instar 1.3.204 → 1.3.206

package/dist/core/installCodexHooks.js

@@ -77,7 +77,7 @@ export function buildInstarCodexHookGroups(projectDir) {
         // tool_input.cmd (Claude uses tool_input.command); the scripts accept both field
         // names AND both tool names (Bash | exec_command).
         PreToolUse: [
-            { matcher: '.*', hooks: [sh('dangerous-command-guard.sh'), node('external-operation-gate.js'), sh('grounding-before-messaging.sh'), node('deferral-detector.js')] },
+            { matcher: '.*', hooks: [sh('dangerous-command-guard.sh'), node('external-operation-gate.js'), sh('grounding-before-messaging.sh'), node('deferral-detector.js'), node('self-stop-guard.js')] },
         ],
         // Codex-only checkpoint. Routes to the same gate; the trust system
         // auto-decides (allow/deny) with NO human prompt so autonomy is preserved.

package/dist/core/installCodexHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"installCodexHooks.js","sourceRoot":"","sources":["../../src/core/installCodexHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,yDAAyD,CAAC;AAgBtG,2FAA2F;AAC3F,MAAM,UAAU,0BAA0B,CACxC,UAAkB;IAElB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,MAAM,CAAC,EAAE;QACzE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,MAAM,CAAC,EAAE;QACzE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,uFAAuF;IACvF,uFAAuF;IACvF,4EAA4E;IAC5E,iFAAiF;IACjF,MAAM,kBAAkB,GAAG,GAAqB,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,UAAU;QAC9E,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,OAAO;QACL,8EAA8E;QAC9E,0EAA0E;QAC1E,wEAAwE;QACxE,gFAAgF;QAChF,gFAAgF;QAChF,6EAA6E;QAC7E,oFAAoF;QACpF,4EAA4E;QAC5E,gFAAgF;QAChF,mFAAmF;QACnF,uEAAuE;QACvE,iFAAiF;QACjF,mDAAmD;QACnD,UAAU,EAAE;YACV,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,4BAA4B,CAAC,EAAE,IAAI,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC,EAAE;SACpK;QACD,mEAAmE;QACnE,2EAA2E;QAC3E,iBAAiB,EAAE;YACjB,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,EAAE;SAC/D;QACD,qEAAqE;QACrE,6DAA6D;QAC7D,yEAAyE;QACzE,gEAAgE;QAChE,yEAAyE;QACzE,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,sCAAsC;QACtC,kFAAkF;QAClF,qFAAqF;QACrF,sFAAsF;QACtF,mFAAmF;QACnF,iFAAiF;QACjF,sFAAsF;QACtF,qFAAqF;QACrF,kFAAkF;QAClF,mFAAmF;QACnF,mDAAmD;QACnD,IAAI,EAAE;YACJ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,6BAA6B,CAAC,EAAE,IAAI,CAAC,+BAA+B,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;SAC3M;QACD,8BAA8B;QAC9B,YAAY,EAAE;YACZ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE;SACjD;QACD,gBAAgB,EAAE;YAChB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAAE;SAC1D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAqB;IAC/C,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAC1C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,MAAM,GAAqB,EAAE,CAAC;IAClC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAA0B,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAEvD,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"installCodexHooks.js","sourceRoot":"","sources":["../../src/core/installCodexHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,yDAAyD,CAAC;AAgBtG,2FAA2F;AAC3F,MAAM,UAAU,0BAA0B,CACxC,UAAkB;IAElB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,MAAM,CAAC,EAAE;QACzE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,MAAM,CAAC,EAAE;QACzE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,uFAAuF;IACvF,uFAAuF;IACvF,4EAA4E;IAC5E,iFAAiF;IACjF,MAAM,kBAAkB,GAAG,GAAqB,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,UAAU;QAC9E,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,OAAO;QACL,8EAA8E;QAC9E,0EAA0E;QAC1E,wEAAwE;QACxE,gFAAgF;QAChF,gFAAgF;QAChF,6EAA6E;QAC7E,oFAAoF;QACpF,4EAA4E;QAC5E,gFAAgF;QAChF,mFAAmF;QACnF,uEAAuE;QACvE,iFAAiF;QACjF,mDAAmD;QACnD,UAAU,EAAE;YACV,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,4BAA4B,CAAC,EAAE,IAAI,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,EAAE,IAAI,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,EAAE;SAChM;QACD,mEAAmE;QACnE,2EAA2E;QAC3E,iBAAiB,EAAE;YACjB,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,EAAE;SAC/D;QACD,qEAAqE;QACrE,6DAA6D;QAC7D,yEAAyE;QACzE,gEAAgE;QAChE,yEAAyE;QACzE,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,sCAAsC;QACtC,kFAAkF;QAClF,qFAAqF;QACrF,sFAAsF;QACtF,mFAAmF;QACnF,iFAAiF;QACjF,sFAAsF;QACtF,qFAAqF;QACrF,kFAAkF;QAClF,mFAAmF;QACnF,mDAAmD;QACnD,IAAI,EAAE;YACJ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,6BAA6B,CAAC,EAAE,IAAI,CAAC,+BAA+B,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;SAC3M;QACD,8BAA8B;QAC9B,YAAY,EAAE;YACZ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE;SACjD;QACD,gBAAgB,EAAE;YAChB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAAE;SAC1D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAqB;IAC/C,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAC1C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,MAAM,GAAqB,EAAE,CAAC;IAClC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAA0B,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAEvD,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/core/instarSettingsHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instarSettingsHooks.d.ts","sourceRoot":"","sources":["../../src/core/instarSettingsHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,aAAa,CAAC,uBAAuB,CA0B/E,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,aAAa,CAAC,uBAAuB,CAO9E,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,EAAE,aAAa,CAAC,MAAM,CACW,CAAC;AAE/E;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGjE;AAED,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1F;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,CAmB5F"}
+{"version":3,"file":"instarSettingsHooks.d.ts","sourceRoot":"","sources":["../../src/core/instarSettingsHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,aAAa,CAAC,uBAAuB,CA+B/E,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,aAAa,CAAC,uBAAuB,CAO9E,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,EAAE,aAAa,CAAC,MAAM,CACW,CAAC;AAE/E;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGjE;AAED,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1F;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,CAmB5F"}

