instar 1.3.292 → 1.3.293

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/dist/server/routes.d.ts.map +1 -1
  2. package/dist/server/routes.js +7 -3
  3. package/dist/server/routes.js.map +1 -1
  4. package/package.json +1 -1
  5. package/src/data/builtin-manifest.json +46 -46
  6. package/upgrades/1.3.293.md +26 -0
  7. package/upgrades/side-effects/dashboard-headless-gemini-framework.md +90 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "instar",
3
- "version": "1.3.292",
3
+ "version": "1.3.293",
4
4
  "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
package/src/data/builtin-manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "$schema": "./builtin-manifest.schema.json",
3
3
  "schemaVersion": 1,
4
- "generatedAt": "2026-06-05T12:14:42.694Z",
5
- "instarVersion": "1.3.292",
4
+ "generatedAt": "2026-06-05T12:19:04.540Z",
5
+ "instarVersion": "1.3.293",
6
6
  "entryCount": 198,
7
7
  "entries": {
8
8
  "hook:session-start": {
@@ -418,7 +418,7 @@
418
418
  "type": "route-group",
419
419
  "domain": "monitoring",
420
420
  "sourcePath": "src/server/routes.ts",
421
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
421
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
422
422
  "since": "2025-01-01"
423
423
  },
424
424
  "route-group:agents": {
@@ -426,7 +426,7 @@
426
426
  "type": "route-group",
427
427
  "domain": "sessions",
428
428
  "sourcePath": "src/server/routes.ts",
429
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
429
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
430
430
  "since": "2025-01-01"
431
431
  },
432
432
  "route-group:backups": {
@@ -434,7 +434,7 @@
434
434
  "type": "route-group",
435
435
  "domain": "operations",
436
436
  "sourcePath": "src/server/routes.ts",
437
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
437
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
438
438
  "since": "2025-01-01"
439
439
  },
440
440
  "route-group:git": {
@@ -442,7 +442,7 @@
442
442
  "type": "route-group",
443
443
  "domain": "coordination",
444
444
  "sourcePath": "src/server/routes.ts",
445
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
445
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
446
446
  "since": "2025-01-01"
447
447
  },
448
448
  "route-group:memory": {
@@ -450,7 +450,7 @@
450
450
  "type": "route-group",
451
451
  "domain": "memory",
452
452
  "sourcePath": "src/server/routes.ts",
453
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
453
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
454
454
  "since": "2025-01-01"
455
455
  },
456
456
  "route-group:semantic": {
@@ -458,7 +458,7 @@
458
458
  "type": "route-group",
459
459
  "domain": "memory",
460
460
  "sourcePath": "src/server/routes.ts",
461
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
461
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
462
462
  "since": "2025-01-01"
463
463
  },
464
464
  "route-group:status": {
@@ -466,7 +466,7 @@
466
466
  "type": "route-group",
467
467
  "domain": "monitoring",
468
468
  "sourcePath": "src/server/routes.ts",
469
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
469
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
470
470
  "since": "2025-01-01"
471
471
  },
472
472
  "route-group:capabilities": {
@@ -474,7 +474,7 @@
474
474
  "type": "route-group",
475
475
  "domain": "mapping",
476
476
  "sourcePath": "src/server/routes.ts",
477
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
477
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
478
478
  "since": "2025-01-01"
479
479
  },
480
480
  "route-group:project-map": {
@@ -482,7 +482,7 @@
482
482
  "type": "route-group",
483
483
  "domain": "mapping",
484
484
  "sourcePath": "src/server/routes.ts",
485
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
485
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
486
486
  "since": "2025-01-01"
487
487
  },
488
488
  "route-group:coherence": {
@@ -490,7 +490,7 @@
490
490
  "type": "route-group",
491
491
  "domain": "coherence",
492
492
  "sourcePath": "src/server/routes.ts",
493
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
493
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
494
494
  "since": "2025-01-01"
495
495
  },
496
496
  "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
498
498
  "type": "route-group",
499
499
  "domain": "sessions",
500
500
  "sourcePath": "src/server/routes.ts",
501
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
501
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
502
502
  "since": "2025-01-01"
503
503
  },
504
504
  "route-group:context": {
@@ -506,7 +506,7 @@
506
506
  "type": "route-group",
507
507
  "domain": "context",
508
508
  "sourcePath": "src/server/routes.ts",
509
