instar 1.3.511 → 1.3.513

package/dist/core/PreferencesSync.js

@@ -0,0 +1,307 @@
+/**
+ * PreferencesSync — WS2.1 of multi-machine seamlessness: the serve / receive /
+ * merge engine behind the `preferences-sync` mesh verb. Replicates the
+ * correction-learning preference store (PreferencesManager,
+ * `.instar/preferences.json`) across the machine pool so a preference learned on
+ * machine A is honored on machine B.
+ *
+ * Spec: MULTI-MACHINE-SEAMLESSNESS-SPEC §WS2.1. Mirrors the COMMITMENTS-COHERENCE
+ * replication pattern (CommitmentsSync.ts) — transport-agnostic, seam-injected;
+ * the server registers the serve side as the verb handler and rides the
+ * PeerPresencePuller cadence on the receive side, exactly like journal-sync.
+ *
+ * Preferences are ADVISORY SIGNALS (session-start hints), never authority — so
+ * this is read-replication only, no write-back, no election, no quorum.
+ *
+ * Load-bearing rules (mirrors §3.2):
+ *  - Pages are seq-windowed DELTAS by `lastMutatedSeq` (asc, dedupeKey tiebreak),
+ *    EXCLUSIVE cursor, capped at `syncPageBytes` with ≥1 record/page — a store
+ *    replicates fully over multiple pages, never a blob whose tail strands.
+ *  - Incarnation fencing: a stale incarnation is answered `incarnationChanged`;
+ *    the receiver discards the replica wholesale and re-pulls from 0 (a restored
+ *    `.instar/preferences.json` must never strand replication).
+ *  - First-hop with teeth: the replica owner derives from the AUTHENTICATED
+ *    envelope sender; any served row whose originMachineId names a DIFFERENT
+ *    machine is rejected + counted (forgedRows) — a peer cannot inject rows
+ *    attributed to a third machine.
+ *  - Disclosure honesty: the free-text `learning` is credential-shape-scanned at
+ *    serve time; a flagged row ships with `learning` REDACTED (it still
+ *    replicates — usefulness never depends on the scan).
+ *
+ * The ONE merge difference from commitments (design fork, resolved): commitments
+ * union on composite key with no cross-origin merge; preferences COLLAPSE by
+ * `dedupeKey` because the same dedupeKey on two machines is the SAME learned
+ * lesson observed independently. The merged view presents ONE row per dedupeKey
+ * (newest `recordedAt` wins the fields; `dedupeCount` sums across origins) so the
+ * session-start block never double-injects the same guidance.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { redactForLiveTail } from './liveTailRedaction.js';
+export const DEFAULT_SYNC_PAGE_BYTES = 256 * 1024;
+export const DEFAULT_REPLICA_STALE_WARN_MS = 10 * 60 * 1000;
+/** Per-store bound — preferences are few; a runaway peer can't bloat the merge. */
+export const DEFAULT_MAX_REPLICATED_PREFERENCES = 500;
+export function buildPreferencesSyncPage(req, deps) {
+    const { incarnation, replicationSeq } = deps.advert;
+    // Incarnation fence: a stale requester re-pulls from 0.
+    if (req.incarnation !== undefined && req.incarnation !== incarnation) {
+        return { incarnation, replicationSeq, records: [], nextSinceSeq: 0, done: false, incarnationChanged: true };
+    }
+    const sinceSeq = Number.isFinite(req.sinceSeq) && req.sinceSeq >= 0 ? req.sinceSeq : 0;
+    const pageBytes = deps.syncPageBytes && deps.syncPageBytes > 0 ? deps.syncPageBytes : DEFAULT_SYNC_PAGE_BYTES;
+    // Delta window, EXCLUSIVE cursor; (lastMutatedSeq asc, dedupeKey tiebreak).
+    const eligible = deps.records
+        .map((r) => ({ r, seq: typeof r.lastMutatedSeq === 'number' ? r.lastMutatedSeq : 0 }))
+        .filter((x) => x.seq > sinceSeq)
+        .sort((a, b) => (a.seq - b.seq) || a.r.dedupeKey.localeCompare(b.r.dedupeKey));
+    const records = [];
+    let bytes = 0;
+    let nextSinceSeq = sinceSeq;
+    for (const { r, seq } of eligible) {
+        const scan = redactForLiveTail(r.learning);
+        // `violationPattern` is a LOCAL-ONLY signal (the user's self-violation
+        // detection regex/keywords — e.g. `regex:api_key|secret|token`). It is
+        // never injected into the session block and reveals the operator's security
+        // posture, so it MUST NOT replicate to peers (review WS2.1 finding #1).
