instar 1.3.484 → 1.3.486

package/dist/core/TelegramRelay.d.ts

@@ -48,5 +48,6 @@ export interface RelayDeps {
  */
 export declare function relayOutbound(topicId: number, text: string, opts: {
     silent?: boolean;
+    kindMetadata?: Record<string, unknown>;
 } | undefined, deps: RelayDeps): Promise<RelayResult | null>;
 //# sourceMappingURL=TelegramRelay.d.ts.map

package/dist/core/TelegramRelay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TelegramRelay.d.ts","sourceRoot":"","sources":["../../src/core/TelegramRelay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,iFAAiF;IACjF,WAAW,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACjC,mEAAmE;IACnE,aAAa,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC9C,mEAAmE;IACnE,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,iEAAiE;IACjE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,EACtC,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAiD7B"}
+{"version":3,"file":"TelegramRelay.d.ts","sourceRoot":"","sources":["../../src/core/TelegramRelay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,iFAAiF;IACjF,WAAW,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACjC,mEAAmE;IACnE,aAAa,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC9C,mEAAmE;IACnE,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,iEAAiE;IACjE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,SAAS,EAC9E,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAyD7B"}

package/dist/core/TelegramRelay.js

@@ -44,7 +44,15 @@ export async function relayOutbound(topicId, text, opts, deps) {
         const resp = await fetchImpl(`${url}/telegram/reply/${topicId}`, {
             method: 'POST',
             headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${deps.authToken}` },
-            body: JSON.stringify({ text, ...(opts?.silent ? { silent: true } : {}) }),
+            // Forward the kind metadata so an automated send keeps its kind across
+            // the hop and the HOLDER's gate/audit see accurate context (spec
+            // outbound-jargon-filepath-gap §2.5). The preflight already ran on the
+            // ORIGINATING machine — it never re-runs here.
+            body: JSON.stringify({
+                text,
+                ...(opts?.silent ? { silent: true } : {}),
+                ...(opts?.kindMetadata ? { metadata: opts.kindMetadata } : {}),
+            }),
             signal: ac.signal,
         });
         if (!resp.ok) {

package/dist/core/TelegramRelay.js.map

@@ -1 +1 @@
-{"version":3,"file":"TelegramRelay.js","sourceRoot":"","sources":["../../src/core/TelegramRelay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAwBH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,IAAY,EACZ,IAAsC,EACtC,IAAe;IAEf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;IAE7F,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,iDAAiD,MAAM,yBAAyB,OAAO,EAAE,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,GAAG,mBAAmB,OAAO,EAAE,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,EAAE;YAC5F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACzE,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,GAAG,CAAC,2BAA2B,GAAG,aAAa,IAAI,CAAC,MAAM,cAAc,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,2BAA2B,CAAC,CAAC;YACrI,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA2B,CAAC;QAC1E,oEAAoE;QACpE,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,iEAAiE;QACjE,qEAAqE;QACrE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,2BAA2B,GAAG,qDAAqD,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,+BAA+B,CAAC,CAAC;YACxJ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO;YAC9B,CAAC,CAAC,iBAAiB,IAAI,CAAC,SAAS,IAAI;YACrC,CAAC,CAAC,GAAG,YAAY,KAAK;gBACpB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,GAAG,CAAC,6BAA6B,GAAG,qBAAqB,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,QAAQ,MAAM,wBAAwB,CAAC,CAAC;QACjI,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}
+{"version":3,"file":"TelegramRelay.js","sourceRoot":"","sources":["../../src/core/TelegramRelay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAwBH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,IAAY,EACZ,IAA8E,EAC9E,IAAe;IAEf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;IAE7F,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,iDAAiD,MAAM,yBAAyB,OAAO,EAAE,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,GAAG,mBAAmB,OAAO,EAAE,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,EAAE;YAC5F,uEAAuE;YACvE,iEAAiE;YACjE,uEAAuE;YACvE,+CAA+C;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI;gBACJ,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC;YACF,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,GAAG,CAAC,2BAA2B,GAAG,aAAa,IAAI,CAAC,MAAM,cAAc,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,2BAA2B,CAAC,CAAC;YACrI,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA2B,CAAC;QAC1E,oEAAoE;QACpE,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,iEAAiE;QACjE,qEAAqE;QACrE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,2BAA2B,GAAG,qDAAqD,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,+BAA+B,CAAC,CAAC;YACxJ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO;YAC9B,CAAC,CAAC,iBAAiB,IAAI,CAAC,SAAS,IAAI;YACrC,CAAC,CAAC,GAAG,YAAY,KAAK;gBACpB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,GAAG,CAAC,6BAA6B,GAAG,qBAAqB,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,QAAQ,MAAM,wBAAwB,CAAC,CAAC;QACjI,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/core/raw-file-path.d.ts

