instar 1.3.127 → 1.3.129

package/dist/core/PreferencesManager.d.ts

@@ -0,0 +1,121 @@
+/**
+ * PreferencesManager — the structured on-disk substrate for auto-learned user
+ * preferences (Correction & Preference Learning Sentinel, Slice 1a).
+ *
+ * Modeled directly on the ORG-INTENT precedent (`OrgIntentManager` +
+ * `formatOrgIntentForSessionStart` + `GET /intent/org/session-context` +
+ * the session-start hook fetch). Where ORG-INTENT is a human-authored markdown
+ * contract, this file is a machine-written JSON store of preferences the
+ * correction loop has learned about THIS user.
+ *
+ * Design constraints (spec §3.6 / §10 Slice 1a):
+ *   - `recordPreference()` is the ONLY writer to `.instar/preferences.json`.
+ *   - Writes are atomic (temp file + rename) and schema-versioned.
+ *   - Upsert keyed on `dedupeKey` — a recurring learning collapses to ONE entry
+ *     (its `dedupeCount` increments, `recordedAt` refreshes, `confidence` takes
+ *     the max of old/new), never a growing pile of duplicates.
+ *   - Absent file ≡ no preferences (never throws; reads return an empty store).
+ *   - The session-start block is bounded by `maxInjectedPreferencesBytes` and
+ *     priority-ordered by recency × confidence × dedupeCount.
+ *
+ * SIGNAL-ONLY: this surface NEVER blocks or rewrites an outbound message. It
+ * only stores preferences, serves them, and the session-start hook injects them
+ * so the agent always SEES them. There is no enforcement gate. (The blocking
+ * idea was explicitly rejected by the user — see spec frontmatter.)
+ */
+/** Current on-disk schema version. Bump only with a paired migration. */
+export declare const PREFERENCES_SCHEMA_VERSION = 1;
+/** Provenance of a preference entry. Slice 1a only ever writes 'correction-loop'. */
+export type PreferenceProvenance = 'correction-loop';
+/** A single learned preference, as persisted in `.instar/preferences.json`. */
+export interface PreferenceEntry {
+    /** The distilled, scrubbed lesson — e.g. "Lead with the one action, no preamble." */
+    learning: string;
+    /** Where this came from. Slice 1a: always 'correction-loop'. */
+    provenance: PreferenceProvenance;
+    /** Stable key the loop upserts on (kind:normalizedLearningHash). */
+    dedupeKey: string;
+    /** ISO timestamp of the most recent observation of this preference. */
+    recordedAt: string;
+    /** Loop-assigned confidence in [0,1]; advisory ordering weight. */
+    confidence: number;
+    /** How many distinct observations have collapsed into this entry (≥1). */
+    dedupeCount: number;
+}
+/** The full on-disk store shape. */
+export interface PreferencesStore {
+    schemaVersion: number;
+    preferences: PreferenceEntry[];
+}
+/** Input payload for `recordPreference()`. */
+export interface RecordPreferencePayload {
+    learning: string;
+    dedupeKey: string;
+    /** Defaults to 0.5 when omitted; clamped to [0,1]. */
+    confidence?: number;
+    /** Defaults to 'correction-loop'. */
+    provenance?: PreferenceProvenance;
+    /** Defaults to now (ISO). Injectable for deterministic tests. */
+    recordedAt?: string;
+}
+/** Options for `recordPreference()`. */
+export interface RecordPreferenceOptions {
+    /**
+     * Priority ordering for the injected block. Mirrors the spec's
+     * `preferencesInjectionPriority` config string. Slice 1a supports the single
+     * documented form; unknown strings fall back to it.
+     */
+    injectionPriority?: string;
+}
+/**
+ * Render the active preferences into a session-start text block, bounded by
+ * `maxBytes` and priority-ordered. Returns the block string (may be empty).
+ *
+ * Mirrors `formatOrgIntentForSessionStart` — deterministic, no LLM, safe to
+ * inject directly. Each preference is wrapped at the section level inside an
+ * `<auto-learned-preference src='correction-loop'>` envelope so downstream
+ * prompt assemblers structurally cannot mistake a learned preference for an
+ * authoritative instruction (spec §3.6).
