instar 1.3.450 → 1.3.451

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.450",
+  "version": "1.3.451",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-09T19:51:52.286Z",
-  "instarVersion": "1.3.450",
+  "generatedAt": "2026-06-09T23:03:13.458Z",
+  "instarVersion": "1.3.451",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "2ee1fcd31c96470a77ceb7efbbac2b2267e60260820d3caff565b7212c68c5c5",
+      "contentHash": "cecdc2be8251e383ea0c07ecfaaffd53528c567e11da33097eb34f9bc10b25b8",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "9a67d059090c2fdd1e2a3ca7355ea66099ed6b321eac6d7820c152a6ea81b220",
+      "contentHash": "c8c6cc7ddf715f30a2781db6f2663f8e9331901ce0dabd900ef43de0dfd777b7",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/src/scaffold/templates.ts

@@ -713,6 +713,11 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 - **Rate-limit events** (Phase A): every circuit-breaker trip (the account got throttled) and session-sentinel detection is written down so it survives restarts: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/resources/rate-limits?sinceHours=24"\` → \`{ summary: { circuitOpenCount, tripsPerHour, ... }, byKind, events }\`.
 - **When to use** (PROACTIVE): when the user asks "how much CPU / memory am I using right now?", "what's eating resources?", "is this agent heavy?" → \`GET /resources/summary\` (or point them at the Resource Usage dashboard tab). When asked "how many times were we throttled today?" / "is the rate-limit pressure getting worse?" → \`GET /resources/rate-limits\`. Read the durable numbers instead of guessing. (Spec: \`docs/specs/per-agent-resource-ledger.md\`.)
 
+**Growth & Milestone Analyst** — The proactive answer to "are my initiatives being left behind, are features earning their way through the maturity path, and are patterns being extracted from how I approve specs / correct the agent?" Composes the existing tracking surfaces (InitiativeTracker rollout stages + staleness, ApprovalLedger approve-vs-change, CorrectionLedger recurrence) into ONE opinionated digest with explicit notify-rules. The key lever: a TIGHT incubation window whose EXPIRY is itself the trigger — a feature can never be silently left behind, because it either proved itself (→ promote?) or it never did (→ extend/fix/kill?). Promotion requires REAL proof-of-life, never elapsed time alone. **Ships DARK** (\`monitoring.growthAnalyst.enabled\` false) and rides the Graduated Feature Rollout track; this slice COMPUTES + exposes findings via read routes and does NOT send to Telegram yet.
+- Digest: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/growth/digest"\` → \`{ generatedAt, calm, summary, findings, counts, nextWindowClosesInDays }\`. Findings only: \`GET /growth/findings\`. Status: \`GET /growth/status\`. Recompute now: \`POST /growth/tick\`.
+- Findings carry a \`rule\` (R1 promotion-ready / R2 incubation-expired-unproven / R3 initiative-stalling / R4 spec-pattern / R5 correction-pattern) + a \`suggestedAction\`. When off, every route 503s.
+- **When to use** (PROACTIVE): "are any features ready to promote / being left behind?" / "what patterns are showing up in how I approve specs or correct you?" → \`GET /growth/digest\`. Tune windows/rules under \`monitoring.growthAnalyst\` (\`incubationWindows\`, \`proofOfLifeMinActivations\`, per-rule flags). (Spec: \`docs/specs/PROACTIVE-GROWTH-MILESTONE-ANALYST-SPEC.md\`.)
+
 **Parallel-Work Awareness** — See what ALL your hands are doing across topics/sessions at once (like a king with a council). A cross-topic read index over your existing per-topic intent: every topic, its current focus, high-specificity tags, and whether a session is live on it. This is the antidote to self-blindness — duplicating work another of your topics already did.
 - Check: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/parallel-work/activities"\` → \`{ count, runningCount, activities: [{ topicId, focus, tags, running, updatedAt }] }\`.
 - **When to use** (PROACTIVE): before starting substantial new work in a topic, glance here to see if another topic is already on it; when the user asks "what am I working on across topics?" / "is another session already doing this?". (The proactive overlap councilor — ParallelWorkSentinel — is Phase B, ships dark.) Read-only; never gates. Spec: \`docs/specs/parallel-activity-coherence.md\`.

