instar 1.3.1043 → 1.3.1045

package/dashboard/index.html

@@ -3172,12 +3172,40 @@
           </select>
         </div>
         <div class="tab-purpose" style="padding:0 12px 8px">Monitor and control your scheduled tasks — recurring jobs that run on their own.</div>
+
+        <!-- Migration banner (jobs-as-agentmd Phase 4) -->
+        <div id="jobsMigrationBanner" style="display:none;margin:8px 12px;padding:10px 12px;background:var(--panel);border:1px solid var(--border);border-radius:8px;font-size:12px">
+          <div id="jobsMigrationBannerBody"></div>
+          <div id="jobsMigrationBannerActions" style="margin-top:8px;display:flex;gap:8px;flex-wrap:wrap"></div>
+        </div>
+
+        <!-- Issues card (jobs-as-agentmd Phase 4) -->
+        <div id="jobsIssuesCard" style="display:none;margin:8px 12px;padding:10px 12px;background:var(--panel);border:1px solid var(--border);border-radius:8px;font-size:12px">
+          <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:6px">
+            <strong style="font-size:12px">Issues <span id="jobsIssuesCount" style="color:var(--text-dim);font-weight:400"></span></strong>
+            <div style="display:flex;gap:6px;align-items:center">
+              <select id="jobsIssuesFilter" onchange="renderIssuesCard()" style="font-size:11px;padding:2px 4px">
+                <option value="">All kinds</option>
+                <option value="orphan-manifest">Orphan manifest</option>
+                <option value="shadow-md">Shadow body</option>
+                <option value="missing-from-jobs-json">Missing migration</option>
+                <option value="staged-new">Staged save</option>
+                <option value="case-collision">Case collision</option>
+              </select>
+              <button onclick="loadIssuesCard()" title="Refresh the issues list" aria-label="Refresh the issues list" style="font-size:11px;padding:2px 6px">↻</button>
+            </div>
+          </div>
+          <div id="jobsIssuesList"></div>
+        </div>
+
         <div id="jobsSummary" class="jobs-summary"></div>
         <div class="jobs-filter-bar" id="jobsFilterBar">
           <button class="jobs-filter-chip active" data-filter="all" onclick="setJobFilter('all')">All</button>
           <button class="jobs-filter-chip" data-filter="running" onclick="setJobFilter('running')">Running</button>
           <button class="jobs-filter-chip" data-filter="failing" onclick="setJobFilter('failing')">Failing</button>
           <button class="jobs-filter-chip" data-filter="disabled" onclick="setJobFilter('disabled')">Disabled</button>
+          <button class="jobs-filter-chip" data-filter="instar" onclick="setJobFilter('instar')">Instar defaults</button>
+          <button class="jobs-filter-chip" data-filter="user" onclick="setJobFilter('user')">Your jobs</button>
         </div>
         <div class="jobs-list" id="jobsList">
           <div style="padding:20px;color:var(--text-dim);text-align:center">Loading jobs...</div>
@@ -7312,6 +7340,250 @@
         document.getElementById('jobsList').innerHTML =
           '<div style="padding:20px;color:var(--red);text-align:center">Failed to load jobs</div>';
       }
+      // Phase 4: refresh ancillary surfaces alongside the jobs list.
+      loadJobsMigrationBanner();
+      loadIssuesCard();
+    }
+
+    // ─── Migration banner (jobs-as-agentmd Phase 4) ──────────────────
+    //
+    // Reads GET /jobs/migration-status. Surfaces three operator actions
+    // when applicable: confirm migration complete, roll back, or "your
+    // migration auto-ran on the last update."
