client-reliability-8: route active URL-media cancellation investigation

docs/TODO.md

@@ -2,6 +2,8 @@
 
 ## dispatch
 
+- 2026-10-20 bounded continuation: client8 active URL-media last-owner/shared/rejoin reproduction after maintenance. Await measured evidence then independent confirmation/minimal fix and explicit test-contract routing. Other optional work remains deferred; no active-abort completion claim.
+
 - 2026-10-20 LOCAL REVIEW: storage2/history6/cold-feedclient7 normally landed;latest codeb1174163 full432filegate0,dispatchnew7/7/build-artifact0. Preview3000 build6da89895/sourceb1174163/runtime-equivalentdocsdescendants. Actualcold3cardsPASS;separate25-step360/390/1280navigation/Home/Profile/Uploadvalidation/focuscoveragecomplete. OriginalUploadoverflowFAIL remainsopen2/4px(controlsusable/sourceunproven),notwholebaselineallpass. FinalQA/docsqueuehandoff thenallIDLE;nooptionalwork. Feed3/publicplaybackpromises/liveAmber/cloud/peers/manualrelease remainunfinished. See docs/agents/LOCAL-REVIEW.md.
 
 - 2026-10-20 local-review checkpoint: storage2 producte7b9afb3/closurec5818cfe and history6 regressionb3fab032/closure386cc60e durably complete. Normal latest gate431files exit0; dispatch cleanup13/13 and history3/3. Integrated preview1834b6a9 runtime equals current test/docs-only descendants. Final actual-app/mobile QA2 browser pass active; readiness awaits actual flow evidence/handoff. Feed3 and public-promised playback roadmap deferred/open; real Amber/cloud/peers/release gates remain. No optional new tasks.

docs/agents/PROGRAM.md

@@ -4,6 +4,8 @@ Last updated: 2026-10-20
 
 ## Current milestone
 
+Active URL-media cancellation investigation resumes under the exact owner instruction below. This supersedes the local-review idle hold only for that bounded work; broader optional work remains deferred.
+
 Local-review handoff: storage2/history6 and demonstrated cold-feed blockerclient7 are normally landed. Build6da89895/preview3000 verified;actualcold3cards and separate25-step360/390/1280core/modal coverage complete. Original strictUploadoverflow FAIL remains open(2/4px,controlsusable),not an all-green baseline. Finish docs-only evidence/handoff,then allIDLE for owner review;no optional backlog work. Broader roadmap/live signer/cloud/peer/release gates remain explicit in QUALITY/LOCAL-REVIEW.
 
 ## Priorities
@@ -13,6 +15,12 @@ Local-review handoff: storage2/history6 and demonstrated cold-feed blockerclient
 
 ## Rulings log (newest first)
 
+### 2026-10-20 — Resume bounded active-probe cancellation, relayed by interpreter
+
+> "Then continue with the active-probe/URL cancellation work." — owner, relayed by interpreter at20:44:41UTC; not represented as typed in dispatch.
+
+Route existing client worker to client-reliability-8: reproduce current active URL-media last-owner disposal through actual observer/controller entrypoints and controlled IO, with shared live-owner and fresh-rejoin controls. Measure resources, settlement, slot release, cache and stale callbacks before any fix. Start media before broader HEAD/HLS/torrent policy. Existing queued/orphan-mirror fixes are complete; active abort is not. Existing tests protect the previous queued-only contract; expectation changes require explicit routing and Test Integrity Note after evidence. No app.js/kit/scheduler/external/cloud/signer/push/deploy/spend authority. Other workers idle unless needed for bounded independent QA.
+
 ### 2026-10-20 — Explicit local-review stopping milestone,relayed by interpreter
 
 > "Ready for me to review and test locally" — owner, relayed by interpreter;not represented as typed in dispatch.

docs/agents/backlog/client-reliability-8.json

@@ -0,0 +1,10 @@
+{
+  "id": "client-reliability-8",
+  "area": "client-reliability",
+  "status": "open",
+  "title": "Measure and scope active URL-media last-owner cancellation with shared/rejoin controls",
+  "blockedOn": null,
+  "addedOn": "2026-10-20",
+  "filedAt": "6609269ea11aaff753e6d9f3d8b91eb04e219a20",
+  "evidence": "Owner continuation relayed20:44:41UTC. Stage3 still requires active owner-aware cancellation. Current lifecycle tests intentionally retain active resources/cache under previous queued-only contract. Read-only actual observer/controller controlled-IO reproduction first; explicit fix/test-contract routing required after measurements. See current area brief."
+}

docs/agents/prompts/client-reliability.md

@@ -1,6 +1,14 @@
 # Area: Client reliability (client-reliability)
 
