@adhdev/daemon-core 0.9.82-rc.463 → 0.9.82-rc.464

package/dist/mesh/mesh-events-pending.d.ts

@@ -56,15 +56,16 @@ export interface PendingEventEmitHint {
  * T6 (B3c) enforce switch. When ON, the drain path stops passing an unversioned
  * (v1) or a validation-failing v2 event through to the coordinator — it QUARANTINES
  * it instead (excluded from the delivered batch + WARN + counter), and unicast
- * routing is the only delivery path (there is no v1 broadcast fallback). Off (the
- * default) preserves the accept-and-warn rollout behaviour exactly.
+ * routing is the only delivery path (there is no v1 broadcast fallback). On by
+ * default; set MESH_PROTOCOL_V2_ENFORCE=0/false/off/no to disable and restore the
+ * accept-and-warn rollout behaviour exactly.
  *
- * Per the rollout plan (§1 decision 4): enforce is `MESH_PROTOCOL_V2_ENFORCE` (env)
- * — its activation is a deliberate operational step taken ONLY after daemonBuilds
- * confirms every node emits v2 (§배포 게이트 1 / risk §4). So the code default is
- * OFF; flipping the env back to accept mode is a pure-env rollback (no code change,
- * no data migration — the schema is additive). Read at call time so a test /
- * operator can toggle it without a restart.
+ * Per the rollout plan (§1 decision 4): enforce is `MESH_PROTOCOL_V2_ENFORCE` (env).
+ * Now that every node emits v2 (§배포 게이트 1 / risk §4), the code default is ON —
+ * a manual env injection is no longer required to get enforce behaviour. Rollback to
+ * accept mode is a pure-env step: set `MESH_PROTOCOL_V2_ENFORCE=0` (or `false`/`off`/
+ * `no`) — no code change, no data migration (the schema is additive). Read at call
+ * time so a test / operator can toggle it without a restart.
  *
  * Quarantine (not drop) keeps the loss-free invariant. The DESTRUCTIVE drain has
  * already consumed the event from its store by the time routing runs, so "held

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adhdev/daemon-core",
-  "version": "0.9.82-rc.463",
+  "version": "0.9.82-rc.464",
   "description": "ADHDev daemon core — CDP, IDE detection, providers, command execution",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -47,8 +47,8 @@
   "author": "vilmire",
   "license": "AGPL-3.0-or-later",
   "dependencies": {
-    "@adhdev/mesh-shared": "0.9.82-rc.463",
-    "@adhdev/session-host-core": "0.9.82-rc.463",
+    "@adhdev/mesh-shared": "0.9.82-rc.464",
+    "@adhdev/session-host-core": "0.9.82-rc.464",
     "@agentclientprotocol/sdk": "^0.16.1",
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",

package/src/mesh/mesh-events-pending.ts

@@ -138,15 +138,16 @@ function normalizeCoordinatorDaemonIds(
  * T6 (B3c) enforce switch. When ON, the drain path stops passing an unversioned
  * (v1) or a validation-failing v2 event through to the coordinator — it QUARANTINES
  * it instead (excluded from the delivered batch + WARN + counter), and unicast
- * routing is the only delivery path (there is no v1 broadcast fallback). Off (the
- * default) preserves the accept-and-warn rollout behaviour exactly.
+ * routing is the only delivery path (there is no v1 broadcast fallback). On by
+ * default; set MESH_PROTOCOL_V2_ENFORCE=0/false/off/no to disable and restore the
+ * accept-and-warn rollout behaviour exactly.
  *
- * Per the rollout plan (§1 decision 4): enforce is `MESH_PROTOCOL_V2_ENFORCE` (env)
- * — its activation is a deliberate operational step taken ONLY after daemonBuilds
- * confirms every node emits v2 (§배포 게이트 1 / risk §4). So the code default is
- * OFF; flipping the env back to accept mode is a pure-env rollback (no code change,
- * no data migration — the schema is additive). Read at call time so a test /
- * operator can toggle it without a restart.
+ * Per the rollout plan (§1 decision 4): enforce is `MESH_PROTOCOL_V2_ENFORCE` (env).
+ * Now that every node emits v2 (§배포 게이트 1 / risk §4), the code default is ON —
+ * a manual env injection is no longer required to get enforce behaviour. Rollback to
+ * accept mode is a pure-env step: set `MESH_PROTOCOL_V2_ENFORCE=0` (or `false`/`off`/
+ * `no`) — no code change, no data migration (the schema is additive). Read at call
+ * time so a test / operator can toggle it without a restart.
  *
  * Quarantine (not drop) keeps the loss-free invariant. The DESTRUCTIVE drain has
  * already consumed the event from its store by the time routing runs, so "held
@@ -159,9 +160,9 @@ function normalizeCoordinatorDaemonIds(
  */
 export function isMeshProtocolV2EnforceEnabled(): boolean {
     const raw = readNonEmptyString(process.env.MESH_PROTOCOL_V2_ENFORCE);
-    if (!raw) return false;
+    if (!raw) return true;                      // unset/blank = default ON
     const v = raw.trim().toLowerCase();
-    return v === '1' || v === 'true' || v === 'on' || v === 'yes';
+    return !(v === '0' || v === 'false' || v === 'off' || v === 'no');  // only explicit off = false
 }
 
 /**

package/src/mesh/mesh-reconcile-loop.ts

@@ -294,12 +294,13 @@ export function __resetMeshV2BackstopCountersForTests(): void {
 
 /** Enforce switch mirror (see isMeshProtocolV2EnforceEnabled in mesh-events-pending);
  *  re-read here (not imported) to keep the reconcile loop free of a cross-file coupling
- *  and to read env at fire time. Same truthy vocabulary. */
+ *  and to read env at fire time. On by default; set MESH_PROTOCOL_V2_ENFORCE=0/false/
+ *  off/no to disable. Same vocabulary as the source of truth. */
 function meshProtocolV2EnforceOn(): boolean {
     const raw = process.env.MESH_PROTOCOL_V2_ENFORCE;
-    if (typeof raw !== 'string') return false;
+    if (typeof raw !== 'string' || !raw.trim()) return true;   // unset/blank = default ON
     const v = raw.trim().toLowerCase();
-    return v === '1' || v === 'true' || v === 'on' || v === 'yes';
+    return !(v === '0' || v === 'false' || v === 'off' || v === 'no');
 }
 
 /** Bump a backstop counter and, under enforce, WARN that a last-resort net fired —