instar 1.3.1114 → 1.3.1116

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA8EH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA0BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAgI7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAuID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+rDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAwtBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAk0qBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA8EH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA0BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA+H7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAuID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+rDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAwtBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAq2qBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -169,8 +169,7 @@ import { decryptFromSync, encryptForSync } from '../core/SecretStore.js';
 import { createPrivateKey, createPublicKey, createHash, randomBytes, randomInt } from 'node:crypto';
 import { sign as signEd25519, verify as verifyEd25519 } from '../core/MachineIdentity.js';
 import { ProjectMapper } from '../core/ProjectMapper.js';
-import { CartographerTree } from '../core/CartographerTree.js';
-import { populateCartographer } from '../core/cartographerPopulation.js';
+import { CartographerRootRegistry } from '../core/CartographerRootRegistry.js';
 import { CapabilityMapper } from '../core/CapabilityMapper.js';
 import { ScopeVerifier } from '../core/ScopeVerifier.js';
 import { ContextHierarchy, checkDeclaredIdentityDirectory } from '../core/ContextHierarchy.js';
@@ -14296,6 +14295,14 @@ export async function startServer(options) {
         }
         sleepWakeDetector.start();
         // Project Map + Coherence Gate — spatial awareness and pre-action verification
+        // ScopeVerifier is constructed before Cartographer because its persisted topic
+        // bindings are now the typed provenance source for every live root selection.
+        const scopeVerifier = new ScopeVerifier({
+            projectDir: config.projectDir,
+            stateDir: config.stateDir,
+            projectName: config.projectName,
+        });
+        scopeVerifier.loadTopicBindings();
         const projectMapper = new ProjectMapper({ projectDir: config.projectDir, stateDir: config.stateDir });
         try {
             projectMapper.generateAndSave();
@@ -14309,44 +14316,63 @@ export async function startServer(options) {
         // (cartographer-doc-tree-schema spec #1). Ships dark behind cartographer.enabled;
         // null → /cartographer/* routes return 503.
         const cartographerEnabled = resolveDevAgentGate(config.cartographer?.enabled, config);
-        const cartographer = cartographerEnabled
-            ? new CartographerTree({ projectDir: config.projectDir, stateDir: config.stateDir })
+        const fsCfg = config.cartographer?.freshnessSweep;
+        const cartographerNum = (v, d) => (typeof v === 'number' && Number.isFinite(v) ? v : d);
+        const cartographerRoots = cartographerEnabled
+            ? new CartographerRootRegistry({
+                agentType: config.agentType === 'standalone' ? 'standalone' : 'project-bound',
+                agentHome: config.projectDir,
+                agentName: config.projectName,
+                stateDir: config.stateDir,
+                ...(config.agentType === 'standalone'
+                    ? {}
+                    : {
+                        serverProject: {
+                            projectDir: config.projectDir,
+                            projectName: config.projectName,
+                        },
+                    }),
+                // ScopeVerifier owns the live map; this accessor avoids synchronous
+                // disk reads while still following route-driven binding updates.
+                topicBindings: () => scopeVerifier.currentTopicBindings(),
+                population: {
+                    config: {
+                        scaffoldChunkNodes: cartographerNum(fsCfg?.scaffoldChunkNodes, 500),
+                        detectTimeoutMs: cartographerNum(fsCfg?.detectTimeoutMs, 120000),
+                        detectWorkerHeapMb: cartographerNum(fsCfg?.detectWorkerHeapMb, 1536),
+                        maxIndexBytes: cartographerNum(fsCfg?.maxIndexBytes, 200 * 1024 * 1024),
+                        snapshotSampleMax: cartographerNum(fsCfg?.snapshotSampleMax, 500),
+                        gitMaxBuffer: cartographerNum(fsCfg?.gitMaxBuffer, 64 * 1024 * 1024),
+                        graceMs: cartographerNum(fsCfg?.cadenceMs, 600000) * 2,
+                    },
+                },
+                log: (message) => console.log(pc.yellow(`  ${message}`)),
+            })
             : null;
-        if (cartographer)
-            console.log(pc.green('  Cartographer doc-tree enabled'));
+        if (cartographerRoots)
+            console.log(pc.green('  Cartographer verified-root registry enabled'));
         // Zero-cost structural population is independent of the optional summary
         // author sweep. Refresh at every boot so newly-added/removed paths join the
         // hierarchy, then run aggregate-only detect in a worker and publish the
         // snapshot that /tree?format=compact + /health serve. No router, LLM, egress,
         // or freshnessSweep.enabled mutation occurs on this path.