@@ -0,0 +1,33 @@
+/**
+ * raw-file-path — deterministic detector for literal filesystem paths in
+ * user-facing messages.
+ *
+ * Sibling of `localhost-link.ts`, held to the same linear-regex discipline —
+ * but unlike the localhost guard this is a pure SIGNAL, never a block
+ * (spec: docs/specs/outbound-jargon-filepath-gap.md §2.3). A literal repo
+ * path shown to a user ("/Users/justin/...", ".instar/config.json",
+ * "src/core/Foo.ts") is something the user usually can't act on; the
+ * existing B2_FILE_PATH judgment belongs to the LLM authority, and on
+ * automated sends the preflight advisory informs the SENDER. This detector
+ * only surfaces the observation.
+ *
+ * Hard requirements (r2 convergence):
+ * - ReDoS-safe: linear, non-backtracking patterns; bounded segment count
+ *   and length; an indexOf prescreen so the regex only runs when a path is
+ *   plausibly present.
+ * - Never matches inside an `http(s)://` URL — URLs containing paths are
+ *   the legitimate form to preserve.
+ * - Bounded match echo: the returned match is the regex token (whose char
+ *   class already stops at whitespace/quote/`?`/`#`/`)`), truncated to
+ *   120 chars, so a secret adjacent to a path can never ride into
+ *   logs/advisories/transcripts.
+ * - Callers wrap every call fail-OPEN: a throw skips the signal, never
+ *   withholds a message and never 500s a route.
+ */
+export interface RawFilePathResult {
+    detected: boolean;
+    /** First offending path, bounded to 120 chars — safe to echo in advisories/audits. */
+    match?: string;
+}
+export declare function detectRawFilePath(text: string): RawFilePathResult;
+//# sourceMappingURL=raw-file-path.d.ts.map

package/dist/core/raw-file-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-file-path.d.ts","sourceRoot":"","sources":["../../src/core/raw-file-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAmCH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA2BD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAsBjE"}

