instar 1.3.428 → 1.3.429

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.428",
+  "version": "1.3.429",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-08T06:00:17.512Z",
-  "instarVersion": "1.3.428",
+  "generatedAt": "2026-06-08T06:55:11.189Z",
+  "instarVersion": "1.3.429",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1122,7 +1122,7 @@
       "type": "template",
       "domain": "operations",
       "sourcePath": "src/templates/scripts/convergence-check.sh",
-      "contentHash": "0908e2775c497fe526b817563b6f8e29ec4d6bedaf5521a87e625857afc367c3",
+      "contentHash": "4c67cf4d7dc23ac21a1b658e8acf3d3f925c1610afab9291d2cff8d48920fc33",
       "since": "2025-01-01"
     },
     "template:emit-session-clock.sh": {
@@ -1538,7 +1538,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "02ef1d845e3c49eba88d81c593bc621105d7e3c2f943cccaafcb9194ab5eb4c9",
+      "contentHash": "58ca88e808087ef78a28a17ac93387acfa661a4e66a152197bb043218465f85f",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/templates/scripts/convergence-check.sh

@@ -132,7 +132,7 @@ PY
       continue
     fi
     # Skip well-known service domains + common agent tunnel domains.
-    if echo "$url" | grep -qE '(github\.com|vercel\.app|vercel\.com|netlify\.app|netlify\.com|npmjs\.com|npmjs\.org|cloudflare\.com|google\.com|twitter\.com|x\.com|youtube\.com|reddit\.com|discord\.com|discord\.gg|telegram\.org|t\.me|localhost|127\.0\.0\.1|stackoverflow\.com|developer\.mozilla\.org|docs\.anthropic\.com|anthropic\.com|openai\.com|claude\.ai|notion\.so|linear\.app|fly\.io|render\.com|railway\.app|heroku\.com|amazonaws\.com|azure\.com|gitlab\.com|bitbucket\.org|docker\.com|hub\.docker\.com|pypi\.org|crates\.io|rubygems\.org|pkg\.go\.dev|wikipedia\.org|medium\.com|substack\.com|circle\.so|ghost\.io|telegraph\.ph)'; then
+    if echo "$url" | grep -qE '(github\.com|vercel\.app|vercel\.com|netlify\.app|netlify\.com|npmjs\.com|npmjs\.org|cloudflare\.com|google\.com|twitter\.com|x\.com|youtube\.com|reddit\.com|discord\.com|discord\.gg|telegram\.org|t\.me|localhost|127\.0\.0\.1|stackoverflow\.com|developer\.mozilla\.org|docs\.anthropic\.com|anthropic\.com|openai\.com|claude\.ai|claude\.com|notion\.so|linear\.app|fly\.io|render\.com|railway\.app|heroku\.com|amazonaws\.com|azure\.com|gitlab\.com|bitbucket\.org|docker\.com|hub\.docker\.com|pypi\.org|crates\.io|rubygems\.org|pkg\.go\.dev|wikipedia\.org|medium\.com|substack\.com|circle\.so|ghost\.io|telegraph\.ph)'; then
       continue
     fi
     UNFAMILIAR_URLS="$UNFAMILIAR_URLS  $url\n"

