instar 1.3.374 → 1.3.376

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (32) hide show
  1. package/dist/commands/server.d.ts +6 -0
  2. package/dist/commands/server.d.ts.map +1 -1
  3. package/dist/commands/server.js +42 -4
  4. package/dist/commands/server.js.map +1 -1
  5. package/dist/core/SessionManager.d.ts +16 -2
  6. package/dist/core/SessionManager.d.ts.map +1 -1
  7. package/dist/core/SessionManager.js +25 -5
  8. package/dist/core/SessionManager.js.map +1 -1
  9. package/dist/monitoring/CompactionSentinel.d.ts.map +1 -1
  10. package/dist/monitoring/CompactionSentinel.js +10 -4
  11. package/dist/monitoring/CompactionSentinel.js.map +1 -1
  12. package/dist/monitoring/RateLimitSentinel.d.ts.map +1 -1
  13. package/dist/monitoring/RateLimitSentinel.js +9 -1
  14. package/dist/monitoring/RateLimitSentinel.js.map +1 -1
  15. package/dist/server/AgentServer.d.ts +9 -0
  16. package/dist/server/AgentServer.d.ts.map +1 -1
  17. package/dist/server/AgentServer.js +10 -0
  18. package/dist/server/AgentServer.js.map +1 -1
  19. package/dist/server/routes.d.ts.map +1 -1
  20. package/dist/server/routes.js +11 -3
  21. package/dist/server/routes.js.map +1 -1
  22. package/dist/users/TopicOperatorStore.d.ts.map +1 -1
  23. package/dist/users/TopicOperatorStore.js +8 -0
  24. package/dist/users/TopicOperatorStore.js.map +1 -1
  25. package/package.json +1 -1
  26. package/src/data/builtin-manifest.json +48 -48
  27. package/upgrades/{1.3.374.md → 1.3.375.md} +34 -0
  28. package/upgrades/1.3.376.md +72 -0
  29. package/upgrades/sentinel-stale-uuid-fallback.eli16.md +15 -0
  30. package/upgrades/side-effects/sentinel-stale-uuid-fallback.md +75 -0
  31. package/upgrades/side-effects/topic-operator-polling-bind-inc2e.md +62 -0
  32. package/upgrades/topic-operator-polling-bind-inc2e.eli16.md +56 -0
@@ -1 +1 @@
1
- {"version":3,"file":"TopicOperatorStore.d.ts","sourceRoot":"","sources":["../../src/users/TopicOperatorStore.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAErF,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;IACrD,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;uEACmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,KAAK,CAA8C;gBAE/C,QAAQ,EAAE,MAAM;IAI5B,OAAO,CAAC,IAAI;IAeZ,OAAO,CAAC,IAAI;IAMZ;;;;;OAKG;IACH,WAAW,CACT,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/E,aAAa,GAAG,IAAI;IAgBvB,4DAA4D;IAC5D,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,IAAI;IAI3D;oFACgF;IAChF,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAKrE,mCAAmC;IACnC,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IAIpC;;;;;;OAMG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI;CAY7D"}
1
+ {"version":3,"file":"TopicOperatorStore.d.ts","sourceRoot":"","sources":["../../src/users/TopicOperatorStore.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAErF,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;IACrD,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;uEACmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,KAAK,CAA8C;gBAE/C,QAAQ,EAAE,MAAM;IAI5B,OAAO,CAAC,IAAI;IAeZ,OAAO,CAAC,IAAI;IAMZ;;;;;OAKG;IACH,WAAW,CACT,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/E,aAAa,GAAG,IAAI;IAwBvB,4DAA4D;IAC5D,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,IAAI;IAI3D;oFACgF;IAChF,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAKrE,mCAAmC;IACnC,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IAIpC;;;;;;OAMG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI;CAY7D"}
@@ -66,6 +66,14 @@ export class TopicOperatorStore {
66
66
  boundAt: input.boundAt ?? '',
67
67
  boundFrom: 'authenticated-inbound',
68
68
  };
69
+ // Idempotency guard: both inbound ingress paths (lifeline-forward #909 and
70
+ // the polling seam, increment 2e) re-bind on EVERY message from the operator.
