instar 1.3.731 → 1.3.733

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgDH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAyBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA6H7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAu/CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CAijBN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ykBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiDH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAyBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA6H7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAu/CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CAijBN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAu/kBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -29,6 +29,7 @@ import { resolveDevAgentGate, resolveStateSyncStores } from '../core/devAgentGat
 import { resolveAntiThrashKnobs, readingValidity } from '../core/SwapAntiThrash.js';
 import { shouldReleaseOnComplete, planClaimOnSpawn, ownershipNonce } from '../core/ownershipFollowsLiveWork.js';
 import { PrHandLease } from '../core/PrHandLease.js';
+import { ConversationRegistry } from '../core/ConversationRegistry.js';
 import { claimSuspensionExcludesPin } from '../core/TopicClaimAnnotationStore.js';
 import { parseProfileTrigger, platformMessageIdFrom } from '../core/topicProfileIngress.js';
 import { slugifyChannelName } from '../messaging/slack/sanitize.js';
@@ -4959,8 +4960,21 @@ export async function startServer(options) {
         // knows whether to reroute a `claude -p` one-shot onto the interactive
         // (subscription) lane. Absent/'off' ⇒ today's behavior, byte-for-byte.
         const subscriptionPathCfg = config.intelligence?.subscriptionPath;
+        // ── durable-conversation-identity §7 bind-time authority (increment 2) ──
+        // Constructed HERE (before SessionManager) so the spawn env can carry the
+        // per-session bind token. One shared secret backs both the spawn-side mint
+        // and the POST /commitments verify (below). Deploy stamp is written once,
+        // first-boot, to anchor the R7-minor-2 straggler grace clock.
+        const { createConversationBindAuth: _createConversationBindAuth, ensureBindDeployStamp: _ensureBindDeployStamp } = await import('../core/conversationBindToken.js');
+        const conversationBindAuth = _createConversationBindAuth(config.stateDir);
+        try {
+            _ensureBindDeployStamp(config.stateDir, startupVersion);
+        }
+        catch { /* @silent-fallback-ok — the stamp only arms the fail-open straggler backstop */ }
         const sessionManagerConfig = {
             ...config.sessions,
+            // §7: mint the per-session bind token into INSTAR_BIND_TOKEN at spawn.
+            mintBindToken: (sessionName, bootstrapConversationIds) => conversationBindAuth.mint(sessionName, bootstrapConversationIds),
             ...(codexThreadlineMcp ? { codexThreadlineMcp } : {}),
             respawnBuildContext: {
                 ...(config.sessions.respawnBuildContext ?? {}),
@@ -6659,6 +6673,112 @@ export async function startServer(options) {
         }
         // ── Slack adapter initialization ─────────────────────────────────
         let slackAdapter;
+        // ── Durable conversation identity (durable-conversation-identity §3/§6.3) ──
+        // ALWAYS constructed (the foundation is always-on once shipped — only
+        // DELIVERY is dev-gated), so GET /conversations/health answers 200 even on a
+        // Telegram-only agent (an empty, healthy registry). getLocalWorkspaceId is
+        // late-bound over the adapter declared above; the D1 kill-switch + fsync
+        // escape hatch are read LIVE at the chokepoint (no restart to apply).
