instar 1.3.1674 → 1.3.1675

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAsIA,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAgBjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA6BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAkK7D,OAAO,KAAK,EAAW,oBAAoB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6GtD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AA4ID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+DD,+EAA+E;AAC/E,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,IAAI,CAAC,OAAO,2BAA2B,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,IAAI,EACpF,OAAO,EAAE,MAAM,GACd,IAAI,CAEN;AA0nBD,wBAAsB,oBAAoB,CACxC,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,EACtB,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,kBAAkB,CAAC,EAAE,MAAM;AAC3B;;qCAEqC;AACrC,WAAW,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AACzD;;wEAEwE;AACxE,SAAS,CAAC,EAAE;IACV,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;sEAGkE;IAClE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;4BAIwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,MAAM,CAAC,CAqajB;AA8xBD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,EACR,iBAAiB,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtD,IAAI,CA07BN;AA+sBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAks4BtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDzE;AA+BD,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkE5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAsIA,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAgBjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA6BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmK7D,OAAO,KAAK,EAAW,oBAAoB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6GtD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AA4ID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+DD,+EAA+E;AAC/E,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,IAAI,CAAC,OAAO,2BAA2B,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,IAAI,EACpF,OAAO,EAAE,MAAM,GACd,IAAI,CAEN;AA0nBD,wBAAsB,oBAAoB,CACxC,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,EACtB,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,kBAAkB,CAAC,EAAE,MAAM;AAC3B;;qCAEqC;AACrC,WAAW,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AACzD;;wEAEwE;AACxE,SAAS,CAAC,EAAE;IACV,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;sEAGkE;IAClE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;4BAIwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,MAAM,CAAC,CAqajB;AA8xBD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,EACR,iBAAiB,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtD,IAAI,CA07BN;AA+sBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAuu4BtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDzE;AA+BD,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkE5E"}

