instar 1.2.42 → 1.2.44

package/dist/core/PostUpdateMigrator.d.ts

@@ -129,6 +129,19 @@ export declare class PostUpdateMigrator {
      * skills are never modified.
      */
     private migrateSkillPortHardcoding;
+    /**
+     * Update the /build skill with the GSD-cherry-pick methodology sections
+     * (Phase 0.5 must-haves + STRIDE, atomic-commit discipline, SUMMARY
+     * deviation-tracking). installBuildSkill is install-if-missing, so existing
+     * agents need an explicit content-update migration.
+     *
+     * Idempotent + conservative: only re-copies the bundled SKILL.md when the
+     * installed copy (a) lacks the new "Phase 0.5: MUST-HAVES" marker AND
+     * (b) still looks like the stock /build skill (contains "Rigorous Build
+     * Skill" + "Phase 5: COMPLETE"). A heavily-customized /build skill that no
+     * longer matches the stock fingerprint is left untouched.
+     */
+    private migrateBuildSkillMethodology;
     /**
      * Deploy any missing built-in skills (e.g., guardian job skills added after initial setup).
      * Non-destructive — only writes SKILL.md files that don't already exist.
@@ -389,7 +402,7 @@ export declare class PostUpdateMigrator {
      * Get the content of a named hook template.
      * Used by init.ts to share canonical hook content without duplication.
      */
-    getHookContent(name: 'session-start' | 'compaction-recovery' | 'external-operation-gate' | 'deferral-detector' | 'post-action-reflection' | 'external-communication-guard' | 'scope-coherence-collector' | 'scope-coherence-checkpoint' | 'claim-intercept' | 'claim-intercept-response' | 'telegram-topic-context' | 'response-review' | 'auto-approve-permissions' | 'skill-usage-telemetry' | 'build-stop-hook'): string;
+    getHookContent(name: 'session-start' | 'compaction-recovery' | 'external-operation-gate' | 'deferral-detector' | 'slopcheck-guard' | 'post-action-reflection' | 'external-communication-guard' | 'scope-coherence-collector' | 'scope-coherence-checkpoint' | 'claim-intercept' | 'claim-intercept-response' | 'telegram-topic-context' | 'response-review' | 'auto-approve-permissions' | 'skill-usage-telemetry' | 'build-stop-hook'): string;
     /** Public accessor for grounding-before-messaging hook content (used by init.ts) */
     getGroundingBeforeMessagingPublic(): string;
     /** Public accessor for convergence-check script content (used by init.ts) */
@@ -401,6 +414,7 @@ export declare class PostUpdateMigrator {
     private getTelegramTopicContextHook;
     private getCompactionRecovery;
     private getDeferralDetectorHook;
+    private getSlopcheckGuardHook;
     private getPostActionReflectionHook;
     private getExternalCommunicationGuardHook;
     private getExternalOperationGateHook;

package/dist/core/PostUpdateMigrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAiCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAIjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB;;;OAGG;IACH,OAAO,IAAI,eAAe;IA2E1B,OAAO,CAAC,0BAA0B;IAmDlC,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IAmEpD,OAAO,CAAC,yBAAyB;IAqGjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAkElC,OAAO,CAAC,oBAAoB;IAqH5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAiKpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IA+DzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAwGhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAqjBvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IA+E1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IA6ItB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAqOvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,MAAM;IAoB3Z,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC,OAAO,CAAC,mBAAmB;IAoY3B,OAAO,CAAC,wBAAwB;IAmEhC,OAAO,CAAC,2BAA2B;IA0DnC,OAAO,CAAC,yBAAyB;IAuGjC,OAAO,CAAC,2BAA2B;IAqInC,OAAO,CAAC,qBAAqB;IAqP7B,OAAO,CAAC,uBAAuB;IA6H/B,OAAO,CAAC,2BAA2B;IA8GnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA4LpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CA4B1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IA4B/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,8BAA8B;IAoHtC,OAAO,CAAC,+BAA+B;IAmJvC,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,qBAAqB;IA4N7B,OAAO,CAAC,qBAAqB;IA4H7B,OAAO,CAAC,6BAA6B;IAyKrC,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,gBAAgB;IAqFxB,OAAO,CAAC,6BAA6B;CAoCtC"}
