instar 1.3.479 → 1.3.481

package/dashboard/index.html

@@ -2697,6 +2697,7 @@
           <button class="tab" data-tab="preferences-learning" onclick="switchTab('preferences-learning')">Preferences</button>
           <button class="tab" data-tab="machines" onclick="switchTab('machines')">Machines</button>
           <button class="tab" data-tab="mandates" onclick="switchTab('mandates')">Mandates</button>
+          <button class="tab" data-tab="blockers" onclick="switchTab('blockers')">Blockers</button>
         </nav>
       </div>
       <div class="vital-signs" id="vitalSigns">
@@ -3214,6 +3215,27 @@
       </div>
     </div>
 
+    <!-- Blockers tab — Blocker Ledger read surface (Phase 1).
+         A blocker is a DECAYING HYPOTHESIS, not a settled wall: each entry moves through
+         candidate → authority-checked → access-requested → dry-run → live-run → resolved /
+         true-blocker. A true-blocker is "best current understanding — recheck after <date>",
+         never "stop trying". Read-only here; data from GET /blockers. detectedText and all
+         free-text are UNTRUSTED and HTML-escaped before render. 503 = feature off. -->
+    <div id="blockersPanel" style="display:none;flex-direction:column;padding:20px;gap:16px;overflow-y:auto">
+      <div style="display:flex;justify-content:space-between;align-items:center">
+        <h2 style="margin:0">Blockers</h2>
+        <button onclick="loadBlockers()" style="padding:6px 12px">Refresh</button>
+      </div>
+      <div style="font-size:12px;color:var(--text-dim);line-height:1.4">
+        Things that looked like they stopped progress, tracked as <b>decaying hypotheses</b> rather than settled walls.
+        Each one moves through verification states; a "true blocker" is the best current understanding with a recheck date —
+        never a permanent "give up".
+      </div>
+      <div id="blockersBody" style="border:1px solid var(--border);border-radius:8px;padding:16px;font-size:13px">
+        <div style="color:var(--text-dim)">Loading...</div>
+      </div>
+    </div>
+
     <!-- LLM Activity tab — Observable Intelligence (docs/specs/observable-intelligence.md).
          Every LLM call the system makes on its own behalf: which component, which
          provider/model, whether it acted or no-op'd, was skipped, cost + latency.
@@ -4767,6 +4789,12 @@
         onActivate: () => { if (typeof startMandates === 'function') startMandates(); },
         onDeactivate: () => { if (typeof stopMandates === 'function') stopMandates(); },
       },
+      {
+        id: 'blockers',
+        panels: ['blockersPanel'],
+        display: ['flex'],
+        onActivate: () => { if (typeof loadBlockers === 'function') loadBlockers(); },
+      },
       {
         id: 'secrets',
         panels: ['secretsPanel'],
@@ -5428,6 +5456,81 @@
       }
     }
 
