instar 1.3.182 → 1.3.184

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.182",
+  "version": "1.3.184",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-01T04:23:33.472Z",
-  "instarVersion": "1.3.182",
+  "generatedAt": "2026-06-01T04:30:23.385Z",
+  "instarVersion": "1.3.184",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "786073149c3ee781b92e50f0defe8ce348751ad61ee6511d06a13d70eb17211f",
+      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1089,7 +1089,7 @@
       "type": "template",
       "domain": "operations",
       "sourcePath": "src/templates/scripts/convergence-check.sh",
-      "contentHash": "24dcfa8fc813bfcb3aff9e0612c3c0b129a70481b0f8306d7f678b7b445a0942",
+      "contentHash": "41ef69307819140731f293b175093238f88988365c3973b8e44b9c18669e32bd",
       "since": "2025-01-01"
     },
     "template:git-sync-gate.sh": {

package/src/templates/scripts/convergence-check.sh

@@ -64,9 +64,10 @@ if [ -n "$URLS_IN_MSG" ]; then
   # confabulation. Read it from config at runtime. If config/python is
   # unavailable or tunnel.hostname is empty, fall back to the static allowlist.
   OWN_TUNNEL_HOST=""
+  OWN_TUNNEL_PARENT=""
   CONFIG_PATH="${CLAUDE_PROJECT_DIR:-.}/.instar/config.json"
   if [ -f "$CONFIG_PATH" ]; then
-    OWN_TUNNEL_HOST=$(python3 - "$CONFIG_PATH" <<'PY' 2>/dev/null
+    OWN_TUNNEL_INFO=$(python3 - "$CONFIG_PATH" <<'PY' 2>/dev/null
 import json
 import sys
 from urllib.parse import urlparse
@@ -76,13 +77,26 @@ try:
     raw = ((cfg.get('tunnel') or {}).get('hostname') or '').strip()
     if not raw:
         print('')
+        print('')
     else:
         parsed = urlparse(raw if '://' in raw else f'https://{raw}')
-        print((parsed.hostname or '').lower())
+        host = (parsed.hostname or '').lower()
+        print(host)
+        # Parent tunnel domain: drop the leftmost label so SIBLING NODES of the
+        # SAME agent on the SAME tunnel provider domain are trusted — a
+        # multi-machine agent runs on >1 machine, each with its own subdomain
+        # under the operator's tunnel domain (e.g. own 'echo.dawn-tunnel.dev'
+        # trusts sibling 'echo-mini.dawn-tunnel.dev'). Only emit a parent with
+        # >=3 labels so we never collapse to a 2-label apex or public suffix.
+        labels = host.split('.')
+        print('.'.join(labels[1:]) if len(labels) >= 3 else '')
 except Exception:
     print('')
+    print('')
 PY
 )
+    OWN_TUNNEL_HOST=$(printf '%s\n' "$OWN_TUNNEL_INFO" | sed -n '1p')
+    OWN_TUNNEL_PARENT=$(printf '%s\n' "$OWN_TUNNEL_INFO" | sed -n '2p')
   fi
 
   UNFAMILIAR_URLS=""
@@ -101,6 +115,15 @@ PY
     if [ -n "$OWN_TUNNEL_HOST" ] && [ "$URL_HOST" = "$OWN_TUNNEL_HOST" ]; then
       continue
     fi
+    # Skip SIBLING NODES of the same agent: any host under the agent's own
+    # tunnel parent domain (e.g. own 'echo.dawn-tunnel.dev' → trust
+    # 'echo-mini.dawn-tunnel.dev'). A multi-machine agent reaches its other
+    # machines via per-machine subdomains of the operator's tunnel domain;
+    # those are agent-controlled, not confabulated. Guarded to >=3-label
+    # parents above so this never trusts a bare public-suffix apex.
+    if [ -n "$OWN_TUNNEL_PARENT" ] && { [ "$URL_HOST" = "$OWN_TUNNEL_PARENT" ] || [ "${URL_HOST%.$OWN_TUNNEL_PARENT}" != "$URL_HOST" ]; }; then
+      continue
+    fi
     # Skip Cloudflare quick-tunnel hosts. These are ephemeral but agent-generated.
     if echo "$URL_HOST" | grep -qE '(^|\.)trycloudflare\.com$'; then
       continue

