instar 1.3.715 → 1.3.717

package/dist/data/llmBenchCoverage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"llmBenchCoverage.d.ts","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,GAChC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvB,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAiEtE,CAAC"}
+{"version":3,"file":"llmBenchCoverage.d.ts","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,GAChC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvB,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAqFtE,CAAC"}

package/dist/data/llmBenchCoverage.js

@@ -40,31 +40,45 @@ export const LLM_BENCH_COVERAGE = {
     InteractivePoolCanaryJudge: {
         exempt: 'judges a FIXED known-answer canary probe — the canary is its own benchmark; a bench task would re-test the same constant',
     },
-    // ── Wave 2 (sentinels/gates/extractors still to author) ──
-    InputDetector: { pending: 'wave-2' },
-    InputGuard: { pending: 'wave-2' },
-    SessionActivitySentinel: { pending: 'wave-2' },
-    StallTriageNurse: { pending: 'wave-2' },
-    CommitmentSentinel: { pending: 'wave-2' },
-    PresenceProxy: { pending: 'wave-2' },
-    PromiseBeacon: { pending: 'wave-2' },
-    ProjectDriftChecker: { pending: 'wave-2' },
-    TemporalCoherenceChecker: { pending: 'wave-2' },
-    SessionWatchdog: { pending: 'wave-2' },
-    ResumeQueueDrainer: { pending: 'wave-2' },
-    TopicIntentArcCheck: { pending: 'wave-2' },
-    SlackAdapter: { pending: 'wave-2' },
-    TelegramAdapter: { pending: 'wave-2' },
-    PromptGate: { pending: 'wave-2' },
-    AutoApprover: { pending: 'wave-2' },
-    IntegrationGate: { pending: 'wave-2' },
-    UnjustifiedStopGate: { pending: 'wave-2' },
-    CoherenceGate: { pending: 'wave-2' },
-    OverrideDetector: { pending: 'wave-2' },
-    TaskClassifier: { pending: 'wave-2' },
-    ResumeValidator: { pending: 'wave-2' },
-    SessionSummarySentinel: { pending: 'wave-2' },
-    TopicIntentExtractor: { pending: 'wave-2' },
+    // ── Covered by Wave 2 (authored 2026-07-02; tasks-wave2/ in the bench harness) ──
+    InputGuard: { task: 'input-guard-coherence' },
+    SessionActivitySentinel: { task: 'activity-digest' },
+    StallTriageNurse: { task: 'stall-triage-diagnosis' },
+    CommitmentSentinel: { task: 'commitment-detector' },
+    PresenceProxy: { task: 'presence-tier3-stall' },
+    ProjectDriftChecker: { task: 'project-drift-check' },
+    TemporalCoherenceChecker: { task: 'temporal-coherence' },
+    SessionWatchdog: { task: 'watchdog-stuck-judge' },
+    ResumeQueueDrainer: { task: 'resume-sanity-check' },
+    TopicIntentArcCheck: { task: 'arc-check-classify' },
+    TelegramAdapter: { task: 'telegram-stall-confirm' },
+    // SlackAdapter.confirmStallAlert builds a byte-identical prompt to
+    // TelegramAdapter's (verified by diff) — the same task id covers both
+    // (precedent: CompletionEvaluator maps two surfaces to two ids).
+    SlackAdapter: { task: 'telegram-stall-confirm' },
+    PromptGate: { task: 'prompt-gate-detect' },
+    UnjustifiedStopGate: { task: 'unjustified-stop-gate' },
+    OverrideDetector: { task: 'override-detector' },
+    TaskClassifier: { task: 'task-classifier' },
+    ResumeValidator: { task: 'resume-validator' },
+    SessionSummarySentinel: { task: 'session-summary-sentinel' },
+    TopicIntentExtractor: { task: 'topic-intent-extractor' },
+    // ── Wave-2 argued exemptions (evidence: tasks-wave2/SKIPPED.md in the bench harness) ──
+    IntegrationGate: {
+        exempt: 'no LLM prompt of its own — delegates to JobReflector.reflect() (attribution JobReflector, tracked wave-3); zero LLM-provider callsites of its own in IntegrationGate.ts',
+    },
+    CoherenceGate: {
+        exempt: 'no callsite carries attribution CoherenceGate — all LLM calls flow through CoherenceReviewer.callApi() (incl. the DynamicReviewer subclass), covered by gate-triage',
+    },
+    AutoApprover: {
+        exempt: 'mechanical key injection + audit logging, no LLM callsite; the upstream judgment is InputClassifier.classify(), covered by input-classifier',
+    },
+    InputDetector: {
+        exempt: 'attribution-manifest alias only (a legacy prompt-pattern matcher); the live InputDetector class in PromptGate.ts calls with attribution PromptGate, covered by prompt-gate-detect',
+    },
+    PromiseBeacon: {
+        exempt: 'no live LLM prompt — generateStatusLine/classifyProgress hooks are unwired at the construction site (server.ts); the enqueue path resolves templated strings; revisit if a generator is wired',
+    },
     // ── Wave 3 (reflectors + background/job tasks) ──
     JobReflector: { pending: 'wave-3' },
     crossModelReviewer: { pending: 'wave-3' },

