instar 1.3.490 → 1.3.491

package/dashboard/index.html

@@ -4976,6 +4976,35 @@
       if (m.loadAvg < 4) return 'working';
       return 'busy';
     }
+    function machineGuardsLine(m) {
+      // Guard posture (GUARD-POSTURE-ENDPOINT-SPEC §2.3): last-known summary
+      // with RECEIVER-side age. No posture ever received → honest "unknown",
+      // never "0 on / 0 off". Only problem classes get named; dark-default
+      // offs stay quiet (alarm-fatigue is how the next Mini stays off while
+      // displayed).
+      const p = m.guardPosture;
+      if (!p) return 'guards: unknown';
+      const problems = [];
+      if (p.offDeviant) problems.push(p.offDeviant + ' off that should be on');
+      if (p.offRuntimeDivergent) problems.push(p.offRuntimeDivergent + ' off despite settings');
+      if (p.onStale) problems.push(p.onStale + ' frozen');
+      if (p.missing) problems.push(p.missing + ' missing');
+      if (p.errored) problems.push(p.errored + ' erroring');
+      if (p.divergedPendingRestart) problems.push(p.divergedPendingRestart + ' awaiting restart');
+      const okPart = 'guards: ' + ((p.onConfirmed ?? 0) + (p.onUnverified ?? 0) + (p.onDryRun ?? 0)) + ' on' +
+        (p.onConfirmed ? ' (' + p.onConfirmed + ' confirmed)' : '');
+      let age = '';
+      if (m.guardPostureReceivedAt) {
+        const ms = Date.now() - Date.parse(m.guardPostureReceivedAt);
+        if (isFinite(ms) && ms >= 0) {
+          const mins = Math.round(ms / 60000);
+          age = mins < 2 ? 'just now' : mins < 90 ? 'as of ' + mins + 'm ago'
+            : mins < 2880 ? 'as of ' + Math.round(mins / 60) + 'h ago'
+            : 'as of ' + Math.round(mins / 1440) + 'd ago';
+        }
+      }
+      return [okPart, problems.length ? '⚠ ' + problems.join(', ') : '', age].filter(Boolean).join(' · ');
+    }
     function renderMachineCard(m, routerHolder) {
       const online = !!m.online;
       const dot = !online ? 'off' : (m.clockSkewStatus === 'suspect-clock-removed' ? 'warn' : 'ok');
@@ -4994,6 +5023,7 @@
         '</div>' +
         '<div class="machine-meta">' + escapeHtml(machineSpecLine(m.hardware)) + '</div>' +
         '<div class="machine-meta">' + tail + '</div>' +
+        '<div class="machine-meta">' + escapeHtml(machineGuardsLine(m)) + '</div>' +
       '</div>';
     }
     async function saveMachineNickname(input) {

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAkyCD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CAwVN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAujWtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAyG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAmyCD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CAwVN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAmrWtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -65,6 +65,12 @@ import { QuotaNotifier } from '../monitoring/QuotaNotifier.js';
 import { QuotaManager } from '../monitoring/QuotaManager.js';
 import { classifySessionDeath, detectContextExhaustion } from '../monitoring/QuotaExhaustionDetector.js';
 import { SessionWatchdog } from '../monitoring/SessionWatchdog.js';
+import { GuardRegistry } from '../monitoring/GuardRegistry.js';
+import { resolveGuardConfigSnapshot, readGuardPostureBootSnapshot } from '../monitoring/guardPosture.js';
+import { buildGuardInventory, buildHeartbeatPostureBlock } from '../monitoring/guardPostureView.js';
+import { createGuardPostureProbes } from '../monitoring/probes/GuardPostureProbe.js';
+import { GuardPostureStore } from '../core/GuardPostureStore.js';
+import { isPeerUrlAllowedForCredentials } from '../server/peerUrlGuard.js';
 import { formatWatchdogUserMessage } from '../monitoring/watchdog-notifications.js';
 import { StallTriageNurse } from '../monitoring/StallTriageNurse.js';
 import { TriageOrchestrator } from '../monitoring/TriageOrchestrator.js';
@@ -372,6 +378,7 @@ let _resolveRouterUrl = null;
 /** Every OTHER active machine with a known URL — backs GET /sessions?scope=pool
  *  (pool-wide session aggregation for the dashboard). Set in the same mesh block. */
 let _resolvePeerUrls = null;
+let _listPoolMachines = null;
 /** Multi-Machine Session Pool §L4: per-topic placement pin store ("move this to <nickname>"). */
 let _topicPinStore = null;
 /** Cross-machine secret-sync (spec Phase 4): route-facing handle (push lever + read-only status). */
@@ -4029,9 +4036,15 @@ export async function startServer(options) {
                 : 'detect-only';
             console.log(pc.green(`  Prompt Gate: enabled (mode: ${mode})`));
         }
+        // ── GuardRegistry (GUARD-POSTURE-ENDPOINT-SPEC §2.1) ──────────────
+        // Constructed guard components self-register SYNC runtime getters at
+        // their construction sites below; GET /guards reconciles registrations
+        // against the declared manifest (missing = a state, never an omission).