package/upgrades/1.3.184.md

@@ -0,0 +1,177 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+**The feedback-factory migration's parity check no longer flags two systems as
+"diverged" just because they spell the same status differently.** As Portal's
+feedback processor is ported into Instar, the two run side-by-side and a parity
+comparator confirms they reach the same conclusions before any cutover. But Portal
+still writes the legacy status words (`open`, `fixed`, `resolved`) while the ported
+Instar processor emits the canonical lifecycle words (`new`, `fix_applied`,
+`closed`). The comparator compared those words literally, so a cluster Portal
+marked `resolved` and Instar marked `closed` — the *same* outcome — was reported as
+a divergence, which structurally blocks the cutover. That was benign vocabulary
+skew being treated as a real history fork.
+
+The fix adds the canonical status-normalization primitives Dawn (Portal's owner)
+pinned as the authoritative contract — a legacy→canonical projection map, a
+terminal-state check evaluated on the normalized status, and an idempotent
+`normalizeStatus()` — and applies the projection to **both sides** before the
+parity comparator comparison. A genuine lifecycle mismatch still surfaces, and the
+reported values stay raw so an operator still sees each side's actual stored status.
+
+**A moved conversation's reply no longer hangs silently when the other machine
+is briefly unreachable.** When you move a conversation to another machine, that
+machine relays its replies through the machine that holds the Telegram
+connection. That relay had two operational defects, both found by driving the
+multi-machine feature live: it had no time limit (so when the receiving machine's
+connection was momentarily restarting, the reply hung for over a minute with no
+result), and it failed completely silently (a dropped reply wrote nothing to the
+log, so there was no way to tell why it didn't arrive).
+
+The relay is now bounded and observable: it gives the receiving machine a fixed
+window (15 seconds by default, adjustable) and then fails fast, and every failure
+writes one clear line saying exactly what went wrong (no reachable machine, a
+rejection with its status code, or a timeout). The relay logic was also extracted
+into its own well-tested unit.
+
+It also no longer reports a false success: previously the relay could report
+"delivered" even when the message never actually reached the chat (it accepted a
+response that carried no real message id). Now the receiving machine returns the
+real message id and the relay only counts a reply as delivered when that id is
+present — otherwise it's treated as undelivered and surfaced, so a busy or flaky
+moment becomes a real, visible failure (and a retry candidate) instead of a
+silent loss dressed up as success.
+
+`GET /updates/status` now includes the `restartImmediately` field. PR #641 added
+the primary-developer-mode flag and claimed it was surfaced in this endpoint, but
+the route's hand-picked response object had omitted it — so the flag's live state
+wasn't actually readable there. This adds the one missing line so the route
+echoes the value `AutoUpdater.getStatus()` already computes.
+
+**The pre-messaging honesty guard now recognizes your agent's other machines as
+its own.** A multi-machine instar agent runs on more than one machine, each
+exposed at its own subdomain under the operator's tunnel domain (for example the
+laptop and the Mac Mini each get a subdomain of the same tunnel domain). The
+URL-provenance check — which blocks messages containing made-up-looking links —
+previously trusted only the agent's exact own tunnel host, so a legitimate
+operation addressing a sibling machine of the same agent was falsely flagged as
+an "unfamiliar domain" and blocked.
+
+It now also trusts hosts that share the agent's tunnel parent domain, so sibling
+nodes are recognized — while still blocking genuinely fabricated links. Two
+guards keep it safe: the parent domain is derived only when the own host has at
+least three labels (never trusts a bare public-suffix apex), and the match is a
+true DNS-suffix test (a look-alike like echo.dawn-tunnel.dev.evil.com stays
+blocked because it actually ends in evil.com). Single-machine agents are
+completely unaffected.
+
+## What to Tell Your User
+
+Nothing to configure, and nothing changes for any current capability. This is
+internal plumbing for the in-progress feedback-factory migration: the
+Portal↔Instar parity check that gates cutover now reconciles the two status
+vocabularies instead of failing on the difference. No routes, jobs, or user-facing
+behavior are affected.
+
+Nothing to configure. If you run across more than one machine and move a
+conversation between them, a reply that can't be delivered now fails quickly with
+a clear reason in the log, instead of hanging for over a minute and vanishing
+without explanation. Single-machine setups are unaffected.
+
+Nothing to do. If anyone asks how to tell whether an agent is set to always jump
+to the newest version immediately, the status readout now shows that on/off state
+directly.
+
+Nothing to configure. If your agent runs across more than one machine, it can
+now perform legitimate cross-machine operations (like the multi-machine reply