package/dist/core/instarSettingsHooks.js

@@ -50,6 +50,11 @@ export const INSTAR_BASH_PRETOOLUSE_HOOKS = [
         command: `node ${PD}/.instar/hooks/instar/deferral-detector.js`,
         timeout: 5000,
     },
+    {
+        type: 'command',
+        command: `node ${PD}/.instar/hooks/instar/self-stop-guard.js`,
+        timeout: 5000,
+    },
     {
         type: 'command',
         command: `node ${PD}/.instar/hooks/instar/external-communication-guard.js`,

package/dist/core/instarSettingsHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"instarSettingsHooks.js","sourceRoot":"","sources":["../../src/core/instarSettingsHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AASH,MAAM,EAAE,GAAG,uBAAuB,CAAC;AAEnC;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA2C;IAClF;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,gEAAgE;QACnF,QAAQ,EAAE,IAAI;KACf;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,mEAAmE;QACtF,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,4CAA4C;QAC/D,OAAO,EAAE,IAAI;KACd;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,uDAAuD;QAC1E,OAAO,EAAE,IAAI;KACd;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,iDAAiD;QACpE,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAA2C;IACjF;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,kDAAkD;QACrE,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAE/E;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACnF,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAQD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,+BAA+B,CAAC,UAAkC;IAChF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,KAAK;QAAE,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;IAE3C,KAAK,MAAM,SAAS,IAAI,4BAA4B,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACxG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"instarSettingsHooks.js","sourceRoot":"","sources":["../../src/core/instarSettingsHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AASH,MAAM,EAAE,GAAG,uBAAuB,CAAC;AAEnC;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA2C;IAClF;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,gEAAgE;QACnF,QAAQ,EAAE,IAAI;KACf;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,mEAAmE;QACtF,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,4CAA4C;QAC/D,OAAO,EAAE,IAAI;KACd;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,0CAA0C;QAC7D,OAAO,EAAE,IAAI;KACd;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,uDAAuD;QAC1E,OAAO,EAAE,IAAI;KACd;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,iDAAiD;QACpE,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAA2C;IACjF;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,kDAAkD;QACrE,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAE/E;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACnF,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAQD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,+BAA+B,CAAC,UAAkC;IAChF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,KAAK;QAAE,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;IAE3C,KAAK,MAAM,SAAS,IAAI,4BAA4B,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACxG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.204",
+  "version": "1.3.206",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/scripts/generate-builtin-manifest.cjs

