instar 1.3.1239 → 1.3.1241
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/core/PostUpdateMigrator.d.ts.map +1 -1
- package/dist/core/PostUpdateMigrator.js +15 -4
- package/dist/core/PostUpdateMigrator.js.map +1 -1
- package/dist/data/standards-guard-index.json +1 -1
- package/dist/data/standards-guard-index.meta.json +2 -2
- package/dist/data/standards-registry.meta.json +1 -1
- package/dist/messaging/telegram-origin/OriginAwareness.d.ts +4 -0
- package/dist/messaging/telegram-origin/OriginAwareness.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/OriginAwareness.js +11 -2
- package/dist/messaging/telegram-origin/OriginAwareness.js.map +1 -1
- package/dist/messaging/telegram-origin/OriginBotEgress.d.ts +2 -0
- package/dist/messaging/telegram-origin/OriginBotEgress.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/OriginBotEgress.js +23 -7
- package/dist/messaging/telegram-origin/OriginBotEgress.js.map +1 -1
- package/dist/messaging/telegram-origin/OriginCodexModelCanary.js +1 -1
- package/dist/messaging/telegram-origin/OriginCodexModelCanary.js.map +1 -1
- package/dist/messaging/telegram-origin/OriginConfigReader.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/OriginConfigReader.js +9 -28
- package/dist/messaging/telegram-origin/OriginConfigReader.js.map +1 -1
- package/dist/messaging/telegram-origin/OriginDetectorCanary.d.ts +1 -0
- package/dist/messaging/telegram-origin/OriginDetectorCanary.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/OriginDetectorCanary.js +155 -16
- package/dist/messaging/telegram-origin/OriginDetectorCanary.js.map +1 -1
- package/dist/messaging/telegram-origin/OriginDetectorCanary.worker.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/OriginDetectorCanary.worker.js +69 -41
- package/dist/messaging/telegram-origin/OriginDetectorCanary.worker.js.map +1 -1
- package/dist/messaging/telegram-origin/OriginNoticePolicyObserver.d.ts +1 -1
- package/dist/messaging/telegram-origin/OriginNoticePolicyObserver.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/OriginNoticePolicyObserver.js +9 -29
- package/dist/messaging/telegram-origin/OriginNoticePolicyObserver.js.map +1 -1
- package/dist/messaging/telegram-origin/OriginRetry.d.ts +2 -0
- package/dist/messaging/telegram-origin/OriginRetry.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/OriginRetry.js +5 -0
- package/dist/messaging/telegram-origin/OriginRetry.js.map +1 -1
- package/dist/messaging/telegram-origin/OriginSourcePoller.d.ts +20 -0
- package/dist/messaging/telegram-origin/OriginSourcePoller.d.ts.map +1 -0
- package/dist/messaging/telegram-origin/OriginSourcePoller.js +74 -0
- package/dist/messaging/telegram-origin/OriginSourcePoller.js.map +1 -0
- package/dist/messaging/telegram-origin/OriginStore.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/OriginStore.js +7 -1
- package/dist/messaging/telegram-origin/OriginStore.js.map +1 -1
- package/dist/messaging/telegram-origin/OriginStoreBackend.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/OriginStoreBackend.js +10 -1
- package/dist/messaging/telegram-origin/OriginStoreBackend.js.map +1 -1
- package/dist/messaging/telegram-origin/StoreTypes.d.ts +3 -0
- package/dist/messaging/telegram-origin/StoreTypes.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/TelegramOriginRuntime.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/TelegramOriginService.d.ts.map +1 -1
- package/dist/messaging/telegram-origin/TelegramOriginService.js +14 -9
- package/dist/messaging/telegram-origin/TelegramOriginService.js.map +1 -1
- package/dist/testing/selfActionRegistry.d.ts.map +1 -1
- package/dist/testing/selfActionRegistry.js +23 -1
- package/dist/testing/selfActionRegistry.js.map +1 -1
- package/package.json +1 -1
- package/src/data/builtin-manifest.json +19 -19
- package/src/data/standards-guard-index.json +1 -1
- package/src/data/standards-guard-index.meta.json +2 -2
- package/src/data/standards-registry.meta.json +1 -1
- package/upgrades/1.3.1240.md +26 -0
- package/upgrades/1.3.1241.md +20 -0
- package/upgrades/side-effects/telegram-canary-cleanup-phase.md +444 -0
- package/upgrades/side-effects/telegram-local-refusal-budget.md +180 -0
- package/upgrades/telegram-canary-cleanup-phase.eli16.md +19 -0
- package/upgrades/telegram-local-refusal-budget.eli16.md +11 -0
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"$schema": "./builtin-manifest.schema.json",
|
|
3
3
|
"schemaVersion": 1,
|
|
4
|
-
"generatedAt": "2026-09-
|
|
5
|
-
"instarVersion": "1.3.
