instar 1.3.437 → 1.3.439

package/.claude/skills/autonomous/SKILL.md

@@ -75,7 +75,20 @@ if json.dumps(hooks) != before:
 
 **2b. Write the state file DIRECTLY** (do NOT shell out to bash — the session ID env var is only available inside Claude Code):
 
-Use the **Write tool** to create `.instar/autonomous-state.local.md` with this content:
+Use the **Write tool** to create the **per-topic** state file `.instar/autonomous/<topicId>.local.md`,
+where `<topicId>` is the `report_topic` value you set below (the Telegram topic id you already know
+in-context). For example, if `report_topic` is `19437`, write `.instar/autonomous/19437.local.md`.
+
+**WHY PER-TOPIC (setup-race hardening):** the stop hook reads this per-topic file **directly**
+(`.instar/autonomous/<topicId>.local.md`) — it is the canonical state path, keyed on topic so
+multiple topics run concurrent autonomous jobs without collision. Writing the per-topic path here
+closes a boot-window race: two autonomous sessions starting near-simultaneously must NOT both write
+the single legacy file `.instar/autonomous-state.local.md` (the hook still migrates that legacy file
+for in-flight older jobs, but new jobs write the per-topic file from the start so there is nothing to
+collide on). If you somehow have no `report_topic`, fall back to `.instar/autonomous-state.local.md`
+(one-at-a-time, back-compat only).
+
+Write this content:
 
 ```markdown
 ---
@@ -197,17 +210,20 @@ The stop hook detects the promise and allows exit.
 The user can always stop autonomous mode:
 
 1. **Via messaging**: Send "stop everything" or "emergency stop" — the MessageSentinel intercepts
-2. **Via file**: `touch .instar/autonomous-emergency-stop` — the stop hook checks for this
-3. **Via cancel**: `/cancel-autonomous` — removes the state file
+2. **Via file**: `touch .instar/autonomous-emergency-stop` — the stop hook checks for this (this flag is
+   global, so it halts EVERY topic's autonomous job at once)
+3. **Via cancel**: `/cancel-autonomous` — removes this topic's state file
 
 The stop hook checks for emergency stop on EVERY iteration. User safety is never compromised.
 
 ### /cancel-autonomous
 
-To manually cancel:
+To manually cancel THIS topic's job, remove its per-topic state file (substitute the topic id):
 ```bash
-rm -f .instar/autonomous-state.local.md
+rm -f .instar/autonomous/<topicId>.local.md
 ```
+(Older one-at-a-time jobs may still live at the legacy `.instar/autonomous-state.local.md` — remove
+that instead if the per-topic file is absent.)
 
 ---
 
@@ -259,7 +275,9 @@ Feeling tired (as an AI) and deferring. **You don't get tired. The hook knows th
 
 The stop hook is at `.claude/skills/autonomous/hooks/autonomous-stop-hook.sh`.
 
-It reads state from `.instar/autonomous-state.local.md` and:
+It reads state from the per-topic file `.instar/autonomous/<topicId>.local.md` (resolving the topic
+from the tmux session), and migrates the legacy single file `.instar/autonomous-state.local.md` into
+the per-topic path on first run for any in-flight older job. It then:
 - Blocks exit if tasks are incomplete
 - Feeds the task list + goal back as the next prompt
 - Increments the iteration counter

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA6lUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4mUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -9425,6 +9425,20 @@ export async function startServer(options) {
                     });
                 });
             }
+            // Subscription-pool session PINNING (Subscription & Auth Standard): when
+            // enabled, new claude-code spawns launch on the scheduler-picked optimal
+            // account (reset-date / headroom score) and carry its id. This is the
+            // prerequisite that makes auto-swap functional — without a session→account
+            // tag, the swap engine has nothing to move. Default off → spawns use the
+            // default config exactly as before (the resolver stays unwired).
+            if (config.subscriptionPool?.pinSessionsToPool) {
+                const { selectAccount } = await import('../core/QuotaAwareScheduler.js');
+                sessionManager.setSpawnAccountResolver(() => {
+                    const acct = selectAccount(subscriptionPool.list(), { nowMs: Date.now() });
+                    return acct ? { configHome: acct.configHome, accountId: acct.id } : null;
+                });
+                console.log(pc.green('  Subscription-pool session pinning enabled'));
+            }
         }
         // ── SessionReaper (SESSION-REAPER-SPEC) ──────────────────────────────
         // Pressure-aware reaper of idle-but-alive sessions. Ships OFF + dry-run by