@zlink-systems/framework 0.30.0 → 0.30.2

package/dist/runtime/foundation/service-stateful-wire-codec.d.ts

@@ -40,6 +40,7 @@ export declare const M6bServiceWireCommand: {
     readonly boundSessionReplaced: 51;
     readonly relocationState: 52;
     readonly relocationFailed: 53;
+    readonly boundSessionClose: 54;
 };
 export interface ServiceWireOperationId {
     readonly high: bigint;
@@ -114,6 +115,7 @@ interface ServiceWireRelocationBase {
 }
 export interface ServiceMaintenanceRelocationPrepare extends ServiceWireRelocationBase {
     readonly kind: 'prepare';
+    readonly deadlineUnixMs: bigint;
     readonly target: ServiceWireRelocationTarget;
     readonly initiatorRole: ServiceWireRelocationRole;
     readonly object: ServiceWireRelocationObject;
@@ -126,11 +128,6 @@ export interface ServiceMaintenanceRelocationPrepare extends ServiceWireRelocati
     /** CRC-32C (Castagnoli) over the fully assembled payload bytes. */
     readonly payloadChecksumCrc32c: number;
     readonly applicationVersion: bigint;
-    /** NODE-INTERNAL; serialized as extra frames after canonical command 40. */
-    readonly nodeInternalBoundSessions?: readonly {
-        readonly participantKey: string;
-        readonly payload: Uint8Array;
-    }[];
 }
 export interface ServiceMaintenanceRelocationReady extends ServiceWireRelocationBase {
     readonly kind: 'ready';
@@ -252,6 +249,8 @@ export interface ServiceSessionRelocationOwnerFence {
     readonly bindingGeneration: bigint;
 }
 export interface ServiceSessionRelocationSeal {
+    readonly targetNodeRid: string;
+    readonly targetNodeGeneration: bigint;
     readonly relocation: ServiceWireOperationId;
     readonly coordinator: ServiceWireRelocationCoordinatorFence;
     readonly senderRole: 'source' | 'coordinator';
@@ -259,6 +258,7 @@ export interface ServiceSessionRelocationSeal {
     readonly session: ServiceSessionRelocationOwnerFence;
 }
 export interface ServiceSessionRelocationSealed {
+    readonly sealResult: 'sealed' | 'bindingAbsent';
     readonly relocation: ServiceWireOperationId;
     readonly coordinator: ServiceWireRelocationCoordinatorFence;
     readonly actor: ServiceBoundSessionActorAuthority;
@@ -457,6 +457,14 @@ export type ServiceStatefulWireRecord = {
     readonly actor: ServiceActorRouteFence;
     readonly sessionRid: string;
     readonly binding: ServiceBoundSessionTransition;
+} | {
+    readonly kind: 'boundSessionClose';
+    readonly correlation: bigint;
+    readonly actor: {
+        readonly actorId: string;
+        readonly generation: bigint;
+    };
+    readonly session: ServiceRetiredBoundSessionRouteFence;
 } | {
     readonly kind: 'boundSessionReplaced';
     readonly actorAuthority: ServiceBoundSessionActorAuthority;
@@ -574,7 +582,7 @@ export declare function decodeMaintenanceReplyRelay(frames: readonly Uint8Array[
 export declare function encodeMaintenanceReplyRelayAck(value: ServiceMaintenanceReplyRelayAck): Buffer;
 /** Decodes canonical service-wire command 46. */
 export declare function decodeMaintenanceReplyRelayAck(frame: Uint8Array): ServiceMaintenanceReplyRelayAck;
-export declare function decodeStatefulReply(frame: Uint8Array, expectedCorrelation: bigint, operationKind: 'spotRequest' | 'actorRequest' | 'actorLookup' | 'actorDestroy' | 'actorJoin' | 'streamBind' | 'streamUnbind' | 'instanceSpotRequest' | 'userSpotCreate' | 'userSpotClose' | 'actorCreate', hasPayload?: boolean): ServiceStatefulReply;
+export declare function decodeStatefulReply(frame: Uint8Array, expectedCorrelation: bigint, operationKind: 'spotRequest' | 'actorRequest' | 'actorLookup' | 'actorDestroy' | 'actorJoin' | 'streamBind' | 'streamUnbind' | 'boundSessionClose' | 'instanceSpotRequest' | 'userSpotCreate' | 'userSpotClose' | 'actorCreate', hasPayload?: boolean): ServiceStatefulReply;
 export declare function sessionBindingFromWire(actor: ServiceActorRef, sessionRid: string, sessionOwnerNodeRid: string, generation: bigint, membershipEpoch: bigint, sessionOwnerNodeGeneration?: bigint, sessionOwnerId?: string, sessionOwnerLeaseGeneration?: bigint): ServiceSessionBinding;
 export declare function decodeServiceWireFrozenRecord(bytes: Uint8Array): ServiceWireFrozenRecord;
 export declare function encodeServiceWireFrozenRecord(record: ServiceWireFrozenRecord): Buffer;

