@@ -55,3 +53,1 @@
-    /// granted on the connection. The host resolves and pins DNS, applies the
-    /// same private-address rule as `http`, and starts TLS when asked. Ports
-    /// negotiated at runtime, such as an FTP data channel, still need a grant.
+    /// Opens a socket to any host, including LAN and loopback addresses, on a

@@ -0,0 +96,4 @@
+    })
+    .await?
+  });
+  let client = tokio::task::spawn_blocking(move || -> TestResult {

@@ -0,0 +97,4 @@
+    })
+    .await?
+  });
+  let client = tokio::task::spawn_blocking(move || -> TestResult {

@@ -0,0 +137,4 @@
+    })
+    .await?
+  });
+  let client = tokio::task::spawn_blocking(move || -> TestResult {

@@ -58,0 +100,4 @@
+/// idle session is replaced and logged in again. Nothing inside a transfer or
+/// mutation retries, because its missing reply may hide a completed change.
+fn ready() -> Result<(), ErrorCode> {
+  if with_control(|control| control.expect("NOOP")).is_ok() {

@@ -55,0 +89,4 @@
+      Some(control) => action(control),
+      None => Err(ErrorCode::Internal),
+    };
+    if matches!(result, Err(ErrorCode::Unavailable | ErrorCode::Internal)) {

@@ -181,1 +268,3 @@
-      let written = socket.write(&data[sent..]).map_err(transport)? as usize;
+      let written = socket
+        .write(&data[sent..])
+        .map_err(|_| ErrorCode::OutcomeUnknown)? as usize;

@@ -175,0 +264,4 @@
+  /// completion reply in an unknown state. Close both channels so the next
+  /// filesystem operation must start a fresh session.
+  fn discard_uncertain_upload(&self) -> ErrorCode {
+    drop(self.socket.take());

@@ -215,0 +377,4 @@
+  for _ in 0..MAX_STAGE_ATTEMPTS {
+    let sequence = NEXT_STAGE.get();
+    NEXT_STAGE.set(sequence.wrapping_add(1));
+    let staged = format!("{parent}/.memona-upload-{sequence:016x}");