[thebhef]

The field crash — a tokio worker panicking at seg_chain.rs:76 with
Windows OS error 1224 half a second after restored 57529481 frames from prior capture — was not a stale in-process store. It was the
previous cannet process, still alive and still holding every segment
file in the same project cache directory while the relaunched one
restored that directory and grew a chain in it.

A process-wide registry of live mappings, run over the whole cannet-gui
and cannet-spill suites, found no production path that keeps two stores
or two caches over one directory: there is exactly one
TraceStore::new_disk and one SignalCacheStore::new, and every swap path
drops the old value before the new one lands. The owner's own log
settles it instead — the crashing process started at 17:47:01.954 and
panicked at 17:47:09.095, while the process that had just imported that
BLF was still emitting its health tick at 17:47:15.902 with its webview
already gone. Two processes, fourteen seconds of overlap, one scratch.

The collision needs the two chains to be at different lengths, and the
manifest guarantees that: the older chain grew into segment i after its
last flush, so that file exists and is mapped while the manifest the
newer one reopens from still describes a chain one segment short. The
newer chain's next push therefore calls create_segment on a live
mapping, which opens with truncate(true) and set_len.

Both tests here reproduce that in about ten milliseconds against the
public API — one over SampleSeq (the pyramid levels), one over
DiskRawStore (the by-id postings, the family the field scratch shows).
Both fail on every CI OS rather than only on Windows: the Windows arm
is the panic, taken with catch_unwind so it reads as an assertion, and
the POSIX arm is the assertion that the held chain's samples survive,
because there set_len on a mapped file succeeds and silently zeroes the
other chain's segment underneath it. Both are #[ignore]d, since making
them pass is the fix phase's job; cargo test --workspace does not pass
--include-ignored, so they stay inert until the attribute comes off.

Reviewers should look at what the tests assert rather than how they are
shaped: that reopening a segment chain is legal twice over, and that
growing one is what the fix has to make safe.

Co-Authored-By: Claude Opus 5 (1M context) noreply@anthropic.com

[thebhef]