+{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAiCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAIjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB;;;OAGG;IACH,OAAO,IAAI,eAAe;IA4E1B,OAAO,CAAC,0BAA0B;IAmDlC,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IAmEpD,OAAO,CAAC,yBAAyB;IAqGjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAkElC,OAAO,CAAC,oBAAoB;IAqH5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,4BAA4B;IAwBpC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAwKpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAgEzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAwGhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAqjBvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IA+E1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IA6ItB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAqQvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,MAAM;IAqB/a,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC,OAAO,CAAC,mBAAmB;IAoY3B,OAAO,CAAC,wBAAwB;IAmEhC,OAAO,CAAC,2BAA2B;IA0DnC,OAAO,CAAC,yBAAyB;IAuGjC,OAAO,CAAC,2BAA2B;IAqInC,OAAO,CAAC,qBAAqB;IAqP7B,OAAO,CAAC,uBAAuB;IA6H/B,OAAO,CAAC,qBAAqB;IAsH7B,OAAO,CAAC,2BAA2B;IA8GnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA4LpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CA4B1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IA4B/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,8BAA8B;IAoHtC,OAAO,CAAC,+BAA+B;IAmJvC,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,qBAAqB;IA4N7B,OAAO,CAAC,qBAAqB;IA4H7B,OAAO,CAAC,6BAA6B;IAyKrC,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,gBAAgB;IAqFxB,OAAO,CAAC,6BAA6B;CAoCtC"}

package/dist/core/PostUpdateMigrator.js

@@ -140,6 +140,7 @@ export class PostUpdateMigrator {
         this.migrateBuiltinJobs(result);
         this.autoMigrateLegacyJobsJson(result);
         this.migrateSkillPortHardcoding(result);
+        this.migrateBuildSkillMethodology(result);
         this.migrateSelfKnowledgeTree(result);
         this.migrateSoulMd(result);
         this.migrateAgentMdSections(result);
@@ -1016,6 +1017,45 @@ export class PostUpdateMigrator {
             }
         }
     }
+    /**
+     * Update the /build skill with the GSD-cherry-pick methodology sections
+     * (Phase 0.5 must-haves + STRIDE, atomic-commit discipline, SUMMARY
+     * deviation-tracking). installBuildSkill is install-if-missing, so existing
+     * agents need an explicit content-update migration.
+     *
+     * Idempotent + conservative: only re-copies the bundled SKILL.md when the
+     * installed copy (a) lacks the new "Phase 0.5: MUST-HAVES" marker AND
+     * (b) still looks like the stock /build skill (contains "Rigorous Build
+     * Skill" + "Phase 5: COMPLETE"). A heavily-customized /build skill that no
+     * longer matches the stock fingerprint is left untouched.
+     */
+    migrateBuildSkillMethodology(result) {
+        try {
+            const skillFile = path.join(this.config.projectDir, '.claude', 'skills', 'build', 'SKILL.md');
+            if (!fs.existsSync(skillFile))
+                return; // installBuildSkill handles fresh installs
+            const current = fs.readFileSync(skillFile, 'utf8');
+            if (current.includes('Phase 0.5: MUST-HAVES'))
+                return; // already updated — idempotent
+            // Stock-fingerprint guard: don't clobber a customized /build skill.
+            if (!current.includes('Rigorous Build Skill') || !current.includes('Phase 5: COMPLETE')) {
+                result.skipped.push('skills/build/SKILL.md: customized — left untouched (no methodology update)');
+                return;
+            }
+            // Re-copy the bundled SKILL.md (which carries the new sections).
+            const bundled = path.join(__dirname, '..', '..', '.claude', 'skills', 'build', 'SKILL.md');
+            if (!fs.existsSync(bundled))
+                return;
+            const next = fs.readFileSync(bundled, 'utf8');
+            if (next.includes('Phase 0.5: MUST-HAVES')) {
+                fs.writeFileSync(skillFile, next);
+                result.upgraded.push('skills/build/SKILL.md (GSD methodology: must-haves + atomic-commit + SUMMARY deviations)');
+            }
+        }
+        catch (err) {
+            result.errors.push(`skills/build/SKILL.md methodology migration: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
     /**
      * Deploy any missing built-in skills (e.g., guardian job skills added after initial setup).
      * Non-destructive — only writes SKILL.md files that don't already exist.