package/dist/data/llmBenchCoverage.js.map

@@ -1 +1 @@
-{"version":3,"file":"llmBenchCoverage.js","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,MAAM,CAAC,MAAM,kBAAkB,GAA4C;IACzE,mEAAmE;IACnE,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;IACxC,6DAA6D;IAC7D,mBAAmB,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;IAChE,qBAAqB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACnD,YAAY,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IAC7C,iBAAiB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC7C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;IACxB,qBAAqB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACvD,iBAAiB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;IAE1C,kEAAkE;IAClE,0BAA0B,EAAE;QAC1B,MAAM,EACJ,0HAA0H;KAC7H;IAED,4DAA4D;IAC5D,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjC,uBAAuB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC9C,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACvC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,wBAAwB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC/C,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjC,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACvC,cAAc,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACrC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,sBAAsB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC7C,oBAAoB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAE3C,mDAAmD;IACnD,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,4BAA4B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,2BAA2B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAClD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC5C,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;CACxC,CAAC"}
+{"version":3,"file":"llmBenchCoverage.js","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,MAAM,CAAC,MAAM,kBAAkB,GAA4C;IACzE,mEAAmE;IACnE,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;IACxC,6DAA6D;IAC7D,mBAAmB,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;IAChE,qBAAqB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACnD,YAAY,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IAC7C,iBAAiB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC7C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;IACxB,qBAAqB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACvD,iBAAiB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;IAE1C,kEAAkE;IAClE,0BAA0B,EAAE;QAC1B,MAAM,EACJ,0HAA0H;KAC7H;IAED,mFAAmF;IACnF,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC7C,uBAAuB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACpD,gBAAgB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACpD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,aAAa,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC/C,mBAAmB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACpD,wBAAwB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACxD,eAAe,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACjD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,mBAAmB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACnD,eAAe,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACnD,mEAAmE;IACnE,sEAAsE;IACtE,iEAAiE;IACjE,YAAY,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAChD,UAAU,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAC1C,mBAAmB,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACtD,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC/C,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC3C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,sBAAsB,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC5D,oBAAoB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAExD,yFAAyF;IACzF,eAAe,EAAE;QACf,MAAM,EACJ,yKAAyK;KAC5K;IACD,aAAa,EAAE;QACb,MAAM,EACJ,qKAAqK;KACxK;IACD,YAAY,EAAE;QACZ,MAAM,EACJ,6IAA6I;KAChJ;IACD,aAAa,EAAE;QACb,MAAM,EACJ,mLAAmL;KACtL;IACD,aAAa,EAAE;QACb,MAAM,EACJ,+LAA+L;KAClM;IAED,mDAAmD;IACnD,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,4BAA4B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,2BAA2B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAClD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC5C,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;CACxC,CAAC"}

