instar 1.3.688 → 1.3.689

package/dist/core/devGatedFeatures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devGatedFeatures.d.ts","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,kBAAkB,EAAE,eAAe,EA8Z/C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,sBAAsB,GACtB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EA2InD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO5E"}
+{"version":3,"file":"devGatedFeatures.d.ts","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,kBAAkB,EAAE,eAAe,EA8Z/C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,sBAAsB,GACtB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EAgJnD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO5E"}

package/dist/core/devGatedFeatures.js

@@ -491,6 +491,11 @@ export const DARK_GATE_EXCLUSIONS = [
         category: 'optional-integration',
         reason: 'hold-for-stability policy; trails inboundQueue one rollout stage behind (operator discipline)',
     },
+    {
+        configPath: 'multiMachine.sessionPool.ownershipCheckedSpawn.enabled',
+        category: 'optional-integration',
+        reason: 'G3 lease-gated spawn (MESH-SELF-HEAL-SPEC §3.3) — spawn iff holding the fenced awake-lease, else forward to holder; stops the duplicate-session harm. Dark→dry-run→dev-live→fleet, live-verified on the real Mini+Laptop pair before enablement.',
+    },
     // (the 7 multiMachine.stateSync.* memory stores — preferences, relationships,
     //  learnings, knowledge, evolutionActions, userRegistry, topicOperator — MOVED to
     //  DEV_GATED_FEATURES on 2026-06-13 per operator directive topic 13481: "NOTHING

package/dist/core/devGatedFeatures.js.map

@@ -1 +1 @@
-{"version":3,"file":"devGatedFeatures.js","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAoBH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD;QACE,IAAI,EAAE,yBAAyB;QAC/B,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,+MAA+M;QAC5N,aAAa,EAAE,ikBAAikB;KACjlB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,wCAAwC;QACpD,WAAW,EAAE,gNAAgN;QAC7N,aAAa,EAAE,wSAAwS;KACxT;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,uGAAuG;KACvH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,kCAAkC;QAC/C,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE,wGAAwG;KACxH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,gCAAgC;QAC7C,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,8FAA8F;KAC9G;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,sBAAsB;QAClC,WAAW,EAAE,iEAAiE;QAC9E,aAAa,EAAE,sDAAsD;KACtE;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,oEAAoE;QACjF,aAAa,EAAE,yDAAyD;KACzE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,8EAA8E;QAC3F,aAAa,EAAE,qNAAqN;KACrO;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,uDAAuD;QACnE,WAAW,EAAE,wPAAwP;QACrQ,aAAa,EAAE,srBAAsrB;KACtsB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sDAAsD;QAClE,WAAW,EAAE,sMAAsM;QACnN,aAAa,EAAE,2hBAA2hB;KAC3iB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,uBAAuB;QACnC,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,yNAAyN;KACzO;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,+CAA+C;QAC3D,WAAW,EAAE,uLAAuL;QACpM,aAAa,EAAE,otBAAotB;KACpuB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,4BAA4B;QACxC,WAAW,EAAE,mEAAmE;QAChF,aAAa,EAAE,mOAAmO;KACnP;IACD;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,gCAAgC;QAC5C,WAAW,EAAE,wJAAwJ;QACrK,aAAa,EAAE,wnBAAwnB;KACxoB;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,+CAA+C;QAC3D,WAAW,EAAE,+MAA+M;QAC5N,aAAa,EAAE,69BAA69B;KAC7+B;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,8EAA8E;IAC9E,gFAAgF;IAChF,0EAA0E;IAC1E,kFAAkF;IAClF,mFAAmF;IACnF,oFAAoF;IACpF,oFAAoF;IACpF,qFAAqF;IACrF,6EAA6E;IAC7E,+EAA+E;IAC/E,iFAAiF;IACjF,+EAA+E;IAC/E,2EAA2E;IAC3E,gFAAgF;IAChF,iFAAiF;IACjF,+EAA+E;IAC/E;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,+IAA+I;QAC5J,aAAa,EAAE,8YAA8Y;KAC9Z;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,8JAA8J;QAC3K,aAAa,EAAE,0aAA0a;KAC1b;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,2MAA2M;QACxN,aAAa,EAAE,gcAAgc;KAChd;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,wMAAwM;QACrN,aAAa,EAAE,muBAAmuB;KACnvB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,0OAA0O;QACvP,aAAa,EAAE,mcAAmc;KACnd;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,kPAAkP;QAC/P,aAAa,EAAE,+oBAA+oB;KAC/pB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,wGAAwG;QACrH,aAAa,EAAE,qRAAqR;KACrS;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,2UAA2U;QACxV,aAAa,EAAE,qTAAqT;KACrU;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,gNAAgN;QAC7N,aAAa,EAAE,gpBAAgpB;KAChqB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,2ZAA2Z;QACxa,aAAa,EAAE,+lBAA+lB;KAC/mB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,0RAA0R;QACvS,aAAa,EAAE,ynBAAynB;KACzoB;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,+TAA+T;QAC5U,aAAa,EAAE,o3BAAo3B;KACp4B;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,2CAA2C;QACvD,WAAW,EACT,+bAA+b;QACjc,aAAa,EACX,6rBAA6rB;KAChsB;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,UAAU,EAAE,4DAA4D;QACxE,WAAW,EACT,2KAA2K;QAC7K,aAAa,EACX,2OAA2O;KAC9O;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EACT,6IAA6I;QAC/I,aAAa,EACX,uKAAuK;KAC1K;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,qCAAqC;QACjD,WAAW,EACT,0IAA0I;QAC5I,aAAa,EACX,ieAAie;KACpe;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,yCAAyC;QACrD,WAAW,EACT,6HAA6H;QAC/H,aAAa,EACX,8UAA8U;KACjV;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EACT,iWAAiW;QACnW,aAAa,EACX,s7BAAs7B;KACz7B;IACD;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,gCAAgC;QAC5C,WAAW,EACT,kKAAkK;QACpK,aAAa,EACX,wiBAAwiB;KAC3iB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EACT,2OAA2O;QAC7O,aAAa,EACX,gqBAAgqB;KACnqB;IACD,gFAAgF;IAChF,iFAAiF;IACjF,yEAAyE;IACzE,gFAAgF;IAChF;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,qFAAqF;QAClG,aAAa,EAAE,mOAAmO;KACnP;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,iDAAiD;QAC7D,WAAW,EAAE,mKAAmK;QAChL,aAAa,EAAE,4fAA4f;KAC5gB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,wCAAwC;QACpD,WAAW,EAAE,2LAA2L;QACxM,aAAa,EAAE,8wBAA8wB;KAC9xB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,oCAAoC;QAChD,WAAW,EAAE,mFAAmF;QAChG,aAAa,EAAE,uWAAuW;KACvX;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,yEAAyE;QACtF,aAAa,EAAE,6cAA6c;KAC7d;