instar 1.3.618 → 1.3.619
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dashboard/subscriptions.js +74 -0
- package/dist/coordination/AccountFollowMeOperatorOutbox.d.ts +42 -0
- package/dist/coordination/AccountFollowMeOperatorOutbox.d.ts.map +1 -0
- package/dist/coordination/AccountFollowMeOperatorOutbox.js +81 -0
- package/dist/coordination/AccountFollowMeOperatorOutbox.js.map +1 -0
- package/dist/coordination/AccountFollowMeSingleFlight.d.ts +68 -0
- package/dist/coordination/AccountFollowMeSingleFlight.d.ts.map +1 -0
- package/dist/coordination/AccountFollowMeSingleFlight.js +135 -0
- package/dist/coordination/AccountFollowMeSingleFlight.js.map +1 -0
- package/dist/coordination/driveFollowMeEnrollment.d.ts +80 -0
- package/dist/coordination/driveFollowMeEnrollment.d.ts.map +1 -0
- package/dist/coordination/driveFollowMeEnrollment.js +64 -0
- package/dist/coordination/driveFollowMeEnrollment.js.map +1 -0
- package/dist/coordination/enrollPointOfUseCheck.d.ts +48 -0
- package/dist/coordination/enrollPointOfUseCheck.d.ts.map +1 -0
- package/dist/coordination/enrollPointOfUseCheck.js +45 -0
- package/dist/coordination/enrollPointOfUseCheck.js.map +1 -0
- package/dist/coordination/followMeConsumerSweep.d.ts +32 -0
- package/dist/coordination/followMeConsumerSweep.d.ts.map +1 -0
- package/dist/coordination/followMeConsumerSweep.js +58 -0
- package/dist/coordination/followMeConsumerSweep.js.map +1 -0
- package/dist/core/rawTextRequestDetector.d.ts +27 -0
- package/dist/core/rawTextRequestDetector.d.ts.map +1 -0
- package/dist/core/rawTextRequestDetector.js +42 -0
- package/dist/core/rawTextRequestDetector.js.map +1 -0
- package/dist/monitoring/guardManifest.d.ts.map +1 -1
- package/dist/monitoring/guardManifest.js +1 -0
- package/dist/monitoring/guardManifest.js.map +1 -1
- package/dist/server/routes.d.ts.map +1 -1
- package/dist/server/routes.js +54 -3
- package/dist/server/routes.js.map +1 -1
- package/package.json +1 -1
- package/scripts/instar-dev-precommit.js +38 -1
- package/scripts/lib/operator-surface.mjs +63 -0
- package/src/data/builtin-manifest.json +46 -46
- package/upgrades/1.3.619.md +33 -0
- package/upgrades/side-effects/ws52-operator-tap-not-text.md +112 -0
package/package.json
CHANGED
|
@@ -32,7 +32,7 @@ import { checkEli16Overview, MIN_ELI16_CHARS } from './eli16-overview-check.mjs'
|
|
|
32
32
|
import { verifyProposalDerivedRunbooks } from '../skills/instar-dev/scripts/verify-proposal-derived-runbook.mjs';
|
|
33
33
|
import { classifyTier, decideRequirementSet } from './lib/classify-tier.mjs';
|
|
34
34
|
import { recognizeConvergence } from './lib/convergence-recognition.mjs';
|
|
35
|
-
import { isOperatorSurfaceFile, artifactAddressesOperatorSurfaceQuality, isAuthorizationSurfaceFile, artifactAddressesAgentProposesApproves } from './lib/operator-surface.mjs';
|
|
35
|
+
import { isOperatorSurfaceFile, artifactAddressesOperatorSurfaceQuality, isAuthorizationSurfaceFile, artifactAddressesAgentProposesApproves, operatorSurfaceRequiresRawInput } from './lib/operator-surface.mjs';
|
|
36
36
|
|
|
37
37
|
// Report-Backed Converging Audit (docs/specs/CONVERGING-AUDIT-DEFAULT.md, Part B).
|
|
38
38
|
// The precommit reads NO config file and runs pre-compile, so it cannot import
|
|
@@ -996,6 +996,43 @@ function assertOperatorSurfaceQuality(stagedFiles, trace) {
|
|
|
996
996
|
].join('\n'),
|
|
997
997
|
);
|
|
998
998
|
}
|
|
999
|
+
// "Operators Act in Taps, Not Text" clause (ws52-operator-tap-not-text, Part C arm 1).