+ */
+export declare function formatPreferencesForSessionStart(store: PreferencesStore, maxBytes?: number): string;
+export declare class PreferencesManager {
+    private stateDir;
+    private preferencesPath;
+    constructor(stateDir: string);
+    /** Absolute path to the backing file (for tests / observability). */
+    getPath(): string;
+    /** Whether the backing file exists on disk. */
+    exists(): boolean;
+    /**
+     * Read the store. Absent file ≡ empty store (never throws). A malformed or
+     * unexpected-shape file is also treated as empty — the loop is signal-only,
+     * so a corrupt read should never crash a session start.
+     */
+    read(): PreferencesStore;
+    /**
+     * recordPreference — the ONLY writer to `.instar/preferences.json`.
+     *
+     * Upserts the payload keyed on `dedupeKey`:
+     *   - New key → appended as a fresh entry with `dedupeCount: 1`.
+     *   - Existing key → `learning` refreshed, `recordedAt` advanced,
+     *     `confidence` raised to max(old, new), `dedupeCount` incremented.
+     *
+     * Atomic: writes a temp file then renames over the target so a concurrent
+     * reader never observes a partial file. Returns the entry as persisted.
+     */
+    recordPreference(payload: RecordPreferencePayload, _opts?: RecordPreferenceOptions): PreferenceEntry;
+    /**
+     * Build the session-context payload served by `GET /preferences/session-context`.
+     * Serves ONLY the `learning` text + metadata via the formatted block — never
+     * any raw extras. `present` is true iff at least one preference would be
+     * injected into the (bounded) block.
+     */
+    sessionContext(maxBytes?: number): {
+        present: boolean;
+        block: string;
+        count: number;
+    };
+    /** Atomic write: temp file + fsync + rename. */
+    private writeAtomic;
+}
+//# sourceMappingURL=PreferencesManager.d.ts.map

package/dist/core/PreferencesManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PreferencesManager.d.ts","sourceRoot":"","sources":["../../src/core/PreferencesManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAErD,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,UAAU,EAAE,oBAAoB,CAAC;IACjC,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,oCAAoC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAED,8CAA8C;AAC9C,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wCAAwC;AACxC,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AA6BD;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,gBAAgB,EACvB,QAAQ,SAAO,GACd,MAAM,CAmBR;AAID,qBAAa,kBAAkB;IAGjB,OAAO,CAAC,QAAQ;IAF5B,OAAO,CAAC,eAAe,CAAS;gBAEZ,QAAQ,EAAE,MAAM;IAIpC,qEAAqE;IACrE,OAAO,IAAI,MAAM;IAIjB,+CAA+C;IAC/C,MAAM,IAAI,OAAO;IAIjB;;;;OAIG;IACH,IAAI,IAAI,gBAAgB;IAqCxB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,EAAE,KAAK,GAAE,uBAA4B,GAAG,eAAe;IAuCxG;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,SAAO,GAAG;QAC/B,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf;IAUD,gDAAgD;IAChD,OAAO,CAAC,WAAW;CAcpB"}

package/dist/core/PreferencesManager.js

@@ -0,0 +1,223 @@
+/**
+ * PreferencesManager — the structured on-disk substrate for auto-learned user
+ * preferences (Correction & Preference Learning Sentinel, Slice 1a).
+ *
+ * Modeled directly on the ORG-INTENT precedent (`OrgIntentManager` +
+ * `formatOrgIntentForSessionStart` + `GET /intent/org/session-context` +
+ * the session-start hook fetch). Where ORG-INTENT is a human-authored markdown
+ * contract, this file is a machine-written JSON store of preferences the
+ * correction loop has learned about THIS user.
+ *
+ * Design constraints (spec §3.6 / §10 Slice 1a):
+ *   - `recordPreference()` is the ONLY writer to `.instar/preferences.json`.
+ *   - Writes are atomic (temp file + rename) and schema-versioned.
+ *   - Upsert keyed on `dedupeKey` — a recurring learning collapses to ONE entry
+ *     (its `dedupeCount` increments, `recordedAt` refreshes, `confidence` takes
+ *     the max of old/new), never a growing pile of duplicates.
+ *   - Absent file ≡ no preferences (never throws; reads return an empty store).
+ *   - The session-start block is bounded by `maxInjectedPreferencesBytes` and
+ *     priority-ordered by recency × confidence × dedupeCount.