+        const guardRegistry = new GuardRegistry();
         let scheduler;
         if (config.scheduler.enabled && coordinator.isAwake) {
             scheduler = new JobScheduler(config.scheduler, sessionManager, state, config.stateDir);
+            guardRegistry.register('scheduler.enabled', () => scheduler.guardStatus());
             // Wire machine identity for machine-scoped job filtering
             if (coordinator.identity) {
                 scheduler.setMachineIdentity(coordinator.identity.machineId, coordinator.identity.name);
@@ -5805,6 +5818,7 @@ export async function startServer(options) {
         if (config.monitoring.watchdog?.enabled) {
             watchdog = new SessionWatchdog(config, sessionManager, state);
             watchdog.intelligence = sharedIntelligence ?? null;
+            guardRegistry.register('monitoring.watchdog.enabled', () => watchdog.guardStatus());
             watchdog.on('intervention', (event) => {
                 // Routine recovery (Ctrl+C, SIGTERM) stays as console diagnostics only.
                 // The user only hears when we had to force-kill (SIGKILL / session-kill) —
@@ -6990,6 +7004,7 @@ export async function startServer(options) {
                 socketSentinel.on('recovered', (n) => notifier.record('recovered', 'socket-disconnect', n));
                 socketSentinel.on('recovery-error', (e) => notifier.record('recovery-error', 'socket-disconnect', e.sessionName, e.err instanceof Error ? e.err.message : String(e.err)));
                 socketSentinel.start();
+                guardRegistry.register('monitoring.socketDisconnectSentinel.enabled', () => socketSentinel.guardStatus());
                 socketRecoveryActive = (s) => socketSentinel.isRecoveryActive(s);
                 console.log(pc.green('  SocketDisconnectSentinel enabled (connection-drop recovery)'));
             }
@@ -7044,6 +7059,7 @@ export async function startServer(options) {
                 silenceSentinel.on('recover-error', (e) => notifier.record('recovery-error', 'active-silence', e.sessionName, e.err instanceof Error ? e.err.message : String(e.err)));
                 silenceSentinel.on('nudge-error', (e) => notifier.record('nudge-error', 'active-silence', e.sessionName, e.err instanceof Error ? e.err.message : String(e.err)));
                 silenceSentinel.start();
+                guardRegistry.register('monitoring.activeWorkSilenceSentinel.enabled', () => silenceSentinel.guardStatus());
                 silenceRecoveryActive = (s) => silenceSentinel.isRecoveryActive(s);
                 const silenceMode = silenceAutoRecover ? ' — auto-heal LIVE' : '';
                 console.log(pc.green(telegramEscalation
@@ -7086,6 +7102,16 @@ export async function startServer(options) {
                 wedgeSentinel.on('false-alarm', (e) => notifier.record('false-alarm', 'context-wedge', e.sessionName, 'signature scrolled out of tail'));
                 wedgeSentinel.on('recovery-error', (e) => notifier.record('recovery-error', 'context-wedge', e.sessionName, e.err instanceof Error ? e.err.message : String(e.err)));
                 wedgeSentinel.start();
+                guardRegistry.register('monitoring.contextWedgeSentinel.enabled', () => wedgeSentinel.guardStatus());
+                // Sub-guard row (spec §2.1): the destructive auto-recovery arm reports
+                // its OWN posture so 'autoRecovery silently off inside an on-confirmed
+                // sentinel' cannot hide.
+                guardRegistry.register('monitoring.contextWedgeSentinel.autoRecovery.enabled', () => ({
+                    enabled: autoRecovery.enabled === true,
+                    dryRun: autoRecovery.dryRun !== false,
+                    // Deliberately no lastTickAt: the autoRecovery arm is config-derived
+                    // (no tick loop of its own); the parent sentinel row carries liveness.