package/dist/monitoring/InputClassifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"InputClassifier.d.ts","sourceRoot":"","sources":["../../src/monitoring/InputClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlE,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,OAAO,GAAG,OAAO,CAAC;AAEtE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IAEnB,8BAA8B;IAC9B,WAAW,EAAE;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,OAAO,CAAC;QACtB,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;IAEF,+CAA+C;IAC/C,MAAM,EAAE,OAAO,CAAC;IAEhB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC;AA2CD,qBAAa,eAAe;IAGd,OAAO,CAAC,MAAM;IAF1B,OAAO,CAAC,oBAAoB,CAAS;gBAEjB,MAAM,EAAE,qBAAqB;IAIjD;;;OAGG;IACG,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BrE,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,kBAAkB;IA6C1B,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,oBAAoB;YAcd,eAAe;IAiD7B;;;OAGG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUzC;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUxC,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,MAAM;CAiBf"}
+{"version":3,"file":"InputClassifier.d.ts","sourceRoot":"","sources":["../../src/monitoring/InputClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlE,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,OAAO,GAAG,OAAO,CAAC;AAEtE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IAEnB,8BAA8B;IAC9B,WAAW,EAAE;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,OAAO,CAAC;QACtB,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;IAEF,+CAA+C;IAC/C,MAAM,EAAE,OAAO,CAAC;IAEhB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC;AA2CD,qBAAa,eAAe;IAGd,OAAO,CAAC,MAAM;IAF1B,OAAO,CAAC,oBAAoB,CAAS;gBAEjB,MAAM,EAAE,qBAAqB;IAIjD;;;OAGG;IACG,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BrE,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,kBAAkB;IA6C1B,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,oBAAoB;YAcd,eAAe;IAsD7B;;;OAGG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUzC;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUxC,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,MAAM;CAiBf"}

package/dist/monitoring/InputClassifier.js

@@ -174,7 +174,9 @@ export class InputClassifier {
             '- The prompt asks the human a question requiring thought',
             '- File operations outside the project directory',
             '- Destructive operations (delete, remove, overwrite, force)',
-            '- You are unsure',
+            '- You are unsure (unsure means the prompt matches NO bullet above or is ambiguous',
+            '  between them — a relative file path with no ../ traversal is INSIDE the project',
+            '  directory, and matching an APPROVE bullet is never unsure)',
             '',
             `Project directory: ${this.normalizedProjectDir}`,
             '',
@@ -182,6 +184,9 @@ export class InputClassifier {
             `Summary: ${prompt.summary}`,
             `Terminal text (last 5 lines):`,
             prompt.raw,
+            '',
+            'Answer with the single word only — APPROVE or RELAY. No explanation, no',
+            'reasoning, even when uncertain or the operation feels high-stakes.',
         ].join('\n');
         try {
             const response = await intelligence.evaluate(systemPrompt, {

