instar 1.3.614 → 1.3.616

package/dashboard/mandates.js

@@ -526,31 +526,52 @@ export function createController({ doc, els, fetchImpl }) {
     return { problems, authorities };
   }
 
+  // WS5.2 R4a — an account-follow-me authority targets a SPECIFIC machine. From the operator's ONE
+  // dashboard, such a mandate is issued AND delivered to that target via /mandate/issue-for-machine
+  // (which issues locally then dispatches the R4a-signed bundle over the mesh) — the operator NEVER
+  // opens the target's own dashboard. A non-follow-me mandate uses the ordinary /mandate/issue path.
+  function followMeTarget(authorities) {
+    if (!Array.isArray(authorities)) return null;
+    const a = authorities.find((x) => x && x.action === 'account-follow-me'
+      && x.bounds && typeof x.bounds.accountId === 'string' && typeof x.bounds.targetMachineId === 'string');
+    return a ? { accountId: a.bounds.accountId, targetMachineId: a.bounds.targetMachineId } : null;
+  }
+
   async function issue() {
     const { problems, authorities } = validateIssueForm();
     if (problems.length > 0) {
       note('Not issued — fix the following first:\n' + problems.join('\n'), 'error');
       return;
     }
-    const payload = {
-      pin: els.issuePin.value,
-      scope: els.issueScope?.value?.trim(),
-      agents: [els.issueAgentA?.value?.trim(), els.issueAgentB?.value?.trim()],
-      authorities,
-      expiresAt: new Date(els.issueExpires.value).toISOString(),
-    };
+    const expiresAt = new Date(els.issueExpires.value).toISOString();
+    const pin = els.issuePin.value;
+    const agents = [els.issueAgentA?.value?.trim(), els.issueAgentB?.value?.trim()];
+    const fm = followMeTarget(authorities);
+    // Route an account-follow-me mandate through the one-dashboard issue+deliver path; everything
+    // else through the ordinary issue path.
+    const endpoint = fm ? '/mandate/issue-for-machine' : '/mandate/issue';
+    const payload = fm
+      ? { pin, scope: els.issueScope?.value?.trim(), agents, expiresAt, accountId: fm.accountId, targetMachineId: fm.targetMachineId }
+      : { pin, scope: els.issueScope?.value?.trim(), agents, authorities, expiresAt };
     els.issueBtn.disabled = true;
     try {
-      const { status, body } = await fetchJson('/mandate/issue', {
+      const { status, body } = await fetchJson(endpoint, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify(payload),
       });
       if (els.issuePin) els.issuePin.value = ''; // never retain the PIN
       if (status === 201) {
-        note(`✓ Mandate ${body?.mandate?.id ?? ''} issued — it is active and listed above. The agents can now act within its bounds.`, 'success');
+        const deliveredNote = fm
+          ? (body?.delivered ? ' and delivered to the target machine' : (body?.local ? ' (target is this machine)' : ''))
+          : '';
+        note(`✓ Mandate ${body?.mandate?.id ?? ''} issued${deliveredNote} — it is active and listed above. The agents can now act within its bounds.`, 'success');
         if (els.issueDetails) els.issueDetails.open = false;
         await refresh();
+      } else if (fm && status === 502) {
+        // Issued locally but cross-machine DELIVERY failed — honest, retry-able.
