instar 1.3.414 → 1.3.416

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (26) hide show
  1. package/dashboard/index.html +2 -1
  2. package/dashboard/subscriptions.js +3 -0
  3. package/dist/core/QuotaPoller.d.ts +8 -0
  4. package/dist/core/QuotaPoller.d.ts.map +1 -1
  5. package/dist/core/QuotaPoller.js +34 -0
  6. package/dist/core/QuotaPoller.js.map +1 -1
  7. package/dist/core/SubscriptionPool.d.ts +8 -0
  8. package/dist/core/SubscriptionPool.d.ts.map +1 -1
  9. package/dist/core/SubscriptionPool.js +5 -0
  10. package/dist/core/SubscriptionPool.js.map +1 -1
  11. package/dist/monitoring/SessionRecovery.d.ts.map +1 -1
  12. package/dist/monitoring/SessionRecovery.js +4 -0
  13. package/dist/monitoring/SessionRecovery.js.map +1 -1
  14. package/dist/monitoring/agentWorktreeGit.d.ts.map +1 -1
  15. package/dist/monitoring/agentWorktreeGit.js +4 -0
  16. package/dist/monitoring/agentWorktreeGit.js.map +1 -1
  17. package/dist/server/routes.js +4 -4
  18. package/dist/server/routes.js.map +1 -1
  19. package/package.json +2 -2
  20. package/scripts/lint-no-blocking-process-scans.js +115 -0
  21. package/scripts/lint-no-direct-destructive.js +3 -0
  22. package/src/data/builtin-manifest.json +46 -46
  23. package/upgrades/1.3.415.md +32 -0
  24. package/upgrades/1.3.416.md +42 -0
  25. package/upgrades/side-effects/lint-no-blocking-process-scans.md +73 -0
  26. package/upgrades/side-effects/subscription-account-email.md +58 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "instar",
3
- "version": "1.3.414",
3
+ "version": "1.3.416",
4
4
  "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
@@ -28,7 +28,7 @@
28
28
  "test:contract": "node scripts/run-contract-tests.js",
29
29
  "test:contract:raw": "vitest run --config vitest.contract.config.ts",
30
30
  "test:all": "vitest run && vitest run --config vitest.integration.config.ts && vitest run --config vitest.e2e.config.ts",
31
- "lint": "tsc --noEmit && node scripts/lint-no-direct-destructive.js && node scripts/lint-no-direct-llm-http.js && node scripts/lint-no-direct-url-log.js && node scripts/lint-no-unfunneled-topic-creation.js && node scripts/lint-no-unfunneled-headless-launch.js && node scripts/lint-state-registry.js && node scripts/lint-cas-emit-placement.js && node scripts/lint-journal-actuation-ban.js && node scripts/check-codex-rule1-drift.js",
31
+ "lint": "tsc --noEmit && node scripts/lint-no-direct-destructive.js && node scripts/lint-no-direct-llm-http.js && node scripts/lint-no-direct-url-log.js && node scripts/lint-no-unfunneled-topic-creation.js && node scripts/lint-no-unfunneled-headless-launch.js && node scripts/lint-state-registry.js && node scripts/lint-cas-emit-placement.js && node scripts/lint-journal-actuation-ban.js && node scripts/lint-no-blocking-process-scans.js && node scripts/check-codex-rule1-drift.js",
32
32
  "lint:destructive": "node scripts/lint-no-direct-destructive.js",
33
33
  "lint:destructive:staged": "node scripts/lint-no-direct-destructive.js --staged",
34
34
  "lint:llm-http": "node scripts/lint-no-direct-llm-http.js",
package/scripts/lint-no-blocking-process-scans.js ADDED
@@ -0,0 +1,115 @@
1
+ #!/usr/bin/env node
2
+ /**
3
+ * lint-no-blocking-process-scans.js — refuses SYNCHRONOUS process-enumeration
4
+ * scans (`ps`/`pgrep`/`lsof`/`pkill`) on the runtime hot path.
5
+ *
6
+ * Earned 2026-06-07 (topic 21816 post-mortem, docs/postmortems/2026-06-07-server-temporarily-down.md).
