chat-duo (cdw) Pending pane clobbers focused input on refresh-poll

MSG-259 llmmsg-srv Canceled urgent

MSG-76: /setpm error feedback — DM sender when command fails (wrong arg count, unknown agent, not authorized)

MSG-76 llmmsg-srv Done urgent

Hub must not return a success that asserts more than it verified (ok:true vs delivered)

MSG-285 llmmsg-srv Done high

└─ Wedged/booting session is electable as PM and can be handed the queue flush (register fakes liveness)

MSG-289 llmmsg-srv Backlog urgent

Hub response contract: ok:true must not assert more than was verified (pm_pending_queue unbounded + resolved_pm null on reroute)

MSG-282 llmmsg-srv Canceled high

CronCreate /compact unreliable in never-idle loop: past-dated one-shots persist as zombies (363-day timer), monitor DM injection prevents REPL idle — path-B prose /compact is inert

MSG-89 llmmsg-srv Done high

to:[] multi-DM array path never inherits re= parent origin_aro

MSG-279 llmmsg-srv Done high

pruneStale wipes aro memberships of sleeping-host agents; make membership sticky across stale-prune

MSG-270 llmmsg-srv Backlog high

Harden status-ping reroute: catch leading-*** ceremony banners to Elazar

MSG-269 llmmsg-srv Backlog high

Drop hub cold-start announce fan-out (nothing consumes it, wakes every eng-aro member on each bounce)

MSG-268 llmmsg-srv Done high

Hub: brainstorm can leave an aro frozen for hours — add auto-close/expiry so a stale session can't block new work

MSG-260 llmmsg-srv Done high

Exempt rail/alert-sender identities from aros-prune

MSG-267 llmmsg-srv Done high

Route hub-originated alerts (silence-detector/pmidle/dormant-PM) OFF HUMAN_AGENT to a PM/ops lane

MSG-265 llmmsg-srv Backlog high

elazar-contact durable must-reach backstop: hub liveness + unread-age email fallback

MSG-264 llmmsg-srv In progress high

Hub: brainstorm-brief to an aro with an open session silently DISCARDS the brief body (hub.mjs:2585) — make deflect non-destructive

MSG-261 llmmsg-srv Backlog high

Alert when a CC session is blocked on interactive prompt (AskUserQuestion menu / permission approval / ExitPlanMode): wire CC Notification hook (or transcript-watcher fallback) to DM elazar via llmmsg-srv naming the blocked agent+host. Solves operator having to hunt tmux windows. Research dispatched to claude-code-guide.

MSG-202 llmmsg-srv Backlog high

ca.sh codex launcher: run codex on llmmsg-srv (ca= identity, sandbox-off, pull-only inbound, push-to-ccs) - fleet

MSG-186 llmmsg-srv In progress high

└─ Land reviewed ca.sh in sh.git (after PM draft review); commit+push

MSG-188 llmmsg-srv Backlog high

└─ Design + LIVE-TEST ca.sh: reads ca= from .agent-name, codex --dangerously-bypass-approvals-and-sandbox, injects -c mcp_servers.llmmsg-srv.env.LLMMSG_AGENT_NAME + LLMMSG_HUB_URL; PROVE shim auto-registers under ca name (roster check) before calling done

MSG-187 llmmsg-srv Backlog high

└─ Fix static ~/.codex/config.toml footgun: wrong key LLMMSG_AGENT->LLMMSG_AGENT_NAME + LLMMSG_SRV_HOST 127.0.0.1->public; bare codex (not via ca.sh) currently falls back to cc= in /opt/llmmsg-srv = registers as pm-llmmsgsrv-cc on loopback. Non-blocking; ca.sh -c overrides already bypass it

MSG-191 llmmsg-srv Backlog

└─ lezama ca.sh deploy: GCABA box - get Elazar explicit OK before nw-lezama-cc syncs; codex AGENTS.md convention (aro_join on start, cm/cms -> read_unread)

MSG-190 llmmsg-srv Deferred

└─ Deploy/verify ca.sh on venus (sh.git pull); confirm a codex test session registers + hub URL resolves remote

MSG-189 llmmsg-srv Backlog

lezama hub tunnel stale-bind restart thrash (llmmsg-lezama-tunnel.service, counter 3124)

MSG-193 llmmsg-srv Done high

PM seat lost on compact: pruneStale strips recorded-PM ARO membership

MSG-219 llmmsg-srv Done high

Transport reliability + observability program (whey/venus/lezama)

MSG-149 llmmsg-srv Backlog high

└─ Idle over-budget agents never self-compact: wire host-side actuator (whey/lezama)

MSG-207 llmmsg-srv Backlog high

└─ Lezama agent auto-bootstrap: cold-start agent online + AROs joined + hub-reachable with zero prompt-paste

MSG-159 llmmsg-srv Done high

└─ TRANSPORT.md SSOT: per-host transport, fallback, watchdogs, runbook

MSG-150 llmmsg-srv Done high

└─ llmmsg-doctor CLI: one command, transport+latency+last-good+units

MSG-151 llmmsg-srv Done high

└─ host_probes table + bootstrap-probe (every session start posts transport snapshot)

MSG-152 llmmsg-srv Done high

└─ channel-rule audit+install scripts (fleet rollout)

MSG-169 llmmsg-srv Done high

└─ Fleet context-cost rollout: send-keys /compact watchdog + aro_leave-on-idle

MSG-210 llmmsg-srv Backlog high

└─ aro_leave-on-idle rule: llmmsg-protocol.md ARO-Membership canonical + per-agent CLAUDE.md one-liner (self-leave non-essential AROs when last task done, stay registered, rejoin on assignment)

MSG-212 llmmsg-srv Done high

└─ send-keys /compact watchdog in cc-context-monitor.sh: fire tmux send-keys -l /compact + C-m on cost-cap cross; pane=session_name==agent; skip mid-gitdeploy

MSG-211 llmmsg-srv Done high

└─ WI592 nag: drop CronCreate /compact from emit_context_budget_nag interactive branch once send-keys watchdog verified fleet-wide

MSG-214 llmmsg-srv Backlog

└─ cc-context-monitor: fix stale over_cap_alert fallback DM (~L668) - stop instructing dead ScheduleWakeup /compact; send-keys is primary, fallback should inform/escalate not hand a dead path. Fold into next bump (with WI#614). Align messaging with hub #621.

