@zlink-systems/framework 0.29.1 → 0.30.0

package/dist/runtime/locations/domain-store-contract.d.ts

@@ -1,6 +1,6 @@
 import type { ZLinkLocationOwnerToken, ZLinkLocationPage, ZLinkLocationWriteIntent, ZLinkLocationWriteResult, ZLinkLocationWriteStatus, ZLinkMeshNodeDescriptor, ZLinkMeshNodeDescriptorKey, ZLinkClientServerServerDescriptor, ZLinkClientServerServerDescriptorKey, ZLinkFanoutPublisherDescriptor, ZLinkFanoutPublisherDescriptorKey, ZLinkOwnerLeaseClaimResult, ZLinkOwnerLeaseReadResult, ZLinkOwnerLeaseReleaseResult, ZLinkOwnerLeaseRenewResult, ZLinkPageRequest } from '../../contracts/Locations/Models';
 import type { ZLinkAggregateAbortResult, ZLinkAggregateCommitResult, ZLinkAggregateFence, ZLinkAggregatePrepareRequest, ZLinkAggregatePrepareResult, ZLinkAuthorityCompareExchangeResult, ZLinkAuthorityKey, ZLinkAuthorityMutation, ZLinkAuthorityReadResult, ZLinkAuthorityScanCursor, ZLinkAuthorityScanResult, ZLinkAuthorityStoreVersion, ZLinkCreationOperationIdentity, ZLinkCreationTerminalReadResult, ZLinkObjectAbortRequest, ZLinkObjectAbortResult, ZLinkObjectCommitRequest, ZLinkObjectCommitResult, ZLinkObjectCreationCompleteRequest, ZLinkObjectCreationCompleteResult, ZLinkObjectReserveResult } from '../../contracts/Locations/Authority';
-import type { ZLinkObjectReserveRequest } from './internal-location-contracts';
+import type { ZLinkObjectReserveRequest, ZLinkEndedOwnerReleaseIntent } from './internal-location-contracts';
 /**
  * Framework-private domain repository. Provider implementations never
  * implement this interface; the framework maps it to the opaque Store SPI.
@@ -26,7 +26,7 @@ export interface ZLinkDomainLocationStore {
     reserve(request: ZLinkObjectReserveRequest, signal?: AbortSignal, deadlineUnixMs?: bigint): Promise<ZLinkObjectReserveResult>;
     commit(request: ZLinkObjectCommitRequest, signal?: AbortSignal, deadlineUnixMs?: bigint): Promise<ZLinkObjectCommitResult>;
     completeCreation(request: ZLinkObjectCreationCompleteRequest, signal?: AbortSignal): Promise<ZLinkObjectCreationCompleteResult>;
-    releaseEndedReservation?(key: ZLinkAuthorityKey, expectedStoreVersion: string, signal?: AbortSignal): Promise<boolean>;
+    releaseEndedReservation?(key: ZLinkAuthorityKey, expectedStoreVersion: string, signal?: AbortSignal, request?: ZLinkEndedOwnerReleaseIntent): Promise<boolean>;
     abort(request: ZLinkObjectAbortRequest, signal?: AbortSignal, deadlineUnixMs?: bigint): Promise<ZLinkObjectAbortResult>;
     prepareAggregate(request: ZLinkAggregatePrepareRequest, signal?: AbortSignal): Promise<ZLinkAggregatePrepareResult>;
     commitAggregate(fence: ZLinkAggregateFence, signal?: AbortSignal): Promise<ZLinkAggregateCommitResult>;

package/dist/runtime/locations/in-memory-authority-store.d.ts

@@ -1,9 +1,10 @@
-import type { ZLinkAggregateAbortResult, ZLinkAggregateCommitResult, ZLinkAggregateFence, ZLinkAggregatePrepareRequest, ZLinkAggregatePrepareResult, ZLinkAuthorityCompareExchangeResult, ZLinkAuthorityKey, ZLinkAuthorityMutation, ZLinkAuthorityReadResult, ZLinkAuthorityScanCursor, ZLinkAuthorityScanResult, ZLinkAuthorityStoreVersion, ZLinkCapacityVector, ZLinkLocationOwnerToken, ZLinkMeshNodeDescriptorKey, ZLinkObjectAbortRequest, ZLinkObjectAbortResult, ZLinkObjectCommitRequest, ZLinkObjectCommitResult, ZLinkObjectCreationCompleteRequest, ZLinkObjectCreationCompleteResult, ZLinkObjectReserveRequest, ZLinkObjectReserveResult, ZLinkCreationOperationIdentity, ZLinkCreationTerminalReadResult } from './internal-location-contracts';
+import type { ZLinkAggregateAbortResult, ZLinkAggregateCommitResult, ZLinkAggregateFence, ZLinkAggregatePrepareRequest, ZLinkAggregatePrepareResult, ZLinkAuthorityCompareExchangeResult, ZLinkAuthorityKey, ZLinkAuthorityMutation, ZLinkAuthorityReadResult, ZLinkAuthorityScanCursor, ZLinkAuthorityScanResult, ZLinkAuthorityStoreVersion, ZLinkCapacityVector, ZLinkLocationOwnerToken, ZLinkMeshNodeDescriptorKey, ZLinkObjectAbortRequest, ZLinkObjectAbortResult, ZLinkObjectCommitRequest, ZLinkObjectCommitResult, ZLinkObjectCreationCompleteRequest, ZLinkObjectCreationCompleteResult, ZLinkEndedOwnerReleaseIntent, ZLinkObjectReserveRequest, ZLinkObjectReserveResult, ZLinkCreationOperationIdentity, ZLinkCreationTerminalReadResult } from './internal-location-contracts';
 export interface ZLinkInMemoryAuthorityValidation {
     isOwnerLive(owner: ZLinkLocationOwnerToken): boolean;
     isTargetLive(descriptor: ZLinkMeshNodeDescriptorKey, lifecycleGeneration: bigint, owner: ZLinkLocationOwnerToken): boolean;
     placementCapacityAvailable?(descriptor: ZLinkMeshNodeDescriptorKey, requested: ZLinkCapacityVector, currentReserved: ZLinkCapacityVector, currentActive: ZLinkCapacityVector): boolean;
     identityClaimed?(authorityKey: string): boolean;
+    hasSpotMembers?(spotId: string, objectGeneration: bigint): boolean;
 }
 /**
  * In-memory reference provider for the provider-owned authority state machine.
@@ -27,7 +28,8 @@ export declare class ZLinkInMemoryAuthorityStore {
     compareExchangeAuthority(key: ZLinkAuthorityKey, expectedStoreVersion: ZLinkAuthorityStoreVersion, mutation: ZLinkAuthorityMutation, signal?: AbortSignal): Promise<ZLinkAuthorityCompareExchangeResult>;
     listAuthorities(prefix: string, cursor: ZLinkAuthorityScanCursor | undefined, limit: number, signal?: AbortSignal): Promise<ZLinkAuthorityScanResult>;
     removeAllByOwner(owner: ZLinkLocationOwnerToken, signal?: AbortSignal): Promise<bigint>;
-    releaseEndedReservation(key: ZLinkAuthorityKey, expectedStoreVersion: string, signal?: AbortSignal): Promise<boolean>;
+    releaseEndedReservation(key: ZLinkAuthorityKey, expectedStoreVersion: string, signal?: AbortSignal, request?: ZLinkEndedOwnerReleaseIntent): Promise<boolean>;
+    acceptsUserSpotMembership(spotId: string, objectGeneration: bigint): boolean;
     private tryReleaseEndedReservation;
     reserve(request: ZLinkObjectReserveRequest, signal?: AbortSignal): Promise<ZLinkObjectReserveResult>;
     commit(request: ZLinkObjectCommitRequest, signal?: AbortSignal): Promise<ZLinkObjectCommitResult>;