@@ -56,6 +56,7 @@ function scanHooks() {
     { file: 'compaction-recovery.sh', domain: 'identity' },
     { file: 'external-operation-gate.js', domain: 'safety' },
     { file: 'deferral-detector.js', domain: 'safety' },
+    { file: 'self-stop-guard.js', domain: 'coherence' },
     { file: 'post-action-reflection.js', domain: 'evolution' },
     { file: 'external-communication-guard.js', domain: 'safety' },
     { file: 'scope-coherence-collector.js', domain: 'coherence' },

package/src/data/builtin-manifest.json

@@ -1,9 +1,9 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-02T19:08:26.817Z",
-  "instarVersion": "1.3.204",
-  "entryCount": 194,
+  "generatedAt": "2026-06-02T20:50:08.043Z",
+  "instarVersion": "1.3.206",
+  "entryCount": 195,
   "entries": {
     "hook:session-start": {
       "id": "hook:session-start",
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,16 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
+      "since": "2025-01-01"
+    },
+    "hook:self-stop-guard": {
+      "id": "hook:self-stop-guard",
+      "type": "hook",
+      "domain": "coherence",
+      "sourcePath": "src/core/PostUpdateMigrator.ts",
+      "installedPath": ".instar/hooks/instar/self-stop-guard.js",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -65,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -74,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -83,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -92,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -101,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -110,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -119,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -128,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -137,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1497,7 +1506,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "920b1492c5e80f1b63e8f7f685635fda2b722fa11de39ee774ad51aa86dbfdb5",
+      "contentHash": "90bfb6c540825ac2bf3393e22c4b7ae324159407acaac58b2c464762ef69901a",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.205.md

@@ -0,0 +1,53 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+A new signal-only PreToolUse hook, `self-stop-guard.js`, joins the behavioral-guard
+family (alongside `deferral-detector.js`). It scans **outbound user messages** for
+context/length stop-excuses — "maxed out context", "session too long / long-running
+session", "let's start a fresh session", "good stopping point", "close this out and
+restart" — and, when matched, injects a self-reminder that those are never valid stop
+reasons (compaction infrastructure handles context; the only legitimate stops are a
+question only the user can answer, missing info, a genuine error, or real completion).
+
+It is **signal-only**: it never blocks a message and is never destructive. An
+allow-list suppresses it on genuine completion (the `ALL_TASKS_COMPLETE` promise,
+"all tests passing", etc.) and when the user themselves asked to stop. It runs for
+both Claude (`Bash`) and Codex (`exec_command`) agents and reaches existing agents on
+their next update via `INSTAR_BASH_PRETOOLUSE_HOOKS` (init + migrate parity) — it is
+also registered in the Codex PreToolUse chain and drift-verified in the builtin
+manifest. This is the structural enforcement (Structure > Willpower) of the existing
+"No context-death self-stops" principle already present in the CLAUDE.md template.
+
+## What to Tell Your User
+
+- **A guard against quitting early**: "I added a small safety check on myself — if I
+  ever start to tell you I'm stopping just because I've been running a while or my
+  memory is filling up, it now catches me and reminds me that's not a real reason to
+  quit. My memory gets refreshed automatically, so I can keep going as long as the
+  work needs. It only nudges me — it never blocks anything, and it stays quiet when a
+  job is genuinely finished or when you've asked me to stop."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Self-stop excuse guard | Automatic (PreToolUse hook on every agent, Claude + Codex) |
+
+## Evidence
+
+Not a code-bug fix — this adds a new preventive behavioral guard, so no
+reproduction-of-a-broken-code-path applies. Origin and verification:
+
+- **Origin (the behavior it guards):** on 2026-06-02 an agent ended a multi-hour
+  autonomous run early, telling the user "this session's almost done, let's start
+  fresh" while citing "maxed out context." The user flagged this as a recurring,
+  invalid excuse and asked for a structural check.
+- **Verified behavior:** the shipped hook is spawned end-to-end by 16 unit tests that
+  feed it real outbound-message payloads. It emits the reminder for each excuse
+  phrasing (Claude `Bash` and Codex `exec_command`) and stays silent on the other
+  side of the boundary — normal messages, genuine completion, the completion promise,
+  user-requested stops, and non-communication shell commands.