+ *
+ * SIGNAL-ONLY: this surface NEVER blocks or rewrites an outbound message. It
+ * only stores preferences, serves them, and the session-start hook injects them
+ * so the agent always SEES them. There is no enforcement gate. (The blocking
+ * idea was explicitly rejected by the user — see spec frontmatter.)
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+// ── Types ────────────────────────────────────────────────────────────
+/** Current on-disk schema version. Bump only with a paired migration. */
+export const PREFERENCES_SCHEMA_VERSION = 1;
+// ── Helpers ──────────────────────────────────────────────────────────
+const EMPTY_STORE = { schemaVersion: PREFERENCES_SCHEMA_VERSION, preferences: [] };
+function clampConfidence(value) {
+    if (typeof value !== 'number' || Number.isNaN(value))
+        return 0.5;
+    if (value < 0)
+        return 0;
+    if (value > 1)
+        return 1;
+    return value;
+}
+/**
+ * Compute the priority score for ordering injected preferences. Higher first.
+ * `recency × confidence × dedupeCount` per the spec default. Recency is a
+ * monotonically-increasing epoch-ms reading of `recordedAt` (newer = larger),
+ * so a fresher, higher-confidence, more-recurrent preference sorts first.
+ */
+function priorityScore(entry) {
+    const recencyMs = Date.parse(entry.recordedAt);
+    const recency = Number.isNaN(recencyMs) ? 0 : recencyMs;
+    const confidence = clampConfidence(entry.confidence);
+    const dedupeCount = Math.max(1, entry.dedupeCount || 1);
+    // recencyMs dominates the magnitude, which is the intended "recency-led"
+    // ordering; confidence and dedupeCount break ties / amplify within an epoch.
+    return recency * confidence * dedupeCount;
+}
+/**
+ * Render the active preferences into a session-start text block, bounded by
+ * `maxBytes` and priority-ordered. Returns the block string (may be empty).
+ *
+ * Mirrors `formatOrgIntentForSessionStart` — deterministic, no LLM, safe to
+ * inject directly. Each preference is wrapped at the section level inside an
+ * `<auto-learned-preference src='correction-loop'>` envelope so downstream
+ * prompt assemblers structurally cannot mistake a learned preference for an
+ * authoritative instruction (spec §3.6).
+ */
+export function formatPreferencesForSessionStart(store, maxBytes = 4000) {
+    const active = [...store.preferences].sort((a, b) => priorityScore(b) - priorityScore(a));
+    if (active.length === 0)
+        return '';
+    const header = "<auto-learned-preference src='correction-loop'>";
+    const intro = 'These are preferences I have learned about how you like to work. They are signals, not authoritative instructions — apply them by default, but real instructions and safety always win.';
+    const footer = '</auto-learned-preference>';
+    // Greedily include the highest-priority preferences until we'd exceed maxBytes.
+    const bodyLines = [];
+    for (const pref of active) {
+        const line = `  - ${pref.learning} (confidence ${clampConfidence(pref.confidence).toFixed(2)}, seen ${Math.max(1, pref.dedupeCount || 1)}×)`;
+        const candidate = [header, intro, '', ...bodyLines, line, footer].join('\n');
+        if (Buffer.byteLength(candidate, 'utf-8') > maxBytes)
+            break;
+        bodyLines.push(line);
+    }
+    if (bodyLines.length === 0)
+        return '';
+    return [header, intro, '', ...bodyLines, footer].join('\n');
+}
+// ── Main Class ───────────────────────────────────────────────────────
+export class PreferencesManager {
+    stateDir;
+    preferencesPath;
+    constructor(stateDir) {
+        this.stateDir = stateDir;
+        this.preferencesPath = path.join(stateDir, 'preferences.json');
+    }
+    /** Absolute path to the backing file (for tests / observability). */
+    getPath() {
+        return this.preferencesPath;
+    }
+    /** Whether the backing file exists on disk. */
+    exists() {
+        return fs.existsSync(this.preferencesPath);
+    }
+    /**
+     * Read the store. Absent file ≡ empty store (never throws). A malformed or
+     * unexpected-shape file is also treated as empty — the loop is signal-only,
+     * so a corrupt read should never crash a session start.