|
|
4
|
+
"generatedAt": "2026-09-16T07:11:14.400Z",
|
|
5
|
+
"instarVersion": "1.3.1241",
|
|
6
6
|
"entryCount": 203,
|
|
7
7
|
"entries": {
|
|
8
8
|
"hook:session-start": {
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"domain": "identity",
|
|
12
12
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
13
13
|
"installedPath": ".instar/hooks/instar/session-start.sh",
|
|
14
|
-
"contentHash": "
|
|
14
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
15
15
|
"since": "2025-01-01"
|
|
16
16
|
},
|
|
17
17
|
"hook:dangerous-command-guard": {
|
|
@@ -20,7 +20,7 @@
|
|
|
20
20
|
"domain": "safety",
|
|
21
21
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
22
22
|
"installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
|
|
23
|
-
"contentHash": "
|
|
23
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
24
24
|
"since": "2025-01-01"
|
|
25
25
|
},
|
|
26
26
|
"hook:grounding-before-messaging": {
|
|
@@ -29,7 +29,7 @@
|
|
|
29
29
|
"domain": "safety",
|
|
30
30
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
31
31
|
"installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
|
|
32
|
-
"contentHash": "
|
|
32
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
33
33
|
"since": "2025-01-01"
|
|
34
34
|
},
|
|
35
35
|
"hook:compaction-recovery": {
|
|
@@ -38,7 +38,7 @@
|
|
|
38
38
|
"domain": "identity",
|
|
39
39
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
40
40
|
"installedPath": ".instar/hooks/instar/compaction-recovery.sh",
|
|
41
|
-
"contentHash": "
|
|
41
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
42
42
|
"since": "2025-01-01"
|
|
43
43
|
},
|
|
44
44
|
"hook:external-operation-gate": {
|
|
@@ -47,7 +47,7 @@
|
|
|
47
47
|
"domain": "safety",
|
|
48
48
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
49
49
|
"installedPath": ".instar/hooks/instar/external-operation-gate.js",
|
|
50
|
-
"contentHash": "
|
|
50
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
51
51
|
"since": "2025-01-01"
|
|
52
52
|
},
|
|
53
53
|
"hook:deferral-detector": {
|
|
@@ -56,7 +56,7 @@
|
|
|
56
56
|
"domain": "safety",
|
|
57
57
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
58
58
|
"installedPath": ".instar/hooks/instar/deferral-detector.js",
|
|
59
|
-
"contentHash": "
|
|
59
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
60
60
|
"since": "2025-01-01"
|
|
61
61
|
},
|
|
62
62
|
"hook:self-stop-guard": {
|
|
@@ -65,7 +65,7 @@
|
|
|
65
65
|
"domain": "coherence",
|
|
66
66
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
67
67
|
"installedPath": ".instar/hooks/instar/self-stop-guard.js",
|
|
68
|
-
"contentHash": "
|
|
68
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
69
69
|
"since": "2025-01-01"
|
|
70
70
|
},
|
|
71
71
|
"hook:post-action-reflection": {
|
|
@@ -74,7 +74,7 @@
|
|
|
74
74
|
"domain": "evolution",
|
|
75
75
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
76
76
|
"installedPath": ".instar/hooks/instar/post-action-reflection.js",
|
|
77
|
-
"contentHash": "
|
|
77
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
78
78
|
"since": "2025-01-01"
|
|
79
79
|
},
|
|
80
80
|
"hook:external-communication-guard": {
|
|
@@ -83,7 +83,7 @@
|
|
|
83
83
|
"domain": "safety",
|
|
84
84
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
85
85
|
"installedPath": ".instar/hooks/instar/external-communication-guard.js",
|
|
86
|
-
"contentHash": "
|
|
86
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
87
87
|
"since": "2025-01-01"
|
|
88
88
|
},
|
|
89
89
|
"hook:telegram-origin-guard": {
|
|
@@ -101,7 +101,7 @@
|
|
|
101
101
|
"domain": "coherence",
|
|
102
102