package/dist/runtime/locations/in-memory-authority-store.js

@@ -11,6 +11,9 @@ const actor_join_recovery_codec_1 = require("../foundation/actor-join-recovery-c
 const authority_key_codec_1 = require("./authority-key-codec");
 const opaque_record_key_1 = require("./opaque-record-key");
 const service_relocation_runtime_1 = require("../foundation/service-relocation-runtime");
+const service_authority_payload_codec_1 = require("../foundation/service-authority-payload-codec");
+const actor_authority_payload_codec_1 = require("../actors/actor-authority-payload-codec");
+const contracts_2 = require("../../contracts");
 const MAX_GENERATION = 0x7fffffffffffffffn;
 const CREATION_TERMINAL_RETENTION_MS = 5 * 60 * 1000;
 const MAX_U64 = stream_wire_1.UINT64_MAX;
@@ -108,6 +111,18 @@ class ZLinkInMemoryAuthorityStore {
         if (!this.isOwnerLive(row.snapshot)) {
             return { kind: 'conflict', current: this.read(keyValue) };
         }
+        const actor = row.snapshot.allocation.objectKind === 'actor'
+            ? (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(mutation.payload))
+            : undefined;
+        const previousActor = actor === undefined
+            ? undefined
+            : (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(row.snapshot.payload));
+        if (actor?.currentSpotKind === contracts_2.ZLinkSpotKind.User &&
+            (previousActor?.currentSpotKind !== contracts_2.ZLinkSpotKind.User ||
+                previousActor.currentSpotId !== actor.currentSpotId ||
+                previousActor.currentSpotGeneration !== actor.currentSpotGeneration) &&
+            !this.acceptsUserSpotMembership(actor.currentSpotId, actor.currentSpotGeneration))
+            return { kind: 'conflict', current: this.read(keyValue) };
         if (mutation.generationTransition === 'reincarnate' &&
             (this.objectGeneration >= MAX_GENERATION || this.ownerGeneration >= MAX_GENERATION)) {
             return { kind: 'generationExhausted' };
@@ -174,33 +189,67 @@ class ZLinkInMemoryAuthorityStore {
             this.scanRevision++;
         return BigInt(removed);
     }
-    async releaseEndedReservation(key, expectedStoreVersion, signal) {
+    async releaseEndedReservation(key, expectedStoreVersion, signal, request) {
         signal?.throwIfAborted();
-        return this.tryReleaseEndedReservation(key, expectedStoreVersion);
+        return this.tryReleaseEndedReservation(key, expectedStoreVersion, request);
+    }
+    acceptsUserSpotMembership(spotId, objectGeneration) {
+        const row = this.rows.get((0, authority_key_codec_1.encodeAuthorityKey)('user_spot', spotId).value);
+        return (row !== undefined &&
+            row.snapshot.allocation.objectKind === 'user_spot' &&
+            row.snapshot.allocation.state === 'active' &&
+            row.snapshot.objectGeneration === objectGeneration &&
+            (0, service_authority_payload_codec_1.decodeServiceReadySpotAuthority)(row.snapshot.payload)?.kind === 'user_spot' &&
+            this.isOwnerLive(row.snapshot));
     }
     tryReleaseEndedReservation(key, expectedStoreVersion, request) {
         const current = this.rows.get(key.value);
         if (current === undefined ||
             current.snapshot.storeVersion.value !== expectedStoreVersion ||
             (current.snapshot.allocation.state === 'active'
-                ? request?.key.kind !== 'actor'
+                ? request === undefined
                 : current.creation === undefined))
             return false;
         if (current.snapshot.allocation.state === 'active') {
+            let unavailable = false;
             for (const aggregate of this.aggregates.values()) {
                 if (aggregate.state === 'prepared' &&
                     aggregate.request.participants.some((participant) => participant.authorityKey.value === key.value))
-                    return false;
+                    unavailable = true;
             }
-            if (relocationAuthorityCodec.read(current.snapshot.payload) !== undefined)
-                return false;
+            unavailable ||= relocationAuthorityCodec.read(current.snapshot.payload) !== undefined;
             if (this.validation.isOwnerLive({
                 ownerId: current.snapshot.ownerId,
                 leaseGeneration: current.snapshot.ownerLeaseGeneration
             }))
                 return false;
-            if (request?.actorRelocationPolicy !== 'disabled')
-                throw new contracts_1.ZLinkFrameworkException(contracts_1.ZLinkFrameworkErrorKind.Unavailable, 'Actor owner lease is unavailable.');
+            const spot = current.snapshot.allocation.objectKind === 'actor'
+                ? undefined
+                : (0, service_authority_payload_codec_1.decodeServiceReadySpotAuthority)(current.snapshot.payload);
+            if (current.snapshot.allocation.objectKind !== 'actor') {
+                unavailable ||=
+                    spot === undefined ||
+                        spot.kind !== request?.key.kind ||
+                        spot.stableType !== request.intent.stableType ||
+                        spot.spotId !== request.key.globalId ||
+                        spot.activationRecovery !== undefined;
+                if (spot?.kind === 'user_spot') {
+                    unavailable ||=
+                        this.validation.hasSpotMembers?.(spot.spotId, current.snapshot.objectGeneration) ===
+                            true;
+                    for (const row of this.rows.values()) {
+                        if (row.snapshot.allocation.objectKind !== 'actor')
+                            continue;
+                        const actor = (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(row.snapshot.payload));
+                        unavailable ||=
+                            actor?.currentSpotKind === contracts_2.ZLinkSpotKind.User &&
+                                actor.currentSpotId === spot.spotId &&
+                                actor.currentSpotGeneration === current.snapshot.objectGeneration;
+                    }
+                }
+            }
+            if (unavailable || request?.actorRelocationPolicy !== 'disabled')
+                throw new contracts_1.ZLinkFrameworkException(contracts_1.ZLinkFrameworkErrorKind.Unavailable, 'Object owner lease is unavailable.');
         }
         else if (this.validation.isTargetLive(current.snapshot.allocation.descriptor, current.snapshot.allocation.descriptorLifecycleGeneration, {
             ownerId: current.snapshot.ownerId,
@@ -357,6 +406,12 @@ class ZLinkInMemoryAuthorityStore {
         if (!this.creationTerminalAvailable(terminalRecord)) {
             return { kind: 'stale' };
         }
+        const actor = request.completion.kind === 'created'
+            ? (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(request.completion.readyPayload))
+            : undefined;
+        if (actor?.currentSpotKind === contracts_2.ZLinkSpotKind.User &&
+            !this.acceptsUserSpotMembership(actor.currentSpotId, actor.currentSpotGeneration))
+            return { kind: 'stale' };
         const nextVersion = this.tryNextStoreVersion();
         if (nextVersion === undefined)
             return { kind: 'generationExhausted' };
@@ -500,6 +555,23 @@ class ZLinkInMemoryAuthorityStore {
                 row.snapshot.storeVersion.value !== participant.expectedStoreVersion.value) {
                 return { kind: 'stale' };
             }
+            const actor = row.snapshot.allocation.objectKind === 'actor'
+                ? (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(participant.authorityPayload))
+                : undefined;
+            if (actor?.currentSpotKind === contracts_2.ZLinkSpotKind.User) {
+                const participantSpot = aggregate.request.participants.find((candidate) => candidate.authorityKey.value ===
+                    (0, authority_key_codec_1.encodeAuthorityKey)('user_spot', actor.currentSpotId).value);
+                if (participantSpot === undefined) {
+                    if (!this.acceptsUserSpotMembership(actor.currentSpotId, actor.currentSpotGeneration))
+                        return { kind: 'stale' };
+                }
+                else {
+                    const spot = this.rows.get(participantSpot.authorityKey.value);
+                    if (spot?.snapshot.allocation.objectKind !== 'user_spot' ||
+                        spot.snapshot.objectGeneration !== actor.currentSpotGeneration)
+                        return { kind: 'stale' };
+                }
+            }
             if (participant.ownerTransition === 'newOwner') {
                 if (!this.validation.isTargetLive(aggregate.request.targetDescriptor, aggregate.request.targetDescriptorLifecycleGeneration, aggregate.request.targetOwner)) {
                     return { kind: 'stale' };

