instar 1.3.586 → 1.3.588

package/dist/core/WorkEvidence.d.ts

@@ -35,6 +35,23 @@ export declare const MARKER_WORK_EVIDENCE: readonly ["unverified-under-pressure"
  * evidence-vocabulary string is here (imported by server.ts + ResumeQueueDrainer.ts).
  */
 export declare const AGE_LIMIT_ACTIVE_RUN_REASON = "age-limit (active autonomous run)";
+/**
+ * The reap-reason tag for an age-limit recycle whose topic has no per-topic
+ * autonomous-run state file (the run was never registered) BUT carries a fresh,
+ * qualifying open agent-commitment corroborated by a recent user message
+ * (spec: docs/specs/autonomous-registration-guarantee.md, GAP-B Part B). This is
+ * the BACKSTOP for an unregistered-but-actively-working autonomous run: the
+ * commitment is the independent live-work signal the state-file source cannot see.
+ *
+ * Parallel to AGE_LIMIT_ACTIVE_RUN_REASON (registered runs) so the drainer can
+ * route this candidate to its OWN drain-time liveness re-check
+ * (`commitmentStillActiveForTopic`) instead of the state-file read (which is
+ * absent here by construction). The reason is the provenance carrier — there is
+ * NO new WorkEvidence enum value (the strong `build-or-autonomous-active` signal
+ * is reused; the clamped WorkEvidenceName union is untouched). Imported by
+ * server.ts (injection) + ResumeQueueDrainer.ts (drain-time routing).
+ */
+export declare const COMMITMENT_ACTIVE_RUN_REASON = "age-limit (committed unregistered run)";
 /**
  * Closed-world predicate: is this resume-queue PAUSE reason a blunt
  * emergency/sentinel stop that the drainer may auto-resume once it has gone

package/dist/core/WorkEvidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WorkEvidence.d.ts","sourceRoot":"","sources":["../../src/core/WorkEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,eAAO,MAAM,oBAAoB,yJAavB,CAAC;AAEX,eAAO,MAAM,kBAAkB,0FAKrB,CAAC;AAEX,eAAO,MAAM,oBAAoB,wCAAyC,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,sCAAsC,CAAC;AAE/E;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mCAAmC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAG9F;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AACnE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;AAY1F;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAYpE;AAED,gDAAgD;AAChD,wBAAgB,SAAS,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAE9D;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAE9E;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAE5E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAI1F"}
+{"version":3,"file":"WorkEvidence.d.ts","sourceRoot":"","sources":["../../src/core/WorkEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,eAAO,MAAM,oBAAoB,yJAavB,CAAC;AAEX,eAAO,MAAM,kBAAkB,0FAKrB,CAAC;AAEX,eAAO,MAAM,oBAAoB,wCAAyC,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,sCAAsC,CAAC;AAE/E;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,4BAA4B,2CAA2C,CAAC;AAErF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mCAAmC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAG9F;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AACnE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;AAY1F;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAYpE;AAED,gDAAgD;AAChD,wBAAgB,SAAS,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAE9D;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAE9E;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAE5E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAI1F"}

package/dist/core/WorkEvidence.js

@@ -53,6 +53,23 @@ export const MARKER_WORK_EVIDENCE = ['unverified-under-pressure'];
  * evidence-vocabulary string is here (imported by server.ts + ResumeQueueDrainer.ts).
  */
 export const AGE_LIMIT_ACTIVE_RUN_REASON = 'age-limit (active autonomous run)';
+/**
+ * The reap-reason tag for an age-limit recycle whose topic has no per-topic
+ * autonomous-run state file (the run was never registered) BUT carries a fresh,
+ * qualifying open agent-commitment corroborated by a recent user message
+ * (spec: docs/specs/autonomous-registration-guarantee.md, GAP-B Part B). This is
+ * the BACKSTOP for an unregistered-but-actively-working autonomous run: the
+ * commitment is the independent live-work signal the state-file source cannot see.
+ *
+ * Parallel to AGE_LIMIT_ACTIVE_RUN_REASON (registered runs) so the drainer can
+ * route this candidate to its OWN drain-time liveness re-check
+ * (`commitmentStillActiveForTopic`) instead of the state-file read (which is
+ * absent here by construction). The reason is the provenance carrier — there is
+ * NO new WorkEvidence enum value (the strong `build-or-autonomous-active` signal
+ * is reused; the clamped WorkEvidenceName union is untouched). Imported by
+ * server.ts (injection) + ResumeQueueDrainer.ts (drain-time routing).
+ */
+export const COMMITMENT_ACTIVE_RUN_REASON = 'age-limit (committed unregistered run)';
 /**
  * Closed-world predicate: is this resume-queue PAUSE reason a blunt
  * emergency/sentinel stop that the drainer may auto-resume once it has gone

