instar 0.28.87 → 0.28.89

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "0.28.87",
+  "version": "0.28.89",
   "description": "Persistent autonomy infrastructure for AI agents",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,9 +1,9 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-11T20:08:03.908Z",
-  "instarVersion": "0.28.87",
-  "entryCount": 187,
+  "generatedAt": "2026-05-12T00:41:37.612Z",
+  "instarVersion": "0.28.89",
+  "entryCount": 188,
   "entries": {
     "hook:session-start": {
       "id": "hook:session-start",
@@ -363,6 +363,14 @@
       "contentHash": "5b3557fa3662cf0c7b7bab85a252cc2e567b3fc64a04a92d430374ef1f264ca6",
       "since": "2025-01-01"
     },
+    "skill:instar-project": {
+      "id": "skill:instar-project",
+      "type": "skill",
+      "domain": "skills",
+      "sourcePath": ".claude/skills/instar-project/SKILL.md",
+      "contentHash": "8c8a924740d8afedeb5e0b4bea7a3760c9654dc6b49a9a415429fe0366ff8429",
+      "since": "2025-01-01"
+    },
     "skill:secret-setup": {
       "id": "skill:secret-setup",
       "type": "skill",
@@ -384,7 +392,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -392,7 +400,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -400,7 +408,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -408,7 +416,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -416,7 +424,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -424,7 +432,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -432,7 +440,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -440,7 +448,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -448,7 +456,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -456,7 +464,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -464,7 +472,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -472,7 +480,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -480,7 +488,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -488,7 +496,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -496,7 +504,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -504,7 +512,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -512,7 +520,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -520,7 +528,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -528,7 +536,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -536,7 +544,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -544,7 +552,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -552,7 +560,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -560,7 +568,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -568,7 +576,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -576,7 +584,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -584,7 +592,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -592,7 +600,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -600,7 +608,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -608,7 +616,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -616,7 +624,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -624,7 +632,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -632,7 +640,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -640,7 +648,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -648,7 +656,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -656,7 +664,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -664,7 +672,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -672,7 +680,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -680,7 +688,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -688,7 +696,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -696,7 +704,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -704,7 +712,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -712,7 +720,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -720,7 +728,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -736,7 +744,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ecd66f6392872c8c208d1b19d5af5b1b5228e843fdcb60467da55d5972b888b",
+      "contentHash": "e9c2393e01c9b17f79d294d514401e5be2c323d5f5ee307827e3247df45c5d95",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -984,7 +992,7 @@
       "type": "template",
       "domain": "safety",
       "sourcePath": "src/templates/hooks/compaction-recovery.sh",
-      "contentHash": "97929330cdb4794117bbaafbfbd0635d95c27b24a1189a685eae9f5445000642",
+      "contentHash": "ca6a2a5c2ee03839654c9708912292bc03d81c61281dffbbb958d4877ee1dc91",
       "since": "2025-01-01"
     },
     "template:dangerous-command-guard.sh": {
@@ -1024,7 +1032,7 @@
       "type": "template",
       "domain": "safety",
       "sourcePath": "src/templates/hooks/session-start.sh",
-      "contentHash": "1b63c4646f30126601f8e425359d9638442e92561e27fa404d33f832bd03e263",
+      "contentHash": "4d98736d3ee30fe8639f0851e5e492416ad05f4ae49f84e8695723faa4b9398e",
       "since": "2025-01-01"
     },
     "template:settings-template.json": {
@@ -1408,7 +1416,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "e7112caba2a3f0354ff46977822cdc479d9d7bc3fcd85c97ac5567fda5a6801d",
+      "contentHash": "3c3fcffe37bcee90e1d78c16799a5d6d0bcce2deabcef0eb1e6ec85cdae74da5",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/src/templates/hooks/compaction-recovery.sh

@@ -464,5 +464,55 @@ if [ -f "$CONFIG_FILE" ] && command -v tmux >/dev/null 2>&1; then
   fi
 fi
 