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
509
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
510
510
  "since": "2025-01-01"
511
511
  },
512
512
  "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
514
514
  "type": "route-group",
515
515
  "domain": "coherence",
516
516
  "sourcePath": "src/server/routes.ts",
517
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
517
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
518
518
  "since": "2025-01-01"
519
519
  },
520
520
  "route-group:canonical-state": {
@@ -522,7 +522,7 @@
522
522
  "type": "route-group",
523
523
  "domain": "state",
524
524
  "sourcePath": "src/server/routes.ts",
525
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
525
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
526
526
  "since": "2025-01-01"
527
527
  },
528
528
  "route-group:ci": {
@@ -530,7 +530,7 @@
530
530
  "type": "route-group",
531
531
  "domain": "monitoring",
532
532
  "sourcePath": "src/server/routes.ts",
533
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
533
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
534
534
  "since": "2025-01-01"
535
535
  },
536
536
  "route-group:sessions": {
@@ -538,7 +538,7 @@
538
538
  "type": "route-group",
539
539
  "domain": "sessions",
540
540
  "sourcePath": "src/server/routes.ts",
541
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
541
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
542
542
  "since": "2025-01-01"
543
543
  },
544
544
  "route-group:jobs": {
@@ -546,7 +546,7 @@
546
546
  "type": "route-group",
547
547
  "domain": "scheduling",
548
548
  "sourcePath": "src/server/routes.ts",
549
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
549
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
550
550
  "since": "2025-01-01"
551
551
  },
552
552
  "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
554
554
  "type": "route-group",
555
555
  "domain": "scheduling",
556
556
  "sourcePath": "src/server/routes.ts",
557
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
557
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
558
558
  "since": "2025-01-01"
559
559
  },
560
560
  "route-group:telegram": {
@@ -562,7 +562,7 @@
562
562
  "type": "route-group",
563
563
  "domain": "communication",
564
564
  "sourcePath": "src/server/routes.ts",
565
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
565
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
566
566
  "since": "2025-01-01"
567
567
  },
568
568
  "route-group:attention": {
@@ -570,7 +570,7 @@
570
570
  "type": "route-group",
571
571
  "domain": "communication",
572
572
  "sourcePath": "src/server/routes.ts",
573
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
573
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
574
574
  "since": "2025-01-01"
575
575
  },
576
576
  "route-group:relationships": {
@@ -578,7 +578,7 @@
578
578
  "type": "route-group",
579
579
  "domain": "relationships",
580
580
  "sourcePath": "src/server/routes.ts",
581
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
581
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
582
582
  "since": "2025-01-01"
583
583
  },
584
584
  "route-group:feedback": {
@@ -586,7 +586,7 @@
586
586
  "type": "route-group",
587
587
  "domain": "feedback",
588
588
  "sourcePath": "src/server/routes.ts",
589
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
589
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
590
590
  "since": "2025-01-01"
591
591
  },
592
592
  "route-group:updates": {
@@ -594,7 +594,7 @@
594
594
  "type": "route-group",
595
595
  "domain": "updates",
596
596
  "sourcePath": "src/server/routes.ts",
597
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
597
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
598
598
  "since": "2025-01-01"
599
599
  },
600
600
  "route-group:dispatches": {
@@ -602,7 +602,7 @@
602
602
  "type": "route-group",
603
603
  "domain": "dispatches",
604
604
  "sourcePath": "src/server/routes.ts",
605
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
605
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
606
606
  "since": "2025-01-01"
607
607
  },
608
608
  "route-group:quota": {
@@ -610,7 +610,7 @@
610
610
  "type": "route-group",
611
611
  "domain": "monitoring",
612
612
  "sourcePath": "src/server/routes.ts",
613
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
613
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
614
614
  "since": "2025-01-01"
615
615
  },
616
616
  "route-group:publishing": {
@@ -618,7 +618,7 @@
618
618
  "type": "route-group",
619
619
  "domain": "publishing",
620
620
  "sourcePath": "src/server/routes.ts",
621
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
621