package/dist/core/WorkEvidence.js.map

@@ -1 +1 @@
-{"version":3,"file":"WorkEvidence.js","sourceRoot":"","sources":["../../src/core/WorkEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,4BAA4B;IAC5B,iBAAiB;IACjB,mBAAmB;IACnB,iBAAiB;IACjB,sBAAsB;IACtB,8EAA8E;IAC9E,oEAAoE;IACpE,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,iFAAiF;IACjF,2BAA2B;CACnB,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gBAAgB;IAChB,qBAAqB;IACrB,qBAAqB;IACrB,aAAa;CACL,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,2BAA2B,CAAU,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAE/E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mCAAmC,CAAC,MAAiC;IACnF,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAOD,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,GAAG,oBAAoB;IACvB,GAAG,kBAAkB;IACrB,GAAG,oBAAoB;CACxB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AACtE,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAClE,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QACnC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,CAAqB,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,SAAS,CAAC,QAA2B;IACnD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAA2B;IACxD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA2B;IACtD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA2B,EAAE,UAAmB;IAC/E,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,UAAU,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"WorkEvidence.js","sourceRoot":"","sources":["../../src/core/WorkEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,4BAA4B;IAC5B,iBAAiB;IACjB,mBAAmB;IACnB,iBAAiB;IACjB,sBAAsB;IACtB,8EAA8E;IAC9E,oEAAoE;IACpE,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,iFAAiF;IACjF,2BAA2B;CACnB,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gBAAgB;IAChB,qBAAqB;IACrB,qBAAqB;IACrB,aAAa;CACL,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,2BAA2B,CAAU,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAE/E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,wCAAwC,CAAC;AAErF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mCAAmC,CAAC,MAAiC;IACnF,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAOD,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,GAAG,oBAAoB;IACvB,GAAG,kBAAkB;IACrB,GAAG,oBAAoB;CACxB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AACtE,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAClE,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QACnC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,CAAqB,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,SAAS,CAAC,QAA2B;IACnD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAA2B;IACxD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA2B;IACtD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA2B,EAAE,UAAmB;IAC/E,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,UAAU,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/gapBCommitmentEvidence.d.ts

