instar 1.3.131 → 1.3.133

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmSH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAwvDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAi/OtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmSH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAwvDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAmmPtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -6092,6 +6092,83 @@ export async function startServer(options) {
                         console.warn('[TopicIntentCapture] init failed:', err.message);
                     }
                 }
+                // ── Correction & Preference Learning Sentinel — capture loop (Slice 1b) ─
+                // Hot-path capture → distill → CorrectionLedger. VOID fire-and-forget so
+                // the async distill NEVER blocks delivery and a thrown distill error
+                // NEVER propagates back to the message seam. Constructed ONLY when
+                // monitoring.correctionLearning.enabled (Layer-0 classify is the only
+                // always-on piece; the loop is dark by default). The sentinel owns its
+                // OWN LlmQueue (object opts — the per-sentinel daily cap is real, NOT a
+                // fleet ceiling) so a distill burst can never starve PresenceProxy/Usher.
+                // Spec: docs/specs/CORRECTION-PREFERENCE-LEARNING-SENTINEL-SPEC.md §3.1.
+                if (sharedIntelligence && config.monitoring?.correctionLearning?.enabled === true) {
+                    try {
+                        const cl = config.monitoring.correctionLearning;
+                        const { CorrectionLedger } = await import('../monitoring/CorrectionLedger.js');
+                        const { LlmQueue } = await import('../monitoring/LlmQueue.js');
+                        const { CaptureRing, captureAndDistill, makeCaptureRateState, } = await import('../monitoring/CorrectionCaptureLoop.js');
+                        const correctionLedger = new CorrectionLedger({
+                            dbPath: path.join(config.stateDir, 'correction-ledger.db'),
+                        });
+                        // Per-sentinel LlmQueue — object opts (do NOT pass a bare number; that
+                        // is the latent PresenceProxy bug §2). Dedicated daily cap.
+                        const correctionLlmQueue = new LlmQueue({
+                            maxConcurrent: cl.llmMaxConcurrent ?? 1,
+                            maxDailyCents: cl.llmDailyCents ?? 25,
+                        });
+                        const ring = new CaptureRing({
+                            captureContextTurns: cl.captureContextTurns ?? 6,
+                            captureTopicMapMax: cl.captureTopicMapMax ?? 64,
+                            topicTtlMs: (cl.captureTopicTtlMinutes ?? 60) * 60_000,
+                        });
+                        const rateState = makeCaptureRateState();
+                        // Audit sink — one structured line per capture decision. The rollout
+                        // evidence filter keys on `correction-loop` in this file.
+                        const correctionAuditPath = path.join(config.stateDir, 'logs', 'correction-learning-audit.jsonl');
+                        const correctionAudit = (event) => {
+                            try {
+                                fs.mkdirSync(path.dirname(correctionAuditPath), { recursive: true });
+                                fs.appendFileSync(correctionAuditPath, JSON.stringify({ ts: new Date().toISOString(), origin: 'correction-loop', ...event }) + '\n', { mode: 0o600 });
+                            }
+                            catch { /* @silent-fallback-ok — audit is best-effort */ }
+                        };
+                        const beforeCorrectionCb = telegram.onMessageLogged;
+                        telegram.onMessageLogged = (entry) => {
+                            if (beforeCorrectionCb)
+                                beforeCorrectionCb(entry);
+                            // Layer 0 (SYNC, free) — classify on the seam. No signal → stop at
+                            // ~zero cost on the vast majority of messages.
+                            const verdict = entry.fromUser && entry.text
+                                ? HumanAsDetectorLog.getInstance().classify(entry.text)
+                                : null;
+                            // Fire-and-forget — capture/distill latency must NEVER reach the
+                            // delivery path. A thrown distill error is caught inside.
+                            void captureAndDistill({
+                                ring,
+                                ledger: correctionLedger,
+                                distill: (prompt) => correctionLlmQueue.enqueue('background', () => sharedIntelligence.evaluate(prompt, { model: 'fast', maxTokens: 400, temperature: 0 }), 0.3),
+                                shouldShed: () => {
+                                    const r = quotaTracker?.getRecommendation();
+                                    return r === 'critical' || r === 'stop';
+                                },
+                                rateCeiling: { maxPerWindow: cl.distillPerTopicRatePerMinute ?? 8, windowMs: 60_000 },
+                                audit: correctionAudit,
+                            }, {
+                                topicId: entry.topicId ?? null,
+                                text: entry.text ?? '',
+                                fromUser: !!entry.fromUser,
+                                sessionId: entry.sessionName ?? null,
+                                deterministicWeight: verdict?.deterministicWeight ?? 0,
+                                isLearningSignal: verdict?.learningKind != null,
+                            }, rateState);
+                        };
+                        globalThis.__instarCorrectionLearningWired = true;
+                        console.log(pc.green('  Correction & Preference Learning Sentinel wired (capture → distill → ledger; dark by default)'));
+                    }
+                    catch (err) {
+                        console.warn('[CorrectionLearning] init failed:', err.message);
+                    }
+                }
                 presenceProxy.start();
                 // ── PromiseBeacon ────────────────────────────────────────────────
                 // Watches beacon-enabled commitments and emits ⏳ heartbeats so the
@@ -8086,6 +8163,20 @@ export async function startServer(options) {
             audit: reaperAuditSink(config.stateDir),
         }, config.monitoring?.sessionReaper);
         sessionReaper.start();
+        // ── AgentWorktreeReaper (RESPONSIBLE-RESOURCE-USAGE — OS resource hygiene) ──
+        // Reclaims stale CLI-created worktrees under the agent's `.worktrees/` that
+        // are merged + clean + inactive. Ships OFF + dry-run; start() no-ops when
+        // disabled. Observability at GET /worktrees/agent-reaper.