+                }));
                 wedgeRecoveryActive = (s) => wedgeSentinel.isRecoveryActive(s);
                 const mode = autoRecovery.enabled ? (autoRecovery.dryRun ? 'auto-recover dry-run' : 'auto-recover LIVE') : 'detect-only';
                 console.log(pc.green(`  ContextWedgeSentinel enabled (thinking-block-400 + aup-rejection wedges — ${mode})`));
@@ -9230,6 +9256,68 @@ export async function startServer(options) {
                     lockFilePath: path.join(config.stateDir, 'lifeline.lock'),
                     isEnabled: () => fs.existsSync(path.join(config.stateDir, 'lifeline.lock')),
                 }),
+                ...createGuardPostureProbes({
+                    // Same one-read inventory GET /guards serves; null on read failure.
+                    getLocalPosture: () => {
+                        try {
+                            const snap = resolveGuardConfigSnapshot(config.projectDir);
+                            if (snap.readError)
+                                return null;
+                            return buildGuardInventory({
+                                snapshot: snap,
+                                bootSnapshot: readGuardPostureBootSnapshot(config.stateDir),
+                                registry: guardRegistry,
+                            });
+                        }
+                        catch {
+                            return null; /* @silent-fallback-ok — probe degrades to no-local-posture for this tick; the route surfaces config errors loudly */
+                        }
+                    },
+                    // Heartbeat-sourced (durable last-known for offline peers) — never a
+                    // doomed fan-out for a dark peer (spec §2.4 data-source rule).
+                    getPeerPostures: () => {
+                        try {
+                            return (machinePoolRegistry?.getCapacities() ?? [])
+                                .filter((m) => m.machineId !== (_meshSelfId ?? ''))
+                                .map((m) => ({
+                                machineId: m.machineId,
+                                nickname: m.nickname,
+                                online: m.online,
+                                posture: m.guardPosture ?? null,
+                                postureAgeMs: m.guardPostureReceivedAt ? Date.now() - Date.parse(m.guardPostureReceivedAt) : null,
+                            }));
+                        }
+                        catch {
+                            return []; /* @silent-fallback-ok — pool not wired yet (boot order): peers none this tick, next tick reads the live registry */
+                        }
+                    },
+                    // Spec §2.4 deep-read fallback: ONLY for an ONLINE peer whose
+                    // heartbeat posture block is missing/stale — a plain GET /guards
+                    // (never ?scope=pool), token attached only past the URL guard.
+                    deepReadPeer: async (machineId) => {
+                        if (!_listPoolMachines)
+                            return null; // pool not wired on this host — explicit, not incidental
+                        const m = _listPoolMachines().find((x) => x.machineId === machineId);
+                        if (!m?.lastKnownUrl)
+                            return null;
+                        const extra = config.multiMachine?.peerUrlAllowlist;
+                        if (!isPeerUrlAllowedForCredentials(m.lastKnownUrl, extra).ok)
+                            return null;
+                        const r = await fetch(`${m.lastKnownUrl}/guards`, {
+                            headers: { Authorization: `Bearer ${config.authToken}` },
+                            signal: AbortSignal.timeout(5000),
+                        });
+                        if (!r.ok)
+                            return null;
+                        return r.json();
+                    },
+                    emitAttention: async (item) => {
+                        if (!telegram)
+                            return;
+                        await telegram.createAttentionItem(item);
+                    },
+                    stateDir: config.stateDir,
+                }),
                 ...createPlatformProbes({
                     tmuxPath,
                 }),
@@ -10755,6 +10843,7 @@ export async function startServer(options) {
                 console.log(pc.green('  Unkillability backstop enabled (§P5 — signal-only, never auto-kills)'));
             }
         }
+        guardRegistry.register('monitoring.sessionReaper.enabled', () => sessionReaper.guardStatus());
         if (config.monitoring?.sessionReaper?.enabled) {
             console.log(pc.green(config.monitoring.sessionReaper.dryRun === false
                 ? '  SessionReaper enabled (idle-session reaper — LIVE)'
@@ -10936,6 +11025,9 @@ export async function startServer(options) {
                 const failoverThresholdMs = (config.multiMachine?.failoverTimeoutMinutes ?? 15) * 60_000;
                 const clockSkewToleranceMs = config.multiMachine?.sessionPool?.clockSkewToleranceMs ?? 300_000;
                 machinePoolRegistry = new poolMod.MachinePoolRegistry({
+                    // Durable last-known posture (GUARD-POSTURE-ENDPOINT-SPEC §2.3(c)) —
+                    // survives local restarts so a dark peer renders with its real age.
+                    postureStore: new GuardPostureStore(config.stateDir),
                     listMachines: () => poolIdMgr.getActiveMachines().map(({ machineId, entry }) => ({
                         machineId,
                         nickname: entry.nickname,
@@ -10978,6 +11070,47 @@ export async function startServer(options) {
                             return undefined; /* unknown ≠ blocked */
                         }
                     };
+                    // Self guard-posture block riding the capacity heartbeat (spec §2.3).