+        // Strip it explicitly rather than spreading the whole record.
+        const { violationPattern: _localOnly, lastMutatedSeq: _seq, ...replicable } = r;
+        void _localOnly;
+        void _seq;
+        const row = {
+            ...replicable,
+            learning: scan.redactedCount > 0 ? scan.text : r.learning,
+            originMachineId: deps.ownMachineId,
+            lastMutatedSeq: seq,
+            ...(scan.redactedCount > 0 ? { textRedacted: true } : {}),
+        };
+        const size = Buffer.byteLength(JSON.stringify(row), 'utf-8');
+        // ≥1 record per page even when a single record exceeds the cap.
+        if (records.length > 0 && bytes + size > pageBytes)
+            break;
+        records.push(row);
+        bytes += size;
+        nextSinceSeq = seq;
+    }
+    const done = records.length === 0 || !eligible.some((x) => x.seq > nextSinceSeq);
+    return { incarnation, replicationSeq, records, nextSinceSeq, done };
+}
+/**
+ * The per-peer replica store: one JSON file per owner under
+ * `state/preference-replicas/`, written ONLY by this receive path
+ * (single-writer), temp-file + atomic rename, corrupt → quarantine + fresh
+ * (never silently empty).
+ */
+export class PreferenceReplicaStore {
+    dir;
+    now;
+    logger;
+    maxRecords;
+    cache = new Map();
+    constructor(config) {
+        this.dir = path.join(config.stateDir, 'state', 'preference-replicas');
+        this.now = config.now ?? (() => new Date());
+        this.logger = config.logger ?? (() => { });
+        this.maxRecords =
+            config.maxRecordsPerPeer && config.maxRecordsPerPeer > 0
+                ? config.maxRecordsPerPeer
+                : DEFAULT_MAX_REPLICATED_PREFERENCES;
+    }
+    /** The cursor to request next from a peer (0 + no incarnation when fresh). */
+    cursorFor(ownerMachineId) {
+        const r = this.load(ownerMachineId);
+        return r ? { sinceSeq: r.sinceSeq, incarnation: r.incarnation } : { sinceSeq: 0 };
+    }
+    /**
+     * Apply a served page. `senderMachineId` is the AUTHENTICATED envelope
+     * sender — the replica identity derives from it, never a payload field.
+     */
+    applyPage(senderMachineId, page) {
+        let replica = this.load(senderMachineId);
+        let replaced = false;
+        if (page.incarnationChanged || !replica || replica.incarnation !== page.incarnation) {
+            replica = {
+                version: 1,
+                ownerMachineId: senderMachineId,
+                incarnation: page.incarnation,
+                sinceSeq: 0,
+                receivedAt: this.now().toISOString(),
+                records: {},
+            };
+            replaced = true;
+            if (page.incarnationChanged) {
+                this.persist(senderMachineId, replica);
+                return { applied: 0, forgedRows: 0, replaced, dropped: 0 };
+            }
+        }
+        let applied = 0;
+        let forgedRows = 0;
+        let dropped = 0;
+        for (const row of page.records) {
+            if (row.originMachineId !== senderMachineId) {
+                forgedRows++; // first-hop with teeth — counted, never applied
+                continue;
+            }
+            const isNewKey = !(row.dedupeKey in replica.records);
+            if (isNewKey && Object.keys(replica.records).length >= this.maxRecords) {
+                dropped++; // per-peer bound reached — an existing key may still update
+                continue;
+            }
+            replica.records[row.dedupeKey] = row;
+            applied++;
+        }
+        replica.sinceSeq = Math.max(replica.sinceSeq, page.nextSinceSeq);
+        replica.receivedAt = this.now().toISOString();
+        this.persist(senderMachineId, replica);
+        return { applied, forgedRows, replaced, dropped };