package/dist/runtime/locations/in-memory-location-store.d.ts

@@ -1,6 +1,6 @@
 import type { ZLinkActorTransferPrepareRequest, ZLinkActorTransferRecord, ZLinkActorTransferWriteResult } from '../../contracts/Locations/ActorTransfer';
 import type { ZLinkDomainLocationStore } from './domain-store-contract';
-import { ZLinkLocationWriteIntent, ZLinkLocationWriteStatus, type ZLinkActorLocation, type ZLinkActorLocationFilter, type ZLinkActorLocationKey, type ZLinkAggregateAbortResult, type ZLinkAggregateCommitResult, type ZLinkAggregateFence, type ZLinkAggregatePrepareRequest, type ZLinkAggregatePrepareResult, type ZLinkAuthorityCompareExchangeResult, type ZLinkAuthorityKey, type ZLinkAuthorityMutation, type ZLinkAuthorityReadResult, type ZLinkAuthorityScanCursor, type ZLinkAuthorityScanResult, type ZLinkAuthorityStoreVersion, type ZLinkClientServerServerDescriptor, type ZLinkClientServerServerDescriptorKey, type ZLinkCreationOperationIdentity, type ZLinkCreationTerminalReadResult, type ZLinkFanoutPublisherDescriptor, type ZLinkFanoutPublisherDescriptorKey, type ZLinkLocationChangeStampScope, type ZLinkLocationOwnerToken, type ZLinkLocationPage, type ZLinkLocationWriteResult, type ZLinkMeshNodeDescriptor, type ZLinkMeshNodeDescriptorKey, type ZLinkObjectAbortRequest, type ZLinkObjectAbortResult, type ZLinkObjectCommitRequest, type ZLinkObjectCommitResult, type ZLinkObjectCreationCompleteRequest, type ZLinkObjectCreationCompleteResult, type ZLinkObjectReserveRequest, type ZLinkObjectReserveResult, type ZLinkOwnerLeaseClaimResult, type ZLinkOwnerLeaseReadResult, type ZLinkOwnerLeaseReleaseResult, type ZLinkOwnerLeaseRenewResult, type ZLinkPageRequest, type ZLinkPeerLocation, type ZLinkPeerLocationFilter, type ZLinkPeerLocationKey, type ZLinkRouteLocation, type ZLinkRouteLocationFilter, type ZLinkRouteLocationKey, type ZLinkSpotLocation, type ZLinkSpotLocationFilter, type ZLinkSpotLocationKey } from './internal-location-contracts';
+import { ZLinkLocationWriteIntent, ZLinkLocationWriteStatus, type ZLinkActorLocation, type ZLinkActorLocationFilter, type ZLinkActorLocationKey, type ZLinkAggregateAbortResult, type ZLinkAggregateCommitResult, type ZLinkAggregateFence, type ZLinkAggregatePrepareRequest, type ZLinkAggregatePrepareResult, type ZLinkAuthorityCompareExchangeResult, type ZLinkAuthorityKey, type ZLinkAuthorityMutation, type ZLinkAuthorityReadResult, type ZLinkAuthorityScanCursor, type ZLinkAuthorityScanResult, type ZLinkAuthorityStoreVersion, type ZLinkClientServerServerDescriptor, type ZLinkClientServerServerDescriptorKey, type ZLinkCreationOperationIdentity, type ZLinkCreationTerminalReadResult, type ZLinkFanoutPublisherDescriptor, type ZLinkFanoutPublisherDescriptorKey, type ZLinkLocationChangeStampScope, type ZLinkLocationOwnerToken, type ZLinkLocationPage, type ZLinkLocationWriteResult, type ZLinkMeshNodeDescriptor, type ZLinkMeshNodeDescriptorKey, type ZLinkObjectAbortRequest, type ZLinkObjectAbortResult, type ZLinkObjectCommitRequest, type ZLinkObjectCommitResult, type ZLinkObjectCreationCompleteRequest, type ZLinkObjectCreationCompleteResult, type ZLinkEndedOwnerReleaseIntent, type ZLinkObjectReserveRequest, type ZLinkObjectReserveResult, type ZLinkOwnerLeaseClaimResult, type ZLinkOwnerLeaseReadResult, type ZLinkOwnerLeaseReleaseResult, type ZLinkOwnerLeaseRenewResult, type ZLinkPageRequest, type ZLinkPeerLocation, type ZLinkPeerLocationFilter, type ZLinkPeerLocationKey, type ZLinkRouteLocation, type ZLinkRouteLocationFilter, type ZLinkRouteLocationKey, type ZLinkSpotLocation, type ZLinkSpotLocationFilter, type ZLinkSpotLocationKey } from './internal-location-contracts';
 import type { ZLinkFanoutLocationStore } from './internal-store-contracts';
 export declare class ZLinkInMemoryLocationStore implements ZLinkDomainLocationStore, ZLinkFanoutLocationStore {
