instar 1.3.490 → 1.3.492

package/dist/commands/server.js

@@ -65,6 +65,12 @@ import { QuotaNotifier } from '../monitoring/QuotaNotifier.js';
 import { QuotaManager } from '../monitoring/QuotaManager.js';
 import { classifySessionDeath, detectContextExhaustion } from '../monitoring/QuotaExhaustionDetector.js';
 import { SessionWatchdog } from '../monitoring/SessionWatchdog.js';
+import { GuardRegistry } from '../monitoring/GuardRegistry.js';
+import { resolveGuardConfigSnapshot, readGuardPostureBootSnapshot } from '../monitoring/guardPosture.js';
+import { buildGuardInventory, buildHeartbeatPostureBlock } from '../monitoring/guardPostureView.js';
+import { createGuardPostureProbes } from '../monitoring/probes/GuardPostureProbe.js';
+import { GuardPostureStore } from '../core/GuardPostureStore.js';
+import { isPeerUrlAllowedForCredentials } from '../server/peerUrlGuard.js';
 import { formatWatchdogUserMessage } from '../monitoring/watchdog-notifications.js';
 import { StallTriageNurse } from '../monitoring/StallTriageNurse.js';
 import { TriageOrchestrator } from '../monitoring/TriageOrchestrator.js';
@@ -372,6 +378,7 @@ let _resolveRouterUrl = null;
 /** Every OTHER active machine with a known URL — backs GET /sessions?scope=pool
  *  (pool-wide session aggregation for the dashboard). Set in the same mesh block. */
 let _resolvePeerUrls = null;
+let _listPoolMachines = null;
 /** Multi-Machine Session Pool §L4: per-topic placement pin store ("move this to <nickname>"). */
 let _topicPinStore = null;
 /** Cross-machine secret-sync (spec Phase 4): route-facing handle (push lever + read-only status). */
@@ -4029,9 +4036,15 @@ export async function startServer(options) {
                 : 'detect-only';
             console.log(pc.green(`  Prompt Gate: enabled (mode: ${mode})`));
         }
+        // ── GuardRegistry (GUARD-POSTURE-ENDPOINT-SPEC §2.1) ──────────────
+        // Constructed guard components self-register SYNC runtime getters at
+        // their construction sites below; GET /guards reconciles registrations
+        // against the declared manifest (missing = a state, never an omission).
+        const guardRegistry = new GuardRegistry();
         let scheduler;
         if (config.scheduler.enabled && coordinator.isAwake) {
             scheduler = new JobScheduler(config.scheduler, sessionManager, state, config.stateDir);
+            guardRegistry.register('scheduler.enabled', () => scheduler.guardStatus());
             // Wire machine identity for machine-scoped job filtering
             if (coordinator.identity) {
                 scheduler.setMachineIdentity(coordinator.identity.machineId, coordinator.identity.name);
@@ -5805,6 +5818,7 @@ export async function startServer(options) {
         if (config.monitoring.watchdog?.enabled) {
             watchdog = new SessionWatchdog(config, sessionManager, state);
             watchdog.intelligence = sharedIntelligence ?? null;
+            guardRegistry.register('monitoring.watchdog.enabled', () => watchdog.guardStatus());
             watchdog.on('intervention', (event) => {
                 // Routine recovery (Ctrl+C, SIGTERM) stays as console diagnostics only.