+    }
+    /** Every replica's rows, tagged with owner + receivedAt. */
+    allReplicas() {
+        const out = [];
+        let names = [];
+        try {
+            names = fs.readdirSync(this.dir).filter((n) => n.endsWith('.json') && !n.includes('.corrupt-'));
+        }
+        catch {
+            /* @silent-fallback-ok: replica dir absent = no replicas yet (single-machine or fresh boot) — an empty merge, never an error (MULTI-MACHINE-SEAMLESSNESS-SPEC §WS2.1) */
+        }
+        for (const name of names) {
+            const owner = name.replace(/\.json$/, '');
+            const r = this.load(owner);
+            if (r)
+                out.push({ ownerMachineId: r.ownerMachineId, receivedAt: r.receivedAt, records: Object.values(r.records) });
+        }
+        return out;
+    }
+    fileFor(owner) {
+        return path.join(this.dir, `${owner.replace(/[^A-Za-z0-9_.-]/g, '_')}.json`);
+    }
+    load(owner) {
+        const cached = this.cache.get(owner);
+        if (cached)
+            return cached;
+        const file = this.fileFor(owner);
+        let raw;
+        try {
+            raw = fs.readFileSync(file, 'utf-8');
+        }
+        catch {
+            /* @silent-fallback-ok: absent replica = first contact with this peer — a fresh pull from 0, never an error (MULTI-MACHINE-SEAMLESSNESS-SPEC §WS2.1) */
+            return null;
+        }
+        try {
+            const parsed = JSON.parse(raw);
+            if (parsed?.version !== 1 || typeof parsed.records !== 'object')
+                throw new Error('shape');
+            this.cache.set(owner, parsed);
+            return parsed;
+        }
+        catch {
+            try {
+                fs.renameSync(file, `${file}.corrupt-${this.now().getTime()}`);
+            }
+            catch {
+                /* @silent-fallback-ok: quarantine rename can lose a race; the fresh re-pull below proceeds either way (MULTI-MACHINE-SEAMLESSNESS-SPEC §WS2.1) */
+            }
+            this.logger(`preference replica for ${owner} unreadable — quarantined; full re-pull will rebuild it`);
+            return null;
+        }
+    }
+    persist(owner, replica) {
+        fs.mkdirSync(this.dir, { recursive: true });
+        const file = this.fileFor(owner);
+        const tmp = `${file}.tmp-${process.pid}`;
+        fs.writeFileSync(tmp, JSON.stringify(replica, null, 2));
+        fs.renameSync(tmp, file);
+        this.cache.set(owner, replica);
+    }
+}
+/**
+ * Clock-skew tolerance for merge ordering. A peer's `recordedAt` is capped at
+ * `now + this` before it can win a dedupeKey collision — so a machine with a
+ * fast/hostile clock (e.g. set a year ahead) cannot silently dominate EVERY
+ * preference across the pool (review WS2.1 finding #2; the spec's clock-skew
+ * requirement). Real-world cross-machine clock drift is seconds-to-minutes; a
+ * full day is a generous ceiling that never penalizes honest machines.
+ * NOTE: this is the shipped mitigation; full HLC (logical counters) is a tracked
+ * follow-up. <!-- tracked: WS2.1 HLC counters -->
+ */
+export const CLOCK_SKEW_TOLERANCE_MS = 24 * 60 * 60 * 1000;
+/**
+ * HLC-light ordering: (effective recordedAt-ms, originMachineId) lexicographic,
+ * newer wins. `capMs` bounds a future-skewed timestamp so it cannot win on a
+ * fabricated/drifted clock.
+ */
+function isNewer(aRecordedAt, aOrigin, bRecordedAt, bOrigin, capMs) {
+    // A timestamp beyond `now + tolerance` is not merely clamped to ~now (that
+    // would still let it beat a genuine recent write); it is UNTRUSTWORTHY — a
+    // fabricated/grossly-skewed clock — so it is treated as the OLDEST (0) and
+    // loses every collision to any real timestamp. Within tolerance, normal
+    // recency applies (review WS2.1 finding #2).
