Rust rewrite plan

Acceptance

One native executable with an async TCP engine and embedded web UI. No Python/runtime frontend build required for operation. Typed TOML configuration, atomic durable operator state, authenticated same-origin controls, reusable scoreboard connection, bounded networking resources, graceful shutdown, explicit replica delivery policies. Local functional/integration checks and Linux tests pass; benchmark results are measured and reproducible.

Phases

[complete] Capture legacy behavior and verify ForcAD wire format; establish module contracts.
[complete] Async forwarding, lifecycle/metrics, backpressure and recoverable accept supervision.
[complete] Scoreboard clients, observed-health freshness and deterministic failover.
[complete] Authenticated API/persistence and literal legacy UI restoration with original interactions.
[complete] Native and Orb integration/failure tests, ForcAD library interoperability, browser checks and measured benchmarks. Final fixed-source gates passed.
[complete] R6 cancellation safety fixed and independently accepted; final validation, documentation and local release artifacts complete.

Latest correction and review gate

Original appearance/workflows restored; source CSS parity and browser checks recorded in docs/verification.md.
Initial docs/review.md is historical. Final findings and resolution belong in docs/final-review.md; R6 is independently verified and final review is approved.
New code must preserve original columns, primary/replica interaction, direct-IP custom proxies, robot, own-team status strip and counters.

Global constraints

User means upstream routing, not host firewall interception.
Never drop chunks from a live replica silently. Strict mode uses bounded backpressure; isolation mode disconnects a lagging replica explicitly and counts/reports it. Availability and lossless mirroring cannot both be guaranteed for an indefinitely slower/unavailable replica.
Existing sessions keep their selected target. Do not replay partially sent requests on another primary.
Preserve TCP half-close; no inherited 3-second idle timeout.
All fixtures use loopback/test addresses, not old configured hosts.
Do not store passwords, keys, tokens, session values or flags in source or logs.
No mandatory external UI CDNs. Single embedded frontend, accessible keyboard controls.

Errors/research corrections

Initial CTF skill path under .agents was wrong; correct installed path is .codex/skills/ctf-attack-defense.
Guessed C4T-BuT-S4D ForcAD repository does not exist; discover canonical upstream before implementing its protocol.
Integrated build briefly blocked by not-yet-created UI assets while UI implementer was working; not a Rust source failure.

2.7 KiB Raw Blame History