                 // The user only hears when we had to force-kill (SIGKILL / session-kill) —
@@ -6990,6 +7004,7 @@ export async function startServer(options) {
                 socketSentinel.on('recovered', (n) => notifier.record('recovered', 'socket-disconnect', n));
                 socketSentinel.on('recovery-error', (e) => notifier.record('recovery-error', 'socket-disconnect', e.sessionName, e.err instanceof Error ? e.err.message : String(e.err)));
                 socketSentinel.start();
+                guardRegistry.register('monitoring.socketDisconnectSentinel.enabled', () => socketSentinel.guardStatus());
                 socketRecoveryActive = (s) => socketSentinel.isRecoveryActive(s);
                 console.log(pc.green('  SocketDisconnectSentinel enabled (connection-drop recovery)'));
             }
@@ -7044,6 +7059,7 @@ export async function startServer(options) {
                 silenceSentinel.on('recover-error', (e) => notifier.record('recovery-error', 'active-silence', e.sessionName, e.err instanceof Error ? e.err.message : String(e.err)));
                 silenceSentinel.on('nudge-error', (e) => notifier.record('nudge-error', 'active-silence', e.sessionName, e.err instanceof Error ? e.err.message : String(e.err)));
                 silenceSentinel.start();
+                guardRegistry.register('monitoring.activeWorkSilenceSentinel.enabled', () => silenceSentinel.guardStatus());
                 silenceRecoveryActive = (s) => silenceSentinel.isRecoveryActive(s);
                 const silenceMode = silenceAutoRecover ? ' — auto-heal LIVE' : '';
                 console.log(pc.green(telegramEscalation
@@ -7086,6 +7102,16 @@ export async function startServer(options) {
                 wedgeSentinel.on('false-alarm', (e) => notifier.record('false-alarm', 'context-wedge', e.sessionName, 'signature scrolled out of tail'));
                 wedgeSentinel.on('recovery-error', (e) => notifier.record('recovery-error', 'context-wedge', e.sessionName, e.err instanceof Error ? e.err.message : String(e.err)));
                 wedgeSentinel.start();
+                guardRegistry.register('monitoring.contextWedgeSentinel.enabled', () => wedgeSentinel.guardStatus());
+                // Sub-guard row (spec §2.1): the destructive auto-recovery arm reports
+                // its OWN posture so 'autoRecovery silently off inside an on-confirmed
+                // sentinel' cannot hide.
+                guardRegistry.register('monitoring.contextWedgeSentinel.autoRecovery.enabled', () => ({
+                    enabled: autoRecovery.enabled === true,
+                    dryRun: autoRecovery.dryRun !== false,
+                    // Deliberately no lastTickAt: the autoRecovery arm is config-derived
+                    // (no tick loop of its own); the parent sentinel row carries liveness.
+                }));
                 wedgeRecoveryActive = (s) => wedgeSentinel.isRecoveryActive(s);
                 const mode = autoRecovery.enabled ? (autoRecovery.dryRun ? 'auto-recover dry-run' : 'auto-recover LIVE') : 'detect-only';
                 console.log(pc.green(`  ContextWedgeSentinel enabled (thinking-block-400 + aup-rejection wedges — ${mode})`));
@@ -8289,6 +8315,30 @@ export async function startServer(options) {
             : null;
         if (cartographer)
             console.log(pc.green('  Cartographer doc-tree enabled'));
+        // fix instar#1069: build the structural index ONCE at boot, OFF the request path,
+        // in chunks that yield the event loop — replacing the per-request lazy scaffold()
+        // that froze /health. Fire-and-forget (boot is not blocked); P19 time ceiling so a
+        // pathological tree can't run forever (next boot retries; routes serve not-built
+        // meanwhile). Skipped when an index already exists.
+        if (cartographer && !fs.existsSync(cartographer.indexFilePath())) {
+            const scCfg = config.cartographer?.freshnessSweep;
+            const chunkNodes = typeof scCfg?.scaffoldChunkNodes === 'number' ? scCfg.scaffoldChunkNodes : 500;
+            const scaffoldStartedAt = Date.now();
+            void cartographer.scaffoldChunked({
+                chunkNodes,
+                onYield: () => new Promise((r) => setImmediate(r)),
+                shouldAbort: () => Date.now() - scaffoldStartedAt > 10 * 60_000, // P19: 10-min ceiling, retry next boot
+            }).then(() => {
+                console.log(pc.gray('  Cartographer index built (boot scaffold)'));
+            }).catch((err) => {
+                // @silent-fallback-ok — the boot scaffold is best-effort by design (fix
+                // instar#1069 P19): a partial run never produces a readable index (atomic
+                // tmp+rename), routes serve indexState:'not-built' honestly, and the next
+                // boot retries. The yellow log line is the operator surface; failing the
+                // boot over a map-build would invert the feature's priority.
+                console.log(pc.yellow(`  Cartographer boot scaffold incomplete (retries next boot): ${err instanceof Error ? err.message : String(err)}`));
+            });
+        }
         // Cartographer doc-freshness sweep (spec #2). In-process poller that authors
         // stale/never-authored node summaries on a LIGHT model routed OFF Claude.
