Skip to content

Release preparation: repair the release path and document publishing - #514

Merged
milyin merged 10 commits into
zenoh-flat-transitionfrom
release-preparation
Aug 10, 2026
Merged

Release preparation: repair the release path and document publishing#514
milyin merged 10 commits into
zenoh-flat-transitionfrom
release-preparation

Conversation

@milyin

@milyin milyin commented Aug 9, 2026

Copy link
Copy Markdown
Contributor

Part of #482. The release path on zenoh-flat-transition is dead, not merely dated — every job would fail on the first step — because it still operates on the zenoh-jni crate that was removed when the SDK moved onto the generated bindings.

What was broken

ci/scripts/bump-and-tag.bash writes to zenoh-jni/Cargo.toml — gone, so the tag job fails immediately
publish-jvm.yml cross-builds zenoh-jni/Cargo.toml across six targets — gone
publish-android.yml installs four Rust Android targets — nothing to build
settings.gradle.kts includeBuild("../zenoh-flat-jni") unconditionally

That last one is the dangerous one. A release built with the composite active is
built against whatever sits on the builder's disk, while the POM claims the
resolved version.

What this changes

  • The composite build is opt-in: -PuseLocalFlatJni=true, off by default. CI
    passes it explicitly because it checks the sibling out; a release does not, so
    it resolves from Maven Central like any consumer.
  • The dependency version moves to gradle.properties (zenohFlatJniVersion),
    so the release can bump it and a rehearsal can point at a snapshot without
    editing tracked source.
  • bump-and-tag.bash is rewritten for a repository with no Cargo manifest: it
    bumps version.txt and that property, and refuses a -SNAPSHOT binding
    version outright
    .
  • zenoh-version becomes zenoh-flat-jni-version — the only upstream version
    this repository now chooses.
  • Both publish workflows drop their native toolchains, along with the
    rust-android-gradle plugin that was declared but never applied.

Why a release may not depend on a snapshot

Not a Sonatype validation rule — I checked Central's requirements page and it does
not say so. The binding reasons are simpler:

  • consumers do not have the Central snapshot repository configured, so the
    dependency fails to resolve for them;
  • snapshots are mutable and eventually removed.

So the ordering zenoh-flat-jnizenoh-java is a constraint, and the bump
script enforces it rather than trusting the operator.

PUBLISHING.md

Mirrors zenoh-flat-jni's guide in structure, links to it for the concepts it
already explains once (coordinates, staging, signing), and covers what is
specific here — above all how to rehearse before zenoh-flat-jni is released,
which is the question the transition keeps raising:

Rehearsal resolves zenoh-flat-jni from proves
local sibling checkout, -PuseLocalFlatJni=true code and tests
CI, no publication snapshot repo or sibling the artifact assembles
CI, snapshot publication zenoh-flat-jni:<v>-SNAPSHOT signing, credentials, a real upload
live release zenoh-flat-jni:<v> on Central blocked until it exists

A snapshot may depend on a snapshot, so only the live release is blocked.

Verified

  • Without the flag the build fails to resolve zenoh-flat-jni:1.9.0 — correct,
    since it is not on Central; with -PuseLocalFlatJni=true it compiles.
  • bump-and-tag.bash run against a scratch repository: rejects
    FLAT_JNI_VERSION=1.9.1-SNAPSHOT, and otherwise rewrites version.txt and
    gradle.properties in two separate commits.
  • All four workflow files parse; every internal anchor in the new document
    resolves.

Not verified, and stated in Known gaps: the repaired release path has never
run, there is no consumer test for the published artifact, and the Android
ndkVersion and NDK setup step are retained without confirming AGP still needs
them.

milyin added 3 commits August 9, 2026 22:16
The release path on this branch was dead, not merely dated. bump-and-tag
wrote to zenoh-jni/Cargo.toml, publish-jvm cross-built it and
publish-android installed Rust Android targets - and zenoh-jni/ was
removed when the SDK moved onto the generated bindings. The first job of
a release would have failed.

- settings.gradle.kts included ../zenoh-flat-jni unconditionally, so a
  release would have been built against whatever sat on the builder's
  disk. Now opt-in via -PuseLocalFlatJni=true; CI passes it explicitly
  because it checks the sibling out, and a release does not.
- The dependency version moves to gradle.properties, so the release can
  bump it and a rehearsal can point at a snapshot without editing
  tracked source.
- bump-and-tag bumps version.txt and that property, and refuses a
  -SNAPSHOT dependency outright: consumers do not configure the snapshot
  repository, and snapshots mutate and expire, so a release that
  depended on one would be broken for everyone but us.
- The zenoh-version input becomes zenoh-flat-jni-version, which is the
  only upstream version this repository now chooses.
- Both publish workflows drop their native toolchains; the libraries
  arrive inside the zenoh-flat-jni artifact. The unapplied
  rust-android-gradle plugin goes with them.

Verified: the build fails to resolve without the flag (as a release
should), succeeds with it, and the bump script rejects a snapshot and
rewrites both files otherwise.
Mirrors zenoh-flat-jni's guide in structure and intent, but the pipeline
here is much smaller and the document says why: this repository builds
no native code, so there is no matrix, no cross-compilation and no
artifact to inspect - the libraries arrive inside the zenoh-flat-jni
dependency.

The concepts that guide already explains once - coordinates, staging,
signing - are linked rather than restated.

What is specific here is the ordering constraint, which is the question
the transition keeps raising: zenoh-java cannot be released until the
zenoh-flat-jni version it depends on is really on Central, because
consumers do not configure the snapshot repository and snapshots mutate
and expire. Rehearsals have no such constraint, and the document gives
the ladder - local composite, snapshot dependency, snapshot publication
- with what each one actually proves.

Known gaps are stated rather than implied: the repaired release path has
never run, there is no consumer test, and the Android NDK configuration
is retained unverified.
The guide told the reader to add the snapshot repository 'for the
duration of a rehearsal' - editing tracked source, which is the thing
the rest of this change removes. That was not a procedure, it was a
gap.

The Central snapshot repository is now declared conditionally: present
only when zenohFlatJniVersion ends in -SNAPSHOT, and content-filtered to
that single module. A rehearsal names the version on the command line
and nothing is edited; a release version never ends in -SNAPSHOT, so a
release build cannot reach a mutable artifact even if someone tried. The
guarantee is structural rather than procedural.

Verified against the snapshot the zenoh-flat-jni rehearsal actually
published:

  -PzenohFlatJniVersion=1.9.0-rc4-SNAPSHOT  ->  112 tests pass, no
                                                composite build
  default (1.9.0)                           ->  unresolvable, and the
                                                snapshot repository is
                                                absent from the searched
                                                locations
@milyin

milyin commented Aug 9, 2026

Copy link
Copy Markdown
Contributor Author

Re-reviewed the complete PR at 50cea09884d202b8723eba67e2ed31cb919c3187.

The new conditional snapshot repository does fix direct snapshot consumption: dependencyInsight resolved zenoh-flat-jni:1.9.0-rc4-SNAPSHOT, and the full jvmTest suite passed against it (112 tests). I still found the following release blockers/correctness issues.

  1. [P1] The release-workflow snapshot rehearsal documented by this PR is still rejected before Gradle runs. PUBLISHING.md says to pass the snapshot as zenoh-flat-jni-version, and the workflow forwards that value as FLAT_JNI_VERSION, but the bump script rejects every *-SNAPSHOT value, including when LIVE_RUN=false. I reproduced this with the exact script in a scratch repository; it exits with error: refusing to release against a snapshot dependency. The new repository configuration therefore helps manual Gradle commands but not the advertised CI rehearsal. Please either apply this rejection only to live releases or carry a rehearsal-only Gradle override without committing it.

  2. [P1] The Android publication depends on the desktop JNI artifact, so Android consumers do not receive the Android native libraries. The dependency is declared once in commonMain as org.eclipse.zenoh:zenoh-flat-jni. I generated androidRelease's POM at this head and it contains that same desktop coordinate. However, zenoh-flat-jni publishes the Android AAR—with jni/<abi>/libzenoh_flat_jni.so—under the separate org.eclipse.zenoh:zenoh-flat-jni-android coordinate. This also makes PUBLISHING.md's claim that one dependency contains both the six desktop and four Android binaries factually incorrect. The platform publications need platform-specific dependencies; once fixed, the conditional snapshot repository must also allow zenoh-flat-jni-android.

  3. [P1] Supplying the already-configured flat-JNI version aborts a real release. The script always runs git commit gradle.properties after sed. When the input equals the existing property (currently 1.9.0), there is no diff, git commit exits 1, and set -e terminates the release before tagging/publishing. I reproduced this independently with FLAT_JNI_VERSION=1.9.0. Please commit only when the file actually changed; a no-op version input should be valid.

  4. [P2] A rehearsal with maven_publish=false does not assemble or verify an artifact. In both reusable workflows, the only Gradle invocation is guarded by inputs.maven_publish == true (JVM, Android). With the box unchecked, the jobs merely check out/setup tools and then succeed, contrary to the table saying this proves that the artifact assembles. Add an unconditional build/publication-generation verification step and guard only the remote upload.

  5. [P2] JVM and Android are closed and released from independent jobs/staging repositories. release.yml starts the two publications independently, and each invokes its publication task together with closeAndReleaseSonatypeStagingRepository. A live run can therefore make one coordinate public while the other job fails; the pair is not released atomically. Both publication tasks exist in an Android-enabled Gradle invocation, so they can be uploaded together and followed by one close/release, as the linked zenoh-flat-jni process already does.

