instar 1.3.752 → 1.3.753

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiDH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAyBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA8H7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA2/CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CAijBN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAqulBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiDH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAyBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA8H7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA2/CD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GACpD,IAAI,CAijBN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ylBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -20173,13 +20173,57 @@ export async function startServer(options) {
                     // routed message re-places onto the pinned machine via the already-wired
                     // placeAndClaim → spawnOnMachine → owner-side onAccepted resume path.
                     // Inert unless the rollout stage is past 'dark' (gated at the call site).
-                    const nickMod = await import('../core/NicknameCommand.js');
                     const transferMod = await import('../core/TransferByNickname.js');
+                    const moveIntentMod = await import('../core/MoveIntentClassifier.js');
                     const autonomousSessionsModule = await import('../core/AutonomousSessions.js');
                     const pinMod = await import('../core/TopicPlacementPinStore.js');
                     const pinMutationMod = await import('../core/TopicPinMutation.js');
                     const relocSetMod = await import('../core/RelocationNicknameSet.js');
                     const nickAssignMod = await import('../core/NicknameAssigner.js');
+                    // §L4 move-intent recognizer (docs/specs/nickname-move-intent-llm-rebuild.md):
+                    // the "move/run/pin this on <nickname>" decision is inferred by an LLM
+                    // over the message + recent conversation (MoveIntentClassifier), NOT a
+                    // keyword verb list (the 2026-07-03 hijack of "keep the work on the
+                    // laptop"). Dev-gated dark (resolveDevAgentGate) + dry-run FIRST: while
+                    // dark or dry-run, the message ALWAYS passes through (never hijacked);
+                    // the classifier still runs on a dev agent and LOGS would-hijack vs
+                    // would-pass for the soak. Fail-OPEN on any uncertainty.
+                    const _moveIntentCfg = config.multiMachine?.sessionPool?.moveIntent;
+                    const _moveIntentEnabled = resolveDevAgentGate(_moveIntentCfg?.enabled, config);
+                    const _moveIntentDryRun = _moveIntentCfg?.dryRun ?? true;
+                    const _moveIntentMinConfidence = _moveIntentCfg?.minConfidence ?? 0.85;
+                    const _moveIntentTimeoutMs = _moveIntentCfg?.timeoutMs ?? 4000;
+                    const _moveIntentContextTurns = _moveIntentCfg?.contextWindowTurns ?? 6;
+                    const _moveIntentModelTier = _moveIntentCfg?.modelTier ?? 'fast';
+                    const _logMoveIntent = (topicId, text, result, acted) => {
+                        try {
+                            // Log ONLY LLM-engaged decisions (the soak signal). A prefilter-skip
+                            // is always a would-pass and is the bulk of inbound traffic — logging
+                            // it would over-collect a message preview for every message. Skipping
+                            // it cuts volume AND the privacy surface to messages that named a
+                            // machine and actually reached the classifier.
+                            if (result.source === 'prefilter-skip')
+                                return;
+                            const logDir = path.join(config.stateDir, 'logs');
+                            fs.mkdirSync(logDir, { recursive: true });
+                            const decision = result.isCommand ? (acted ? 'hijack' : 'would-hijack') : 'pass';
+                            const line = JSON.stringify({
+                                ts: new Date().toISOString(),
+                                topicId,
+                                decision,
+                                dryRun: _moveIntentDryRun,
+                                source: result.source,
+                                intent: result.intent,
+                                target: result.targetNickname,
+                                confidence: result.confidence,
+                                reason: result.reason,
+                                // Truncated, whitespace-collapsed preview for soak inspection.
+                                textPreview: String(text).replace(/\s+/g, ' ').trim().slice(0, 80),
+                            });
+                            fs.appendFileSync(path.join(logDir, 'move-intent.jsonl'), line + '\n');
+                        }
+                        catch { /* audit is observability — never gates the message path */ }
+                    };
                     _topicPinStore = new pinMod.TopicPlacementPinStore({
                         filePath: path.join(config.stateDir, 'session-pool', 'topic-pins.json'),
                         // U4.1 §2C (fixes defect 3): a corrupt pin file quarantines ASIDE +
@@ -20237,7 +20281,37 @@ export async function startServer(options) {
                             selfMachineId: meshSelfId,
                             selfNickname: resolveSelfNickname(caps),
                         });
-                        const cmd = nickMod.recognizeNicknameCommand(text, knownNicknames);
+                        // Dark gate: when the recognizer isn't enabled (fleet default), never
+                        // hijack — pass the message through to the agent.
+                        if (!_moveIntentEnabled)
+                            return { handled: false };
+                        // Bounded window of recent turns so context-dependent commands ("yes,
+                        // move it") can resolve their target. Best-effort — the classifier
+                        // works on the message alone if history is unavailable.
+                        let conversationContext = [];
+                        try {
+                            const hist = telegram?.getTopicHistory(topicId, _moveIntentContextTurns) ?? [];
+                            conversationContext = hist.map((h) => ({ fromUser: !!h.fromUser, text: String(h.text ?? '') }));
+                        }
+                        catch { /* @silent-fallback-ok — context is best-effort; classify on the message alone */ }
+                        const moveResult = await moveIntentMod.classifyRelocationIntent({
+                            text,
+                            knownNicknames,
+                            conversationContext,
+                            intelligence: _sharedIntelligence,
+                            minConfidence: _moveIntentMinConfidence,
+                            timeoutMs: _moveIntentTimeoutMs,
+                            maxContextTurns: _moveIntentContextTurns,
+                            modelTier: _moveIntentModelTier,
+                        });
+                        const _willAct = moveResult.isCommand && !_moveIntentDryRun;
+                        _logMoveIntent(topicId, text, moveResult, _willAct);
+                        // Dry-run (the soak): log would-hijack vs would-pass, but pass the
+                        // message through untouched. Real hijacking needs a deliberate
+                        // dryRun:false, AND fail-open means uncertainty never hijacks.
+                        if (!_willAct)
+                            return { handled: false };
+                        const cmd = moveIntentMod.toNicknameCommand(moveResult);
                         if (!cmd)
                             return { handled: false };
                         const plan = transferMod.planTransferByNickname(cmd, {