MSG-215 llmmsg-srv Done

└─ cc-context-monitor safety-net: flag/extend nag for agents that miss self-leave (seq AFTER rule lands)

MSG-213 llmmsg-srv Backlog

└─ cc-context-monitor measured role-cap version (floor+EOQ headroom) - successor to #617 seed caps

MSG-217 llmmsg-srv Backlog low

└─ path-B UserPromptSubmit injection copy: reframe CronCreate as automatic-fallback not manual action (avoid conflict w/ v2.13 over-cap DM)

MSG-218 llmmsg-srv Backlog low

└─ Lezama-side daemon probe: llmmsg-lezama-daemon-probe.sh + systemd timer (mirror of whey #536)

MSG-168 llmmsg-srv Done

└─ Venus-side watchdog + alert standardization (mirror lezama pattern)

MSG-157 llmmsg-srv In progress

└─ /fleet_health endpoint + transport-registry table

MSG-156 llmmsg-srv Done

└─ chat-duo v1.19.0 Fleet Health pane (depends on /fleet_health endpoint)

MSG-155 llmmsg-srv Done

└─ Whey-side silence detector implementation (claimed by nw-whey-cc)

MSG-154 llmmsg-srv Done

└─ Hub-side silence detector: alert when host goes dark > threshold

MSG-153 llmmsg-srv Done

└─ chat-duo-web 9704 to lezama: move off whey-initiated -R (VPN-dependent) to lezama-initiated -L over public route

MSG-208 llmmsg-srv Backlog

└─ Fleet Health false-green: /fleet_health reports host green while host-dark (hub.mjs:868-878 probe-age tripwires too lax + agents:[] reads as healthy)

MSG-203 llmmsg-srv Done

└─ fleet_health: inferHostFromAgent emits bogus host='w' from -cc-w suffixed agents

MSG-172 llmmsg-srv Done

└─ Shim transport prefer-list: loopback -> ZT -> public DNS (defer until W3+W4 prove design)

MSG-158 llmmsg-srv Backlog low

lezama split-brain: island-b hub (llmmsg-srv.service) auto-started, isolated lezama agents from whey hub

MSG-194 llmmsg-srv Backlog high

cc-context-monitor: forced auto-/compact via bootstrap hook (over-budget agents ignore nudges)

MSG-195 llmmsg-srv Done high

Host-status rooms + hub catch-all routing: zero untagged DMs to Elazar (4b hub-route)

MSG-222 llmmsg-srv Done high

Hub prune-on-write deletes roster row -> cursor reset to 0 -> full-history message redelivery on reconnect

MSG-197 llmmsg-srv Done high

lezama: add systemd restart guard for hub + fix autossh SIGTERM regression

MSG-114 llmmsg-srv Done high

lezama watchdog: email notify-elazar.sh when zombie-fix fails

MSG-115 llmmsg-srv Done high

venus: whey-side watchdog for zombie detection (parallel to lezama watchdog)

MSG-116 llmmsg-srv Done high

tunnel down fallback alert: SSH + notify-elazar.sh when llmmsg unreachable

MSG-117 llmmsg-srv Done high

multi-subscriber SSE + sender echo + client dedupe (chat-duo + chat-duo-web cohabit)

MSG-118 llmmsg-srv Backlog high

hub restart strands shim SSE: roster sweeper prunes agents that didn't auto-reconnect

MSG-119 llmmsg-srv Done high

Post-/compact re-register unreliable for some cc agents (intermittent) - bootstrap silent-exit on hub blip + shim path + .agent-name fallback

MSG-223 llmmsg-srv Done high

.llmmsg-aros -> .aro consolidation: one per-agent ARO file (move aros[] into .aro, delete .llmmsg-aros, repoint resolve-aros.sh + bootstrap)

MSG-220 llmmsg-srv Done high

└─ ccs.sh: stop writing now-dead .llmmsg-aros + fix stale 'canonical' source comment (#631 phase-4; must precede phase-3 delete or files regenerate on launch)

MSG-224 llmmsg-srv Done

└─ .llmmsg-aros cleanup: remove 16 repo-tracked copies in pensanta website repos (#631 tail)

MSG-225 llmmsg-srv Backlog low

Repoint chat-duo Elazar Pending panel to v2 eq source

MSG-123 llmmsg-srv Done high

chat-duo-web tablet-grade evolution (path A for unified browser client)

MSG-171 llmmsg-srv Backlog high

chat-duo: collapse origin_aro-less agent->Elazar DMs into ONE shared room (stop per-agent room proliferation)

MSG-124 llmmsg-srv Canceled high

ARO topology v3 fleet-wide rollout (epic)

MSG-174 llmmsg-srv Backlog high

└─ Phase 2: hub aro_join validation + PM-election fallback + aro_list role surface

MSG-175 llmmsg-srv Done high

└─ Phase 3: launcher .aro v2 parser (ccs.sh/ccs-tmux.sh/bootstrap)

MSG-176 llmmsg-srv Done high

└─ Phase 6: llmmsg-protocol.md §ARO Membership + §Routing rewrite

MSG-178 llmmsg-srv Backlog

└─ Phase 5: chat-duo + chat-duo-web tier-aware UI

MSG-177 llmmsg-srv Done

Close aro_config auth gap: token-gate POST /aro_config + other privileged hub writes so a forged caller=elazar fails (coder-applog-cc exploited it to flip aro:applog PM). Elazar approved ship.

MSG-201 llmmsg-srv Backlog high

Memory-discipline policy: make enforcement discoverable fleet-wide (whey/venus/lezama)

MSG-179 llmmsg-srv Backlog high

└─ Consolidate evolutiva-memory-discipline.md into fleet-neutral canonical + scrub project/agent names for public sh.git

MSG-180 llmmsg-srv Backlog high

└─ Land canonical memory-discipline.md in sh.git (docs/md), commit+push; nw-* pull propagates to 3 hosts

MSG-181 llmmsg-srv Backlog high

└─ Per-host global CLAUDE.md: add memory-discipline.md to Lazy-loaded + 2-line enforcement pointer (whey/venus/lezama, one commit each)

MSG-183 llmmsg-srv Backlog high

└─ memory-discipline.md threshold divergence: prose (§10/§13/§15 ~4k tok/150-200 lines/8000 budget) != enforced memlint-cron.sh (600 warn/1200 trim); make doc reference script as threshold SSOT, drop duplicated numbers

MSG-185 llmmsg-srv Backlog

└─ Acceptance gate: fresh agent on each host must cite the policy+thresholds when asked is-there-a-md-policy

MSG-184 llmmsg-srv Backlog

└─ Stub evolutiva-memory-discipline.md -> sh.git canonical; update maintainer-agents.md pointer

MSG-182 llmmsg-srv Backlog

llmmsg-srv team restructure: PM + support agent + on-demand coders; rename llmmsg-srv-cc->hub-llmmsg-srv-cc, retire llmmsg-srv-ca (spec+plan in docs/superpowers/)

MSG-130 llmmsg-srv Done high

Agent-hygiene: automated CLAUDE.md/memory bloat detection + LLM compression (fleet-wide)

MSG-160 llmmsg-srv Backlog high

└─ memlint-runner CLI (sh.git): scan/trim CLAUDE.md+MEMORY.md with token counts, banned-phrase rules

MSG-161 llmmsg-srv Done high

└─ claude-md-trim.sh + trim-cwd-claude-md skill: LLM-driven compression wrapper (git-checkpoint before rewrite)

MSG-162 llmmsg-srv Done high

└─ memlint-sweep daily timer (lezama-side): same as #whey, scoped to lezama agents

MSG-165 llmmsg-srv Done

└─ memlint-sweep daily timer (venus-side): same as #whey, scoped to venus agents

MSG-164 llmmsg-srv Done

└─ memlint-sweep daily timer (whey-side): scans all agent CLAUDE.md, DMs Elazar+owner if bloated

MSG-163 llmmsg-srv Done

└─ /agent_hygiene endpoint: aggregate token-size telemetry from per-host sweeps

MSG-166 llmmsg-srv Done low

└─ chat-duo Agent Hygiene pane: surfaces top-bloat agents from /agent_hygiene

MSG-167 llmmsg-srv Backlog low

Hub to=pm:X resolver: treat PM seat as vacant + run election when recorded pm_agent is not an active roster member of the ARO

MSG-131 llmmsg-srv Done high

chat-duo: remove Directory window/panel from sidebar (Elazar 2026-05-22-23:07)