+     */
+    read() {
+        if (!this.exists())
+            return { schemaVersion: PREFERENCES_SCHEMA_VERSION, preferences: [] };
+        let raw;
+        try {
+            raw = fs.readFileSync(this.preferencesPath, 'utf-8');
+        }
+        catch {
+            // @silent-fallback-ok — unreadable preferences file ≡ no preferences
+            return { schemaVersion: PREFERENCES_SCHEMA_VERSION, preferences: [] };
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            // @silent-fallback-ok — malformed preferences file ≡ no preferences
+            return { schemaVersion: PREFERENCES_SCHEMA_VERSION, preferences: [] };
+        }
+        if (!parsed || typeof parsed !== 'object' || !Array.isArray(parsed.preferences)) {
+            return { schemaVersion: PREFERENCES_SCHEMA_VERSION, preferences: [] };
+        }
+        const store = parsed;
+        const preferences = store.preferences.filter((p) => !!p && typeof p.learning === 'string' && typeof p.dedupeKey === 'string').map((p) => ({
+            learning: p.learning,
+            provenance: (p.provenance ?? 'correction-loop'),
+            dedupeKey: p.dedupeKey,
+            recordedAt: typeof p.recordedAt === 'string' ? p.recordedAt : new Date(0).toISOString(),
+            confidence: clampConfidence(p.confidence),
+            dedupeCount: Math.max(1, Math.floor(p.dedupeCount) || 1),
+        }));
+        return {
+            schemaVersion: typeof store.schemaVersion === 'number' ? store.schemaVersion : PREFERENCES_SCHEMA_VERSION,
+            preferences,
+        };
+    }
+    /**
+     * recordPreference — the ONLY writer to `.instar/preferences.json`.
+     *
+     * Upserts the payload keyed on `dedupeKey`:
+     *   - New key → appended as a fresh entry with `dedupeCount: 1`.
+     *   - Existing key → `learning` refreshed, `recordedAt` advanced,
+     *     `confidence` raised to max(old, new), `dedupeCount` incremented.
+     *
+     * Atomic: writes a temp file then renames over the target so a concurrent
+     * reader never observes a partial file. Returns the entry as persisted.
+     */
+    recordPreference(payload, _opts = {}) {
+        if (!payload || typeof payload.learning !== 'string' || !payload.learning.trim()) {
+            throw new Error('recordPreference: `learning` is required and must be a non-empty string');
+        }
+        if (typeof payload.dedupeKey !== 'string' || !payload.dedupeKey.trim()) {
+            throw new Error('recordPreference: `dedupeKey` is required and must be a non-empty string');
+        }
+        const store = this.read();
+        const now = payload.recordedAt ?? new Date().toISOString();
+        const confidence = clampConfidence(payload.confidence);
+        const provenance = payload.provenance ?? 'correction-loop';
+        const existing = store.preferences.find((p) => p.dedupeKey === payload.dedupeKey);
+        let result;
+        if (existing) {
+            existing.learning = payload.learning.trim();
+            existing.recordedAt = now;
+            existing.confidence = Math.max(clampConfidence(existing.confidence), confidence);
+            existing.dedupeCount = Math.max(1, existing.dedupeCount || 1) + 1;
+            existing.provenance = provenance;
+            result = existing;
+        }
+        else {
+            result = {
+                learning: payload.learning.trim(),
+                provenance,
+                dedupeKey: payload.dedupeKey,
+                recordedAt: now,
+                confidence,
+                dedupeCount: 1,
+            };
+            store.preferences.push(result);
+        }
+        store.schemaVersion = PREFERENCES_SCHEMA_VERSION;
+        this.writeAtomic(store);
+        return result;
+    }
+    /**
+     * Build the session-context payload served by `GET /preferences/session-context`.
+     * Serves ONLY the `learning` text + metadata via the formatted block — never
+     * any raw extras. `present` is true iff at least one preference would be
+     * injected into the (bounded) block.