package/upgrades/1.3.429.md

@@ -0,0 +1,81 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The pre-messaging convergence check's `url_provenance` allowlist now trusts
+`claude.com` alongside the already-listed `claude.ai`, `anthropic.com`, and
+`docs.anthropic.com`. The same domain was added to both copies that must agree:
+the primary script (`src/templates/scripts/convergence-check.sh`) and the
+can't-find-template fallback in `PostUpdateMigrator.getConvergenceCheckInline()`.
+This stops the grounding-before-messaging hook from false-flagging Claude
+subscription OAuth login links (which live on `claude.com`) as possibly-fabricated.
+
+The enrollment wizard now attaches an operator-facing heads-up to a pending Claude
+login, warning that a brand-new Claude account login asks for TWO codes in sequence
+— an email-verification code first, then the sign-in code. `PendingLogin` gains an
+optional `notice` field; `EnrollmentWizard.flowNotice(kind)` produces the warning
+for the `url-code-paste` (Claude) flow and nothing for `device-code` (Codex); the
+dashboard's Pending Logins panel renders it above the code. Codex enrollment is
+unchanged.
+
+## What to Tell Your User
+
+When I send you a Claude sign-in link to enroll a subscription account, it now goes
+to you directly. Before, my own link-safety check mistook the official claude.com
+sign-in page for a possibly-made-up address and made me wrap it in a private page
+first — that false alarm is gone.
+
+When I set up a new Claude account for you, the login card now warns you up front
+that Claude will ask for two codes in a row — the email-verification code first,
+then the sign-in code. No more being surprised by the second prompt.
+
+## Summary of New Capabilities
+
+- **claude.com is a trusted domain** in the pre-messaging link-safety check — Claude
+  OAuth login links deliver directly instead of being flagged as unfamiliar.
+- Existing agents get it automatically (the updater re-writes the deployed script
+  from the template on every update); no separate migration.
+
+- **Two-code heads-up on Claude enrollment** — the pending-login card explains the
+  email-code-then-sign-in-code sequence before you start.
+- **`PendingLogin.notice`** — an optional, sanitized, operator-facing flow heads-up
+  (extensible to other flow quirks later); Codex/device-code flows carry none.
+- Ships with the normal instar update (server + dashboard); no migration needed.
+
+## Evidence
+
+Found during live subscription enrollment (topic 20905): driving a fresh Claude
+login produces a sign-in URL on `claude.com`, and delivering it tripped the
+`URL_PROVENANCE` gate because `claude.com` was absent from the allowlist while its
+sibling `claude.ai` was present.
+
+Reproduction — pipe an outbound message containing a `claude.com` link through the
+gate:
+- **Before:** `echo 'Sign in: https://claude.com/oauth/authorize?code=abc' | bash
+  .instar/scripts/convergence-check.sh` → exit 1, output contains `URL_PROVENANCE`
+  (so the link had to be wrapped in a private view to be sent).
+- **After:** same input → exit 0, no `URL_PROVENANCE` flag.
+
+A sibling test still proves a genuinely fabricated domain (`fabricated-domain.xyz`)
+is flagged, so only this one first-party domain was loosened. Locked in by a new
+`convergence-check.test.ts` case.
+
+Found during live enrollment (topic 20905): enrolling a fresh Claude account, the
+operator was asked for an email-verification code first and then a separate sign-in
+code, with nothing explaining the second prompt — reported as confusing.
+
+Reproduction / before-after:
+- **Before:** starting a `url-code-paste` enrollment produced a pending login with
+  only a code + URL; the two-code sequence was undocumented, so the operator hit an
+  unexplained second code prompt.
+- **After:** the same enrollment produces a pending login whose `notice` reads
+  "a brand-new Claude login often asks for TWO codes in order — first an
+  email-verification code … then the sign-in code …", shown on the dashboard card.
+  A `device-code` (Codex) enrollment still carries no notice.
+
+Locked in by new `enrollment-wizard.test.ts`, `pending-login-store.test.ts`, and
+`subscriptions-render.test.ts` cases (notice present for Claude / absent for Codex;
+rendered when present / element omitted when not).

