instar 1.3.185 → 1.3.187

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.185",
+  "version": "1.3.187",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-01T04:43:49.548Z",
-  "instarVersion": "1.3.185",
+  "generatedAt": "2026-06-01T06:35:05.844Z",
+  "instarVersion": "1.3.187",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "88326cc40fd6a134f828a058f39cb48cbb6efa55ccc87119a50857c2ae67835d",
+      "contentHash": "6f9dc0ed13fe2cf180354d7d92b235c45cba65a146af2c1869379ac4da6d45b1",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.186.md

@@ -0,0 +1,49 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+**A moved conversation's reply no longer gets stuck behind a redundant safety
+check.** When a conversation is moved to another machine, that machine relays its
+replies through the machine that holds the Telegram connection. The reply was
+being tone-gated twice — once on the relaying machine and again on the machine
+that actually delivers it. The first gate was not just redundant: its quality
+check makes an AI call that, under rate-limit protection, is allowed to wait up
+to two minutes before proceeding — so on a busy system the relaying machine could
+stall a reply for that long before it even handed it off (a relayed reply was
+observed hanging over 50 seconds for exactly this reason).
+
+Now the relaying machine skips its own tone gate; the machine that actually
+delivers the reply still runs it. One gate, in the right place — the reply is
+just as safe, the redundant stall is gone. Machines that send directly (and
+single-machine setups) are unaffected.
+
+## What to Tell Your User
+
+Nothing to configure. If you run across more than one machine and move a
+conversation between them, replies relay faster and no longer stall behind a
+duplicated quality check — while still being checked once, on the machine that
+delivers them.
+
+## Summary of New Capabilities
+
+- `TelegramAdapter.willRelay()` — true when a send will relay through the lease
+  holder (tokenless standby). `/telegram/reply` uses it to skip its local tone
+  gate for a relayed reply (the holder gates it). Direct sends gate locally,
+  unchanged.
+
+## Evidence
+
+- Code-grounded diagnosis (2026-06-01): `/telegram/reply` runs
+  `checkOutboundMessage` → `MessagingToneGate.review` (a `claude -p` LLM call
+  carrying `rateLimitWaitMs: 120000`) BEFORE `sendToTopic`/relay. On a standby,
+  that gate runs, then the relay hands the same reply to the holder, which gates
+  it again. Under a rate-limited circuit the standby's gate can wait up to 120s
+  pre-relay — matching the observed >50s hang of a standby reply.
+- Tests: `tests/unit/telegram-tokenless-relay.test.ts` (+4) — `willRelay()` is
+  true for a tokenless standby ({secret:true} placeholder, or null token) with a
+  relay wired, false for a real string token, false for tokenless with no relay
+  wired. Regression: 57/57 across the TelegramAdapter, MessagingToneGate, and
+  relay-timeout suites. `tsc` clean.

package/upgrades/1.3.187.md

@@ -0,0 +1,42 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Two fixes that a codex-based agent (Codey) found during an autonomous run, reviewed and
+landed by Echo:
+
+1. **Beacon-backed promises no longer auto-resolve before they're done.** A tracked
+   commitment with a follow-through beacon but no automatic verifier was being marked
+   "delivered" seconds after creation — before the beacon ever fired — silently defeating
+   the whole follow-through mechanism. Such a commitment now stays pending until the agent
+   explicitly delivers it.
+2. **The Telegram health check no longer reports a false failure** when the agent is
+   running in lifeline-owned polling mode (the in-server adapter is send-only and a
+   separate process owns polling). The probe now recognizes that mode as healthy.
+
+## What to Tell Your User
+
+If you use the "remind me / report back" style of tracked promises, they now stay open
+until they're actually finished instead of quietly closing themselves early. And your
+health view will stop occasionally claiming Telegram is broken when it is in fact working.
+Nothing for you to do.
+
+## Summary of New Capabilities
+
+- Beacon-enabled one-time commitments remain pending until an explicit deliver(),
+  letting the follow-through beacon actually do its job.
+- The messaging probe accepts an optional external-poller signal and reports healthy in
+  lifeline-owned send-only polling mode (the connected and polling probes only).
+
+## Evidence
+
+- Spec: `docs/specs/codey-gap-run-fixes-batch-1.md` (+ `.eli16.md`), review-convergence +
+  approved by Justin (Telegram topic 17481, 2026-05-31).
+- Tests: `tests/unit/CommitmentTracker.test.ts` (beacon-stays-pending + non-beacon
+  no-regression) and `tests/unit/MessagingProbe-external-poller.test.ts` (new); `tsc
+  --noEmit` clean.
+- Origin: findings F007 and F003 from Codey's Codex-on-Instar autonomous gap run,
+  ported from a v1.3.78 base and re-verified on current main.