+     */
+    sessionContext(maxBytes = 4000) {
+        const store = this.read();
+        const block = formatPreferencesForSessionStart(store, maxBytes);
+        return {
+            present: block.length > 0,
+            block,
+            count: store.preferences.length,
+        };
+    }
+    /** Atomic write: temp file + fsync + rename. */
+    writeAtomic(store) {
+        const dir = path.dirname(this.preferencesPath);
+        fs.mkdirSync(dir, { recursive: true });
+        const tmp = `${this.preferencesPath}.tmp.${process.pid}.${Date.now()}`;
+        const data = JSON.stringify(store, null, 2);
+        const fd = fs.openSync(tmp, 'w');
+        try {
+            fs.writeSync(fd, data);
+            fs.fsyncSync(fd);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+        fs.renameSync(tmp, this.preferencesPath);
+    }
+}
+//# sourceMappingURL=PreferencesManager.js.map

package/dist/core/PreferencesManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PreferencesManager.js","sourceRoot":"","sources":["../../src/core/PreferencesManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,wEAAwE;AAExE,yEAAyE;AACzE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAiD5C,wEAAwE;AAExE,MAAM,WAAW,GAAqB,EAAE,aAAa,EAAE,0BAA0B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AAErG,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACjE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAAsB;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IACxD,yEAAyE;IACzE,6EAA6E;IAC7E,OAAO,OAAO,GAAG,UAAU,GAAG,WAAW,CAAC;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAAuB,EACvB,QAAQ,GAAG,IAAI;IAEf,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,MAAM,GAAG,iDAAiD,CAAC;IACjE,MAAM,KAAK,GAAG,yLAAyL,CAAC;IACxM,MAAM,MAAM,GAAG,4BAA4B,CAAC;IAE5C,gFAAgF;IAChF,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,QAAQ,gBAAgB,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC;QAC7I,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,QAAQ;YAAE,MAAM;QAC5D,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,wEAAwE;AAExE,MAAM,OAAO,kBAAkB;IAGT;IAFZ,eAAe,CAAS;IAEhC,YAAoB,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;QAClC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACjE,CAAC;IAED,qEAAqE;IACrE,OAAO;QACL,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,+CAA+C;IAC/C,MAAM;QACJ,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC1F,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,MAA2B,CAAC,WAAW,CAAC,EAAE,CAAC;YACtG,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,GAAG,MAA0B,CAAC;QACzC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAwB,EAAE,CAC1B,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAC3E,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,iBAAiB,CAAyB;YACvE,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YACvF,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC;YACzC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;SACzD,CAAC,CAAC,CAAC;QACJ,OAAO;YACL,aAAa,EAAE,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,0BAA0B;YACzG,WAAW;SACZ,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,OAAgC,EAAE,QAAiC,EAAE;QACpF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,UAAU,GAAyB,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;QAEjF,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;QAClF,IAAI,MAAuB,CAAC;QAC5B,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5C,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;YACjF,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAClE,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;YACjC,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG;gBACP,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACjC,UAAU;gBACV,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,GAAG;gBACf,UAAU;gBACV,WAAW,EAAE,CAAC;aACf,CAAC;YACF,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,aAAa,GAAG,0BAA0B,CAAC;QACjD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,GAAG,IAAI;QAK5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,gCAAgC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChE,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;YACzB,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;SAChC,CAAC;IACJ,CAAC;IAED,gDAAgD;IACxC,WAAW,CAAC,KAAuB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACvB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/core/installCodexHooks.d.ts

@@ -32,6 +32,13 @@
  */
 /** Marker that identifies an instar-owned hook command (for merge-safe replace). */
 export declare const INSTAR_HOOK_PATH_MARKER = ".instar/hooks/instar/";
+/**
+ * The autonomous-loop driver hook lives in the autonomous skill, not under
+ * `.instar/hooks/instar/`, so it needs its own ownership marker — used both to build
+ * its command path and to let groupIsInstarOwned() recognize (and replace, never
+ * duplicate) the autonomous Stop group on every re-install.
