feat(spend): require one writer lease per state directory for the spend journal by lidge-jun · Pull Request #5157 · lidge-jun/opencodex

feat(spend): require one writer lease per state directory for the spend journal

lidge-jun

committed

9bed078

fix(spend): bind journal mutations to a live lease, not to the handle

lidge-jun

committed

192d0c5

fix(spend): release the ledger singleton with the lease that owned it

lidge-jun

committed

06fda1c

fix(spend): prove exact ownership on every accounting read and change

lidge-jun

committed

4d6d896

fix(spend): make ownership proof something only the owner module can mint

lidge-jun

committed

20a959a

fix(spend): key ownership proof on identity, not on a marker the token carries

lidge-jun

committed

6da37f4

fix(spend): take ownership on demand instead of refusing to serve

lidge-jun

committed

7c47530

fix(spend): drop the implicit lease and own the directory in the fixtures instead

lidge-jun

committed

64dae86

test(spend): order the lease release ahead of each fixture's cleanup

lidge-jun

committed

2c76301

test(spend): let a failed lease release fail the case

lidge-jun

committed

4bb4d80

test(spend): own the state directory in the six fixtures CI named

lidge-jun

committed

567b673

test(spend): own the state directory in the merged send-budget count rows

lidge-jun

committed

d3cca4e

test(spend): take the writer lease in every fixture that dispatches directly

lidge-jun

committed

dba082c

test(spend): finish the lease migration and remove the image suite's own home

lidge-jun

committed

d209eb8

test(spend): make room for the lease in the five fixtures at their cap

lidge-jun

committed

afd9549

test(spend): release each turn's body before the lease that served it

lidge-jun

committed

4de35b4

test(spend): read the gateway attempt row's body before its lease is released

lidge-jun

committed

4231b27

test(spend): repair the three failures the first hosted run found

lidge-jun

committed

d2bc0d8

test(spend): lease the four mixed fixtures the transitive audit found

lidge-jun

committed

92c2dae

test(spend): lease the websocket steering path at its shared fixture

lidge-jun

committed

a625141

test(spend): fix the audit batch and the two ownership-identity traps

lidge-jun

committed

b6328e8

test(codex): give the overlapping successor its own state directory

lidge-jun

committed

6b5132b

test(spend): wait for the turns to finish before giving the lease back

lidge-jun

committed

cf496e3

test(spend): track the wrapper each logged helper returns, not the raw turn

lidge-jun

committed

5591286

test(routing): narrow the eager-relay platform claim to the relay decision

lidge-jun

committed

70a86c7

fix(spend): close three failure paths in the ledger's own storage

lidge-jun

committed

58fb3bb

test(spend): prove the storage and rollback failure paths instead of asserting them

lidge-jun

committed

6842dcb

test: repair the two source-anchor and platform assumptions CI found

lidge-jun

committed

c1644a2

test(spend): close the three fixture gaps the review named

lidge-jun

committed

be2563f

test: keep websocket teardown failure-safe and drain the store-default turns

lidge-jun

committed

4d8493f

test: finish the websocket teardown so one failure cannot strand the rest

lidge-jun

committed

2711398

test(server): fix the three late-batch failures the shard finally reached

lidge-jun

committed

9e789c1

test(spend): fix two macOS-only failures in my own storage regressions

lidge-jun

committed

647dc67

test(spend): make the contention matrix test the modes it names

lidge-jun

committed

a67cd9b

Navigation Menu

feat(spend): require one writer lease per state directory for the spend journal - #5157

feat(spend): require one writer lease per state directory for the spend journal#5157
lidge-jun merged 34 commits into
devfrom
codex/spend-ledger-writer-lease

Commits on Sep 19, 2026

feat(spend): require one writer lease per state directory for the spend journal

fix(spend): bind journal mutations to a live lease, not to the handle

fix(spend): release the ledger singleton with the lease that owned it

fix(spend): prove exact ownership on every accounting read and change

fix(spend): make ownership proof something only the owner module can mint

fix(spend): key ownership proof on identity, not on a marker the token carries

fix(spend): take ownership on demand instead of refusing to serve

fix(spend): drop the implicit lease and own the directory in the fixtures instead

test(spend): order the lease release ahead of each fixture's cleanup

test(spend): let a failed lease release fail the case

test(spend): own the state directory in the six fixtures CI named

test(spend): own the state directory in the merged send-budget count rows

test(spend): take the writer lease in every fixture that dispatches directly

test(spend): finish the lease migration and remove the image suite's own home

test(spend): make room for the lease in the five fixtures at their cap

test(spend): release each turn's body before the lease that served it

test(spend): read the gateway attempt row's body before its lease is released

test(spend): repair the three failures the first hosted run found

test(spend): lease the four mixed fixtures the transitive audit found

test(spend): lease the websocket steering path at its shared fixture

test(spend): fix the audit batch and the two ownership-identity traps

test(codex): give the overlapping successor its own state directory

test(spend): wait for the turns to finish before giving the lease back

test(spend): track the wrapper each logged helper returns, not the raw turn

test(routing): narrow the eager-relay platform claim to the relay decision

fix(spend): close three failure paths in the ledger's own storage

test(spend): prove the storage and rollback failure paths instead of asserting them

test: repair the two source-anchor and platform assumptions CI found

test(spend): close the three fixture gaps the review named

test: keep websocket teardown failure-safe and drain the store-default turns

test: finish the websocket teardown so one failure cannot strand the rest

test(server): fix the three late-batch failures the shard finally reached

test(spend): fix two macOS-only failures in my own storage regressions

test(spend): make the contention matrix test the modes it names