|
|
1000
|
+
// MECHANICAL upgrade of §6b from prose-attestation to a real inspection of the
|
|
1001
|
+
// SURFACE FILE: an operator surface must never require the operator to paste raw
|
|
1002
|
+
// technical text (a JSON template in a textarea, an input labelled for a
|
|
1003
|
+
// fingerprint/token/base64/curl, or instructions to paste/author such text). The
|
|
1004
|
+
// 2026-06-13 raw-JSON mandate-form passed the prose gate; it must not pass this one.
|
|
1005
|
+
// Opt out ONLY with the explicit, co-located power-user marker (and that surface
|
|
1006
|
+
// must provably never be the default operator path — verified in review).
|
|
1007
|
+
for (const surface of touched) {
|
|
1008
|
+
const abs = path.resolve(ROOT, surface);
|
|
1009
|
+
if (!fs.existsSync(abs)) continue;
|
|
1010
|
+
const surfaceContent = fs.readFileSync(abs, 'utf8');
|
|
1011
|
+
const verdict = operatorSurfaceRequiresRawInput(surfaceContent);
|
|
1012
|
+
if (verdict.requiresRawInput && !verdict.hasPowerUserMarker) {
|
|
1013
|
+
blockCommit(
|
|
1014
|
+
[surface],
|
|
1015
|
+
[
|
|
1016
|
+
'Operators-Act-in-Taps-Not-Text gate:',
|
|
1017
|
+
` ${surface} is an operator surface that REQUIRES the operator to paste/enter`,
|
|
1018
|
+
' raw or technical text — a developer action, not an operator action:',
|
|
1019
|
+
...verdict.reasons.map((r) => ` • ${r}`),
|
|
1020
|
+
'',
|
|
1021
|
+
' Operators act in taps and plain-language choices; the UI must assemble any',
|
|
1022
|
+
' structured data (JSON, fingerprints, IDs) from those taps. A flow needing raw',
|
|
1023
|
+
' technical input is finished for an engineer, not its user (operator feedback,',
|
|
1024
|
+
' 2026-06-17; the 2026-06-13 raw-JSON mandate-form regression).',
|
|
1025
|
+
'',
|
|
1026
|
+
' Fix: build the one-tap/selection surface so the operator never sees raw text.',
|
|
1027
|
+
' If this is GENUINELY a power-user surface that is never the default operator',
|
|
1028
|
+
' path, mark it explicitly and co-located:',
|
|
1029
|
+
' /* operator-surface-power-user: <why this is never the default path> */',
|
|
1030
|
+
' (Standard: docs/STANDARDS-REGISTRY.md → "Operator-Surface Quality" →',
|
|
1031
|
+
' "Operators Act in Taps, Not Text" clause.)',
|
|
1032
|
+
].join('\n'),
|
|
1033
|
+
);
|
|
1034
|
+
}
|
|
1035
|
+
}
|
|
999
1036
|
}
|
|
1000
1037
|
|
|
1001
1038
|
function blockCommit(files, reason) {
|
|
@@ -53,6 +53,69 @@ export function artifactAddressesOperatorSurfaceQuality(content) {
|
|
|
53
53
|
return /operator[- ]surface quality/i.test(String(content ?? ''));
|
|
54
54
|
}
|
|
55
55
|
|
|
56
|
+
/**
|
|
57
|
+
* MECHANICAL content check (Part C arm 1 of ws52-operator-tap-not-text) — the
|
|
58
|
+
* "Operators Act in Taps, Not Text" clause of Operator-Surface Quality.
|
|
59
|
+
*
|
|
60
|
+
* Upgrades the §6b gate from prose-attestation (does the artifact MENTION the
|
|
61
|
+
* question) to a real inspection of the SURFACE FILE itself: does this operator
|
|
62
|
+
* surface require the operator to paste raw/technical text — a JSON template in a
|
|
63
|
+
* textarea, an input labelled for a fingerprint/token/base64/curl, or instruction
|
|
64
|
+
* text telling the operator to paste/author such text? Operators act in taps; the
|
|
65
|
+
* UI assembles structured data. A surface that needs raw technical input is
|
|
66
|
+
* finished for an engineer, not its user.