package/dist/core/raw-file-path.js

@@ -0,0 +1,105 @@
+/**
+ * raw-file-path — deterministic detector for literal filesystem paths in
+ * user-facing messages.
+ *
+ * Sibling of `localhost-link.ts`, held to the same linear-regex discipline —
+ * but unlike the localhost guard this is a pure SIGNAL, never a block
+ * (spec: docs/specs/outbound-jargon-filepath-gap.md §2.3). A literal repo
+ * path shown to a user ("/Users/justin/...", ".instar/config.json",
+ * "src/core/Foo.ts") is something the user usually can't act on; the
+ * existing B2_FILE_PATH judgment belongs to the LLM authority, and on
+ * automated sends the preflight advisory informs the SENDER. This detector
+ * only surfaces the observation.
+ *
+ * Hard requirements (r2 convergence):
+ * - ReDoS-safe: linear, non-backtracking patterns; bounded segment count
+ *   and length; an indexOf prescreen so the regex only runs when a path is
+ *   plausibly present.
+ * - Never matches inside an `http(s)://` URL — URLs containing paths are
+ *   the legitimate form to preserve.
+ * - Bounded match echo: the returned match is the regex token (whose char
+ *   class already stops at whitespace/quote/`?`/`#`/`)`), truncated to
+ *   120 chars, so a secret adjacent to a path can never ride into
+ *   logs/advisories/transcripts.
+ * - Callers wrap every call fail-OPEN: a throw skips the signal, never
+ *   withholds a message and never 500s a route.
+ */
+/** Truncation cap for the echoed match (privacy bound on adjacent content). */
+const MATCH_ECHO_MAX = 120;
+/** Defensive input cap — callers already cap analyzed text (64KB at the
+ * preflight route); this keeps the detector itself bounded regardless. */
+const INPUT_MAX = 64 * 1024;
+/**
+ * Path-segment char class: stops at whitespace, quotes, `?`, `#`, `)`,
+ * backticks and other prose punctuation by construction. Bounded segment
+ * length (1–64) and bounded segment count keep the scan linear.
+ *
+ * Three alternatives, all anchored on a real separator so prose like
+ * "and/or" or "TCP/IP" cannot match:
+ *  A) absolute or home paths with at least two segments:  /Users/justin/x, ~/.config/foo
+ *  B) dot-directory relative paths:                       .instar/config.json, .claude/hooks/x
+ *  C) repo-relative paths under well-known dirs:          src/core/Foo.ts, logs/server.log
+ */
+const SEG = '[A-Za-z0-9._-]{1,64}';
+const RAW_FILE_PATH_RE = new RegExp(
+// A: "/seg/seg..." or "~/seg/seg..." (>= 2 segments so "/tmp" alone or a
+//    lone slash in prose stays legal)
+`(?:(?:~)?/${SEG}(?:/${SEG}){1,12}` +
+    // B: ".instar/...", ".claude/...", ".github/...", ".husky/..." (single
+    //    segment after the dot-dir is enough — ".instar/config.json")
+    `|\\.(?:instar|claude|github|husky|vscode|config)/${SEG}(?:/${SEG}){0,12}` +
+    // C: repo-relative under well-known top-level dirs; require the word
+    //    boundary via a non-path char or string start (handled in code, not
+    //    lookbehind, to keep the pattern simple and linear)
+    `|(?:src|docs|tests|scripts|logs|state|upgrades|dist|node_modules)/${SEG}(?:/${SEG}){0,12})`, 'g');
+/**
+ * True when `index` sits inside a scheme-bearing URL token: the
+ * whitespace-delimited token containing the match start carries "://"
+ * before the match. Linear scan-back, bounded by the token itself.
+ */
+function insideUrl(text, index) {
+    let start = index;
+    while (start > 0 && !/\s/.test(text[start - 1]))
+        start--;
+    const prefix = text.slice(start, index);
+    // `://` fully before the match, OR the match starts at the second slash of
+    // a scheme separator (prefix ends with `:/` — e.g. match begins at
+    // "/example.com/…" inside "https://example.com/…").
+    return prefix.includes('://') || /:\/$/.test(prefix);
+}
+/**
+ * For alternative C (bare repo-relative prefixes like "src/"), require a
+ * word boundary on the left so "missrc/foo" or "RandomLogs/x" can't match.
+ * Alternatives A/B self-anchor on '/', '~' or '.'.
+ */
+function hasWordBoundaryLeft(text, index) {
+    if (index === 0)
+        return true;
+    return !/[A-Za-z0-9._\-/]/.test(text[index - 1]);
+}
+export function detectRawFilePath(text) {
+    if (typeof text !== 'string' || text.length === 0)
+        return { detected: false };
+    const input = text.length > INPUT_MAX ? text.slice(0, INPUT_MAX) : text;
+    // indexOf prescreen — the regex only runs when a path separator exists.
+    if (!input.includes('/'))
+        return { detected: false };
+    RAW_FILE_PATH_RE.lastIndex = 0;
+    let m;
+    while ((m = RAW_FILE_PATH_RE.exec(input)) !== null) {
+        const token = m[0];
+        const at = m.index;
+        // Never flag a path that lives inside an http(s):// URL.
+        if (insideUrl(input, at))
+            continue;
+        // Bare repo-relative alternative needs a real word boundary.
+        const firstChar = token[0];
+        if (firstChar !== '/' && firstChar !== '~' && firstChar !== '.') {
+            if (!hasWordBoundaryLeft(input, at))
+                continue;
+        }
+        return { detected: true, match: token.slice(0, MATCH_ECHO_MAX) };
+    }
+    return { detected: false };
+}
+//# sourceMappingURL=raw-file-path.js.map

package/dist/core/raw-file-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-file-path.js","sourceRoot":"","sources":["../../src/core/raw-file-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,+EAA+E;AAC/E,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;0EAC0E;AAC1E,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,MAAM,GAAG,GAAG,sBAAsB,CAAC;AACnC,MAAM,gBAAgB,GAAG,IAAI,MAAM;AACjC,yEAAyE;AACzE,sCAAsC;AACtC,aAAa,GAAG,OAAO,GAAG,SAAS;IACjC,uEAAuE;IACvE,kEAAkE;IAClE,oDAAoD,GAAG,OAAO,GAAG,SAAS;IAC1E,qEAAqE;IACrE,wEAAwE;IACxE,wDAAwD;IACxD,qEAAqE,GAAG,OAAO,GAAG,UAAU,EAC9F,GAAG,CACJ,CAAC;AAQF;;;;GAIG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAAE,KAAK,EAAE,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,2EAA2E;IAC3E,mEAAmE;IACnE,oDAAoD;IACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExE,wEAAwE;IACxE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAErD,gBAAgB,CAAC,SAAS,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;QACnB,yDAAyD;QACzD,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YAAE,SAAS;QACnC,6DAA6D;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAChE,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,EAAE,CAAC;gBAAE,SAAS;QAChD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/messaging/OutboundAdvisory.d.ts

