@zlink-systems/framework 0.25.0 → 0.27.0

package/dist/runtime/foundation/service-relocation-runtime.js

@@ -11,9 +11,18 @@ exports.encodeServiceRelocationEnvelope = encodeServiceRelocationEnvelope;
 exports.decodeServiceRelocationEnvelope = decodeServiceRelocationEnvelope;
 exports.inventoryDigest = inventoryDigest;
 exports.crc32c = crc32c;
+const stream_wire_1 = require("@zlink-systems/stream-wire");
 const node_crypto_1 = require("node:crypto");
+const InternalDefaults_1 = require("../../contracts/Configuration/InternalDefaults");
 const authority_key_codec_1 = require("../locations/authority-key-codec");
+const service_wire_codec_generated_1 = require("../protocol/service_wire_codec.generated");
 const service_wire_pilot_codec_generated_1 = require("../protocol/service_wire_pilot_codec.generated");
+const actor_join_recovery_codec_1 = require("./actor-join-recovery-codec");
+const MAX_RELOCATION_GENERATION = 0x7fffffffffffffffn;
+const RELOCATION_PREPARING_PHASE = (0, service_wire_codec_generated_1.enumWireRelocationPhase)('preparing');
+const RELOCATION_ACTIVATING_PHASE = (0, service_wire_codec_generated_1.enumWireRelocationPhase)('activating');
+const RELOCATION_COMPLETED_PHASE = (0, service_wire_codec_generated_1.enumWireRelocationPhase)('completed');
+const RELOCATION_LAST_PHASE = (0, service_wire_codec_generated_1.enumWireRelocationPhase)('aborted');
 /** Deterministic Location authority wrapper for one immutable relocation root. */
 class ServiceRelocationAuthorityPayloadCodec {
     publish(currentPayload, publication) {
@@ -109,7 +118,7 @@ function projectServiceRelocationAuthorityTargetReady(payload, target) {
         coordinatorNodeRid: target.nodeRid,
         coordinatorNodeGeneration: target.nodeGeneration,
         coordinatorExpectedStoreVersion: target.coordinatorExpectedStoreVersion,
-        phase: 5,
+        phase: RELOCATION_ACTIVATING_PHASE,
         sourceCleanupState: 0
     });
     return replaceCanonicalRelocationSlot(layout, slot);
@@ -150,7 +159,7 @@ function decodeCanonicalAuthorityPublication(payload) {
 function decodeCanonicalAuthorityLayout(payload) {
     try {
         const bytes = Buffer.from(payload);
-        if (bytes.byteLength < 20 || bytes.byteLength > 1024 * 1024)
+        if (bytes.byteLength < 20 || bytes.byteLength > InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES)
             return undefined;
         const reader = new CanonicalReader(bytes);
         reader.expect(Buffer.from('ZLAU'));
@@ -223,21 +232,21 @@ function decodeCanonicalRelocationSlot(payload, rootAggregateGeneration) {
         const sourceCleanupState = reader.u8();
         if (!reader.done ||
             aggregateGeneration > 0x7ffffffffffffffen ||
-            (aggregateGeneration === 0n && phase !== 1) ||
+            (aggregateGeneration === 0n && phase !== RELOCATION_PREPARING_PHASE) ||
             (rootAggregateGeneration !== undefined && aggregateGeneration !== rootAggregateGeneration) ||
-            targetAttemptGeneration > 0x7fffffffffffffffn ||
+            targetAttemptGeneration > MAX_RELOCATION_GENERATION ||
             sourceNodeGeneration === 0n ||
-            sourceNodeGeneration > 0x7fffffffffffffffn ||
+            sourceNodeGeneration > MAX_RELOCATION_GENERATION ||
             sourceOwnerLeaseGeneration === 0n ||
-            sourceOwnerLeaseGeneration > 0x7fffffffffffffffn ||
-            targetNodeGeneration > 0x7fffffffffffffffn ||
-            targetOwnerLeaseGeneration > 0x7fffffffffffffffn ||
+            sourceOwnerLeaseGeneration > MAX_RELOCATION_GENERATION ||
+            targetNodeGeneration > MAX_RELOCATION_GENERATION ||
+            targetOwnerLeaseGeneration > MAX_RELOCATION_GENERATION ||
             coordinatorLeaseGeneration === 0n ||
-            coordinatorLeaseGeneration > 0x7fffffffffffffffn ||
+            coordinatorLeaseGeneration > MAX_RELOCATION_GENERATION ||
             coordinatorNodeGeneration === 0n ||
-            coordinatorNodeGeneration > 0x7fffffffffffffffn ||
-            phase < 1 ||
-            phase > 9 ||
+            coordinatorNodeGeneration > MAX_RELOCATION_GENERATION ||
