instar 1.3.650 → 1.3.652

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA0CH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAwBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAuH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA+EtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAy4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA61ftE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA0CH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAwBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAwH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA+EtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAy4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA89ftE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -32,7 +32,7 @@ import { paneIdleWithEmptyInput } from '../core/ModelSwapService.js';
 import { escalatedModelIds, normalizeTierEscalationConfig } from '../core/ModelTierEscalation.js';
 import { activeAutonomousJobs, autonomousRunRemainingForTopic, listAutonomousJobs } from '../core/AutonomousSessions.js';
 import { AGE_LIMIT_ACTIVE_RUN_REASON, COMMITMENT_ACTIVE_RUN_REASON } from '../core/WorkEvidence.js';
-import { gapBEligibleForTopic, recentUserMessageFromHistory, resolveGapBInjectionGate, decideGapBInjection } from '../core/gapBCommitmentEvidence.js';
+import { gapBEligibleForTopic, recentUserMessageFromHistory, recentUserMessageAtFromHistory, resolveGapBInjectionGate, decideGapBInjection } from '../core/gapBCommitmentEvidence.js';
 import { TopicProfileTransferCarrier, createTopicProfilePullHandler } from '../core/TopicProfileTransferCarrier.js';
 import { closeAllSqlite } from '../core/SqliteRegistry.js';
 import { SessionManager } from '../core/SessionManager.js';
@@ -112,6 +112,7 @@ import { isPeerPresumedDead } from '../core/leaseLiveness.js';
 import { readPollActive, pidAlive as pollPidAlive } from '../core/pollIntent.js';
 import { checkMultiMachineConfigCoherence } from '../core/configCoherence.js';
 import { HttpLeaseTransport } from '../core/HttpLeaseTransport.js';
+import { PeerEndpointRecorder } from '../core/PeerEndpointRecorder.js';
 import { HttpLiveTailTransport } from '../core/HttpLiveTailTransport.js';
 import { LiveTailBuffer } from '../core/LiveTailBuffer.js';
 import { LiveTailSource } from '../core/LiveTailSource.js';
@@ -3874,6 +3875,11 @@ export async function startServer(options) {
         let gitSync;
         let registrySyncDebouncer;
         let leaseTransport;
+        // mesh-endpoint-http-propagation — the peer-endpoint recorder (receiver + pull-response
+        // chokepoint) and this machine's self-endpoints getter, hoisted so the AgentServer
+        // construction (far below) can wire the /api/lease[/pull] receivers to real registry fns.
+        let peerEndpointRecorder;
+        let getSelfMeshEndpoints;
         let leaseCoordinatorRef;
         let liveTailBuffer;
         let liveTailSendTransport;
@@ -4028,6 +4034,17 @@ export async function startServer(options) {
                     ownCidrs: () => ownIpv4Cidrs(),
                     logger: (m) => console.log(pc.dim(m)),
                 });
+                // mesh-endpoint-http-propagation — the single recorder chokepoint, wired to REAL
+                // registry fns (getMachineEndpoints / updateMachineEndpoints from MachineIdentity)
+                // and the LIVE meshTransport gate. Shared by the receiver routes (sender/puller
+                // direction) and the transport's pull-RESPONSE path (holder direction).
+                getSelfMeshEndpoints = () => idMgr.getMachineEndpoints(selfMachineId);
+                peerEndpointRecorder = new PeerEndpointRecorder({
+                    getPeerEndpoints: (id) => idMgr.getMachineEndpoints(id),
+                    updateMachineEndpoints: (id, eps) => idMgr.updateMachineEndpoints(id, eps),
+                    meshTransportEnabled: meshEnabled,
+                    logger: (m) => console.log(pc.dim(m)),
+                });
                 leaseTransport = new HttpLeaseTransport({
                     selfMachineId,
                     signingKeyPem: idMgr.loadSigningKey(),
@@ -4057,6 +4074,10 @@ export async function startServer(options) {
                     resolver: meshResolver,
                     meshTransportEnabled: meshEnabled,
                     hedgeDelayMs: meshCfg?.hedgeDelayMs ?? 1500,
+                    // mesh-endpoint-http-propagation — carry self-endpoints in the signed body
+                    // (sender), and record the holder's endpoints out of a verified pull RESPONSE.
