delimit-cli 4.5.8 → 4.5.10

package/CHANGELOG.md

@@ -219,7 +219,7 @@ Real-world specs can ship malformed shapes. The diff engine now defends against
 
 ### Fixed
 - **Exit-shim counter undercounting** — previously missed commits outside `SESSION_CWD` and dropped Z-suffixed timestamps; both now captured.
-- **Proprietary path leaks** — sync-gateway.sh EXCLUDE list hardened to keep Jamsons-portfolio-specific files (social.py, social_target.py, inbox_daemon.py, founding_users.py, deliberation.py) out of the npm bundle.
+- **Proprietary path leaks** — sync-gateway.sh EXCLUDE list hardened to keep portfolio-specific files (social.py, social_target.py, inbox_daemon.py, founding_users.py, deliberation.py) out of the npm bundle.
 
 ### Tests
 - Gateway: 163/163 passing on changed-file tests (social.py, social_target.py, supabase_sync).
@@ -610,8 +610,8 @@ Real-world specs can ship malformed shapes. The diff engine now defends against
 - Wire local API server into setup flow (STR-057) (223a647d)
 - release: v3.11.4 — CLAUDE.md auto-update with versioned markers (66db96dd)
 - security: remove infect.js, hardcoded paths, stale shell scripts (ddb2b1a8)
-- security: remove all Jamsons Doctrine references from gateway stubs (1d802a2b)
-- security: remove jamsons adapters from public repo (c976fa8a)
+- security: remove all internal doctrine references from gateway stubs (1d802a2b)
+- security: remove holdco adapters from public repo (c976fa8a)
 - release: v3.11.1 — MCP/AI keywords for npm discoverability (ba984f17)
 - release: v3.11.0 — agent identity, secrets broker, approval gates (78557ea8)
 - update: CLI description to match brand positioning (75ff6842)
@@ -623,7 +623,7 @@ Real-world specs can ship malformed shapes. The diff engine now defends against
 - v3.9.1: download Pro modules from delimit.ai CDN (public URL, no auth needed) (b1462fd4)
 - v3.9.0: Pro source removed from public package — compiled modules download at install (e4fe7baf)
 - v3.8.2: Gemini governance trigger + history scrub (116ffb1a)
-- security: remove node_modules and jamsons adapters from public repo (f67f3b92)
+- security: remove node_modules and holdco adapters from public repo (f67f3b92)
 - v3.8.1: governance trigger in all instruction files + MCP server description (7c525231)
 - v3.7.1: CLI-first deliberation + gateway sync + path cleanup (1555691d)
 - v3.7.0: cross-model positioning + models configure + release sync (4c9cbcb7)
@@ -698,7 +698,7 @@ Real-world specs can ship malformed shapes. The diff engine now defends against
 - **LED-061**: [P0] DomainVested: Consistency audit — verdict/flip/action must agree
 - **LED-062**: [P1] Brand: Add SVG logo to site, favicon, GitHub org avatar, npm
 - **LED-063**: [P0] Governance trigger shipped in npm — instruction files + MCP description
-- **LED-064**: [P0] Security: removed jamsons adapters + node_modules from public repo
+- **LED-064**: [P0] Security: removed holdco adapters + node_modules from public repo
 - **LED-065**: [P0] ChatOps: Build app.delimit.ai into a unified project management interface
 - **LED-066**: [P0] Split repos: free tools public, Pro tools private, npm bundles both
 - **LED-067**: [P0] License: add periodic re-validation (30 day) with 7 day grace period
@@ -1064,7 +1064,7 @@ Real-world specs can ship malformed shapes. The diff engine now defends against
 - GitHub Action smoke test workflow
 
 ### Fixed
-- Gemini deliberation HTTP 400 (ADC credentials + jamsons project)
+- Gemini deliberation HTTP 400 (ADC credentials + project mismatch)
 - Deliberation timeout: parallelized round 1 (46% faster)
 - Sensor dedup: titles include repo/issue to prevent duplicates
 - Test-mode guard prevents ledger pollution from tests

package/gateway/ai/governance.py

@@ -49,7 +49,7 @@ NON_DELEGABLE_OPERATION_CLASSES = frozenset({
     "constitutional_rewrite",  # edits to founder doctrine canon outside managed sections
     "authority_class_expansion",  # adding a new class of tool / agent / gate
     "irreversible_capital_commit",  # capital commitments above non-delegable threshold
-    "venture_kill",          # shutting down a Jamsons venture
+    "venture_kill",          # shutting down an internal venture
     "permission_escalation",  # granting elevated access (sudo, admin, write-as-other)
     "public_truth_claim",    # public statement / marketing assertion outrunning evidence
 })

package/gateway/ai/server.py

@@ -8498,7 +8498,16 @@ def delimit_inbox_daemon(action: str = "status") -> Dict[str, Any]:
         action: 'start' (begin polling), 'stop' (halt polling),
                 'status' (show daemon state, last poll, failures).
     """
-    from ai.inbox_daemon import start_daemon, stop_daemon, get_daemon_status
+    try:
+        from ai.inbox_daemon import start_daemon, stop_daemon, get_daemon_status
+    except (ImportError, ModuleNotFoundError):
+        # LED-1261: backing module is gateway-only (excluded from npm bundle).
+        # Customers calling this get a graceful message instead of a raw traceback.
+        return _with_next_steps("inbox_daemon", {
+            "status": "not_available",
+            "error": "delimit_inbox_daemon is an internal Delimit feature not shipped in the npm bundle.",
+            "hint": "Pro customers interested in inbox automation can contact pro@delimit.ai.",
+        })
 