71
+ // When the stored record is already identical, skip the disk write — the
72
+ // re-bind is then a pure read, not a per-message file rewrite.
73
+ const existing = this.load()[String(topicId)];
74
+ if (existing && JSON.stringify(existing) === JSON.stringify(record)) {
75
+ return existing;
76
+ }
69
77
  const map = { ...this.load() };
70
78
  map[String(topicId)] = record;
71
79
  this.save(map);
@@ -1 +1 @@
1
- {"version":3,"file":"TopicOperatorStore.js","sourceRoot":"","sources":["../../src/users/TopicOperatorStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAyB,MAAM,2BAA2B,CAAC;AAiBrF,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAS;IACtB,KAAK,GAAyC,IAAI,CAAC;IAE3D,YAAY,QAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC1D,CAAC;IAEO,IAAI;QACV,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC,KAAM,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,mEAAmE;QACrE,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,IAAI,CAAC,GAAkC;QAC7C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,WAAW,CACT,OAAwB,EACxB,KAAgF;QAEhF,MAAM,QAAQ,GAA4B,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,MAAM,GAAkB;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,UAAU;YACtC,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;YAC5B,SAAS,EAAE,uBAAuB;SACnC,CAAC;QACF,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4DAA4D;IAC5D,WAAW,CAAC,OAAwB;QAClC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;oFACgF;IAChF,kBAAkB,CAAC,OAAwB;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,mCAAmC;IACnC,GAAG;QACD,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CAAC,OAAwB;QAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;QACrG,OAAO,CACL,6BAA6B,EAAE,CAAC,QAAQ,UAAU,EAAE,CAAC,GAAG,IAAI;YAC5D,GAAG,OAAO,+EAA+E,EAAE,CAAC,QAAQ,0CAA0C;YAC9I,uGAAuG,OAAO,MAAM;YACpH,uKAAuK;YACvK,mBAAmB,CACpB,CAAC;IACJ,CAAC;CACF"}
1
+ {"version":3,"file":"TopicOperatorStore.js","sourceRoot":"","sources":["../../src/users/TopicOperatorStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAyB,MAAM,2BAA2B,CAAC;AAiBrF,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAS;IACtB,KAAK,GAAyC,IAAI,CAAC;IAE3D,YAAY,QAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC1D,CAAC;IAEO,IAAI;QACV,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC,KAAM,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,mEAAmE;QACrE,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,IAAI,CAAC,GAAkC;QAC7C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,WAAW,CACT,OAAwB,EACxB,KAAgF;QAEhF,MAAM,QAAQ,GAA4B,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,MAAM,GAAkB;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,UAAU;YACtC,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;YAC5B,SAAS,EAAE,uBAAuB;SACnC,CAAC;QACF,2EAA2E;QAC3E,8EAA8E;QAC9E,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,IAAI,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4DAA4D;IAC5D,WAAW,CAAC,OAAwB;QAClC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;oFACgF;IAChF,kBAAkB,CAAC,OAAwB;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,mCAAmC;IACnC,GAAG;QACD,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CAAC,OAAwB;QAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;QACrG,OAAO,CACL,6BAA6B,EAAE,CAAC,QAAQ,UAAU,EAAE,CAAC,GAAG,IAAI;YAC5D,GAAG,OAAO,+EAA+E,EAAE,CAAC,QAAQ,0CAA0C;YAC9I,uGAAuG,OAAO,MAAM;YACpH,uKAAuK;YACvK,mBAAmB,CACpB,CAAC;IACJ,CAAC;CACF"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "instar",
3
- "version": "1.3.374",
3
+ "version": "1.3.376",
4
4
  "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "$schema": "./builtin-manifest.schema.json",
3
3
  "schemaVersion": 1,
4
- "generatedAt": "2026-06-06T17:24:34.038Z",
5
- "instarVersion": "1.3.374",
4
+ "generatedAt": "2026-06-06T19:12:50.527Z",
5
+ "instarVersion": "1.3.376",
6
6
  "entryCount": 199,
7
7
  "entries": {
8
8
  "hook:session-start": {
@@ -418,7 +418,7 @@
418
418
  "type": "route-group",
419
419
  "domain": "monitoring",
420
420
  "sourcePath": "src/server/routes.ts",
421
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
421
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
422
422
  "since": "2025-01-01"
423
423
  },
424
424
  "route-group:agents": {
@@ -426,7 +426,7 @@
426
426
  "type": "route-group",
427
427
  "domain": "sessions",
428
428