     private readonly now;
@@ -25,7 +25,7 @@ export declare class ZLinkInMemoryLocationStore implements ZLinkDomainLocationSt
     commit(request: ZLinkObjectCommitRequest, signal?: AbortSignal): Promise<ZLinkObjectCommitResult>;
     completeCreation(request: ZLinkObjectCreationCompleteRequest, signal?: AbortSignal): Promise<ZLinkObjectCreationCompleteResult>;
     readCreationTerminal(operation: ZLinkCreationOperationIdentity, signal?: AbortSignal): Promise<ZLinkCreationTerminalReadResult>;
-    releaseEndedReservation(key: ZLinkAuthorityKey, expectedStoreVersion: string, signal?: AbortSignal): Promise<boolean>;
+    releaseEndedReservation(key: ZLinkAuthorityKey, expectedStoreVersion: string, signal?: AbortSignal, request?: ZLinkEndedOwnerReleaseIntent): Promise<boolean>;
     abort(request: ZLinkObjectAbortRequest, signal?: AbortSignal): Promise<ZLinkObjectAbortResult>;
     prepareAggregate(request: ZLinkAggregatePrepareRequest, signal?: AbortSignal): Promise<ZLinkAggregatePrepareResult>;
     commitAggregate(fence: ZLinkAggregateFence, signal?: AbortSignal): Promise<ZLinkAggregateCommitResult>;

package/dist/runtime/locations/in-memory-location-store.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ZLinkInMemoryLocationStore = void 0;
+const contracts_1 = require("../../contracts");
 const CoreTypes_1 = require("../../contracts/Common/CoreTypes");
 const RegistrationBuilderPolicy_1 = require("../../contracts/Configuration/RegistrationBuilderPolicy");
 const location_store_integration_1 = require("../../location-store-integration");
@@ -62,7 +63,16 @@ class ZLinkInMemoryLocationStore {
                                     spotType.count <=
                                     typeCapacity.limit))));
             },
-            identityClaimed: (authorityKey) => this.entrySpotClaims.has(authorityKey)
+            identityClaimed: (authorityKey) => this.entrySpotClaims.has(authorityKey),
+            hasSpotMembers: (spotId, objectGeneration) => {
+                for (const actor of this.actors.rows.values()) {
+                    if (actor.spotKind === contracts_1.ZLinkSpotKind.User &&
+                        String(actor.spotId) === spotId &&
+                        actor.spotGeneration === objectGeneration)
+                        return true;
+                }
+                return false;
+            }
         }, now);
     }
     async readAuthority(key, signal) {
@@ -86,8 +96,8 @@ class ZLinkInMemoryLocationStore {
     async readCreationTerminal(operation, signal) {
         return this.authority.readCreationTerminal(operation, signal);
     }
-    async releaseEndedReservation(key, expectedStoreVersion, signal) {
-        return this.authority.releaseEndedReservation(key, expectedStoreVersion, signal);
+    async releaseEndedReservation(key, expectedStoreVersion, signal, request) {
+        return this.authority.releaseEndedReservation(key, expectedStoreVersion, signal, request);
     }
     async abort(request, signal) {
         return this.authority.abort(request, signal);
@@ -389,6 +399,12 @@ class ZLinkInMemoryLocationStore {
         });
         const updatedAt = this.now();
         const current = this.actors.rows.get(key);
+        if (actor.spotKind === contracts_1.ZLinkSpotKind.User &&
+            (current?.spotKind !== contracts_1.ZLinkSpotKind.User ||
+                String(current.spotId) !== String(actor.spotId) ||
+                current.spotGeneration !== actor.spotGeneration) &&
+            !this.authority.acceptsUserSpotMembership(String(actor.spotId), actor.spotGeneration))
+            return rejectedConflict();
         if (intent === internal_location_contracts_1.ZLinkLocationWriteIntent.NewClaim &&
             current !== undefined &&
             this.liveOwnerLease(current.ownerId, updatedAt) !== undefined) {

