Author	SHA1	Message	Date
Libby	2cd55aae47	Rust RUDP server: decide the sequenced-channel refusal per frame ... A sequenced packet's arrival can release held ordered frames in the same delivery; refuse only the packet's own frame. heimdall-low-refuse-sequenced-per-frame. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:23:07 +00:00
Libby	d40123fbe3	Rust RUDP server: pin the refusal of blank schemaId/recordKey on receipt sessions ... heimdall-low-rust-keys-untested. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:22:55 +00:00
Libby	7665df33ae	Merge pull request 'TS: write_admitted / error.v1 decoder, WriteTracker, vector replay runner' (#62) from libby/ts-write-receipt-client into main	2026-11-08 19:52:37 +00:00
Libby	90d252735f	cultmesh-rs: a refused reliable-sequenced write is received and acknowledged first, and a refused write counts as session activity ... Refusing before session.receive left the packet unacknowledged: the client resent it forever and every later ordered write stalled. The test now uses the same peer and proves a later ordered write is admitted. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:38:43 +00:00
Libby	dc1ae51e92	cultmesh-ts: publishRudpDocumentOnce builds the put before connecting, so a put that cannot be built keeps its cause on both paths ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:37:08 +00:00
Libby	0fbf2baea6	cultnet-ts, cultmesh-ts: Heimdall's five Lows on send-only (spec wording, error.v1 ack-time refusal tests, build errors keep their cause, presence changelog, ack-cut anchors) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:32:49 +00:00
Libby	89ff3d2cbd	cultnet-ts test: the Odin presence publisher is send-only, so a refusal after the transport ack is not awaited ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:26:25 +00:00
Libby	206dbe142b	cultmesh-ts: sendOnly tests use one fake server per publish (the reused one threw on the second connect and hung the run); spec names send-only and the presence publisher ... The hang was the fake server, not the writer: it is bound to one connection id, and two publishes in one test sent a second connect it rejected from inside the socket handler. The unacknowledged-send test also scripted an admit, whose reply piggybacks the put's ack. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:24:52 +00:00
Libby	0caef4d564	WIP (unverified): publishRudpDocumentOnce sendOnly + presence publisher send-only; tests written, cultmesh-ts receipt-client run hung ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:24:52 +00:00
Libby	c89c4ee39a	cultmesh-ts: test kills the flush-cap mutant ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:07:54 +00:00
Libby	af1ac72359	cultmesh-ts, cultnet-ts: only write_admitted admits a put (no echo admission); the send is bounded by the result window and a timeout is local_send_failed ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:05:42 +00:00
Libby	293b4e83bc	cultmesh-ts, cultnet-ts: an unanswered put is unconfirmed on every server, session_ended before a result is an error, a failed local send is its own reason ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:03:39 +00:00
Libby	a67faad27c	cultnet-ts: tests for two tracker mutants (send expires other windows; non-answer frames settle nothing) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:03:39 +00:00
Libby	6eea66c57f	cultnet-ts, cultmesh-ts: write receipt client (frames, WriteTracker, replay runner, opt-in writer) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:03:39 +00:00
Libby	e4b67a9e0b	cultmesh-rs: a receipt session accepts writes only on a reliable, non-sequenced channel; a test pins that a reconnect starts a fresh session ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:00:48 +00:00
Libby	1a05df2524	cultmesh-rs: server-wide remembered-write budget is a maintained counter; a session whose refusal set overflowed refuses unseen ids after the budget frees ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:36:10 +00:00
Libby	c8f869e54e	cultnet-rs, cultmesh-rs: null or missing document/schemaId refused naming the field; budget tests use literal bytes; unreliable-refusal local failure test ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:32:03 +00:00
Libby	d7b36416c6	cultmesh-rs: pin limit-refusal memory bound and legacy unreliable drop (mutant-driven tests) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:30:36 +00:00
Libby	1447ccd8dd	cultnet-rs, cultmesh-rs: write_admitted in spec field order; server-wide remembered-write budget over digest entries; id size limit; limit refusals remembered; unreliable writes refused; local failure is its own goodbye ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:09:28 +00:00
Libby	0182a6d40b	cultnet-rs, cultmesh-rs: remembered-write cap refusal is error.v1 limit_reached; pin authorize-once with a counting sink ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:32:49 +00:00
Libby	5f699c27fa	cultmesh-rs: a put reusing a delete's id is refused (mutant-driven test) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:27:54 +00:00
Libby	d4f440ac7c	cultmesh-rs: receipt server looks the id up first, remembers refusals, answers deletes and unqueueable refusals ... Follows Heimdall's second review of #60: replay by (session,id) before any authorization; refusals stored with their hash; delete shares the dedupe table and settles capability; a refusal the queue cannot take ends the session; a peer's refusal frames and a receipt session's refused deletes are not violations; the write limit has its own fixed text; the sink trait says Ok means committed and visible. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:22:50 +00:00
