refactor(server): split server.rs into concern modules

[Stephen Belanger (Qard)]

Summary

Based on main now that #135 has merged.

server.rs held about 2,700 lines: the Daemon struct and every subsystem that operates on it. The struct, ServeOptions, the auth traits, run and the serve entry points stay in server/mod.rs (344 lines). Each subsystem moves to its own module with its own impl Daemon block:

Module	Responsibility
auth.rs	resolving a route to a backend lease, refreshing it before flushes, auth.diagnose
sessions.rs	DeliveryKey, session actors, journal writers, per-session locks, retirement
ingress.rs	the capture queue, its worker, overflow recovery, the pending-session reconciler
correlation_store.rs	automatic parent correlation and its persisted state and parent snapshots
recovery.rs	startup replay of journals the previous daemon didn't finish
rpc.rs	the listener, request handling, status
maintenance.rs	retention GC, idle-session reaping, the idle watchdog, shutdown drain
managed_run.rs	tracking which sessions a managed child produced and flushing them
claude_transcripts.rs	Claude Code's transcript poller, which now lives outside the generic daemon code

Behaviour

None. The code moves verbatim:

• Items that are now called across files become pub(super).
• Struct fields read across files become pub(super).
• Otherwise only rustfmt re-wrapped some longer signatures.

I checked this mechanically: with pub(super) stripped, the line multisets of the old and new files differ only by those re-wrapped signatures, the new module docs, and the use super::* / impl Daemon { lines.

Submodules share the parent's imports through use super::*, and mod.rs glob-imports each submodule. This keeps the PR a pure move. Tightening those imports can come later, once later PRs have moved the per-agent special cases out of the daemon.

The lock-ordering comments stay attached to the code they describe.

Testing

• cargo clippy --all-features --all-targets -D warnings is clean.
• cargo test --all-features --no-fail-fast: everything passes except trace_runtime::tests::doctor_reports_a_daemon_that_{cannot_authenticate_the_route,resolves_other_credentials}, which fail the same way on main in my local environment.

Conflicts

#132 and #130 both edit server.rs. Whichever lands second needs a rebase. Hunks in those PRs map onto the table above.

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-06T12:29:11.556149Z	eec2bf7	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "Codex (@codex) review" or "Codex (@codex) security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.