package/upgrades/1.3.451.md

@@ -0,0 +1,57 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Added **`GrowthMilestoneAnalyst`** — a new proactive growth & milestone analyst
+(`src/monitoring/`). It composes the existing tracking surfaces (`InitiativeTracker`
+rollout stages + staleness, `ApprovalLedger` approve-vs-change, `CorrectionLedger`
+recurrence) into one opinionated digest with five explicit notify-rules:
+
+- **R1** promotion-ready (a feature past its incubation window that proved itself)
+- **R2** incubation-expired-unproven (past window, never proved itself → extend/repair/retire)
+- **R3** initiative-stalling (reuses `tracker.digest()`)
+- **R4** spec approve-vs-change pattern
+- **R5** recurring-correction pattern
+
+The key lever is a TIGHT incubation window (3d low-risk / 7d standard) whose **expiry
+is itself the trigger**, so a feature can never be silently left behind. Promotion
+requires real proof-of-life, never elapsed time alone (a feature whose evidence
+source isn't wired is surfaced honestly as `proved:'unknown'` and can never be
+promotion-ready).
+
+Wires four read-only routes — `GET /growth/digest`, `GET /growth/findings`,
+`GET /growth/status`, `POST /growth/tick` — plus a `monitoring.growthAnalyst` config
+block (defaults OFF). Ships **DARK**: this slice computes and exposes findings only;
+it does NOT send to Telegram. Cadence/event-delivery and enabling the muted
+analyzers ride a later, flood-sensitive slice.
+
+## What to Tell Your User
+
+Nothing yet — this ships dark and disabled by default, and is agent-only. It does not
+message the user, change any existing behavior, or turn on any new surface until it
+is explicitly enabled in a later promotion slice. When asked "is anything checking on
+my initiatives, feature maturity, or patterns?", you can note the analyst exists and
+is being rolled out carefully from dark to live, and that you will be able to read its
+computed digest once it is turned on.
+
+## Summary of New Capabilities
+
+- New monitoring component `GrowthMilestoneAnalyst` (observe-only; no new sensors).
+- New read routes `GET /growth/digest|findings|status`, `POST /growth/tick`
+  (503 when disabled — the dark default).
+- New config block `monitoring.growthAnalyst` (ships disabled; tunable incubation
+  windows, proof-of-life threshold, per-rule flags) — auto-applies to existing
+  agents via ConfigDefaults deep-merge.
+- CLAUDE.md template documents the routes (Agent Awareness Standard).
+
+## Evidence
+
+Not a bug fix and not reproducible in dev — this is a new, dark-by-default capability,
+so there is no before/after to reproduce. It changes no existing behavior: with the
+flag off (the default) every new route returns 503 and nothing else references the
+analyst. Behavior is covered by 41 tests across all three tiers (unit semantic
+coverage on both sides of every window/proof boundary, integration route gating,
+wiring against a real InitiativeTracker, and an e2e "feature is alive" lifecycle).