+            phase < RELOCATION_PREPARING_PHASE ||
+            phase > RELOCATION_LAST_PHASE ||
             applicationVersion < 0n ||
             sourceCleanupState > 2)
             return undefined;
@@ -276,10 +285,10 @@ function encodeCanonicalRelocationSlot(value) {
     if (aggregateGeneration > 0x7ffffffffffffffen) {
         throw new TypeError('Aggregate generation exceeds the issued range.');
     }
-    if (aggregateGeneration === 0n && value.phase !== 1) {
+    if (aggregateGeneration === 0n && value.phase !== RELOCATION_PREPARING_PHASE) {
         throw new TypeError('Zero aggregate generation is only valid while preparing.');
     }
-    if (targetAttemptGeneration > 0x7fffffffffffffffn) {
+    if (targetAttemptGeneration > MAX_RELOCATION_GENERATION) {
         throw new TypeError('Target attempt generation exceeds the ordinal range.');
     }
     const sourceNodeGeneration = canonicalNonZeroOrdinal(value.sourceNodeGeneration, 'source node generation');
@@ -288,7 +297,9 @@ function encodeCanonicalRelocationSlot(value) {
     const targetOwnerLeaseGeneration = canonicalOrdinal(value.targetOwnerLeaseGeneration, 'target owner lease generation');
     const coordinatorLeaseGeneration = canonicalNonZeroOrdinal(value.coordinatorLeaseGeneration, 'coordinator lease generation');
     const coordinatorNodeGeneration = canonicalNonZeroOrdinal(value.coordinatorNodeGeneration, 'coordinator node generation');
-    if (!Number.isInteger(value.phase) || value.phase < 1 || value.phase > 9) {
+    if (!Number.isInteger(value.phase) ||
+        value.phase < RELOCATION_PREPARING_PHASE ||
+        value.phase > RELOCATION_LAST_PHASE) {
         throw new TypeError('Canonical relocation phase is invalid.');
     }
     if (!Number.isInteger(value.sourceCleanupState) ||
@@ -348,7 +359,7 @@ function encodeCanonicalRelocationPublicationSlot(layout, publication) {
         coordinatorNodeRid: publication.coordinatorNodeRid ?? nodeRid,
         coordinatorNodeGeneration: publication.coordinatorNodeGeneration ?? layout.nodeGeneration,
         coordinatorExpectedStoreVersion: publication.coordinatorExpectedStoreVersion ?? '',
-        phase: publication.canonicalPhase ?? 8,
+        phase: publication.canonicalPhase ?? RELOCATION_COMPLETED_PHASE,
         applicationVersion,
         sourceCleanupState: publication.canonicalSourceCleanupState ?? 0
     });
@@ -370,8 +381,8 @@ function replaceCanonicalRelocationSlot(layout, slot) {
         body
     ]);
     const result = Buffer.concat([envelope, canonicalU32(crc32c(envelope))]);
-    if (result.byteLength > 1024 * 1024) {
-        throw new TypeError('Canonical authority payload exceeds 1 MiB.');
+    if (result.byteLength > InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES) {
+        throw new TypeError(`Canonical authority payload exceeds ${InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES / (1024 * 1024)} MiB.`);
     }
     return result;
 }
@@ -721,8 +732,8 @@ function encodeAuthorityEnvelope(base, publication) {
     }
     const aggregateGeneration = positiveBigInt(publication.aggregateGeneration, 'aggregate generation');
     const targetOwnerLeaseGeneration = positiveBigInt(publication.targetOwnerLeaseGeneration, 'target owner lease generation');
-    if (aggregateGeneration > 0x7fffffffffffffffn ||
-        targetOwnerLeaseGeneration > 0x7fffffffffffffffn) {
+    if (aggregateGeneration > MAX_RELOCATION_GENERATION ||
+        targetOwnerLeaseGeneration > MAX_RELOCATION_GENERATION) {
         throw new TypeError('Relocation publication generations must fit signed 64-bit storage.');
     }
     const payload = Buffer.concat([
@@ -738,8 +749,8 @@ function encodeAuthorityEnvelope(base, publication) {
         i64le(targetOwnerLeaseGeneration),
         bytes32le(base)
     ]);
-    if (payload.byteLength > 1024 * 1024) {
-        throw new TypeError('Location authority relocation payload exceeds 1 MiB.');
+    if (payload.byteLength > InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES) {
+        throw new TypeError(`Location authority relocation payload exceeds ${InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES / (1024 * 1024)} MiB.`);
