Fail pending readiness when LISTEN retries are exhausted, reject search capacity exhaustion with a zero token rather than an exception, guard obsolete expiration callbacks, and cancel local and family listeners after partial registration fails.
Capture snapshot contexts weakly and synchronously fail queued responses on cancellation, expiry, replacement, or destruction. Make readiness completion idempotent to avoid stale callbacks changing settled contexts.
Let contiguous revision deletions override legacy timestamps. Propagate false completion and initial request failures through the operation cache, retain source synchronization reporting for recovery, and fail pending readiness outside the search lock during shutdown.
Review b1d0435c with cache, native transport, and runner coverage. Add 13 tests for source synchronization and discovery ordering, cancellation, failure and recovery, cached filters, operation reuse, address families, stopped and invalid requests, and signed values.
Three regressions intentionally fail against the current implementation: a reordered listen confirmation reports readiness before initial UPDATE values; shutdown abandons pending readiness callbacks; cancellation from another readiness callback does not suppress the canceled notification. Production behavior is unchanged.
Serve atomic cached snapshots after listener readiness instead of independent GETs. Validate unchanged tokens without downloads, apply contiguous expirations locally, reject malformed revisions and stale generations, bound subscription requests and recovery backoff, and keep wrong-session pushes isolated. Preserve legacy payload handling, document transport and protocol behavior, and include implementation-dependent regressions.
Clear successful status after transport failure or cancellation and require complete HTTP framing at EOF. Revision recovery transport regressions are included with the proxy implementation that provides their fixtures.
Preserve existing listen entry points and add one-shot initial readiness through the runner, security layer, and native searches. Wait for target discovery and source synchronization, handle isolated families and failed searches, and initialize reused operations. Include API-dependent native/cache regressions.
Resolve idle-runner push futures immediately under the operation queue lock. A stopped runner has no loop left to execute the queued promise, otherwise consumers can wait indefinitely.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Require immediate completion before run and after join, including a burst of notifications. Keep active-runner coverage.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Adrien Beraud
Cyrille BéraudandCopilot