acceptPump

Persistent, concurrent, handshake-timed accept loop. Drains source forever; each accepted Connection is handled in its OWN child coroutine under handshakeTimeout, so one conn that connects but never completes its handshake can never starve later conns — the sequential while (isActive) { handle(source.accept()) } pattern wedges on such a conn; this replaces it.

On success the conn is left live (owned by handle — e.g. now published into a mesh). On handle failure or a handshake timeout, onFailure is invoked and the conn is closed. kuilt-core is logger-free, so onFailure is how a host surfaces a per-link rejection/timeout to its own logger.

Cancelling the pump Job is a third exit, and it is handle's to clean up — not this pump's (#2587). Both closes above are keyed on a failure: runCatchingCancellable rethrows a CancellationException by construction so onFailure never runs, and withTimeoutOrNull converts only the timeout it minted itself, so an external cancellation escapes the child launch with the conn untouched. Nothing here can close it, because at that instant the conn is suspended somewhere inside handle and only handle knows what it has already taken ownership of. Every in-tree handle discharges the mid-preamble half of this by going through the mesh handshake, which closes a conn abandoned during the MeshHello exchange under a NonCancellable shield; a third-party handle that suspends while holding a conn owes the same guarantee.

The tail is not discharged here, and no acceptPump call site carries the per-conn register assembleVoterMesh keeps for its dials: a cancellation landing after the handshake returns a Link but before addLink returns — inside admission.admit, or startDrain's ordering hold — still escapes with the conn unclosed. Tracked by #2710.

Parameters