package/dist/runtime/foundation/service-stateful-wire-codec.js

@@ -35,12 +35,14 @@ exports.sessionBindingFromWire = sessionBindingFromWire;
 exports.decodeServiceWireFrozenRecord = decodeServiceWireFrozenRecord;
 exports.encodeServiceWireFrozenRecord = encodeServiceWireFrozenRecord;
 exports.encodeServiceWireFrozenActorApplicationRecord = encodeServiceWireFrozenActorApplicationRecord;
+const routing_id_1 = require("../routing-id");
+const service_wire_codec_generated_1 = require("../protocol/service_wire_codec.generated");
 const stream_wire_1 = require("@zlink-systems/stream-wire");
 const InternalDefaults_1 = require("../../contracts/Configuration/InternalDefaults");
 const framework_errors_internal_1 = require("../framework-errors-internal");
-const service_wire_codec_generated_1 = require("../protocol/service_wire_codec.generated");
+const service_wire_codec_generated_2 = require("../protocol/service_wire_codec.generated");
 const service_wire_pilot_codec_generated_1 = require("../protocol/service_wire_pilot_codec.generated");
-const routing_id_1 = require("../routing-id");
+const routing_id_2 = require("../routing-id");
 const service_runtime_contracts_1 = require("./service-runtime-contracts");
 const service_wire_binary_primitives_1 = require("./service-wire-binary-primitives");
 const service_wire_constants_generated_1 = require("./service-wire-constants.generated");
@@ -58,17 +60,13 @@ Object.defineProperty(exports, "RELOCATION_STATE_CHUNK_DATA_MAX_BYTES", { enumer
 exports.M6bServiceWireFlag = service_wire_constants_generated_1.ServiceWireFlag;
 function serviceSessionRelocationIdentityKey(value) {
     const actor = 'targetNodeGeneration' in value.actor ? value.actor.actor : value.actor;
-    //  Session owner가 seal을 대조할 때 쓰는 값만 넣는다 — Session과 Actor binding
-    //  §8.1 "Session owner는 다음 값만 검증한다". coordinator identity는 transport가
-    //  검증하는 wire fence이므로 여기서 다시 대조하지 않는다.
-    return [
+    // Session–Actor binding §8.3: all original fields are checked against the
+    // recorded request; only relocation identity and ActorId select the record.
+    return JSON.stringify([
         value.relocation.high.toString(),
         value.relocation.low.toString(),
-        actor.actorId,
-        actor.generation.toString(),
-        value.session.sessionRid,
-        value.session.bindingGeneration.toString()
-    ].join(':');
+        actor.actorId
+    ]);
 }
 function toGeneratedRoutingId(value, field) {
     return (0, service_wire_binary_primitives_1.encodeServiceWireRoutingId)(value, field, 0xff, fail);
@@ -294,6 +292,8 @@ function fromGeneratedSessionOwnerFence(value) {
 }
 function toGeneratedSessionRelocationSeal(value) {
     return {
+        targetNodeRid: toGeneratedRoutingId(value.targetNodeRid, 'targetNodeRid'),
+        targetNodeGeneration: value.targetNodeGeneration,
         relocation: value.relocation,
         coordinator: toGeneratedCoordinatorFence(value.coordinator),
         senderRole: value.senderRole,
@@ -303,6 +303,8 @@ function toGeneratedSessionRelocationSeal(value) {
 }
 function fromGeneratedSessionRelocationSeal(value) {
     return {
+        targetNodeRid: fromGeneratedRoutingId(value.targetNodeRid, 'targetNodeRid'),
+        targetNodeGeneration: value.targetNodeGeneration,
         relocation: value.relocation,
         coordinator: fromGeneratedCoordinatorFence(value.coordinator),
         senderRole: value.senderRole,
@@ -315,11 +317,13 @@ function toGeneratedSessionRelocationSealed(value) {
         relocation: value.relocation,
         coordinator: toGeneratedCoordinatorFence(value.coordinator),
         actor: toGeneratedRouteFence(value.actor),
-        ...toGeneratedSessionOwnerFence(value.session)
+        ...toGeneratedSessionOwnerFence(value.session),
+        sealResult: value.sealResult
     };
 }
 function fromGeneratedSessionRelocationSealed(value) {
     return {
+        sealResult: value.sealResult,
         relocation: value.relocation,
         coordinator: fromGeneratedCoordinatorFence(value.coordinator),
         actor: fromGeneratedRouteFence(value.actor),
@@ -384,6 +388,7 @@ function fromGeneratedRelocationBase(value) {
 function fromGeneratedRelocationPrepare(value) {
     return {
         kind: 'prepare',
+        deadlineUnixMs: value.deadlineUnixMs,
         ...fromGeneratedRelocationBase(value),
         target: fromGeneratedTargetFence(value.target),
