instar 1.3.455 → 1.3.457

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.455",
+  "version": "1.3.457",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",
@@ -28,8 +28,10 @@
     "test:contract": "node scripts/run-contract-tests.js",
     "test:contract:raw": "vitest run --config vitest.contract.config.ts",
     "test:all": "vitest run && vitest run --config vitest.integration.config.ts && vitest run --config vitest.e2e.config.ts",
-    "lint": "tsc --noEmit && node scripts/lint-no-direct-destructive.js && node scripts/lint-no-direct-llm-http.js && node scripts/lint-no-direct-url-log.js && node scripts/lint-no-unfunneled-topic-creation.js && node scripts/lint-no-unfunneled-headless-launch.js && node scripts/lint-state-registry.js && node scripts/lint-cas-emit-placement.js && node scripts/lint-journal-actuation-ban.js && node scripts/lint-no-blocking-process-scans.js && node scripts/check-codex-rule1-drift.js",
+    "lint": "tsc --noEmit && node scripts/lint-no-direct-destructive.js && node scripts/lint-no-direct-llm-http.js && node scripts/lint-no-direct-url-log.js && node scripts/lint-no-unfunneled-topic-creation.js && node scripts/lint-no-unfunneled-headless-launch.js && node scripts/lint-state-registry.js && node scripts/lint-cas-emit-placement.js && node scripts/lint-journal-actuation-ban.js && node scripts/lint-no-blocking-process-scans.js && node scripts/lint-dev-agent-dark-gate.js && node scripts/check-codex-rule1-drift.js",
     "lint:destructive": "node scripts/lint-no-direct-destructive.js",
+    "lint:dev-agent-dark-gate": "node scripts/lint-dev-agent-dark-gate.js",
+    "lint:dev-agent-dark-gate:staged": "node scripts/lint-dev-agent-dark-gate.js --staged",
     "lint:destructive:staged": "node scripts/lint-no-direct-destructive.js --staged",
     "lint:llm-http": "node scripts/lint-no-direct-llm-http.js",
     "lint:llm-http:staged": "node scripts/lint-no-direct-llm-http.js --staged",