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,4MAA4M;KAC5N;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,2CAA2C;QACvD,WAAW,EAAE,2JAA2J;QACxK,aAAa,EAAE,0VAA0V;KAC1W;IACD,kFAAkF;IAClF,kFAAkF;IAClF,0EAA0E;IAC1E,oFAAoF;IACpF,qFAAqF;IACrF,sFAAsF;IACtF,8EAA8E;IAC9E,6EAA6E;IAC7E,sFAAsF;IACtF,qFAAqF;IACrF,qFAAqF;IACrF,oFAAoF;IACpF,kEAAkE;IAClE,gFAAgF;IAChF,mFAAmF;IACnF,oDAAoD;IACpD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,yFAAyF;QACtG,aAAa,EAAE,6WAA6W;KAC7X;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,+GAA+G;QAC5H,aAAa,EAAE,waAAwa;KACxb;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,uHAAuH;QACpI,aAAa,EAAE,6UAA6U;KAC7V;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,4HAA4H;QACzI,aAAa,EAAE,qVAAqV;KACrW;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,iDAAiD;QAC7D,WAAW,EAAE,qIAAqI;QAClJ,aAAa,EAAE,2bAA2b;KAC3c;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,kHAAkH;QAC/H,aAAa,EAAE,0aAA0a;KAC1b;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,kHAAkH;QAC/H,aAAa,EAAE,kjBAAkjB;KAClkB;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,gDAAgD;QAC5D,WAAW,EAAE,+QAA+Q;QAC5R,aAAa,EAAE,2hBAA2hB;KAC3iB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,oDAAoD;QAChE,WAAW,EAAE,8VAA8V;QAC3W,aAAa,EAAE,wkBAAwkB;KACxlB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,2dAA2d;QACxe,aAAa,EAAE,2oBAA2oB;KAC3pB;IACD,gFAAgF;IAChF,sFAAsF;IACtF,qFAAqF;IACrF,uFAAuF;IACvF,8DAA8D;IAC9D;QACE,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,gDAAgD;QAC5D,WAAW,EAAE,wMAAwM;QACrN,aAAa,EAAE,skBAAskB;KACtlB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,kDAAkD;QAC9D,WAAW,EAAE,2NAA2N;QACxO,aAAa,EAAE,mgBAAmgB;KACnhB;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,iPAAiP;QAC9P,aAAa,EAAE,4nBAA4nB;KAC5oB;CACF,CAAC;AA0CF,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,+EAA+E;IAC/E;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,UAAU,EAAE,wCAAwC;QACpD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,oFAAoF;IACpF,6DAA6D;IAC7D,wEAAwE;IACxE;QACE,UAAU,EAAE,8BAA8B;QAC1C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,iIAAiI;KAC1I;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,gGAAgG;KACzG;IACD,uFAAuF;IACvF;QACE,UAAU,EAAE,qDAAqD;QACjE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,qDAAqD;KAC9D;IACD,qDAAqD;IACrD;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8CAA8C;KACvD;IACD;QACE,UAAU,EAAE,+CAA+C;QAC3D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,kGAAkG;KAC3G;IACD;QACE,UAAU,EAAE,mDAAmD;QAC/D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,+FAA+F;KACxG;IACD,8EAA8E;IAC9E,kFAAkF;IAClF,iFAAiF;IACjF,gFAAgF;IAChF,mFAAmF;IACnF,6EAA6E;IAC7E,oFAAoF;IACpF,sFAAsF;IACtF,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,iFAAiF;IACjF;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,4RAA4R;KACrS;IACD;QACE,UAAU,EAAE,wDAAwD;QACpE,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,4dAA4d;KACre;IACD;QACE,UAAU,EAAE,4DAA4D;QACxE,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,scAAsc;KAC/c;IACD;QACE,UAAU,EAAE,oDAAoD;QAChE,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,inBAAinB;KAC1nB;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,uMAAuM;KAChN;IACD;QACE,UAAU,EAAE,kDAAkD;QAC9D,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,ymBAAymB;KAClnB;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,gXAAgX;KACzX;IACD;QACE,UAAU,EAAE,6CAA6C;QACzD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,uVAAuV;KAChW;IACD,sDAAsD;IACtD;QACE,UAAU,EAAE,uCAAuC;QACnD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,wXAAwX;KACjY;IACD,gFAAgF;IAChF,uFAAuF;IACvF;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8NAA8N;KACvO;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,gQAAgQ;KACzQ;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAkB;IACjE,IAAI,GAAG,GAAY,MAAM,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7D,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"devGatedFeatures.js","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAoBH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD;QACE,IAAI,EAAE,yBAAyB;QAC/B,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,+MAA+M;QAC5N,aAAa,EAAE,ikBAAikB;KACjlB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,wCAAwC;QACpD,WAAW,EAAE,gNAAgN;QAC7N,aAAa,EAAE,wSAAwS;KACxT;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,uGAAuG;KACvH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,kCAAkC;QAC/C,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE,wGAAwG;KACxH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,gCAAgC;QAC7C,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,8FAA8F;KAC9G;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,sBAAsB;QAClC,WAAW,EAAE,iEAAiE;QAC9E,aAAa,EAAE,sDAAsD;KACtE;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,oEAAoE;QACjF,aAAa,EAAE,yDAAyD;KACzE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,8EAA8E;QAC3F,aAAa,EAAE,qNAAqN;KACrO;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,uDAAuD;QACnE,WAAW,EAAE,wPAAwP;QACrQ,aAAa,EAAE,srBAAsrB;KACtsB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sDAAsD;QAClE,WAAW,EAAE,sMAAsM;QACnN,aAAa,EAAE,2hBAA2hB;KAC3iB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,uBAAuB;QACnC,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,yNAAyN;KACzO;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,+CAA+C;QAC3D,WAAW,EAAE,uLAAuL;QACpM,aAAa,EAAE,otBAAotB;KACpuB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,4BAA4B;QACxC,WAAW,EAAE,mEAAmE;QAChF,aAAa,EAAE,mOAAmO;KACnP;IACD;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,gCAAgC;QAC5C,WAAW,EAAE,wJAAwJ;QACrK,aAAa,EAAE,wnBAAwnB;KACxoB;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,+CAA+C;QAC3D,WAAW,EAAE,+MAA+M;QAC5N,aAAa,EAAE,69BAA69B;KAC7+B;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,8EAA8E;IAC9E,gFAAgF;IAChF,0EAA0E;IAC1E,kFAAkF;IAClF,mFAAmF;IACnF,oFAAoF;IACpF,oFAAoF;IACpF,qFAAqF;IACrF,6EAA6E;IAC7E,+EAA+E;IAC/E,iFAAiF;IACjF,+EAA+E;IAC/E,2EAA2E;IAC3E,gFAAgF;IAChF,iFAAiF;IACjF,+EAA+E;IAC/E;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,+IAA+I;QAC5J,aAAa,EAAE,8YAA8Y;KAC9Z;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,8JAA8J;QAC3K,aAAa,EAAE,0aAA0a;KAC1b;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,2MAA2M;QACxN,aAAa,EAAE,gcAAgc;KAChd;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,wMAAwM;QACrN,aAAa,EAAE,muBAAmuB;KACnvB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,0OAA0O;QACvP,aAAa,EAAE,mcAAmc;KACnd;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,kPAAkP;QAC/P,aAAa,EAAE,+oBAA+oB;KAC/pB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,wGAAwG;QACrH,aAAa,EAAE,qRAAqR;KACrS;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,2UAA2U;QACxV,aAAa,EAAE,qTAAqT;KACrU;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,gNAAgN;QAC7N,aAAa,EAAE,gpBAAgpB;KAChqB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,2ZAA2Z;QACxa,aAAa,EAAE,+lBAA+lB;KAC/mB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,0RAA0R;QACvS,aAAa,EAAE,ynBAAynB;KACzoB;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,+TAA+T;QAC5U,aAAa,EAAE,o3BAAo3B;KACp4B;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,2CAA2C;QACvD,WAAW,EACT,+bAA+b;QACjc,aAAa,EACX,6rBAA6rB;KAChsB;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,UAAU,EAAE,4DAA4D;QACxE,WAAW,EACT,2KAA2K;QAC7K,aAAa,EACX,2OAA2O;KAC9O;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EACT,6IAA6I;QAC/I,aAAa,EACX,uKAAuK;KAC1K;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,qCAAqC;QACjD,WAAW,EACT,0IAA0I;QAC5I,aAAa,EACX,ieAAie;KACpe;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,yCAAyC;QACrD,WAAW,EACT,6HAA6H;QAC/H,aAAa,EACX,8UAA8U;KACjV;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EACT,iWAAiW;QACnW,aAAa,EACX,s7BAAs7B;KACz7B;IACD;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,gCAAgC;QAC5C,WAAW,EACT,kKAAkK;QACpK,aAAa,EACX,wiBAAwiB;KAC3iB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EACT,2OAA2O;QAC7O,aAAa,EACX,gqBAAgqB;KACnqB;IACD,gFAAgF;IAChF,iFAAiF;IACjF,yEAAyE;IACzE,gFAAgF;IAChF;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,qFAAqF;QAClG,aAAa,EAAE,mOAAmO;KACnP;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,iDAAiD;QAC7D,WAAW,EAAE,mKAAmK;QAChL,aAAa,EAAE,4fAA4f;KAC5gB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,wCAAwC;QACpD,WAAW,EAAE,2LAA2L;QACxM,aAAa,EAAE,8wBAA8wB;KAC9xB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,oCAAoC;QAChD,WAAW,EAAE,mFAAmF;QAChG,aAAa,EAAE,uWAAuW;KACvX;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,yEAAyE;QACtF,aAAa,EAAE,6cAA6c;KAC7d;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,4MAA4M;KAC5N;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,2CAA2C;QACvD,WAAW,EAAE,2JAA2J;QACxK,aAAa,EAAE,0VAA0V;KAC1W;IACD,kFAAkF;IAClF,kFAAkF;IAClF,0EAA0E;IAC1E,oFAAoF;IACpF,qFAAqF;IACrF,sFAAsF;IACtF,8EAA8E;IAC9E,6EAA6E;IAC7E,sFAAsF;IACtF,qFAAqF;IACrF,qFAAqF;IACrF,oFAAoF;IACpF,kEAAkE;IAClE,gFAAgF;IAChF,mFAAmF;IACnF,oDAAoD;IACpD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,yFAAyF;QACtG,aAAa,EAAE,6WAA6W;KAC7X;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,+GAA+G;QAC5H,aAAa,EAAE,waAAwa;KACxb;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,uHAAuH;QACpI,aAAa,EAAE,6UAA6U;KAC7V;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,4HAA4H;QACzI,aAAa,EAAE,qVAAqV;KACrW;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,iDAAiD;QAC7D,WAAW,EAAE,qIAAqI;QAClJ,aAAa,EAAE,2bAA2b;KAC3c;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,kHAAkH;QAC/H,aAAa,EAAE,0aAA0a;KAC1b;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,kHAAkH;QAC/H,aAAa,EAAE,kjBAAkjB;KAClkB;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,gDAAgD;QAC5D,WAAW,EAAE,+QAA+Q;QAC5R,aAAa,EAAE,2hBAA2hB;KAC3iB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,oDAAoD;QAChE,WAAW,EAAE,8VAA8V;QAC3W,aAAa,EAAE,wkBAAwkB;KACxlB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,2dAA2d;QACxe,aAAa,EAAE,2oBAA2oB;KAC3pB;IACD,gFAAgF;IAChF,sFAAsF;IACtF,qFAAqF;IACrF,uFAAuF;IACvF,8DAA8D;IAC9D;QACE,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,gDAAgD;QAC5D,WAAW,EAAE,wMAAwM;QACrN,aAAa,EAAE,skBAAskB;KACtlB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,kDAAkD;QAC9D,WAAW,EAAE,2NAA2N;QACxO,aAAa,EAAE,mgBAAmgB;KACnhB;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,iPAAiP;QAC9P,aAAa,EAAE,4nBAA4nB;KAC5oB;CACF,CAAC;AA0CF,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,+EAA+E;IAC/E;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,UAAU,EAAE,wCAAwC;QACpD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,oFAAoF;IACpF,6DAA6D;IAC7D,wEAAwE;IACxE;QACE,UAAU,EAAE,8BAA8B;QAC1C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,iIAAiI;KAC1I;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,gGAAgG;KACzG;IACD,uFAAuF;IACvF;QACE,UAAU,EAAE,qDAAqD;QACjE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,qDAAqD;KAC9D;IACD,qDAAqD;IACrD;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8CAA8C;KACvD;IACD;QACE,UAAU,EAAE,+CAA+C;QAC3D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,kGAAkG;KAC3G;IACD;QACE,UAAU,EAAE,mDAAmD;QAC/D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,+FAA+F;KACxG;IACD;QACE,UAAU,EAAE,wDAAwD;QACpE,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,kPAAkP;KAC3P;IACD,8EAA8E;IAC9E,kFAAkF;IAClF,iFAAiF;IACjF,gFAAgF;IAChF,mFAAmF;IACnF,6EAA6E;IAC7E,oFAAoF;IACpF,sFAAsF;IACtF,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,iFAAiF;IACjF;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,4RAA4R;KACrS;IACD;QACE,UAAU,EAAE,wDAAwD;QACpE,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,4dAA4d;KACre;IACD;QACE,UAAU,EAAE,4DAA4D;QACxE,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,scAAsc;KAC/c;IACD;QACE,UAAU,EAAE,oDAAoD;QAChE,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,inBAAinB;KAC1nB;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,uMAAuM;KAChN;IACD;QACE,UAAU,EAAE,kDAAkD;QAC9D,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,ymBAAymB;KAClnB;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,gXAAgX;KACzX;IACD;QACE,UAAU,EAAE,6CAA6C;QACzD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,uVAAuV;KAChW;IACD,sDAAsD;IACtD;QACE,UAAU,EAAE,uCAAuC;QACnD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,wXAAwX;KACjY;IACD,gFAAgF;IAChF,uFAAuF;IACvF;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8NAA8N;KACvO;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,gQAAgQ;KACzQ;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAkB;IACjE,IAAI,GAAG,GAAY,MAAM,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7D,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/leaseGatedSpawn.d.ts

@@ -0,0 +1,232 @@
+/**
+ * G3 — Lease-gated session spawn (MESH-SELF-HEAL-SPEC §3.3, FD6).