+    const pa = Date.parse(aRecordedAt) || 0;
+    const pb = Date.parse(bRecordedAt) || 0;
+    const at = pa > capMs ? 0 : pa;
+    const bt = pb > capMs ? 0 : pb;
+    if (at !== bt)
+        return at > bt;
+    return aOrigin > bOrigin; // deterministic tiebreak
+}
+/**
+ * Collapse own + replicas by dedupeKey into one merged row per learned
+ * preference. Newest (recordedAt, origin) wins the fields; dedupeCount SUMS
+ * across the distinct contributing origins (true cross-machine observation
+ * count); contributingMachines lists every origin that holds the key.
+ */
+export function mergePreferenceViews(deps) {
+    const byKey = new Map();
+    const capMs = (deps.now?.() ?? new Date()).getTime() + CLOCK_SKEW_TOLERANCE_MS;
+    const ingest = (entry, origin, redacted) => {
+        const key = entry.dedupeKey;
+        const existing = byKey.get(key);
+        const count = typeof entry.dedupeCount === 'number' && entry.dedupeCount >= 1 ? entry.dedupeCount : 1;
+        if (!existing) {
+            byKey.set(key, {
+                winner: entry,
+                winnerOrigin: origin,
+                winnerRecordedAt: entry.recordedAt,
+                countByOrigin: new Map([[origin, count]]),
+                redacted,
+            });
+            return;
+        }
+        // Each origin contributes ONCE per key (its own upsert collapses dupes);
+        // last write from the same origin replaces its count rather than summing.
+        existing.countByOrigin.set(origin, count);
+        existing.redacted = existing.redacted || redacted;
+        if (isNewer(entry.recordedAt, origin, existing.winnerRecordedAt, existing.winnerOrigin, capMs)) {
+            existing.winner = entry;
+            existing.winnerOrigin = origin;
+            existing.winnerRecordedAt = entry.recordedAt;
+        }
+    };
+    for (const p of deps.own)
+        ingest(p, deps.ownMachineId, false);
+    for (const rep of deps.replicas) {
+        if (rep.ownerMachineId === deps.ownMachineId)
+            continue; // never our own echo
+        for (const p of rep.records)
+            ingest(p, p.originMachineId, p.textRedacted === true);
+    }
+    const out = [];
+    for (const acc of byKey.values()) {
+        let dedupeCount = 0;
+        for (const c of acc.countByOrigin.values())
+            dedupeCount += c;
+        out.push({
+            ...acc.winner,
+            dedupeCount,
+            contributingMachines: [...acc.countByOrigin.keys()].sort(),
+            winningMachineId: acc.winnerOrigin,
+            ...(acc.redacted ? { textRedacted: true } : {}),
+        });
+    }
+    // Stable, useful order: newest first (the injection block consumes this).
+    out.sort((a, b) => (Date.parse(b.recordedAt) || 0) - (Date.parse(a.recordedAt) || 0));
+    return out;
+}
+//# sourceMappingURL=PreferencesSync.js.map

package/dist/core/PreferencesSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PreferencesSync.js","sourceRoot":"","sources":["../../src/core/PreferencesSync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,mFAAmF;AACnF,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AA+CtD,MAAM,UAAU,wBAAwB,CACtC,GAA2B,EAC3B,IAAmB;IAEnB,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,wDAAwD;IACxD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACrE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAC9G,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAE9G,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACrF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC;SAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjF,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,YAAY,GAAG,QAAQ,CAAC;IAC5B,KAAK,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3C,uEAAuE;QACvE,uEAAuE;QACvE,4EAA4E;QAC5E,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,CAAC,CAAC;QAChF,KAAK,UAAU,CAAC;QAChB,KAAK,IAAI,CAAC;QACV,MAAM,GAAG,GAAyB;YAChC,GAAG,UAAU;YACb,QAAQ,EAAE,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ;YACzD,eAAe,EAAE,IAAI,CAAC,YAAY;YAClC,cAAc,EAAE,GAAG;YACnB,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7D,gEAAgE;QAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,SAAS;YAAE,MAAM;QAC1D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,KAAK,IAAI,IAAI,CAAC;QACd,YAAY,GAAG,GAAG,CAAC;IACrB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,YAAY,CAAC,CAAC;IACjF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACtE,CAAC;AAwBD;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAAS;IACZ,GAAG,CAAa;IAChB,MAAM,CAAwB;IAC9B,UAAU,CAAS;IAC5B,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEpD,YAAY,MAKX;QACC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU;YACb,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC;gBACtD,CAAC,CAAC,MAAM,CAAC,iBAAiB;gBAC1B,CAAC,CAAC,kCAAkC,CAAC;IAC3C,CAAC;IAED,8EAA8E;IAC9E,SAAS,CAAC,cAAsB;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACpF,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,eAAuB,EAAE,IAAyB;QAC1D,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,kBAAkB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACpF,OAAO,GAAG;gBACR,OAAO,EAAE,CAAC;gBACV,cAAc,EAAE,eAAe;gBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;gBACpC,OAAO,EAAE,EAAE;aACZ,CAAC;YACF,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;gBACvC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,eAAe,KAAK,eAAe,EAAE,CAAC;gBAC5C,UAAU,EAAE,CAAC,CAAC,gDAAgD;gBAC9D,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACvE,OAAO,EAAE,CAAC,CAAC,4DAA4D;gBACvE,SAAS;YACX,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;YACrC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACjE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IAED,4DAA4D;IAC5D,WAAW;QACT,MAAM,GAAG,GAAsF,EAAE,CAAC;QAClG,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QAClG,CAAC;QAAC,MAAM,CAAC;YACP,wKAAwK;QAC1K,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,OAAO,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/E,CAAC;IAEO,IAAI,CAAC,KAAa;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,uJAAuJ;YACvJ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;YACnD,IAAI,MAAM,EAAE,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,kJAAkJ;YACpJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,0BAA0B,KAAK,yDAAyD,CAAC,CAAC;YACtG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,KAAa,EAAE,OAAyB;QACtD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;CACF;AAqBD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3D;;;;GAIG;AACH,SAAS,OAAO,CACd,WAAmB,EACnB,OAAe,EACf,WAAmB,EACnB,OAAe,EACf,KAAa;IAEb,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,6CAA6C;IAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/B,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC9B,OAAO,OAAO,GAAG,OAAO,CAAC,CAAC,yBAAyB;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAe;IAQlD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAe,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,uBAAuB,CAAC;IAE/E,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,MAAc,EAAE,QAAiB,EAAQ,EAAE;QACjF,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;QAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;gBACb,MAAM,EAAE,KAAK;gBACb,YAAY,EAAE,MAAM;gBACpB,gBAAgB,EAAE,KAAK,CAAC,UAAU;gBAClC,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;gBACzC,QAAQ;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,yEAAyE;QACzE,0EAA0E;QAC1E,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1C,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAClD,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;YAC/F,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;YACxB,QAAQ,CAAC,YAAY,GAAG,MAAM,CAAC;YAC/B,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAC,UAAU,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG;QAAE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,YAAY;YAAE,SAAS,CAAC,qBAAqB;QAC7E,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO;YAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACjC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE;YAAE,WAAW,IAAI,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,GAAG,CAAC,MAAM;YACb,WAAW;YACX,oBAAoB,EAAE,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC1D,gBAAgB,EAAE,GAAG,CAAC,YAAY;YAClC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,0EAA0E;IAC1E,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/devGatedFeatures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devGatedFeatures.d.ts","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,kBAAkB,EAAE,eAAe,EA2E/C,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,sBAAsB,GACtB,cAAc,GACd,iBAAiB,GACjB,0BAA0B,CAAC;AAE/B,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EAyHnD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO5E"}
+{"version":3,"file":"devGatedFeatures.d.ts","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,kBAAkB,EAAE,eAAe,EA2E/C,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,sBAAsB,GACtB,cAAc,GACd,iBAAiB,GACjB,0BAA0B,CAAC;AAE/B,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EA8HnD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAO5E"}

package/dist/core/devGatedFeatures.js