         // Ships dark behind freshnessSweep.enabled ONLY — the redundant egressAcknowledged
@@ -8317,6 +8367,26 @@ export async function startServer(options) {
                     const { CartographerSweepPoller } = await import('../monitoring/CartographerSweepPoller.js');
                     const { sampleHostPressure: _sampleHostPressure } = await import('../monitoring/HostPressureSampler.js');
                     const rcfg = config.monitoring?.sessionReaper;
+                    // Slice 3 (fix instar#1069): honor cartographer.freshnessSweep.framework as
+                    // the sweep's routing so BOTH the routing PROBE and the actual author call
+                    // resolve consistently (the router reads config.sessions.componentFrameworks
+                    // live). EXPLICIT-SET-ONLY: a pre-existing overrides.CartographerSweep OR an
+                    // explicitly-configured categories.job is never overridden (migration safety);
+                    // otherwise freshnessSweep.framework becomes the sweep's effective override.
+                    {
+                        const { resolveSweepFrameworkRouting } = await import('../core/CartographerSweepEngine.js');
+                        const cf = config.sessions?.componentFrameworks ?? {};
+                        const sweepFw = typeof fsCfg.framework === 'string' ? fsCfg.framework : undefined;
+                        const routed = resolveSweepFrameworkRouting(cf, sweepFw);
+                        if (routed.injectOverride && routed.framework) {
+                            // Inject so BOTH probeRouting and evaluate resolve consistently (router
+                            // reads config.sessions.componentFrameworks live). Explicit-set-only.
+                            const s = (config.sessions ??= {});
+                            const c = (s.componentFrameworks ??= {});
+                            (c.overrides ??= {}).CartographerSweep = routed.framework;
+                        }
+                        console.log(pc.gray(`  Cartographer sweep routing: ${routed.framework ?? '(default)'} (source: ${routed.source})`));
+                    }
                     const engine = new CartographerSweepEngine({
                         tree: cartographer,
                         router: routerLike,
@@ -8339,6 +8409,15 @@ export async function startServer(options) {
                             maxDeferredPasses: num(fsCfg.maxDeferredPasses, 5),
                             revalidateSamplePerPass: num(fsCfg.revalidateSamplePerPass, 2),
                             minNodesUnderPressure: num(fsCfg.minNodesUnderPressure, 3),
+                            // fix instar#1069: off-event-loop detect knobs (worker by default).
+                            detectInWorker: fsCfg.detectInWorker !== false,
+                            detectTimeoutMs: num(fsCfg.detectTimeoutMs, 120000),
+                            detectWorkerHeapMb: num(fsCfg.detectWorkerHeapMb, 1536),
+                            maxIndexBytes: num(fsCfg.maxIndexBytes, 200 * 1024 * 1024),
+                            snapshotSampleMax: num(fsCfg.snapshotSampleMax, 500),
+                            gitMaxBuffer: num(fsCfg.gitMaxBuffer, 64 * 1024 * 1024),
+                            detectCandidateHeadroom: num(fsCfg.detectCandidateHeadroom, 4),
+                            detectGraceMs: num(fsCfg.cadenceMs, 600000) * 2,
                         },
                         stateDir: config.stateDir,
                         log: (m) => console.log(pc.gray(m)),
@@ -9230,6 +9309,68 @@ export async function startServer(options) {
                     lockFilePath: path.join(config.stateDir, 'lifeline.lock'),
                     isEnabled: () => fs.existsSync(path.join(config.stateDir, 'lifeline.lock')),
                 }),
+                ...createGuardPostureProbes({
+                    // Same one-read inventory GET /guards serves; null on read failure.
+                    getLocalPosture: () => {
+                        try {
+                            const snap = resolveGuardConfigSnapshot(config.projectDir);
+                            if (snap.readError)
+                                return null;
+                            return buildGuardInventory({
+                                snapshot: snap,
+                                bootSnapshot: readGuardPostureBootSnapshot(config.stateDir),
+                                registry: guardRegistry,
+                            });
+                        }
+                        catch {
+                            return null; /* @silent-fallback-ok — probe degrades to no-local-posture for this tick; the route surfaces config errors loudly */
+                        }
+                    },
+                    // Heartbeat-sourced (durable last-known for offline peers) — never a
+                    // doomed fan-out for a dark peer (spec §2.4 data-source rule).
