instar 1.3.345 → 1.3.347

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6SH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAuxDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAglStE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6SH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAuxDD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAulStE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -5856,7 +5856,9 @@ export async function startServer(options) {
         const { buildRateLimitRecoveryDeps } = await import('../monitoring/sentinelWiring.js');
         const { resumeFn: rateLimitResume, notifyFn: rateLimitNotify } = buildRateLimitRecoveryDeps({
             isSessionAlive: (name) => sessionManager.isSessionAlive(name),
-            injectTopicNudge: (name, topicId, text) => sessionManager.injectMessage(name, `[telegram:${topicId}] ${text}`),
+            // Resume nudge is infrastructure, never a user message — it goes through
+            // the internal recovery channel ONLY (no `[telegram:N]` prefix), so the
+            // agent can't mistake it for the user and relay a contradictory reply.
             injectInternalNudge: (name, text) => sessionManager.injectInternalMessage(name, text, 'sentinel-recovery'),
             getTopicForSession: (name) => telegram?.getTopicForSession(name),
             getLifelineTopicId: () => telegram?.getLifelineTopicId?.(),
@@ -6559,6 +6561,11 @@ export async function startServer(options) {
                             : telegram.getSessionForTopic(topicId);
                         return sessionName ? rateLimitSentinel.isRecoveryActive(sessionName) : false;
                     },
+                    // Honest turn-receipts: when any recovery sentinel already owns this
+                    // session's stuck-state recovery (it is messaging the user), the
+                    // honest classifier must stay silent so the user hears one voice.
+                    // Reuses the same composed checker the SessionReaper uses for its veto.
+                    isStuckRecoveryActive: (sessionName) => wedgeRecoveryActive?.(sessionName) ?? false,
                     // Shared LLM queue (interactive lane) — cross-monitor concurrency
                     // and daily-spend-cap with PromiseBeacon.
                     sharedLlmQueue,