+    let migrationStatus = null;
+    async function loadJobsMigrationBanner() {
+      try {
+        const data = await apiFetch('/jobs/migration-status');
+        migrationStatus = data;
+        renderJobsMigrationBanner();
+      } catch {
+        // best-effort — banner is non-load-bearing
+        document.getElementById('jobsMigrationBanner').style.display = 'none';
+      }
+    }
+
+    function renderJobsMigrationBanner() {
+      const banner = document.getElementById('jobsMigrationBanner');
+      const bodyEl = document.getElementById('jobsMigrationBannerBody');
+      const actionsEl = document.getElementById('jobsMigrationBannerActions');
+      if (!migrationStatus) { banner.style.display = 'none'; return; }
+
+      const { hasLegacyJobsJson, hasMigrationComplete, hasMigrationAbandoned, canConfirm, canAbandon, scheduleEntryCount } = migrationStatus;
+
+      if (hasMigrationComplete) {
+        bodyEl.innerHTML = '<strong>✓ Migration confirmed.</strong> Your jobs are running from the new per-slug layout. The legacy <code>jobs.json</code> can be cleaned up on the next release.';
+        actionsEl.innerHTML = '';
+        banner.style.display = 'block';
+        return;
+      }
+      if (hasMigrationAbandoned) {
+        bodyEl.innerHTML = '<strong>Migration abandoned.</strong> Running on the legacy <code>jobs.json</code>. Run <code>instar job migrate</code> to retry.';
+        actionsEl.innerHTML = '';
+        banner.style.display = 'block';
+        return;
+      }
+      if (canConfirm) {
+        bodyEl.innerHTML = `<strong>Migration ready to confirm.</strong> ${scheduleEntryCount} per-slug entries are in place. Confirming locks the new layout in for release-cut.`;
+        actionsEl.innerHTML =
+          '<button onclick="confirmMigration()" style="padding:4px 10px;background:var(--accent);color:#fff;border:none;border-radius:4px;cursor:pointer">Confirm migration complete</button>' +
+          '<button onclick="abandonMigration()" style="padding:4px 10px;background:transparent;border:1px solid var(--border);border-radius:4px;cursor:pointer">Roll back</button>';
+        banner.style.display = 'block';
+        return;
+      }
+      if (hasLegacyJobsJson && canAbandon) {
+        bodyEl.innerHTML = '<strong>Migration partially complete.</strong> Some jobs are on the new layout; review the Issues card below.';
+        actionsEl.innerHTML =
+          '<button onclick="abandonMigration()" style="padding:4px 10px;background:transparent;border:1px solid var(--border);border-radius:4px;cursor:pointer">Roll back</button>';
+        banner.style.display = 'block';
+        return;
+      }
+      banner.style.display = 'none';
+    }
+
+    async function confirmMigration() {
+      if (!confirm('Confirm migration complete? This signals the release-cut gate that your legacy jobs.json can be removed in a future release.')) return;
+      try {
+        await apiFetch('/jobs/migration-confirm', { method: 'POST' });
+        showToast('Migration confirmed.');
+        loadJobs();
+      } catch (e) {
+        showToast('Failed: ' + (e && e.message ? e.message : 'unknown'));
+      }
+    }
+
+    async function abandonMigration() {
+      if (!confirm('Roll back the migration? This removes the new per-slug entries and leaves your legacy jobs.json intact. You can re-run instar job migrate later.')) return;
+      try {
+        await apiFetch('/jobs/migration-abandon', { method: 'POST' });
+        showToast('Migration rolled back.');
+        loadJobs();
+      } catch (e) {
+        showToast('Failed: ' + (e && e.message ? e.message : 'unknown'));
+      }
+    }
+
+    // ─── Issues card (jobs-as-agentmd Phase 4) ───────────────────────
+    //
+    // Consumes GET /jobs/reconcile. Surfaces orphan/shadow/missing/
+    // staged-new/case-collision findings with per-class filter chips
+    // and per-item dismiss (auto-undismiss on recurrence at next reload).
+    let issuesData = null;
+    const dismissedIssueKeys = new Set();
+    async function loadIssuesCard() {
+      try {
+        const data = await apiFetch('/jobs/reconcile');
+        issuesData = data;
+        renderIssuesCard();
+      } catch {
+        document.getElementById('jobsIssuesCard').style.display = 'none';
+      }
+    }
+
+    function renderIssuesCard() {
+      const card = document.getElementById('jobsIssuesCard');
+      const list = document.getElementById('jobsIssuesList');
+      const count = document.getElementById('jobsIssuesCount');
+      const filterEl = document.getElementById('jobsIssuesFilter');
+
+      if (!issuesData || !Array.isArray(issuesData.findings) || issuesData.findings.length === 0) {
+        card.style.display = 'none';
+        return;
+      }
+
+      const filter = filterEl.value;
+      const filtered = issuesData.findings.filter(f => (!filter || f.kind === filter) && !dismissedIssueKeys.has(issueKey(f)));
+
+      if (filtered.length === 0) {
+        card.style.display = 'none';
+        return;
+      }
+      card.style.display = 'block';
+      count.textContent = '(' + filtered.length + ')';
+
+      // Sort by severity (error > warning > info), then by slug.