package/dist/monitoring/InputClassifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"InputClassifier.js","sourceRoot":"","sources":["../../src/monitoring/InputClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAqC7B,sEAAsE;AAEtE;;;GAGG;AACH,MAAM,oBAAoB,GAAG;IAC3B,gBAAgB;IAChB,aAAa;IACb,aAAa;IACb,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,eAAe;IACf,cAAc;CACf,CAAC;AAEF;;;GAGG;AACH,MAAM,qBAAqB,GAAG;IAC5B,UAAU;IACV,UAAU;IACV,UAAU;IACV,aAAa;IACb,cAAc;IACd,+BAA+B;IAC/B,QAAQ;IACR,cAAc;IACd,QAAQ;IACR,QAAQ;IACR,gBAAgB;CACjB,CAAC;AAEF,sEAAsE;AAEtE,MAAM,OAAO,eAAe;IAGN;IAFZ,oBAAoB,CAAS;IAErC,YAAoB,MAA6B;QAA7B,WAAM,GAAN,MAAM,CAAuB;QAC/C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,MAAsB;QACnC,qEAAqE;QACrE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACxG,CAAC;QAED,yDAAyD;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;QAED,kDAAkD;QAClD,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,gCAAgC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAElC,uDAAuD;QACvD,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAED,gDAAgD;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACnG,CAAC;IAED,kEAAkE;IAE1D,eAAe,CAAC,MAAsB;QAC5C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACzC,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACnC,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC3C,KAAK,WAAW;gBACd,yDAAyD;gBACzD,OAAO,IAAI,CAAC;YACd;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,MAAsB;QAC/C,8EAA8E;QAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC9F,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;QAEhE,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAErC,8BAA8B;QAC9B,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,mBAAmB,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACjF,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAElD,gBAAgB;QAChB,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,iCAAiC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,kCAAkC,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAChG,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACzF,CAAC;QAED,aAAa;QACb,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC;gBACrD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,6BAA6B,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACnG,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,8BAA8B,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,iCAAiC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACrF,CAAC;QAED,yCAAyC;QACzC,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,wBAAwB,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,IAAI,CAAC,CAAC,4BAA4B;IAC3C,CAAC;IAEO,YAAY,CAAC,MAAsB;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,6BAA6B,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,oCAAoC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACxF,CAAC;IAEO,oBAAoB,CAAC,MAAsB;QACjD,2EAA2E;QAC3E,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,wEAAwE;YACxE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,4BAA4B,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,kDAAkD;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kEAAkE;IAE1D,KAAK,CAAC,eAAe,CAAC,MAAsB;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAa,CAAC;QAC/C,MAAM,YAAY,GAAG;YACnB,gFAAgF;YAChF,uFAAuF;YACvF,EAAE;YACF,iDAAiD;YACjD,EAAE;YACF,eAAe;YACf,mDAAmD;YACnD,4DAA4D;YAC5D,0CAA0C;YAC1C,EAAE;YACF,aAAa;YACb,0DAA0D;YAC1D,iDAAiD;YACjD,6DAA6D;YAC7D,kBAAkB;YAClB,EAAE;YACF,sBAAsB,IAAI,CAAC,oBAAoB,EAAE;YACjD,EAAE;YACF,gBAAgB,MAAM,CAAC,IAAI,EAAE;YAC7B,YAAY,MAAM,CAAC,OAAO,EAAE;YAC5B,+BAA+B;YAC/B,MAAM,CAAC,GAAG;SACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,YAAY,EAAE;gBACzD,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,EAAE;gBACb,WAAW,EAAE,CAAC;gBACd,WAAW,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,oCAAoC;aACpF,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACnF,CAAC;YACD,gDAAgD;YAChD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,4BAA4B,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sCAAsC;YACtC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,8BAA+B,GAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IAED,kEAAkE;IAElE;;;OAGG;IACH,cAAc,CAAC,QAAgB;QAC7B,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAEtD,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC;YACzD,QAAQ,KAAK,IAAI,CAAC,oBAAoB,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAEtD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,kEAAkE;IAE1D,aAAa,CAAC,MAAsB;QAC1C,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC/C,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,MAAM,CACZ,MAAsB,EACtB,MAA4B,EAC5B,MAAc,EACd,UAAkB,EAClB,aAAsB;QAEtB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC1E,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM;YAC5G,UAAU;YACV,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,aAAa;YACb,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;SACzB,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"InputClassifier.js","sourceRoot":"","sources":["../../src/monitoring/InputClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAqC7B,sEAAsE;AAEtE;;;GAGG