instar 1.3.279 → 1.3.280

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4SH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAqxDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA8jRtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4SH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAqxDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA+kRtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -2927,8 +2927,23 @@ export async function startServer(options) {
                     // and skip the classify/relay pipeline entirely to avoid Telegram
                     // spam on prompts that don't actually block the session.
                     if (prompt.autoDismissKey) {
+                        if (prompt.autoDismissDisposition === 'safe-reject') {
+                            const rejectedCommand = prompt.autoDismissCommand || prompt.summary || '(unknown command)';
+                            console.warn(`[PromptGate] Auto-rejected execution approval for ${prompt.sessionName} ` +
+                                `(key="${prompt.autoDismissKey}"): ${rejectedCommand}`);
+                            DegradationReporter.getInstance().report({
+                                feature: 'PromptGate.executionApprovalAutoReject',
+                                primary: 'Relay execution-approval prompts to the user or reject them explicitly',
+                                fallback: `Auto-rejected execution approval with key "${prompt.autoDismissKey}"`,
+                                reason: `Rejected command: ${rejectedCommand}`,
+                                impact: 'The session may pause or alter course, but arbitrary model-proposed command execution was not approved.',
+                            });
+                        }
                         const dismissed = sessionManager.sendKey(prompt.sessionName, prompt.autoDismissKey);
-                        console.log(`[PromptGate] Auto-dismissed non-blocking prompt for ${prompt.sessionName} ` +
+                        const dismissKind = prompt.autoDismissDisposition === 'safe-reject'
+                            ? 'safe-reject prompt'
+                            : 'non-blocking prompt';
+                        console.log(`[PromptGate] Auto-dismissed ${dismissKind} for ${prompt.sessionName} ` +
                             `(key="${prompt.autoDismissKey}", sent=${dismissed}): ${prompt.summary}`);
                         // Reset detector state so the next genuine prompt isn't blocked
                         // by the per-session cooldown.