     }
     return payload;
 }
@@ -759,8 +770,8 @@ function decodeAuthorityEnvelope(payload) {
         const base = reader.bytes32();
         if (!reader.done ||
             aggregateGeneration === 0n ||
-            aggregateGeneration > 0x7fffffffffffffffn ||
-            inventoryDigestBytes.byteLength !== 32 ||
+            aggregateGeneration > MAX_RELOCATION_GENERATION ||
+            inventoryDigestBytes.byteLength !== actor_join_recovery_codec_1.SHA256_DIGEST_BYTES ||
             targetOwnerLeaseGeneration <= 0n) {
             return undefined;
         }
@@ -852,8 +863,8 @@ function text16le(value) {
 }
 function bytes32le(value) {
     const bytes = Buffer.from(value);
-    if (bytes.byteLength > 1024 * 1024) {
-        throw new TypeError('Relocation byte field exceeds 1 MiB.');
+    if (bytes.byteLength > InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES) {
+        throw new TypeError(`Relocation byte field exceeds ${InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES / (1024 * 1024)} MiB.`);
     }
     const length = Buffer.alloc(4);
     length.writeInt32LE(bytes.byteLength);
@@ -1001,7 +1012,7 @@ function canonicalU32(value) {
     return result;
 }
 function canonicalU64(value) {
-    if (value < 0n || value > 0xffffffffffffffffn) {
+    if (value < 0n || value > stream_wire_1.UINT64_MAX) {
         throw new TypeError('Canonical authority u64 is invalid.');
     }
     const result = Buffer.alloc(8);
@@ -1010,7 +1021,7 @@ function canonicalU64(value) {
 }
 function canonicalOrdinal(value, name) {
     const ordinal = nonNegativeBigInt(value, name);
-    if (ordinal > 0x7fffffffffffffffn) {
+    if (ordinal > MAX_RELOCATION_GENERATION) {
         throw new TypeError(`${name} exceeds the ordinal range.`);
     }
     return ordinal;
@@ -1022,7 +1033,7 @@ function canonicalNonZeroOrdinal(value, name) {
     return ordinal;
 }
 function canonicalI64(value) {
-    if (value < 0n || value > 0x7fffffffffffffffn) {
+    if (value < 0n || value > MAX_RELOCATION_GENERATION) {
         throw new TypeError('Canonical authority i64 is invalid.');
     }
     const result = Buffer.alloc(8);
@@ -1034,8 +1045,8 @@ class DotnetBinaryReader {
     offset = 0;
     constructor(payload) {
         this.bytes = Buffer.from(payload);
-        if (this.bytes.byteLength > 1024 * 1024) {
-            throw new TypeError('Location authority relocation payload exceeds 1 MiB.');
+        if (this.bytes.byteLength > InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES) {
+            throw new TypeError(`Location authority relocation payload exceeds ${InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES / (1024 * 1024)} MiB.`);
         }
     }
     get done() {
@@ -1066,7 +1077,7 @@ class DotnetBinaryReader {
     }
     bytes32() {
         const length = this.take(4).readInt32LE(0);
-        if (length < 0 || length > 1024 * 1024) {
+        if (length < 0 || length > InternalDefaults_1.AUTHORITY_ENVELOPE_MAX_BYTES) {
             throw new TypeError('Location authority relocation byte field is invalid.');
         }
         return Buffer.from(this.take(length));

package/dist/runtime/foundation/service-runtime-contracts.d.ts

@@ -1,9 +1,30 @@
-import type { Message } from '../../contracts/Common/Message';
-import type { RequestResult, SubmitResult, ZLinkBackendMessageLike as MessageLike } from '../backend/runtime-values';
 import type { RoutingId } from '../../contracts';
+import type { Message } from '../../contracts/Common/Message';
 import type { ApplicationJobPermitPort } from '../application-jobs/contracts';
+import type { ZLinkBackendMessageLike as MessageLike, RequestResult, SubmitResult } from '../backend/runtime-values';
 import type { ServiceActorRef } from './service-stateful-registry';
 import type { ServiceDirectSpotRouteFence, ServiceRetiredBoundSessionRouteFence } from './service-stateful-wire-codec';
+export declare enum StreamSessionRuntimeState {
+    Created = 1,
+    Started = 2,
+    Closed = 5
+}
+export declare enum MeshNodeRuntimeState {
+    Preparing = 1,
+    Serving = 2,
+    Retiring = 3,
+    Draining = 4,
+    Stopped = 5,
