instar 1.3.754 → 1.3.756

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiDH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAyBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA6H7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA2/CD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAonBN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ylBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAuDH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AAyBjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA6H7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAgmDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAonBN;AA2lBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAs0lBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -32,6 +32,7 @@ import { PrHandLease } from '../core/PrHandLease.js';
 import { ConversationRegistry } from '../core/ConversationRegistry.js';
 import { claimSuspensionExcludesPin } from '../core/TopicClaimAnnotationStore.js';
 import { parseProfileTrigger, platformMessageIdFrom } from '../core/topicProfileIngress.js';
+import { classifyProfileIntent, toProfilePatch, } from '../core/ProfileIntentClassifier.js';
 import { slugifyChannelName } from '../messaging/slack/sanitize.js';
 import { TopicProfileOrchestrator, resolvedToApplied, } from '../core/TopicProfileOrchestrator.js';
 import { CodexResumeMap } from '../core/CodexResumeMap.js';
@@ -704,6 +705,20 @@ function appendTopicProfileAudit(stateDir, event) {
 }
 let _projectDir = process.cwd();
 let _sharedIntelligence = null;
+// Offender #1 conversion (docs/specs/keyword-intent-conversions-1-and-3.md): the
+// framework/model/thinking WRITE decision is inferred by the ProfileIntentClassifier
+// (LLM + recent conversation), replacing the removed keyword regexes in
+// parseProfileTrigger. Dev-gated dark (resolveDevAgentGate) + dry-run FIRST: while
+// dark or dry-run the message ALWAYS passes through (never actuated); the classifier
+// still runs on a dev agent and LOGS would-actuate vs would-pass to
+// logs/profile-intent.jsonl for the soak. Resolved once in startServer.
+let _profileIntentEnabled = false;
+let _profileIntentDryRun = true;
+let _profileIntentMinConfidence = 0.85;
+let _profileIntentTimeoutMs = 4000;
+let _profileIntentContextTurns = 6;
+let _profileIntentModelTier = 'fast';
+let _profileIntentStateDir = '';
 let _selfKnowledgeTree = null;
 let _slackAdapter = null;
 // WS1.1 dispatch-to-owner (Slack arm): the owner-side bridge reconstructs a Slack
@@ -1669,6 +1684,42 @@ function messageToPipeline(msg, topicName) {
  * a message carrying platform forward metadata falls through as normal
  * conversation regardless of sender.
  */
+/**
+ * Offender #1 conversion soak log: one JSONL line per LLM-engaged
+ * ProfileIntentClassifier decision (docs/specs/keyword-intent-conversions-1-and-3.md).
+ * A prefilter-skip is always a would-pass and the bulk of traffic — skipping it
+ * cuts volume AND the privacy surface to messages that named a profile signal and
+ * actually reached the classifier. Observability only — never gates the message.
+ */
+function logProfileIntent(topicId, text, result, acted) {
+    try {
+        if (result.source === 'prefilter-skip')
+            return;
+        if (!_profileIntentStateDir)
+            return;
+        const logDir = path.join(_profileIntentStateDir, 'logs');
+        fs.mkdirSync(logDir, { recursive: true });
+        const decision = result.isChange ? (acted ? 'actuate' : 'would-actuate') : 'pass';
+        const line = JSON.stringify({
+            ts: new Date().toISOString(),
+            topicId,
+            decision,
+            dryRun: _profileIntentDryRun,
+            source: result.source,
+            intent: result.intent,
+            value: result.value,
+            confidence: result.confidence,
+            reason: result.reason,
+            // NO raw message content: the enum-bounded fields above are what the FP-rate
+            // soak needs, and the resolved `value` is already a closed-enum member. We
+            // record only the message LENGTH (non-content) — mirroring the codebase's
+            // dev-soak convention of never persisting a raw operator quote.
+            textLen: typeof text === 'string' ? text.length : 0,
+        });
+        fs.appendFileSync(path.join(logDir, 'profile-intent.jsonl'), line + '\n');
+    }
+    catch { /* @silent-fallback-ok: the soak audit is observability-only — a log write fault must never gate or throw out of the message path (the classifier decision already stands) */ }
+}
 async function handleTopicProfileIngress(telegram, topicId, text, telegramUserId, msg) {
     const surface = _topicProfileWriteSurface;
     const slots = _topicProfileConfirmSlots;
@@ -1683,10 +1734,65 @@ async function handleTopicProfileIngress(telegram, topicId, text, telegramUserId
     catch { /* @silent-fallback-ok: a trust-floor read fault fails toward NOT-a-trigger (deny-by-default) — the conversational profile parse never runs for an unauthorized turn (TOPIC-PROFILE-SPEC §10.1) */ }
     if (!authorized)
         return false;
-    const trigger = parseProfileTrigger(text);
-    if (!trigger)
-        return false;
     const forwarded = msg.metadata?.forwarded === true;
+    const trigger = parseProfileTrigger(text);
+    if (!trigger) {
+        // Offender #1 conversion (docs/specs/keyword-intent-conversions-1-and-3.md):
+        // the framework/model/thinking WRITE decision moved OUT of parseProfileTrigger
+        // (keyword regexes) into the ProfileIntentClassifier — an LLM reasoning over
+        // the message + recent conversation with structured-enum output, per the
+        // constitutional standard "Intelligence Infers, Keywords Only Guard".