@@ -163,6 +163,11 @@ export const DARK_GATE_EXCLUSIONS = [
         reason: 'hold-for-stability policy; trails inboundQueue one rollout stage behind (operator discipline)',
     },
     // ── deliberate-fleet-default — off for everyone by design (incl. dev) ──
+    {
+        configPath: 'monitoring.greenPrAutoMerge.enabled',
+        category: 'deliberate-fleet-default',
+        reason: 'green-PR auto-merge watcher — action-bearing (merges PRs), so NOT dev-gated (the dev-gate registry bars action-bearing features, devGatedFeatures.ts contract). Off fleet-wide; flipped on per dev agent with expectedGhLogin. safe-merge re-verifies + lease-gated + runtime rollback + breaker; GitHub App is a binding precondition before any fleet promotion.',
+    },
     {
         configPath: 'threadline.singleNegotiator.enabled',
         category: 'deliberate-fleet-default',

package/dist/core/devGatedFeatures.js.map

@@ -1 +1 @@
-{"version":3,"file":"devGatedFeatures.js","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAoBH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,uGAAuG;KACvH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,kCAAkC;QAC/C,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE,wGAAwG;KACxH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,gCAAgC;QAC7C,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,8FAA8F;KAC9G;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,sBAAsB;QAClC,WAAW,EAAE,iEAAiE;QAC9E,aAAa,EAAE,sDAAsD;KACtE;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,oEAAoE;QACjF,aAAa,EAAE,yDAAyD;KACzE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,8EAA8E;QAC3F,aAAa,EAAE,qNAAqN;KACrO;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,uBAAuB;QACnC,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,yNAAyN;KACzO;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EACT,6IAA6I;QAC/I,aAAa,EACX,uKAAuK;KAC1K;CACF,CAAC;AA+BF,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,+EAA+E;IAC/E;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,UAAU,EAAE,wCAAwC;QACpD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD,wEAAwE;IACxE;QACE,UAAU,EAAE,8BAA8B;QAC1C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,iIAAiI;KAC1I;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,gGAAgG;KACzG;IACD,uFAAuF;IACvF;QACE,UAAU,EAAE,qDAAqD;QACjE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,qDAAqD;KAC9D;IACD,qDAAqD;IACrD;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8CAA8C;KACvD;IACD;QACE,UAAU,EAAE,+CAA+C;QAC3D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,kGAAkG;KAC3G;IACD;QACE,UAAU,EAAE,mDAAmD;QAC/D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,+FAA+F;KACxG;IACD,0EAA0E;IAC1E;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,6LAA6L;KACtM;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,2FAA2F;KACpG;IACD;QACE,UAAU,EAAE,yCAAyC;QACrD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,+EAA+E;KACxF;IACD;QACE,UAAU,EAAE,oCAAoC;QAChD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,mFAAmF;KAC5F;IACD;QACE,UAAU,EAAE,uCAAuC;QACnD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,4FAA4F;KACrG;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,kFAAkF;KAC3F;IACD;QACE,UAAU,EAAE,6CAA6C;QACzD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,uFAAuF;KAChG;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,oGAAoG;KAC7G;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,2FAA2F;KACpG;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,oGAAoG;KAC7G;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,iGAAiG;KAC1G;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAkB;IACjE,IAAI,GAAG,GAAY,MAAM,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7D,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"devGatedFeatures.js","sourceRoot":"","sources":["../../src/core/devGatedFeatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAoBH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,uGAAuG;KACvH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,kCAAkC;QAC/C,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,mCAAmC;QAC/C,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE,wGAAwG;KACxH;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,6CAA6C;QACzD,WAAW,EAAE,gCAAgC;QAC7C,aAAa,EAAE,sGAAsG;KACtH;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,mDAAmD;QAChE,aAAa,EAAE,8FAA8F;KAC9G;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE,yGAAyG;KACzH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,sBAAsB;QAClC,WAAW,EAAE,iEAAiE;QAC9E,aAAa,EAAE,sDAAsD;KACtE;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,oEAAoE;QACjF,aAAa,EAAE,yDAAyD;KACzE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,kCAAkC;QAC9C,WAAW,EAAE,8EAA8E;QAC3F,aAAa,EAAE,qNAAqN;KACrO;IACD;QACE,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,uBAAuB;QACnC,WAAW,EAAE,+EAA+E;QAC5F,aAAa,EAAE,yNAAyN;KACzO;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EACT,6IAA6I;QAC/I,aAAa,EACX,uKAAuK;KAC1K;CACF,CAAC;AA+BF,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,+EAA+E;IAC/E;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,UAAU,EAAE,wCAAwC;QACpD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,+CAA+C;KACxD;IACD,wEAAwE;IACxE;QACE,UAAU,EAAE,8BAA8B;QAC1C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,UAAU,EAAE,gCAAgC;QAC5C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,iIAAiI;KAC1I;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,gGAAgG;KACzG;IACD,uFAAuF;IACvF;QACE,UAAU,EAAE,qDAAqD;QACjE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,qDAAqD;KAC9D;IACD,qDAAqD;IACrD;QACE,UAAU,EAAE,kCAAkC;QAC9C,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,8CAA8C;KACvD;IACD;QACE,UAAU,EAAE,+CAA+C;QAC3D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,kGAAkG;KAC3G;IACD;QACE,UAAU,EAAE,mDAAmD;QAC/D,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,+FAA+F;KACxG;IACD,0EAA0E;IAC1E;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,oWAAoW;KAC7W;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,6LAA6L;KACtM;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,2FAA2F;KACpG;IACD;QACE,UAAU,EAAE,yCAAyC;QACrD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,+EAA+E;KACxF;IACD;QACE,UAAU,EAAE,oCAAoC;QAChD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,mFAAmF;KAC5F;IACD;QACE,UAAU,EAAE,uCAAuC;QACnD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,4FAA4F;KACrG;IACD;QACE,UAAU,EAAE,2CAA2C;QACvD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,kFAAkF;KAC3F;IACD;QACE,UAAU,EAAE,6CAA6C;QACzD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,uFAAuF;KAChG;IACD;QACE,UAAU,EAAE,qCAAqC;QACjD,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,oGAAoG;KAC7G;IACD;QACE,UAAU,EAAE,+BAA+B;QAC3C,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,2FAA2F;KACpG;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,oGAAoG;KAC7G;IACD;QACE,UAAU,EAAE,gBAAgB;QAC5B,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,iGAAiG;KAC1G;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,UAAkB;IACjE,IAAI,GAAG,GAAY,MAAM,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7D,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/types.d.ts

@@ -1986,6 +1986,13 @@ export interface CoherenceJournalUserConfig {
         maxPendingOpsPerOwner?: number;
         opKeyTtlDays?: number;
     };
+    /** WS2.1 preferences pool — independent page-sizing dials (MULTI-MACHINE-SEAMLESSNESS-SPEC §WS2.1). */
+    preferences?: {
+        syncPageBytes?: number;
+        maxSyncPagesPerTick?: number;
+        replicaStaleWarnMs?: number;
+        maxReplicatedPreferences?: number;
+    };
     /**
      * Per-kind retention. rotateKeep N>0 = rotate at maxFileBytes, keep N
      * archives, delete older; 0 = rotate at maxFileBytes but NEVER delete
@@ -4065,6 +4072,33 @@ export interface MonitoringConfig {
         /** Override the instar repo path to analyze (default: the agent home). */
         repoPath?: string;
     };
+    /**
+     * green-pr-automerge-enforcement R7: the background watcher that merges a
+     * green, mergeable, non-held PR this agent authored (Phase 7 becomes
+     * machinery). DARK_GATE_EXCLUSIONS: deliberate-fleet-default — off fleet-wide,
+     * flipped on per dev agent with expectedGhLogin. Repo-gated.
+     */
+    greenPrAutoMerge?: {
+        enabled: boolean;
+        dryRun?: boolean;
+        tickIntervalMs?: number;
+        maxAttempts?: number;
+        maxRearmEpisodes?: number;
+        breakerThreshold?: number;
+        deadlineKillBreakerThreshold?: number;
+        busySkipBreakerThreshold?: number;
+        breakerCooldownMin?: number;
+        mergeTimeoutMs?: number;
+        mergeKillGraceMs?: number;
+        /** The agent's verified gh login (R4 identity contract). Unset → inert. */
+        expectedGhLogin?: string;
+        identityRecheckTicks?: number;
+        holdReleaseTicks?: number;
+        staleHoldDays?: number;
+        floorDriftCheckTicks?: number;
+        floorDriftLookbackPrs?: number;
+        floorDriftLookbackCommits?: number;
+    };
     /**
      * Master gate for Telegram delivery of silently-stopped-sentinel escalations
      * (SentinelNotifier). Default false → sentinel notices are logged to the