instar 0.17.3 → 0.17.6

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA+OH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+7BD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAk8DtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA+OH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+7BD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAohEtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -1343,6 +1343,27 @@ export async function startServer(options) {
             }
         }
         const sessionManager = new SessionManager(config.sessions, state);
+        // Input Guard — cross-topic injection defense (Layer 1 + 1.5 + 2)
+        if (config.inputGuard?.enabled !== false) {
+            const guardConfig = config.inputGuard ?? { enabled: true };
+            const anthropicKey = process.env['ANTHROPIC_API_KEY']?.trim();
+            const { InputGuard } = await import('../core/InputGuard.js');
+            const inputGuard = new InputGuard({
+                config: {
+                    enabled: true,
+                    provenanceCheck: guardConfig.provenanceCheck ?? true,
+                    injectionPatterns: guardConfig.injectionPatterns ?? true,
+                    topicCoherenceReview: guardConfig.topicCoherenceReview ?? true,
+                    action: guardConfig.action ?? 'warn',
+                    reviewTimeout: guardConfig.reviewTimeout ?? 3000,
+                },
+                stateDir: config.stateDir,
+                apiKey: anthropicKey,
+            });
+            const registryPath = path.join(config.stateDir, 'topic-session-registry.json');
+            sessionManager.setInputGuard(inputGuard, registryPath);
+            console.log(pc.green(`  Input Guard: enabled (action: ${guardConfig.action ?? 'warn'})`));
+        }
         // TopicResumeMap: persist Claude session UUIDs across session restarts.
         // When a session is killed/restarted, we save its UUID so the next spawn
         // can use --resume to reattach to the existing conversation context.
@@ -1412,6 +1433,14 @@ export async function startServer(options) {
             });
             console.log(pc.green(`  Quota tracking enabled (${quotaFile})`));
         }
+        // Set up opt-in telemetry heartbeat
+        let telemetryHeartbeat;
+        if (config.monitoring?.telemetry?.enabled) {
+            const { TelemetryHeartbeat } = await import('../monitoring/TelemetryHeartbeat.js');
+            telemetryHeartbeat = new TelemetryHeartbeat(config.monitoring.telemetry, config.stateDir, config.projectDir, config.version || 'unknown');
+            telemetryHeartbeat.start();
+            console.log(pc.green(`  Telemetry: enabled (${config.monitoring.telemetry.level || 'basic'} level, every ${Math.round((config.monitoring.telemetry.intervalMs || 21600000) / 3600000)}h)`));
+        }
         let scheduler;
         if (config.scheduler.enabled && coordinator.isAwake) {
             scheduler = new JobScheduler(config.scheduler, sessionManager, state, config.stateDir);
@@ -1842,6 +1871,16 @@ export async function startServer(options) {
             sessionManager.on('sessionComplete', (session) => {
                 scheduler.processQueue();
                 scheduler.notifyJobComplete(session.id, session.tmuxSession);
+                // Record telemetry events
+                if (telemetryHeartbeat && session.jobSlug) {
+                    telemetryHeartbeat.recordJobRun();
+                }
+            });
+        }
+        // Wire telemetry counters
+        if (telemetryHeartbeat) {
+            sessionManager.on('sessionStart', () => {
+                telemetryHeartbeat.recordSessionSpawned();
             });
         }
         // Auto-summarize topics on session completion.
@@ -2406,8 +2445,45 @@ export async function startServer(options) {
                 return null; // Normal messages pass through
             };
             telegram.onSentinelKillSession = (sessionName) => {
+                // Save resume UUID before killing so respawn can --resume
+                if (_topicResumeMap) {
+                    try {
+                        const uuid = _topicResumeMap.findUuidForSession(sessionName);
+                        if (uuid) {
+                            // Find the topic ID for this session
+                            const topicSessions = telegram.getAllTopicSessions();
+                            for (const [topicId, sessName] of topicSessions) {
+                                if (sessName === sessionName) {
+                                    _topicResumeMap.save(topicId, uuid, sessionName);
+                                    console.log(`[sentinel] Saved resume UUID ${uuid} for topic ${topicId} before kill`);
+                                    break;
+                                }
+                            }
+                        }
+                    }
+                    catch { /* best effort */ }
+                }
                 return sessionManager.killSession(sessionName);
             };
+            telegram.onSentinelPauseSession = (sessionName) => {
+                // Save resume UUID so if the session dies during pause, respawn can --resume
+                if (_topicResumeMap) {
+                    try {
+                        const uuid = _topicResumeMap.findUuidForSession(sessionName);
+                        if (uuid) {
+                            const topicSessions = telegram.getAllTopicSessions();
+                            for (const [topicId, sessName] of topicSessions) {
+                                if (sessName === sessionName) {
+                                    _topicResumeMap.save(topicId, uuid, sessionName);
+                                    console.log(`[sentinel] Saved resume UUID ${uuid} for topic ${topicId} on pause`);
+                                    break;
+                                }
+                            }
+                        }
+                    }
+                    catch { /* best effort */ }
+                }
+            };
             console.log(pc.green('  Sentinel wired into Telegram message flow'));
         }
         // Inter-Agent Messaging — structured communication between sessions
@@ -2656,7 +2732,7 @@ export async function startServer(options) {
                 console.warn(pc.yellow(`  Response review pipeline: configured but ANTHROPIC_API_KEY not set`));
             }
         }
-        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, semanticMemory, activitySentinel, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, topicResumeMap: _topicResumeMap ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, whatsapp: whatsappAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, responseReviewGate });
+        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, semanticMemory, activitySentinel, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, topicResumeMap: _topicResumeMap ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, whatsapp: whatsappAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, responseReviewGate, telemetryHeartbeat });
         await server.start();
         // Connect DegradationReporter downstream systems now that everything is initialized.
         // Any degradation events queued during startup will drain to feedback + telegram.