         initiatorRole: value.initiatorRole,
@@ -531,11 +536,11 @@ function encodeSpotHeader(kind, sourceSpotId, target, correlation, operation = {
         payload: STATEFUL_HEADER_PAYLOAD,
         ...(metadataFrame === undefined
             ? {}
-            : { metadata: (0, service_wire_codec_generated_1.decodeMetadataFrame)(metadataFrame, STATEFUL_MESSAGE_CONTEXT) })
+            : { metadata: (0, service_wire_codec_generated_2.decodeMetadataFrame)(metadataFrame, STATEFUL_MESSAGE_CONTEXT) })
     };
     const frames = kind === 'spotSend'
-        ? (0, service_wire_codec_generated_1.encodeSpotSendCommand)({ command: kind, ...common }, STATEFUL_MESSAGE_CONTEXT)
-        : (0, service_wire_codec_generated_1.encodeSpotRequestCommand)({
+        ? (0, service_wire_codec_generated_2.encodeSpotSendCommand)({ command: kind, ...common }, STATEFUL_MESSAGE_CONTEXT)
+        : (0, service_wire_codec_generated_2.encodeSpotRequestCommand)({
             command: kind,
             ...common,
             correlation: requirePositive(correlation, 'correlation')
@@ -566,8 +571,8 @@ function encodeActorHeader(kind, target, correlation, sourceActor, boundSession,
         payload: STATEFUL_HEADER_PAYLOAD
     };
     const frames = kind === 'actorSend'
-        ? (0, service_wire_codec_generated_1.encodeActorSendCommand)({ command: kind, ...common }, STATEFUL_MESSAGE_CONTEXT)
-        : (0, service_wire_codec_generated_1.encodeActorRequestCommand)({
+        ? (0, service_wire_codec_generated_2.encodeActorSendCommand)({ command: kind, ...common }, STATEFUL_MESSAGE_CONTEXT)
+        : (0, service_wire_codec_generated_2.encodeActorRequestCommand)({
             command: kind,
             ...common,
             correlation: requirePositive(correlation, 'correlation')
@@ -618,7 +623,7 @@ function decodeSessionRelocationRoute(frame) {
     return fromGeneratedSessionRelocationRoute((0, service_wire_pilot_codec_generated_1.decodeSessionRelocationRoute44)(frame));
 }
 function encodeInstanceSpotHeader(route, sourceNodeGeneration, sourceNodeRid, sourceSpotId, operationKind, operation, replyRouteId, hasMetadata = false, instanceIntent = false) {
-    const encodedRoute = (0, service_wire_codec_generated_1.encodeInstanceRouteV1)({
+    const encodedRoute = (0, service_wire_codec_generated_2.encodeInstanceRouteV1)({
         routeKind: 'ready',
         targetNodeRid: toGeneratedRoutingId(route.targetNodeRid, 'targetNodeRid'),
         targetNodeGeneration: route.targetNodeGeneration,
@@ -651,7 +656,7 @@ function encodeInstanceSpotActivationHeader(target, sourceNodeGeneration, source
     if (operationKind === 'send' && replyRouteId !== undefined) {
         throw new RangeError('Instance Spot send must not carry a reply route.');
     }
-    const encodedRoute = (0, service_wire_codec_generated_1.encodeInstanceRouteV1)({
+    const encodedRoute = (0, service_wire_codec_generated_2.encodeInstanceRouteV1)({
         routeKind: 'coldActivation',
         targetNodeRid: toGeneratedRoutingId(target.targetNodeRid, 'targetNodeRid'),
         targetNodeGeneration: target.targetNodeGeneration,
@@ -696,14 +701,14 @@ function decodeStatefulHeader(frame, payloadFrame, metadataFrame) {
                 frame,
                 ...(metadataFrame === undefined ? [] : [metadataFrame]),
                 payloadFrame ??
-                    (0, service_wire_codec_generated_1.encodeApplicationPayloadEnvelopeV1)(STATEFUL_HEADER_PAYLOAD, STATEFUL_MESSAGE_CONTEXT)
+                    (0, service_wire_codec_generated_2.encodeApplicationPayloadEnvelopeV1)(STATEFUL_HEADER_PAYLOAD, STATEFUL_MESSAGE_CONTEXT)
             ];
             try {
                 if (frame[3] === exports.M6bServiceWireCommand.spotSend ||
                     frame[3] === exports.M6bServiceWireCommand.spotRequest) {
                     const decoded = frame[3] === exports.M6bServiceWireCommand.spotSend
-                        ? (0, service_wire_codec_generated_1.decodeSpotSendCommand)(frames, STATEFUL_MESSAGE_CONTEXT)
-                        : (0, service_wire_codec_generated_1.decodeSpotRequestCommand)(frames, STATEFUL_MESSAGE_CONTEXT);
+                        ? (0, service_wire_codec_generated_2.decodeSpotSendCommand)(frames, STATEFUL_MESSAGE_CONTEXT)
+                        : (0, service_wire_codec_generated_2.decodeSpotRequestCommand)(frames, STATEFUL_MESSAGE_CONTEXT);
