@onlineapps/conn-orch-registry 5.0.0 → 6.0.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onlineapps/conn-orch-registry",
-  "version": "5.0.0",
+  "version": "6.0.1",
   "license": "MIT",
   "description": "conn-orch-registry provides the core communication mechanism for microservices in this environment. It enables them to interact with a services_registry to receive and fulfill tasks by submitting heartbeats or their API descriptions.",
   "keywords": [
@@ -37,7 +37,7 @@
   },
   "dependencies": {
     "@onlineapps/logger-contract": "2.0.0",
-    "@onlineapps/mq-client-core": "4.0.0",
+    "@onlineapps/mq-client-core": "4.0.1",
     "uuid": "^9.0.1"
   },
   "devDependencies": {

package/src/registryClient.js

@@ -36,9 +36,10 @@ const DEFAULTS = require('./defaults');
 const { assertLogger } = require('@onlineapps/logger-contract');
 
 /**
- * Keys `register()` REFUSES, with the reason the caller needs to act on (d.562).
+ * Keys `register()` REFUSES, with the reason the caller needs to act on
+ * (d.562, extended by d.592).
  *
- * All three used to travel on every registration and nothing ever read them:
+ * Each of them used to travel on every registration and nothing ever read them:
  * `api/infra/api_services_registry/src/listeners/registry.listener.js`
  * destructures the `register` message without them, and no other reader exists on
  * the platform (`api/docs/biz/30-operations/registration-wire.md` §2.1).
@@ -58,7 +59,13 @@ const RETIRED_SERVICE_INFO_KEYS = Object.freeze({
   secret: 'the shared secret of that same token API, whose last reader (HTTP POST /validate) was deleted '
     + '2026-08-22; nothing verifies a token with it, and a broker message is no place for a secret',
   tokenSecret: 'the shared secret of that same token API, whose last reader (HTTP POST /validate) was '
-    + 'deleted 2026-08-22; nothing verifies a token with it, and a broker message is no place for a secret'
+    + 'deleted 2026-08-22; nothing verifies a token with it, and a broker message is no place for a secret',
+  deployable: 'the manifest-conformance verdict of a boot-time validation run (owner decision 2026-09-17, '
+    + 'confirmation `api/docs/governance/confirmations/biz-service-manifest.md` 011). A running container is '
+    + 'not a git checkout and carries neither compose nor README, so the verdict it could reach there says '
+    + 'nothing about the repository; deployability is proven per commit by the CI job `validate-uniform` '
+    + '(confirmation 010). The registry never projected the key either — registry.listener.js does not '
+    + 'destructure it, so deployability is read from that CI job and never from a registration message'
 });
 
 
@@ -465,9 +472,6 @@ class ServiceRegistryClient extends EventEmitter {
    * @param {Array} serviceInfo.endpoints - API endpoints provided by the service
    * @param {Object} serviceInfo.metadata - Additional service metadata
    * @param {string} serviceInfo.health - Health check endpoint
-   * @param {(boolean|null)} [serviceInfo.deployable] - Manifest-conformance verdict of the
-   *   caller's last validation run: `true`, `false`, or `null` when the run never measured
-   *   it. Emitted only when the caller states one; see the `deployable` block below.
    * @param {number} serviceInfo.timeout - Timeout for registration response (default: 30000ms)
    * @returns {Promise<{success: boolean, message: string, serviceName: string, version: string,
    *   registrationId: (string|undefined), validated: boolean, certificate: (Object|null),
@@ -537,18 +541,6 @@ class ServiceRegistryClient extends EventEmitter {
       msg.workspaceScoped = serviceInfo.workspaceScoped;
     }
 
-    // The manifest-conformance verdict, verbatim from the caller: `true`, `false`,
-    // or `null` when validation stopped before step 7 measured it. The registry
-    // projects it into `infrastructure:health:<service>` beside `status`
-    // (owner confirmation `api/docs/governance/confirmations/biz-service-manifest.md`
-    // 001 §4), so `null` is a value this message must be able to carry — hence a
-    // presence check and not a truthiness one. A caller that sends no verdict
-    // (anything other than ServiceWrapper) puts no key on the wire; nothing is
-    // substituted for it.
-    if ('deployable' in serviceInfo) {
-      msg.deployable = serviceInfo.deployable;
-    }
-
     // Include validation proof if loaded
     // Structure: { validationProof: "hash", validationData: { ... } }
     // See: @onlineapps/service-validator-core/README.md#validation-proof-structure