+ *
+ * The incident: a non-holder machine spawned its OWN session for a topic the
+ * holder already owned → two machines served one topic → double-replies. The
+ * structural fix is "spawn iff I hold the fenced awake-lease, else forward to
+ * the holder." Per the spec's foundation note B, the gate keys on the ONE
+ * trustworthy authority — the fenced awake-lease — NOT a placement view (which
+ * is not reliably readable from a non-router machine).
+ *
+ * This module is a PURE decision function (no I/O), mirroring SessionRouter's
+ * testable-pure pattern, so both sides of the boundary are unit-testable.
+ * The wiring (calling holdsLease(), forwarding via SessionRouter/deliverMessage)
+ * lives at the spawn callsites; this only decides spawn-vs-forward.
+ *
+ * Fail direction: CLOSED (FD6) — under ambiguity (cannot confirm we hold the
+ * lease) we do NOT spawn; we forward/defer, and G2's nobody-polling detector is
+ * the bounded backstop that guarantees someone ends up serving. A wrongful spawn
+ * is the duplicate the spec exists to prevent; a wrongful forward is recovered.
+ *
+ * Single-machine + flag-off MUST be byte-for-byte the legacy behavior (always
+ * spawn locally) — the gate is additive, dark by default.
+ */
+export interface LeaseGatedSpawnInputs {
+    /**
+     * Whether THIS machine currently holds the fenced awake-lease.
+     * Sourced from MultiMachineCoordinator.holdsLease(), which DEFAULTS TO true on
+     * a single-machine agent (no leaseCoordinator) — so single-machine naturally
+     * resolves to 'spawn'.
+     */
+    holdsLease: boolean;
+    /** The ownershipCheckedSpawn flag (multiMachine.sessionPool.ownershipCheckedSpawn.enabled). */
+    flagEnabled: boolean;
+    /** Dry-run: log the intended decision but still spawn locally (observe-only soak). */
+    dryRun: boolean;
+    /**
+     * True when this agent is NOT running multi-machine (no peers / no lease
+     * coordinator). A single-machine agent always spawns locally regardless of
+     * the flag — the gate is a no-op there.
+     */
+    singleMachine: boolean;
+    /**
+     * Whether the forward path (SessionRouter / deliverMessage to the holder) is
+     * actually available. If the gate would forward but no forward seam exists,
+     * we must NOT strand the message — we fall back to spawning locally and flag
+     * it, because a stranded inbound (nobody serves) is worse than a rare
+     * duplicate. G2 is the backstop, but the forward seam is the primary path.
+     */
+    forwardAvailable: boolean;
+}
+export type LeaseGatedSpawnAction = 'spawn' | 'forward' | 'dry-run-would-forward' | 'spawn-forward-unavailable';
+export interface LeaseGatedSpawnDecision {
+    action: LeaseGatedSpawnAction;
+    /** True when a session should actually be spawned locally as a result. */
+    spawnLocally: boolean;
+    /** Short machine-readable reason for the audit log. */
+    reason: string;
+}
+/**
+ * Decide whether to spawn a session locally for an inbound topic message, or
+ * forward it to the lease holder. Pure: no I/O, fully unit-testable.
+ */
+export declare function decideLeaseGatedSpawn(inputs: LeaseGatedSpawnInputs): LeaseGatedSpawnDecision;
+/**
+ * G3.4 — Single-writer binding lifecycle: clear-on-kill (MESH-SELF-HEAL-SPEC §3.3,
+ * FD7). The incident: killing a duplicate session did NOT clear its topic→session
+ * binding — only an explicit topic pin stopped the re-spawn, so a dead session's
+ * stale binding could silently resurrect work. The invariant is "a binding exists
+ * IFF a live session exists for it": the moment a session is killed, its binding
+ * must go.
+ *
+ * Safety note (why clearing on kill never breaks resume): the topic→session
+ * binding maps topicId→tmux-session-name; the RESUME UUID lives separately in
+ * TopicResumeMap keyed by topicId. Clearing the binding to a dead tmux session
+ * does not touch the resume UUID — the next inbound for the topic re-spawns a
+ * FRESH session (with --resume) and re-registers a new binding. We are only
+ * removing a pointer at a corpse.
+ *
+ * Pure: no I/O. The wiring (resolving the topic for the killed session, calling
+ * unregisterTopic, the audit line) lives at the beforeSessionKill listener.
+ *
+ * Gating mirrors the spawn gate: dark + dryRun by default ⇒ a strict no-op until
+ * the operator opts into the G3 single-writer binding lifecycle.
+ */
+export interface BindingCleanupOnKillInputs {
+    /** The ownershipCheckedSpawn flag (multiMachine.sessionPool.ownershipCheckedSpawn.enabled). */
+    flagEnabled: boolean;
+    /** Dry-run: record the counterfactual but DO NOT clear the binding (observe-only soak). */
+    dryRun: boolean;
+    /** True when the killed session has a resolvable topic→session binding to clear. */
+    hasBinding: boolean;
+    /**
+     * True when this kill is immediately followed by a SAME-TOPIC respawn
+     * (context-exhaustion / recovery bounce, framework swap). The respawn resolves
+     * its target via getSessionForTopic, so clearing the binding first would make
+     * that lookup return null and the recovery silently abort. A respawn-kill must
+     * NEVER clear the binding (and must not record a would-clear counterfactual,
+     * since clearing would be the WRONG action there). Mirrors the resume-UUID-save
+     * listener's contextExhaustionKills guard. Defaults false (a terminal kill).