+      const sevOrder = { error: 0, warning: 1, info: 2 };
+      filtered.sort((a, b) => (sevOrder[a.severity] - sevOrder[b.severity]) || ((a.slug || '').localeCompare(b.slug || '')));
+
+      list.innerHTML = filtered.map(f => {
+        const sevColor = f.severity === 'error' ? 'var(--red)' : f.severity === 'warning' ? 'var(--yellow)' : 'var(--text-dim)';
+        const slugDisplay = f.slug ? '<code>' + esc(f.slug) + '</code> ' : '';
+        const key = issueKey(f);
+        return '<div style="display:flex;justify-content:space-between;align-items:flex-start;gap:8px;padding:4px 0;border-bottom:1px solid var(--border)">'
+          + '<div style="flex:1">'
+          + '<span style="color:' + sevColor + ';font-weight:600;margin-right:6px">' + esc(f.kind) + '</span>'
+          + slugDisplay
+          + '<span style="color:var(--text-dim);font-size:11px">' + esc(f.summary || '') + '</span>'
+          + '</div>'
+          + '<button onclick="dismissIssue(\'' + esc(key) + '\')" title="Dismiss until next reload" style="font-size:11px;padding:2px 6px;background:transparent;border:1px solid var(--border);border-radius:4px;cursor:pointer">×</button>'
+          + '</div>';
+      }).join('');
+    }
+
+    function issueKey(f) {
+      return (f.kind || '') + '|' + (f.slug || '') + '|' + (f.filePath || '');
+    }
+
+    function dismissIssue(key) {
+      dismissedIssueKeys.add(key);
+      renderIssuesCard();
+    }
+
+    // ─── Override / Unfork / Save (jobs-as-agentmd Phase 4) ──────────
+    async function overrideJob(slug) {
+      if (!confirm('Make your own copy of this job. After this, you control it — instar won\'t update it automatically. You can switch back to the default later.')) return;
+      try {
+        await apiFetch('/jobs/' + encodeURIComponent(slug) + '/override', { method: 'POST' });
+        showToast('Override created. Your copy is now editable in the User namespace.');
+        loadJobs();
+      } catch (e) {
+        showToast('Failed: ' + (e && e.message ? e.message : 'unknown'));
+      }
+    }
+
+    async function unforkJob(slug) {
+      if (!confirm('Switch back to the instar default. Your version is saved locally for 30 days in case you change your mind. After that it\'s deleted.')) return;
+      try {
+        const r = await apiFetch('/jobs/' + encodeURIComponent(slug) + '/unfork', { method: 'POST' });
+        showToast('Unforked. Backup saved.');
+        loadJobs();
+      } catch (e) {
+        showToast('Failed: ' + (e && e.message ? e.message : 'unknown'));
+      }
+    }
+
+    async function toggleJobEnabled(slug, currentlyEnabled) {
+      const endpoint = currentlyEnabled ? '/disable' : '/enable';
+      try {
+        await apiFetch('/jobs/' + encodeURIComponent(slug) + endpoint, { method: 'POST' });
+        loadJobs();
+      } catch (e) {
+        showToast('Failed: ' + (e && e.message ? e.message : 'unknown'));
+      }
+    }
+
+    // ─── Editor modal ────────────────────────────────────────────────
+    let editorOpenSlug = null;
+    let editorManifestVersion = null;
+    function openJobEditor(slug) {
+      const job = jobsData.find(j => j.slug === slug);
+      if (!job) return;
+      if (job.origin === 'instar') {
+        if (!confirm('This is an instar default. Editing it requires forking to your User namespace first. Override now?')) return;
+        overrideJob(slug).then(() => setTimeout(() => openJobEditor(slug), 600));
+        return;
+      }
+      editorOpenSlug = slug;
+      editorManifestVersion = job.manifestVersion || 0;
+      document.getElementById('jobEditorSlug').textContent = slug;
+      document.getElementById('jobEditorName').value = job.name || '';
+      document.getElementById('jobEditorDescription').value = job.description || '';
+      document.getElementById('jobEditorSchedule').value = job.schedule || '';
+      document.getElementById('jobEditorPriority').value = job.priority || 'low';
+      document.getElementById('jobEditorBody').value = job.body || '';
+      document.getElementById('jobEditorOcc').textContent = editorManifestVersion ? 'Saved copy #' + editorManifestVersion : '';