     if action == "start":
         return _with_next_steps("inbox_daemon", start_daemon())
@@ -8547,11 +8556,19 @@ def delimit_self_repair_daemon(action: str = "status") -> Dict[str, Any]:
                 'status' (running / last_pass / breaches_emitted /
                 consecutive_failures).
     """
-    from ai.self_repair_daemon import (
-        start_daemon as _sr_start,
-        stop_daemon as _sr_stop,
-        get_daemon_status as _sr_status,
-    )
+    try:
+        from ai.self_repair_daemon import (
+            start_daemon as _sr_start,
+            stop_daemon as _sr_stop,
+            get_daemon_status as _sr_status,
+        )
+    except (ImportError, ModuleNotFoundError):
+        # LED-1261: backing module is gateway-only (excluded from npm bundle).
+        return _with_next_steps("self_repair_daemon", {
+            "status": "not_available",
+            "error": "delimit_self_repair_daemon is an internal Delimit feature not shipped in the npm bundle.",
+            "hint": "Pro customers interested in self-repair watcher can contact pro@delimit.ai.",
+        })
 
     if action == "start":
         return _with_next_steps("self_repair_daemon", _sr_start())
@@ -8581,7 +8598,15 @@ def delimit_corp_dashboard() -> Dict[str, Any]:
     {"error": "..."} for that key only and never crashes the whole call.
     Gateway-only — not shipped in the npm bundle.
     """
-    from ai.corp_dashboard import get_corp_dashboard
+    try:
+        from ai.corp_dashboard import get_corp_dashboard
+    except (ImportError, ModuleNotFoundError):
+        # LED-1261: backing module is gateway-only (excluded from npm bundle).
+        return _with_next_steps("corp_dashboard", {
+            "status": "not_available",
+            "error": "delimit_corp_dashboard is an internal Delimit feature not shipped in the npm bundle.",
+            "hint": "Pro customers interested in the corp dashboard surface can contact pro@delimit.ai.",
+        })
     result = get_corp_dashboard()
     return _with_next_steps("corp_dashboard", result)
 

package/gateway/core/contract_ledger.py

@@ -3,7 +3,7 @@ Delimit Contract Ledger
 Reads, validates, and queries the append-only JSONL event ledger.
 Optional SQLite index for fast lookups (never required for CI).
 
-Per Jamsons Doctrine:
+Per Delimit governance principles:
 - Deterministic outputs
 - Append-only artifacts
 - SQLite index is optional, not required for CI

package/gateway/core/dependency_graph.py

@@ -5,7 +5,7 @@ Constructs a deterministic service dependency graph from manifests.
 The graph maps each API/service to its downstream consumers,
 enabling impact analysis when an API contract changes.
 
-Per Jamsons Doctrine:
+Per Delimit governance principles:
 - Deterministic outputs (sorted, reproducible)
 - No telemetry
 - Graceful degradation when manifests are missing

package/gateway/core/dependency_manifest.py

@@ -2,7 +2,7 @@
 Delimit Dependency Manifest
 Parses and validates .delimit/dependencies.yaml service dependency declarations.
 
-Per Jamsons Doctrine:
+Per Delimit governance principles:
 - Deterministic outputs
 - No credential discovery
 - No telemetry

package/gateway/core/event_backbone.py

@@ -3,7 +3,7 @@ Delimit Event Backbone
 Constructs ledger events, generates SHA-256 hashes, links hash chains,
 and appends to the append-only JSONL ledger.
 
-Per Jamsons Doctrine:
+Per Delimit governance principles:
 - Deterministic outputs
 - Append-only artifacts
 - Fail-closed CI behavior (ledger failures never affect CI)
@@ -199,7 +199,7 @@ class EventBackbone:
         This is the primary API for event generation. It is best-effort:
         if the ledger write fails, the event is still returned but not persisted.
 
-        CRITICAL: This method NEVER raises exceptions. Per Jamsons Doctrine,
+        CRITICAL: This method NEVER raises exceptions. Per Delimit doctrine,
         ledger failures must not affect CI pass/fail outcome.
 
         Returns:

package/gateway/core/event_schema.py

@@ -1,7 +1,7 @@
 """
 Delimit Event Schema
 Canonical event schema for API contract evolution tracking.
-Deterministic validation and serialization per Jamsons Doctrine.
+Deterministic validation and serialization per Delimit doctrine.
 """
 
 import hashlib

package/gateway/core/impact_analyzer.py

@@ -3,7 +3,7 @@ Delimit Impact Analyzer
 Determines downstream consumers affected by an API change
 and produces informational impact summaries for CI output.
 
-Per Jamsons Doctrine:
+Per Delimit governance principles:
 - Impact analysis is INFORMATIONAL ONLY
 - NEVER affects CI pass/fail outcome
 - Deterministic outputs

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "delimit-cli",
   "mcpName": "io.github.delimit-ai/delimit-mcp-server",
-  "version": "4.5.8",
+  "version": "4.5.10",
   "description": "Unify Claude Code, Codex, Cursor, and Gemini CLI with persistent context, governance, and multi-model debate.",
   "main": "index.js",
   "files": [