instar 1.3.763 → 1.3.765

package/dist/server/routes.js

@@ -20652,7 +20652,17 @@ document.getElementById('mcpForm').addEventListener('submit', async function (e)
         res.json({ leases: ctx.prHandLease.list().map((l) => ({ ...l, holderSessionId: undefined })) });
     });
     router.post('/action-claim/observe', (req, res) => {
-        const enabled = ctx.liveConfig?.get('messaging.actionClaim.enabled', false) ?? false;
+        // ── Config location (actionclaim-config-shape-fix): on a real install
+        // `messaging` is an ARRAY of adapter configs, so `messaging.actionClaim.*` is
+        // UNREACHABLE (getNestedValue walks the array → `array['actionClaim']` is
+        // undefined → the default) — which made this default-OFF sentinel structurally
+        // un-enablable in production (CI never caught it: every test used an
+        // object-shaped `messaging`). The reachable, canonical home is a TOP-LEVEL
+        // `actionClaim` block; the legacy object-shaped `messaging.actionClaim` is
+        // honored as a back-compat fallback. Both are read LIVE (no restart).
+        const acGet = (leaf, dflt) => (ctx.liveConfig?.get(`actionClaim.${leaf}`, undefined) ??
+            ctx.liveConfig?.get(`messaging.actionClaim.${leaf}`, dflt));
+        const enabled = acGet('enabled', false) ?? false;
         if (!enabled) {
             res.json({ observed: false, registered: false, reason: 'feature-disabled' });
             return;
@@ -20678,12 +20688,12 @@ document.getElementById('mcpForm').addEventListener('submit', async function (e)
         const isMinted = numericTopicId !== undefined && numericTopicId < 0;
         let slackDryRun = false;
         if (isMinted) {
-            const slackLaneLive = resolveDevAgentGate(ctx.liveConfig?.get('messaging.actionClaim.slack.enabled', undefined), ctx.config);
+            const slackLaneLive = resolveDevAgentGate(acGet('slack.enabled', undefined), ctx.config);
             if (!slackLaneLive) {
                 res.json({ observed: true, registered: false, reason: 'slack-lane-dark' });
                 return;
             }
-            slackDryRun = ctx.liveConfig?.get('messaging.actionClaim.slack.dryRun', true) ?? true;
+            slackDryRun = acGet('slack.dryRun', true) ?? true;
         }
         // ── §4.2a Lane-A precedence: classify Lane A first; ONLY on a Lane-A miss run
         // Lane B — so a dual-signal turn ("I'll deploy in 10 min") registers ONCE
@@ -20733,7 +20743,7 @@ document.getElementById('mcpForm').addEventListener('submit', async function (e)
         }
         // ── §5 per-topic cap — ONE shared budget across BOTH lanes (R1-C3): count
         // open commitments whose externalKey starts with actionclaim: OR timepromise:.
-        const cap = ctx.liveConfig?.get('messaging.actionClaim.perTopicCap', 5) ?? 5;
+        const cap = acGet('perTopicCap', 5) ?? 5;
         const openForTopic = ctx.commitmentTracker
             .getActive()
             .filter((c) => c.topicId === topicId &&
@@ -20744,7 +20754,7 @@ document.getElementById('mcpForm').addEventListener('submit', async function (e)
             res.json({ observed: true, registered: false, reason: 'per-topic-cap', lane, ...(verb ? { verb } : {}), cap });
             return;
         }
-        const expiresHrs = ctx.liveConfig?.get('messaging.actionClaim.expiresHours', 6) ?? 6;
+        const expiresHrs = acGet('expiresHours', 6) ?? 6;
         const expiresAt = new Date(Date.now() + expiresHrs * 3600_000).toISOString();
         // ── §8.1 dryRun (minted lane): would-register audit line + typed non-register,
         // NO record(). Best-effort append ("audit is observability") so a log-write