land: area/dispatch 488d874a97 (dispatch)

docs/agents/prompts/client-reliability.md

@@ -1,6 +1,16 @@
 # Area: Client reliability (client-reliability)
 
-## Current assignment: client-reliability-8 — active URL-media cancellation investigation
+## Current assignment: client-reliability-8 — active URL-media cancellation
+
+### Implementation routing after independent evidence
+
+Dispatch independently ran nine scratch modes: disposed/fifo new cancellation assertions fail naturally after cleanup, seven shared/cross/legacy/rejoin/timeout/error/replacement controls pass. Final-owner media retains1source/3listeners/1timer/1slot/unsettled promise; source-backed Stage3 and owner continuation require releasing obsolete active work. Minimal implementation now authorized ONLY js/ui/urlHealthController.js (retainUrlProbe final-owner cancellation hook, record cancelled state, active media settle/cleanup) plus tests/url-health-lifecycle.test.mjs and unique integrity/spec/evidence notes. Existing observer/cache/HEAD/HLS/torrent/app modules remain read-only. Supersedes investigation-only prohibition for this boundary.
+
+Use existing cancellation paths to settle null, suppress cache/mirrors/stale badge writes, release slot and advance FIFO once. Mark cancelled record unavailable synchronously for same-turn rejoin; old settlement must never remove/paint/cache over replacement. Test both immediate same-turn rejoin and rejoin after microtask, sharing before final release, cross-controller sharing, ownerless legacy consumers, queued competition/FIFO, replacement identity, late success/error/timeout callbacks and cleanup idempotence. Clean src/listeners/timer and pause/load boundary; do not force exit or wait for original timeout. Preserve live-owner healthy/offline caching and normal timeout/retry, shared work, slot cap/FIFO and previous queued/mirror guards.
+
+Explicit spec correction permitted for active-disposed success/offline-cache and disposed-timeout/rejoin expectations ONLY: the old queued-only contract intentionally allowed completed work after disposal; new owner instruction plus Stage3 requires immediate active media cancellation once final registered owner leaves. Replace these with equally strict resource cleanup/null settlement/no cache/no mirrors/no stale writes/fresh replacement assertions; keep separate live-owner success/error/timeout controls. Record Test Integrity Note (spec_correction and new_tests, exact old→new contract/spec source, any did_relax explanation honest) and unique spec change note; do not silently delete scenarios. Every new scenario needs a restored mutant that fails naturally. Mutants must reject disabled cancellation, retained source/listeners/timer, cache-on-cancel, lost shared owner, stale inflight deletion, FIFO disruption as applicable. Report surviving mutants instead of weakening assertions.
+
+Focused real lifecycle/adjacent URL/controller/observer checks and lint now. No browser/full/build yet; request slot when focused results/mutants/lint and merged-tree candidate are ready. Normal unchanged full gate and durable landing/ancestry required before closure. Send READY with files/counts/mutants/contract diff and unverified scopes. No wider Stage3 claim; actual browser/network/HEAD/HLS/torrent remain unverified. Dispatch will coordinate final validation and preview.
 
 Owner exact continuation recorded in PROGRAM supersedes the review idle hold only for this bounded slice. Read RULE-CHANGES newest first, PROGRAM, KNOWN_ISSUES, performance-efficiency-plan Stage3 and test-integrity before work. Claim item8 on integrated current unstable after this coordination commit lands; merge, never rebase. First investigate actual URL observer→controller active media last-owner disposal with controlled external IO. No product or committed-test edits yet; scratch reproduction and unique evidence only. No full/build/browser until explicit slot grant; cheap focused checks allowed.
 

fleet/LOG.md

@@ -144,3 +144,5 @@
 - Exact owner continuation recorded PROGRAM/GOAL; client8 actual active URL-media reproduction with shared/rejoin/legacy controls, no product/tests before evidence and routing. Storage/QA idle; no launches/kit/scheduler/external changes. Current active abort remains unverified; no full rerun for administrative docs.
 
