instar 1.3.1318 → 1.3.1319

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAuGA,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAUjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA4BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmI7D,OAAO,KAAK,EAAW,oBAAoB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAkFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AA0ID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAoDD,+EAA+E;AAC/E,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,IAAI,CAAC,OAAO,2BAA2B,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,IAAI,EACpF,OAAO,EAAE,MAAM,GACd,IAAI,CAEN;AAocD,wBAAsB,oBAAoB,CACxC,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,EACtB,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,kBAAkB,CAAC,EAAE,MAAM;AAC3B;;qCAEqC;AACrC,WAAW,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AACzD;;wEAEwE;AACxE,SAAS,CAAC,EAAE;IACV,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;sEAGkE;IAClE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GACA,OAAO,CAAC,MAAM,CAAC,CAqYjB;AA02BD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CA8yBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAknwBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAuGA,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAUjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA4BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAoI7D,OAAO,KAAK,EAAW,oBAAoB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAkFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AA0ID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAoDD,+EAA+E;AAC/E,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,IAAI,CAAC,OAAO,2BAA2B,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,IAAI,EACpF,OAAO,EAAE,MAAM,GACd,IAAI,CAEN;AAocD,wBAAsB,oBAAoB,CACxC,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,EACtB,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,kBAAkB,CAAC,EAAE,MAAM;AAC3B;;qCAEqC;AACrC,WAAW,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AACzD;;wEAEwE;AACxE,SAAS,CAAC,EAAE;IACV,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;sEAGkE;IAClE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GACA,OAAO,CAAC,MAAM,CAAC,CAqYjB;AA02BD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CA8yBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA2owBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -168,7 +168,7 @@ import { FencedLease } from '../core/FencedLease.js';
 import { GitLeaseStore } from '../core/GitLeaseStore.js';
 import { LocalLeaseStore } from '../core/LocalLeaseStore.js';
 import { LeaseCoordinator } from '../core/LeaseCoordinator.js';
-import { isPeerPresumedDead } from '../core/leaseLiveness.js';
+import { buildLeaseLivenessCallbacks, createLeaseFlapSwitchGetter, isDialableLeasePeer, reportLeaseOrderingDegradation } from '../core/leaseLiveness.js';
 import { readPollActive, pidAlive as pollPidAlive } from '../core/pollIntent.js';
 import { checkMultiMachineConfigCoherence, checkMeshLiveStateCoherence, MESH_WARMUP_GRACE_MS } from '../core/configCoherence.js';
 import { HttpLeaseTransport } from '../core/HttpLeaseTransport.js';
@@ -203,6 +203,7 @@ import { AutonomousEvolution } from '../core/AutonomousEvolution.js';
 import { DispatchScopeEnforcer } from '../core/DispatchScopeEnforcer.js';
 import { TrustRecovery } from '../core/TrustRecovery.js';
 import { DegradationReporter } from '../monitoring/DegradationReporter.js';
+import { reportLeaseMediumSelection, selectLeaseMedium } from '../core/leaseMediumSelection.js';
 import { HumanAsDetectorLog, observeInboundMessage } from '../monitoring/HumanAsDetectorLog.js';
 import { creditUsherOnMiss } from '../core/UsherActedCorrelator.js';
 import { resolveStableNodeBinary } from '../utils/resolveNodeBinary.js';
@@ -4984,6 +4985,9 @@ export async function startServer(options) {
         // window the closures fall back to lastSeen (safe). Function-body scope so it
         // is visible to BOTH the lease closures (deeper) and the registry assignment.
         let leaseLivenessRegistry;
+        const leaseMonoNow = () => Number(process.hrtime.bigint() / 1000000n);
+        const leaseBootMonoMs = leaseMonoNow();
+        const leaseFlapSwitch = createLeaseFlapSwitchGetter((configPath, fallback) => liveConfig.get(configPath, fallback), (message) => console.log(pc.dim(`  [lease] ${message}`)));
         // Construct gitSync for BOTH roles when this is a git-backed mesh machine:
         // a standby needs it to pull, and a standby that later self-elects to awake
         // (the Phase-0 scenario) must ALREADY have it so its role-change push fires.