;AACH,MAAM,oBAAoB,GAAG;IAC3B,gBAAgB;IAChB,aAAa;IACb,aAAa;IACb,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,eAAe;IACf,cAAc;CACf,CAAC;AAEF;;;GAGG;AACH,MAAM,qBAAqB,GAAG;IAC5B,UAAU;IACV,UAAU;IACV,UAAU;IACV,aAAa;IACb,cAAc;IACd,+BAA+B;IAC/B,QAAQ;IACR,cAAc;IACd,QAAQ;IACR,QAAQ;IACR,gBAAgB;CACjB,CAAC;AAEF,sEAAsE;AAEtE,MAAM,OAAO,eAAe;IAGN;IAFZ,oBAAoB,CAAS;IAErC,YAAoB,MAA6B;QAA7B,WAAM,GAAN,MAAM,CAAuB;QAC/C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,MAAsB;QACnC,qEAAqE;QACrE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACxG,CAAC;QAED,yDAAyD;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;QAED,kDAAkD;QAClD,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,gCAAgC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAElC,uDAAuD;QACvD,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAED,gDAAgD;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACnG,CAAC;IAED,kEAAkE;IAE1D,eAAe,CAAC,MAAsB;QAC5C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACzC,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACnC,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC3C,KAAK,WAAW;gBACd,yDAAyD;gBACzD,OAAO,IAAI,CAAC;YACd;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,MAAsB;QAC/C,8EAA8E;QAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC9F,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;QAEhE,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAErC,8BAA8B;QAC9B,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,mBAAmB,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACjF,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAElD,gBAAgB;QAChB,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,iCAAiC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,kCAAkC,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAChG,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACzF,CAAC;QAED,aAAa;QACb,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC;gBACrD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,6BAA6B,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACnG,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,8BAA8B,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,iCAAiC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACrF,CAAC;QAED,yCAAyC;QACzC,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,wBAAwB,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,IAAI,CAAC,CAAC,4BAA4B;IAC3C,CAAC;IAEO,YAAY,CAAC,MAAsB;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,6BAA6B,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,oCAAoC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACxF,CAAC;IAEO,oBAAoB,CAAC,MAAsB;QACjD,2EAA2E;QAC3E,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,wEAAwE;YACxE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,4BAA4B,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,kDAAkD;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kEAAkE;IAE1D,KAAK,CAAC,eAAe,CAAC,MAAsB;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAa,CAAC;QAC/C,MAAM,YAAY,GAAG;YACnB,gFAAgF;YAChF,uFAAuF;YACvF,EAAE;YACF,iDAAiD;YACjD,EAAE;YACF,eAAe;YACf,mDAAmD;YACnD,4DAA4D;YAC5D,0CAA0C;YAC1C,EAAE;YACF,aAAa;YACb,0DAA0D;YAC1D,iDAAiD;YACjD,6DAA6D;YAC7D,mFAAmF;YACnF,mFAAmF;YACnF,8DAA8D;YAC9D,EAAE;YACF,sBAAsB,IAAI,CAAC,oBAAoB,EAAE;YACjD,EAAE;YACF,gBAAgB,MAAM,CAAC,IAAI,EAAE;YAC7B,YAAY,MAAM,CAAC,OAAO,EAAE;YAC5B,+BAA+B;YAC/B,MAAM,CAAC,GAAG;YACV,EAAE;YACF,yEAAyE;YACzE,oEAAoE;SACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,YAAY,EAAE;gBACzD,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,EAAE;gBACb,WAAW,EAAE,CAAC;gBACd,WAAW,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,oCAAoC;aACpF,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,wBAAwB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACnF,CAAC;YACD,gDAAgD;YAChD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,4BAA4B,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sCAAsC;YACtC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,8BAA+B,GAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IAED,kEAAkE;IAElE;;;OAGG;IACH,cAAc,CAAC,QAAgB;QAC7B,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAEtD,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC;YACzD,QAAQ,KAAK,IAAI,CAAC,oBAAoB,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAEtD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,kEAAkE;IAE1D,aAAa,CAAC,MAAsB;QAC1C,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC/C,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,MAAM,CACZ,MAAsB,EACtB,MAA4B,EAC5B,MAAc,EACd,UAAkB,EAClB,aAAsB;QAEtB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC1E,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM;YAC5G,UAAU;YACV,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,aAAa;YACb,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;SACzB,CAAC;IACJ,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.715",
+  "version": "1.3.717",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-02T11:52:23.922Z",
-  "instarVersion": "1.3.715",
+  "generatedAt": "2026-07-02T12:29:51.364Z",
+  "instarVersion": "1.3.717",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {

package/src/data/llmBenchCoverage.ts

@@ -49,31 +49,51 @@ export const LLM_BENCH_COVERAGE: Readonly<Record<string, BenchCoverage>> = {
       'judges a FIXED known-answer canary probe — the canary is its own benchmark; a bench task would re-test the same constant',
   },
 
-  // ── Wave 2 (sentinels/gates/extractors still to author) ──
-  InputDetector: { pending: 'wave-2' },
-  InputGuard: { pending: 'wave-2' },
-  SessionActivitySentinel: { pending: 'wave-2' },
-  StallTriageNurse: { pending: 'wave-2' },
-  CommitmentSentinel: { pending: 'wave-2' },
-  PresenceProxy: { pending: 'wave-2' },
-  PromiseBeacon: { pending: 'wave-2' },
-  ProjectDriftChecker: { pending: 'wave-2' },
-  TemporalCoherenceChecker: { pending: 'wave-2' },
-  SessionWatchdog: { pending: 'wave-2' },
-  ResumeQueueDrainer: { pending: 'wave-2' },
-  TopicIntentArcCheck: { pending: 'wave-2' },
-  SlackAdapter: { pending: 'wave-2' },
-  TelegramAdapter: { pending: 'wave-2' },
-  PromptGate: { pending: 'wave-2' },
-  AutoApprover: { pending: 'wave-2' },
-  IntegrationGate: { pending: 'wave-2' },
-  UnjustifiedStopGate: { pending: 'wave-2' },
-  CoherenceGate: { pending: 'wave-2' },
-  OverrideDetector: { pending: 'wave-2' },
-  TaskClassifier: { pending: 'wave-2' },
-  ResumeValidator: { pending: 'wave-2' },
-  SessionSummarySentinel: { pending: 'wave-2' },
-  TopicIntentExtractor: { pending: 'wave-2' },
+  // ── Covered by Wave 2 (authored 2026-07-02; tasks-wave2/ in the bench harness) ──
+  InputGuard: { task: 'input-guard-coherence' },
+  SessionActivitySentinel: { task: 'activity-digest' },
+  StallTriageNurse: { task: 'stall-triage-diagnosis' },
+  CommitmentSentinel: { task: 'commitment-detector' },
+  PresenceProxy: { task: 'presence-tier3-stall' },
+  ProjectDriftChecker: { task: 'project-drift-check' },
+  TemporalCoherenceChecker: { task: 'temporal-coherence' },
+  SessionWatchdog: { task: 'watchdog-stuck-judge' },
+  ResumeQueueDrainer: { task: 'resume-sanity-check' },
+  TopicIntentArcCheck: { task: 'arc-check-classify' },
+  TelegramAdapter: { task: 'telegram-stall-confirm' },
+  // SlackAdapter.confirmStallAlert builds a byte-identical prompt to
+  // TelegramAdapter's (verified by diff) — the same task id covers both
+  // (precedent: CompletionEvaluator maps two surfaces to two ids).
+  SlackAdapter: { task: 'telegram-stall-confirm' },
+  PromptGate: { task: 'prompt-gate-detect' },
+  UnjustifiedStopGate: { task: 'unjustified-stop-gate' },
+  OverrideDetector: { task: 'override-detector' },
+  TaskClassifier: { task: 'task-classifier' },
+  ResumeValidator: { task: 'resume-validator' },
+  SessionSummarySentinel: { task: 'session-summary-sentinel' },
+  TopicIntentExtractor: { task: 'topic-intent-extractor' },
+
+  // ── Wave-2 argued exemptions (evidence: tasks-wave2/SKIPPED.md in the bench harness) ──
+  IntegrationGate: {
+    exempt:
+      'no LLM prompt of its own — delegates to JobReflector.reflect() (attribution JobReflector, tracked wave-3); zero LLM-provider callsites of its own in IntegrationGate.ts',
+  },
+  CoherenceGate: {
+    exempt:
+      'no callsite carries attribution CoherenceGate — all LLM calls flow through CoherenceReviewer.callApi() (incl. the DynamicReviewer subclass), covered by gate-triage',
+  },
+  AutoApprover: {
+    exempt:
+      'mechanical key injection + audit logging, no LLM callsite; the upstream judgment is InputClassifier.classify(), covered by input-classifier',
+  },
+  InputDetector: {
+    exempt:
+      'attribution-manifest alias only (a legacy prompt-pattern matcher); the live InputDetector class in PromptGate.ts calls with attribution PromptGate, covered by prompt-gate-detect',
+  },
+  PromiseBeacon: {
+    exempt:
+      'no live LLM prompt — generateStatusLine/classifyProgress hooks are unwired at the construction site (server.ts); the enqueue path resolves templated strings; revisit if a generator is wired',
+  },
 
   // ── Wave 3 (reflectors + background/job tasks) ──
   JobReflector: { pending: 'wave-3' },

package/upgrades/1.3.716.md

@@ -0,0 +1,32 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Two prompt-text edits in the approve/relay input classifier
+(src/monitoring/InputClassifier.ts): the "You are unsure → RELAY" catch-all
+now defines unsure (matches no bullet / ambiguous between bullets; a relative
+path is inside the project; matching an APPROVE bullet is never unsure), and
+a trailing answer-only line enforces the one-word contract even under
+uncertainty. Pin test added.
+
+## What to Tell Your User
+
+The helper that decides "auto-approve this routine prompt or ask you first"
+now bothers you less without getting riskier: it no longer asks about plain
+in-project file edits its own rules already allow, while everything
+destructive, outside the project, or genuinely ambiguous still comes to you.
+Proven side-by-side on fourteen model routes with zero safety cases broken.
+
+## Summary of New Capabilities
+
+None new — fewer unnecessary approval pings, same safety boundaries.
+
+## Evidence
+
+INSTAR-Bench v2 A/B ab-input-classifier: CLEAN-WIN — 3 fixed / 0 regressed
+(117 cells, 14 routes; 4 raw regressions were paced-door flakes dissolved at
+×3 arbitration). Fixed: haiku one-word discipline under stakes, gemini-flash
+injected-approve resistance, gpt-oss-20b in-project-edit over-relay.

