feat: transparent leader hint reconnect on consume

[vieiralucas]

Summary

• When consume() receives gRPC UNAVAILABLE with x-fila-leader-addr trailing metadata, the SDK transparently creates a new connection to the leader address and retries the consume call once
• Stores TLS/auth configuration in the client to build redirect channels with the same security settings
• Max 1 redirect per consume call to prevent infinite loops

Test plan

• Verify compilation passes (./gradlew compileJava)
• Verify existing tests still pass (./gradlew test)
• Manual test with a multi-node cluster: consume on a follower node should redirect to the leader
• Verify UNAVAILABLE errors without x-fila-leader-addr metadata are still raised as RpcException

---

Summary by cubic

Adds transparent leader redirect for consume() when a follower returns gRPC UNAVAILABLE with x-fila-leader-addr. Retries once against the hinted leader, reusing TLS and API key settings.

• New Features

  • On UNAVAILABLE with x-fila-leader-addr, reconnects to the leader and resumes the stream once.
  • Reuses configured TLS (CA, client cert/key) and ApiKeyInterceptor on the redirected channel; extracts channel-building helpers and makes Builder.parseHost/parsePort reusable.
  • UNAVAILABLE without a leader hint still throws the mapped RpcException; CANCELLED exits quietly.

• Bug Fixes

  • Validates leader address hints before redirecting (must be host:port, numeric port 1–65535); invalid hints fail fast.
  • Applied spotless formatting (no behavior change).

^{Written for commit 04a421f. Summary will update on new commits.}

[cubic-dev-ai]

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="src/main/java/dev/faisca/fila/FilaClient.java">

<violation number="1" location="src/main/java/dev/faisca/fila/FilaClient.java:122">
P1: Validate and constrain `x-fila-leader-addr` before redirecting; the current code can forward authenticated consume requests (including API key auth) to an arbitrary address from server metadata.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}