+        // Dev-gated dark + dry-run FIRST; fail-OPEN on every uncertainty.
+        if (forwarded)
+            return false; // forwarded content is never a command
+        if (!_profileIntentEnabled)
+            return false; // fleet-dark → pass to the agent
+        let conversationContext = [];
+        try {
+            // Fetch one extra turn, then drop a trailing turn equal to THIS message —
+            // getTopicHistory (oldest→newest) usually already contains the just-logged
+            // inbound row, so without this the model would see the message twice (once
+            // as MESSAGE, once as the newest CONTEXT turn).
+            const hist = telegram.getTopicHistory?.(topicId, _profileIntentContextTurns + 1) ?? [];
+            conversationContext = hist.map((h) => ({ fromUser: !!h.fromUser, text: String(h.text ?? '') }));
+            const trimmed = text.trim();
+            while (conversationContext.length > 0
+                && conversationContext[conversationContext.length - 1].fromUser
+                && conversationContext[conversationContext.length - 1].text.trim() === trimmed) {
+                conversationContext.pop();
+            }
+            conversationContext = conversationContext.slice(-_profileIntentContextTurns);
+        }
+        catch { /* @silent-fallback-ok — context is best-effort; classify on the message alone */ }
+        const result = await classifyProfileIntent({
+            text,
+            conversationContext,
+            intelligence: _sharedIntelligence,
+            minConfidence: _profileIntentMinConfidence,
+            timeoutMs: _profileIntentTimeoutMs,
+            maxContextTurns: _profileIntentContextTurns,
+            modelTier: _profileIntentModelTier,
+        });
+        const willAct = result.isChange && !_profileIntentDryRun;
+        logProfileIntent(topicId, text, result, willAct);
+        // Dry-run (the soak) / fail-open / pass-through: log would-actuate vs
+        // would-pass, but pass the message through untouched. Real actuation needs a
+        // deliberate dryRun:false, AND fail-open means uncertainty never actuates.
+        if (!willAct)
+            return false;
+        const patch = toProfilePatch(result);
+        if (!patch)
+            return false;
+        const applyPrincipal = { kind: 'operator', platform: 'telegram', uid: String(telegramUserId) };
+        const applyResult = await surface.applyWrite({
+            topicKey: String(topicId), patch, principal: applyPrincipal, origin: 'conversational', discloseInReply: true,
+        });
+        try {
+            await telegram.sendToTopic(topicId, applyResult.reply);
+        }
+        catch { /* @silent-fallback-ok: best-effort disclosure send (TOPIC-PROFILE-SPEC §10.1) */ }
+        return true;
+    }
     if (forwarded)
         return false;
     const topicKey = String(topicId);
@@ -5329,6 +5435,19 @@ export async function startServer(options) {
                 const { TopicProfileResolver } = await import('../core/TopicProfileResolver.js');
                 const { normalizeTierEscalationConfig } = await import('../core/ModelTierEscalation.js');
                 const topicProfilesCfg = config.topicProfiles;
+                // Offender #1 conversion: resolve the ProfileIntentClassifier settings ONCE
+                // (the module-level ingress handler has no config in scope). `enabled` rides
+                // resolveDevAgentGate (dark on the fleet, live on a dev agent — registered in
+                // DEV_GATED_FEATURES, configPath topicProfiles.intentClassifier.enabled);
+                // dryRun ships true (the dry-run canary — actuates only on a deliberate flip).
+                const _intentCfg = topicProfilesCfg?.intentClassifier;
+                _profileIntentEnabled = resolveDevAgentGate(_intentCfg?.enabled, config);
+                _profileIntentDryRun = _intentCfg?.dryRun ?? true;
+                _profileIntentMinConfidence = _intentCfg?.minConfidence ?? 0.85;
+                _profileIntentTimeoutMs = _intentCfg?.timeoutMs ?? 4000;
+                _profileIntentContextTurns = _intentCfg?.contextWindowTurns ?? 6;
+                _profileIntentModelTier = _intentCfg?.modelTier ?? 'fast';
+                _profileIntentStateDir = config.stateDir;
                 _topicProfileStore = new TopicProfileStore({
                     stateFilePath: path.join(config.stateDir, 'state', 'topic-profiles.json'),
                     legacyFrameworksPath: path.join(config.stateDir, 'state', 'topic-frameworks.json'),