7
+ * Root cause #4 of the "server temporarily down" incident: monitors ran
8
+ * `spawnSync('ps' …)` / `execFileSync('lsof' …)` on a cadence. A single-threaded
9
+ * Node process BLOCKS its event loop for the duration of a synchronous child
10
+ * process — and `ps`/`lsof` get slow under CPU/IO load, exactly when monitors
11
+ * fire most. The cumulative stall starved `/health`, which made the supervisor
12
+ * declare the (alive) server unresponsive and restart it → the restart loop.
13
+ * #972 converted SessionWatchdog to async; this lint stops the class from being
14
+ * RE-INTRODUCED anywhere in the runtime dirs.
15
+ *
16
+ * Rule: in src/monitoring/ and src/server/, no synchronous child-process call
17
+ * (`spawnSync` / `execSync` / `execFileSync`) may invoke a process-enumeration
18
+ * command (`ps`, `pgrep`, `lsof`, `pkill`) given as a string literal. Use the
19
+ * async equivalent (`promisify(execFile)` / `execFileAsync`) so the scan yields
20
+ * the event loop. tmux/git/etc. calls are NOT covered (they are bounded and not
21
+ * the load-sensitive enumeration commands this incident was about).
22
+ *
23
+ * Escape hatch (closed, reviewed): a genuinely one-shot, bounded call that
24
+ * cannot run on a cadence may carry an inline justification comment on the same
25
+ * line or the line directly above:
26
+ * // lint-allow-blocking-scan: <why this can't run periodically>
27
+ *
28
+ * Exit codes: 0 — clean; 1 — at least one violation.
29
+ *
30
+ * Usage:
31
+ * node scripts/lint-no-blocking-process-scans.js # full repo
32
+ * node scripts/lint-no-blocking-process-scans.js --staged # staged files
33
+ */
34
+
35
+ import fs from 'node:fs';
36
+ import path from 'node:path';
37
+ import { execSync } from 'node:child_process';
38
+ import { fileURLToPath } from 'node:url';
39
+
40
+ const __filename = fileURLToPath(import.meta.url);
41
+ const ROOT = path.resolve(path.dirname(__filename), '..');
42
+
43
+ // Only the runtime hot dirs — where a periodic monitor stalling the loop is the
44
+ // documented failure. (src/core has tmux-heavy session plumbing that is a
45
+ // separate, bigger conversion tracked in the post-mortem follow-up.)
46
+ const SCAN_DIRS = ['src/monitoring', 'src/server'];
47
+ const EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.mjs', '.cjs']);
48
+
49
+ // A synchronous child-process call whose command literal is a process-scan tool.
50
+ // Matches e.g. spawnSync('pgrep', …) execFileSync('lsof', …) execSync('ps …')
51
+ const VIOLATION = /\b(spawnSync|execSync|execFileSync)\s*\(\s*['"`]\s*(ps|pgrep|lsof|pkill)\b/;
52
+ const ALLOW = /lint-allow-blocking-scan:/;
53
+
54
+ const inScanDir = (p) => SCAN_DIRS.some((d) => p.startsWith(d + '/'));
55
+
56
+ function listFiles() {
57
+ if (process.argv.includes('--staged')) {
58
+ const out = execSync('git diff --cached --name-only', { cwd: ROOT, encoding: 'utf-8' });
59
+ // Only the runtime hot dirs are enforced for staged scans.
60
+ return out.split('\n').filter(Boolean).filter((p) => inScanDir(p.split(path.sep).join('/')));
61
+ }
62
+ // Explicit file args are checked as-given (targeted use / self-tests).