  "sourcePath": "src/server/routes.ts",
429
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
429
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
430
430
  "since": "2025-01-01"
431
431
  },
432
432
  "route-group:backups": {
@@ -434,7 +434,7 @@
434
434
  "type": "route-group",
435
435
  "domain": "operations",
436
436
  "sourcePath": "src/server/routes.ts",
437
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
437
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
438
438
  "since": "2025-01-01"
439
439
  },
440
440
  "route-group:git": {
@@ -442,7 +442,7 @@
442
442
  "type": "route-group",
443
443
  "domain": "coordination",
444
444
  "sourcePath": "src/server/routes.ts",
445
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
445
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
446
446
  "since": "2025-01-01"
447
447
  },
448
448
  "route-group:memory": {
@@ -450,7 +450,7 @@
450
450
  "type": "route-group",
451
451
  "domain": "memory",
452
452
  "sourcePath": "src/server/routes.ts",
453
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
453
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
454
454
  "since": "2025-01-01"
455
455
  },
456
456
  "route-group:semantic": {
@@ -458,7 +458,7 @@
458
458
  "type": "route-group",
459
459
  "domain": "memory",
460
460
  "sourcePath": "src/server/routes.ts",
461
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
461
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
462
462
  "since": "2025-01-01"
463
463
  },
464
464
  "route-group:status": {
@@ -466,7 +466,7 @@
466
466
  "type": "route-group",
467
467
  "domain": "monitoring",
468
468
  "sourcePath": "src/server/routes.ts",
469
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
469
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
470
470
  "since": "2025-01-01"
471
471
  },
472
472
  "route-group:capabilities": {
@@ -474,7 +474,7 @@
474
474
  "type": "route-group",
475
475
  "domain": "mapping",
476
476
  "sourcePath": "src/server/routes.ts",
477
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
477
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
478
478
  "since": "2025-01-01"
479
479
  },
480
480
  "route-group:project-map": {
@@ -482,7 +482,7 @@
482
482
  "type": "route-group",
483
483
  "domain": "mapping",
484
484
  "sourcePath": "src/server/routes.ts",
485
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
485
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
486
486
  "since": "2025-01-01"
487
487
  },
488
488
  "route-group:coherence": {
@@ -490,7 +490,7 @@
490
490
  "type": "route-group",
491
491
  "domain": "coherence",
492
492
  "sourcePath": "src/server/routes.ts",
493
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
493
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
494
494
  "since": "2025-01-01"
495
495
  },
496
496
  "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
498
498
  "type": "route-group",
499
499
  "domain": "sessions",
500
500
  "sourcePath": "src/server/routes.ts",
501
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
501
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
502
502
  "since": "2025-01-01"
503
503
  },
504
504
  "route-group:context": {
@@ -506,7 +506,7 @@
506
506
  "type": "route-group",
507
507
  "domain": "context",
508
508
  "sourcePath": "src/server/routes.ts",
509
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
509
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
510
510
  "since": "2025-01-01"
511
511
  },
512
512
  "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
514
514
  "type": "route-group",
515
515
  "domain": "coherence",
516
516
  "sourcePath": "src/server/routes.ts",
517
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
517
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
518
518
  "since": "2025-01-01"
519
519
  },
520
520
  "route-group:canonical-state": {
@@ -522,7 +522,7 @@
522
522
  "type": "route-group",
523
523
  "domain": "state",
524
524
  "sourcePath": "src/server/routes.ts",
525
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
525
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
526
526
  "since": "2025-01-01"
527
527
  },
528
528
  "route-group:ci": {
@@ -530,7 +530,7 @@
530
530
  "type": "route-group",
531
531
  "domain": "monitoring",