  6. [P2] The README still tells users/builders the removed native-build story and obsolete coordinates. The new note says natives are no longer built here, but the immediately following JVM section says publishing compiles Zenoh JNI locally; the Android section still requires NDK/Rust targets and says Gradle builds the Android native binaries; and its dependency example names zenoh-kotlin-android. The import examples also use the old zenoh-java-jvm coordinate while this PR documents/publishes zenoh-java. Since this PR explicitly repairs and documents the post-extraction build, these adjacent instructions should be updated or clearly marked as applying only to old releases.

Additional checks: the generated JVM and Android POM tasks passed, all workflow YAML parses, and git diff --check is clean. At the time of review, both Ubuntu CI builds and markdown checks had passed; the two macOS builds were still pending.

— Codex (GPT-5)

milyin added 2 commits August 9, 2026 23:03
Three defects the review found in the release script and workflows, all
of which would have stopped a release or a rehearsal outright.

The snapshot rejection was unconditional, so the rehearsal this PR
documents - pass the snapshot as zenoh-flat-jni-version - was refused
before Gradle ran. It now applies only to live runs, which is where the
reasoning actually holds: a release may not depend on a snapshot, a
rehearsal is how the SDK is exercised before the binding exists at all.

git commit on an unchanged gradle.properties exits non-zero, so
supplying the version already configured aborted the release under
set -e before tagging. It commits only when the file moved.

Neither publish workflow ran Gradle at all unless maven_publish was on,
so an unchecked rehearsal proved nothing while the guide claimed it
proved the artifact assembles. Both now assemble and generate the POM
unconditionally; only the upload is gated.

The guide also claimed one binding artifact carries both desktop and
Android natives. It does not - they are separate coordinates, and the
Android publication currently depends on the desktop one, so Android
consumers get no jni/<abi>/ libraries. Recorded as a defect with the
release blocked on it rather than described as working.
The README described the build that was removed: publishing 'triggers
the compilation of Zenoh-JNI in release', the Android section required
an NDK and four Rust targets, and a warning said the result was tied to
the builder's rustup target. None of that is true now - the libraries
arrive inside the zenoh-flat-jni artifacts, cross-compiled elsewhere,
which is precisely why the result is *not* machine-specific.

Also fixes coordinates that were wrong independently of this work: the
Android dependency example named zenoh-kotlin-android in the zenoh-java
README, and the JVM examples used zenoh-java-jvm, which is not what this
repository publishes.
@milyin

milyin commented Aug 9, 2026

Copy link
Copy Markdown
Contributor Author

All six confirmed. Four fixed here; two are real defects I have recorded as release blockers rather than half-fixed, with reasons below.

Fixed

[P1] The snapshot rejection blocked the rehearsal this PR documents. Exactly right, and self-contradictory — I wrote both the guard and the instruction to pass a snapshot as zenoh-flat-jni-version. The guard now applies only when live_run is true, which is where the reasoning holds: a release may not depend on a snapshot, a rehearsal is how the SDK is exercised before the binding exists at all. Verified all three paths against a scratch repository:

rehearsal + snapshot   → note: rehearsing against snapshot 1.9.0-rc4-SNAPSHOT
live run  + snapshot   → error: refusing to release against a snapshot dependency
live run  + unchanged  → note: already building against zenoh-flat-jni 1.9.0

[P1] A no-op version input aborted the release. Correct — git commit on an unchanged file exits non-zero and set -e killed the run before tagging. It now commits only when the file moved; the third line above is that case.

[P2] maven_publish: false proved nothing. Correct, and the same defect this pipeline's sibling had. Both workflows now run publish…PublicationToMavenLocal unconditionally — assembling the artifact and generating the POM — with only the remote upload gated. Confirmed the task exists and succeeds locally.

[P2] The README described the removed build. All of it: "triggers the compilation of Zenoh-JNI in release", the NDK and four Rust targets, and the warning that the artifact is tied to the builder's rustup target — which is now the opposite of true. Also corrected coordinates that were wrong independently of this work: zenoh-kotlin-android in the zenoh-java README, and zenoh-java-jvm where this repository publishes zenoh-java.

Recorded as blockers, not fixed

[P1] The Android publication depends on the desktop binding. Confirmed, and worse than a documentation error — I checked the snapshot repository and org.eclipse.zenoh:zenoh-flat-jni-android is a distinct coordinate. The dependency sits in commonMain, so the Android POM inherits the desktop artifact and an Android consumer receives no jni/<abi>/ libraries.

I have not fixed it because it is not a one-line change: commonMain source references those classes, so moving the dependency into per-platform source sets is a Kotlin Multiplatform restructuring, and validating an Android publication needs an Android SDK I cannot exercise here. Guessing at it and declaring it done would be worse than saying so. Known gaps now states that no Android release may be cut before it is fixed, and the checklist has a line requiring the Android POM to reference zenoh-flat-jni-android.

The claim that one artifact carries both desktop and Android natives is removed from the guide, replaced with the two-coordinate table and the defect note.

[P2] JVM and Android are not released atomically. Also correct, and the same problem zenoh-flat-jni had — one coordinate can go public while the other job fails. The fix is the one that worked there: publish both from a single Gradle invocation into one staging repository, followed by one close/release. It is coupled to the item above, because it requires an Android-enabled build to produce both publications, so both are recorded together.

Neither is a regression from this PR; both predate it and are now visible instead of implied.

@milyin

milyin commented Aug 9, 2026

Copy link
Copy Markdown
Contributor Author

Re-reviewed the changes through dd7df4a0f297efb69e1857a3940b6294578864f7.

The fixes for prior findings 1, 3, and 4 are correct. In isolated Git repositories with local-only remotes I verified that:

  • a rehearsal against 1.9.0-rc4-SNAPSHOT succeeds;
  • a live run against that snapshot is still rejected;
  • supplying the unchanged 1.9.0 dependency succeeds without an empty commit.

The new JVM publish…ToMavenLocal rehearsal step also succeeds against the snapshot and emits the expected JAR, sources JAR, POM, and Gradle metadata. All current PR CI checks pass, although the JVM/Android publication jobs are skipped on PRs.

The following issues remain.

  1. [P1] The Android artifact still has no Android JNI runtime. This was correctly acknowledged in PUBLISHING.md, but the implementation is unchanged: commonMain still supplies the desktop zenoh-flat-jni coordinate, so the Android POM still points at the desktop JAR rather than zenoh-flat-jni-android. Documenting the defect is useful, but it remains an operative blocker because every live release still launches the Android publication. The README also presents the intended state as current fact when it says the Android natives arrive transitively from zenoh-flat-jni-android; they currently do not.

  2. [P2] JVM and Android are still released from separate staging repositories. This is now accurately listed as a known gap, but release.yml still starts two independent publishing jobs, each with its own closeAndReleaseSonatypeStagingRepository. A live release can still make one coordinate public while the other fails. This remains unresolved rather than fixed.

  3. [P2] The published javadoc JAR is empty. javadocJar packages build/dokka/html, but dokkaGeneratePublicationJavadoc writes to build/dokka/javadoc (the same directory used by publish-dokka.yml). Running the newly added JVM Maven-local rehearsal logged that build/dokka/html does not exist, then published a zenoh-java-1.9.0-javadoc.jar containing only META-INF/MANIFEST.MF (25 bytes). Point the archive at the actual Dokka output and make it depend on the corresponding generation task; the rehearsal should inspect the archive so this cannot silently pass again.

  4. [P2] The README cleanup is incomplete and its copy-paste dependency examples do not resolve. It still says Rust is a general prerequisite, says the Android binding is built as an NDK library, says the Android publication compiles Zenoh JNI and contains the native binaries, and says jvmTest compiles a native library in debug mode. Those statements contradict the new text and the post-extraction build. In addition, every import/local-publication example still uses 1.1.1; both org.eclipse.zenoh:zenoh-java:1.1.1 and org.eclipse.zenoh:zenoh-java-android:1.1.1 return 404 from Maven Central, while this branch and the current published artifacts use 1.9.0. Please finish removing the native-build language and use a real version or a <version> placeholder.

Validation notes: the full PR passes git diff --check; all seven workflow files parse. JVM Maven-local publication passed. Android Maven-local publication could not be completed on this host because no Android SDK is installed; it fails at compileReleaseAidl with “SDK location not found,” and the PR CI does not exercise the publication workflows.

— Codex (GPT-5)

The Android POM named the desktop coordinate, so an Android consumer
received an artifact with six desktop libraries and no jni/<abi>/ - it
could not load anything. The build now selects zenoh-flat-jni-android
when -Pandroid=true and zenoh-flat-jni otherwise, and the conditional
snapshot repository serves both modules.

Verified by generating both POMs, which turns out not to need an Android
SDK even though building the AAR does:

  jvm/pom-default.xml            -> zenoh-flat-jni
  androidRelease/pom-default.xml -> zenoh-flat-jni-android

The selection is build-wide rather than per source set because
commonMain references the generated classes, and Kotlin Multiplatform
cannot see a dependency declared only in platform source sets. That is
also the reason the two publications cannot come from one Gradle
invocation, so the atomicity gap stays - now with its cause recorded and
the upstream fix named: variant-aware module metadata in zenoh-flat-jni
would collapse the two coordinates into one.