+        note(`Mandate ${body?.mandate?.id ?? ''} issued, but delivery to the target failed: ${body?.reason ?? body?.error ?? `HTTP ${status}`}. Retry to re-deliver (issuance is idempotent on the target).`, 'error');
+        await refresh();
       } else {
         note(`Not issued — the server refused: ${body?.error ?? `HTTP ${status}`}`, 'error');
       }

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAwBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAkH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAg4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAm0etE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAwBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAkH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAy4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAs7etE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -418,6 +418,10 @@ let _resolvePeerUrls = null;
  *  pool dark / no client — the transfer route degrades to today's pin path. */
 let _sendDrain = null;
 let _listPoolMachines = null;
+/** WS5.2 R4a — operator/issuer leg: deliver an R4a-signed account-follow-me mandate to a REMOTE
+ *  target over the signed mesh (the new verb). Set in the mesh-client block; null = no mesh client
+ *  (single-machine) → the issue-for-machine route 503s on a remote target. */
+let _deliverMandateToMachine = null;
 /** Multi-Machine Session Pool §L4: per-topic placement pin store ("move this to <nickname>"). */
 let _topicPinStore = null;
 /** Cross-machine secret-sync (spec Phase 4): route-facing handle (push lever + read-only status). */
@@ -9938,6 +9942,63 @@ export async function startServer(options) {
         }, config.subscriptionPool?.enrollment?.reissueSweepMs ?? 5 * 60_000);
         if (enrollReissueTimer.unref)
             enrollReissueTimer.unref();
+        // ── WS5.2 R12 — Account Follow-Me revocation data-plane wiring (PER-SERVER model, OQ6) ──
+        // The operator revokes the `account-follow-me` mandate on the TARGET machine's OWN dashboard,
+        // so when /mandate/:id/revoke fires here, THIS machine IS the target — the data-plane wipe is
+        // LOCAL (cooperative-online posture), never a cross-machine wipe-instruction. The pure executor
+        // (AccountFollowMeRevocation) is constructed once with REAL deps:
+        //   - cooperativeWipe: framework logout against the account's CLAUDE_CONFIG_DIR + delete the
+        //     per-account config slot (SafeFsExecutor) + SubscriptionPool.remove(accountId) — FAIL-CLOSED
+        //     (a step that throws surfaces as not-done, never a silent "removed").
+        //   - pendingStore: a DURABLE JSON ledger (survives restarts) — offline targets get a bounded
+        //     pending wipe that fires on reconnect or escalates to revocation-FAILED at the deadline.
+        //   - emitRevocationFailed: the real attention emitter (HIGH item, one running item per pair).
+        //   - enabled: the SAME dev-gate as the rest of accountFollowMe (LIVE on a dev agent / DARK on
+        //     the fleet), read LIVE per-call so a config flip is honored without a restart.
+        // Everything is DARK behind `multiMachine.accountFollowMe`: when the gate resolves OFF, revoke()
+        // is a strict no-op (the route trigger does nothing) and sweepDeadlines() returns [].
+        const { AccountFollowMeRevocation } = await import('../core/AccountFollowMeRevocation.js');
+        const { DurablePendingWipeStore } = await import('../core/AccountFollowMeRevocationStore.js');
+        const { buildCooperativeWipe } = await import('../core/accountFollowMeCooperativeWipe.js');
+        const accountFollowMeRevocationEnabled = () => resolveDevAgentGate(config.multiMachine?.accountFollowMe?.enabled, config);
+        const accountFollowMeRevocation = new AccountFollowMeRevocation({
+            enabled: accountFollowMeRevocationEnabled,
+            cooperativeWipe: buildCooperativeWipe({
+                pool: subscriptionPool,
+                log: (m) => console.log(m),
+            }),
+            pendingStore: new DurablePendingWipeStore({ stateDir: config.stateDir }),
+            emitRevocationFailed: (item) => {
+                if (!telegram)
+                    return;
+                void telegram.createAttentionItem({
+                    id: item.id,
+                    title: item.title,
+                    summary: item.body,
+                    description: item.body,
+                    category: 'account-follow-me',
+                    priority: 'HIGH',
+                    sourceContext: 'account-follow-me-revocation',
+                });
+            },
+            reconnectDeadlineMs: () => config
+                .multiMachine?.accountFollowMe?.revocationReconnectDeadlineMs ?? 6 * 60 * 60_000,
+            log: (m) => console.log(m),
+        });
+        // R12.iii — periodic deadline sweep so an offline-pending wipe past its reconnect-deadline
+        // ESCALATES to the LOUD revocation-FAILED attention item (resume-queue give-up discipline).
+        // sweepDeadlines() is a strict no-op while the feature resolves dark (the gate lives INSIDE it),
+        // so the timer can always run. Reentrancy is irrelevant (synchronous); unref'd so it never holds
+        // the process open. Cleared on shutdown alongside the other subscription timers.