package/upgrades/1.3.206.md

@@ -0,0 +1,46 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+`refreshHooksAndSettings()` (and the sibling resolver in init) read the persisted
+`enabledFrameworks` from config.json through a hardcoded filter
+`f === 'claude-code' || f === 'codex-cli'` that silently DROPPED `gemini-cli`. For a
+gemini-only agent (`enabledFrameworks: ['gemini-cli']`) the filtered list came back
+empty, so the code fell through to its `['claude-code']` default, `claudeEnabled`
+became true, and `installClaudeSettings()` wrote a full Claude `.claude/settings.json`
+into an agent that does not run Claude Code. Both filter sites now validate through a
+single canonical `isKnownFramework` guard (backed by a `KNOWN_FRAMEWORKS` list kept in
+sync with `IntelligenceFramework`), so no installed framework is dropped and a new one
+cannot silently regress this again. New gemini-only and codex-only installs no longer
+get a stray Claude settings file; claude-code installs are unchanged.
+
+## What to Tell Your User
+
+- **Cleaner non-Claude installs**: "If you set me up as a Gemini-only or Codex-only
+  agent, I was accidentally dropping a Claude configuration file into your project even
+  though I don't use Claude there. That's fixed — a Gemini agent now stays a Gemini
+  agent, with no stray Claude settings."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Framework-correct scaffolding | Automatic (gemini/codex-only installs skip Claude settings) |
+
+## Evidence
+
+- **Live before:** the gemini agent installed during dogfooding
+  (`~/.instar/agents/gemini`, `enabledFrameworks: ['gemini-cli']`) contained a
+  7559-byte `.claude/settings.json` plus `.claude/skills`/`.claude/scripts` — Claude
+  hook config it can never use. Confirmed by direct inspection of the agent home.
+- **After (code path):** a behavioral test drives `refreshHooksAndSettings()` against a
+  temp project with `enabledFrameworks: ['gemini-cli']` and asserts no
+  `.claude/settings.json` is written; `['codex-cli']` likewise; `['claude-code']` and
+  `['claude-code','gemini-cli']` still write it (no regression). A fresh gemini-only
+  install therefore no longer leaks the file.
+- **Residue note:** agents installed BEFORE this fix keep their already-written stray
+  `.claude/settings.json` (the fix stops re-writing it but does not delete the residue);
+  cleaning that inert leftover is a separate follow-up.