+     */
+    respawnImminent?: boolean;
+}
+export type BindingCleanupAction = 'clear' | 'dry-run-would-clear' | 'skip-no-binding' | 'skip-respawn-kill' | 'skip-legacy';
+export interface BindingCleanupDecision {
+    action: BindingCleanupAction;
+    /** True when the binding should actually be unregistered as a result. */
+    clearNow: boolean;
+    /** Short machine-readable reason for the audit log. */
+    reason: string;
+}
+/**
+ * Decide whether to clear a killed session's topic→session binding. Pure: no I/O,
+ * fully unit-testable on both sides of the boundary.
+ */
+export declare function decideBindingCleanupOnKill(inputs: BindingCleanupOnKillInputs): BindingCleanupDecision;
+/**
+ * Soak-evidence ledger (operator directive 2026-06-27 — "observe-mode must record
+ * EVALUABLE counterfactual evidence, not a throwaway log line; otherwise it's
+ * useless and can never justify promotion"). This is the structured metric that
+ * lets a later promotion-review say, concretely, "G3 caught N real duplicate-spawn
+ * attempts in dryRun over the soak → promote it" (or "never fired → remove it").
+ *
+ * THE load-bearing counterfactual metric is `wouldHavePreventedDuplicate`: in
+ * dry-run, every `dry-run-would-forward` is a duplicate session this gate WOULD
+ * have prevented had it been enabled — i.e. a real instance of the incident's harm
+ * that the gate would have stopped. A nonzero, growing count over a clean soak is
+ * the evidence FOR promotion; a flat zero over a long soak is evidence the gate is
+ * a no-op here (consider removal). Either way the loop can close.
+ */
+export interface LeaseGatedSpawnSoakSummary {
+    /** Decisions observed total. */
+    decisions: number;
+    /** Spawned locally because we hold the lease (the normal, correct path). */
+    spawnedAsHolder: number;
+    /** Spawned locally as a single-machine / flag-off no-op. */
+    spawnedLegacy: number;
+    /** Actually forwarded (gate enabled, non-dry-run, not holder) — enforcement firing. */
+    forwarded: number;
+    /**
+     * THE counterfactual: in dry-run, a non-holder spawn the gate WOULD have
+     * forwarded — i.e. a duplicate session it would have prevented if enabled.
+     */
+    wouldHavePreventedDuplicate: number;
+    /** Not holder but no forward seam available → spawned to avoid a strand (a gap to close). */
+    spawnedNoForwardSeam: number;
+    /** Binding-cleanup decisions observed on session-kill. */
+    bindingCleanupDecisions: number;
+    /** Stale bindings actually cleared on kill (enforcement firing). */
+    bindingsCleared: number;
+    /**
+     * THE binding-cleanup counterfactual: in dry-run, each killed session that
+     * still had a binding is a stale binding the gate WOULD have cleared — i.e. a
+     * potential silent stale-respawn it would have prevented if enabled.
+     */
+    wouldHaveClearedStaleBinding: number;
+    firstAt: string | null;
+    lastAt: string | null;
+}
+export declare class LeaseGatedSpawnSoakLedger {
+    private s;
+    /** Record one decision. `nowIso` is injected (callers pass a real timestamp). */
+    record(decision: LeaseGatedSpawnDecision, nowIso: string): void;
+    /**
+     * Record one binding-cleanup-on-kill decision (G3.4). `nowIso` is injected.
+     * Only decisions that touch a real binding (clear / would-clear) advance the
+     * counters; skip-legacy / skip-no-binding are non-events for the soak metric.
+     */
+    recordBindingCleanup(decision: BindingCleanupDecision, nowIso: string): void;
+    summary(): LeaseGatedSpawnSoakSummary;
+    /**
+     * A promotion recommendation derived from the soak evidence — the thing that
+     * was NEVER produced before (operator: "you've never once recommended promoting
+     * a dark feature"). Deterministic, evidence-based, advisory.
+     */
+    promotionSignal(minDuplicatesToPromote?: number): {
+        recommendation: 'promote' | 'keep-soaking' | 'consider-removal' | 'enforcing';
+        why: string;
+    };
+}
+/**
+ * The minimal binding-registry surface the kill-time cleanup needs. Mirrors the
+ * relevant slice of TelegramAdapter (getTopicForSession / unregisterTopic) so the
+ * cleanup wiring is unit-testable against a fake without a real adapter/tmux.
+ */
+export interface BindingRegistryPort {
+    getTopicForSession(sessionName: string): number | null;
+    unregisterTopic(topicId: number): void;
+}
+/**
+ * G3.4 wiring helper — resolve the killed session's topic binding, decide whether
+ * to clear it (pure fn), record the soak counterfactual, and on a live decision
+ * actually unregister the stale binding. Returns the decision for the caller's
+ * audit. Kept here (not inlined at the beforeSessionKill listener) so the
+ * single-writer-on-kill invariant has a wiring-integrity test target.
+ *
+ * Order contract: the caller MUST run this AFTER the resume-UUID save (the UUID
+ * lives in TopicResumeMap keyed by topicId, so clearing the binding can't lose
+ * it — but resolving the topic for the UUID save reads the same binding, so save
+ * first, clear second).
+ */
+export interface BindingCleanupAuditEntry {
+    ts: string;
+    /** 'binding-cleared' when actually cleared; 'binding-would-clear' in dry-run. */
+    event: 'binding-cleared' | 'binding-would-clear';
+    topicId: number;
+    sessionName: string;
+    dryRun: boolean;
+    reason: string;
+}
+export declare function applyBindingCleanupOnKill(args: {
+    registry: BindingRegistryPort;
+    sessionName: string;
+    flagEnabled: boolean;
+    dryRun: boolean;
+    ledger: LeaseGatedSpawnSoakLedger;
+    nowIso: string;
+    log?: (msg: string) => void;
+    /** Optional durable audit sink (logs/mesh-selfheal.jsonl) — invoked ONLY on a
+     *  real transition (clear / would-clear), never on a skip. Spec §6. */
+    audit?: (entry: BindingCleanupAuditEntry) => void;
+    /** True when a same-topic respawn follows this kill (recovery bounce) — keep the
+     *  binding so recovery's getSessionForTopic lookup resolves. See input docs. */
+    respawnImminent?: boolean;
+}): BindingCleanupDecision;
+/**
+ * Process-wide shared soak ledger — one source of truth for the G3 gate's
+ * evaluable evidence. server.ts (the spawn callsites) RECORDS to it; routes.ts
+ * (GET /mesh-selfheal/g3) READS it for the operator's promotion-evidence surface.
