instar 1.3.442 → 1.3.444

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAmrUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA6JtD,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA05BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,GAC/F,IAAI,CAyUN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAuvUtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -4221,7 +4221,7 @@ export async function startServer(options) {
                     const slackCfg = slackConfig.config;
                     const pgCfg = slackCfg.permissionGate;
                     if (pgCfg && (pgCfg.observeOnly || pgCfg.enforce)) {
-                        const { SlackPermissionObserver, SlackPrincipalResolver, SlackPermissionGate, PermissionDecisionLedger, RolePolicy, HeuristicIntentClassifier, HeuristicAnomalyScorer, MandateBackedGrantStore, } = await import('../permissions/index.js');
+                        const { SlackPermissionObserver, SlackPrincipalResolver, SlackPermissionGate, PermissionDecisionLedger, RolePolicy, HeuristicIntentClassifier, LlmIntentClassifier, HeuristicAnomalyScorer, MandateBackedGrantStore, } = await import('../permissions/index.js');
                         // Own UserManager instance for verified-principal resolution (the
                         // Telegram-block userManager is out of scope here). Reads users.json.
                         const slackUserManager = new UserManager(config.stateDir, config.users);
@@ -4259,13 +4259,34 @@ export async function startServer(options) {
                                 console.warn('[slack] mandate-backed grant store wiring skipped:', ge.message);
                             }
                         }
+                        // ── Judgment-band classifier selection (opt-in, dark by default) ──
+                        // Default stays the deterministic HeuristicIntentClassifier. When
+                        // `permissionGate.classifier === 'llm'` AND an internal LLM provider is
+                        // available, use LlmIntentClassifier for the judgment band ABOVE the
+                        // deterministic floor — it fails CLOSED to the heuristic on any LLM
+                        // failure (never a silent allow). With 'llm' selected but no provider,
+                        // we stay on the heuristic and say so.
+                        let intentClassifier;
+                        if (pgCfg.classifier === 'llm') {
+                            if (sharedIntelligence) {
+                                intentClassifier = new LlmIntentClassifier({ intelligence: sharedIntelligence });
+                                console.log('[slack] permission gate using LLM judgment-band intent classifier (fail-closed to heuristic)');
+                            }
+                            else {
+                                intentClassifier = new HeuristicIntentClassifier();
+                                console.warn('[slack] permissionGate.classifier=llm requested but no intelligence provider available — staying on heuristic classifier');
+                            }
+                        }
+                        else {
+                            intentClassifier = new HeuristicIntentClassifier();
+                        }
                         const observer = new SlackPermissionObserver({
                             resolver: new SlackPrincipalResolver({
                                 resolveFromSlackUserId: (id) => slackUserManager.resolveFromSlackUserId(id),
                             }),
                             gate: new SlackPermissionGate({
                                 rolePolicy: new RolePolicy(),
-                                classifier: new HeuristicIntentClassifier(),
+                                classifier: intentClassifier,
                                 anomalyScorer: new HeuristicAnomalyScorer(),
                                 grants: grantStore,
                             }),
@@ -4279,6 +4300,40 @@ export async function startServer(options) {
                 catch (e) {
                     console.warn('[slack] permission gate wiring skipped:', e.message);
                 }
+                // ── Ambient "should I speak?" gate (considered/ambient mode, §5.2) — DARK ──
+                // Attached ONLY when at least one channel is explicitly opted into proactive
+                // contribution (`ambientContribution.enabledChannelIds` non-empty). With no
+                // such config, no gate is attached and undirected messages drop exactly as
+                // today (mention-only). The gate can only ever make the agent quieter
+                // (fail-to-silence): no LLM provider / error / low confidence / rate-limit →
+                // stay silent.
+                try {
+                    const slackCfg = slackConfig.config;
+                    const amCfg = slackCfg.ambientContribution;
+                    if (amCfg && Array.isArray(amCfg.enabledChannelIds) && amCfg.enabledChannelIds.length > 0) {
+                        const { AmbientContributionGate } = await import('../permissions/index.js');
+                        const ambientGate = new AmbientContributionGate({
+                            config: {
+                                enabledChannelIds: amCfg.enabledChannelIds,
+                                maxProactivePerChannel: amCfg.maxProactivePerChannel,
+                                windowMs: amCfg.windowMs,
+                                minConfidence: amCfg.minConfidence,
+                            },
+                            // No provider ⇒ the gate stays silent for every message (fail-to-silence).
+                            intelligence: sharedIntelligence ?? undefined,
+                            onDecision: (decision, channelId) => {
+                                if (decision.speak) {
+                                    console.log(`[slack] ambient gate: SPEAK in ${channelId} (${decision.reason})`);
+                                }
+                            },
+                        });
+                        slackAdapter.setAmbientGate(ambientGate);
+                        console.log(`[slack] ambient contribution gate attached for ${amCfg.enabledChannelIds.length} channel(s)${sharedIntelligence ? '' : ' (no LLM provider — gate stays silent)'}`);
+                    }
+                }
+                catch (e) {
+                    console.warn('[slack] ambient gate wiring skipped:', e.message);
+                }
                 // Wire message handler — inject Slack messages into sessions
                 slackAdapter.onMessage(async (message) => {
                     const channelId = message.channel.identifier;