• Queue the feedback campaign's findings for owner review #502
• Startup restore feedback: a relaunch reports the prior capture's reopen in the status bar #575
• Plot y scale: fit what is on screen, keep a bound typed and left by clicking away #574
• Report a failed manual send and a failed Duplicate #573
• Round calendar-time fractions so they agree with the elapsed column #572
• Keep an enum's held codes and its changes visible at every zoom #571
• Adopt ruff 0.16's default rule selection in the three Python packages #570
• Duplicate a transmit element with its own cloned host TX frames #569
• Add a Duplicate button to the Project panel's element rows #568
• Read calendar time on the plot under time_display #567
• Read calendar time in the trace, By-ID, Events and Signals time cells #566
• Add the time_display setting and the calendar-time formatters #565
• Draw a ranged series straight between its own samples #564
• Copy plot areas with the platform's modifier, same panel included #563
• Keep a name beside a fixed sibling shrinking instead of vanishing #562
• Collapse plot axes only, with the disclosure leftmost on every head #561
• Logger {now} names each file of a run, not the run itself (task 165 phase 3) #560
• Date/time pattern setting: five display sites collapse into one formatter #559
• Name templates speak TR35 date patterns; strftime removed (ADR 0062) #558
• Remove the refused-send row: only the wire writes data (ADR 0061) #557
• Python toolchain: forward-and-consistent grpcio/protobuf/grpcio-tools, ruff 0.16 with an explicit rule set #556
• Row the time cursor chips when they collide; scale their precision with zoom #555
• Fault-recovery bench: six PEAK runs of the shipped recovery recorded #554
• Reopen a channel close-first, retry a failed open, and let a bus-off refusal arm the reset #553
• Add a fault-recovery bench that swaps the sidecar's bus-off recovery per run #552
• Persist bus-error episode detail with the error series #551
• Fix the host README's stale stuck-queue paragraph for ADR 0060 #550
• Render ADR 0060's bus-fault fields in the frontend #549
• Read bus faults from the sidecar's episode reports on the host #548
• Decode ADR 0060's bus-fault envelopes into per-interface client state #547
• Report bus faults from the sidecar as episodes, on a control lane ahead of data #546
• Add bus-fault reporting envelopes to cannet.v1 (ADR 0060 phase 3) #545
• Record the bus-fault model: sidecar-reported episodes, two lanes, flush a stuck queue #544
• Add a fault-load harness for the sidecar's session stream #543
• Remove the redundant Events disclosure chip from plot and trace #540
• List bus-error episodes among the events in the Events panel's one list #539
• Let only the wire write the Tx row: the driver's echo, not the send #538
• Refresh the plot's bus-error markers as errors arrive #537
• Add a cargo fmt --check job to CI #535
• Show searching… then the host's match count in the trace filter box #534
• Draw the plot's bus-error markers as episodes at the configured gap #533
• Read event and bus-error episode times as wall time on hover #532
• List bus errors as episodes at a configurable gap in the Events panel #531
• Page bus-error episodes into the Events panel; leave the trace's rows alone #530
• Give bus-error markers a windowed query on the plot #529
• Serve bus errors as a paged series from the signal cache #528
• Widen the logger file grid's action column and fix its column order #527
• Keep the window up while the host finishes closing #525
• Hold a project's cache directory exclusively for the session #524
• Reproduce the restore-time 1224 panic as two live mappings on one scratch #523 👈 (View in Graphite)
• Log a logger's clamped timestamps the way Save Capture already does #522
• Turn the trace store's before-session frame drops into a coalesced WARN #521
• Make PEAK bus-off visible and reopen a silent, queue-full channel #542
• Withhold PEAK echoes while error-passive; clear stale counters per poll #541
• Bring a bus-off controller back without user action, on every vendor #536
• Unwrap the Kvaser 32-bit receive timer in the sidecar driver #520
• Move the Servers rows into the settings view as a gridview #519
• Make the project caches list a gridview, and share its scroll-restore #518
• Make the settings view's units section a gridview #517
• Open the trace panel's signal disclosure on a signal or value winner #516
• Rank signals and enum values in their own right in the trace filter #515
• Answer before deriving: listings, index rebuilds and poll guards #514
• Take the heavy host commands off the IPC thread #513
• Alias a library unit through the settings units entry #512
• Colour a gridview selection at once, in Signals panel and plot area #511
• Project caches: chip carries location, tooltip follows it, no more danger button #510
• Filter the unit picker, and let a composed kind offer its whole class #509
• Read the whole unit table out of the library instead of typing it #508
• Name the project in each project-caches row; Delete becomes two-stage #507
• The settings view re-reads what it shows and keeps its place #506
• Draw plot sample markers as squares, collapsed per pixel column #505
• Draw the plot's hover chrome on an overlay canvas #504
• Close the palette before running the picked command #503
• Plumb empty plot areas, per-area event-marker base, and an Events chip #501
• Move the cursor and event readouts out of the data area into gutters #500
• Mark every served sample, and make an enum lane an ordinary series #499
• Serve every window as first, last, min and max, and drop the categorical reducer #498
• Measure what a plain min/max serve does to a held enum code #497
• Filter the Trace panel's rows with the same fzf, in both modes #496
• Rank the trace's rows host-side with the app's own fzf #495
• Let a bus explicitly set to no interface connect as unbound #494
• Let regular collapse/expand work while the database/RBS filter is active #493
• Groom five tasks: four out of the user feedback, plus the trace filter #492
• Fix fit-data test racing its own catch-up deadline #526
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[thebhef]

Merge activity

• Oct 14, 9:10 PM UTC: A user started a stack merge that includes this pull request via Graphite.
• Oct 14, 10:29 PM UTC: Graphite rebased this pull request as part of a merge.
• Oct 14, 10:32 PM UTC: @thebhef merged this pull request with Graphite.