 - client8 coordinationc8e07cc5 durably5b77fd20(status/log/ancestry0);assignmentdelivered. Dispatch independentdirectscratch18pass/1fail natural287ms:finalownerretainsactive1/source/cache null. Initial subprocess --test opaque failure excluded. No product/tests edited;newshared/rejoincontrols/proposal awaited beforefixrouting. Evidence test_logs/TEST_LOG_2026-10-20_20-49-00_dispatch-client8.md.
+
+- Client8 worker9modes independently rerun by dispatch using dispatch imports/current8b04a69f runtime equivalent5b77fd20:disposed/fifo strict cancellationfail,shared/cross/legacy/rejoin/timeout/error/replacement7pass;allclean naturally. Resource1src/3listeners/1timer/1slot persists until controlledcompletion. Controller-only activecancel fix + explicit strict Stage3 spec correction routed;no broader activeprobe claims. Otherworkersidle;expensivecheckshelduntilready.

fleet/RULE-CHANGES.md

@@ -9,6 +9,8 @@ a landing rule changes.
 
 ## 2026-10-20
 
+- client8 minimal media-only fix routed after worker+dispatch9mode evidence: final-owner retains1src/3listeners/1timer/1slot/unsettled;7controls pass. Own controller cancellation/active media settle cleanup+focused lifecycle tests/unique integrity/spec notes only. Explicit Stage3 spec correction replaces disposed active cache/timeout/rejoin expectations with immediate cleanup/null/no cache/mirror/stale writes/fresh request; preserve separate live/shared/legacy success/error/timeout/cache/FIFO controls and identity safety. No observer/cache/HEAD/HLS/torrent/app edits. Focused+mutants+lint then request full/browser slot; unchanged normal gate/durable landing.
+
 - Owner resumes bounded active-probe/URL cancellation via interpreter20:44:41UTC: client8 current-HEAD actual observer/controller active URL-media last-owner/shared/rejoin measurements first. Read-only source/scratch evidence until demonstrated defect and explicit fix/contract routing. Prior active cache tests express queued-only contract; do not silently weaken. Other2 workers idle. Local-review hold superseded only for this slice; no HEAD/HLS/torrent widening,app.js/kit/scheduler/external authority.
 
 - Local-review hard blocker measured: coldTrending cache0 then relayEVENT3/EOSE ingests eligible3 but view remainsEMPTY/DOM0. client-reliability-7 temporary ownership ONLY nostrService.loadVideos subscription notification path, minimal service-owned current-consumer state/subscription-clear lifecycle where proven necessary, + new focused regression/integrity/evidence; reproduce current method before minimal fix. Existing app/feed modules read-only unless additional evidence/routing. Preserve access/filter/deletion/cache/event semantics; no forcedrefresh baseline substitute. QA retains actual-app/browser qualification; client cheapfocused until explicit fullslot.

test_logs/TEST_LOG_2026-10-20_20-52-00_dispatch-client8-controls.md

@@ -0,0 +1,9 @@
+# Independent client8 controls and fix routing
+
+Tree8b04a69fb4c4654d23549f0e3ed199aa27505047; docs-only descendant of5b77fd20, runtime unchanged. Adapted worker scratch imports to dispatch in /tmp/bitvid-dispatch-8-controls.mjs; inspected fixture and current retainUrlProbe/media cleanup. Python subprocess runner unsets NODE_TEST_CONTEXT, records each return code and output,15s hard diagnostic bound (none hit). No product or repo test writes.
+
+Commands `env -u NODE_TEST_CONTEXT node /tmp/bitvid-dispatch-8-controls.mjs MODE` with `--expect-cancel` only for disposed/fifo. Modes disposed/fifo each exit1 after cleanup, seven modes shared/cross/legacy/rejoin/timeout/error/replacement each exit0. Logs /tmp/bitvid-dispatch-8-MODE.log. Parent runner exit0 only means completed orchestration; child failures explicitly counted2/9 as expected reproduction.
+
+Disposed after final owner:resources1/listeners3/timer1/slot1/settled0/inflighttrue/cache null. Controlled completion releases everything and caches healthy;error mode caches offline. FIFO retains3active/2queued until controlled target completion;eventual5settled,resources/listeners/timers/slots/queue0. Shared/cross/legacy live consumers keep one promise/media and healthy result;current rejoin uses retained original. Timeout4000 cleans with no cache;replacement sentinel survives old finalizer. These establish old behavior and controls, not proof of new cancellation implementation.
+
+Minimal fix authorized in controller only; lifecycle test spec correction recorded in area brief/rules, grounded in owner continuation and performance plan Stage3. No observer/cache/HEAD/HLS/torrent/app edits or weakening live-owner behavior. Require strict cleanup/null/no cache/mirrors/stale effects, immediate replacement and FIFO controls, restored failing mutants. Actual browser resource release,network bytes,CPU/RSS,live playback and other active probe types remain unverified. No full/lint/build/browser run by dispatch in this routing step.