instar 1.3.1124 → 1.3.1126

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA8EH,OAAO,EAAE,cAAc,EAAkC,MAAM,2BAA2B,CAAC;AAU3F,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA0BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAgI7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAuID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+rDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAwtBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAk4qBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA+EH,OAAO,EAAE,cAAc,EAAkC,MAAM,2BAA2B,CAAC;AAU3F,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA0BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAgI7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAuID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+rDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAwtBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAg7qBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -37,6 +37,7 @@ function localSlackRelayReadiness(stateDir) {
     return slackReplyRelayReadiness(stateDir, template);
 }
 import { resolveStandardsRegistry } from '../core/standardsRegistryPath.js';
+import { chunkLiteralForTmux, buildLiteralSendArgs } from '../core/tmuxLiteralSend.js';
 import { parseStandardsRegistry } from '../core/StandardsRegistryParser.js';
 import { loadConfig, ensureStateDir, detectTmuxPath, detectGeminiPath } from '../core/Config.js';
 import { handleProcessLevelError } from '../core/uncaughtExceptionPolicy.js';
@@ -3415,11 +3416,28 @@ export async function startServer(options) {
     // SUMMARY = batched every 30 min (degradations, coherence, orphan reports)
     // DIGEST = batched every 2 hrs (updates, wake events, routine lifecycle)
     // Principle: Log everything, notify selectively.
+    // Bounded-attention-notification-surface (C2): built FROM CONFIG rather than
+    // literals. Every key falls back to the previous hardcoded value when absent,
+    // so an install with no `notificationBatcher` block behaves byte-for-byte as
+    // before. NOTE the key is TOP-LEVEL: `messaging` is an array of adapters, so a
+    // key nested there is unreachable (same trap as `outboundAdvisory`).
+    const nbCfg = config.notificationBatcher ?? {};
     const notificationBatcher = new NotificationBatcher({
-        enabled: true,
-        summaryIntervalMinutes: 30,
-        digestIntervalMinutes: 120,
+        enabled: nbCfg.enabled ?? true,
+        summaryIntervalMinutes: nbCfg.summaryIntervalMinutes ?? 30,
+        digestIntervalMinutes: nbCfg.digestIntervalMinutes ?? 120,
+        maxMessagesPerTopicPerHour: nbCfg.maxMessagesPerTopicPerHour ?? 4,
+        suppressionTtlHours: nbCfg.suppressionTtlHours ?? 24,
+        maxHoldHours: nbCfg.maxHoldHours ?? 6,
+        maxHeldItemsPerTopic: nbCfg.maxHeldItemsPerTopic ?? 200,
+        quietHours: nbCfg.quietHours,
     });
+    // C3 persistence is wired UNCONDITIONALLY here, not inside the pool block:
+    // a single-machine install never reaches that block, and it is the majority
+    // case. With no resolver the ownership verdict is `unresolvable-no-pool`,
+    // i.e. this machine is trivially the owner — a strict single-process limiter.
+    // The pool block later calls configureBounds AGAIN to add the resolver.
+    notificationBatcher.configureBounds({ stateDir: config.stateDir });
     // State reference — set once StateManager is created, used by notify()
     let _notifyState = null;
     /**
@@ -14904,7 +14922,11 @@ export async function startServer(options) {
             sendKeys(tmuxSession, text) {
                 try {
                     const target = `=${tmuxSession}:`;
-                    execFileSync(tmuxBin, ['send-keys', '-t', target, '-l', text], { encoding: 'utf-8', timeout: 5000 });
+                    // Chunked — see src/core/tmuxLiteralSend.ts (`send-keys -l` payload
+                    // is one argv element and blows ARG_MAX on large text).
+                    for (const chunk of chunkLiteralForTmux(text)) {
+                        execFileSync(tmuxBin, buildLiteralSendArgs(target, chunk), { encoding: 'utf-8', timeout: 5000 });
+                    }
                     execFileSync(tmuxBin, ['send-keys', '-t', target, 'Enter'], { encoding: 'utf-8', timeout: 5000 });
                     return true;
                 }
@@ -19155,6 +19177,25 @@ export async function startServer(options) {
                 });
                 _writeAdmissionOwnershipStore = ownershipStore;
                 const ownReg = sessionOwnershipRegistry;
+                // C4.1 (bounded-attention-notification-surface): ONLY the machine that
+                // owns a topic sends batched notifications into it. With exactly one
+                // enforcer per topic the rolling-window limit is an ordinary
+                // single-process rate limit — exact, with no shared counter, no machine
+                // count, and no cross-machine call on the send path. Reaching this block
+                // at all means a pool IS wired, so an unreadable placement resolves to
+                // `unresolvable-pool` (HOLD) rather than to "I am the owner".
+                notificationBatcher.configureBounds({
+                    stateDir: config.stateDir,
+                    ownershipResolver: (topicId) => {
+                        const self = _meshSelfId;
+                        if (!self)
+                            return 'unresolvable-pool';
+                        const owner = ownReg.ownerOf(String(topicId));
+                        if (!owner)
+                            return 'unresolvable-pool';
+                        return owner === self ? 'owner' : 'other';
+                    },
+                });
                 // WS1.1: expose a read-only ownership lookup to the drain's
                 // spawn-boundary re-check (module-scope; the drain closure is defined
                 // before this block runs).
@@ -24193,6 +24234,11 @@ export async function startServer(options) {
                 // jargon / self-heal / CTA discipline and the user sees raw
                 // ops-pager output. See upgrades/side-effects/agent-health-alert-authority-routing.md.
                 toneGate: messagingToneGate ?? null,
+                // C1 (bounded-attention-notification-surface): user-facing degradation
+                // alerts default OFF. The console line, disk record, and feedback
+                // submission are unaffected — only delivery to the operator stops.
+                notifyUser: config.monitoring
+                    ?.degradationReporter?.notifyUser === true,
             });
             // Never-silent degradation tracking (Resilient Degradation Ladder §4): dev-gated
             // (live-on-dev / dark-on-fleet via resolveDevAgentGate). When enabled, a timer drives the