instar 1.3.377 → 1.3.379

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAQ3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAs4BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAmqTtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAQ3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAs4BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA6rTtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -9730,10 +9730,15 @@ export async function startServer(options) {
                 // git-backed cross-machine store is the Track-H swap). Per-session nonce set.
                 const ownMod = await import('../core/SessionOwnershipRegistry.js');
                 const seenOwnNonces = new Set();
+                // Epoch floor (finding #7): late-bound — the journal reader that backs it
+                // is constructed further down (working-set wiring); until then the floor
+                // reads 0, which preserves pre-fix behavior for the boot window.
+                let ownershipEpochFloor = null;
                 sessionOwnershipRegistry = new ownMod.SessionOwnershipRegistry({
                     store: new ownMod.InMemorySessionOwnershipStore(),
                     seenNonce: (k) => seenOwnNonces.has(k),
                     recordNonce: (k) => seenOwnNonces.add(k),
+                    epochFloorOf: (sk) => ownershipEpochFloor?.(sk) ?? 0,
                     logger: (m) => console.log(pc.dim(`  ${m}`)),
                 });
                 const ownReg = sessionOwnershipRegistry;
@@ -10167,6 +10172,20 @@ export async function startServer(options) {
                                 logger: (m) => console.log(pc.dim(`  [working-set] ${m}`)),
                             });
                             const wsReader2 = new wsReaderMod2.CoherenceJournalReader({ stateDir: config.stateDir });
+                            // Bind the ownership epoch floor (finding #7): the newest JOURNALED
+                            // epoch for a topic — own + replica streams — so a post-restart
+                            // re-place on the in-memory registry never reuses an epoch the
+                            // journal's (topic, epoch) op-key already consumed (which silently
+                            // deduped the fresh placement evidence away, leaving the durable
+                            // record pointing at the WRONG machine).
+                            ownershipEpochFloor = (sk) => {
+                                const topicNum = Number(sk);
+                                if (!Number.isFinite(topicNum))
+                                    return 0;
+                                const newest = wsReader2.query({ kind: 'topic-placement', topic: topicNum, limit: 1 }).entries[0];
+                                const e = newest?.data?.epoch;
+                                return typeof e === 'number' && Number.isFinite(e) ? e : 0;
+                            };
                             const wsSelf = cjOwnMachineId ?? meshSelfId;
                             const wsOwnerOf = (topic) => {
                                 const rec = sessionOwnershipRegistry?.read(String(topic));
@@ -10220,7 +10239,11 @@ export async function startServer(options) {
                                     return new wsPullMod.WorkingSetPuller({
                                         stateDir: config.stateDir,
                                         send: async (cmd) => {
-                                            const r = await meshClient.send({ machineId: nominee, url }, cmd, 0);
+                                            // 30s per-attempt: pull pages carry up to 1MiB and the 5s
+                                            // default was measured aborting every cold tunnel hop
+                                            // (live-matrix T1) — each abort costs a pending-pull
+                                            // round instead of milliseconds.
+                                            const r = await meshClient.send({ machineId: nominee, url }, cmd, 0, { timeoutMs: 30_000 });
                                             if (!r.ok)
                                                 throw new Error(`mesh ${r.status}: ${r.reason ?? 'error'}`);
                                             return r.result;
@@ -10339,7 +10362,11 @@ export async function startServer(options) {
                                     if (!url)
                                         return queue('owner unreachable (no known URL)');
                                     try {
-                                        const res = await meshClient.send({ machineId: ownerMachineId, url }, { type: 'commitment-mutate', payload }, 0);
+                                        // 15s per-attempt: a cold tunnel hop was measured aborting the
+                                        // 5s default on the FIRST call after idle (live-matrix T1) —
+                                        // the ambiguous-outcome queue below then adds minutes of
+                                        // latency to a mutation the warm link serves in <1s.
+                                        const res = await meshClient.send({ machineId: ownerMachineId, url }, { type: 'commitment-mutate', payload }, 0, { timeoutMs: 15_000 });
                                         if (res.ok && res.result && typeof res.result === 'object' && 'verdict' in res.result) {
                                             await pendingMutationLedger.clear(payload.opKey);
                                             return { kind: 'verdict', outcome: res.result };