agent-embassy 2.0.1 → 3.1.0

package/dist/src/gateway/types.d.ts

@@ -1,14 +1,10 @@
-export declare const gatewayProviders: readonly ["claude", "codex", "deepseek", "grok", "peer"];
+export declare const gatewayProviders: readonly ["claude", "codex", "peer"];
 export type GatewayProvider = (typeof gatewayProviders)[number];
 export declare const gatewayRegistrationIngressPrefixes: Readonly<{
     claude: undefined;
     codex: string;
-    deepseek: string;
-    grok: string;
     peer: string;
 }>;
-export declare const gatewayInboundModes: readonly ["paired", "open"];
-export type GatewayInboundMode = (typeof gatewayInboundModes)[number];
 export declare const connectorHealthStates: readonly ["offline", "connecting", "healthy", "degraded"];
 export type ConnectorHealth = (typeof connectorHealthStates)[number];
 export declare const routeStates: readonly ["stale", "idle", "busy", "awaiting_approval", "offline", "disabled"];
@@ -22,7 +18,6 @@ export type ParsedMessageDirection = Readonly<{
 }>;
 export declare const isGatewayProvider: (value: unknown) => value is GatewayProvider;
 export declare function directionId(sourceProvider: GatewayProvider, targetProvider: GatewayProvider): MessageDirection;
-export declare const messageDirections: readonly MessageDirection[];
 export declare function parseDirection(value: unknown): ParsedMessageDirection | undefined;
 export declare const isMessageDirection: (value: unknown) => value is MessageDirection;
 export declare const deliveryStates: readonly ["queued", "duplicate", "dispatching", "transport_written", "held", "delivered", "unconfirmed", "failed", "ambiguous", "expired", "cancelled", "abandoned", "rejected"];
@@ -36,9 +31,6 @@ export declare const gatewayPublicSnapshotLimits: Readonly<{
     readonly registryRejectionCodes: 32;
     readonly availablePeers: 256;
     readonly routes: 256;
-    readonly consentEdges: 256;
-    readonly progressWatches: 64;
-    readonly progressWatchEvents: 256;
     readonly activityEvents: 256;
     readonly messages: 1024;
     readonly alerts: 256;
@@ -76,22 +68,6 @@ export type GatewayRouteRecord = {
     updatedAt: string;
     counters: RouteCounters;
 };
-/**
- * Durable bidirectional consent between two exact route owners. Aliases are
- * display coordinates; the private registration identities prevent an alias from silently
- * retargeting an existing permission edge.
- */
-export type GatewayConsentEndpoint = Readonly<{
-    alias: string;
-    provider: GatewayProvider;
-    registrationId: string;
-}>;
-export type GatewayConsentEdgeRecord = {
-    endpoints: readonly [GatewayConsentEndpoint, GatewayConsentEndpoint];
-    createdAt: string;
-    updatedAt: string;
-    counters: RouteCounters;
-};
 /**
  * Controller-internal route view used to prove ownership across a restart.
  * This type must never cross the control protocol or enter a public snapshot.
