fix(server): close silent auto→simulated fallback path (sibling of #937)

[ruvnet]

Summary

Issue #937 in the cognitum-v0 appliance flagged that cognitum-csi-capture shipped --simulate by default. A grep across this tree found the same anti-pattern: CSI_SOURCE=auto (the Docker default) silently fell back to synthetic CSI when no ESP32 or Windows WiFi was detected, and the only signal was a single info! log line at startup. Downstream consumers of /api/v1/sensing/latest and /ws/sensing had no in-band way to know they were being served fake data.

Fix

auto now refuses to fall back. When no real source is detected the server logs a clear error! with two explicit ways to proceed, then exits 78 (EX_CONFIG):

error: No real CSI source detected. Auto-detection refuses to silently fall back
       to synthetic data because that would expose downstream consumers
       (/api/v1/sensing/latest, /ws/sensing) to fake telemetry tagged as
       production. To run with synthetic data, set the source explicitly:
       --source simulated (or CSI_SOURCE=simulated in Docker). To use real
       hardware: provision an ESP32 to emit CSI on UDP :5005 or install the
       Windows WiFi capture driver. See https://github.com/ruvnet/RuView/issues/937
       for context.

Existing operators who explicitly set --source simulated (or the legacy simulate alias) are unaffected — the alias is preserved for back-compat.

What changed

File	Change
wifi-densepose-sensing-server/src/main.rs	auto no longer falls back; exits 78 with actionable error. simulate → simulated alias preserved.
docker/docker-entrypoint.sh	CSI_SOURCE help text rewritten to reflect fail-loud auto.
docker/docker-compose.yml	Comment for CSI_SOURCE=auto corrected.
wifi-densepose-desktop/src/commands/server.rs	Default passed downstream is now the explicit simulated (not auto), so the server tags the data correctly. Desktop app keeps demo-mode default — it's an explicit demo product.

Test plan

• cargo build -p wifi-densepose-sensing-server --no-default-features --bin sensing-server → clean (existing pre-fix warnings unchanged).
• cargo test -p wifi-densepose-sensing-server --no-default-features --bin sensing-server → 122 / 122 pass (no regressions in the existing test suite).
• HW: not strictly needed — the code path is match args.source.as_str() arm replacement; CI build covers it. An end-to-end Docker smoke test (build image, run with no ESP32, expect exit 78) would be nice-to-have.

Deployment

⚠ Breaking change for unattended deployments that relied on the auto → simulated silent fallback. That's exactly the failure mode this PR closes: pretending to serve real sensing data when the source is fake. Three escape hatches printed in the error message:

docker run -e CSI_SOURCE=simulated ruvnet/wifi-densepose:latest   # opt in to demo mode
docker run -e CSI_SOURCE=esp32     ruvnet/wifi-densepose:latest   # require real ESP32 on :5005
docker run -e CSI_SOURCE=wifi      ruvnet/wifi-densepose:latest   # use host WiFi capture

🤖 Generated with claude-flow