instar 1.3.311 → 1.3.313

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (48) hide show
  1. package/dist/commands/server.d.ts.map +1 -1
  2. package/dist/commands/server.js +8 -5
  3. package/dist/commands/server.js.map +1 -1
  4. package/dist/core/AgentWorktreeDetector.d.ts +27 -3
  5. package/dist/core/AgentWorktreeDetector.d.ts.map +1 -1
  6. package/dist/core/AgentWorktreeDetector.js +77 -19
  7. package/dist/core/AgentWorktreeDetector.js.map +1 -1
  8. package/dist/core/InstarWorktreeManager.d.ts +7 -0
  9. package/dist/core/InstarWorktreeManager.d.ts.map +1 -1
  10. package/dist/core/InstarWorktreeManager.js +47 -1
  11. package/dist/core/InstarWorktreeManager.js.map +1 -1
  12. package/dist/core/PostUpdateMigrator.d.ts +10 -0
  13. package/dist/core/PostUpdateMigrator.d.ts.map +1 -1
  14. package/dist/core/PostUpdateMigrator.js +57 -0
  15. package/dist/core/PostUpdateMigrator.js.map +1 -1
  16. package/dist/messaging/AttentionTopicGuard.d.ts +14 -0
  17. package/dist/messaging/AttentionTopicGuard.d.ts.map +1 -1
  18. package/dist/messaging/AttentionTopicGuard.js +21 -0
  19. package/dist/messaging/AttentionTopicGuard.js.map +1 -1
  20. package/dist/messaging/TelegramAdapter.d.ts +40 -3
  21. package/dist/messaging/TelegramAdapter.d.ts.map +1 -1
  22. package/dist/messaging/TelegramAdapter.js +61 -11
  23. package/dist/messaging/TelegramAdapter.js.map +1 -1
  24. package/dist/scheduler/JobScheduler.d.ts.map +1 -1
  25. package/dist/scheduler/JobScheduler.js +3 -3
  26. package/dist/scheduler/JobScheduler.js.map +1 -1
  27. package/dist/server/routes.js +2 -2
  28. package/dist/server/routes.js.map +1 -1
  29. package/dist/threadline/CollaborationSurfacer.d.ts +4 -1
  30. package/dist/threadline/CollaborationSurfacer.d.ts.map +1 -1
  31. package/dist/threadline/CollaborationSurfacer.js +1 -1
  32. package/dist/threadline/CollaborationSurfacer.js.map +1 -1
  33. package/dist/threadline/TelegramBridge.d.ts +4 -1
  34. package/dist/threadline/TelegramBridge.d.ts.map +1 -1
  35. package/dist/threadline/TelegramBridge.js +1 -1
  36. package/dist/threadline/TelegramBridge.js.map +1 -1
  37. package/dist/threadline/hubCommands.d.ts +4 -1
  38. package/dist/threadline/hubCommands.d.ts.map +1 -1
  39. package/dist/threadline/hubCommands.js +3 -3
  40. package/dist/threadline/hubCommands.js.map +1 -1
  41. package/package.json +2 -2
  42. package/scripts/instar-dev-precommit.js +89 -1
  43. package/scripts/lint-no-direct-destructive.js +4 -0
  44. package/scripts/lint-no-unfunneled-topic-creation.js +129 -0
  45. package/src/data/builtin-manifest.json +64 -64
  46. package/upgrades/1.3.312.md +31 -0
  47. package/upgrades/1.3.313.md +21 -0
  48. package/upgrades/side-effects/bounded-notification-surface.md +34 -0
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "$schema": "./builtin-manifest.schema.json",
3
3
  "schemaVersion": 1,
4
- "generatedAt": "2026-06-05T17:46:09.238Z",
5
- "instarVersion": "1.3.311",
4
+ "generatedAt": "2026-06-05T18:12:41.393Z",
5
+ "instarVersion": "1.3.313",
6
6
  "entryCount": 199,
7
7
  "entries": {
8
8
  "hook:session-start": {
@@ -11,7 +11,7 @@
11
11
  "domain": "identity",
12
12
  "sourcePath": "src/core/PostUpdateMigrator.ts",
13
13
  "installedPath": ".instar/hooks/instar/session-start.sh",
14
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
14
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
15
15
  "since": "2025-01-01"
16
16
  },
17
17
  "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
20
20
  "domain": "safety",
21
21
  "sourcePath": "src/core/PostUpdateMigrator.ts",
22
22
  "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
23
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
23
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
24
24
  "since": "2025-01-01"
25
25
  },
26
26
  "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
29
29
  "domain": "safety",
30
30
  "sourcePath": "src/core/PostUpdateMigrator.ts",
31
31
  "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
32
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
32
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
33
33
  "since": "2025-01-01"
34
34
  },
35
35
  "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
38
38
  "domain": "identity",
39
39
  "sourcePath": "src/core/PostUpdateMigrator.ts",
40
40
  "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
41
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
