instar 1.3.210 → 1.3.211

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.210",
+  "version": "1.3.211",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-03T04:04:41.735Z",
-  "instarVersion": "1.3.210",
+  "generatedAt": "2026-06-03T05:10:42.873Z",
+  "instarVersion": "1.3.211",
   "entryCount": 195,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -370,7 +370,7 @@
       "type": "skill",
       "domain": "skills",
       "sourcePath": ".claude/skills/autonomous/SKILL.md",
-      "contentHash": "96280cf60c51b233259d5f38189e072fd863e145c5952d8add207a0d016b14fb",
+      "contentHash": "3075c343b636506da821b1c1483112fb38920f41b1547b4dacdc7ae1734c51be",
       "since": "2025-01-01"
     },
     "skill:build": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "6b2b1756b848bc78624daeee8a92d9ebf92844495e30fe0188b55576f8845880",
+      "contentHash": "6cf82b68d5b625f674bfe7e5b43b85a3c51ee750038430f13f09d42d1a3fc14e",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.211.md

@@ -0,0 +1,63 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The autonomous-mode stop hook was being registered in `settings.json` at
+`.instar/hooks/instar/autonomous-stop-hook.sh` — a path where the hook is **never
+deployed**. The hook ships only in the skill directory
+(`.claude/skills/autonomous/hooks/autonomous-stop-hook.sh`). So on every `Stop`
+event the hook command hit a missing file, failed silently, and the autonomous
+loop never re-injected the task list. The session stayed alive but stopped
+self-continuing between turns — it only advanced when the user sent a message.
+
+Three coordinated fixes:
+
+1. **`.claude/skills/autonomous/SKILL.md` (Step 2a)** now registers the deployed
+   skill path and self-heals: it strips any prior (including wrong-path)
+   autonomous stop-hook entry and writes exactly one correct-path entry.
+2. **`PostUpdateMigrator.ensureAutonomousStopHook()`** gained a repair pass that
+   rewrites any existing wrong-path registration in `settings.json` to the skill
+   path. Without it, the "already registered?" presence check treated the
+   wrong-path entry as present and never corrected it — so existing agents would
+   stay broken forever.
+3. **`PostUpdateMigrator.migrateAutonomousStopHookTopicKeyed()`** re-deploys the
+   fixed `SKILL.md` to existing agents, gated on a marker unique to the corrected
+   prompt (stock prompts upgrade; customized prompts are left untouched).
+
+## What to Tell Your User
+
+If you ran an autonomous session and noticed it went quiet between turns —
+continuing only when you messaged it, rather than driving itself forward — this
+fixes the cause. The loop's re-engagement step was pointed at a file that was
+never installed, so it silently did nothing each time the session tried to
+continue. After this update the autonomous loop re-engages on its own as
+intended, and any agent that already had the broken registration is repaired
+automatically on update. No action is needed on your side.
+
+## Summary of New Capabilities
+
+- Autonomous sessions reliably self-continue between turns (the stop hook now
+  resolves to a file that actually exists).
+- Existing agents with the broken registration are healed in place on update —
+  both the `settings.json` entry and the deployed skill prompt.
+- The skill registration is now self-healing: activating autonomous mode always
+  ends with exactly one correct-path stop-hook entry, regardless of prior state.
+
+## Evidence
+
+- New unit suite `tests/unit/PostUpdateMigrator-autonomousHookPath.test.ts`
+  (9 tests): wrong-path → repaired; no duplicate added; siblings untouched;
+  already-correct → no-op; missing → registered; idempotent; SKILL.md content
+  asserts the corrected path + marker; topic-keyed migration re-deploys a stock
+  SKILL.md and skips a customized one.
+- Empirical check of the SKILL.md Step 2a snippet against a settings file
+  carrying the wrong-path entry plus sibling hooks: the wrong entry is rewritten
+  to `bash ${CLAUDE_PROJECT_DIR}/.claude/skills/autonomous/hooks/autonomous-stop-hook.sh`,
+  siblings are preserved, and a second run is a no-op (idempotent).
