instar 0.26.6 → 0.26.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "0.26.6",
+  "version": "0.26.7",
   "description": "Persistent autonomy infrastructure for AI agents",
   "type": "module",
   "main": "dist/index.js",
@@ -88,6 +88,7 @@
     "commander": "^12.0.0",
     "croner": "^8.0.0",
     "express": "^4.18.0",
+    "marked": "^17.0.5",
     "picocolors": "^1.0.0",
     "proper-lockfile": "^4.1.2",
     "ws": "^8.19.0",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-04-03T02:18:54.616Z",
-  "instarVersion": "0.26.6",
+  "generatedAt": "2026-04-03T19:37:23.991Z",
+  "instarVersion": "0.26.7",
   "entryCount": 182,
   "entries": {
     "hook:session-start": {
@@ -368,7 +368,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -376,7 +376,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -384,7 +384,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -392,7 +392,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -400,7 +400,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -408,7 +408,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -416,7 +416,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -424,7 +424,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -432,7 +432,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -440,7 +440,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -448,7 +448,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -456,7 +456,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -464,7 +464,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -472,7 +472,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -480,7 +480,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -488,7 +488,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -496,7 +496,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -504,7 +504,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -512,7 +512,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -520,7 +520,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -528,7 +528,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -536,7 +536,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -544,7 +544,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -552,7 +552,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -560,7 +560,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -568,7 +568,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -576,7 +576,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -584,7 +584,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -592,7 +592,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -600,7 +600,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -608,7 +608,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -616,7 +616,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -624,7 +624,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -632,7 +632,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -640,7 +640,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -648,7 +648,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -656,7 +656,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -664,7 +664,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -672,7 +672,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -680,7 +680,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -688,7 +688,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -696,7 +696,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -704,7 +704,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -720,7 +720,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f8e0d62dfb4aba299920f05eb99b54b2414680623d122fa19a5f5429e915e99a",
+      "contentHash": "68c4d8eaf014149ba07c5571d22ec8946b9ef3291e2eac8d08c4ecfb69133592",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1376,7 +1376,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "bae6a4957dca51a4db962492abad139a1afb509b1f525f61f265546bc3452ec5",
+      "contentHash": "bc0b3a938350561f6bef20a42581fd2f58a3d61e99013159ccf2085a10b9d0d1",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {
@@ -1408,7 +1408,7 @@
       "type": "subsystem",
       "domain": "scheduling",
       "sourcePath": "src/scheduler/JobScheduler.ts",
-      "contentHash": "b868d045d5ed67e819d7db7de107fcf96d2d23e7b14d9e98becf6447f1a9a2ed",
+      "contentHash": "d95f59d065f9c122dc782e647f228d988f6db921d7df748d6d894f02a57bff81",
       "since": "2025-01-01"
     },
     "subsystem:project-mapper": {

package/upgrades/0.26.6.md

@@ -10,14 +10,16 @@
 
 **Fix Slack session resume** — The resume heartbeat (60s interval) was saving Slack channel resume UUIDs to the wrong file. It wrote to `topic-resume-map.json` using synthetic numeric IDs, but the Slack message handler reads from `slack-channel-resume-map.json` using real channel IDs. The heartbeat now writes to both files, ensuring that when a Slack session dies, the next message in that channel correctly resumes the previous session.
 
+**Fix cross-topic UUID contamination in proactive saves** — When multiple sessions ran concurrently, the proactive UUID save (fired 8s after session spawn) could pick up the wrong session's UUID via an mtime-based fallback. This caused sessions to resume another topic's conversation entirely. All 4 proactive save locations (telegram-forward, secret-drop, spawnSessionForTopic, Slack heartbeat) now exclusively use the authoritative `claudeSessionId` from hook events. The heartbeat (60s) handles any sessions where hooks haven't fired yet, with a proper multi-session guard.
+
 Also fixed a stale unit test for `findUuidForSession()` and added a public `jsonlExistsPublic()` method to `TopicResumeMap` for external UUID validation.
 