|
|
67
|
+
*
|
|
68
|
+
* Allowlist (Structure > Willpower, with its own cap — see "guard bypass carries
|
|
69
|
+
* its own cap"): a genuine power-user surface may opt out ONLY with an explicit,
|
|
70
|
+
* co-located, reviewable marker — the token `operator-surface-power-user`
|
|
71
|
+
* anywhere in the file (e.g. a `data-power-user-surface` attribute, or a comment
|
|
72
|
+
* of the form "operator-surface-power-user: <reason>"). The marker is the
|
|
73
|
+
* surface author asserting, on the record, "this is deliberately a power-user
|
|
74
|
+
* surface and never the default operator path." (The constant/fixture dodge —
|
|
75
|
+
* moving the JSON template into an imported constant the scanner can't see — is
|
|
76
|
+
* documented out-of-scope and is backstopped by code review, not pretended
|
|
77
|
+
* airtight; the gate catches the naive inline regression that actually shipped.)
|
|
78
|
+
*
|
|
79
|
+
* SIGNAL-FREE pure predicate: returns the finding; the gate decides.
|
|
80
|
+
* @param {string} content the operator-surface file text
|
|
81
|
+
* @returns {{ requiresRawInput: boolean, hasPowerUserMarker: boolean, reasons: string[] }}
|
|
82
|
+
*/
|
|
83
|
+
export function operatorSurfaceRequiresRawInput(content) {
|
|
84
|
+
const text = String(content ?? '');
|
|
85
|
+
const hasPowerUserMarker = /operator-surface-power-user|data-power-user-surface/i.test(text);
|
|
86
|
+
const reasons = [];
|
|
87
|
+
|
|
88
|
+
// 1. A JSON / authorities template offered to the operator as a placeholder or
|
|
89
|
+
// default value (the exact raw-JSON mandate-form regression, 2026-06-13).
|
|
90
|
+
// Look for a JSON-array/object literal of authority-shaped objects, or a
|
|
91
|
+
// placeholder/value attribute that carries one.
|
|
92
|
+
if (/\[\s*\{\s*["']action["']\s*:/.test(text) || /["']authorities["']\s*:\s*\[/.test(text)) {
|
|
93
|
+
reasons.push('offers a JSON authorities template for the operator to paste/edit');
|
|
94
|
+
}
|
|
95
|
+
if (/(?:placeholder|value|defaultValue)\s*=\s*["'][^"']*[[{][^"']*["']/.test(text)
|
|
96
|
+
&& /[[{]\s*["'][a-zA-Z]/.test(text)) {
|
|
97
|
+
reasons.push('an input placeholder/default is a raw JSON/array template');
|
|
98
|
+
}
|
|
99
|
+
|
|
100
|
+
// 2. An input whose label/placeholder/aria-label asks for a raw technical value
|
|
101
|
+
// the operator would have to copy from elsewhere (fingerprint, token, id,
|
|
102
|
+
// base64, curl/CLI command, or "paste … JSON").
|
|
103
|
+
const RAW_INPUT_LABEL =
|
|
104
|
+
/(?:placeholder|aria-label|label|name)\s*=\s*["'][^"']*\b(?:fingerprint|base64|bearer token|curl|JSON blob|authorities JSON)\b[^"']*["']/i;
|
|
105
|
+
if (RAW_INPUT_LABEL.test(text)) {
|
|
106
|
+
reasons.push('an input is labelled for a raw technical value (fingerprint/token/base64/curl/JSON)');
|
|
107
|
+
}
|
|
108
|
+
|
|
109
|
+
// 3. Instruction text telling the operator to paste/author raw technical text.
|
|
110
|
+
const PASTE_INSTRUCTION =
|
|
111
|
+
/\b(?:paste|copy)\b[^.\n]{0,40}\b(?:this|the following|the)\b[^.\n]{0,30}\b(?:JSON|fingerprint|authorities|token|command|blob)\b/i;
|
|
112
|
+
if (PASTE_INSTRUCTION.test(text)) {
|
|
113
|
+
reasons.push('instructs the operator to paste/copy raw technical text');
|
|
114
|
+
}
|
|
115
|
+
|
|
116
|
+
return { requiresRawInput: reasons.length > 0, hasPowerUserMarker, reasons };
|
|
117
|
+
}
|
|
118
|
+
|
|
56
119
|
/**
|
|
57
120
|
* Is this staged file an AUTHORIZATION/APPROVAL surface specifically — one where the
|
|
58
121
|
* operator confers authority (a grant/mandate/approval form or its renderer)? A subset
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"$schema": "./builtin-manifest.schema.json",
|
|
3
3
|
"schemaVersion": 1,
|
|
4
|
-
"generatedAt": "2026-06-
|
|
5
|
-
"instarVersion": "1.3.
|
|
4
|
+
"generatedAt": "2026-06-18T02:58:23.805Z",
|
|
5
|
+
"instarVersion": "1.3.619",
|
|
6
6
|
"entryCount": 201,
|
|
7
7
|
"entries": {
|
|
8
8
|
"hook:session-start": {
|
|
@@ -418,7 +418,7 @@
|
|
|
418
418
|
"type": "route-group",
|
|
419
419
|
"domain": "monitoring",
|
|
420
420
|
"sourcePath": "src/server/routes.ts",
|
|
421
|
-
"contentHash": "
|
|
421
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
422
422
|
"since": "2025-01-01"
|
|
423
423
|
},
|
|
424
424
|
"route-group:agents": {
|
|
@@ -426,7 +426,7 @@
|
|
|
426
426
|
"type": "route-group",
|
|
427
427
|
"domain": "sessions",
|
|
428
428
|
"sourcePath": "src/server/routes.ts",
|
|
429
|
-
"contentHash": "
|
|
429
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
430
430
|
"since": "2025-01-01"
|
|
431
431
|
},
|
|
432
432
|
"route-group:backups": {
|
|
@@ -434,7 +434,7 @@
|
|
|
434
434
|
"type": "route-group",
|
|
435
435
|
"domain": "operations",
|
|
436
436
|
"sourcePath": "src/server/routes.ts",
|
|
437
|
-
"contentHash": "
|
|
437
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
438
438
|
"since": "2025-01-01"
|
|
439
439
|
},
|
|
440
440
|
"route-group:git": {
|
|
@@ -442,7 +442,7 @@
|
|
|
442
442
|
"type": "route-group",
|
|
443
443
|
"domain": "coordination",
|
|
444
444
|
"sourcePath": "src/server/routes.ts",
|
|
445
|
-
"contentHash": "
|
|
445
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
446
446
|
"since": "2025-01-01"
|
|
447
447
|
},
|
|
448
448
|
"route-group:memory": {
|
|
@@ -450,7 +450,7 @@
|
|
|
450
450
|
"type": "route-group",
|
|
451
451
|
"domain": "memory",
|
|
452
452
|
"sourcePath": "src/server/routes.ts",
|
|
453
|
-
"contentHash": "
|
|
453
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
454
454
|
"since": "2025-01-01"
|
|
455
455
|
},
|
|
456
456
|
"route-group:semantic": {
|
|
@@ -458,7 +458,7 @@
|
|
|
458
458
|
"type": "route-group",
|
|
459
459
|
"domain": "memory",
|
|
460
460
|
"sourcePath": "src/server/routes.ts",
|
|
461
|
-
"contentHash": "
|
|
461
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
462
462
|
"since": "2025-01-01"
|
|
463
463
|
},
|
|
464
464
|
"route-group:status": {
|
|
@@ -466,7 +466,7 @@
|
|
|
466
466
|
"type": "route-group",
|
|
467
467
|
"domain": "monitoring",
|
|
468
468
|
"sourcePath": "src/server/routes.ts",
|
|
469
|
-
"contentHash": "
|
|
469
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
470
470
|
"since": "2025-01-01"
|
|
471
471
|
},
|
|
472
472
|
"route-group:capabilities": {
|
|
@@ -474,7 +474,7 @@
|
|
|
474
474
|
"type": "route-group",
|
|
475
475
|
"domain": "mapping",
|
|
476
476
|
"sourcePath": "src/server/routes.ts",
|
|
477
|
-
"contentHash": "
|
|
477
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
478
478
|
"since": "2025-01-01"
|
|
479
479
|
},
|
|
480
480
|
"route-group:project-map": {
|
|
@@ -482,7 +482,7 @@
|
|
|
482
482
|
"type": "route-group",
|
|
483
483
|
"domain": "mapping",
|
|
484
484
|
"sourcePath": "src/server/routes.ts",
|
|
485
|
-
"contentHash": "
|
|
485
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
486
486
|
"since": "2025-01-01"
|
|
487
487
|
},
|
|
488
488
|
"route-group:coherence": {
|
|
@@ -490,7 +490,7 @@
|
|
|
490
490
|
"type": "route-group",
|
|
491
491
|
"domain": "coherence",
|
|
492
492
|
"sourcePath": "src/server/routes.ts",
|
|
493
|
-
"contentHash": "
|
|
493
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
494
494
|
"since": "2025-01-01"
|
|
495
495
|
},
|
|
496
496
|
"route-group:topic-bindings": {
|
|
@@ -498,7 +498,7 @@
|
|
|
498
498
|
"type": "route-group",
|
|
499
499
|
"domain": "sessions",
|
|
500
500
|
"sourcePath": "src/server/routes.ts",
|
|
501
|
-
"contentHash": "
|
|
501
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
502
502
|
"since": "2025-01-01"
|
|
503
503
|
},
|
|
504
504
|
"route-group:context": {
|
|
@@ -506,7 +506,7 @@
|
|
|