+      document.getElementById('jobEditorModal').style.display = 'flex';
+    }
+
+    function closeJobEditor() {
+      editorOpenSlug = null;
+      editorManifestVersion = null;
+      document.getElementById('jobEditorModal').style.display = 'none';
+    }
+
+    async function saveJobEditor() {
+      if (!editorOpenSlug) return;
+      const slug = editorOpenSlug;
+      const body = document.getElementById('jobEditorBody').value;
+      const manifest = {
+        slug,
+        origin: 'user',
+        name: document.getElementById('jobEditorName').value,
+        description: document.getElementById('jobEditorDescription').value,
+        schedule: document.getElementById('jobEditorSchedule').value,
+        priority: document.getElementById('jobEditorPriority').value,
+        execute: { type: 'agentmd' },
+        manifestVersion: editorManifestVersion,
+      };
+      try {
+        const r = await apiFetch('/jobs/' + encodeURIComponent(slug) + '/save', {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({ mdBody: body, manifest, manifestVersion: editorManifestVersion }),
+        });
+        showToast('Saved.');
+        closeJobEditor();
+        loadJobs();
+      } catch (e) {
+        const msg = e && e.message ? e.message : 'unknown';
+        if (msg.indexOf('409') >= 0 || msg.indexOf('stale') >= 0) {
+          if (confirm('Someone else saved this job since you opened the editor. Reload and lose your changes?')) {
+            closeJobEditor();
+            loadJobs();
+          }
+        } else {
+          showToast('Save failed: ' + msg);
+        }
+      }
     }
 
     function renderJobsSummary() {
@@ -7348,6 +7620,8 @@
           return (s.consecutiveFailures || 0) > 0;
         }
         if (jobFilter === 'disabled') return !j.enabled;
+        if (jobFilter === 'instar') return j.origin === 'instar';
+        if (jobFilter === 'user') return j.origin === 'user';
         return true;
       });
 
@@ -7398,6 +7672,25 @@
         const priorityBadge = (j.priority === 'critical' || j.priority === 'high')
           ? '<span class="priority-badge ' + esc(j.priority) + '">' + esc(j.priority) + '</span>' : '';
 
+        // Namespace badge: instar default vs user-authored vs legacy.
+        // Per INSTAR-JOBS-AS-AGENTMD spec §Dashboard UX "namespace badge".
+        let nsBadge = '';
+        if (j.origin === 'instar') {
+          nsBadge = '<span class="model-badge" title="Shipped by instar" style="background:rgba(120,180,255,0.18)">instar</span>';
+        } else if (j.origin === 'user') {
+          nsBadge = '<span class="model-badge" title="Your job" style="background:rgba(150,220,150,0.18)">user</span>';
+          if (j.hasUserFork) {
+            nsBadge += '<span class="model-badge" title="Forked from an instar default" style="background:rgba(200,180,100,0.18)">fork</span>';
+          }
+        }
+
+        // Lock-trust indicator: warn when an instar default is in a
+        // tamper state. Per §Trust Model.
+        let trustWarn = '';
+        if (j.lockTrust && j.lockTrust !== 'trusted' && j.lockTrust !== 'untrusted-no-lockfile') {
+          trustWarn = '<span class="model-badge" title="' + esc(j.lockTrust) + '" style="background:rgba(220,100,100,0.28);color:#fff">!</span>';
+        }
+
         return '<div class="job-item' + isActive + '" onclick="selectJob(\'' + esc(j.slug) + '\')">'
           + '<div class="job-item-top">'
           + '<span class="job-status-dot ' + dotClass + '"></span>'
@@ -7409,6 +7702,8 @@
           + '<span>' + esc(schedule) + '</span>'
           + '<span class="model-badge">' + esc(j.model || '—') + '</span>'
           + priorityBadge
+          + nsBadge
+          + trustWarn
           + '</div>'
           + '<div class="job-item-status">'
           + '<span>' + esc(lastResult) + '</span> &middot; <span>' + esc(lastTime) + '</span>'
@@ -7477,6 +7772,19 @@
       }
       configHtml += '</div></div>';
 
+      // Phase 4 action buttons: Edit (user-origin only), Override (instar-origin),
+      // Unfork (user-origin with hasUserFork shadowing an instar slug).