-        const cartographerPopulationReady = cartographer
-            ? (() => {
-                const fsCfg = config.cartographer?.freshnessSweep;
-                const num = (v, d) => (typeof v === 'number' && Number.isFinite(v) ? v : d);
-                return populateCartographer({
-                    tree: cartographer,
-                    config: {
-                        scaffoldChunkNodes: num(fsCfg?.scaffoldChunkNodes, 500),
-                        detectTimeoutMs: num(fsCfg?.detectTimeoutMs, 120000),
-                        detectWorkerHeapMb: num(fsCfg?.detectWorkerHeapMb, 1536),
-                        maxIndexBytes: num(fsCfg?.maxIndexBytes, 200 * 1024 * 1024),
-                        snapshotSampleMax: num(fsCfg?.snapshotSampleMax, 500),
-                        gitMaxBuffer: num(fsCfg?.gitMaxBuffer, 64 * 1024 * 1024),
-                        graceMs: num(fsCfg?.cadenceMs, 600000) * 2,
-                    },
-                }).then((r) => {
-                    if (r.refused) {
-                        console.log(pc.yellow(`  Cartographer population snapshot refused (${r.detectStatus}); retries next boot`));
+        const cartographerPopulationReady = cartographerRoots
+            ? cartographerRoots.populateOnBoot()
+                .then((results) => {
+                for (const result of results) {
+                    if (result.refused) {
+                        console.log(pc.yellow(`  Cartographer population snapshot refused (${result.detectStatus}); retries next boot`));
                     }
                     else {
-                        console.log(pc.gray(`  Cartographer hierarchy populated (${r.nodeCount} nodes)`));
+                        console.log(pc.gray(`  Cartographer hierarchy populated (${result.nodeCount} nodes, ${result.rootAuthority.verificationState})`));
                     }
-                }).catch((err) => {
-                    // @silent-fallback-ok — scaffold is atomic and boot remains available;
-                    // prior snapshot/index stay readable and the next boot retries.
-                    console.log(pc.yellow(`  Cartographer population incomplete (retries next boot): ${err instanceof Error ? err.message : String(err)}`));
-                });
-            })()
+                }
+            })
+                .catch((err) => {
+                // @silent-fallback-ok — scaffold is atomic and boot remains available;
+                // prior snapshot/index stay readable and the next boot retries.
+                console.log(pc.yellow(`  Cartographer population incomplete (retries next boot): ${err instanceof Error ? err.message : String(err)}`));
+            })
             : null;
         // Cartographer doc-freshness sweep (spec #2). In-process poller that authors
         // stale/never-authored node summaries on a LIGHT model routed OFF Claude.
@@ -14359,96 +14385,110 @@ export async function startServer(options) {
         // routing is an unrouted provider the sweep refuses to start (it could not enforce
         // off-Claude) — that cost-protecting probe is UNCHANGED.
         let cartographerSweepPoller = null;
-        if (cartographer) {
-            const fsCfg = config.cartographer?.freshnessSweep;
+        if (cartographerRoots) {
+            const paidFsCfg = config.cartographer?.freshnessSweep;
             const num = (v, d) => (typeof v === 'number' && Number.isFinite(v) ? v : d);
-            if (fsCfg?.enabled && sharedLlmQueue) {
-                const routerLike = sharedIntelligence &&
-                    typeof sharedIntelligence.for === 'function' &&
-                    typeof sharedIntelligence.defaultFramework === 'string'
-                    ? sharedIntelligence
-                    : null;
-                if (!routerLike) {
-                    console.log(pc.yellow('  Cartographer sweep: NOT started (off-Claude routing requires the IntelligenceRouter)'));
+            if (paidFsCfg?.enabled && sharedLlmQueue) {
+                const backgroundResolution = cartographerRoots.resolve();
+                if (!backgroundResolution.ok) {
+                    console.log(pc.yellow(`  Cartographer sweep: NOT started (root authority ${backgroundResolution.reason})`));
                 }
                 else {
-                    const { CartographerSweepEngine } = await import('../core/CartographerSweepEngine.js');
-                    const { CartographerSweepPoller } = await import('../monitoring/CartographerSweepPoller.js');
-                    const { sampleHostPressure: _sampleHostPressure } = await import('../monitoring/HostPressureSampler.js');
-                    const rcfg = config.monitoring?.sessionReaper;
-                    // Slice 3 (fix instar#1069): honor cartographer.freshnessSweep.framework as
-                    // the sweep's routing so BOTH the routing PROBE and the actual author call
-                    // resolve consistently (the router reads config.sessions.componentFrameworks
-                    // live). EXPLICIT-SET-ONLY: a pre-existing overrides.CartographerSweep OR an
-                    // explicitly-configured categories.job is never overridden (migration safety);
-                    // otherwise freshnessSweep.framework becomes the sweep's effective override.