package/dist/runtime/locations/internal-location-contracts.d.ts

@@ -4,6 +4,9 @@ import type { ZLinkRelocationConfiguration } from '../../contracts/Configuration
 export interface ZLinkObjectReserveRequest extends ReserveRequest {
     readonly actorRelocationPolicy?: ZLinkRelocationConfiguration<unknown>['kind'];
 }
+export type ZLinkEndedOwnerReleaseIntent = Pick<ZLinkObjectReserveRequest, 'key' | 'actorRelocationPolicy'> & {
+    readonly intent: Pick<ZLinkObjectReserveRequest['intent'], 'stableType'>;
+};
 export type * from '../../contracts/Locations/Authority';
 export type { ZLinkActorLocation, ZLinkPeerLocation, ZLinkRouteLocation, ZLinkSpotLocation } from '../../contracts/Locations/Rows';
 export type { ZLinkActorLocationFilter, ZLinkActorLocationKey, ZLinkLocationKey, ZLinkPeerLocationFilter, ZLinkPeerLocationKey, ZLinkRouteLocationFilter, ZLinkRouteLocationKey, ZLinkSpotLocationFilter, ZLinkSpotLocationKey } from '../../contracts/Locations/Keys';

package/dist/runtime/locations/location-store-repository.d.ts

@@ -1,6 +1,6 @@
 import { type ZLinkClientServerServerDescriptor, type ZLinkClientServerServerDescriptorKey, type ZLinkFanoutPublisherDescriptor, type ZLinkFanoutPublisherDescriptorKey, type ZLinkLocationPage, type ZLinkLocationStore, type ZLinkMeshNodeDescriptor, type ZLinkMeshNodeDescriptorKey, type ZLinkPageRequest } from '../../contracts';
 import { ZLinkInMemoryLocationStore } from './in-memory-location-store';
-import { type ZLinkActorLocation, type ZLinkActorLocationFilter, type ZLinkActorLocationKey, type ZLinkAggregateAbortResult, type ZLinkAggregateCommitResult, type ZLinkAggregateFence, type ZLinkAggregatePrepareRequest, type ZLinkAggregatePrepareResult, type ZLinkAuthorityCompareExchangeResult, type ZLinkAuthorityKey, type ZLinkAuthorityMutation, type ZLinkAuthorityReadResult, type ZLinkAuthorityScanCursor, type ZLinkAuthorityScanResult, type ZLinkAuthorityStoreVersion, type ZLinkCreationOperationIdentity, type ZLinkCreationTerminalReadResult, type ZLinkLocationOwnerToken, type ZLinkLocationWriteResult, type ZLinkLocationWriteStatus, type ZLinkObjectAbortRequest, type ZLinkObjectAbortResult, type ZLinkObjectCommitRequest, type ZLinkObjectCommitResult, type ZLinkObjectCreationCompleteRequest, type ZLinkObjectCreationCompleteResult, type ZLinkObjectReserveRequest, type ZLinkObjectReserveResult, type ZLinkOwnerLeaseClaimResult, type ZLinkOwnerLeaseReadResult, type ZLinkOwnerLeaseReleaseResult, type ZLinkOwnerLeaseRenewResult, type ZLinkRouteLocation, type ZLinkRouteLocationFilter, type ZLinkRouteLocationKey, type ZLinkSpotLocation, type ZLinkSpotLocationFilter, type ZLinkSpotLocationKey, ZLinkLocationWriteIntent } from './internal-location-contracts';
+import { type ZLinkActorLocation, type ZLinkActorLocationFilter, type ZLinkActorLocationKey, type ZLinkAggregateAbortResult, type ZLinkAggregateCommitResult, type ZLinkAggregateFence, type ZLinkAggregatePrepareRequest, type ZLinkAggregatePrepareResult, type ZLinkAuthorityCompareExchangeResult, type ZLinkAuthorityKey, type ZLinkAuthorityMutation, type ZLinkAuthorityReadResult, type ZLinkAuthorityScanCursor, type ZLinkAuthorityScanResult, type ZLinkAuthorityStoreVersion, type ZLinkCreationOperationIdentity, type ZLinkCreationTerminalReadResult, type ZLinkLocationOwnerToken, type ZLinkLocationWriteResult, type ZLinkLocationWriteStatus, type ZLinkObjectAbortRequest, type ZLinkObjectAbortResult, type ZLinkObjectCommitRequest, type ZLinkObjectCommitResult, type ZLinkObjectCreationCompleteRequest, type ZLinkObjectCreationCompleteResult, type ZLinkEndedOwnerReleaseIntent, type ZLinkObjectReserveRequest, type ZLinkObjectReserveResult, type ZLinkOwnerLeaseClaimResult, type ZLinkOwnerLeaseReadResult, type ZLinkOwnerLeaseReleaseResult, type ZLinkOwnerLeaseRenewResult, type ZLinkRouteLocation, type ZLinkRouteLocationFilter, type ZLinkRouteLocationKey, type ZLinkSpotLocation, type ZLinkSpotLocationFilter, type ZLinkSpotLocationKey, ZLinkLocationWriteIntent } from './internal-location-contracts';
 /**
  * Maps framework domain records to the minimal provider SPI.
  *
@@ -20,7 +20,7 @@ export declare class ZLinkLocationStoreRepository extends ZLinkInMemoryLocationS
     commitAggregate(fence: ZLinkAggregateFence, signal?: AbortSignal): Promise<ZLinkAggregateCommitResult>;
     private commitAggregateCore;
     abortAggregate(fence: ZLinkAggregateFence, signal?: AbortSignal): Promise<ZLinkAggregateAbortResult>;
-    releaseEndedReservation(key: ZLinkAuthorityKey, expectedStoreVersion: string, signal?: AbortSignal): Promise<boolean>;
+    releaseEndedReservation(key: ZLinkAuthorityKey, expectedStoreVersion: string, signal?: AbortSignal, request?: ZLinkEndedOwnerReleaseIntent): Promise<boolean>;
     private tryReleaseEndedReservation;
     reserve(request: ZLinkObjectReserveRequest, signal?: AbortSignal, deadlineUnixMs?: bigint): Promise<ZLinkObjectReserveResult>;
     commit(request: ZLinkObjectCommitRequest, signal?: AbortSignal, deadlineUnixMs?: bigint): Promise<ZLinkObjectCommitResult>;
@@ -59,6 +59,7 @@ export declare class ZLinkLocationStoreRepository extends ZLinkInMemoryLocationS
     private writeDescriptorWithReconciliation;
     private removeDescriptor;
     private listDescriptors;
+    private userSpotMembershipConditions;
     private updateOwnedLocation;
     private removeOwnedLocation;
     private readOwnedLocation;