+        const conversationRegistry = new ConversationRegistry({
+            stateDir: config.stateDir,
+            machineId: () => _meshSelfId ?? os.hostname(),
+            isRecordingEnabled: () => config.conversationIdentity?.recording?.enabled !== false,
+            isJournalFsyncDisabled: () => config.conversationIdentity?.recording?.disableJournalFsync === true,
+            getLocalWorkspaceId: () => slackAdapter?.getWorkspaceId(),
+            getConfigWorkspacePin: () => config.conversationIdentity?.workspacePin,
+            breaker: config.conversationIdentity?.mintBreaker,
+            onAttention: (dedupeKey, title, body) => {
+                try {
+                    _meshAttentionRaise?.({ id: dedupeKey, title, body, priority: 'medium', sourceContext: 'conversation-identity' });
+                }
+                catch { /* @silent-fallback-ok — attention is observability; a failed raise never gates identity or delivery */ }
+            },
+            log: (line) => console.log(pc.dim(`  ${line}`)),
+        });
+        try {
+            conversationRegistry.load();
+        }
+        catch (err) {
+            // @silent-fallback-ok — fail toward delivery (§3.6): a broken registry boot
+            // must never take the server down; mints degrade to in-memory candidates
+            // (behavior-identical to legacy hashing) until healed, and the failure is
+            // logged loudly here.
+            console.warn(`  [conversation-registry] boot load failed (degraded to in-memory candidates): ${err instanceof Error ? err.message : String(err)}`);
+        }
+        // ── durable-conversation-identity §5 funnel + §6.1 step-2 wiring (increment 2) ──
+        // followThrough gate: dark-on-fleet / live-on-dev via the developmentAgent
+        // gate (config OMITS `enabled` → resolveDevAgentGate resolves it), dryRun
+        // TRUE first (delivery is externally visible — spec §9). The Telegram lane
+        // (`id>0`) is byte-identical regardless.
+        const conversationFollowThrough = () => {
+            const ft = config
+                .conversationIdentity?.followThrough;
+            return {
+                enabled: resolveDevAgentGate(ft?.enabled, config),
+                dryRun: ft?.dryRun !== false,
+            };
+        };
+        const { createConversationDelivery: _createConversationDelivery } = await import('../core/deliverToConversation.js');
+        const deliverToConversation = _createConversationDelivery({
+            registry: conversationRegistry,
+            followThrough: conversationFollowThrough,
+            // id>0 → today's Telegram path via the existing /telegram/reply route
+            // (queue/dedup/tone-gate untouched).
+            sendTelegram: async (topicId, text, opts) => {
+                const url = `http://localhost:${config.port}/telegram/reply/${topicId}`;
+                const response = await fetch(url, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${config.authToken}` },
+                    body: JSON.stringify({
+                        text,
+                        metadata: { source: opts?.source ?? 'conversation-funnel', isProxy: opts?.isProxy, tier: opts?.tier, allowDuplicate: opts?.allowDuplicate },
+                    }),
+                });
+                return response.ok;
+            },
+            // id<0 → the local Slack adapter (channel + thread_ts). Late-bound over
+            // _slackAdapter (declared below); undefined here means no local Slack
+            // adapter → the funnel returns a typed non-delivery (§5.0 ownership).
+            sendSlack: async (channelId, text, threadTs) => {
+                if (!_slackAdapter)
+                    throw new Error('no local Slack adapter');
+                await _slackAdapter.sendToChannel(channelId, text, threadTs ? { thread_ts: threadTs } : undefined);
+            },
+            isSystemChannel: (channelId) => _slackAdapter?.isSystemChannel(channelId) ?? false,
+            auditWouldDeliver: (line) => console.log(pc.dim(`  ${line}`)),
+            onAttention: (dedupeKey, title, body) => {
+                try {
+                    _meshAttentionRaise?.({ id: dedupeKey, title, body, priority: 'medium', sourceContext: 'conversation-identity' });
+                }
+                catch { /* @silent-fallback-ok — attention is observability; never gates delivery */ }
+            },
+            log: (line) => console.log(pc.dim(`  ${line}`)),
+        });
+        // §6.1 step 2 — the ConversationBinder the CommitmentTracker uses for a
+        // durable bind on a MINTED id: durable-binding-forced registration (WAL
+        // fsynced) + the §3.5.2 bind-pin, handing back the bind-time tuple.