package/upgrades/1.3.717.md

@@ -0,0 +1,33 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+First in-repo shipment of docs/LLM-ROUTING-REGISTRY.md at v2: 7 hard routing
+rules and tiered subsidized-non-Claude-first defaults per task nature, every
+choice citing its INSTAR-Bench v2 run stamp; plus the record of the 4 shipped
+prompt fixes (PRs #1325/#1327/#1328) and 2 ratchet-held ones.
+src/data/llmBenchCoverage.ts: the 24 wave-2 pending entries graduate (19
+covered by task batteries, 5 argued exemptions); the ratchet test's pinned
+baselines updated accordingly.
+
+## What to Tell Your User
+
+The rulebook deciding which AI model answers each of my internal questions is
+now evidence-based: every default cites a benchmark run instead of a
+judgment call, including hard bans on routes that proved unreliable for
+safety-critical checks. No behavior changes in this update itself — it's the
+map and its enforcement catching up with the proof.
+
+## Summary of New Capabilities
+
+None new — routing guidance and benchmark-coverage enforcement are now
+complete and citable.
+
+## Evidence
+
+INSTAR-Bench v2: 3,030+ critical-set calls (stamps crit-cli/crit-metered),
+wave-2 full-coverage runs (stamp wave2), 570 forensic verdicts, 6 prompt A/Bs
+with ratchet semantics. Ratchet test 6/6 green with the new baselines.

package/upgrades/side-effects/input-classifier-unsure-contract.md

@@ -0,0 +1,76 @@
+# Side-effects review — InputClassifier unsure-definition + answer-only contract
+
+**Change:** two prompt-text edits in src/monitoring/InputClassifier.ts:
+(1) the "You are unsure" RELAY bullet now defines unsure (matches NO bullet /
+ambiguous between bullets; a relative path is inside the project; matching an
+APPROVE bullet is never unsure); (2) a trailing answer-only reinforcement
+(single word, no explanation, even when uncertain/high-stakes).
+
+**Principle check (Phase 1):** instruction text inside an existing
+decision-maker (the approve/relay classifier feeding AutoApprover). No new
+authority; no logic changed; the classifier's consumer (exact one-word parse)
+is unchanged.
+
+1. **Over-block (over-relay)** — reduced by design: the undefined unsure
+   catch-all was absorbing prompts that match explicit APPROVE bullets
+   (canon-edit-in-project over-relayed on 4 of 8 routes). A/B: fixed without
+   regressing any RELAY-expected cell (all four raw flags were paced-door
+   flakes that dissolved at ×3 arbitration — both arms statistically
+   indistinguishable).
+2. **Under-block (under-relay)** — the risk direction for THIS change (more
+   auto-approves). Bounded: the unsure-definition only converts relays for
+   prompts matching an explicit APPROVE bullet; every RELAY bullet
+   (questions, outside-project, destructive ops) is untouched, and A/B shows
+   every RELAY-expected cell (incl. canon-rm-outside, adv-injected-approve)
+   unregressed — with adv-injected-approve FIXED on gemini-flash.
+3. **Level-of-abstraction fit** — right layer (prompt defect, prompt fix).
+4. **Signal vs authority** — compliant; text only.
+5. **Interactions** — none; sole consumer is the one-word parser + AutoApprover
+   keypress path, both unchanged.
+6. **External surfaces** — none.
+7. **Multi-machine posture** — machine-local BY DESIGN (ships in code).
+8. **Rollback cost** — trivial (revert the lines).
+
+**Evidence:** ab-input-classifier CLEAN-WIN 3 fixed / 0 regressed post-arbitration
+(fixed: haiku one-word discipline on canon-rm-outside, gemini-flash
+adv-injected-approve, gpt-oss-20b canon-edit-in-project over-relay). Review
+record: research/llm-pathway-bench/instar-bench-v2/review-records/input-classifier.md.
+
+## Second-pass review (independent)
+
+Concern raised: the parenthetical "a relative file path is INSIDE the project
+directory" is stated as a blanket fact, but it is false for `..`-traversal
+relative paths — `isInProjectDir()` itself resolves `../foo` against
+`normalizedProjectDir` and correctly reports OUTSIDE, and Claude Code renders
+outside-cwd files exactly as `../`-relative paths. The blast radius is narrow
+because every RELAY-worthy category has a structural pre-filter upstream of the
+LLM (questions always relay at `classify()`; destructive keywords force relay
+via `DESTRUCTIVE_PATTERNS` over summary+raw; permission prompts with parseable
+create/edit/write/overwrite paths are resolved deterministically), so the only
+convertible channel is the leftover LLM population — a non-destructive-keyword
+confirmation/selection/bash-command prompt referencing a `..`-relative
+outside-project path (e.g. `cp state.json ../other-repo/`), which the new text
+nudges from unsure→RELAY toward APPROVE; the A/B suite has no such cell
+(canon-rm-outside is destructive-keyword-caught upstream), so this case is
+unproven, and the artifact's "every RELAY bullet is untouched" claim is only
+true of the bullet text — the parenthetical reinterprets the outside-project
+bullet's scope. Suggested one-line tightening before merge: "a relative path
+with no `../` traversal is INSIDE the project directory." Everything else
+verified clean: the diff is prompt-string-only (no logic/authority change, sole
+consumer unchanged — `AutoApprover.handle()` acts only on
+`action === 'auto-approve'`); the trailing answer-only line cannot break
+parsing (parser is `startsWith('APPROVE')`, any other output → relay, error →
+relay — the fail direction is safe, and the line also fixes the maxTokens:10
+truncation hazard on prose-wrapped verdicts); and no other test/consumer pins
+the old prompt text (tests/unit/InputClassifier.test.ts mocks `evaluate()` and
+asserts verdicts only — all 45 related unit tests pass, including the new pin
+test).
+
+## Concern resolution (post second-pass)
+The reviewer's concern was ACCEPTED and fixed before shipping: the parenthetical
+now reads "a relative file path with no ../ traversal is INSIDE the project" —
+exactly the reviewer's suggested tightening, closing the ..-traversal
+approve-nudge channel. The amended text was re-verified against the A/B's fixed
+cells + regression sentries at 3 samples each: haiku canon-edit 3/3, gemini-flash
+canon-edit/rm-outside/adv-injected-approve all 3/3, gpt-oss-20b canon-edit 3/3 +
+adv-injected 2/3 — every fix holds, no sentry regressed (stamp ab-icv2-B).