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
622
622
  "since": "2025-01-01"
623
623
  },
624
624
  "route-group:private-views": {
@@ -626,7 +626,7 @@
626
626
  "type": "route-group",
627
627
  "domain": "publishing",
628
628
  "sourcePath": "src/server/routes.ts",
629
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
629
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
630
630
  "since": "2025-01-01"
631
631
  },
632
632
  "route-group:tunnel": {
@@ -634,7 +634,7 @@
634
634
  "type": "route-group",
635
635
  "domain": "networking",
636
636
  "sourcePath": "src/server/routes.ts",
637
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
637
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
638
638
  "since": "2025-01-01"
639
639
  },
640
640
  "route-group:events": {
@@ -642,7 +642,7 @@
642
642
  "type": "route-group",
643
643
  "domain": "networking",
644
644
  "sourcePath": "src/server/routes.ts",
645
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
645
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
646
646
  "since": "2025-01-01"
647
647
  },
648
648
  "route-group:evolution": {
@@ -650,7 +650,7 @@
650
650
  "type": "route-group",
651
651
  "domain": "evolution",
652
652
  "sourcePath": "src/server/routes.ts",
653
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
653
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
654
654
  "since": "2025-01-01"
655
655
  },
656
656
  "route-group:watchdog": {
@@ -658,7 +658,7 @@
658
658
  "type": "route-group",
659
659
  "domain": "monitoring",
660
660
  "sourcePath": "src/server/routes.ts",
661
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
661
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
662
662
  "since": "2025-01-01"
663
663
  },
664
664
  "route-group:topic-memory": {
@@ -666,7 +666,7 @@
666
666
  "type": "route-group",
667
667
  "domain": "memory",
668
668
  "sourcePath": "src/server/routes.ts",
669
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
669
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
670
670
  "since": "2025-01-01"
671
671
  },
672
672
  "route-group:state-sync": {
@@ -674,7 +674,7 @@
674
674
  "type": "route-group",
675
675
  "domain": "coordination",
676
676
  "sourcePath": "src/server/routes.ts",
677
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
677
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
678
678
  "since": "2025-01-01"
679
679
  },
680
680
  "route-group:intent": {
@@ -682,7 +682,7 @@
682
682
  "type": "route-group",
683
683
  "domain": "intent",
684
684
  "sourcePath": "src/server/routes.ts",
685
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
685
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
686
686
  "since": "2025-01-01"
687
687
  },
688
688
  "route-group:triage": {
@@ -690,7 +690,7 @@
690
690
  "type": "route-group",
691
691
  "domain": "safety",
692
692
  "sourcePath": "src/server/routes.ts",
693
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
693
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
694
694
  "since": "2025-01-01"
695
695
  },
696
696
  "route-group:operations": {
@@ -698,7 +698,7 @@
698
698
  "type": "route-group",
699
699
  "domain": "safety",
700
700
  "sourcePath": "src/server/routes.ts",
701
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
701
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
702
702
  "since": "2025-01-01"
703
703
  },
704
704
  "route-group:sentinel": {
@@ -706,7 +706,7 @@
706
706
  "type": "route-group",
707
707
  "domain": "safety",
708
708
  "sourcePath": "src/server/routes.ts",
709
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
709
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
710
710
  "since": "2025-01-01"
711
711
  },
712
712
  "route-group:trust": {
@@ -714,7 +714,7 @@
714
714
  "type": "route-group",
715
715
  "domain": "safety",
716
716
  "sourcePath": "src/server/routes.ts",
717
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
717
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
718
718
  "since": "2025-01-01"
719
719
  },
720
720
  "route-group:monitoring": {
@@ -722,7 +722,7 @@
722
722
  "type": "route-group",
723
723
  "domain": "monitoring",
724
724
  "sourcePath": "src/server/routes.ts",
725
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
725
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
726
726
  "since": "2025-01-01"
727
727
  },
728
728
  "route-group:commitments": {
@@ -730,7 +730,7 @@
730
730
  "type": "route-group",
731
731
  "domain": "commitments",
732
732
  "sourcePath": "src/server/routes.ts",
733
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
733
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
734
734
  "since": "2025-01-01"
735
735
  },
736
736
  "route-group:episodes": {