+                    getSelfEndpoints: getSelfMeshEndpoints,
+                    peerEndpointRecorder,
                     logger: (m) => console.log(pc.dim(m)),
                 });
                 const leaseCoordinator = new LeaseCoordinator({
@@ -14066,6 +14087,96 @@ export async function startServer(options) {
                 config: { residueDenylist: ysCfg.residueDenylist, cacheTtlMs: ysCfg.dirtyCheckCacheTtlMs },
             });
         }
+        // ── Post-transfer closeout correctness (F1) ───────────────────────────────
+        // closeoutLivenessGate: when on, the post-transfer closeout no longer
+        // terminates the live local session on a stale/unverified ownership record —
+        // it verifies the owning machine ACTUALLY has a live session for the topic via
+        // a machine-local liveness snapshot before shedding the leftover. Ships dark
+        // fleet-wide, LIVE on a dev agent via resolveDevAgentGate. When OFF the snapshot
+        // is never built and the new deps are left absent (closeout byte-identical).
+        // Spec: docs/specs/post-transfer-closeout-correctness.md.
+        const _closeoutLivenessGate = resolveDevAgentGate(config.monitoring?.sessionReaper?.closeoutLivenessGate, config);
+        let _closeoutSnapshot;
+        // The combined ATOMIC owner read the gated closeout consumes — ONE registry
+        // read returning the STABLE machineId (liveness key) AND the display label
+        // (audit text), guaranteeing they describe the same owner from one instant.
+        const _topicOwnerElsewhereInfo = (topicId) => {
+            try {
+                const reg = sessionOwnershipRegistry;
+                const self = _meshSelfId;
+                if (!reg || !self)
+                    return null;
+                const machineId = reg.ownerOf(String(topicId));
+                if (!machineId || machineId === self)
+                    return null;
+                const displayName = machinePoolRegistry?.getCapacity(machineId)?.nickname ?? machineId;
+                return { machineId, displayName };
+            }
+            catch {
+                return null; /* @silent-fallback-ok — pool not wired yet → rule inert (withhold) */
+            }
+        };
+        if (_closeoutLivenessGate) {
+            const { CloseoutLivenessSnapshot } = await import('../monitoring/closeoutLivenessSnapshot.js');
+            const _reaperTick = config.monitoring?.sessionReaper?.tickIntervalSec ?? 120;
+            _closeoutSnapshot = new CloseoutLivenessSnapshot({
+                resolvePeerUrls: () => _resolvePeerUrls?.() ?? [],
+                // Reuse the proven per-peer GET /sessions fetch primitive (5s timeout,
+                // same shape as the pool route's fan-out). Rejects on any failure so the
+                // entry ages to stale → 'unknown' (fail-closed).
+                fetchPeerSessions: async (peer) => {
+                    const r = await fetch(`${peer.url}/sessions`, {
+                        headers: { Authorization: `Bearer ${config.authToken}` },
+                        signal: AbortSignal.timeout(5000),
+                    });
+                    if (!r.ok)
+                        throw new Error(`HTTP ${r.status}`);
+                    return (await r.json());
+                },
+                // Owner set = distinct machineId of every owned-elsewhere topic that has
+                // a live LOCAL leftover here (the exact set the closeout could act on).
