEPER bursted 22 22 + servers — a directly handshake-linked peer was never announced to its siblings. Prefix = OUR sid 23 23 + (we're the introducer), NOT `rs.uplink` (which == the peer's own sid for a direct peer). 24 24 + 25 25 + **The TS-over-ENCAP pattern (132/133).** Both timestamps ride `ENCAP` in **unix nanoseconds** 26 26 + (leveva's native clock; an IRCnet oracle routes `ENCAP` to `m_nop` and ignores it). Two new CAPAB 27 27 + tokens in `PeerCaps`: `channel-ts`, `user-ts` (added to `ours()` + `from_capab`). Extends 28 28 + [[leveva-s2s-peer-caps]]. **Oldest (lowest) TS wins.** When adding ANY new burst ENCAP extension: 29 29 + the golden canonicalizer (`leveva/tests/harness/mod.rs`) must mask its ts, and 30 30 + `s2s_skeleton_differential` must exclude the line (the shared `verb_skeleton` allow-lists ENCAP, so 31 31 + each burst-diffing test pre-filters the native lines). Only `s2s_skeleton_differential` diffs the 32 32 + burst skeleton; `s2s_netsplit_differential` only checks the post-split QUIT. 33 33 + 34 34 + **132 — channel-ts.** Channel already had `created_at` (ns). `build_burst` emits `:<sid> ENCAP * 35 35 + CHANTS <chan> <ns>` after each channel's NJOIN/MODE. `Channels::reconcile_channel_ts(name, 36 36 + their_ts, their_sid)` adopts `min` and deops the younger side's chanops, keyed by each member's 37 37 + home server (UID sid prefix): theirs-older⇒deop-not-theirs, theirs-newer⇒deop-theirs, equal⇒Merged. 38 38 + `s2s::chants::apply_encap_chants` (CHANTS arm in `inbound_encap`, gated on the peer's `channel_ts` 39 39 + cap) reconciles + relays the deop to local members as a synthetic `-o` MODE. Exact for 2 servers; 40 40 + 3+ approximated; mode-reset deferred. 41 41 + 42 42 + **133 — user-ts (oldest NICK wins, upgrading slice-112 first-claimant).** The user TS is its 43 43 + **`signon`** (already stored in NANOSECONDS via `unixnano()`; `registry::signon_of`/`set_signon`). 44 44 + `unick_intro` emits `:<uid> ENCAP * USERTS <signon_ns>` **BEFORE** the UNICK (the collision needs 45 45 + the TS synchronously); the USERTS arm of `inbound_encap` buffers it on `PeerLink.pending_user_ts` 46 46 + (keyed by UID), consumed by `handle_unick`. On a collision (gated on the peer's `user_ts` cap + a 47 47 + buffered TS): a strictly-older newcomer wins → `evict_holder_to_uid` renames the younger holder to 48 48 + its UID. **The losing user's nick becomes its UID** (maintainer's rule). A LOCAL loser is forced 49 49 + across tasks via the NEW `Envelope::ForceNick { wire, new }` (client serve loop + websocket write 50 50 + the NICK + call `Session::set_nick`; `registry::force_nick_uid` delivers it) — because a session 51 51 + caches its own nick in another task; a REMOTE loser via `SAVE` toward its server. `golden_s2s_userts` 52 52 + proves the cross-task path (the serve-loop wiring is otherwise un-unit-testable). When adding an 53 53 + Envelope variant, fix exhaustive matches in `kill_proptest`/`control_proptest`/`websocket`. 54 54 + 55 55 + Gate met: leveva 1715/0; leveva-integration 198/0 (incl. real-oracle `s2s_oracle_link`); clippy 56 56 + clean; build 0 warnings. See [[leveva-slice-recording]], [[leveva-s2s-notify-propagation]].