                     return {
                         kind: decoded.command,
                         ...(decoded.command === 'spotRequest' ? { correlation: decoded.correlation } : {}),
@@ -723,8 +728,8 @@ function decodeStatefulHeader(frame, payloadFrame, metadataFrame) {
                     };
                 }
                 const decoded = frame[3] === exports.M6bServiceWireCommand.actorSend
-                    ? (0, service_wire_codec_generated_1.decodeActorSendCommand)(frames, STATEFUL_MESSAGE_CONTEXT)
-                    : (0, service_wire_codec_generated_1.decodeActorRequestCommand)(frames, STATEFUL_MESSAGE_CONTEXT);
+                    ? (0, service_wire_codec_generated_2.decodeActorSendCommand)(frames, STATEFUL_MESSAGE_CONTEXT)
+                    : (0, service_wire_codec_generated_2.decodeActorRequestCommand)(frames, STATEFUL_MESSAGE_CONTEXT);
                 const source = decoded.sourceActor;
                 return {
                     kind: decoded.command,
@@ -859,6 +864,19 @@ function decodeStatefulHeader(frame, payloadFrame, metadataFrame) {
                     : { state: 'tombstone', retiredGeneration: generation }
             };
         }
+        case exports.M6bServiceWireCommand.boundSessionClose: {
+            const decoded = (0, service_wire_codec_generated_1.decodeBoundSessionCloseCommand)([frame], {});
+            return {
+                kind: 'boundSessionClose',
+                correlation: decoded.correlation,
+                actor: { actorId: decoded.actor.actorId, generation: decoded.actor.objectGeneration },
+                session: {
+                    ...decoded.session,
+                    sessionOwnerNodeRid: (0, routing_id_1.decodeRoutingId)(Buffer.from(decoded.session.sessionOwnerNodeRid).toString('utf8'), Buffer.from(decoded.session.sessionOwnerNodeRid).toString('hex')),
+                    sessionRid: (0, routing_id_1.decodeRoutingId)(Buffer.from(decoded.session.sessionRid).toString('utf8'), Buffer.from(decoded.session.sessionRid).toString('hex'))
+                }
+            };
+        }
         case exports.M6bServiceWireCommand.boundSessionReplaced: {
             requireFlags(command.flags, 0);
             const actor = reader.actorRef('actorAuthority.actor');
@@ -1001,7 +1019,8 @@ function encodeMaintenanceRelocationControl(value) {
                 payloadTotalLength: value.payloadTotalLength,
                 payloadChunkCount: value.payloadChunkCount,
                 payloadChecksumCrc32c: value.payloadChecksumCrc32c,
-                applicationVersion: value.applicationVersion
+                applicationVersion: value.applicationVersion,
+                deadlineUnixMs: value.deadlineUnixMs
             }));
         case 'ready':
             return Buffer.from((0, service_wire_pilot_codec_generated_1.encodeRelocationReady30)({
@@ -1104,6 +1123,8 @@ function decodeStatefulReply(frame, expectedCorrelation, operationKind, hasPaylo
     const terminalResult = reader.u32('terminalResult');
     const failureCode = reader.u32('failureCode');
     validateReplyTerminal(terminalResult, failureCode, hasPayload);
+    if (operationKind === 'boundSessionClose' && hasPayload)
+        fail('A bound Session close reply cannot carry application payload.');
     let tail;
     if (terminalResult === 0) {
         if (operationKind === 'actorLookup') {
@@ -1415,7 +1436,7 @@ function concat(...parts) {
 }
 function decodeCanonicalInstanceRoute(bytes) {
     try {
-        return (0, service_wire_codec_generated_1.decodeInstanceRouteV1)(bytes, STATEFUL_MESSAGE_CONTEXT);
+        return (0, service_wire_codec_generated_2.decodeInstanceRouteV1)(bytes, STATEFUL_MESSAGE_CONTEXT);
     }
     catch (error) {
         if (error instanceof RangeError)
@@ -1715,7 +1736,7 @@ function encodeServiceWireFrozenActorApplicationRecord(input) {
 function sameFrozenRecordSummary(left, right) {
     return (left.recordKind === right.recordKind &&
         left.sourceKind === right.sourceKind &&
-        (0, routing_id_1.routingIdsEqual)(left.source.nodeRid, right.source.nodeRid) &&
+        (0, routing_id_2.routingIdsEqual)(left.source.nodeRid, right.source.nodeRid) &&
         left.source.nodeGeneration === right.source.nodeGeneration &&
         left.source.ownerId === right.source.ownerId &&
         left.source.leaseGeneration === right.source.leaseGeneration &&