+                ownerSet: () => {
+                    const owners = new Set();
+                    try {
+                        for (const s of sessionManager.listRunningSessions()) {
+                            const t = _resolveTopic(s.tmuxSession);
+                            if (t == null)
+                                continue;
+                            const info = _topicOwnerElsewhereInfo(t);
+                            if (info)
+                                owners.add(info.machineId);
+                        }
+                    }
+                    catch { /* @silent-fallback-ok — degrade to whatever was already pending */ }
+                    return [...owners];
+                },
+                now: () => Date.now(),
+                raiseAttention: (item) => {
+                    try {
+                        if (!telegram)
+                            return;
+                        void telegram.createAttentionItem({
+                            id: item.id, title: item.title, summary: item.summary, description: item.description,
+                            category: 'sessions', priority: 'NORMAL',
+                            sourceContext: 'session-reaper:closeout-snapshot-breaker',
+                        }).catch(() => { });
+                    }
+                    catch { /* @silent-fallback-ok — telegram not wired (TDZ) → audit-only */ }
+                },
+                audit: reaperAuditSink(config.stateDir),
+            }, { tickIntervalSec: _reaperTick });
+            // Level-triggered on the reaper cadence with ±10% jitter (anti-herd). Async
+            // refresh; the closeout always reads the PREVIOUS snapshot, never a fetch it
+            // triggers this tick. A thrown pass is swallowed (previous snapshot ages to
+            // stale → 'unknown'); the loop is never wedged.
+            const _jitter = 1 + (Math.random() * 0.2 - 0.1);
+            const _snapshotTimer = setInterval(() => {
+                void _closeoutSnapshot.refresh().catch(() => { });
+            }, Math.round(_reaperTick * 1000 * _jitter));
+            if (typeof _snapshotTimer.unref === 'function')
+                _snapshotTimer.unref();
+            console.log(pc.green('  SessionReaper closeoutLivenessGate ON (post-transfer closeout liveness-gated — live)'));
+        }
         const sessionReaper = new SessionReaper({
             ...reapGuardDeps,
             dirtyCheck: _yieldSafetyDirtyCheck,
@@ -14112,6 +14223,8 @@ export async function startServer(options) {
             },
             terminate: (id, reason, opts) => sessionManager.terminateSession(id, reason, {
                 bypassActiveProcessKeep: opts?.bypassActiveProcessKeep,
+                bypassRecentUserMessageForConfirmedMove: opts?.bypassRecentUserMessageForConfirmedMove,
+                workEvidence: opts?.workEvidence,
             }),
             markReaping: (id) => sessionManager.markReaping(id),
             clearReaping: (id) => sessionManager.clearReaping(id),
@@ -14140,6 +14253,28 @@ export async function startServer(options) {
                     return null; /* @silent-fallback-ok — pool not wired yet → rule inert */
                 }
             },
+            // Post-transfer closeout correctness (F1): the ATOMIC combined owner read
+            // the gated closeout uses (stable machineId + display label from ONE
+            // registry read). Always constructed (a pure read helper); the closeout
+            // only consults it on the gated path. Returns null when the pool is dark.
+            topicOwnerElsewhereInfo: _topicOwnerElsewhereInfo,
+            // Post-transfer closeout correctness (F1): the liveness verdict, read from
+            // the machine-local snapshot (NOT a live per-tick fetch). Injected ONLY
+            // when the gate resolved on (the snapshot exists); absent ⇒ gate inert.
+            remoteOwnerHasLiveSession: _closeoutSnapshot?.remoteOwnerHasLiveSession,
+            // Post-transfer closeout correctness (F1, Part E): the LOCAL-receipt ts of
+            // the bound topic's newest user message — same history source the
+            // recent-user-message KEEP-guard reads. Backs the freshest-interaction veto.
+            recentUserMessageAt: (topicId) => {
+                try {
+                    if (!telegram)
+                        return null;
+                    return recentUserMessageAtFromHistory(telegram.getTopicHistory(topicId, 50));
+                }
+                catch {
+                    return null; /* @silent-fallback-ok — no history → withhold the bypass (safe) */
+                }
+            },
             // WS1.3: pin-conflict do-not-act — a pin naming THIS machine while the
             // owner is elsewhere means the reconciler is bringing the topic back;
             // the closeout holds instead of attacking the session the pin wants here.
@@ -14189,6 +14324,11 @@ export async function startServer(options) {
                 // Observe-only busy-orphan detection rides the same dev-gate (dark fleet,
                 // live on dev agents). Zero risk — it never changes a keep/kill verdict.
                 busyOrphanDetection: resolveDevAgentGate(rcfg.busyOrphanDetection, config),
+                // Post-transfer closeout correctness (F1): the liveness gate rides the
+                // SAME dev-gate (dark fleet, live on dev agents). Resolved once here so
+                // the reaper's gated/legacy branch matches the snapshot construction
+                // above (both read resolveDevAgentGate(...closeoutLivenessGate)).
