instar 1.3.30 → 1.3.32

package/dist/core/PostUpdateMigrator.js

@@ -24,6 +24,7 @@ import os from 'node:os';
 import { execFileSync } from 'node:child_process';
 import crypto from 'node:crypto';
 import { SafeGitExecutor } from './SafeGitExecutor.js';
+import { ensureInstarBashPreToolUseHooks } from './instarSettingsHooks.js';
 import { resolveAgentHome as resolveAgentHomeForWorktree } from './InstarWorktreeManager.js';
 import { fileURLToPath } from 'node:url';
 import { TreeGenerator } from '../knowledge/TreeGenerator.js';
@@ -1263,9 +1264,11 @@ export class PostUpdateMigrator {
             }
         };
         // Marker = the latest capability signature (bumped each time the bundled hook/
-        // setup gains a feature, so prior installs upgrade): now the independent
-        // completion evaluator (mirrors /goal). Absent from multi-session-only installs.
-        upgrade('.claude/skills/autonomous/hooks/autonomous-stop-hook.sh', 'Native /goal delegation', 'Autonomous Mode Stop Hook', 'skills/autonomous/hooks/autonomous-stop-hook.sh (topic-keyed + multi-session + completion evaluator + native /goal)');
+        // setup gains a feature, so prior installs upgrade): now notify-on-stop —
+        // terminal exits (completion/duration/emergency) send a Telegram explaining
+        // why the run stopped (2026-05-27 silent-stalls postmortem, Task 2). The
+        // `notify_terminal_stop` function name is absent from all prior installs.
+        upgrade('.claude/skills/autonomous/hooks/autonomous-stop-hook.sh', 'notify_terminal_stop', 'Autonomous Mode Stop Hook', 'skills/autonomous/hooks/autonomous-stop-hook.sh (topic-keyed + multi-session + completion evaluator + native /goal + notify-on-stop)');
         upgrade('.claude/skills/autonomous/scripts/setup-autonomous.sh', 'native-goal/set', 'autonomous-state.local.md', 'skills/autonomous/scripts/setup-autonomous.sh (per-topic + completion-condition + native /goal)');
     }
     /**
@@ -3576,6 +3579,23 @@ Create worktrees for collaborator repos with \`instar worktree create <branch>\`
                 result.upgraded.push('.claude/settings.json: migrated compaction hook from Notification to SessionStart');
             }
         }
+        // Ensure the canonical instar Bash PreToolUse hooks are present (dark-guardrail
+        // migration gap, 2026-05-27). init.ts wires these for NEW agents; existing
+        // agents previously only got slopcheck + the MCP gate ensured here, so
+        // deferral-detector (the false-blocker pre-filter), grounding-before-messaging,
+        // external-communication-guard, and post-action-reflection shipped to disk but
+        // were never switched on. Both paths now share INSTAR_BASH_PRETOOLUSE_HOOKS so
+        // they cannot drift again. Idempotent: appends only missing hooks, never
+        // reorders/removes; safe to re-run. (slopcheck stays in its own block below.)
+        {
+            const added = ensureInstarBashPreToolUseHooks(preToolUse);
+            if (added.length > 0) {
+                patched = true;
+                for (const fname of added) {
+                    result.upgraded.push(`.claude/settings.json: added PreToolUse ${fname} hook (dark-guardrail wiring)`);
+                }
+            }
+        }
         // Ensure PreToolUse Bash slopcheck-guard hook exists (cherry-pick 2026-05-23).
         // Existing agents only get new Bash-matcher hooks through an explicit ensure
         // block here — there is no wholesale settings-template refresh on migration.