+                    getPeerPostures: () => {
+                        try {
+                            return (machinePoolRegistry?.getCapacities() ?? [])
+                                .filter((m) => m.machineId !== (_meshSelfId ?? ''))
+                                .map((m) => ({
+                                machineId: m.machineId,
+                                nickname: m.nickname,
+                                online: m.online,
+                                posture: m.guardPosture ?? null,
+                                postureAgeMs: m.guardPostureReceivedAt ? Date.now() - Date.parse(m.guardPostureReceivedAt) : null,
+                            }));
+                        }
+                        catch {
+                            return []; /* @silent-fallback-ok — pool not wired yet (boot order): peers none this tick, next tick reads the live registry */
+                        }
+                    },
+                    // Spec §2.4 deep-read fallback: ONLY for an ONLINE peer whose
+                    // heartbeat posture block is missing/stale — a plain GET /guards
+                    // (never ?scope=pool), token attached only past the URL guard.
+                    deepReadPeer: async (machineId) => {
+                        if (!_listPoolMachines)
+                            return null; // pool not wired on this host — explicit, not incidental
+                        const m = _listPoolMachines().find((x) => x.machineId === machineId);
+                        if (!m?.lastKnownUrl)
+                            return null;
+                        const extra = config.multiMachine?.peerUrlAllowlist;
+                        if (!isPeerUrlAllowedForCredentials(m.lastKnownUrl, extra).ok)
+                            return null;
+                        const r = await fetch(`${m.lastKnownUrl}/guards`, {
+                            headers: { Authorization: `Bearer ${config.authToken}` },
+                            signal: AbortSignal.timeout(5000),
+                        });
+                        if (!r.ok)
+                            return null;
+                        return r.json();
+                    },
+                    emitAttention: async (item) => {
+                        if (!telegram)
+                            return;
+                        await telegram.createAttentionItem(item);
+                    },
+                    stateDir: config.stateDir,
+                }),
                 ...createPlatformProbes({
                     tmuxPath,
                 }),
@@ -10755,6 +10896,7 @@ export async function startServer(options) {
                 console.log(pc.green('  Unkillability backstop enabled (§P5 — signal-only, never auto-kills)'));
             }
         }
+        guardRegistry.register('monitoring.sessionReaper.enabled', () => sessionReaper.guardStatus());
         if (config.monitoring?.sessionReaper?.enabled) {
             console.log(pc.green(config.monitoring.sessionReaper.dryRun === false
                 ? '  SessionReaper enabled (idle-session reaper — LIVE)'
@@ -10936,6 +11078,9 @@ export async function startServer(options) {
                 const failoverThresholdMs = (config.multiMachine?.failoverTimeoutMinutes ?? 15) * 60_000;
                 const clockSkewToleranceMs = config.multiMachine?.sessionPool?.clockSkewToleranceMs ?? 300_000;
                 machinePoolRegistry = new poolMod.MachinePoolRegistry({
+                    // Durable last-known posture (GUARD-POSTURE-ENDPOINT-SPEC §2.3(c)) —
+                    // survives local restarts so a dark peer renders with its real age.
+                    postureStore: new GuardPostureStore(config.stateDir),
                     listMachines: () => poolIdMgr.getActiveMachines().map(({ machineId, entry }) => ({
                         machineId,
                         nickname: entry.nickname,
@@ -10978,6 +11123,47 @@ export async function startServer(options) {
                             return undefined; /* unknown ≠ blocked */
                         }
                     };
+                    // Self guard-posture block riding the capacity heartbeat (spec §2.3).
+                    // Computed per beat from the same one-read snapshot GET /guards uses;
+                    // a failed compute omits the block (older-peer semantics), never throws.
+                    // The resolved-config snapshot is the expensive half (defaults clone
+                    // + deep merge); cache it keyed on config.json mtime so the 30s
+                    // beat pays one cheap fs.stat instead (perf review 2026-06-12 #1).
