feat: auto-deploy guided servers on run registration

platform/service/control.go

@@ -110,6 +110,9 @@ func (svc *CoreService) RegisterRunHello(hello domain.RunControlHello) (domain.R
 		return domain.RunControlHelloResult{}, err
 	}
 	svc.runSessions[hello.RunEndpointID] = session
+	if err := svc.queueManagedGuidedDeploymentAfterRegistration(hello); err != nil {
+		return domain.RunControlHelloResult{}, err
+	}
 	featureFlags := []string{"control.hello", "control.heartbeat", "signed-envelope.v1.optional"}
 	if session.RequireSignedRequests {
 		featureFlags[2] = "signed-envelope.v1.required"
@@ -125,6 +128,28 @@ func (svc *CoreService) RegisterRunHello(hello domain.RunControlHello) (domain.R
 	}), nil
 }
 
+// queueManagedGuidedDeploymentAfterRegistration advances only a newly-created,
+// target-bound guided server. Selecting guided-install is the owner's prior
+// authorization for this bounded write; reconnects remain idempotent.
+func (svc *CoreService) queueManagedGuidedDeploymentAfterRegistration(hello domain.RunControlHello) error {
+	if hello.ComponentKind != domain.DistributionComponentRun || strings.TrimSpace(hello.ServerInstanceID) == "" {
+		return nil
+	}
+	instance, err := svc.store.ServerInstances().Get(hello.ServerInstanceID)
+	if err != nil {
+		return err
+	}
+	if strings.TrimSpace(instance.DeploymentTargetID) == "" || instance.RunEndpointID != hello.RunEndpointID || instance.State != domain.ServerInstanceStateDraft || instance.Deployment.Mode != domain.ServerDeploymentModeGuided {
+		return nil
+	}
+	_, err = svc.deployServerInstance(domain.ServerLifecycleCommand{
+		ServerInstanceID:      instance.ID,
+		ExpectedConfigVersion: instance.ConfigVersion,
+		IdempotencyKey:        fmt.Sprintf("managed-deploy:%s:r%d", instance.ID, instance.Deployment.Revision),
+	})
+	return err
+}
+
 func (svc *CoreService) validateDedicatedRunHello(hello domain.RunControlHello) error {
 	if hello.ComponentKind != domain.DistributionComponentRun {
 		return validationError("component-authenticated run hello must use the run component")