') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ', 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); })(); Don't let one namespace delete another's server records by subwire · Pull Request #232 · binsync/declib · GitHub
Skip to content

Don't let one namespace delete another's server records - #232

Merged
mahaloz merged 4 commits into
mainfrom
registry-namespace-safety
Aug 2, 2026
Merged

Don't let one namespace delete another's server records#232
mahaloz merged 4 commits into
mainfrom
registry-namespace-safety

Conversation

@subwire

@subwiresubwire commented Jul 29, 2026

Copy link
Copy Markdown
Collaborator

The bug

A registry directory can be shared by processes that cannot see each other's servers. The easy way to get there is several containers bind-mounting the same home directory — which is how agent harnesses tend to run. The registry is shared; sockets live in each container's own /tmp, and PIDs are per-namespace.

So every liveness test fails on a sibling's record — socket missing, pid absent — and pruning deletes the record of a server that is alive and well.

The owner then cannot find its own server: decompiler list returns nothing while the process is running and serving, and load blocks until --timeout expires waiting for a server that started successfully seconds earlier.

Traced

Instrumenting every registry mutation across two concurrent containers:

container A: REGISTER 6fe01da235 (pid 1301)
container B: PRUNE 6fe01da235 socket_exists=False pid_alive=False
container B: REGISTER 89b45700ed (pid 1358)
container A: PRUNE 89b45700ed socket_exists=False pid_alive=False

They annihilate each other on every load.

Cost

On a 40-binary benchmark, 22 of 40 solves hit a phantom Timed out waiting … for server to start — 50 occurrences in a single run — each burning the full timeout (up to 300s) while the server sat healthy. Reproduced directly with two containers sharing one home:

result
shared registryregistered 0 server(s) … 0 visible, 1 process alive
isolated registryeach container: 1 visible, 1 process alive

Change

Records carry the namespace that created them (hostname + pid/mnt namespace links), which makes "not mine" distinguishable from "dead". Foreign records are skipped entirely — never returned as ours, never deleted — so a container is the only writer of its own entries.

Records without the field are treated as local, so existing registries prune exactly as before.

This is defense in depth, not a licence to share: deployments should still give each container its own registry (we set XDG_STATE_HOME per container). It makes the shared case degrade into "I can't see it" instead of "I deleted it".

Tests

Four: foreign records are never returned nor deleted; our own dead records are still pruned; new records carry a namespace; legacy records without one still prune.

🤖 Generated with Claude Code

subwireand others added 4 commits July 29, 2026 05:05
@subwire@claude
Don't let one namespace delete another's server records
51bb3ed
A registry directory can be shared by processes that cannot see each
other's servers. The easy way to arrive there is several containers
bind-mounting the same home directory, which is how agent harnesses tend
to run: the registry is shared, but sockets live in each container's own
/tmp and PIDs are per-namespace.
Every liveness test then fails on a sibling's record -- socket missing,
pid absent -- so pruning deletes the record of a server that is alive and
well. The owning container subsequently cannot find its own server:
`decompiler list` returns nothing while the process is running and
serving, and `load` blocks until its --timeout expires waiting for a
server that started successfully seconds earlier.
Traced across two concurrent containers:
container A: REGISTER 6fe01da235 (pid 1301)
container B: PRUNE 6fe01da235 socket_exists=False pid_alive=False
container B: REGISTER 89b45700ed (pid 1358)
container A: PRUNE 89b45700ed socket_exists=False pid_alive=False
On a 40-binary benchmark this cost 22 of 40 solves a phantom
"timed out waiting for server to start", 50 occurrences in one run.
Records now carry the namespace that created them, which makes "not
mine" distinguishable from "dead". Foreign records are skipped entirely:
never returned as ours, never deleted. Records without the field are
treated as local, so existing registries keep working exactly as before.
Deployments should still give each container its own registry; this makes
the shared case degrade into "cannot see it" rather than "deleted it".
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@subwire@claude
Settle liveness by probing the server, not by inspecting proxies
08956e2
Both existing checks are proxies for the question actually being asked.
A socket file survives an unclean death, so its presence proves only that
a server once bound there. A PID can be recycled by an unrelated process.
Either can report "alive" about a server that is gone -- and, across a
shared registry, "dead" about one that is fine.
ida-pro-mcp settles the same question by connecting to the endpoint
(`probe_instance`), for the same reasons; its comment cites PID reuse and
"process alive but the server crashed". Do likewise: after the two cheap
checks pass, connect to the socket.
Verified against a real backend: a live server is still reported and
usable; after SIGKILL the socket file remains on disk and the server is
correctly reported gone, where the file check alone would have said it
was alive.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@mahaloz
Merge main into registry-namespace-safety
5f3cfeb
@mahaloz
Merge latest main into registry-namespace-safety
0e69bbd
@mahaloz
mahaloz merged commit 3ae6439 into mainAug 2, 2026
5 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@subwire@mahaloz