+ * A shared singleton avoids threading the ledger through AgentServer's RouteContext.
+ */
+export declare const sharedG3SoakLedger: LeaseGatedSpawnSoakLedger;
+//# sourceMappingURL=leaseGatedSpawn.d.ts.map

package/dist/core/leaseGatedSpawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leaseGatedSpawn.d.ts","sourceRoot":"","sources":["../../src/core/leaseGatedSpawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,+FAA+F;IAC/F,WAAW,EAAE,OAAO,CAAC;IACrB,sFAAsF;IACtF,MAAM,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB;;;;;;OAMG;IACH,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,MAAM,qBAAqB,GAC7B,OAAO,GACP,SAAS,GACT,uBAAuB,GACvB,2BAA2B,CAAC;AAEhC,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,0EAA0E;IAC1E,YAAY,EAAE,OAAO,CAAC;IACtB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,GAC5B,uBAAuB,CAkCzB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,0BAA0B;IACzC,+FAA+F;IAC/F,WAAW,EAAE,OAAO,CAAC;IACrB,2FAA2F;IAC3F,MAAM,EAAE,OAAO,CAAC;IAChB,oFAAoF;IACpF,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,MAAM,oBAAoB,GAC5B,OAAO,GACP,qBAAqB,GACrB,iBAAiB,GACjB,mBAAmB,GACnB,aAAa,CAAC;AAElB,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,yEAAyE;IACzE,QAAQ,EAAE,OAAO,CAAC;IAClB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,0BAA0B,GACjC,sBAAsB,CA4BxB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,0BAA0B;IACzC,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,eAAe,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,2BAA2B,EAAE,MAAM,CAAC;IACpC,6FAA6F;IAC7F,oBAAoB,EAAE,MAAM,CAAC;IAE7B,0DAA0D;IAC1D,uBAAuB,EAAE,MAAM,CAAC;IAChC,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,4BAA4B,EAAE,MAAM,CAAC;IACrC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,qBAAa,yBAAyB;IACpC,OAAO,CAAC,CAAC,CAYP;IAEF,iFAAiF;IACjF,MAAM,CAAC,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAqB/D;;;;OAIG;IACH,oBAAoB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAkB5E,OAAO,IAAI,0BAA0B;IAIrC;;;;OAIG;IACH,eAAe,CAAC,sBAAsB,SAAI,GAAG;QAC3C,cAAc,EAAE,SAAS,GAAG,cAAc,GAAG,kBAAkB,GAAG,WAAW,CAAC;QAC9E,GAAG,EAAE,MAAM,CAAC;KACb;CAwBF;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACvD,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,KAAK,EAAE,iBAAiB,GAAG,qBAAqB,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,yBAAyB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B;2EACuE;IACvE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,wBAAwB,KAAK,IAAI,CAAC;IAClD;oFACgF;IAChF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,sBAAsB,CAmBzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,2BAAkC,CAAC"}

package/dist/core/leaseGatedSpawn.js

@@ -0,0 +1,216 @@
+/**
+ * G3 — Lease-gated session spawn (MESH-SELF-HEAL-SPEC §3.3, FD6).
+ *
+ * The incident: a non-holder machine spawned its OWN session for a topic the
+ * holder already owned → two machines served one topic → double-replies. The
+ * structural fix is "spawn iff I hold the fenced awake-lease, else forward to
+ * the holder." Per the spec's foundation note B, the gate keys on the ONE
+ * trustworthy authority — the fenced awake-lease — NOT a placement view (which
+ * is not reliably readable from a non-router machine).
+ *
+ * This module is a PURE decision function (no I/O), mirroring SessionRouter's
+ * testable-pure pattern, so both sides of the boundary are unit-testable.
+ * The wiring (calling holdsLease(), forwarding via SessionRouter/deliverMessage)
+ * lives at the spawn callsites; this only decides spawn-vs-forward.
+ *
+ * Fail direction: CLOSED (FD6) — under ambiguity (cannot confirm we hold the
+ * lease) we do NOT spawn; we forward/defer, and G2's nobody-polling detector is
+ * the bounded backstop that guarantees someone ends up serving. A wrongful spawn
+ * is the duplicate the spec exists to prevent; a wrongful forward is recovered.
+ *
+ * Single-machine + flag-off MUST be byte-for-byte the legacy behavior (always
+ * spawn locally) — the gate is additive, dark by default.
+ */
+/**
+ * Decide whether to spawn a session locally for an inbound topic message, or
+ * forward it to the lease holder. Pure: no I/O, fully unit-testable.
+ */
+export function decideLeaseGatedSpawn(inputs) {
+    const { holdsLease, flagEnabled, dryRun, singleMachine, forwardAvailable } = inputs;
+    // Legacy / no-op paths — byte-for-byte the prior behavior (always spawn).
+    if (!flagEnabled) {
+        return { action: 'spawn', spawnLocally: true, reason: 'flag-off-legacy' };
+    }
+    if (singleMachine) {
+        return { action: 'spawn', spawnLocally: true, reason: 'single-machine-noop' };
+    }
+    // Multi-machine, flag on: gate on the fenced lease.
+    if (holdsLease) {
+        return { action: 'spawn', spawnLocally: true, reason: 'holds-lease' };
+    }
+    // We do NOT hold the lease → we must NOT spawn (fail-CLOSED, FD6). Forward to
+    // the holder — UNLESS the forward seam is unavailable (then spawn to avoid a
+    // strand, and flag it) or we are in dry-run soak (spawn + log the intent).
+    if (dryRun) {
+        return {
+            action: 'dry-run-would-forward',
+            spawnLocally: true,
+            reason: 'dry-run-would-forward-not-holder',
+        };
+    }
+    if (!forwardAvailable) {
+        return {
+            action: 'spawn-forward-unavailable',
+            spawnLocally: true,
+            reason: 'not-holder-but-no-forward-seam-avoid-strand',
+        };
+    }
+    return { action: 'forward', spawnLocally: false, reason: 'not-holder-forward-to-owner' };
+}
+/**
+ * Decide whether to clear a killed session's topic→session binding. Pure: no I/O,
+ * fully unit-testable on both sides of the boundary.
+ */
+export function decideBindingCleanupOnKill(inputs) {
+    const { flagEnabled, dryRun, hasBinding, respawnImminent } = inputs;
+    // Flag off ⇒ byte-for-byte the legacy behavior (binding persists across kill).
+    if (!flagEnabled) {
+        return { action: 'skip-legacy', clearNow: false, reason: 'flag-off-legacy' };
+    }
+    // Nothing bound to this session ⇒ nothing to clear (not a counterfactual either).