-                    {
-                        const { resolveSweepFrameworkRouting } = await import('../core/CartographerSweepEngine.js');
-                        const cf = config.sessions?.componentFrameworks ?? {};
-                        const sweepFw = typeof fsCfg.framework === 'string' ? fsCfg.framework : undefined;
-                        const routed = resolveSweepFrameworkRouting(cf, sweepFw);
-                        if (routed.injectOverride && routed.framework) {
-                            // Inject so BOTH probeRouting and evaluate resolve consistently (router
-                            // reads config.sessions.componentFrameworks live). Explicit-set-only.
-                            const s = (config.sessions ??= {});
-                            const c = (s.componentFrameworks ??= {});
-                            (c.overrides ??= {}).CartographerSweep = routed.framework;
-                        }
-                        console.log(pc.gray(`  Cartographer sweep routing: ${routed.framework ?? '(default)'} (source: ${routed.source})`));
+                    const cartographer = backgroundResolution.root.tree;
+                    const fsCfg = paidFsCfg;
+                    const routerLike = sharedIntelligence &&
+                        typeof sharedIntelligence.for === 'function' &&
+                        typeof sharedIntelligence.defaultFramework === 'string'
+                        ? sharedIntelligence
+                        : null;
+                    if (!routerLike) {
+                        console.log(pc.yellow('  Cartographer sweep: NOT started (off-Claude routing requires the IntelligenceRouter)'));
                     }
-                    const engine = new CartographerSweepEngine({
-                        tree: cartographer,
-                        router: routerLike,
-                        llmQueue: sharedLlmQueue,
-                        pressure: () => _sampleHostPressure({
-                            cpuModerateLoadPerCore: rcfg?.cpuModerateLoadPerCore ?? 1.0,
-                            cpuCriticalLoadPerCore: rcfg?.cpuCriticalLoadPerCore ?? 1.5,
-                        }),
-                        // Author ONLY on the lease holder (multi-machine N× burn fix); single-machine ⇒ always holder.
-                        holdsLease: () => (leaseCoordinatorRef ? leaseCoordinatorRef.holdsLease() : true),
-                        config: {
-                            maxNodesPerPass: num(fsCfg.maxNodesPerPass, 25),
-                            maxCentsPerPass: num(fsCfg.maxCentsPerPass, 25),
-                            estCentsPerAuthor: num(fsCfg.estCentsPerAuthor, 1),
-                            maxLeafBytes: num(fsCfg.maxLeafBytes, 24576),
-                            minSummaryChars: num(fsCfg.minSummaryChars, 24),
-                            maxSummaryChars: num(fsCfg.maxSummaryChars, 600),
-                            allowClaudeFallback: fsCfg.allowClaudeFallback === true,
-                            nodeFailQuarantineThreshold: num(fsCfg.nodeFailQuarantineThreshold, 3),
-                            maxDeferredPasses: num(fsCfg.maxDeferredPasses, 5),
-                            revalidateSamplePerPass: num(fsCfg.revalidateSamplePerPass, 2),
-                            minNodesUnderPressure: num(fsCfg.minNodesUnderPressure, 3),
-                            // fix instar#1069: off-event-loop detect knobs (worker by default).