@@ -113,8 +89,6 @@ export type QueuedMessageMetadata = {
     deadlineAt: string;
     bytes: number;
     body?: string;
-    pair?: true;
-    transientTarget?: true;
     steer?: true;
 };
 export type DedupeRecord = {
@@ -124,7 +98,6 @@ export type DedupeRecord = {
     sourceAlias: string;
     targetAlias: string;
     direction: MessageDirection;
-    pair?: true;
     firstSeenAt: string;
     expiresAt: string;
 };
@@ -163,7 +136,7 @@ export type GatewayAccounting = {
     queuedBytes: number;
 };
 export type GatewayPreparedWriteEvidence = {
-    kind: "claude_mailbox" | "codex_turn_start" | "codex_turn_steer" | "acp_prompt" | "peer_mailbox" | "peer_handoff";
+    kind: "claude_mailbox" | "codex_turn_start" | "codex_turn_steer" | "peer_mailbox" | "peer_handoff";
     bodyBytes: number;
     bodySha256: string;
     frameBytes: number;
@@ -173,8 +146,7 @@ export type GatewayMessageAttemptAuthority = {
     attemptId: string;
     attemptCount: number;
     targetRegistrationId: string;
-    sourceRegistrationId: string | null;
-    consentEdge: readonly [GatewayConsentEndpoint, GatewayConsentEndpoint] | null;
+    sourceRegistrationId: string;
 };
 export type GatewayMessageState = {
     phase: "queued";
@@ -201,9 +173,8 @@ export type GatewayMessageState = {
 export type GatewayMessageRecord = QueuedMessageMetadata & {
     sequence: number;
     deliveryToken?: string;
-    sourceRegistrationId: string | null;
+    sourceRegistrationId: string;
     targetRegistrationId: string | null;
-    consentEdge: readonly [GatewayConsentEndpoint, GatewayConsentEndpoint] | null;
     state: GatewayMessageState;
 };
 export type GatewayMessageActivity = {
@@ -216,7 +187,7 @@ export type GatewayRuntimeActivity = {
 };
 export type GatewayStateActivity = GatewayMessageActivity | GatewayRuntimeActivity;
 export type GatewayPersistedState = {
-    schemaVersion: 4;
+    schemaVersion: 5;
     commit: {
         sequence: number;
         id: string;
@@ -225,7 +196,6 @@ export type GatewayPersistedState = {
     updatedAt: string;
     eventSequence: number;
     routes: GatewayRouteRecord[];
-    consentEdges: GatewayConsentEdgeRecord[];
     messages: GatewayMessageRecord[];
     dedupe: DedupeRecord[];
     rateBuckets: RateBucket[];
@@ -246,16 +216,6 @@ export type PublicRouteSnapshot = {
     safeErrorCode?: string;
     mutable?: boolean;
 };
-export type PublicConsentEndpointSnapshot = Readonly<{
-    alias: string;
-    provider: GatewayProvider;
-}>;
-export type PublicConsentEdgeSnapshot = {
-    endpoints: readonly [PublicConsentEndpointSnapshot, PublicConsentEndpointSnapshot];
-    host: string;
-    counters: RouteCounters;
-    mutable?: boolean;
-};
 export type PublicConnectorSnapshot = {
     provider: GatewayProvider;
     host: string;
@@ -264,15 +224,26 @@ export type PublicConnectorSnapshot = {
     protocolVersion: string;
     lastSeenAt?: string;
     observationAgeMs?: number;
-    codexDoctor?: PublicCodexDoctorSnapshot;
     safeErrorCode?: string;
     registry?: PublicRegistryObservationSnapshot;
 };
-export type PublicCodexDoctorCondition = "split_brain" | "orphaned" | "attached" | "observation_stale" | "managed_layout_missing" | "unknown";
-export type PublicCodexDoctorSnapshot = Readonly<{
-    conditions: readonly PublicCodexDoctorCondition[];
-}>;
 export declare const CONNECTOR_OBSERVATION_STALE_AFTER_MS = 35000;
+/** The words a connector is allowed to say. Never a sentence, never a number. */
+export type StatusWord = "ok" | "stale" | "degraded" | "offline";
+/**
+ * Connector words. A connector reporting `CONNECTOR_OBSERVATION_STALE` has
+ * nothing wrong with it: no route of that provider was observed inside the
+ * broker's window. That is `stale`, not `degraded`, and the difference is the
+ * point — an idle Mac with no registered Codex task must not read as broken.
+ */
+export declare function connectorWord(connector: PublicConnectorSnapshot): StatusWord;
+/**
+ * The overall word is informational and derived from the two connectors a
+ * message actually travels through. A shell peer never contributes: its
+ * mailbox is pull-only, so "nobody is awaiting it" is a fact about the
+ * operator's other terminal, not about the broker.