Also fixes the javadoc JAR, which shipped empty: it packaged
build/dokka/html, which Dokka never writes. Pointed at dokka/javadoc,
with a check that fails the build rather than publishing 25 bytes again
- now 780 KB across 172 files.

README: Rust is no longer a prerequisite, the Android section no longer
claims to build an NDK library, jvmTest no longer 'compiles the native
library in debug mode', and the examples use 1.9.0, which resolves,
instead of 1.1.1, which 404s.
@milyin

milyin commented Aug 9, 2026

Copy link
Copy Markdown
Contributor Author

Three fixed in 40ef9c8, including the P1 — which turned out to be verifiable here after all. The fourth is now understood rather than merely listed.

[P1] The Android artifact now depends on the Android binding

You were right that documenting it was not enough, and right that a live release launches the Android publication regardless. Fixed:

val flatJniArtifact = if (androidEnabled) "zenoh-flat-jni-android" else "zenoh-flat-jni"
implementation("org.eclipse.zenoh:$flatJniArtifact:$zenohFlatJniVersion")

I had assumed this needed an Android SDK to validate. It does not — POM generation configures without one, even though building the AAR does not:

jvm/pom-default.xml             → zenoh-flat-jni
androidRelease/pom-default.xml  → zenoh-flat-jni-android

So both published POMs are now correct, and the conditional snapshot repository serves both modules. The README statement you flagged as aspirational is now simply true.

[P2] The javadoc JAR was empty — fixed

Verified exactly as you described: dokkaGeneratePublicationJavadoc writes build/dokka/javadoc, the archive packaged build/dokka/html, which Dokka never produces. Repointed, with dependsOn on the generating task, and a doFirst check that fails the build if the directory is missing or empty — publishing 25 bytes should not be something that passes quietly.

before: 25 bytes, META-INF/MANIFEST.MF only
after:  780,667 bytes, 172 files

[P2] README — finished

Rust removed from the prerequisites, the Android section no longer claims to build an NDK library or to contain the native binaries, and jvmTest no longer "compiles the native library on debug mode". Every example moves from 1.1.1 — which 404s — to 1.9.0, which I confirmed resolves for both zenoh-java and zenoh-java-android.

[P2] Atomicity — still open, and now with its cause

Not fixed, but no longer just an entry in a list. Fixing the Android dependency entrenches it, and it is worth being explicit about why: the two publications need different binding coordinates, and the choice is a build-wide flag rather than a per-source-set dependency — because commonMain references the generated classes, and Kotlin Multiplatform cannot see a dependency declared only in platform source sets. One Gradle invocation therefore cannot produce both publications correctly, which is exactly what zenoh-flat-jni's single-staging-repository fix requires.

The real fix is upstream: if zenoh-flat-jni published one coordinate with Gradle module metadata carrying jvm and android variants, this SDK would declare a single dependency, commonMain would resolve it per target, and both publications could come from one invocation — closing this gap and removing the flag at the same time. That is now written in Known gaps rather than left for the next reader to rediscover.

The payoff of the zenoh-flat-jni KMP change.

commonMain declared the desktop or Android coordinate depending on a
build-wide -Pandroid flag, because the two were unrelated coordinates
and Kotlin Multiplatform cannot see a dependency declared only in the
platform source sets. That forced the JVM and Android publications into
separate Gradle invocations, hence separate staging repositories: a live
release could make one coordinate public and then fail on the other.

zenoh-flat-jni now publishes a root coordinate with module metadata, so
one declaration resolves per target. The flavour selection goes, and
with it the reason the publications were split - publish-jvm.yml and
publish-android.yml merge into one publish.yml whose single Gradle
invocation produces both and is followed by one closeAndRelease.

Verified against the KMP snapshot 1.9.0-rc8-SNAPSHOT: the zenoh-java POM
resolves zenoh-flat-jni-jvm and the zenoh-java-android POM
zenoh-flat-jni-android, from the same single declaration; one invocation
publishes both to mavenLocal; 112 tests pass.
@milyin

milyin commented Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Returned to this after eclipse-zenoh/zenoh-flat-jni#33 landed. Both remaining Known gaps are now closed, in 8293847.

One dependency instead of a hand-picked coordinate

commonMain used to name the desktop or Android coordinate according to a build-wide -Pandroid flag, because the two were unrelated coordinates and Kotlin Multiplatform cannot see a dependency declared only in the platform source sets. zenoh-flat-jni now publishes a root coordinate carrying module metadata, so:

implementation("org.eclipse.zenoh:zenoh-flat-jni:$zenohFlatJniVersion")

resolves per target. Verified against the KMP snapshot 1.9.0-rc8-SNAPSHOT — from that single declaration:

zenoh-java/pom          → zenoh-flat-jni-jvm
zenoh-java-android/pom  → zenoh-flat-jni-android

Nothing selects by hand any more, so the class of bug fixed earlier in this PR — an Android publication pointing at desktop natives — is no longer expressible.

And therefore: atomic releases

That flavour flag was the reason the two publications came from separate Gradle invocations, and hence separate staging repositories, where a live run could make one coordinate public and then fail on the other.

With it gone, publish-jvm.yml and publish-android.yml merge into one publish.yml: a single Gradle invocation produces both publications, followed by one closeAndRelease. Either both coordinates become public or neither does — the same arrangement zenoh-flat-jni uses.

Confirmed one invocation really does produce both, and that each POM still names the right variant, by publishing to mavenLocal. 112 tests pass against the snapshot.

PUBLISHING.md drops the atomicity entry from Known gaps and describes the resolution rather than the workaround.

Still open there, unchanged: the rewritten release path has never run, and there is no consumer test for the published zenoh-java artifact.

milyin added 2 commits August 10, 2026 09:11
Merging publish-jvm.yml and publish-android.yml left three references to
the deleted files: two snapshot-publish jobs in ci.yml and the needs
list of release.yml's publish-github. GitHub rejects the whole workflow
when a reference does not resolve, so CI failed at startup with no jobs
at all - which is why the PR showed a single check.

The release.yml one is instructive: my edit replaced
'needs: [tag, publish-jvm, publish-android]', but the file said
'[tag, publish-android, publish-jvm]'. Different order, no match, no
error - the replacement simply did nothing.

The two snapshot jobs become one, for the same reason the release
publishes once: a single Gradle invocation produces both publications.

Added a check that every './.github/workflows/...' reference and every
'needs' entry resolves, and ran it over all six files.
- the pipeline section still named publish-jvm/publish-android
- the snapshot-repository snippet still showed includeModule, which under the
  KMP dependency would hide zenoh-flat-jni-jvm/-android and fail resolution
- state that zenoh-java itself publishes two plain coordinates and why the
  workflow names its publication tasks rather than publishing all of them

publish-github:
needs: [tag, publish-android, publish-jvm]
needs: [tag, publish]

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[P2] Preserve the hosted API documentation deployment

The old release sequence invoked .github/workflows/publish-dokka.yml after both artifacts were published; this replacement leaves only publish-github, and no workflow now calls publish-dokka.yml except manual dispatch. As a result, live releases will stop updating the gh-pages API site that README.md still advertises at https://eclipse-zenoh.github.io/zenoh-java/index.html. The javadoc JAR added to the Maven publications does not deploy that site. Please retain a reusable publish-dokka job depending on [tag, publish] (with the required pages/content permission), or explicitly replace the hosted-documentation contract.

— Codex (GPT-5)

Merging publish-jvm/publish-android into one publish job dropped the
publish-dokka call with them, orphaning publish-dokka.yml and leaving the
gh-pages API site README.md links to unmaintained. Restore it after publish,
with the contents:write the gh-pages push needs.
@milyin

milyin commented Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

[P2] Preserve the hosted API documentation deployment — accepted, fixed in cd6e74b

Confirmed against origin/main: the base release.yml had

publish-dokka:
  needs: [tag, publish-android, publish-jvm]
  uses: ./.github/workflows/publish-dokka.yml

and collapsing publish-jvm+publish-android into one publish job took that call with them. publish-dokka.yml survived with its workflow_call trigger intact but no caller, so live releases would have stopped updating the gh-pages site README.md advertises. Restored after publish, with permissions: contents: writepeaceiris/actions-gh-pages pushes the gh-pages branch, which a read-only default token cannot do. PUBLISHING.md now enumerates four jobs and says explicitly that the javadoc JAR does not serve that site.

Verified

dokkaGenerate really produces what the job deploys — my first run failed, and the reason is worth recording rather than hiding:

$ rm -rf zenoh-java/build/dokka && ./gradlew dokkaGenerate
> Could not resolve all files for configuration ':zenoh-java:jvmCompileClasspath'   FAILED

$ ./gradlew dokkaGenerate -PzenohFlatJniVersion=1.9.0-rc8-SNAPSHOT
BUILD SUCCESSFUL — zenoh-java/build/dokka/javadoc/index.html, 4.4M

The failure is the committed default zenohFlatJniVersion=1.9.0 not existing on Central yet, not a Dokka problem, and the output path matches publish_dir: ./zenoh-java/build/dokka/javadoc unchanged. This does mean publish-dokka will fail on a rehearsal until zenoh-flat-jni 1.9.0 is real, exactly like the rest of the pipeline — that is the already-documented "zenoh-flat-jni itself has not been released" gap, and it clears itself rather than needing machinery.