Libby	8bd31a5d4a	cultmesh-rs: receipt server follows Heimdall's review of #60 ... A refused put, a full dedupe table and a reused id refuse the write, not the session; only a protocol violation ends one. A frame that does not decode but holds a messageId is refused with that id. The server answers a receipt-capable hello with its own, listing both frames. The sink's authorization (new authorize_raw_document, default admit) runs before the session's remembered writes are consulted. A second hello does not change the capability: it is set once, by the first hello or the first write. A receipt that cannot be queued, and a write the payload budget would drop silently, end the session instead of leaving the write unanswered. Refusals to a receipt-capable session are queued reliably. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 13:56:17 +00:00
Libby	9f73047c29	cultmesh-rs: RUDP document server answers writes with write_admitted / error.v1 (write-receipt spec) ... cultnet-rs gains cultnet.write_admitted.v0, cultnet.error.v1 (v0 + messageId) and write_content_hash. The server opts a session in only when its hello lists both frames (framing only; admission rules are unchanged). On an opted-in session an admitted put is answered with a receipt carrying its id after the sink accepts it, a refusal is an error.v1 naming the id, a resend of the same content is re-receipted without reaching the sink, and the same id with other content is refused message_invalid (never the old receipt). Other sessions are answered exactly as before. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 13:38:46 +00:00
Libby	09e6a528b8	C#: SubmitDocumentAsync and the shard write forwarder complete on the result frame ... CultNetWriteCompletion.SendAndAwaitResultAsync registers a refusal handler before the send, then waits a result window (default 500 ms; CultMeshClientOptions. SubmitResultWindow, CultNetSchemaWriteForwarderOptions.ResultWindow). A cultnet.error.v0 inside it rejects with the new CultNetWriteRefusedException (Code: write_not_authorized, message_invalid, ...) whatever its order against the send or transport ack; a send returning no longer completes the write. The forwarder's refusal now throws on the same path as an unreachable primary, so CultNetDatabaseServer.TryForwardPutAsync/DeleteAsync no longer report a refused forward as done. Raw send primitives (C# schema client/session, Python, Kotlin) carry the doc line: fire-and-forget, an ack or a return is not admission, read the result frame. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 13:24:27 +00:00
Libby	675a6494c1	cultmesh-rs: single and batch publish complete on the result frame, not the transport ack ... One loop now serves both: every put acknowledged, then a refusal frame (typed cultnet.error.v0) fails the call in either order against the ack, and a success frame or the end of the new result_window option (default 500 ms) completes it. The batch no longer waits on flush_reliable alone, so it cannot hide a refusal. Raw send primitives (CultNetRudpSocketTransportConnection::send/send_reliable/ flush_reliable, tcp_framed send) carry the doc line: fire-and-forget, an ack or a return is not admission, read the result frame. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 13:18:40 +00:00
Libby	3c68d7d19c	Merge remote-tracking branch 'origin/main' into libby/rs-client-ack-finding	2026-11-08 13:15:17 +00:00
Libby	531fce567d	cultnet-ts test: cancel the Odin stub's delayed send when the test ends ... The stub's 120 ms second packet fired after peer.close() and threw ERR_SOCKET_DGRAM_NOT_RUNNING as an uncaught exception, failing whichever publisher test was running when the timer landed (load-dependent). Timers are now cleared in the test's after hook instead of swallowing the error. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 13:14:49 +00:00
Libby	0b326fa5ee	WIP cultnet-ts: Odin presence publisher completes on the result frame, not the ack (passes alone; two publisher tests fail inside the parallel full run, unexplained) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:36:23 +00:00
Libby	cdbe5889e0	merge main	2026-11-08 11:35:00 +00:00
Libby	7082c9488b	cultmesh-ts: a put completes on its result frame, not on the transport ack ... publishRudpDocumentOnce resolved when peer.flush returned (ack only) and read no frame, so a refused put resolved. It now rejects with CultMeshRudpWriteRefusedError (the peer's typed cultnet.error.v0: write_not_authorized, message_invalid) whether the refusal arrives before the ack, after it, or within resultWindowMs (default 500 ms) after it; a success reply ends the wait early. publishRudpDocumentAndWaitForReceipt rejects with the same typed error instead of timing out. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:34:55 +00:00
Libby	dc7eec7e6e	merge main	2026-11-08 11:33:16 +00:00
Libby	8cfc41d665	Merge pull request 'cultmesh-py test: a put the server refused is reported refused after its reliable ack arrived' (#53) from libby/py-client-ack-is-not-admission into main	2026-11-08 11:30:18 +00:00
Libby	6f2092171f	Merge pull request 'cultmesh-rs test: a publish whose refusal arrives before the ack is refused' (#52) from libby/rs-client-ack-is-not-admission into main	2026-11-08 11:30:15 +00:00