@@ -0,0 +1,143 @@
+/**
+ * GAP-B commitment-evidence backstop — the pure qualifying + agreement predicate.
+ *
+ * Spec: docs/specs/autonomous-registration-guarantee.md (Part B + Frontloaded
+ * Decisions D1/D2/D7/D8).
+ *
+ * The reaper revives a REGISTERED autonomous run from its per-topic state file.
+ * An UNregistered-but-actively-working run (operator said "go autonomous" but the
+ * skill never wrote the state file) has no state file → today it dies at the
+ * age-limit reap. This module is the BACKSTOP: it recognizes an independent
+ * live-work signal — a FRESH open agent-commitment for the topic, CORROBORATED by
+ * a recent user message — and (when armed, dark by default) lets the existing
+ * revival machinery keep the run alive.
+ *
+ * This file holds ONLY the deterministic predicates (D1 freshness, D2 qualifying
+ * set, D8 agreement). The wiring (the dark-gate, the injection, the Part A
+ * surface, the drain-time re-check) lives at the server callsite. Extracting the
+ * predicate here makes D1/D2/D7/D8 unit-testable against a REAL CommitmentTracker
+ * with no server boot — and guarantees the enqueue-time check and the drain-time
+ * re-check (D9) compute the IDENTICAL verdict (they call this same function), so
+ * they can never disagree.
+ *
+ * Signal vs Authority: this returns a boolean SIGNAL. The authority that decides
+ * revival remains the unchanged `evidenceEligible`/drainer. No new WorkEvidence
+ * enum value; provenance rides the reason tag + the reap-log `evidenceSource`.
+ */
+import type { Commitment } from '../monitoring/CommitmentTracker.js';
+/**
+ * Part D (spec: autonomous-registration-guarantee.md) — the pure inbound-user-
+ * message recency predicate over a topic's message-history tail. Extracted here
+ * so it is unit-testable against real TelegramAdapter.getTopicHistory output
+ * WITHOUT a server boot, and shared by every `recentUserMessage` consumer (the
+ * ReapGuard/SessionReaper deps AND the GAP-B D8 agreement check) so KEEP and
+ * eligibility compute the identical truth.
+ *
+ * An inbound USER message = `fromUser === true` (NOT an agent/system echo).
+ * Freshness = its `timestamp` within `withinMs`. History is oldest→newest, so the
+ * newest user entry (the first hit scanning backwards) is the verdict. A
+ * non-parseable timestamp is skipped (never a false positive). Returns false on
+ * an empty / user-message-free history. Pure — the server callsite wraps the
+ * getTopicHistory call in its own try/catch (D7 fail-open).
+ */
+export interface RecencyLogEntry {
+    fromUser: boolean;
+    timestamp: string;
+}
+export declare function recentUserMessageFromHistory(history: readonly RecencyLogEntry[], withinMs: number, now?: number): boolean;
+/** The minimal slice of CommitmentTracker this predicate reads. */
+export interface GapBCommitmentSource {
+    /** Active commitments bound to a topic (pending/verified/violated, not expired). */
+    getActiveByTopicId(topicId: number): Commitment[];
+}
+export interface GapBQualifyDeps {
+    /** This machine's mesh identity, for the D2 local-origin filter. May be absent
+     *  (single-machine / pre-mesh) — then no commitment is excluded on origin. */
+    ownMachineId?: string;
+    /** D1 freshness horizon on `createdAt` (ms). */
+    freshCommitmentWindowMs: number;
+    /** D8 agreement window — the SAME `recentUserMessage(topic, window)` predicate
+     *  ReapGuard's commitment KEEP uses (the staleCommitmentWindowMs / 8h horizon). */
+    staleCommitmentWindowMs: number;
+    /** D8 corroboration: a recent INBOUND USER message on the topic within window.
+     *  Shared with ReapGuard's dep so KEEP and eligibility cannot disagree. */
+    recentUserMessage: (topicId: number, withinMs: number) => boolean;
+    /** Wall clock (injected for testability). Default Date.now. */
+    now?: () => number;
+}
+/**
+ * D2 qualifying-commitment predicate (the per-commitment half).
+ *
+ * A commitment counts as live-work evidence only if ALL hold:
