instar 1.3.537 → 1.3.539

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAm3CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAk4atE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAm3CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA6/atE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -8515,6 +8515,133 @@ export async function startServer(options) {
         if (subscriptionPool.size() > 0) {
             console.log(pc.green(`  Subscription pool: ${subscriptionPool.size()} account(s) registered`));
         }
+        // ── Live credential re-pointing — census consumer re-routing (WS5.2 Step 6) ──
+        // The CredentialLocationLedger is the machine-local source of truth for "which account is in
+        // which config-home slot" once re-pointing is enabled. The CredentialLocationGate re-routes
+        // the §2.2 census consumers (quota poll, spawn placement, in-use badge) through it. Ships DARK:
+        // the gate reads `subscriptionPool.credentialRepointing.enabled` LIVE per call — with the flag
+        // off (always, while dark) every gate read returns the enrollment-home fallback, so every
+        // consumer is byte-for-byte today's behavior. A never-seeded ledger is the same fallback (back-
+        // compat); only UNKNOWN mode (corrupt on-disk) raises a HIGH attention item, never throws.
+        const { CredentialLocationLedger } = await import('../core/CredentialLocationLedger.js');
+        const { CredentialIdentityOracle } = await import('../core/CredentialIdentityOracle.js');
+        const { CredentialLocationGate } = await import('../core/CredentialLocationGate.js');
+        const credentialGateEmitAttention = telegram
+            ? (item) => void telegram.createAttentionItem({
+                id: item.id,
+                title: item.title,
+                summary: item.summary,
+                description: item.description,
+                category: item.category,
+                priority: item.priority,
+                sourceContext: item.sourceContext,
+            })
+            : undefined;
+        const credentialLocationLedger = new CredentialLocationLedger({
+            stateDir: config.stateDir,
+            pool: subscriptionPool,
+            oracle: new CredentialIdentityOracle(),
+            emitAttention: credentialGateEmitAttention,
+        });
+        const credentialLocationGate = new CredentialLocationGate({
+            // Live flag read — a restartless config flip is honored on the next read.
+            isEnabled: () => config.subscriptionPool?.credentialRepointing?.enabled === true,
+            ledger: credentialLocationLedger,
+            emitAttention: credentialGateEmitAttention,
+        });
+        // Census #9: the manager-level competing-writer refusal gate. Installed process-wide so
+        // AccountSwitcher / `/switch-account` / autoMigrate refuse a write to a repointing-owned slot
+        // at the funnel chokepoint, not just on a route. Refuses ONLY when re-pointing is enabled AND
+        // the ledger holds a tenant for the (canonicalized) slot.
+        const { setCredentialWriteRefusalGate } = await import('../monitoring/CredentialProvider.js');
+        const { credentialSlotKey: canonicalizeSlot } = await import('../core/OAuthRefresher.js');
+        setCredentialWriteRefusalGate({
+            shouldRefuse: (canonicalSlot) => {
+                if (config.subscriptionPool?.credentialRepointing?.enabled !== true)
+                    return false;
+                // The funnel passes a canonicalized slot key, but the ledger stores raw enrollment-home
+                // spellings (`~/.claude`, an enrollment path). Compare canonical-to-canonical so a
+                // repointing-owned slot is recognized regardless of spelling.
+                return credentialLocationLedger
+                    .getAssignments()
+                    .some((a) => !!a.accountId && canonicalizeSlot(a.slot) === canonicalSlot);
+            },
+        });
+        // Census #5/#6: spawn placement resolves a pinned account's home through the gate (no-op dark).
+        sessionManager.setCredentialLocationGate(credentialLocationGate);
+        // ── WS5.2 Step 7 — manual levers + audit-scrub chokepoint ──
+        // The CredentialAuditEmit is the SINGLE secret-scrub chokepoint: every credential-swaps.jsonl
+        // write, every /credentials/* response body, and every attention-item routes through its
+        // scrub() (reuses redactToken). The CredentialSwapExecutor is CONSTRUCTED + run live HERE (the
+        // Step-5 residual closes). Both ship DARK — the executor's own `config.enabled`/`dryRun` gate
+        // (read from `subscriptionPool.credentialRepointing`) makes it a strict no-op while dark, and
+        // the routes 503/no-op on the same flag, so this is byte-for-byte today's behavior.
+        const { CredentialAuditEmit } = await import('../core/CredentialAuditEmit.js');
+        const { CredentialSwapExecutor } = await import('../core/CredentialSwapExecutor.js');
+        const { CredentialManualLevers } = await import('../core/CredentialManualLevers.js');
+        const { credentialWriteFunnel } = await import('../core/CredentialWriteFunnel.js');
+        const { defaultKeychainExec } = await import('../core/CredentialSwapExecutor.js');
+        const { claudeCredentialService: credSwapService } = await import('../core/OAuthRefresher.js');
+        const credSwapsLogPath = path.join(config.stateDir, 'logs', 'credential-swaps.jsonl');
+        const credentialAuditEmit = new CredentialAuditEmit({
+            writeLine: (line) => { try {
+                fs.appendFileSync(credSwapsLogPath, line);
+            }
+            catch { /* @silent-fallback-ok: audit jsonl is observability; the swap is the load-bearing action and is unaffected. The line was scrubbed before this write, so a failure leaks nothing. */ } },
+            emitAttention: credentialGateEmitAttention,
+        });
+        // Compose the host identity resolver: REAL oracle (slot blob → email) → pool (email → accountId).