+# Active projects digest — file-first, no HTTP (PROJECT-SCOPE-SPEC Phase 1.9).
+# Re-injects the active-project orientation after compaction so the agent
+# doesn't lose track of multi-spec work. Same cache as session-start.sh.
+DIGEST_FILE="$INSTAR_DIR/projects-digest.cache"
+echo ""
+if [ -f "$DIGEST_FILE" ]; then
+  PROJ_DIGEST=$(python3 - "$DIGEST_FILE" <<'PYEOF' 2>/dev/null
+import json, re, sys
+path = sys.argv[1]
+try:
+    with open(path, 'r', encoding='utf-8') as f:
+        d = json.load(f)
+    lines = d.get('digestLines') or []
+    if not isinstance(lines, list):
+        sys.exit(0)
+    ctrl = re.compile(r'[\x00-\x1F\x7F]')
+    cleaned = []
+    for ln in lines[:5]:
+        if not isinstance(ln, str):
+            continue
+        s = ctrl.sub(' ', ln)
+        s = re.sub(r'\s+', ' ', s).strip()
+        if not s:
+            continue
+        cleaned.append(s[:200])
+    if not cleaned:
+        print('Active projects: none')
+    else:
+        print('--- ACTIVE PROJECTS (post-compaction) ---')
+        for c in cleaned:
+            print(c)
+        truncated = bool(d.get('truncated'))
+        total = d.get('totalActiveProjects')
+        if truncated and isinstance(total, int) and total > len(cleaned):
+            more = total - len(cleaned)
+            print(f'+{more} more on dashboard.')
+        print('--- END ACTIVE PROJECTS ---')
+except Exception:
+    sys.exit(0)
+PYEOF
+)
+  if [ -n "$PROJ_DIGEST" ]; then
+    echo "$PROJ_DIGEST"
+  else
+    echo "Active projects: state unavailable — run /project status when ready"
+  fi
+else
+  echo "Active projects: state unavailable — run /project status when ready"
+fi
+
 echo ""
 echo "=== RECOVERY COMPLETE — You are grounded. Continue your work. ==="

package/src/templates/hooks/session-start.sh

@@ -355,4 +355,54 @@ except Exception:
   fi
 fi
 
+# Active projects digest — file-first, no HTTP (PROJECT-SCOPE-SPEC Phase 1.9).
+# Reads .instar/projects-digest.cache, written by the server on every
+# project mutation. Re-sanitizes each line on read for defense in depth.
+DIGEST_FILE="$INSTAR_DIR/projects-digest.cache"
+echo ""
+if [ -f "$DIGEST_FILE" ]; then
+  PROJ_DIGEST=$(python3 - "$DIGEST_FILE" <<'PYEOF' 2>/dev/null
+import json, re, sys
+path = sys.argv[1]
+try:
+    with open(path, 'r', encoding='utf-8') as f:
+        d = json.load(f)
+    lines = d.get('digestLines') or []
+    if not isinstance(lines, list):
+        sys.exit(0)
+    ctrl = re.compile(r'[\x00-\x1F\x7F]')
+    cleaned = []
+    for ln in lines[:5]:
+        if not isinstance(ln, str):
+            continue
+        s = ctrl.sub(' ', ln)
+        s = re.sub(r'\s+', ' ', s).strip()
+        if not s:
+            continue
+        cleaned.append(s[:200])
+    if not cleaned:
+        print('Active projects: none')
+    else:
+        print('--- ACTIVE PROJECTS ---')
+        for c in cleaned:
+            print(c)
+        truncated = bool(d.get('truncated'))
+        total = d.get('totalActiveProjects')
+        if truncated and isinstance(total, int) and total > len(cleaned):
+            more = total - len(cleaned)
+            print(f'+{more} more on dashboard.')
+        print('--- END ACTIVE PROJECTS ---')
+except Exception:
+    sys.exit(0)
+PYEOF
+)
+  if [ -n "$PROJ_DIGEST" ]; then
+    echo "$PROJ_DIGEST"
+  else
+    echo "Active projects: state unavailable — run /project status when ready"
+  fi
+else
+  echo "Active projects: state unavailable — run /project status when ready"
+fi
+
 exit 0