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
103
103
|
"installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
|
|
104
|
-
"contentHash": "
|
|
104
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
105
105
|
"since": "2025-01-01"
|
|
106
106
|
},
|
|
107
107
|
"hook:scope-coherence-checkpoint": {
|
|
@@ -110,7 +110,7 @@
|
|
|
110
110
|
"domain": "coherence",
|
|
111
111
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
112
112
|
"installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
|
|
113
|
-
"contentHash": "
|
|
113
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
114
114
|
"since": "2025-01-01"
|
|
115
115
|
},
|
|
116
116
|
"hook:free-text-guard": {
|
|
@@ -119,7 +119,7 @@
|
|
|
119
119
|
"domain": "safety",
|
|
120
120
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
121
121
|
"installedPath": ".instar/hooks/instar/free-text-guard.sh",
|
|
122
|
-
"contentHash": "
|
|
122
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
123
123
|
"since": "2025-01-01"
|
|
124
124
|
},
|
|
125
125
|
"hook:claim-intercept": {
|
|
@@ -128,7 +128,7 @@
|
|
|
128
128
|
"domain": "coherence",
|
|
129
129
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
130
130
|
"installedPath": ".instar/hooks/instar/claim-intercept.js",
|
|
131
|
-
"contentHash": "
|
|
131
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
132
132
|
"since": "2025-01-01"
|
|
133
133
|
},
|
|
134
134
|
"hook:claim-intercept-response": {
|
|
@@ -137,7 +137,7 @@
|
|
|
137
137
|
"domain": "coherence",
|
|
138
138
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
139
139
|
"installedPath": ".instar/hooks/instar/claim-intercept-response.js",
|
|
140
|
-
"contentHash": "
|
|
140
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
141
141
|
"since": "2025-01-01"
|
|
142
142
|
},
|
|
143
143
|
"hook:stop-gate-router": {
|
|
@@ -146,7 +146,7 @@
|
|
|
146
146
|
"domain": "safety",
|
|
147
147
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
148
148
|
"installedPath": ".instar/hooks/instar/stop-gate-router.js",
|
|
149
|
-
"contentHash": "
|
|
149
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
150
150
|
"since": "2025-01-01"
|
|
151
151
|
},
|
|
152
152
|
"hook:auto-approve-permissions": {
|
|
@@ -155,7 +155,7 @@
|
|
|
155
155
|
"domain": "safety",
|
|
156
156
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
157
157
|
"installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
|
|
158
|
-
"contentHash": "
|
|
158
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
159
159
|
"since": "2025-01-01"
|
|
160
160
|
},
|
|
161
161
|
"job:health-check": {
|
|
@@ -1571,7 +1571,7 @@
|
|
|
1571
1571
|
"type": "subsystem",
|
|
1572
1572
|
"domain": "updates",
|
|
1573
1573
|
"sourcePath": "src/core/PostUpdateMigrator.ts",
|
|
1574
|
-
"contentHash": "
|
|
1574
|
+
"contentHash": "3be65f2b2e81baf9ad21bb83ec4406fda778b36de11a8b6ea4e26e253844a529",
|
|
1575
1575
|
"since": "2025-01-01"
|
|
1576
1576
|
},
|
|
1577
1577
|
"subsystem:scheduler": {
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"generatedFrom": "source-tree",
|
|
4
4
|
"registrySha256": "890eec3dcf80e4388c396f43001a0bd3fabc80c88f79aa9525885d6402a6dfdf",
|
|
5
|
-
"packageVersion": "1.3.
|
|
5
|
+
"packageVersion": "1.3.1241",
|
|
6
6
|
"guards": [
|
|
7
7
|
{
|
|
8
8
|
"ref": "docs/audits/phase-b/f10-triage.md",
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
{
|
|
2
|
-
"sha256": "
|
|
2
|
+
"sha256": "8f5ca6a1cd0012a31b051606b6646a3f4ed26f5822fcbaa0ba46d73cef6644a2",
|
|
3
3
|
"registrySha256": "890eec3dcf80e4388c396f43001a0bd3fabc80c88f79aa9525885d6402a6dfdf",
|
|
4
|
-
"packageVersion": "1.3.