+        const { CredentialIdentityOracle: CredSwapOracle } = await import('../core/CredentialIdentityOracle.js');
+        const credSwapOracle = new CredSwapOracle();
+        const credResolveIdentity = async (slot) => {
+            const r = await credSwapOracle.resolveSlotTenant(slot);
+            if (r.unavailable || !r.email)
+                return { unavailable: true, reason: r.reason ?? 'oracle unavailable' };
+            const matches = subscriptionPool.list().filter((a) => a.email && a.email === r.email);
+            if (matches.length !== 1)
+                return { unavailable: true, reason: `ambiguous/unknown email (${matches.length} pool matches)` };
+            return { accountId: matches[0].id };
+        };
+        const credentialSwapExecutor = new CredentialSwapExecutor({
+            funnel: credentialWriteFunnel,
+            ledger: credentialLocationLedger,
+            resolveIdentity: credResolveIdentity,
+            // The executor reads the SAME dark gate the routes do — strict no-op while disabled.
+            config: {
+                enabled: config.subscriptionPool?.credentialRepointing?.enabled === true,
+                dryRun: config.subscriptionPool?.credentialRepointing?.dryRun !== false,
+            },
+            emitAudit: (rec) => credentialAuditEmit.audit({ event: 'swap-step', ...rec }),
+            emitAttention: (item) => void credentialAuditEmit.attention(item),
+            onSlotsChanged: (slots) => { try {
+                inUseAccountResolver.bustCache?.();
+            }
+            catch { /* @silent-fallback-ok: cache-bust is an observability nicety (a stale badge self-corrects at TTL); a throwing consumer must never break the committed swap */ } void slots; },
+        });
+        const credentialManualLevers = new CredentialManualLevers({
+            maxForcedPerWindow: config.subscriptionPool?.credentialRepointing?.maxForcedManualSwapsPerWindow,
+            forcedWindowMs: config.subscriptionPool?.credentialRepointing?.forcedManualSwapWindowMs,
+        });
+        const credentialRepointing = {
+            ledger: credentialLocationLedger,
+            swapExecutor: credentialSwapExecutor,
+            resolveIdentity: credResolveIdentity,
+            audit: credentialAuditEmit,
+            levers: credentialManualLevers,
+            readBlob: async (slot) => {
+                const raw = await defaultKeychainExec.readService(credSwapService(slot));
+                if (!raw)
+                    return null;
+                try {
+                    const parsed = JSON.parse(raw);
+                    const oauth = (parsed?.claudeAiOauth ?? null);
+                    return { raw, oauth };
+                }
+                catch {
+                    return { raw, oauth: null }; // @silent-fallback-ok: unparseable blob → coherence classifier parks it one-directionally (never exchanged); the raw is returned only so the classifier sees "has-raw-but-no-oauth"
+                }
+            },
+        };
         // QuotaPoller — per-account live quota reader (P1.2 of the Subscription &
         // Auth Standard). Reads each account's 5h/weekly utilization + reset dates
         // via the OAuth usage endpoint (transient per-account token, never persisted)
@@ -8526,6 +8653,8 @@ export async function startServer(options) {
         const quotaPoller = new QuotaPoller({
             pool: subscriptionPool,
             logger: { log: (m) => console.log(m), warn: (m) => console.warn(m) },
+            // Census #1–#4: resolve each account's LIVE slot through the ledger (no-op while dark).
+            locationGate: credentialLocationGate,
         });
         if (subscriptionPool.size() > 0) {
             quotaPoller.start();
@@ -8535,7 +8664,9 @@ export async function startServer(options) {
         // right now" for the dashboard "in use" badge (read-only; cached probe of
         // `claude auth status`). One shared instance so the TTL cache is honored.
         const { InUseAccountResolver } = await import('../core/InUseAccountResolver.js');
-        const inUseAccountResolver = new InUseAccountResolver({});
+        // Census #8 (the E4a liar): when re-pointing is enabled and the ledger knows the `~/.claude`
+        // tenant, the badge resolves from the ledger — NOT a stale `claude auth status` re-probe.
+        const inUseAccountResolver = new InUseAccountResolver({ locationGate: credentialLocationGate });
         // EnrollmentWizard — mobile-first new-account login (P2.1 of the Subscription
         // & Auth Standard). Dark with the pool: the /subscription-pool/enroll routes
         // do nothing until an operator starts an enrollment. The login driver reuses
@@ -15117,7 +15248,7 @@ export async function startServer(options) {
                 carrier: _topicProfileCarrier,
             }
             : null;
-        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, greenPrAutoMerger: greenPrAutoMerger ?? undefined, guardLatchStore: guardLatchStore ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, threadLog, threadMessageRecorder, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, getInboundQueue: () => _inboundQueue, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, preferenceReplicaStore, conflictStore, rollbackUnmerge, droppedOriginRegistry, preferencesUnionReader, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, poolLink: _poolLink ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, orphanedWorkSentinel, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, resumeQueue, resumeDrainer, operatorStopRecorder: recordOperatorStop, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier }); // Resolve the late-bound topic-operator getter (increment 2e): routing was
+        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, credentialRepointing, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, greenPrAutoMerger: greenPrAutoMerger ?? undefined, guardLatchStore: guardLatchStore ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, threadLog, threadMessageRecorder, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, getInboundQueue: () => _inboundQueue, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, preferenceReplicaStore, conflictStore, rollbackUnmerge, droppedOriginRegistry, preferencesUnionReader, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, poolLink: _poolLink ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, orphanedWorkSentinel, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, resumeQueue, resumeDrainer, operatorStopRecorder: recordOperatorStop, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier }); // Resolve the late-bound topic-operator getter (increment 2e): routing was
         // wired before the server existed; from here on inbound binds use the
         // server's own store instance.
         _agentServerRef = server;