41
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
42
42
  "since": "2025-01-01"
43
43
  },
44
44
  "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
47
47
  "domain": "safety",
48
48
  "sourcePath": "src/core/PostUpdateMigrator.ts",
49
49
  "installedPath": ".instar/hooks/instar/external-operation-gate.js",
50
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
50
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
51
51
  "since": "2025-01-01"
52
52
  },
53
53
  "hook:deferral-detector": {
@@ -56,7 +56,7 @@
56
56
  "domain": "safety",
57
57
  "sourcePath": "src/core/PostUpdateMigrator.ts",
58
58
  "installedPath": ".instar/hooks/instar/deferral-detector.js",
59
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
59
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
60
60
  "since": "2025-01-01"
61
61
  },
62
62
  "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
65
65
  "domain": "coherence",
66
66
  "sourcePath": "src/core/PostUpdateMigrator.ts",
67
67
  "installedPath": ".instar/hooks/instar/self-stop-guard.js",
68
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
68
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
69
69
  "since": "2025-01-01"
70
70
  },
71
71
  "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
74
74
  "domain": "evolution",
75
75
  "sourcePath": "src/core/PostUpdateMigrator.ts",
76
76
  "installedPath": ".instar/hooks/instar/post-action-reflection.js",
77
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
77
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
78
78
  "since": "2025-01-01"
79
79
  },
80
80
  "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
83
83
  "domain": "safety",
84
84
  "sourcePath": "src/core/PostUpdateMigrator.ts",
85
85
  "installedPath": ".instar/hooks/instar/external-communication-guard.js",
86
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
86
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
87
87
  "since": "2025-01-01"
88
88
  },
89
89
  "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
92
92
  "domain": "coherence",
93
93
  "sourcePath": "src/core/PostUpdateMigrator.ts",
94
94
  "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
95
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
95
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
96
96
  "since": "2025-01-01"
97
97
  },
98
98
  "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
101
101
  "domain": "coherence",
102
102
  "sourcePath": "src/core/PostUpdateMigrator.ts",
103
103
  "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
104
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
104
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
105
105
  "since": "2025-01-01"
106
106
  },
107
107
  "hook:free-text-guard": {
@@ -110,7 +110,7 @@
110
110
  "domain": "safety",
111
111
  "sourcePath": "src/core/PostUpdateMigrator.ts",
112
112
  "installedPath": ".instar/hooks/instar/free-text-guard.sh",
113
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
113
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
114
114
  "since": "2025-01-01"
115
115
  },
116
116
  "hook:claim-intercept": {
@@ -119,7 +119,7 @@
119
119
  "domain": "coherence",
120
120
  "sourcePath": "src/core/PostUpdateMigrator.ts",
121
121
  "installedPath": ".instar/hooks/instar/claim-intercept.js",
122
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
122
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
123
123
  "since": "2025-01-01"
124
124
  },
125
125
  "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
128
128
  "domain": "coherence",
129
129
  "sourcePath": "src/core/PostUpdateMigrator.ts",
130
130
  "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
131
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
131
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
132
132
  "since": "2025-01-01"
133
133
  },
134
134
  "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
137
137
  "domain": "safety",
138
138
  "sourcePath": "src/core/PostUpdateMigrator.ts",
139
139
  "installedPath": ".instar/hooks/instar/stop-gate-router.js",
140
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
140
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
141
141
  "since": "2025-01-01"
142
142
  },
143
143
  "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
146
146
  "domain": "safety",
147
147
  "sourcePath": "src/core/PostUpdateMigrator.ts",
148
148
  "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
