fix(gateway): explicit custom Matrix update-owner contract #237

Merged

karsten merged 1 commit from fix/custom-matrix-update-owner into main

2026-11-03 12:34:14 +00:00

severus-snape commented

2026-11-03 12:31:49 +00:00

Collaborator

Scoped incident owner repair

Provides explicit GatewayModule updateAdmission: foreground-owned contract; tracks actual active owners and preparing/pending transitions, fails closed after uncertain candidate cleanup. Legacy modules remain unsupported. No lease override.

Ships managed docs/gateways/matrix-recovery.mjs, preserving original matrix-recovery-20261026.mjs Matrix429 retry and review-summary compaction byte-for-byte in function/class implementation, inherited native stop. Owner can configure absolute installed path after authorized transition. No plugin pin change required: new factory ships in Core docs image layer.

Evidence

Base b23185c4; current main9d252f4 has no changes to these shared source files. Exact reviewed patch SHA25639b455971fa8a15bea8daf5b3f82f70ed0576cf9b27854102c0cf63b4fc55985.
Independent non-lead contributor reviewer runtime homelab/gpt-6.1-sol, real read/bash tools; original P1 unsafe admission after failed candidate cleanup reproduced and resolved with irreversible process-local fail-closed blocker. Review tasks743e0147 and a38a3059, evidence custom-matrix-owner-independent-review.md. No P0/P1 remaining. Existing unrelated plugin_review history/budget unchanged; no re-review topicPR235.
Build/typecheck pass, focused22/22, full1328/1328. Logs /tmp/custom-owner-{build-final,type-repaired,repaired-tests2,suite-repaired}.log.

Integration / activation ownership

HEX/actual nonauthor maintainer owns normal exact-head merge and shared delivery to Severus/Randy. Do not merge as author, bypass checks, dispatch builds11983/11986 again or modify primary/review models.
Old installed v0.1.159 CLI unconditionally blocks any custom gateway (dist/cli.js396) and cannot hot-reload its closure. This delta enables NEXT BOOT only. Module copying/reload cannot produce old-process201. Existing runtime owner HEX needs separately authorized controlled bootstrap transition via existing GitOps/Argo application route; old native API and handoff broker have no shutdown/admission override endpoint. No kill/restart/promotion/config/inbox/session/crypto/PVC/room mutation performed. Protected Leaders shutdown preserved. No claim of old-process lease or deployed consumer proof.

## Scoped incident owner repair Provides explicit GatewayModule updateAdmission: foreground-owned contract; tracks actual active owners and preparing/pending transitions, fails closed after uncertain candidate cleanup. Legacy modules remain unsupported. No lease override. Ships managed docs/gateways/matrix-recovery.mjs, preserving original matrix-recovery-20261026.mjs Matrix429 retry and review-summary compaction byte-for-byte in function/class implementation, inherited native stop. Owner can configure absolute installed path after authorized transition. No plugin pin change required: new factory ships in Core docs image layer. ## Evidence Base b23185c4; current main9d252f4 has no changes to these shared source files. Exact reviewed patch SHA25639b455971fa8a15bea8daf5b3f82f70ed0576cf9b27854102c0cf63b4fc55985. Independent non-lead contributor reviewer runtime homelab/gpt-6.1-sol, real read/bash tools; original P1 unsafe admission after failed candidate cleanup reproduced and resolved with irreversible process-local fail-closed blocker. Review tasks743e0147 and a38a3059, evidence custom-matrix-owner-independent-review.md. No P0/P1 remaining. Existing unrelated plugin_review history/budget unchanged; no re-review topicPR235. Build/typecheck pass, focused22/22, full1328/1328. Logs /tmp/custom-owner-{build-final,type-repaired,repaired-tests2,suite-repaired}.log. ## Integration / activation ownership HEX/actual nonauthor maintainer owns normal exact-head merge and shared delivery to Severus/Randy. Do not merge as author, bypass checks, dispatch builds11983/11986 again or modify primary/review models. Old installed v0.1.159 CLI unconditionally blocks any custom gateway (dist/cli.js396) and cannot hot-reload its closure. This delta enables NEXT BOOT only. Module copying/reload cannot produce old-process201. Existing runtime owner HEX needs separately authorized controlled bootstrap transition via existing GitOps/Argo application route; old native API and handoff broker have no shutdown/admission override endpoint. No kill/restart/promotion/config/inbox/session/crypto/PVC/room mutation performed. Protected Leaders shutdown preserved. No claim of old-process lease or deployed consumer proof.

severus-snape added 1 commit

2026-11-03 12:31:51 +00:00

fix(gateway): support explicit custom Matrix update ownership e85621aa44