+    // ── Blockers Tab (Blocker Ledger Phase 1 read surface) ──────────
+    // A blocker is a decaying hypothesis, not a settled wall. Read-only.
+    // detectedText + all free-text are UNTRUSTED → escapeHtml before render.
+    function blockerStateBadge(state) {
+      const colors = {
+        'candidate':         'var(--text-dim)',
+        'authority-checked': '#6ea8fe',
+        'access-requested':  '#6ea8fe',
+        'dry-run':           '#d6a700',
+        'live-run':          '#d6a700',
+        'resolved':          'var(--accent)',
+        'true-blocker':      'var(--red)',
+      };
+      const bg = colors[state] || 'var(--text-dim)';
+      return '<span style="display:inline-block;padding:2px 8px;border-radius:10px;font-size:11px;' +
+        'font-weight:600;color:#fff;white-space:nowrap;background:' + bg + '">' +
+        escapeHtml(String(state || 'unknown')) + '</span>';
+    }
+    function blockerTerminalLine(entry) {
+      const t = entry && entry.terminal;
+      if (!t) return '';
+      if (t.kind === 'resolved') {
+        const path = t.playbookPath ? ' · playbook: ' + escapeHtml(String(t.playbookPath)) : '';
+        return '<div style="font-size:12px;color:var(--accent);margin-top:4px">Resolved' + path + '</div>';
+      }
+      if (t.kind === 'true-blocker') {
+        // NEVER frame a true-blocker as settled / "stop trying" — it's a decaying hypothesis.
+        const reason = t.reasonKind ? escapeHtml(String(t.reasonKind)) : 'unknown reason';
+        const recheck = t.recheckAfter ? fmtRelTime(t.recheckAfter) : 'unscheduled';
+        return '<div style="font-size:12px;color:var(--red);margin-top:4px">Current hypothesis (' + reason +
+          ') — recheck after ' + escapeHtml(recheck) + '</div>';
+      }
+      return '';
+    }
+    async function loadBlockers() {
+      const bodyEl = document.getElementById('blockersBody');
+      try {
+        const resp = await apiFetch('/blockers');
+        const entries = (resp && resp.entries) || [];
+        if (entries.length === 0) {
+          bodyEl.innerHTML = '<div style="color:var(--text-dim)">No blockers recorded' +
+            ((resp && resp.total != null) ? ' (total ' + escapeHtml(String(resp.total)) + ')' : '') + '.</div>';
+          return;
+        }
+        bodyEl.innerHTML =
+          '<table style="width:100%;border-collapse:collapse;font-size:13px">' +
+            '<thead><tr style="text-align:left;color:var(--text-dim)">' +
+              '<th style="padding:6px 8px">State</th>' +
+              '<th style="padding:6px 8px">ID</th>' +
+              '<th style="padding:6px 8px">Detected</th>' +
+              '<th style="padding:6px 8px">Origin</th>' +
+              '<th style="padding:6px 8px;text-align:right">Updated</th>' +
+            '</tr></thead><tbody>' +
+            entries.map(e =>
+              '<tr style="border-top:1px solid var(--border);vertical-align:top">' +
+                '<td style="padding:6px 8px">' + blockerStateBadge(e.state) + '</td>' +
+                '<td style="padding:6px 8px;font-family:monospace;color:var(--text-dim)">' + escapeHtml(String(e.id || '—')) + '</td>' +
+                '<td style="padding:6px 8px">' + escapeHtml(String(e.detectedText || '')) + blockerTerminalLine(e) + '</td>' +
+                '<td style="padding:6px 8px">' + escapeHtml(String(e.origin || '—')) + '</td>' +
+                '<td style="padding:6px 8px;text-align:right;white-space:nowrap">' + escapeHtml(fmtRelTime(e.updatedAt || e.createdAt)) + '</td>' +
+              '</tr>'
+            ).join('') +
+            '</tbody></table>';
+      } catch (err) {
+        const m = err && err.message ? String(err.message) : String(err);
+        // 503 → the Blocker Ledger feature is off (monitoring.blockerLedger.enabled false, the default).
+        if (/503|unavailable|disabled|not initialized/i.test(m)) {
+          bodyEl.innerHTML = '<div style="color:var(--text-dim)">Blocker Ledger isn\'t turned on yet ' +
+            '(enable <code>monitoring.blockerLedger.enabled</code>).</div>';
+        } else {
+          bodyEl.innerHTML = '<div style="color:var(--red)">Error: ' + escapeHtml(m) + '</div>';
+        }
+      }
+    }
+
     // ── Threadline → Telegram bridge settings ──────────────────
     let tlBridgeSettings = null;
     let tlBridgeWiring = false;

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAcH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA65BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA0UN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAohVtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAcH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA65BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA0UN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAyhVtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -7757,7 +7757,7 @@ export async function startServer(options) {
         // Cartographer doc-tree — hierarchical semantic map with git-hash staleness
         // (cartographer-doc-tree-schema spec #1). Ships dark behind cartographer.enabled;
         // null → /cartographer/* routes return 503.
-        const cartographerEnabled = config.cartographer?.enabled ?? false;
+        const cartographerEnabled = resolveDevAgentGate(config.cartographer?.enabled, config);
         const cartographer = cartographerEnabled
             ? new CartographerTree({ projectDir: config.projectDir, stateDir: config.stateDir })
             : null;
@@ -7765,16 +7765,19 @@ export async function startServer(options) {
             console.log(pc.green('  Cartographer doc-tree enabled'));
         // Cartographer doc-freshness sweep (spec #2). In-process poller that authors
         // stale/never-authored node summaries on a LIGHT model routed OFF Claude.
-        // Ships dark behind freshnessSweep.enabled AND egressAcknowledged (off-Claude
-        // authoring transmits source content to a third-party framework — a separate
-        // consent gate). The off-Claude guarantee needs the IntelligenceRouter
-        // (router.for + defaultFramework); if routing is an unrouted provider the
-        // sweep refuses to start (it could not enforce off-Claude).
+        // Ships dark behind freshnessSweep.enabled ONLY — the redundant egressAcknowledged
+        // second gate was removed (DEV-AGENT-DARK-GATE-ENFORCEMENT Slice A3): one honest
+        // opt-in flag, not two. This is the one cost-bearing cartographer surface and stays
+        // an explicit opt-in EVEN on a dev agent (it bills a third-party account every pass),
+        // so it is in DARK_GATE_EXCLUSIONS (cost-bearing), NOT dev-gated. The off-Claude
+        // guarantee still needs the IntelligenceRouter (router.for + defaultFramework); if
+        // routing is an unrouted provider the sweep refuses to start (it could not enforce
+        // off-Claude) — that cost-protecting probe is UNCHANGED.
         let cartographerSweepPoller = null;
         if (cartographer) {
             const fsCfg = config.cartographer?.freshnessSweep;
             const num = (v, d) => (typeof v === 'number' && Number.isFinite(v) ? v : d);
-            if (fsCfg?.enabled && fsCfg?.egressAcknowledged && sharedLlmQueue) {
+            if (fsCfg?.enabled && sharedLlmQueue) {
                 const routerLike = sharedIntelligence &&
                     typeof sharedIntelligence.for === 'function' &&
                     typeof sharedIntelligence.defaultFramework === 'string'