instar 0.28.57 → 0.28.59

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "0.28.57",
+  "version": "0.28.59",
   "description": "Persistent autonomy infrastructure for AI agents",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-04-19T01:44:08.314Z",
-  "instarVersion": "0.28.57",
+  "generatedAt": "2026-04-19T02:56:02.572Z",
+  "instarVersion": "0.28.59",
   "entryCount": 186,
   "entries": {
     "hook:session-start": {
@@ -376,7 +376,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -384,7 +384,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -392,7 +392,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -400,7 +400,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -408,7 +408,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -416,7 +416,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -424,7 +424,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -432,7 +432,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -440,7 +440,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -448,7 +448,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -456,7 +456,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -464,7 +464,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -472,7 +472,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -480,7 +480,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -488,7 +488,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -496,7 +496,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -504,7 +504,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -512,7 +512,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -520,7 +520,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -528,7 +528,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -536,7 +536,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -544,7 +544,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -552,7 +552,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -560,7 +560,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -568,7 +568,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -576,7 +576,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -584,7 +584,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -592,7 +592,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -600,7 +600,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -608,7 +608,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -616,7 +616,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -624,7 +624,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -632,7 +632,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -640,7 +640,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -648,7 +648,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -656,7 +656,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -664,7 +664,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -672,7 +672,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -680,7 +680,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -688,7 +688,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -696,7 +696,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -704,7 +704,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -712,7 +712,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -728,7 +728,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "359d003217804e331ddac017935e82648c92af3aa7722f1ccf9a446da7a7c293",
+      "contentHash": "c51ab969d09e9338fc44ddcc10230977f18a0ca1bc56ee64a5dd5a84496214c6",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1400,7 +1400,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "b146af582df111b9fa285414704e8626b5bbac5b85093deae4ee64efaa12c90e",
+      "contentHash": "9660ad8c2bd4f4d6b144c8a41322c55f2ea2d2cc7d9d0b10a8192ddd736fa2d7",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/0.28.58.md

@@ -0,0 +1,54 @@
+# Upgrade Guide — vNEXT (Initiative Tracker for long-running work)
+
+<!-- bump: minor -->
+
+## What Changed
+
+Adds a persisted **Initiative Tracker** — a structural surface for multi-week, multi-phase work that was previously drifting out of sight between Telegram messages, handoff notes, and ad-hoc checklists. The core gap it closes: after a user approves a phased effort (PR-hardening, context-death hardening, etc.), the next phase would stall silently because nothing in the agent's state said "this is phase N of M, last touched D, awaiting user decision X."
+
+**What ships:**
+
+- `InitiativeTracker` class (`src/core/InitiativeTracker.ts`) persists `.instar/initiatives.json`. CRUD, phase transitions, and a digest scan that emits four signal types: `stale` (>7d no movement), `awaiting-user` (blocked on user input), `next-check-due` (explicit next-check date reached), `ready-to-advance` (phase exit criteria met).
+- 7 HTTP endpoints under `/initiatives`, auth-gated like `/jobs`:
+  - `GET /initiatives` — list
+  - `GET /initiatives/:id` — fetch
+  - `POST /initiatives` — create
+  - `PATCH /initiatives/:id` — update
+  - `POST /initiatives/:id/transition` — move to next phase
+  - `DELETE /initiatives/:id` — remove
+  - `GET /initiatives/digest` — signal scan for currently-actionable items
+- Dashboard "Initiatives" tab — read-only, XSS-safe (uses `textContent`). Renders current phase, last-touched, blockers, what-needs-you.
+- 52 new tests (28 core + 15 route + 9 dashboard smoke). `tsc --noEmit` clean.
+- Spec: `docs/specs/INITIATIVE-TRACKER-SPEC.md` (approved by Justin in Telegram topic 2317 on 2026-04-17; recovered via PR #68 after the original commit was orphaned during a main-branch reset).
+
+**What is not in this release (deferred):**
+- Daily digest job that posts `awaiting-user` cards to Telegram (Phase 2 — separate commit).
+- Editable initiatives from the dashboard (read-only only for now).
+
+## What to Tell Your User
+
+Long-running work on instar used to drift: you'd approve "Phase A first, then we'll flip to Phase B shadow mode," and then nothing automatic existed to remind either of us that Phase B was waiting. Agents had to re-scan Telegram history or re-read handoff notes to notice blocked work. The Initiative Tracker is the fix — a single place where multi-phase efforts are recorded with current phase, last-touched, and what (if anything) is blocking progress.
+
+After updating, your dashboard gets a new **Initiatives** tab. Until we (or an agent) actually seed it with entries, it'll be empty — that's expected. Tell me to populate it with the long-running work I'm tracking and it'll fill in.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Initiative Tracker (persisted multi-phase state) | API: `GET /initiatives`, `POST /initiatives`, `PATCH /initiatives/:id`, `POST /initiatives/:id/transition`, `GET /initiatives/digest` |
+| Dashboard Initiatives tab (read-only view) | Open the dashboard, click **Initiatives** |
+| Digest scan for actionable items | `GET /initiatives/digest` returns items tagged `stale`, `awaiting-user`, `next-check-due`, `ready-to-advance` |
+
+## Evidence
+
+**Tests:** 52 new tests added in this release, all green. Existing suites unaffected: `BackupManager` 42/42, `PostUpdateMigrator` 24/24, route coverage unchanged. Full CI green on the landing PR (#68): Type Check ✓, verify ✓, Unit Tests on Node 20 ✓, Unit Tests on Node 22 ✓, Build ✓, Integration Tests ✓, E2E Tests ✓.
+
+**Recovery context:** The original commit (`f237d55` in reflog) landed on main locally during a prior session but was lost when main was reset to match origin during an unrelated conflict resolution. Files were recovered from the reflog, conflicts were surgically resolved in three files (`src/commands/server.ts` added InitiativeTracker construction alongside parallel-dev wiring; `src/server/AgentServer.ts` added option alongside `unjustifiedStopGate`; `src/data/builtin-manifest.json` regenerated). Merged cleanly with CI verification as the safety net.
+
+## Deployment Notes
+
+- No operator action required on update. The tracker is available as soon as the new code is running.
+- `.instar/initiatives.json` is created lazily on first write — no migration step needed.
+- `/initiatives/*` routes are auth-gated like `/jobs` — requires `Authorization: Bearer <authToken>`.
+- Dashboard Initiatives tab appears automatically once the server is on the new version.
+- Existing initiatives elsewhere (handoff notes, Telegram threads) are not auto-imported — seed manually via `POST /initiatives` or ask your agent to populate from context.

