instar 1.3.590 → 1.3.592

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAkH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAg4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA2ndtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAkH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAg4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAupdtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -9173,6 +9173,24 @@ export async function startServer(options) {
         if (subscriptionPool.size() > 0) {
             console.log(pc.green(`  Subscription pool: ${subscriptionPool.size()} account(s) registered`));
         }
+        // POOL-AWARE QUOTA THROTTLE wiring (docs/specs/POOL-AWARE-QUOTA-THROTTLE-SPEC.md):
+        // give the global quota brake the SAME placeability predicate the placement layer
+        // (selectAccount) uses, reading the LIVE SubscriptionPool. Effect: the brake never
+        // stops the whole agent while a placeable account has headroom (the 2026-06-15
+        // "one maxed account stalls everything while reserves sit idle" bug), and never
+        // allows work placement can't land (the 90–95% respawn-loop band — selectAccount's
+        // soft threshold is stricter than the shutdown threshold). Only for a genuine pool
+        // (>1 account); a solo agent keeps the legacy single-account gating untouched.
+        if (quotaTracker && subscriptionPool.size() > 1) {
+            const { poolHeadroom } = await import('../core/QuotaAwareScheduler.js');
+            // poolHeadroom shares placement's exact eligibility predicate, so a throttle
+            // "allow" always corresponds to a placeable account, AND it gates on the
+            // MOST-HEADROOM account (not the use-it-or-lose-it drain-first winner) — so
+            // non-critical work runs whenever ANY account has room, while placement still
+            // drains the soonest-to-reset account. Clamps + degraded signal are built in.
+            quotaTracker.setPoolQuotaProvider(() => poolHeadroom(subscriptionPool.list(), { nowMs: Date.now() }));
+            console.log(pc.green('  Pool-aware quota throttle: wired (placement-shared eligibility, most-headroom gating)'));
+        }
         // ── Live credential re-pointing — census consumer re-routing (WS5.2 Step 6) ──
         // The CredentialLocationLedger is the machine-local source of truth for "which account is in
         // which config-home slot" once re-pointing is enabled. The CredentialLocationGate re-routes
@@ -14127,23 +14145,32 @@ export async function startServer(options) {
                 // resolves the right owner on the next message — the step the in-memory store
                 // never had. Off the hot path: ticked on an interval + once at boot (to adopt
                 // a transfer that landed while we were down). Only when the durable store is
-                // active (dev-gate); InMemory has no cross-machine replication to apply.
-                if (durableOwnershipStore && _meshSelfId) {
-                    const { OwnershipApplier } = await import('../core/OwnershipApplier.js');
-                    const { CoherenceJournalReader } = await import('../core/CoherenceJournalReader.js');
-                    const applier = new OwnershipApplier({
-                        reader: new CoherenceJournalReader({ stateDir: config.stateDir }),
-                        store: durableOwnershipStore,
-                        selfMachineId: _meshSelfId,
-                        logger: (m) => console.log(pc.dim(`  ${m}`)),
-                    });
+                // active; InMemory has no cross-machine replication to apply.
+                //
+                // Construction is gated on the durable store ALONE — NOT on `_meshSelfId`. The
+                // old `&& _meshSelfId` guard ran here, ~650 lines before `_meshSelfId` is assigned
+                // in the boot sequence, so it was always null at this point and the applier was
+                // never wired (the boot-ordering bug the live test caught). `selfMachineId` is now
+                // a late-bound getter (label-only; materialization never needs it), so an early
+                // tick is correct and later ticks label SELF/peer once the id resolves. The wiring
+                // factory is extracted + unit-tested so this condition can never silently regress.
+                // Spec: docs/specs/ownership-applier-meshself-ordering-fix.md.
+                const { CoherenceJournalReader } = await import('../core/CoherenceJournalReader.js');
+                const { wireOwnershipApplier } = await import('../core/ownershipApplierWiring.js');
+                const ownershipApplier = wireOwnershipApplier({
+                    durableOwnershipStore,
+                    reader: new CoherenceJournalReader({ stateDir: config.stateDir }),
+                    getSelfMachineId: () => _meshSelfId,
+                    logger: (m) => console.log(pc.dim(`  ${m}`)),
+                });
+                if (ownershipApplier) {
                     try {
-                        applier.tick();
+                        ownershipApplier.tick();
                     }
                     catch { /* @silent-fallback-ok — boot tick best-effort; the interval converges */ }
                     const applierTimer = setInterval(() => {
                         try {
-                            const r = applier.tick();
+                            const r = ownershipApplier.tick();
                             if (r.materialized)
                                 console.log(pc.dim(`  [OwnershipApplier] materialized ${r.materialized}/${r.examined} topic(s) from replicated placements`));
                         }