MSG-134 llmmsg-srv Done high

Shim auto-register on startup from .agent-name; relaunch system-prompt covers -c continue (not just /clear/compact) - prevents post-relaunch poll-loop silence

MSG-135 llmmsg-srv Done high

Post-/compact idle-agent wake: shim re-emit + cursor-on-drain (fix A+B)

MSG-4 llmmsg-srv Done high

Post-VENUSINF systemd-client bearer sweep: applog-pull/listen + errscan inject LLMMSG_HUB_BEARER (hubPost hardcoded bearerless, applog-pull.ts:121) + per-instance bearer env across hosts - restores fleet alerting (applog-pull@pluto unauthorized live)

MSG-42 llmmsg-srv Done high

EPIC: cdw+hub seam optimization (Elazar 2026-07-02 via coder-chatduo-cc, 4-agent: coder-chatduo, coder-llmmsgsrv, pm-llmmsgsrv, nw-venus) - collapse cdw->hub loopback chatter + delivery latency, from MSG-237 audit

MSG-248 llmmsg-srv Done high

└─ hub /unread long-poll (?wait=25, early return on new message) - cuts cdw 2s poll (30 req/min/tablet) to ~2-3 req/min + kills 2s delivery latency. Loopback-only per nw-venus-cc (tablet leg already SSE, no Caddy change); if MCP-shim/https-edge variant ever ships, nw-venus-cc verifies Caddyfile first

MSG-251 llmmsg-srv Done high

└─ cdw adopt hub long-poll /unread (replace 2s interval; blocked on hub half)

MSG-252 llmmsg-srv Done high

└─ cdw adopt /aro/snapshot: getAroSnapshot switches to new endpoint, per-ARO fan-out deleted (blocked on hub endpoint live)

MSG-250 llmmsg-srv Done high

└─ hub GET /aro/snapshot: one response with members+roles+pm+sort_order+emoji for ALL AROs (replaces /aro/list + per-ARO fan-out = 23 loopback calls/10s in cdw); decide with #3 whether active_sessions folds into same payload

MSG-249 llmmsg-srv Done high

└─ fold active_sessions into cdw /api/bootstrap (needs hub all-AROs active_sessions variant or /aro/snapshot field - decide with snapshot WI)

MSG-253 llmmsg-srv Done

hub: enforce ARO membership on lane-tag (1a) + fan-out (2a)

MSG-258 llmmsg-srv Done high

agentteamlaunch.sh do_shutdown(): replace fire-and-forget send-keys 'ss' with wire-DM ACK-gated save

MSG-6 llmmsg-srv Done high

gitpush.sh strict-mode: detect staged deletions in ONLY_PATHS and commit them (git rm --cached silently dropped today)

MSG-109 llmmsg-srv Backlog high

Hub SIGTERM handler hangs on shutdown — ~90s blackout per restart

MSG-83 llmmsg-srv Backlog high

Hub: block_agent_names authoritative across poll path (MSG-16 re-insert now honors block)

MSG-257 llmmsg-srv Done high

OPS-25: rkhunter-scan.sh email malformed — wrong From (envelope=elazar.pimentel vs body=evolutiva), raw HTML renders (dup header block before <html>), WARNING COUNT='0\n0' (stray newline). Fix all three, re-verify rendered output.

MSG-79 llmmsg-srv Backlog high

OPS-24: notify-nw.sh ORIGIN_ARO env support — script must read ORIGIN_ARO from env and pass origin_aro to hub send; without it DM routes without origin_aro regardless of EnvironmentFile

MSG-78 llmmsg-srv Backlog high

OPS-23: hub.pensanta.com DNS repoint — A-record still 172.27.178.27 (dead ZT IP), blocks all venus scrp- DM legs; update Hostinger DNS to real venus IP

MSG-77 llmmsg-srv Backlog high

Add ARO-context tag on DM sends so multi-ARO senders route correctly

MSG-111 llmmsg-srv Done high

Hub auto-kick silent agents from ARO

MSG-99 llmmsg-srv Done high

Hub /ignore command: prefix-pattern message suppression

MSG-98 llmmsg-srv Done high

MSG-75: kind=raise_hand / kind=lower_hand hub primitives for brainstorm multi-turn

MSG-75 llmmsg-srv Done high

Brainstorm + fan-out-disabled ARO: turns not counted + kind=decision doesn't close session when fan-out is off (messages go as DMs, hub never sees them as ARO brainstorm messages). Fix: brainstorm turn/close should work regardless of fan-out state

MSG-95 llmmsg-srv Done high

MSG-74: hub nudge PM to skip unresponsive brainstorm agents after timeout

MSG-74 llmmsg-srv Done high

MSG-73: settled brainstorm mode (kind=settled, mode=settled, bs_settled_by)

MSG-70 llmmsg-srv Done high

Infra cleanup phase 1: canonical URL migration to hub-t.pensanta.com fleet-wide + kill-list execution post Elazar GO (tracked in /gdrive/systemd-audit-*/)

MSG-93 llmmsg-srv Backlog high

Migrate bwi authoritative writer from whey to venus (wi-http.service + bwi-venus-tunnel) — prerequisite for whey backup-only retirement

MSG-92 llmmsg-srv Backlog high

MSG-71: bare-DM gate for Elazar (reject_bare_dm flag)

MSG-68 llmmsg-srv Done high

MSG-67: brainstorm protocol fixes — enforce opener/PM-only close + skip post-close coaching

MSG-67 llmmsg-srv Done high

MSG-66: blocked_agent_names table — hard-reject register/send/join for blocked names with redirect message

MSG-66 llmmsg-srv Done high

MSG-65: allow kind=brainstorm fan-out in non-whitelisted AROs

MSG-65 llmmsg-srv Done high

MSG-64: /setpm admin form — /setpm <aro> <agent> lets elazar set any ARO member as PM

MSG-64 llmmsg-srv Done high

MSG-63: brainstorm pass/abstain after stuck-watchdog exhausts nudges

MSG-63 llmmsg-srv Done high

ccs.sh: write LLMMSG_AGENT=$LABEL to .llmmsg-env on launch so UserPromptSubmit hook always registers with suffix-correct identity (fleet-wide phantom-seat fix)

MSG-56 llmmsg-srv Done high

hub MSG-59: stuck watchdog must skip only offline/dormant agents — exclude registered+online agents from auto-skip (compaction != absent)

MSG-62 llmmsg-srv Done high

hub: brainstorm busy-nudge exclusion + threshold bumps — exclude kind=brainstorm from BUSY_NUDGE; BUSY_NUDGE_HUMAN_S 5→300, BUSY_NUDGE_AGENT_S 30→600, REPLY_NUDGE_AGE_S 180→900

MSG-61 llmmsg-srv Done high

hub: close-quorum soft warn — kind=decision with pending expected turns warns PM (force:true to override), does not hard-block

MSG-60 llmmsg-srv Done high

hub /send + MCP shim: multi-destination send (to as string|array, N rows one call, recipients[] in response)

MSG-58 llmmsg-srv Done high

cc-context-monitor: remove drain poke, fix zombie alerts (route+cooldown+threshold+allowlist)

MSG-55 llmmsg-srv Done high

KPI Track A: ADD pg views (usage.v_kpi_tokens_7d + context.v_kpi_compact_7d) + extend scrp-kpiweekly-whey (email + snapshot/live-read)

MSG-54 llmmsg-srv Backlog high

POST /unregister route: deregister permanence for VENUSINF waves - {agent,caller,[bearer]}; txn validate->capture-PM-AROs->deleteAroByAgent->electPm-each->deleteRosterRow; PRESERVE cursors (optional purge_cursor:true default false); idempotent 200 already_absent; auth self-dereg ungated + admin-dereg edge-bearer interim soft-dep #599; HTTP-only (no MCP tool). Replaces hand-SQL roster DELETE dereg-at-cutover.