package/scripts/lint-dev-agent-dark-gate.js

@@ -0,0 +1,196 @@
+#!/usr/bin/env node
+/**
+ * lint-dev-agent-dark-gate.js — enforces the developmentAgent dark-feature gate
+ * standard (standard_development_agent_dark_feature_gate).
+ *
+ * Born from PR #1001: the GrowthMilestoneAnalyst hardcoded `enabled: false` in
+ * its config default instead of omitting it, so it shipped dark for EVERY agent
+ * (dev agents included), silently contradicting the standard. Caught only by
+ * operator review — there was no structural guard. This is that guard.
+ *
+ * Two assertions over `src/`:
+ *
+ *   A. FUNNEL — every dev-agent gate resolution must go through
+ *      `resolveDevAgentGate` (src/core/devAgentGate.ts). A hand-rolled
+ *      `?? !!<x>.developmentAgent` / `?? <x>.developmentAgent` anywhere else is a
+ *      violation (same contract as lint-no-direct-destructive: one funnel, no
+ *      forks). Comments that merely describe the pattern are ignored.
+ *
+ *   B. NO HARDCODED `enabled: false` UNDER A GATE MARKER — in
+ *      src/config/ConfigDefaults.ts, a config block whose comment references the
+ *      dev-gate convention (mentions `developmentAgent` + `dark`/`gate`) must NOT
+ *      hardcode `enabled: false` in the CODE lines that follow. The convention is
+ *      to OMIT `enabled` so the gate decides; a baked-in `false` in the shipped
+ *      default is the exact #1001 shape (it darks dev agents too). `enabled: true`
+ *      is NOT flagged — that is an allowed deliberate fleet-flip. Comment prose is
+ *      skipped so the convention's own documentation never trips the check.
+ *
+ * Exit codes:
+ *   0 — no violations.
+ *   1 — at least one violation.
+ *
+ * Usage:
+ *   node scripts/lint-dev-agent-dark-gate.js              # full src/ tree
+ *   node scripts/lint-dev-agent-dark-gate.js --staged     # staged files only
+ *   node scripts/lint-dev-agent-dark-gate.js path1 path2  # specific files
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { execSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const ROOT = path.resolve(__dirname, '..');
+const SRC_DIR = path.join(ROOT, 'src');
+
+// The funnel itself, plus this lint, legitimately name the pattern.
+const FUNNEL_ALLOWLIST = new Set([
+  'src/core/devAgentGate.ts',
+]);
+
+// Hand-rolled dev-agent gate resolution: `?? [!! | Boolean(]<expr>.developmentAgent`,
+// including bracket access `['developmentAgent']`. Catches the canonical `!!`
+// form, the `Boolean(...)` form, and quoted-key access — the realistic spellings.
+// (It cannot catch arbitrary aliases/wrapper helpers; that limit is documented
+// in the spec's Layer-1 "misses" row.)
+const HANDROLLED_GATE =
+  /\?\?\s*(?:!{1,2}\s*|Boolean\s*\(\s*)?[A-Za-z_$][\w$.?]*(?:\.developmentAgent\b|\[\s*['"]developmentAgent['"]\s*\])/;
+// A comment referencing the gate convention (for assertion B).
+const GATE_MARKER = /developmentAgent/i;
+const GATE_MARKER_QUALIFIER = /\b(dark|gate)\b/i;
+// Only a baked-in `false` is the #1001 bug; `true` is an allowed fleet-flip.
+// Catches both bare and quoted keys (`enabled: false` / `"enabled": false`).
+const HARDCODED_ENABLED = /(["']?)enabled\1\s*:\s*false\b/;
+// Once a marker comment is found, scan the config block it introduces (brace-
+// matched, NOT a fixed line window — a long marker comment must not push the
+// block out of range, the bug that let a regressed growthAnalyst slip through).
+const BLOCK_OPEN_SEARCH = 15; // max non-code lines between marker and the block's `{`
+const BLOCK_MAX_LINES = 120; // safety bound on block-body scan
+
+/** Strip a `//` line comment; return null if the line is a pure comment line. */
+function codeOnly(line) {
+  const trimmed = line.trim();
+  if (trimmed.startsWith('*') || trimmed.startsWith('//') || trimmed.startsWith('/*')) {
+    return null; // comment line — no code
+  }
+  const idx = line.indexOf('//');
+  return idx >= 0 ? line.slice(0, idx) : line;
+}
+
+/** Is this line (trimmed) a comment line? */
+function isCommentLine(line) {
+  const t = line.trim();
+  return t.startsWith('*') || t.startsWith('//') || t.startsWith('/*');
+}
+
+function listSourceFiles() {
+  const out = [];
+  const walk = (dir) => {
+    for (const e of fs.readdirSync(dir, { withFileTypes: true })) {
+      const full = path.join(dir, e.name);
+      if (e.isDirectory()) {
+        if (e.name === 'node_modules') continue;
+        walk(full);
+      } else if (/\.(ts|tsx|js|mjs|cjs)$/.test(e.name) && !/\.test\.[tj]s$/.test(e.name)) {
+        out.push(full);
+      }
+    }
+  };
+  walk(SRC_DIR);
+  return out;
+}
+
+function resolveTargets() {
+  const args = process.argv.slice(2);
+  if (args.includes('--staged')) {
+    const staged = execSync('git diff --cached --name-only --diff-filter=ACM', { cwd: ROOT, encoding: 'utf-8' })
+      .split('\n').map((s) => s.trim()).filter(Boolean)
+      .filter((f) => f.startsWith('src/') && /\.(ts|tsx|js|mjs|cjs)$/.test(f) && !/\.test\.[tj]s$/.test(f))
+      .map((f) => path.join(ROOT, f));
+    return staged;
+  }
+  const explicit = args.filter((a) => !a.startsWith('--'));
+  if (explicit.length) return explicit.map((f) => path.resolve(ROOT, f));
+  return listSourceFiles();
+}
+
+const violations = [];
+
+for (const file of resolveTargets()) {
+  if (!fs.existsSync(file)) continue;
+  const rel = path.relative(ROOT, file);
+  const lines = fs.readFileSync(file, 'utf-8').split('\n');
+
+  // ── Assertion A: funnel ──
+  if (!FUNNEL_ALLOWLIST.has(rel)) {
+    lines.forEach((line, i) => {
+      const code = codeOnly(line);
+      if (code === null) return;
+      if (HANDROLLED_GATE.test(code)) {
+        violations.push({
+          file: rel, line: i + 1, kind: 'A: hand-rolled gate',
+          text: line.trim(),
+          fix: 'route through resolveDevAgentGate(explicitEnabled, config) from src/core/devAgentGate.ts',
+        });
+      }
+    });
+  }
+
+  // ── Assertion B: ConfigDefaults marker (any ConfigDefaults.ts) ──
+  if (path.basename(file) === 'ConfigDefaults.ts') {
+    const reportedB = new Set(); // a multi-line marker comment fires per line — dedupe by target line
+    lines.forEach((line, i) => {
+      if (!isCommentLine(line)) return;
+      if (!(GATE_MARKER.test(line) && GATE_MARKER_QUALIFIER.test(line))) return;
+      // Find the config block this marker introduces: the first CODE line with an
+      // opening `{`, skipping any further comment/blank lines. A NON-comment line
+      // without a `{` means the marker doesn't introduce an object — stop.
+      let openIdx = -1;
+      for (let j = i + 1; j <= Math.min(i + BLOCK_OPEN_SEARCH, lines.length - 1); j++) {
+        const codeJ = codeOnly(lines[j]);
+        if (codeJ === null || codeJ.trim() === '') continue;
+        if (codeJ.includes('{')) { openIdx = j; }
+        break;
+      }
+      if (openIdx < 0) return;
+      // Brace-match from the opener and scan the block BODY (code lines only, so
+      // comment prose like "the fleet-flip registers `enabled: true` here" can't
+      // trip it) for a hardcoded `enabled: false`. Brace-matched rather than a
+      // fixed window so a long marker comment can't push the block out of range.
+      let depth = 0;
+      for (let j = openIdx; j <= Math.min(openIdx + BLOCK_MAX_LINES, lines.length - 1); j++) {
+        const codeJ = codeOnly(lines[j]);
+        if (codeJ === null) continue;
+        if (HARDCODED_ENABLED.test(codeJ) && !reportedB.has(j)) {
+          reportedB.add(j);
+          violations.push({
+            file: rel, line: j + 1, kind: 'B: hardcoded enabled under gate marker',
+            text: lines[j].trim(),
+            fix: 'OMIT `enabled` from the default so the gate decides (resolved as enabled ?? !!developmentAgent at runtime)',
+          });
+        }
+        for (const ch of codeJ) {
+          if (ch === '{') depth++;
+          else if (ch === '}') depth--;
+        }
+        if (depth <= 0 && j > openIdx) break; // block closed
+      }
+    });
+  }
+}
+
+if (violations.length === 0) {
+  console.log('lint-dev-agent-dark-gate: clean');
+  process.exit(0);
+}
+
+console.error('\n❌ lint-dev-agent-dark-gate found violations of the developmentAgent dark-feature gate standard:\n');
+for (const v of violations) {
+  console.error(`  ${v.file}:${v.line}  [${v.kind}]`);
+  console.error(`    ${v.text}`);
+  console.error(`    fix: ${v.fix}\n`);
+}
+console.error('Standard: a dev-gated feature OMITS `enabled` and resolves it through resolveDevAgentGate so it runs LIVE on dev agents and DARK on the fleet. Spec: docs/specs/DEV-AGENT-DARK-GATE-CONFORMANCE-SPEC.md\n');
+process.exit(1);

