instar 1.3.367 → 1.3.369

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6SH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAuxDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAo6StE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6SH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAuxDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAqgTtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -2363,6 +2363,10 @@ export async function startServer(options) {
         // the mesh client) can reference it lazily; constructed in the mesh-wiring
         // block ONLY under the same explicit replication gate.
         let workingSetPullCoordinator;
+        // Commitments-coherence receive side (COMMITMENTS-COHERENCE-SPEC §3.2) —
+        // same explicit replication gate; undefined = dark (verb answers
+        // 'disabled', merge layer returns own rows only).
+        let commitmentReplicaStore;
         {
             const cjCfg = config.multiMachine?.coherenceJournal;
             const cjEnabled = cjCfg?.enabled ?? !!config.developmentAgent;
@@ -2463,6 +2467,12 @@ export async function startServer(options) {
                                         continue;
                                     if (!seenRuns.has(j.topic)) {
                                         const runId = autonomousRunId(j.startedAt, j.topic);
+                                        // #925: while the writer is locked out the emit below is
+                                        // dropped — do NOT mark the run seen, so it re-emits on a
+                                        // later tick once the lock recovers (op-key dedupe makes
+                                        // re-emits safe).
+                                        if (journal.isLockedOut)
+                                            continue;
                                         seenRuns.set(j.topic, { runId, file: j.file });
                                         journal.emitAutonomousRun(topicNum, { action: 'started', runId, artifactPaths: [j.file] });
                                     }
@@ -6350,6 +6360,9 @@ export async function startServer(options) {
         const commitmentTracker = new CommitmentTracker({
             stateDir: config.stateDir,
             liveConfig,
+            // P1.5 §3.1: the creator stamp — (originMachineId, id) is the
+            // cross-machine identity (ids are per-machine sequential counters).
+            ...(cjOwnMachineId ? { originMachineId: cjOwnMachineId } : {}),
             onViolation: (commitment, detail) => {
                 notify('IMMEDIATE', 'commitment', `You asked me to "${commitment.userRequest}" but it looks like that setting reverted. ${detail}`);
             },
@@ -9893,7 +9906,13 @@ export async function startServer(options) {
                             const journalAdvert = coherenceJournal
                                 ? { [cjOwnMachineId ?? meshSelfId]: coherenceJournal.getOwnAdvert() }
                                 : {};
-                            return { ...base, journalAdvert };
+                            // COMMITMENTS-COHERENCE-SPEC §3.2: the commitments advert —
+                            // answered from MEMORY (never a disk read on the presence
+                            // tick). Omitted while the layer is dark; old peers ignore it.
+                            const commitmentsAdvert = commitmentReplicaStore
+                                ? commitmentTracker.getReplicationAdvert() ?? undefined
+                                : undefined;
+                            return { ...base, journalAdvert, ...(commitmentsAdvert ? { commitmentsAdvert } : {}) };
                         },
                         // COHERENCE-JOURNAL-SPEC §3.4 — always-registered journal-sync verb
                         // (harmless when no peer sends): serve our OWN stream on `request`
@@ -9929,6 +9948,26 @@ export async function startServer(options) {
                                 return { ok: false, reason: 'working-set disabled' };
                             return workingSetPullServer.handle(cmd);
                         },
+                        // COMMITMENTS-COHERENCE-SPEC §3.2 — serve OWN commitment records
+                        // as seq-windowed delta pages. Registered always (lockstep with
+                        // the union+RBAC edits); answers 'disabled' until the replication
+                        // gate constructs the layer AND the tracker advertises.
+                        'commitments-sync': async (cmd) => {
+                            const c = cmd;
+                            if (!commitmentReplicaStore || !commitmentTracker)
+                                return { ok: false, reason: 'commitments-sync disabled' };
+                            const advert = commitmentTracker.getReplicationAdvert();
+                            if (!advert)
+                                return { ok: false, reason: 'commitments-sync disabled' };
+                            const syncMod = await import('../core/CommitmentsSync.js');
+                            const wsCfgC = config.multiMachine?.coherenceJournal?.commitments;
+                            return syncMod.buildCommitmentsSyncPage(c.request, {
+                                ownMachineId: cjOwnMachineId ?? meshSelfId,
+                                records: commitmentTracker.getAll(),
+                                advert,
+                                syncPageBytes: wsCfgC?.syncPageBytes,
+                            });
+                        },
                         place: ownAction,
                         claim: ownAction,
                         transfer: ownAction,
@@ -10060,7 +10099,21 @@ export async function startServer(options) {
                             const wsSelf = cjOwnMachineId ?? meshSelfId;
                             const wsOwnerOf = (topic) => {
                                 const rec = sessionOwnershipRegistry?.read(String(topic));
-                                return { owner: rec?.ownerMachineId ?? null, epoch: rec?.ownershipEpoch ?? null };
+                                if (rec?.ownerMachineId) {
+                                    return { owner: rec.ownerMachineId, epoch: rec.ownershipEpoch ?? null };
+                                }
+                                // Issue #926 (live 2026-06-06): ownership only CASes when real
+                                // traffic flows — a QUIET topic just moved here has owner:null
+                                // + a pin. The pin IS the live placement authority for unowned
+                                // topics; without this fallback the fetch reflex refuses in
+                                // exactly the post-move state it exists for. Epoch 0 keeps the
+                                // per-write recheck coherent (a real claim bumps past it and
+                                // the in-flight pull aborts as superseded, by design).