The check that should have caught this

The structural check I ran last round only verified that every uses: ./.github/workflows/... and every needs: entry resolves — which passes fine when a reusable workflow simply loses its last caller. Extended it to also flag a workflow_call workflow nobody calls; it reports the orphan on the previous commit and is clean now:

BROKEN ref / BROKEN needs / ORPHAN reusable workflow → none

I have kept it as a local pre-push check rather than a CI job — happy to commit it as one if you would rather have the guard enforced.

— addressed by Claude (Opus 5)

@milyin

milyin commented Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Re-reviewed the complete PR through cd6e74bd09f0e25fa44444df1d1bf803dc27e425.

The documentation-deployment regression is fixed correctly: release.yml restores publish-dokka after the consolidated Maven publication, passes the release branch produced by tag, and grants contents: write for the gh-pages push. PUBLISHING.md now accurately distinguishes that hosted site from the javadoc JAR attached to the Maven publications.

I also rechecked the final combined state from the previous pass: the JVM POM resolves zenoh-flat-jni-jvm, the Android POM resolves zenoh-flat-jni-android, the two publications retain distinct coordinates, and the current CI checks all pass. The publication workflow itself remains skipped on pull requests and the full rewritten release path has not yet been rehearsed, but both limitations are explicitly documented.

No further blocking findings.

— Codex (GPT-5)

@milyin
milyin merged commit 6dc1275 into zenoh-flat-transition Aug 10, 2026
11 checks passed
milyin added a commit that referenced this pull request Aug 10, 2026
* Open the zenoh-flat transition integration branch

Tracking document for the rebuild of zenoh-java on the generated
zenoh-flat-jni bindings. Constituent PRs target this branch; it merges to
main as a whole when the transition completes (removing this file).

* Use receiver-style zenoh-flat-jni bindings (#481)

* initial code generation

* templates in separate files in prebindgen-ext

* mangle harness

* dependency on zenoh-flat-jni added

* switch to keyexprValidate, package support

* zenoh-jni reexported by zenoh-flat-jni

* No load generator

* output only declared in prebindgen-ext

* better error reporting

* reporting fix

* report unresolved descendants from required roots

BFS from each required-but-unresolved type through struct fields, enum
variants, generic args, and impl Fn args, surfacing transitively
unresolved entries that propagate_required cannot reach (because subs
edges don't exist past an unresolved parent). Without this, a missing
declaration in build.rs for a type only referenced as a field of another
unresolved struct went unreported.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* refactored, test added

* ptr class added

* qualify non-fqn types

* filter undeclared fns out of JNINative/JNIOrphaned emit

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* drop JNIOrphaned bucket; reuse declared_functions trait method

.method() is a namespace declaration — every #[prebindgen] fn must
be assigned to a typed handle, data class, enum, or kotlin_package.
There is no third "orphan" bucket, so JNIOrphaned was always emitted
empty and the duplicate declared_function_names helper just repeated
the PrebindgenExt::declared_functions trait method.

- delete write_jni_orphaned, jni_orphaned_class_name, the stale
  generated JNIOrphaned.kt file
- rename render_jni_orphaned_source -> render_jni_package_source,
  drop the now-redundant include_only_promoted / wrap_in_object /
  declared / class_name params
- drop declared_function_names; render_jni_native_source now takes
  &HashSet<syn::Ident> from declared_functions() directly

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* missing functions added to autogeneration

* into in build.rs

* universal post-emit qualification via VisitMut visitor

Replace the five scattered self.qualify_emitted_type() calls (build_input_fn,
build_output_fn, opaque_handle_input, build_handle_destructor_items,
option_input) with a single AST visitor pass applied once at write time.

The previous design qualified only at specific emit sites — each new emit
site had to remember the call. emit_into_dispatcher missed it, so the
impl-Into dispatcher body emitted bare KeyExpr/ZKeyExpr references that
failed to resolve in the binding crate's scope.

Architecture:
- New PrebindgenExt::post_process_item(item: &mut syn::Item) trait hook
  (default no-op), invoked by write_rust on every emitted item.
- JniExt implements it via qualify_item, which runs QualifyEmittedTypes —
  a syn::visit_mut::VisitMut that walks the full AST (signatures, generic
  args, type ascriptions in let bindings, *mut/*const in cast expressions)
  and prefixes every bare single-segment Type::Path matching a registered
  source-module name with source_module.
- option_input no longer takes &JniExt; the body uses the bare t1 token
  and the post-emit visitor qualifies it later.

Also fixes the pre-existing TypeEntry field-name drift in
final_invariant_reports_unresolved_field_of_unresolved_struct.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* transition to zenoh-flat keyexpr for zenoh-java

* ZKeyExpr improved

* closeable data classes

* universa close for data classes

* throwable data class

* config in zenoh-flat

* scouting api

* JNIScout removed

* whatami from jni

* value type

* zenoh id is a wrapper

* &str as input parameter

* logging api

* structured methods

* buildrs api renamr

* scouting package

* packaging fixes

* set intersection level

* zenoh-flat as mods

* qos enums ported

* enum validation in prebindgen

* wrap enums

* bytearray in zenoh-flat

* zenoh-java zbytes

* jni synchronized

* enum return fix

* take and ptr wraper in callback

* manually implemented serialization

* publisher ported

* attachment into

* encoding in zenoh-flat

* encoding constants

* renaming, fromstring added

* zencoding

* subscriber ported

* querier/queriable ported

* query and reply methods ported

* query structure

* renaming

* get and corresponding structures

* full timestamp representation in zenoh-flat

* old log init removed

* liveliness migrated, codegenerator fixed

* value type return fix

* sesstion migrated

* valur type handling fix

* niche fix

* wrappers directly in Session and. Liveliness

* bytes form zenoh_id to string added

* zenoh-jni removed

* jni generator and zenoh-flat moved out

* wrapper lock function

* blob type

* vlaue blob zzenohid

* missing api surface added

* switch to wrapped functions

* single into

* gtom struct from callback

* recursive call

* flatten callbacks

* create java object directly

* flatten input

* no array for locks

* removed expanded code

* expand constructor support

* types expanded

* use accessors

* sample attachment accessor

* nested output

* vec unfold

* comment added

* naming shortened

* converter, renamings

* process error as normal type

* zerror declared

* keyexpr default constructor

* accessor_fun

* full expand

* recursive expamd demo

* new api migration

* zbytes support callback error interface

* expand callbacks

* output kotlin one file per package

* flattened structure

* named callback parameters

* regenrate kotlin code

* generated files reformatted

* cargo fmt

* callback formatting

* no throws in generated code

* hello and query unwrap

* tests fixed

* query close in reply operations

* reply unwrap

* multiline long calls

* sample attributes added

* typed interface callback

* generated code insignificant change

* derfaults in error

* proxy interface

* accelerated onerror handler

* unfold encoding for acceleration

* renamings in builder

* refactor: Remove local zenoh-flat-jni subproject, consume as Maven dependency

- Remove :zenoh-flat-jni from gradle subprojects (moved to separate repo)
- Replace local source dependency with Maven: org.eclipse.zenoh:zenoh-flat-jni:1.9.0
- Remove Cargo build orchestration (buildZenohFlatJni, buildZenohFlatJNI, BuildMode)
- Remove build paths for zenoh-flat-jni libraries (now bundled in Maven JAR)
- Remove Cargo-related Gradle plugins and tasks
- Native libraries are now obtained from the zenoh-flat-jni Maven artifact
- Kotlin sources are now imported from the Maven JAR as a dependency
- Supports optional local development via: includeBuild("../zenoh-flat-jni")
- Simplifies zenoh-java build: Gradle now only compiles Kotlin, not Rust

Migration notes:
- zenoh-flat-jni is now at https://github.com/ZettaScaleLabs/zenoh-flat-jni
- Versions will be synchronized with Zenoh releases (1.9.0, etc.)
- For local development, clone both repos and use composite builds if needed

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* build: Enable Gradle composite build for local zenoh-flat-jni development

- Uncomment includeBuild for ../zenoh-flat-jni since it's now in the PREBINDGEN workspace
- zenoh-flat-jni is at /Users/milyin/PREBINDGEN/zenoh-flat-jni
- Gradle will prefer local build over Maven artifact when composite build is enabled
- Allows coordinated development of zenoh-java and zenoh-flat-jni

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore: Remove zenoh-flat-jni directory from zenoh-java

The zenoh-flat-jni project has been moved to:
- GitHub: https://github.com/ZettaScaleLabs/zenoh-flat-jni
- Local workspace: /Users/milyin/PREBINDGEN/zenoh-flat-jni

zenoh-java now consumes zenoh-flat-jni via:
1. Maven artifact (org.eclipse.zenoh:zenoh-flat-jni:1.9.0) in production
2. Gradle composite build (../zenoh-flat-jni) for local development

Removing the local copy avoids duplication and confusion.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* api change ported

* serialize fixes

* loading in zenoh-flat-jni

* import predefined encodings as consts

* Use typed zenoh-flat-jni key expression overloads

* Install CI lint components for the pinned Rust toolchain

* Run flat JNI clippy without a tracked lockfile

* Preserve consuming Rust API semantics

* Limit rustfmt CI to the JNI crate

* Remove stale local task lock

* Use generated JNI receiver methods

* Pin receiver-style JNI bindings in CI

* Track de-prefixed zenoh-flat type names in JNI bindings

zenoh-flat's consolidated API dropped the Z prefix from its Rust types
(ZSample -> Sample, ...), and the generated callback interface names follow
the type name mechanically: ZSampleCallback -> SampleCallback etc. Rename the
four callback references in FlatCallbacks.kt (signatures are unchanged) and
follow the encoding id accessor rename (id -> getId).

