indifferentketchup
b18de2a331
feat(booterm): structured pty_exited WS notifications. Plan-validated, impl-validated, code-reviewed green (contracts build clean, contracts test 29/29, booterm + web typecheck clean). wip: in-progress inference/provider refactor (agents.ts, provider.ts, new llama-providers.ts, removed llama-args-validator), plus arena, dispatcher, compaction, schema changes. openspec: pty-exit-notifications complete; x-agent-flags planned (not yet implemented).
2.6 KiB
2.6 KiB
Fleet coordination lease — tasks
Status: OUTLINE. Do not start until the proposal's open questions are
resolved and this folder is promoted to READY. Task granularity here is
deliberately coarse; a full implementation plan (per boo-planning-changes) is
the first step once READY.
L0 — design pass (gate)
- Resolve the four open questions in
proposal.md(exclusive vs shared, enforcement granularity, TTL/heartbeat, DB-unreachable failure mode). - Write
design.md: lease state machine, the atomic acquire SQL (conditional upsert, no check-then-act), the honor-protocol contract shared by all four writers, and the integration-test matrix.
L1 — schema + lease service (apps/control)
control_host_leasesinapps/control/src/schema.sql:provider_id,holder,purpose,mode(shared|exclusive),expires_at,heartbeat_at, idempotent DDL. Index for the hot read path (active lease byprovider_id).- Lease service:
acquire(atomic conditional upsert),heartbeat,release, and an expiry sweep timer (reclaim lapsed leases) following the retention-timer pattern. - Pure helpers unit-tested (lease-conflict decision, expiry check) per the
turn-guard.tspattern; DB-gated integration testsdescribe.runIf(DATABASE_URL).
L2 — swap the BooControl seam
- Replace the body of
acquireHostAccess(providerId, purpose)inapps/control/src/services/host-access.tswith a real exclusive-lease acquire + heartbeat for bench/eval purposes. Do NOT touch the bench engine (it already gates through the seam). - Return a
HostGrantthat carries a release handle/heartbeat lifecycle the bench runner can drive in itsfinally.
L3 — honor-protocol in the other three writers
- BooChat (
apps/server): read-before-dispatch active-exclusive-lease check on the inference path; clear "host leased for " surfacing. - BooCoder (
apps/coder): same check at the dispatch fetch sites. - Arena (
apps/coder): same check at the battle fetch sites. - A single shared lease-check helper consumed by all four (avoid drift); one integration test per writer proving it honors an exclusive lease.
L4 — unlock unattended scheduling
- Unattended bench scheduling (the deferred half of BooControl P3): a scheduler that acquires the exclusive lease, runs, releases.
- Reproducible concurrency sweeps behind the lease (no foreign traffic).
- Smoke: schedule an overnight bench; confirm it never evicts a live model
and that
concurrent_foreign_requestsis 0 for leased runs.