+ */
+export declare function gatewayHealthWord(connectors: readonly PublicConnectorSnapshot[]): StatusWord;
 /**
  * Bounded, native-ID-free evidence attached to one Claude connector. Counts
  * describe only the latest pass; the monotonic flag distinguishes an ordinary
@@ -295,7 +266,10 @@ export type PublicAvailablePeerState = (typeof publicAvailablePeerStates)[number
  * A transient, metadata-only discovery row. Native provider IDs, process
  * identifiers, registry/socket paths, and generations are deliberately absent.
  * Version 1 uses this for genuine Claude peers; Codex inventory remains the
- * explicit PublicRouteSnapshot list.
+ * explicit PublicRouteSnapshot list. `routed` means the session currently has
+ * an installed logical route — it is a fact about the route table, never a
+ * permission: any discovered session is addressable, and its route installs on
+ * first use.
  */
 export type PublicAvailablePeerSnapshot = {
     alias: string;
@@ -303,13 +277,18 @@ export type PublicAvailablePeerSnapshot = {
     host: string;
     state: PublicAvailablePeerState;
     validated: boolean;
-    selected: boolean;
+    routed: boolean;
     lastSeenAt?: string;
     safeErrorCode?: string;
 };
-export declare const gatewayActivityKinds: readonly ["discovery", "selection", "registration", "pairing", "watch"];
+export declare const gatewayActivityKinds: readonly ["discovery", "registration"];
 export type GatewayActivityKind = (typeof gatewayActivityKinds)[number];
-export declare const gatewayActivityActions: readonly ["discovery_refreshed", "claude_selected", "claude_unselected", "codex_registered", "codex_succeeded", "codex_unregistered", "routes_paired", "routes_unpaired", "watch_ended"];
+/**
+ * `claude_route_installed` and `claude_route_retired` are journaled by the
+ * store when a send installs, renames, or displaces a discovered Claude
+ * session's route; there is no explicit Claude registration command.
+ */
+export declare const gatewayActivityActions: readonly ["discovery_refreshed", "codex_registered", "codex_succeeded", "codex_unregistered", "claude_route_installed", "claude_route_retired", "route_retired"];
 export type GatewayActivityAction = (typeof gatewayActivityActions)[number];
 export type PublicGatewayActivityEvent = {
     sequence: number;
@@ -335,8 +314,6 @@ export type DeadlinePressureSnapshot = {
     expiredEvents: number;
     buckets: DeadlinePressureBucket[];
 };
-export declare function isPublicAvailablePeerSnapshot(value: unknown): value is PublicAvailablePeerSnapshot;
-export declare function arePublicAvailablePeerSnapshots(value: unknown, maximumRows?: number): value is PublicAvailablePeerSnapshot[];
 export declare function isPublicRegistryObservationSnapshot(value: unknown): value is PublicRegistryObservationSnapshot;
 export type SafeGatewayAlert = {
     code: string;
@@ -346,35 +323,13 @@ export type SafeGatewayAlert = {
     host?: string;
     alias?: string;
 };
-export type PublicProgressWatchSnapshot = {
-    conversationIdSuffix: string;
-    ownerAlias: string;
-    workerAlias: string;
-    lastActivityAt: string;
-    nextActionAt: string;
-    nudgeCount: 0 | 1 | 2;
-};
-export type PublicProgressWatchEventSnapshot = {
-    sequence: number;
-    timestamp: string;
-    conversationIdSuffix: string;
-    ownerAlias: string;
-    workerAlias: string;
-    kind: "opened" | "replaced" | "settled";
-    actor: "owner" | "worker" | "operator" | "gateway" | "unknown";
-    reason?: "done" | "untracked" | "idle_timeout" | "pair_removed" | "endpoint_retired" | "tracking_disabled";
-};
 export type GatewayPublicSnapshot = {
     schemaVersion: 2;
     generatedAt: string;
-    inboundMode: GatewayInboundMode;
     health: ConnectorHealth;
     connectors: PublicConnectorSnapshot[];
     availablePeers: PublicAvailablePeerSnapshot[];
     routes: PublicRouteSnapshot[];
-    consentEdges: PublicConsentEdgeSnapshot[];
-    progressWatches?: PublicProgressWatchSnapshot[];
-    progressWatchEvents?: PublicProgressWatchEventSnapshot[];
     activityEvents?: PublicGatewayActivityEvent[];
     deadlinePressure?: DeadlinePressureSnapshot;
     messages: NormalizedMessageEvent[];
@@ -386,9 +341,6 @@ export type GatewaySnapshotTruncation = {
     connectors: number;
     availablePeers: number;
     routes: number;
-    consentEdges: number;
-    progressWatches?: number;
-    progressWatchEvents?: number;
     activityEvents?: number;
     messages: number;
     alerts: number;
@@ -397,13 +349,23 @@ export type GatewaySnapshotTruncation = {
  * Deterministically projects a canonical snapshot under the local control
  * byte budget. Content is never shortened: complete metadata rows are either
  * retained or counted as omitted. Registry rejection-code detail is shed
- * before consent edges or selected routes; connector inventory remains last.