+ */
+export declare const CODEX_AUTONOMOUS_HOOK_MARKER = ".claude/skills/autonomous/hooks/autonomous-stop-hook.sh";
 interface CodexHookHandler {
     type: 'command';
     command: string;

package/dist/core/installCodexHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installCodexHooks.d.ts","sourceRoot":"","sources":["../../src/core/installCodexHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,oFAAoF;AACpF,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAE/D,UAAU,gBAAgB;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,UAAU,cAAc;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,gBAAgB,EAAE,CAAC;CAC3B;AAMD,2FAA2F;AAC3F,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAyDlC;AAQD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAwB5D"}
+{"version":3,"file":"installCodexHooks.d.ts","sourceRoot":"","sources":["../../src/core/installCodexHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,oFAAoF;AACpF,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAC/D;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,4DAA4D,CAAC;AAEtG,UAAU,gBAAgB;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,UAAU,cAAc;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,gBAAgB,EAAE,CAAC;CAC3B;AAMD,2FAA2F;AAC3F,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CA4ElC;AAWD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAwB5D"}

package/dist/core/installCodexHooks.js

@@ -34,6 +34,13 @@ import fs from 'node:fs';
 import path from 'node:path';
 /** Marker that identifies an instar-owned hook command (for merge-safe replace). */
 export const INSTAR_HOOK_PATH_MARKER = '.instar/hooks/instar/';
+/**
+ * The autonomous-loop driver hook lives in the autonomous skill, not under
+ * `.instar/hooks/instar/`, so it needs its own ownership marker — used both to build
+ * its command path and to let groupIsInstarOwned() recognize (and replace, never
+ * duplicate) the autonomous Stop group on every re-install.
+ */
+export const CODEX_AUTONOMOUS_HOOK_MARKER = '.claude/skills/autonomous/hooks/autonomous-stop-hook.sh';
 /** Build the instar-owned hook groups for each Codex event, with absolute script paths. */
 export function buildInstarCodexHookGroups(projectDir) {
     const node = (script) => ({
@@ -46,6 +53,15 @@ export function buildInstarCodexHookGroups(projectDir) {
         command: `bash ${path.join(projectDir, INSTAR_HOOK_PATH_MARKER, script)}`,
         timeout: 5000,
     });
+    // The autonomous-loop driver lives in the autonomous SKILL (not .instar/hooks/instar),
+    // so it has its own path constant. `--codex` tells the shared hook it was invoked from
+    // codex (vs Claude's settings.json registration) so it can self-gate on the
+    // autonomousSessions.codexLoopDriver flag (DARK by default → exits immediately).
+    const autonomousLoopHook = () => ({
+        type: 'command',
+        command: `bash ${path.join(projectDir, CODEX_AUTONOMOUS_HOOK_MARKER)} --codex`,
+        timeout: 10000,
+    });
     return {
         // Pre-action gate. matcher '.*' = all tool calls (Codex treats the matcher as
         // a regex against the tool name; a bare '*' is an invalid quantifier that
@@ -80,8 +96,18 @@ export function buildInstarCodexHookGroups(projectDir) {
         // semantics as Claude, NOT a hard termination. scope-coherence defaults to
         // `approve` and self-throttles (depth threshold + 30-min cooldown), so it
         // can't loop an autonomous Codex run.
+        // End-of-turn chain: the standing review trio, then the autonomous-loop driver as
+        // the LAST hook IN THE SAME group (slot stop:0:4) — NOT a separate group. A separate
+        // group would emit a stop:1:0 arm slot that codex may never render/trust, which would
+        // permanently break armCodexHooks's idempotency (recurring codex-TUI arm spawns on
+        // every update, even while the driver is dark). Keeping it in group 0 means it's
+        // armed/trusted/fired alongside the trio it already runs. The driver self-gates: with
+        // codexLoopDriver disabled (default) it exits immediately, so it's a no-op until the
+        // flag is flipped on. (Within-group block precedence vs the trio is verified live
+        // before enabling — see the spec's Phase 5; worst case the session still continues
+        // via the unjustified-stop router, never strands.)
         Stop: [
-            { matcher: '', hooks: [node('stop-gate-router.js'), { ...node('response-review.js'), timeout: 10000 }, node('claim-intercept-response.js'), node('scope-coherence-checkpoint.js')] },
+            { matcher: '', hooks: [node('stop-gate-router.js'), { ...node('response-review.js'), timeout: 10000 }, node('claim-intercept-response.js'), node('scope-coherence-checkpoint.js'), autonomousLoopHook()] },
         ],
         // Identity/context injection.
         SessionStart: [
@@ -93,7 +119,9 @@ export function buildInstarCodexHookGroups(projectDir) {
     };
 }
 function groupIsInstarOwned(group) {
-    return (group.hooks ?? []).some((h) => typeof h.command === 'string' && h.command.includes(INSTAR_HOOK_PATH_MARKER));
+    return (group.hooks ?? []).some((h) => typeof h.command === 'string' &&
+        (h.command.includes(INSTAR_HOOK_PATH_MARKER) ||
+            h.command.includes(CODEX_AUTONOMOUS_HOOK_MARKER)));
 }
 /**
  * Write/merge instar gate hooks into `<projectDir>/.codex/hooks.json`.