506
506
|
"type": "route-group",
|
|
507
507
|
"domain": "context",
|
|
508
508
|
"sourcePath": "src/server/routes.ts",
|
|
509
|
-
"contentHash": "
|
|
509
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
510
510
|
"since": "2025-01-01"
|
|
511
511
|
},
|
|
512
512
|
"route-group:scope-coherence": {
|
|
@@ -514,7 +514,7 @@
|
|
|
514
514
|
"type": "route-group",
|
|
515
515
|
"domain": "coherence",
|
|
516
516
|
"sourcePath": "src/server/routes.ts",
|
|
517
|
-
"contentHash": "
|
|
517
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
518
518
|
"since": "2025-01-01"
|
|
519
519
|
},
|
|
520
520
|
"route-group:canonical-state": {
|
|
@@ -522,7 +522,7 @@
|
|
|
522
522
|
"type": "route-group",
|
|
523
523
|
"domain": "state",
|
|
524
524
|
"sourcePath": "src/server/routes.ts",
|
|
525
|
-
"contentHash": "
|
|
525
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
526
526
|
"since": "2025-01-01"
|
|
527
527
|
},
|
|
528
528
|
"route-group:ci": {
|
|
@@ -530,7 +530,7 @@
|
|
|
530
530
|
"type": "route-group",
|
|
531
531
|
"domain": "monitoring",
|
|
532
532
|
"sourcePath": "src/server/routes.ts",
|
|
533
|
-
"contentHash": "
|
|
533
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
534
534
|
"since": "2025-01-01"
|
|
535
535
|
},
|
|
536
536
|
"route-group:sessions": {
|
|
@@ -538,7 +538,7 @@
|
|
|
538
538
|
"type": "route-group",
|
|
539
539
|
"domain": "sessions",
|
|
540
540
|
"sourcePath": "src/server/routes.ts",
|
|
541
|
-
"contentHash": "
|
|
541
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
542
542
|
"since": "2025-01-01"
|
|
543
543
|
},
|
|
544
544
|
"route-group:jobs": {
|
|
@@ -546,7 +546,7 @@
|
|
|
546
546
|
"type": "route-group",
|
|
547
547
|
"domain": "scheduling",
|
|
548
548
|
"sourcePath": "src/server/routes.ts",
|
|
549
|
-
"contentHash": "
|
|
549
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
550
550
|
"since": "2025-01-01"
|
|
551
551
|
},
|
|
552
552
|
"route-group:skip-ledger": {
|
|
@@ -554,7 +554,7 @@
|
|
|
554
554
|
"type": "route-group",
|
|
555
555
|
"domain": "scheduling",
|
|
556
556
|
"sourcePath": "src/server/routes.ts",
|
|
557
|
-
"contentHash": "
|
|
557
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
558
558
|
"since": "2025-01-01"
|
|
559
559
|
},
|
|
560
560
|
"route-group:telegram": {
|
|
@@ -562,7 +562,7 @@
|
|
|
562
562
|
"type": "route-group",
|
|
563
563
|
"domain": "communication",
|
|
564
564
|
"sourcePath": "src/server/routes.ts",
|
|
565
|
-
"contentHash": "
|
|
565
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
566
566
|
"since": "2025-01-01"
|
|
567
567
|
},
|
|
568
568
|
"route-group:attention": {
|
|
@@ -570,7 +570,7 @@
|
|
|
570
570
|
"type": "route-group",
|
|
571
571
|
"domain": "communication",
|
|
572
572
|
"sourcePath": "src/server/routes.ts",
|
|
573
|
-
"contentHash": "
|
|
573
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
574
574
|
"since": "2025-01-01"
|
|
575
575
|
},
|
|
576
576
|
"route-group:relationships": {
|
|
@@ -578,7 +578,7 @@
|
|
|
578
578
|
"type": "route-group",
|
|
579
579
|
"domain": "relationships",
|
|
580
580
|
"sourcePath": "src/server/routes.ts",
|
|
581
|
-
"contentHash": "
|
|
581
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
582
582
|
"since": "2025-01-01"
|
|
583
583
|
},
|
|
584
584
|
"route-group:feedback": {
|
|
@@ -586,7 +586,7 @@
|
|
|
586
586
|
"type": "route-group",
|
|
587
587
|
"domain": "feedback",
|
|
588
588
|
"sourcePath": "src/server/routes.ts",
|
|
589
|
-
"contentHash": "
|
|
589
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
590
590
|
"since": "2025-01-01"
|
|
591
591
|
},
|
|
592
592
|
"route-group:updates": {
|
|
@@ -594,7 +594,7 @@
|
|
|
594
594
|
"type": "route-group",
|
|
595
595
|
"domain": "updates",
|
|
596
596
|
"sourcePath": "src/server/routes.ts",
|
|
597
|
-
"contentHash": "
|
|
597