+    Error = 6
+}
+export declare enum MeshPeerRuntimeState {
+    Connecting = 1,
+    Preparing = 2,
+    Serving = 3,
+    Draining = 4,
+    Closed = 5,
+    NotRequired = 6
+}
 export interface MeshOperationId {
     readonly high: bigint;
     readonly low: bigint;
@@ -142,6 +163,17 @@ export interface ActorTransferControlPayload {
     readonly resultCode: number;
     readonly failureErrno: number;
 }
+/** The Session owner's registry view of one Session binding (Session–Actor binding §5-2). */
+export interface ServiceStreamSessionBinding {
+    readonly sessionRid: RoutingId;
+    readonly actor: ServiceActorRef;
+    readonly sessionOwnerNodeRid: RoutingId;
+    readonly sessionOwnerNodeGeneration: bigint;
+    readonly sessionOwnerId: string;
+    readonly sessionOwnerLeaseGeneration: bigint;
+    readonly bindingGeneration: bigint;
+    readonly membershipEpoch: bigint;
+}
 export interface ActorBindingControlPayload {
     readonly kind: 'actorBinding';
     readonly transition: 'active' | 'tombstone';
@@ -199,8 +231,13 @@ export interface ReceiveRecord {
     readonly isPending?: () => boolean;
     /** Absolute deadline used by the local lifecycle dispatch fence. */
     readonly deadlineUnixMs?: bigint;
+    readonly activationRecord?: Extract<import('./service-stateful-wire-codec').ServiceStatefulWireRecord, {
+        readonly kind: 'instanceSpot';
+    }>;
     readonly messageFollowOrigin?: ZLinkMessageFollowOrigin;
     readonly onTerminalCompletion?: () => void | Promise<void>;
+    /** Marks the start of the first handler turn whose terminal record a Close waits for. */
+    readonly onHandlerTurnStarted?: () => void;
     readonly applicationJobPermit?: ApplicationJobPermitPort;
     readonly releaseRetainedIngress?: () => void;
     reply(parts: MessageLike | readonly MessageLike[], flags?: number): SubmitResult;
@@ -279,12 +316,7 @@ export interface StreamSessionService {
     lookupActor(targetNodeRid: RoutingId, actorId: string, timeoutMs?: number): MeshOperationId;
     bindActor(sessionRid: RoutingId, actor: ServiceActorRef, timeoutMs?: number, onBindingReplaced?: (actorId: string, retiredSession: ServiceRetiredBoundSessionRouteFence, actor: ServiceActorRef) => void, actorAuthority?: StreamSessionActorAuthorityFence): MeshOperationId;
     unbindActor(sessionRid: RoutingId, actor: ServiceActorRef, expectedBindingGeneration: bigint, timeoutMs?: number): MeshOperationId;
-    bindings(sessionRid: RoutingId): ReadonlyArray<{
-        readonly sessionRid: RoutingId;
-        readonly actor: ServiceActorRef;
-        readonly bindingGeneration: bigint;
-        readonly membershipEpoch: bigint;
-    }>;
+    bindings(sessionRid: RoutingId): ReadonlyArray<ServiceStreamSessionBinding>;
     sendToActor(sessionRid: RoutingId, actor: ServiceActorRef, parts: MessageLike | readonly MessageLike[], options?: {
         flags?: number;
     }): Promise<SubmitResult>;

package/dist/runtime/foundation/service-runtime-contracts.js

@@ -1,7 +1,31 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ActorTransferPhase = exports.ActorTransferRole = exports.ActorLifecycleKind = exports.OperationKind = exports.ReceiveKind = exports.ReadyOwnerKind = exports.ReadyDomain = void 0;
+exports.ActorTransferPhase = exports.ActorTransferRole = exports.ActorLifecycleKind = exports.OperationKind = exports.ReceiveKind = exports.ReadyOwnerKind = exports.ReadyDomain = exports.MeshPeerRuntimeState = exports.MeshNodeRuntimeState = exports.StreamSessionRuntimeState = void 0;
 exports.operationRequiresReply = operationRequiresReply;
+var StreamSessionRuntimeState;
+(function (StreamSessionRuntimeState) {
+    StreamSessionRuntimeState[StreamSessionRuntimeState["Created"] = 1] = "Created";
+    StreamSessionRuntimeState[StreamSessionRuntimeState["Started"] = 2] = "Started";
+    StreamSessionRuntimeState[StreamSessionRuntimeState["Closed"] = 5] = "Closed";
+})(StreamSessionRuntimeState || (exports.StreamSessionRuntimeState = StreamSessionRuntimeState = {}));
+var MeshNodeRuntimeState;
+(function (MeshNodeRuntimeState) {
+    MeshNodeRuntimeState[MeshNodeRuntimeState["Preparing"] = 1] = "Preparing";
