gsadmin/pulse
1
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-23 20:25:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Guard canonical VM Discovery during guest-read deferrals

Browse Source 
Use the existing guest safety signals in the canonical resource drawer, including typed and legacy PVE facets. Keep saved Discovery evidence readable and the backup precaution visible without admitting a manual rescan while paused.

Contract-Neutral: performance-and-scalability; the workload helper input is narrowed without changing its decisions, metrics, render path or performance contract.
Change-source: pulse-maintainer
This commit is contained in:
pulse-triage[bot]
2026-10-05 17:16:03 +01:00
parent 90a7d2e0ad
commit ee618fb993
12 changed files with 740 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/release-control/v6/internal/subsystems/unified-resources.md
+24
View File
@@ -23,6 +23,30 @@ and sort the complete canonical change table while startup and ingestion wait.
## Purpose
### Canonical Discovery honours VM guest-read deferrals
The canonical resource drawer uses the same fixed PVE VM lock, backup and
read-deferral signals as the Workloads drawer. Typed and legacy PVE facets are
checked independently: an available flag in one cannot cancel a pause in the
other. Only the VM's own provider evidence is used; parent-node locks, an agent
version and a Discovery target are not guest-liveness evidence. Containers,
ordinary agents and unrelated provider facets retain their existing behaviour.
Both embedded Analysis and the dedicated Discovery entry pass this pause to the
existing manual-run guard. Saved results remain readable; same-ID updates block
or release the existing control without an automatic scan, invented timestamp
or cancellation claim for already-dispatched work. The wrapping precaution and
existing safety-guide link remain visible across drawer tabs. Clearance is not
independent thaw, covered-filesystem writes or safe monitoring resumption.
`ResourceDetailDrawer.discovery.test.ts` covers both facets, every fixed reason,
precedence and platform isolation. `ResourceDetailDrawer.guest-safety.test.tsx`
mounts the real Discovery client/control, checks same-ID updates and no dispatch
while paused, and preserves normal agent actions. The production browser fixture
`browser-tests/resource-guest-safety.cjs` checks desktop keyboard and narrow touch
with synthetic local responses. No backend, permission, collector or native
recovery guarantee is added.
### Broadcast bulk reads capture resources and history coordinates together
`ListWithMetricsTargets` and the monitor adapter's matching optional read return