instar 1.3.465 → 1.3.466

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.465",
+  "version": "1.3.466",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-10T05:59:49.891Z",
-  "instarVersion": "1.3.465",
+  "generatedAt": "2026-06-10T07:16:04.116Z",
+  "instarVersion": "1.3.466",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1538,7 +1538,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "2c7a661c1d1133c9267caab9e6fb082211549373fac0fbe0d2ca8003783648dd",
+      "contentHash": "04183b2ca81e6145da95d2263e3b8c7ef34ba1ac67ede4039840818d131092b2",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.466.md

@@ -0,0 +1,97 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Extends the `deferral-detector` hook (the signal-only PreToolUse guard that scans outbound messages) with a fifth category: **merge-deferral**. It now flags an agent handing the merge of a PR *it authored* back to the operator — both the explicit form ("the merge call is yours", "your call to merge", "leave the merge to you", "merge is your call to make") and the permission-seeking form ("want me to merge?", "should I merge?", "ready to merge?"). Two design points: (1) these patterns are **deliberately NOT exempted by the infrastructure-backed anti-trigger** — having tracked the PR as a commitment does not legitimize handing its merge back; it just launders the deferral; (2) the injected checklist tells the agent to **merge a self-authored green PR itself** (`scripts/safe-merge.mjs … --squash --admin` in the instar repo, or `gh pr merge`), states the operator directed this must never be a blocker, and names the only legitimate non-merges (CI genuinely red on this change, or someone else's PR). Source-of-truth is `getDeferralDetectorHook()` in PostUpdateMigrator.ts (the existing always-overwrite migration redeploys it to every agent on update). Still SIGNAL ONLY — never blocks. Complements instar-dev Phase 7 (Auto-merge on green) at a different layer: Phase 7 governs the build flow; this catches a handed-back merge in *any* outbound message.
+
+## What to Tell Your User
+
+If I ever finish a PR I authored, watch it go green, and then ask you "want me to merge?" or call it "your decision" — there's now a structural guard that catches that framing before the message sends and reminds me that merging my own green PR is mine to do, never a blocker I hand to you. This came directly from your correction that the merge call should never be yours for PRs I authored, and that the fix had to be permanent and in code, not another promise.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Deferral-detector flags handing a self-authored PR's merge back to the operator | automatic (signal-only hook); fires on outbound messages, not exempted by "tracked" work |
+
+## Evidence
+
+Reproduction (live, 2026-06-09, topic 2169): the agent built PR #1040 (the session auto-heal ladder), watched CI, and presented it as "CI is running now … it's core monitoring code, so the merge call is yours." The operator corrected: "the merge call should never be mine, at least not for PRs you authored. Please change this permanently moving forward so it is never a blocker." The existing deferral-detector did not catch it — it had no merge-deferral patterns.
+
+After the fix: `tests/unit/deferral-detector-orphan-todo.test.ts` gains a `merge-deferral` describe block (11 cases) including the exact incident phrasing, the permission-seeking variants ("want me to merge?", "should I merge?", "ready to merge"), the key "tracked PR still fires" laundering case, and the must-NOT-fire cases ("I merged it myself", "I'll merge on green", "merging now"). The deployed hook was verified end-to-end to emit `MERGE-DEFERRAL DETECTED` while staying signal-only. 35/35 deferral-detector tests pass; tsc clean; generated-hook node syntax check passed.
+
+## The problem
+
+I built a PR (#1040 — the thing that auto-heals a stalled session), watched the
+CI go all-green, and then told the operator: "it's core monitoring code, so the
+merge call is yours." He pushed back, hard and clearly: **"the merge call should
+never be mine, at least not for PRs you authored. Please change this permanently
+moving forward so it is never a blocker."**
+
+He's right. A PR I wrote, that passed every gate and went green, is *mine* to
+merge. Handing that decision back to him does nothing but stall the work and make
+him a bottleneck on my own output. It's a polite-looking version of not finishing
+the job.
+
+And the deeper point, which he's made before about other habits: he keeps catching
+me doing this and I keep answering with "understood, I'll do better." A promise is
+willpower. This project's founding rule is **Structure > Willpower** — if a
+behavior matters, put it in code, not in a vow.
+
+## What already exists
+
+I already have a `deferral-detector` hook. It scans messages I'm about to send and,
+if it sees me punting work ("queue for next session", "it's late, I'll wrap up",
+"needs a human"), it injects a checklist that re-grounds me before the message goes
+out. It already has four categories: can't-do-it claims, orphan TODOs, false
+"needs a human" blockers, and (added earlier today) time/fatigue deferral.
