instar 1.3.545 → 1.3.547

package/dashboard/index.html

@@ -845,6 +845,11 @@
     .mnd-about p { margin: 8px 0 0; line-height: 1.55; }
     .mnd-grant-row { display: flex; gap: 8px; align-items: center; flex-wrap: wrap; margin: 8px 0 4px; }
     .mnd-grant-field { min-width: 130px; max-width: 100%; padding: 6px 8px; }
+    .mnd-approval-card { border: 1px solid var(--accent, #2f81f7); border-radius: 12px; padding: 16px 18px; margin-bottom: 12px; background: rgba(47,129,247,0.06); display: flex; flex-direction: column; gap: 10px; }
+    .mnd-approval-ask { font-size: 13px; opacity: 0.75; }
+    .mnd-approval-headline { font-size: 18px; font-weight: 600; line-height: 1.4; }
+    .mnd-approval-reason { font-size: 13px; opacity: 0.7; border-left: 3px solid var(--border); padding-left: 10px; }
+    .mnd-btn-quiet { opacity: 0.7; font-weight: 400; }
     .mnd-notice { min-height: 20px; font-size: 14px; color: #3fb950; }
     .mnd-issue-form { display: flex; flex-direction: column; gap: 14px; max-width: 640px; padding: 12px 0; }
     .mnd-issue-form label { display: flex; flex-direction: column; gap: 4px; font-size: 15px; color: var(--text-bright); }
@@ -3416,12 +3421,16 @@
         <p>These are your permission slips for autonomous agent-to-agent work — each one authorizes a specific, bounded task. The slip — never the agent — is the authorizer. Issuing and revoking require <strong>your dashboard PIN</strong>; an agent's own credentials are refused by design. With no slip issued, every delegated action is denied.</p>
       </details>
       <div id="mndNotice" class="mnd-notice" aria-live="polite"></div>
+      <section class="ph-section" id="mndApprovalsSection" style="display:none">
+        <h3 class="ph-h">Approvals waiting for you</h3>
+        <div id="mndApprovals"></div>
+      </section>
       <section class="ph-section">
         <h3 class="ph-h">Issued mandates</h3>
         <div id="mndList"></div>
       </section>
       <details class="ph-detail" id="mndIssueDetails">
-        <summary class="ph-detail-summary">Issue a new mandate (PIN required)</summary>
+        <summary class="ph-detail-summary">Advanced — author a mandate by hand (PIN required)</summary>
         <div class="mnd-issue-form">
           <label>What is this permission slip for?
             <span class="mnd-hint">A short name for the project the two agents may work on together, e.g. feedback-migration.</span>
@@ -9161,6 +9170,8 @@
       if (!__mndController) {
         const els = {
           list: document.getElementById('mndList'),
+          approvals: document.getElementById('mndApprovals'),
+          approvalsSection: document.getElementById('mndApprovalsSection'),
           audit: document.getElementById('mndAudit'),
           notice: document.getElementById('mndNotice'),
           stamp: document.getElementById('mndStamp'),

package/dashboard/mandates.js

@@ -225,6 +225,42 @@ export function renderMandates(list, slackUsers = []) {
   }).join('');
 }
 