+relay) without its own honesty guard blocking the request — while still catching
+invented links. If you only run one machine, nothing changes at all.
+
+## Summary of New Capabilities
+
+- `normalizeStatus()` / `isTerminalStatus()` / `V1_TO_V2_STATUS` / `TERMINAL_STATUSES`
+  (`src/feedback-factory/processor/transitions.ts`) — the canonical status-vocabulary
+  primitives, byte-mirrored from Portal's reference (`feedback-processor.py` :1035 / :379).
+  Normalize-before-terminal-check so a legacy `resolved` correctly reads terminal.
+- `compareClusterOutcomes` (`src/feedback-factory/processor/parity.ts`) now normalizes
+  both sides before comparing status — eliminating false cutover-blocking divergences
+  from v1↔v2 vocabulary skew while still flagging real lifecycle mismatches.
+
+- `relayOutbound` (`src/core/TelegramRelay.ts`) — the tokenless-standby reply
+  relay, extracted as a pure injectable unit with a bounded `AbortController`
+  timeout and a log line on every failure path. `server.ts` wires
+  `telegram.outboundRelay` to it. New optional `multiMachine.relayTimeoutMs`
+  (default 15000).
+
+- `GET /updates/status` response gains a `restartImmediately` boolean (default
+  false for the fleet; true for an agent in primary-developer mode). Read-only;
+  agents gain it automatically on update.
+
+- `convergence-check.sh` URL-provenance guard trusts sibling-node tunnel hosts
+  (any host under the agent's tunnel parent domain), in addition to the agent's
+  own host, Cloudflare quick tunnels, and the static allowlist. Deploys to
+  existing agents via the standard `migrateScripts()` template path (the template
+  content is the migration — no `PostUpdateMigrator` code change).
+
+## Evidence
+
+Reproduction: feed the parity comparator one cluster (same fingerprint) whose
+outcome is expressed in the two vocabularies — Instar `closed` vs Portal `resolved`
+(the same terminal outcome) — and observe the status-branch verdict before vs after
+the change. Ran live against the worktree source:
+
+```
+input: { instar: "closed", portal: "resolved" }
+BEFORE (raw `i.status !== p.status`):        divergent = true   ← false positive, blocks cutover
+AFTER  (normalizeStatus both sides):         divergent = false  (both → "closed")
+genuine mismatch (instar "investigating" vs portal "resolved"): still_flagged = true
+```
+
+So the benign vocabulary skew that previously produced a red parity verdict now
+reconciles, while a real lifecycle divergence (`investigating` vs `resolved`→`closed`)
+still surfaces. Confirmed across the full pair set + recurrence-not-masked + a green
+`compareInvariants` verdict over a vocabulary-skewed window in
+`tests/unit/feedback-factory/parity.test.ts` (156 unit + 4 integration green, `tsc` clean).
+
+- Reproduction (live, 2026-06-01): driving the multi-machine reply proof, a
+  relayed reply hung 25s then 70s with no result and no log line; root cause was
+  the holder's tunnel being mid-restart, and the relay `fetch` having no timeout.
+  Once the tunnel was back, the relay completed (a tone-gate response and an `ok`
+  came back through the full standby→holder chain), confirming the path itself
+  works — but the hang + silence were real operational defects on the way there.
+- Tests: `tests/unit/telegram-relay-timeout-observability.test.ts` (7) drive the
+  real `relayOutbound` with an injected fetch + logger: 2xx returns messageId and
+  posts the right URL + `Bearer` header; self-hold no-ops; no-peer-URL logs;
+  non-2xx logs the status; **a hanging holder aborts within the timeout (elapsed
+  under 2s) and logs `timeout after Nms`**; a network error logs its message; the
+  `silent` flag passes through. 7/7 green; `tsc` clean.
+
+- The gap was observed live on 1.3.180: with the flag set true in config, the
+  agent behaved correctly (restarts not deferred) but `/updates/status` returned
+  no `restartImmediately` field — the #641 "surfaced in /updates/status" claim
+  was incomplete.
+- Test: `tests/integration/updates-status-restart-immediately-route.test.ts`
+  (+2) — asserts the field is present and correct for both true and false. tsc +
+  linters clean.
+
+- Reproduction (live, 2026-06-01): proving the multi-machine reply relay, the
+  command `POST https://echo-mini.dawn-tunnel.dev/telegram/reply/8882` (laptop
+  driving the mini's tokenless-standby relay) was blocked by the
+  `grounding-before-messaging` hook because its convergence-check URL-provenance
+  guard flagged `echo-mini.dawn-tunnel.dev` as unfamiliar — it knew the laptop's
+  own host `echo.dawn-tunnel.dev` but not its sibling. The mini's LAN address was
+  firewalled, so the tunnel host was the only path, and the proof was blocked.
+- Before/after (the guard decision, real shipped template): own host
+  `echo.dawn-tunnel.dev` → parent `dawn-tunnel.dev`; sibling
+  `echo-mini.dawn-tunnel.dev` BLOCK→PASS (the fix); own host PASS→PASS;
+  `totally-fake-host.xyz` BLOCK→BLOCK; look-alike `echo.dawn-tunnel.dev.evil.com`
+  BLOCK→BLOCK; arbitrary host with a 2-label apex config BLOCK→BLOCK (apex not
+  over-trusted).
+- Tests: `tests/unit/convergence-check-sibling-trust.test.ts` (6) execute the
+  real shipped `convergence-check.sh`: `bash -n` valid; sibling trusted; own
+  unchanged; fabricated blocked; look-alike suffix blocked; 2-label apex not
+  over-trusted. 6/6 green; `tsc` clean.