+        const conversationBinder = {
+            bind: (conversationId) => {
+                const resolved = conversationRegistry.resolve(conversationId);
+                if (!resolved || resolved.platform !== 'slack') {
+                    return { ok: false, error: 'conversation-bind-unresolvable' };
+                }
+                const routingKey = resolved.threadTs ? `${resolved.channelId}:${resolved.threadTs}` : resolved.channelId;
+                const mint = conversationRegistry.mintForDurableBinding(routingKey);
+                if (!mint.ok)
+                    return { ok: false, error: mint.error };
+                const tuple = conversationRegistry.bindPin(mint.id);
+                if (!tuple)
+                    return { ok: false, error: 'conversation-bind-unresolvable' };
+                return { ok: true, boundTuple: { platform: 'slack', channelId: tuple.channelId, threadTs: tuple.threadTs } };
+            },
+            release: (conversationId) => {
+                try {
+                    conversationRegistry.bindRelease(conversationId);
+                }
+                catch { /* @silent-fallback-ok — a failed release leaks one refcount (harmless R6-low-4 orphan) */ }
+            },
+        };
         const slackConfig = config.messaging?.find(m => m.type === 'slack' && m.enabled);
         if (slackConfig) {
             try {
@@ -6886,6 +7006,21 @@ export async function startServer(options) {
                     const isThreadSession = slackAdapter.isThreadRoutingKey(routingKey);
                     // The thread_ts to thread replies under (only when this is a thread session).
                     const replyThreadTs = isThreadSession ? threadTs : undefined;
+                    // ── §6.3 eager mint (durable-conversation-identity) ────────────────
+                    // Get-or-create the durable conversation id for the RESOLVED routing
+                    // key on EVERY inbound (one cached registry read after the first).
+                    // Carried under the PINNED field key `conversationId` in message
+                    // metadata + the session bootstrap context so the session can attach
+                    // durable state to it. Fail toward delivery (§3.6): a mint
+                    // degradation ("no durable id") never blocks the message.
+                    let conversationId = null;
+                    try {
+                        conversationId = conversationRegistry.mintForInbound(routingKey).id;
+                        if (conversationId !== null && message.metadata) {
+                            message.metadata.conversationId = conversationId;
+                        }
+                    }
+                    catch { /* @silent-fallback-ok — identity never costs a message (§3.6 fail-toward-delivery): the inbound proceeds without a durable id and re-mints later */ }
                     // Build injection tag with sender info (matches Telegram's buildInjectionTag pattern)
                     const slackUserId = message.metadata?.slackUserId;
                     // Sanitize sender name at injection boundary (prevents injection attacks)
@@ -6946,6 +7081,13 @@ export async function startServer(options) {
                     contextLines.push('');
                     contextLines.push('Strip the [slack:] prefix before interpreting the message.');
                     contextLines.push('Only relay conversational text — not tool output, file contents, or internal reasoning.');
+                    if (conversationId !== null) {
+                        // §6.3: the durable conversation id rides the session bootstrap
+                        // context (pinned metadata key `conversationId`; the prompt phrasing
+                        // below is build-time cheap-to-change).
+                        contextLines.push('');
+                        contextLines.push(`Conversation id: ${conversationId} — the durable identity of THIS Slack conversation. Use it as the topicId when opening durable state (e.g. POST /commitments) for this conversation.`);
+                    }
                     const contextData = contextLines.join('\n');
                     // Also write to file as backup reference
                     const ctxPath = path.join(tmpDir, `ctx-${channelId}-${Date.now()}.txt`);
@@ -7029,7 +7171,14 @@ export async function startServer(options) {
                     // isolated work session (DMs don't carry thread_ts anyway).
                     const targetSession = (isDM && !isThreadSession) ? 'lifeline' : undefined;
                     try {
-                        const newSessionName = await sessionManager.spawnInteractiveSession(bootstrapMessage, targetSession, { resumeSessionId, slackChannelId: channelId, slackThreadTs: replyThreadTs });
+                        const newSessionName = await sessionManager.spawnInteractiveSession(bootstrapMessage, targetSession, {
+                            resumeSessionId,
+                            slackChannelId: channelId,
+                            slackThreadTs: replyThreadTs,
+                            // durable-conversation-identity §7: scope this session's bind
+                            // token to the minted conversation it may open durable state on.