+- Existing autonomous/migration suites stay green
+  (`autonomous-skill-deployment`, `PostUpdateMigrator-buildStopHook`,
+  `autonomous-stop-hook-notify`, `installCodexHooks`, `emit-session-clock` —
+  50 tests). `tsc --noEmit` clean.

package/upgrades/side-effects/autonomous-stop-hook-path-fix.md

@@ -0,0 +1,156 @@
+# Side-Effects Review — Autonomous loop re-engagement fix (stop-hook registration path)
+
+**Version / slug:** `autonomous-stop-hook-path-fix`
+**Date:** `2026-06-03`
+**Author:** `Echo`
+**Second-pass reviewer:** `Echo (self, single-pass — Tier-1 fix)`
+
+## Summary of the change
+
+The autonomous-mode stop hook is what re-injects the task list on every `Stop`
+event so an autonomous session keeps working between turns. It was registered in
+`settings.json` at `.instar/hooks/instar/autonomous-stop-hook.sh`, but the hook
+is only ever deployed to the skill dir (`.claude/skills/autonomous/hooks/`). The
+registered path therefore pointed at a non-existent file: every `Stop` failed
+silently and the loop never re-engaged. Files touched:
+`.claude/skills/autonomous/SKILL.md` (Step 2a registration snippet),
+`src/core/PostUpdateMigrator.ts` (`ensureAutonomousStopHook` repair pass +
+`migrateAutonomousStopHookTopicKeyed` SKILL.md re-deploy), and a new unit suite.
+The decision surface is purely *which file path is written into the Stop-hook
+registration* — there is no message block/allow logic.
+
+## Decision-point inventory
+
+- `SKILL.md Step 2a registration` — modify — registers the deployed skill path
+  (was the never-deployed `.instar/hooks/instar/` path) and self-heals stale entries.
+- `PostUpdateMigrator.ensureAutonomousStopHook` — modify — adds a repair pass that
+  rewrites wrong-path entries before the existing presence check.
+- `PostUpdateMigrator.migrateAutonomousStopHookTopicKeyed` — modify — adds SKILL.md
+  to the marker-gated re-deploy list so existing agents receive the fixed prompt.
+- No message-gating / block-allow decision point is touched.
+
+---
+
+## 1. Over-block
+
+No block/allow surface — over-block not applicable. The change only corrects a
+filesystem path string in a hook registration; it never rejects any input.
+
+---
+
+## 2. Under-block
+
+No block/allow surface — under-block not applicable. One adjacent correctness
+note: the repair targets specifically the `.instar/hooks/instar/autonomous-stop-hook.sh`
+wrong path. If a future custom registration used some *third* wrong path, the
+repair would not catch it — but that path was never shipped by instar, so there
+is nothing in the install base to miss. The registration helper still adds a
+correct entry if none exists at all.
+
+---
+
+## 3. Level-of-abstraction fit
+
+Correct layer. This is a deterministic settings/file-path migration — exactly the
+class `PostUpdateMigrator` owns (Migration Parity Standard). The SKILL.md snippet
+is the install/activation-time registrar; the migrator is the in-place repair for
+already-deployed agents. No reasoning/LLM layer is involved or appropriate: the
+correct path is a fixed, known string, so a structural fix is the right tool (and
+matches the sibling `build-stop-hook.sh` path-repair precedent).
+
+---
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change has no block/allow surface.
+
+It rewrites a hook-registration path in `settings.json`; it holds no message or
+operation authority. The autonomous stop hook itself (unchanged here) remains the
+authority for whether a session continues, and it is session-id-gated.
+
+---
+
+## 5. Interactions
+
+- **Shadowing:** The repair pass runs *before* the existing `hasAutonomousHook`
+  presence check inside `ensureAutonomousStopHook`. This is intentional and is the
+  core of the fix: previously the presence check matched the wrong-path entry and
+  short-circuited the correct registration, so the wrong path was permanent. After
+  repair, the entry already holds the correct path, so the presence check finds it
+  and adds no duplicate (verified by the "no duplicate" test).
+- **Double-fire:** Two registrars exist — the SKILL.md Step 2a (activation-time,
+  dynamic add/remove) and `ensureAutonomousStopHook` (update-time, permanent). Both
+  now converge on the *same* command string, so they can no longer disagree or
+  produce two divergent entries. The SKILL.md snippet strips-then-appends, and the
+  migrator's presence check prevents duplicates; combined they always yield exactly
+  one correct entry (verified).
+- **Races:** No shared concurrent state. `settings.json` is edited by the same
+  single-writer migration path as every other hook registration.
+- **Feedback loops:** None. A one-time path correction; the corrected entry is a
+  fixed string, so subsequent passes are no-ops (idempotency verified).
+
+---
+
+## 6. External surfaces
+
+- **Other agents on the machine:** none — per-project `settings.json` only.
+- **Install base:** existing agents are healed on next update (the intended
+  surface). The `migrateAutonomousStopHookTopicKeyed` re-deploy is marker-gated and
+  fingerprint-guarded, so a customized `SKILL.md` (missing the stock
+  `ALL_TASKS_COMPLETE` fingerprint) is left untouched — verified by test.
+- **External systems (Telegram/Slack/GitHub/Cloudflare):** none.
+- **Persistent state:** `.claude/settings.json` and the deployed `SKILL.md`. The
+  edit is convergent (always lands on the one correct entry), so re-running is safe.
+- **Timing/runtime:** none — the migration is synchronous on the existing update path.
+
+---
+
+## 7. Rollback cost
+
+Pure code + template change. Back-out is `git revert` + ship the next patch. There
+is one consideration: this migration *writes a corrected entry* into existing
+agents' `settings.json`. A revert would stop applying the correction but would NOT
+re-break already-corrected agents (the correct path resolves to a real file, so a
+reverted build leaves them working). No data migration, no agent reset, no
+user-visible regression during the rollback window. Worst case of the fix itself
+being wrong: an agent ends up with a Stop-hook entry pointing at the skill path —
+which is exactly where the file lives — so the failure mode of the fix is "it
+works".
+
+---
+
+## Conclusion
+
+The review produced no design changes. The fix is a narrow, deterministic path
+correction with a self-healing registrar and an in-place repair migration that
+satisfies the Migration Parity Standard for both the `settings.json` entry and the
+deployed skill prompt. The only decision surface is a fixed path string, the
+repair is idempotent and convergent, and the customized-prompt guard is preserved.
+Clear to ship.
+
+---
+
+## Second-pass review (if required)
+
+**Reviewer:** Echo (self) — Tier-1 fix, single-pass per the tiered process.
+**Independent read of the artifact: concur**
+
+The change has no message-gating surface, the repair-before-presence-check
+ordering is the load-bearing correctness point and is tested, and the Migration
+Parity obligations (settings repair + marker-gated SKILL.md re-deploy + customized
+guard) are all covered. No concerns.
+
+---
+
+## Evidence pointers
+
+- `tests/unit/PostUpdateMigrator-autonomousHookPath.test.ts` — 9 tests (repair,
+  no-duplicate, sibling-preservation, no-op-when-correct, register-when-missing,
+  idempotency, SKILL.md content marker, topic-keyed re-deploy + customized-skip).
+- Empirical SKILL.md snippet run against a wrong-path settings fixture: wrong entry
+  rewritten to the skill path, siblings preserved, second run idempotent.
+- Regression: `autonomous-skill-deployment`, `PostUpdateMigrator-buildStopHook`,
+  `autonomous-stop-hook-notify`, `installCodexHooks`, `emit-session-clock` — 50
+  tests green. `tsc --noEmit` clean.