+        const accountFollowMeRevocationSweepTimer = setInterval(() => {
+            try {
+                accountFollowMeRevocation.sweepDeadlines();
+            }
+            catch (e) {
+                console.warn(`[account-follow-me] revocation deadline sweep error: ${e instanceof Error ? e.message : String(e)}`);
+            }
+        }, 5 * 60_000);
+        accountFollowMeRevocationSweepTimer.unref?.();
         // Commitment Sentinel — LLM-powered scanner that finds unregistered commitments.
         let commitmentSentinel;
         if (sharedIntelligence) {
@@ -15189,6 +15250,15 @@ export async function startServer(options) {
                         routerHolder: () => coordinator?.getSyncStatus().leaseHolder ?? null,
                         ownerOf: (s) => ownReg.ownerOf(s),
                         placementTargetOf: (s) => ownReg.placementTargetOf(s),
+                        // WS5.2 R4a — the COARSE gate for account-follow-me-mandate-deliver: follow-me must be
+                        // enabled on THIS machine AND the sender a registered ACTIVE peer (verifyEnvelope already
+                        // proved the Ed25519/recipient/nonce). DENY-BY-DEFAULT (dark agent → refused here). The
+                        // LOAD-BEARING authority is the R4a signature re-verification in the handler below.
+                        authorizeMandateDeliver: ({ sender }) => {
+                            const afmEnabled = resolveDevAgentGate(config
+                                .multiMachine?.accountFollowMe?.enabled, config);
+                            return afmEnabled && meshIdMgr.isMachineActive(sender);
+                        },
                     },
                     recordNonce: (s, n) => {
                         const t = Date.now();
@@ -15420,6 +15490,21 @@ export async function startServer(options) {
                         'secret-share': (cmd, sender) => _secretShareHandler
                             ? _secretShareHandler.handle(cmd, sender)
                             : { ok: false, reason: 'secret-sync disabled' },
+                        // WS5.2 R4a — ONE-DASHBOARD cross-machine mandate DELIVERY (target side). The operator
+                        // issued the account-follow-me mandate (PIN-gated) on their single dashboard and
+                        // delivered it here. verifyEnvelope already authenticated `sender` (Ed25519, recipient,
+                        // nonce, registered-peer); the LOAD-BEARING authority is the R4a issuance-signature
+                        // re-verification, done by AgentServer.acceptDeliveredMandateCommand against the SAME
+                        // registered operator key verifyEnvelope used (resolved here, NEVER from the payload).
+                        // FAIL CLOSED on every uncertainty; an unverified mandate is never persisted.
+                        'account-follow-me-mandate-deliver': (cmd, sender) => {
+                            const c = cmd;
+                            // Resolve the AUTHENTICATED sender's REGISTERED Ed25519 public key — the trust anchor.
+                            const operatorPem = meshIdMgr.getSigningPublicKeyPem(sender);
+                            const r = _agentServerRef?.acceptDeliveredMandateCommand(sender, c.portable, operatorPem)
+                                ?? { accepted: false, reason: 'agent-server-not-ready' };
+                            return r;
+                        },
                         // WS4.4 holder side (MULTI-MACHINE-SEAMLESSNESS-SPEC §WS4.4). The
                         // verifyEnvelope gate already proved WHICH fronting machine is asking
                         // (`sender` = the authenticated, registered peer — used as the
@@ -15505,6 +15590,30 @@ export async function startServer(options) {
                     });
                     const peerUrl = (machineId) => meshIdMgr.getActiveMachines().find((m) => m.machineId === machineId)?.entry.lastKnownUrl ?? null;
                     _meshSelfId = meshSelfId;
+                    // WS5.2 R4a — operator/issuer leg: deliver an R4a-signed account-follow-me mandate to a
+                    // REMOTE target over the signed mesh `account-follow-me-mandate-deliver` verb. Every
+                    // failure shape maps to an explicit outcome the issue-for-machine route surfaces honestly
+                    // (the mandate is already issued+persisted locally; only delivery may fail → retry-able).