@@ -0,0 +1,152 @@
+/**
+ * OutboundAdvisory — the inform-only preflight surface for automated senders.
+ *
+ * Spec: docs/specs/outbound-jargon-filepath-gap.md (§2.4, §2.4(5), §2.4(6)).
+ *
+ * Three responsibilities, all strictly non-blocking:
+ *
+ * 1. **Advisory composition** (`composeAdvisories`) — run the deterministic
+ *    detectors (jargon, raw-file-path, localhost-link) over a candidate text
+ *    and return static-guidance advisories. No LLM call, fail-OPEN per
+ *    detector, guidance keyed by code (never derived from message content —
+ *    injection-pinned), detector match rendered only as an inert bounded
+ *    token by the consumer.
+ *
+ * 2. **Audit** (`recordPreflight` / `recordAck`) — the SERVER is the single
+ *    writer of `logs/outbound-advisory.jsonl`: one O_APPEND write per line,
+ *    `{ts, topicId, jobSlug, kind, textHash, advisories, action}` with
+ *    action `clean | advised | acked`. Size-rotated (single rollover to
+ *    `.1` at the byte cap). The script writes NOTHING here.
+ *
+ * 3. **Repeated-ignore escalation** — the load-bearing bound on the design's
+ *    worst failure mode (a sender silently dropping its own flagged
+ *    message). Fed by an in-memory write-time index (no poller, no file
+ *    scan; resets on restart are accepted best-effort observability):
+ *    - per-SIGNATURE (jobSlug, topicId, sorted code set) unresolved-advised
+ *      count in a rolling window, NOT reset by interleaved clean rows for
+ *      other messages (the reset-gaming case);
+ *    - a signature resolves on an `acked` with the same codes, or a `clean`
+ *      preflight of the same message — "same message" judged by token-set
+ *      similarity (the fix re-send is near-identical), never by exact hash
+ *      alone;
+ *    - a per-jobSlug AGGREGATE (across topics, higher threshold) covers
+ *      one-shot senders whose topics vary;
+ *    - a preemptive-ack consumer: N consecutive acked-with-NONEMPTY
+ *      advisories per signature raises too (a job habitually overriding
+ *      instead of fixing is operator-relevant).
+ *    Escalation INFORMS THE OPERATOR (one deduped Attention item with the
+ *    FIXED sourceContext 'outbound-advisory-escalation' so the per-source
+ *    topic budget genuinely binds — P17). It never gates the sender.
+ */
+export type AdvisoryCode = 'JARGON' | 'RAW_FILE_PATH' | 'LOCALHOST_LINK';
+export interface Advisory {
+    code: AdvisoryCode;
+    /** Bounded inert detector match (≤120 chars) — data, never instructions. */
+    match?: string;
+    /** STATIC guidance keyed by code — never derived from message content. */
+    guidance: string;
+}
+/** Analyzed-text cap (consistent with the pipeline's downstream rejects). */
+export declare const PREFLIGHT_TEXT_CAP: number;
+/**
+ * Run the deterministic detectors over a candidate text. Each detector is
+ * individually fail-OPEN: a throw skips that signal and never withholds.
+ */
+export declare function composeAdvisories(text: string): Advisory[];
+export type AdvisoryAction = 'clean' | 'advised' | 'acked';
+export interface AdvisoryAuditEntry {
+    ts: string;
+    topicId: number;
+    jobSlug: string;
+    kind: string;
+    textHash: string;
+    advisories: string[];
+    action: AdvisoryAction;
+}
+export interface AttentionRaiser {
+    (item: {
+        id: string;
+        title: string;
+        summary: string;
+        category: string;
+        priority: 'HIGH' | 'NORMAL' | 'LOW';
+        description?: string;
+        sourceContext?: string;
+    }): Promise<unknown> | unknown;
+}
+export interface OutboundAdvisoryAuditOptions {
+    /** Absolute path of the JSONL audit file (e.g. <root>/logs/outbound-advisory.jsonl). */
+    logPath: string;
+    /** Size-rotation cap in bytes (single rollover to `.1`). Default 10MB. */
+    maxLogBytes?: number;
+    /** Per-signature unresolved-advised threshold (live-read). Default 3. */
+    getIgnoreThreshold?: () => number;
+    /** Per-jobSlug aggregate threshold (live-read). Default 5. */
+    getSlugThreshold?: () => number;
+    /** Operator-inform surface. Absent → escalation is a no-op (audit still writes). */
+    raiseAttention?: AttentionRaiser;
+}
+/** Fixed sourceContext — P17: the per-source topic budget must genuinely bind. */
+export declare const ADVISORY_ESCALATION_SOURCE = "outbound-advisory-escalation";
+export declare function sha256Hex(text: string): string;
+export declare class OutboundAdvisoryAudit {
+    private logPath;
+    private maxLogBytes;
+    private getIgnoreThreshold;
+    private getSlugThreshold;
+    private raiseAttention;
+    /** Write-time index — per-signature state (key: slug|topic|codes). */
+    private signatures;
+    /** Recent PREFLIGHT-written rows (clean/advised) for §2.1 spoof correlation.
+     *  Keyed slug|topic → last preflight ts. Acked rows never land here —
+     *  a send's own ack must not self-license it. */
+    private recentPreflights;
+    /** Per-slug escalation dedup for the aggregate bound. */
+    private escalatedSlugs;
+    constructor(opts: OutboundAdvisoryAuditOptions);
+    /**
+     * Record a PREFLIGHT outcome (the preflight route is the caller).
+     * action is derived: advisories present → 'advised', none → 'clean'.
+     * Never throws — audit failure must never affect delivery.
+     */
+    recordPreflight(entry: {
+        topicId: number;
+        jobSlug: string;
+        kind: string;
+        text: string;
+        advisories: string[];
+    }): AdvisoryAction;
+    /**
+     * Record an ACK (the /telegram/reply route is the single writer of 'acked'
+     * — it fires when a send carries metadata.advisoryAck). Resolves the
+     * signature's unresolved episodes when the codes match; counts consecutive
+     * non-empty-advisory acks for the preemptive-ack consumer.
+     */
+    recordAck(entry: {
+        topicId: number;
+        jobSlug: string;
+        kind: string;
+        text: string;
+        advisories: string[];
+    }): void;
+    /**
+     * §2.1 spoof correlation: was there a PREFLIGHT-written (clean/advised)
+     * row for this slug+topic recently? Acked rows deliberately don't count.
+     */
+    hasRecentPreflight(jobSlug: string, topicId: number, windowMs?: number): boolean;
+    /**
+     * Bounded tail read for GET /messaging/advisory-log — reads the last
+     * `maxBytes` of the file (default 256KB), NEVER the whole file, and
+     * returns up to `limit` newest parsed entries.
+     */
+    readTail(limit?: number, maxBytes?: number): AdvisoryAuditEntry[];
+    private signature;
+    private pruneEpisodes;
+    private prunePreflights;
+    private resolveNearIdentical;
+    private maybeEscalateIgnore;
+    private maybeEscalatePreemptiveAck;
+    private appendLine;
+    private rotateIfNeeded;
+}
+//# sourceMappingURL=OutboundAdvisory.d.ts.map

