instar 1.3.417 → 1.3.419

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAQ3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAqjUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAulUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -25,6 +25,7 @@ import { JobScheduler } from '../scheduler/JobScheduler.js';
 import { IntegrationGate } from '../scheduler/IntegrationGate.js';
 import { JobRunHistory } from '../scheduler/JobRunHistory.js';
 import { AgentServer } from '../server/AgentServer.js';
+import { BootHealthBeacon } from '../server/BootHealthBeacon.js';
 import { TelegramAdapter, TOPIC_STYLE, selectTopicEmoji } from '../messaging/TelegramAdapter.js';
 import { getTelegramInboundDir } from '../messaging/shared/telegramInboundFiles.js';
 import { RelationshipManager } from '../core/RelationshipManager.js';
@@ -2060,6 +2061,29 @@ export async function startServer(options) {
         console.log();
         // Set up file logging for observability
         setupServerLog(config.stateDir);
+        // ── Boot health beacon (topic 21816 root cause #1 — Liveness Before Load) ──
+        // The heavy boot below (TopicMemory/SemanticMemory load + session reconcile)
+        // runs BEFORE AgentServer binds its port, so for minutes nothing answers
+        // /health and the supervisor can mistake a slow boot for a dead process →
+        // the restart loop. This minimal beacon answers /health from the very start
+        // of boot; it is closed at the handoff just before server.start(). Dark by
+        // default (monitoring.bootHealthBeacon.enabled); the grace bump (#979) covers
+        // the window until this is enabled. Belt-and-suspenders, not a boot reorder.
+        let bootBeacon;
+        if (config.monitoring?.bootHealthBeacon?.enabled) {
+            try {
+                bootBeacon = new BootHealthBeacon(config.port);
+                await bootBeacon.start();
+                console.log(pc.dim('  Boot health beacon: answering /health during boot'));
+            }
+            catch (err) {
+                // @silent-fallback-ok — the boot beacon is best-effort liveness; a bind
+                // failure must NEVER block the server boot (the startupGrace bump still
+                // covers the health window). Logged here, not swallowed silently.
+                bootBeacon = undefined;
+                console.error('  Boot health beacon failed to start (non-fatal):', err instanceof Error ? err.message : err);
+            }
+        }
         // ── Shadow installation detection (v0.9.72) ────────────────────────
         // The Luna Incident: a local `npm install instar` created node_modules/
         // in the project directory, shadowing the global binary. AutoUpdater
@@ -11394,6 +11418,18 @@ export async function startServer(options) {
             console.log(pc.yellow('  [tunnel] boot-recovery: relay episode was in flight at last shutdown — rotating credentials before serving'));
             await tunnel.recoverPendingRotation();
         }
+        // Hand off from the boot beacon to the real server: stop() fully releases the
+        // port (force-closes lingering sockets, awaits 'close') BEFORE listen, so the
+        // gap is sub-second and the supervisor never observes a hole. No-op if the
+        // beacon was never started (dark) or already failed.
+        try {
+            await bootBeacon?.stop();
+        }
+        catch (err) {
+            // @silent-fallback-ok — a beacon stop failure must not stop the real server
+            // from binding; logged, and the OS releases the listening socket regardless.
+            console.error('  Boot health beacon stop failed (continuing to bind real server):', err instanceof Error ? err.message : err);
+        }
         await server.start();
         void taskFlowSweeper;
         void taskFlowDueWaker;