+                    // Computed per beat from the same one-read snapshot GET /guards uses;
+                    // a failed compute omits the block (older-peer semantics), never throws.
+                    // The resolved-config snapshot is the expensive half (defaults clone
+                    // + deep merge); cache it keyed on config.json mtime so the 30s
+                    // beat pays one cheap fs.stat instead (perf review 2026-06-12 #1).
+                    // The INVENTORY still rebuilds every beat — runtime states
+                    // (lastTickAt staleness, self-reported enabled) must stay live.
+                    let _postureComputeWarned = false;
+                    let _postureSnapCache = null;
+                    const selfGuardPosture = () => {
+                        try {
+                            let mtimeMs = -1;
+                            try {
+                                mtimeMs = fs.statSync(path.join(config.stateDir, 'config.json')).mtimeMs;
+                            }
+                            catch { /* @silent-fallback-ok — absent config file: mtime -1 still caches the defaults-only snapshot */ }
+                            if (!_postureSnapCache || _postureSnapCache.mtimeMs !== mtimeMs) {
+                                _postureSnapCache = { mtimeMs, snap: resolveGuardConfigSnapshot(config.projectDir) };
+                            }
+                            const snap = _postureSnapCache.snap;
+                            if (snap.readError)
+                                return undefined;
+                            const inv = buildGuardInventory({
+                                snapshot: snap,
+                                bootSnapshot: readGuardPostureBootSnapshot(config.stateDir),
+                                registry: guardRegistry,
+                            });
+                            return buildHeartbeatPostureBlock(inv, new Date().toISOString());
+                        }
+                        catch (err) {
+                            // @silent-fallback-ok — posture is optional on a beat (the pool
+                            // renders "unknown" honestly), and a PERSISTENT compute failure
+                            // is not invisible: the first occurrence logs below.
+                            if (!_postureComputeWarned) {
+                                _postureComputeWarned = true;
+                                console.log(pc.yellow(`  [guards] heartbeat posture compute failed (beats will omit posture until it recovers): ${err instanceof Error ? err.message : String(err)}`));
+                            }
+                            return undefined;
+                        }
+                    };
                     const refreshPool = () => {
                         try {
                             machinePoolRegistry.recordHeartbeat({
@@ -10985,6 +11118,7 @@ export async function startServer(options) {
                                 selfReportedLastSeen: new Date().toISOString(),
                                 loadAvg: osMod.loadavg()[0],
                                 quotaState: selfQuotaState(),
+                                guardPosture: selfGuardPosture(),
                             });
                             const hbApi = machineHeartbeat?.api;
                             if (hbApi) {
@@ -11427,6 +11561,14 @@ export async function startServer(options) {
                         .getActiveMachines()
                         .filter((m) => m.machineId !== meshSelfId && !!m.entry.lastKnownUrl)
                         .map((m) => ({ machineId: m.machineId, url: m.entry.lastKnownUrl }));
+                    // EVERY registered non-revoked machine — URL or not — so the /guards
+                    // pool view can account for each by name (no-known-url is a NAMED row,
+                    // never a silent omission — GUARD-POSTURE-ENDPOINT-SPEC §2.3).
+                    _listPoolMachines = () => meshIdMgr.getActiveMachines().map((m) => ({
+                        machineId: m.machineId,
+                        nickname: m.entry.nickname,
+                        lastKnownUrl: m.entry.lastKnownUrl ?? null,
+                    }));
                     // Pool Dashboard Streaming requesting side (§2.2): build the connector
                     // the WebSocketManager uses to open an upstream /pool-stream to a peer.
                     // connect() is synchronous (PeerStreamProxy contract) but the mint +
@@ -12203,6 +12345,9 @@ export async function startServer(options) {
                                     journalAdvert,
                                     ...(cap.commitmentsAdvert ? { commitmentsAdvert: cap.commitmentsAdvert } : {}),
                                     ...(cap.quotaState ? { quotaState: cap.quotaState } : {}),
+                                    // Guard posture rides the same pass-through (the A2 narrowing
+                                    // lesson): dropping it here would blind the pool to peers' posture.
+                                    ...(cap.guardPosture ? { guardPosture: cap.guardPosture } : {}),
                                 };
                             }
                             return null;
@@ -12496,7 +12641,7 @@ export async function startServer(options) {
                 carrier: _topicProfileCarrier,
             }
             : null;
-        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier });
+        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier });
         // Resolve the late-bound topic-operator getter (increment 2e): routing was
         // wired before the server existed; from here on inbound binds use the
         // server's own store instance.