package/dist/runtime/locations/location-store-repository.js

@@ -2,10 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ZLinkLocationStoreRepository = void 0;
 const service_relocation_runtime_1 = require("../foundation/service-relocation-runtime");
+const service_authority_payload_codec_1 = require("../foundation/service-authority-payload-codec");
+const actor_authority_payload_codec_1 = require("../actors/actor-authority-payload-codec");
+const contracts_1 = require("../../contracts");
 const stream_wire_1 = require("@zlink-systems/stream-wire");
 const node_crypto_1 = require("node:crypto");
 const Options_1 = require("../../contracts/Locations/Options");
-const contracts_1 = require("../../contracts");
+const contracts_2 = require("../../contracts");
 const CoreTypes_1 = require("../../contracts/Common/CoreTypes");
 const InternalDefaults_1 = require("../../contracts/Configuration/InternalDefaults");
 const RegistrationBuilderPolicy_1 = require("../../contracts/Configuration/RegistrationBuilderPolicy");
@@ -215,9 +218,27 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
                         payload: Buffer.from(mutation.payload)
                     }
                 };
+            const actor = mutation.kind !== 'delete' && record.snapshot.allocation.objectKind === 'actor'
+                ? (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(mutation.payload))
+                : undefined;
+            const previousActor = actor === undefined
+                ? undefined
+                : (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(record.snapshot.payload));
+            const membershipConditions = actor?.currentSpotKind === contracts_1.ZLinkSpotKind.User &&
+                (previousActor?.currentSpotKind !== contracts_1.ZLinkSpotKind.User ||
+                    previousActor.currentSpotId !== actor.currentSpotId ||
+                    previousActor.currentSpotGeneration !== actor.currentSpotGeneration)
+                ? await this.userSpotMembershipConditions(actor.currentSpotId, actor.currentSpotGeneration, signal, {
+                    ownerId: record.snapshot.ownerId,
+                    leaseGeneration: record.snapshot.ownerLeaseGeneration
+                })
+                : [];
+            if (membershipConditions === undefined)
+                return { kind: 'conflict', current: snapshot };
             const result = await this.provider.write({
                 conditions: [
                     { kind: 'version', key: rowKey, expected: current.value.version },
+                    ...membershipConditions,
                     ...(mutation.kind === 'restore'
                         ? []
                         : [
@@ -654,7 +675,7 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
                     sha256Hex(membership) !== entry.membershipMutationSha256) {
                     throw new Error('Aggregate participant staging checksum does not match inventory.');
                 }
-                authorityRows.push({ key: rowKeyForParticipant, current, record, entry });
+                authorityRows.push({ key: rowKeyForParticipant, current, record, entry, payload });
             }
             const targetDescriptorKey = meshKey(aggregate.targetDescriptor.meshName, aggregate.targetDescriptor.rid);
             const targetLeaseKey = ownerKey(aggregate.targetOwner.ownerId);
@@ -717,11 +738,34 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
                     bytes: encodeJson(capacity)
                 });
             }
+            const membershipConditions = [];
+            for (const row of authorityRows) {
+                if (row.record.snapshot.allocation.objectKind !== 'actor')
+                    continue;
+                const actor = (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(row.payload));
+                if (actor?.currentSpotKind !== contracts_1.ZLinkSpotKind.User)
+                    continue;
+                const spotKey = (0, authority_key_codec_1.encodeAuthorityKey)('user_spot', actor.currentSpotId);
+                const participantSpot = authorityRows.find((candidate) => candidate.entry.authorityKey === spotKey.value);
+                if (participantSpot !== undefined) {
+                    if (participantSpot.record.snapshot.allocation.objectKind !== 'user_spot' ||
+                        participantSpot.record.snapshot.objectGeneration !== actor.currentSpotGeneration)
+                        return { kind: 'stale' };
+                    continue;
+                }
+                if (membershipConditions.some((condition) => condition.key.value === authorityKey(spotKey.value).value))
+                    continue;
+                const conditions = await this.userSpotMembershipConditions(actor.currentSpotId, actor.currentSpotGeneration, signal, aggregate.targetOwner);
+                if (conditions === undefined)
+                    return { kind: 'stale' };
+                membershipConditions.push(...conditions.filter((condition) => !membershipConditions.some((existing) => existing.key.value === condition.key.value)));
+            }
             const published = await this.provider.write({
                 conditions: [
                     { kind: 'version', key: rowKey, expected: aggregateRead.value.version },
                     versionCondition(targetDescriptorKey, descriptorRead),
                     leaseValueCondition(targetLeaseKey, aggregate.targetOwner),
+                    ...membershipConditions,
                     ...[...capacityReads.entries()].map(([value, read]) => ({
                         kind: 'version',
                         key: capacityKeys.get(value),
@@ -814,8 +858,9 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
             return { kind: 'aborted' };
         }
     }
-    async releaseEndedReservation(key, expectedStoreVersion, signal) {
-        return ((await this.tryReleaseEndedReservation(key, expectedStoreVersion, signal)) === 'reclaimed');
+    async releaseEndedReservation(key, expectedStoreVersion, signal, request) {
+        return ((await this.tryReleaseEndedReservation(key, expectedStoreVersion, signal, request)) ===
+            'reclaimed');
     }
     async tryReleaseEndedReservation(key, expectedStoreVersion, signal, request) {
         const rowKey = authorityKey(key.value);
@@ -824,11 +869,9 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
             return 'conflict';
         const record = decodeAuthorityRecord(current.value.bytes);
         const snapshot = record.snapshot;
-        if ((snapshot.allocation.state === 'active'
-            ? request?.key.kind !== 'actor'
-            : snapshot.pendingCreation === undefined) ||
-            record.aggregate !== undefined ||
-            hasRelocationAuthority(snapshot.payload))
+        if (snapshot.allocation.state === 'active'
+            ? request === undefined
+            : snapshot.pendingCreation === undefined)
             return 'notReclaimable';