@@ -1298,6 +1338,13 @@ export class PostUpdateMigrator {
         catch (err) {
             result.errors.push(`deferral-detector.js: ${err instanceof Error ? err.message : String(err)}`);
         }
+        try {
+            fs.writeFileSync(path.join(instarHooksDir, 'slopcheck-guard.js'), this.getSlopcheckGuardHook(), { mode: 0o755 });
+            result.upgraded.push('hooks/instar/slopcheck-guard.js (package-legitimacy check on installs)');
+        }
+        catch (err) {
+            result.errors.push(`slopcheck-guard.js: ${err instanceof Error ? err.message : String(err)}`);
+        }
         try {
             fs.writeFileSync(path.join(instarHooksDir, 'post-action-reflection.js'), this.getPostActionReflectionHook(), { mode: 0o755 });
             result.upgraded.push('hooks/instar/post-action-reflection.js (evolution awareness)');
@@ -1463,6 +1510,7 @@ export class PostUpdateMigrator {
         const builtinHooks = [
             'session-start.sh', 'dangerous-command-guard.sh', 'grounding-before-messaging.sh',
             'compaction-recovery.sh', 'external-operation-gate.js', 'deferral-detector.js',
+            'slopcheck-guard.js',
             'post-action-reflection.js', 'external-communication-guard.js',
             'scope-coherence-collector.js', 'scope-coherence-checkpoint.js',
             'instructions-loaded-tracker.js', 'subagent-start-tracker.js',
@@ -2883,6 +2931,37 @@ Create worktrees for collaborator repos with \`instar worktree create <branch>\`
                 result.upgraded.push('.claude/settings.json: migrated compaction hook from Notification to SessionStart');
             }
         }
+        // Ensure PreToolUse Bash slopcheck-guard hook exists (cherry-pick 2026-05-23).
+        // Existing agents only get new Bash-matcher hooks through an explicit ensure
+        // block here — there is no wholesale settings-template refresh on migration.
+        {
+            const bashEntry = preToolUse.find(e => e.matcher === 'Bash');
+            const hasSlopcheck = bashEntry?.hooks?.some(h => h.command?.includes('slopcheck-guard'));
+            if (bashEntry && !hasSlopcheck) {
+                bashEntry.hooks = bashEntry.hooks ?? [];
+                bashEntry.hooks.push({
+                    type: 'command',
+                    command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/slopcheck-guard.js',
+                    timeout: 5000,
+                });
+                patched = true;
+                result.upgraded.push('.claude/settings.json: added PreToolUse slopcheck-guard hook');
+            }
+            else if (!bashEntry) {
+                // No Bash matcher at all — create one with just slopcheck (rare; most
+                // agents already have a Bash matcher with dangerous-command-guard).
+                preToolUse.push({
+                    matcher: 'Bash',
+                    hooks: [{
+                            type: 'command',
+                            command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/slopcheck-guard.js',
+                            timeout: 5000,
+                        }],
+                });
+                patched = true;
+                result.upgraded.push('.claude/settings.json: created PreToolUse Bash matcher with slopcheck-guard');
+            }
+        }
         // Ensure PostToolUse skill-usage-telemetry hook exists
         {
             const postToolUse = (hooks.PostToolUse || []);
@@ -3458,6 +3537,7 @@ Create worktrees for collaborator repos with \`instar worktree create <branch>\`
             case 'compaction-recovery': return this.getCompactionRecovery();
             case 'external-operation-gate': return this.getExternalOperationGateHook();
             case 'deferral-detector': return this.getDeferralDetectorHook();
+            case 'slopcheck-guard': return this.getSlopcheckGuardHook();
             case 'post-action-reflection': return this.getPostActionReflectionHook();
             case 'external-communication-guard': return this.getExternalCommunicationGuardHook();
             case 'scope-coherence-collector': return this.getScopeCoherenceCollectorHook();
@@ -4589,6 +4669,123 @@ process.stdin.on('end', () => {
   } catch { /* don't break on errors */ }
   process.exit(0);
 });
+`;
+    }
+    getSlopcheckGuardHook() {
+        return `#!/usr/bin/env node
+// Slopcheck guard — package-legitimacy check on install commands.
+// PreToolUse hook for Bash. When the command is a package install
+// (npm/pnpm/yarn/pip/cargo), it extracts the package names and checks
+// whether each is already known to the project (present in a lockfile
+// or manifest). Unfamiliar packages get a confirmation nudge — does NOT
+// block, just surfaces the legitimacy question before a slopsquatted or
+// hallucinated package gets installed.
+//
+// Cherry-picked into Instar 2026-05-23 from the GSD-Instar integration
+// spike (gsd-executor Rule 3 exclusion: package installs are NOT
+// auto-fixable because a failed/typo'd install may be a slopsquat).
+// Signal-only — decision: approve + additionalContext. The agent decides.
+
+const fs = require('fs');
+const path = require('path');
+
+// Install-command patterns → capture the args portion after the verb.