Pin CI to the updated zenoh-flat-jni (receiver-style bindings regenerated
against prebindgen main and zenoh-flat main) and to zenoh-flat main.

Verified locally: jvmTest 101 tests, 0 failures against the composite build.

* Use derived JNI factory and getter names

zenoh-flat-jni now derives all regular method names from the flat crate's
identifiers (explicit .name() only where a clash forces it), so the internal
calls follow: JniKeyExpr.newTryFrom/newAutocanonize/newJoin/newConcat,
JniConfig.newFrom*, JniEncoding.newFromString/newWithSchema,
JniZBytes.newFromVec, zSession.getPeersZid/getRoutersZid. SDK public API
unchanged. CI pin bumped to the matching zenoh-flat-jni commit.

---------

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Encoding as a pure JVM value + native publisher default + pinned per-put override (#484)

* Make Encoding and ZenohId.toString pure JVM values

An encoding IS its (id, schema) pair — Zenoh's own representation; the
textual form is derived from a fixed table. With the id<->name table already
JVM-side (the generated ENCODING_* constants) and the companion
zenoh-flat-jni change crossing Encoding by value in both directions, the SDK
Encoding becomes a plain immutable value: no native handle, no native calls,
no lazy caches, no locking, nothing to close. This also removes a native
memory leak: received Sample/Query/ReplyError previously retained a cloned
Encoding handle with no close path.

- Encoding.kt: immutable (id, schema); from()/toString()/withSchema()
  implement Zenoh's exact conversion rules (incl. the custom-encoding
  name-preserving withSchema and the render-only CUSTOM<->"" table row);
  equality on (id, schema), matching Zenoh core.
- ZenohId.toString: the little-endian lowercase-hex rule in pure Kotlin.
- Callback/fromParts leaves follow the new (encId, encSchema) decomposition;
  outbound sites pass .id/.schema directly.
- Correspondence tests (EncodingCorrespondenceTest, ZenohIdCorrespondenceTest)
  verify the pure implementations against the native ones across the whole
  predefined id range, parse/render edge shapes, and random ids — the
  contract for any JVM-side reimplementation of zenoh-flat API. One test
  caught and fixed a real divergence (custom-encoding withSchema).

Pairs with ZettaScaleLabs/zenoh-flat-jni#4 (CI pin bumped). jvmTest: 105
tests, 0 failures.

* Publisher default encoding at declare + PinnedEncoding per-put override

Two encoding fast paths over the dual-arm expansion (prebindgen#80,
zenoh-flat#3, zenoh-flat-jni#4):

- The publisher's default encoding is set NATIVELY once at declare time
  (PublisherOptions.encoding -> declarePublisher's encoding arm); plain
  put(payload) passes absent (sel -1), so no encoding data crosses per call.
  Previously the JVM tier re-sent (id, schema) on every put.
- PinnedEncoding (Encoding.pinned()) preallocates the native form; passing it
  in PutOptions/ReplyOptions/GetOptions crosses only a borrowed handle (native
  clone = Arc bump) — no schema-string traffic in hot publish loops. close()
  releases the handle (falls back to the plain (id, schema) arm); a finalizer
  backstops leaks. A PinnedEncoding equals its plain counterpart.
- All outbound sites route through one Encoding?.forWire() helper emitting the
  selector tuple (-1 absent / 0 value / 1 pinned handle).

Tests: PinnedEncodingTest (publisher-default applies natively end-to-end;
pinned override reused across puts; post-close fallback), correspondence
tests updated to the dual-arm newWithSchema. jvmTest: 107 tests, 0 failures.
CI pins: zenoh-flat-jni cbbca40, zenoh-flat d792547.

* Move encoding/zid logic to the shared bindings tier; drop pinning

zenoh-flat-jni is the shared tier reused by both zenoh-java and zenoh-kotlin,
so the pure-JVM conversion logic moves there (EncodingCodec, ZenohId.zidString
— next to the generated constants they are built from). io.zenoh.bytes.Encoding
shrinks to a thin facade: the established constants and API delegating to the
shared codec, zero logic.

Drop PinnedEncoding and the selector-tuple wire helper: with the publisher's
default encoding set natively at declare time, the hot publish loop crosses no
encoding data at all, and per-call overrides crossing (id, schema) cost only a
short string decode — not worth a resource class in the public API. Encoding
params revert to the plain (present, id, schema) crossing.

jvmTest: 106 tests, 0 failures (correspondence suites now exercise the shared
codec; PublisherEncodingTest verifies the native declare-time default +
per-put override end-to-end). CI pins: zenoh-flat-jni 9bc155b, zenoh-flat
main (6d22091, #3 merged).

* Encoding: native handle where it is born, value where it is cheapest (#485)

* Encoding: native handle where it is born, value where it is cheapest

Minimize JNI crossings for every encoding flow (consumes zenoh-flat-jni
PR #5):

- Predefined constants stay VALUE-ONLY: a send carries just their id
  inside the send call itself — no native handle ever exists for them,
  no extra crossing.
- Custom (schema-carrying) encodings create their native handle at
  construction — the one natural crossing — and every send after passes
  a bare jlong (borrowed and cloned natively, reusable forever).
- Received encodings (sample/query/reply) arrive send-ready: the
  delivery decomposition now includes the owned handle, so the
  save-and-republish scenario never rebuilds the native value from its
  schema string. Handle release is GC-managed (EncodingCleaner in the
  shared tier); Encoding stays a plain non-closeable value with
  unchanged (id, schema) equality/rendering.

Send call sites drive the generated encoding selector block through the
internal Encoding?.jniSel/jniId/jniSchema/jniHandle helpers — one flat
call, zero extra crossings in every case.

New EncodingHandleTest covers the ownership model end-to-end; 110 jvm
tests green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* Lifecycle backstops moved into the gc_managed JNI tier

zenoh-flat-jni's Encoding, Session, Publisher, Subscriber, Queryable,
Querier, Scout, LivelinessToken and Query handles are now gc_managed
(milyin/prebindgen#82): a shared Cleaner frees an unreachable handle
whose owner never released it, with explicit close/undeclare settling
the release ticket first.

Delete the 8 deprecated-for-removal finalize() nets (JEP 421) — the JNI
handle is its own backstop now — and drop Encoding's EncodingCleaner
registration (superseded by the gc_managed class; the hand-written
helper is deleted in zenoh-flat-jni).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* CI: bump zenoh-flat-jni pin to the merged encoding-handle commit

The encoding selector wire shape and gc_managed lifecycles this branch
consumes landed in ZettaScaleLabs/zenoh-flat-jni#5 (e802317); the old
pin predates it, so CI compiled against the previous
(present, id, schema) encoding signatures.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

* Received preset encodings are value-only end to end (#488)

* Received preset encodings are value-only end to end

zenoh-flat-jni#6 makes the delivered encoding handle CONDITIONAL on
schema presence (binding-local encoding_if_schema behind prebindgen#84's
field! leaf): a received preset re-sends through the id arm for free, so
no per-message native handle — clone + Box + JVM wrapper + gc-Cleaner
registration + Cleaner free — is ever materialized for it. Schema-
carrying encodings keep the send-ready handle.

Adapt the delivery plumbing: Sample.fromParts encH becomes nullable
(Query's already was), the reply callback drops its non-null assertion,
and EncodingHandleTest's preset round-trip flips to assert the received
copy has NO handle — the new contract. CI pin bumped to the flat-jni#6
tip.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* CI: bump zenoh-flat-jni pin to the #6 merge commit

The previous pin was a branch commit deleted on merge; 1e040c9 is
ZettaScaleLabs/zenoh-flat-jni#6 on main (conditional encoding handle,
final fun!+sig! syntax).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

* Receive path goes value-only: KeyExpr string-backed except declared, Encoding always (id, schema) (#489)

* Received preset encodings are value-only end to end

zenoh-flat-jni#6 makes the delivered encoding handle CONDITIONAL on
schema presence (binding-local encoding_if_schema behind prebindgen#84's
field! leaf): a received preset re-sends through the id arm for free, so
no per-message native handle — clone + Box + JVM wrapper + gc-Cleaner
registration + Cleaner free — is ever materialized for it. Schema-
carrying encodings keep the send-ready handle.

Adapt the delivery plumbing: Sample.fromParts encH becomes nullable
(Query's already was), the reply callback drops its non-null assertion,
and EncodingHandleTest's preset round-trip flips to assert the received
copy has NO handle — the new contract. CI pin bumped to the flat-jni#6
tip.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* CI: bump zenoh-flat-jni pin to the #6 merge commit

The previous pin was a branch commit deleted on merge; 1e040c9 is
ZettaScaleLabs/zenoh-flat-jni#6 on main (conditional encoding handle,
final fun!+sig! syntax).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* KeyExpr: string-backed except declared

Consumes zenoh-flat-jni's string-delivering KeyExpr output. Ownership
model (the Encoding model transplanted): a native handle exists ONLY
behind Session.declareKeyExpr — the single case zenoh attaches a wire
declaration (the only state beyond the string, paying off only on send
through the declaring session). Everything else is a plain string value:

- tryFrom validates natively once and releases the probe handle;
  autocanonize reads the canonized string and releases;
- RECEIVED keyexprs (sample/query/reply) arrive as ONE eager string —
  no native allocation, nothing to free; the old per-message handle
  never carried a declaration (zenoh's RX path builds declaration-less)
  so it bought nothing on re-send while costing an unfreeable alloc and
  a second getStr crossing for every string-reading consumer;
- sends pick the string or handle selector arm via
  KeyExpr.jniSel/jniStr/jniHandle (cloneHandle for consuming params);
- algebra ops use the declared handle or a transient probe;
- undeclare demotes to string-backed; close() is meaningful only for
  declared instances (doc matches upstream again).