+/**
+ * "Approvals waiting for you" — the agent-proposes/operator-approves surface. The card
+ * text is the SERVER-authored `headline` (built from the structured proposal + the
+ * registered-user's real name) — we only esc() it, never compose authority from
+ * agent-supplied fields. The optional `reason` is rendered as a clearly-secondary,
+ * escaped note, never the headline (display-integrity standard). A request held on a
+ * different machine shows where to approve instead of a dead button.
+ */
+export function renderApprovals(requests) {
+  const list = (Array.isArray(requests) ? requests : []).filter((r) => r && r.status === 'pending');
+  if (list.length === 0) return '';
+  return list.map((r) => {
+    const headline = esc(r.headline || 'An approval is requested.');
+    const reason = r.reason
+      ? `<div class="mnd-approval-reason">Echo's reason: ${esc(r.reason)}</div>` : '';
+    if (r.heldOnThisMachine === false) {
+      return `<div class="mnd-approval-card">
+        <div class="mnd-approval-ask">Echo is asking for your approval</div>
+        <div class="mnd-approval-headline">${headline}</div>
+        ${reason}
+        <div class="mnd-dead-note">Asked on <strong>${esc(r.createdOnMachine || 'another machine')}</strong> — open that machine's dashboard to approve.</div>
+      </div>`;
+    }
+    return `<div class="mnd-approval-card">
+      <div class="mnd-approval-ask">Echo is asking for your approval</div>
+      <div class="mnd-approval-headline">${headline}</div>
+      ${reason}
+      <div class="mnd-grant-row">
+        <input type="password" class="mnd-pin" data-approve-pin="${esc(r.id)}" placeholder="Your PIN" autocomplete="off" />
+        <button class="mnd-btn mnd-btn-primary" data-approve="${esc(r.id)}">Approve</button>
+        <button class="mnd-btn mnd-btn-quiet" data-deny="${esc(r.id)}">Decline</button>
+      </div>
+    </div>`;
+  }).join('');
+}
+
 export function renderAudit(payload) {
   const entries = payload?.entries ?? [];
   const chainOk = payload?.chain?.ok;
@@ -309,6 +345,16 @@ export function createController({ doc, els, fetchImpl }) {
       const slackUsers = users.status === 200 && Array.isArray(users.body?.users) ? users.body.users : [];
       els.list.innerHTML = renderMandates(mandates, slackUsers);
       els.audit.innerHTML = renderAudit(audit.body);
+      // Pending authorization-requests — the "Approvals waiting for you" surface (the
+      // agent-proposes/operator-approves path). 503/absent → the section stays hidden.
+      if (els.approvals) {
+        const approvals = await fetchJson('/authorization-requests?status=pending').catch(() => ({ status: 0, body: null }));
+        const reqs = approvals.status === 200 && Array.isArray(approvals.body?.requests) ? approvals.body.requests : [];
+        const html = renderApprovals(reqs);
+        els.approvals.innerHTML = html;
+        if (els.approvalsSection) els.approvalsSection.style.display = html ? '' : 'none';
+        wireApprovalButtons();
+      }
       if (els.stamp) els.stamp.textContent = 'updated ' + new Date().toLocaleTimeString();
       // Nothing issued yet → the issue form IS the page's call to action;
       // open it once rather than hiding it behind a collapsed <details>.
@@ -409,6 +455,48 @@ export function createController({ doc, els, fetchImpl }) {
     });
   }
 
+  // Approve / Decline a pending authorization-request — PIN-gated. The operator never
+  // authors anything here; they approve a server-authored card. The PIN is never retained.
+  function wireApprovalButtons() {
+    if (!els.approvals) return;
+    els.approvals.querySelectorAll('[data-approve]').forEach((btn) => {
+      btn.onclick = async () => {
+        const id = btn.getAttribute('data-approve');
+        const pinEl = els.approvals.querySelector(`[data-approve-pin="${id}"]`);
+        const pin = pinEl?.value ?? '';
+        if (!pin) { note('Type your dashboard PIN to approve — approving a grant is a human action.', true); return; }
+        btn.disabled = true;
+        try {
+          const { status, body } = await fetchJson(`/authorization-requests/${encodeURIComponent(id)}/approve`, {
+            method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ pin }),
+          });
+          if (pinEl) pinEl.value = '';
+          if (status === 200 || status === 201) { note('✓ Approved — the grant is now active.', 'success'); await refresh(); }
+          else note(`Not approved — the server refused: ${body?.error ?? `HTTP ${status}`}`, 'error');
+        } finally { btn.disabled = false; }
+      };
+    });
+    els.approvals.querySelectorAll('[data-deny]').forEach((btn) => {
+      btn.onclick = async () => {
+        const id = btn.getAttribute('data-deny');
+        const pinEl = els.approvals.querySelector(`[data-approve-pin="${id}"]`);
+        const pin = pinEl?.value ?? '';
+        if (!pin) { note('Type your dashboard PIN to decline — declining is a human action.', true); return; }
+        const denyReason = (typeof window !== 'undefined' && window.prompt) ? window.prompt('Why are you declining? (a short reason is required)') : 'declined';
+        if (!denyReason || !denyReason.trim()) { note('A short reason is required to decline.', true); return; }
+        btn.disabled = true;
+        try {
+          const { status, body } = await fetchJson(`/authorization-requests/${encodeURIComponent(id)}/deny`, {
+            method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ pin, denyReason: denyReason.trim() }),
+          });
+          if (pinEl) pinEl.value = '';
+          if (status === 200) { note('Declined.', 'success'); await refresh(); }
+          else note(`Not declined — the server refused: ${body?.error ?? `HTTP ${status}`}`, 'error');
+        } finally { btn.disabled = false; }
+      };
+    });
+  }
+
   // Validate EVERYTHING client-side and report every problem at once —
   // never POST a request we know the server will refuse, and never let the
   // operator discover a missing field one transient error at a time.

