instar 1.3.479 → 1.3.480

package/dist/core/devGatedFeatures.d.ts

@@ -31,8 +31,39 @@ export interface DevGatedFeature {
     configPath: string;
     /** One-line description of what runs live on a dev agent. */
     description: string;
+    /**
+     * One-line "non-destructive, safe-to-run-live-on-dev" rationale. REQUIRED on
+     * every entry (DEV-AGENT-DARK-GATE-ENFORCEMENT Slice B): the human gate is the
+     * real backstop — dev-gating a feature live means it runs unattended on the dev
+     * agent, so each entry must carry an explicit justification a CODEOWNERS reviewer
+     * can check. A destructive/cost-bearing feature does NOT belong here.
+     */
+    justification: string;
 }
 export declare const DEV_GATED_FEATURES: DevGatedFeature[];
+/**
+ * An `enabled: false` config default that is DELIBERATELY dark for EVERYONE (dev
+ * agents included) — the opposite of a DEV_GATED_FEATURES entry. The lint
+ * (scripts/lint-dev-agent-dark-gate.js, assertion C) requires every literal
+ * `enabled: false` in ConfigDefaults.ts to be EITHER dev-gated (registered above,
+ * with `enabled` omitted) OR classified here, so no dark default can ship by
+ * accident (the cartographer hole this spec closed).
+ *
+ * The registry's value is diffability + a category/reason quality bar — NOT
+ * prevention. It is a CODEOWNERS-reviewed path; the human gate is the real
+ * backstop. The lint REJECTS an entry with an unknown category or a reason
+ * shorter than 12 non-whitespace chars.
+ */
+export type DarkGateCategory = 'destructive' | 'optional-integration' | 'cost-bearing' | 'structural-stub' | 'deliberate-fleet-default';
+export interface DarkGateExclusion {
+    /** Dotted path to the feature's `enabled` flag in the agent config. */
+    configPath: string;
+    /** Why it is NOT dev-gated (closed enum). */
+    category: DarkGateCategory;
+    /** Human-readable rationale (≥12 non-whitespace chars; the lint enforces this). */
+    reason: string;
+}
+export declare const DARK_GATE_EXCLUSIONS: DarkGateExclusion[];
 /**
  * Read a dotted path off a config object, returning the value or undefined.
  * Used by the wiring test and the spec-intent cross-check (Slice 3).

package/dist/core/devGatedFeatures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devGatedFeatures.d.ts","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,kBAAkB,EAAE,eAAe,EAoC/C,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO5E"}
+{"version":3,"file":"devGatedFeatures.d.ts","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,kBAAkB,EAAE,eAAe,EAuD/C,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,sBAAsB,GACtB,cAAc,GACd,iBAAiB,GACjB,0BAA0B,CAAC;AAE/B,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EAqGnD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO5E"}