113 jvmTest green incl. the new KeyExprHandleTest (constructed/declared/
received ownership + saved-keyexpr re-publish). CI pin bumped.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* CI: bump flat-jni pin to the gc_managed-KeyExpr commit

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* examples: ping-pong exercises the receive-then-resend encoding path

ZPing puts carry a custom schema-carrying encoding and verify (after
warmup) that the echoed sample brings it back; ZPong retransmits the
RECEIVED payload AND encoding — a pong that drops metadata is not a
faithful echo, and the round trip now measures the real
receive-then-resend path the send-ready Encoding handle was built for.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* Encoding: received encodings are value-only (id, schema)

Adapts to zenoh-flat-jni aecffac, which dropped the receive-side
conditional handle leaf: the ping-pong A/B (ZPing/ZPong with a custom
schema-carrying encoding, real payload+encoding retransmission) showed
the per-receive handle lifecycle costs more than the schema re-decode it
saves on resend (flat medians 68/68us handle vs 58/67us value-only at
8B/1KB, value-only never slower).

Custom encodings still own a construction-born handle and send as a bare
jlong; a saved received encoding re-sends through the (id, schema) value
arm. Callback lambdas and Sample/Query.fromParts lose the encH leaf;
EncodingHandleTest asserts value-only delivery; CI pin bumped.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* ci: bump zenoh-flat-jni pin to e4a8ed7

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* examples: restore upstream ZPing/ZPong

The custom-encoding echo instrumentation was measurement scaffolding for
the Encoding handle A/B (verdict shipped: received encodings are
value-only); the examples keep their upstream form.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

* docs: align lifecycle KDoc with actual GC management (#490)

Every handle-owning class except ZBytes is now GC-backstopped (Config
joined in zenoh-flat-jni PR#8), and the docs now say exactly what
happens to forgotten instances:

- Session: close() KDoc contradicted the code — close undeclares every
  live declaration, it does not leave them alive; class KDoc notes the
  GC backstop.
- ZBytes: new lifecycle section — created ZBytes are plain values;
  received ones free their native buffer on first read; a received
  payload/attachment that is never read keeps it (deliberately NOT
  GC-managed: per-message Cleaner cost measured -23% thr @8B).
- Publisher/Querier: session reference is weak — forgotten instances
  are undeclared by the GC backstop, not at session close only.
- Subscriber/Queryable: session reference is strong — dropping the
  reference does NOT stop them; active until undeclare or session
  close.
- Scout/LivelinessToken: 'dropped' now spelled out as GC-collected,
  non-deterministic; close for prompt effect.
- KeyExpr (declared) / Config: backstop notes.

CI pin bumped to flat-jni dbb1f8c (Config gc_managed, PR#8).

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

* Session.undeclare: detach the key-expr handle even when undeclare fails (#491)

* Session.undeclare: detach the key-expr handle even when undeclare fails

The generated wrapper consumes the handle even when the native undeclare
errors (the Rust side takes it by value). Clearing keyExpr.handle only after
a successful call left a dead handle attached on failure: every later
operation selected the closed handle and failed instead of degrading to the
string form. Detach in a finally; regression-tested by undeclaring through
the wrong session.

Found while porting zenoh-kotlin (eclipse-zenoh/zenoh-kotlin#668), which had
inherited the same pattern.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Record PR #491 in the transition table

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

* Parameters becomes a thin facade over the shared string-backed implementation (#492)

* Parameters becomes a thin facade over the shared string-backed implementation

The per-SDK map-backed parser duplicated zenoh-kotlin's and diverged from
Rust: it percent-decoded values, rejected duplicated keys (throwing on
attacker-controlled selector parameters in the queryable upcall), and
normalized eagerly. io.zenoh.query.Parameters now delegates every operation
to the shared io.zenoh.jni.query.Parameters (zenoh-flat-jni), a pure-Kotlin
string-backed mirror of Rust's zenoh-protocol parameters.rs — construction is
infallible on any input with zero JNI crossings.

Behavior changes, all aligning with Rust: no percent-decoding; from(String)
never throws; duplicated keys accepted with first-match-wins get (last wins
in toMap, as Rust's HashMap conversion); trailing ';'/'='/'|' trimmed at
construction; toString round-trips the stored string; equality is string
equality.

New ParametersCorrespondenceTest validates the shared implementation against
the native parameters_get/insert/is_well_formed oracle (zenoh-flat#4) over
edge shapes and 500 randomized inputs — it caught the trailing-separator trim
rule. remove is correspondence-exempt: upstream zenoh's parameters::remove
has an iterator-consumption bug (find advances past entries preceding the
first match before filter runs, dropping them; removing an absent key erases
everything); the shared implementation follows the documented 'preserving the
insertion order' contract instead, and nativeRemoveBugCanary pins the buggy
native behavior so the exemption is removed when upstream fixes it.

Also folds in the RX hardening that motivated the unification:
queryCallbackOf frees the owned native leaves and finalizes the query if
decomposition ever throws, and QueryParametersTest sends a=1;a=2;bad=%zz
through the raw bindings end to end. CI pins bump to zenoh-flat#4 and
zenoh-flat-jni#9.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Extend parameters correspondence to the full API; reframe the adaptation

zenoh-flat's parameters functions are regular API (values, contains_key and
extend now declared too); the JVM runs the same semantics in pure Kotlin
because crossing JNI per string operation is expensive — a JNI peculiarity,
not a zenoh-flat design choice. Correspondence now covers get/values/
containsKey/insert/extend/isWellFormed over the edge shapes and 500
randomized inputs; comments and test names updated to say 'native
implementation' (remove stays exempt behind nativeRemoveBugCanary until
eclipse-zenoh/zenoh#2687 lands). CI pins bump to the reworked zenoh-flat and
zenoh-flat-jni heads.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* ci: pin zenoh-flat to merged main (parameters API, zenoh-flat#4)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

* Migrate to the split error-handler API (zenoh-flat-jni #45) (#495)

* Migrate to the split error-handler API (zenoh-flat-jni #45)

prebindgen split the generated JNI error callback into two channels: the
binding `JniErrorHandler.run(je)` (unchanged) and the typed domain
`ErrorHandler.run(message)` (`je` removed, called only on a domain `Err`).
A fallible flat wrapper now takes both — `onBindingError` then `onError`.

`JNIErrorHandlers.kt`:
- `throwZError` becomes the 1-arg domain handler
  (`ErrorHandler { message -> throw ZError(message) }`).
- `throwZError0` (the binding `JniErrorHandler`) is unchanged — it now doubles
  as the `onBindingError` of a fallible call.

Call sites: every fallible flat call gains `throwZError0` before its
`throwZError` (42 sites across Config/Session/KeyExpr/Liveliness/Publisher/
Querier/Query/Scout + one jvmTest), matching the wrapper's
`(…, onBindingError, onError)` order. Infallible calls (`throwZError0`) and
the binding-only `Encoding.newFromId { je -> … }` lambda are untouched.

Builds against the local composite zenoh-flat-jni (split-error-handler);
120 jvmTest tests pass, including the domain-error paths
(`configFailsWithIllFormatedYAMLTest`, `insertIllFormattedJson5ShouldFailTest`).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* ci: repoint zenoh-flat-jni pin to the split regen + ownership marker

The split error-handler regeneration (zenoh-flat-jni #10) plus the merged
Kotlin ownership-marker fix (zenoh-flat-jni #11, 249fe9e on shared-parameters).
CI pinned the pre-split 757cc6a, whose single-channel
`ErrorHandler.run(je, message)` wrappers are incompatible with this branch's
two-caller call sites; #11's marker is also required for the composite
`cargo build` to regenerate at all (write_kotlin refuses a non-empty output
root without it). Point CI at the merged commit so the composite build both
matches the source and regenerates.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

* Serialize via the shared pure-Kotlin SerializationCodec (no JNI) (#496)

* Serialize via the shared pure-Kotlin SerializationCodec (no JNI)

Replace the per-element JNI serialization (serializeViaJNI) with the shared
pure-Kotlin SerializationCodec. ZSerializer/ZDeserializer build a
SerializationCodec.SerdeType from the Guava TypeToken's java.lang.reflect.Type
(serdeTypeOfJava) and call the shared codec through the SAME throwZError0 error
handler used for generated wrappers (the codec never throws — it invokes the
handler, which throws ZError), so the hand-written serializer is wired exactly
like a generated one. No duplication — the same codec zenoh-kotlin uses.

Full jvmTest: 120 pass (the 10 ZBytes tests now run via pure Kotlin). The Type
path's supported set is unchanged (signed/collection; Java can't express the
unsigned/Pair/Triple types the KType path adds).