@@ -5002,6 +5006,11 @@ export async function startServer(options) {
             // lease block was nested in the git-gated try, so a gitSync throw left the
             // standby with leaseHolder=null → MeshRpc 'not-router' → transfer dead.)
             let gitSyncRef;
+            let leaseMedium = selectLeaseMedium({
+                projectDir: config.projectDir,
+                registryAbsPath: idMgr.registryPath,
+                hasGitSyncManager: false,
+            });
             if (isGitRepo && gitBackupEnabled) {
                 try {
                     gitSync = new GitSyncManager({
@@ -5024,19 +5033,37 @@ export async function startServer(options) {
                         }
                     }
                     gitSyncRef = gitSync;
+                    leaseMedium = selectLeaseMedium({
+                        projectDir: config.projectDir,
+                        registryAbsPath: idMgr.registryPath,
+                        hasGitSyncManager: true,
+                        mediumCheckEnabled: config.multiMachine?.leaseFlapFix?.mediumCheck,
+                    });
+                    let peerCount = 0;
+                    try {
+                        peerCount = Object.entries(idMgr.loadRegistry().machines ?? {})
+                            .filter(([id, entry]) => id !== selfMachineId && !entry.revokedAt).length;
+                    }
+                    catch { /* @silent-fallback-ok — peer count only controls diagnostic wording. */ }
+                    try {
+                        reportLeaseMediumSelection(leaseMedium, peerCount, DegradationReporter.getInstance(), (message) => console.log(pc.dim(`  Lease medium: ${message}`)));
+                    }
+                    catch { /* @silent-fallback-ok — reporting cannot discard an established git substrate. */ }
                     // ── G2 wiring (spec §8 G2) — roleChange/leaseEpoch → debounced push ──
                     // Without a subscriber the durable registry push never fires; a
                     // wiring-integrity test asserts this subscription exists.
-                    const gitSyncForDebounce = gitSyncRef;
-                    registrySyncDebouncer = new RegistrySyncDebouncer({
-                        commitAndPush: (msg, paths) => gitSyncForDebounce.commitAndPush(msg, paths),
-                        registryAbsPath: coordinator.managers.identityManager.registryPath,
-                        isAuthoritative: () => coordinator.isAwake,
-                        debounceMs: seamlessness.registrySyncDebounceMs,
-                        logger: (m) => console.log(pc.dim(m)),
-                    });
-                    wireRegistrySync(coordinator, registrySyncDebouncer);
-                    console.log(pc.dim('  Registry sync wired (roleChange/leaseEpoch → durable push)'));
+                    if (leaseMedium.medium !== 'local') {
+                        const gitSyncForDebounce = gitSyncRef;
+                        registrySyncDebouncer = new RegistrySyncDebouncer({
+                            commitAndPush: (msg, paths) => gitSyncForDebounce.commitAndPush(msg, paths),
+                            registryAbsPath: coordinator.managers.identityManager.registryPath,
+                            isAuthoritative: () => coordinator.isAwake,
+                            debounceMs: seamlessness.registrySyncDebounceMs,
+                            logger: (m) => console.log(pc.dim(m)),
+                        });
+                        wireRegistrySync(coordinator, registrySyncDebouncer);
+                        console.log(pc.dim('  Registry sync wired (roleChange/leaseEpoch → durable push)'));
+                    }
                 }
                 catch (err) {
                     // @silent-fallback-ok — git medium unavailable (SourceTreeGuard, no
@@ -5046,6 +5073,9 @@ export async function startServer(options) {
                     gitSyncRef = undefined;
                 }
             }
+            const leaseGitRef = leaseMedium.medium === 'local' ? undefined : gitSyncRef;
+            const leaseStoreName = leaseGitRef ? 'GitLeaseStore' : 'LocalLeaseStore';
+            coordinator.attachLeaseMediumProvider(() => ({ ...leaseMedium, store: leaseStoreName }));