+const INSTALL_PATTERNS = [
+  { re: /\\bnpm\\s+(?:i|install|add)\\s+([^&|;]+)/i, mgr: 'npm' },
+  { re: /\\bpnpm\\s+(?:i|install|add)\\s+([^&|;]+)/i, mgr: 'pnpm' },
+  { re: /\\byarn\\s+add\\s+([^&|;]+)/i, mgr: 'yarn' },
+  { re: /\\bpip3?\\s+install\\s+([^&|;]+)/i, mgr: 'pip' },
+  { re: /\\bcargo\\s+add\\s+([^&|;]+)/i, mgr: 'cargo' },
+];
+
+// Flags to strip when extracting package names.
+const FLAG_RE = /^-/;
+
+function parsePackages(argStr) {
+  return argStr
+    .trim()
+    .split(/\\s+/)
+    .filter(tok => tok && !FLAG_RE.test(tok))
+    // Strip version specifiers: pkg@1.2.3, pkg==1.2.3, pkg~=1.0
+    .map(tok => tok.replace(/[@=~<>!].*$/, '').replace(/\\[.*$/, ''))
+    .filter(Boolean);
+}
+
+// Returns the set of package names already known to the project from
+// any manifest/lockfile present in the project dir.
+function knownPackages(projectDir) {
+  const known = new Set();
+  const add = (name) => { if (name && typeof name === 'string') known.add(name.toLowerCase()); };
+
+  // package.json deps + devDeps + lock
+  try {
+    const pkg = JSON.parse(fs.readFileSync(path.join(projectDir, 'package.json'), 'utf-8'));
+    for (const k of ['dependencies', 'devDependencies', 'peerDependencies', 'optionalDependencies']) {
+      if (pkg[k]) Object.keys(pkg[k]).forEach(add);
+    }
+  } catch { /* no package.json */ }
+  // package-lock.json — names appear as keys; cheap substring presence check via raw read
+  let lockRaw = '';
+  for (const lf of ['package-lock.json', 'pnpm-lock.yaml', 'yarn.lock', 'requirements.txt', 'Cargo.toml', 'Cargo.lock', 'Pipfile', 'pyproject.toml']) {
+    try { lockRaw += '\\n' + fs.readFileSync(path.join(projectDir, lf), 'utf-8'); } catch { /* absent */ }
+  }
+  return { known, lockRaw: lockRaw.toLowerCase() };
+}
+
+let data = '';
+process.stdin.on('data', chunk => data += chunk);
+process.stdin.on('end', () => {
+  try {
+    const input = JSON.parse(data);
+    if (input.tool_name !== 'Bash') process.exit(0);
+    const command = (input.tool_input || {}).command || '';
+    if (!command) process.exit(0);
+
+    let matched = null;
+    for (const p of INSTALL_PATTERNS) {
+      const m = command.match(p.re);
+      if (m) { matched = { mgr: p.mgr, args: m[1] }; break; }
+    }
+    if (!matched) process.exit(0);
+
+    const pkgs = parsePackages(matched.args);
+    if (pkgs.length === 0) process.exit(0);
+
+    const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();
+    const { known, lockRaw } = knownPackages(projectDir);
+
+    // A package is "familiar" if it's in the manifest deps OR appears as a
+    // token in any lockfile (covers transitive + already-installed).
+    const unfamiliar = pkgs.filter(pkg => {
+      const low = pkg.toLowerCase();
+      if (known.has(low)) return false;
+      // Word-boundary-ish presence in lockfiles (quoted or pathed)
+      if (lockRaw.includes('"' + low + '"') || lockRaw.includes('/' + low) ||
+          lockRaw.includes(low + '@') || lockRaw.includes(low + ' ') || lockRaw.includes(low + '==')) return false;
+      return true;
+    });
+
+    if (unfamiliar.length === 0) process.exit(0);
+
+    const checklist = [
+      'SLOPCHECK — installing package(s) not already known to this project: ' + unfamiliar.join(', '),
+      '',
+      'Before installing an unfamiliar package, confirm it is legitimate (not a',
+      'slopsquat or a hallucinated name):',
+      '',
+      '1. Is the spelling exactly right? Typosquats differ by one or two characters.',
+      '2. Does the package actually exist on its registry, with real download counts',
+      '   and a credible publisher? (npmjs.com / pypi.org / crates.io)',
+      '3. Did YOU choose this package deliberately, or did it come from an LLM',
+      '   suggestion that might be hallucinated?',
+      '4. Is there a more-established alternative you already trust?',
+      '',
+      'This is a nudge, not a block. If the package is legitimate, proceed.',
+    ];
+    process.stdout.write(JSON.stringify({ decision: 'approve', additionalContext: checklist.join('\\n') }));
+  } catch { /* never block on errors */ }
+  process.exit(0);
+});
 `;
     }
     getPostActionReflectionHook() {