Depends on the zenoh-flat-jni SerializationCodec commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* ci: bump zenoh-flat-jni pin to the pure-Kotlin serializer commit

The pure-Kotlin SerializationCodec this branch delegates to lives in
zenoh-flat-jni#13 (db4fb2d). Point CI at it so the composite build has the
shared codec.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* ci: repoint zenoh-flat-jni pin to the rebased serializer commit

The zenoh-flat-jni serialization PR was rebased onto main (conflict resolution),
changing the SerializationCodec commit SHA. Repoint CI at the current commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Drop correspondence tests moved down to zenoh-flat-jni

The Parameters/Encoding/ZenohId correspondence tests moved into zenoh-flat-jni's
own test suite (it now self-verifies its pure implementations against the native
oracle, which relocated to the internal io.zenoh.jni.test package). SDK
production is unaffected — it uses the pure io.zenoh.jni.query.Parameters and the
generated Encoding/ZenohId handles, all unchanged.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* ci: bump zenoh-flat-jni pin to the test-package/self-verify commit

zenoh-flat-jni moved its native oracle to the internal io.zenoh.jni.test
package and added self-verifying correspondence tests. Point CI at that commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* ci: bump zenoh-flat-jni pin to merged main (71736f2)

zenoh-flat-jni #13 squash-merged to main as 71736f2. Re-pin from the
pre-merge branch commit 2755c06 (an orphan once the pure-kotlin-serde
branch is deleted) to the permanent main commit, which also carries the
final merged SerializationCodec (strict UTF-8).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

* Realign with zenoh-flat HEAD; a timestamp carries its clock's id

zenoh-flat renamed part of its surface and moved several handle types to
value forms (ZettaScaleLabs/zenoh-flat-jni#16). Mostly mechanical, with one
change that reaches the public API.

## A reply timestamp needs a real originating-node id

`ReplyOptions.timeStamp` was an Apache commons-net `TimeStamp`: an NTP64
instant and nothing else. Zenoh's timestamp is the pair `(ntp64, id)`, and it
orders and de-duplicates on the pair — so the missing half was supplied by the
JNI layer, which built one with a **random** id:

    Timestamp::new(NTP64(timestamp_ntp_64 as u64), ID::rand())   // zenoh-jni/src/query.rs:82

The time looked right while the id was untethered from any node. zenoh-flat
removed that (ZettaScaleLabs/zenoh-flat#47) and `query_reply_success` now takes
a whole `Timestamp`, so there is no longer anywhere for a fabricated id to
come from — which is the point.

`io.zenoh.time.Timestamp` is that pair, mirroring `zenoh::time::Timestamp`.
`ReplyOptions.timeStamp` and `Sample.timestamp` carry it instead of the
commons-net type. **This is source-breaking**: a caller now writes

    options.setTimeStamp(Timestamp.ofNtp64(ntp64, session.info().zid()));

`ofNtp64` exists because the primary constructor takes `ULong`, which Java
cannot express; it takes the same 64 bits `TimeStamp(long)` does, so
`TimeStamp.getCurrentTime().ntpValue()` still feeds it. The id is the
replying session's — the reply does originate here — and `Sample.timestamp`
now surfaces the sender's id, which was previously discarded on receive.

The library no longer depends on commons-net; the tests and the ZQueryable
example still use it, as an NTP64 clock.

## Mechanical

* `keyexpr_get_str` -> `asStr`, `zbytes_as_bytes` -> `toBytes`.
* `session_get` takes a whole `Selector`, so the folded (key_expr, parameters)
  pair is gone. A Selector holds an owned key-expr handle with no string arm,
  so `KeyExpr.intoJniHandle()` materializes one for a string-backed key
  expression — the slot trio cannot express this case.
* An encoding schema is raw bytes: zenoh transmits it verbatim and does not
  require UTF-8. This SDK's `Encoding` carries a String, so it is encoded at
  the boundary on send and decoded lossily on receive, rather than throwing on
  a received message.
* A sample's source and a reply's replier arrive as whole `SourceInfo` /
  `EntityGlobalId` values, so optionality lives on the value rather than on a
  leading zid leaf.
* `config_new_from_json` is gone as an invented constructor (base zenoh has no
  `from_json`). `Config.fromJson` parses via JSON5, of which JSON is a subset,
  so every input accepted before still parses to the same config.

CI pins move to zenoh-flat 3f431b6b and zenoh-flat-jni 5e0ae509.

112 JVM tests pass; examples compile.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* CI: pin zenoh-flat-jni to the merged realignment

ZettaScaleLabs/zenoh-flat-jni#16 merged as 498ba26, so the pin moves off the
PR branch commit it was tracking.

The squash merge's tree is byte-identical to the branch tip this was verified
against, and 498ba26 pins zenoh-flat at the same 3f431b6b already pinned here,
so nothing but the SHA changes. 112 JVM tests pass against it; examples
compile.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* CI: build zenoh-flat-jni against published prebindgen (#511)

* CI: track zenoh-flat-jni onto the split prebindgen crates

zenoh-flat-jni#23 replaces its single `prebindgen` dependency with the
three crates the #371 split produced, so this workflow's two hardcoded
per-crate rewrites no longer match anything: the path deps would survive
into a checkout that has no sibling `../prebindgen`. One regex over every
`../prebindgen/*` dep covers the split and whatever it grows next.

The pinned checkouts also move from the stale ZettaScaleLabs forks (last
pushed in July) to the eclipse-zenoh repositories the work actually lives
in, at the two open PR heads.

No Kotlin change: zenoh-flat-jni regenerates byte-identical Kotlin over
the split, and all 112 jvmTest cases pass against it locally.

* CI: drop the prebindgen path rewrite, it is published

prebindgen 0.5.0 is on crates.io, so zenoh-flat-jni and zenoh-flat
declare version constraints and nothing has to be rewritten before the
build. Re-pin both checkouts to the PRs that make that switch.

* CI: re-pin zenoh-flat to main, zenoh-flat-jni to zenoh-flat-jni#24

eclipse-zenoh/zenoh-flat#80 merged as 81feb94. zenoh-flat-jni#25 landed
on the #24 branch rather than main, so that checkout tracks #24 now.

* CI: re-pin zenoh-flat-jni to main

eclipse-zenoh/zenoh-flat-jni#24 merged as 6f81eb8; both sibling
checkouts now sit on their repositories' main.

* Release preparation: repair the release path and document publishing (#514)

* Make the release resolve zenoh-flat-jni like any other consumer

The release path on this branch was dead, not merely dated. bump-and-tag
wrote to zenoh-jni/Cargo.toml, publish-jvm cross-built it and
publish-android installed Rust Android targets - and zenoh-jni/ was
removed when the SDK moved onto the generated bindings. The first job of
a release would have failed.

- settings.gradle.kts included ../zenoh-flat-jni unconditionally, so a
  release would have been built against whatever sat on the builder's
  disk. Now opt-in via -PuseLocalFlatJni=true; CI passes it explicitly
  because it checks the sibling out, and a release does not.
- The dependency version moves to gradle.properties, so the release can
  bump it and a rehearsal can point at a snapshot without editing
  tracked source.
- bump-and-tag bumps version.txt and that property, and refuses a
  -SNAPSHOT dependency outright: consumers do not configure the snapshot
  repository, and snapshots mutate and expire, so a release that
  depended on one would be broken for everyone but us.
- The zenoh-version input becomes zenoh-flat-jni-version, which is the
  only upstream version this repository now chooses.
- Both publish workflows drop their native toolchains; the libraries
  arrive inside the zenoh-flat-jni artifact. The unapplied
  rust-android-gradle plugin goes with them.

Verified: the build fails to resolve without the flag (as a release
should), succeeds with it, and the bump script rejects a snapshot and
rewrites both files otherwise.

* Document how zenoh-java is published

Mirrors zenoh-flat-jni's guide in structure and intent, but the pipeline
here is much smaller and the document says why: this repository builds
no native code, so there is no matrix, no cross-compilation and no
artifact to inspect - the libraries arrive inside the zenoh-flat-jni
dependency.

The concepts that guide already explains once - coordinates, staging,
signing - are linked rather than restated.

What is specific here is the ordering constraint, which is the question
the transition keeps raising: zenoh-java cannot be released until the
zenoh-flat-jni version it depends on is really on Central, because
consumers do not configure the snapshot repository and snapshots mutate
and expire. Rehearsals have no such constraint, and the document gives
the ladder - local composite, snapshot dependency, snapshot publication
- with what each one actually proves.

Known gaps are stated rather than implied: the repaired release path has
never run, there is no consumer test, and the Android NDK configuration
is retained unverified.

* Let a rehearsal resolve an unreleased zenoh-flat-jni

The guide told the reader to add the snapshot repository 'for the
duration of a rehearsal' - editing tracked source, which is the thing
the rest of this change removes. That was not a procedure, it was a
gap.

The Central snapshot repository is now declared conditionally: present
only when zenohFlatJniVersion ends in -SNAPSHOT, and content-filtered to
that single module. A rehearsal names the version on the command line
and nothing is edited; a release version never ends in -SNAPSHOT, so a
release build cannot reach a mutable artifact even if someone tried. The
guarantee is structural rather than procedural.

Verified against the snapshot the zenoh-flat-jni rehearsal actually
published:

  -PzenohFlatJniVersion=1.9.0-rc4-SNAPSHOT  ->  112 tests pass, no
                                                composite build
  default (1.9.0)                           ->  unresolvable, and the
                                                snapshot repository is
                                                absent from the searched
                                                locations

* Let a rehearsal use a snapshot, and stop aborting on a no-op bump

Three defects the review found in the release script and workflows, all
of which would have stopped a release or a rehearsal outright.