532
532
  "sourcePath": "src/server/routes.ts",
533
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
533
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
534
534
  "since": "2025-01-01"
535
535
  },
536
536
  "route-group:sessions": {
@@ -538,7 +538,7 @@
538
538
  "type": "route-group",
539
539
  "domain": "sessions",
540
540
  "sourcePath": "src/server/routes.ts",
541
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
541
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
542
542
  "since": "2025-01-01"
543
543
  },
544
544
  "route-group:jobs": {
@@ -546,7 +546,7 @@
546
546
  "type": "route-group",
547
547
  "domain": "scheduling",
548
548
  "sourcePath": "src/server/routes.ts",
549
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
549
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
550
550
  "since": "2025-01-01"
551
551
  },
552
552
  "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
554
554
  "type": "route-group",
555
555
  "domain": "scheduling",
556
556
  "sourcePath": "src/server/routes.ts",
557
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
557
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
558
558
  "since": "2025-01-01"
559
559
  },
560
560
  "route-group:telegram": {
@@ -562,7 +562,7 @@
562
562
  "type": "route-group",
563
563
  "domain": "communication",
564
564
  "sourcePath": "src/server/routes.ts",
565
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
565
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
566
566
  "since": "2025-01-01"
567
567
  },
568
568
  "route-group:attention": {
@@ -570,7 +570,7 @@
570
570
  "type": "route-group",
571
571
  "domain": "communication",
572
572
  "sourcePath": "src/server/routes.ts",
573
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
573
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
574
574
  "since": "2025-01-01"
575
575
  },
576
576
  "route-group:relationships": {
@@ -578,7 +578,7 @@
578
578
  "type": "route-group",
579
579
  "domain": "relationships",
580
580
  "sourcePath": "src/server/routes.ts",
581
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
581
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
582
582
  "since": "2025-01-01"
583
583
  },
584
584
  "route-group:feedback": {
@@ -586,7 +586,7 @@
586
586
  "type": "route-group",
587
587
  "domain": "feedback",
588
588
  "sourcePath": "src/server/routes.ts",
589
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
589
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
590
590
  "since": "2025-01-01"
591
591
  },
592
592
  "route-group:updates": {
@@ -594,7 +594,7 @@
594
594
  "type": "route-group",
595
595
  "domain": "updates",
596
596
  "sourcePath": "src/server/routes.ts",
597
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
597
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
598
598
  "since": "2025-01-01"
599
599
  },
600
600
  "route-group:dispatches": {
@@ -602,7 +602,7 @@
602
602
  "type": "route-group",
603
603
  "domain": "dispatches",
604
604
  "sourcePath": "src/server/routes.ts",
605
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
605
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
606
606
  "since": "2025-01-01"
607
607
  },
608
608
  "route-group:quota": {
@@ -610,7 +610,7 @@
610
610
  "type": "route-group",
611
611
  "domain": "monitoring",
612
612
  "sourcePath": "src/server/routes.ts",
613
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
613
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
614
614
  "since": "2025-01-01"
615
615
  },
616
616
  "route-group:publishing": {
@@ -618,7 +618,7 @@
618
618
  "type": "route-group",
619
619
  "domain": "publishing",
620
620
  "sourcePath": "src/server/routes.ts",
621
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
621
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
622
622
  "since": "2025-01-01"
623
623
  },
624
624
  "route-group:private-views": {
@@ -626,7 +626,7 @@
626
626
  "type": "route-group",
627
627
  "domain": "publishing",
628
628
  "sourcePath": "src/server/routes.ts",
629
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
629
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
630
630
  "since": "2025-01-01"
631
631
  },
632
632
  "route-group:tunnel": {
@@ -634,7 +634,7 @@
634
634
  "type": "route-group",