package/scripts/lint-no-direct-destructive.js

@@ -80,6 +80,10 @@ const ALLOWLIST = new Set([
   // Same bootstrap-escape pattern (blocking-process-scan lint, topic 21816
   // post-mortem #3) — read-only `git diff --cached --name-only` only.
   'scripts/lint-no-blocking-process-scans.js',
+  // Same bootstrap-escape pattern (dev-agent dark-gate conformance lint) —
+  // read-only `git diff --cached --name-only` for --staged. Cannot depend on
+  // the TS funnel because TS is not compiled when the lint runs in pre-push.
+  'scripts/lint-dev-agent-dark-gate.js',
   // Postinstall bootstrap script — runs before TypeScript is compiled and
   // before SafeFsExecutor is available. CommonJS, can't use ESM imports.
   'scripts/fix-better-sqlite3.cjs',

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-10T00:30:32.005Z",
-  "instarVersion": "1.3.455",
+  "generatedAt": "2026-06-10T01:54:06.043Z",
+  "instarVersion": "1.3.457",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ff8b71cca175e97649a4ac8c1d72b360406d0ddbbeb83587bdae12a126fd544",
+      "contentHash": "75179857cd709e8165c1aa249caa8a704c7b3bdd1ed99ade3ec42f7cb3e18bad",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "c8c6cc7ddf715f30a2781db6f2663f8e9331901ce0dabd900ef43de0dfd777b7",
+      "contentHash": "2ebeac31cf1dce6c885f62677aa4fad1640be488149a2e973031b7a231fc4345",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.456.md

@@ -0,0 +1,33 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Added a structural guard for the `developmentAgent` dark-feature gate so a
+dev-gated feature can no longer ship dark on development agents by hardcoding
+`enabled: false` or hand-rolling the gate (the PR #1001 class of miss). A new
+`resolveDevAgentGate` helper is the single funnel for the gate, and a new CI lint
+(`scripts/lint-dev-agent-dark-gate.js`, run in the `lint` posture / Repo
+Invariants) fails the build on a hand-rolled gate (`!!`/`Boolean(...)`/bracket
+forms) outside the funnel, or a hardcoded `enabled: false` under a dev-gate marker
+comment in `ConfigDefaults.ts` (brace-matched, so a long comment can't hide the
+block). All 11 existing hand-rolled gate sites were migrated to the funnel —
+behavior-identical, so no runtime behavior changes.
+
+## What to Tell Your User
+
+Nothing user-facing — this is internal developer/CI tooling (audience:
+agent-only). It does not change how any feature behaves at runtime; it only stops
+a specific developer mistake from recurring. No action needed.
+
+## Summary of New Capabilities
+
+- `resolveDevAgentGate(explicit, config)` — the canonical dev-agent dark-feature
+  gate funnel (`src/core/devAgentGate.ts`).
+- `lint-dev-agent-dark-gate` — CI lint enforcing the `standard_development_agent_dark_feature_gate`
+  convention (joins the existing `lint-*` family).
+- Honest limit: this slice does not catch a feature that omits the gate entirely
+  with no marker; that is deferred to a registry + both-sides wiring test and a
+  spec-intent cross-check, tracked as CMT-1253. <!-- tracked: CMT-1253 -->