+    if (!hasBinding) {
+        return { action: 'skip-no-binding', clearNow: false, reason: 'no-binding-for-session' };
+    }
+    // Kill is immediately followed by a same-topic respawn (recovery bounce) ⇒ keep
+    // the binding so the respawn's getSessionForTopic lookup still resolves. Takes
+    // precedence over dryRun so we never record a would-clear counterfactual that
+    // would, if promoted, BREAK recovery. (G3 side-effects second-pass review.)
+    if (respawnImminent) {
+        return { action: 'skip-respawn-kill', clearNow: false, reason: 'respawn-imminent-keep-binding' };
+    }
+    // Observe-only soak: record the counterfactual, leave the binding in place.
+    if (dryRun) {
+        return {
+            action: 'dry-run-would-clear',
+            clearNow: false,
+            reason: 'dry-run-would-clear-stale-binding',
+        };
+    }
+    // Enabled + live: enforce the invariant — clear the stale binding now.
+    return { action: 'clear', clearNow: true, reason: 'clear-stale-binding-on-kill' };
+}
+export class LeaseGatedSpawnSoakLedger {
+    s = {
+        decisions: 0,
+        spawnedAsHolder: 0,
+        spawnedLegacy: 0,
+        forwarded: 0,
+        wouldHavePreventedDuplicate: 0,
+        spawnedNoForwardSeam: 0,
+        bindingCleanupDecisions: 0,
+        bindingsCleared: 0,
+        wouldHaveClearedStaleBinding: 0,
+        firstAt: null,
+        lastAt: null,
+    };
+    /** Record one decision. `nowIso` is injected (callers pass a real timestamp). */
+    record(decision, nowIso) {
+        this.s.decisions += 1;
+        if (this.s.firstAt === null)
+            this.s.firstAt = nowIso;
+        this.s.lastAt = nowIso;
+        switch (decision.action) {
+            case 'spawn':
+                if (decision.reason === 'holds-lease')
+                    this.s.spawnedAsHolder += 1;
+                else
+                    this.s.spawnedLegacy += 1; // flag-off-legacy | single-machine-noop
+                break;
+            case 'forward':
+                this.s.forwarded += 1;
+                break;
+            case 'dry-run-would-forward':
+                this.s.wouldHavePreventedDuplicate += 1;
+                break;
+            case 'spawn-forward-unavailable':
+                this.s.spawnedNoForwardSeam += 1;
+                break;
+        }
+    }
+    /**
+     * Record one binding-cleanup-on-kill decision (G3.4). `nowIso` is injected.
+     * Only decisions that touch a real binding (clear / would-clear) advance the
+     * counters; skip-legacy / skip-no-binding are non-events for the soak metric.
+     */
+    recordBindingCleanup(decision, nowIso) {
+        switch (decision.action) {
+            case 'clear':
+                this.s.bindingCleanupDecisions += 1;
+                this.s.bindingsCleared += 1;
+                break;
+            case 'dry-run-would-clear':
+                this.s.bindingCleanupDecisions += 1;
+                this.s.wouldHaveClearedStaleBinding += 1;
+                break;
+            // skip-legacy / skip-no-binding: nothing to count (no binding was at risk).
+            default:
+                return;
+        }
+        if (this.s.firstAt === null)
+            this.s.firstAt = nowIso;
+        this.s.lastAt = nowIso;
+    }
+    summary() {
+        return { ...this.s };
+    }
+    /**
+     * A promotion recommendation derived from the soak evidence — the thing that
+     * was NEVER produced before (operator: "you've never once recommended promoting
+     * a dark feature"). Deterministic, evidence-based, advisory.
+     */
+    promotionSignal(minDuplicatesToPromote = 1) {
+        const s = this.s;
+        if (s.forwarded > 0 || s.bindingsCleared > 0) {
+            const parts = [];
+            if (s.forwarded > 0)
+                parts.push(`forwarded ${s.forwarded} inbound(s) to the holder`);
+            if (s.bindingsCleared > 0)
+                parts.push(`cleared ${s.bindingsCleared} stale binding(s) on kill`);
+            return { recommendation: 'enforcing', why: `gate is live and has ${parts.join(' and ')}` };
+        }
+        const counterfactual = s.wouldHavePreventedDuplicate + s.wouldHaveClearedStaleBinding;
+        if (counterfactual >= minDuplicatesToPromote) {
+            return {
+                recommendation: 'promote',
+                why: `dry-run would have prevented ${s.wouldHavePreventedDuplicate} duplicate session(s) and cleared ${s.wouldHaveClearedStaleBinding} stale binding(s) — real harm the gate stops; promote to enabled`,
+            };
+        }
+        const observed = s.decisions + s.bindingCleanupDecisions;
+        if (observed === 0) {
+            return { recommendation: 'keep-soaking', why: 'no decisions observed yet' };
+        }
+        return {
+            recommendation: 'consider-removal',
+            why: `${observed} decision(s) observed, 0 counterfactual prevention — the gate has not fired usefully here`,
+        };
+    }
+}
+export function applyBindingCleanupOnKill(args) {
+    const { registry, sessionName, flagEnabled, dryRun, ledger, nowIso, log, audit, respawnImminent } = args;
+    const topicId = registry.getTopicForSession(sessionName);
+    const decision = decideBindingCleanupOnKill({
+        flagEnabled,
+        dryRun,
+        hasBinding: topicId !== null,
+        respawnImminent,
+    });
+    ledger.recordBindingCleanup(decision, nowIso);
+    if (decision.clearNow && topicId !== null) {
+        registry.unregisterTopic(topicId);
+        log?.(`[g3-binding-cleanup] cleared stale binding for topic ${topicId} (session "${sessionName}") on kill — binding-IFF-live-session`);
+        audit?.({ ts: nowIso, event: 'binding-cleared', topicId, sessionName, dryRun, reason: decision.reason });
+    }
+    else if (decision.action === 'dry-run-would-clear' && topicId !== null) {
+        log?.(`[g3-binding-cleanup] DRY-RUN would clear stale binding for topic ${topicId} (session "${sessionName}") on kill`);
+        audit?.({ ts: nowIso, event: 'binding-would-clear', topicId, sessionName, dryRun, reason: decision.reason });
+    }
+    return decision;
+}
+/**
+ * Process-wide shared soak ledger — one source of truth for the G3 gate's
+ * evaluable evidence. server.ts (the spawn callsites) RECORDS to it; routes.ts
+ * (GET /mesh-selfheal/g3) READS it for the operator's promotion-evidence surface.
+ * A shared singleton avoids threading the ledger through AgentServer's RouteContext.