package/dist/runtime/foundation/service-topology-registry.d.ts

@@ -24,8 +24,13 @@ export interface ServiceNodeDescriptor {
     readonly activeCapacityUsed: number;
     readonly pendingCapacityUsed: number;
 }
-export interface AdmittedServicePeer {
+interface ServiceRouteAdmission {
     readonly descriptor: ServiceNodeDescriptor;
+    readonly descriptorBytes?: Uint8Array;
+    readonly connectionId?: string | bigint;
+    readonly remoteAdmitReceived?: boolean;
+}
+export interface AdmittedServicePeer extends ServiceRouteAdmission {
     readonly connectionId: string | bigint;
     readonly liveness?: ServiceLivenessConnection;
 }
@@ -46,15 +51,19 @@ export declare class ServiceTopologyRegistry {
     constructor(local: ServiceNodeDescriptor);
     localDescriptor(): ServiceNodeDescriptor;
     publishLocal(descriptor: ServiceNodeDescriptor): void;
-    admit(descriptor: ServiceNodeDescriptor, connectionId: string | bigint, expected?: ServicePeerAdmissionExpectation, admitLiveness?: () => ServiceLivenessConnection): PeerAdmissionResult;
+    admit(descriptor: ServiceNodeDescriptor, connectionId: string | bigint, expected?: ServicePeerAdmissionExpectation, admitLiveness?: () => ServiceLivenessConnection, command?: number, descriptorBytes?: Uint8Array): PeerAdmissionResult;
     disconnect(nodeRoutingId: string, connectionId: string | bigint): boolean;
     peer(nodeRoutingId: string): AdmittedServicePeer | undefined;
+    routeAdmission(nodeRoutingId: string): ServiceRouteAdmission | undefined;
+    admittedPeer(nodeRoutingId: string): AdmittedServicePeer | undefined;
     peers(): readonly AdmittedServicePeer[];
     private peersCore;
     notRequiredPeers(): readonly ServiceNodeDescriptor[];
     replaceDiscoveredNotRequired(descriptors: readonly ServiceNodeDescriptor[]): void;
     forgetNotRequired(nodeRoutingId: string): void;
     knownDescriptor(nodeRoutingId: string): ServiceNodeDescriptor | undefined;
+    isObjectClientNodeDirectTarget(nodeRoutingId: string): boolean;
+    private knownPeerDescriptor;
     hasKnownChannelTarget(channelName: string): boolean;
     private remember;
     selectChannel(channelName: string, isReady?: (peer: AdmittedServicePeer) => boolean): AdmittedServicePeer | undefined;
@@ -72,3 +81,4 @@ export declare class ServiceTopologyRegistry {
 }
 export declare function validateDescriptor(descriptor: ServiceNodeDescriptor): void;
 export declare function sameServiceNodeDescriptor(left: ServiceNodeDescriptor, right: ServiceNodeDescriptor): boolean;
+export {};

