From 446a5a0f46e2d98daf0fc2af187b3885feb99f23 Mon Sep 17 00:00:00 2001
From: npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
 <011987e296fd5006292d2f930b574be47c7801048d1983c46c425d3c95f0cffd@sprout-oss.stage.blox.sqprod.co>
Date: Wed, 8 Jul 2026 10:34:15 -0400
Subject: [PATCH] feat(mesh): typed fence-rejection taxonomy on MeshError
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds NoActiveLease, OwnerMismatch, and FutureGeneration alongside
StaleGeneration so every fence-visible reject is a typed variant, never
a generic Transport(..) — Wren's chaos-gate ruling: live kill-9 /
partition / replay evidence must be unambiguous, and the harness
counters (mesh_fence_rejections_total{reason=...}) key off these.

Purely additive, non-serialized: the wire-level fence signal remains
GoodbyeReason::StaleGeneration in wire.rs — zero wire-shape change.
Field naming per Wren: NoActiveLease carries frame_owner_runtime_id
(the frame's *claimed* owner; no current owner exists by definition).
Consumed by the session-directory lane's validate_fenced_header().

Co-authored-by: Tyler Longwell <tlongwell@block.xyz>
Signed-off-by: Tyler Longwell <tlongwell@block.xyz>
---
 crates/buzz-relay-mesh/src/lib.rs | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/crates/buzz-relay-mesh/src/lib.rs b/crates/buzz-relay-mesh/src/lib.rs
index f1c1beadb..f4c5e10e1 100644
--- a/crates/buzz-relay-mesh/src/lib.rs
+++ b/crates/buzz-relay-mesh/src/lib.rs
@@ -74,6 +74,36 @@ pub enum MeshError {
         frame_generation: u64,
         known_generation: u64,
     },
+    // The three variants below complete the fence-rejection taxonomy alongside
+    // `StaleGeneration` (Wren's chaos-gate ruling: every fence-visible reject
+    // is a typed variant, never a generic `Transport`, so live kill-9 /
+    // partition / replay evidence is unambiguous). Counter surface:
+    // `mesh_fence_rejections_total{reason=...}` with reasons
+    // `stale_generation` | `no_active_lease` | `owner_mismatch` |
+    // `future_generation`. None of these are serialized — the wire-level fence
+    // signal remains `GoodbyeReason::StaleGeneration`.
+    #[error("no active lease for session {session_id}: frame generation {frame_generation}, known generation {known_generation}, claimed owner {frame_owner_runtime_id}")]
+    NoActiveLease {
+        session_id: uuid::Uuid,
+        frame_generation: u64,
+        known_generation: u64,
+        /// The owner the *frame* claimed — there is no current owner by
+        /// definition when no live lease exists.
+        frame_owner_runtime_id: RuntimeId,
+    },
+    #[error("owner mismatch for session {session_id} generation {generation}: frame owner {frame_owner_runtime_id} != current owner {current_owner_runtime_id}")]
+    OwnerMismatch {
+        session_id: uuid::Uuid,
+        generation: u64,
+        frame_owner_runtime_id: RuntimeId,
+        current_owner_runtime_id: RuntimeId,
+    },
+    #[error("future generation for session {session_id}: frame {frame_generation} > known {known_generation}")]
+    FutureGeneration {
+        session_id: uuid::Uuid,
+        frame_generation: u64,
+        known_generation: u64,
+    },
     #[error("mesh is disabled (BUZZ_MESH=off)")]
     Disabled,
     #[error("transport: {0}")]