instar 1.3.165 → 1.3.167

package/dist/core/ForwardedTopicContext.d.ts

@@ -0,0 +1,29 @@
+/**
+ * ForwardedTopicContext — build the prior-conversation context block for a session
+ * that has just been MOVED to this machine by the multi-machine session pool (§L4).
+ *
+ * Why this exists (bug #2): when a topic is moved to a standby, the standby spawns the
+ * session locally but its OWN message ledger for that topic is EMPTY (it never polled
+ * the topic) and its TopicMemory has no rows — so `spawnSessionForTopic` builds an
+ * empty context and the moved conversation starts with amnesia. The router (which DID
+ * hold the conversation) is the source of truth; the receiver fetches the recent
+ * history from it and formats it here into the same "Thread History" block the
+ * single-machine JSONL path produces, so the moved session continues the conversation
+ * instead of starting blank.
+ *
+ * Pure + caller-agnostic so it is unit-testable without a live two-machine setup.
+ */
+/** One historical message, matching TelegramAdapter.getTopicHistory()'s shape. */
+export interface ForwardedHistoryMessage {
+    fromUser: boolean;
+    text?: string;
+    senderName?: string;
+    timestamp?: string | number;
+}
+/**
+ * Format fetched router-side history into a Thread History context block, or '' when
+ * there is nothing to inject. Mirrors the single-machine JSONL formatting in
+ * spawnSessionForTopic so a moved session reads identically to a local one.
+ */
+export declare function formatForwardedTopicContext(messages: ForwardedHistoryMessage[] | null | undefined, topicName?: string): string;
+//# sourceMappingURL=ForwardedTopicContext.d.ts.map

package/dist/core/ForwardedTopicContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ForwardedTopicContext.d.ts","sourceRoot":"","sources":["../../src/core/ForwardedTopicContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,kFAAkF;AAClF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC7B;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,IAAI,GAAG,SAAS,EACtD,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAqBR"}

package/dist/core/ForwardedTopicContext.js

@@ -0,0 +1,46 @@
+/**
+ * ForwardedTopicContext — build the prior-conversation context block for a session
+ * that has just been MOVED to this machine by the multi-machine session pool (§L4).
+ *
+ * Why this exists (bug #2): when a topic is moved to a standby, the standby spawns the
+ * session locally but its OWN message ledger for that topic is EMPTY (it never polled
+ * the topic) and its TopicMemory has no rows — so `spawnSessionForTopic` builds an
+ * empty context and the moved conversation starts with amnesia. The router (which DID
+ * hold the conversation) is the source of truth; the receiver fetches the recent
+ * history from it and formats it here into the same "Thread History" block the
+ * single-machine JSONL path produces, so the moved session continues the conversation
+ * instead of starting blank.
+ *
+ * Pure + caller-agnostic so it is unit-testable without a live two-machine setup.
+ */
+/**
+ * Format fetched router-side history into a Thread History context block, or '' when
+ * there is nothing to inject. Mirrors the single-machine JSONL formatting in
+ * spawnSessionForTopic so a moved session reads identically to a local one.
+ */
+export function formatForwardedTopicContext(messages, topicName) {
+    if (!Array.isArray(messages) || messages.length === 0)
+        return '';
+    const lines = [];
+    lines.push(`--- Thread History (last ${messages.length} messages, relayed from the previous machine) ---`);
+    lines.push(`IMPORTANT: Read this history carefully before taking any action.`);
+    lines.push(`Your task is to continue THIS conversation, not start something new.`);
+    if (topicName)
+        lines.push(`Topic: ${topicName}`);
+    lines.push('');
+    for (const m of messages) {
+        const sender = m.fromUser ? (m.senderName || 'User') : 'Agent';
+        let ts = '??:??';
+        if (m.timestamp != null) {
+            const d = new Date(m.timestamp);
+            if (!Number.isNaN(d.getTime()))
+                ts = d.toISOString().slice(11, 19);
+        }
+        const text = (m.text || '').slice(0, 2000);
+        lines.push(`[${ts}] ${sender}: ${text}`);
+    }
+    lines.push('');
+    lines.push('--- End Thread History ---');
+    return lines.join('\n');
+}
+//# sourceMappingURL=ForwardedTopicContext.js.map

