instar 1.2.51 → 1.2.52

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkQH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAiqDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAksLtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmQH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAiqDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA+tLtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -25,6 +25,7 @@ import { AgentServer } from '../server/AgentServer.js';
 import { TelegramAdapter, TOPIC_STYLE, selectTopicEmoji } from '../messaging/TelegramAdapter.js';
 import { RelationshipManager } from '../core/RelationshipManager.js';
 import { ClaudeCliIntelligenceProvider } from '../core/ClaudeCliIntelligenceProvider.js';
+import { isClaudeForbidden } from '../core/claudeForbiddenGuard.js';
 import { FeedbackManager } from '../core/FeedbackManager.js';
 import { FeedbackAnomalyDetector } from '../monitoring/FeedbackAnomalyDetector.js';
 import { DispatchManager } from '../core/DispatchManager.js';
@@ -2147,6 +2148,24 @@ export async function startServer(options) {
             console.log(pc.yellow('  intelligenceProvider: "anthropic-api" is no longer supported — using Claude CLI subscription instead.\n'
                 + '  Remove the field from config.json. See specs/provider-portability/04-anthropic-path-constraints.md.'));
         }
+        // Codex-only enforcement (Justin 2026-05-23 absolute requirement): if
+        // this agent's enabledFrameworks excludes 'claude-code', forbid ALL
+        // Claude provider construction process-wide. Any internal LLM path that
+        // tries to fall back to Claude (relationships, summaries, gates) then
+        // throws ClaudeForbiddenError instead of silently using Claude on a
+        // machine where the claude binary happens to be installed. Set BEFORE
+        // any provider is built so the guard is active for the whole boot.
+        try {
+            const { setClaudeForbidden, isCodexOnly } = await import('../core/claudeForbiddenGuard.js');
+            const ef = config.enabledFrameworks;
+            if (isCodexOnly(ef)) {
+                setClaudeForbidden(`enabledFrameworks=${JSON.stringify(ef)} (no claude-code)`);
+                console.log(pc.cyan('  Codex-only mode: Claude provider construction is forbidden process-wide.'));
+            }
+        }
+        catch (err) {
+            console.warn(`[server] codex-only guard init failed (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
+        }
         // Provider-portability v1.0.0: pick the IntelligenceProvider that
         // matches the configured framework. Defaults to claude-code for
         // backwards-compat; INSTAR_FRAMEWORK=codex-cli routes through Codex.
@@ -2293,9 +2312,11 @@ export async function startServer(options) {
                 config.relationships.intelligence = sharedIntelligence;
                 intelligenceMode = `LLM-supervised (${intelligenceSource})`;
             }
-            else if (config.sessions.claudePath) {
+            else if (config.sessions.claudePath && !isClaudeForbidden()) {
                 // Last-ditch fallback for installs where sharedIntelligence couldn't
-                // be built but a claude binary path is still configured.
+                // be built but a claude binary path is still configured. Skipped on
+                // codex-only agents (isClaudeForbidden) — there, relationships run
+                // without LLM intelligence rather than silently using Claude.
                 config.relationships.intelligence = new ClaudeCliIntelligenceProvider(config.sessions.claudePath);
                 intelligenceMode = 'LLM-supervised (Claude CLI subscription, fallback)';
             }
@@ -3711,30 +3732,37 @@ export async function startServer(options) {
             // get Codex-summarized topics. Last-ditch ClaudeCli fallback
             // preserves v0.x behavior when sharedIntelligence couldn't be
             // built but a claude binary is still on disk.
-            let summaryIntelligence;
+            let summaryIntelligence = null;
             if (sharedIntelligence) {
                 summaryIntelligence = sharedIntelligence;
             }
-            else {
+            else if (!isClaudeForbidden()) {
                 const { ClaudeCliIntelligenceProvider } = await import('../core/ClaudeCliIntelligenceProvider.js');
                 summaryIntelligence = new ClaudeCliIntelligenceProvider(config.sessions.claudePath);
             }
-            const summarizer = new TopicSummarizer(summaryIntelligence, topicMemory);
-            sessionManager.on('sessionComplete', (session) => {
-                // Find the topic linked to this session
-                const sessionTopicId = telegram.getTopicForSession(session.tmuxSession);
-                if (!sessionTopicId)
-                    return;
-                // Check if this topic needs a summary update (async, fire-and-forget)
-                summarizer.summarize(sessionTopicId).then((result) => {
-                    if (result) {
-                        console.log(`[TopicSummarizer] Updated summary for topic ${sessionTopicId}: ${result.messagesProcessed} messages processed in ${result.durationMs}ms`);
-                    }
-                }).catch((err) => {
-                    console.error(`[TopicSummarizer] Failed for topic ${sessionTopicId}: ${err instanceof Error ? err.message : err}`);
+            // On a codex-only agent without a built Codex provider, summaryIntelligence
+            // stays null — topic summaries are skipped rather than run on Claude.
+            if (summaryIntelligence) {
+                const summarizer = new TopicSummarizer(summaryIntelligence, topicMemory);
+                sessionManager.on('sessionComplete', (session) => {
+                    // Find the topic linked to this session
+                    const sessionTopicId = telegram.getTopicForSession(session.tmuxSession);
+                    if (!sessionTopicId)
+                        return;
+                    // Check if this topic needs a summary update (async, fire-and-forget)
+                    summarizer.summarize(sessionTopicId).then((result) => {
+                        if (result) {
+                            console.log(`[TopicSummarizer] Updated summary for topic ${sessionTopicId}: ${result.messagesProcessed} messages processed in ${result.durationMs}ms`);
+                        }
+                    }).catch((err) => {
+                        console.error(`[TopicSummarizer] Failed for topic ${sessionTopicId}: ${err instanceof Error ? err.message : err}`);
+                    });
                 });
-            });
-            console.log(pc.green('  Topic auto-summarization enabled (on session end)'));
+                console.log(pc.green('  Topic auto-summarization enabled (on session end)'));
+            }
+            else {
+                console.log(pc.dim('  Topic auto-summarization skipped (no LLM provider; codex-only without Codex provider)'));
+            }
         }
         // Session Activity Sentinel — episodic memory digestion.
         // Creates mid-session mini-digests via LLM, and session syntheses on completion.
@@ -5099,6 +5127,9 @@ export async function startServer(options) {
                     stateDir: config.stateDir,
                     intelligence: sharedIntelligence,
                     agentName: config.projectName ?? 'the agent',
+                    // Resolved default framework so idle/stall detection uses the right
+                    // pane signals (Codex panes don't match Claude prompt patterns).
+                    agentFramework: _defaultFramework,
                     hasAgentRespondedSince: (topicId, sinceMs) => {
                         const sinceIso = new Date(sinceMs).toISOString();
                         // Check Telegram log