instar 1.3.665 → 1.3.667

package/dist/server/routes.js

@@ -14065,8 +14065,13 @@ export function createRoutes(ctx) {
         // check must never block message delivery. Mirrors processUpdate's behavior.
         if (ctx.sentinel) {
             try {
-                const classification = await ctx.sentinel.classify(text);
-                if (classification.category === 'emergency-stop' || classification.category === 'pause') {
+                // Operator-channel-sacred: the single disposition helper decides — a 'pause'
+                // consumes ONLY on a deterministic match; a bare-LLM/capacity-shed 'pause'
+                // (the 2026-06-25 lockout mechanism) routes THROUGH (falls past this block to
+                // normal routing) instead of consuming the operator's message; a long-form
+                // genuine stop is rescued to a kill.
+                const decision = await ctx.sentinel.decideInboundDisposition(text, Number(topicId));
+                if (decision.disposition === 'kill' || decision.disposition === 'pause') {
                     // Resolve the topic's session. Prefer the on-disk registry (the
                     // persistent source of truth that both polling modes maintain) since
                     // a lifeline-owned adapter's in-memory topicToSession map may be empty;
@@ -14083,7 +14088,7 @@ export function createRoutes(ctx) {
                     if (!sessionName) {
                         sessionName = ctx.telegram?.getSessionForTopic(Number(topicId)) ?? null;
                     }
-                    if (classification.category === 'emergency-stop') {
+                    if (decision.disposition === 'kill') {
                         if (sessionName) {
                             if (ctx.telegram?.onSentinelKillSession) {
                                 ctx.telegram.onSentinelKillSession(sessionName); // saves resume UUID + kills
@@ -14111,8 +14116,8 @@ export function createRoutes(ctx) {
                             ctx.operatorStopRecorder?.(Number(topicId));
                         }
                         catch { /* the stop must succeed regardless */ }
-                        if (classification.reason) {
-                            console.log(`[telegram-forward] sentinel stop reason: ${classification.reason}`);
+                        if (decision.reason) {
+                            console.log(`[telegram-forward] sentinel stop reason: ${decision.reason}`);
                         }
                         ctx.telegram?.sendToTopic(Number(topicId), sessionName
                             ? 'Session terminated.\n\nSend a new message to start a fresh session.'