package/dist/core/ForwardedTopicContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ForwardedTopicContext.js","sourceRoot":"","sources":["../../src/core/ForwardedTopicContext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAUH;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAsD,EACtD,SAAkB;IAElB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,4BAA4B,QAAQ,CAAC,MAAM,mDAAmD,CAAC,CAAC;IAC3G,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACnF,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/D,IAAI,EAAE,GAAG,OAAO,CAAC;QACjB,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAE,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/messaging/installAgentMessageHook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installAgentMessageHook.d.ts","sourceRoot":"","sources":["../../src/messaging/installAgentMessageHook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,UAAU,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,mBAAmB,EAAmB,MAAM,0BAA0B,CAAC;AACrF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;oFACoF;AACpF,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE7G,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,YAAY,EAAE,gBAAgB,CAAC;IAC/B;;sDAEkD;IAClD,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACxC;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,2BAA2B,GAAG,gBAAgB,CAuFzF"}
+{"version":3,"file":"installAgentMessageHook.d.ts","sourceRoot":"","sources":["../../src/messaging/installAgentMessageHook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,UAAU,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,mBAAmB,EAAmB,MAAM,0BAA0B,CAAC;AACrF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;oFACoF;AACpF,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE7G,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,YAAY,EAAE,gBAAgB,CAAC;IAC/B;;sDAEkD;IAClD,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACxC;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,2BAA2B,GAAG,gBAAgB,CAkGzF"}

package/dist/messaging/installAgentMessageHook.js

@@ -83,16 +83,26 @@ export function buildAgentMessageHook(deps) {
             telegramSenderChatId: input.senderChatId,
             topicId: input.topicId,
         });
-        try {
-            await handler(msg, { topicId: input.topicId, senderBotId: input.senderBotId });
-        }
-        catch (err) {
-            // A role-handler failure is recorded but doesn't un-mark the id (we still treat
-            // the message as processed; retrying would just re-fail). Stage-B forensics can see
-            // the routed row + the absence of a downstream effect.
+        // Accept-boundary (the #581 / #3 class — this is the THIRD a2a path): a role
+        // handler (e.g. the mentee mentor-message handler) SPAWNS a session and
+        // bounded-waits for the reply — that can take MINUTES — and delivers its
+        // reply OUT via a separate a2a message, not this HTTP response. AWAITING it
+        // here meant the caller's /a2a/inbox POST waited the full handler, so the
+        // sender's ~10s `AbortSignal.timeout` fired and logged a FALSE "local-inbox
+        // delivery attempt failed" (the message was in fact accepted — its id is
+        // marked processed above — and the reply will arrive on its own channel).
+        // Respond ACCEPTED immediately and run the handler in the background. The
+        // idempotency mark above still dedups any retry; a handler failure is caught
+        // + logged async (it can't reject a response that already returned).
+        void Promise.resolve()
+            .then(() => handler(msg, { topicId: input.topicId, senderBotId: input.senderBotId }))
+            .catch((err) => {
+            // A role-handler failure is recorded but doesn't un-mark the id (we still
+            // treat the message as processed; retrying would just re-fail). Stage-B
+            // forensics can see the routed row + the absence of a downstream effect.
             // eslint-disable-next-line no-console
             console.error(`[a2a] role-handler "${msg.role}" failed:`, err instanceof Error ? err.message : String(err));
-        }
+        });
         return { handled: true };
     };
 }

