@zlink-systems/framework 0.25.0 → 0.26.0

package/dist/runtime/host/route-mesh-runtime.js

@@ -44,17 +44,19 @@ class ZLinkRouteMeshRuntimeCoordinator {
         const status = node.status();
         const descriptor = this.options.meshNodeDescriptor?.(meshName);
         const localPlacementCounts = this.options.localPlacementCounts?.(meshName);
-        const populationCapacity = descriptor === undefined || localPlacementCounts === undefined
-            ? descriptor?.populationCapacity
+        // Active counts come only from this MeshNode's activation records (runtime monitoring §5);
+        // before the object managers exist nothing is active on it.
+        const populationCapacity = descriptor === undefined
+            ? undefined
             : {
                 ...descriptor.populationCapacity,
                 actors: {
                     ...descriptor.populationCapacity.actors,
-                    active: localPlacementCounts.activeActorCount
+                    active: localPlacementCounts?.activeActorCount ?? 0
                 },
                 spots: {
                     ...descriptor.populationCapacity.spots,
-                    active: localPlacementCounts.activeSpotCount
+                    active: localPlacementCounts?.activeSpotCount ?? 0
                 }
             };
         const backendPeers = node.peers();
@@ -91,7 +93,7 @@ class ZLinkRouteMeshRuntimeCoordinator {
         const placementWeight = descriptor?.placementWeight ?? 0;
         const capacityAvailable = descriptor !== undefined &&
             populationCapacity !== undefined &&
-            hasRemainingCapacity(descriptor.activationConcurrency) &&
+            (this.options.activationAdmission?.hasHeadroom(meshName) ?? true) &&
             (hasRemainingCapacity(populationCapacity.actors) ||
                 hasRemainingCapacity(populationCapacity.spots));
         const placementAvailable = objectRole === contracts_2.ZLinkObjectRole.Server &&