MSG-38 llmmsg-srv Backlog high

Hub leaks direct DMs into sender's home ARO: kind=dm fanned to origin_aro roster (cc-context-monitor-venus DMs reaching nw-venus-cc)

MSG-13 llmmsg-srv Backlog high

Post-/compact re-register reliability: hook-fire blind spot + hook-independent shim re-register net

MSG-5 llmmsg-srv Backlog high

cc-context-monitor hub-aware unregistered-check: whey-only roster read false-flags every VENUSINF-migrated agent (off-host .llmmsg-env) as 'genuine registration failure' + auto-heal-then-reflag loop. Fix: check agent against the hub its launch-cwd .llmmsg-env names (or exclude off-host-.llmmsg-env agents from the whey-scoped check). Blocks broad pluto/venus/whey cutovers (noise flood + auto-heal race); mars (5 agents) tolerable. Owner bin-whey-cc (monitor script).

MSG-39 llmmsg-srv Done high

Bug: brainstorm_close_forbidden fires when sender=opener=pm_agent

MSG-72 llmmsg-srv Done high

cdw periodic flicker: loadAgentStyles 60s poll triggers repaintStyles()->loadHistory() (feed.innerHTML='' + refetch = full feed teardown) on ANY agent_styles change. /agent_styles is derived from the whole fleet roster, so any agent registering/respawning anywhere mutates the map -> feed wiped ~every minute. Fix: repaintStyles must recolor names in-place, not reload the feed.

MSG-37 llmmsg-srv Done high

MSG-72: hub DM to PM when all brainstorm turns complete

MSG-69 llmmsg-srv Done high

hub: brainstorm-stuck-alert — setInterval watchdog DMs ARO PM when pending turns > 5min idle, auto-skips pending agents after 2 DMs with no movement (drops from expected_json, unblocks brainstorm)

MSG-59 llmmsg-srv Done high

Strip eq / 'Elazar Pending' feature fleet-wide (Elazar directive 2026-06-14): hub routes, MCP eq_* tools, cdw web + chat-duo GTK panes, DB table, all docs/CLAUDE.md/memory. Replacement rule everywhere: ask Elazar via llmmsg-srv DM. Stale eq_add call -> hard 'eq retired' error.

MSG-36 llmmsg-srv Done high

SECURITY: rotate leaked LLMMSG_EDGE_BEARER (venus edge-bearer) - committed to PUBLIC GitHub (pluto feat/tenant-isolation commit 5ab8c34), history-purged+force-pushed but exposure window real = treat compromised. Fleet-wide blast: venus hub LLMMSG_EDGE_BEARER env + EVERY migrated agent .llmmsg-env (LLMMSG_HUB_BEARER, ~26) + cdw service env + possibly Caddy edge config. Method: dual-bearer grace (zero-outage) preferred over coordinated bounce. Owner pm-llmmsgsrv-cc coordinating; hub-llmmsgsrv hub-code, nw-whey .llmmsg-env sweep, nw-venus venus-host exec, coder-chatduo cdw.

MSG-40 llmmsg-srv Done high

Spurious unread-poke loop: read_unread cursor-ack is fire-and-forget (race) + drain-on-other-tools acks only on next poll + poker lacks debounce/idle-gate

MSG-35 llmmsg-srv Backlog high

VENUSINF cutover-prereq: add LLMMSG_HUB_BEARER Authorization header to llmmsg-bootstrap-session.sh (/register + /aro/join curls 401 against bearer-gated venus hub; no-op when unset = additively safe)

MSG-34 llmmsg-srv Done high

init-db.sh drift: stale messages schema (generated tag + phantom cols) contradicts hub.mjs self-create / live DB - reconcile or demote

MSG-32 llmmsg-srv Backlog high

memory-lint.sh: refuse implicit host-wide scan as push gate (require explicit scope; only cron sweeps host-wide)

MSG-31 llmmsg-srv Done high

VENUSINF: venus infrastructure migration coordination (Phase 0-3)

MSG-30 llmmsg-srv Done high

Hub control-verb /setpm <aro> <agent>: Elazar self-service PM reassignment from cdw chat (gated sender==elazar, roster-validated)

MSG-44 llmmsg-srv Done high

Elazar DM-guard (reject-v1): send-time reject of untagged DMs to Elazar + silent dm_guard_rejects counter + KPI line + kill-switch; bundle cursor-lag shim fix same deploy. Spec: docs/superpowers/specs/2026-06-12-elazar-dm-guard-design.md

MSG-28 llmmsg-srv Done high

cc-context-monitor.sh: redirect send target OFF elazar-the-user-human-llmmsg-srv to the host nw relay (nw-<host>-cc). ~2650 untagged DMs to Elazar = his #1 inbox clutter; DM-guard MSG-28 will drop them once enforced. Fix canonical script send-call (host-parameterized); nw-venus-cc + nw-lezama-cc pull to their host copies. Elazar approved 2026-06-12.

MSG-29 llmmsg-srv Done high

VENUSINF-5: public cdw URL (cdw-t.pensanta.com) - native venus cdw deploy + Caddy edge w/ human-auth, replacing Tailscale-only :9704

MSG-41 llmmsg-srv Done high

Schema drift: persist messages.expects_reply + roster.role; self-healing view-migration on hub startup

MSG-27 llmmsg-srv Done high

Human/spectator client silently stripped from AROs by pruneStale on presence lapse - no rejoin path, PM ARO replies stop reaching Elazar

MSG-20 llmmsg-srv Done high

ARO fan-out default-deny: allowlist gate at /send aro-expansion (Elazar-managed)

MSG-17 llmmsg-srv Done high

Shim/hub: auto re-register on reconnect after tunnel blip (roster-drop-until-manual-rrll)

MSG-16 llmmsg-srv Done high

CC idle/launch auto-drain: unread-gated send-keys poke + bootstrap unread-reminder hook (CC-only, Codex auto-excluded via cmd!=claude guard)

MSG-15 llmmsg-srv Done high

ccs.sh:183 launcher gate fix: swap --dangerously-load-development-channels -> --channels server:KEY so team-launch needs no per-agent gate-accept + no manual rrll

MSG-14 llmmsg-srv Done high

Make context-budget nag idempotent: stop re-nagging every turn + stop stacking /compact crons after compact

MSG-12 llmmsg-srv Backlog high

Codex receive-bridge: sidecar tmux-poke so Codex agents auto-drain llmmsg unread (no live push)

MSG-10 llmmsg-srv Backlog high

└─ HARD PREREQ: derive + test a Codex-specific ready-prompt regex for idle-gating (CC matcher will NOT transfer; wrong matcher = corrupted-buffer poke). No send-keys goes live until validated.