+                            ...(conversationId !== null ? { bootstrapConversationIds: [conversationId] } : {}),
+                        });
                         if (newSessionName) {
                             // Register on the routing key (channelId for a channel session,
                             // `<channelId>:<thread_ts>` for a thread session). channelName carries
@@ -7046,6 +7195,32 @@ export async function startServer(options) {
                 // Expose to the owner-side mesh bridge (a forwarded Slack message replays
                 // through the same dispatch on the machine that owns the conversation).
                 _slackInboundDispatch = slackInboundDispatch;
+                // ── §6.2 adoption pass (durable-conversation-identity) ─────────────
+                // Idempotent boot-time ensure: pre-register channel-LEVEL conversations
+                // from slack-channel-registry.json with their legacy-hash ids, inside
+                // ONE batched-save window. Gated to channels with authorized-sender
+                // traffic on record (security-B8): a channel enters the session
+                // registry ONLY via the authorized-sender dispatch above, so presence
+                // there IS the authorized-traffic evidence — an auto-joined channel
+                // with no authorized activity never appears and mints lazily on its
+                // first authorized inbound instead. A pre-population convenience, not a
+                // recovery requirement (§6.2).
+                try {
+                    const channelRegistry = slackAdapter.getChannelRegistry();
+                    const channelIds = new Map();
+                    for (const [routingKey, entry] of Object.entries(channelRegistry)) {
+                        const chId = routingKey.includes(':') ? routingKey.slice(0, routingKey.indexOf(':')) : routingKey;
+                        if (!channelIds.has(chId))
+                            channelIds.set(chId, entry.channelName);
+                    }
+                    conversationRegistry.runAdoptionPass([...channelIds].map(([channelId, name]) => ({ channelId, ...(name ? { name } : {}) })), () => true);
+                }
+                catch (err) {
+                    // @silent-fallback-ok — the adoption pass is a pre-population CONVENIENCE,
+                    // not a recovery requirement (§6.2): every channel mints lazily on its
+                    // next authorized inbound; the failure is logged loudly here.
+                    console.warn(`  [conversation-registry] adoption pass failed (channels mint lazily on next inbound): ${err instanceof Error ? err.message : String(err)}`);
+                }
                 slackAdapter.onMessage(async (message) => {
                     const channelId = message.channel.identifier;
                     const messageTs = message.metadata?.ts;
@@ -10959,6 +11134,11 @@ export async function startServer(options) {
                 notify('IMMEDIATE', 'commitment', `The change you asked for ("${commitment.userRequest}") keeps reverting — this looks like a bug I need to fix. ${detail}`);
             },
         });
+        // durable-conversation-identity §6.1 step 2: the ConversationBinder is
+        // late-bound (the registry constructs before the tracker). A durable bind
+        // on a minted (negative) conversation id now registers durably + records
+        // the §3.5.2 bind-pin and denormalizes boundTuple onto the commitment.
+        commitmentTracker.setConversationBinder(conversationBinder);
         commitmentTracker.start();
         console.log(pc.green('  Commitment tracker enabled'));
         // SubscriptionPool — multi-account subscription registry (P1.1 of the
@@ -12243,6 +12423,32 @@ export async function startServer(options) {
                             if (!response.ok)
                                 throw new Error(`Beacon reply failed: ${response.status}`);
                         },
+                        // ── durable-conversation-identity §6.1 step 2: the funnel swap ──
+                        // EVERY beacon send routes through deliverToConversation: the id>0
+                        // arm is today's Telegram path unchanged; the id<0 arm delivers
+                        // into the exact Slack thread with the E1 guard + §5.1 typed
+                        // outcomes. The `metadata` shape maps to the funnel opts contract.