-                            detectInWorker: fsCfg.detectInWorker !== false,
-                            detectTimeoutMs: num(fsCfg.detectTimeoutMs, 120000),
-                            detectWorkerHeapMb: num(fsCfg.detectWorkerHeapMb, 1536),
-                            maxIndexBytes: num(fsCfg.maxIndexBytes, 200 * 1024 * 1024),
-                            snapshotSampleMax: num(fsCfg.snapshotSampleMax, 500),
-                            gitMaxBuffer: num(fsCfg.gitMaxBuffer, 64 * 1024 * 1024),
-                            detectCandidateHeadroom: num(fsCfg.detectCandidateHeadroom, 4),
-                            detectGraceMs: num(fsCfg.cadenceMs, 600000) * 2,
-                        },
-                        stateDir: config.stateDir,
-                        log: (m) => console.log(pc.gray(m)),
-                    });
-                    cartographerSweepPoller = new CartographerSweepPoller({
-                        engine,
-                        cadenceMs: num(fsCfg.cadenceMs, 600000),
-                        idleCadenceMs: num(fsCfg.idleCadenceMs, 1800000),
-                        zeroProgressTicksToBreak: num(fsCfg.zeroProgressTicksToBreak, 3),
-                        breakerReescalateHours: num(fsCfg.breakerReescalateHours, 6),
-                        log: (m) => console.log(pc.gray(m)),
-                        reportDegradation: (d) => { try {
-                            DegradationReporter.getInstance().report(d);
+                    else {
+                        const { CartographerSweepEngine } = await import('../core/CartographerSweepEngine.js');
+                        const { CartographerSweepPoller } = await import('../monitoring/CartographerSweepPoller.js');
+                        const { sampleHostPressure: _sampleHostPressure } = await import('../monitoring/HostPressureSampler.js');
+                        const rcfg = config.monitoring?.sessionReaper;
+                        // Slice 3 (fix instar#1069): honor cartographer.freshnessSweep.framework as
+                        // the sweep's routing so BOTH the routing PROBE and the actual author call
+                        // resolve consistently (the router reads config.sessions.componentFrameworks
+                        // live). EXPLICIT-SET-ONLY: a pre-existing overrides.CartographerSweep OR an
+                        // explicitly-configured categories.job is never overridden (migration safety);
+                        // otherwise freshnessSweep.framework becomes the sweep's effective override.
+                        {
+                            const { resolveSweepFrameworkRouting } = await import('../core/CartographerSweepEngine.js');
+                            const cf = config.sessions?.componentFrameworks ?? {};
+                            const sweepFw = typeof fsCfg.framework === 'string' ? fsCfg.framework : undefined;
+                            const routed = resolveSweepFrameworkRouting(cf, sweepFw);
+                            if (routed.injectOverride && routed.framework) {
+                                // Inject so BOTH probeRouting and evaluate resolve consistently (router
+                                // reads config.sessions.componentFrameworks live). Explicit-set-only.
+                                const s = (config.sessions ??= {});
+                                const c = (s.componentFrameworks ??= {});
+                                (c.overrides ??= {}).CartographerSweep = routed.framework;
+                            }
+                            console.log(pc.gray(`  Cartographer sweep routing: ${routed.framework ?? '(default)'} (source: ${routed.source})`));
                         }
-                        catch { /* never break boot on a report */ } },
-                    });
-                    // Structural refresh owns the index first; only then may the optional
-                    // author loop mutate it. This closes the boot scaffold/sweep write race.
-                    void (cartographerPopulationReady ?? Promise.resolve()).then(() => {
-                        cartographerSweepPoller?.start();
-                        console.log(pc.green('  Cartographer doc-freshness sweep enabled (off-Claude, lease-gated)'));
-                    });
+                        const engine = new CartographerSweepEngine({
+                            tree: cartographer,
+                            router: routerLike,
+                            llmQueue: sharedLlmQueue,
+                            pressure: () => _sampleHostPressure({
+                                cpuModerateLoadPerCore: rcfg?.cpuModerateLoadPerCore ?? 1.0,
+                                cpuCriticalLoadPerCore: rcfg?.cpuCriticalLoadPerCore ?? 1.5,
+                            }),
+                            // Author ONLY on the lease holder (multi-machine N× burn fix); single-machine ⇒ always holder.