+                closeoutLivenessGate: _closeoutLivenessGate,
             };
         })());
         sessionReaper.start();
@@ -17495,7 +17635,7 @@ export async function startServer(options) {
         const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, accountFollowMePeerViews: async () => { const nickById = new Map((_listPoolMachines?.() ?? []).map((m) => [m.machineId, m.nickname ?? m.machineId])); let peers = (_resolvePeerUrls?.() ?? []).map((p) => ({ machineId: p.machineId, nickname: nickById.get(p.machineId) ?? p.machineId, url: p.url })); if (peers.length === 0) {
                 peers = (_listPoolMachines?.() ?? []).filter((m) => m.machineId !== _meshSelfId && !!m.lastKnownUrl).map((m) => ({ machineId: m.machineId, nickname: m.nickname ?? m.machineId, url: m.lastKnownUrl }));
             } if (peers.length === 0)
-                return []; const { fetchPeerSubscriptionViews } = await import('../core/fetchPeerSubscriptionViews.js'); return fetchPeerSubscriptionViews({ peers: () => peers, fetchImpl: fetch, authToken: config.authToken ?? '' }); }, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, accountFollowMeRevocation, credentialRepointing, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, greenPrAutoMerger: greenPrAutoMerger ?? undefined, guardLatchStore: guardLatchStore ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, meshBindActive: coordinator.managers.identityManager.hasIdentity() && config.multiMachine?.meshTransport?.enabled !== false, localSigningKeyPem, leaseTransport, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, threadLog, threadMessageRecorder, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, getInboundQueue: () => _inboundQueue, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, preferenceReplicaStore, replicatedRecordEmitter, conflictStore, rollbackUnmerge, droppedOriginRegistry, preferencesUnionReader, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, deliverMandateToMachine: _deliverMandateToMachine ?? undefined, poolLink: _poolLink ?? undefined, poolPollCache: _poolPollCache ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, orphanedWorkSentinel, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, resumeQueue, resumeDrainer, autonomousLivenessReconciler, prHandLease: prHandLease ?? undefined, operatorStopRecorder: recordOperatorStop, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier, liveTestGate, liveTestGateMode, liveTestRunnerCtx }); // Resolve the late-bound topic-operator getter (increment 2e): routing was
+                return []; const { fetchPeerSubscriptionViews } = await import('../core/fetchPeerSubscriptionViews.js'); return fetchPeerSubscriptionViews({ peers: () => peers, fetchImpl: fetch, authToken: config.authToken ?? '' }); }, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, accountFollowMeRevocation, credentialRepointing, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, greenPrAutoMerger: greenPrAutoMerger ?? undefined, guardLatchStore: guardLatchStore ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, meshBindActive: coordinator.managers.identityManager.hasIdentity() && config.multiMachine?.meshTransport?.enabled !== false, localSigningKeyPem, leaseTransport, peerEndpointRecorder, getSelfMeshEndpoints, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, threadLog, threadMessageRecorder, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, getInboundQueue: () => _inboundQueue, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, preferenceReplicaStore, replicatedRecordEmitter, conflictStore, rollbackUnmerge, droppedOriginRegistry, preferencesUnionReader, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, deliverMandateToMachine: _deliverMandateToMachine ?? undefined, poolLink: _poolLink ?? undefined, poolPollCache: _poolPollCache ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, orphanedWorkSentinel, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, resumeQueue, resumeDrainer, autonomousLivenessReconciler, prHandLease: prHandLease ?? undefined, operatorStopRecorder: recordOperatorStop, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier, liveTestGate, liveTestGateMode, liveTestRunnerCtx }); // Resolve the late-bound topic-operator getter (increment 2e): routing was
         // wired before the server existed; from here on inbound binds use the
         // server's own store instance.
         _agentServerRef = server;