package/dist/messaging/installAgentMessageHook.js.map

@@ -1 +1 @@
-{"version":3,"file":"installAgentMessageHook.js","sourceRoot":"","sources":["../../src/messaging/installAgentMessageHook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,WAAW,GAIZ,MAAM,yBAAyB,CAAC;AAmBjC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAiC;IACrE,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,GAAG,GAAoB;YAC3B,GAAG,EAAE,KAAK,CAAC,IAAI;YACf,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC;QACF,MAAM,QAAQ,GAAG,WAAW,CAC1B,GAAG,EACH,IAAI,CAAC,MAAM,EACX;YACE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;YACvD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;SAC3C,CACF,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAoB;gBAC3B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBACzB,SAAS,EAAE,UAAU;gBACrB,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI;gBAC7B,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE;gBACzB,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI;gBACxB,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE;gBACpB,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI;gBACxB,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE;gBACpB,iBAAiB,EAAE,KAAK,CAAC,WAAW;gBACpC,oBAAoB,EAAE,KAAK,CAAC,YAAY;gBACxC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACpC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,qBAAqB;QACrB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,mFAAmF;YACnF,iEAAiE;YACjE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBACzB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBACzB,SAAS,EAAE,UAAU;gBACrB,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,2BAA2B;gBACvC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE;gBAC5F,iBAAiB,EAAE,KAAK,CAAC,WAAW;gBACpC,oBAAoB,EAAE,KAAK,CAAC,YAAY;gBACxC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,qFAAqF;QACrF,gFAAgF;QAChF,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACzB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;YACzB,SAAS,EAAE,UAAU;YACrB,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE;YAC5F,iBAAiB,EAAE,KAAK,CAAC,WAAW;YACpC,oBAAoB,EAAE,KAAK,CAAC,YAAY;YACxC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gFAAgF;YAChF,oFAAoF;YACpF,uDAAuD;YACvD,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,CAAC,IAAI,WAAW,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9G,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"installAgentMessageHook.js","sourceRoot":"","sources":["../../src/messaging/installAgentMessageHook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,WAAW,GAIZ,MAAM,yBAAyB,CAAC;AAmBjC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAiC;IACrE,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,GAAG,GAAoB;YAC3B,GAAG,EAAE,KAAK,CAAC,IAAI;YACf,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC;QACF,MAAM,QAAQ,GAAG,WAAW,CAC1B,GAAG,EACH,IAAI,CAAC,MAAM,EACX;YACE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;YACvD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;SAC3C,CACF,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAoB;gBAC3B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBACzB,SAAS,EAAE,UAAU;gBACrB,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI;gBAC7B,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE;gBACzB,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI;gBACxB,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE;gBACpB,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI;gBACxB,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE;gBACpB,iBAAiB,EAAE,KAAK,CAAC,WAAW;gBACpC,oBAAoB,EAAE,KAAK,CAAC,YAAY;gBACxC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACpC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,qBAAqB;QACrB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,mFAAmF;YACnF,iEAAiE;YACjE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBACzB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBACzB,SAAS,EAAE,UAAU;gBACrB,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,2BAA2B;gBACvC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE;gBAC5F,iBAAiB,EAAE,KAAK,CAAC,WAAW;gBACpC,oBAAoB,EAAE,KAAK,CAAC,YAAY;gBACxC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,qFAAqF;QACrF,gFAAgF;QAChF,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACzB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;YACzB,SAAS,EAAE,UAAU;YACrB,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE;YAC5F,iBAAiB,EAAE,KAAK,CAAC,WAAW;YACpC,oBAAoB,EAAE,KAAK,CAAC,YAAY;YACxC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,6EAA6E;QAC7E,wEAAwE;QACxE,yEAAyE;QACzE,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,qEAAqE;QACrE,KAAK,OAAO,CAAC,OAAO,EAAE;aACnB,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;aACpF,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,0EAA0E;YAC1E,wEAAwE;YACxE,yEAAyE;YACzE,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,CAAC,IAAI,WAAW,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9G,CAAC,CAAC,CAAC;QACL,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.165",
+  "version": "1.3.167",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-31T11:39:31.391Z",
-  "instarVersion": "1.3.165",
+  "generatedAt": "2026-05-31T12:16:12.192Z",
+  "instarVersion": "1.3.167",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {

package/upgrades/1.3.166.md

@@ -0,0 +1,24 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What to Tell Your User
+
+If you run multiple agents that talk to each other, you'll stop seeing spurious "delivery failed" timeouts in the logs for messages that actually went through fine. The receiving agent now confirms it got the message right away and does the work in the background, and the reply still comes back as normal.
+
+## Summary of New Capabilities
+
+- The agent-to-agent inbox hook (the third and last of the agent-to-agent transports) now responds at the accept boundary: it acknowledges immediately after validating the message and runs the (potentially minutes-long) handler in the background, instead of making the sender wait through it. Completes the same fix already shipped for the co-located relay and the cross-machine threadline paths.
+
+## Evidence
+
+- Found in the agent's own server log: recurring "[a2a] local-inbox delivery attempt failed (to=instar-codey): aborted due to timeout".
+- Root traced through the call chain: the /a2a/inbox response awaited the role handler, which spawns a session and waits minutes; the sender's ~10s timeout fired first. The reply flows back on a separate channel, so awaiting was unnecessary.
+- Unit tests: a held (slow) handler no longer blocks the response (it would have hung if still awaited); a background handler error still yields a clean acknowledgement. Idempotency, validation, and spoof-defense cases unchanged. Independent adversarial review.
+
+## What Changed — Agent-to-agent task delivery no longer logs false "delivery failed" timeouts
+
+When one of your agents hands a task to another agent on the same machine (for example a mentor agent assigning work to a mentee), the receiver was only acknowledging the message AFTER it had finished the whole task — which means spinning up a work session and waiting minutes for it to think and reply. But the sender only waits about 10 seconds for an acknowledgement, so it gave up and logged a "delivery failed" every time — even though the message was actually received fine and the reply was on its way back on a separate channel.
+
+Now the receiver acknowledges the moment it accepts the message and does the work in the background. The sender gets its acknowledgement right away, stops logging false failures, and stops holding a connection open for ten seconds each time. The actual reply still comes back exactly as before.

