instar 1.3.1591 → 1.3.1592

package/dashboard/console/console.css

@@ -992,6 +992,12 @@ button.run-mark:focus-visible { outline: 2px solid var(--accent); outline-offset
 /* A column flex box squeezes its children to fit; history items must keep their own height
    and let the box scroll (tool lines clip their overflow, so without this they shrink to 0). */
 .sess-history > * { flex-shrink: 0; }
+/* Long tool lines never wrap, so their min-content width is the whole line: without these
+   the open session (and the page's grid column) grew to fit it, wider than a phone. */
+.main, .sess-view, .sess-open, .sess-term-wrap, .sess-composer { min-width: 0; }
+.sess-input { min-width: 0; width: 100%; }
+/* History has no live stream to return to: never float "Back to live" over it. */
+.sess-history:not([hidden]) ~ .sess-resume { display: none; }
 .sess-history-note { margin: 0; text-align: center; font-size: 13px; color: var(--text-muted); }
 .sess-h { max-width: 92%; }
 .sess-h-user { align-self: flex-end; background: var(--accent-wash); border: 1px solid var(--hairline); border-radius: var(--r-md); padding: var(--s-2) var(--s-3); }

package/dashboard/console/promises.js

@@ -143,7 +143,9 @@ function openPromise(r, { post, chatId, names, refresh }) {
         else if (fallback) fallback.querySelector('p').textContent = 'Copying is unavailable here. Select this question and paste it in the conversation:';
       } : undefined }));
   }
-  const q = r.replica && r.origin ? `?origin=${encodeURIComponent(r.origin)}` : '';
+  // Always name the machine that holds it: the same promise id can exist on several
+  // machines (ids are per machine), and a bare id is refused as ambiguous.
+  const q = r.origin ? `?origin=${encodeURIComponent(r.origin)}` : '';
   const id = encodeURIComponent(c.id);
   const result = async (path, body) => {
     const x = await post(`/commitments/${id}/${path}${q}`, body);

package/dist/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1591",
+  "packageVersion": "1.3.1592",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/dist/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "e375b8f48c31179c006eee4b19faf6f90b982da24be8cceec70ebd969cd15363",
+  "sha256": "e59a53d14ee28bb1ba378121e37d8f0c06f8c18263871c1509aa2dee9b8538c4",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1591"
+  "packageVersion": "1.3.1592"
 }

package/dist/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
   "articleCount": 93,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1591"
+  "packageVersion": "1.3.1592"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.1591",
+  "version": "1.3.1592",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-11-02T07:22:07.644Z",
-  "instarVersion": "1.3.1591",
+  "generatedAt": "2026-11-02T07:49:58.927Z",
+  "instarVersion": "1.3.1592",
   "entryCount": 205,
   "entries": {
     "hook:session-start": {

package/src/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1591",
+  "packageVersion": "1.3.1592",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/src/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "e375b8f48c31179c006eee4b19faf6f90b982da24be8cceec70ebd969cd15363",
+  "sha256": "e59a53d14ee28bb1ba378121e37d8f0c06f8c18263871c1509aa2dee9b8538c4",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1591"
+  "packageVersion": "1.3.1592"
 }

package/src/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
   "articleCount": 93,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1591"
+  "packageVersion": "1.3.1592"
 }

package/upgrades/1.3.1592.md

@@ -0,0 +1,22 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Promise actions in the console (Approve, Decline, Mark as done, Drop, Resume) always name the machine that holds the promise. Promise ids are numbered per machine, so a bare id could be refused as ambiguous when another machine had a promise with the same number.
+
+## What to Tell Your User
+
+Approve and Decline now work on every promise; before, some failed with an "ambiguous across machines" error.
+
+## Summary of New Capabilities
+
+No new capability; a fix.
+
+## Evidence
+
+Operator screenshot 2026-11-01 23:03: Approve on CMT-1206 answered "ambiguous across machines". The pool view holds CMT-1206 on the Studio (pending), the Mac Mini and the Laptop (expired).
+
+The session History view and composer now fit a phone screen: long one-line tool entries no longer widen the page, and "Back to live" no longer floats over History.

package/upgrades/side-effects/console-decide-origin.eli16.md

@@ -0,0 +1,12 @@
+# Plain overview: Approve works on promises that share a number with another machine
+
+Each of my machines numbers its promises on its own, so the same number, like CMT-1206, can
+exist on more than one machine. When you pressed Approve on the Remote Desktop promise, the
+dashboard sent only the number, without saying which machine's promise it meant, and the
+server refused because three machines had a promise with that number.
+
+Now the dashboard always says which machine holds the promise when you press Approve,
+Decline, Mark as done, Drop or Resume, so the server knows exactly which one you mean. The
+buttons look the same; they just work now.
+
+On a phone, the History view and the message box also ran off the right side of the screen, because one-line tool entries never wrap and pushed the whole page wider. They now stay inside the screen, and the "Back to live" button no longer covers History.

package/upgrades/side-effects/console-decide-origin.md

@@ -0,0 +1,24 @@
+# Side effects: promise actions always name the machine that holds the promise
+
+Console-only. The promise sheet added `?origin=<machine>` to its action requests only for a
+replica row. Promise ids are numbered per machine, so the same id (CMT-1206) existed on the
+Studio (pending), the Mini and the Laptop (expired). A bare-id request for the Studio's own
+promise was refused with "ambiguous across machines" — Approve failed for the operator on
+2026-11-01. The sheet now always sends the origin it read with the row, for Approve, Decline,
+Mark as done, Drop and Resume.
+
+1. Over-block: none; the server already resolves an own-machine origin to the local record.
+2. Under-block: a legacy row with no recorded origin still sends a bare id (unchanged).
+3-5. Same routes, same authority. 6. None. 7. Proxied/owner-routed exactly as before.
+8. Revert.
+
+## 6b. Operator-surface quality
+No visual change; the buttons now work.
+
+## Also: History at phone width
+Operator screenshot 2026-11-01 23:05: on a phone the History view and composer ran off the right
+edge. Tool lines never wrap, so their min-content width widened the open session and the page's
+grid column (measured 760 px in a 390 px viewport). `min-width: 0` on `.main`, `.sess-view`,
+`.sess-open`, `.sess-term-wrap`, `.sess-composer` and the input keeps them inside the screen
+(measured 358 px); long tool lines are cut with an ellipsis as designed. "Back to live" no
+longer floats over History, which has no live stream. Desktop is unaffected (same widths).