+ * before routes; connector inventory remains last.
  */
 export declare function projectGatewayPublicSnapshot(snapshot: GatewayPublicSnapshot, maximumBytes?: number): GatewayPublicSnapshot;
 export type RegisterRouteInput = {
     alias: string;
     binding: LogicalRouteBinding;
     registrationMode: RouteRegistrationMode;
+    /**
+     * An ephemeral registration is real in memory — it routes, queues, and
+     * settles exactly like any other — but it is projected out of the durable
+     * state document along with every row that names it, so it cannot survive
+     * a restart and cannot be published to a federation peer; and when it is
+     * removed, by `unregister-peer` or by its own expiry, those rows leave the
+     * live state with it, so nothing of it is written afterwards either.
+     * `embassy check` uses one so a self-test leaves nothing behind.
+     */
+    ephemeral?: true;
 };
 export type GatewayReservedAttempt = Readonly<{
     messageId: string;
@@ -415,9 +377,8 @@ export type GatewayReservedAttempt = Readonly<{
     sourceAlias: string;
     targetAlias: string;
     conversationIdSuffix?: string;
-    sourceRegistrationId: string | null;
+    sourceRegistrationId: string;
     targetRegistrationId: string;
-    consentEdge: readonly [GatewayConsentEndpoint, GatewayConsentEndpoint] | null;
     bytes: number;
     steer?: true;
 }>;
@@ -442,7 +403,7 @@ type SettledAttemptResult = Readonly<{
     settlement: TerminalMessageSettlement;
 }>;
 export type AuthorizeMessageInput = AttemptInput & Readonly<{
-    sourceRegistrationId: string | null;
+    sourceRegistrationId: string;
     targetRegistrationId: string;
     prepared: GatewayPreparedWriteEvidence;
 }>;
@@ -450,7 +411,7 @@ export type AuthorizeMessageResult = Readonly<{
     status: "authorized";
 }> | Readonly<{
     status: "stale";
-    reason: "not_reserved" | "attempt_mismatch" | "registration_changed" | "consent_removed";
+    reason: "not_reserved" | "attempt_mismatch" | "registration_changed";
 }> | Readonly<{
     status: "terminal";
     reason: "expired" | "fenced";
@@ -500,6 +461,14 @@ export type ReplaceCodexRegistrationAtomicResult = Readonly<{
     idempotent: boolean;
     settlements: readonly TerminalMessageSettlement[];
 }>;
+/**
+ * Result of installing a discovered Claude session's route on first send.
+ * `settlements` carries the work of any route the install displaced.
+ */
+export type InstallClaudeRouteResult = Readonly<{
+    installed: boolean;
+    settlements: readonly TerminalMessageSettlement[];
+}>;
 export type EnqueueMessageInput = {
     sourceAlias: string;
     targetAlias: string;
@@ -512,26 +481,18 @@ export type EnqueueMessageInput = {
     steer?: true;
 };
 /**
- * Controller-internal proof of one currently observed native Claude peer.