package/dist/commands/server.js

@@ -261,6 +261,7 @@ import { StaleProcessGuard } from '../core/StaleProcessGuard.js';
 import { cleanupGlobalInstalls } from '../core/GlobalInstallCleanup.js';
 import { ForegroundRestartWatcher } from '../core/ForegroundRestartWatcher.js';
 import { NotificationBatcher } from '../messaging/NotificationBatcher.js';
+import { EvolutionArchiveSync } from '../core/EvolutionArchiveSync.js';
 import { admitNoticeToHub, recordHeldHubPost, resolveHubFilterMode } from '../messaging/attentionHubPolicy.js';
 import { formatLocalTimestamp } from '../utils/localTime.js';
 import { resolveTelegramStartupTopology, wireTelegramSendSide } from '../messaging/telegramSendSideComposition.js';
@@ -7924,7 +7925,7 @@ export async function startServer(options) {
                 });
                 if (decision === 'restart') {
                     console.log(pc.yellow(`  [lease] role is now ${coordinator.role}: restarting once so boot builds what it needs`));
-                    requestRoleRestart({ stateDir: config.stateDir }, nowAwake);
+                    requestRoleRestart({ stateDir: config.stateDir, leaseEpoch: coordinator.getLeaseEpoch(), machineId: coordinator.identity?.machineId }, nowAwake);
                 }
             }
             catch (err) {
@@ -7966,6 +7967,13 @@ export async function startServer(options) {
             // Wire machine identity for machine-scoped job filtering
             if (coordinator.identity) {
                 scheduler.setMachineIdentity(coordinator.identity.machineId, coordinator.identity.name);
+                scheduler.setPromotionLeaseProvider(() => ({
+                    leaseEpoch: coordinator.getLeaseEpoch(), machineId: coordinator.identity.machineId,
+                    holdsLease: coordinator.holdsLease(),
+                    // The local journal cannot prove what a prior holder launched.
+                    // A registry count is not a cross-machine decision witness.
+                    runOnceWitness: false,
+                }));
             }
             if (quotaTracker) {
                 // Basic binding — QuotaManager will override this once wired
@@ -13360,8 +13368,43 @@ export async function startServer(options) {
         const evolution = new EvolutionManager({
             stateDir: config.stateDir,
             ...(config.evolution || {}),
+            archiveOrigin: cjOwnMachineId ?? undefined,
             autoExpiry: config.evolutionActions?.autoExpiry,
         });
+        const evolutionArchiveSync = new EvolutionArchiveSync(evolution.archive, {
+            fetchPage: async (_peerId, url, offset, signal) => {
+                const extra = config.multiMachine?.peerUrlAllowlist;
+                if (!isPeerUrlAllowedForCredentials({ url, kind: 'last-known-url' }, extra).ok)
+                    throw new Error('archive peer URL rejected');
+                const response = await fetch(`${url}/evolution/archive?offset=${offset}&limit=50`, {
+                    headers: { Authorization: `Bearer ${config.authToken}` }, signal, redirect: 'error',
+                });
+                if (!response.ok)
+                    throw new Error(`archive peer HTTP ${response.status}`);
+                // Bound bytes while streaming, before parsing; Content-Length alone is not evidence.
+                const reader = response.body?.getReader();
+                if (!reader)
+                    throw new Error('archive peer missing body');
+                const chunks = [];
+                let size = 0;
+                try {
+                    for (;;) {
+                        const next = await reader.read();
+                        if (next.done)
+                            break;
+                        size += next.value.byteLength;
+                        if (size > 1024 * 1024)
+                            throw new Error('archive peer response oversized');
+                        chunks.push(next.value);
+                    }
+                }
+                finally {
+                    await reader.cancel().catch(() => { });
+                }
+                return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+            },
+            log: (event, detail) => console.warn(`[EvolutionManager] ${event} ${JSON.stringify(detail)}`),
+        });
         console.log(pc.green('  Evolution system enabled'));
         // WS2.2 — the bypass-proof union reader for the `learnings` store. The single funnel
         // every replicated learning read routes through, so no caller reads a raw replica
@@ -13396,7 +13439,7 @@ export async function startServer(options) {
         void learningsUnionReader; // consumed by the learnings peer-read surface (the E2E reads through it) + future session-context injection
         // WS2 SEND-SIDE: attach the journal-backed emitter to the EvolutionManager's
         // learning hooks. The call sites already fire emitPut/emitDelete on every
-        // saveLearnings (prune→emitDelete, survivor→emitPut); the adapter maps the
+        // saveLearnings (final puts including eviction, no retention tombstones); the adapter maps the
         // manager's emit signature to the store's build*RecordData. The emitter owns the
         // dark gate, HLC tick, `observed` witness, and journal append. Attached only when
         // the emitter exists (journal live); when dark the hooks stay no-ops (byte-
@@ -13576,7 +13619,7 @@ export async function startServer(options) {
             loadOriginRecords: (store, recordKey) => {
                 if (store !== EVOLUTION_ACTION_STORE_KEY || _meshSelfId === null)
                     return [];
-                for (const a of evolution.listActions()) {
+                for (const a of evolution.listActionsForReplication()) {
                     if (deriveEvolutionActionRecordKey(a.title, a.commitTo, a.createdAt) === recordKey) {
                         const o = evolutionActionToOriginRecord(a, _meshSelfId);
                         return o ? [o] : [];
@@ -13588,7 +13631,7 @@ export async function startServer(options) {
                 if (store !== EVOLUTION_ACTION_STORE_KEY)
                     return [];
                 const keys = [];
-                for (const a of evolution.listActions()) {
+                for (const a of evolution.listActionsForReplication()) {
                     const k = deriveEvolutionActionRecordKey(a.title, a.commitTo, a.createdAt);
                     if (k !== null)
                         keys.push(k);
@@ -13602,8 +13645,8 @@ export async function startServer(options) {
         // WS2.5 SEND-SIDE: attach the journal-backed emitter to the EvolutionManager's
         // action-queue hooks. saveActions already fires emitPut on every surviving action
         // (so a STATUS CHANGE re-emits — a peer SEES completed/in_progress and won't redo it)
-        // and emitDelete on every action actually pruned out of the queue (a RETAINED terminal
-        // action is never tombstoned — only a real queue-removal is). The adapter maps the
+        // including final puts for archived terminal records. Hot eviction never emits
+        // deletion authority; archive custody and repair preserve memory. The adapter maps the
         // manager's emit signature to the action build*RecordData projection; the generic emitter
         // owns the dark gate, HLC tick, `observed` witness, journal append, and ALL the safety
         // guards (null recordKey ⇒ skip, null projection ⇒ skip, over-cap throw ⇒ counted no-op).
@@ -28791,6 +28834,11 @@ export async function startServer(options) {
                     // intact): working-set pending-pull drain (§3.4) + queued
                     // commitment-mutate re-fire (P1.5b §3.4). Both no-op while dark.
                     const onPeerBack = (machineId) => {
+                        const archivePeer = (_resolvePeerUrls?.() ?? []).find(peer => peer.machineId === machineId);
+                        if (archivePeer)
+                            void evolutionArchiveSync.onPeerRecorded(machineId, archivePeer.url).catch(error => {
+                                console.warn(`[EvolutionManager] archive-sync-failed ${String(error)}`);
+                            });
                         workingSetPullCoordinator?.onPeerRecorded(machineId);
                         void _commitmentReFire?.(machineId).catch(() => { });
                         // §5.3(e): a returning peer drains any pending topic-profile pulls
@@ -32363,6 +32411,7 @@ export async function startServer(options) {
         let _shuttingDown = false;
         let shutdownStep = 'start';
         const shutdown = async () => {
+            evolutionArchiveSync.stop();
             // Re-entrancy guard: SIGINT+SIGTERM (or a restartDetected racing a signal)
             // must not run the teardown twice. closeAllSqlite() is itself idempotent,
             // but the resume-UUID save + sidecar flush should run once.