Skip to content

feat(wal): select immutable manifests through the catalog quorum - #412

Merged
beinan merged 1 commit into
lance-format:mainfrom
beinan:codex/wal-manifest-authority
Oct 20, 2026
Merged

beinan merged 1 commit into
lance-format:mainfrom
beinan:codex/wal-manifest-authority

Conversation

@beinan

@beinan beinan commented Oct 20, 2026

Copy link
Copy Markdown
Collaborator

Summary

Select immutable staged Lance manifests through the replicated catalog instead of treating an epoch check before a blob write as a publication fence. Each managed dataset incarnation has a durable current head and bounded version records. Reservations bind the exact transaction, prepared descriptors, owner and predecessor; retries recover the selected identity and never replace an occupied target.

Add bounded quorum manifest lookups and v6 checkpoint recovery. Source pins, publication plans, descriptors and manifests remain retained; outcome advancement and coordinated collection are separate work. Bootstrap requires exclusive managed ownership and verification of the actual starting manifest.

Real Lance tests use six persistent TCP WAL processes, unique manifest files and strict catalog lookups. They verify full payloads after snapshot/restart, lost commit replies, and an old owner paused after upload and resumed after takeover. The test transport adapter does not enable the production ingestion service or GC.

Refs #378.

Testing

Passed 92 focused Rust tests (including 10 process tests), 605 workspace Rust tests, and 229 Python tests (2 skipped, 1 expected failure). Completed the full repository CI helper, all-feature WAL Clippy, server build, workspace packaging and immutable source verification.

@beinan
beinan merged commit f337ca0 into lance-format:main Oct 20, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant