karajan-code 4.19.0 → 4.20.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karajan-code",
-  "version": "4.19.0",
+  "version": "4.20.0",
   "description": "Local multi-agent coding orchestrator with TDD, SonarQube, and code review pipeline",
   "type": "module",
   "license": "AGPL-3.0",

package/src/agents/base-agent.js

@@ -12,6 +12,7 @@
 
 import { defaultEnvironment } from "../infrastructure/environment.js";
 import { buildAgentEnv } from "../utils/role-env.js";
+import { isModelCompatible } from "../config/role-resolver.js";
 
 const MODEL_NOT_SUPPORTED_PATTERNS = [
   /model.{0,30}is not supported/i,
@@ -95,10 +96,19 @@ export class BaseAgent {
    * @returns {string|null}
    */
   getRoleModel(role) {
-    const roleModel = this.config?.roles?.[role]?.model;
-    if (roleModel) return roleModel;
-    if (role === "reviewer") return this.config?.reviewer_options?.model || null;
-    return this.config?.coder_options?.model || null;
+    const roleModel =
+      this.config?.roles?.[role]?.model ||
+      (role === "reviewer" ? this.config?.reviewer_options?.model : this.config?.coder_options?.model) ||
+    null;
+    // KJC-BUG-0144 (campo, issue #1465): un default por-rol (start: haiku)
+    // puede caer sobre un provider de OTRA familia (agy, codex...) — el
+    // modelo se descarta con aviso y el agente usa su propio default,
+    // nunca se le pasa un --model ajeno.
+    if (roleModel && !isModelCompatible(this.name, roleModel)) {
+      this.logger?.warn?.(`model "${roleModel}" belongs to another family — dropping it for ${this.name} (role ${role})`);
+      return null;
+    }
+    return roleModel;
   }
 
   /**

package/src/agents/codex-agent.js

@@ -77,9 +77,26 @@ export class CodexAgent extends BaseAgent {
   }
 
   async _exec(task, model, role) {
+    // KJC-BUG-0143 (campo, issue #1471): codex exec >= 0.146 rechaza
+    // --full-auto ("unexpected argument"); el auto-approve moderno para un
+    // coder que escribe es --sandbox workspace-write. Los CLIs antiguos no
+    // conocen --sandbox: si lo rechazan, se reintenta con el flag legacy.
+    const autoApprove = role !== "reviewer" && this.isAutoApproveEnabled(role);
+    const res = await this._execOnce(task, model, role, { autoApprove, legacyAutoFlag: false });
+    if (!res.ok && autoApprove && /unexpected argument '--sandbox'/.test(res.error || "")) {
+      this.logger?.warn("codex CLI sin --sandbox — reintentando con el flag legacy --full-auto");
+      return this._execOnce(task, model, role, { autoApprove, legacyAutoFlag: true });
+    }
+    return res;
+  }
+
+  async _execOnce(task, model, role, { autoApprove, legacyAutoFlag }) {
     const args = ["exec", "--skip-git-repo-check"];
     if (model) args.push("--model", model);
-    if (role !== "reviewer" && this.isAutoApproveEnabled(role)) args.push("--full-auto");
+    if (autoApprove) {
+      if (legacyAutoFlag) args.push("--full-auto");
+      else args.push("--sandbox", "workspace-write");
+    }
     args.push("-");
     const res = await this.runCommand(resolveBin("codex"), args, {
       onOutput: task.onOutput,

package/src/audit/deterministic-summary.js

@@ -38,6 +38,7 @@ export function formatDeterministicSummary(ctx) {
   if (ctx.sonarFindings) lines.push(...formatSonarBlock(ctx.sonarFindings));
   if (ctx.osvFindings) lines.push(...formatOsvBlock(ctx.osvFindings));
   if (ctx.semgrepFindings) lines.push(...formatSemgrepBlock(ctx.semgrepFindings));
+  if (ctx.infraFindings) lines.push(...formatInfraBlock(ctx.infraFindings));
   if (ctx.circularDeps) lines.push(...formatCircularDepsBlock(ctx.circularDeps));
   if (ctx.deadExports) lines.push(...formatDeadExportsBlock(ctx.deadExports));
   if (ctx.injectionFindings) lines.push(...formatInjectionBlock(ctx.injectionFindings));
@@ -133,6 +134,25 @@ function formatSemgrepBlock(semgrepFindings) {
   return lines;
 }
 
+// INF-C (KJC-TSK-0760): checkov misconfigs — same shape as the semgrep
+// block; a not-applicable repo (no infra markers) declares it in one line.
+function formatInfraBlock(infraFindings) {
+  if (!infraFindings.available) {
+    return ["### Infra misconfigurations (checkov)", `- Status: not available — ${infraFindings.reason || "checkov not installed"}`, ""];
+  }
+  const lines = ["### Infra misconfigurations (checkov)"];
+  lines.push(`- Total findings: ${infraFindings.total ?? 0}`);
+  const cap = MAX_SAMPLE_SEMGREP_PER_SEVERITY * 3;
+  for (const f of (infraFindings.findings || []).slice(0, cap)) {
+    const lineSuffix = f.line ? `:${f.line}` : "";
+    lines.push(`  - [${f.severity}] ${f.file}${lineSuffix} [${f.rule}] ${f.message}${f.guideline ? ` (${f.guideline})` : ""}`);
+  }
+  const overflow = (infraFindings.total ?? 0) - cap;
+  if (overflow > 0) lines.push(`  - ... and ${overflow} more`);
+  lines.push("");
+  return lines;
+}
+
 function formatOsvBlock(osvFindings) {
   if (!osvFindings.available) {
     return ["### OSV Vulnerabilities", `- Status: not available — ${osvFindings.reason || "osv-scanner not installed"}`, ""];
@@ -298,6 +318,7 @@ export function deterministicContextHasFindings(ctx) {
   if (ctx.sonarFindings?.qualityGate?.status === "ERROR") return true;
   if (ctx.osvFindings?.available && (ctx.osvFindings.total ?? 0) > 0) return true;
   if (ctx.semgrepFindings?.available && (ctx.semgrepFindings.total ?? 0) > 0) return true;
+  if (ctx.infraFindings?.available && (ctx.infraFindings.total ?? 0) > 0) return true;
   if (ctx.circularDeps?.available && (ctx.circularDeps.total ?? 0) > 0) return true;
   if (ctx.deadExports?.available && (ctx.deadExports.total ?? 0) > 0) return true;
   if (ctx.growthDelta && (Math.abs(ctx.growthDelta.lines || 0) > 100 || Math.abs(ctx.growthDelta.deps || 0) > 0)) return true;

package/src/audit/infra-findings.js

@@ -0,0 +1,100 @@
+/**
+ * Checkov infra-misconfiguration collector for `kj audit` (INF-C,
+ * KJC-TSK-0760, epic KJC-PCS-0078).
+ *
+ * One tool covers the whole infra surface — terraform, kubernetes, helm,
+ * kustomize, ansible, dockerfiles — so checkov is THE infra scanner (tfsec
+ * and tflint stay out of scope: single dependency to learn and install).
+ * Findings enter the audit through the SAME best-effort channel as
+ * semgrep-findings (KJC-TSK-0366): no infra markers → not-applicable (zero
+ * noise, checkov never runs); missing binary → declared with the install
+ * command; non-zero exit with JSON on stdout (checkov's failed-checks
+ * behavior) rescued; unparseable output degrades SAYING so.
+ */
+
+import { runGoverned, jobsCap } from "../utils/tool-governor.js";
+import { detectInfraMarkers } from "../utils/project-detect.js";
+
+const SCAN_TIMEOUT_MS = 120_000;
+const INSTALL_HINT = "install via 'pipx install checkov' or 'pip install checkov'";
+
+/**
+ * Run checkov on the project and return a structured result.
+ *
+ * @param {string} projectDir - absolute path to the project root
+ * @param {object} [logger]
+ * @returns {Promise<{available: boolean, reason?: string, total?: number, findings?: object[]}>}
+ */
+export async function collectInfraFindings(projectDir, logger = null) {
+  // KJC-BUG-0122 doctrine: external scanners never fire from the unit suite.
+  if (process.env.VITEST && process.env.KJ_ALLOW_REAL_SCANS !== "1") {
+    return { available: false, reason: "real scans disabled under the test runner (set KJ_ALLOW_REAL_SCANS=1 to opt in)" };
+  }
+  if (!(await detectInfraMarkers(projectDir))) {
+    return { available: false, reason: "no infra markers (terraform/helm/kustomize/ansible) — not applicable" };
+  }
+  let stdout;
+  try {
+    const { stdout: out } = await runGoverned(
+      "checkov",
+      ["-d", projectDir || ".", "--output", "json", "--quiet", "--compact", `--parallel-runner-count=${jobsCap()}`],
+      { cwd: projectDir, timeout: SCAN_TIMEOUT_MS + 5000, maxBuffer: 32 * 1024 * 1024 }
+    );
+    stdout = out;
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      if (logger?.warn) logger.warn(`checkov not found in PATH — ${INSTALL_HINT}`);
+      return { available: false, reason: `checkov not installed — ${INSTALL_HINT}` };
+    }
+    if (err.killed) {
+      if (logger?.warn) logger.warn(`checkov timed out after ${SCAN_TIMEOUT_MS}ms`);
+      return { available: false, reason: `checkov timed out after ${SCAN_TIMEOUT_MS}ms` };
+    }
+    // checkov exits non-zero when checks fail, but still emits the report.
+    if (typeof err.stdout === "string" && err.stdout.trim().length > 0) {
+      stdout = err.stdout;
+    } else {
+      if (logger?.warn) logger.warn(`checkov failed: ${err.message}`);
+      return { available: false, reason: `checkov failed: ${err.message}` };
+    }
+  }
+
+  let parsed;
+  try {
+    parsed = JSON.parse(stdout);
+  } catch (err) {
+    if (logger?.warn) logger.warn(`checkov output not parseable: ${err.message}`);
+    return { available: false, reason: "checkov output not parseable as JSON" };
+  }
+
+  return { available: true, ...parseCheckovOutput(parsed) };
+}
+
+/**
+ * Convert checkov's JSON (object for one framework, array for several)
+ * into the flat findings list the audit prompt consumes. Checkov OSS may
+ * omit severity — WARNING is the honest default.
+ *
+ * @param {object|object[]} raw
+ * @returns {{total: number, findings: object[]}}
+ */
+export function parseCheckovOutput(raw) {
+  const reports = Array.isArray(raw) ? raw : [raw];
+  const findings = [];
+  for (const report of reports) {
+    const failed = report?.results?.failed_checks;
+    if (!Array.isArray(failed)) continue;
+    for (const c of failed) {
+      findings.push({
+        rule: c.check_id || "(unknown)",
+        severity: String(c.severity || "WARNING").toUpperCase(),
+        framework: report.check_type || "infra",
+        file: String(c.file_path || "").replace(/^\//, ""),
+        line: Array.isArray(c.file_line_range) ? (c.file_line_range[0] ?? 0) : 0,
+        message: c.check_name || "",
+        guideline: c.guideline || null,
+      });
+    }
+  }
+  return { total: findings.length, findings };
+}

package/src/config/role-resolver.js

@@ -20,8 +20,13 @@
 
 /**
  * Check if a model string is compatible with an agent provider.
- * Only returns false when the model clearly belongs to a DIFFERENT provider.
+ * Only returns false when the model clearly belongs to a DIFFERENT family.
  * Returns true if we can't determine or if the model is ambiguous.
+ *
+ * KJC-BUG-0144: exported and family-based — an agent may serve another
+ * family's models (agy is Google's Antigravity, gemini family), and the
+ * same check now guards BaseAgent.getRoleModel so per-role defaults
+ * (e.g. start's haiku) never reach a provider from another family.
  */
 const AGENT_MODEL_SIGNATURES = {
   claude: ["claude", "sonnet", "opus", "haiku"],
@@ -29,21 +34,26 @@ const AGENT_MODEL_SIGNATURES = {
   gemini: ["gemini", "flash-"]
 };
 
-function isModelCompatible(agent, model) {
-  if (!model || !agent) return true;
-  const lower = model.toLowerCase();
+// Single-family CLIs: they only serve their own vendor's models. Agents NOT
+// in this map (aider, opencode, copilot, kimi...) are multi-model hosts —
+// they route to arbitrary models, so any model name is allowed there.
+const AGENT_FAMILY = { claude: "claude", codex: "codex", gemini: "gemini", agy: "gemini" };
 
-  // Check if model clearly belongs to a different provider
-  for (const [provider, signatures] of Object.entries(AGENT_MODEL_SIGNATURES)) {
-    if (provider === agent) continue;
-    if (signatures.some(s => lower.includes(s))) {
-      // Model belongs to a different provider — incompatible
-      return false;
-    }
+function modelFamily(model) {
+  const lower = model.toLowerCase();
+  for (const [family, signatures] of Object.entries(AGENT_MODEL_SIGNATURES)) {
+    if (signatures.some(s => lower.includes(s))) return family;
   }
+  return null;
+}
 
