instar 1.3.34 → 1.3.36

package/README.md

@@ -50,6 +50,7 @@ The architecture was distilled from [**Dawn**](https://dawn.bot-me.ai) — an AI
 | Forgets what you told it last week. | Remembers across thousands of sessions. <br/>*(SQLite + FTS5, rolling summaries)* |
 | Contradicts its own past decisions. | Catches contradictions before they ship. <br/>*(Coherence Gate, 9 reviewers)* |
 | Loses the thread when the window fills. | Comes back with the full thread, every time. <br/>*(CompactionSentinel, WorkingMemoryAssembler)* |
+| Silently stops shipping when a release stalls. | Surfaces the blocked release as ONE deduped, age-escalating Attention item. <br/>*(ReleaseReadinessSentinel — instar-dev / maintainer environments)* |
 | Drops commitments after a session boundary. | Tracks commitments durably; nudges itself when they go overdue. <br/>*(CommitmentTracker, PromiseBeacon)* |
 | Breaks when the framework updates. | Updates without breaking what you've deployed. <br/>*(Migration Parity Standard)* |
 | Default ALLOW-ALL permissions. | Layered safety gates by default. <br/>*(PEL + Coherence Gate + Operation Gate)* |

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiRH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAksDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAi2MtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiRH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAksDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAq5MtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -7250,12 +7250,22 @@ export async function startServer(options) {
         // ship-dark feature relies on anyone remembering to register it. Runs once
         // at boot + on a bounded cadence. Observation-only w.r.t. config flags.
         const { FeatureRolloutReconciler } = await import('../core/FeatureRolloutReconciler.js');
-        const { scanSpecArtifacts, makeFlagObserver } = await import('../core/featureRolloutScan.js');
+        const { scanSpecArtifactsWithCanonical, makeFlagObserver } = await import('../core/featureRolloutScan.js');
         const { getInitDefaults: _getRolloutDefaults } = await import('../config/ConfigDefaults.js');
         const _shippedDefaults = _getRolloutDefaults(config.agentType === 'standalone' ? 'standalone' : 'managed-project');
+        // Layer C of release-readiness-visibility: when featureRollout.canonicalRefScan
+        // is enabled, scan against canonical `main` (not the local working tree, which
+        // silently misses freshly-merged specs). Falls back to the local scan on any
+        // failure with a single degradation log line — never throws into boot.
+        const _frCfg = config.featureRollout;
         const featureRolloutReconciler = new FeatureRolloutReconciler({
             tracker: initiativeTracker,
-            listSpecArtifacts: () => scanSpecArtifacts(config.projectDir),
+            listSpecArtifacts: () => scanSpecArtifactsWithCanonical(config.projectDir, {
+                canonicalRefScanEnabled: _frCfg?.canonicalRefScan === true,
+                canonicalRemote: _frCfg?.canonicalRemote,
+                fetchTimeoutMs: _frCfg?.fetchTimeoutMs,
+                onDegradation: (reason) => console.warn(`[instar] feature-rollout canonical scan degraded: ${reason}`),
+            }),
             observeFlag: makeFlagObserver(config, _shippedDefaults),
         });
         void featureRolloutReconciler.reconcile().catch(err => console.warn('[instar] feature-rollout reconcile failed (non-fatal):', err instanceof Error ? err.message : String(err)));
@@ -7536,7 +7546,47 @@ export async function startServer(options) {
                 ? '  SessionReaper enabled (idle-session reaper — LIVE)'
                 : '  SessionReaper enabled (idle-session reaper — dry-run, logs only)'));
         }
-        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, semanticMemory, activitySentinel, rateLimitSentinel, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, proxyCoordinator, topicIntentStore, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, unjustifiedStopGate, stopGateDb, stopNotifier });
+        // ── ReleaseReadinessSentinel (Layer B of release-readiness-visibility) ──
+        // Repo-gated dev-environment watchdog: only constructed when the install has
+        // an analyzable instar git repo AND the feature is enabled in config. On a
+        // plain npm-installed agent (no instar repo) it stays null → routes 503,
+        // never a spurious signal. Not start()ed here — the off-by-default
+        // release-readiness-check job drives tick() via POST /release-readiness/tick.
+        let releaseReadinessSentinel = null;
+        {
+            const rrCfg = config.monitoring?.releaseReadiness;
+            const repoPath = rrCfg?.repoPath ?? process.cwd();
+            if (rrCfg?.enabled) {
+                const { isAnalyzableRepo, buildReleaseReadinessDeps } = await import('../monitoring/releaseReadinessWiring.js');
+                if (isAnalyzableRepo(repoPath)) {
+                    const { ReleaseReadinessSentinel } = await import('../monitoring/ReleaseReadinessSentinel.js');
+                    const deps = buildReleaseReadinessDeps({
+                        repoPath,
+                        statePath: path.join(config.stateDir, 'release-readiness.json'),
+                        auditPath: path.join(config.stateDir, '..', 'logs', 'sentinel-events.jsonl'),
+                        port: config.port,
+                        authToken: config.authToken ?? '',
+                        canonicalRemote: rrCfg.canonicalRemote,
+                        fetchTimeoutMs: rrCfg.fetchTimeoutMs,
+                    });
+                    releaseReadinessSentinel = new ReleaseReadinessSentinel(deps, {
+                        enabled: true,
+                        tickIntervalMs: rrCfg.tickIntervalMs,
+                        backlogAgeDaysSilent: rrCfg.backlogAgeDaysSilent,
+                        backlogAgeDaysLow: rrCfg.backlogAgeDaysLow,
+                        backlogAgeDaysMedium: rrCfg.backlogAgeDaysMedium,
+                        backlogAgeDaysHigh: rrCfg.backlogAgeDaysHigh,
+                        hysteresisHours: rrCfg.hysteresisHours,
+                        staleEpisodeTtlDays: rrCfg.staleEpisodeTtlDays,
+                    });
+                    console.log(pc.green('  ReleaseReadinessSentinel enabled (release-hygiene watchdog — job-driven)'));
+                }
+                else {
+                    console.log(pc.dim('  ReleaseReadinessSentinel enabled in config but no analyzable instar repo found — staying inert'));
+                }
+            }
+        }
+        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, proxyCoordinator, topicIntentStore, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, unjustifiedStopGate, stopGateDb, stopNotifier });
         // Boot-recovery (tunnel-failure-resilience spec Part 6): if the agent
         // died mid-relay-episode, the persisted tunnel.json carries
         // rotationPending=true. Rotate the dashboard PIN + authToken BEFORE