instar 1.3.240 → 1.3.241

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.240",
+  "version": "1.3.241",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-04T06:02:09.524Z",
-  "instarVersion": "1.3.240",
+  "generatedAt": "2026-06-04T06:05:27.744Z",
+  "instarVersion": "1.3.241",
   "entryCount": 198,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
+      "contentHash": "5277e0b4fabf5bdf2f87d4479430203b424ccd4c7c3fd5116ca64add4201cbce",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "cf87f05acf0ee9e4dab65be206048e19cd7c9036b4733019e8372fd5f81e5a1f",
+      "contentHash": "d01eb671ddb9e21b1aeef11fb0b79a63db7a088baf94352fce58a3f0a7c4fd60",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {

package/upgrades/{1.3.240.md → 1.3.241.md}

@@ -15,6 +15,20 @@ the new `shortcutDifferentialCount`) but can never make the keystone look health
 pre-field channels are grandfathered as `unknown` and still count, so an already-earned
 keystone is never retroactively un-fired.
 
+Adds a structural dedup at the Telegram→session delivery chokepoint
+(`SessionManager.injectTelegramMessage`). A given Telegram `messageId` now reaches a
+session at most once: the method keeps a small per-`(session, messageId)` ledger (pruned on
+a 10-minute window) and, on a repeat, suppresses the re-injection and logs it instead of
+delivering the same user message again. `messageId` is threaded in from both delivery paths
+— the `/internal/telegram-forward` route (lifeline → server) and the in-process
+`telegram→session` path. Callers that carry no positive `messageId` are unaffected (no
+dedup), preserving back-compat.
+
+This closes an observed bug where a single user message was forwarded to a codex session
+five times over ~50s (upstream re-forward while the session was starting), making the agent
+queue and re-process the same task repeatedly. The suppression is logged so the upstream
+over-forward stays visible for a separate root-cause.
+
 Path 1 of the Threadline A2A continuity fix. Headless one-shot `claude -p` reply
 sessions never report their session id, so the resume entry kept a placeholder
 uuid and every spaced follow-up cold-spawned (a live Echo↔Dawn round-trip proved
@@ -38,6 +52,12 @@ Nothing user-facing changes. Internally, the apprenticeship now records which ch
 mentor↔mentee cycle ran through and structurally refuses to let a CLI/API shortcut count as
 real keystone progress — so "is the real mentorship happening?" can't be faked.
 
+Nothing user-facing changes in how you talk to your agent. Under the hood, if a single
+message you send ever got relayed to the agent more than once (a rare hiccup when the agent
+was just starting up), the agent now notices and acts on it only once — so it won't
+double-work a request or burn extra model usage repeating itself. A note is written to the
+log each time a duplicate is caught, so the underlying relay glitch can still be chased down.
+
 When another agent and I have a back-and-forth, I now stay in the same
 conversation across messages instead of forgetting between each one — so the
 realistic turn-based exchange (which the upcoming agent-to-agent feedback work

package/upgrades/side-effects/telegram-delivery-dedup.md

@@ -0,0 +1,69 @@
+# Side-Effects Review — Telegram delivery-chokepoint dedup
+
+**Version / slug:** `telegram-delivery-dedup`
+**Date:** `2026-06-03`
+**Author:** `echo`
+**Second-pass reviewer:** `not required`
+
+## Summary of the change
+
+`SessionManager.injectTelegramMessage` gains an optional trailing `messageId` param and a
+structural dedup: a `(tmuxSession, messageId)` ledger (pruned on a 10-minute window) ensures
+a given Telegram message reaches a session at most once. A repeat is suppressed (returns
+`true` — already delivered) and logged via `console.warn`. `messageId` is threaded from the
+two delivery callers: the `/internal/telegram-forward` route and the in-process
+`telegram→session` path (derived from `pipeline.id` = `tg-{messageId}`).
+
+## Decision-point inventory
+
+One decision: "have I already delivered this `(session, messageId)` within the window?"
+→ suppress + log, else record + deliver. Gated on `messageId` being a positive number.
+
+## 1. Over-block
+
+**What legitimate inputs does this reject?** Only a re-delivery of the SAME Telegram
+`messageId` to the SAME session within 10 minutes — which is, by definition, a duplicate of
+a message already delivered (Telegram `message_id` is unique per chat; a genuine re-send is a
+NEW id). The first delivery always lands. Distinct messages (distinct ids), messages to
+different sessions, and any caller that supplies no positive `messageId` (e.g. `0`/undefined)
+are never deduped. So no legitimate distinct user message is dropped.
+
+## 2. Under-block
+
+**What does this still miss?** It does not fix the *upstream* cause of the over-forward
+(lifeline re-forward / PendingRelayStore re-drive / sentinel pause+resume) — it is a
+chokepoint backstop. The suppression `console.warn` is deliberately retained so the upstream
+multiplicity remains observable for a follow-up root-cause. It also does not dedupe non-
+Telegram delivery paths (WhatsApp/iMessage inject have their own methods, out of scope).
+
+## 3. Level-of-abstraction fit
+
+**Right layer?** Yes. `injectTelegramMessage` is the single server→session delivery
+chokepoint that writes the `/tmp/instar-telegram` file and does the tmux inject; every
+Telegram delivery path funnels through it. Guarding there means the dedup holds regardless of
+which upstream component over-forwards (defense-in-depth, Structure > Willpower). The two
+callers only thread the id through.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+The dedup is an authority (it suppresses a delivery), but a tightly-scoped and conservative
+one: it acts only on an exact `(session, messageId)` duplicate within a short window, and
+returns success (the message WAS delivered on the first call), so callers see no failure. The
+`console.warn` preserves the signal of the upstream over-forward for diagnosis. No user
+message is lost.
+
+## 5. Reversibility / blast radius
+
+Bounded. The ledger is an in-memory `Map` pruned on a 10-minute window (naturally bounded by
+message volume). No persistence, no schema, no config, no migration. If the dedup ever
+misbehaved, the change is a few lines in one method plus two one-line caller edits; reverting
+is trivial. The only behavioral change is "the exact same Telegram message is not injected
+into the same session twice within 10 minutes."
+
+## 6. Test coverage
+
+`tests/unit/session-telegram-inject.test.ts` — both sides of the boundary with realistic
+input: repeat id → suppressed (one file); distinct id → delivered (two files); no id →
+no dedup (two files); id `0` → no dedup; same id to two sessions → both deliver.