635
635
  "domain": "networking",
636
636
  "sourcePath": "src/server/routes.ts",
637
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
637
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
638
638
  "since": "2025-01-01"
639
639
  },
640
640
  "route-group:events": {
@@ -642,7 +642,7 @@
642
642
  "type": "route-group",
643
643
  "domain": "networking",
644
644
  "sourcePath": "src/server/routes.ts",
645
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
645
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
646
646
  "since": "2025-01-01"
647
647
  },
648
648
  "route-group:evolution": {
@@ -650,7 +650,7 @@
650
650
  "type": "route-group",
651
651
  "domain": "evolution",
652
652
  "sourcePath": "src/server/routes.ts",
653
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
653
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
654
654
  "since": "2025-01-01"
655
655
  },
656
656
  "route-group:watchdog": {
@@ -658,7 +658,7 @@
658
658
  "type": "route-group",
659
659
  "domain": "monitoring",
660
660
  "sourcePath": "src/server/routes.ts",
661
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
661
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
662
662
  "since": "2025-01-01"
663
663
  },
664
664
  "route-group:topic-memory": {
@@ -666,7 +666,7 @@
666
666
  "type": "route-group",
667
667
  "domain": "memory",
668
668
  "sourcePath": "src/server/routes.ts",
669
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
669
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
670
670
  "since": "2025-01-01"
671
671
  },
672
672
  "route-group:state-sync": {
@@ -674,7 +674,7 @@
674
674
  "type": "route-group",
675
675
  "domain": "coordination",
676
676
  "sourcePath": "src/server/routes.ts",
677
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
677
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
678
678
  "since": "2025-01-01"
679
679
  },
680
680
  "route-group:intent": {
@@ -682,7 +682,7 @@
682
682
  "type": "route-group",
683
683
  "domain": "intent",
684
684
  "sourcePath": "src/server/routes.ts",
685
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
685
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
686
686
  "since": "2025-01-01"
687
687
  },
688
688
  "route-group:triage": {
@@ -690,7 +690,7 @@
690
690
  "type": "route-group",
691
691
  "domain": "safety",
692
692
  "sourcePath": "src/server/routes.ts",
693
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
693
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
694
694
  "since": "2025-01-01"
695
695
  },
696
696
  "route-group:operations": {
@@ -698,7 +698,7 @@
698
698
  "type": "route-group",
699
699
  "domain": "safety",
700
700
  "sourcePath": "src/server/routes.ts",
701
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
701
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
702
702
  "since": "2025-01-01"
703
703
  },
704
704
  "route-group:sentinel": {
@@ -706,7 +706,7 @@
706
706
  "type": "route-group",
707
707
  "domain": "safety",
708
708
  "sourcePath": "src/server/routes.ts",
709
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
709
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
710
710
  "since": "2025-01-01"
711
711
  },
712
712
  "route-group:trust": {
@@ -714,7 +714,7 @@
714
714
  "type": "route-group",
715
715
  "domain": "safety",
716
716
  "sourcePath": "src/server/routes.ts",
717
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
717
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
718
718
  "since": "2025-01-01"
719
719
  },
720
720
  "route-group:monitoring": {
@@ -722,7 +722,7 @@
722
722
  "type": "route-group",
723
723
  "domain": "monitoring",
724
724
  "sourcePath": "src/server/routes.ts",
725
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
725
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
726
726
  "since": "2025-01-01"
727
727
  },
728
728
  "route-group:commitments": {
@@ -730,7 +730,7 @@
730
730
  "type": "route-group",
731
731
  "domain": "commitments",
732
732
  "sourcePath": "src/server/routes.ts",
733
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
733
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
734
734
  "since": "2025-01-01"
735
735
  },
736
736
  "route-group:episodes": {
@@ -738,7 +738,7 @@
738
738