package/upgrades/0.28.88.md

@@ -0,0 +1,91 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: minor -->
+<!-- Valid values: patch, minor, major -->
+<!-- patch = bug fixes, refactors, test additions, doc updates -->
+<!-- minor = new features, new APIs, new capabilities (backwards-compatible) -->
+<!-- major = breaking changes to existing APIs or behavior -->
+
+## What Changed
+
+### Project-scope Phase 1a PR 3 — `/project` skill + session-start digest
+
+Final of three PRs scaffolding the project-scope feature. PR 1 added
+the type-level fields; PR 2 added the stage-transition validator and
+HTTP surface; PR 3 ships the user-invocable surface and the
+session-start orientation block so active projects stay visible across
+new sessions.
+
+Spec source: `docs/specs/PROJECT-SCOPE-SPEC.md` §§ Phase 1.7 (skill),
+Phase 1.9 (session-start + compaction-recovery hooks).
+
+**New files:**
+- `src/core/ProjectDigestCache.ts` — synchronous writer that
+  snapshots active projects to `.instar/projects-digest.cache`. Top 5
+  by `lastTouchedAt`, sanitized strings (control-char strip + 80-char
+  per-field cap), atomic write.
+- `.claude/skills/instar-project/SKILL.md` — slash-command skill. Phase
+  1a ships `/project create`, `/project status`, and `/project next`
+  (read-only + create). The mutating commands ship in Phase 1b along
+  with the round-runner.
+
+**Wired-in behavior:**
+- Server boot now constructs a `ProjectDigestCache` and registers it
+  as the digest invalidator on `InitiativeTracker`. Every successful
+  project mutation (create / update / status change) re-renders the
+  cache file atomically. First boot writes the cache unconditionally
+  so the hook scripts always have a well-formed file to read.
+- `.instar/hooks/instar/session-start.sh` and
+  `.instar/hooks/instar/compaction-recovery.sh` append an
+  `--- ACTIVE PROJECTS ---` block at the end of their orientation
+  output. They read the cache file (no HTTP, ≤50ms budget), re-sanitize
+  each line on read (defense in depth), and fall back to
+  `Active projects: state unavailable — run /project status when ready`
+  on miss / parse error.
+
+**Cache file shape (`.instar/projects-digest.cache`):**
+```json
+{
+  "generatedAt": "2026-05-11T...",
+  "digestLines": [
+    "Project [my-project]: 2 of 5 done. Next round: Round 3."
+  ],
+  "totalActiveProjects": 1,
+  "truncated": false
+}
+```
+
+## What to Tell Your User
+
+PR 3 closes the first slice of the project-tracking work. Your agent now has a built-in slash command for inspecting and registering projects, plus a session-start orientation line that keeps active projects visible at the top of every new conversation.
+
+What you'll see at session start: a short Active Projects block with up to five projects, one line each — telling you the project name, how many rounds are done out of the total, and what the next round is. If you have more than five active projects, the block ends with a note saying how many more are on the dashboard. If your agent has no projects registered yet, the block is empty.
+
+What this changes day-to-day: your agent won't lose track of multi-spec projects after a session restart or a context compaction. Before this, the first few features in a project would get attention and the rest would drift off the radar. Now the project roster is structurally visible at every new conversation. The same digest re-injects after context compression, so a long session that hits the compaction window still keeps the active-project orientation in context.
+
+The project skill itself is this slice's read-only surface: you can register a project from a markdown plan doc, list all projects, fetch one with its children, or ask "what's next?" (which currently returns a placeholder — the next phase will wire the real answer). The mutating commands that actually drive a project forward — advancing rounds, halting, acknowledging, resuming, abandoning, running a round, drift-checking, accepting a partial round, and claiming ownership across machines — ship in the next phase once the round-runner lands.
+
+Nothing existing changes shape. The initiatives routes still return what they always did. The new session-start block appears at the end of the orientation output and is plain text. If your agent doesn't register projects, you won't see any difference.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| `/project create <plan-doc>` | Register a project from a markdown plan via `POST /projects` |
+| `/project status [id]` | List all projects, or fetch one with its children, via `GET /projects[/:id]` |
+| `/project next [id]` | Phase 1a placeholder; returns the spec's 501 response |
+| Session-start project digest | Top 5 active projects rendered at every new session start (no extra config) |
+| Compaction-recovery digest | Same digest re-injects after context compression |
+| Cache file (read-only consumer) | `.instar/projects-digest.cache` — JSON snapshot, atomic writes, sanitized |
+
+## Evidence
+
+Spec: `docs/specs/PROJECT-SCOPE-SPEC.md` §§ 1.7, 1.9.
+
+- `tests/unit/ProjectDigestCache.test.ts` — 19 new tests covering
+  empty case, 3-project + 7-project cases, sanitization (control char
+  strip + 80-char cap), atomic write, invalidator wiring.
+- `tests/unit/project-digest-hooks.test.ts` — 7 new tests exercising
+  the bash hook scripts against present / missing / malformed /
+  poisoned cache files.
+- Side-effects review: `upgrades/side-effects/project-scope-phase1a-pr3.md`.