+ *  - `status === 'pending'` (NOT verified/violated — a violated commitment is a
+ *    FAILING session, not a working one);
+ *  - agent-driven: `owner === 'agent'` (default), OR `owner === 'user'` with
+ *    `blockedOn` ∈ {none, undefined} — a commitment WAITING on the user
+ *    (`blockedOn` ∈ {user-input, user-authorization}) is the opposite of an
+ *    active autonomous run and is excluded;
+ *  - not beacon-paused and not beacon-suppressed;
+ *  - local-origin: `originMachineId` is this machine or absent (a replicated peer
+ *    commitment is advisory data, never revival authority);
+ *  - D1 freshness: `createdAt` within `freshCommitmentWindowMs` — `createdAt` ONLY
+ *    (no `updatedAt` exists; bookkeeping/beacon timestamps must NOT refresh
+ *    freshness — a 3-day promise a beacon pinged 5min ago is not a live session).
+ */
+export declare function commitmentQualifies(c: Commitment, deps: Pick<GapBQualifyDeps, 'ownMachineId' | 'freshCommitmentWindowMs' | 'now'>): boolean;
+/**
+ * The full GAP-B eligibility verdict for a topic (D1/D2 + D8 agreement).
+ *
+ * True iff (a) at least one qualifying commitment exists for the topic (D1/D2),
+ * AND (b) there is a recent user message within the stale-commitment window (D8 —
+ * the SAME corroboration ReapGuard's commitment KEEP uses, so KEEP and
+ * eligibility AGREE; without this the 2026-06-13 13-session reap/revive loop
+ * returns). Fail-open (D7): any read throwing ⇒ false (no injection), never a
+ * spurious eligibility.
+ */
+export declare function gapBEligibleForTopic(topicId: number, source: GapBCommitmentSource, deps: GapBQualifyDeps): boolean;
+/** Dark-gate posture for the Part B injection (D5), resolved from config. */
+export interface GapBInjectionGate {
+    /** True only when `monitoring.resumeQueue.commitmentEvidence.enabled === true`.
+     *  Omitted ⇒ OFF on BOTH fleet AND dev (the containment). */
+    armed: boolean;
+    /** dryRun defaults TRUE when armed: logs "would inject" without tagging the
+     *  candidate (the dark soak proving KEEP/eligibility agree before evidence
+     *  flows). Only `armed && !dryRun` actually injects. */
+    dryRun: boolean;
+}
+/**
+ * Resolve the Part B dark-gate from the resumeQueue config block (D5).
+ * `enabled` MUST be an explicit `true` — absence/false ⇒ disarmed (no injection
+ * on fleet OR dev). `dryRun` defaults true when armed.
+ */
+export declare function resolveGapBInjectionGate(cfg?: {
+    enabled?: boolean;
+    dryRun?: boolean;
+}): GapBInjectionGate;
+/** The full reaped-session decision: did GAP-B evidence fire, and does it INJECT? */
+export interface GapBInjectionDecision {
+    /** The qualifying-commitment + D8 verdict fired (drives the Part A surface,
+     *  even in dryRun — the surface exists to make the unregistered run visible). */
+    fired: boolean;
+    /** The LIVE injection switch: `fired && armed && !dryRun`. Only this tags the
+     *  candidate + the reap-log. dryRun logs the verdict but injects nothing. */
+    inject: boolean;
+}
+/**
+ * Compute the reaped-session GAP-B decision. Pinned to the SAME branch the
+ * state-file source uses: an `age-limit` reap whose per-topic state file is
+ * ABSENT (`stateFilePresent === false` — a registered run is handled upstream by
+ * AGE_LIMIT_ACTIVE_RUN_REASON). When disarmed, returns a strict no-op
+ * `{fired:false, inject:false}` (the dark-default containment: no injection ⇒ no
+ * revival ⇒ the 2026-06-13 loop is structurally impossible while dark).
+ *
+ * `eligible` is the precomputed `gapBEligibleForTopic` verdict (kept a parameter
+ * so the caller can short-circuit the cost when disarmed, and so this stays a
+ * pure decision function over booleans).
+ */
+export declare function decideGapBInjection(input: {
+    gate: GapBInjectionGate;
+    reason: string;
+    stateFilePresent: boolean;
+    eligible: boolean;
+}): GapBInjectionDecision;
+//# sourceMappingURL=gapBCommitmentEvidence.d.ts.map