package/dist/messaging/OutboundAdvisory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OutboundAdvisory.d.ts","sourceRoot":"","sources":["../../src/messaging/OutboundAdvisory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAWH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEzE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAgBD,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB,QAAY,CAAC;AAE5C;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,CA6C1D;AAID,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,IAAI,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;QACpC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC3C,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IAChC,oFAAoF;IACpF,cAAc,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,iCAAiC,CAAC;AAqDzE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,kBAAkB,CAAe;IACzC,OAAO,CAAC,gBAAgB,CAAe;IACvC,OAAO,CAAC,cAAc,CAAyB;IAE/C,sEAAsE;IACtE,OAAO,CAAC,UAAU,CAAqC;IACvD;;qDAEiD;IACjD,OAAO,CAAC,gBAAgB,CAA6B;IACrD,yDAAyD;IACzD,OAAO,CAAC,cAAc,CAAqB;gBAE/B,IAAI,EAAE,4BAA4B;IAQ9C;;;;OAIG;IACH,eAAe,CAAC,KAAK,EAAE;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,GAAG,cAAc;IAyClB;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,GAAG,IAAI;IA6BR;;;OAGG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,SAA6B,GAAG,OAAO;IAKpG;;;;OAIG;IACH,QAAQ,CAAC,KAAK,SAAK,EAAE,QAAQ,SAAa,GAAG,kBAAkB,EAAE;IA+BjE,OAAO,CAAC,SAAS;IAwBjB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,mBAAmB;IA+D3B,OAAO,CAAC,0BAA0B;IAuBlC,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,cAAc;CAUvB"}