package/dist/runtime/foundation/service-topology-registry.js

@@ -35,13 +35,13 @@ class ServiceTopologyRegistry {
         }
         this.local = cloneDescriptor(descriptor);
         for (const [nodeRoutingId, remote] of this.notRequiredByRid) {
-            if (!(0, route_mesh_connection_policy_1.descriptorConnectionNotRequired)(this.local, remote)) {
+            if (!(0, route_mesh_connection_policy_1.descriptorConnectionNotRequired)(this.local, remote.descriptor)) {
                 this.notRequiredByRid.delete(nodeRoutingId);
             }
         }
         this.rebuildSelections();
     }
-    admit(descriptor, connectionId, expected, admitLiveness) {
+    admit(descriptor, connectionId, expected, admitLiveness, command = service_wire_constants_generated_1.ServiceWireCommand.hello, descriptorBytes) {
         try {
             validateDescriptor(descriptor);
             if (typeof connectionId === 'string')
@@ -63,32 +63,46 @@ class ServiceTopologyRegistry {
                 descriptor.lifecycleGeneration !== expected.lifecycleGeneration)) {
             return 'invalidDescriptor';
         }
+        const current = this.peersByRid.get(descriptor.nodeRoutingId);
+        const previous = current ?? this.notRequiredByRid.get(descriptor.nodeRoutingId);
+        const receivedAdmit = command === service_wire_constants_generated_1.ServiceWireCommand.admit ||
+            (previous?.connectionId === connectionId && previous.remoteAdmitReceived === true);
+        if (previous !== undefined &&
+            previous.descriptor.lifecycleGeneration === descriptor.lifecycleGeneration) {
+            const existing = previous.descriptor;
+            if (descriptor.descriptorRevision < existing.descriptorRevision ||
+                (descriptor.descriptorRevision === existing.descriptorRevision &&
+                    !(previous.descriptorBytes !== undefined && descriptorBytes !== undefined
+                        ? Buffer.compare(previous.descriptorBytes, descriptorBytes) === 0
+                        : sameServiceNodeDescriptor(existing, descriptor))) ||
+                (descriptor.descriptorRevision > existing.descriptorRevision &&
+                    command !== service_wire_constants_generated_1.ServiceWireCommand.update))
+                return 'staleDescriptor';
+            if (descriptor.descriptorRevision > existing.descriptorRevision &&
+                !sameImmutableDescriptor(existing, descriptor))
+                return 'invalidDescriptor';
+        }
+        else if (command === service_wire_constants_generated_1.ServiceWireCommand.update) {
+            return 'staleDescriptor';
+        }
+        const admission = {
+            descriptor: cloneDescriptor(descriptor),
+            ...(descriptorBytes === undefined ? {} : { descriptorBytes: Buffer.from(descriptorBytes) }),
+            connectionId,
+            remoteAdmitReceived: receivedAdmit
+        };
         if ((0, route_mesh_connection_policy_1.descriptorConnectionNotRequired)(this.local, descriptor)) {
             this.peersByRid.delete(descriptor.nodeRoutingId);
             this.remember(descriptor);
-            this.notRequiredByRid.set(descriptor.nodeRoutingId, cloneDescriptor(descriptor));
+            this.notRequiredByRid.set(descriptor.nodeRoutingId, admission);
             this.rebuildSelections();
             return 'notRequired';
         }
         this.notRequiredByRid.delete(descriptor.nodeRoutingId);
-        const current = this.peersByRid.get(descriptor.nodeRoutingId);
-        if (current !== undefined &&
-            current.descriptor.lifecycleGeneration === descriptor.lifecycleGeneration &&
-            descriptor.descriptorRevision > current.descriptor.descriptorRevision &&
-            !sameImmutableDescriptor(current.descriptor, descriptor)) {
-            return 'invalidDescriptor';
-        }
-        if (current !== undefined &&
-            current.descriptor.lifecycleGeneration === descriptor.lifecycleGeneration &&
-            (current.descriptor.descriptorRevision > descriptor.descriptorRevision ||
-                (current.descriptor.descriptorRevision === descriptor.descriptorRevision &&
-                    !sameServiceNodeDescriptor(current.descriptor, descriptor)))) {
-            return 'staleDescriptor';
-        }
         // Core selects the one route per RID (Core ROUTER §10.1); an admission on
         // that route replaces the admission of a route it replaced.
         this.peersByRid.set(descriptor.nodeRoutingId, {
-            descriptor: cloneDescriptor(descriptor),
+            ...admission,
             connectionId,
             liveness: admitLiveness?.() ?? current?.liveness
         });
@@ -105,9 +119,15 @@ class ServiceTopologyRegistry {
         return true;
     }
     peer(nodeRoutingId) {
-        const peer = this.peersByRid.get(nodeRoutingId);
+        const peer = this.admittedPeer(nodeRoutingId);
         return peer === undefined ? undefined : clonePeer(peer);
     }
+    routeAdmission(nodeRoutingId) {
+        return this.peersByRid.get(nodeRoutingId) ?? this.notRequiredByRid.get(nodeRoutingId);
+    }
+    admittedPeer(nodeRoutingId) {
+        return this.peersByRid.get(nodeRoutingId);
+    }
     peers() {
         return this.peersCore();
     }
@@ -118,8 +138,8 @@ class ServiceTopologyRegistry {
     }
     notRequiredPeers() {
         return [...this.notRequiredByRid.values()]
-            .sort((left, right) => compareOrdinal(left.nodeRoutingId, right.nodeRoutingId))
-            .map(cloneDescriptor);
+            .sort((left, right) => compareOrdinal(left.descriptor.nodeRoutingId, right.descriptor.nodeRoutingId))
+            .map((peer) => cloneDescriptor(peer.descriptor));
     }
     replaceDiscoveredNotRequired(descriptors) {
         const next = new Map();
@@ -128,13 +148,16 @@ class ServiceTopologyRegistry {
             if (descriptor.meshName === this.local.meshName &&
                 descriptor.nodeRoutingId !== this.local.nodeRoutingId &&
                 (0, route_mesh_connection_policy_1.descriptorConnectionNotRequired)(this.local, descriptor)) {
-                next.set(descriptor.nodeRoutingId, cloneDescriptor(descriptor));
+                next.set(descriptor.nodeRoutingId, {
+                    ...this.notRequiredByRid.get(descriptor.nodeRoutingId),
+                    descriptor: cloneDescriptor(descriptor)
+                });
             }
         }
         this.notRequiredByRid.clear();
-        for (const [nodeRoutingId, descriptor] of next) {
-            this.notRequiredByRid.set(nodeRoutingId, descriptor);
-            this.remember(descriptor);
+        for (const [nodeRoutingId, admission] of next) {
+            this.notRequiredByRid.set(nodeRoutingId, admission);
+            this.remember(admission.descriptor);
         }
         this.rebuildSelections();
     }
@@ -143,10 +166,21 @@ class ServiceTopologyRegistry {
             this.rebuildSelections();
     }
     knownDescriptor(nodeRoutingId) {
-        const admitted = this.peersByRid.get(nodeRoutingId)?.descriptor;
-        const descriptor = admitted ?? this.notRequiredByRid.get(nodeRoutingId) ?? this.knownByRid.get(nodeRoutingId);
+        const descriptor = this.knownPeerDescriptor(nodeRoutingId);
         return descriptor === undefined ? undefined : cloneDescriptor(descriptor);
     }
+    isObjectClientNodeDirectTarget(nodeRoutingId) {
+        const descriptor = nodeRoutingId === this.local.nodeRoutingId
+            ? this.local
+            : this.knownPeerDescriptor(nodeRoutingId);
+        return descriptor?.objectRole === 'client';
+    }
+    knownPeerDescriptor(nodeRoutingId) {
+        const admitted = this.peersByRid.get(nodeRoutingId)?.descriptor;
+        return (admitted ??
+            this.notRequiredByRid.get(nodeRoutingId)?.descriptor ??
+            this.knownByRid.get(nodeRoutingId));
+    }
     hasKnownChannelTarget(channelName) {
         requireText(channelName, 'channelName');
         return [...this.knownByRid.values()].some((descriptor) => (descriptor.state === 'serving' ||