-  // Model doesn't clearly belong to any other provider — allow it
-  return true;
+export function isModelCompatible(agent, model) {
+  if (!model || !agent) return true;
+  const agentFamily = AGENT_FAMILY[agent];
+  if (!agentFamily) return true; // multi-model host — bring your own model
+  const family = modelFamily(model);
+  if (!family) return true; // ambiguous/custom/local — allow it
+  return family === agentFamily;
 }
 
 // Roles that inherit provider/model from the coder when not explicitly configured

package/src/harden/sentinel-hooks.js

@@ -35,8 +35,10 @@ import { fileURLToPath } from "node:url";
 const here = dirname(fileURLToPath(import.meta.url));
 export const STATE = join(here, "sentinel-state.json");
 export const ROOT = join(here, "..", "..");
-export const TESTS = /(^|\\/)(tests?|__tests__|spec)\\/|\\.(test|spec)\\.[a-z]+$/;
-export const CODE = /\\.(m?[jt]sx?|c[jt]s|py|go|rs|java|rb|php|cs|swift|kt|astro|svelte|vue|c|h|cc|cpp|hpp)$/;
+// INF-A (KJC-TSK-0758): infra IS source — terraform/k8s/shell/Docker edits
+// engage the method like app code; *_test.* files (terratest) are tests.
+export const TESTS = /(^|\\/)(tests?|__tests__|spec)\\/|\\.(test|spec)\\.[a-z]+$|_test\\.[a-z]+$/;
+export const CODE = /\\.(m?[jt]sx?|c[jt]s|py|go|rs|java|rb|php|cs|swift|kt|astro|svelte|vue|c|h|cc|cpp|hpp|tf|hcl|ya?ml|sh)$|(^|\\/)(Dockerfile|Makefile|Vagrantfile)$/;
 export const CARD = new RegExp(${JSON.stringify(CARD_REF_RE.source)}, "i");
 export const BASE_BRANCHES = new Set(["main", "master"]);
 export const load = () => { try { return JSON.parse(readFileSync(STATE, "utf8")); } catch { return {}; } };
@@ -226,6 +228,43 @@ process.stdin.on("end", () => {
       process.exit(2);
     }
     if (process.env.KJ_SENTINEL_OFF === "1") process.exit(0);
+    // KJC-BUG-0142: cada deny anuncia su escape como prefijo del comando
+    // (KJ_ALLOW_X=1 cmd), pero el hook corre con el env del HOST — el
+    // prefijo jamas llegaba a process.env y el escape era inalcanzable
+    // (deadlock real del gate de release: la landing solo se pone verde
+    // tras el deploy y el deploy estaba bloqueado por el mismo gate). Un
+    // escape es una excepcion CONSCIENTE y auditada, no un boundary de
+    // seguridad (security sigue sin escape y la autoprotecion corre antes),
+    // asi que el TEXTO del comando es fuente valida: solo asignaciones
+    // LITERALES al inicio (tokens VAR=VAL antes del primer verbo) y solo
+    // sobre un comando SIMPLE — con ;|& $() backtick o salto de linea el
+    // prefijo shell no alcanzaria a los comandos posteriores (catch de
+    // codex: "X=1 true && npm publish" escaparia sin serlo), asi que el
+    // escape por texto se rechaza y queda la via env de siempre.
+    const CMD_TEXT = tool === "Bash" ? String(input.command || "") : "";
+    const ESC_TAB = String.fromCharCode(9);
+    const ESC_NL = String.fromCharCode(10);
+    const ESC_BT = String.fromCharCode(96);
+    const escOn = (name) => {
+      if (process.env[name] === "1") return true;
+      let found = false;
+      let i = 0;
+      while (i < CMD_TEXT.length) {
+        while (i < CMD_TEXT.length && (CMD_TEXT[i] === " " || CMD_TEXT[i] === ESC_TAB)) i += 1;
+        const start = i;
+        while (i < CMD_TEXT.length && CMD_TEXT[i] !== " " && CMD_TEXT[i] !== ESC_TAB && CMD_TEXT[i] !== ESC_NL) i += 1;
+        const tok = CMD_TEXT.slice(start, i);
+        const eq = tok.indexOf("=");
+        if (eq <= 0 || !/^[A-Z][A-Z0-9_]*$/.test(tok.slice(0, eq))) break;
+        if (tok === name + "=1") found = true;
+      }
+      if (!found) return false;
+      for (const c of CMD_TEXT) {
+        if (c === ";" || c === "|" || c === "&" || c === ESC_NL || c === ESC_BT) return false;
+        if (c === "$" || c === "(" || c === ")") return false;
+      }
+      return true;
+    };
     // MONO-0 (KJC-TSK-0737, ADR 0002): cada sesion muta solo SU worktree;
     // otro carril del MISMO repo se deniega ANTES del dano. Lectura libre.
     const laneOf = (p) => {
@@ -243,7 +282,7 @@ process.stdin.on("end", () => {
       return d ? foreignLane(d) : null;
     };
     const laneDeny = (what, lane) => {
-      if (process.env.KJ_ALLOW_CROSS_LANE === "1") { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); return false; }
+      if (escOn("KJ_ALLOW_CROSS_LANE")) { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); return false; }
       console.error("kj sentinel: " + what + " vive en otro carril (" + lane + ") de este repo — cada sesion muta solo SU worktree (MONO-0). Cruce deliberado: KJ_ALLOW_CROSS_LANE=1, queda registrado.");
       return true;
     };
@@ -270,7 +309,7 @@ process.stdin.on("end", () => {
         // directorio se deniega conservadoramente — el remedio es no
         // necesitarlo (git -C, npm --prefix, rutas absolutas).
         if (/(^|[;&|(\\s])(cd|pushd)([ \\t]|$)/.test(cmd)) {
-          if (process.env.KJ_ALLOW_CROSS_LANE === "1") { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); }
+          if (escOn("KJ_ALLOW_CROSS_LANE")) { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); }
           else {
             console.error("kj sentinel: cd/pushd en un comando mutador — las rutas posteriores no son verificables por el guard de carriles (MONO-0); usa git -C / npm --prefix / rutas ABSOLUTAS sin cd (o KJ_ALLOW_CROSS_LANE=1, queda registrado).");
             process.exit(2);
@@ -289,7 +328,7 @@ process.stdin.on("end", () => {
         // de tokens de abajo; el residuo (expansion anidada en segmentos
         // runner) queda documentado como en la regla de ficheros PROTECTED.
         if (/>{1,2}[ \\t]*["']?[\\$\`]/.test(cmd)) {
-          if (process.env.KJ_ALLOW_CROSS_LANE === "1") { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); }
+          if (escOn("KJ_ALLOW_CROSS_LANE")) { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); }
           else {
             console.error("kj sentinel: redireccion con destino tras variable/sustitucion — el guard de carriles no puede verificarlo (MONO-0); usa una ruta LITERAL (o KJ_ALLOW_CROSS_LANE=1, queda registrado).");
             process.exit(2);
@@ -355,7 +394,7 @@ process.stdin.on("end", () => {
           return flush();
         };
         if (/\\$\\(|\`/.test(cmd) || quotedPathWithSpaces(cmd)) {
-          if (process.env.KJ_ALLOW_CROSS_LANE === "1") { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); }
+          if (escOn("KJ_ALLOW_CROSS_LANE")) { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); }
           else {
             console.error("kj sentinel: sustitucion de comandos o ruta entrecomillada con espacios en un comando mutador — no verificable por el guard de carriles (MONO-0); usa valores/rutas LITERALES sin sustitucion (o KJ_ALLOW_CROSS_LANE=1, queda registrado).");
             process.exit(2);
@@ -364,7 +403,7 @@ process.stdin.on("end", () => {
         const SAFE_EXP_SEG = /^([A-Za-z_][A-Za-z0-9_]*=[^ \\t]*[ \\t]*)*((npm|pnpm|yarn|vitest|jest|kj|gh|echo|printf|true|test)\\b|git[ \\t](?![^\\n]*(-C[ \\t]|--git-dir|--work-tree)))[^;|&\\n]*$|^[A-Za-z_][A-Za-z0-9_]*=[^;|&\\n]*$/;
         const segs = cmd.split(/&&|\\|\\||[;|\\n]/).map((s) => s.trim()).filter(Boolean);
         if (!segs.every((s) => !/[\\$]/.test(s) || SAFE_EXP_SEG.test(s))) {
-          if (process.env.KJ_ALLOW_CROSS_LANE === "1") { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); }
+          if (escOn("KJ_ALLOW_CROSS_LANE")) { recordEscape(sid, "KJ_ALLOW_CROSS_LANE", tool); }
           else {
             console.error("kj sentinel: expansion de shell en una herramienta generica de fichero/interprete — el objetivo no es verificable por el guard de carriles (MONO-0); usa rutas LITERALES o un runner del toolchain (o KJ_ALLOW_CROSS_LANE=1, queda registrado).");
             process.exit(2);
@@ -406,13 +445,13 @@ process.stdin.on("end", () => {
         let v = null;
         try { v = JSON.parse(String(pres.stdout || "").trim().split("\\n").pop()); } catch { /* mensaje generico */ }
         const secure = !!(v && v.class === "security");
-        if (!secure && process.env.KJ_ALLOW_POLICY === "1") { recordEscape(sid, "KJ_ALLOW_POLICY", tool); }
+        if (!secure && escOn("KJ_ALLOW_POLICY")) { recordEscape(sid, "KJ_ALLOW_POLICY", tool); }
         else {
           console.error("kj sentinel: policy deny [" + ((v && v.rule_id) || "policy") + "] " + ((v && v.reason) || "la tool call viola la policy del proyecto") + (secure ? " [security — sin escape ni arbitraje]" : " (KJ_ALLOW_POLICY=1 = excepcion consciente, queda registrada; el commit exigira ademas KJ_POLICY_REASON)"));
           process.exit(2);
         }
       } else if (pres.status !== 0) {
-        if (process.env.KJ_ALLOW_POLICY === "1") { recordEscape(sid, "KJ_ALLOW_POLICY", tool); }
+        if (escOn("KJ_ALLOW_POLICY")) { recordEscape(sid, "KJ_ALLOW_POLICY", tool); }
         else {
           console.error("kj sentinel: kj policy eval fallo (exit " + pres.status + ") — la policy declarada no se pudo evaluar, deny por defecto; diagnostica con kj policy check y corrige .karajan/policy.yml fuera de la sesion (o KJ_ALLOW_POLICY=1 = excepcion consciente, queda registrada).");
           process.exit(2);
@@ -426,7 +465,7 @@ process.stdin.on("end", () => {
         const branch = branchOf();
         const why = !branch ? null : BASE_BRANCHES.has(branch) ? "base" : !CARD.test(branch) ? "nocard" : null;
         if (why) {
-          if (process.env.KJ_ALLOW_NO_CARD === "1") { recordEscape(sid, "KJ_ALLOW_NO_CARD", tool); process.exit(0); }
+          if (escOn("KJ_ALLOW_NO_CARD")) { recordEscape(sid, "KJ_ALLOW_NO_CARD", tool); process.exit(0); }
           console.error(why === "base"
             ? "kj sentinel: no se editan fuentes en la rama base '" + branch + "' — crea la card (kj hu add) y la rama: git checkout -b feat/<CARD-ID>-descripcion. (KJ_ALLOW_NO_CARD=1 = excepcion consciente, queda registrada)"
             : "kj sentinel: la rama '" + branch + "' no referencia ninguna card — crea/mueve la card a running (kj hu add | kj hu move) y usa una rama feat/<CARD-ID>-descripcion. (KJ_ALLOW_NO_CARD=1 = excepcion consciente, queda registrada)");
@@ -437,7 +476,7 @@ process.stdin.on("end", () => {
     if (tool === "Bash") {
       const cmd = String(input.command || "");
       if (PUBLISH.test(cmd)) {
-        if (process.env.KJ_ALLOW_RELEASE === "1") { recordEscape(sid, "KJ_ALLOW_RELEASE", tool); process.exit(0); }
+        if (escOn("KJ_ALLOW_RELEASE")) { recordEscape(sid, "KJ_ALLOW_RELEASE", tool); process.exit(0); }
         const res = spawnSync("kj", ["release", "check", "--json"], { cwd: ROOT, encoding: "utf8" });
         if (res.error || res.status === null) process.exit(0);
         if (res.status !== 0) {

package/src/roles/audit-role.js

@@ -6,6 +6,7 @@ import { collectSonarFindings } from "../audit/sonar-findings.js";
 import { collectWebPerfInput } from "../audit/webperf-input.js";
 import { collectOsvFindings } from "../audit/osv-findings.js";
 import { collectSemgrepFindings } from "../audit/semgrep-findings.js";
+import { collectInfraFindings } from "../audit/infra-findings.js";
 import { collectCircularDeps } from "../audit/circular-deps.js";
 import { collectDeadExports } from "../audit/dead-exports.js";
 import { collectInjectionFindings } from "../audit/injection-findings.js";
@@ -58,6 +59,7 @@ export class AuditRole extends AgentRole {
     const noMadge = (typeof input === "object" ? Boolean(input?.noMadge) : false) || securityOnly;
     const noKnip = (typeof input === "object" ? Boolean(input?.noKnip) : false) || securityOnly;
     const noInjectionScan = typeof input === "object" ? Boolean(input?.noInjectionScan) : false;
+    const noInfraScan = typeof input === "object" ? Boolean(input?.noInfraScan) : false;
     const noAiSlop = (typeof input === "object" ? Boolean(input?.noAiSlop) : false) || securityOnly;
     const projectDir = this.config?.projectDir || process.cwd();
     let basalCost = null;
@@ -70,6 +72,7 @@ export class AuditRole extends AgentRole {
     let circularDeps = null;
     let deadExports = null;
     let injectionFindings = null;
+    let infraFindings = null;
     let aiSlop = null;
     if (!securityOnly) {
       try {
@@ -127,6 +130,14 @@ export class AuditRole extends AgentRole {
         injectionFindings = await collectInjectionFindings(projectDir, this.logger);
       } catch { /* injection scan is best-effort (KJC-TSK-0498) */ }
     }
+    // Checkov infra misconfigs — INF-C (KJC-TSK-0760). Security surface, so
+    // it ALSO runs in securityOnly. Best-effort: no infra markers or missing
+    // checkov return available:false declaring why.
+    if (!noInfraScan) {
+      try {
+        infraFindings = await collectInfraFindings(projectDir, this.logger);
+      } catch { /* checkov is best-effort */ }
+    }
     // AI-slop tells (KJC-TSK-0503). Deterministic, offline, regex-based.
     // Local equivalent of Deslopify-style review. Best-effort.
     if (!noAiSlop) {
@@ -134,7 +145,7 @@ export class AuditRole extends AgentRole {
         aiSlop = await collectAiSlop(projectDir);
       } catch { /* ai-slop scan is best-effort */ }
     }
-    return { projectDir, basalCost, growthDelta, stack, sonarFindings, webperf, osvFindings, semgrepFindings, circularDeps, deadExports, injectionFindings, aiSlop };
+    return { projectDir, basalCost, growthDelta, stack, sonarFindings, webperf, osvFindings, semgrepFindings, circularDeps, deadExports, injectionFindings, infraFindings, aiSlop };
   }
 
   /**

package/src/roles/tester-role.js

@@ -24,7 +24,14 @@ const COVERAGE_COMMANDS = {
   rspec: "bundle exec rspec 2>&1",
   phpunit: "vendor/bin/phpunit --coverage-text 2>&1",
   "dotnet-test": "dotnet test --collect:\"XPlat Code Coverage\" 2>&1",
-  "dart-test": "dart test 2>&1"
+  "dart-test": "dart test 2>&1",
+  // INF-B: the basic suite ALWAYS runs first; checkov is the additive deep
+  // scan. If checkov is missing this chain fails and the brief falls back to
+  // the basic suite alone (declared degradation, never green-by-omission).
+  "terraform-validate": "terraform init -backend=false -input=false 2>&1 && terraform validate 2>&1 && checkov -d . --compact --quiet 2>&1",
+  "helm-lint": "helm lint . 2>&1 && checkov -d . --compact --quiet 2>&1",
+  "kustomize-build": "kustomize build . > /dev/null && checkov -d . --compact --quiet 2>&1",
+  "ansible-lint": "ansible-lint 2>&1 && checkov -d . --compact --quiet 2>&1"
 };
 
 const TEST_COMMANDS = {
@@ -39,7 +46,12 @@ const TEST_COMMANDS = {
   rspec: "bundle exec rspec 2>&1",
   phpunit: "vendor/bin/phpunit 2>&1",
   "dotnet-test": "dotnet test 2>&1",
-  "dart-test": "dart test 2>&1"
+  "dart-test": "dart test 2>&1",
+  // INF-B (KJC-TSK-0759): infra suites — validity IS the test floor.
+  "terraform-validate": "terraform init -backend=false -input=false 2>&1 && terraform validate 2>&1",
+  "helm-lint": "helm lint . 2>&1",
+  "kustomize-build": "kustomize build . > /dev/null && echo kustomize build: OK",
+  "ansible-lint": "ansible-lint 2>&1"
 };
 