MSG-11 llmmsg-srv Backlog high

Hub command /audit_cli: Elazar-only, sends channel-discipline self-audit prompt to last-messaged agent in the ARO

MSG-229 llmmsg-srv Done high

EFFAUDIT: 2026-07-02 fleet efficiency audit (Elazar brainstorm bs-mr334l5yybu) - dead tunnels/ZT/whey-pointers/keep-alives purge + hub/CDW micro-optimizations

MSG-232 llmmsg-srv Done high

└─ whey: delete dead reverse-tunnel units llmmsg-lezama-tunnel.service + llmmsg-venus-hub-localfwd.service (disabled/inactive, superseded by direct HTTPS) + orphaned llmmsg-lezama-zombie-sweep.sh if unreferenced

MSG-233 llmmsg-srv Done high

└─ DECISION(Elazar): retire whey<->lezama L3 tunnel (lezama-tun.service) + whey-vpn-keepalive? Elazar stated nothing whey<->lezama is needed; keepalive also heals GCABA VPN

MSG-244 llmmsg-srv Done high

└─ lezama: tear down dead llmmsg-hub-tunnel.service (ssh -L 9703 to venus; direct HTTPS is live path)

MSG-243 llmmsg-srv Done high

└─ whey: remove dead lezama-watchdog trio (llmmsg-lezama-watchdog svc+timer, supervisor svc+timer, alert svc) + backing scripts lezama-watchdog.sh/lezama-zombie-fix.sh - PM authorizes (llmmsg lane), execution delegated

MSG-234 llmmsg-srv Done high

└─ whey+lezama: retire lezama-tun L3 tunnel both sides (whey initiator + lezama /etc/systemd/system/lezama-tun.service; coordinate with nw-lezama-cc) per Elazar decision

MSG-246 llmmsg-srv Done high

└─ sh.git: ZT dead-code sweep - llmmsg-doctor.sh zerotier-cli + 172.27.* branch, whey/lezama daemon-probe ZT branches, ccs.sh ZT-fallback hint + stale autossh-watchdog comment

MSG-236 llmmsg-srv Done

└─ whey: retire stale llmmsg-srv.service unit (hub moved to venus) + purge dangling llmmsg-zombie-ca-detector.timer

MSG-235 llmmsg-srv Done

└─ hub.mjs: fix HOST_GUESS map (pm/coder-llmmsgsrv + coder-chatduo now on venus) + drop legacy whey aro_config seed tiers

MSG-238 llmmsg-srv Done

└─ venus: purge zerotier-one package (unit disabled but package installed; ZT retired fleet-wide)

MSG-242 llmmsg-srv Done

└─ venus: retire claude-backup.timer (redundant vs venus-state-backup-daily)

MSG-240 llmmsg-srv Done

└─ CDW: consolidate 4x60s client intervals into one 60s /api/bootstrap tick + strip dead bearerless-whey-hub fallback in server.mjs (coder-llmmsgsrv-cc adds hub-side snapshot endpoint if needed)

MSG-237 llmmsg-srv Done

└─ whey: retire llmmsg-whey-daemon-probe wholesale - service+timer+/etc registry (nw-whey) + remove llmmsg-whey-daemon-probe.sh from sh.git (bin-whey); entire watch-set is dead, timer already inactive - PM approved

MSG-245 llmmsg-srv Done

└─ whey: constrain whey-vpn-keepalive.timer to business hours (Mon-Fri daytime) per Elazar - convenience reconnect only

MSG-247 llmmsg-srv Done

└─ venus: stretch llmmsg-reconcile.timer 10min->30min (safety-net only) - approved by PM

MSG-241 llmmsg-srv Done low

└─ docs: mark zt_* status-probe fields deprecated (keep columns for history)

MSG-239 llmmsg-srv Done low

Hub bug: status sender-map hijacks targeted scrp-* DMs. scrp-memsweep-venus matches STATUS_EMITTER_RE (hub.mjs:1815) so a deliberate kind=dm to a specific agent (nw-venus-cc) gets origin_aro stamped aro:hosts-status (1878) + recipients overwritten to the room's 3 nw members (hybrid block 1964-1967). Fix: skip the smap stamp+hybrid overwrite when the send is a deliberate DM to a single explicitly-addressed registered agent (else-branch recipients=[to] at 1937-1940). Keep smap routing for to=all/aro:hosts-status/Elazar-catchall paths (fire-and-forget telemetry). Verify: memsweep DM to nw-venus-cc delivers to ONLY nw-venus-cc; a hostmon-style to=all status still lanes to hosts-status. Bounce coordinated via me (pm).

MSG-254 llmmsg-srv Done high

Hub SIGTERM shutdown stalls to SIGKILL with long-poll feature (regression from MSG-251). drainLongpolls() resolves held polls but server.close() callback only fires once ALL sockets end incl idle keep-alives, so 08:43 bounce hit systemd stop-sigterm timeout -> 4 procs force-killed (07:05 pre-251 bounce was SIGTERM->Stopped same second). Fix ready uncommitted: 1s fallback timer -> server.closeAllConnections() (Node 18.2+, ok on v24) forces shutdown ~1s regardless of open conns. Verify: next bounce journalctl shows clean SIGTERM->Stopped, no 'stop-sigterm timed out. Killing.'

MSG-255 llmmsg-srv Done high

ccs.sh: persisted LLMMSG_AGENT in shared per-cwd .llmmsg-env overrides .agent-name — cross-agent launch from same cwd poisons resident agent identity

MSG-84 llmmsg-srv Done high

MCP shim identity-resolution hardening (surfaced by ayudarg pm split: session sent as pmmain-ayudarg-cc despite LLMMSG_AGENT=pm-ayudarg-cc). Two defects in llmmsg-srv-mcp.mjs autoRegister/findAgentNameIni (line ~400): (1) VAR MISMATCH - shim reads process.env.LLMMSG_AGENT_NAME, but ccs.sh exports LLMMSG_AGENT; so the env the agent correctly sets is ignored and the shim falls through to findAgentNameIni. Fix: read LLMMSG_AGENT (align with ccs.sh) as the primary source, same as the MCP register tool honors. (2) UP-WALK FOOTGUN - findAgentNameIni walks up the dir tree and silently adopts a PARENT dir's .agent-name that names a DIFFERENT agent (ayudarg-com-ar/.agent-name cc=pmmain-ayudarg-cc) when the agent's own local .agent-name is absent/quarantined. Fix: stop the walk at the agent-folder boundary, or refuse a parent .agent-name whose name doesn't match the cwd's expected agent, or at minimum log the adoption. Net: env-honored identity must win over an ancestor file. Verify: a session with LLMMSG_AGENT set + no local .agent-name registers+sends under LLMMSG_AGENT, never an ancestor name.

