gameHosted
Host a turn-based game over a ConnectionSource: accept-pump a raw hub mesh (us.tractat.kuilt.gossip.hostedMesh) and run gameHost on it with a star-relay (us.tractat.kuilt.gossip.starOverlay, us.tractat.kuilt.gossip.FullFanout) overlay. Clients connect as usual — they call gameJoin over a KtorClientLoom seam, unchanged.
This is thin sugar over hostedMesh + gameHost(overlay = { starOverlay(…) }). Advanced callers who need to interpose on the hub seam (logging, principal extraction, metering) call us.tractat.kuilt.gossip.hostedMesh directly and pass the resulting us.tractat.kuilt.core.Seam as gameHost(seam = mesh, overlay = { starOverlay(it, …) }).
Migration trap (#1370). Do not interpose via the older gameHost(seam = hostedOverlay(...)) shape — that wraps the whole session mux, Raft included, above the gossip flood, so the overlay's origin-restamping can launder a forged consensus frame. The commit-safe shape passes the raw us.tractat.kuilt.gossip.hostedMesh as seam and the flood as overlay, keeping Raft and heartbeat below it.
Parameters
Identity the hub uses on the overlay mesh.
The front door: one us.tractat.kuilt.core.fabric.Connection per accepted peer. On a real server this is KtorConnectionSource(application, "/game"); in tests it is us.tractat.kuilt.test.fabric.InMemoryConnectionSource.
Total number of voters (including the hub) the cluster must reach.
When to return the leader — ReturnPolicy.FullMembership (default) or ReturnPolicy.Quorum. See ReturnPolicy.
Durable Raft state. Defaults to InMemoryRaftStorage.
Timing and behaviour parameters. Tests pass RaftConfig(expectVirtualTime = true) (the only supported virtual-time path).
Optional per-voter heartbeat monitoring. When non-null, lost voters are evicted and re-admitted automatically. See gameHost for details.
RNG for gossip jitter and overlay bookkeeping. Production uses Random.Default; tests inject a seeded instance for deterministic virtual-time execution.
Clock for heartbeat measurements. Required — no wall-clock default (the same "optional ≠ tuning" convention gameHost and clusterClient follow). Fed unconditionally into the overlay hostedOverlay as well as gameHost, so it is always live here. Production callers pass { kotlin.time.Clock.System.now() }; tests inject a controllable clock.
How the hub obtains its Raft §8 dedup id. See gameHost.
Per-link admission policy for the hub's accepted connections, enforced at the overlay mesh between each spoke's MeshHello handshake and its publication (see LinkAdmission). Defaults to LinkAdmission.AcceptAll — open, today's behaviour. Once supplied, the policy is authoritative for every spoke, including unattested ones. Pair it with a principal-extracting source (a KtorConnectionSource principalExtractor) so the policy sees verified identities; admitted principals are observable via GameSession.attestedPrincipals.
How this session obtains its consensus node — forwarded to gameHost. The default ConsensusPlacement.SessionOwned is today's behaviour; must seat AuthoritySeating.SessionPeers (see gameHost).