instar 1.3.1250 → 1.3.1252

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. package/dist/commands/server.d.ts.map +1 -1
  2. package/dist/commands/server.js +23 -11
  3. package/dist/commands/server.js.map +1 -1
  4. package/dist/core/FrameworkLoginDriver.d.ts +15 -0
  5. package/dist/core/FrameworkLoginDriver.d.ts.map +1 -1
  6. package/dist/core/FrameworkLoginDriver.js +24 -0
  7. package/dist/core/FrameworkLoginDriver.js.map +1 -1
  8. package/dist/core/PostUpdateMigrator.d.ts.map +1 -1
  9. package/dist/core/PostUpdateMigrator.js +24 -0
  10. package/dist/core/PostUpdateMigrator.js.map +1 -1
  11. package/dist/core/WriteDomainRegistry.d.ts.map +1 -1
  12. package/dist/core/WriteDomainRegistry.js +16 -0
  13. package/dist/core/WriteDomainRegistry.js.map +1 -1
  14. package/dist/core/types.d.ts +33 -1
  15. package/dist/core/types.d.ts.map +1 -1
  16. package/dist/core/types.js.map +1 -1
  17. package/dist/data/standards-guard-index.json +2 -2
  18. package/dist/data/standards-guard-index.meta.json +3 -3
  19. package/dist/data/standards-registry.md +37 -37
  20. package/dist/data/standards-registry.meta.json +2 -2
  21. package/dist/scaffold/templates.d.ts +4 -0
  22. package/dist/scaffold/templates.d.ts.map +1 -1
  23. package/dist/scaffold/templates.js +11 -0
  24. package/dist/scaffold/templates.js.map +1 -1
  25. package/dist/scheduler/AgentMdJobLoader.d.ts +4 -0
  26. package/dist/scheduler/AgentMdJobLoader.d.ts.map +1 -1
  27. package/dist/scheduler/AgentMdJobLoader.js +27 -0
  28. package/dist/scheduler/AgentMdJobLoader.js.map +1 -1
  29. package/dist/scheduler/JevJobCompletionAudit.d.ts +164 -0
  30. package/dist/scheduler/JevJobCompletionAudit.d.ts.map +1 -0
  31. package/dist/scheduler/JevJobCompletionAudit.js +595 -0
  32. package/dist/scheduler/JevJobCompletionAudit.js.map +1 -0
  33. package/dist/scheduler/JobScheduler.d.ts +6 -0
  34. package/dist/scheduler/JobScheduler.d.ts.map +1 -1
  35. package/dist/scheduler/JobScheduler.js +47 -0
  36. package/dist/scheduler/JobScheduler.js.map +1 -1
  37. package/dist/server/CapabilityIndex.d.ts.map +1 -1
  38. package/dist/server/CapabilityIndex.js +1 -0
  39. package/dist/server/CapabilityIndex.js.map +1 -1
  40. package/dist/server/routes.d.ts.map +1 -1
  41. package/dist/server/routes.js +22 -0
  42. package/dist/server/routes.js.map +1 -1
  43. package/package.json +1 -1
  44. package/src/data/builtin-manifest.json +64 -64
  45. package/src/data/standards-guard-index.json +2 -2
  46. package/src/data/standards-guard-index.meta.json +3 -3
  47. package/src/data/standards-registry.md +37 -37
  48. package/src/data/standards-registry.meta.json +2 -2
  49. package/src/scaffold/templates/jobs/instar/jev-completion-audit.md +33 -0
  50. package/src/scaffold/templates.ts +12 -0
  51. package/upgrades/{1.3.1250.md → 1.3.1252.md} +71 -0
  52. package/upgrades/side-effects/codex-enroll-device-auth.md +63 -0
  53. package/upgrades/side-effects/jev-job-completion-audit.md +239 -0
@@ -1 +1 @@
1
- {"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAsGA,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAUjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA4BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmI7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAiFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AA0ID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAoDD,+EAA+E;AAC/E,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,IAAI,CAAC,OAAO,2BAA2B,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,IAAI,EACpF,OAAO,EAAE,MAAM,GACd,IAAI,CAEN;AAsrDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CA8yBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4tvBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
1
+ {"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAsGA,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAUjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA4BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmI7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAiFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AA0ID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAoDD,+EAA+E;AAC/E,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,IAAI,CAAC,OAAO,2BAA2B,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,IAAI,EACpF,OAAO,EAAE,MAAM,GACd,IAAI,CAEN;AAsrDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CA8yBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAuuvBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
@@ -7091,6 +7091,28 @@ export async function startServer(options) {
7091
7091
  if (sharedIntelligence) {
7092
7092
  scheduler.setIntelligence(sharedIntelligence);
7093
7093
  }
7094
+ // Jev job-completion audit (dark by default; spec
7095
+ // docs/specs/jev-job-supervision.md). Always constructed so the live
7096
+ // config can switch it on without a restart; capture is inert unless
7097
+ // enabled + a future soakEndsAt + a vault key. Observe-only: records
7098
+ // only, decides nothing.