149
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
149
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
150
150
  "since": "2025-01-01"
151
151
  },
152
152
  "job:health-check": {
@@ -418,7 +418,7 @@
418
418
  "type": "route-group",
419
419
  "domain": "monitoring",
420
420
  "sourcePath": "src/server/routes.ts",
421
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
421
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
422
422
  "since": "2025-01-01"
423
423
  },
424
424
  "route-group:agents": {
@@ -426,7 +426,7 @@
426
426
  "type": "route-group",
427
427
  "domain": "sessions",
428
428
  "sourcePath": "src/server/routes.ts",
429
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
429
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
430
430
  "since": "2025-01-01"
431
431
  },
432
432
  "route-group:backups": {
@@ -434,7 +434,7 @@
434
434
  "type": "route-group",
435
435
  "domain": "operations",
436
436
  "sourcePath": "src/server/routes.ts",
437
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
437
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
438
438
  "since": "2025-01-01"
439
439
  },
440
440
  "route-group:git": {
@@ -442,7 +442,7 @@
442
442
  "type": "route-group",
443
443
  "domain": "coordination",
444
444
  "sourcePath": "src/server/routes.ts",
445
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
445
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
446
446
  "since": "2025-01-01"
447
447
  },
448
448
  "route-group:memory": {
@@ -450,7 +450,7 @@
450
450
  "type": "route-group",
451
451
  "domain": "memory",
452
452
  "sourcePath": "src/server/routes.ts",
453
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
453
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
454
454
  "since": "2025-01-01"
455
455
  },
456
456
  "route-group:semantic": {
@@ -458,7 +458,7 @@
458
458
  "type": "route-group",
459
459
  "domain": "memory",
460
460
  "sourcePath": "src/server/routes.ts",
461
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
461
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
462
462
  "since": "2025-01-01"
463
463
  },
464
464
  "route-group:status": {
@@ -466,7 +466,7 @@
466
466
  "type": "route-group",
467
467
  "domain": "monitoring",
468
468
  "sourcePath": "src/server/routes.ts",
469
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
469
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
470
470
  "since": "2025-01-01"
471
471
  },
472
472
  "route-group:capabilities": {
@@ -474,7 +474,7 @@
474
474
  "type": "route-group",
475
475
  "domain": "mapping",
476
476
  "sourcePath": "src/server/routes.ts",
477
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
477
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
478
478
  "since": "2025-01-01"
479
479
  },
480
480
  "route-group:project-map": {
@@ -482,7 +482,7 @@
482
482
  "type": "route-group",
483
483
  "domain": "mapping",
484
484
  "sourcePath": "src/server/routes.ts",
485
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
485
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
486
486
  "since": "2025-01-01"
487
487
  },
488
488
  "route-group:coherence": {
@@ -490,7 +490,7 @@
490
490
  "type": "route-group",
491
491
  "domain": "coherence",
492
492
  "sourcePath": "src/server/routes.ts",
493
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
493
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
494
494
  "since": "2025-01-01"
495
495
  },
496
496
  "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
498
498
  "type": "route-group",
499
499
  "domain": "sessions",
500
500
  "sourcePath": "src/server/routes.ts",
501
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
501
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
502
502
  "since": "2025-01-01"
503
503
  },
504
504
  "route-group:context": {
@@ -506,7 +506,7 @@
506
506
  "type": "route-group",
507
507
  "domain": "context",
508
508
  "sourcePath": "src/server/routes.ts",
509
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
509
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
510
510
  "since": "2025-01-01"
511
511
  },
512
512
  "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
514
514
  "type": "route-group",
515
515
  "domain": "coherence",
516
516
  "sourcePath": "src/server/routes.ts",
517
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
517
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
518
518
  "since": "2025-01-01"
519
519
  },
520
520
  "route-group:canonical-state": {
@@ -522,7 +522,7 @@
522
522
  "type": "route-group",
523
523
  "domain": "state",
524
524
  "sourcePath": "src/server/routes.ts",
525
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
525
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
526
526
  "since": "2025-01-01"
527
527
  },
528
528
  "route-group:ci": {
@@ -530,7 +530,7 @@
530
530
  "type": "route-group",
531
531
  "domain": "monitoring",
532
532
  "sourcePath": "src/server/routes.ts",
533
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
533
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
534
534
  "since": "2025-01-01"
535
535
  },
536
536
  "route-group:sessions": {
@@ -538,7 +538,7 @@
538
538
  "type": "route-group",
539
539
  "domain": "sessions",
540
540
  "sourcePath": "src/server/routes.ts",
541
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
541
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
542
542
  "since": "2025-01-01"
543
543
  },
544
544
  "route-group:jobs": {
@@ -546,7 +546,7 @@
546
546
  "type": "route-group",
547
547
  "domain": "scheduling",
548
548
  "sourcePath": "src/server/routes.ts",
549
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
549
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
550
550
  "since": "2025-01-01"
551
551
  },
552
552
  "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
554
554
  "type": "route-group",
555
555
  "domain": "scheduling",
556
556
  "sourcePath": "src/server/routes.ts",
557
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
557
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
558
558
  "since": "2025-01-01"
559
559
  },
560
560
  "route-group:telegram": {
@@ -562,7 +562,7 @@
562
562
  "type": "route-group",
563
563
  "domain": "communication",
564
564
  "sourcePath": "src/server/routes.ts",
565
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
565
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
566
566
  "since": "2025-01-01"
567
567
  },
568
568
  "route-group:attention": {
@@ -570,7 +570,7 @@
570
570
  "type": "route-group",
571
571
  "domain": "communication",
572
572
  "sourcePath": "src/server/routes.ts",
573
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
573
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
574
574
  "since": "2025-01-01"
575
575
  },
576
576
  "route-group:relationships": {
@@ -578,7 +578,7 @@
578
578
  "type": "route-group",
579
579
  "domain": "relationships",
580
580
  "sourcePath": "src/server/routes.ts",
581
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
581
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
582
582
  "since": "2025-01-01"
583
583
  },
584
584
  "route-group:feedback": {
@@ -586,7 +586,7 @@
586
586
  "type": "route-group",
587
587
  "domain": "feedback",
588
588
  "sourcePath": "src/server/routes.ts",
589
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
589
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
590
590
  "since": "2025-01-01"
591
591
  },
592
592
  "route-group:updates": {
@@ -594,7 +594,7 @@
594
594
  "type": "route-group",
595
595
  "domain": "updates",
596
596
  "sourcePath": "src/server/routes.ts",
597
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
597
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
598
598
  "since": "2025-01-01"
599
599
  },
600
600
  "route-group:dispatches": {
@@ -602,7 +602,7 @@
602
602
  "type": "route-group",
603
603
  "domain": "dispatches",
604
604
  "sourcePath": "src/server/routes.ts",
605
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
605
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
606
606
  "since": "2025-01-01"
607
607
  },
608
608
  "route-group:quota": {
@@ -610,7 +610,7 @@
610
610
  "type": "route-group",
611
611
  "domain": "monitoring",
612
612
  "sourcePath": "src/server/routes.ts",
613
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
613
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
614
614
  "since": "2025-01-01"
615
615
  },
616
616
  "route-group:publishing": {
@@ -618,7 +618,7 @@
618
618
  "type": "route-group",
619
619
  "domain": "publishing",
620
620
  "sourcePath": "src/server/routes.ts",
621
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
621
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
622
622
  "since": "2025-01-01"
623
623
  },
624
624
  "route-group:private-views": {
@@ -626,7 +626,7 @@
626
626
  "type": "route-group",
627
627
  "domain": "publishing",
628
628
  "sourcePath": "src/server/routes.ts",
629
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
629
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
630
630
  "since": "2025-01-01"
631
631
  },
632
632
  "route-group:tunnel": {
@@ -634,7 +634,7 @@
634
634
  "type": "route-group",
635
635
  "domain": "networking",
636
636
  "sourcePath": "src/server/routes.ts",
637
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
637
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
638
638
  "since": "2025-01-01"
639
639
  },
640
640
  "route-group:events": {
@@ -642,7 +642,7 @@
642
642
  "type": "route-group",
643
643
  "domain": "networking",
644
644
  "sourcePath": "src/server/routes.ts",
645
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
645
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
646
646
  "since": "2025-01-01"
647
647
  },
648
648
  "route-group:evolution": {
@@ -650,7 +650,7 @@
650
650
  "type": "route-group",
651
651
  "domain": "evolution",
652
652
  "sourcePath": "src/server/routes.ts",
653
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
653
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
654
654
  "since": "2025-01-01"
655
655
  },
656
656
  "route-group:watchdog": {
@@ -658,7 +658,7 @@
658
658
  "type": "route-group",
659
659
  "domain": "monitoring",
660
660
  "sourcePath": "src/server/routes.ts",
661
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
661
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
662
662
  "since": "2025-01-01"
663
663
  },
664
664
  "route-group:topic-memory": {
@@ -666,7 +666,7 @@
666
666
  "type": "route-group",
667
667
  "domain": "memory",
668
668
  "sourcePath": "src/server/routes.ts",
669
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
669
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
670
670
  "since": "2025-01-01"
671
671
  },
672
672
  "route-group:state-sync": {
@@ -674,7 +674,7 @@
674
674
  "type": "route-group",
675
675
  "domain": "coordination",
676
676
  "sourcePath": "src/server/routes.ts",
677
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
677
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
678
678
  "since": "2025-01-01"
679
679
  },
680
680
  "route-group:intent": {
@@ -682,7 +682,7 @@
682
682
  "type": "route-group",
683
683
  "domain": "intent",
684
684
  "sourcePath": "src/server/routes.ts",
685
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
685
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
686
686
  "since": "2025-01-01"
687
687
  },
688
688
  "route-group:triage": {
@@ -690,7 +690,7 @@
690
690
  "type": "route-group",
691
691
  "domain": "safety",
692
692
  "sourcePath": "src/server/routes.ts",
693
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
693
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
694
694
  "since": "2025-01-01"
695
695
  },
696
696
  "route-group:operations": {
@@ -698,7 +698,7 @@
698
698
  "type": "route-group",
699
699
  "domain": "safety",
700
700
  "sourcePath": "src/server/routes.ts",
701
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
701
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
702
702
  "since": "2025-01-01"
703
703
  },
704
704
  "route-group:sentinel": {
@@ -706,7 +706,7 @@
706
706
  "type": "route-group",
707
707
  "domain": "safety",
708
708
  "sourcePath": "src/server/routes.ts",
709
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
709
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
710
710
  "since": "2025-01-01"
711
711
  },
712
712
  "route-group:trust": {
@@ -714,7 +714,7 @@
714
714
  "type": "route-group",
715
715
  "domain": "safety",
716
716
  "sourcePath": "src/server/routes.ts",
717
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
717
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
718
718
  "since": "2025-01-01"
719
719
  },
720
720
  "route-group:monitoring": {
@@ -722,7 +722,7 @@
722
722
  "type": "route-group",
723
723
  "domain": "monitoring",
724
724
  "sourcePath": "src/server/routes.ts",
725
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
725
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
726
726
  "since": "2025-01-01"
727
727
  },
728
728
  "route-group:commitments": {
@@ -730,7 +730,7 @@
730
730
  "type": "route-group",
731
731
  "domain": "commitments",
732
732
  "sourcePath": "src/server/routes.ts",
733
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
733
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
734
734
  "since": "2025-01-01"
735
735
  },
736
736
  "route-group:episodes": {
@@ -738,7 +738,7 @@
738
738
  "type": "route-group",
739
739
  "domain": "memory",
740
740
  "sourcePath": "src/server/routes.ts",
741
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
741
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
742
742
  "since": "2025-01-01"
743
743
  },
744
744
  "route-group:messages": {
@@ -746,7 +746,7 @@
746
746
  "type": "route-group",
747
747
  "domain": "coordination",
748
748
  "sourcePath": "src/server/routes.ts",
749
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
749
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
750
750
  "since": "2025-01-01"
751
751
  },
752
752
  "route-group:system-reviews": {
@@ -754,7 +754,7 @@
754
754
  "type": "route-group",
755
755
  "domain": "monitoring",
756
756
  "sourcePath": "src/server/routes.ts",
757
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
757
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
758
758
  "since": "2025-01-01"
759
759
  },
760
760
  "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
770
770
  "type": "route-group",
771
771
  "domain": "security",
772
772
  "sourcePath": "src/server/routes.ts",
773
- "contentHash": "415b7ce241bc98d5cf664fb32bce997307da97f389d129faf19ba9c2e1b39acd",
773
+ "contentHash": "26dde9a216b2facadce61a94d60df46175292843555fdf095cf7dd6075420a82",
774
774
  "since": "2025-01-01"
775
775
  },
776
776
  "cli:init": {
@@ -1538,7 +1538,7 @@
1538
1538
  "type": "subsystem",
1539
1539
  "domain": "updates",
1540
1540
  "sourcePath": "src/core/PostUpdateMigrator.ts",
1541
- "contentHash": "759dec3f0a606190a01e8d0f515699f3d86e79a74a84f2fe0d2c3a9641b57b53",
1541
+ "contentHash": "018f4029d7191486343f7109599b9e9f998fb9d45097b7845e020cd1d3be3342",
1542
1542
  "since": "2025-01-01"
1543
1543
  },
1544
1544
  "subsystem:scheduler": {
@@ -1546,7 +1546,7 @@
1546
1546
  "type": "subsystem",
1547
1547
  "domain": "scheduling",
1548
1548
  "sourcePath": "src/scheduler/JobScheduler.ts",
1549
- "contentHash": "ac3c79284e9f81e58072f994584efdde26a4d473a41cfaeb23d3cfd2282f1d82",
1549
+ "contentHash": "8928d7c0d671f0b68e4b1616cc34fe9f377fe42d59d17c1da6285581ef2de7b3",
1550
1550
  "since": "2025-01-01"
1551
1551
  },
1552
1552
  "subsystem:project-mapper": {
@@ -0,0 +1,31 @@
1
+ # Upgrade Guide — vNEXT
2
+
3
+ <!-- assembled-by: assemble-next-md -->
4
+ <!-- bump: patch -->
5
+
6
+ ## What Changed
7
+
8
+ `createForumTopic`/`findOrCreateForumTopic` gained an optional `opts?: { origin, label }` parameter (back-compatible; omitted = budgeted `auto`); known callsites declare origins (`user`: hub-commands "open this"/"tie", `/new`, dashboard create-topic/session routes; `system`: Lifeline, Dashboard, Updates, Attention, flood-notice, agent-health lane; labeled `auto`: attention items, job topics, threadline bridge, collaboration surfacer). CLAUDE.md template gains a "Bounded Notification Surface" section via `migrateClaudeMd` (content-sniffed, parity-tracked). Detector resolver gained a `cwd` test seam (its tests silently depended on the running machine's checkout at `process.cwd()`).
9
+
10
+ resolveAgentHome (the worktree-create agent-home guard) gains one narrow acceptance path: a home outside ~/.instar/agents/ is accepted iff the agent registry's recorded entry path (realpath-resolved) equals it and the entry name passes the existing charset clamp. The agent name comes from the registry entry, never the directory. Every prior refusal is preserved verbatim; planted files inside the candidate remain non-evidence.
11
+
12
+ ## What to Tell Your User
13
+
14
+ Your agent can no longer spam your Telegram group with a wall of topics, no matter what goes wrong inside it. After the third topic-flood incident (a boot-time checker misread shared state and raised 110 false alarms at once), the limit now lives inside the one function that creates topics — every automatic topic creation is budgeted by default, floods collapse into one summary notice, and a CI test fails any future build that could flood. Genuine emergencies still always get their own topic.
15
+
16
+ Agents set up before the worktree convention (their home under ~/Documents/Projects/ or similar) can now use the standard worktree-create command like every other agent, instead of hand-building checkouts — which was the main source of their build failures.
17
+
18
+ ## Summary of New Capabilities
19
+
20
+ - `TelegramAdapter.createForumTopic` now enforces a last-resort `topicCreationBudget` (per-label 8 + global 12 per 10-min window, config-tunable via `messaging[].config.topicCreationBudget`) on every `origin: 'auto'` creation — and `'auto'` is the DEFAULT, so a future caller that never heard of the budget is still bounded. `'user'` (human-initiated) and `'system'` (fixed create-once infra topics) are exempt. Overflow throws `TopicFloodBudgetError` — the same failure shape as a Telegram 429, which every caller already survives.
21
+ - `AgentWorktreeDetector` enumerates safe roots from the DISK (`~/.instar/agents/*/.worktrees`) instead of the racy shared agent registry (the flood's root cause: a lost-update window + a silent parse-failure→empty-list fallback made the agent's own worktrees look misplaced), and aggregates N findings into ONE summary attention item with a stable feature-scoped `sourceContext` (the per-item unique paths were what dodged the 2026-05-28 per-source budget).
22
+ - `tests/integration/notification-flood-burst-invariant.test.ts`: the requirement-as-test — 1,000-item bursts through the real pipeline with shipped-default budgets must create ≤ budget topics, covering both the unique-source and unique-label dodges; proves no item is ever dropped and HIGH/URGENT always get their own topic even mid-flood.
23
+ - `scripts/lint-no-unfunneled-topic-creation.js` (in `pnpm lint`): no raw `createForumTopic` Bot-API call outside the budgeted funnel (SafeGitExecutor-style closed allowlist).
24
+ - `migrateWorktreeMisplacedFloodItems`: purges the stale per-path `worktree-misplaced:*` false-positive items from every flooded agent's attention store on update (idempotent, atomic; the new `worktree-misplaced-summary:*` format is kept).
25
+ - Constitution: new Building standard **"Bounded Notification Surface"** + catalog entry **P17** (any user-facing notification surface needs a chokepoint budget + a burst test before it ships).
26
+
27
+ - Legacy-home agents (registry-path-verified) get first-class worktree creation at `<legacyHome>/.worktrees/` — inside their own granted territory.
28
+
29
+ ## Evidence
30
+
31
+ Found live in apprenticeship cycle 10 (2026-06-05): Codey's first command on a new build assignment — `instar worktree create codey/unit-suite-hermetic --base JKHeadley/main` — was refused with "is not under the instar agents root" despite his home being registered with a live heartbeat at exactly that path. 6 new unit tests cover both sides (env-var route, walk-up route, symlinked registration, planted-files-refused, hostile-name-refused, dangling-path-refused); the original hostile-AGENT.md refusal test passes unchanged. 49/49 green in the file.
@@ -0,0 +1,21 @@
1
+ # Upgrade Guide — vNEXT
2
+
3
+ <!-- assembled-by: assemble-next-md -->
4
+ <!-- bump: patch -->
5
+
6
+ ## What Changed
7
+
8
+ The instar-dev pre-commit gate accepts an optional `causalAutopsy` field in the trace JSON — { origin: prior-pr | environment-shift | new-code | latent | unknown, relatedPrs, notes } — validates it when present (malformed blocks; absence never does), copies it verbatim into the per-commit decision-audit entry, and prints an advisory nudge on fix-class commits that omit it.
9
+
10
+ ## What to Tell Your User
11
+
12
+ Every fix can now carry a durable record of what actually caused the issue it fixes. Over time that record shows whether the system is genuinely converging toward stability or just trading one bug for another — analysis that used to require digging through old conversations.
13
+
14
+ ## Summary of New Capabilities
15
+
16
+ - Causal autopsy per fix, riding the existing decision-audit files — meta-analysis over causes becomes a one-line query.
17
+ - Advisory-first rollout: fix-class commits without an autopsy get a loud nudge, never a block.
18
+
19
+ ## Evidence
20
+
21
+ Directive from Justin (2026-06-05): with the Tier-1 lane shipping fixes without an independent reviewer, causal autopsies of every issue are the compensating control for convergence. Day-one retro-autopsy of 6 issues found 5 were prior-PR assumptions invalidated by the release-cadence shift — a pattern that currently lives only in session memory. 5 new gate tests pin the contract (valid recorded verbatim / malformed blocks with attempt recorded / prior-pr requires linked PRs / absent never blocks + advisory on fix signal / no noise on non-fix commits); 9/9 in the gate audit suite.
@@ -0,0 +1,34 @@
1
+ # Side-Effects Review — Bounded Notification Surface (topic-flood invariant)
2
+
3
+ **Version / slug:** `bounded-notification-surface`
4
+ **Date:** `2026-06-05`
5
+ **Author:** `echo`
6
+ **Second-pass reviewer:** `not required (Tier 1; operator-directed incident remediation, approval in topic 11960)`
7
+
8
+ ## Summary of the change
9
+
10
+ Three-layer structural fix for the 2026-06-05 topic-spam flood (the third such incident): (1) `AgentWorktreeDetector` enumerates safe roots from the disk instead of the racy agent registry and aggregates N misplaced worktrees into ONE attention item; (2) `TelegramAdapter.createForumTopic` — the topic-creation chokepoint — enforces a last-resort `topicCreationBudget` on every `origin: 'auto'` creation, with 'auto' as the default so undeclared callers are bounded; (3) a burst-invariant integration test + a funnel lint pin the bound in CI. A `PostUpdateMigrator` migration purges stale per-path flood items fleet-wide. The standard joins the constitution as "Bounded Notification Surface" (P17), pending operator ratification at PR review.
11
+
12
+ ## Decision-point inventory
13
+
14
+ One new decision point: `createForumTopic` may now REFUSE an `origin:'auto'` creation past the budget (throws `TopicFloodBudgetError`). It is a delivery shaper in the same class as `AttentionTopicGuard` — it never withholds critical notices (HIGH/URGENT attention items pass `origin:'system'`), never drops an item (attention items are still stored; the existing coalesce path is untouched), and its failure shape (a thrown error from topic creation) is one every existing caller already handles, because Telegram 429s produce the same shape today.
15
+
16
+ ## 1. Over-block
17
+
18
+ Worst case: a legitimate feature creating >8 auto topics per label (or >12 globally) in 10 minutes gets refused; its content degrades exactly as it does under a Telegram rate limit (caller catch paths; attention items stay in the store topic-less; job notifications log the failure). Budgets are config-tunable per agent (`messaging[].config.topicCreationBudget`). User-initiated (`origin:'user'`: hub commands, /new, dashboard create) and create-once system topics (Lifeline, Dashboard, Updates, Attention, flood-notice, agent-health lane) are exempt, so no human-facing path can be over-blocked.
19
+
20
+ ## 2. Under-block
21
+
22
+ HIGH/URGENT attention items are exempt at both layers BY DESIGN (critical never coalesced) — a feature that floods at URGENT can still flood; that is the documented, deliberate trade (criticals must always land) and is unchanged from the 2026-05-28 lockdown. The lifeline's single raw `createForumTopic` call (separate process, fixed cardinality 1) is allowlisted in the lint with justification.
23
+
24
+ ## 3. Level-of-abstraction fit
25
+
26
+ The bound moved from per-feature cooperation (dodgeable — this incident proved it) to the creation primitive itself, mirroring the SafeGitExecutor/SafeFsExecutor single-funnel precedent. The detector fix removes a registry read that was the wrong ground truth for an on-disk question.
27
+
28
+ ## 4. Migration / fleet rollout
29
+
30
+ `migrateWorktreeMisplacedFloodItems` is idempotent (skips when no old-format ids present), atomic (tmp+rename), and only deletes items with the retired `worktree-misplaced:` id prefix; the new `worktree-misplaced-summary:` items are preserved. CLAUDE.md awareness ships via `migrateClaudeMd` with a content-sniff guard (Migration Parity), tracked in the feature-delivery-completeness parity test.
31
+
32
+ ## 5. Reversibility
33
+
34
+ Config off-switches: `topicCreationBudget: { enabled: false }` restores pre-change creation behavior; the detector change is signal-only (never moves/deletes worktrees). No data is destroyed anywhere except the stale flood items the migration purges — which are reconstructible from `git worktree list` if ever needed (and were 100% false positives).