MSG-256 llmmsg-srv Done high

applog-listen hub-eviction recovery: auto re-registration (periodic 5min + 400-triggered immediate). Hub restart evicts listener from roster, re-enqueue loops on 400 until manual bounce. Fix once, redeploy venus/mars/pluto. Proof: hub restart then error delivers real-time w/o manual restart

MSG-82 llmmsg-srv Done high

Bug: PM kind=brainstorm in active ARO opens sibling session instead of being rejected

MSG-71 llmmsg-srv Done high

Whey host-plane DM-leg gaps: clamav EnvironmentFile+ORIGIN_ARO, context-monitor ORIGIN_ARO+script rename, db-size-monitor ORIGIN_ARO

MSG-81 llmmsg-srv Done high

ACK_OPENER_RE gate and kpi-coach receipt exemption disagree

MSG-288 llmmsg-srv In progress

llmmsg-reconcile.sh: populate detail (RECONCILE_NOTE) + name agent in invoked_by

MSG-291 llmmsg-srv Backlog

agent-sleep.sh: bind exit consent to session identity, not just ack freshness

MSG-290 llmmsg-srv In progress

Hub: widen CONTACT_ALIAS to an exact-match alias set for the human (8 senders/7d fail to reach him)

MSG-281 llmmsg-srv Canceled

kpi-coach rubric: Rule 9 to cover lock TAKEN/RELEASED banners + N-separate-DM fanout as a structural-fanout sub-case

MSG-283 llmmsg-srv Canceled

kpi-coach rubric: cover lock banners + N-separate-DM fanout

MSG-287 llmmsg-srv Backlog

Hub: generalise rail-sender prune exemption from name regex to push-only-producer property (held diff, awaiting audit)

MSG-280 llmmsg-srv Backlog

Rule 3 silence-default violations

MSG-278 llmmsg-srv Backlog

Rule 9 dossier-dump-inline detection

MSG-277 llmmsg-srv Backlog

cc-* noncanon-sender catcher: verify in-wild, then migrate cc-context-monitor-* to canonical scrp-<name>-<host>

MSG-271 llmmsg-srv Backlog

Harden aro retire path to cascade-delete aro_config (no orphan dormancy ghosts)

MSG-266 llmmsg-srv Done

Fleet-wide per-agent auth: hub identity is self-asserted on the shared edge bearer

MSG-263 llmmsg-srv Backlog

cc-context-monitor compact half - wire host-side tmux send-keys auto-compact for idle over-cap sessions, after the one-session verification test

MSG-122 llmmsg-srv Backlog

Set up SMTP (msmtp) on venus for fleet-context-monitor email reports

MSG-121 llmmsg-srv Canceled

harden llmmsg-lezama-watchdog: self-heal + failure alert

MSG-148 llmmsg-srv Done

hub-resident cross-project WI board: add cross_wi table + MCP wi_add/wi_close/wi_ls/wi_show/wi_event tools. Replaces per-host bwi for cross-project items (mars/pluto/venus/evolutiva). 3-PM consensus pm-mars-29395 / pluto-29405 / venus-29411; Elazar greenlight elazar-…-29506 Q2. Owner: llmmsg-srv-cc-w.

MSG-120 llmmsg-srv Backlog

chat-duo timestamp display drops date - stale msgs read as today

MSG-147 llmmsg-srv Backlog

chat-duo PM-resolver routes PM-addressed brainstorm to wrong agent

MSG-146 llmmsg-srv Canceled

hub /protocol + /protocol_version endpoints: serve docs/llmmsg-protocol.md as canonical (sha256[0..8] version)

MSG-144 llmmsg-srv Done

ccnewnohistory.sh + ccs-tmux.sh banner: replace hardcoded STACK_DESCR cosmetic literals with actual resolved values (same fix as ccs.sh BWI #520 — _resolve_hub_url, LLMMSG_MCP_KEY var, hostname)

MSG-143 llmmsg-srv Done

ccs.sh banner: replace hardcoded 'hub http://127.0.0.1:9703' display string with actual $LLMMSG_HUB_URL value (resolved via same precedence as shim: env > legacy SRV_HOST/_PORT > default). Show what's really being used so misconfig is visible at launch.

MSG-142 llmmsg-srv Done

bootstrap.sh default URL alignment + fleet distribution: change HUB_URL default in /opt/llmmsg-srv/scripts/llmmsg-bootstrap-session.sh:8 from 127.0.0.1:9703 to llmmsg-hub.pensanta.com:9703 (match shim default), bump version, then rsync to venus + lezama. Elazar approved all 2026-05-23-01:13.

MSG-141 llmmsg-srv Done

Venus per-agent memory sweep: grep ~/.claude/projects/*/memory/*.md for retired names llmmsg-srv-ca and llmmsg-srv-cc (WI 471 cleanup gap); update refs to hub-llmmsgsrv-cc or remove. Caused coder-mars-cc to suggest 'ask llmmsg-srv-ca' as recovery path 2026-05-23. Lezama same sweep if accessible.

MSG-140 llmmsg-srv Done

hub nudge to drive eq adoption: when an agent DMs Elazar a prose blocking-question and hasn't filed a matching eq, hub nudges sender to use eq_add (sibling to reply-nudger/idle-alert; conservative heuristic; env-disable flag)

MSG-192 llmmsg-srv Done

Roll v2.5.4+ shim to venus+lezama: git pull on /opt/llmmsg-srv on each host so new hardcoded LLMMSG_HUB_URL default (llmmsg-hub.pensanta.com:9703 per commit 8e1faa5) is live; agents pick up on next relaunch

MSG-138 llmmsg-srv Done

bootstrap.sh: LOUD recovery-hint on ECONNREFUSED — print paste-able LLMMSG_HUB_URL guidance to stderr above CC prompt when /register fails to connect

MSG-137 llmmsg-srv Done

ccs.sh:113 cleanup: drop post-/compact 're-register + re-join AROs' instruction from --append-system-prompt; both layers now redundant (hook + shim auto-register from BWI 513). Distribute to lezama+venus after.

MSG-136 llmmsg-srv Done

Move /opt/llmmsg-srv/scripts/lib/{resolve-agent-name,resolve-aros}.sh into ~/.local/bin/ (sh.git) so launcher libs sync with consumers across whey/lezama/venus

MSG-133 llmmsg-srv Done

Retired agent names keep re-registering: stale llmmsg-srv-cc still online + ARO member after WI 471 rename to hub-llmmsgsrv-cc; bootstrap hook re-registers it every prompt

MSG-132 llmmsg-srv Done

chat-duo a) drop agent name from window subtitle + version text 1pt larger b) re-join saved AROs on launch (bootstrap aro discovery broken: /online no longer returns aros)

MSG-129 llmmsg-srv Done

aro_config caller field unauthenticated - light-scope hardening

MSG-145 llmmsg-srv Backlog

Brainstorm: connect lezama agents to whey's llmmsg-srv hub

MSG-112 llmmsg-srv Backlog

Next.js chat client to supersede chat-duo GTK + chat-duo-web (brainstorm item 4): node service on whey, Tailscale-only, native Pending tabs. Needs design brainstorm->spec->plan.

MSG-127 llmmsg-srv Backlog

chat-duo side of always-a-PM (brainstorm items 1+7): drop client-side PM resolution + aro_config write, send to=pm:X, render resolved_pm in bubble, queued=true inline confirmation

MSG-126 llmmsg-srv Done ↳ OPS-54

chat-duo UX batch (brainstorm items 3/5/6): ARO member expander in Rooms list, remove leave-ARO trash icon (gui.py:562), toast->inline system message

MSG-125 llmmsg-srv Done

MCP shim: add aro_list_all tool (fleet-wide ARO discovery)

MSG-173 llmmsg-srv Done

Add PM marker to ARO member list in chat-duo Directory pane

MSG-113 llmmsg-srv Done

Durable GC for stale bridge registrations (TTL prune) - no more retired-codex corpses in registrations.json

MSG-221 llmmsg-srv Deferred

gitmerge.sh diverged-branch newest-wins auto-adds untracked files, defeats gitpush --only strict-staging

MSG-216 llmmsg-srv Backlog

Push llmmsg protocol mechanics into MCP send tool + hub (shrink model-held context)

MSG-209 llmmsg-srv Backlog

lezama single-path fragility: all 5435 probes since May23 are public-dns with zt_whey_visible=0 (ZeroTier fallback never worked); make ZT a real 2nd route + fix phantom ssh_r_active self-report

MSG-205 llmmsg-srv Backlog ↳ OPS-80

lezama host-dark alert: watchdog fires notify-elazar+eq after 3 consecutive 'unreachable' skips (~15min), instead of silently skipping forever

MSG-204 llmmsg-srv Backlog ↳ OPS-80

Consolidate agent-ops/context-hygiene ARO: 10-nightwatch canonical (add nw-lezama+support), agent-maintainer = tooling/ownership; no new aro:agent-hygiene

MSG-198 llmmsg-srv Done

/loop skill self-exports LLMMSG_AUTONOMOUS=1 on entry (so L1 hook branches correctly inside /loop)

MSG-196 llmmsg-srv Backlog

Hub command parser false-positives: any message starting with / (e.g. /home/rob/...) triggers 'wrong command'. Fix: only parse as command if token after / matches a known verb (setpm|makepm|close|skip|ignore|unignore|aro_allow|breaker|help).