- * The binding may contain a native session identifier and must remain an
- * in-memory call argument. Store metadata retains only the public alias.
+ * The native Claude sender of one inbound message: its installed route's
+ * alias and exact binding. The binding carries a native session identifier
+ * and must remain an in-memory call argument.
  */
-export type TransientNativeClaudePeer = {
+export type NativeClaudeSender = {
     alias: string;
     binding: LogicalRouteBinding;
 };
 export type EnqueueNativeIngressInput = Omit<EnqueueMessageInput, "sourceAlias" | "targetAlias" | "expectedSourceRegistrationId" | "expectedTargetRegistrationId"> & {
-    source: TransientNativeClaudePeer;
+    source: NativeClaudeSender;
     targetAlias: string;
     expectedTargetRegistrationId: string;
-    authorizedPairTeardownReply?: true;
-};
-export type EnqueueNativeReplyInput = Omit<EnqueueMessageInput, "sourceAlias" | "targetAlias" | "expectedSourceRegistrationId" | "expectedTargetRegistrationId"> & {
-    sourceAlias: string;
-    expectedSourceRegistrationId: string;
-    target: TransientNativeClaudePeer;
-    pair?: true;
-    exposeDeliveryToken?: true;
 };
 export type EnqueueMessageResult = {
     accepted: boolean;
@@ -539,7 +500,6 @@ export type EnqueueMessageResult = {
     messageId?: string;
     messageIdSuffix: string;
     deliveryToken?: string;
-    pair?: true;
     supersededSettlement?: TerminalMessageSettlement;
 };
 /**
@@ -554,8 +514,6 @@ export type TerminalMessageSettlement = {
 };
 export type GatewayStoreLimits = {
     maxRoutes: number;
-    maxConsentEdges: number;
-    maxWatches?: number;
     eventCapacity: number;
     eventTtlMs: number;
     dedupeCapacity: number;
@@ -575,5 +533,9 @@ export type GatewayStoreDependencies = {
     randomId?: () => string;
     renameStateFile?: (source: string, target: string) => Promise<void>;
     afterStateFileRename?: () => void | Promise<void>;
+    /** Controller-lock liveness probe; the default is `process.kill(pid, 0)`. */
+    isProcessAlive?: (pid: number) => boolean;
+    /** This machine's name as the controller lock records it; the default is `os.hostname()`. */
+    hostname?: () => string;
 };
 export {};

package/dist/src/gateway/types.js

@@ -1,6 +1,5 @@
-export const gatewayProviders = ["claude", "codex", "deepseek", "grok", "peer"];
-export const gatewayRegistrationIngressPrefixes = Object.freeze({ claude: undefined, codex: "codex-", deepseek: "dsh-", grok: "grok-", peer: "peer-" });
-export const gatewayInboundModes = ["paired", "open"];
+export const gatewayProviders = ["claude", "codex", "peer"];
+export const gatewayRegistrationIngressPrefixes = Object.freeze({ claude: undefined, codex: "codex-", peer: "peer-" });
 export const connectorHealthStates = ["offline", "connecting", "healthy", "degraded"];
 export const routeStates = ["stale", "idle", "busy", "awaiting_approval", "offline", "disabled"];
 export const routeRegistrationModes = ["explicit_opt_in", "selected_live_peer", "federated_peer"];
@@ -8,7 +7,6 @@ export const isGatewayProvider = (value) => typeof value === "string" && gateway
 export function directionId(sourceProvider, targetProvider) {
     return `${sourceProvider}_to_${targetProvider}`;
 }
-export const messageDirections = Object.freeze(gatewayProviders.flatMap((sourceProvider) => gatewayProviders.map((targetProvider) => directionId(sourceProvider, targetProvider))));
 export function parseDirection(value) {
     if (typeof value !== "string")
         return undefined;
@@ -31,12 +29,37 @@ export const alertSeverities = ["info", "warning", "error"];
 export const gatewayPublicSnapshotLimits = Object.freeze({
     connectors: 64, registryRejectionCodes: 32,
     availablePeers: 256, routes: 256,
-    consentEdges: 256, progressWatches: 64,
-    progressWatchEvents: 256, activityEvents: 256,
+    activityEvents: 256,
     messages: 1_024, alerts: 256,
 });
 export const GATEWAY_PUBLIC_SNAPSHOT_BYTE_BUDGET = 240 * 1024;
 export const CONNECTOR_OBSERVATION_STALE_AFTER_MS = 35_000;
+/**
+ * Connector words. A connector reporting `CONNECTOR_OBSERVATION_STALE` has
+ * nothing wrong with it: no route of that provider was observed inside the
+ * broker's window. That is `stale`, not `degraded`, and the difference is the
+ * point — an idle Mac with no registered Codex task must not read as broken.
