Dai Ha cedab54ae8 CB-548: guard primary singleton to PRIMARY callers; open waiter before enqueue ...

Fix two handler-level bugs found in PR #21:
- Only PRIMARY callers may update PrimaryRegistry.record (the legacy singleton 'primary'
  fallback for no-delegation inbox nudges). An architect SEND previously recorded its terminal
  as the fallback; the per-target delegation map does not cure the singleton. New
  BridgeMcp.recordPrimarySingleton uses the resolved role (caller.isPrimary()) — named leads
  (PRIMARY) still record, architects never do.
- MessageService.send now opens the rendezvous waiter BEFORE queueing delivery, fixing both the
  enqueue-before-open fast-reply race (a fast reply no longer orphans into the inbox) and
  callback-failure ordering: a throwing onAccepted (public callback) fails the send cleanly with
  no stale waiter and no queued, orphanable message.

Tests: architect SEND vs lead SEND primary-singleton regression; throwing onAccepted leaves no
stale waiter or queued orphan.

2026-08-13 19:19:14 +02:00

..

docs

CB-307: lock push-loop injection to dedicated status-gated loop (mechanism b)

2026-07-19 09:44:21 +02:00

src

CB-548: guard primary singleton to PRIMARY callers; open waiter before enqueue

2026-08-13 19:19:14 +02:00

.gitignore

CB-5xx: Stage 5 hardening — auth, authz+audit, metrics, CI, supervision

2026-07-29 22:29:26 +07:00

bridged.example.yaml

CB-530..536, CB-538 groundwork: leads as peers, and a fleet that can find itself

2026-08-13 09:38:24 +02:00

pom.xml

Release 1.0.0 — one leader, one host, complete

2026-08-10 20:58:06 +07:00