+        const { AgentWorktreeReaper } = await import('../monitoring/AgentWorktreeReaper.js');
+        const { makeAgentWorktreeReaperDeps } = await import('../monitoring/agentWorktreeGit.js');
+        const _agentWorktreesDir = path.join(path.dirname(config.stateDir), '.worktrees');
+        const agentWorktreeReaper = new AgentWorktreeReaper(makeAgentWorktreeReaperDeps({ instarRepo: config.projectDir, worktreesDir: _agentWorktreesDir }), config.monitoring?.agentWorktreeReaper);
+        agentWorktreeReaper.start();
+        if (config.monitoring?.agentWorktreeReaper?.enabled) {
+            console.log(pc.green(config.monitoring.agentWorktreeReaper.dryRun === false
+                ? '  AgentWorktreeReaper enabled (stale-worktree reclaim — LIVE)'
+                : '  AgentWorktreeReaper enabled (stale-worktree reclaim — dry-run, report only)'));
+        }
         // ── Unkillability backstop (UNIFIED-SESSION-LIFECYCLE §P5) ───────────────
         // Signal-only: raises ONE deduped Attention item (never auto-kills) when a
         // session is KEPT forever despite faking work, or is stuck indeterminate.
@@ -8691,7 +8782,7 @@ export async function startServer(options) {
         catch (err) {
             console.log(pc.dim(`  [session-pool] rollout gate not wired: ${err instanceof Error ? err.message : String(err)}`));
         }
-        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, meshRpcDispatcher, sessionOwnershipRegistry, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, reapLog, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier });
+        const server = new AgentServer({ config, sessionManager, state, scheduler, telegram, relationships, feedback, feedbackAnomalyDetector, dispatches, updateChecker, autoUpdater, autoDispatcher, quotaTracker, quotaManager, publisher, viewer, tunnel, evolution, watchdog, topicMemory, triageNurse, projectMapper, coherenceGate: scopeVerifier, contextHierarchy, canonicalState, operationGate, sentinel, adaptiveTrust, memoryMonitor, orphanReaper, coherenceMonitor, commitmentTracker, semanticMemory, activitySentinel, rateLimitSentinel, releaseReadinessSentinel: releaseReadinessSentinel ?? undefined, messageRouter, summarySentinel, spawnManager, systemReviewer, capabilityMapper, selfKnowledgeTree, coverageAuditor, topicResumeMap: _topicResumeMap ?? undefined, sessionRefresh: _sessionRefresh ?? undefined, autonomyManager, trustElevationTracker, autonomousEvolution, coordinator: coordinator.enabled ? coordinator : undefined, localSigningKeyPem, leaseTransport, liveTailReceiver, handoffWireTransport, onHandoffBegin, onHandoffInitiate: handoffInitiate, handoffInProgress: handoffSentinelInProgress, messageLedger, currentInboundByTopic, replyMarkerTransport, onReplyMarker: messageLedger ? (marker) => { const m = marker; messageLedger.applyRemoteReplyMarker(m.dedupeKey, { platform: m.platform, replyIdempotencyKey: m.replyIdempotencyKey, epoch: m.epoch, topic: m.topic ?? null }); } : undefined, whatsapp: whatsappAdapter, slack: slackAdapter, imessage: imessageAdapter, whatsappBusinessBackend, messageBridge, hookEventReceiver, worktreeMonitor, subagentTracker, instructionsVerifier, handshakeManager: threadlineHandshake, threadlineRouter, conversationStore, warrantsReplyGate, collaborationSurfacer, threadResumeMap, topicLinkageHandler: topicLinkageHandler ?? undefined, threadlineRelayClient, threadlineReplyWaiters, listenerManager: listenerManager ?? undefined, responseReviewGate, messagingToneGate, outboundDedupGate, telemetryHeartbeat, pasteManager, featureRegistry, discoveryEvaluator, completionEvaluator, unifiedTrust, liveConfig, sharedStateLedger, ledgerSessionRegistry, worktreeManager, oidcEnrolledRepos: parallelDevConfig?.oidcEnrolledRepos, initiativeTracker, projectRoundRunner, projectDriftChecker, machineHeartbeat, machinePoolRegistry, meshRpcDispatcher, sessionOwnershipRegistry, sessionPoolE2EResultStore, proxyCoordinator, topicIntentStore, topicIntentArcCheck, usherSignalStore, intelligence: sharedIntelligence ?? undefined, telegramBridgeConfig, telegramBridge: telegramBridge ?? undefined, threadlineObservability, briefDeps, workingMemory, taskFlowRegistry, threadlineFlowBridge, sessionReaper, agentWorktreeReaper, reapLog, sleepWakeDetector, unjustifiedStopGate, stopGateDb, stopNotifier });
         // Boot-recovery (tunnel-failure-resilience spec Part 6): if the agent
         // died mid-relay-episode, the persisted tunnel.json carries
         // rotationPending=true. Rotate the dashboard PIN + authToken BEFORE