package/dist/core/devGatedFeatures.js

@@ -28,36 +28,157 @@ export const DEV_GATED_FEATURES = [
         name: 'growthAnalyst',
         configPath: 'monitoring.growthAnalyst.enabled',
         description: 'Proactive growth & milestone analyst (/growth/*).',
+        justification: 'Read/observe analyst; sends nothing by default (digestDelivery off); no destructive action, no spend.',
     },
     {
         name: 'coherenceJournal',
         configPath: 'multiMachine.coherenceJournal.enabled',
         description: 'Cross-machine coherence journal.',
+        justification: 'Append-only local journal of content-free lifecycle events; no egress, no spend, no destructive action.',
     },
     {
         name: 'warmSessionA2A',
         configPath: 'threadline.warmSessionA2A.enabled',
         description: 'Warm-session pool for agent-to-agent delivery.',
+        justification: 'Bounded warm-session pool (global/per-peer caps + TTL); no destructive action, no third-party spend.',
     },
     {
         name: 'secretSync',
         configPath: 'multiMachine.secretSync.enabled',
         description: 'Cross-machine secret sync (receive side).',
+        justification: 'Receive-only by default (push needs pushEnabled); encrypted-per-peer; no destructive action, no spend.',
     },
     {
         name: 'geminiLoopDriver',
         configPath: 'autonomousSessions.geminiLoopDriver.enabled',
         description: 'Gemini autonomous-loop driver.',
+        justification: 'Drives the dev agent\'s own autonomous loop; bounded, no destructive action against the source tree.',
     },
     {
         name: 'respawnBuildContext',
         configPath: 'sessions.respawnBuildContext.enabled',
         description: 'Respawn build-context capture on session restart.',
+        justification: 'Captures build context on restart; read-only observability, no destructive action, no spend.',
     },
     {
         name: 'selfKnowledgeSessionContext',
         configPath: 'selfKnowledge.sessionContext.enabled',
         description: 'Session-boot self-knowledge context injection.',
+        justification: 'Injects vault secret NAMES (never values) + facts at boot; read-only, no egress, no destructive action.',
+    },
+    {
+        name: 'cartographer',
+        configPath: 'cartographer.enabled',
+        description: 'Cartographer doc-tree + navigation read surfaces (zero egress).',
+        justification: 'Read-only local-index surfaces; no egress, no spend.',
+    },
+    {
+        name: 'cartographerConformanceAudit',
+        configPath: 'cartographer.conformanceAudit.enabled',
+        description: 'Standards enforcement-coverage audit (deterministic, zero egress).',
+        justification: 'Deterministic local audit; no LLM, no egress, no spend.',
+    },
+];
+export const DARK_GATE_EXCLUSIONS = [
+    // ── destructive — kills/deletes on a heuristic; off + dry-run for EVERYONE ──
+    {
+        configPath: 'monitoring.sessionReaper.enabled',
+        category: 'destructive',
+        reason: 'kills idle sessions; off+dry-run for everyone',
+    },
+    {
+        configPath: 'monitoring.agentWorktreeReaper.enabled',
+        category: 'destructive',
+        reason: 'deletes git worktrees; off+dry-run for everyone',
+    },
+    {
+        configPath: 'monitoring.mcpProcessReaper.enabled',
+        category: 'destructive',
+        reason: 'kills MCP processes; off+dry-run for everyone',
+    },
+    // ── cost-bearing — ongoing third-party / LLM spend; explicit opt-in ──
+    {
+        configPath: 'mentor.autonomousFix.enabled',
+        category: 'cost-bearing',
+        reason: 'spawns full-tool Opus fix sessions; ongoing spend',
+    },
+    {
+        configPath: 'cartographer.freshnessSweep.enabled',
+        category: 'cost-bearing',
+        reason: 'authors summaries via off-Claude codex; ongoing third-party spend; explicit opt-in even on dev',
+    },
+    // ── structural-stub — no runtime consumer wired; a gate would assert dead behavior ──
+    {
+        configPath: 'cartographer.conformanceAudit.llmEnrichment.enabled',
+        category: 'structural-stub',
+        reason: 'no LLM pipeline wired; dark stub',
+    },
+    {
+        configPath: 'cartographer.subtreeNav.llmRerank.enabled',
+        category: 'structural-stub',
+        reason: 'no LLM pipeline wired; dark stub',
+    },
+    {
+        configPath: 'monitoring.agentSleep.enabled',
+        category: 'structural-stub',
+        reason: 'sleep/respawn mechanism is a later slice; not wired',
+    },
+    // ── optional-integration — opt-in per deployment ──
+    {
+        configPath: 'multiMachine.sessionPool.enabled',
+        category: 'optional-integration',
+        reason: 'multi-machine pooling; opt-in per deployment',
+    },
+    // ── deliberate-fleet-default — off for everyone by design (incl. dev) ──
+    {
+        configPath: 'monitoring.bootHealthBeacon.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'minimal boot /health responder; deliberate fleet default, off until a supervisor needs it',
+    },
+    {
+        configPath: 'monitoring.parallelWorkSentinel.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'observe-only overlap councilor; candidate for dev-gating in a follow-up audit',
+    },
+    {
+        configPath: 'monitoring.failureLearning.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'observe-only failure-learning loop; candidate for dev-gating in a follow-up audit',
+    },
+    {
+        configPath: 'monitoring.correctionLearning.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'observe-only correction/preference sentinel; candidate for dev-gating in a follow-up audit',
+    },
+    {
+        configPath: 'monitoring.apprenticeshipCycleSla.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'observe-only overdue-cycle signal; candidate for dev-gating in a follow-up audit',
+    },
+    {
+        configPath: 'monitoring.geminiCapacityEscalation.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'observe-only capacity-block escalation; candidate for dev-gating in a follow-up audit',
+    },
+    {
+        configPath: 'monitoring.releaseReadiness.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'observe-only release-readiness sentinel; repo-gated; candidate for dev-gating in a follow-up audit',
+    },
+    {
+        configPath: 'threadline.a2aCheckIn.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'A2A check-in summarizer; deliberate fleet default, opt-in to keep the operator un-flooded',
+    },
+    {
+        configPath: 'mentor.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'framework-onboarding mentor system; deliberate fleet default, off until the human advances rollout',
+    },
+    {
+        configPath: 'mentee.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'mentee receiver wiring; deliberate fleet default, off until an allowlisted mentor is configured',
     },
 ];
 /**