|
|
4
|
+
"packageVersion": "1.3.1241"
|
|
5
5
|
}
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
# Upgrade Guide — vNEXT
|
|
2
|
+
|
|
3
|
+
<!-- assembled-by: assemble-next-md -->
|
|
4
|
+
<!-- bump: patch -->
|
|
5
|
+
|
|
6
|
+
## What Changed
|
|
7
|
+
|
|
8
|
+
The owned configuration canary retains its six-second check deadline and now measures verified cleanup separately, with a 30-second bound. Its disposable worker removes the private fixture and reports worker-side completion timing; the parent then terminates the watcher thread as one owned resource boundary. Passing health requires complete ordered checks, valid cleanup proof, actual worker exit, and idempotent parent removal. Missing or late cleanup latches unavailable health and prevents further attempts while retaining ownership until outstanding teardown settles.
|
|
9
|
+
|
|
10
|
+
## What to Tell Your User
|
|
11
|
+
|
|
12
|
+
A Telegram diagnostic can show cleanup running after its checks finish. Slow per-watcher shutdown no longer turns healthy checks into a false cleanup timeout. A passing diagnostic still does not prove that a message was delivered.
|
|
13
|
+
|
|
14
|
+
## Summary of New Capabilities
|
|
15
|
+
|
|
16
|
+
Existing detector health distinguishes active cleanup from completed proof. Startup and retry limits remain in place. Installed agent guidance receives an idempotent update preserving operator additions.
|
|
17
|
+
|
|
18
|
+
## Evidence
|
|
19
|
+
|
|
20
|
+
The separate side-effects artifact records the reproduced 15–43 second native watcher-close stall, the worker-boundary repair, boundary coverage and release validation. This fragment alone is not evidence that a release is active.
|
|
21
|
+
|
|
22
|
+
Aggregate-load validation also separated storage-worker startup from ordinary request timing and made the real-tmux byte-exact control wait until its receiver has entered raw mode. These are bounded reliability fixes; they grant no new delivery authority.
|
|
23
|
+
|
|
24
|
+
Production configuration and notice-policy readers now avoid parent-process native filesystem watchers too. They poll exact source metadata on a short unrefed cadence, retain fail-closed invalidation and the existing five-second refresh/30-second expiry limits, and close by cancelling a timer. This removes the same macOS watcher-close stall from normal runtime teardown without changing delivery authority.
|
|
25
|
+
|
|
26
|
+
That observer is registered in the self-action convergence ratchet, which enforces its 250 ms rate floor and deterministic close boundary.
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
# Upgrade Guide — vNEXT
|
|
2
|
+
|
|
3
|
+
<!-- assembled-by: assemble-next-md -->
|
|
4
|
+
<!-- bump: patch -->
|
|
5
|
+
|
|
6
|
+
## What Changed
|
|
7
|
+
|
|
8
|
+
The prepared Bot API boundary supplies request-bound evidence when capacity acquisition fails before network invocation. A claim-fenced transaction keeps the failure audit while returning that transport attempt. Original deadlines, retry pacing, credential debits and uncertain-delivery safeguards remain in force. Existing agent instructions receive an idempotent correction describing the accounting.
|
|
9
|
+
|
|
10
|
+
## What to Tell Your User
|
|
11
|
+
|
|
12
|
+
A temporary local send-capacity refusal no longer exhausts a queued reply's transport attempts before contacting Telegram. Recovery still has a deadline; queued does not mean delivered.
|
|
13
|
+
|
|
14
|
+
## Summary of New Capabilities
|
|
15
|
+
|
|
16
|
+
No new command. Existing origin audit retains each local refusal while transport counters exclude proven non-invocations.
|
|
17
|
+
|
|
18
|
+
## Evidence
|
|
19
|
+
|
|
20
|
+
Targeted unit, canonical-store, authenticated HTTP and production-restart coverage includes repeated refusals, one-attempt budgets, false proof, persistence failure, lease expiry and migration. Validation results are recorded in the side-effects artifact; this fragment alone is not release evidence.
|