@peerbit/shared-log 15.0.0 → 16.0.1

package/src/instance-lifecycle.ts

@@ -66,10 +66,19 @@ export class InstanceLifecycle {
 	// code. Incremented synchronously with leader-cache invalidation so the
 	// handler can detect whether its pre-join plan needs one fresh
 	// post-persist audit.
+	//
+	// PERMANENT (fence census closed NO-GO 2026-08-12): a sub-generation
+	// WITHIN one lifecycle — it advances while the lifecycle identity is
+	// deliberately unchanged, so an identity/session token cannot tell a
+	// pre-invalidation plan from a post-invalidation one.
 	public _receiveOwnershipRevision = 0;
 	// Count of ownership-changing range mutations from queue admission
 	// through settlement, including mutations already pending when a receive
 	// starts.
+	//
+	// PERMANENT (fence census closed NO-GO 2026-08-12): a concurrency-DEPTH
+	// refcount, not a staleness token — identity answers "which generation
+	// started this?", never "how many mutation lanes are open right now?".
 	public _receiveOwnershipMutationAdmissions = 0;
 
 	// ---- stage 4: physically owned controllers (moved from SharedLog) ----

package/src/peer-session.ts

@@ -131,6 +131,11 @@ export class PeerSessionRegistry {
 	// peer stays subscribed), and it must also fence a peer that never had a
 	// session. Unlike sessions this map IS cleared at _close (see
 	// clearReceiveEpochsForClose) and replaced at open.
+	//
+	// PERMANENT (fence census closed NO-GO 2026-08-12): the per-PEER lifetime
+	// above is the whole mechanism — a session token would rotate at exactly
+	// the moments this map must survive, and could not fence a session-less
+	// peer at all.
 	_replicationInfoReceiveEpochByPeer!: Map<string, object>;
 	// Moved from SharedLog (fence B6, same name — the sanctioned file-to-file
 	// ratchet move). Refcount of in-flight destructive peer cleanups: while
@@ -140,6 +145,10 @@ export class PeerSessionRegistry {
 	// reconnect may rotate the session; a fresh session with a zero gate
 	// would reopen receive admission mid-drain. The map instance is replaced
 	// only at open (resetForOpen) and cleared in place at _close.
+	//
+	// PERMANENT (fence census closed NO-GO 2026-08-12): both structural
+	// reasons at once — a concurrency-DEPTH refcount whose per-PEER lifetime
+	// deliberately spans the session rotation a reconnect causes mid-drain.
 	_receiveCleanupGateByPeer!: Map<string, number>;
 	// Moved from SharedLog (fence B5, same name). Peers whose replication-info
 	// is fenced: added when a departure/unsubscribe rotation or a reconnect

package/src/pid.ts

@@ -3,8 +3,6 @@ const MIN_MEMORY_HEADROOM_BALANCE_SCALER = 0.25;
 export class PIDReplicationController {
 	integral!: number;
 	prevError!: number;
-	prevMemoryUsage!: number;
-	prevTotalFactor!: number;
 	kp: number;
 	ki: number;
 	kd: number;
@@ -42,9 +40,6 @@ export class PIDReplicationController {
 		let { memoryUsage, totalFactor, peerCount, cpuUsage, currentFactor } =
 			properties;
 
-		this.prevTotalFactor = totalFactor;
-		this.prevMemoryUsage = memoryUsage;
-
 		const estimatedTotalSize =
 			currentFactor > 0 ? memoryUsage / currentFactor : 1e5;
 
@@ -238,6 +233,5 @@ export class PIDReplicationController {
 	reset() {
 		this.prevError = 0;
 		this.integral = 0;
-		this.prevMemoryUsage = 0;
 	}
 }