package/dist/runtime/host/service-relocation-host-runtime.d.ts

@@ -4,6 +4,7 @@ import type { ZLinkDomainLocationStore as ZLinkLocationStore } from '../location
 import type { ZLinkTrackedInstanceAuthority } from '../locations/spot-location-claims';
 import type { ZLinkProviderResolver } from '../../contracts/Common/ZLinkProviderResolver';
 import type { ZLinkRuntimeEventPublisher, ZLinkRuntimeMetrics } from '../diagnostics';
+import type { ZLinkActivationAdmission } from '../activation-admission';
 import type { ZLinkFrameworkRegistration } from '../configuration';
 import type { ZLinkBackendMeshNode, ZLinkMeshCompletionTable } from '../backend';
 import { type ReceiveRecord } from '../foundation/service-runtime-contracts';
@@ -40,6 +41,7 @@ interface ZLinkHostRelocationOptions {
     readonly reconcileStatefulAuthorityRoutes?: (signal?: AbortSignal) => Promise<void>;
     readonly runtimeEventPublisher?: ZLinkRuntimeEventPublisher;
     readonly metrics?: ZLinkRuntimeMetrics;
+    readonly activationAdmission?: ZLinkActivationAdmission;
 }
 /** Production host bridge from Retire inventory to remote RouteMesh owners. */
 export declare class ZLinkHostServiceRelocationRuntime implements ZLinkActorJoinRelocation {
@@ -116,8 +118,10 @@ export declare class ZLinkHostServiceRelocationRuntime implements ZLinkActorJoin
     private validateSessionOwnerFence;
     private sendSessionRelocationResponse;
     private relocateSpotAggregate;
+    private relocateSpotAggregateCore;
     private relocateStandaloneActor;
     private relocatePerActorSpotShell;
+    private relocatePerActorSpotShellCore;
     private actorCaptureUnit;
     private reserveRelocationId;
     private reserveExactRelocationId;
@@ -134,15 +138,35 @@ export declare class ZLinkHostServiceRelocationRuntime implements ZLinkActorJoin
     private requireNodePayloadBudget;
     private requirePeerPayloadBudget;
     /**
-     * Starts the source retransmission window after the cutover submit
-     * terminal. The boundary batch and cutover copies live in framework memory
-     * (not charged to the in-flight budget) and are cleaned exactly once when
-     * the window ends. While the window is open a failed submit retries the
-     * whole batch on the (re-established) connection. S4 — the Message Follow
-     * route removal point — closes the unit for SafeToShutdown.
+     * Starts the source cutover window after the cutover submit terminal. The
+     * boundary batch and cutover copies live in framework memory (not charged
+     * to the in-flight budget) until the authority settlement closes the
+     * window. S4 — the Message Follow route removal point — closes the unit for
+     * SafeToShutdown.
      */
     private beginSourceCutoverWindow;
-    private scheduleCutoverRetransmit;
+    /** The authority settlement ended: the retained batch copy is released. */
+    private closeSourceCutoverWindow;
+    private releaseSourceCutoverWindow;
+    /**
+     * Sends the whole boundary batch and cutover again after a failed submit
+     * or an observed loss of the target connection (spec 28 §4.4). The target
+     * replaces its partial span with the whole batch.
+     */
+    private resendSourceCutover;
+    /**
+     * The one source authority settlement after Ready (Location runtime
+     * §6.1·§10, spec 28 §4.4). It reads the Store until the target commit or
+     * the Restore deadline. From the Restore deadline it runs the source
+     * Preserve fence: a CAS on the StoreVersion expected by target NewOwner
+     * excludes a late target commit. `target`: the
+     * target committed. `source`: Preserve fenced the target out while the
+     * source owner lease was valid. `lost`: the source owner lease ended first
+     * or another authority owns the object. An uncertain Store or lease result
+     * keeps the work retained and repeats the same decision.
+     */
+    private settleSourceAuthority;
+    private readSourceSettlement;
     /**
      * True when every relocation this source started reached its Message
      * Follow route removal point (S4) and its cutover retransmission window
@@ -152,6 +176,13 @@ export declare class ZLinkHostServiceRelocationRuntime implements ZLinkActorJoin
     private releaseParticipantAuthorities;
     /** Restores the hidden object and its saved-work prefix before Ready. */
     private handlePrepareControl;
+    /**
+     * The cutover wait of a Ready stage (spec 28 §4.4) is a Warning only: it
+     * records `cutover_timeout` and never submits the target CAS or opens
+     * dispatch. From then on the target settlement reads the Location Store so
+     * a source Preserve fence or a lost target lease ends the staging; only a
+     * verified cutover lets that settlement submit the CAS.
+     */
     private armTargetCutoverFallback;
     private handleOneWayControl;
     /** Validates one boundary relay record and buffers it until cutover applies it. */
@@ -172,7 +203,6 @@ export declare class ZLinkHostServiceRelocationRuntime implements ZLinkActorJoin
     private acceptActorJoinSourceLeave;
     private sendControlOneWay;
     private submitControlFrame;
-    private waitForTargetAuthorities;
     private clearTargetRelocationPublication;
     private handleReplyRelay;
     private sendReplyRelay;
@@ -190,6 +220,17 @@ export declare class ZLinkHostServiceRelocationRuntime implements ZLinkActorJoin
     private abortTargetReservation;
     private abortTargetStage;
     private commitTargetReservation;
+    /**
+     * The one target authority settlement (Location runtime §10, spec 28
+     * §4.4-§4.5). Only a verified cutover lets the target submit its NewOwner
+     * CAS; a transient or indeterminate result resubmits the same RelocationId
+     * and expected StoreVersion while the target owner lease is valid (no
+     * separate timeout, no fixed count). Before a verified cutover the target
+     * only reads. It returns the committed authority, or undefined when a
+     * definitive Conflict excludes this commit after reconciliation, a source
+     * Preserve fence moved the source row, or the target lease ended; the
+     * caller then discards the staging.
+     */
     private commitTargetAggregate;
     private readAggregateForCommitRetry;
     private materializeTargetEnvelope;
@@ -205,6 +246,7 @@ export declare class ZLinkHostServiceRelocationRuntime implements ZLinkActorJoin
     private commitSpotMessageFollow;
     private requireLocationStore;
     private requireSpotManager;
+    private afterSpotCloseDecision;
     private requireActorManager;
     private relocationLimits;
     private requireMeshNode;