  "type": "route-group",
739
739
  "domain": "memory",
740
740
  "sourcePath": "src/server/routes.ts",
741
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
741
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
742
742
  "since": "2025-01-01"
743
743
  },
744
744
  "route-group:messages": {
@@ -746,7 +746,7 @@
746
746
  "type": "route-group",
747
747
  "domain": "coordination",
748
748
  "sourcePath": "src/server/routes.ts",
749
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
749
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
750
750
  "since": "2025-01-01"
751
751
  },
752
752
  "route-group:system-reviews": {
@@ -754,7 +754,7 @@
754
754
  "type": "route-group",
755
755
  "domain": "monitoring",
756
756
  "sourcePath": "src/server/routes.ts",
757
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
757
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
758
758
  "since": "2025-01-01"
759
759
  },
760
760
  "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
770
770
  "type": "route-group",
771
771
  "domain": "security",
772
772
  "sourcePath": "src/server/routes.ts",
773
- "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
773
+ "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
774
774
  "since": "2025-01-01"
775
775
  },
776
776
  "cli:init": {
@@ -1506,7 +1506,7 @@
1506
1506
  "type": "subsystem",
1507
1507
  "domain": "server",
1508
1508
  "sourcePath": "src/server/AgentServer.ts",
1509
- "contentHash": "ae1117a1dd98d8e48ccc13d247cdc0c821c68eacc428deebc64c71ebc6052c3d",
1509
+ "contentHash": "4b3de410b5b3d64bf7545f9323689637b9b83ecb42a43c6e5d7c41ce81a340f6",
1510
1510
  "since": "2025-01-01"
1511
1511
  },
1512
1512
  "subsystem:session-manager": {
@@ -1514,7 +1514,7 @@
1514
1514
  "type": "subsystem",
1515
1515
  "domain": "sessions",
1516
1516
  "sourcePath": "src/core/SessionManager.ts",
1517
- "contentHash": "a7d126e3eae782ae7b6eb2f3146b326cf2e14eae89376d91720526736d90fda9",
1517
+ "contentHash": "45517522f35828717e749c72c8fae66d400e94ded983525391a2c74227e86d80",
1518
1518
  "since": "2025-01-01"
1519
1519
  },
1520
1520
  "subsystem:auto-updater": {
@@ -5,6 +5,17 @@
5
5
 
6
6
  ## What Changed
7
7
 
8
+ The verified topic operator is now recorded automatically on BOTH inbound
9
+ ingress paths (Know Your Principal standard, security-build increment 2e — the
10
+ final operator-binding gap). Increment 2d covered only the lifeline-forward
11
+ route; the adapter long-poll (no-lifeline) path never bound. The bind now lives
12
+ at the shared `onTopicMessage` seam (`wireTelegramRouting`), guarded by
13
+ `isAuthorizedSender` — load-bearing there, because the seam also fires for
14
+ unauthorized senders. The seam resolves the server's own store instance
15
+ late-bound (a second instance on the same file would lose updates between the
16
+ two in-memory caches), and `TopicOperatorStore.setOperator` now skips the disk
17
+ write when the record is unchanged (per-message re-binds become pure reads).
18
+
8
19
  `POST /pool/transfer` of a QUIET topic (never-seen or released ownership
9
20
  record) previously journaled NOTHING: the placement pin is router-local and
10
21
  the handler's release half only fires when the router itself held ownership.
@@ -25,6 +36,12 @@ other in-flight shape is left strictly untouched.
25
36
 
26
37
  ## What to Tell Your User
27
38
 
39
+ Nothing user-facing changes. Foundation wiring (experimental) for the identity
40
+ isolation security work: the agent now learns its verified operator from
41
+ authorized inbound messages no matter how its Telegram connection is set up.
42
+ Only authorized senders are ever recorded, and a recording failure never
43
+ affects message handling.
44
+
28
45
  Nothing proactively — this is internal coherence plumbing. If they previously
29
46
  moved a quiet conversation between machines and the receiving machine couldn't
30
47
  fetch its files, that path now works: the move itself writes the ownership
@@ -35,6 +52,14 @@ record and it travels to the receiving machine automatically.
35
52
 
36
53
  ## Summary of New Capabilities
37
54
 
55
+ - Operator auto-bind at the `onTopicMessage` convergence seam (covers the
56
+ polling path; authorized senders only; fail-soft; pre-boot messages bind
57
+ nothing, fail-safe).