package/upgrades/1.3.167.md

@@ -0,0 +1,50 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What to Tell Your User
+
+If you run your agent across more than one machine and move a conversation to another
+one, the moved conversation now remembers what you were talking about — the receiving
+machine pulls the recent history from the machine that was serving it. Only relevant
+when the multi-machine session pool is on; single-machine agents are unaffected. Nothing
+to configure.
+
+## Summary of New Capabilities
+
+- New `formatForwardedTopicContext` helper formats relayed history into the standard
+  thread-history block.
+- `spawnSessionForTopic` accepts an optional pre-computed context, used verbatim when
+  provided (skipping the empty-on-a-standby local sources); single-machine behavior is
+  unchanged when it is absent.
+- The owner-side resume fetches the router's recent topic messages and passes them, so a
+  moved session continues the conversation.
+
+## Evidence
+
+- Confirmed in code: on a standby, a moved session was spawned with no TopicMemory and an
+  empty local message history, so it started with no prior conversation context.
+- Unit, `tests/unit/ForwardedTopicContext.test.ts`: the formatter over empty history,
+  multi-message threads with attribution, sender/timestamp fallbacks, and the
+  per-message length cap.
+- Wiring, `tests/unit/session-pool-activation-wiring.test.ts`: the owner-side bridge
+  still spawns and fails safe with the history fetch wrapped around it.
+- 51 session-pool + adapter tests pass; tsc --noEmit clean.
+- Note: unit-verified; the live confirmation that a moved session retains its context
+  follows once the second machine's CLI is logged in.
+- Spec, `docs/specs/moved-session-context-relay.md` plus the .eli16.md sibling.
+
+## What Changed — a conversation moved to your other machine keeps its memory
+
+A quality step for the multi-machine "move this conversation to my other machine"
+feature. When a conversation moved to the backup machine, that machine started the
+session fresh from its own records — which were empty for that conversation (it had
+never been the one talking to you). So the moved conversation effectively forgot
+everything that came before it.
+
+This release has the receiving machine fetch the recent history from the machine that
+was serving the conversation, and seed the moved session with it. So the conversation
+picks up where it left off instead of resetting. It's best-effort: if the other machine
+can't be reached, the session still starts (just without the prior history, as before),
+so it never blocks the move.

package/upgrades/side-effects/a2a-inbox-accept-boundary.md

@@ -0,0 +1,40 @@
+# Side-effects — /a2a/inbox accept-boundary
+
+## 1. What files/state does this touch at runtime?
+`installAgentMessageHook.ts` — the role-handler invocation in the agent-message hook. No new files,
+config, schema, or state. The role handler still runs (now in the background); the idempotency mark
+and ledger row are unchanged.
+
+## 2. Does it change any functional behavior?
+The `/a2a/inbox` HTTP response now returns `{handled:true}` immediately after the message is validated
++ marked processed, instead of after the (minutes-long) role handler completes. The handler runs in
+the background and delivers its reply on its own a2a channel exactly as before. Net: the sender no
+longer times out (its ~10s `AbortSignal.timeout`) and no longer logs a false "delivery failed".
+
+## 3. What happens on failure / weird config?
+A background handler rejection is caught and logged (`console.error`), exactly as the old `try/catch`
+did — just on a later microtask. The id stays marked processed (unchanged). Validation failures
+(unknown role, spoof, already-processed) still short-circuit BEFORE the handler, unchanged.
+
+## 4. Migration parity — do existing agents get it?
+Yes, via the normal release — code-only, compiled into `dist`. No agent-installed file / config /
+template change → no `PostUpdateMigrator` pass.
+
+## 5. Could it spam / flood / burn resources?
+No — it REDUCES resource use (no 10s held connection per mentor a2a message). Same single handler
+run, no new timers/IO/network. The idempotency mark still bounds duplicate processing.
+
+## 6. Rollback / off-switch?
+Revert the one block (re-`await` the handler). No data, no migration, no flag. Mirrors #581/#3
+rollback.
+
+## 7. Concurrency / ordering?
+The handler now runs after the response returns instead of before. The idempotency `markProcessed`
+still happens BEFORE the response (so retries dedup). The reply-out is unchanged (a separate a2a
+send). A background handler error cannot affect the already-sent response.
+
+## Blast radius
+Small + additive: one block in `installAgentMessageHook.ts` swapped from await-then-respond to
+respond-then-background. Exactly mirrors the proven #581 (`/messages/relay-agent`) and #3
+(`/threadline/messages/receive`) accept-boundaries. Only the a2a role-handler dispatch timing
+changes; validation, idempotency, ledger, and the reply path are untouched.