7099
+ try {
7100
+ const { buildJevJobCompletionAudit } = await import('../scheduler/JevJobCompletionAudit.js');
7101
+ const { getFeatureMetricsRecorder } = await import('../core/CircuitBreakingIntelligenceProvider.js');
7102
+ const { SecretStore } = await import('../core/SecretStore.js');
7103
+ const jevAudit = buildJevJobCompletionAudit({
7104
+ readLiveIntelligence: () => liveConfig.get('intelligence', undefined),
7105
+ bootBlock: config.intelligence?.jevJobCompletionAudit,
7106
+ readSecret: (name) => new SecretStore({ stateDir: config.stateDir, forceFileKey: config.secrets?.forceFileKey }).get(name),
7107
+ stateDir: config.stateDir,
7108
+ metrics: { record: (r) => getFeatureMetricsRecorder()?.record(r) },
7109
+ });
7110
+ scheduler.setJevAudit(jevAudit);
7111
+ void jevAudit.sweepRetention().catch(() => { });
7112
+ }
7113
+ catch (err) {
7114
+ console.log(pc.yellow(` Jev job-completion audit: not constructed (${err?.message ?? 'unknown'})`));
7115
+ }
7094
7116
  // Wire IntegrationGate — enforces learning consolidation after job completion
7095
7117
  const integrationGate = new IntegrationGate({
7096
7118
  stateDir: config.stateDir,
@@ -13491,17 +13513,7 @@ export async function startServer(options) {
13491
13513
  // a 2nd account never clobbers the 1st.
13492
13514
  const { PendingLoginStore } = await import('../core/PendingLoginStore.js');
13493
13515
  const { EnrollmentWizard } = await import('../core/EnrollmentWizard.js');
13494
- const { FrameworkLoginDriver, enrollPaneSessionName, enrollmentBrowserEnv, enrollmentIsolationEnv, enrollmentCredentialPath } = await import('../core/FrameworkLoginDriver.js');
13495
- const DEFAULT_ENROLL_LOGIN_COMMANDS = {
13496
- 'claude-code': 'claude auth login',
13497
- 'codex-cli': 'codex login',
13498
- 'gemini-cli': 'gemini',
13499
- 'pi-cli': 'pi login',
13500
- // grok-build: the binary is `grok` (NEVER the colliding `agent` name),
13501
- // and device-code auth is the phone-approvable flow the enrollment
13502
- // wizard scrapes (public code/URL only, never a token).
13503
- 'grok-build': 'grok login --device-auth',
13504
- };
13516
+ const { FrameworkLoginDriver, enrollPaneSessionName, enrollmentBrowserEnv, enrollmentIsolationEnv, enrollmentCredentialPath, DEFAULT_ENROLL_LOGIN_COMMANDS } = await import('../core/FrameworkLoginDriver.js');
13505
13517
  const enrollLoginCommands = {
13506
13518
  ...DEFAULT_ENROLL_LOGIN_COMMANDS,
13507
13519
  ...(config.subscriptionPool?.enrollment?.loginCommands ?? {}),