58
+ - `AgentServer.getTopicOperatorStore()` — public accessor for the seam's
59
+ late-bound store resolution.
60
+ - `TopicOperatorStore.setOperator` idempotency: identical record → no disk
61
+ write.
62
+
38
63
  - Quiet-topic transfers journal ownership evidence (place + claim halves, real
39
64
  epochs, `reason: 'user-move'`) that replicates to the pinned-to machine —
40
65
  unblocking its working-set fetch reflex (#930 fallback finally has a producer).
@@ -45,6 +70,15 @@ record and it travels to the receiving machine automatically.
45
70
 
46
71
  ## Evidence
47
72
 
73
+ Verified by 6 Tier-1 unit tests (`topic-operator-polling-bind`: authorized
74
+ binds, unauthorized Caroline refusal, null store / getter throw / setOperator
75
+ throw all fail-soft with routing continuing, missing uid no-op), 2 Tier-1 store
76
+ tests (idempotent skip both sides), and 3 Tier-2 integration tests
77
+ (`topic-operator-polling-bind`: full Caroline replay through the seam,
78
+ single-instance no-clobber across two topics on disk, pre-construction →
79
+ post-construction lifecycle). All 60 existing topic-operator/session-context
80
+ canaries and 13 e2e lifecycle tests stay green. Clean `tsc --noEmit`.
81
+
48
82
  - `tests/integration/pool-placement-transfer-routes.test.ts` — 6 new boundary
49
83
  tests: quiet/never-seen (both halves journaled, record lands `active`),
50
84
  self-owned (release + place + confirm, 3 entries), active-other (never
@@ -0,0 +1,72 @@
1
+ # Upgrade Guide — vNEXT
2
+
3
+ <!-- assembled-by: assemble-next-md -->
4
+ <!-- bump: patch -->
5
+
6
+ ## What Changed
7
+
8
+ The claudeSessionId bridge (instar session record ↔ Claude Code conversation
9
+ UUID) was write-once: the first hook event froze the UUID forever. A fresh
10
+ respawn or `claude --resume` rotates the conversation UUID, so after any
11
+ respawn the record pointed at a transcript that never grew — or never existed
12
+ (6 of 7 inspected records on the dev box were phantom). Both sentinels that
13
+ verify recovery by transcript growth (RateLimitSentinel, CompactionSentinel)
14
+ resolved that exact file, got null, and could NEVER observe a recovery: the
15
+ result was 6 futile resume nudges against actively-answering sessions and a
16
+ false "no jsonl growth after 6 attempts" escalation (2026-06-06 echo-api-errors
17
+ and echo-exo-3-0 incidents).
18
+
19
+ Fixes, root cause first:
20
+
21
+ 1. The bridge is now last-writer-wins — every hook event carries the live
22
+ conversation UUID, and the record updates on rotation (logged old → new).
23
+ This also freshens every other claudeSessionId consumer (topic resume saves,
24
+ reap guards) that always wanted the live conversation's id.
25
+ 2. Both sentinels degrade a stale uuid (recorded transcript missing) to the
26
+ newest-jsonl heuristic the no-uuid case already uses, instead of returning
27
+ null — guaranteed-unverifiable is strictly worse than the shared accepted
28
+ heuristic. Exact-uuid behavior when the file exists is byte-for-byte
29
+ unchanged (sibling growth still doesn't count).
30
+
31
+ Regression tests replay the live incident on both sentinels plus the bridge
32
+ rotation; the sibling-precision guard is tested on the valid-uuid arm.
33
+
34
+ ## What to Tell Your User
35
+
36
+ Nothing — housekeeping. The visible effect is the ABSENCE of noise: no more
37
+ repeated "throttle should have cleared — please continue" nudges landing in a
38
+ session that's already working, and no more false "still can't get through
39
+ after 6 tries" alerts on sessions that recovered fine.
40
+
41
+ ## Summary of New Capabilities
42
+
43
+ - claudeSessionId bridge follows conversation rotation (last-writer-wins, logged).