package/upgrades/side-effects/codey-gap-run-fixes-batch-1.md

@@ -0,0 +1,73 @@
+# Side-Effects Review — Codey gap-run fixes, batch 1
+
+**Version / slug:** `codey-gap-run-fixes-batch-1`
+**Date:** `2026-05-31`
+**Author:** `echo`
+**Second-pass reviewer:** `not required`
+
+## Summary of the change
+
+Land two verified fixes Codey found during its autonomous gap run, ported to current
+main. F007: `CommitmentTracker` no longer auto-delivers beacon-enabled future
+commitments (they stay pending until explicit `deliver()`). F003: the Telegram
+messaging probe accepts an optional `externalPollerActive` signal so it reports healthy
+in lifeline-owned send-only polling mode instead of a false failure.
+
+## Decision-point inventory
+
+- **F007 — `isUnverifiableOneTime` beacon exclusion + verify-sweep beacon skip.** Both
+  sides tested: beacon one-time stays pending; non-beacon one-time still auto-delivers.
+- **F003 — probe pass-vs-fail on `!status.started`.** Both sides tested: poller-active →
+  pass; poller-absent/false → original failure; started → pass.
+
+## 1. Over-block
+
+**What legitimate inputs does this change reject?** None. Both changes only *relax* an
+over-aggressive terminal transition. F007 stops force-delivering a class of commitments;
+F003 stops a false health failure. No new rejection path is introduced.
+
+## 2. Under-block
+
+**What does this still miss?** F007: a beacon commitment with a real machine-checkable
+verifier is still verified/resolved normally (only the verifier-less case is held
+pending) — intended. F003: only the two started-dependent probes (connected, polling)
+are adjusted; the log/topics probes are unchanged. The other three gap-run findings
+(F005/F006/F009) are explicitly out of this batch.
+
+## 3. Level-of-abstraction fit
+
+**Right layer?** Yes. F007 lives in `CommitmentTracker.isUnverifiableOneTime` (the one
+predicate both the backfill and the sweep consult) plus the `verifyOne` sweep — the
+single decision points. F003 lives in `MessagingProbe` (the probe factory) with the
+signal injected once at the `server.ts` wiring site, sourced from the existing
+`lifelineOwnsPolling` flag.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+No blocking authority added. F007 makes a commitment *more* durable (keeps it pending,
+the safe direction). F003 is a read-only health signal that now reads the system more
+accurately; it gates nothing. The `externalPollerActive` dep is optional and defaults
+to the prior behavior.
+
+## 5. Interactions
+
+- **F007 ↔ PromiseBeacon:** beacon-enabled commitments now remain in the active set, so
+  the beacon continues its cadenced heartbeats as designed (previously they were
+  resolved out from under it). `deliver()` remains the explicit terminal path.
+- **F007 ↔ constructor backfill:** the same predicate gates the boot-time backfill, so a
+  beacon commitment loaded from disk is no longer backfilled-as-delivered either.
+- **F003 ↔ lifeline:** the `externalPollerActive` source mirrors the existing
+  `lifelineOwnsPolling` send-only decision and the `lifeline.lock` presence check
+  already used by the lifeline probes. No new files, no new state.
+- No interaction with the SessionReaper, sentinels, or any gate.
+
+## 6. External surfaces
+
+No new HTTP routes, no config keys, no Telegram, no new on-disk files. F007 changes the
+lifecycle of existing `/commitments` records (a beacon commitment reports `pending`
+longer); F003 changes a `/health` probe verdict (fewer false Telegram failures). No
+agent-installed file (`.claude/settings.json`, `.instar/config.json`, CLAUDE.md
+template, hook, skill, job template) is touched, so the Migration Parity Standard does
+not apply to this batch.

package/upgrades/side-effects/standby-skip-local-tone-gate-on-relay.md

@@ -0,0 +1,41 @@
+# Side effects — standby skips its local tone gate on a relayed reply
+
+## What changes at runtime
+
+On a tokenless pool standby (a machine serving a moved session, relaying its
+replies through the lease holder), the `/telegram/reply` route now SKIPS its
+local tone gate. The holder's `/telegram/reply` still runs the holder's tone
+gate. Detection is a new `TelegramAdapter.willRelay()` (exact `sendToTopic`
+relay-vs-direct condition).
+
+## Who is affected
+
+- **Direct senders (the token-holding machine, single-machine agents):** ZERO
+  change. `willRelay()` is false (real string token), so they gate locally
+  exactly as before.
+- **Tokenless standbys (a moved session replying):** skip the local tone gate;
+  the reply is gated by the holder on receipt. This removes a redundant LLM call
+  per cross-machine reply and the up-to-120s pre-relay stall it caused under a
+  rate-limited circuit.
+
+## Blast radius
+
+- 2 files: `src/messaging/TelegramAdapter.ts` (new method) + `src/server/routes.ts`
+  (one skip condition in `/telegram/reply`). No config, no schema, no migration
+  (compiled source).
+- The skip is additive to the existing `isProxy` / `isSystemTemplate` skips.
+
+## Failure modes considered
+
+- **Ungated reply?** No — the reply is gated by the holder (the single Telegram
+  owner), which is the correct single place. The standby reply is the agent's
+  finalized output; gating it twice was redundant, not a second layer of real
+  protection.
+- **Misdetection?** `willRelay()` mirrors the exact `sendToTopic` branch
+  (`!hasUsableBotToken && outboundRelay`), so it's true iff the send would
+  actually relay. A defensive `typeof ctx.telegram.willRelay === 'function'`
+  guard in the route means an older adapter without the method just keeps gating
+  (safe default).
+- **Pairs with v1.3.182:** the relay call itself is already bounded + truthful;
+  this bounds the path BEFORE the relay. Together they remove both stall points
+  on the standby reply path.