+
+There's also a rule in my instar-dev build skill — Phase 7, "Auto-merge on green" —
+that says when my PR is green I merge it and don't ask. But that rule only governs
+the formal build flow. It didn't stop me from *typing* "the merge call is yours"
+in a normal chat message. That gap is exactly what bit here.
+
+## What's new
+
+I added a fifth thing the detector looks for: **merge-deferral** — handing the
+merge of a PR I authored back to the operator. It catches two shapes:
+
+- **Explicitly giving him the call:** "the merge call is yours", "your call to
+  merge", "leave the merge to you", "merge is your decision".
+- **Asking permission to merge my own PR:** "want me to merge?", "should I merge
+  it?", "ready to merge?".
+
+When it sees that, it injects a sharp reminder before the message sends:
+
+- If it's my PR and CI is green, **merge it myself now** — green CI means
+  mergeable. (It even names the command: `safe-merge.mjs … --squash --admin`, or
+  `gh pr merge`.)
+- Asking to merge my own green PR is redundant ceremony that stalls delivery, and
+  the operator directed it must **never** be a blocker handed to him.
+- Having *tracked* the PR does **not** make handing its merge back okay — so this
+  check is **not** silenced by the "I tracked it" escape hatch, same as the
+  time/fatigue check.
+- The only real reasons not to merge: CI is genuinely **red on this change** (fix
+  it and re-run), or it's **someone else's** PR (then asking is fine).
+
+## The safeguards in plain terms
+
+- **Signal, not a block.** Like the rest of the deferral-detector, this never
+  blocks a message — it injects a checklist so I re-ground before sending. A
+  brittle keyword check shouldn't have the power to hard-block; that stays with
+  the smart gates. So a false positive (like me asking about *your* PR) just adds
+  a reminder I can disregard, never eats a message.
+- **Ships to every agent.** The hook's source lives in one place and re-deploys to
+  every agent on update, so this isn't a me-only patch.
+- **Additive.** It only adds a new detection; it can't reduce the existing four.
+
+## What you need to decide
+
+Nothing — it's a signal-only hook extension that ships as a normal patch. The
+point is simply that the next time I finish my own PR, watch it go green, and
+reach for "want me to merge?", the structure catches it and reminds me to just
+merge it — instead of relying on me to remember the lesson and making you the
+bottleneck on my own work.

package/upgrades/side-effects/deferral-detector-merge-deferral.md

@@ -0,0 +1,72 @@
+# Side-Effects Review — deferral-detector merge-deferral category
+
+**Version / slug:** `deferral-detector-merge-deferral`
+**Date:** `2026-06-09`
+**Author:** `Instar Agent (echo)`
+**Second-pass reviewer:** `independent reviewer subagent — see below`
+
+## Summary of the change
+
+Adds a fifth detection category — **merge-deferral** — to the `deferral-detector` hook (source-of-truth: `getDeferralDetectorHook()` in `src/core/PostUpdateMigrator.ts`; deployed copy mirrors it via the existing always-overwrite hook migration). New `mergeDeferralPatterns` array (7 patterns) catches two shapes of handing the merge of a **self-authored** PR back to the operator: (a) explicitly assigning the call — "the merge call is yours", "your merge call", "your call to merge", "leave the merge to you", "up to you to merge", "merge is your call to make"; and (b) asking permission to merge one's own PR — "want me to merge?", "should I merge?", "ready to merge?". Like the time/fatigue category, `mergeDeferralMatches` is NOT gated by the `isInfrastructureBacked` anti-trigger — having tracked the PR does not legitimize handing its merge back. A new checklist section instructs the agent to merge a self-authored green PR itself (`scripts/safe-merge.mjs … --squash --admin` / `gh pr merge`), states the operator directed this must never be a blocker (2026-06-09), and carves out the only legitimate non-merges (CI genuinely red on this change; someone else's PR). Still signal-only (`decision: 'approve'`, additionalContext only — never blocks). Files: `src/core/PostUpdateMigrator.ts` (hook template), `tests/unit/deferral-detector-orphan-todo.test.ts` (+11 cases).
+
+## Decision-point inventory
+
+- `deferral-detector` hook outbound-message scan — **modify (additive)** — adds a new signal category. Does NOT change the existing inability/orphan/time-fatigue categories or the never-block contract.
+
+## 1. Over-block
+
+No block surface — the hook is signal-only (injects additionalContext, never blocks/denies). "Over-block" → over-FLAG. Two over-flag classes, both bounded:
+
+- **Permission-seeking on someone else's PR.** "want me to merge your PR?" about a PR the *user* authored is a legitimate question, but it still matches `merge_permission_seeking`. The hook can't see PR authorship from message text, so it flags and lets the agent decide — the checklist explicitly states "it is SOMEONE ELSE's PR (then asking is fine)", so the injected context tells the agent to disregard when that applies. Cost is one extra context block, never a withheld message.