package/dist/core/gapBCommitmentEvidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gapBCommitmentEvidence.d.ts","sourceRoot":"","sources":["../../src/core/gapBCommitmentEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAmB,GACvB,OAAO,CAYT;AAED,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,oFAAoF;IACpF,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,eAAe;IAC9B;kFAC8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,uBAAuB,EAAE,MAAM,CAAC;IAChC;uFACmF;IACnF,uBAAuB,EAAE,MAAM,CAAC;IAChC;+EAC2E;IAC3E,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAClE,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,UAAU,EACb,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,cAAc,GAAG,yBAAyB,GAAG,KAAK,CAAC,GAC9E,OAAO,CAgBT;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE,eAAe,GACpB,OAAO,CAcT;AAED,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC;iEAC6D;IAC7D,KAAK,EAAE,OAAO,CAAC;IACf;;4DAEwD;IACxD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,CAAC,EAAE;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,iBAAiB,CAGpB;AAED,qFAAqF;AACrF,MAAM,WAAW,qBAAqB;IACpC;qFACiF;IACjF,KAAK,EAAE,OAAO,CAAC;IACf;iFAC6E;IAC7E,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;CACnB,GAAG,qBAAqB,CAMxB"}

package/dist/core/gapBCommitmentEvidence.js

@@ -0,0 +1,138 @@
+/**
+ * GAP-B commitment-evidence backstop — the pure qualifying + agreement predicate.
+ *
+ * Spec: docs/specs/autonomous-registration-guarantee.md (Part B + Frontloaded
+ * Decisions D1/D2/D7/D8).
+ *
+ * The reaper revives a REGISTERED autonomous run from its per-topic state file.
+ * An UNregistered-but-actively-working run (operator said "go autonomous" but the
+ * skill never wrote the state file) has no state file → today it dies at the
+ * age-limit reap. This module is the BACKSTOP: it recognizes an independent
+ * live-work signal — a FRESH open agent-commitment for the topic, CORROBORATED by
+ * a recent user message — and (when armed, dark by default) lets the existing
+ * revival machinery keep the run alive.
+ *
+ * This file holds ONLY the deterministic predicates (D1 freshness, D2 qualifying
+ * set, D8 agreement). The wiring (the dark-gate, the injection, the Part A
+ * surface, the drain-time re-check) lives at the server callsite. Extracting the
+ * predicate here makes D1/D2/D7/D8 unit-testable against a REAL CommitmentTracker
+ * with no server boot — and guarantees the enqueue-time check and the drain-time
+ * re-check (D9) compute the IDENTICAL verdict (they call this same function), so
+ * they can never disagree.
+ *
+ * Signal vs Authority: this returns a boolean SIGNAL. The authority that decides
+ * revival remains the unchanged `evidenceEligible`/drainer. No new WorkEvidence
+ * enum value; provenance rides the reason tag + the reap-log `evidenceSource`.
+ */
+export function recentUserMessageFromHistory(history, withinMs, now = Date.now()) {
+    const cutoff = now - withinMs;
+    for (let i = history.length - 1; i >= 0; i--) {
+        const entry = history[i];
+        if (!entry.fromUser)
+            continue; // skip agent/system echoes
+        const ts = Date.parse(entry.timestamp);
+        if (!Number.isFinite(ts))
+            continue;
+        // The first USER entry scanning backwards is the NEWEST user message — its
+        // recency is the verdict (every earlier user entry is older).
+        return ts >= cutoff;
+    }
+    return false;
+}
+/**
+ * D2 qualifying-commitment predicate (the per-commitment half).
+ *
+ * A commitment counts as live-work evidence only if ALL hold:
+ *  - `status === 'pending'` (NOT verified/violated — a violated commitment is a
+ *    FAILING session, not a working one);
+ *  - agent-driven: `owner === 'agent'` (default), OR `owner === 'user'` with
+ *    `blockedOn` ∈ {none, undefined} — a commitment WAITING on the user
+ *    (`blockedOn` ∈ {user-input, user-authorization}) is the opposite of an
+ *    active autonomous run and is excluded;
+ *  - not beacon-paused and not beacon-suppressed;
+ *  - local-origin: `originMachineId` is this machine or absent (a replicated peer
+ *    commitment is advisory data, never revival authority);
+ *  - D1 freshness: `createdAt` within `freshCommitmentWindowMs` — `createdAt` ONLY
+ *    (no `updatedAt` exists; bookkeeping/beacon timestamps must NOT refresh
+ *    freshness — a 3-day promise a beacon pinged 5min ago is not a live session).
+ */
+export function commitmentQualifies(c, deps) {
+    if (c.status !== 'pending')
+        return false;
+    const owner = c.owner ?? 'agent';
+    const blockedOn = c.blockedOn ?? 'none';
+    const agentDriven = owner === 'agent' || (owner === 'user' && blockedOn === 'none');
+    if (!agentDriven)
+        return false;
+    if (c.beaconPaused || c.beaconSuppressed)
+        return false;
+    if (c.originMachineId && deps.ownMachineId && c.originMachineId !== deps.ownMachineId) {
+        return false;
+    }
+    const nowMs = (deps.now ?? Date.now)();
+    const createdMs = Date.parse(c.createdAt);
+    if (!Number.isFinite(createdMs) || createdMs < nowMs - deps.freshCommitmentWindowMs) {
+        return false;
+    }
+    return true;
+}
+/**
+ * The full GAP-B eligibility verdict for a topic (D1/D2 + D8 agreement).
+ *
+ * True iff (a) at least one qualifying commitment exists for the topic (D1/D2),
+ * AND (b) there is a recent user message within the stale-commitment window (D8 —
+ * the SAME corroboration ReapGuard's commitment KEEP uses, so KEEP and
+ * eligibility AGREE; without this the 2026-06-13 13-session reap/revive loop
+ * returns). Fail-open (D7): any read throwing ⇒ false (no injection), never a
+ * spurious eligibility.
+ */
+export function gapBEligibleForTopic(topicId, source, deps) {
+    try {
+        const qualifies = source
+            .getActiveByTopicId(topicId)
+            .some((c) => commitmentQualifies(c, deps));
+        if (!qualifies)
+            return false;
+        // D8 AGREEMENT — non-negotiable. A commitment that would NOT keep the session
+        // alive (no recent user message) cannot revive it either.
+        return deps.recentUserMessage(topicId, deps.staleCommitmentWindowMs);
+    }
+    catch {
+        // @silent-fallback-ok — D7: a throwing tracker/predicate contributes NOTHING;
+        // the reap proceeds exactly as today (no injection, no revive).
+        return false;
+    }
+}
+/**
+ * Resolve the Part B dark-gate from the resumeQueue config block (D5).
+ * `enabled` MUST be an explicit `true` — absence/false ⇒ disarmed (no injection
+ * on fleet OR dev). `dryRun` defaults true when armed.
+ */
+export function resolveGapBInjectionGate(cfg) {
+    const armed = cfg?.enabled === true;
+    return { armed, dryRun: cfg?.dryRun !== false };
+}
+/**
+ * Compute the reaped-session GAP-B decision. Pinned to the SAME branch the
+ * state-file source uses: an `age-limit` reap whose per-topic state file is
+ * ABSENT (`stateFilePresent === false` — a registered run is handled upstream by
+ * AGE_LIMIT_ACTIVE_RUN_REASON). When disarmed, returns a strict no-op
+ * `{fired:false, inject:false}` (the dark-default containment: no injection ⇒ no
+ * revival ⇒ the 2026-06-13 loop is structurally impossible while dark).
+ *
+ * `eligible` is the precomputed `gapBEligibleForTopic` verdict (kept a parameter
+ * so the caller can short-circuit the cost when disarmed, and so this stays a
+ * pure decision function over booleans).
+ */
+export function decideGapBInjection(input) {
+    if (!input.gate.armed)
+        return { fired: false, inject: false };
+    if (input.reason !== 'age-limit')
+        return { fired: false, inject: false };
+    if (input.stateFilePresent)
+        return { fired: false, inject: false };
+    if (!input.eligible)
+        return { fired: false, inject: false };
+    return { fired: true, inject: !input.gate.dryRun };
+}
+//# sourceMappingURL=gapBCommitmentEvidence.js.map