MSG-108 llmmsg-srv Done

cdw PWA: make chat-duo-web installable (manifest+icons+service worker, Add-to-Home-Screen)

MSG-46 llmmsg-srv Backlog

v_large_aro_content_24h view: add recipient LIKE 'aro:%' filter so DMs with origin_aro carry-through are not counted as ARO fan-outs

MSG-228 llmmsg-srv Backlog

hub STALE_TTL_S=600s < monitor timer interval 15min: peer watchdog probe_ts never updates, false DOWN alerts

MSG-231 llmmsg-srv Done

Brainstorm sessions follow speaking-order protocol end-to-end (cdw+hub) + coach violators + terse AI-shorthand brainstorm protocol in llmmsg-protocol.md

MSG-48 llmmsg-srv Done

Agent color+emoji recognition (cdw + hub): role-color taxonomy + override store

MSG-33 llmmsg-srv Done

Hub WI#635 catch-all: unrouted private DM-to-Elazar gets recipients-replaced with aro:whey-status members (hub.mjs L700-703) = latent leak if any non-Elazar watcher joins whey-status; decouple unrouted-catch-all from smap fan-out (unrouted stays direct+lane-tagged, only status-emitters fan)

MSG-7 llmmsg-srv Done

ARO display-metadata: sort_order + emoji on aro_config (/sort + /emoji, web sidebar)

MSG-8 llmmsg-srv Done

venus /opt/llmmsg-srv is NOT a git checkout - no sync path for maintainer pushes (forces manual /gdrive/temp hops; v1.16 bootstrap had to be hand-installed). Make it a proper git checkout of origin/main like lezama (project_lezama_code_drift) so future pushes land via git pull. Care: venus dir has live local files (.agent-name, service config) - clone-in-place or backup+clone, don't clobber runtime config.

MSG-9 llmmsg-srv Backlog

Unknown /command errors back to sender (not silent-send); usage-error on malformed known verb

MSG-49 llmmsg-srv Backlog

Triage edge LLMMSG_HUB_BEARER rotation: exposed on GitHub via api-images repo (NOT llmmsg-only exposure, so no-rotate rule does not apply)

MSG-51 llmmsg-srv Backlog

hub.mjs latent SQLITE_ERROR: 'no such column: ""' at Database.prepare (seen 00:47:15 pre-restart). Route interpolates empty string into query as = "" (SQLite parses "" as column id). Find the unparameterized query, convert to bound params. Route-triggered, not fixed by restart. Also tidy hub.mjs:1007 error string to match widened regex.

MSG-23 llmmsg-srv Backlog

hub.mjs:1606 cold-start announce stops fanning to Elazar's inbox (team-internal event noise); hub keeps its own fixed sender llmmsg-srv-hub (exempt from scrp- per convention). Part of scrp- sender-naming rollout (agent-conventions.md, Elazar 2026-06-10)

MSG-21 llmmsg-srv Done

hub.mjs:574 isValidAgentName widen ^[a-z0-9][a-z0-9_-]{1,63}$ to allow _ in scrp- sender ids (OPS-13 word-joiner grammar); rides MSG-20/21 batch+restart; verified no _-sensitive hub routing (nw-whey). Blocks bin-whey errscan rename until live.

MSG-22 llmmsg-srv Done

retired_aros tombstone gate: stop deleted AROs resurrecting via stale .aro bootstrap rejoins. Table retired_aros(aro PK, retired_at, retired_by); gate in /aro/join returns aro_retired before INSERT; POST /aro_retire + GET /aro_retire_ls (Elazar-only auth, mirrors /aro_allow); CLI aro-retire.sh; schema in init-db.sh + hub.mjs migration. Migration seeds the 7 dead -core/-small names. Un-retire via action=remove (reversible). Rides next restart. Durable fix for MSG-24 resurrection whack-a-mole.

MSG-25 llmmsg-srv Done

eq stale-removal: one-click dismiss/stale in chat-duo Pending pane + auto-stale sweep (auto-dismiss when ref_bwi closes / N-day age)

MSG-19 llmmsg-srv Done

Retire -core/-small AROs fleet-wide (Elazar 2026-06-10): DELETED all 7 (llmmsg-srv-engineering-core, mars-core, venus-core/-small, pluto-core/-small, mba-l-small) from aros (19 rows) + aro_config (8, incl orphan mars-small). Unanimous PM consent, zero deps. Already inert via MSG-17 default-deny (token win banked); deletion=hygiene. OPEN: (1) per-project .aro scrubs to prevent bootstrap resurrection - our .aro done, mars/venus/pluto/mba-l notified (pluto acked); (2) chat-duo-web 2-tier collapse (Ctrl+Enter -core lane dead) - pending Elazar yes, owner coder-chatduo-cc ~20min.

MSG-24 llmmsg-srv Done

chat-duo-web: auto-expire/hide eq entries when no longer relevant (stale Elazar questions clutter the Pending panel — e.g. the lezama cert/kernel eq Elazar just flagged 'this is old'). Hook to wi doctor's >7d Elazar-Q drift + an age TTL or resolve-on-supersede.

MSG-18 llmmsg-srv Done

/setpm regex: tolerate optional space after slash ('/ setpm') - human typo-forgiveness on the cdw-facing command

MSG-45 llmmsg-srv Done

Post-migration team restructure: PM=single always-on front door + retire support + rename hub-llmmsgsrv-cc to coder-llmmsgsrv-cc (ARO-less on-demand)

MSG-52 llmmsg-srv Done

hub /send + MCP shim: improve aro_fanout_denied error message (explain reason, redirect to DM or multi-dest)

MSG-57 llmmsg-srv Done

Bake llmmsg-srv MCP into canonical host setup — remote hosts need global ~/.claude.json mcpServers.llmmsg-srv (LLMMSG_HUB_URL=https://llmmsg-hub.pensanta.com) at provisioning; audit lezama + add to nw-* onboarding / agentteamlaunch.sh

MSG-85 llmmsg-srv Done

PM-mediated brainstorm: CDW sends full context to PM only; PM summarizes and opens ARO brainstorm with lean opener (~300 chars)

MSG-103 llmmsg-srv Done

Hub: ARO with all members offline should show last PM as 'AgentName (disconnected)' instead of blank/missing PM — reflects reality for succession-failed AROs

MSG-94 llmmsg-srv Done

Hub: detect + block redundant per-member DMs when ARO fan-out should be used (same/similar body to N ARO members in short window → coach to use aro:X fan-out)