package/upgrades/side-effects/gemini-scaffold-leak-fix.md

@@ -0,0 +1,114 @@
+# Side-Effects Review — fix gemini/codex-only scaffold leak
+
+**Version / slug:** `gemini-scaffold-leak-fix`
+**Date:** `2026-06-02`
+**Author:** `echo`
+**Second-pass reviewer:** `not required (Tier-1 surgical bug fix; the change is strictly more permissive)`
+
+## Summary of the change
+
+`src/commands/init.ts`: replace two hardcoded `enabledFrameworks` filters
+(`f === 'claude-code' || f === 'codex-cli'`) — which dropped `gemini-cli` and caused
+gemini-only agents to fall through to the `['claude-code']` default and scaffold a
+Claude `.claude/settings.json` — with a single canonical `isKnownFramework` guard
+(+ exported `KNOWN_FRAMEWORKS`, kept in sync with `IntelligenceFramework`). Adds a
+unit test proving gemini/codex-only installs skip Claude settings while claude-code
+installs are unchanged.
+
+## Decision-point inventory
+
+- `refreshHooksAndSettings: claudeEnabled?` (init.ts:~3524) — **modify** — the input
+  (`enabledFrameworks` parsed from config) is now framework-complete; the gate logic is
+  unchanged.
+- `initStandalone framework resolution` (init.ts:~3707) — **modify** — same filter fix.
+
+---
+
+## 1. Over-block
+
+**What legitimate inputs does this change reject that it shouldn't?** None. The change
+is strictly MORE permissive than before: the old filter kept `{claude-code, codex-cli}`;
+the new guard keeps `{claude-code, codex-cli, gemini-cli}`. Nothing that previously
+passed is now dropped. Garbage values (non-framework strings) are still dropped, as
+before.
+
+---
+
+## 2. Under-block
+
+**What failure modes does this still miss?** A future framework added to
+`IntelligenceFramework` must also be added to `KNOWN_FRAMEWORKS` (they are co-located
+with a doc comment to make the coupling obvious). It does NOT retroactively clean the
+stray `.claude/settings.json` already written into agents installed before the fix —
+that inert residue is a separate follow-up (a destructive cleanup migration deserving
+its own careful gating).
+
+---
+
+## 3. Level-of-abstraction fit
+
+Correct layer — a data-validation guard at the config-read boundary, replacing an
+inline literal with a named, type-safe, single-source-of-truth predicate. It does not
+add a gate or authority; it fixes the INPUT to an existing gate (`claudeEnabled`).
+
+---
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change has no block/allow surface. It corrects which frameworks survive
+  a config-parse filter; the downstream `claudeEnabled` gate already existed.
+
+---
+
+## 5. Interactions
+
+- **Shadowing:** none — single in-function filter, no ordering with other checks.
+- **Double-fire:** none.
+- **Races:** none — pure synchronous config parse.
+- **Feedback loops:** none.
+
+The only behavioral change: for a gemini-only or codex-only config, `claudeEnabled` is
+now correctly `false`, so `installClaudeSettings()` / `refreshClaudeMd()` are skipped.
+For claude-code (alone or among multiple frameworks) behavior is identical.
+
+---
+
+## 6. External surfaces
+
+- Persistent state: a NEW gemini/codex-only install no longer creates a stray
+  `projectDir/.claude/settings.json`. Existing agents: on their next update,
+  `refreshHooksAndSettings` stops re-writing the file for non-claude configs (the
+  pre-existing file is left in place — inert, see §2).
+- Other agents / external systems: none.
+- Timing: none.
+
+---
+
+## 7. Rollback cost
+
+Pure code change — revert the two filter lines + the guard, ship a patch. No persistent
+state created by this change to clean up (it REMOVES an unwanted write; it does not add
+state). No user-visible regression during rollback.
+
+---
+
+## Conclusion
+
+The review produced no design changes. The fix is a minimal, strictly-more-permissive
+correction of a framework-blind filter (the same drift class as the Step-2 resolver
+bugs), with a behavioral test that proves both sides of the boundary. Clear to ship as
+a Tier-1 bug fix. One honest residual logged: the inert leftover file on
+already-installed agents is a separate, carefully-gated cleanup follow-up.
+
+## Second-pass review (if required)
+
+Not required (Tier-1, strictly-more-permissive). Discovered via live dogfooding (Codey's
+gemini install) — the empirical "before" is itself an independent confirmation.
+
+## Evidence pointers
+
+- `tests/unit/gemini-scaffold-leak.test.ts` — 5 tests, both sides of the boundary.
+- Live before: `~/.instar/agents/gemini/.claude/settings.json` (7559 bytes) on a
+  `['gemini-cli']` config.