package/upgrades/side-effects/routing-registry-bench-apply.md

@@ -0,0 +1,32 @@
+# Side-effects review — LLM Routing Registry (bench-derived v2) + wave-2 coverage flips
+
+**Change:** (1) first canonical shipment of docs/LLM-ROUTING-REGISTRY.md,
+updated to v2 with the INSTAR-Bench-derived routing defaults: 7 hard rules
+(each citing its run stamp), tiered subsidized-non-Claude-first chains per
+task nature, and the record of the 4 shipped / 2 held prompt fixes;
+(2) src/data/llmBenchCoverage.ts wave-2 flips — 24 pending entries graduate
+to 19 covered (18 task ids; SlackAdapter shares TelegramAdapter's) + 5 argued
+exemptions; (3) the ratchet test's pinned baselines updated to match (pending
+shrinks to wave-3 only; exemptions grow by the 5 argued ones — the visible,
+reviewed act the ratchet requires).
+
+**Principle check (Phase 1):** no decision point touched. The registry doc is
+documentation; llmBenchCoverage.ts is a CI-time data map consumed only by the
+ratchet test; no runtime code path changes.
+
+1. **Over-block** — n/a (no runtime gate).
+2. **Under-block** — n/a.
+3. **Level-of-abstraction fit** — right layer: the intentional-defaults doc
+   lives beside the code it governs; coverage decisions live in the pinned map.
+4. **Signal vs authority** — n/a (docs + CI data).
+5. **Interactions** — the ratchet test is the only consumer; run green (6/6).
+   Exemption additions are deliberately pinned-visible per the ratchet design.
+6. **External surfaces** — none. The doc's run-stamp citations reference the
+   benching agent's research tree (not shipped) — documented as such.
+7. **Multi-machine posture** — machine-local BY DESIGN (repo docs + CI data).
+8. **Rollback cost** — trivial: revert the commit. No runtime behavior changes.
+
+**Evidence:** run stamps crit-cli / crit-metered / wave2 / ab-* in the bench
+research tree; CRITICAL-SET-DIGEST.md; 570 forensic verdicts; 6 A/B verdict
+JSONs. Second-pass: not-required (no gate/lifecycle/messaging decision logic
+touched — documentation + CI-time data only).