63
+ const explicit = process.argv.slice(2).filter((a) => !a.startsWith('--'));
64
+ if (explicit.length) return explicit;
65
+
66
+ const files = [];
67
+ const walk = (dir) => {
68
+ let entries;
69
+ try { entries = fs.readdirSync(dir, { withFileTypes: true }); } catch { return; }
70
+ for (const e of entries) {
71
+ if (e.name === 'node_modules' || e.name === '.git' || e.name === 'dist') continue;
72
+ const full = path.join(dir, e.name);
73
+ if (e.isDirectory()) walk(full);
74
+ else if (EXTENSIONS.has(path.extname(e.name))) files.push(path.relative(ROOT, full));
75
+ }
76
+ };
77
+ for (const d of SCAN_DIRS) walk(path.join(ROOT, d));
78
+ return files;
79
+ }
80
+
81
+ let violations = 0;
82
+ for (const rel of listFiles()) {
83
+ const normalized = rel.split(path.sep).join('/');
84
+ if (!EXTENSIONS.has(path.extname(normalized))) continue;
85
+ const full = path.isAbsolute(normalized) ? normalized : path.join(ROOT, normalized);
86
+ let content;
87
+ try { content = fs.readFileSync(full, 'utf-8'); } catch { continue; }
88
+ const lines = content.split('\n');
89
+ for (let i = 0; i < lines.length; i++) {
90
+ const trimmed = lines[i].trimStart();
91
+ if (/^(\/\/|\*|\/\*)/.test(trimmed)) continue; // comment-only mention
92
+ if (!VIOLATION.test(lines[i])) continue;
93
+ // Inline justification on this line or within the comment block directly
94
+ // above (scan back up to 4 lines so a multi-line reason is honoured).
95
+ let allowed = false;
96
+ for (let j = i; j >= Math.max(0, i - 6); j--) {
97
+ if (ALLOW.test(lines[j])) { allowed = true; break; }
98
+ }
99
+ if (allowed) continue;
100
+ console.error(
101
+ `${normalized}:${i + 1} — synchronous process scan (ps/pgrep/lsof/pkill) on the runtime hot path. ` +
102
+ `Blocks the event loop and starves /health under load (topic 21816 root cause #4). ` +
103
+ `Use an async exec (promisify(execFile)/execFileAsync), or, if it is a genuinely one-shot bounded call, ` +
104
+ `add an inline "// lint-allow-blocking-scan: <reason>".`,
105
+ );
106
+ violations++;
107
+ }
108
+ }
109
+
110
+ if (violations > 0) {
111
+ console.error(`\nlint-no-blocking-process-scans: ${violations} violation(s). ` +
112
+ `See docs/postmortems/2026-06-07-server-temporarily-down.md (root cause #4).`);
113
+ process.exit(1);
114
+ }
115
+ console.log('lint-no-blocking-process-scans: clean');
package/scripts/lint-no-direct-destructive.js CHANGED
@@ -77,6 +77,9 @@ const ALLOWLIST = new Set([
77
77
  // Same bootstrap-escape pattern (june15-headless-spawn-reroute funnel
78
78
  // lint) — read-only `git diff --cached --name-only` only.
79
79
  'scripts/lint-no-unfunneled-headless-launch.js',
80
+ // Same bootstrap-escape pattern (blocking-process-scan lint, topic 21816
81
+ // post-mortem #3) — read-only `git diff --cached --name-only` only.
82
+ 'scripts/lint-no-blocking-process-scans.js',
80
83
  // Postinstall bootstrap script — runs before TypeScript is compiled and
81
84
  // before SafeFsExecutor is available. CommonJS, can't use ESM imports.