+    MeshNodeRuntimeState[MeshNodeRuntimeState["Serving"] = 2] = "Serving";
+    MeshNodeRuntimeState[MeshNodeRuntimeState["Retiring"] = 3] = "Retiring";
+    MeshNodeRuntimeState[MeshNodeRuntimeState["Draining"] = 4] = "Draining";
+    MeshNodeRuntimeState[MeshNodeRuntimeState["Stopped"] = 5] = "Stopped";
+    MeshNodeRuntimeState[MeshNodeRuntimeState["Error"] = 6] = "Error";
+})(MeshNodeRuntimeState || (exports.MeshNodeRuntimeState = MeshNodeRuntimeState = {}));
+var MeshPeerRuntimeState;
+(function (MeshPeerRuntimeState) {
+    MeshPeerRuntimeState[MeshPeerRuntimeState["Connecting"] = 1] = "Connecting";
+    MeshPeerRuntimeState[MeshPeerRuntimeState["Preparing"] = 2] = "Preparing";
+    MeshPeerRuntimeState[MeshPeerRuntimeState["Serving"] = 3] = "Serving";
+    MeshPeerRuntimeState[MeshPeerRuntimeState["Draining"] = 4] = "Draining";
+    MeshPeerRuntimeState[MeshPeerRuntimeState["Closed"] = 5] = "Closed";
+    MeshPeerRuntimeState[MeshPeerRuntimeState["NotRequired"] = 6] = "NotRequired";
+})(MeshPeerRuntimeState || (exports.MeshPeerRuntimeState = MeshPeerRuntimeState = {}));
 exports.ReadyDomain = Object.freeze({
     None: 0,
     Application: 1,

package/dist/runtime/foundation/service-session-binding-ingress-port.d.ts

@@ -1,24 +1,5 @@
-export interface ServiceSessionBindingRetainedDelivery {
-    deliver(): Promise<boolean>;
-    fail(error: unknown): void;
-}
-export interface ServiceSessionBindingAdmissionClaim {
-    readonly actorId: string;
-    readonly objectGeneration: bigint;
-    readonly actorNodeRid: string;
-    readonly actorNodeGeneration: bigint;
-    readonly authorityOwnerGeneration: bigint;
-    readonly ownerLeaseGeneration: bigint;
-    readonly producerNodeRid: string;
-    readonly producerNodeGeneration: bigint;
-    readonly sessionIdentity: string;
-    readonly bindingGeneration: bigint;
-}
-export type ServiceSessionBindingAdmissionResult = 'passThrough' | 'retained' | 'rejected';
 export interface ServiceSessionBindingIngressPort {
     actorSlot(actorId: string, sessionRid: string): Promise<number | undefined>;
-    retainOutbound(claim: ServiceSessionBindingAdmissionClaim, delivery: ServiceSessionBindingRetainedDelivery): Promise<ServiceSessionBindingAdmissionResult>;
-    clearOutbound(actorId: string, error: unknown): Promise<void>;
 }
 export declare function registerServiceSessionBindingIngressPort(service: object, port: ServiceSessionBindingIngressPort): void;
 export declare function serviceSessionBindingIngressPortIfRegistered(service: object): ServiceSessionBindingIngressPort | undefined;

package/dist/runtime/foundation/service-stateful-registry.d.ts

@@ -137,6 +137,8 @@ export declare class ServiceTerminalOperationRegistry<T> {
     fail(id: bigint, error: unknown): boolean;
     cancel(id: bigint): boolean;
     isPending(id: bigint): boolean;
+    get size(): number;
+    expire(nowMs: number, turnDeadlineMs: number): number;
     close(): void;
 }
 export {};

package/dist/runtime/foundation/service-stateful-registry.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ServiceTerminalOperationRegistry = exports.ServiceStatefulRegistry = exports.ServiceStaleGenerationError = void 0;
+const CoreTypes_1 = require("../../contracts/Common/CoreTypes");
 const operation_registry_1 = require("./operation-registry");
 class ServiceStaleGenerationError extends Error {
     objectKind;
@@ -184,6 +185,7 @@ class ServiceStatefulRegistry {
         this.actorGenerations.set(actor.actorId, max(this.actorGenerations.get(actor.actorId) ?? 0n, actor.generation));
         this.actorTypes.set(actor.actorId, stableType);
         this.actors.set(actor.actorId, restored);
+        this.updateBindingMembership(restored);
         return restored;
     }
     actor(actorId) {
@@ -443,6 +445,12 @@ class ServiceTerminalOperationRegistry {
     isPending(id) {
         return this.operations.isPending(id);
     }
+    get size() {
+        return this.operations.size;
+    }
+    expire(nowMs, turnDeadlineMs) {
+        return this.operations.expire(nowMs, turnDeadlineMs);
+    }
     close() {
         this.operations.close('Stateful runtime closed.');