+ */
+export function connectorWord(connector) {
+    if (connector.health === "healthy" || connector.health === "connecting")
+        return "ok";
+    if (connector.health === "offline")
+        return "offline";
+    return connector.safeErrorCode === "CONNECTOR_OBSERVATION_STALE" ? "stale" : "degraded";
+}
+const severityRank = (word) => word === "degraded" || word === "offline" ? 0 : word === "stale" ? 1 : 2;
+/**
+ * The overall word is informational and derived from the two connectors a
+ * message actually travels through. A shell peer never contributes: its
+ * mailbox is pull-only, so "nobody is awaiting it" is a fact about the
+ * operator's other terminal, not about the broker.
+ */
+export function gatewayHealthWord(connectors) {
+    const routed = connectors.filter((connector) => connector.provider === "claude" || connector.provider === "codex");
+    if (routed.length === 0)
+        return "offline";
+    return routed.map(connectorWord).reduce((worst, word) => severityRank(word) < severityRank(worst) ? word : worst, "ok");
+}
 export const publicAvailablePeerStates = [
     "idle",
     "busy",
@@ -45,21 +68,21 @@ export const publicAvailablePeerStates = [
 ];
 export const gatewayActivityKinds = [
     "discovery",
-    "selection",
     "registration",
-    "pairing",
-    "watch",
 ];
+/**
+ * `claude_route_installed` and `claude_route_retired` are journaled by the
+ * store when a send installs, renames, or displaces a discovered Claude
+ * session's route; there is no explicit Claude registration command.
+ */
 export const gatewayActivityActions = [
     "discovery_refreshed",
-    "claude_selected",
-    "claude_unselected",
     "codex_registered",
     "codex_succeeded",
     "codex_unregistered",
-    "routes_paired",
-    "routes_unpaired",
-    "watch_ended",
+    "claude_route_installed",
+    "claude_route_retired",
+    "route_retired",
 ];
 export const deadlinePressureBucketNames = [
     "under_1m",
@@ -68,8 +91,6 @@ export const deadlinePressureBucketNames = [
     "15m_to_60m",
     "over_60m",
 ];
-const PUBLIC_ALIAS_PATTERN = /^[a-z][a-z0-9_-]{0,31}@[a-z0-9](?:[a-z0-9.-]{0,61}[a-z0-9])?$/;
-const PUBLIC_HOST_PATTERN = /^[a-z0-9](?:[a-z0-9.-]{0,61}[a-z0-9])?$/;
 const PUBLIC_SAFE_CODE_PATTERN = /^[A-Z][A-Z0-9_]{0,63}$/;
 function publicRecord(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value)
@@ -80,42 +101,9 @@ function exactPublicKeys(value, required, optional = []) {
     return required.every((key) => Object.hasOwn(value, key)) &&
         keys.every((key) => required.includes(key) || optional.includes(key));
 }
-function publicTimestamp(value) {
-    return typeof value === "string" && value.length >= 20 && value.length <= 35 && Number.isFinite(Date.parse(value));
-}
 function nonNegative(value) {
     return Number.isSafeInteger(value) && Number(value) >= 0;
 }
-export function isPublicAvailablePeerSnapshot(value) {
-    const candidate = publicRecord(value);
-    if (candidate === undefined ||
-        !exactPublicKeys(candidate, ["alias", "provider", "host", "state", "validated", "selected"], ["lastSeenAt", "safeErrorCode"]) ||
-        typeof candidate.alias !== "string" ||
-        !PUBLIC_ALIAS_PATTERN.test(candidate.alias) ||
-        typeof candidate.host !== "string" ||
-        !PUBLIC_HOST_PATTERN.test(candidate.host) ||
