Merged
logan
merged 6 commits from 2026-11-01 06:39:40 -05:00
fix/44-upload-spool into main
No Reviewers
Labels
Clear labels
area/ai-pipeline
area/auth
area/billing
area/correlation
area/discord
area/frontend
area/governance
area/growth
area/infra-deploy
area/legal
area/map
area/mqtt
area/node-ota
area/osint
area/recording-audio
area/sdr-radio
area/transcription
board
board:agenda
Scene/entity extraction, summarizer, AI providers, embeddings
AuthN/Z, roles, tenancy/org scoping, API keys, credentials
Plans, entitlements, AI spend accounting and caps
Incident correlation, linking, lifecycle, severity, corr_debug
Discord bot, radio bots, voice streams, bot tokens, webhooks
Web UI: Next.js app and the edge-node local dashboard
Board process, minutes, unattended runner, agent tooling
Go-to-market, outreach, cold email, discovery conversations
CI/CD, VM, registry, Firestore rules/indexes deploy, Terraform/Caddy
ToS, retention, licences/DAAs, CAN-SPAM, E&O, name suppression
Live map: pins, paths, tiles, legend, geocoding
Node-C2 MQTT, checkins, commands, node sweeper, dynsec
Node install, enrollment, OTA updater, image skew
External feeds: cameras, 511, ADS-B, AIS, outages, and their licences
Call capture, boundaries, PulseAudio, ring buffer, trimming, attribution
OP25 decode, SDR hardware/tuning, conventional, second SDR, mesh radio
STT, transcript correction, place verification, name accuracy
Board process: minutes and board-filed items
Needs board scoping at the next sitting; CEO removes the label once scoped
kind
behavior-bug
Wrong product behavior; the instrument reads it correctly
kind
measurement-bug
Corrupts the recording/instrument (debug data, evals, health checks), not behavior
priority
p0
Drop everything: prod broken, live exposure, or owner-ruled P0
priority
p1
Next up: blocks a gate, a customer, or core incident quality
priority
p2
Normal: real defect or planned work, schedule in turn
priority
p3
Low: minor, cosmetic, or someday
status
blocked
Waiting on an external party, spend, or another issue
status
in-progress
Branch or PR open against it
status
needs-decision
Waiting on an owner or board ruling before work
status
needs-info
Root cause or repro unknown; needs a reading first
type
bug
Something built is wrong: code, data, or a measurement
type
chore
Maintenance, refactor, tests, pinning, cleanup: no user-visible change
type
decision
A ruling to make or record: board minutes, owner calls, legal reviews
type
docs
Docs, runbooks, CLAUDE.md, skills, SOPs
type
feature
New capability or an extension of an existing one
type
security
Security, privacy, credential or tenant-isolation exposure
type
tracking
Tracker, checklist, initiative or punch-list spanning several changes
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: logan/node-26#47
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Server companions server-26#301/#302 are on feat/ai-pipeline-review (not merged yet).
Tests: edge-node 347 pass, op25-container 18 pass, flake8 clean.
🤖 Generated with Claude Code
mqtt_manager.last_error = {kind, detail, epoch}: 'refused' from a non-zero CONNACK, 'unreachable' from the initial connect loop or paho's on_connect_fail, 'disconnected' otherwise. Cleared on connect. The /api/health MQTT check now gives a key fix for a refusal and a network fix for an unreachable broker instead of guessing from whether a key is on disk. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>upload_recording deleted the file in `finally` even when the POST failed, so any C2 outage, 5xx or timeout lost the call's audio for good. - Delete only after a 2xx that carries a URL (C2 answers 200 {url: null} when its GCS write fails). - Retryable failures (network, timeout, 5xx, 401/408/429, 2xx-no-url) move the file plus a JSON sidecar (call_id, talkgroup, system_id, audio epochs) into <recordings>/spool. A background task retries with exponential backoff and drains the spool on startup. Other 4xx are deleted with an ERROR naming the status. - Bounded: UPLOAD_SPOOL_MAX_BYTES (512 MiB) and UPLOAD_SPOOL_MAX_AGE_HOURS (72), oldest evicted first, since a full host disk stops recording (#41). - Crash-safe: the sidecar is fsynced and written before the audio moves in; a lost or corrupt sidecar is rebuilt from the filename instead of deleting the audio. - The inline attempt uses UPLOAD_INLINE_TIMEOUT_SECONDS (30), so a black-holed C2 no longer stalls the segmenter for 120 s per call. - call_end carries audio_upload=spooled|rejected|lost; a new API key wakes the spool; /api/status and the checkin report spool depth and the last upload outcome (toward #40). Reviewed by drb-audio-review. Its two server-side findings (late uploads correlated against now; no /upload idempotency) are filed separately. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>