+                        deliverMessage: (topicId, text, opts) => deliverToConversation(topicId, text, {
+                            source: opts.source,
+                            isProxy: opts.isProxy,
+                            tier: typeof opts.tier === 'number' ? String(opts.tier) : opts.tier,
+                            logicalSendId: opts.logicalSendId,
+                            ...(opts.boundTuple ? { boundTuple: opts.boundTuple } : {}),
+                        }),
+                        // §5.0(a): journal send-retire after the sendSeq persist (R5-M3 order).
+                        retireSend: (conversationId, logicalSendId) => {
+                            try {
+                                conversationRegistry.retireSend(conversationId, logicalSendId);
+                            }
+                            catch { /* guard bookkeeping */ }
+                        },
+                        // §5.0 ownership predicate (drives the R3-M16 stand-down recheck).
+                        ownsConversation: (conversationId) => {
+                            if (conversationId > 0)
+                                return true; // Telegram is always locally owned
+                            const resolved = conversationRegistry.resolve(conversationId);
+                            return !!resolved && resolved.platform === 'slack' && resolved.origin !== 'replicated' && !!_slackAdapter;
+                        },
                         prefix: promiseBeaconCfg.prefix ?? '⏳',
                         maxDailyLlmSpendCents: promiseBeaconCfg.maxDailyLlmSpendCents ?? 100,
                         sentinelAutoEnable: promiseBeaconCfg.sentinelAutoEnable ?? false,
@@ -20229,7 +20435,7 @@ export async function startServer(options) {
         const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, cartographer: cartographer ?? undefined, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, subscriptionPool, accountFollowMePeerViews: async () => { const nickById = new Map((_listPoolMachines?.() ?? []).map((m) => [m.machineId, m.nickname ?? m.machineId])); let peers = (_resolvePeerUrls?.() ?? []).map((p) => ({ machineId: p.machineId, nickname: nickById.get(p.machineId) ?? p.machineId, url: p.url })); if (peers.length === 0) {
                 peers = (_listPoolMachines?.() ?? []).filter((m) => m.machineId !== _meshSelfId && !!m.lastKnownUrl).map((m) => ({ machineId: m.machineId, nickname: m.nickname ?? m.machineId, url: m.lastKnownUrl }));
             } if (peers.length === 0)
-                return []; const { fetchPeerSubscriptionViews } = await import('../core/fetchPeerSubscriptionViews.js'); return fetchPeerSubscriptionViews({ peers: () => peers, fetchImpl: fetch, authToken: config.authToken ?? '' }); }, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, accountFollowMeRevocation, credentialRepointing, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, greenPrAutoMerger: greenPrAutoMerger ?? undefined, guardLatchStore: guardLatchStore ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, meshBindActive: coordinator.managers.identityManager.hasIdentity() && config.multiMachine?.meshTransport?.enabled !== false, localSigningKeyPem, leaseTransport, peerEndpointRecorder, getSelfMeshEndpoints, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, threadLog, threadMessageRecorder, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, reviewCanaryBattery, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, ropeHealthMonitor, writeAdmission: writeAdmission ?? undefined, getInboundQueue: () => _inboundQueue, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, preferenceReplicaStore, replicatedRecordEmitter, conflictStore, rollbackUnmerge, droppedOriginRegistry, preferencesUnionReader, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, topicPinSkewQuarantine: _topicPinSkewQuarantine ?? undefined, topicPinFoldView: _topicPinFoldView ?? undefined, ownershipReconciler: _ownershipReconciler ?? undefined, staleOwnerEngine: _staleOwnerEngine ?? undefined, leaseHandback: _leaseHandbackCtx ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, deliverMandateToMachine: _deliverMandateToMachine ?? undefined, poolLink: _poolLink ?? undefined, poolPollCache: _poolPollCache ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, orphanedWorkSentinel, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, resumeQueue, resumeDrainer, autonomousLivenessReconciler, enforcedTerminationStatus: () => enforcedTerminationWatchdog?.guardStatus() ?? null, prHandLease: prHandLease ?? undefined, operatorStopRecorder: recordOperatorStop, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier, liveTestGate, liveTestGateMode, liveTestRunnerCtx }); // Resolve the late-bound topic-operator getter (increment 2e): routing was
+                return []; const { fetchPeerSubscriptionViews } = await import('../core/fetchPeerSubscriptionViews.js'); return fetchPeerSubscriptionViews({ peers: () => peers, fetchImpl: fetch, authToken: config.authToken ?? '' }); }, quotaPoller, quotaAwareScheduler: _quotaAwareScheduler ?? undefined, proactiveSwapMonitor: _proactiveSwapMonitor ?? undefined, inUseAccountResolver, enrollmentWizard, accountFollowMeRevocation, credentialRepointing, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, greenPrAutoMerger: greenPrAutoMerger ?? undefined, guardLatchStore: guardLatchStore ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, topicProfile: _topicProfileCtx ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, meshBindActive: coordinator.managers.identityManager.hasIdentity() && config.multiMachine?.meshTransport?.enabled !== false, localSigningKeyPem, leaseTransport, peerEndpointRecorder, getSelfMeshEndpoints, onLeasePullRequest: () => leaseCoordinatorRef?.currentLease() ?? null, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, conversationRegistry, conversationBindAuth, conversationFollowThrough, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, threadLog, threadMessageRecorder, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, a2aDeliveryTracker: a2aDeliveryTracker ?? undefined, responseReviewGate, reviewCanaryBattery, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, ropeHealthMonitor, writeAdmission: writeAdmission ?? undefined, getInboundQueue: () => _inboundQueue, meshRpcDispatcher, workingSetPullCoordinator, commitmentReplicaStore, preferenceReplicaStore, replicatedRecordEmitter, conflictStore, rollbackUnmerge, droppedOriginRegistry, preferencesUnionReader, forwardCommitmentMutate, sessionOwnershipRegistry, topicPinStore: _topicPinStore ?? undefined, topicPinSkewQuarantine: _topicPinSkewQuarantine ?? undefined, topicPinFoldView: _topicPinFoldView ?? undefined, ownershipReconciler: _ownershipReconciler ?? undefined, staleOwnerEngine: _staleOwnerEngine ?? undefined, leaseHandback: _leaseHandbackCtx ?? undefined, streamTicketStore: _streamTicketStore ?? undefined, poolStreamAllowRemoteInput: config.dashboard?.poolStream?.allowRemoteInput ?? false, poolStreamConnector: _poolStreamConnector ?? undefined, secretSync: _secretSyncHandle ?? undefined, meshSelfId: _meshSelfId ?? undefined, resolveRouterUrl: _resolveRouterUrl ?? undefined, resolvePeerUrls: _resolvePeerUrls ?? undefined, guardRegistry, listPoolMachines: _listPoolMachines ?? undefined, deliverMandateToMachine: _deliverMandateToMachine ?? undefined, poolLink: _poolLink ?? undefined, poolPollCache: _poolPollCache ?? undefined, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, orphanedWorkSentinel, mcpProcessReaper, geminiLoopRunner, sleepController, agentActivityState, reapLog, resumeQueue, resumeDrainer, autonomousLivenessReconciler, enforcedTerminationStatus: () => enforcedTerminationWatchdog?.guardStatus() ?? null, prHandLease: prHandLease ?? undefined, operatorStopRecorder: recordOperatorStop, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier, liveTestGate, liveTestGateMode, liveTestRunnerCtx }); // Resolve the late-bound topic-operator getter (increment 2e): routing was
         // wired before the server existed; from here on inbound binds use the
         // server's own store instance.
         _agentServerRef = server;