     }
@@ -453,8 +461,8 @@ function actorKey(actor) {
 }
 function requireText(value, name) {
     const bytes = Buffer.byteLength(value);
-    if (bytes < 1 || bytes > 255 || value.includes('\0')) {
-        throw new RangeError(`${name} must be 1..255 UTF-8 bytes without NUL.`);
+    if (bytes < 1 || bytes > CoreTypes_1.ZLINK_MAX_IDENTITY_TEXT_BYTES || value.includes('\0')) {
+        throw new RangeError(`${name} must be 1..${CoreTypes_1.ZLINK_MAX_IDENTITY_TEXT_BYTES} UTF-8 bytes without NUL.`);
     }
 }
 function requirePositive(value, name) {

package/dist/runtime/foundation/service-stateful-runtime.d.ts

@@ -1,21 +1,16 @@
+import type { ZLinkAuthoritySnapshot } from '../locations/internal-location-contracts';
 import type { ZLinkDispatchErrorReporter } from '../channels/dispatch-error-reporter';
 import type { RawServiceMeshRuntime } from './raw-service-mesh-runtime';
-import { type ReceiveKindData, type StreamSessionActorAuthorityFence } from './service-runtime-contracts';
+import type { ServiceInstanceActivationRecoveryEnvelope } from './service-instance-activation-recovery-codec';
 import type { ServiceMailboxRecord } from './service-mailbox';
+import { type ReceiveKindData, type ServiceStreamSessionBinding, type StreamSessionActorAuthorityFence } from './service-runtime-contracts';
 import { ServiceStatefulRegistry, type ServiceActorRef, type ServiceActorState, type ServiceSessionBinding, type ServiceSpotRef, type ServiceSpotState } from './service-stateful-registry';
-import { type ServiceActorRouteFence, type ServiceRetiredBoundSessionRouteFence, type ServiceActorCreateRecord, type ServiceInstanceActivationTarget, type ServiceInstanceRouteFence, type ServiceDirectSpotRouteFence, type ServiceStatefulReplyTail, type ServiceUserSpotCloseRecord, type ServiceUserSpotCreateRecord } from './service-stateful-wire-codec';
+import { type ServiceActorCreateRecord, type ServiceActorRouteFence, type ServiceDirectSpotRouteFence, type ServiceInstanceActivationTarget, type ServiceInstanceRouteFence, type ServiceRetiredBoundSessionRouteFence, type ServiceStatefulReplyTail, type ServiceStatefulWireRecord, type ServiceUserSpotCloseRecord, type ServiceUserSpotCreateRecord } from './service-stateful-wire-codec';
 import { type ServiceApplicationPayload } from './service-wire-m6a-codec';
-import type { ServiceInstanceActivationRecoveryEnvelope } from './service-instance-activation-recovery-codec';
-import type { ServiceSessionBindingIngressPort } from './service-session-binding-ingress-port';
 export interface ServiceSpotMessageFollowSeal {
     readonly key: string;
     readonly serial: bigint;
 }
-export interface ServiceBoundSessionSendFence {
-    readonly targetNodeGeneration: bigint;
-    readonly authorityOwnerGeneration: bigint;
-    readonly ownerLeaseGeneration: bigint;
-}
 export interface ServiceStatefulResult {
     readonly terminalResult: number;
     readonly failureCode: number;
@@ -50,7 +45,11 @@ export interface ServiceStatefulMailboxData {
     readonly isPending?: () => boolean;
     /** Carries the local operation deadline into the lifecycle dispatch lane. */
     readonly deadlineUnixMs?: bigint;
+    readonly activationRecord?: Extract<ServiceStatefulWireRecord, {
+        readonly kind: 'instanceSpot';
+    }>;
     readonly onTerminalCompletion?: () => void | Promise<void>;
+    readonly onHandlerTurnStarted?: () => void;
     /** Decoded only by the canonical command-28 generator path. */
     readonly canonicalApplicationPayload?: ServiceApplicationPayload;
     readonly reply?: (terminalResult: number, failureCode: number, payload?: ServiceApplicationPayload, tail?: ServiceStatefulReplyTail) => boolean;
@@ -70,9 +69,8 @@ export interface ServiceCanonicalActorJoinCandidate {
 }
 export interface ServiceSessionDelivery {
     readonly binding: ServiceSessionBinding;
-    readonly bindingIngress?: ServiceSessionBindingIngressPort;
     /**
-     * Delivers the retained M6A application frame after the binding fence has
+     * Delivers the M6A application frame after the binding fence has
      * been validated. The stream adapter owns multipart decoding at that point.
