instar 1.3.725 → 1.3.727

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA+CH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAyBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA6H7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAi/CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CAijBN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA44jBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA+CH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAyBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA6H7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAi/CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CAijBN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAq8jBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -6651,7 +6651,7 @@ export async function startServer(options) {
                     const slackCfg = slackConfig.config;
                     const pgCfg = slackCfg.permissionGate;
                     if (pgCfg && (pgCfg.observeOnly || pgCfg.enforce)) {
-                        const { SlackPermissionObserver, SlackPrincipalResolver, SlackPermissionGate, PermissionDecisionLedger, RolePolicy, HeuristicIntentClassifier, LlmIntentClassifier, HeuristicAnomalyScorer, RelationshipBehaviorStore, RelationshipAnomalyScorer, MandateBackedGrantStore, } = await import('../permissions/index.js');
+                        const { SlackPermissionObserver, SlackPrincipalResolver, SlackPermissionGate, PermissionDecisionLedger, RolePolicy, HeuristicIntentClassifier, LlmIntentClassifier, HeuristicAnomalyScorer, RelationshipBehaviorStore, RelationshipAnomalyScorer, MandateBackedGrantStore, TestWorkspacePrincipalSource, ChainedUserLookup, } = await import('../permissions/index.js');
                         // Own UserManager instance for verified-principal resolution (the
                         // Telegram-block userManager is out of scope here). Reads users.json.
                         const slackUserManager = new UserManager(config.stateDir, config.users);
@@ -6742,10 +6742,51 @@ export async function startServer(options) {
                             });
                             console.log(`[slack] relationship-aware anomaly scorer attached (observe-only baseline; LLM style check ${raCfg.useLlmStyleCheck ? 'ON' : 'off'}; poisoning-resistance: min-age ${pr.minBaselineAgeDays ?? 7}d, rate-cap ${pr.maxObservationsPerWindow ?? 50}/window, decay ${pr.decayHalfLifeWindows ?? 30}w)`);
                         }
+                        // ── Principal resolution: production registry first; optionally chained
+                        // with the sanctioned test-cast source (roadmap 0.3 entry condition).
+                        // The cast source is workspace-scoped (VERIFIED connected team id from
+                        // auth.test — fail-closed until verified), fixture-marker-only (the
+                        // partition invariant: the production registry refuses fixtures, this
+                        // source accepts ONLY fixtures — one identity space, two disjoint homes),
+                        // and read-only (it never touches users.json; the fixture-identity
+                        // guard's production invariant is fully intact).
+                        const productionLookup = {
+                            resolveFromSlackUserId: (id) => slackUserManager.resolveFromSlackUserId(id),
+                        };
+                        let principalLookup = productionLookup;
+                        const tcCfg = pgCfg.testCast;
+                        if (tcCfg && typeof tcCfg.workspaceId === 'string' && tcCfg.workspaceId.trim()
+                            && Array.isArray(tcCfg.principals) && tcCfg.principals.length > 0) {
+                            try {
+                                const adapterForScope = slackAdapter;
+                                const testCastSource = new TestWorkspacePrincipalSource({
+                                    workspaceId: tcCfg.workspaceId,
+                                    testWorkspace: tcCfg.testWorkspace === true,
+                                    principals: tcCfg.principals,
+                                    getVerifiedWorkspaceId: () => adapterForScope?.getConnectedTeamId() ?? null,
+                                });
+                                if (testCastSource.disabled) {
+                                    // Fail-closed: the source already logged the single loud line
+                                    // (missing "testWorkspace: true"). Stay production-registry-only —
+                                    // do NOT attach an inert chain, so behavior is byte-identical to
+                                    // having no cast configured.
+                                }
+                                else {
+                                    for (const r of testCastSource.rejected) {
+                                        console.warn(`[slack] test-cast principal REFUSED (${r.reason}): "${r.slackUserId}" — the cast admits fixture-marker identities only (see users/testIdentityMarkers.ts)`);
+                                    }
+                                    principalLookup = new ChainedUserLookup([productionLookup, testCastSource]);
+                                    console.log(`[slack] permission-gate test-cast principal source attached: workspace ${tcCfg.workspaceId}, ` +
+                                        `${testCastSource.size} seat(s) admitted, ${testCastSource.rejected.length} refused ` +
+                                        `(production registry takes precedence; cast inert until the connected team id is verified)`);
+                                }
+                            }
+                            catch (tce) {
+                                console.warn('[slack] test-cast principal source wiring skipped:', tce.message);
+                            }
+                        }
                         const observer = new SlackPermissionObserver({
-                            resolver: new SlackPrincipalResolver({
-                                resolveFromSlackUserId: (id) => slackUserManager.resolveFromSlackUserId(id),
-                            }),
+                            resolver: new SlackPrincipalResolver(principalLookup),
                             gate: new SlackPermissionGate({
                                 rolePolicy: new RolePolicy(),
                                 classifier: intentClassifier,