shoney.arickathil
c0b0dbb846
- README: shipped concurrency/HTTP/WebSockets sat in the roadmap as "not yet available"; "no package manager" contradicted [deps]; the deps example would not have compiled (the key IS the module name) - runtime/README: leads with wovm, wo-rt.c demoted to a historical section; dropped 2 nonexistent recipes, crates/rt, @gc refcounting, 13 suites -> 18 - employee + log-watcher READMEs claimed "does not compile"; both are gates - error catalog: +10 emitted codes incl WO-E250, the only diagnostic the shipped query surface raises; recorded why the sweep rotted - language-surface: group-by parses, then the typechecker refuses it - 00-code-review + 00-link-audit re-run; history kept, not rewritten - 48 dead Rust-era exploration links de-linked rather than re-pointed (their prose names the retired plan by number); successor map -> discarded.md - 08-project-structure: compiler/plan/ never existed; corpus has 9 dirs, 5 empty - releasing.md: dropped a --draft step the workflow never had - new docs/00-doc-audit.md: findings + disposition, incl one row where the audit was wrong and the doc it accused was right - status folders removed: 34 stories flat, status only in frontmatter; 252 links recomputed from resolved paths; board/board-views/structure retaught - story 24 -> in-progress, since frontmatter is now the only truth - new iteration 38: fs mutation verbs + net.connect, the two capability families no iteration owned - new iteration 39: gofiber/fiber v3.5.0 parity study. The ledger called CSRF/sessions unblocked by iteration 34's HMAC, but the runtime has no source of randomness at all - linkcheck skips .dev/.superpowers: 0 broken paths, 0 bad anchors Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
73 lines
3 KiB
Markdown
73 lines
3 KiB
Markdown
---
|
||
iteration: "26"
|
||
status: hold
|
||
---
|
||
|
||
# Iteration 26 — blue-green in-runtime deployment
|
||
|
||
> Format: `product/story-iteration-template`. Part of
|
||
> [Story — one language, one runtime, one database, one binary](00-story.md).
|
||
|
||
## Goals
|
||
|
||
- The story's closing promise: the running binary updates its own code.
|
||
Two fixed VM slots (activity alternating); a proposal pipeline —
|
||
propose → approve → in-runtime compile → additive schema migration →
|
||
load → health → atomic switch — with the previous version staying
|
||
resident as the instant rollback target.
|
||
- The developer drives it remotely: `wo remote pull / propose / diff /
|
||
approve / rollback / status` over a loopback management transport,
|
||
every stage streaming live and WAL-audited.
|
||
|
||
## Acceptance Criteria
|
||
|
||
- What to achieve?
|
||
- **Given** a running fixture app and an additive code+schema change,
|
||
- **when** the developer proposes and approves it,
|
||
- **then** the deploy completes with zero dropped requests (in-flight
|
||
work — including parked fibers — drains on the old slot through
|
||
iteration 11's unwind path), and the binary's embedded source
|
||
trailer matches the new active version afterward.
|
||
- What to achieve?
|
||
- **Given** a failure at any pipeline stage (compile diagnostic,
|
||
destructive-change rejection, load failure, health failure, drain
|
||
timeout),
|
||
- **when** it occurs,
|
||
- **then** the active slot keeps serving untouched, the failure is
|
||
visible in the SSE stream and the WAL trail, and a destructive
|
||
change was rejected at propose time naming the offending
|
||
declaration.
|
||
- What to achieve?
|
||
- **Given** a completed deploy,
|
||
- **when** `wo remote rollback` runs,
|
||
- **then** the previous version serves again in under one second with
|
||
no compile and no data change — additive-only migration guarantees
|
||
old code runs correctly against the migrated schema.
|
||
- What to achieve?
|
||
- **Given** kill -9 during COMPILING / MIGRATING / SWITCHING /
|
||
trailer-rewrite,
|
||
- **when** the unit restarts,
|
||
- **then** it serves one consistent version and the WAL shows whole
|
||
migrations only.
|
||
|
||
## Out Of Scope
|
||
|
||
- Script-based/destructive migrations, in-runtime editing workspace,
|
||
MCP/agent wrapper over the management plane — all recorded follow-ups.
|
||
- New scheduler work — fibers landed in iteration 11; this iteration's
|
||
drain unwinds parked fibers through 11's shutdown path, it does not
|
||
extend it.
|
||
|
||
## Info
|
||
|
||
- Approved spec: `docs/superpowers/specs/2026-08-03-blue-green-vm-design.md`;
|
||
its implementation plan is deliberately authored only after iterations
|
||
9–10 ship (prerequisites: a catalog to diff, HTTP machinery to build on).
|
||
- VMs own code; the engine owns data — the separation that makes the
|
||
switch cheap and rollback unconditional.
|
||
|
||
## Proposed Solution
|
||
|
||
- Author the implementation plan from the approved spec once iterations
|
||
9–10 land, then execute it (slots, deploy state machine, additive
|
||
differ, management surface + SSE, `wo remote` verbs, crash battery).
|