instar 1.3.441 → 1.3.443

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAmpUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgtUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -4221,18 +4221,74 @@ export async function startServer(options) {
                     const slackCfg = slackConfig.config;
                     const pgCfg = slackCfg.permissionGate;
                     if (pgCfg && (pgCfg.observeOnly || pgCfg.enforce)) {
-                        const { SlackPermissionObserver, SlackPrincipalResolver, SlackPermissionGate, PermissionDecisionLedger, RolePolicy, HeuristicIntentClassifier, HeuristicAnomalyScorer, } = await import('../permissions/index.js');
+                        const { SlackPermissionObserver, SlackPrincipalResolver, SlackPermissionGate, PermissionDecisionLedger, RolePolicy, HeuristicIntentClassifier, LlmIntentClassifier, HeuristicAnomalyScorer, MandateBackedGrantStore, } = await import('../permissions/index.js');
                         // Own UserManager instance for verified-principal resolution (the
                         // Telegram-block userManager is out of scope here). Reads users.json.
                         const slackUserManager = new UserManager(config.stateDir, config.users);
+                        // ── Floor-action grants are read from the SIGNED Coordination Mandate ──
+                        // A MandateStore reader over the SAME file + SAME HMAC sign/verify deps as
+                        // the coordination engine in AgentServer (which is constructed later, so we
+                        // can't share the instance) — a stateless reader, so a second instance over
+                        // the same on-disk mandates is correct. With no stateDir, leave grants
+                        // unset (deny-by-default: the gate then refuses every floor action).
+                        let grantStore;
+                        if (config.stateDir) {
+                            try {
+                                const { MandateStore } = await import('../coordination/MandateStore.js');
+                                const cryptoMod = await import('node:crypto');
+                                const issuanceKey = config.authToken || 'mandate-issuance-unsigned-dev-key';
+                                const mSign = (canonical) => cryptoMod.createHmac('sha256', issuanceKey).update(canonical).digest('hex');
+                                const mVerify = (canonical, proof) => {
+                                    const expected = mSign(canonical);
+                                    try {
+                                        return expected.length === proof.length
+                                            && cryptoMod.timingSafeEqual(Buffer.from(expected), Buffer.from(proof));
+                                    }
+                                    catch { /* @silent-fallback-ok — a malformed proof must verify FALSE (deny-safe), never throw */
+                                        return false;
+                                    }
+                                };
+                                const mandateStore = new MandateStore({
+                                    filePath: path.join(config.stateDir, 'state', 'coordination-mandates.json'),
+                                    sign: mSign,
+                                    verifySig: mVerify,
+                                });
+                                grantStore = new MandateBackedGrantStore({ store: mandateStore });
+                            }
+                            catch (ge) {
+                                console.warn('[slack] mandate-backed grant store wiring skipped:', ge.message);
+                            }
+                        }
+                        // ── Judgment-band classifier selection (opt-in, dark by default) ──
+                        // Default stays the deterministic HeuristicIntentClassifier. When
+                        // `permissionGate.classifier === 'llm'` AND an internal LLM provider is
+                        // available, use LlmIntentClassifier for the judgment band ABOVE the
+                        // deterministic floor — it fails CLOSED to the heuristic on any LLM
+                        // failure (never a silent allow). With 'llm' selected but no provider,
+                        // we stay on the heuristic and say so.
+                        let intentClassifier;
+                        if (pgCfg.classifier === 'llm') {
+                            if (sharedIntelligence) {
+                                intentClassifier = new LlmIntentClassifier({ intelligence: sharedIntelligence });
+                                console.log('[slack] permission gate using LLM judgment-band intent classifier (fail-closed to heuristic)');
+                            }
+                            else {
+                                intentClassifier = new HeuristicIntentClassifier();
+                                console.warn('[slack] permissionGate.classifier=llm requested but no intelligence provider available — staying on heuristic classifier');
+                            }
+                        }
+                        else {
+                            intentClassifier = new HeuristicIntentClassifier();
+                        }
                         const observer = new SlackPermissionObserver({
                             resolver: new SlackPrincipalResolver({
                                 resolveFromSlackUserId: (id) => slackUserManager.resolveFromSlackUserId(id),
                             }),
                             gate: new SlackPermissionGate({
                                 rolePolicy: new RolePolicy(),
-                                classifier: new HeuristicIntentClassifier(),
+                                classifier: intentClassifier,
                                 anomalyScorer: new HeuristicAnomalyScorer(),
+                                grants: grantStore,
                             }),
                             ledger: new PermissionDecisionLedger(config.stateDir),
                             enforce: pgCfg.enforce === true,