instar 1.3.665 → 1.3.667

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA2CH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAwBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAwH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA+EtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAy4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAm8gBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA2CH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAwBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAwH7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA+EtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAy4CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CA8eN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA6/gBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -5175,6 +5175,58 @@ export async function startServer(options) {
         // their construction sites below; GET /guards reconciles registrations
         // against the declared manifest (missing = a state, never an omission).
         const guardRegistry = new GuardRegistry();
+        // ── Permission-Prompt Auto-Resolver (always-on safety floor) ──────────────
+        // Auto-answers a framework approval prompt Instar cannot otherwise clear (the
+        // Claude Code 2.1.176-177 cd-redirection wedge). UNCONDITIONAL — there is NO
+        // enable flag (a stale persisted `false` could re-disable the very safety it
+        // provides; that exact trap is what caused this bug). The only opt-out is
+        // monitoring.permissionPromptAutoResolver.emergencyDisable (absent ⇒ on).
+        {
+            const { PermissionPromptAutoResolver, toPaneTailLines } = await import('../monitoring/PermissionPromptAutoResolver.js');
+            const { looksGeneratingNow } = await import('../monitoring/sentinelWiring.js');
+            const pprAuditPath = path.join(config.sessions.projectDir, 'logs', 'permission-prompt-resolver.jsonl');
+            const permissionPromptResolver = new PermissionPromptAutoResolver({
+                sendKey: (s, k) => sessionManager.sendKey(s, k),
+                reCaptureTail: async (s) => {
+                    const t = sessionManager.captureMeaningfulTail(s, 16);
+                    return t == null ? null : toPaneTailLines(t);
+                },
+                isGenerating: (text) => looksGeneratingNow(text, 'claude-code'),
+                raiseDefect: (d) => {
+                    try {
+                        void telegram?.createAttentionItem({
+                            id: `perm-prompt:${d.dedupKey}`,
+                            title: 'Session wedged on an approval prompt I could not auto-clear',
+                            summary: d.reason,
+                            description: `Session ${d.sessionName} (${d.layer}) is parked on an approval prompt the ` +
+                                `auto-resolver could not clear (the host may have changed its prompt UI). It needs a look.`,
+                            category: 'session',
+                            priority: 'NORMAL',
+                            sourceContext: 'permission-prompt-auto-resolver',
+                        });
+                    }
+                    catch { /* observability must never throw into the floor */ }
+                },
+                appendAudit: (row) => {
+                    try {
+                        fs.mkdirSync(path.dirname(pprAuditPath), { recursive: true });
+                        try {
+                            const st = fs.statSync(pprAuditPath);
+                            if (st.size > 8 * 1024 * 1024)
+                                fs.renameSync(pprAuditPath, `${pprAuditPath}.1`);
+                        }
+                        catch { /* file may not exist yet */ }
+                        fs.appendFileSync(pprAuditPath, `${JSON.stringify(row)}\n`);
+                    }
+                    catch { /* audit is best-effort; never throw */ }
+                },
+                now: () => Date.now(),
+                emergencyDisabled: () => config.monitoring?.permissionPromptAutoResolver?.emergencyDisable === true,
+            });
+            guardRegistry.register('monitoring.permissionPromptAutoResolver.enabled', () => permissionPromptResolver.guardStatus());
+            sessionManager.setPermissionPromptResolver(permissionPromptResolver);
+            console.log(pc.green('  Permission-Prompt Auto-Resolver: enabled (always-on safety floor)'));
+        }
         let scheduler;
         if (config.scheduler.enabled && coordinator.isAwake) {
             scheduler = new JobScheduler(config.scheduler, sessionManager, state, config.stateDir);
@@ -12043,16 +12095,19 @@ export async function startServer(options) {
         // Wire sentinel into Telegram message flow — intercepts BEFORE session routing.
         // Must be wired AFTER sentinel is created but BEFORE server starts.
         if (sentinel && telegram) {
-            telegram.onSentinelIntercept = async (text, _topicId) => {
-                const classification = await sentinel.classify(text);
-                if (classification.category === 'emergency-stop' || classification.category === 'pause') {
-                    return {
-                        category: classification.category,
-                        action: classification.action,
-                        reason: classification.reason,
-                    };
+            telegram.onSentinelIntercept = async (text, topicId) => {
+                // Operator-channel-sacred: route the decision through the single disposition
+                // helper so a 'pause' consumes ONLY on a deterministic match — a bare-LLM or
+                // capacity-shed 'pause' routes THROUGH (returns null), never consuming the
+                // operator's message. A long-form genuine stop is rescued to a kill.
+                const decision = await sentinel.decideInboundDisposition(text, topicId);
+                if (decision.disposition === 'kill') {
+                    return { category: 'emergency-stop', action: { type: 'kill-session' }, reason: decision.reason };
+                }
+                if (decision.disposition === 'pause') {
+                    return { category: 'pause', action: { type: 'pause-session' }, reason: decision.reason };
                 }
-                return null; // Normal messages pass through
+                return null; // route-through → normal routing (deliver, don't consume)
             };
             // Durable Inbound Message Queue §3.6: emergency stop reaches custody.
             telegram.onSentinelStopCustody = (topicId) => {