-        !candidate.alias.endsWith(`@${candidate.host}`) ||
-        candidate.provider !== "claude" ||
-        typeof candidate.state !== "string" ||
-        !publicAvailablePeerStates.includes(candidate.state) ||
-        typeof candidate.validated !== "boolean" ||
-        typeof candidate.selected !== "boolean")
-        return false;
-    return (candidate.lastSeenAt === undefined || publicTimestamp(candidate.lastSeenAt)) &&
-        (candidate.safeErrorCode === undefined ||
-            (typeof candidate.safeErrorCode === "string" && PUBLIC_SAFE_CODE_PATTERN.test(candidate.safeErrorCode)));
-}
-export function arePublicAvailablePeerSnapshots(value, maximumRows = gatewayPublicSnapshotLimits.availablePeers) {
-    if (!Array.isArray(value) ||
-        !Number.isSafeInteger(maximumRows) ||
-        maximumRows < 0 ||
-        value.length > maximumRows ||
-        !value.every(isPublicAvailablePeerSnapshot)) {
-        return false;
-    }
-    const aliases = value.map((peer) => `${peer.provider}\0${peer.alias}`);
-    return new Set(aliases).size === aliases.length;
-}
 export function isPublicRegistryObservationSnapshot(value) {
     const candidate = publicRecord(value);
     if (candidate === undefined ||
@@ -180,7 +168,7 @@ function snapshotBytes(snapshot) {
  * Deterministically projects a canonical snapshot under the local control
  * byte budget. Content is never shortened: complete metadata rows are either
  * retained or counted as omitted. Registry rejection-code detail is shed
- * before consent edges or selected routes; connector inventory remains last.
+ * before routes; connector inventory remains last.
  */
 export function projectGatewayPublicSnapshot(snapshot, maximumBytes = GATEWAY_PUBLIC_SNAPSHOT_BYTE_BUDGET) {
     if (!Number.isSafeInteger(maximumBytes) ||
@@ -193,18 +181,9 @@ export function projectGatewayPublicSnapshot(snapshot, maximumBytes = GATEWAY_PU
         connectors: snapshot.truncation.connectors + omitted(snapshot.connectors.length, gatewayPublicSnapshotLimits.connectors),
         availablePeers: snapshot.truncation.availablePeers + omitted(snapshot.availablePeers.length, gatewayPublicSnapshotLimits.availablePeers),
         routes: snapshot.truncation.routes + omitted(snapshot.routes.length, gatewayPublicSnapshotLimits.routes),
-        consentEdges: snapshot.truncation.consentEdges + omitted(snapshot.consentEdges.length, gatewayPublicSnapshotLimits.consentEdges),
         messages: snapshot.truncation.messages + omitted(snapshot.messages.length, gatewayPublicSnapshotLimits.messages),
         alerts: snapshot.truncation.alerts + omitted(snapshot.alerts.length, gatewayPublicSnapshotLimits.alerts),
     };
-    if (snapshot.progressWatches !== undefined) {
-        truncation.progressWatches = (snapshot.truncation.progressWatches ?? 0) +
-            omitted(snapshot.progressWatches.length, gatewayPublicSnapshotLimits.progressWatches);
-    }
-    if (snapshot.progressWatchEvents !== undefined) {
-        truncation.progressWatchEvents = (snapshot.truncation.progressWatchEvents ?? 0) +
-            omitted(snapshot.progressWatchEvents.length, gatewayPublicSnapshotLimits.progressWatchEvents);
-    }
     if (snapshot.activityEvents !== undefined) {
         truncation.activityEvents = (snapshot.truncation.activityEvents ?? 0) +
             omitted(snapshot.activityEvents.length, gatewayPublicSnapshotLimits.activityEvents);