      */
     readonly deliver: (sessionRid: string, payloadFrame: Uint8Array) => Promise<boolean>;
@@ -91,7 +89,6 @@ export type ServiceInstanceApplicationTarget = ServiceInstanceApplicationIdentit
 export interface ServiceInstanceApplicationLifecycle {
     isMaterialized(target: ServiceInstanceApplicationIdentity): boolean;
     isMaterializing?(target: ServiceInstanceApplicationIdentity): boolean;
-    isClosing?(target: ServiceInstanceApplicationIdentity): boolean;
     isIdleEvicting?(target: ServiceInstanceApplicationIdentity): boolean;
     beginIdleEviction?(target: ServiceInstanceApplicationIdentity): boolean;
     materialize(target: ServiceInstanceApplicationIdentity, objectGeneration: bigint): Promise<void>;
@@ -119,9 +116,11 @@ export type ServiceInstanceAuthorityRead = {
     readonly kind: 'creating';
     readonly objectGeneration: bigint;
     readonly authorityOwnerGeneration: bigint;
+    readonly authority?: ZLinkAuthoritySnapshot;
 } | {
     readonly kind: 'ready';
     readonly route: ServiceInstanceRouteFence;
+    readonly authority?: ZLinkAuthoritySnapshot;
 };
 export type ServiceInstanceAuthorityReserve = {
     readonly kind: 'reserved';
@@ -153,9 +152,9 @@ export interface ServiceInstanceActivationAuthority {
  */
 export interface ServiceAsyncInstanceActivationAuthority {
     read(target: ServiceInstanceActivationTarget): Promise<ServiceInstanceAuthorityRead>;
-    reserve(activation: Omit<ServiceInstanceActivationRecoveryEnvelope, 'targetMeshName'>): Promise<ServiceInstanceAuthorityReserve>;
+    reserve(activation: Omit<ServiceInstanceActivationRecoveryEnvelope, 'targetMeshName'>, signal?: AbortSignal): Promise<ServiceInstanceAuthorityReserve>;
     resume(target: ServiceInstanceActivationTarget, pending: ServicePendingInstanceActivation): Promise<ServiceInstanceActivationReservation>;
-    commit(target: ServiceInstanceActivationTarget, reservation: ServiceInstanceActivationReservation, spot: ServiceSpotState): Promise<{
+    commit(target: ServiceInstanceActivationTarget, reservation: ServiceInstanceActivationReservation, spot: ServiceSpotState, deadlineUnixMs?: bigint): Promise<{
         readonly kind: 'committed' | 'lost';
         readonly route: ServiceInstanceRouteFence;
     }>;
@@ -201,7 +200,6 @@ export declare class ServiceStatefulRuntime {
     private readonly subscriptions;
     private readonly instanceIntents;
     private readonly admittedInstanceOperations;
-    private readonly pendingInstanceTerminals;
     private readonly pendingInstanceAuthorityTerminals;
     private readonly instanceApplicationWaiters;
     private readonly canonicalActorJoinHandoffs;
@@ -227,7 +225,7 @@ export declare class ServiceStatefulRuntime {
     private readonly admittedUserSpotOperations;
     private readonly pendingInstanceActivations;
     private closed;
-    constructor(raw: RawServiceMeshRuntime, nodeRid: string, nodeGeneration: bigint);
+    constructor(raw: RawServiceMeshRuntime, nodeRid: string, nodeGeneration: bigint, onPendingOperationsChanged?: () => void);
     setMailboxDropHandler(handler: (record: {
         readonly kind: 'spot_multicast' | 'actor_control' | 'actor_binding';
         readonly owner: string;
@@ -263,6 +261,7 @@ export declare class ServiceStatefulRuntime {
     private finishRecoveredInstanceActivation;
     recoverPendingInstanceActivation(envelope: ServiceInstanceActivationRecoveryEnvelope, pending: ServicePendingInstanceActivation, expectedCurrentRoute?: ServiceInstanceRouteFence | null): Promise<boolean>;
     completeRecoveredInstanceActivation(target: ServiceInstanceActivationTarget, route: ServiceInstanceRouteFence, expectedCurrentRoute?: ServiceInstanceRouteFence | null): Promise<ServiceInstanceRouteFence | undefined>;
+    /** Resolves once every first terminal record of an activated Instance message is durable. */
     waitForInstanceApplicationQuiescence(spotId: string, signal?: AbortSignal): Promise<void>;
     rememberActorRoute(route: ServiceActorRouteFence): void;
     rememberSpotRoute(route: ServiceDirectSpotRouteFence, expectedCurrentRoute?: ServiceDirectSpotRouteFence | null): void;
@@ -287,10 +286,10 @@ export declare class ServiceStatefulRuntime {
         readonly sessionRid: string;
         readonly bindingGeneration: bigint;
     }): ServiceStatefulPendingOperation;
-    sendToInstanceSpot(route: ServiceInstanceRouteFence, payload: ServiceApplicationPayload, sourceSpotId?: string, metadataFrame?: Uint8Array): Promise<number>;
+    sendToInstanceSpot(route: ServiceInstanceRouteFence, payload: ServiceApplicationPayload, sourceSpotId?: string, metadataFrame?: Uint8Array, instanceIntent?: boolean): Promise<number>;
     sendToMissingInstanceSpot(target: ServiceInstanceActivationTarget, payload: ServiceApplicationPayload, deadlineUnixMs: bigint, sourceSpotId?: string, metadataFrame?: Uint8Array): Promise<number>;