-## Current assignment: client-reliability-7 — cold feed live notification blocker
+## Current assignment: client-reliability-8 — active URL-media cancellation investigation
+
+Owner exact continuation recorded in PROGRAM supersedes the review idle hold only for this bounded slice. Read RULE-CHANGES newest first, PROGRAM, KNOWN_ISSUES, performance-efficiency-plan Stage3 and test-integrity before work. Claim item8 on integrated current unstable after this coordination commit lands; merge, never rebase. First investigate actual URL observer→controller active media last-owner disposal with controlled external IO. No product or committed-test edits yet; scratch reproduction and unique evidence only. No full/build/browser until explicit slot grant; cheap focused checks allowed.
+
+Measure resource/listener/timer retention, promise settlement, active slots and queued FIFO progress, inflight/cache identity, stale badge writes before/after disposal and controlled completion/timeout. Compare shared visible live owner, cross-controller shared cache if applicable, fresh owner/rejoin before/after cancellation, later same-source request, and legacy ownerless callbacks. Do not treat missing AbortSignal alone as proof; use real ownership entrypoints, actual media cleanup and controlled IO. Report current HEAD, exact commands/counts, baseline and controls, proposed smallest fix boundary and which existing assertions would change. Existing active-success/offline-cache/timeout expectations protect previous queued-only scope; preserve tests now and propose explicit contract correction/integrity note rather than silently weakening them. Cancellation must eventually avoid negative cache, stale UI and deleting a replacement inflight record; live shared owners must continue to get results. Preserve cache, concurrency, FIFO, callback compatibility and existing queued cancellation/orphan mirror guards.
+
+Start URL-media only. HEAD/HLS/torrent read-only context if necessary; report evidence before broadening. No app.js/services/nostr/kit/runner/config/styling/scheduler/external/cloud/signers/push/deploy/spend. Storage and QA remain idle unless separately assigned. Send read/next-action then reproduction/controls; await explicit minimal-fix routing after dispatch independently confirms. Done for investigation = measured current behavior and scoped proposal, not active-abort completion. Dispatch owns preview refresh after verified product landing.
+
+## Archived completed assignment: client-reliability-7 — cold feed live notification blocker
 
 QA actual-app passive reproduction at386cc60e: fresh Trending/cache0, local relay delivers3 valid signed VIDEO events+EOSE; raw/all/active/appvideo maps3,actual filtered3 and every access/include true,whitelist/lockdown false. Connected visible view remains current0/rendered0/signatureEMPTY/DOM0 after15s;metadata reasoncache. Service emits videos:cache3 then videos:updated(subscription3),but app refresh owner is onVideos callback. Source loadVideos cache/optimistic paths call onVideos;live subscription branch does not. This is a demonstrated local-review blocker,not optional work.
 

fleet/GOAL.md

@@ -38,3 +38,9 @@ Finish current storage-cors-2 and client-reliability-6 through unchanged full ga
 ## Local-review evidence checkpoint — 2026-10-20
 
 Storage2/history6 and the actual-app-discovered cold-feed blockerclient7 are normally landed. Latest codeb1174163 passed unchanged432-file gate;build6da89895 serves preview3000. Actualcold3cards+separate25-step360/390/1280core/modal follow-on coverage complete. Original strictUploadoverflowFAIL remains open2/4px at narrow widths,controlsusable,culpritunproven;do not call wholebaselineallpass. Local-review milestone includes this knownfinding and explicitlive/deferredlimits. Finish named evidence/handoff docs thenIDLE for owner review;nooptionalwork.
+
+## Bounded continuation — 2026-10-20
+
+> "Then continue with the active-probe/URL cancellation work." — owner, relayed by interpreter20:44:41UTC.
+
+Resume existing client worker for current-HEAD active URL-media cancellation reproduction and evidence-routed minimal fix. Local-review hold remains for other optional work; no new restricted authority. Shared-owner/cache/FIFO/legacy behavior and explicit test-contract correction required.