package/upgrades/side-effects/claude-com-url-allowlist.md

@@ -0,0 +1,41 @@
+# Side-effects review — claude.com in the URL-provenance allowlist
+
+## Change
+
+Adds `claude.com` to the `url_provenance` allowlist of the pre-messaging
+convergence check, in BOTH copies that must stay in sync:
+- `src/templates/scripts/convergence-check.sh` (the primary script, read at runtime)
+- `src/core/PostUpdateMigrator.ts` → `getConvergenceCheckInline()` (the fallback
+  emitted only when the template file can't be found)
+
+It sits next to the already-present `claude.ai` and `anthropic.com` entries.
+
+## Why
+
+The Claude subscription OAuth login link lives on `claude.com` (Anthropic
+consolidated the sign-in surface there; `claude.ai` is the sibling already on the
+list). During live enrollment testing (topic 20905) the grounding-before-messaging
+hook false-flagged the login link as `URL_PROVENANCE` (a possibly-fabricated
+domain), which forced wrapping every OAuth link in a private view before it could
+be sent to the operator. Allowlisting `claude.com` lets enrollment links be
+delivered directly.
+
+## Side effects considered
+
+- **Weakens the provenance gate for claude.com?** Marginally and acceptably:
+  `claude.com` is Anthropic's official first-party domain (same trust class as the
+  already-listed `claude.ai`, `anthropic.com`, `docs.anthropic.com`). The allowlist
+  exists precisely to stop second-guessing well-known service domains. The gate
+  still flags every genuinely unfamiliar/fabricated domain — the regression test
+  keeps `fabricated-domain.xyz` flagged.
+- **Drift between the two copies.** Both are edited identically in this change. The
+  template is authoritative; the inline is a can't-find-template fallback. No new
+  divergence introduced.
+- **Migration parity.** Existing agents receive the updated allowlist because
+  `PostUpdateMigrator` re-writes `.instar/scripts/convergence-check.sh` from the
+  template on every update run (built-in script, always overwritten) — no separate
+  migration needed; the edit to the template IS the migration path.
+- **No API, config, schema, or route surface touched.** Behavior-only change to a
+  heuristic gate. No new dependencies. Idempotent.
+- **Blast radius:** one extra alternation in one regex, in two places. Reversible
+  by removing the `claude\.com` token.

package/upgrades/side-effects/enroll-two-code-warning.md

@@ -0,0 +1,42 @@
+# Side-effects review — enrollment two-code heads-up
+
+## Change
+
+Surfaces an operator-facing heads-up on a pending login about the Claude
+url-code-paste flow's two-code sequence (email-verification code first, then the
+sign-in code). Three pieces:
+- `PendingLoginStore`: new optional `notice?: string` on `PendingLogin` +
+  `IssueLoginInput`; `issue()` persists it when present (omitted otherwise).
+- `EnrollmentWizard`: new `static flowNotice(kind)` returns the two-code warning
+  for `url-code-paste` and `undefined` for `device-code`; `start()` attaches it.
+- `dashboard/subscriptions.js`: `renderPendingLogins` shows a `sub-pending-notice`
+  row (sanitized text) when a notice is present.
+
+## Why
+
+Live enrollment testing (topic 20905): enrolling a fresh Claude account makes
+Anthropic ask for TWO codes in sequence — an email-verification code, then the
+sign-in code — and the operator found the unexplained second prompt confusing. The
+wizard now tells them what to expect up front.
+
+## Side effects considered
+
+- **Backward compatibility / persistence.** `notice` is optional and omitted when
+  absent, so existing pending-login JSON records (written before this change) load
+  unchanged — no migration. `issue()` only adds the key when a non-empty notice is
+  passed, matching the file's existing `...(x ? {x} : {})` style.
+- **Not a secret.** The notice is static guidance text — never a credential, code,
+  or URL. It passes the store's `assertNoCredentialFields` (it's a fixed string set
+  by the wizard, not derived from login input).
+- **XSS / display safety.** Rendered through the existing `sanitizeForDisplay`
+  (NFKC + control/bidi strip + grapheme cap) as inert text in a `div` — never an
+  href or innerHTML. Covered by the render tests (notice present → shown; absent →
+  element omitted) alongside the existing javascript:-URL inertness test.
+- **device-code (Codex) flows are unchanged** — `flowNotice('device-code')` is
+  undefined, so no notice is attached and the row renders exactly as before.
+- **Reach to existing agents.** Server code (PendingLoginStore/EnrollmentWizard)
+  and the dashboard asset ship with the instar package, so agents get this on the
+  normal package update — no `.instar/`-copied file and no PostUpdateMigrator entry
+  required.
+- **Blast radius:** one optional field + one pure static method + one conditional
+  render row. Reversible by dropping the field.