+ */
+export const sharedG3SoakLedger = new LeaseGatedSpawnSoakLedger();
+//# sourceMappingURL=leaseGatedSpawn.js.map

package/dist/core/leaseGatedSpawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leaseGatedSpawn.js","sourceRoot":"","sources":["../../src/core/leaseGatedSpawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AA4CH;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA6B;IAE7B,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IAEpF,0EAA0E;IAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAChF,CAAC;IAED,oDAAoD;IACpD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACxE,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,uBAAuB;YAC/B,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,kCAAkC;SAC3C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,2BAA2B;YACnC,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,6CAA6C;SACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;AAC3F,CAAC;AAyDD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAkC;IAElC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IAEpE,+EAA+E;IAC/E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC/E,CAAC;IACD,kFAAkF;IAClF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC1F,CAAC;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACnG,CAAC;IACD,4EAA4E;IAC5E,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IACD,uEAAuE;IACvE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;AACpF,CAAC;AA+CD,MAAM,OAAO,yBAAyB;IAC5B,CAAC,GAA+B;QACtC,SAAS,EAAE,CAAC;QACZ,eAAe,EAAE,CAAC;QAClB,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,CAAC;QACZ,2BAA2B,EAAE,CAAC;QAC9B,oBAAoB,EAAE,CAAC;QACvB,uBAAuB,EAAE,CAAC;QAC1B,eAAe,EAAE,CAAC;QAClB,4BAA4B,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;KACb,CAAC;IAEF,iFAAiF;IACjF,MAAM,CAAC,QAAiC,EAAE,MAAc;QACtD,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI;YAAE,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC;QACrD,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,OAAO;gBACV,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa;oBAAE,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC;;oBAC9D,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,wCAAwC;gBACxE,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,uBAAuB;gBAC1B,IAAI,CAAC,CAAC,CAAC,2BAA2B,IAAI,CAAC,CAAC;gBACxC,MAAM;YACR,KAAK,2BAA2B;gBAC9B,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC;gBACjC,MAAM;QACV,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,QAAgC,EAAE,MAAc;QACnE,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,OAAO;gBACV,IAAI,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,qBAAqB;gBACxB,IAAI,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,CAAC,CAAC,4BAA4B,IAAI,CAAC,CAAC;gBACzC,MAAM;YACR,4EAA4E;YAC5E;gBACE,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI;YAAE,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC;QACrD,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,sBAAsB,GAAG,CAAC;QAIxC,MAAM,CAAC,GAA+B,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,SAAS,2BAA2B,CAAC,CAAC;YACrF,IAAI,CAAC,CAAC,eAAe,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,eAAe,2BAA2B,CAAC,CAAC;YAC/F,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,wBAAwB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAC7F,CAAC;QACD,MAAM,cAAc,GAAG,CAAC,CAAC,2BAA2B,GAAG,CAAC,CAAC,4BAA4B,CAAC;QACtF,IAAI,cAAc,IAAI,sBAAsB,EAAE,CAAC;YAC7C,OAAO;gBACL,cAAc,EAAE,SAAS;gBACzB,GAAG,EAAE,gCAAgC,CAAC,CAAC,2BAA2B,qCAAqC,CAAC,CAAC,4BAA4B,kEAAkE;aACxM,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,uBAAuB,CAAC;QACzD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,EAAE,2BAA2B,EAAE,CAAC;QAC9E,CAAC;QACD,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,GAAG,EAAE,GAAG,QAAQ,2FAA2F;SAC5G,CAAC;IACJ,CAAC;CACF;AAkCD,MAAM,UAAU,yBAAyB,CAAC,IAczC;IACC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IACzG,MAAM,OAAO,GAAG,QAAQ,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAC1C,WAAW;QACX,MAAM;QACN,UAAU,EAAE,OAAO,KAAK,IAAI;QAC5B,eAAe;KAChB,CAAC,CAAC;IACH,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1C,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAClC,GAAG,EAAE,CAAC,wDAAwD,OAAO,cAAc,WAAW,uCAAuC,CAAC,CAAC;QACvI,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3G,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,qBAAqB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzE,GAAG,EAAE,CAAC,oEAAoE,OAAO,cAAc,WAAW,YAAY,CAAC,CAAC;QACxH,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,yBAAyB,EAAE,CAAC"}

package/dist/server/CapabilityIndex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CapabilityIndex.d.ts","sourceRoot":"","sources":["../../src/server/CapabilityIndex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,YAAY,CAAC;IAClB,iFAAiF;IACjF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,kFAAkF;IAClF,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC;CAC1D;AAID,eAAO,MAAM,gBAAgB,EAAE,SAAS,eAAe,EAmiCtD,CAAC;AAsCF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAuE/E,CAAC;AAIF;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAUzD;AAED,mEAAmE;AACnE,wBAAgB,sBAAsB,IAAI,GAAG,CAAC,MAAM,CAAC,CAEpD;AAED,sEAAsE;AACtE,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,oBAAoB,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB"}
+{"version":3,"file":"CapabilityIndex.d.ts","sourceRoot":"","sources":["../../src/server/CapabilityIndex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,YAAY,CAAC;IAClB,iFAAiF;IACjF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,kFAAkF;IAClF,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC;CAC1D;AAID,eAAO,MAAM,gBAAgB,EAAE,SAAS,eAAe,EAmiCtD,CAAC;AAsCF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwE/E,CAAC;AAIF;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAUzD;AAED,mEAAmE;AACnE,wBAAgB,sBAAsB,IAAI,GAAG,CAAC,MAAM,CAAC,CAEpD;AAED,sEAAsE;AACtE,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,oBAAoB,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB"}

package/dist/server/CapabilityIndex.js

@@ -1188,6 +1188,7 @@ export const INTERNAL_PREFIXES = [
     { prefix: 'hooks', reason: 'hook listing surfaced via the top-level `hooks` field of the response' },
     { prefix: 'threadline', reason: 'surfaced via discovery (threadline-relay feature)' },
     { prefix: 'mesh', reason: 'machine-to-machine MeshRpc transport (§L0 Session Pool) — Ed25519-signed, recipient-bound peer commands; never an agent/user capability' },
+    { prefix: 'mesh-selfheal', reason: 'G3 lease-gated-spawn promotion-evidence surface (MESH-SELF-HEAL-SPEC §3.3) — read-only soak ledger (would-have-prevented-duplicate / would-have-cleared-stale-binding + promotion recommendation) the agent READS for the dark-feature graduation loop; operational observability like /worktrees/agent-reaper, not a user-invokable capability' },
     { prefix: 'session-pool', reason: 'session-pool rollout-gate E2E results (§Rollout) — operator observability for a dark feature, not a conversational capability' },
 ];
 // ── Public helpers ───────────────────────────────────────────────────────