Message-free supervisor: process split — agent ⇄ supervisor over gRPC, programs included#977

Open

odesenfans wants to merge 47 commits into

devfrom

Commits on Jun 11, 2026

docs: design for the gRPC transport + program path + process split (dev-accelerate)
odesenfans
committed
feat(supervisor): gRPC transport — server, client, and DTO/proto conversion
odesenfans
committed
feat(supervisor): daemon entrypoint serving the contract on a Unix socket
odesenfans
committed
feat(contract): program_mode + control socket / runtime handshake / gateways on VmInfo
odesenfans
committed
feat(supervisor): message-free Firecracker program boot from a CreateVmSpec
odesenfans
committed
feat(agent): on-demand programs (microvms) run through the Supervisor boundary
odesenfans
committed
feat(agent): split mode — agent talks to the supervisor daemon over gRPC
odesenfans
committed
fix(agent): serialise concurrent cold program requests per VM
odesenfans
committed
fix(agent): harden the program guest-API startup; log INTERNAL aborts server-side
odesenfans
committed
docs: record the successful live e2e through the split
odesenfans
committed
refactor(contract)!: hypervisor-agnostic wire — GuestChannel, opaque ready payload, mechanism-only disk roles, no is_instance
odesenfans
committed
refactor(contract)!: scrub remaining workload vocabulary from the wire
odesenfans
committed
refactor(contract)!: fold VmInfo IP fields into IpAssignment sub-messages
odesenfans
committed
refactor(contract): guest hostname is the client's, sent in CreateVmRequest
odesenfans
committed
feat(contract): GuestChannel.ready_timeout_secs — boot-time policy is the client's
odesenfans
committed
fix(supervisor): stamp live log chunks at capture time
odesenfans
committed
feat(contract): GetVmSpec, idempotent CreateVm, honest RebootVm
odesenfans
committed
feat(contract): StopVm/StartVm — stop without releasing the definition
odesenfans
committed
feat(contract): WatchEvents — lifecycle transitions as a server stream
odesenfans
committed
fix(agent): deadlines on every unary supervisor RPC
odesenfans
committed
fix(agent): type-ignore aiohttp Signal stubs on event-watcher hooks
odesenfans
committed
docs: protocol review follow-through in the split design doc
odesenfans
committed
fix(tests): annotate the fake app dict for mypy
odesenfans
committed
feat(supervisor): implement BackupOps on the in-process supervisor
odesenfans
committed
fix(pool): forget-on-stop must not remove a recreated execution
odesenfans
committed
test(integration): supervisor integration suite over gRPC
odesenfans
committed
docs: record BackupOps wiring and the integration suite in the design doc
odesenfans
committed
build(just): itest / itest-root recipes for the supervisor integration suite
odesenfans
committed
style: drop em-dashes from the new integration-suite text
odesenfans
committed
fix(itest): controller drop-in env, teardown hardening, stale socket guard
odesenfans
committed
fix(itest): PrivateTmp-safe root sessions, tap-based firewall asserts, image defaults
odesenfans
committed
fix(supervisor): catch crash-looping controllers, EXECUTION_ROOT length, delete leftovers
odesenfans
committed
fix(itest): short execution root, qemu's sun_path limit applies to it
odesenfans
committed
fix(supervisor): stop the controller before tearing down the network
odesenfans
committed

Commits on Jun 12, 2026

Commits on Jun 13, 2026

test(integration): track hypervisor PIDs by set difference, not count
odesenfans
committed