instar 1.3.539 → 1.3.541

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAm3CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA6/atE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAm3CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4hbtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -2767,11 +2767,13 @@ export async function startServer(options) {
         // runs BEFORE AgentServer binds its port, so for minutes nothing answers
         // /health and the supervisor can mistake a slow boot for a dead process →
         // the restart loop. This minimal beacon answers /health from the very start
-        // of boot; it is closed at the handoff just before server.start(). Dark by
-        // default (monitoring.bootHealthBeacon.enabled); the grace bump (#979) covers
-        // the window until this is enabled. Belt-and-suspenders, not a boot reorder.
+        // of boot; it is closed at the handoff just before server.start().
+        // DEV-GATED (CMT-1438): `enabled` OMITTED from defaults so the developmentAgent
+        // gate decides — LIVE on a dev agent, DARK on the fleet; the grace bump (#979)
+        // covers the window on the fleet. D4-verified read-only (localhost-only inbound
+        // socket, zero outbound). Belt-and-suspenders, not a boot reorder.
         let bootBeacon;
-        if (config.monitoring?.bootHealthBeacon?.enabled) {
+        if (resolveDevAgentGate(config.monitoring?.bootHealthBeacon?.enabled, config)) {
             try {
                 bootBeacon = new BootHealthBeacon(config.port);
                 await bootBeacon.start();
@@ -8543,9 +8545,30 @@ export async function startServer(options) {
             oracle: new CredentialIdentityOracle(),
             emitAttention: credentialGateEmitAttention,
         });
+        // The §2.10 env-token gate (Step 8): the §0.b applicability precondition, enforced. Evaluates
+        // BOTH `config.anthropicApiKey` (read LIVE per call — restartless) AND the live running fleet's
+        // durable per-session `credentialSource` flag, so a mid-run flip to an env token cannot silently
+        // un-steer the fleet. Pure evaluator (no IO). Constructed BEFORE the location gate so the
+        // location gate can AND-in its refusal — a §2.10 refusal suppresses ALL re-pointing attribution
+        // (requirement 3: an env-token session's usage is never mis-attributed to a slot tenant).
+        const { CredentialEnvTokenGate } = await import('../core/CredentialEnvTokenGate.js');
+        const credentialEnvTokenGate = new CredentialEnvTokenGate({
+            // SINGLE SOURCE OF TRUTH: the SessionManager spawn site reads `this.config.anthropicApiKey`,
+            // and `sessionManagerConfig` is `{ ...config.sessions }`, so the IDENTICAL value the env-block
+            // predicate sees is `config.sessions.anthropicApiKey`. Read it (not the legacy top-level field)
+            // so the gate's config predicate can never diverge from what actually launched the sessions.
+            getAnthropicApiKey: () => config.sessions?.anthropicApiKey,
+            listSessions: () => state.listSessions(),
+        });
         const credentialLocationGate = new CredentialLocationGate({
-            // Live flag read — a restartless config flip is honored on the next read.
-            isEnabled: () => config.subscriptionPool?.credentialRepointing?.enabled === true,
+            // Live flag read — a restartless config flip is honored on the next read. AND-ed with the
+            // §2.10 env-token gate: when the feature would refuse (config field set OR a live env-token
+            // session in the fleet), re-pointing attribution is suppressed wholesale, so the QuotaPoller
+            // stops routing reads/attribution through moved slots (an env fleet isn't store-steered, and
+            // attributing it would mis-credit usage to a slot tenant). Dark-default: when the feature flag
+            // is off this short-circuits before evaluating the gate, so it's byte-for-byte today's behavior.
+            isEnabled: () => config.subscriptionPool?.credentialRepointing?.enabled === true &&
+                !credentialEnvTokenGate.evaluate().refused,
             ledger: credentialLocationLedger,
             emitAttention: credentialGateEmitAttention,
         });
@@ -8628,6 +8651,7 @@ export async function startServer(options) {
             resolveIdentity: credResolveIdentity,
             audit: credentialAuditEmit,
             levers: credentialManualLevers,
+            envTokenGate: credentialEnvTokenGate,
             readBlob: async (slot) => {
                 const raw = await defaultKeychainExec.readService(credSwapService(slot));
                 if (!raw)
@@ -12638,7 +12662,13 @@ export async function startServer(options) {
         {
             const rrCfg = config.monitoring?.releaseReadiness;
             const repoPath = rrCfg?.repoPath ?? process.cwd();
-            if (rrCfg?.enabled) {
+            // DEV-GATED (CMT-1438): `enabled` OMITTED from defaults so the developmentAgent
+            // gate decides — LIVE on a dev agent, DARK on the fleet. D4-verified
+            // inert-on-enable: this only constructs the READ surface; ticks/sends require
+            // the SEPARATE off-by-default release-readiness-check job (two-switch). The
+            // `rrCfg &&` guard preserves the original "block must exist" semantics
+            // (applyDefaults always injects it) and narrows the type for the field reads.
+            if (rrCfg && resolveDevAgentGate(rrCfg.enabled, config)) {
                 const { isAnalyzableRepo, buildReleaseReadinessDeps } = await import('../monitoring/releaseReadinessWiring.js');
                 if (isAnalyzableRepo(repoPath)) {
                     const { ReleaseReadinessSentinel } = await import('../monitoring/ReleaseReadinessSentinel.js');