instar 0.28.19 → 0.28.21

package/dist/commands/init.js

@@ -1178,7 +1178,7 @@ curl -X POST http://localhost:${port}/feedback \\
   -d '{"type":"bug","title":"Short description","description":"Full details with context"}'
 \`\`\`
 
-This routes feedback to the Instar maintainers automatically. Valid types: \`bug\`, \`feature\`, \`improvement\`, \`question\`.
+This routes feedback to the Instar maintainers automatically. Valid types: \`bug\`, \`feature\`, \`improvement\`, \`question\`, \`hallucination\`.
 
 **NEVER use \`gh issue\`, \`gh api\`, or GitHub CLI to file issues.** The feedback API is your channel.
 - View submitted feedback: \`curl http://localhost:${port}/feedback\`
@@ -3275,7 +3275,7 @@ curl -s -X POST http://localhost:${port}/feedback \\
   -d '{"type":"bug","title":"CONCISE_TITLE","description":"FULL_CONTEXT_WITH_ERROR_MESSAGES"}'
 \`\`\`
 
-Types: \`bug\`, \`feature\`, \`improvement\`, \`question\`
+Types: \`bug\`, \`feature\`, \`improvement\`, \`question\`, \`hallucination\`
 
 **Do not wait for the user to notice.** If a hook throws an error, report it. If a job fails, report it. If the server returns unexpected data, report it. You are not just using instar — you are part of its immune system.
 `);

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA2PH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA6zCD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA2oItE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA2PH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA6zCD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAipItE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -4658,7 +4658,8 @@ export async function startServer(options) {
             },
         });
         // Threadline Router — handles threaded cross-agent conversations via relay
-        const threadlineRouter = new ThreadlineRouter(messageRouter, spawnManager, threadResumeMap, messageStore, { localAgent: config.projectName, localMachine: os.hostname() });
+        const threadlineRouter = new ThreadlineRouter(messageRouter, spawnManager, threadResumeMap, messageStore, { localAgent: config.projectName, localMachine: os.hostname() }, null, // autonomyGate
+        messageDelivery);
         // Listener Session Manager — warm session for fast relay responses (Phase 2)
         const listenerManager = config.threadline?.relayEnabled
             ? new ListenerSessionManager(config.stateDir, config.authToken ?? '', config.threadline)
@@ -4873,30 +4874,34 @@ export async function startServer(options) {
                     }
                     // Check if this message resolves a pending waitForReply request.
                     // Skip auto-ack messages (they're from us, not a real reply).
-                    // Try both fingerprint and agent name as keys — the waiter is keyed by
-                    // agent name (from relay-send), but gate-passed provides the fingerprint.
+                    // PR-3: Waiters are now keyed by threadId (unique per conversation)
+                    // rather than sender fingerprint or agent name. Fall back to the
+                    // legacy fingerprint/name lookup only if no threadId is present,
+                    // for compatibility with older senders.
                     const isAutoAck = textContent.startsWith('Message received.') || textContent.startsWith('Message received,');
-                    let waiter = threadlineReplyWaiters.get(senderFingerprint);
+                    let waiter = msg.threadId ? threadlineReplyWaiters.get(msg.threadId) : undefined;
                     if (!waiter) {
-                        // Resolve fingerprint → agent name via known-agents cache
-                        const resolvedName = (() => {
-                            try {
-                                const kaPath = path.join(config.stateDir, 'threadline', 'known-agents.json');
-                                const kaData = JSON.parse(fs.readFileSync(kaPath, 'utf-8'));
-                                const agents = kaData.agents ?? kaData;
-                                if (Array.isArray(agents)) {
-                                    // Check publicKey field for fingerprint match
-                                    const match = agents.find((a) => a.publicKey === senderFingerprint || a.publicKey?.startsWith(senderFingerprint));
-                                    return match?.name ?? null;
+                        // Legacy fallback: try by sender fingerprint, then by resolved name
+                        waiter = threadlineReplyWaiters.get(senderFingerprint);
+                        if (!waiter) {
+                            const resolvedName = (() => {
+                                try {
+                                    const kaPath = path.join(config.stateDir, 'threadline', 'known-agents.json');
+                                    const kaData = JSON.parse(fs.readFileSync(kaPath, 'utf-8'));
+                                    const agents = kaData.agents ?? kaData;
+                                    if (Array.isArray(agents)) {
+                                        const match = agents.find((a) => a.publicKey === senderFingerprint || a.publicKey?.startsWith(senderFingerprint));
+                                        return match?.name ?? null;
+                                    }
+                                    return null;
                                 }
-                                return null;
-                            }
-                            catch {
-                                return null;
-                            }
-                        })();
-                        if (resolvedName)
-                            waiter = threadlineReplyWaiters.get(resolvedName);
+                                catch {
+                                    return null;
+                                }
+                            })();
+                            if (resolvedName)
+                                waiter = threadlineReplyWaiters.get(resolvedName);
+                        }
                     }
                     if (waiter && !isAutoAck) {
                         waiter.resolve(textContent);