instar 1.3.834 → 1.3.835

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAyDH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA0BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA6H7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAkoDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAssBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA83nBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA0DH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAU3D,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA0BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AA6H7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAgFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AAyID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAkoDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CAssBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA69nBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -25,6 +25,7 @@ import { heartbeatFreshEnoughToRerecord } from '../core/MachineHeartbeat.js';
 import { slackRespawnBootstrapIds } from '../core/slackRefreshBinding.js';
 import { configureHostSpawnSemaphore } from '../core/hostSpawnSemaphore.js';
 import { SpawningTopicsRegistry } from '../core/SpawningTopicsRegistry.js';
+import { planCredentialIdentityRepair } from '../core/CredentialIdentityRepairPlan.js';
 import { TopicReachabilityVerifier } from '../monitoring/TopicReachabilityVerifier.js';
 import { SingleInstanceLock, installReleaseHandlers } from '../core/SingleInstanceLock.js';
 import { resolveDevAgentGate, resolveStateSyncStores } from '../core/devAgentGate.js';
@@ -12037,6 +12038,7 @@ export async function startServer(options) {
                 return { unavailable: true, reason: `ambiguous/unknown email (${matches.length} pool matches)` };
             return { accountId: matches[0].id };
         };
+        let quotaPollerRef = null;
         const credentialSwapExecutor = new CredentialSwapExecutor({
             funnel: credentialWriteFunnel,
             ledger: credentialLocationLedger,
@@ -12051,7 +12053,7 @@ export async function startServer(options) {
             onSlotsChanged: (slots) => { try {
                 inUseAccountResolver.bustCache?.();
             }
-            catch { /* @silent-fallback-ok: cache-bust is an observability nicety (a stale badge self-corrects at TTL); a throwing consumer must never break the committed swap */ } void slots; },
+            catch { /* @silent-fallback-ok: cache-bust is an observability nicety (a stale badge self-corrects at TTL); a throwing consumer must never break the committed swap */ } quotaPollerRef?.invalidateIdentityCache(slots); },
         });
         const credentialManualLevers = new CredentialManualLevers({
             maxForcedPerWindow: config.subscriptionPool?.credentialRepointing?.maxForcedManualSwapsPerWindow,
@@ -12104,6 +12106,58 @@ export async function startServer(options) {
                 });
             },
         });
+        const buildCredentialRepairPlan = async () => {
+            const accounts = subscriptionPool.list().filter((a) => a.framework === 'claude-code');
+            const slots = [...new Set(accounts.map((a) => a.configHome))];
+            const observations = await Promise.all(slots.map(async (slot) => {
+                const identity = await credResolveIdentity(slot);
+                return { slot, accountId: 'unavailable' in identity ? null : identity.accountId };
+            }));
+            return planCredentialIdentityRepair(accounts, observations);
+        };
+        const executeCredentialRepairPlan = async () => {
+            const plan = await buildCredentialRepairPlan();
+            const results = [];
+            const vacateResults = [];
+            for (const vacate of plan.vacates) {
+                const result = await credentialSwapExecutor.vacateDuplicate(vacate.impostorSlot, vacate.retainedSlot, vacate.accountId);
+                vacateResults.push({ ...vacate, outcome: result.outcome, reason: result.reason });
+                if (result.outcome !== 'swapped' && result.outcome !== 'dry-run')
+                    break;
+            }
+            for (const move of plan.moves) {
+                const [liveA, liveB] = await Promise.all([credResolveIdentity(move.slotA), credResolveIdentity(move.slotB)]);
+                if ('unavailable' in liveA || 'unavailable' in liveB) {
+                    results.push({ move, outcome: 'precondition-failed', reason: 'repair census became unavailable — move refused' });
+                    break;
+                }
+                credentialLocationLedger.recordAssignment(move.slotA, liveA.accountId, { verifiedAt: new Date().toISOString(), op: 'reconcile', source: 'identity-repair-preflight' });
+                credentialLocationLedger.recordAssignment(move.slotB, liveB.accountId, { verifiedAt: new Date().toISOString(), op: 'reconcile', source: 'identity-repair-preflight' });
+                const result = await credentialSwapExecutor.swap(move.slotA, move.slotB);
+                results.push({ move, outcome: result.outcome, reason: result.reason });
+                if (result.outcome !== 'swapped' && result.outcome !== 'dry-run')
+                    break;
+            }
+            for (const accountId of plan.ownerReloginAccountIds) {
+                const externalKey = `credential-identity-relogin:${accountId}`;
+                try {
+                    if (!commitmentTracker.getActive().some((c) => c.externalKey === externalKey)) {