 export class TesterRole extends AgentRole {
@@ -82,9 +94,14 @@ export class TesterRole extends AgentRole {
     if (detection.hasTests && detection.framework) {
       const coverageCmd = COVERAGE_COMMANDS[detection.framework];
       const testCmd = TEST_COMMANDS[detection.framework];
+      // INF-B: infra suites have no node_modules — the step-0 contract is
+      // "the tool exists or you SAY which one is missing", never a fake green.
+      const step0 = detection.language === "infra"
+        ? "**Step 0**: Verify the SUITE tool is installed (`which terraform`/`helm`/`kustomize`/`ansible-lint`). If the suite tool is MISSING, do NOT fake a green: report it in `failures` with the exact install command and set tests_pass: false. `checkov` (the deep scan below) is OPTIONAL: if it is missing, run the basic suite as the fallback and SAY the deep scan was skipped (degraded, never green-by-omission)."
+        : "**Step 0**: If node_modules/ does not exist, run `npm install` (or `pnpm install`) first.";
       sections.push(
         `## Detected test framework: ${detection.framework} (${detection.language})`,
-        "**Step 0**: If node_modules/ does not exist, run `npm install` (or `pnpm install`) first.",
+        step0,
         `**Step 1**: Run the test suite with coverage:`,
         "```bash",
         coverageCmd || testCmd,

package/src/utils/project-detect.js

@@ -42,6 +42,18 @@ const LANGUAGE_MARKERS = [
   { file: "pubspec.yaml", framework: "dart-test", language: "dart" },
 ];
 
+// --- Infra (INF-B, KJC-TSK-0759) ---
+// Checked AFTER app-language markers: a mixed repo keeps its app framework.
+// Only unequivocal markers — a stray .yaml never classifies as infra.
+const INFRA_MARKERS = [
+  { file: "*.tf", glob: true, framework: "terraform-validate", language: "infra" },
+  { file: "terraform", framework: "terraform-validate", language: "infra" },
+  { file: "Chart.yaml", framework: "helm-lint", language: "infra" },
+  { file: "kustomization.yaml", framework: "kustomize-build", language: "infra" },
+  { file: "kustomization.yml", framework: "kustomize-build", language: "infra" },
+  { file: "ansible.cfg", framework: "ansible-lint", language: "infra" },
+];
+
 /** Test file patterns per language (used by TDD policy). */
 export const TEST_PATTERNS_BY_LANGUAGE = {
   javascript: ["/tests/", "/__tests__/", ".test.", ".spec."],
@@ -55,6 +67,7 @@ export const TEST_PATTERNS_BY_LANGUAGE = {
   php:        ["/tests/", "/test/", "Test.php"],
   swift:      ["/Tests/", "Tests.swift"],
   dart:       ["/test/", "_test.dart"],
+  infra:      ["/tests/", "/test/", "_test."],
 };
 
 function frameworkFromConfig(filename) {
@@ -93,7 +106,29 @@ export async function detectTestFramework(cwd = process.cwd()) {
   }
 
   // 3. Multi-language: check project markers
-  for (const marker of LANGUAGE_MARKERS) {
+  const lang = await matchMarkers(cwd, LANGUAGE_MARKERS);
+  if (lang) return lang;
+
+  // 4. Infra (INF-B): terraform/helm/kustomize/ansible have their own suite.
+  const infra = await matchMarkers(cwd, INFRA_MARKERS);
+  if (infra) return infra;
+
+  return { hasTests: false, framework: null, language: null };
+}
+
+/**
+ * True when the project carries unequivocal infra markers (terraform, helm,
+ * kustomize, ansible) — regardless of the app framework the repo may also
+ * have. Used by INF-C's audit collector to gate the checkov scan.
+ * @param {string} cwd
+ * @returns {Promise<boolean>}
+ */
+export async function detectInfraMarkers(cwd = process.cwd()) {
+  return Boolean(await matchMarkers(cwd, INFRA_MARKERS));
+}
+
+async function matchMarkers(cwd, markers) {
+  for (const marker of markers) {
     try {
       if (marker.glob) {
         const entries = await fs.readdir(cwd);
@@ -107,8 +142,7 @@ export async function detectTestFramework(cwd = process.cwd()) {
       }
     } catch { /* not found */ }
   }
-
-  return { hasTests: false, framework: null, language: null };
+  return null;
 }
 
 /**