82
85
  'scripts/fix-better-sqlite3.cjs',
package/src/data/builtin-manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "$schema": "./builtin-manifest.schema.json",
3
3
  "schemaVersion": 1,
4
- "generatedAt": "2026-06-07T22:18:32.589Z",
5
- "instarVersion": "1.3.414",
4
+ "generatedAt": "2026-06-07T23:08:24.008Z",
5
+ "instarVersion": "1.3.416",
6
6
  "entryCount": 199,
7
7
  "entries": {
8
8
  "hook:session-start": {
@@ -418,7 +418,7 @@
418
418
  "type": "route-group",
419
419
  "domain": "monitoring",
420
420
  "sourcePath": "src/server/routes.ts",
421
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
421
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
422
422
  "since": "2025-01-01"
423
423
  },
424
424
  "route-group:agents": {
@@ -426,7 +426,7 @@
426
426
  "type": "route-group",
427
427
  "domain": "sessions",
428
428
  "sourcePath": "src/server/routes.ts",
429
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
429
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
430
430
  "since": "2025-01-01"
431
431
  },
432
432
  "route-group:backups": {
@@ -434,7 +434,7 @@
434
434
  "type": "route-group",
435
435
  "domain": "operations",
436
436
  "sourcePath": "src/server/routes.ts",
437
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
437
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
438
438
  "since": "2025-01-01"
439
439
  },
440
440
  "route-group:git": {
@@ -442,7 +442,7 @@
442
442
  "type": "route-group",
443
443
  "domain": "coordination",
444
444
  "sourcePath": "src/server/routes.ts",
445
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
445
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
446
446
  "since": "2025-01-01"
447
447
  },
448
448
  "route-group:memory": {
@@ -450,7 +450,7 @@
450
450
  "type": "route-group",
451
451
  "domain": "memory",
452
452
  "sourcePath": "src/server/routes.ts",
453
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
453
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
454
454
  "since": "2025-01-01"
455
455
  },
456
456
  "route-group:semantic": {
@@ -458,7 +458,7 @@
458
458
  "type": "route-group",
459
459
  "domain": "memory",
460
460
  "sourcePath": "src/server/routes.ts",
461
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
461
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
462
462
  "since": "2025-01-01"
463
463
  },
464
464
  "route-group:status": {
@@ -466,7 +466,7 @@
466
466
  "type": "route-group",
467
467
  "domain": "monitoring",
468
468
  "sourcePath": "src/server/routes.ts",
469
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
469
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
470
470
  "since": "2025-01-01"
471
471
  },
472
472
  "route-group:capabilities": {
@@ -474,7 +474,7 @@
474
474
  "type": "route-group",
475
475
  "domain": "mapping",
476
476
  "sourcePath": "src/server/routes.ts",
477
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
477
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
478
478
  "since": "2025-01-01"
479
479
  },
480
480
  "route-group:project-map": {
@@ -482,7 +482,7 @@
482
482
  "type": "route-group",
483
483
  "domain": "mapping",
484
484
  "sourcePath": "src/server/routes.ts",
485
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
485
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
486
486
  "since": "2025-01-01"
487
487
  },
488
488
  "route-group:coherence": {
@@ -490,7 +490,7 @@
490
490
  "type": "route-group",
491
491
  "domain": "coherence",
492
492
  "sourcePath": "src/server/routes.ts",
493
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
493
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
494
494
  "since": "2025-01-01"
495
495
  },
496
496
  "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
498
498
  "type": "route-group",
499
499
  "domain": "sessions",
500
500
  "sourcePath": "src/server/routes.ts",
501
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
501
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
502
502
  "since": "2025-01-01"
503
503
  },
504
504
  "route-group:context": {
@@ -506,7 +506,7 @@
506
506
  "type": "route-group",
507
507
  "domain": "context",
508
508
  "sourcePath": "src/server/routes.ts",
509
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
509
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
510
510
  "since": "2025-01-01"
511
511
  },
512
512
  "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
514
514
  "type": "route-group",
515
515
  "domain": "coherence",
516
516
  "sourcePath": "src/server/routes.ts",
517
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
517
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
518
518
  "since": "2025-01-01"
519
519
  },
520
520
  "route-group:canonical-state": {
@@ -522,7 +522,7 @@
522
522
  "type": "route-group",
523
523
  "domain": "state",
524
524
  "sourcePath": "src/server/routes.ts",
525
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
525
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
526
526
  "since": "2025-01-01"
527
527
  },
528
528
  "route-group:ci": {
@@ -530,7 +530,7 @@
530
530
  "type": "route-group",
531
531
  "domain": "monitoring",
532
532
  "sourcePath": "src/server/routes.ts",
533
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
533
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
534
534
  "since": "2025-01-01"
535
535
  },
536
536