         const leaseKey = ownerKey(snapshot.ownerId);
         const descriptorKey = meshKey(snapshot.allocation.descriptor.meshName, snapshot.allocation.descriptor.rid);
@@ -844,13 +887,62 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
         if (snapshot.allocation.state === 'active') {
             if (ownerLive)
                 return 'notReclaimable';
-            if (request?.actorRelocationPolicy !== 'disabled')
-                throw new contracts_1.ZLinkFrameworkException(contracts_1.ZLinkFrameworkErrorKind.Unavailable, 'Actor owner lease is unavailable.');
+            let unavailable = record.aggregate !== undefined || hasRelocationAuthority(snapshot.payload);
+            if (snapshot.allocation.objectKind !== 'actor') {
+                const spot = (0, service_authority_payload_codec_1.decodeServiceReadySpotAuthority)(snapshot.payload);
+                unavailable ||=
+                    spot === undefined ||
+                        spot.kind !== request?.key.kind ||
+                        spot.stableType !== request.intent.stableType ||
+                        spot.spotId !== request.key.globalId ||
+                        spot.activationRecovery !== undefined;
+                if (spot?.kind === 'user_spot') {
+                    // The snapshot starts only after the old owner's lease was found invalid.
+                    for (const prefix of [`${PREFIX}actor:`, `${AUTHORITY_PREIMAGE_PREFIX}actor\0`]) {
+                        membershipSnapshot: for (;;) {
+                            let snapshotHasMember = false;
+                            let cursor;
+                            do {
+                                const page = await this.provider.scan({ prefix, cursor, limit: Stores_1.ZLINK_PROVIDER_MAX_PAGE_SIZE }, signal);
+                                if (page.kind === 'expired')
+                                    continue membershipSnapshot;
+                                for (const item of page.value.items) {
+                                    if (prefix === `${PREFIX}actor:`) {
+                                        const actor = normalizeActor(decodeJson(item.value.bytes).descriptor);
+                                        snapshotHasMember ||=
+                                            actor.spotKind === contracts_1.ZLinkSpotKind.User &&
+                                                String(actor.spotId) === spot.spotId &&
+                                                actor.spotGeneration === snapshot.objectGeneration;
+                                    }
+                                    else {
+                                        const authority = decodeAuthorityRecord(item.value.bytes).snapshot;
+                                        if (authority.allocation.objectKind !== 'actor')
+                                            continue;
+                                        const actor = (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(authority.payload));
+                                        snapshotHasMember ||=
+                                            actor?.currentSpotKind === contracts_1.ZLinkSpotKind.User &&
+                                                actor.currentSpotId === spot.spotId &&
+                                                actor.currentSpotGeneration === snapshot.objectGeneration;
+                                    }
+                                }
+                                cursor = page.value.nextCursor;
+                            } while (cursor !== undefined);
+                            unavailable ||= snapshotHasMember;
+                            break;
+                        }
+                    }
+                }
+            }
+            if (unavailable || request?.actorRelocationPolicy !== 'disabled')
+                throw new contracts_2.ZLinkFrameworkException(contracts_2.ZLinkFrameworkErrorKind.Unavailable, 'Object owner lease is unavailable.');
         }
         else if (ownerLive &&
             descriptor.kind === 'found' &&
             reviveMeshDescriptor(decodeCanonicalDescriptorRecord(descriptor.value.bytes).descriptor).lifecycleGeneration === snapshot.allocation.descriptorLifecycleGeneration)
             return 'notReclaimable';
+        if (snapshot.allocation.state !== 'active' &&
+            (record.aggregate !== undefined || hasRelocationAuthority(snapshot.payload)))
+            return 'notReclaimable';
         const mutations = [
             { kind: 'delete', key: rowKey }
         ];
@@ -871,8 +963,8 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
                 });
             }
             catch (error) {
-                if (!(error instanceof contracts_1.ZLinkFrameworkException) ||
-                    error.kind !== contracts_1.ZLinkFrameworkErrorKind.DataLost)
+                if (!(error instanceof contracts_2.ZLinkFrameworkException) ||
+                    error.kind !== contracts_2.ZLinkFrameworkErrorKind.DataLost)
                     throw error;
                 const observed = await this.provider.read(rowKey, signal);
                 if (observed.kind === 'missing' ||
@@ -927,7 +1019,7 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
                 this.provider.read(leaseKey, signal)
             ]);
             const descriptor = liveTargetDescriptor(descriptorRead, leaseRead, request.target);
-            if (descriptor === undefined || descriptor.state !== contracts_1.ZLinkFrameworkRuntimeState.Serving) {
+            if (descriptor === undefined || descriptor.state !== contracts_2.ZLinkFrameworkRuntimeState.Serving) {
                 return { kind: 'conflict', current: { kind: 'missing', storeNow: current.storeNow } };
             }
             const [capacityRead, objectGenerationRead, authorityOwnerGenerationRead] = await Promise.all([
@@ -1204,6 +1296,14 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
             if (retentionMs <= 0) {
                 throw new RangeError('Creation terminal expiry must be the live operation deadline plus five minutes.');
             }
+            const actor = request.completion.kind === 'created'
+                ? (0, actor_authority_payload_codec_1.decodeActorAuthorityPayload)((0, service_relocation_runtime_1.serviceRelocationAuthorityApplicationPayload)(request.completion.readyPayload))
+                : undefined;
+            const membershipConditions = actor?.currentSpotKind === contracts_1.ZLinkSpotKind.User
+                ? await this.userSpotMembershipConditions(actor.currentSpotId, actor.currentSpotGeneration, signal, request.target.owner)
+                : [];
+            if (membershipConditions === undefined)
+                return { kind: 'stale' };
             const mutations = request.completion.kind === 'created'
                 ? [
                     {
@@ -1243,6 +1343,7 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
                 conditions: [
                     { kind: 'version', key: rowKey, expected: current.value.version },