+      let phase4Actions = '';
+      if (job.origin === 'instar' && !job.hasUserFork) {
+        phase4Actions += '<button onclick="overrideJob(\'' + esc(job.slug) + '\')" style="margin-right:6px" title="Make your own editable copy">Override</button>';
+      }
+      if (job.origin === 'user') {
+        phase4Actions += '<button onclick="openJobEditor(\'' + esc(job.slug) + '\')" style="margin-right:6px">Edit</button>';
+        if (job.hasUserFork) {
+          phase4Actions += '<button onclick="unforkJob(\'' + esc(job.slug) + '\')" style="margin-right:6px" title="Switch back to the instar default (saves a backup of your version)">Unfork</button>';
+        }
+      }
+
       detail.innerHTML = '<div class="job-detail-header">'
         + '<div>'
         + '<button class="back-btn" onclick="jobsGoBack()" style="display:none;margin-right:8px" title="Back" aria-label="Back">&larr;</button>'
@@ -7484,6 +7792,7 @@
         + '<div class="job-desc">' + esc(job.description || '') + '</div>'
         + '</div>'
         + '<div class="job-detail-actions">'
+        + phase4Actions
         + '<button class="job-run-btn" id="jobRunBtn" onclick="runJob(\'' + esc(job.slug) + '\')"'
         + (isRunning ? ' disabled' : '') + '>'
         + (isRunning ? 'Running...' : 'Run Now') + '</button>'
@@ -9019,5 +9328,51 @@
     //  reconnects.)
 
   </script>
+
+  <!-- Job editor modal (jobs-as-agentmd Phase 4) -->
+  <div id="jobEditorModal" style="display:none;position:fixed;inset:0;background:rgba(0,0,0,0.5);z-index:100;align-items:center;justify-content:center">
+    <div style="background:var(--bg);border:1px solid var(--border);border-radius:8px;width:min(720px,92vw);max-height:90vh;display:flex;flex-direction:column;overflow:hidden">
+      <div style="padding:12px 16px;border-bottom:1px solid var(--border);display:flex;justify-content:space-between;align-items:center">
+        <div>
+          <strong>Edit job</strong>
+          <span id="jobEditorSlug" style="color:var(--text-dim);margin-left:8px;font-family:monospace;font-size:12px"></span>
+        </div>
+        <button onclick="closeJobEditor()" title="Close the job editor" aria-label="Close the job editor" style="background:transparent;border:none;font-size:18px;cursor:pointer">×</button>
+      </div>
+      <div style="padding:16px;overflow-y:auto;display:flex;flex-direction:column;gap:12px">
+        <label style="display:flex;flex-direction:column;gap:4px;font-size:12px">
+          Name
+          <input id="jobEditorName" type="text" style="padding:6px 8px" />
+        </label>
+        <label style="display:flex;flex-direction:column;gap:4px;font-size:12px">
+          Description
+          <input id="jobEditorDescription" type="text" style="padding:6px 8px" />
+        </label>
+        <label style="display:flex;flex-direction:column;gap:4px;font-size:12px">
+          Schedule (cron)
+          <input id="jobEditorSchedule" type="text" placeholder="*/5 * * * *" style="padding:6px 8px;font-family:monospace" />
+        </label>
+        <label style="display:flex;flex-direction:column;gap:4px;font-size:12px">
+          Priority
+          <select id="jobEditorPriority" style="padding:6px 8px">
+            <option value="low">low</option>
+            <option value="medium">medium</option>
+            <option value="high">high</option>
+            <option value="critical">critical</option>
+          </select>
+        </label>
+        <label style="display:flex;flex-direction:column;gap:4px;font-size:12px">
+          Prompt body
+          <textarea id="jobEditorBody" rows="12" style="padding:8px;font-family:monospace;font-size:12px;resize:vertical"></textarea>
+        </label>
+        <div id="jobEditorOcc" style="font-size:11px;color:var(--text-dim)"></div>
+      </div>
+      <div style="padding:12px 16px;border-top:1px solid var(--border);display:flex;justify-content:flex-end;gap:8px">
+        <button onclick="closeJobEditor()" style="padding:6px 14px">Cancel</button>