  "route-group:sessions": {
@@ -538,7 +538,7 @@
538
538
  "type": "route-group",
539
539
  "domain": "sessions",
540
540
  "sourcePath": "src/server/routes.ts",
541
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
541
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
542
542
  "since": "2025-01-01"
543
543
  },
544
544
  "route-group:jobs": {
@@ -546,7 +546,7 @@
546
546
  "type": "route-group",
547
547
  "domain": "scheduling",
548
548
  "sourcePath": "src/server/routes.ts",
549
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
549
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
550
550
  "since": "2025-01-01"
551
551
  },
552
552
  "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
554
554
  "type": "route-group",
555
555
  "domain": "scheduling",
556
556
  "sourcePath": "src/server/routes.ts",
557
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
557
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
558
558
  "since": "2025-01-01"
559
559
  },
560
560
  "route-group:telegram": {
@@ -562,7 +562,7 @@
562
562
  "type": "route-group",
563
563
  "domain": "communication",
564
564
  "sourcePath": "src/server/routes.ts",
565
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
565
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
566
566
  "since": "2025-01-01"
567
567
  },
568
568
  "route-group:attention": {
@@ -570,7 +570,7 @@
570
570
  "type": "route-group",
571
571
  "domain": "communication",
572
572
  "sourcePath": "src/server/routes.ts",
573
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
573
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
574
574
  "since": "2025-01-01"
575
575
  },
576
576
  "route-group:relationships": {
@@ -578,7 +578,7 @@
578
578
  "type": "route-group",
579
579
  "domain": "relationships",
580
580
  "sourcePath": "src/server/routes.ts",
581
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
581
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
582
582
  "since": "2025-01-01"
583
583
  },
584
584
  "route-group:feedback": {
@@ -586,7 +586,7 @@
586
586
  "type": "route-group",
587
587
  "domain": "feedback",
588
588
  "sourcePath": "src/server/routes.ts",
589
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
589
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
590
590
  "since": "2025-01-01"
591
591
  },
592
592
  "route-group:updates": {
@@ -594,7 +594,7 @@
594
594
  "type": "route-group",
595
595
  "domain": "updates",
596
596
  "sourcePath": "src/server/routes.ts",
597
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
597
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
598
598
  "since": "2025-01-01"
599
599
  },
600
600
  "route-group:dispatches": {
@@ -602,7 +602,7 @@
602
602
  "type": "route-group",
603
603
  "domain": "dispatches",
604
604
  "sourcePath": "src/server/routes.ts",
605
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
605
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
606
606
  "since": "2025-01-01"
607
607
  },
608
608
  "route-group:quota": {
@@ -610,7 +610,7 @@
610
610
  "type": "route-group",
611
611
  "domain": "monitoring",
612
612
  "sourcePath": "src/server/routes.ts",
613
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
613
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
614
614
  "since": "2025-01-01"
615
615
  },
616
616
  "route-group:publishing": {
@@ -618,7 +618,7 @@
618
618
  "type": "route-group",
619
619
  "domain": "publishing",
620
620
  "sourcePath": "src/server/routes.ts",
621
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
621
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
622
622
  "since": "2025-01-01"
623
623
  },
624
624
  "route-group:private-views": {
@@ -626,7 +626,7 @@
626
626
  "type": "route-group",
627
627
  "domain": "publishing",
628
628
  "sourcePath": "src/server/routes.ts",
629
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
629
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
630
630
  "since": "2025-01-01"
631
631
  },
632
632
  "route-group:tunnel": {
@@ -634,7 +634,7 @@
634
634
  "type": "route-group",
635
635
  "domain": "networking",
636
636
  "sourcePath": "src/server/routes.ts",
637
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
637
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
638
638
  "since": "2025-01-01"
639
639
  },
640
640
  "route-group:events": {
@@ -642,7 +642,7 @@
642
642
  "type": "route-group",
643
643
  "domain": "networking",
644
644
  "sourcePath": "src/server/routes.ts",
645
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
645
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
646
646
  "since": "2025-01-01"
647
647
  },
648
648
  "route-group:evolution": {
@@ -650,7 +650,7 @@
650
650
  "type": "route-group",
651
651
  "domain": "evolution",
652
652
  "sourcePath": "src/server/routes.ts",
653
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
653
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
654
654
  "since": "2025-01-01"
655
655
  },
656
656
  "route-group:watchdog": {
@@ -658,7 +658,7 @@
658
658
  "type": "route-group",
659
659
  "domain": "monitoring",
660
660
  "sourcePath": "src/server/routes.ts",
661
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
661
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
662
662
  "since": "2025-01-01"
663
663
  },
664
664
  "route-group:topic-memory": {