+                    _deliverMandateToMachine = async ({ targetMachineId, portable }) => {
+                        const url = peerUrl(targetMachineId);
+                        if (!url)
+                            return { ok: false, status: 0, reason: 'no-peer-url' };
+                        try {
+                            const res = await meshClient.send({ machineId: targetMachineId, url }, { type: 'account-follow-me-mandate-deliver', portable }, 0, { timeoutMs: 15_000 });
+                            if (res.ok) {
+                                const r = (res.result ?? {});
+                                return r.accepted === true
+                                    ? { ok: true, status: 200 }
+                                    : { ok: false, status: 200, reason: typeof r.reason === 'string' ? r.reason : 'target-refused' };
+                            }
+                            return { ok: false, status: res.status, reason: res.reason ?? `status-${res.status}` };
+                        }
+                        catch (err) {
+                            // @silent-fallback-ok — a failed delivery RPC returns ok:false to the route, which
+                            // surfaces a retry-able 502 (the mandate is safe locally); never a stuck/half delivery.
+                            return { ok: false, status: 0, reason: err instanceof Error ? err.message : String(err) };
+                        }
+                    };
                     // WS1.2 sender leg: signed drain order to a remote owner. Bounded by
                     // the drain bound + slack so a clean drain (≤30s wait + close) can
                     // complete within one call; every failure shape maps to an explicit
@@ -16941,7 +17050,7 @@ export async function startServer(options) {
             }
             : null;
         const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, accountFollowMePeerViews: async () => { const machines = (_listPoolMachines?.() ?? []).filter((m) => m.machineId !== _meshSelfId && !!m.lastKnownUrl); if (machines.length === 0)
-                return []; const { fetchPeerSubscriptionViews } = await import('../core/fetchPeerSubscriptionViews.js'); return fetchPeerSubscriptionViews({ peers: () => machines.map((m) => ({ machineId: m.machineId, nickname: m.nickname ?? m.machineId, url: m.lastKnownUrl })), fetchImpl: fetch, authToken: config.authToken ?? '' }); }, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, credentialRepointing, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, greenPrAutoMerger: greenPrAutoMerger ?? undefined, guardLatchStore: guardLatchStore ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, threadLog, threadMessageRecorder, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, getInboundQueue: () => _inboundQueue, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, preferenceReplicaStore, replicatedRecordEmitter, conflictStore, rollbackUnmerge, droppedOriginRegistry, preferencesUnionReader, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, poolLink: _poolLink ?? undefined, poolPollCache: _poolPollCache ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, orphanedWorkSentinel, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, resumeQueue, resumeDrainer, autonomousLivenessReconciler, prHandLease: prHandLease ?? undefined, operatorStopRecorder: recordOperatorStop, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier, liveTestGate, liveTestGateMode, liveTestRunnerCtx }); // Resolve the late-bound topic-operator getter (increment 2e): routing was
+                return []; const { fetchPeerSubscriptionViews } = await import('../core/fetchPeerSubscriptionViews.js'); return fetchPeerSubscriptionViews({ peers: () => machines.map((m) => ({ machineId: m.machineId, nickname: m.nickname ?? m.machineId, url: m.lastKnownUrl })), fetchImpl: fetch, authToken: config.authToken ?? '' }); }, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, accountFollowMeRevocation, credentialRepointing, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, greenPrAutoMerger: greenPrAutoMerger ?? undefined, guardLatchStore: guardLatchStore ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, threadLog, threadMessageRecorder, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, getInboundQueue: () => _inboundQueue, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, preferenceReplicaStore, replicatedRecordEmitter, conflictStore, rollbackUnmerge, droppedOriginRegistry, preferencesUnionReader, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, deliverMandateToMachine: _deliverMandateToMachine ?? undefined, poolLink: _poolLink ?? undefined, poolPollCache: _poolPollCache ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, orphanedWorkSentinel, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, resumeQueue, resumeDrainer, autonomousLivenessReconciler, prHandLease: prHandLease ?? undefined, operatorStopRecorder: recordOperatorStop, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier, liveTestGate, liveTestGateMode, liveTestRunnerCtx }); // Resolve the late-bound topic-operator getter (increment 2e): routing was
         // wired before the server existed; from here on inbound binds use the
         // server's own store instance.
         _agentServerRef = server;