package/dist/core/gapBCommitmentEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gapBCommitmentEvidence.js","sourceRoot":"","sources":["../../src/core/gapBCommitmentEvidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAwBH,MAAM,UAAU,4BAA4B,CAC1C,OAAmC,EACnC,QAAgB,EAChB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,SAAS,CAAC,2BAA2B;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,SAAS;QACnC,2EAA2E;QAC3E,8DAA8D;QAC9D,OAAO,EAAE,IAAI,MAAM,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAwBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CACjC,CAAa,EACb,IAA+E;IAE/E,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC;IACjC,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;IACxC,MAAM,WAAW,GAAG,KAAK,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC;IACpF,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACpF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,MAA4B,EAC5B,IAAqB;IAErB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM;aACrB,kBAAkB,CAAC,OAAO,CAAC;aAC3B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,8EAA8E;QAC9E,0DAA0D;QAC1D,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,gEAAgE;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAGxC;IACC,MAAM,KAAK,GAAG,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;AAClD,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACzE,IAAI,KAAK,CAAC,gBAAgB;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACnE,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC5D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;AACrD,CAAC"}

package/dist/core/internalFrameworkDefault.d.ts

@@ -0,0 +1,50 @@
+/**
+ * internalFrameworkDefault — the PROVIDER-FALLBACK DEFAULT POLICY
+ * (docs/specs/provider-fallback-default-policy.md §4.1–4.2).
+ *
+ * Computes the effective `ComponentFrameworksConfig` that turns the already-shipped
+ * IntelligenceRouter failure-swap engine ON out-of-the-box: internal, lightweight,
+ * high-frequency categories (sentinel / gate / reflector) run on the FIRST ACTIVE
+ * framework in a documented preference chain, with the remaining active frameworks
+ * as the ordered `failureSwap` tail and Claude as the last resort.
+ *
+ * This is a PURE policy resolver — it does NOT probe the system. The caller passes
+ * the already-computed active-framework set (probed once at boot via the router's
+ * own `buildProvider(fw) !== null` truth — §4.2), so this module is unit-testable
+ * in isolation.
+ *
+ * What it does NOT do (deliberate, per §4.1):
+ *  - `job` is EXCLUDED — routing cost-bearing background jobs (e.g. CartographerSweep)
+ *    off Claude by default would silently auto-arm them; an operator arms `categories.job`.
+ *  - `other` is left on the agent default (unchanged).
+ *  - Spawned interactive sessions stay on `topicFrameworks` (out of scope).
+ */
+import type { IntelligenceFramework } from './intelligenceProviderFactory.js';
+import type { ComponentFrameworksConfig } from './IntelligenceRouter.js';
+/**
+ * The internal-component provider preference chain (§4.1 / §6.5). ONE named,
+ * documented, inspectable place. Order: Codex first (operator directive), Claude
+ * last (the true last resort for background work). A unit test validates every
+ * entry against the real `IntelligenceFramework` enum so an unknown name never ships.
+ */
+export declare const INTERNAL_FRAMEWORK_PREFERENCE: readonly IntelligenceFramework[];
+/**
+ * Compute the default `componentFrameworks` from the active-framework set.
+ *
+ * @param activeFrameworks the preference chain filtered to frameworks ACTIVE in this
+ *   agent, IN PREFERENCE ORDER (the caller filters `INTERNAL_FRAMEWORK_PREFERENCE`
+ *   by `buildProvider(fw) !== null`). MUST already be ordered + de-duplicated.
+ * @returns the effective `ComponentFrameworksConfig`:
+ *   - `categories.{sentinel,gate,reflector}` = `active[0]` (first active off-Claude,
+ *     or claude-code if that's all that's active)
+ *   - `failureSwap` = `active.slice(1)` (the ordered tail, claude-code last)
+ *   - `fallback: 'default'`
+ *
+ * No-op cases (byte-identical to today — primary is the agent default, empty swap):
+ *   - `active === []`               → `{ failureSwap: [], fallback: 'default' }`
+ *   - `active === ['claude-code']`  → `{ failureSwap: [], fallback: 'default' }`
+ *     (claude-code IS the default framework, so emitting it as the primary category
+ *     value is harmless, but we leave categories unset to keep the no-op truly inert)
+ */
+export declare function resolveInternalFrameworkDefault(activeFrameworks: readonly IntelligenceFramework[]): ComponentFrameworksConfig;
+//# sourceMappingURL=internalFrameworkDefault.d.ts.map