             try {
                 // ── G1 fenced-lease integration (spec §6) ──────────────────
                 // The lease is the authority for awake/standby + the MeshRpc router-only
@@ -5075,8 +5105,8 @@ export async function startServer(options) {
                     failoverThresholdMs: seamlessness.failoverThresholdMs,
                 });
                 let leaseStore;
-                if (gitSyncRef) {
-                    const gs = gitSyncRef;
+                if (leaseGitRef) {
+                    const gs = leaseGitRef;
                     leaseStore = new GitLeaseStore({
                         machineId: selfMachineId,
                         loadRegistry: () => idMgr.loadRegistry(),
@@ -5092,7 +5122,8 @@ export async function startServer(options) {
                         filePath: path.join(config.stateDir, 'lease-local.json'),
                         logger: (m) => console.log(pc.dim(m)),
                     });
-                    console.log(pc.dim('  Lease store: LocalLeaseStore (no git medium — HTTP transport carries cross-machine lease)'));
+                    const why = leaseMedium.reason === 'ignored' ? 'registry is git-ignored' : 'no git medium';
+                    console.log(pc.dim(`  Lease store: LocalLeaseStore (${why} — HTTP transport carries cross-machine lease)`));
                 }
                 // Lease wire transport (spec §6) — the low-latency authoritative copy
                 // travels over the existing authenticated machine channel. For a
@@ -5166,7 +5197,7 @@ export async function startServer(options) {
                     peers: () => {
                         const reg = idMgr.loadRegistry();
                         return Object.entries(reg.machines ?? {})
-                            .filter(([id, e]) => id !== selfMachineId && (!!e.lastKnownUrl || (e.endpoints?.length ?? 0) > 0) && !e.revokedAt)
+                            .filter(([id, e]) => id !== selfMachineId && isDialableLeasePeer(e))
                             .map(([id, e]) => ({
                             machineId: id,
                             url: (e.lastKnownUrl ?? ''),
@@ -5202,34 +5233,36 @@ export async function startServer(options) {
                     peerEndpointRecorder,
                     logger: (m) => console.log(pc.dim(m)),
                 });
+                const leaseLiveness = buildLeaseLivenessCallbacks({
+                    selfMachineId,
+                    loadDiskRegistry: () => idMgr.loadRegistry(),
+                    getRouter: () => leaseLivenessRegistry,
+                    getFreshness: () => leaseCoordinatorRef,
+                    getLeaseFlapFixConfig: () => ({
+                        ...config.multiMachine?.leaseFlapFix,
+                        liveness: leaseFlapSwitch('liveness'),
+                        unconfirmedWriteAlert: leaseFlapSwitch('unconfirmedWriteAlert'),
+                    }),
+                    getSkewImmune: () => resolveDevAgentGate(config.multiMachine?.leaseSelfHeal?.skewImmuneLiveness?.enabled, config),
+                    failoverThresholdMs: seamlessness.failoverThresholdMs,
+                    bootMonoMs: leaseBootMonoMs,
+                    monoNow: leaseMonoNow,
+                    wallNow: Date.now,
+                });
+                try {
+                    reportLeaseOrderingDegradation(seamlessness.failoverThresholdMs, seamlessness.leaseTtlMs, leaseFlapSwitch('unconfirmedWriteAlert'));
+                }
+                catch { /* @silent-fallback-ok — boot diagnostics cannot abort lease initialization. */ }
                 const leaseCoordinator = new LeaseCoordinator({
                     lease: fencedLease,
                     store: leaseStore,
                     tunnel: leaseTransport,
-                    presumedDeadHolders: () => {
-                        const reg = idMgr.loadRegistry();
-                        const nowMs = Date.now();
-                        // B4 Decision 10 — skew-immune liveness when the flag resolves on AND
-                        // the in-process registry has actually observed the peer; else legacy
-                        // lastSeen. enabled OMITTED ⇒ developmentAgent gate.