                     { kind: 'missing', key: terminalRowKey },
+                    ...membershipConditions,
                     versionCondition(descriptorKey, descriptorRead),
                     leaseValueCondition(leaseKey, request.target.owner),
                     conditionFor(capacityRowKey, capacityRead)
@@ -1505,7 +1606,7 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
         return this.listOwnedLocations(`${PREFIX}spot:`, page, normalizeSpot, (value) => matchesSpot(value, filter), signal);
     }
     async updateActor(location, intent, signal) {
-        return this.updateOwnedLocation(actorKey(location.meshName, location.actorId), normalizeActor(location), intent, signal);
+        return this.updateOwnedLocation(actorKey(location.meshName, location.actorId), normalizeActor(location), intent, signal, location);
     }
     async removeActor(key, owner, signal) {
         return this.removeOwnedLocation(actorKey(key.meshName, key.actorId), owner, signal);
@@ -1874,7 +1975,37 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
             continuationToken: result.value.nextCursor?.value
         };
     }
-    async updateOwnedLocation(rowKey, location, intent, signal) {
+    async userSpotMembershipConditions(spotId, objectGeneration, signal, conditionedOwner) {
+        const key = authorityKey((0, authority_key_codec_1.encodeAuthorityKey)('user_spot', spotId).value);
+        const read = await this.provider.read(key, signal);
+        if (read.kind === 'missing')
+            return undefined;
+        const record = decodeAuthorityRecord(read.value.bytes);
+        const snapshot = record.snapshot;
+        if (record.aggregate !== undefined ||
+            snapshot.allocation.objectKind !== 'user_spot' ||
+            snapshot.allocation.state !== 'active' ||
+            snapshot.objectGeneration !== objectGeneration ||
+            (0, service_authority_payload_codec_1.decodeServiceReadySpotAuthority)(snapshot.payload)?.kind !== 'user_spot')
+            return undefined;
+        const leaseKey = ownerKey(snapshot.ownerId);
+        const lease = await this.provider.read(leaseKey, signal);
+        if (!sameLiveOwner(lease, snapshot))
+            return undefined;
+        return [
+            { kind: 'version', key, expected: read.value.version },
+            ...(conditionedOwner?.ownerId === snapshot.ownerId &&
+                conditionedOwner.leaseGeneration === snapshot.ownerLeaseGeneration
+                ? []
+                : [
+                    leaseValueCondition(leaseKey, {
+                        ownerId: snapshot.ownerId,
+                        leaseGeneration: snapshot.ownerLeaseGeneration
+                    })
+                ])
+        ];
+    }
+    async updateOwnedLocation(rowKey, location, intent, signal, membership) {
         const leaseKey = ownerKey(location.ownerId);
         const [lease, current] = await Promise.all([
             this.provider.read(leaseKey, signal),
@@ -1919,13 +2050,25 @@ class ZLinkLocationStoreRepository extends in_memory_location_store_1.ZLinkInMem
         else if (intent === 2) {
             return rejected(lease.value.storeNow);
         }
+        const previousMembership = current.kind === 'found' && membership !== undefined
+            ? decodeJson(current.value.bytes).descriptor
+            : undefined;
+        const membershipConditions = membership?.spotKind === contracts_1.ZLinkSpotKind.User &&
+            (previousMembership?.spotKind !== contracts_1.ZLinkSpotKind.User ||
+                String(previousMembership.spotId) !== String(membership.spotId) ||
+                BigInt(previousMembership.spotGeneration) !== membership.spotGeneration)
+            ? await this.userSpotMembershipConditions(String(membership.spotId), membership.spotGeneration, signal, { ownerId: location.ownerId, leaseGeneration: locationOwnerGeneration(location) })
+            : [];
+        if (membershipConditions === undefined)
+            return rejected(lease.value.storeNow);
         const result = await this.provider.write({
             conditions: [
                 leaseValueCondition(leaseKey, {
                     ownerId: location.ownerId,
                     leaseGeneration: locationOwnerGeneration(location)
                 }),
-                rowCondition
+                rowCondition,
+                ...membershipConditions
             ],
             mutations: [
                 {
@@ -2913,7 +3056,7 @@ function liveTargetDescriptor(descriptorRead, leaseRead, target) {
         descriptor.lifecycleGeneration === target.nodeLifecycleGeneration &&
         descriptor.ownerId === target.owner.ownerId &&
         descriptor.leaseGeneration === target.owner.leaseGeneration &&
-        descriptor.objectRole === contracts_1.ZLinkObjectRole.Server &&
+        descriptor.objectRole === contracts_2.ZLinkObjectRole.Server &&
         lease.ownerId === target.owner.ownerId &&
         BigInt(lease.leaseGeneration) === target.owner.leaseGeneration &&
         leaseRead.value.expiresAt !== undefined &&
@@ -2974,7 +3117,7 @@ function adjustCapacity(usage, delta, direction) {
         const key = capacityTypeKey(delta.spotType);
         const next = (spotTypes[key] ?? 0) + direction * delta.spotType.count;
         if (next < 0)
-            throw new contracts_1.ZLinkFrameworkException(contracts_1.ZLinkFrameworkErrorKind.DataLost, 'Provider capacity counter underflow.');
+            throw new contracts_2.ZLinkFrameworkException(contracts_2.ZLinkFrameworkErrorKind.DataLost, 'Provider capacity counter underflow.');
         if (next === 0)
             delete spotTypes[key];
         else
@@ -2983,7 +3126,7 @@ function adjustCapacity(usage, delta, direction) {
     const actors = usage.actors + direction * delta.actors;
     const spots = usage.spots + direction * delta.spots;
     if (actors < 0 || spots < 0)
-        throw new contracts_1.ZLinkFrameworkException(contracts_1.ZLinkFrameworkErrorKind.DataLost, 'Provider capacity counter underflow.');
+        throw new contracts_2.ZLinkFrameworkException(contracts_2.ZLinkFrameworkErrorKind.DataLost, 'Provider capacity counter underflow.');
     return { actors, spots, spotTypes };
 }
 function capacityTypeKey(value) {
@@ -3308,10 +3451,10 @@ function throwIfOperationExpired(signal, deadlineUnixMs) {
 }
 // Store SPI §6: preserve caller failures and classify provider failures once.
 function locationStoreProviderFailure(error, signal) {
-    if (error instanceof contracts_1.ZLinkFrameworkException ||
+    if (error instanceof contracts_2.ZLinkFrameworkException ||
         error instanceof TypeError ||
         error instanceof RangeError ||
         signal?.aborted === true)
         return error;
-    return new contracts_1.ZLinkFrameworkException(contracts_1.ZLinkFrameworkErrorKind.Unavailable, 'Location Store provider is unavailable.', error);
+    return new contracts_2.ZLinkFrameworkException(contracts_2.ZLinkFrameworkErrorKind.Unavailable, 'Location Store provider is unavailable.', error);
 }