package/dist/runtime/foundation/service-wire-binary-primitives.d.ts

@@ -5,9 +5,14 @@ export declare const SERVICE_WIRE_FLAGS_OFFSET: number;
 export declare const SERVICE_WIRE_PREFIX_SIZE: number;
 export declare const SERVICE_WIRE_TEXT8_MAX_BYTES = 255;
 export type ServiceWireInvalid = (message: string) => never;
+/**
+ * Validates text for the service wire and returns its UTF-8 byte length. An
+ * unpaired UTF-16 surrogate is rejected instead of being replaced.
+ */
+export declare function canonicalServiceWireTextLength(value: string, field: string, maximumBytes: number, invalid: ServiceWireInvalid): number;
 /** Encodes text without silently replacing an unpaired UTF-16 surrogate. */
 export declare function encodeCanonicalServiceWireText(value: string, field: string, maximumBytes: number, invalid: ServiceWireInvalid): Buffer;
-/** Decodes schema text and rejects Node's replacement-character fallback. */
+/** Decodes schema text in place and rejects non-canonical UTF-8 and NUL. */
 export declare function decodeCanonicalServiceWireText(bytes: Uint8Array, field: string, invalid: ServiceWireInvalid): string;
 /** Preserves the schema's binary-safe RoutingId bytes. */
 export declare function encodeServiceWireRoutingId(value: RoutingId, field: string, maximumBytes: number, invalid: ServiceWireInvalid): Buffer;

package/dist/runtime/foundation/service-wire-binary-primitives.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SERVICE_WIRE_TEXT8_MAX_BYTES = exports.SERVICE_WIRE_PREFIX_SIZE = exports.SERVICE_WIRE_FLAGS_OFFSET = exports.SERVICE_WIRE_COMMAND_OFFSET = exports.SERVICE_WIRE_MAJOR_OFFSET = void 0;
+exports.canonicalServiceWireTextLength = canonicalServiceWireTextLength;
 exports.encodeCanonicalServiceWireText = encodeCanonicalServiceWireText;
 exports.decodeCanonicalServiceWireText = decodeCanonicalServiceWireText;
 exports.encodeServiceWireRoutingId = encodeServiceWireRoutingId;
@@ -11,24 +12,39 @@ exports.SERVICE_WIRE_COMMAND_OFFSET = exports.SERVICE_WIRE_MAJOR_OFFSET + 1;
 exports.SERVICE_WIRE_FLAGS_OFFSET = exports.SERVICE_WIRE_COMMAND_OFFSET + 1;
 exports.SERVICE_WIRE_PREFIX_SIZE = exports.SERVICE_WIRE_FLAGS_OFFSET + 1;
 exports.SERVICE_WIRE_TEXT8_MAX_BYTES = 255;
-/** Encodes text without silently replacing an unpaired UTF-16 surrogate. */
-function encodeCanonicalServiceWireText(value, field, maximumBytes, invalid) {
-    const bytes = Buffer.from(value, 'utf8');
-    if (bytes.byteLength < 1 ||
-        bytes.byteLength > maximumBytes ||
+// Fatal decoding accepts exactly the canonical UTF-8 encodings; a leading
+// U+FEFF stays part of the value.
+const CANONICAL_UTF8 = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true });
+/**
+ * Validates text for the service wire and returns its UTF-8 byte length. An
+ * unpaired UTF-16 surrogate is rejected instead of being replaced.
+ */
+function canonicalServiceWireTextLength(value, field, maximumBytes, invalid) {
+    const length = Buffer.byteLength(value, 'utf8');
+    if (length < 1 ||
+        length > maximumBytes ||
         value.includes('\0') ||
-        bytes.toString('utf8') !== value) {
+        !value.isWellFormed()) {
         invalid(`${field} must be 1..${maximumBytes} canonical UTF-8 bytes without NUL.`);
     }
-    return bytes;
+    return length;
+}
+/** Encodes text without silently replacing an unpaired UTF-16 surrogate. */
+function encodeCanonicalServiceWireText(value, field, maximumBytes, invalid) {
+    canonicalServiceWireTextLength(value, field, maximumBytes, invalid);
+    return Buffer.from(value, 'utf8');
 }
-/** Decodes schema text and rejects Node's replacement-character fallback. */
+/** Decodes schema text in place and rejects non-canonical UTF-8 and NUL. */
 function decodeCanonicalServiceWireText(bytes, field, invalid) {
-    const encoded = Buffer.from(bytes);
-    const value = encoded.toString('utf8');
-    if (value.includes('\0') || !Buffer.from(value, 'utf8').equals(encoded)) {
+    let value;
+    try {
+        value = CANONICAL_UTF8.decode(bytes);
+    }
+    catch {
         invalid(`${field} is not canonical UTF-8 without NUL.`);
     }
+    if (value.includes('\0'))
+        invalid(`${field} is not canonical UTF-8 without NUL.`);
     return value;
 }
 /** Preserves the schema's binary-safe RoutingId bytes. */