     sendToMissingInstanceSpotFrame(target: ServiceInstanceActivationTarget, payloadFrame: Buffer, deadlineUnixMs: bigint, sourceSpotId?: string, metadataFrame?: Uint8Array): Promise<number>;
-    requestToInstanceSpot(route: ServiceInstanceRouteFence, payload: ServiceApplicationPayload, timeoutMs: number, sourceSpotId?: string, metadataFrame?: Uint8Array): ServiceStatefulPendingOperation;
+    requestToInstanceSpot(route: ServiceInstanceRouteFence, payload: ServiceApplicationPayload, timeoutMs: number, sourceSpotId?: string, metadataFrame?: Uint8Array, instanceIntent?: boolean): ServiceStatefulPendingOperation;
     requestToMissingInstanceSpot(target: ServiceInstanceActivationTarget, payload: ServiceApplicationPayload, timeoutMs: number, sourceSpotId?: string, metadataFrame?: Uint8Array): ServiceStatefulPendingOperation;
     requestToMissingInstanceSpotFrame(target: ServiceInstanceActivationTarget, payloadFrame: Buffer, deadlineUnixMs: bigint, sourceSpotId?: string, metadataFrame?: Uint8Array): ServiceStatefulPendingOperation;
     lookupRemoteActor(targetNodeRid: string, actorId: string, timeoutMs: number): ServiceStatefulPendingOperation;
@@ -300,12 +299,14 @@ export declare class ServiceStatefulRuntime {
     joinActorEntrySpot(actor: ServiceActorRef, targetNodeRid: string, payload: ServiceApplicationPayload | undefined, timeoutMs: number): ServiceStatefulPendingOperation;
     joinActorEntrySpotCanonical(actor: ServiceActorRef, targetNodeRid: string, request: ServiceApplicationPayload, actorFence: ServiceCanonicalActorJoinCandidate['actorFence'], local: ServiceCanonicalActorJoinCandidate['local'], timeoutMs: number): ServiceStatefulPendingOperation;
     leaveActor(actor: ServiceActorRef, expectedMembershipEpoch: bigint, timeoutMs: number): ServiceStatefulPendingOperation;
-    bindSession(sessionRid: string, actor: ServiceActorRef, timeoutMs: number, deliver: ServiceSessionDelivery['deliver'], onBindingReplaced?: ServiceSessionDelivery['onBindingReplaced'], bindingIngress?: ServiceSessionBindingIngressPort, actorAuthority?: StreamSessionActorAuthorityFence): ServiceStatefulPendingOperation;
+    bindSession(sessionRid: string, actor: ServiceActorRef, timeoutMs: number, deliver: ServiceSessionDelivery['deliver'], onBindingReplaced?: ServiceSessionDelivery['onBindingReplaced'], actorAuthority?: StreamSessionActorAuthorityFence): ServiceStatefulPendingOperation;
     unbindSession(sessionRid: string, actor: ServiceActorRef, expectedBindingGeneration: bigint, timeoutMs: number): ServiceStatefulPendingOperation;
-    sessionBindings(sessionRid: string): readonly ServiceSessionBinding[];
+    sessionBindings(sessionRid: string): readonly ServiceStreamSessionBinding[];
     allSessionBindings(): readonly ServiceSessionBinding[];
     sendSessionToActor(sessionRid: string, actor: ServiceActorRef, payload: ServiceApplicationPayload): Promise<number>;
-    sendBoundSession(actor: ServiceActorRef, expectedBindingGeneration: bigint, payload: ServiceApplicationPayload, senderFence?: ServiceBoundSessionSendFence): Promise<number>;
+    sendBoundSession(actor: ServiceActorRef, expectedBindingGeneration: bigint, payload: ServiceApplicationPayload): Promise<number>;
+    expireOperations(nowMs: number, turnDeadlineMs: number): number;
+    get pendingOperationCount(): number;
     close(): void;
     private ingress;
     private handleIngress;
@@ -314,12 +315,15 @@ export declare class ServiceStatefulRuntime {
     private enqueueActivatedInstanceSpot;
     private continueMissingInstanceActivation;
     private continueReadyInstanceMaterialization;
+    /**
+     * Spot messaging §4 step 12 with §7 step 1: a Close waits for the first terminal
+     * record only of a message whose handler turn started before it; a message queued
+     * behind that Close is not counted, so it cannot hold the Close it follows.
+     */
     private activationTerminalCompletion;
     private instanceApplicationTerminalCompletion;
     private instanceApplicationTarget;
-    private beginInstanceApplicationOperation;
     private beginInstanceAuthorityOperation;
-    private completeInstanceApplicationOperation;
     private completeInstanceAuthorityOperation;
     private completeInstanceApplicationWaitersIfQuiescent;
     private relayMissingInstanceActivation;
@@ -349,6 +353,7 @@ export declare class ServiceStatefulRuntime {
     private enqueueSessionBindingTombstone;
     private enqueueSessionBindingRetirement;
     private deliverBoundSession;
+    private traceRejectedBoundSessionSend;
     private enqueueApplicationFrame;
     private enqueueLifecycleFrame;
     private enqueueFrame;
@@ -384,7 +389,6 @@ export declare class ServiceStatefulRuntime {
     private peekSpotMessageFollow;
     private takeSpotMessageFollow;
     private actorFence;
-    private tryBoundSessionSendFence;
     private tryActorFence;
     private acceptCanonicalActorFence;
     private trySpotFence;