instar 1.3.1162 → 1.3.1164

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (47) hide show
  1. package/dist/commands/server.d.ts.map +1 -1
  2. package/dist/commands/server.js +34 -0
  3. package/dist/commands/server.js.map +1 -1
  4. package/dist/core/AspInboundClassifier.d.ts +105 -0
  5. package/dist/core/AspInboundClassifier.d.ts.map +1 -0
  6. package/dist/core/AspInboundClassifier.js +184 -0
  7. package/dist/core/AspInboundClassifier.js.map +1 -0
  8. package/dist/core/AspKeyDirectory.d.ts +68 -0
  9. package/dist/core/AspKeyDirectory.d.ts.map +1 -0
  10. package/dist/core/AspKeyDirectory.js +144 -0
  11. package/dist/core/AspKeyDirectory.js.map +1 -0
  12. package/dist/core/PostUpdateMigrator.d.ts +14 -0
  13. package/dist/core/PostUpdateMigrator.d.ts.map +1 -1
  14. package/dist/core/PostUpdateMigrator.js +45 -0
  15. package/dist/core/PostUpdateMigrator.js.map +1 -1
  16. package/dist/core/agentSignatureProvenance.d.ts +160 -0
  17. package/dist/core/agentSignatureProvenance.d.ts.map +1 -0
  18. package/dist/core/agentSignatureProvenance.js +260 -0
  19. package/dist/core/agentSignatureProvenance.js.map +1 -0
  20. package/dist/core/aspNonceStore.d.ts +47 -0
  21. package/dist/core/aspNonceStore.d.ts.map +1 -0
  22. package/dist/core/aspNonceStore.js +138 -0
  23. package/dist/core/aspNonceStore.js.map +1 -0
  24. package/dist/data/standards-guard-index.json +1 -1
  25. package/dist/data/standards-guard-index.meta.json +2 -2
  26. package/dist/data/standards-registry.meta.json +1 -1
  27. package/dist/scaffold/templates.d.ts.map +1 -1
  28. package/dist/scaffold/templates.js +2 -1
  29. package/dist/scaffold/templates.js.map +1 -1
  30. package/dist/server/AgentServer.d.ts.map +1 -1
  31. package/dist/server/AgentServer.js +76 -0
  32. package/dist/server/AgentServer.js.map +1 -1
  33. package/dist/server/routes/provenance.d.ts +44 -0
  34. package/dist/server/routes/provenance.d.ts.map +1 -0
  35. package/dist/server/routes/provenance.js +105 -0
  36. package/dist/server/routes/provenance.js.map +1 -0
  37. package/package.json +1 -1
  38. package/scripts/asp-live-slice.ts +94 -0
  39. package/src/data/builtin-manifest.json +20 -20
  40. package/src/data/standards-guard-index.json +1 -1
  41. package/src/data/standards-guard-index.meta.json +2 -2
  42. package/src/data/standards-registry.meta.json +1 -1
  43. package/src/scaffold/templates.ts +2 -1
  44. package/upgrades/1.3.1163.md +114 -0
  45. package/upgrades/1.3.1164.md +68 -0
  46. package/upgrades/side-effects/agent-signature-provenance.md +127 -0
  47. package/upgrades/side-effects/asp-direction-flag.md +152 -0
@@ -1 +1 @@
1
- {"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA+EH,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAUjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA0BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAgI7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAuID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+rDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAwtBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAslrBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
1
+ {"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgFH,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAUjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA0BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAgI7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAuID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA+rDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAwtBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAsnrBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
@@ -36,6 +36,7 @@ function localSlackRelayReadiness(stateDir) {
36
36
  return { ready: false, reason: 'packaged Slack reply relay template is unavailable' };
37
37
  return slackReplyRelayReadiness(stateDir, template);
38
38
  }
39
+ import { buildAspInboundClassifier } from '../core/AspInboundClassifier.js';
39
40
  import { resolveStandardsRegistry } from '../core/standardsRegistryPath.js';
40
41
  import { chunkLiteralForTmux, buildLiteralSendArgs } from '../core/tmuxLiteralSend.js';
41
42
  import { parseStandardsRegistry } from '../core/StandardsRegistryParser.js';
@@ -13650,6 +13651,39 @@ export async function startServer(options) {
13650
13651
  }
13651
13652
  })();
13652
13653
  };
13654
+ // Agent-Signature Provenance — classify every inbound message and
13655
+ // record the verdict. Spec: docs/specs/agent-signature-provenance.md
13656
+ //
13657
+ // Chained (never replacing) so it composes with the handlers above.
13658
+ // Signal-only: the classifier swallows all its own failures, so this
13659
+ // cannot break delivery. Constructed once, lazily, and skipped
13660
+ // entirely when this agent has no canonical identity.
13661
+ try {
13662
+ const aspClassifier = buildAspInboundClassifier(config.stateDir, config.projectName);
13663
+ if (aspClassifier) {
13664
+ const beforeAspCb = telegram.onMessageLogged;
13665
+ telegram.onMessageLogged = (entry) => {
13666
+ if (beforeAspCb)
13667
+ beforeAspCb(entry);
13668
+ aspClassifier.classify({
13669
+ topicId: entry.topicId,
13670
+ text: entry.text,
13671
+ timestamp: entry.timestamp,
13672
+ messageId: entry.messageId,
13673
+ senderName: entry.senderName,
13674
+ fromUser: entry.fromUser,
13675
+ });
13676
+ };
13677
+ }
13678
+ }
13679
+ catch (err) {
13680
+ // Non-fatal by design — provenance recording must never prevent
13681
+ // the messaging stack from coming up.
13682
+ /* @silent-fallback-ok: provenance recording must NEVER prevent the messaging stack
13683
+ from coming up. Logged loudly; the consequence of this path is simply that no
13684
+ verdicts are recorded — never a blocked, delayed or dropped message. */
13685
+ console.warn('[instar] ASP inbound classifier not wired:', err);
13686
+ }
13653
13687
  const beforeCorrectionCb = telegram.onMessageLogged;
13654
13688
  telegram.onMessageLogged = (entry) => {
13655
13689
  if (beforeCorrectionCb)