@@ -666,7 +666,7 @@
666
666
  "type": "route-group",
667
667
  "domain": "memory",
668
668
  "sourcePath": "src/server/routes.ts",
669
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
669
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
670
670
  "since": "2025-01-01"
671
671
  },
672
672
  "route-group:state-sync": {
@@ -674,7 +674,7 @@
674
674
  "type": "route-group",
675
675
  "domain": "coordination",
676
676
  "sourcePath": "src/server/routes.ts",
677
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
677
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
678
678
  "since": "2025-01-01"
679
679
  },
680
680
  "route-group:intent": {
@@ -682,7 +682,7 @@
682
682
  "type": "route-group",
683
683
  "domain": "intent",
684
684
  "sourcePath": "src/server/routes.ts",
685
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
685
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
686
686
  "since": "2025-01-01"
687
687
  },
688
688
  "route-group:triage": {
@@ -690,7 +690,7 @@
690
690
  "type": "route-group",
691
691
  "domain": "safety",
692
692
  "sourcePath": "src/server/routes.ts",
693
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
693
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
694
694
  "since": "2025-01-01"
695
695
  },
696
696
  "route-group:operations": {
@@ -698,7 +698,7 @@
698
698
  "type": "route-group",
699
699
  "domain": "safety",
700
700
  "sourcePath": "src/server/routes.ts",
701
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
701
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
702
702
  "since": "2025-01-01"
703
703
  },
704
704
  "route-group:sentinel": {
@@ -706,7 +706,7 @@
706
706
  "type": "route-group",
707
707
  "domain": "safety",
708
708
  "sourcePath": "src/server/routes.ts",
709
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
709
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
710
710
  "since": "2025-01-01"
711
711
  },
712
712
  "route-group:trust": {
@@ -714,7 +714,7 @@
714
714
  "type": "route-group",
715
715
  "domain": "safety",
716
716
  "sourcePath": "src/server/routes.ts",
717
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
717
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
718
718
  "since": "2025-01-01"
719
719
  },
720
720
  "route-group:monitoring": {
@@ -722,7 +722,7 @@
722
722
  "type": "route-group",
723
723
  "domain": "monitoring",
724
724
  "sourcePath": "src/server/routes.ts",
725
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
725
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
726
726
  "since": "2025-01-01"
727
727
  },
728
728
  "route-group:commitments": {
@@ -730,7 +730,7 @@
730
730
  "type": "route-group",
731
731
  "domain": "commitments",
732
732
  "sourcePath": "src/server/routes.ts",
733
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
733
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
734
734
  "since": "2025-01-01"
735
735
  },
736
736
  "route-group:episodes": {
@@ -738,7 +738,7 @@
738
738
  "type": "route-group",
739
739
  "domain": "memory",
740
740
  "sourcePath": "src/server/routes.ts",
741
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
741
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
742
742
  "since": "2025-01-01"
743
743
  },
744
744
  "route-group:messages": {
@@ -746,7 +746,7 @@
746
746
  "type": "route-group",
747
747
  "domain": "coordination",
748
748
  "sourcePath": "src/server/routes.ts",
749
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
749
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
750
750
  "since": "2025-01-01"
751
751
  },
752
752
  "route-group:system-reviews": {
@@ -754,7 +754,7 @@
754
754
  "type": "route-group",
755
755
  "domain": "monitoring",
756
756
  "sourcePath": "src/server/routes.ts",
757
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
757
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
758
758
  "since": "2025-01-01"
759
759
  },
760
760
  "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
770
770
  "type": "route-group",
771
771
  "domain": "security",
772
772
  "sourcePath": "src/server/routes.ts",
773
- "contentHash": "0f4f281893adb0a91ef6033338c8ed90d06df98703aa151902311747aca56624",
773
+ "contentHash": "2bf82e93f63457aac6d519878ce016271a27af12cda01791d632fd594ff73092",
774
774
  "since": "2025-01-01"
775
775
  },
776
776
  "cli:init": {
package/upgrades/1.3.415.md ADDED
@@ -0,0 +1,32 @@
1
+ # Upgrade Guide — vNEXT
2
+
3
+ <!-- assembled-by: assemble-next-md -->
4
+ <!-- bump: patch -->
5
+
6
+ ## What Changed
7
+
8
+ Each subscription account now carries an optional `email`, alongside its nickname,
9
+ so same-org accounts are distinguishable (e.g. "SageMind - Justin" vs
10
+ "SageMind - Adriana"). The email is **auto-populated from the account's own login
11
+ record** (`oauthAccount.emailAddress` in its config home) on each quota poll — so
12
+ the stored email always reflects which account actually authenticated, and a login
13
+ into the wrong account surfaces instead of hiding. Added: `email` on
14
+ `SubscriptionAccount` / add / update (additive-optional), a `readAccountEmail`
15
+ helper + poll-time auto-fill in `QuotaPoller`, pass-through on the POST/PATCH
16
+ `/subscription-pool` routes, and the email rendered under the nickname on the
17
+ dashboard Subscriptions tab. The email is a public identifier — never a token.