package/dist/core/internalFrameworkDefault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internalFrameworkDefault.d.ts","sourceRoot":"","sources":["../../src/core/internalFrameworkDefault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,qBAAqB,EAKhE,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,+BAA+B,CAC7C,gBAAgB,EAAE,SAAS,qBAAqB,EAAE,GACjD,yBAAyB,CAqB3B"}

package/dist/core/internalFrameworkDefault.js

@@ -0,0 +1,72 @@
+/**
+ * internalFrameworkDefault — the PROVIDER-FALLBACK DEFAULT POLICY
+ * (docs/specs/provider-fallback-default-policy.md §4.1–4.2).
+ *
+ * Computes the effective `ComponentFrameworksConfig` that turns the already-shipped
+ * IntelligenceRouter failure-swap engine ON out-of-the-box: internal, lightweight,
+ * high-frequency categories (sentinel / gate / reflector) run on the FIRST ACTIVE
+ * framework in a documented preference chain, with the remaining active frameworks
+ * as the ordered `failureSwap` tail and Claude as the last resort.
+ *
+ * This is a PURE policy resolver — it does NOT probe the system. The caller passes
+ * the already-computed active-framework set (probed once at boot via the router's
+ * own `buildProvider(fw) !== null` truth — §4.2), so this module is unit-testable
+ * in isolation.
+ *
+ * What it does NOT do (deliberate, per §4.1):
+ *  - `job` is EXCLUDED — routing cost-bearing background jobs (e.g. CartographerSweep)
+ *    off Claude by default would silently auto-arm them; an operator arms `categories.job`.
+ *  - `other` is left on the agent default (unchanged).
+ *  - Spawned interactive sessions stay on `topicFrameworks` (out of scope).
+ */
+/**
+ * The internal-component provider preference chain (§4.1 / §6.5). ONE named,
+ * documented, inspectable place. Order: Codex first (operator directive), Claude
+ * last (the true last resort for background work). A unit test validates every
+ * entry against the real `IntelligenceFramework` enum so an unknown name never ships.
+ */
+export const INTERNAL_FRAMEWORK_PREFERENCE = [
+    'codex-cli',
+    'pi-cli',
+    'gemini-cli',
+    'claude-code',
+];
+/**
+ * Compute the default `componentFrameworks` from the active-framework set.
+ *
+ * @param activeFrameworks the preference chain filtered to frameworks ACTIVE in this
+ *   agent, IN PREFERENCE ORDER (the caller filters `INTERNAL_FRAMEWORK_PREFERENCE`
+ *   by `buildProvider(fw) !== null`). MUST already be ordered + de-duplicated.
+ * @returns the effective `ComponentFrameworksConfig`:
+ *   - `categories.{sentinel,gate,reflector}` = `active[0]` (first active off-Claude,
+ *     or claude-code if that's all that's active)
+ *   - `failureSwap` = `active.slice(1)` (the ordered tail, claude-code last)
+ *   - `fallback: 'default'`
+ *
+ * No-op cases (byte-identical to today — primary is the agent default, empty swap):
+ *   - `active === []`               → `{ failureSwap: [], fallback: 'default' }`
+ *   - `active === ['claude-code']`  → `{ failureSwap: [], fallback: 'default' }`
+ *     (claude-code IS the default framework, so emitting it as the primary category
+ *     value is harmless, but we leave categories unset to keep the no-op truly inert)
+ */
+export function resolveInternalFrameworkDefault(activeFrameworks) {
+    const active = activeFrameworks;
+    // No off-Claude provider active ⇒ a true no-op: no category routing, empty swap.
+    // 'claude-code' alone means there is nothing to route OFF Claude onto, so the
+    // policy is inert (matches §4.2 — never made worse, never spammed with degrades).
+    if (active.length === 0 || (active.length === 1 && active[0] === 'claude-code')) {
+        return { failureSwap: [], fallback: 'default' };
+    }
+    const primary = active[0];
+    return {
+        categories: {
+            sentinel: primary,
+            gate: primary,
+            reflector: primary,
+            // `job` and `other` are deliberately ABSENT (§4.1).
+        },
+        failureSwap: active.slice(1),
+        fallback: 'default',
+    };
+}
+//# sourceMappingURL=internalFrameworkDefault.js.map