package/dist/core/installCodexHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"installCodexHooks.js","sourceRoot":"","sources":["../../src/core/installCodexHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAgB/D,2FAA2F;AAC3F,MAAM,UAAU,0BAA0B,CACxC,UAAkB;IAElB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,MAAM,CAAC,EAAE;QACzE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,MAAM,CAAC,EAAE;QACzE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,OAAO;QACL,8EAA8E;QAC9E,0EAA0E;QAC1E,wEAAwE;QACxE,gFAAgF;QAChF,gFAAgF;QAChF,6EAA6E;QAC7E,oFAAoF;QACpF,4EAA4E;QAC5E,gFAAgF;QAChF,mFAAmF;QACnF,uEAAuE;QACvE,iFAAiF;QACjF,mDAAmD;QACnD,UAAU,EAAE;YACV,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,4BAA4B,CAAC,EAAE,IAAI,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,EAAE;SACpK;QACD,mEAAmE;QACnE,2EAA2E;QAC3E,iBAAiB,EAAE;YACjB,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,EAAE;SAC/D;QACD,qEAAqE;QACrE,6DAA6D;QAC7D,yEAAyE;QACzE,gEAAgE;QAChE,yEAAyE;QACzE,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,sCAAsC;QACtC,IAAI,EAAE;YACJ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,6BAA6B,CAAC,EAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC,EAAE;SACrL;QACD,8BAA8B;QAC9B,YAAY,EAAE;YACZ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE;SACjD;QACD,gBAAgB,EAAE;YAChB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAAE;SAC1D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAqB;IAC/C,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CACpF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,MAAM,GAAqB,EAAE,CAAC;IAClC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAA0B,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAEvD,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"installCodexHooks.js","sourceRoot":"","sources":["../../src/core/installCodexHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,yDAAyD,CAAC;AAgBtG,2FAA2F;AAC3F,MAAM,UAAU,0BAA0B,CACxC,UAAkB;IAElB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,MAAM,CAAC,EAAE;QACzE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,MAAM,CAAC,EAAE;QACzE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,uFAAuF;IACvF,uFAAuF;IACvF,4EAA4E;IAC5E,iFAAiF;IACjF,MAAM,kBAAkB,GAAG,GAAqB,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,UAAU;QAC9E,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,OAAO;QACL,8EAA8E;QAC9E,0EAA0E;QAC1E,wEAAwE;QACxE,gFAAgF;QAChF,gFAAgF;QAChF,6EAA6E;QAC7E,oFAAoF;QACpF,4EAA4E;QAC5E,gFAAgF;QAChF,mFAAmF;QACnF,uEAAuE;QACvE,iFAAiF;QACjF,mDAAmD;QACnD,UAAU,EAAE;YACV,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,4BAA4B,CAAC,EAAE,IAAI,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,EAAE;SACpK;QACD,mEAAmE;QACnE,2EAA2E;QAC3E,iBAAiB,EAAE;YACjB,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,EAAE;SAC/D;QACD,qEAAqE;QACrE,6DAA6D;QAC7D,yEAAyE;QACzE,gEAAgE;QAChE,yEAAyE;QACzE,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,sCAAsC;QACtC,kFAAkF;QAClF,qFAAqF;QACrF,sFAAsF;QACtF,mFAAmF;QACnF,iFAAiF;QACjF,sFAAsF;QACtF,qFAAqF;QACrF,kFAAkF;QAClF,mFAAmF;QACnF,mDAAmD;QACnD,IAAI,EAAE;YACJ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,6BAA6B,CAAC,EAAE,IAAI,CAAC,+BAA+B,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;SAC3M;QACD,8BAA8B;QAC9B,YAAY,EAAE;YACZ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE;SACjD;QACD,gBAAgB,EAAE;YAChB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAAE;SAC1D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAqB;IAC/C,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAC1C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,MAAM,GAAqB,EAAE,CAAC;IAClC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAA0B,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAEvD,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/core/types.d.ts

@@ -2018,6 +2018,19 @@ export interface InstarConfig {
     autonomousSessions?: {
         /** Max concurrent autonomous jobs (default 5). New starts beyond this are refused. */
         maxConcurrent?: number;
+        /**
+         * Codex autonomous-loop driver (codex/Claude parity). When enabled, the standing
+         * codex Stop hook (`autonomous-stop-hook.sh --codex`, installed by installCodexHooks)
+         * feeds the task list back so a `codex exec` session sustains a multi-turn autonomous
+         * run instead of exiting after one turn — the codex analog of Claude's Stop-hook loop.