package/dist/core/devGatedFeatures.js.map

@@ -1 +1 @@
-{"version":3,"file":"devGatedFeatures.js","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAYH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,mDAAmD;KACjE;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,gDAAgD;KAC9D;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,mDAAmD;KACjE;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,gDAAgD;KAC9D;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAkB;IACjE,IAAI,GAAG,GAAY,MAAM,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7D,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"devGatedFeatures.js","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAoBH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,uGAAuG;KACvH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,kCAAkC;QAC/C,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE,wGAAwG;KACxH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,gCAAgC;QAC7C,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,8FAA8F;KAC9G;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,sBAAsB;QAClC,WAAW,EAAE,iEAAiE;QAC9E,aAAa,EAAE,sDAAsD;KACtE;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,oEAAoE;QACjF,aAAa,EAAE,yDAAyD;KACzE;CACF,CAAC;AA+BF,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,+EAA+E;IAC/E;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,UAAU,EAAE,wCAAwC;QACpD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD,wEAAwE;IACxE;QACE,UAAU,EAAE,8BAA8B;QAC1C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,gGAAgG;KACzG;IACD,uFAAuF;IACvF;QACE,UAAU,EAAE,qDAAqD;QACjE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,qDAAqD;KAC9D;IACD,qDAAqD;IACrD;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8CAA8C;KACvD;IACD,0EAA0E;IAC1E;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,2FAA2F;KACpG;IACD;QACE,UAAU,EAAE,yCAAyC;QACrD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,+EAA+E;KACxF;IACD;QACE,UAAU,EAAE,oCAAoC;QAChD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,mFAAmF;KAC5F;IACD;QACE,UAAU,EAAE,uCAAuC;QACnD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,4FAA4F;KACrG;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,kFAAkF;KAC3F;IACD;QACE,UAAU,EAAE,6CAA6C;QACzD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,uFAAuF;KAChG;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,oGAAoG;KAC7G;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,2FAA2F;KACpG;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,oGAAoG;KAC7G;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,iGAAiG;KAC1G;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAkB;IACjE,IAAI,GAAG,GAAY,MAAM,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7D,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/routes.js

@@ -3646,7 +3646,7 @@ export function createRoutes(ctx) {
         }
         const cfg = ctx.config
             .cartographer?.conformanceAudit;
-        if (cfg?.enabled !== true) {
+        if (!resolveDevAgentGate(cfg?.enabled, ctx.config)) {
             res.status(503).json({ error: 'Conformance audit not enabled' });
             return false;
         }