18
+
19
+ ## What to Tell Your User
20
+
21
+ Your subscription accounts now show their email next to the nickname, so when you
22
+ have several on the same org you can tell them apart at a glance. I fill the email
23
+ in automatically from the real login, so it always matches the account that
24
+ actually signed in.
25
+
26
+ ## Summary of New Capabilities
27
+
28
+ - **Account email** — each pool account stores its email (the disambiguator across
29
+ same-org accounts), shown on the dashboard.
30
+ - **Auto-filled from reality** — the email comes from the account's own login
31
+ record on each poll, so it reflects the truly-authenticated account (catches a
32
+ wrong-account login rather than hiding it).
package/upgrades/1.3.416.md ADDED
@@ -0,0 +1,42 @@
1
+ # Upgrade Guide — vNEXT
2
+
3
+ <!-- assembled-by: assemble-next-md -->
4
+ <!-- bump: patch -->
5
+
6
+ ## What Changed
7
+
8
+ New CI lint `scripts/lint-no-blocking-process-scans.js` (wired into `npm run lint`):
9
+ in `src/monitoring/` and `src/server/`, a synchronous `ps`/`pgrep`/`lsof`/`pkill`
10
+ call (`spawnSync`/`execSync`/`execFileSync` with a literal command) now fails the
11
+ build. This is post-mortem standard #3 from the 2026-06-07 "server temporarily
12
+ down" incident (topic 21816): synchronous process-enumeration scans on a cadence
13
+ blocked the event loop and starved `/health` under load, which made the supervisor
14
+ restart an alive server → the restart loop. #972 fixed the SessionWatchdog; this
15
+ lint stops the class from being re-introduced anywhere in the runtime dirs.
16
+
17
+ ## What to Tell Your User
18
+
19
+ Internal hardening — nothing user-visible. It makes a specific cause of the
20
+ "server temporarily down under load" problem impossible to reintroduce.
21
+
22
+ ## Summary of New Capabilities
23
+
24
+ - `npm run lint` now fails on a synchronous process scan in the runtime hot dirs.
25
+ Use the async exec (`promisify(execFile)`/`execFileAsync`) instead, or — for a
26
+ genuinely one-shot bounded call — add an inline `// lint-allow-blocking-scan:
27
+ <reason>` (a written, reviewed exception).
28
+
29
+ ## Evidence
30
+
31
+ `tests/unit/lint-no-blocking-process-scans.test.ts` (5 tests, all passing); the
32
+ lint runs clean on the real tree and flags synthetic violations. tsc clean.
33
+ causalAutopsy: incident-derived — direct implementation of post-mortem standard #3
34
+ (docs/postmortems/2026-06-07-server-temporarily-down.md, root cause #4); the prior
35
+ #972 fix addressed one offender, this prevents recurrence of the class.
36
+
37
+ ## Scope (honest)
38
+
39
+ CI-only; no runtime behavior change (the two source edits are comment annotations
40
+ allowlisting existing bounded `lsof` one-shots). Does not cover tmux/git calls
41
+ (bounded, out of scope) or scans whose command is passed via a variable
42
+ (pre-existing, tracked). A ratchet, not a complete static proof.