instar 1.3.640 → 1.3.642

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAwBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAsH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA+EtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAy4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAwnftE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAwBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAsH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA+EtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAy4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA+oftE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -4636,6 +4636,26 @@ export async function startServer(options) {
                 // operator override and silently disable the default policy (round-1 M5).
                 const operatorSetComponentFrameworks = config.sessions?.componentFrameworks !== undefined;
                 const computedDefault = resolveInternalFrameworkDefault(activeFrameworkSet);
+                // Resilient Degradation Ladder rung gates, resolved ONCE here (dev-gated: `enabled` OMITTED in
+                // config ⇒ resolveDevAgentGate ⇒ live-on-dev / dark-on-fleet). The ladder object is present
+                // when ANY rung is active; absent (fleet, unconfigured) ⇒ undefined ⇒ EXACTLY today's behavior.
+                const dlCfg = config.intelligence?.degradationLadder;
+                const ladderBackoffEnabled = resolveDevAgentGate(dlCfg?.backoff?.enabled, config);
+                const ladderQueueEnabled = resolveDevAgentGate(dlCfg?.queue?.enabled, config);
+                // Dedicated LlmQueue for the queue rung (§3b.3) — built ONLY when the rung is active so the
+                // fleet default allocates nothing. A deferrable internal call that exhausted framework-swap
+                // WAITS here for capacity (background lane, its own small daily cap so it can't starve
+                // interactive callers; maxConcurrent:1 serializes retries → naturally herd-safe) instead of
+                // dropping to its heuristic. `drainMinGapMs` is the opt-in §3c pacing gap (0/off by default).
+                let degradationLadderQueue;
+                if (ladderQueueEnabled) {
+                    const { LlmQueue: DegradationLadderQueueCls } = await import('../monitoring/LlmQueue.js');
+                    degradationLadderQueue = new DegradationLadderQueueCls({
+                        maxConcurrent: 1,
+                        maxDailyCents: 25,
+                        backgroundDispatchMinGapMs: dlCfg?.queue?.drainMinGapMs ?? 0,
+                    });
+                }
                 sharedIntelligence = new IntelligenceRouter({
                     defaultProvider: rawDefault,
                     defaultFramework: defaultFw,
@@ -4665,27 +4685,28 @@ export async function startServer(options) {
                     // §4.5: per-attempt swap timeout, inline-defaulted to 5s (no ConfigDefaults
                     // entry — codexExecJson precedent; absent ⇒ 5s, present ⇒ operator's value).
                     swapAttemptTimeoutMs: config.intelligence?.swapAttemptTimeoutMs ?? 5000,
-                    // Resilient Degradation Ladder (docs/specs/resilient-degradation-ladder.md), v1.
-                    // Dev-gated: the backoff rung's `enabled` is OMITTED in config so resolveDevAgentGate
-                    // resolves it (live-on-dev / dark-on-fleet); the gating budget rides the ladder's
-                    // activation. Absent (fleet, unconfigured) ⇒ undefined ⇒ EXACTLY today's behavior.
-                    ladder: (() => {
-                        const dl = config.intelligence?.degradationLadder;
-                        const backoffEnabled = resolveDevAgentGate(dl?.backoff?.enabled, config);
-                        if (!backoffEnabled)
-                            return undefined;
-                        return {
-                            gatingLadderBudgetMs: dl?.gatingLadderBudgetMs ?? 6000,
-                            backoffEnabled,
+                    // The dedicated queue for the DEFERRABLE queue rung (§3b.3); undefined when the rung is
+                    // dark ⇒ the rung is a no-op (a deferrable call falls straight to its heuristic, as before).
+                    llmQueue: degradationLadderQueue,
+                    // Resilient Degradation Ladder (docs/specs/resilient-degradation-ladder.md). Dev-gated: each
+                    // rung's `enabled` is OMITTED in config so resolveDevAgentGate resolves it (live-on-dev /
+                    // dark-on-fleet); the gating budget rides the ladder's activation. The ladder object is
+                    // present when ANY rung (backoff OR queue) is active; absent ⇒ EXACTLY today's behavior.
+                    ladder: (ladderBackoffEnabled || ladderQueueEnabled)
+                        ? {
+                            gatingLadderBudgetMs: dlCfg?.gatingLadderBudgetMs ?? 6000,
+                            backoffEnabled: ladderBackoffEnabled,
                             backoff: {
-                                baseMs: dl?.backoff?.baseMs ?? 500,
-                                factor: dl?.backoff?.factor ?? 2,
-                                maxAttempts: dl?.backoff?.maxAttempts ?? 3,
-                                ceilingMs: dl?.backoff?.ceilingMs ?? 8000,
-                                maxWaitMs: dl?.backoff?.maxWaitMs ?? 60000,
+                                baseMs: dlCfg?.backoff?.baseMs ?? 500,
+                                factor: dlCfg?.backoff?.factor ?? 2,
+                                maxAttempts: dlCfg?.backoff?.maxAttempts ?? 3,
+                                ceilingMs: dlCfg?.backoff?.ceilingMs ?? 8000,
+                                maxWaitMs: dlCfg?.backoff?.maxWaitMs ?? 60000,
                             },
-                        };
-                    })(),
+                            queueEnabled: ladderQueueEnabled,
+                            queueAttemptTimeoutMs: dlCfg?.queue?.attemptTimeoutMs ?? 60000,
+                        }
+                        : undefined,
                     // Each non-default framework gets its OWN breaker (built once, from the
                     // shared probe-cache so the active-set probe doesn't double-build).
                     buildProvider: (fw) => cachedBuild(fw),