fleet/LOG.md

@@ -137,3 +137,8 @@
 - Separatetargetedfollowon16:27:44.416→16:28:10.112 completedall360/390/1280Trending/Explore/ForYou/Home+3cards/Profile/Uploadrequiredvalidation/6Tabcontainment/triggerfocusrestore,noinvalidformpublish. ExactUploaddoc362/360,394/390,1280none;criticalcontrolsinside/closeusable,minorobservedfindingopen. OriginalstrictoverflowFAIL preserved,notwholebaselineallpass. Sourceculpritnotyetestablished,noCSSfix. AllownedQAresourcesclosed;publicHTTP/WSdenied,0pageerrors/localfailures. Docs-onlyevidencequeue thenIDLE/localreviewhandoff;nooptionalwork.
 - QAevidence17163984 durably06e920e7 and qualificationclosurec017069c synced;runtime/buildinputdiff0 vsb1174163 (js/config/css/components/views/entries/assets/vendor/torrent/sw/scripts/package/lock/tailwind/postcss). Interpreter independently acceptsminorusableopenfinding/localreviewhandoff;no newownerpermissionneeded. Finalnamedhandoff/PROGRAM/GOAL/QUALITY/TODO/RESUME evidence tolocalnormaldocsqueue next,thenidle.
 - QAqualificationclosure98cde500 durablyc017069c;dispatchhandofff3dc7d13 durably3fd0ab59,submittedancestry0. Hostfleetstatus16:31:27 all3workersIDLE. Localreviewfinding remainsoriginal2/4pxoverflowFAIL,notallgreen. Finalwording separatesopaqueartifactversion6da89895 fromGit sourceb1174163 andlabelsreprobeforefix. Dispatch2 closesafterhandofflanding;finalpreview/runtime/queue audit beforeIDLE.
+
+## 2026-10-20 — Post-maintenance bounded continuation
+
+- Interpreter reports kitbeta62c89e3 maintenance/restarts complete; all existing worktrees6609269e. Dispatch independently clean area/dispatch, queue0/no drain,3 existing worker windows alive. Kit61/61 and preview hostHTTP200 are interpreter-derived, not rerun here; sandboxHTTP000 is not server-failure evidence.
+- Exact owner continuation recorded PROGRAM/GOAL; client8 actual active URL-media reproduction with shared/rejoin/legacy controls, no product/tests before evidence and routing. Storage/QA idle; no launches/kit/scheduler/external changes. Current active abort remains unverified; no full rerun for administrative docs.

fleet/RULE-CHANGES.md

@@ -9,6 +9,8 @@ a landing rule changes.
 
 ## 2026-10-20
 
+- Owner resumes bounded active-probe/URL cancellation via interpreter20:44:41UTC: client8 current-HEAD actual observer/controller active URL-media last-owner/shared/rejoin measurements first. Read-only source/scratch evidence until demonstrated defect and explicit fix/contract routing. Prior active cache tests express queued-only contract; do not silently weaken. Other2 workers idle. Local-review hold superseded only for this slice; no HEAD/HLS/torrent widening,app.js/kit/scheduler/external authority.
+
 - Local-review hard blocker measured: coldTrending cache0 then relayEVENT3/EOSE ingests eligible3 but view remainsEMPTY/DOM0. client-reliability-7 temporary ownership ONLY nostrService.loadVideos subscription notification path, minimal service-owned current-consumer state/subscription-clear lifecycle where proven necessary, + new focused regression/integrity/evidence; reproduce current method before minimal fix. Existing app/feed modules read-only unless additional evidence/routing. Preserve access/filter/deletion/cache/event semantics; no forcedrefresh baseline substitute. QA retains actual-app/browser qualification; client cheapfocused until explicit fullslot.
 
 - Owner stopmilestone is Ready for me to review and test locally. Finish current storage2/history6/faithful actual-app baseline+preview/handoff,then no new optional tasks before review. Reconcile upstream docs-only8d4622bb via area merge+normal queue;new playback promises stay explicit/open,do not churn current scope or declare them done from partial/static evidence. Genuine cached offline dependency mirror is testprep only,not CDN/deployed/offline production proof.