package/dist/core/internalFrameworkDefault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internalFrameworkDefault.js","sourceRoot":"","sources":["../../src/core/internalFrameworkDefault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAqC;IAC7E,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,aAAa;CACL,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,gBAAkD;IAElD,MAAM,MAAM,GAAG,gBAAgB,CAAC;IAEhC,iFAAiF;IACjF,8EAA8E;IAC9E,kFAAkF;IAClF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO;QACL,UAAU,EAAE;YACV,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,OAAO;YAClB,oDAAoD;SACrD;QACD,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,QAAQ,EAAE,SAAS;KACpB,CAAC;AACJ,CAAC"}

package/dist/core/types.d.ts

@@ -228,6 +228,14 @@ export interface SessionManagerConfig {
         categories?: Partial<Record<'sentinel' | 'gate' | 'job' | 'reflector' | 'other', 'claude-code' | 'codex-cli' | 'gemini-cli' | 'pi-cli'>>;
         overrides?: Record<string, 'claude-code' | 'codex-cli' | 'gemini-cli' | 'pi-cli'>;
         fallback?: 'default' | 'none';
+        /**
+         * Ordered fallback frameworks a SAFETY-GATING call tries when its primary
+         * provider fails at runtime, before failing closed (provider-fallback-default-policy.md).
+         * The provider-fallback DEFAULT POLICY computes this automatically from the active
+         * set (sentinel/gate/reflector → first active off-Claude, remaining active as the
+         * tail) when this whole block is unset; an operator who sets the block supplies it.
+         */
+        failureSwap?: Array<'claude-code' | 'codex-cli' | 'gemini-cli' | 'pi-cli'>;
     };
     /**
      * The agent's resolved runtime framework — the single source of
@@ -2676,6 +2684,16 @@ export interface InstarConfig {
              */
             openMs?: number;
         };
+        /**
+         * Per-attempt swap timeout (ms) for the IntelligenceRouter failure-swap loop
+         * (docs/specs/provider-fallback-default-policy.md §4.5). Each gating swap attempt
+         * races this cap; a slow-but-not-erroring provider is abandoned at the cap and the
+         * loop advances to the next target. INLINE-DEFAULTED to 5000ms at the router
+         * construction site — absent ⇒ 5s applies; present ⇒ the operator's value wins.
+         * Deliberately kept out of ConfigDefaults/migrateConfig (codexExecJson precedent)
+         * so absence is the default state, never a persisted block.
+         */
+        swapAttemptTimeoutMs?: number;
         /**
          * Anthropic subscription-path routing for INTERNAL intelligence calls
          * (sentinels, gates, extractors) — the June-15 readiness lever
@@ -4146,6 +4164,27 @@ export interface MonitoringConfig {
          * ConfigDefaults — preserves the fleet flip).
          */
         autoHealStaleHostLock?: boolean;
+        /**
+         * GAP-B commitment-evidence backstop (spec:
+         * autonomous-registration-guarantee.md, Part B). When an age-limit reap hits
+         * a topic with NO per-topic autonomous-run state file but a FRESH qualifying
+         * open agent-commitment corroborated by a recent user message (D8), inject
+         * `build-or-autonomous-active` so an UNregistered-but-working run survives.
+         *
+         * Ships DARK (the containment): `enabled` is OMITTED so the injection is OFF
+         * on BOTH fleet AND dev by default — no injection ⇒ no revival ⇒ the
+         * 2026-06-13 loop is structurally impossible while dark. Set `enabled:true`
+         * to arm; `dryRun:true` (the default when armed) logs "would inject" without
+         * tagging the candidate, so a dark-soak can confirm KEEP/eligibility agree on
+         * real data BEFORE evidence actually flows. CODE-defaulted (absent from
+         * ConfigDefaults — the resumeQueue.* dark-default discipline, no migration).
+         */
+        commitmentEvidence?: {
+            enabled?: boolean;
+            dryRun?: boolean;
+            /** Freshness horizon on `createdAt` (D1). Default 6h. */
+            freshCommitmentWindowMs?: number;
+        };
     };
     /**
      * AgentWorktreeReaper (Responsible Resource Usage — OS resource hygiene).