@@ -214,13 +193,6 @@ export function projectGatewayPublicSnapshot(snapshot, maximumBytes = GATEWAY_PU
         connectors: structuredClone(snapshot.connectors.slice(0, gatewayPublicSnapshotLimits.connectors)),
         availablePeers: snapshot.availablePeers.slice(0, gatewayPublicSnapshotLimits.availablePeers),
         routes: snapshot.routes.slice(0, gatewayPublicSnapshotLimits.routes),
-        consentEdges: snapshot.consentEdges.slice(0, gatewayPublicSnapshotLimits.consentEdges),
-        ...(snapshot.progressWatches === undefined ? {} : {
-            progressWatches: snapshot.progressWatches.slice(0, gatewayPublicSnapshotLimits.progressWatches),
-        }),
-        ...(snapshot.progressWatchEvents === undefined ? {} : {
-            progressWatchEvents: snapshot.progressWatchEvents.slice(-gatewayPublicSnapshotLimits.progressWatchEvents),
-        }),
         ...(snapshot.activityEvents === undefined ? {} : {
             activityEvents: snapshot.activityEvents.slice(-gatewayPublicSnapshotLimits.activityEvents),
         }),
@@ -256,13 +228,6 @@ export function projectGatewayPublicSnapshot(snapshot, maximumBytes = GATEWAY_PU
         const retained = count === 0 ? [] : newest ? rows.slice(-count) : rows.slice(0, count);
         apply(retained, priorOmissions + rows.length - count);
     });
-    const watchEvents = projected.progressWatchEvents ?? [];
-    if (watchEvents.length > 0 &&
-        retainRows(watchEvents, projected.truncation.progressWatchEvents ?? 0, true, (rows, omissions) => {
-            projected.progressWatchEvents = rows;
-            projected.truncation.progressWatchEvents = omissions;
-        }))
-        return projected;
     const activityEvents = projected.activityEvents ?? [];
     if (activityEvents.length > 0 &&
         retainRows(activityEvents, projected.truncation.activityEvents ?? 0, true, (rows, omissions) => {
@@ -277,8 +242,8 @@ export function projectGatewayPublicSnapshot(snapshot, maximumBytes = GATEWAY_PU
     }))
         return projected;
     const peers = [...projected.availablePeers].sort((left, right) => {
-        if (left.selected !== right.selected)
-            return left.selected ? -1 : 1;
+        if (left.routed !== right.routed)
+            return left.routed ? -1 : 1;
         const byState = peerPriority(left.state) - peerPriority(right.state);
         if (byState !== 0)
             return byState;
@@ -335,17 +300,6 @@ export function projectGatewayPublicSnapshot(snapshot, maximumBytes = GATEWAY_PU
             return byState;
         return left.alias.localeCompare(right.alias);
     });
-    const consentEdges = [...projected.consentEdges].sort((left, right) => left.endpoints
-        .map((endpoint) => `${endpoint.provider}\0${endpoint.alias}`)
-        .join("\0")
-        .localeCompare(right.endpoints
-        .map((endpoint) => `${endpoint.provider}\0${endpoint.alias}`)
-        .join("\0")));
-    if (retainRows(consentEdges, projected.truncation.consentEdges, false, (rows, omissions) => {
-        projected.consentEdges = rows;
-        projected.truncation.consentEdges = omissions;
-    }))
-        return projected;
     if (retainRows(routes, projected.truncation.routes, false, (rows, omissions) => {
         projected.routes = rows;
         projected.truncation.routes = omissions;