+        <button onclick="saveJobEditor()" style="padding:6px 14px;background:var(--accent);color:#fff;border:none;border-radius:4px;cursor:pointer">Save</button>
+      </div>
+    </div>
+  </div>
+
 </body>
 </html>

package/dist/core/AutoUpdater.d.ts

@@ -103,6 +103,16 @@ export interface AutoUpdaterStatus {
     restartDeferral: RestartDeferralState | null;
     /** Primary-developer mode: restarts roll onto latest immediately, never deferred for sessions/window */
     restartImmediately: boolean;
+    /**
+     * Observability-only split of the current restart blockers: the restart-safe
+     * subset (topics that resume cleanly across a restart — resumable autonomous
+     * topics with a per-topic state file). Empty when not deferring or when no
+     * blocker is resumable. Does NOT yet change the restart decision.
+     */
+    restartSafeSessions: string[];
+    /** Observability-only split of the current restart blockers: those with no
+     * known clean-resume path (the complement of {@link restartSafeSessions}). */
+    hardBlockingSessions: string[];
 }
 export interface RestartDeferralState {
     active: boolean;
@@ -162,6 +172,23 @@ export declare class AutoUpdater {
      * Get current auto-updater status.
      */
     getStatus(): AutoUpdaterStatus;
+    /**
+     * Restart-safety resolver for the UpdateGate (observability-only — Step 1 of
+     * the restart-safe session work). A blocking session is "restart-safe" when
+     * its topic resumes cleanly across a server restart. The concrete signal we
+     * trust today: the topic has a per-topic autonomous state file
+     * (`.instar/autonomous/<topicId>.local.md`) — those sessions are driven by
+     * the autonomous loop, which re-injects context via CONTINUATION on the next
+     * turn, so a restart costs only a brief re-read rather than lost work.
+     *
+     * This does NOT change the restart decision — a restart-safe session still
+     * blocks exactly as before. It only classifies the blockers so a later step
+     * can choose to restart through the safe ones. Fails safe to `false` (treat
+     * as a hard blocker) on any error or missing topic id, so a bad check can
+     * never make the gate restart through a session it shouldn't.
+     * Spec: docs/specs/restart-safe-blocker-classification-spec.md.
+     */
+    private isSessionRestartSafe;
     /**
      * Set the Telegram adapter (may be wired after construction).
      */

package/dist/core/AutoUpdater.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AutoUpdater.d.ts","sourceRoot":"","sources":["../../src/core/AutoUpdater.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAG1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAI9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAI1E,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mDAAmD;IACnD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mFAAmF;IACnF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,sGAAsG;IACtG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qGAAqG;IACrG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD;;;;;;;OAOG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qCAAqC;IACrC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qDAAqD;IACrD,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,4BAA4B;IAC5B,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACpC,sDAAsD;IACtD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wBAAwB;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mFAAmF;IACnF,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gEAAgE;IAChE,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,4DAA4D;IAC5D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gDAAgD;IAChD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,4FAA4F;IAC5F,eAAe,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC7C,wGAAwG;IACxG,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,QAAQ,CAA+C;IAC/D,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,kBAAkB,CAAuB;IACjD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAA2B;IAG7C,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