launcher: stricter circuit monitor (10 s check, 20 s cooldown, close on first weak pass, min 1 leg/set)

Author: Delta-Kronecker

.github/workflows/sync-release-notes.yml

@@ -0,0 +1,58 @@
+name: Sync Release Notes
+
+on:
+  workflow_dispatch:
+  release:
+    types: [published]
+
+permissions:
+  contents: write
+
+jobs:
+  sync:
+    name: Rewrite release notes from tagged commits
+    runs-on: ubuntu-latest
+    steps:
+      - name: Rewrite release notes from tagged commits
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          REPO="${{ github.repository }}"
+
+          echo "Resolving tags to commits..."
+          declare -A tag_commit
+          while read -r ref sha type; do
+            tag="${ref#refs/tags/}"
+            if [ "$type" = "commit" ]; then
+              tag_commit["$tag"]="$sha"
+            else
+              tag_commit["$tag"]="$(gh api "repos/$REPO/git/tags/$sha" --jq '.object.sha')"
+            fi
+          done < <(gh api "repos/$REPO/git/refs/tags?per_page=100" --paginate --jq '.[] | "\(.ref) \(.object.sha) \(.object.type)"')
+
+          echo "Syncing release notes..."
+          updated=0
+          unchanged=0
+          gh api "repos/$REPO/releases?per_page=100" --paginate --jq '.[] | .tag_name' |
+          while read -r tag; do
+            sha="${tag_commit[$tag]:-}"
+            if [ -z "$sha" ]; then
+              echo "skip    $tag (no matching tag ref)"
+              continue
+            fi
+            msg="$(gh api "repos/$REPO/commits/$sha" --jq '.commit.message')"
+            current="$(gh release view "$tag" --repo "$REPO" --json body --jq .body 2>/dev/null || true)"
+            if [ "$msg" = "$current" ]; then
+              echo "unchanged $tag"
+              unchanged=$((unchanged + 1))
+              continue
+            fi
+            printf '%s\n' "$msg" > notes.md
+            gh release edit "$tag" --repo "$REPO" --notes-file notes.md
+            echo "updated   $tag"
+            updated=$((updated + 1))
+          done
+
+          echo "Done: $updated updated, $unchanged unchanged"

README.md

@@ -181,17 +181,17 @@ physical interface, so tor's outbound TLS never loops back into the tunnel.
 ### Circuit health monitor
 
 While Tor is up, TorJet watches the conflux legs via the control port. Every
-20 s it asks tor for the conflux set list (`CONFLUX QUERY`) and prunes low
+10 s it asks tor for the conflux set list (`CONFLUX QUERY`) and prunes low
 quality legs so tor rebuilds them with fresh circuits:
 
 - a linked leg is **weak** when its RTT is at/above an absolute threshold
   (`--watch-rtt`, default 1000 ms) or it is clearly slower than the best leg of
   its own set (`>= --watch-rtt-floor` ms and `>= --watch-factor` times the set
   best, defaults 400 ms and 2.0x);
-- a leg must stay weak for `--watch-strikes` consecutive passes (default 2)
-  before it is closed, so a single RTT spike never prunes a healthy leg;
+- a leg must stay weak for `--watch-strikes` consecutive passes (default 1)
+  before it is closed, so a single bad measurement closes it right away;
 - the best (lowest RTT) leg of each set is never closed, and a set is never
-  pruned below `--watch-min-legs` (default 2);
+  pruned below `--watch-min-legs` (default 1);
 - legs stuck **unlinked** for `--watch-unlinked-strikes` passes (default 4)
   AND older than `--watch-unlinked-grace` seconds (default 120) are closed as
   dead weight, but never during tunnel warmup when everything is still
@@ -201,7 +201,7 @@ quality legs so tor rebuilds them with fresh circuits:
 
 tor launches a replacement leg for every closed leg (sets below the configured
 `ConfluxNumLegs` target are also topped up with `CONFLUX ADD`), and conflux
-migrates streams onto the fresh circuits. A 60 s cooldown between closes keeps
+migrates streams onto the fresh circuits. A 20 s cooldown between closes keeps
 the circuit set stable (relaxed during tunnel warmup). Disable it with
 `--no-circuit-watch`; tune it with `--watch-rtt <ms>`, `--watch-interval
 <seconds>`, `--watch-cooldown <seconds>` and the other `--watch-*` flags.

scripts/start-tor.cs

@@ -149,13 +149,13 @@ internal static class Program
         private static int watchRttMs = 1000;
         private static int watchRttFloorMs = 400;
         private static double watchFactor = 2.0;
-        private static int watchStrikes = 2;
-        private static int watchMinLegs = 2;
+        private static int watchStrikes = 1;
+        private static int watchMinLegs = 1;
         private static int watchUnlinkedStrikes = 4;
         private static int watchUnlinkedGraceS = 120;
         private static int watchMaxPerPass = 6;
-        private static int watchIntervalS = 20;
-        private static int watchCooldownS = 60;
+        private static int watchIntervalS = 10;
+        private static int watchCooldownS = 20;
 
         // Per-circuit consecutive-bad counters for the monitor (persist across
         // passes so a single RTT spike never prunes a healthy leg).
@@ -1600,8 +1600,7 @@ private static void CircuitWatchLoop()
                 //     (>= --watch-rtt-floor ms AND >= --watch-factor times the
                 //     set's best RTT), so pruning adapts to each set's conditions.
                 // A leg must stay weak for --watch-strikes consecutive passes
-                // before it is closed, so a single measurement spike never prunes
-                // a good leg. Legs stuck UNLINKED for --watch-unlinked-strikes
+                // before it is closed. Legs stuck UNLINKED for --watch-unlinked-strikes
                 // passes are closed as dead weight. The best (lowest RTT) leg of
                 // each set is never closed, and a set is never pruned below
                 // --watch-min-legs.