+                                const pin = _topicPinStore?.get(String(topic));
+                                if (pin?.pinned && pin.preferredMachine === wsSelf) {
+                                    return { owner: wsSelf, epoch: 0 };
+                                }
+                                return { owner: null, epoch: null };
                             };
                             workingSetPullCoordinator = new wscMod.WorkingSetPullCoordinator({
                                 stateDir: config.stateDir,
@@ -10151,6 +10204,21 @@ export async function startServer(options) {
                             if (typeof wsGuardTimer.unref === 'function')
                                 wsGuardTimer.unref();
                             console.log(pc.dim('  [working-set] pull coordinator wired (trigger + reflex + drain + sweep + visibility guard)'));
+                            // ── Commitments-coherence receive side (P1.5a §3.2) ──
+                            // Same explicit replication gate. The puller drive below pulls
+                            // delta pages whenever a peer's advert is ahead of our cursor.
+                            try {
+                                const csMod = await import('../core/CommitmentsSync.js');
+                                commitmentReplicaStore = new csMod.CommitmentReplicaStore({
+                                    stateDir: config.stateDir,
+                                    logger: (m) => console.log(pc.dim(`  [commitments-sync] ${m}`)),
+                                });
+                                console.log(pc.dim('  [commitments-sync] replica store wired (serve + receive + advert)'));
+                            }
+                            catch (e) { /* @silent-fallback-ok: commitments-sync construction failure degrades to local-only commitments — never blocks boot (COMMITMENTS-COHERENCE-SPEC §4) */
+                                commitmentReplicaStore = undefined;
+                                console.log(pc.dim(`  [commitments-sync] not constructed: ${e instanceof Error ? e.message : String(e)}`));
+                            }
                         }
                         catch (e) { /* @silent-fallback-ok: working-set pull wiring failure degrades to serve-only (the verb still answers); never blocks server boot (WORKING-SET-HANDOFF-SPEC §4) */
                             workingSetPullCoordinator = undefined;
@@ -10411,6 +10479,39 @@ export async function startServer(options) {
                         },
                         // REPLICATION-GATED: present only when replication.enabled === true.
                         ..._journalDeltaDeps,
+                        // COMMITMENTS-COHERENCE-SPEC §3.2 — pull delta pages when the
+                        // peer's advert is ahead of our replica cursor; bounded pages per
+                        // tick (the remainder rides the next pass). No-op while dark.
+                        driveCommitmentsSync: async (machineId, url, advert) => {
+                            if (!commitmentReplicaStore)
+                                return;
+                            const cursor = commitmentReplicaStore.cursorFor(machineId);
+                            const upToDate = cursor.incarnation === advert.incarnation && cursor.sinceSeq >= advert.replicationSeq;
+                            if (upToDate)
+                                return;
+                            const csCfg = config.multiMachine?.coherenceJournal?.commitments;
+                            const maxPages = csCfg?.maxSyncPagesPerTick ?? 4;
+                            let since = cursor.incarnation === advert.incarnation ? cursor.sinceSeq : 0;
+                            let inc = cursor.incarnation;
+                            for (let i = 0; i < maxPages; i++) {
+                                const res = await meshClient.send({ machineId, url }, { type: 'commitments-sync', request: { sinceSeq: since, ...(inc ? { incarnation: inc } : {}) } }, 0);
+                                if (!res.ok || !res.result || typeof res.result !== 'object')
+                                    return;
+                                const page = res.result;
+                                if (!page.incarnation)
+                                    return; // 'disabled' answer shape
+                                commitmentReplicaStore.applyPage(machineId, page);
+                                if (page.incarnationChanged) {
+                                    inc = page.incarnation;
+                                    since = 0;
+                                    continue;
+                                }
+                                since = page.nextSinceSeq;
+                                inc = page.incarnation;
+                                if (page.done)
+                                    return;
+                            }
+                        },
                     });
                     void peerPresencePuller.pullOnce();
                     const peerPresenceTimer = setInterval(() => { void peerPresencePuller.pullOnce(); }, 30_000);
@@ -10651,7 +10752,7 @@ export async function startServer(options) {
         catch (err) {
             console.log(pc.dim(`  [session-pool] rollout gate not wired: ${err instanceof Error ? err.message : String(err)}`));
         }
-        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, meshRpcDispatcher, workingSetPullCoordinator, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier });
+        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier });
         // Boot-recovery (tunnel-failure-resilience spec Part 6): if the agent
         // died mid-relay-episode, the persisted tunnel.json carries
         // rotationPending=true. Rotate the dashboard PIN + authToken BEFORE