,uBAAuB,CAAuB;IACtD,OAAO,CAAC,eAAe,CAAuB;IAG9C,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,2BAA2B,CAAK;IACxC,OAAO,CAAC,eAAe,CAAqC;IAG5D,OAAO,CAAC,uBAAuB,CAAuB;IAEtD,OAAO,CAAC,0BAA0B,CAAuB;IAEzD,OAAO,CAAC,sBAAsB,CAAuB;IACrD,OAAO,CAAC,2BAA2B,CAAuB;IAG1D,OAAO,CAAC,WAAW,CAAS;IAI5B,OAAO,CAAC,QAAQ,CAAyB;IAIzC,OAAO,CAAC,mBAAmB,CAA8C;IACzE,OAAO,CAAC,2BAA2B,CAAuB;IAC1D,OAAO,CAAC,wBAAwB,CAAuB;IACvD,OAAO,CAAC,6BAA6B,CAAuB;gBAG1D,aAAa,EAAE,aAAa,EAC5B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,iBAAiB,EAC1B,QAAQ,CAAC,EAAE,eAAe,GAAG,IAAI,EACjC,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI;IAuChC;;;OAGG;IACH,KAAK,IAAI,IAAI;IAwBb;;OAEG;IACH,IAAI,IAAI,IAAI;IAkBZ;;OAEG;IACH,SAAS,IAAI,iBAAiB;IAoB9B;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAI5C;;;OAGG;IACH,cAAc,CAAC,cAAc,EAAE,kBAAkB,EAAE,cAAc,CAAC,EAAE,kBAAkB,GAAG,IAAI,GAAG,IAAI;IAKpG;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAuC3B;;;;;;;OAOG;YACW,IAAI;IA0JlB;;;;OAIG;IACG,kBAAkB,CAAC,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA4E7E;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAqBzB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;OAIG;YACW,YAAY;IA8N1B;;;;;OAKG;IACH,OAAO,CAAC,0BAA0B;IAWlC,OAAO,CAAC,4BAA4B;IA8BpC;;;;OAIG;YACW,oBAAoB;IAuBlC;;;;;;;;;;;;OAYG;YACW,mBAAmB;IA4DjC;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAYzB,2EAA2E;IACpE,uBAAuB,IAAI;QAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,WAAW,EAAE,OAAO,CAAC;KACtB;IASD;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,cAAc;IAiDtB;;;OAGG;YACW,MAAM;IAoBpB;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,SAAS;IA4BjB,OAAO,CAAC,SAAS;IAgCjB,OAAO,CAAC,wBAAwB;IAMhC,OAAO,CAAC,qBAAqB;IAqB7B,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,oBAAoB;CAkB7B"}
+{"version":3,"file":"AutoUpdater.d.ts","sourceRoot":"","sources":["../../src/core/AutoUpdater.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAG1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAe,MAAM,iBAAiB,CAAC;AAI3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAI1E,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mDAAmD;IACnD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mFAAmF;IACnF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,sGAAsG;IACtG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qGAAqG;IACrG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD;;;;;;;OAOG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qCAAqC;IACrC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qDAAqD;IACrD,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,4BAA4B;IAC5B,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACpC,sDAAsD;IACtD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wBAAwB;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mFAAmF;IACnF,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gEAAgE;IAChE,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,4DAA4D;IAC5D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gDAAgD;IAChD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,4FAA4F;IAC5F,eAAe,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC7C,wGAAwG;IACxG,kBAAkB,EAAE,OAAO,CAAC;IAC5B;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B;kFAC8E;IAC9E,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,QAAQ,CAA+C;IAC/D,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,kBAAkB,CAAuB;IACjD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAA2B;IAG7C,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,uBAAuB,CAAuB;IACtD,OAAO,CAAC,eAAe,CAAuB;IAG9C,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,2BAA2B,CAAK;IACxC,OAAO,CAAC,eAAe,CAAqC;IAG5D,OAAO,CAAC,uBAAuB,CAAuB;IAEtD,OAAO,CAAC,0BAA0B,CAAuB;IAEzD,OAAO,CAAC,sBAAsB,CAAuB;IACrD,OAAO,CAAC,2BAA2B,CAAuB;IAG1D,OAAO,CAAC,WAAW,CAAS;IAI5B,OAAO,CAAC,QAAQ,CAAyB;IAIzC,OAAO,CAAC,mBAAmB,CAA8C;IACzE,OAAO,CAAC,2BAA2B,CAAuB;IAC1D,OAAO,CAAC,wBAAwB,CAAuB;IACvD,OAAO,CAAC,6BAA6B,CAAuB;gBAG1D,aAAa,EAAE,aAAa,EAC5B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,iBAAiB,EAC1B,QAAQ,CAAC,EAAE,eAAe,GAAG,IAAI,EACjC,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI;IA0ChC;;;OAGG;IACH,KAAK,IAAI,IAAI;IAwBb;;OAEG;IACH,IAAI,IAAI,IAAI;IAkBZ;;OAEG;IACH,SAAS,IAAI,iBAAiB;IAsB9B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,oBAAoB;IAgB5B;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAI5C;;;OAGG;IACH,cAAc,CAAC,cAAc,EAAE,kBAAkB,EAAE,cAAc,CAAC,EAAE,kBAAkB,GAAG,IAAI,GAAG,IAAI;IAKpG;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAuC3B;;;;;;;OAOG;YACW,IAAI;IA0JlB;;;;OAIG;IACG,kBAAkB,CAAC,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA4E7E;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAqBzB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;;OAIG;YACW,YAAY;IA8N1B;;;;;OAKG;IACH,OAAO,CAAC,0BAA0B;IAWlC,OAAO,CAAC,4BAA4B;IA8BpC;;;;OAIG;YACW,oBAAoB;IAuBlC;;;;;;;;;;;;OAYG;YACW,mBAAmB;IA4DjC;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAYzB,2EAA2E;IACpE,uBAAuB,IAAI;QAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,WAAW,EAAE,OAAO,CAAC;KACtB;IASD;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,cAAc;IAiDtB;;;OAGG;YACW,MAAM;IAoBpB;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,SAAS;IA4BjB,OAAO,CAAC,SAAS;IAgCjB,OAAO,CAAC,wBAAwB;IAMhC,OAAO,CAAC,qBAAqB;IAqB7B,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,oBAAoB;CAkB7B"}

package/dist/core/AutoUpdater.js

@@ -96,7 +96,10 @@ export class AutoUpdater {
         };
         // Primary-developer mode: the gate inherits restartImmediately so it never
         // defers behind active sessions (default false → fleet behavior unchanged).
-        this.gate = new UpdateGate({ alwaysRestartImmediately: this.config.restartImmediately });
+        this.gate = new UpdateGate({
+            alwaysRestartImmediately: this.config.restartImmediately,
+            restartSafetyResolver: (session) => this.isSessionRestartSafe(session),
+        });
         this.dampener = new RestartCascadeDampener(this.config.restartCascadeDampenerWindowMs);
         // npx cache detection is no longer needed — updates install to a local
         // shadow directory ({stateDir}/shadow-install/) instead of globally.
@@ -166,8 +169,38 @@ export class AutoUpdater {
             maxDeferralHours: gateStatus.maxDeferralHours,
             restartDeferral: this.restartDeferral ? { ...this.restartDeferral } : null,
             restartImmediately: gateStatus.alwaysRestartImmediately,
+            restartSafeSessions: gateStatus.restartSafeSessions,
+            hardBlockingSessions: gateStatus.hardBlockingSessions,
         };
     }
+    /**
+     * Restart-safety resolver for the UpdateGate (observability-only — Step 1 of
+     * the restart-safe session work). A blocking session is "restart-safe" when
+     * its topic resumes cleanly across a server restart. The concrete signal we
+     * trust today: the topic has a per-topic autonomous state file
+     * (`.instar/autonomous/<topicId>.local.md`) — those sessions are driven by
+     * the autonomous loop, which re-injects context via CONTINUATION on the next
+     * turn, so a restart costs only a brief re-read rather than lost work.
+     *
+     * This does NOT change the restart decision — a restart-safe session still
+     * blocks exactly as before. It only classifies the blockers so a later step
+     * can choose to restart through the safe ones. Fails safe to `false` (treat
+     * as a hard blocker) on any error or missing topic id, so a bad check can
+     * never make the gate restart through a session it shouldn't.
+     * Spec: docs/specs/restart-safe-blocker-classification-spec.md.
+     */
+    isSessionRestartSafe(session) {
+        if (session.topicId == null)
+            return false;
+        try {
+            const stateFile = path.join(process.cwd(), '.instar', 'autonomous', `${session.topicId}.local.md`);
+            return fs.existsSync(stateFile);
+        }
+        catch {
+            // @silent-fallback-ok — restart-safety classification fails closed to a hard blocker.
+            return false;
+        }
+    }
     /**
      * Set the Telegram adapter (may be wired after construction).
      */