instar 1.3.27 → 1.3.28

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.27",
+  "version": "1.3.28",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-27T17:04:17.011Z",
-  "instarVersion": "1.3.27",
+  "generatedAt": "2026-05-27T21:23:16.473Z",
+  "instarVersion": "1.3.28",
   "entryCount": 192,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -65,7 +65,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -74,7 +74,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -83,7 +83,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -101,7 +101,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -110,7 +110,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -128,7 +128,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1481,7 +1481,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "1cea001e2fbc317fe9baf73e9e41dce13fa1dd2821744e81f37c5c6710bbb7b9",
+      "contentHash": "e51fcc55877de0644608728645efc33b586179ac568b85ce190e5b74b1eb4a6d",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.28.md

@@ -0,0 +1,30 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+Fleet-wide guardrail outage fix: 8 of `PostUpdateMigrator`'s `get*Hook()` methods were emitting `.js` content with bare top-level `require(...)`, which throws `ReferenceError: require is not defined in ES module scope` in every `"type":"module"` agent home (most agents). The crashes exited non-blocking, so the failures were invisible — guardrails looked installed but did nothing. One of the affected was the UnjustifiedStopGate router itself — the very mechanism designed to prevent silent stalls was silently broken.
+
+This release rewrites all 8 affected generators to emit ESM-safe content (async IIFE + dynamic `await import('node:...')`, mirroring the documented pattern in `getHookEventReporterScript`), and adds a one-shot regression test that bans bare top-level `require(...)` from any future generated hook — CI will fail before the bug class can re-ship.
+
+`migrateHooks` always-overwrites `instar/` hooks, so the fix ships to every agent automatically on next update — no separate migration step needed.
+
+## What to Tell Your User
+
+- Eight quiet guardrails (the silent-stall preventer, the slop-package nudger, the post-commit reflection capture, the response-review pipeline, and four others) come back to life on this update — they were silently crashing on every fire and we just learned about it.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| ESM-safe instar hooks (8 generators rewritten) | Automatic on update; no action needed |
+| Regression test banning bare top-level `require(...)` in any generated hook | Runs in CI; new hook PRs fail if they reintroduce the pattern |
+
+## Evidence
+
+- Source rewrites in `src/core/PostUpdateMigrator.ts`; regression test in `tests/unit/no-bare-require-in-generated-hooks.test.ts` (18 cases, all green; initially 8 failed, one per broken generator).
+- Side-effects review: `upgrades/side-effects/esm-safe-instar-hooks.md`
+- Spec: `docs/specs/ESM-SAFE-INSTAR-HOOKS-SPEC.md` (approved, converged)
+- ELI16: `docs/specs/ESM-SAFE-INSTAR-HOOKS-SPEC.eli16.md`
+- Postmortem context: surfaced by the 2026-05-27 silent-stall incident.

package/upgrades/side-effects/esm-safe-instar-hooks.md

@@ -0,0 +1,33 @@
+# Side-Effects Review — ESM-Safe Instar Hook Generators + Structural Prevention
+
+**Spec:** docs/specs/ESM-SAFE-INSTAR-HOOKS-SPEC.md (pending Justin's approval)
+
+Fixes the fleet-wide silent-guardrail outage discovered 2026-05-27: 8 of `PostUpdateMigrator`'s `get*Hook()` methods emit `.js` content with bare top-level `require(...)`, which crashes on every fire in `"type":"module"` agent homes (most agents). The crashes are invisible (non-blocking exit), so the guardrails *look* installed but do nothing. One of the affected guardrails is the UnjustifiedStopGate router itself — the very mechanism meant to prevent silent stalls was itself silently broken.
+
+## What changed
+- `src/core/PostUpdateMigrator.ts` — rewrote 8 `get*Hook()` generators to emit ESM-safe content (async IIFE + dynamic `await import('node:...')`, mirroring the documented pattern in `getHookEventReporterScript`): `getStopGateRouterHook`, `getSlopcheckGuardHook`, `getPostActionReflectionHook`, `getScopeCoherenceCollectorHook`, `getScopeCoherenceCheckpointHook`, `getClaimInterceptHook`, `getResponseReviewHook`, `getClaimInterceptResponseHook`.
+- `tests/unit/no-bare-require-in-generated-hooks.test.ts` — NEW. Source-scans `PostUpdateMigrator.ts`, extracts each `get*Hook()` body's backtick-template, and asserts no forbidden top-level `require(...)` pattern. One test per generator (18 cases total). Structurally bans the bug class from re-shipping.
+
+## Over-block / under-block
+- UNDER (a real `.js` script needing legitimate top-level `require`): the test scans only inside `get*Hook` method bodies in `PostUpdateMigrator.ts`. Non-hook code elsewhere is untouched. Standalone hook .js files in `src/templates/hooks/` are also untouched.
+- OVER (a legitimate use of `require` inside a hook): there isn't one — every instar hook ships into `.instar/hooks/instar/` in agent homes that are ESM by default. Bare top-level `require` is broken there. Dynamic `await import(...)` works in both CJS and ESM hosts; there is no scenario where the new pattern is wrong.
+
+## Signal vs authority
+- The regression test is the AUTHORITY (CI fails on a violation). The generator rewrites are the SUBSTANTIVE FIX (run in production). Together they form a complete loop: the rewrites unblock the fleet; the test makes the unblock permanent.
+
+## Interactions
+- `migrateHooks` always-overwrites instar/ hooks (existing standard) → the fixed generators automatically ship on every agent's next update. No new migration code required.
+- No change to hook contracts (stdin JSON in, exit code semantics, stdout JSON out).
+- No config or settings changes.
+
+## Rollback cost
+- Trivial: revert both files. Worst case: agents return to the silently-broken state they had before.
+
+## Tests
+- `tests/unit/no-bare-require-in-generated-hooks.test.ts` (18) — one test per generator (15+ healthy generators plus three sanity-check tests). Initially failed 8/18 (one per broken generator), all green after the source fix.
+- Runtime smoke (manual, performed during diagnosis): the fixed hook content for `stop-gate-router`, `slopcheck-guard`, and `post-action-reflection` was piped a representative JSON payload on real ESM-mode hardware and exited cleanly (no `ReferenceError`). The same rewrite pattern applied to the other 5 generators.
+
+## NOT in this commit (tracked, follow-up specs)
+- Postmortem Finding #3 — notify-on-stop wiring (Task 2 of the autonomous run).
+- Postmortem Finding #2 — false-blocker behavioral interceptor (Task 3).
+- Postmortem Finding #4 — Agent Self-Propagation harness, CMT-560 (Task 4).