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAm3CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4hbtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAuBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAiH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAm3CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4lbtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -8645,6 +8645,48 @@ export async function startServer(options) {
             maxForcedPerWindow: config.subscriptionPool?.credentialRepointing?.maxForcedManualSwapsPerWindow,
             forcedWindowMs: config.subscriptionPool?.credentialRepointing?.forcedManualSwapWindowMs,
         });
+        // B3b — the autonomous balancer (Increment B). Wraps the pure §2.4 decision core in a pass
+        // loop and actuates via the SAME gated swap executor. isEnabled mirrors the location gate
+        // (dev-gate-resolved AND the §2.10 env-token gate), and the executor's own dryRun keeps it a
+        // dry-run dogfood on a dev agent (full decision loop + audit, ZERO writes) until dryRun:false.
+        const { CredentialRebalancer } = await import('../core/CredentialRebalancer.js');
+        const { mapSlots: credMapSlots, mapAccounts: credMapAccounts, resolveRebalancerConfig: credResolveBalancerConfig } = await import('../core/CredentialRebalancerSnapshot.js');
+        const CRED_DEFAULT_SLOT = '~/.claude';
+        const credentialRebalancer = new CredentialRebalancer({
+            // Same gate as the location gate: dev-gate-resolved AND not env-token-refused.
+            isEnabled: () => resolveDevAgentGate(config.subscriptionPool?.credentialRepointing?.enabled, config) &&
+                !credentialEnvTokenGate.evaluate().refused,
+            isDryRun: () => config.subscriptionPool?.credentialRepointing?.dryRun !== false,
+            listSlots: () => credMapSlots(credentialLocationLedger.getAssignments(), { defaultSlot: CRED_DEFAULT_SLOT }),
+            listAccounts: () => credMapAccounts(subscriptionPool.list(), Date.now()),
+            resolveConfig: () => credResolveBalancerConfig({
+                ...(config.subscriptionPool?.credentialRepointing?.balancer ?? {}),
+                slotCount: credentialLocationLedger.getAssignments().length,
+                // Dry-run dogfood defaults: keep the account currently in ~/.claude as the desired
+                // default (objective-0 keeps it alive). An explicit operator default-account config +
+                // tmux-activity busyness for the drain target are refinements <!-- tracked: 20905 -->.
+                desiredDefaultAccountId: credentialLocationLedger.tenantOf(CRED_DEFAULT_SLOT) ?? null,
+            }),
+            swap: async (a, b) => {
+                const r = await credentialSwapExecutor.swap(a, b);
+                return { ok: r.outcome === 'swapped' || r.outcome === 'dry-run', detail: r.reason };
+            },
+            emitDegraded: (m) => {
+                try {
+                    DegradationReporter.getInstance().report({
+                        feature: 'CredentialRebalancer', primary: 'autonomous balancer pass',
+                        fallback: 'pass suspended (breaker / floor)', reason: m, impact: 'credential rebalancing degraded',
+                    });
+                }
+                catch { /* @silent-fallback-ok: degradation report is best-effort observability; a throwing reporter must never break the dark/dry-run pass */ }
+            },
+            emitAttention: (m) => {
+                void credentialAuditEmit.attention({
+                    id: `credential-rebalancer-${credentialLocationLedger.version}`,
+                    title: 'Credential rebalancer', summary: m, category: 'credential-repointing', priority: 'NORMAL',
+                });
+            },
+        });
         const credentialRepointing = {
             ledger: credentialLocationLedger,
             swapExecutor: credentialSwapExecutor,
@@ -8652,6 +8694,7 @@ export async function startServer(options) {
             audit: credentialAuditEmit,
             levers: credentialManualLevers,
             envTokenGate: credentialEnvTokenGate,
+            rebalancer: credentialRebalancer,
             readBlob: async (slot) => {
                 const raw = await defaultKeychainExec.readService(credSwapService(slot));
                 if (!raw)
@@ -8666,6 +8709,22 @@ export async function startServer(options) {
                 }
             },
         };
+        // B3b — the periodic balancer pass. tick() is a strict no-op while the feature resolves dark
+        // (so the timer can always run; the gate lives INSIDE tick()), and on a dev agent it runs the
+        // full decision loop in dry-run (zero writes). REENTRANCY-GUARDED: a slow tick never overlaps
+        // its successor. unref()'d so it never holds the process open. Interval clamped [1min, 60min].
+        let credRebalancerTickInFlight = false;
+        const credRebalancerPassMs = Math.min(3_600_000, Math.max(60_000, config.subscriptionPool?.credentialRepointing?.balancer?.passIntervalMs ?? 300_000));
+        const credRebalancerTimer = setInterval(() => {
+            if (credRebalancerTickInFlight)
+                return; // reentrancy guard — skip if the prior tick is still running
+            credRebalancerTickInFlight = true;
+            void credentialRebalancer
+                .tick()
+                .catch((e) => console.warn(`[CredentialRebalancer] tick error: ${e instanceof Error ? e.message : String(e)}`))
+                .finally(() => { credRebalancerTickInFlight = false; });
+        }, credRebalancerPassMs);
+        credRebalancerTimer.unref?.();
         // QuotaPoller — per-account live quota reader (P1.2 of the Subscription &
         // Auth Standard). Reads each account's 5h/weekly utilization + reset dates
         // via the OAuth usage endpoint (transient per-account token, never persisted)