package/upgrades/side-effects/self-stop-guard.md

@@ -0,0 +1,83 @@
+# Side-Effects Review — self-stop-guard hook
+
+**Version / slug:** `self-stop-guard`
+**Date:** `2026-06-02`
+**Author:** `echo`
+**Second-pass reviewer:** `not required (Tier-1, signal-only additive hook; external cross-model capacity-blocked this session — codex absent, gemini 429)`
+
+## Summary of the change
+
+Adds `self-stop-guard.js`, a signal-only PreToolUse hook (sibling of `deferral-detector.js`) that scans outbound user messages for context/length stop-excuses ("maxed out context", "session too long", "start a fresh session", "good stopping point") and, on a match, injects a self-reminder that those are never valid stop reasons. Files: new `.instar/hooks/instar/self-stop-guard.js` + its embedded twin `getSelfStopGuardHook()` in `src/core/PostUpdateMigrator.ts` (+ `getHookContent` case, `migrateHooks` write, `builtinHooks` layout array); registration in `src/core/instarSettingsHooks.ts` (`INSTAR_BASH_PRETOOLUSE_HOOKS` → both init and migrate), `src/commands/init.ts` (new-agent write), `src/core/installCodexHooks.ts` (Codex PreToolUse chain); manifest entry via `scripts/generate-builtin-manifest.cjs`.
+
+## Decision-point inventory
+
+- `self-stop-guard: is this outbound message a context/length stop-excuse?` — **add** — a regex detector that, on match, injects `additionalContext`. Produces a SIGNAL; holds NO block/allow authority.
+
+---
+
+## 1. Over-block
+
+**What legitimate inputs does this change reject that it shouldn't?** None — there is no block surface. The worst case is an over-FIRE (a harmless self-reminder injected when it shouldn't be). Concrete over-fire shapes: a message that legitimately contains a trigger phrase out of context — e.g. discussing this very feature ("I added a good-stopping-point detector"), or quoting the user. These inject a reminder into the agent's own turn; the message still sends unchanged and nothing is blocked. Mitigated by the completion/user-asked-to-stop allow-list, which suppresses the common legitimate cases.
+
+---
+
+## 2. Under-block
+
+**What failure modes does this still miss?** (a) It only scans outbound communication commands (telegram-reply / send-*); a stop-excuse expressed in internal reasoning but never sent is not seen. (b) It does not cover the autonomous-stop-hook / session-end layer — that is a separate level (the user asked for checks "on multiple levels"; this is the pre-send level). (c) Novel phrasings outside the pattern set slip through (e.g. a creative euphemism for "I'm out of context"). These are acceptable: the hook reduces, not eliminates, the anti-pattern, and is one layer of several.
+
+---
+
+## 3. Level-of-abstraction fit
+
+Correct layer. This is a low-level, cheap detector that produces a SIGNAL (an `additionalContext` injection into the agent's own context), exactly like its sibling `deferral-detector`. It does not attempt to be an authority — it never blocks. The "authority" that can actually hold/redirect a turn is the agent's own reasoning, which this feeds. It reuses the existing PreToolUse-Bash hook surface rather than inventing a new mechanism.
+
+---
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change produces a signal consumed by an existing smart gate (the agent's own next-turn reasoning).
+
+It writes `{ decision: 'approve', additionalContext: <reminder> }` — `approve` is unconditional; the hook can never block or delay a message. Brittle regex is acceptable precisely because it holds no authority: a false match costs one harmless reminder.
+
+---
+
+## 5. Interactions
+
+- **Shadowing:** runs in the PreToolUse Bash matcher chain after `deferral-detector` and before `external-communication-guard`. All non-`dangerous-command-guard` hooks in the chain emit `approve`+`additionalContext` (never block), so it cannot shadow or be shadowed — each contributes additive context.
+- **Double-fire:** a message containing both a defer-pattern and a stop-excuse triggers both `deferral-detector` and this hook; both inject context. That is additive and non-conflicting, not a harmful double-fire.
+- **Races:** none — the hook is a stateless, pure stdin→stdout process. It writes no files and shares no state (logging was deliberately omitted to keep it ESM-host-safe and side-effect-free).
+- **Feedback loops:** none — it injects context into the agent; the agent's resulting message is not re-fed to the hook in a loop (the injected reminder text is not itself a stop-excuse).
+
+---
+
+## 6. External surfaces
+
+- Other agents on the machine: unaffected (per-session PreToolUse hook).
+- Install base: ships to ALL agents on next update via `INSTAR_BASH_PRETOOLUSE_HOOKS` (init + migrate parity) and the Codex chain — intended.
+- External systems: none — the hook never makes network calls and never touches Telegram/Slack/GitHub.
+- Persistent state: none — writes nothing to disk.
+- Timing/runtime: a sub-second `node` process per outbound command (5s timeout, same as deferral-detector). Negligible.
+
+---
+
+## 7. Rollback cost
+
+Pure additive code change. Back-out = remove the `self-stop-guard.js` entry from `INSTAR_BASH_PRETOOLUSE_HOOKS` + the file writes + the manifest entry, ship as a patch. No persistent state, no data migration, no agent-state repair. Existing agents drop the hook on their next update (settings re-derive from the canonical list). No user-visible regression during the rollback window (the hook never blocked anything).
+
+---
+
+## Conclusion
+
+The review produced no design changes — the hook was deliberately scoped signal-only and stateless from the start, mirroring the proven `deferral-detector` contract. The only residuals are harmless over-fires (mitigated by the allow-list) and the deliberate single-layer scope (pre-send only; the stop-hook layer is future work the user explicitly framed as "multiple levels"). Clear to ship as a Tier-1 additive guard.
+
+## Second-pass review (if required)
+
+Not required for a Tier-1 signal-only additive hook. External cross-model review was unavailable this session (codex CLI not installed; Gemini CLI returned 429 "exhausted capacity"). A cross-model pass by Codey (codex) is queued after his current keystone build.
+
+## Evidence pointers
+
+- 16 unit tests spawn the shipped hook end-to-end (`tests/unit/self-stop-guard.test.ts`) — both sides of the boundary, Claude `Bash` + Codex `exec_command`.
+- Drift/parity green: `instar-settings-hooks`, `builtin-manifest`, `PostUpdateMigrator-pretooluse-parity`, `migration-parity-hooks`.
+- Origin incident: 2026-06-02 early-close of a 12h autonomous run citing "maxed out context" (the behavior this guards).