+                            holdsLease: () => (leaseCoordinatorRef ? leaseCoordinatorRef.holdsLease() : true),
+                            authorizePaidAuthoring: () => {
+                                const decision = cartographerRoots.authorizePaidAuthoring(backgroundResolution.root);
+                                return decision.ok
+                                    ? { ok: true }
+                                    : { ok: false, reason: decision.reason };
+                            },
+                            config: {
+                                maxNodesPerPass: num(fsCfg.maxNodesPerPass, 25),
+                                maxCentsPerPass: num(fsCfg.maxCentsPerPass, 25),
+                                estCentsPerAuthor: num(fsCfg.estCentsPerAuthor, 1),
+                                maxLeafBytes: num(fsCfg.maxLeafBytes, 24576),
+                                minSummaryChars: num(fsCfg.minSummaryChars, 24),
+                                maxSummaryChars: num(fsCfg.maxSummaryChars, 600),
+                                allowClaudeFallback: fsCfg.allowClaudeFallback === true,
+                                nodeFailQuarantineThreshold: num(fsCfg.nodeFailQuarantineThreshold, 3),
+                                maxDeferredPasses: num(fsCfg.maxDeferredPasses, 5),
+                                revalidateSamplePerPass: num(fsCfg.revalidateSamplePerPass, 2),
+                                minNodesUnderPressure: num(fsCfg.minNodesUnderPressure, 3),
+                                // fix instar#1069: off-event-loop detect knobs (worker by default).
+                                detectInWorker: fsCfg.detectInWorker !== false,
+                                detectTimeoutMs: num(fsCfg.detectTimeoutMs, 120000),
+                                detectWorkerHeapMb: num(fsCfg.detectWorkerHeapMb, 1536),
+                                maxIndexBytes: num(fsCfg.maxIndexBytes, 200 * 1024 * 1024),
+                                snapshotSampleMax: num(fsCfg.snapshotSampleMax, 500),
+                                gitMaxBuffer: num(fsCfg.gitMaxBuffer, 64 * 1024 * 1024),
+                                detectCandidateHeadroom: num(fsCfg.detectCandidateHeadroom, 4),
+                                detectGraceMs: num(fsCfg.cadenceMs, 600000) * 2,
+                            },
+                            stateDir: config.stateDir,
+                            log: (m) => console.log(pc.gray(m)),
+                        });
+                        cartographerSweepPoller = new CartographerSweepPoller({
+                            engine,
+                            cadenceMs: num(fsCfg.cadenceMs, 600000),
+                            idleCadenceMs: num(fsCfg.idleCadenceMs, 1800000),
+                            zeroProgressTicksToBreak: num(fsCfg.zeroProgressTicksToBreak, 3),
+                            breakerReescalateHours: num(fsCfg.breakerReescalateHours, 6),
+                            log: (m) => console.log(pc.gray(m)),
+                            reportDegradation: (d) => { try {
+                                DegradationReporter.getInstance().report(d);
+                            }
+                            catch { /* never break boot on a report */ } },
+                        });
+                        // Structural refresh owns the index first; only then may the optional
+                        // author loop mutate it. This closes the boot scaffold/sweep write race.
+                        void (cartographerPopulationReady ?? Promise.resolve()).then(() => {
+                            cartographerSweepPoller?.start();
+                            console.log(pc.green('  Cartographer doc-freshness sweep enabled (off-Claude, lease-gated)'));
+                        });
+                    }
                 }
             }
         }
@@ -14620,13 +14660,6 @@ export async function startServer(options) {
             // @silent-fallback-ok — capability map non-critical at startup
             console.error(`  Capability map generation failed (non-critical): ${err.message}`);
         });
-        const scopeVerifier = new ScopeVerifier({
-            projectDir: config.projectDir,
-            stateDir: config.stateDir,
-            projectName: config.projectName,
-        });
-        // Load any persisted topic-project bindings
-        scopeVerifier.loadTopicBindings();
         // Context Hierarchy — tiered context loading for session efficiency
         const contextHierarchy = new ContextHierarchy({
             stateDir: config.stateDir,
@@ -23649,7 +23682,7 @@ export async function startServer(options) {
                 userDirected: true, status: 'open', assignee: null, priority: 'medium',
             })),
         });