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
598
598
|
"since": "2025-01-01"
|
|
599
599
|
},
|
|
600
600
|
"route-group:dispatches": {
|
|
@@ -602,7 +602,7 @@
|
|
|
602
602
|
"type": "route-group",
|
|
603
603
|
"domain": "dispatches",
|
|
604
604
|
"sourcePath": "src/server/routes.ts",
|
|
605
|
-
"contentHash": "
|
|
605
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
606
606
|
"since": "2025-01-01"
|
|
607
607
|
},
|
|
608
608
|
"route-group:quota": {
|
|
@@ -610,7 +610,7 @@
|
|
|
610
610
|
"type": "route-group",
|
|
611
611
|
"domain": "monitoring",
|
|
612
612
|
"sourcePath": "src/server/routes.ts",
|
|
613
|
-
"contentHash": "
|
|
613
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
614
614
|
"since": "2025-01-01"
|
|
615
615
|
},
|
|
616
616
|
"route-group:publishing": {
|
|
@@ -618,7 +618,7 @@
|
|
|
618
618
|
"type": "route-group",
|
|
619
619
|
"domain": "publishing",
|
|
620
620
|
"sourcePath": "src/server/routes.ts",
|
|
621
|
-
"contentHash": "
|
|
621
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
622
622
|
"since": "2025-01-01"
|
|
623
623
|
},
|
|
624
624
|
"route-group:private-views": {
|
|
@@ -626,7 +626,7 @@
|
|
|
626
626
|
"type": "route-group",
|
|
627
627
|
"domain": "publishing",
|
|
628
628
|
"sourcePath": "src/server/routes.ts",
|
|
629
|
-
"contentHash": "
|
|
629
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
630
630
|
"since": "2025-01-01"
|
|
631
631
|
},
|
|
632
632
|
"route-group:tunnel": {
|
|
@@ -634,7 +634,7 @@
|
|
|
634
634
|
"type": "route-group",
|
|
635
635
|
"domain": "networking",
|
|
636
636
|
"sourcePath": "src/server/routes.ts",
|
|
637
|
-
"contentHash": "
|
|
637
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
638
638
|
"since": "2025-01-01"
|
|
639
639
|
},
|
|
640
640
|
"route-group:events": {
|
|
@@ -642,7 +642,7 @@
|
|
|
642
642
|
"type": "route-group",
|
|
643
643
|
"domain": "networking",
|
|
644
644
|
"sourcePath": "src/server/routes.ts",
|
|
645
|
-
"contentHash": "
|
|
645
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
646
646
|
"since": "2025-01-01"
|
|
647
647
|
},
|
|
648
648
|
"route-group:evolution": {
|
|
@@ -650,7 +650,7 @@
|
|
|
650
650
|
"type": "route-group",
|
|
651
651
|
"domain": "evolution",
|
|
652
652
|
"sourcePath": "src/server/routes.ts",
|
|
653
|
-
"contentHash": "
|
|
653
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
654
654
|
"since": "2025-01-01"
|
|
655
655
|
},
|
|
656
656
|
"route-group:watchdog": {
|
|
@@ -658,7 +658,7 @@
|
|
|
658
658
|
"type": "route-group",
|
|
659
659
|
"domain": "monitoring",
|
|
660
660
|
"sourcePath": "src/server/routes.ts",
|
|
661
|
-
"contentHash": "
|
|
661
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
662
662
|
"since": "2025-01-01"
|
|
663
663
|
},
|
|
664
664
|
"route-group:topic-memory": {
|
|
@@ -666,7 +666,7 @@
|
|
|
666
666
|
"type": "route-group",
|
|
667
667
|
"domain": "memory",
|
|
668
668
|
"sourcePath": "src/server/routes.ts",
|
|
669
|
-
"contentHash": "
|
|
669
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
670
670
|
"since": "2025-01-01"
|
|
671
671
|
},
|
|
672
672
|
"route-group:state-sync": {
|
|
@@ -674,7 +674,7 @@
|
|
|
674
674
|
"type": "route-group",
|
|
675
675
|
"domain": "coordination",
|
|
676
676
|
"sourcePath": "src/server/routes.ts",
|
|
677
|
-
"contentHash": "
|
|
677
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
678
678
|
"since": "2025-01-01"
|
|
679
679
|
},
|
|
680
680
|
"route-group:intent": {
|
|
@@ -682,7 +682,7 @@
|
|
|
682
682
|
"type": "route-group",
|
|
683
683
|
"domain": "intent",
|
|
684
684
|
"sourcePath": "src/server/routes.ts",
|
|
685
|
-
"contentHash": "
|
|
685
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
686
686
|
"since": "2025-01-01"
|
|
687
687
|
},
|
|
688
688
|
"route-group:triage": {
|
|
@@ -690,7 +690,7 @@
|
|
|
690
690
|
"type": "route-group",
|
|
691
691