The snapshot rejection was unconditional, so the rehearsal this PR
documents - pass the snapshot as zenoh-flat-jni-version - was refused
before Gradle ran. It now applies only to live runs, which is where the
reasoning actually holds: a release may not depend on a snapshot, a
rehearsal is how the SDK is exercised before the binding exists at all.

git commit on an unchanged gradle.properties exits non-zero, so
supplying the version already configured aborted the release under
set -e before tagging. It commits only when the file moved.

Neither publish workflow ran Gradle at all unless maven_publish was on,
so an unchecked rehearsal proved nothing while the guide claimed it
proved the artifact assembles. Both now assemble and generate the POM
unconditionally; only the upload is gated.

The guide also claimed one binding artifact carries both desktop and
Android natives. It does not - they are separate coordinates, and the
Android publication currently depends on the desktop one, so Android
consumers get no jni/<abi>/ libraries. Recorded as a defect with the
release blocked on it rather than described as working.

* Stop telling users this repository builds native code

The README described the build that was removed: publishing 'triggers
the compilation of Zenoh-JNI in release', the Android section required
an NDK and four Rust targets, and a warning said the result was tied to
the builder's rustup target. None of that is true now - the libraries
arrive inside the zenoh-flat-jni artifacts, cross-compiled elsewhere,
which is precisely why the result is *not* machine-specific.

Also fixes coordinates that were wrong independently of this work: the
Android dependency example named zenoh-kotlin-android in the zenoh-java
README, and the JVM examples used zenoh-java-jvm, which is not what this
repository publishes.

* Give each publication the binding artifact it needs

The Android POM named the desktop coordinate, so an Android consumer
received an artifact with six desktop libraries and no jni/<abi>/ - it
could not load anything. The build now selects zenoh-flat-jni-android
when -Pandroid=true and zenoh-flat-jni otherwise, and the conditional
snapshot repository serves both modules.

Verified by generating both POMs, which turns out not to need an Android
SDK even though building the AAR does:

  jvm/pom-default.xml            -> zenoh-flat-jni
  androidRelease/pom-default.xml -> zenoh-flat-jni-android

The selection is build-wide rather than per source set because
commonMain references the generated classes, and Kotlin Multiplatform
cannot see a dependency declared only in platform source sets. That is
also the reason the two publications cannot come from one Gradle
invocation, so the atomicity gap stays - now with its cause recorded and
the upstream fix named: variant-aware module metadata in zenoh-flat-jni
would collapse the two coordinates into one.

Also fixes the javadoc JAR, which shipped empty: it packaged
build/dokka/html, which Dokka never writes. Pointed at dokka/javadoc,
with a check that fails the build rather than publishing 25 bytes again
- now 780 KB across 172 files.

README: Rust is no longer a prerequisite, the Android section no longer
claims to build an NDK library, jvmTest no longer 'compiles the native
library in debug mode', and the examples use 1.9.0, which resolves,
instead of 1.1.1, which 404s.

* One dependency, one invocation, one staging repository

The payoff of the zenoh-flat-jni KMP change.

commonMain declared the desktop or Android coordinate depending on a
build-wide -Pandroid flag, because the two were unrelated coordinates
and Kotlin Multiplatform cannot see a dependency declared only in the
platform source sets. That forced the JVM and Android publications into
separate Gradle invocations, hence separate staging repositories: a live
release could make one coordinate public and then fail on the other.

zenoh-flat-jni now publishes a root coordinate with module metadata, so
one declaration resolves per target. The flavour selection goes, and
with it the reason the publications were split - publish-jvm.yml and
publish-android.yml merge into one publish.yml whose single Gradle
invocation produces both and is followed by one closeAndRelease.

Verified against the KMP snapshot 1.9.0-rc8-SNAPSHOT: the zenoh-java POM
resolves zenoh-flat-jni-jvm and the zenoh-java-android POM
zenoh-flat-jni-android, from the same single declaration; one invocation
publishes both to mavenLocal; 112 tests pass.

* Repoint the callers at the merged publish workflow

Merging publish-jvm.yml and publish-android.yml left three references to
the deleted files: two snapshot-publish jobs in ci.yml and the needs
list of release.yml's publish-github. GitHub rejects the whole workflow
when a reference does not resolve, so CI failed at startup with no jobs
at all - which is why the PR showed a single check.

The release.yml one is instructive: my edit replaced
'needs: [tag, publish-jvm, publish-android]', but the file said
'[tag, publish-android, publish-jvm]'. Different order, no match, no
error - the replacement simply did nothing.

The two snapshot jobs become one, for the same reason the release
publishes once: a single Gradle invocation produces both publications.

Added a check that every './.github/workflows/...' reference and every
'needs' entry resolves, and ran it over all six files.

* Correct PUBLISHING.md for the merged publish job and KMP resolution

- the pipeline section still named publish-jvm/publish-android
- the snapshot-repository snippet still showed includeModule, which under the
  KMP dependency would hide zenoh-flat-jni-jvm/-android and fail resolution
- state that zenoh-java itself publishes two plain coordinates and why the
  workflow names its publication tasks rather than publishing all of them

* Restore the documentation deployment in the release sequence

Merging publish-jvm/publish-android into one publish job dropped the
publish-dokka call with them, orphaning publish-dokka.yml and leaving the
gh-pages API site README.md links to unmaintained. Restore it after publish,
with the contents:write the gh-pages push needs.

* Retire the transition scaffolding (#515)

Two files on this branch describe a repository that no longer exists.

ZENOH_FLAT_TRANSITION.md was the integration branch's own bookkeeping — an
architecture sketch and a table of the constituent PRs. The table stopped at
#484 and its links still pointed at the ZettaScaleLabs forks the work has
since left, so it now misinforms rather than informs; the same content, kept
current, lives in the #482 description. It was always meant to go when the
branch merges.

rust-toolchain.toml pinned 1.97.1 for a repository that builds no Rust. CI
installs its components explicitly (`--toolchain 1.93.0`) and runs every cargo
command inside the sibling zenoh-flat-jni checkout, where that repository's own
toolchain file applies, so this pin selects nothing and can only mislead
whoever reads it next.

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

* fix(ZBytes): publish the lazy byte cache safely (#517)

The lazy materialization in ZBytes is double-checked locking: the fast path
reads `eager` outside the monitor while the slow path writes it under it.
Without volatile, a reader observing the non-null reference has no
happens-before edge to the copy that filled the array.

Mark `eager` volatile. It moves out of the primary constructor because
@Volatile targets fields. The synchronized slow path stays: it is what
guarantees exactly one thread copies out of and closes the native handle.
`handle` stays non-volatile — it is only touched inside the monitor.

Closes #516

* CI: track zenoh-flat-jni main, and stop rebuilding it here (#520)

* CI: pin zenoh-flat-jni to the timestamp node-id fix

zenoh-flat carried a timestamp's node id trimmed to its significant
bytes while `ZenohId` carries the full zero-padded width, so a received
sample's timestamp compared unequal to the one that stamped the reply
whenever the session identifier had a high-order zero byte - about once
in 256 sessions, both sides rendering identically. `QueryableTest`
asserts exactly that equality, and the same flake was observed in
zenoh-kotlin.

Fixed in eclipse-zenoh/zenoh-flat#86 and picked up by
eclipse-zenoh/zenoh-flat-jni#35, which this pins.

Drop the zenoh-flat checkout: nothing reads it, since zenoh-flat-jni
resolves zenoh-flat from git and its Cargo.lock is the rev that decides
- a pin that pinned nothing while reading as if it did.

* CI: stop rebuilding and re-linting zenoh-flat-jni here

This repo pinned the Rust toolchain at 1.93.0 to add rustfmt and clippy
to it, then ran `cargo fmt --check`, clippy, `cargo test
--no-default-features` and `cargo build` inside the zenoh-flat-jni
checkout. zenoh-flat-jni pins its own toolchain in rust-toolchain.toml,
so the components landed on one toolchain while the checks ran on
another - `cargo fmt` failed with "'cargo-fmt' is not installed" as soon
as that pin moved to 1.97.1.

Rather than chase the version, drop the checks: they are zenoh-flat-jni's
own CI, run on three platforms for the very commit pinned here, and its
format check uses an import-granularity config this bare `cargo fmt`
never applied - so the two were not even the same check.

`cargo build` goes too. The composite build's test task already depends
on zenoh-flat-jni's native build, so Gradle drives cargo; verified by
deleting the built dylib and running `jvmTest`, which rebuilt it and
passed all 112 tests.

What remains is `rustup show` in the zenoh-flat-jni directory, which
installs whatever toolchain that repo pins, so this repo never names a
version its dependency is free to change.

* CI: pin zenoh-flat-jni to the merged commit

The pin named the PR branch commit, which is reachable but not on main.
eclipse-zenoh/zenoh-flat-jni#35 has since merged as e75529c with an
identical tree, so this only makes the pin name a commit that main
actually carries.

* CI: track zenoh-flat-jni main instead of a pinned commit

A pinned SHA has to be hand-edited for every upstream fix, and that hop -
zenoh-flat-jni to this SDK - is the one no bot covers. The timestamp
node-id flake is what that costs: the fix sat in zenoh-flat for a day
while CI kept testing the commit the pin named.

Below zenoh-flat-jni the chain is automatic (eclipse-zenoh/ci#465 puts it
and zenoh-flat on the lockfile sync), so following its default branch
makes the whole chain automatic. The trade is deliberate: a run is no
longer reproducible from this repository's commit alone, and a broken
zenoh-flat-jni main breaks CI here - which, for a branch whose entire
purpose is to track those bindings, is the signal we want.

---------

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant