instar 1.3.373 → 1.3.375

package/dist/users/TopicOperatorStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TopicOperatorStore.d.ts","sourceRoot":"","sources":["../../src/users/TopicOperatorStore.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAErF,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;IACrD,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;uEACmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,KAAK,CAA8C;gBAE/C,QAAQ,EAAE,MAAM;IAI5B,OAAO,CAAC,IAAI;IAeZ,OAAO,CAAC,IAAI;IAMZ;;;;;OAKG;IACH,WAAW,CACT,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/E,aAAa,GAAG,IAAI;IAgBvB,4DAA4D;IAC5D,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,IAAI;IAI3D;oFACgF;IAChF,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAKrE,mCAAmC;IACnC,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IAIpC;;;;;;OAMG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI;CAY7D"}
+{"version":3,"file":"TopicOperatorStore.d.ts","sourceRoot":"","sources":["../../src/users/TopicOperatorStore.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAErF,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;IACrD,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;uEACmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,KAAK,CAA8C;gBAE/C,QAAQ,EAAE,MAAM;IAI5B,OAAO,CAAC,IAAI;IAeZ,OAAO,CAAC,IAAI;IAMZ;;;;;OAKG;IACH,WAAW,CACT,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/E,aAAa,GAAG,IAAI;IAwBvB,4DAA4D;IAC5D,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,IAAI;IAI3D;oFACgF;IAChF,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAKrE,mCAAmC;IACnC,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IAIpC;;;;;;OAMG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI;CAY7D"}

package/dist/users/TopicOperatorStore.js

@@ -66,6 +66,14 @@ export class TopicOperatorStore {
             boundAt: input.boundAt ?? '',
             boundFrom: 'authenticated-inbound',
         };
+        // Idempotency guard: both inbound ingress paths (lifeline-forward #909 and
+        // the polling seam, increment 2e) re-bind on EVERY message from the operator.
+        // When the stored record is already identical, skip the disk write — the
+        // re-bind is then a pure read, not a per-message file rewrite.
+        const existing = this.load()[String(topicId)];
+        if (existing && JSON.stringify(existing) === JSON.stringify(record)) {
+            return existing;
+        }
         const map = { ...this.load() };
         map[String(topicId)] = record;
         this.save(map);

package/dist/users/TopicOperatorStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"TopicOperatorStore.js","sourceRoot":"","sources":["../../src/users/TopicOperatorStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAyB,MAAM,2BAA2B,CAAC;AAiBrF,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAS;IACtB,KAAK,GAAyC,IAAI,CAAC;IAE3D,YAAY,QAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC1D,CAAC;IAEO,IAAI;QACV,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC,KAAM,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,mEAAmE;QACrE,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,IAAI,CAAC,GAAkC;QAC7C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,WAAW,CACT,OAAwB,EACxB,KAAgF;QAEhF,MAAM,QAAQ,GAA4B,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,MAAM,GAAkB;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,UAAU;YACtC,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;YAC5B,SAAS,EAAE,uBAAuB;SACnC,CAAC;QACF,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4DAA4D;IAC5D,WAAW,CAAC,OAAwB;QAClC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;oFACgF;IAChF,kBAAkB,CAAC,OAAwB;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,mCAAmC;IACnC,GAAG;QACD,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CAAC,OAAwB;QAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;QACrG,OAAO,CACL,6BAA6B,EAAE,CAAC,QAAQ,UAAU,EAAE,CAAC,GAAG,IAAI;YAC5D,GAAG,OAAO,+EAA+E,EAAE,CAAC,QAAQ,0CAA0C;YAC9I,uGAAuG,OAAO,MAAM;YACpH,uKAAuK;YACvK,mBAAmB,CACpB,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"TopicOperatorStore.js","sourceRoot":"","sources":["../../src/users/TopicOperatorStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAyB,MAAM,2BAA2B,CAAC;AAiBrF,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAS;IACtB,KAAK,GAAyC,IAAI,CAAC;IAE3D,YAAY,QAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC1D,CAAC;IAEO,IAAI;QACV,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC,KAAM,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,mEAAmE;QACrE,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,IAAI,CAAC,GAAkC;QAC7C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,WAAW,CACT,OAAwB,EACxB,KAAgF;QAEhF,MAAM,QAAQ,GAA4B,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,MAAM,GAAkB;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,UAAU;YACtC,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;YAC5B,SAAS,EAAE,uBAAuB;SACnC,CAAC;QACF,2EAA2E;QAC3E,8EAA8E;QAC9E,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,IAAI,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4DAA4D;IAC5D,WAAW,CAAC,OAAwB;QAClC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;oFACgF;IAChF,kBAAkB,CAAC,OAAwB;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,mCAAmC;IACnC,GAAG;QACD,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CAAC,OAAwB;QAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;QACrG,OAAO,CACL,6BAA6B,EAAE,CAAC,QAAQ,UAAU,EAAE,CAAC,GAAG,IAAI;YAC5D,GAAG,OAAO,+EAA+E,EAAE,CAAC,QAAQ,0CAA0C;YAC9I,uGAAuG,OAAO,MAAM;YACpH,uKAAuK;YACvK,mBAAmB,CACpB,CAAC;IACJ,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.373",
+  "version": "1.3.375",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T16:43:09.971Z",
-  "instarVersion": "1.3.373",
+  "generatedAt": "2026-06-06T17:27:52.711Z",
+  "instarVersion": "1.3.375",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
+      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "ae1117a1dd98d8e48ccc13d247cdc0c821c68eacc428deebc64c71ebc6052c3d",
+      "contentHash": "4b3de410b5b3d64bf7545f9323689637b9b83ecb42a43c6e5d7c41ce81a340f6",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.375.md

@@ -0,0 +1,88 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The verified topic operator is now recorded automatically on BOTH inbound
+ingress paths (Know Your Principal standard, security-build increment 2e — the
+final operator-binding gap). Increment 2d covered only the lifeline-forward
+route; the adapter long-poll (no-lifeline) path never bound. The bind now lives
+at the shared `onTopicMessage` seam (`wireTelegramRouting`), guarded by
+`isAuthorizedSender` — load-bearing there, because the seam also fires for
+unauthorized senders. The seam resolves the server's own store instance
+late-bound (a second instance on the same file would lose updates between the
+two in-memory caches), and `TopicOperatorStore.setOperator` now skips the disk
+write when the record is unchanged (per-message re-binds become pure reads).
+
+`POST /pool/transfer` of a QUIET topic (never-seen or released ownership
+record) previously journaled NOTHING: the placement pin is router-local and
+the handler's release half only fires when the router itself held ownership.
+The pinned-to machine therefore could never prove the topic was its to serve —
+its working-set fetch reflex answered `not-owner` even after the #926 (pin
+fallback) and #930 (journal-placement fallback) read-side fixes deployed,
+because no machine ever PRODUCED the evidence those fallbacks read (coherence
+live-proof finding #5, proven on v1.3.372).
+
+The transfer handler now lands the PLACE half: it CASes `place→claim` for the
+target as one synchronous pair (the bug-#11 confirmClaim precedent — the
+record never rests at `placing`, the shape that queues every later message as
+ownership-contention), and each landed CAS journals a topic-placement entry at
+its real epoch (§3.3 call-site pairing) so the evidence replicates to the
+target machine. A resting `placing` record naming the target is repaired via
+claim. An active record held by a non-target machine is never stolen; any
+other in-flight shape is left strictly untouched.
+
+## What to Tell Your User
+
+Nothing user-facing changes. Foundation wiring (experimental) for the identity
+isolation security work: the agent now learns its verified operator from
+authorized inbound messages no matter how its Telegram connection is set up.
+Only authorized senders are ever recorded, and a recording failure never
+affects message handling.
+
+Nothing proactively — this is internal coherence plumbing. If they previously
+moved a quiet conversation between machines and the receiving machine couldn't
+fetch its files, that path now works: the move itself writes the ownership
+record and it travels to the receiving machine automatically.
+
+- audience: agent-only
+- maturity: stable
+
+## Summary of New Capabilities
+
+- Operator auto-bind at the `onTopicMessage` convergence seam (covers the
+  polling path; authorized senders only; fail-soft; pre-boot messages bind
+  nothing, fail-safe).
+- `AgentServer.getTopicOperatorStore()` — public accessor for the seam's
+  late-bound store resolution.
+- `TopicOperatorStore.setOperator` idempotency: identical record → no disk
+  write.
+
+- Quiet-topic transfers journal ownership evidence (place + claim halves, real
+  epochs, `reason: 'user-move'`) that replicates to the pinned-to machine —
+  unblocking its working-set fetch reflex (#930 fallback finally has a producer).
+- Half-placed leftovers (resting `placing` records naming the target) are
+  repaired on the next transfer of that topic.
+- `POST /pool/transfer` response gains `placedOwnership` (whether confirmed
+  ownership landed on the target as part of the move).
+
+## Evidence
+
+Verified by 6 Tier-1 unit tests (`topic-operator-polling-bind`: authorized
+binds, unauthorized Caroline refusal, null store / getter throw / setOperator
+throw all fail-soft with routing continuing, missing uid no-op), 2 Tier-1 store
+tests (idempotent skip both sides), and 3 Tier-2 integration tests
+(`topic-operator-polling-bind`: full Caroline replay through the seam,
+single-instance no-clobber across two topics on disk, pre-construction →
+post-construction lifecycle). All 60 existing topic-operator/session-context
+canaries and 13 e2e lifecycle tests stay green. Clean `tsc --noEmit`.
+
+- `tests/integration/pool-placement-transfer-routes.test.ts` — 6 new boundary
+  tests: quiet/never-seen (both halves journaled, record lands `active`),
+  self-owned (release + place + confirm, 3 entries), active-other (never
+  stolen), active-target (no-op, no epoch bump), resting-placing-target
+  (claim repair), placing-other (strictly untouched). 17/17 in file.
+- `lint-cas-emit-placement` clean — 8 CAS call sites, all paired.
+- Typecheck clean; full suite green on pre-push.

package/upgrades/side-effects/topic-operator-polling-bind-inc2e.md

@@ -0,0 +1,62 @@
+# Side-effects review — Topic Operator polling-path auto-bind (Know Your Principal #898, increment 2e)
+
+## What this change does
+Closes the auto-bind gap #909 documented: the adapter long-poll (no-lifeline)
+ingress path never bound the verified operator. The bind now lives at the
+`onTopicMessage` seam in `wireTelegramRouting` (src/commands/server.ts) — the
+convergence point BOTH ingress paths reach — so a no-lifeline install learns its
+operator too. Three coordinated pieces:
+
+- `wireTelegramRouting` gains a late-bound `getTopicOperatorStore` parameter
+  (the `getHubDeps` precedent in the same function) and an additive bind block
+  early in the callback: an AUTHENTICATED + AUTHORIZED sender is recorded as the
+  topic's verified operator.
+- `AgentServer.getTopicOperatorStore()` — public read-only accessor so the seam
+  resolves the server's OWN store instance at message-time.
+- `TopicOperatorStore.setOperator` idempotency guard: an identical record skips
+  the disk write (both paths re-bind per message; unchanged = pure read).
+
+## The load-bearing security property
+The seam fires for unauthorized senders too — the lifeline path only skips its
+own bind, it does not drop the message. So the `isAuthorizedSender` check INSIDE
+the seam bind is load-bearing: without it, an unauthorized group member could
+seat themselves as operator (the cross-principal "Caroline" bug). The
+integration Caroline replay proves the refusal — an unauthorized sender with
+`firstName: "Caroline"` cannot displace the bound operator.
+
+## Why the SAME store instance (the lost-update hazard)
+`TopicOperatorStore` caches its map in memory (`this.cache`). A second instance
+on the same file would hold a divergent cache: a record written through one
+instance disappears from the other's next full-map save. The original Inc-2e
+scout suggested constructing a fresh store inside the callback — that design is
+REJECTED here for exactly this reason. Instead the seam resolves
+`AgentServer.getTopicOperatorStore()` late-bound (module-level `_agentServerRef`
+assigned right after construction; the server is built long after routing is
+wired). The integration no-clobber test pins the invariant.
+
+## Blast radius (hot path — reviewed carefully)
+- **Additive + fail-soft.** The bind block is wrapped in try/catch; a getter
+  error, store error, or missing uid logs and falls through — message routing
+  is never affected. Proven by unit tests (getter throws / setOperator throws /
+  null store → handleCommand still runs).
+- **Pre-construction window.** Messages arriving before `_agentServerRef` is
+  assigned bind nothing (getter → null). Fail-safe: no binding means "unknown",
+  never a wrong operator. Lifecycle test covers the transition.
+- **Lifeline double-bind.** On the lifeline path both the routes-side bind
+  (#909) and the seam bind run — same instance, same record; the new
+  idempotency guard makes the second a no-op read.
+- **Disk-write reduction (behavior change, benign).** `setOperator` with a
+  byte-identical record no longer rewrites the file. Callers only ever read the
+  returned record or the store state — both unchanged. Existing store tests
+  (12) stay green; 2 new tests pin both sides (identical skips, changed
+  writes).
+- **No new route / config key / dependency.** `wireTelegramRouting` is now
+  exported (test seam only; no runtime caller change beyond the two existing
+  callsites gaining the getter argument).
+
+## No-allowlist trust model (unchanged, documented)
+`isAuthorizedSender` semantics are #909's: with no `authorizedUserIds`
+allowlist, every authenticated sender is accepted, so the operator is the
+most-recent authenticated sender. Consistent with the existing trust model;
+the uid is Telegram-authenticated, never a content name
+(`TopicOperatorStore.setOperator` enforces that by construction, #904).