Libby	de1d6b3444	Merge pull request 'cultnet-ts test: the Odin presence publisher does not complete on the ack when the refusal arrives first' (#51) from libby/ts-client-ack-is-not-admission-cultnet into main	2026-11-08 11:30:12 +00:00
Libby	c6da8fc54a	cultmesh-py test: a put the server refused is reported refused after its reliable ack arrived ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:28:23 +00:00
Libby	9e734447f6	cultmesh-rs test (FAILS, findings): publish completes on the ack when the refusal follows it; the batch publish completes on the ack whatever the refusal ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:27:53 +00:00
Libby	f53930bc13	cultmesh-rs test: a publish whose refusal arrives before the ack is refused ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:27:48 +00:00
Libby	dfd090dc55	cultmesh-ts test (FAILS, a finding): publishRudpDocumentOnce completes on the ack of a refused put ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:27:07 +00:00
Libby	4f90ea8156	cultmesh-ts test: publishRudpDocumentAndWaitForReceipt reports a refused put as refused, whether the ack comes before or after the refusal ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:27:06 +00:00
Libby	7766348c75	cultnet-ts test (FAILS, a finding): the Odin presence publisher completes on the ack when the refusal follows it ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:26:22 +00:00
Libby	08cf3b34b5	cultnet-ts test: the Odin presence publisher does not complete on the ack when the refusal arrives first ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:26:22 +00:00
Libby	b2077fa2bf	cultmesh-rs: a Pong in the capped grace acknowledges nothing; the grace deadline saturates ... A Ping in the 2 s grace after the capped frame was answered with a Pong built from the session's ack state, which includes the capped frame. Every reply while the session is ending now zeroes its ack fields. The deadline no longer wraps at the end of the clock. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:21:08 +00:00
Libby	03141bc93b	cultmesh-rs: send the capped frame's answer reliably and end the session once it is acknowledged ... The capped (8th) refusal went out unreliable and unordered with the goodbye at once, so a lost datagram left the peer without it. It is now queued like any response and resent until the peer acknowledges it; the session ends then (or after a 2 s grace) and serves nothing after the capped frame meanwhile. The answer, its resends and the poll that carried the capped frame acknowledge nothing, as every refusal. A reliable queue that cannot take the answer ends the session at once with the unreliable refusal, as before. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:04:22 +00:00
Libby	9e5edeca52	cultmesh-ts: resend the capped frame's answer until acknowledged, then end the session ... endCappedSession deleted the session right after the answer was sent, so the resend timer never saw it and a lost datagram left the peer without the answer. The session now stays until the peer has acknowledged every reply (a lost one is resent) or a 2 s grace runs out, serves nothing after the capped frame meanwhile, and then sends the goodbye. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 10:59:23 +00:00
Libby	fe73795d89	Merge pull request 'cultmesh-py: answer an unreadable RUDP frame and end the session after 8 consecutive refusals' (#45) from libby/py-refused-frames-cap into main	2026-11-08 09:54:41 +00:00
Libby	bf81695537	cultmesh-py: answer the capped frame reliably and end the session once the answer is acknowledged ... The 8th refusal was sent unreliable and unordered with only the first response, then the goodbye at once, so a lost datagram left the peer without it. All answers now go the normal reliable path; the session ends when the peer has acknowledged them (a lost one is resent) or after a 2 s grace, and serves nothing after the capped frame meanwhile. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:54:37 +00:00
Libby	23c7ce3738	cultmesh-ts: count and answer a frame that decodes but is no message the parser takes ... A map with an unknown schemaVersion was rethrown: unanswered, uncounted toward the session cap. It is now answered message_invalid, reported, and counted like any other unreadable frame, so the cap holds for it. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:52:22 +00:00
Libby	b4979cb65b	cultmesh-py: answer an unreadable RUDP frame and end the session after 8 consecutive refusals ... Heimdall's parity ruling. A frame that is no msgpack map used to be dropped silently; it is now answered message_invalid (field "message") and the session kept. MAX_CONSECUTIVE_REFUSED_FRAMES (8) consecutive unreadable frames, or consecutive deletes the write authority refuses, end the session after the capped frame is answered. The authority's decision is unchanged. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:43:41 +00:00
Libby	621e05d552	cultmesh-ts: end a RUDP session after 8 consecutive unreadable frames or authority-refused deletes ... Heimdall's parity ruling. The refusal is still answered and the session kept below the cap; the frame that reaches CULTMESH_RUDP_DOCUMENT_SERVER_MAX_CONSECUTIVE_REFUSED_FRAMES is answered too, then the session ends. The write-authority decision is unchanged. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:41:18 +00:00