-                        const skewImmune = resolveDevAgentGate(config.multiMachine?.leaseSelfHeal?.skewImmuneLiveness?.enabled, config);
-                        const dead = new Set();
-                        for (const [id, e] of Object.entries(reg.machines ?? {})) {
-                            if (id === selfMachineId)
-                                continue;
-                            const cap = leaseLivenessRegistry?.getCapacity(id);
-                            if (isPeerPresumedDead({
-                                lastSeenMs: Date.parse(e.lastSeen),
-                                routerObserved: !!cap?.routerReceivedAt,
-                                routerOnline: !!cap?.online,
-                                nowMs,
-                                failoverThresholdMs: seamlessness.failoverThresholdMs,
-                                skewImmune,
-                            }))
-                                dead.add(id);
-                        }
-                        return dead;
-                    },
+                    presumedDeadHolders: leaseLiveness.presumedDeadHolders,
+                    getLivenessEnabled: () => leaseFlapSwitch('liveness'),
+                    getUnconfirmedWriteAlertEnabled: () => leaseFlapSwitch('unconfirmedWriteAlert'),
+                    sampleLiveness: leaseLiveness.sample,
+                    reportDegradation: (event) => DegradationReporter.getInstance().report(event),
+                    monotonicNow: leaseMonoNow,
                     onEpochAdvance: (epoch) => coordinator.emit('leaseEpochChange', epoch),
                     // F2 (multi-machine-lease-self-heal staleHolderTakeover) — DARK by default.
                     // Resolved LIVE each call so a config flip needs no restart; off ⇒ canAcquire
@@ -5253,26 +5286,7 @@ export async function startServer(options) {
                         const pref = config.multiMachine?.leaseSelfHeal?.preferredAwakeMachineId;
                         return !!pref && pref === selfMachineId;
                     },
-                    allPeersPresumedGone: () => {
-                        const reg = idMgr.loadRegistry();
-                        const nowMs = Date.now();
-                        const peerIds = Object.keys(reg.machines ?? {}).filter((id) => id !== selfMachineId && !reg.machines[id].revokedAt);
-                        if (peerIds.length === 0)
-                            return false; // a solo machine never "holds against" a peer
-                        // B4 Decision 10 — same skew-immune liveness as presumedDeadHolders.
-                        const skewImmune = resolveDevAgentGate(config.multiMachine?.leaseSelfHeal?.skewImmuneLiveness?.enabled, config);
-                        return peerIds.every((id) => {
-                            const cap = leaseLivenessRegistry?.getCapacity(id);
-                            return isPeerPresumedDead({
-                                lastSeenMs: Date.parse(reg.machines[id].lastSeen),
-                                routerObserved: !!cap?.routerReceivedAt,
-                                routerOnline: !!cap?.online,
-                                nowMs,
-                                failoverThresholdMs: seamlessness.failoverThresholdMs,
-                                skewImmune,
-                            });
-                        });
-                    },
+                    allPeersPresumedGone: leaseLiveness.allPeersPresumedGone,
                     onSelfSuspend: (reason) => console.log(pc.yellow(`  [lease] self-suspend: ${reason}`)),
                     onEscalate: (info) => console.log(pc.yellow(`  [lease] split-brain escalation: ${info.reason} (holder ${info.holder})`)),
                     logger: (m) => console.log(pc.dim(m)),
@@ -5326,7 +5340,7 @@ export async function startServer(options) {
                 // Claimant self-connectivity proof (evidence 4): an authenticated probe
                 // of a THIRD peer; 2-machine case → verified reach of the durable lease
                 // authority (git). A claimer with a broken NIC must never claim.
-                _hasDurableLeaseAuthority = () => !!gitSyncRef;
+                _hasDurableLeaseAuthority = () => !!leaseGitRef;
                 _staleOwnerSelfProof = async () => {
                     try {
                         const reg = idMgr.loadRegistry();
@@ -5352,7 +5366,7 @@ export async function startServer(options) {
                             return false;
                         }
                         // 2-machine mesh: verified reach of the durable lease authority.
-                        if (gitSyncRef) {
+                        if (leaseGitRef) {
                             const read = leaseStore.read();
                             return read !== null && read !== undefined;
                         }
@@ -20125,6 +20139,7 @@ export async function startServer(options) {
                     })),
                     clockSkewToleranceMs,
                     failoverThresholdMs,
+                    monoNow: leaseMonoNow,
                     logger: (m) => console.log(pc.dim(`  [pool] ${m}`)),
                 });
                 // B4 Decision 10 — hand the skew-immune registry to the lease-liveness