44
+ - RateLimitSentinel + CompactionSentinel: stale-uuid → newest-jsonl fallback in
45
+ recovery verification; false-escalation class on healthy sessions closed.
46
+
47
+ ## Evidence
48
+
49
+ Reproduced live in production on 2026-06-06 (the bug was diagnosed FROM the
50
+ affected session):
51
+
52
+ - **Before:** `logs/sentinel-events.jsonl` 16:47:12Z→17:11Z — `throttle-detected`
53
+ on echo-api-errors, then the full resume-nudge ladder (attempts 1–6, each
54
+ "resume nudge injected via internal recovery channel") against a session that
55
+ was actively answering its operator the entire time; the episode ends
56
+ `throttle-escalated: "no jsonl growth after 6 attempts"`. The session record
57
+ held `claudeSessionId = 563a7027-…` with NO such transcript on disk while the
58
+ live transcript `a538d58f-….jsonl` grew throughout. Same morning, 09:26Z:
59
+ echo-exo-3-0 falsely escalated `"no jsonl growth after 6 attempts over 22m"`.
60
+ 6 of 7 inspected exo-family session records pointed at phantom transcripts.
61
+ - **After (mechanism):** with the fallback, `readJsonlBaseline` resolves the
62
+ growing live transcript (logged "stale claudeSessionId … falling back to
63
+ newest jsonl"), so the first nudge's verify window observes growth and the
64
+ episode finalizes `recovered` — regression tests replay exactly this shape on
65
+ both sentinels (phantom uuid + growing sibling file ⇒ recovered, never
66
+ escalated; verified to FAIL on pre-fix code). The bridge fix is additionally
67
+ proven on the real SessionManager: rotation `first-uuid → second-uuid`
68
+ persists (previously refused by the write-once guard).
69
+ - Post-deploy wild proof: the next real throttle on a respawned session should
70
+ log `throttle-recovered` instead of a false escalation; the rotation log line
71
+ (`claudeSessionId rotated for "<session>": old → new`) will appear on the
72
+ first hook event after any respawn.
@@ -0,0 +1,15 @@
1
+ # Sentinels stop failing healthy sessions over a stale transcript pointer
2
+
3
+ When a session gets throttled by the API, a watchdog (the RateLimitSentinel) nudges it back awake and then checks "did it actually recover?" by watching the session's transcript file grow — output means alive. Same trick for compaction recovery (CompactionSentinel).
4
+
5
+ The bug: the server remembers WHICH transcript file belongs to a session by its conversation ID — but that memory was write-once. The first time a session ever reported its ID, it was frozen forever. When a session later respawned or resumed (which gives the conversation a NEW ID and a NEW transcript file), the record kept pointing at the OLD file — one that never grows again, or never even existed. On this box, 6 of 7 checked session records pointed at transcripts that didn't exist.
6
+
7
+ The consequence: for any such session, "did it recover?" could literally never come back yes. The watchdog would nudge 6 times over ~20 minutes — against a session that was actively answering the user the whole time — then falsely declare it stuck ("no jsonl growth after 6 attempts"). This happened live on 2026-06-06: one session got 6 pointless wake-up nudges mid-conversation, and another was falsely escalated at 2am.
8
+
9
+ Two fixes, root cause first:
10
+
11
+ 1. **The pointer now follows the conversation.** Every hook event a session sends carries its current conversation ID; the record now updates whenever that ID changes (a respawn/resume rotates it), instead of refusing to ever change. A rotation is logged so drift is diagnosable.
12
+
13
+ 2. **A stale pointer degrades instead of failing.** If the recorded ID's transcript file is missing, both sentinels now fall back to watching the newest transcript in the project — the exact same heuristic they already use when no ID is known at all — instead of returning "no file, recovery unverifiable, forever." When the exact file exists, behavior is byte-for-byte unchanged (a sibling session's output still doesn't count as your recovery).
14
+
15
+ Regression tests replay the live incident: phantom ID + a growing real transcript must produce "recovered", never a false escalation.