package/dist/runtime/foundation/service-wire-constants.generated.d.ts

@@ -45,6 +45,7 @@ export declare const ServiceWireCommand: {
     readonly boundSessionReplaced: 51;
     readonly relocationState: 52;
     readonly relocationFailed: 53;
+    readonly boundSessionClose: 54;
 };
 export declare const ServiceWireFlag: {
     readonly metadata: 1;

package/dist/runtime/foundation/service-wire-constants.generated.js

@@ -49,6 +49,7 @@ exports.ServiceWireCommand = {
     boundSessionReplaced: 51,
     relocationState: 52,
     relocationFailed: 53,
+    boundSessionClose: 54,
 };
 exports.ServiceWireFlag = {
     metadata: 1,

package/dist/runtime/foundation/service-wire-m6a-codec.d.ts

@@ -45,6 +45,7 @@ export declare const M6aServiceWireCommand: {
     readonly boundSessionReplaced: 51;
     readonly relocationState: 52;
     readonly relocationFailed: 53;
+    readonly boundSessionClose: 54;
 };
 export interface ServiceApplicationPayload {
     readonly packetName: string;
@@ -66,11 +67,11 @@ export declare class ServiceWireProtocolError extends Error {
 }
 export declare function encodeNodeSendHeader(): Buffer;
 export declare function encodeNodeRequestHeader(correlation: bigint): Buffer;
-export declare function decodeNodeRequestHeader(frame: Uint8Array): bigint;
+export declare function decodeNodeRequestHeader(frame: Uint8Array, header?: ServiceWireHeader): bigint;
 export declare function encodeChannelSendHeader(channelName: string): Buffer;
-export declare function decodeChannelSendHeader(frame: Uint8Array): string;
+export declare function decodeChannelSendHeader(frame: Uint8Array, header?: ServiceWireHeader): string;
 export declare function encodeChannelRequestHeader(correlation: bigint, channelName: string): Buffer;
-export declare function decodeChannelRequestHeader(frame: Uint8Array): {
+export declare function decodeChannelRequestHeader(frame: Uint8Array, header?: ServiceWireHeader): {
     readonly correlation: bigint;
     readonly channelName: string;
 };
@@ -90,6 +91,15 @@ export declare function decodeApplicationPayload(frame: Uint8Array): ServiceAppl
  * they must hand the multipart bytes to another runtime-owned queue.
  */
 export declare function decodeApplicationPayloadView(frame: Uint8Array): ServiceApplicationPayload;
+/**
+ * Decodes the framework multipart application frame, whose packet name and
+ * content type are the schema's multipart constants, and returns a view of its
+ * multipart payload without decoding either text field.
+ */
+export declare function decodeMultipartApplicationPayloadView(frame: Uint8Array): ServiceApplicationPayload;
+/** Materializes final message parts directly over the retained application frame. */
+export declare function decodeMultipartApplicationParts<T>(frame: Uint8Array, materialize: (part: Buffer) => T, release?: (part: T) => void): T[];
+export declare function decodeMultipartParts<T>(payload: Uint8Array, materialize: (part: Buffer) => T, release?: (part: T) => void, offset?: number): T[];
 /**
  * Validates the M6A envelope without retaining a second payload buffer. The
  * stateful activation path uses this before storing a durable request; the