@@ -738,7 +738,7 @@
738
738
  "type": "route-group",
739
739
  "domain": "memory",
740
740
  "sourcePath": "src/server/routes.ts",
741
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
741
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
742
742
  "since": "2025-01-01"
743
743
  },
744
744
  "route-group:messages": {
@@ -746,7 +746,7 @@
746
746
  "type": "route-group",
747
747
  "domain": "coordination",
748
748
  "sourcePath": "src/server/routes.ts",
749
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
749
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
750
750
  "since": "2025-01-01"
751
751
  },
752
752
  "route-group:system-reviews": {
@@ -754,7 +754,7 @@
754
754
  "type": "route-group",
755
755
  "domain": "monitoring",
756
756
  "sourcePath": "src/server/routes.ts",
757
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
757
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
758
758
  "since": "2025-01-01"
759
759
  },
760
760
  "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
770
770
  "type": "route-group",
771
771
  "domain": "security",
772
772
  "sourcePath": "src/server/routes.ts",
773
- "contentHash": "d6ea430621b143038373d889731df80acdec3e031cf1ecf3591c78d0e1165ed9",
773
+ "contentHash": "5ce8dc440214fdabf5004b9efcfe1bf5a5fc083fb5148879c7b613c51d4663a3",
774
774
  "since": "2025-01-01"
775
775
  },
776
776
  "cli:init": {
package/upgrades/1.3.293.md ADDED
@@ -0,0 +1,26 @@
1
+ # Upgrade Guide — vNEXT
2
+
3
+ <!-- assembled-by: assemble-next-md -->
4
+ <!-- bump: patch -->
5
+
6
+ ## What Changed
7
+
8
+ Fixed the dashboard headless session-spawn route so it accepts `framework: gemini-cli` instead of rejecting it before the request reaches `SessionManager`. The route framework allowlist now matches the framework set that the headless launcher already supports, and Gemini-specific model validation accepts the known Gemini CLI model ids alongside the generic model tiers.
9
+
10
+ This is deliberately route-scoped: it does not change how Gemini sessions launch, how models are resolved inside the headless launcher, or how Claude/Codex framework validation behaves.
11
+
12
+ ## What to Tell Your User
13
+
14
+ - **Dashboard Gemini launches**: "When I start a Gemini-backed headless session from the dashboard, the request now reaches the Gemini launcher instead of being rejected by the dashboard first."
15
+
16
+ ## Summary of New Capabilities
17
+
18
+ | Capability | How to Use |
19
+ |-----------|-----------|
20
+ | Dashboard headless Gemini session spawn | Use the existing dashboard session-spawn flow with the Gemini framework selected. |
21
+
22
+ ## Evidence
23
+
24
+ Observed before: the dashboard headless spawn API rejected Gemini requests with `"framework" must be one of: claude-code, codex-cli`, even though `SessionManager` and the headless launcher already supported Gemini.
25
+
26
+ Observed after: focused route tests verify that a Gemini framework request returns success and passes `framework: gemini-cli` plus `gemini-2.5-flash` through to the session manager. Focused validation tests also verify that invalid framework errors now list Gemini and that Gemini model ids are accepted for Gemini requests.
package/upgrades/side-effects/dashboard-headless-gemini-framework.md ADDED
@@ -0,0 +1,90 @@
1
+ # Side-Effects Review — dashboard headless Gemini framework parity
2
+
3
+ **Version / slug:** `dashboard-headless-gemini-framework`
4
+ **Date:** `2026-06-05`
5
+ **Author:** `instar-codey`
6
+ **Second-pass reviewer:** `self-review required by session-spawn lifecycle surface; concur`
7
+
8
+ ## Summary of the change
9
+
10
+ The dashboard headless session-spawn route had a stale framework allowlist that accepted Claude and Codex but rejected Gemini before `SessionManager.spawnSession` could handle the request. This change updates that route-level validation to accept the same three shipped frameworks (`claude-code`, `codex-cli`, `gemini-cli`) and makes route model validation framework-aware for Gemini by accepting the known Gemini CLI model ids exported by the Gemini adapter. Regression tests cover successful Gemini pass-through, invalid-framework error text, and Gemini model acceptance.
11
+
12
+ ## Decision-point inventory
13
+
14
+ - `POST /sessions/spawn` framework validation — **modify** — widens the accepted framework values to include Gemini, matching the already-supported headless launcher surface.
15
+ - `POST /sessions/spawn` model validation — **modify** — routes Gemini requests to Gemini's known-model list instead of falling through to Claude model names.
16
+ - Session launching authority — **pass-through** — unchanged; `SessionManager` and `buildHeadlessLaunch` still own actual launch behavior.
17
+
18
+ ---
19
+
20
+ ## 1. Over-block
21
+
22
+ No new over-block identified. The only rejection behavior changed is that previously-rejected Gemini requests now pass route validation. Claude and Codex allowed model sets are unchanged. Invalid framework values are still rejected, but the error message now includes Gemini in the valid set.
23
+
24
+ ---
25
+
26
+ ## 2. Under-block
27
+
28
+ The route still rejects unknown raw Gemini model ids because it only accepts generic tiers and the adapter's current known Gemini model list. That is intentional for this route-level validator: arbitrary model-id passthrough belongs either in the Gemini adapter policy or in an explicit model-discovery change, not in a dashboard route hotfix. A Gemini request with no model remains allowed and continues to use downstream defaulting.
29
+
30
+ ---
31
+
32
+ ## 3. Level-of-abstraction fit
33
+
34
+ This fix is at the correct layer because the bug was route-local validation rejecting a value that the lower-level session launcher already supports. The route should validate the request envelope and then pass supported framework values through; it should not invent a narrower framework universe than `SessionManager`. Reusing `KNOWN_GEMINI_MODELS` avoids duplicating Gemini model names in a second place.
35
+
36
+ ---
37
+
38
+ ## 4. Signal vs authority compliance
39
+
40
+ **Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
41
+
42
+ - [ ] No — this change produces a signal consumed by an existing smart gate.
43
+ - [ ] No — this change has no block/allow surface.
44
+ - [x] Yes — but this is deterministic schema validation at an HTTP boundary, not a brittle detector making contextual behavioral decisions.
45
+ - [ ] Yes, with brittle logic — STOP. Reshape the design.
46
+
47
+ The route has blocking authority over malformed requests, but the logic is a deterministic allowlist of shipped framework identifiers and shipped adapter model ids. It does not interpret conversation content, infer intent, or suppress agent behavior. The authority is appropriate for request schema validation.
48
+
49
+ ---
50
+
51
+ ## 5. Interactions
52
+
53
+ - **Shadowing:** this route validation runs before `SessionManager.spawnSession`. The old version shadowed Gemini's existing launcher support by rejecting the request too early; the new version removes that shadow for Gemini.
54
+ - **Double-fire:** no double action. Successful requests still call exactly one session-manager spawn path.
55
+ - **Races:** no shared mutable state added. The Gemini model list is a static exported constant.
56
+ - **Feedback loops:** none. The change does not alter dashboard refresh, prompt gates, degradation reporters, or launcher retry behavior.
57
+
58
+ ---
59
+
60
+ ## 6. External surfaces
61
+
62
+ Visible external surface: dashboard/headless API callers can now create Gemini sessions through the existing spawn route. Invalid-framework error text changes to include Gemini as a valid value. No persistent state format, config, migration, Telegram behavior, Cloudflare tunnel behavior, or session cleanup policy changes.
63
+
64
+ ---
65
+
66
+ ## 7. Rollback cost
67
+
68
+ Rollback is a pure code revert and patch release. No data migration or agent state repair is required. During rollback, dashboard Gemini headless spawns would return to the known-broken route rejection while lower-level Gemini session support would remain intact.
69
+
70
+ ---
71
+
72
+ ## Conclusion
73
+
74
+ This is a narrow route-parity fix: the dashboard route now accepts the Gemini framework and known Gemini models already supported by the headless launcher. The main risk was accidentally widening model validation too far or changing Claude/Codex validation; tests bind both the successful Gemini path and invalid-framework behavior, and the implementation keeps Claude/Codex allowlists unchanged.
75
+
76
+ ---
77
+
78
+ ## Second-pass review
79
+
80
+ **Reviewer:** instar-codey self-review
81
+ **Independent read of the artifact:** concur
82
+
83
+ The lifecycle surface is a session-spawn route, so I re-read the change as a reviewer after writing the artifact. The fix removes a route-local false rejection and does not add a new launcher path, lifecycle transition, or cleanup behavior. The scoped tests cover the route boundary where the regression lived.
84
+
85
+ ---
86
+
87
+ ## Evidence pointers
88
+
89
+ - Focused unit gate: `npx vitest run tests/unit/server.test.ts tests/unit/route-validation-edge.test.ts` — 46 tests passed.
90
+ - Original observed failure from verification: dashboard/headless spawn rejected Gemini with `"framework" must be one of: claude-code, codex-cli`.