package/upgrades/side-effects/growth-milestone-analyst-dev-gate.md

@@ -0,0 +1,99 @@
+# Side-Effects Review — GrowthMilestoneAnalyst dev-agent gate correction
+
+**Change:** Make the GrowthMilestoneAnalyst honor the standard `developmentAgent`
+dark-feature gate instead of a hardcoded `enabled: false`. The original slice-1
+implementation shipped dark for **every** agent (including dev agents like echo),
+which contradicts the established convention used by secret-sync, boot
+self-knowledge, the resource sampler, warm-session A2A, etc.: dark-features OMIT
+`enabled` from their config default and resolve `enabled ?? !!config.developmentAgent`
+at runtime so the dev agent (the dogfooding ground) runs them LIVE while the fleet
+stays DARK.
+
+**Files:**
+- `src/config/ConfigDefaults.ts` — removed the hardcoded `enabled: false` from the
+  `monitoring.growthAnalyst` block (and rewrote the comment to describe the gate).
+- `src/server/AgentServer.ts` — construction now resolves
+  `growthAnalystEnabled = monitoring?.growthAnalyst?.enabled ?? !!developmentAgent`,
+  and feeds that resolved value into `resolveGrowthSettings({ ...block, enabled })`
+  so `GET /growth/status` honestly reports `enabled: true` on a dev agent. The
+  `resolveGrowthSettings` call is now optional-chained so the gate can be true even
+  with no `monitoring.growthAnalyst` block present (dev agent, defaults only).
+- `tests/unit/growth-analyst-gate-wiring.test.ts` — new wiring-integrity tests
+  (config omits `enabled`, migration parity, both-sides resolution, source-level
+  gate assertions).
+
+## 1. Over-block — what legitimate inputs does this reject that it shouldn't?
+None. The change ENABLES the feature on dev agents; it never rejects an input. An
+operator who explicitly sets `monitoring.growthAnalyst.enabled: false` still
+force-darks the feature even on a dev agent (explicit value wins via `??`), and an
+explicit `true` still enables it fleet-wide — both preserved and tested.
+
+## 2. Under-block — what failure modes does this still miss?
+The analyst remains slice-1: it COMPUTES + serves the digest over `/growth/*` but
+does NOT message the user on a schedule (that's the deliberately-separate next
+slice). So a dev agent now runs the analyst live but still won't proactively speak
+until the messaging slice lands. This is by design (avoid swinging from too-quiet
+to too-noisy), not a regression introduced here. No new under-block.
+
+## 3. Level-of-abstraction fit — right layer?
+Yes. The gate resolution lives in `AgentServer` construction exactly where every
+other dark-feature gate resolves (`standard_development_agent_dark_feature_gate`),
+and the default omission lives in `ConfigDefaults` exactly like warmSessionA2A and
+boot self-knowledge. No new layer; it joins the existing one.
+
+## 4. Signal vs authority compliance (docs/signal-vs-authority.md)
+Compliant. The GrowthMilestoneAnalyst is a SIGNAL-PRODUCER: it reads rollout
+stages, the approval ledger, and the correction ledger and computes findings. It
+holds NO blocking authority — it never filters a message, blocks an action, or
+gates information flow. This change only determines WHETHER that signal-producer
+runs on a given agent; it adds no brittle-check-with-authority. The routes remain
+read-only.
+
+## 5. Interactions — shadowing, double-fire, races?
+None. The construction is guarded by its own try/catch (failure is non-fatal and
+null-instances the analyst → `/growth/*` 503-stubs). No PostUpdateMigrator entry
+writes `growthAnalyst`, so the gate is the sole resolver — there's no migration
+that could write `enabled` to disk and shadow the runtime gate. The
+`resolveGrowthSettings({ ...block, enabled })` merge does not mutate config.
+
+## 6. External surfaces — visible to other agents/users/systems?
+On the dev agent only, `/growth/digest`, `/growth/findings`, `/growth/status`,
+`POST /growth/tick` flip from 503 to 200 after the next server boot (Claude Code
+loads config once at session/server start — running processes pick it up on
+restart). Fleet agents are unaffected (still 503). No agent-to-agent surface, no
+Telegram surface (the analyst does not message in this slice). The
+`/growth/status` `enabled` field now reads `true` on a dev agent (was a latent
+`false` had the routes ever been forced live) — this is the honesty fix.
+
+## 7. Rollback cost — back-out if wrong?
+Trivial and reversible. Two ways: (a) operator sets
+`monitoring.growthAnalyst.enabled: false` in `.instar/config.json` and restarts —
+force-darks it immediately, no code change; (b) git revert of this commit restores
+the hardcoded `enabled: false`. No data migration, no state repair — the analyst's
+only durable artifact is `state/growth-milestone-analyst/stage-journal.json`, which
+is observe-only and self-heals (a missing/stale journal just recomputes on the next
+observe). Worst case is a dev agent serving an unused read route.
+
+## No deferrals
+This change is complete: the gate is wired, the default is corrected, the status
+honesty is fixed, and the wiring tests cover both sides. Nothing is deferred.
+
+## Second-pass review (independent)
+**VERDICT: Concur with the review.** An independent reviewer audited the diff,
+the analyst source, the routes, and the migrators:
+- Read-only/signal-only confirmed: `computeFindings`/`buildDigest`/`getStatus`
+  never gate on `settings.enabled`; `isEnabled()` only feeds the informational
+  status field; routes guard solely on `if (!ctx.growthMilestoneAnalyst)` — so
+  constructing the analyst is sufficient to make it live, and the component holds
+  no blocking authority.
+- Gate matches the established convention (byte-identical to the resource
+  sampler's `?? !!options.config.developmentAgent`); explicit `enabled` wins both
+  ways; both sides tested.
+- No fleet leak / no disk write: non-dev agents resolve to false → null → 503;
+  grep of PostUpdateMigrator returned zero `growthAnalyst` references, so no
+  migration writes `enabled` to disk; `applyDefaults` only backfills missing
+  fields (operator `enabled:false` survives).
+- No optional-chaining/merge bug: `resolveGrowthSettings({ ...(block ?? {}),
+  enabled })` is safe when the block is absent and cannot throw; the spread sets
+  `enabled` last so it deterministically wins; no needed field dropped.
+- All seven side-effects claims match the code; new test file passes 6/6.