MSG-104 llmmsg-srv Backlog

Hub: DM agent when auto-elected PM of an ARO ('you are now PM of aro:X') — currently no notification, agents only discover via aro_list or succession announce

MSG-96 llmmsg-srv Done

Hub /close confirmation should be sent to the ARO (not just DM to sender) so all members see the brainstorm is closed

MSG-97 llmmsg-srv Done

reconcile.sh: health probe treats 401 as unreachable — fix to accept 401 as hub-up signal

MSG-105 llmmsg-srv Done

Hub coaching: detect duplicate sends and suggest multi-recipient syntax

MSG-100 llmmsg-srv Done

Hub host-status routing still points at retired per-host aros — repoint STATUS_EMITTER_RE stamp + STATUS_DEFAULT_SINK to aro:hosts-status

MSG-86 llmmsg-srv Done

CDW main window: make message separator more prominent (hard to tell where one message ends and next begins)

MSG-101 llmmsg-srv Done

Consolidate /opt/llmmsg-srv into /opt/llmmsg-srv-venus: move scripts/bridge/agents/chat-duo subdirs, repoint 11 fleet-wide refs (hooks, ccs.sh, services), delete old tree. Supersedes WI-596.

MSG-106 llmmsg-srv Done

Delete aro:mba2-l — hard-delete from aros + tombstone in retired_aros (same pattern as MSG-86)

MSG-87 llmmsg-srv Done

Delete aro:kpi-n-optimization — hard-delete from aros + tombstone in retired_aros

MSG-88 llmmsg-srv Done

MSG-80: /close force:true returns close_quorum when pending turns remain — MCP shim not honoring force flag; force should bypass quorum

MSG-80 llmmsg-srv Done

auto-commit guard: reject staged *.llmmsg-env / bearer-shaped blobs in git add -A paths (systemic root-cause fix)

MSG-110 llmmsg-srv Backlog

KPI report script double-delivers to pm-llmmsgsrv-cc: fan-out to aro:llmmsg-srv-engineering + direct DM — drop the direct DM, ARO fan-out is sufficient

MSG-90 llmmsg-srv Done

Hub idle-reaper false-positives on DM-only lanes: reaper credits only ARO fanout as activity; agents on no-fanout AROs (aro:mars pattern) get reaped despite active DM work. Fix: count outbound DMs to same-ARO members as activity, or add per-ARO exemption flag.

MSG-107 llmmsg-srv Done

Hub brainstorm auto-close: when all turn-order members have taken their turn, hub should auto-close the brainstorm (or DM opener/ARO-PM to close) rather than leaving it open indefinitely

MSG-91 llmmsg-srv Done

Brainstorm tail-prune delivery mode: opt-in per-session flag to stop delivering turns to agents who've already replied (only pending repliers + PM + opener get each turn). Real token saving per session; visibility tradeoff needs Elazar sign-off before implementing.

MSG-102 llmmsg-srv Canceled

sh.git pollution: gitmerge.sh auto-commits untracked pip bins (f2py, numpy-config); gitignore + root guard

MSG-227 llmmsg-srv Done

roster.client_version empty for 31/46 agents - version drift is unmeasurable fleet-wide

MSG-292 llmmsg-srv Backlog low

ACK_OPENER_RE vs kpi-coach receipt exemption: one intent, two definitions, no shared SSOT

MSG-284 llmmsg-srv Canceled low

Author CONTACT_ALIAS spec

MSG-286 llmmsg-srv Backlog low

ayudarg applog rail: check for same cursor-strand defect as mars/venus

MSG-275 llmmsg-srv Backlog low

Migration loop swallows all errors, not just duplicate-column

MSG-273 llmmsg-srv Backlog low

SILENCE_SKIP_AGENTS hardcoded allowlist has rotted (missing scrp-*/claude-global)

MSG-272 llmmsg-srv Backlog low

Split client tooling out of /opt so hub.mjs stops landing on client hosts

MSG-262 llmmsg-srv Backlog low

Document to=pm:X send target + hub PM election/pending-queue in README.md protocol section (shipped in 5741b17, README not yet updated)

MSG-128 llmmsg-srv Backlog low

chat-duo: rebuild Elazar Pending sidebar pane properly (removed v1.19.3)

MSG-170 llmmsg-srv Done low

Hub cleanup traps (post-#594): systemd unit sets LLMMSG_SRV_DB but code reads LLMMSG_DB (no-op env var); stale llmmsg.sqlite + init-db.sh schema conflicts with live v2.sqlite

MSG-200 llmmsg-srv Backlog low

lezama out-of-band reset: a dead kernel cannot self-recover; scope IPMI/iDRAC vs smart-PDU for remote host-dark power-cycle (blocked on Elazar: does box have IPMI?)

MSG-206 llmmsg-srv Backlog low ↳ OPS-80

Refresh venus /opt/llmmsg-srv flat copy from whey (hub.mjs+shim) - stale May-18 scp caused misdiagnosis; do NOT delete (venus MCP shim runs from it)

MSG-199 llmmsg-srv Canceled low

Shim env compat: read LLMMSG_SRV_HOST/_PORT as fallback for LLMMSG_HUB_URL — self-heals .mcp.json files using the SRV_* naming convention

MSG-139 llmmsg-srv Done low

TESTPROBE delete me

MSG-2 llmmsg-srv Canceled low

host_probes retention: prune rows >30d (table grows ~2.5k/day unbounded, 32.5k rows, v2.sqlite bloat driver)

MSG-3 llmmsg-srv Canceled low

cdw: Caddy flush_interval -1 for SSE reconnecting issue (Caddyfile)

MSG-73 llmmsg-srv Backlog low

Hub-side script-rename impact confirm: nothing keys off old cc-context-monitor-<host> sender name (roster.host backfill, /fleet_health, routing) after rename to script-ctxmonitor-<host>

MSG-53 llmmsg-srv Done low

gitpush.sh --only rejects staged deletions (git rm); blocks tracked-file removal

MSG-226 llmmsg-srv Done low

host_probes retention: prune rows >30d (table grows ~2.5k/day unbounded, 32.5k rows, v2.sqlite bloat driver)

MSG-1 llmmsg-srv Canceled low

MSG-30 lezama: coordinated full-tree pull-forward (shim v2.9.47 + bootstrap v1.19 + package.json, atomic) - replaces nw-lezama hand-patch, un-dirties staged v1.18 bootstrap

MSG-47 llmmsg-srv Backlog low

llmmsg-kpi-report.sh: strip dead -small ARO branch from §PM .aro action list (lanes retired MSG-17)

MSG-26 llmmsg-srv Backlog low

context-monitor: skip peer-DOWN alert if probe_ts predates watcher's own last-run interval (false alarm after watcher idle gap)

MSG-230 llmmsg-srv Done low

Rationalize errscan-vs-applog overlap fleet-wide (both = error->PM-DM; applog covers all 3 proj+now green, errscan mars-only, mars DOUBLE-covered) - decide consolidate-not-expand; needs PM/Elazar division-of-labor call

MSG-43 llmmsg-srv Deferred low

dm-* send-authorization: reject non-owner/non-host-nw/non-Elazar sends to or origin_aro'd-as aro:dm-*

MSG-50 llmmsg-srv Backlog low

rule-21 standalone-ack gate misses 'ack <noun>' shape

MSG-276 llmmsg-srv Backlog someday

PM retirement doesn't clear aros.pm_agent seat

MSG-274 llmmsg-srv Backlog someday