instar 1.3.438 → 1.3.440

package/.claude/skills/autonomous/SKILL.md

@@ -75,7 +75,20 @@ if json.dumps(hooks) != before:
 
 **2b. Write the state file DIRECTLY** (do NOT shell out to bash — the session ID env var is only available inside Claude Code):
 
-Use the **Write tool** to create `.instar/autonomous-state.local.md` with this content:
+Use the **Write tool** to create the **per-topic** state file `.instar/autonomous/<topicId>.local.md`,
+where `<topicId>` is the `report_topic` value you set below (the Telegram topic id you already know
+in-context). For example, if `report_topic` is `19437`, write `.instar/autonomous/19437.local.md`.
+
+**WHY PER-TOPIC (setup-race hardening):** the stop hook reads this per-topic file **directly**
+(`.instar/autonomous/<topicId>.local.md`) — it is the canonical state path, keyed on topic so
+multiple topics run concurrent autonomous jobs without collision. Writing the per-topic path here
+closes a boot-window race: two autonomous sessions starting near-simultaneously must NOT both write
+the single legacy file `.instar/autonomous-state.local.md` (the hook still migrates that legacy file
+for in-flight older jobs, but new jobs write the per-topic file from the start so there is nothing to
+collide on). If you somehow have no `report_topic`, fall back to `.instar/autonomous-state.local.md`
+(one-at-a-time, back-compat only).
+
+Write this content:
 
 ```markdown
 ---
@@ -197,17 +210,20 @@ The stop hook detects the promise and allows exit.
 The user can always stop autonomous mode:
 
 1. **Via messaging**: Send "stop everything" or "emergency stop" — the MessageSentinel intercepts
-2. **Via file**: `touch .instar/autonomous-emergency-stop` — the stop hook checks for this
-3. **Via cancel**: `/cancel-autonomous` — removes the state file
+2. **Via file**: `touch .instar/autonomous-emergency-stop` — the stop hook checks for this (this flag is
+   global, so it halts EVERY topic's autonomous job at once)
+3. **Via cancel**: `/cancel-autonomous` — removes this topic's state file
 
 The stop hook checks for emergency stop on EVERY iteration. User safety is never compromised.
 
 ### /cancel-autonomous
 
-To manually cancel:
+To manually cancel THIS topic's job, remove its per-topic state file (substitute the topic id):
 ```bash
-rm -f .instar/autonomous-state.local.md
+rm -f .instar/autonomous/<topicId>.local.md
 ```
+(Older one-at-a-time jobs may still live at the legacy `.instar/autonomous-state.local.md` — remove
+that instead if the per-topic file is absent.)
 
 ---
 
@@ -259,7 +275,9 @@ Feeling tired (as an AI) and deferring. **You don't get tired. The hook knows th
 
 The stop hook is at `.claude/skills/autonomous/hooks/autonomous-stop-hook.sh`.
 
-It reads state from `.instar/autonomous-state.local.md` and:
+It reads state from the per-topic file `.instar/autonomous/<topicId>.local.md` (resolving the topic
+from the tmux session), and migrates the legacy single file `.instar/autonomous-state.local.md` into
+the per-topic path on first run for any in-flight older job. It then:
 - Blocks exit if tasks are incomplete
 - Feeds the task list + goal back as the next prompt
 - Increments the iteration counter

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4mUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAmpUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -4213,6 +4213,37 @@ export async function startServer(options) {
             try {
                 const { SlackAdapter } = await import('../messaging/slack/index.js');
                 slackAdapter = new SlackAdapter(slackConfig.config, config.stateDir);
+                // ── Slack org permission gate (Slice 0) — DARK by default ──────────
+                // Attached only when `permissionGate.observeOnly` (or `.enforce`) is set in
+                // the Slack config. Observe-only logs what the gate WOULD decide for every
+                // authorized message and never blocks. See docs/specs/SLACK-ORG-INTEGRATION-SPEC.md.
+                try {
+                    const slackCfg = slackConfig.config;
+                    const pgCfg = slackCfg.permissionGate;
+                    if (pgCfg && (pgCfg.observeOnly || pgCfg.enforce)) {
+                        const { SlackPermissionObserver, SlackPrincipalResolver, SlackPermissionGate, PermissionDecisionLedger, RolePolicy, HeuristicIntentClassifier, HeuristicAnomalyScorer, } = await import('../permissions/index.js');
+                        // Own UserManager instance for verified-principal resolution (the
+                        // Telegram-block userManager is out of scope here). Reads users.json.
+                        const slackUserManager = new UserManager(config.stateDir, config.users);
+                        const observer = new SlackPermissionObserver({
+                            resolver: new SlackPrincipalResolver({
+                                resolveFromSlackUserId: (id) => slackUserManager.resolveFromSlackUserId(id),
+                            }),
+                            gate: new SlackPermissionGate({
+                                rolePolicy: new RolePolicy(),
+                                classifier: new HeuristicIntentClassifier(),
+                                anomalyScorer: new HeuristicAnomalyScorer(),
+                            }),
+                            ledger: new PermissionDecisionLedger(config.stateDir),
+                            enforce: pgCfg.enforce === true,
+                        });
+                        slackAdapter.setPermissionObserver(observer);
+                        console.log(`[slack] permission gate attached (${pgCfg.enforce ? 'ENFORCE' : 'observe-only'})`);
+                    }
+                }
+                catch (e) {
+                    console.warn('[slack] permission gate wiring skipped:', e.message);
+                }
                 // Wire message handler — inject Slack messages into sessions
                 slackAdapter.onMessage(async (message) => {
                     const channelId = message.channel.identifier;