+                    // The INVENTORY still rebuilds every beat — runtime states
+                    // (lastTickAt staleness, self-reported enabled) must stay live.
+                    let _postureComputeWarned = false;
+                    let _postureSnapCache = null;
+                    const selfGuardPosture = () => {
+                        try {
+                            let mtimeMs = -1;
+                            try {
+                                mtimeMs = fs.statSync(path.join(config.stateDir, 'config.json')).mtimeMs;
+                            }
+                            catch { /* @silent-fallback-ok — absent config file: mtime -1 still caches the defaults-only snapshot */ }
+                            if (!_postureSnapCache || _postureSnapCache.mtimeMs !== mtimeMs) {
+                                _postureSnapCache = { mtimeMs, snap: resolveGuardConfigSnapshot(config.projectDir) };
+                            }
+                            const snap = _postureSnapCache.snap;
+                            if (snap.readError)
+                                return undefined;
+                            const inv = buildGuardInventory({
+                                snapshot: snap,
+                                bootSnapshot: readGuardPostureBootSnapshot(config.stateDir),
+                                registry: guardRegistry,
+                            });
+                            return buildHeartbeatPostureBlock(inv, new Date().toISOString());
+                        }
+                        catch (err) {
+                            // @silent-fallback-ok — posture is optional on a beat (the pool
+                            // renders "unknown" honestly), and a PERSISTENT compute failure
+                            // is not invisible: the first occurrence logs below.
+                            if (!_postureComputeWarned) {
+                                _postureComputeWarned = true;
+                                console.log(pc.yellow(`  [guards] heartbeat posture compute failed (beats will omit posture until it recovers): ${err instanceof Error ? err.message : String(err)}`));
+                            }
+                            return undefined;
+                        }
+                    };
                     const refreshPool = () => {
                         try {
                             machinePoolRegistry.recordHeartbeat({
@@ -10985,6 +11171,7 @@ export async function startServer(options) {
                                 selfReportedLastSeen: new Date().toISOString(),
                                 loadAvg: osMod.loadavg()[0],
                                 quotaState: selfQuotaState(),
+                                guardPosture: selfGuardPosture(),
                             });
                             const hbApi = machineHeartbeat?.api;
                             if (hbApi) {
@@ -11427,6 +11614,14 @@ export async function startServer(options) {
                         .getActiveMachines()
                         .filter((m) => m.machineId !== meshSelfId && !!m.entry.lastKnownUrl)
                         .map((m) => ({ machineId: m.machineId, url: m.entry.lastKnownUrl }));
+                    // EVERY registered non-revoked machine — URL or not — so the /guards
+                    // pool view can account for each by name (no-known-url is a NAMED row,
+                    // never a silent omission — GUARD-POSTURE-ENDPOINT-SPEC §2.3).
+                    _listPoolMachines = () => meshIdMgr.getActiveMachines().map((m) => ({
+                        machineId: m.machineId,
+                        nickname: m.entry.nickname,
+                        lastKnownUrl: m.entry.lastKnownUrl ?? null,
+                    }));
                     // Pool Dashboard Streaming requesting side (§2.2): build the connector
                     // the WebSocketManager uses to open an upstream /pool-stream to a peer.
                     // connect() is synchronous (PeerStreamProxy contract) but the mint +
@@ -12203,6 +12398,9 @@ export async function startServer(options) {
                                     journalAdvert,
                                     ...(cap.commitmentsAdvert ? { commitmentsAdvert: cap.commitmentsAdvert } : {}),
                                     ...(cap.quotaState ? { quotaState: cap.quotaState } : {}),
+                                    // Guard posture rides the same pass-through (the A2 narrowing
+                                    // lesson): dropping it here would blind the pool to peers' posture.
+                                    ...(cap.guardPosture ? { guardPosture: cap.guardPosture } : {}),
                                 };
                             }
                             return null;
@@ -12496,7 +12694,7 @@ export async function startServer(options) {
                 carrier: _topicProfileCarrier,
             }
             : null;
-        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier });
+        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier });
         // Resolve the late-bound topic-operator getter (increment 2e): routing was
         // wired before the server existed; from here on inbound binds use the
         // server's own store instance.