+                        commitmentTracker.record({
+                            type: 'one-time-action', source: 'agent', beaconEnabled: true, externalKey,
+                            userRequest: `Restore the missing local login for subscription account ${accountId}.`,
+                            agentResponse: `Owner re-login is required on this machine. Use the dashboard Subscriptions grid or POST /subscription-pool/follow-me/enroll/start for account ${accountId}; the login is minted locally and never copied across machines.`,
+                        });
+                    }
+                    subscriptionPool.update(accountId, { identityDrifted: true, identityDrift: {
+                            expectedAccountId: accountId, actualAccountId: 'missing-local-login',
+                            slot: subscriptionPool.get(accountId)?.configHome ?? 'unknown', detectedAt: new Date().toISOString(),
+                            lastConfirmedAt: new Date().toISOString(), repairState: 'owner-relogin-required',
+                        } });
+                }
+                catch { /* @silent-fallback-ok: next audit retries the durable residual; no credential mutation depends on it */ }
+            }
+            return { plan, results, vacateResults };
+        };
         const credentialRepointing = {
             ledger: credentialLocationLedger,
             swapExecutor: credentialSwapExecutor,
@@ -12112,6 +12166,8 @@ export async function startServer(options) {
             levers: credentialManualLevers,
             envTokenGate: credentialEnvTokenGate,
             rebalancer: credentialRebalancer,
+            repairPlan: buildCredentialRepairPlan,
+            executeRepairPlan: executeCredentialRepairPlan,
             readBlob: async (slot) => {
                 const raw = await defaultKeychainExec.readService(credSwapService(slot));
                 if (!raw)
@@ -12203,6 +12259,20 @@ export async function startServer(options) {
                 if (r.refreshed || r.recovered || r.quarantined) {
                     console.log(pc.dim(`  Credential identity audit (${trigger}): ${r.refreshed} refreshed, ${r.recovered} recovered, ${r.quarantined} quarantined, ${r.unresolved} unresolved`));
                 }
+                // A confirmed divergence is not flag-and-forget. Immediately run the
+                // audited repair arm: dry-run while the feature is in dry-run, real
+                // staged moves only when the existing destructive gate is live.
+                if (r.quarantined > 0) {
+                    const repair = await executeCredentialRepairPlan();
+                    credentialAuditEmit.audit({
+                        event: 'identity-repair-auto-pass', trigger,
+                        moves: repair.results.length,
+                        outcomes: repair.results.map((x) => x.outcome),
+                        duplicateVacates: repair.vacateResults.length,
+                        vacateOutcomes: repair.vacateResults.map((x) => x.outcome),
+                        ownerReloginResiduals: repair.plan.ownerReloginAccountIds.length,
+                    });
+                }
             }
             catch (e) {
                 console.warn(`[CredentialIdentityAudit] ${trigger} error: ${e instanceof Error ? e.message : String(e)}`);
@@ -12231,7 +12301,38 @@ export async function startServer(options) {
             logger: { log: (m) => console.log(m), warn: (m) => console.warn(m) },
             // Census #1–#4: resolve each account's LIVE slot through the ledger (no-op while dark).
             locationGate: credentialLocationGate,
+            // Tier-0 attribution hardening: reuse the SAME profile-backed identity oracle as
+            // credential swaps. QuotaPoller caches this read for ~6h; the swap executor's
+            // mandatory pre-flight remains live/uncached.
+            resolveSlotIdentity: async (slot) => {
+                const r = await credResolveIdentity(slot);
+                if ('unavailable' in r)
+                    return r;
+                const account = subscriptionPool.get(r.accountId);
+                return { accountId: r.accountId, ...(account?.email ? { email: account.email } : {}) };
+            },
+            identityCacheTtlMs: 6 * 60 * 60_000,
+            locationLedger: credentialLocationLedger,
+            emitIdentityDriftAttention: telegram
+                ? (item) => void telegram.createAttentionItem({
+                    id: item.id,
+                    title: item.title,
+                    summary: item.summary,
+                    description: item.summary,
+                    category: 'credential-identity-drift',
+                    priority: 'HIGH',
+                    sourceContext: 'quota-poll-identity-oracle',
+                })
+                : undefined,
+            onIdentityRestored: (accountId, attentionId) => {
+                const externalKey = `credential-identity-relogin:${accountId}`;
+                const active = commitmentTracker.getActive().find((c) => c.externalKey === externalKey);
+                if (active)
+                    commitmentTracker.deliver(active.id);
+                void telegram?.updateAttentionStatus(attentionId, 'DONE', { silent: true }).catch(() => { });
+            },
         });
+        quotaPollerRef = quotaPoller;
         if (subscriptionPool.size() > 0) {
             quotaPoller.start();
             console.log(pc.green('  Subscription quota poller started'));