package/upgrades/0.28.59.md

@@ -0,0 +1,85 @@
+# Upgrade Guide — Dashboard "Resume live output" reliability + always-visible control
+
+## What Changed
+
+Fixed two long-standing rough edges in the dashboard's terminal view for the
+"▼ Resume live output" control.
+
+### Scroll-to-bottom now actually lands at the bottom
+
+Clicking "▼ Resume live output" after scrolling up in a session view used to
+sometimes leave the viewport mid-history instead of snapping to the tail of
+live output — defeating the purpose of the button. The same stale-scroll
+happened on the two sibling auto-resume paths that fire when the user
+scrolls back to the bottom or wheels down into it.
+
+Root cause: `term.write(data)` in xterm is asynchronous. The old code called
+`term.scrollToBottom()` immediately after the write, or inside a
+`requestAnimationFrame` — neither guarantees the buffer has been populated,
+so the scroll operated on stale viewport state and landed above the new
+output.
+
+Fix: all three resume paths now use xterm's write-completion callback —
+`term.write(data, () => term.scrollToBottom())`. The scroll runs after the
+buffer is populated, so the viewport lands at the new bottom.
+
+### The button is always visible when paused
+
+Previously the "▼ Resume live output" button only appeared when new output
+happened to arrive while the user was scrolled up. In idle sessions —
+nothing streaming, user just scrolled up to read history — the button never
+surfaced, and there was no UI control to jump back to live.
+
+Fix: button visibility now mirrors `!userIsFollowing` from every code path
+that flips the flag. Scroll up in a session view (idle or streaming) and the
+button appears. Scroll back to the bottom, click the button, wheel down into
+the tail, or switch sessions, and the button hides.
+
+## What to Tell Your User
+
+The "Resume live output" button in your dashboard's session view now works
+the way you'd expect: it shows up any time you've scrolled up (even in an
+idle session where nothing is streaming), and clicking it reliably drops
+you at the bottom of the live output instead of leaving you mid-history.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Reliable auto-follow resume in the dashboard terminal | Click "▼ Resume live output" after scrolling up in any session view; viewport snaps to the bottom |
+| Button always available while paused | Scroll up in any session — the button surfaces automatically; scroll back down or click it to resume |
+
+## Evidence
+
+The fix was reproduced from Justin's report (topic 6309 on echo agent): the
+button left him mid-history, and in idle sessions there was no button at
+all.
+
+Regression test (`tests/unit/dashboard-resumeLive.test.ts`, 10 tests) locks
+in both invariants at the HTML-inspection layer:
+
+- Scroll-after-write: all three resume paths use the xterm write callback;
+  the old `term.write(data); requestAnimationFrame(() => term.scrollToBottom())`
+  shape is explicitly banned.
+- Button visibility: `term.onScroll` shows the button on scroll-up and
+  hides it on scroll-to-bottom; the wheel-down resume path hides the
+  button; session-switch reset hides any carry-over button.
+
+Full dashboard test suite green across `dashboard-*.test.ts`.
+
+Side-effects review:
+`upgrades/side-effects/dashboard-resume-live-scroll.md` — concludes no
+decision-point touched (pure UI timing + visibility fix), no over/under-block
+risk, trivial rollback (git revert).
+
+## Deployment Notes
+
+No operator action required on update. The dashboard is static HTML served
+from the installed instar package — clients pick up the fix on their next
+page load after `instar` updates to 0.28.59.
+
+## Rollback
+
+Downgrade reverts the three resume paths to the prior (racy) code and
+returns the button to its contingent-on-new-output visibility. No schema
+changes, no state-file changes, no API changes.