package/upgrades/side-effects/moved-session-context-relay.md

@@ -0,0 +1,94 @@
+# Side-Effects Review — moved session inherits prior conversation (bug #2)
+
+**Version / slug:** `moved-session-context-relay`
+**Date:** `2026-05-31`
+**Author:** `echo`
+**Second-pass reviewer:** `not required`
+
+## Summary of the change
+
+A session moved to a standby now inherits the topic's recent history from the router.
+New pure helper `formatForwardedTopicContext`; `spawnSessionForTopic` gains an optional
+`precomputedContext`; the owner-side resume fetches the router's
+`/telegram/topics/:topicId/messages` and passes it. Best-effort; default-off for
+single-machine. Closes audit #2 (moved session started with no prior context).
+
+## Decision-point inventory
+
+- **spawnSessionForTopic context source** — `precomputedContext` provided → use it,
+  skip the local TopicMemory/JSONL sources; else → unchanged local logic. Both sides
+  covered (the helper tests + the single-machine path is untouched when undefined).
+- **owner-side fetch** — router URL resolvable (`_resolveRouterUrl` → lease holder peer
+  URL, not self) + GET ok → format + pass; any failure → spawn without it. Best-effort.
+
+## 1. Over-block
+
+**What legitimate inputs does this reject?** None. The single-machine spawn path is
+byte-identical when `precomputedContext` is undefined (no router). The fetch is purely
+additive context; a failure falls back to today's behavior (spawn without prior
+history). Nothing that worked before is rejected.
+
+## 2. Under-block
+
+**What does this still miss?** It fetches up to 50 recent messages (not the entire
+history / no summaries) — sufficient for continuity, not a full replica. It is a
+point-in-time fetch, not a shared/replicated ledger (the broader architectural fix
+remains separate). It is NOT yet live-verified (the moved session can't run until the
+mini's Claude is logged in — bug #12, pending the user). It does not sync userProfile
+(a smaller, separate gap).
+
+## 3. Level-of-abstraction fit
+
+**Right layer?** Yes. The formatter is a pure module (testable, mirrors the existing
+JSONL format). `precomputedContext` slots into `spawnSessionForTopic`'s existing
+context-resolution as the highest-precedence source. The fetch lives in the owner-side
+resume (the one place a moved session is spawned), using the same `_resolveRouterUrl` /
+authToken plumbing as the outbound relay.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+No blocking authority. It only ADDS context to a spawned session; it gates nothing and
+blocks nothing. A fetch failure is swallowed (best-effort) and the session proceeds.
+
+## 5. Interactions
+
+Reuses the read-only `/telegram/topics/:topicId/messages` route (no new endpoint) and
+the lease-holder resolution (`_resolveRouterUrl`) shared with the outbound relay. Pairs
+with the owner-side resume (#9/#11): the same path that spawns + persists + confirms a
+moved session now also seeds its context. Idempotent (a fresh fetch per spawn). No
+interaction with the lease or shared-state guard.
+
+## 6. External surfaces
+
+One cross-machine GET from the standby to the router's existing messages route
+(Bearer-authed). No new route, config, or notification. The visible effect: a moved
+session continues the conversation instead of resetting.
+
+## 7. Rollback cost
+
+Low. Remove the `precomputedContext` param + the onAccepted fetch + the helper; a moved
+session reverts to starting context-less (audit #2). No schema, no state, no migration.
+
+## Conclusion
+
+Targeted, additive, best-effort context relay; the formatter + the precedence both
+unit-tested; the single-machine path untouched; no new authority/surface; cheap revert.
+Makes a moved session continue its conversation. Honestly scoped: unit-verified, live
+confirmation pending the mini's Claude login.
+
+## Second-pass review (if required)
+
+Not required — additive best-effort context, pure formatter fully tested, single-machine
+path unchanged, reversible, no authority. The live moved-session-retains-context check
+is the Tier-3 gate after the user's mini login.
+
+## Evidence pointers
+
+- `tests/unit/ForwardedTopicContext.test.ts` — formatter over empty/multi/fallback/cap.
+- `tests/unit/session-pool-activation-wiring.test.ts` — owner-side bridge spawns + fails safe.
+- 51 session-pool + adapter tests green; `tsc --noEmit` clean.
+- Confirmed in code: on a standby, `spawnSessionForTopic` got `topicMemory: undefined`
+  and `getTopicHistory` returns `[]` → `contextContent = ''` (no prior history).
+- Spec: `docs/specs/moved-session-context-relay.md` (+ `.eli16.md`).