-        const server = new AgentServer({ config, subscriptionEmailBinding: credentialLocationLedger, subscriptionEmailBarrier, subscriptionIdentityOracle: credentialIdentityOracle, sessionManager, llmQueue: sharedLlmQueue, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, accountFollowMePeerViews: async () => { const nickById = new Map((_listPoolMachines?.() ?? []).map((m) => [m.machineId, m.nickname ?? m.machineId])); let peers = (_resolvePeerUrls?.() ?? []).map((p) => ({ machineId: p.machineId, nickname: nickById.get(p.machineId) ?? p.machineId, url: p.url })); if (peers.length === 0) {
+        const server = new AgentServer({ config, subscriptionEmailBinding: credentialLocationLedger, subscriptionEmailBarrier, subscriptionIdentityOracle: credentialIdentityOracle, sessionManager, llmQueue: sharedLlmQueue, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographerRoots: cartographerRoots ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, accountFollowMePeerViews: async () => { const nickById = new Map((_listPoolMachines?.() ?? []).map((m) => [m.machineId, m.nickname ?? m.machineId])); let peers = (_resolvePeerUrls?.() ?? []).map((p) => ({ machineId: p.machineId, nickname: nickById.get(p.machineId) ?? p.machineId, url: p.url })); if (peers.length === 0) {
                 peers = (_listPoolMachines?.() ?? []).filter((m) => m.machineId !== _meshSelfId && !!m.lastKnownUrl).map((m) => ({ machineId: m.machineId, nickname: m.nickname ?? m.machineId, url: m.lastKnownUrl }));
             } if (peers.length === 0)
                 return []; const { fetchPeerSubscriptionViews } = await import('../core/fetchPeerSubscriptionViews.js'); return fetchPeerSubscriptionViews({ peers: () => peers, fetchImpl: fetch, authToken: config.authToken ?? '' }); }, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, accountFollowMeRevocation, credentialRepointing, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, greenPrAutoMerger: greenPrAutoMerger ?? undefined, guardLatchStore: guardLatchStore ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, meshBindActive: coordinator.managers.identityManager.hasIdentity() && config.multiMachine?.meshTransport?.enabled !== false, localSigningKeyPem, leaseTransport, peerEndpointRecorder, getSelfMeshEndpoints, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, conversationRegistry, conversationBindAuth, conversationFollowThrough, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, threadLog, threadMessageRecorder, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, getLastRelayEvent: threadlineGetLastRelayEvent, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, reviewCanaryBattery, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, ropeHealthMonitor, writeAdmission: writeAdmission ?? undefined, getInboundQueue: () => _inboundQueue, getMachineCoherence: () => _machineCoherenceSentinel, getSingleMachineFailoverGap: () => _singleMachineFailoverGap, getMissingLoginSession: () => _missingLoginSession, getSessionPoolFailoverRunner: () => _sessionPoolFailoverRunnerDriver?.status() ?? null, sessionPoolPromotionActivation: _sessionPoolPromotionActivation, meshRpcDispatcher, deliverA2aToMachine: _deliverA2aToMachine ?? undefined, workingSetPullCoordinator, workingSetArtifactManager, orchestratorPoller, commitmentReplicaStore, preferenceReplicaStore, replicatedRecordEmitter, conflictStore, rollbackUnmerge, droppedOriginRegistry, preferencesUnionReader, forwardCommitmentMutate, sessionOwnershipRegistry, sendDrain: _sendDrain ?? undefined, topicPinStore: _topicPinStore ?? undefined, topicPinSkewQuarantine: _topicPinSkewQuarantine ?? undefined, topicPinFoldView: _topicPinFoldView ?? undefined, ownershipReconciler: _ownershipReconciler ?? undefined, staleOwnerEngine: _staleOwnerEngine ?? undefined, duplicateReconciler: _duplicateReconciler ?? undefined, ownerDarkLadder: _ownerDarkLadder ?? undefined, spawnAdmission: _spawnAdmission ?? undefined, judgmentProvenance: _judgmentProvenance ?? undefined, leaseHandback: _leaseHandbackCtx ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, deliverMandateToMachine: _deliverMandateToMachine ?? undefined, poolLink: _poolLink ?? undefined, poolPollCache: _poolPollCache ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, externalHogSentinel, orphanedWorkSentinel, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, resumeQueue, resumeDrainer, autonomousLivenessReconciler, enforcedTerminationStatus: () => enforcedTerminationWatchdog?.guardStatus() ?? null, prHandLease: prHandLease ?? undefined, operatorStopRecorder: recordOperatorStop, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier, liveTestGate, liveTestGateMode, liveTestRunnerCtx }); // Resolve the late-bound topic-operator getter (increment 2e): routing was