glm-5.3-flash
a7f10ed04c
chore(tasks): mark fwd16, fwd13, cli01 completed
2026-08-31 00:23:46 +00:00
glm-5.3-flash
ef6eab020d
chore(tasks): summaries + oai11 completion for wave-1 merges
2026-08-30 20:08:44 +00:00
glm-5.3-flash
a71592e42c
chore(tasks): mark review-002 wave-1 tasks completed (fwd15, ws13, con17, srv11/12)
2026-08-30 20:08:28 +00:00
glm-5.3-flash
e2c255d40c
docs(tasks): decompose review-002 into 24 tasks (23 implementation + 1 bracketed follow-up)
...
Decomposition of docs/reviews/002-post-remediation-review.md per its
5-unit remediation plan:
- Unit 1 (security-critical): gw15-publish-body-cap,
prj16-schema-via-call (CF-004 filed alkcall-side), fwd13-dot-segments,
fwd16-missing-capability, oai11-ref-memoization
- Unit 2 (timeout/terminality): ws13-idle-progress,
fwd15-stream-timeout, cli01-retry-after-budget, con17-mcp-pagination,
con18-wss-sweep-exit
- Unit 3 (projection/docs): projection-truthfulness, mcp-batch-cap,
gw16-status-drift
- Unit 4 (spec-import): yaml-normalization, oai13-path-item-wildcards,
import-loudness-cluster, js01-placeholder-check,
fwd17-19-contract-decisions
- Unit 5 (WS polish + tests): con18b-ws-polish,
client-policy-wire-tests, cov-deployment-knobs, cov13-dead-code,
srv11-srv12-router-ordering
- review-002-bracketed-followup: tentatively planned post-bulk pass
(stale-check, OQA-18 enforcement decision, CON-08/09 close() lever,
cross-crate re-checks) — deliberately not serialized against the
bulk
Also: review-002 numbering repair (CON-14 was double-booked; MCP
pagination now CON-14, from_wss monitor renumbered CON-18, missing
CON-14 section added).
taskgraph: 66 valid, no cycles; 24 pending (all review-002);
gen-1/gen-2 parallel waves identified; workflow-cost hotspots are
prj16 (12.8) and ws13 (11.1), both carrying the reviewed slicing
guidance in their Notes.
2026-08-30 10:50:34 +00:00
glm-5.3-flash
edbda6605b
refactor(client): owned RetryConfig + TLS/mTLS test coverage (HY-06, COV-02)
...
- HttpClientConfig.retry_policy: ExponentialBackoff (semver anchor to a
reqwest-retry concrete type) replaced by retry: RetryConfig — an
owned struct of plain scalars (max_retries, initial_backoff,
max_retry_interval, defaults matching the previous backoff exactly);
the ExponentialBackoff policy is built internally by the middleware
stack; no reqwest_retry type is public anymore
- ClientCertConfig fields documented (none had docs)
- new tests/client_tls.rs: per-test rcgen private PKI + tokio-rustls
HTTPS server; drives the real SharedHttpClient through
HttpClientConfig file paths — CA-bundle success path, private-roots
rejection (source-chain assertion: invalid peer certificate),
mTLS end-to-end with client identity, mTLS rejection without
identity, and reload-to-CA-bundle interplay
- dev-deps: rcgen 0.14, tokio-rustls 0.26, rustls 0.23 (aws_lc_rs),
rustls-pki-types 1, uuid
Verified: cargo test (288 + 5 TLS), --all-features (359 + suites),
--no-default-features (288; pre-existing warnings only), clippy
--all-targets -D warnings (default + all-features), fmt --check,
cargo doc --no-deps.
Tasks: review-001-client-config-and-cert-coverage
2026-08-30 07:24:34 +00:00
glm-5.3-flash
5d6945cd4b
docs(tasks): post-remediation sweep — 4 follow-up tasks
...
Found in the sweep of completed review-001 remediation:
- /publish schema validation fails open on compile error + recompiles
per request (remediation-introduced, routes.rs:254-268)
- OAI-06 loud-degradation unblocked and still open (HTTP_0 marker)
- HY-06 ExponentialBackoff in public API + COV-02 mTLS success path
both unblocked post client-config rework
- HY-02/04/11 publish-prep docs gate (104 missing-docs warnings
re-measured)
Also flagged, not tasked here: WS-12 (alkcall demux 4 GiB discard
alloc) was never actually filed in alkcall's consumer-findings-ledger —
only CF-001 is there. File it when next touching alkcall.
taskgraph: validate clean (42), no cycles
2026-08-30 06:03:29 +00:00
glm-5.3-flash
42a2fa0ee3
docs(tasks): review-001 client timeout/retry remediation complete
2026-08-29 08:24:11 +00:00
glm-5.3-flash
12b35e2c5f
docs(tasks): decompose review 001 remediation Units 1-5 into taskgraph tasks
...
21 review-001 tasks across server/adapters/client/gateway/websocket/infra,
chunked from the 7-unit remediation plan in
docs/reviews/001-initial-implementation-review.md.
- Scope split by mechanism, not one-per-finding: 15 tasks in generation 1
(parallelizable), 6 sequenced after their file-sharing precursors
- Deliberately deferred until dependent fixes land: projection/doc
fidelity partial (Unit 6 beyond dependency hygiene), coverage backfills
(COV-01..07 via in-task acceptance for forward.rs), and per-finding
minors (OAI-06/07, HY-02/04/06/10/11, CON-08)
- Cross-crate WS-12 (alkcall demux 4 GiB discard alloc) noted for filing
in alkcall, not here
taskgraph: validate clean, no cycles, 6 generations
2026-08-29 07:10:15 +00:00
glm-5.3-flash
0c1de05f85
feat(client): shared reqwest client host with retry stack and Retry-After
...
- src/client/http_client.rs: SharedHttpClient (ArcSwap rebuild-and-swap
hot-reload), HttpClientConfig/ClientCertConfig, HttpClientBuildError
- src/client/retry_after.rs: inlined RetryAfterMiddleware — 429/503
Retry-After (seconds + HTTP-date), bounded URL->deadline storage with
earliest-deadline eviction, sleep-before-next-request
- middleware stack: RetryTransientMiddleware (exponential backoff) +
RetryAfterMiddleware; credentials stay per-request via
OperationContext.capabilities (no env reads)
- applied poisoned-lock recovery convention (into_inner)
Verified: cargo test (95 lib tests), clippy -D warnings, fmt.
2026-08-28 08:33:26 +00:00
glm-5.3-flash
63dc4b6d06
docs: implementation plan (TTY precedents folded in); task decomposition (17 tasks)
...
Plan updated with the alknet-tty findings: the drainer pattern
(single ordered writer) makes outbound chunk-boundary parsing sound;
TestStdinSink's try_send→Full→Pending is the inbound backpressure
precedent; OQ-01(a) now cites the reference.
Task graph (taskgraph-validated, 17 tasks, 6 generations, no cycles):
- tasks/server/: core-types, auth, healthz-decoy, adapter
- tasks/gateway/: dispatch, routes, publish
- tasks/websocket/: byte-adapter (research POC), upgrade-session, overlay-ops
- tasks/adapters/: from-openapi, from-jsonschema, to-openapi, from-wss, mcp
- tasks/client/: http-host
- tasks/infra/: integration-suite (phase 4)
Critical path runs through server core → adapter → WS session →
overlay tests → integration suite. High-risk tasks are the three WS
tasks, de-risked by the ws-byte-adapter POC blocking upgrade-session.
2026-08-28 06:05:45 +00:00
glm-5.3-flash