+         * Ships DARK (default `enabled: false`): while off, the standing hook exits immediately
+         * (no behavior change for any codex session), so this is a pure dark-launch flag.
+         * Rollback = set `enabled: false` (instant, no redeploy). Claude autonomous mode is
+         * unaffected either way (its loop hook is registered separately into settings.json).
+         */
+        codexLoopDriver?: {
+            enabled?: boolean;
+        };
     };
     /** Notification preferences for autonomy events */
     notifications?: NotificationPreferences;
@@ -2843,6 +2856,55 @@ export interface MonitoringConfig {
             ciMaxRunsPerTick?: number;
         };
     };
+    /**
+     * Correction & Preference Learning Sentinel
+     * (docs/specs/CORRECTION-PREFERENCE-LEARNING-SENTINEL-SPEC.md). Ships OFF.
+     * Slice 1a wires only the preferences read-surface: when `enabled`, the
+     * `GET /preferences/session-context` route serves the learned-preference
+     * block (else 503) and the session-start hook injects it. SIGNAL-ONLY — it
+     * never blocks or rewrites an outbound message. Slice 1b adds the capture →
+     * distill → ledger → recurrence-gate loop that writes via `recordPreference()`.
+     */
+    correctionLearning?: {
+        /** Master kill switch (default: false). Gates the loop AND the read route. */
+        enabled: boolean;
+        /** Min total occurrences before a learning crosses the recurrence gate (Slice 1b). */
+        minSupport?: number;
+        /** Distinct calendar days required for an infra-gap learning (Slice 1b, restart-proof). */
+        minDistinctDaysInfraGap?: number;
+        /** Distinct calendar days required for an explicit-preference learning (Slice 1b). */
+        minDistinctDaysPreference?: number;
+        /** Distinct topics required for the preference path's second prong (Slice 1b). */
+        minDistinctTopicsPreference?: number;
+        /** Auto-submit infra-gap learnings to /feedback (Slice 1b/3). Default false. */
+        autoFeedback?: boolean;
+        /** Post a periodic Telegram digest of learned preferences (Slice 2). Default false. */
+        telegramDigest?: boolean;
+        /** Drift canary that samples un-classified messages through the LLM (Slice 1b). Default false. */
+        driftCanary?: boolean;
+        /** Per-sentinel LLM daily spend cap in cents (own LlmQueue instance, Slice 1b). */
+        llmDailyCents?: number;
+        /** Max concurrent LLM distillation calls (Slice 1b). */
+        llmMaxConcurrent?: number;
+        /** Per-topic look-back ring depth captured for distillation (Slice 1b). */
+        captureContextTurns?: number;
+        /** Max distinct topics held in the capture map before LRU eviction (Slice 1b). */
+        captureTopicMapMax?: number;
+        /** Idle TTL (minutes) before a topic's capture ring is evicted (Slice 1b). */
+        captureTopicTtlMinutes?: number;
+        /** Per-topic distillation rate ceiling per minute (Slice 1b). */
+        distillPerTopicRatePerMinute?: number;
+        /** Verify-window days for the infra-gap closed loop (Slice 1b/2). */
+        verifyWindowDaysInfraGap?: number;
+        /** Verify-window days for the preference closed loop (Slice 1b). */
+        verifyWindowDaysPreference?: number;
+        /** Byte cap on the injected session-start preferences block (Slice 1a). */
+        maxInjectedPreferencesBytes?: number;
+        /** Priority ordering string for the injected block (Slice 1a). */
+        preferencesInjectionPriority?: string;
+        /** Max times a closed-loop verification may reopen the same dedupeKey (Slice 1b). */
+        maxReopens?: number;
+    };
     /**
      * ReleaseReadinessSentinel (docs/specs/RELEASE-READINESS-VISIBILITY-SPEC.md §4.2)
      * — Layer B. A repo-gated dev-environment watchdog: evaluates the canonical