|
"domain": "safety",
|
|
692
692
|
"sourcePath": "src/server/routes.ts",
|
|
693
|
-
"contentHash": "
|
|
693
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
694
694
|
"since": "2025-01-01"
|
|
695
695
|
},
|
|
696
696
|
"route-group:operations": {
|
|
@@ -698,7 +698,7 @@
|
|
|
698
698
|
"type": "route-group",
|
|
699
699
|
"domain": "safety",
|
|
700
700
|
"sourcePath": "src/server/routes.ts",
|
|
701
|
-
"contentHash": "
|
|
701
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
702
702
|
"since": "2025-01-01"
|
|
703
703
|
},
|
|
704
704
|
"route-group:sentinel": {
|
|
@@ -706,7 +706,7 @@
|
|
|
706
706
|
"type": "route-group",
|
|
707
707
|
"domain": "safety",
|
|
708
708
|
"sourcePath": "src/server/routes.ts",
|
|
709
|
-
"contentHash": "
|
|
709
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
710
710
|
"since": "2025-01-01"
|
|
711
711
|
},
|
|
712
712
|
"route-group:trust": {
|
|
@@ -714,7 +714,7 @@
|
|
|
714
714
|
"type": "route-group",
|
|
715
715
|
"domain": "safety",
|
|
716
716
|
"sourcePath": "src/server/routes.ts",
|
|
717
|
-
"contentHash": "
|
|
717
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
718
718
|
"since": "2025-01-01"
|
|
719
719
|
},
|
|
720
720
|
"route-group:monitoring": {
|
|
@@ -722,7 +722,7 @@
|
|
|
722
722
|
"type": "route-group",
|
|
723
723
|
"domain": "monitoring",
|
|
724
724
|
"sourcePath": "src/server/routes.ts",
|
|
725
|
-
"contentHash": "
|
|
725
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
726
726
|
"since": "2025-01-01"
|
|
727
727
|
},
|
|
728
728
|
"route-group:commitments": {
|
|
@@ -730,7 +730,7 @@
|
|
|
730
730
|
"type": "route-group",
|
|
731
731
|
"domain": "commitments",
|
|
732
732
|
"sourcePath": "src/server/routes.ts",
|
|
733
|
-
"contentHash": "
|
|
733
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
734
734
|
"since": "2025-01-01"
|
|
735
735
|
},
|
|
736
736
|
"route-group:episodes": {
|
|
@@ -738,7 +738,7 @@
|
|
|
738
738
|
"type": "route-group",
|
|
739
739
|
"domain": "memory",
|
|
740
740
|
"sourcePath": "src/server/routes.ts",
|
|
741
|
-
"contentHash": "
|
|
741
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
742
742
|
"since": "2025-01-01"
|
|
743
743
|
},
|
|
744
744
|
"route-group:messages": {
|
|
@@ -746,7 +746,7 @@
|
|
|
746
746
|
"type": "route-group",
|
|
747
747
|
"domain": "coordination",
|
|
748
748
|
"sourcePath": "src/server/routes.ts",
|
|
749
|
-
"contentHash": "
|
|
749
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
750
750
|
"since": "2025-01-01"
|
|
751
751
|
},
|
|
752
752
|
"route-group:system-reviews": {
|
|
@@ -754,7 +754,7 @@
|
|
|
754
754
|
"type": "route-group",
|
|
755
755
|
"domain": "monitoring",
|
|
756
756
|
"sourcePath": "src/server/routes.ts",
|
|
757
|
-
"contentHash": "
|
|
757
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
758
758
|
"since": "2025-01-01"
|
|
759
759
|
},
|
|
760
760
|
"route-group:machine-mesh": {
|
|
@@ -770,7 +770,7 @@
|
|
|
770
770
|
"type": "route-group",
|
|
771
771
|
"domain": "security",
|
|
772
772
|
"sourcePath": "src/server/routes.ts",
|
|
773
|
-
"contentHash": "
|
|
773
|
+
"contentHash": "8a6b6b22d35c2b9a2e19ad98e71d1403302971274b3d66c911953215672a1f20",
|
|
774
774
|
"since": "2025-01-01"
|
|
775
775
|
},
|
|
776
776
|
"cli:init": {
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
# Upgrade Guide — vNEXT
|
|
2
|
+
|
|
3
|
+
<!-- assembled-by: assemble-next-md -->
|
|
4
|
+
<!-- bump: minor -->
|
|
5
|
+
|
|
6
|
+
## What Changed
|
|
7
|
+
|
|
8
|
+
Completes the operator-facing half of WS5.2 Account Follow-Me and makes the experience a single tap. Previously, approving an account-follow-me mandate required the Mandates tab's "Advanced — author by hand" form (pasting a raw JSON authorities blob + agent fingerprints), and a delivered mandate then sat inert because nothing drove enrollment to start.