 ## What to Tell Your User
 
-- **Session resume in Slack**: "When a conversation session stops in a Slack channel, the next message you send will now properly pick up where you left off instead of starting fresh. This was a bug where the resume data was being saved in the wrong place."
+- **Session resume reliability**: "Sessions now reliably resume the correct conversation across all messaging integrations (Telegram, Slack). A bug was causing sessions to occasionally resume a completely different topic's conversation when multiple topics were active at the same time."
 
 ## Summary of New Capabilities
 
 | Capability | How to Use |
 |-----------|-----------|
-| Reliable Slack session resume | Automatic — sessions resume on next message after dying |
+| Reliable session resume (all integrations) | Automatic — sessions resume correctly even with concurrent topics |

package/upgrades/0.26.7.md

@@ -0,0 +1,25 @@
+# Upgrade Guide — v0.26.7
+
+<!-- bump: patch -->
+<!-- Valid values: patch, minor, major -->
+<!-- patch = bug fixes, refactors, test additions, doc updates -->
+<!-- minor = new features, new APIs, new capabilities (backwards-compatible) -->
+<!-- major = breaking changes to existing APIs or behavior -->
+
+## What Changed
+
+**Fix Slack session resume** — The resume heartbeat (60s interval) was saving Slack channel resume UUIDs to the wrong file. It wrote to `topic-resume-map.json` using synthetic numeric IDs, but the Slack message handler reads from `slack-channel-resume-map.json` using real channel IDs. The heartbeat now writes to both files, ensuring that when a Slack session dies, the next message in that channel correctly resumes the previous session.
+
+**Fix cross-topic UUID contamination in proactive saves** — When multiple sessions ran concurrently, the proactive UUID save (fired 8s after session spawn) could pick up the wrong session's UUID via an mtime-based fallback. This caused sessions to resume another topic's conversation entirely. All 4 proactive save locations (telegram-forward, secret-drop, spawnSessionForTopic, Slack heartbeat) now exclusively use the authoritative `claudeSessionId` from hook events. The heartbeat (60s) handles any sessions where hooks haven't fired yet, with a proper multi-session guard.
+
+Also fixed a stale unit test for `findUuidForSession()` and added a public `jsonlExistsPublic()` method to `TopicResumeMap` for external UUID validation.
+
+## What to Tell Your User
+
+- **Session resume reliability**: "Sessions now reliably resume the correct conversation across all messaging integrations (Telegram, Slack). A bug was causing sessions to occasionally resume a completely different topic's conversation when multiple topics were active at the same time."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Reliable session resume (all integrations) | Automatic — sessions resume correctly even with concurrent topics |

package/upgrades/NEXT.md

@@ -0,0 +1,35 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+<!-- Valid values: patch, minor, major -->
+<!-- patch = bug fixes, refactors, test additions, doc updates -->
+<!-- minor = new features, new APIs, new capabilities (backwards-compatible) -->
+<!-- major = breaking changes to existing APIs or behavior -->
+
+## What Changed
+
+<!-- Describe what changed technically. What new features, APIs, behavioral changes? -->
+<!-- Write this for the AGENT — they need to understand the system deeply. -->
+
+## What to Tell Your User
+
+<!-- Write talking points the agent should relay to their user. -->
+<!-- This should be warm, conversational, user-facing — not a changelog. -->
+<!-- Focus on what THEY can now do, not internal plumbing. -->
+<!--                                                                    -->
+<!-- PROHIBITED in this section (will fail validation):                 -->
+<!--   camelCase config keys: silentReject, maxRetries, telegramNotify -->
+<!--   Inline code backtick references like silentReject: false        -->
+<!--   Fenced code blocks                                              -->
+<!--   Instructions to edit files or run commands                      -->
+<!--                                                                    -->
+<!-- CORRECT style: "I can turn that on for you" not "set X to false"  -->
+<!-- The agent relays this to their user — keep it human.              -->
+
+- **[Feature name]**: "[Brief, friendly description of what this means for the user]"
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| [Capability] | [Endpoint, command, or "automatic"] |