|
|
9
|
+
|
|
10
|
+
This adds:
|
|
11
|
+
- **One-tap Approve card** (Subscriptions tab): a plain-language card ("Let *machine* use your *account* subscription") with an Approve button + PIN — no JSON, no fingerprints. The UI assembles all structured data from the tap.
|
|
12
|
+
- **The delivery→enroll connector**: after approval the target machine re-verifies the mandate at point-of-use (revocation/expiry/bounds, fail-closed), claims a durable single-flight slot (no double-mint), drives its own re-mint login, and surfaces the device-code login link to the operator via the fronting machine — with a no-silent-stall guarantee (exactly one operator message per outcome, including failures).
|
|
13
|
+
- **"Operators act in taps, not text" enforcement** (a named clause of the Operator-Surface Quality standard): a build-time mechanical check that blocks any new operator surface requiring raw/technical input, plus a runtime observe-only signal that flags an outbound message asking the operator to paste JSON or run a multi-step technical flow.
|
|
14
|
+
|
|
15
|
+
All shipped dark on the fleet / live on the development agent (the existing account-follow-me dev gate); single-machine installs are a no-op.
|
|
16
|
+
|
|
17
|
+
## What to Tell Your User
|
|
18
|
+
|
|
19
|
+
When one of your machines needs to use an account that's logged in on another, you'll now get a simple card on the Subscriptions tab: "Let this machine use your account — Approve," with a PIN box. Tap Approve, type your PIN, and the other machine logs itself in (you tap one normal login link on your phone). No copying codes, no JSON, no fingerprints. And going forward, the system structurally refuses to ship any operator screen that would make you paste raw technical text — approving is your job, not data entry.
|
|
20
|
+
|
|
21
|
+
## Summary of New Capabilities
|
|
22
|
+
|
|
23
|
+
- **One-tap account-follow-me approval** on the Subscriptions dashboard tab (no raw JSON/fingerprints).
|
|
24
|
+
- **Automatic cross-machine enrollment** after approval — the target machine re-mints its own login and sends you a single tappable login link; restart-safe and idempotent (no double-enroll).
|
|
25
|
+
- **"Operators act in taps, not text" standard**, mechanically enforced at build time + signalled at runtime, so future operator surfaces can't regress into developer chores.
|
|
26
|
+
|
|
27
|
+
## Evidence
|
|
28
|
+
|
|
29
|
+
- `npx tsc --noEmit` clean (full worktree).
|
|
30
|
+
- 78 unit tests across 9 files pass: operator-surface gate (20), single-flight (11), point-of-use re-verify (8), operator outbox (7), raw-text detector (9), connector orchestration (7), approve card (6), issue payload (5), consumer sweep (5).
|
|
31
|
+
- Converged spec (3 rounds, cross-model codex gpt-5.5 + gemini-2.5-pro, both endorsed) + operator-approved.
|
|
32
|
+
- Phase-5 second-pass review: CONCUR (independent audit of signal-vs-authority, fail-closed enrollment, no-silent-stall, leakage, multi-machine posture).
|
|
33
|
+
- Side-effects review: `upgrades/side-effects/ws52-operator-tap-not-text.md`.
|