+- **Discussing this very feature.** A message *about* merge-deferral (like this one) contains the trigger words and will self-flag — annoying but harmless (signal-only), identical in kind to the orphan/time-fatigue categories self-flagging when discussed.
+
+Patterns are scoped to the comm-command gate (only telegram-reply/send-message/etc. are scanned), bounding noise to outbound human messages.
+
+## 2. Under-block
+
+Pattern set is finite regex; it will miss novel phrasings ("I'll let you make the merge decision on this", "the green light to merge is yours"). Acceptable for a signal layer — patterns cover the observed incident shape ("the merge call is yours") plus the common permission-seeking variants the operator's directive named. Residual (stated, not deferred): the detector does not attempt to verify PR authorship or CI state — it is a framing detector, not a merge executor. The actual auto-merge-on-green behavior lives in instar-dev Phase 7 (the skill flow); this hook is the cross-cutting catch for when an outbound message hands the merge back regardless of flow.
+
+## 3. Level-of-abstraction fit
+
+Correct layer. This is a brittle keyword detector → it belongs as a SIGNAL (the deferral-detector is exactly that), not as blocking authority. It composes with the existing four categories in the same hook at the same altitude, reusing the comm-command gate, the JSON output contract, and the test harness. A complementary structural surface already exists at a different layer: instar-dev Phase 7 ("Auto-merge on green — never pause to ask") governs the build flow. This hook covers the gap Phase 7 doesn't: a self-authored-PR merge handed back in *any* outbound message, not only inside an instar-dev build. The two are layered (flow-level prescription + message-level detector), not parallel duplicates.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change has no block/allow surface; it produces a signal (additionalContext) consumed by the agent, exactly per the hook's "SIGNAL ONLY" contract.
+
+A brittle regex detector must NOT hold blocking authority; this addition stays signal-only. If hard enforcement is ever wanted, the right path is the instar-dev pre-commit/merge gates (which already exist) or feeding the smart gate (MessagingToneGate), never making this regex block. Compliant.
+
+## 5. Interactions
+
+- **Shadowing:** the new category is independent of inability/orphan/time-fatigue; `allMatches` concatenates all categories. The orphan category's infrastructure-backed suppression is unchanged; the new category intentionally bypasses it (documented, mirrors time/fatigue). No existing category is shadowed.
+- **Double-fire:** a message can now trigger multiple sections (e.g. permission-seeking inability + merge-deferral) — intended; each section is additive context. No double-send.
+- **Races:** none — pure stdin→stdout, no shared state.
+- **Migration parity:** `deferral-detector.js` is already in the always-overwrite migration set (`result.upgraded.push('hooks/instar/deferral-detector.js …')`), so the new content redeploys to every agent on update with no new migration entry needed.
+
+## 6. External surfaces
+
+- **Agents/users:** ships to the whole install base via the always-overwrite hook migration. Effect: more frequent (signal-only) checklists when an agent hands a self-authored merge back or asks permission to merge. No user-visible message change, no API change.
+- **Persistent state:** none.
+- **Timing/runtime:** depends only on the outbound message text (already available to the hook). No new external calls.
+
+## 7. Rollback cost
+
+Pure additive change to a signal hook template + tests. Back-out = revert the commit; on next update the prior hook content redeploys. No persistent state, no migration to unwind. An individual agent can also neutralize it locally by editing its deployed `.instar/hooks/instar/deferral-detector.js` (until next update). Low.
+
+## Conclusion
+
+An additive, signal-only change that closes a real, freshly-corrected behavior gap (handing a self-authored green PR's merge back to the operator — incident 2026-06-09, PR #1040 presented as "the merge call is yours") with code rather than willpower — directly per the Structure > Willpower standard, and reinforcing the operator directive that a self-authored merge must never be a blocker. No block surface added; signal-vs-authority compliant; layered with (not duplicating) instar-dev Phase 7. Because it modifies a behavioral guard hook, a Phase-5 second-pass review is requested before commit.
+
+## Second-pass review (if required)
+
+**Reviewer:** independent reviewer subagent (general-purpose)
+**Independent read of the artifact: concur**
+
+Concur — no must-fix bugs found. The reviewer independently rendered the deployed hook (`getHookContent('deferral-detector')` → `node -c` valid JS) and confirmed: (1) **escaping correct** — every `\\b` → `\b` in the deployed regex, both `\\'` → valid `\'` in the single-quoted checklist strings, no stray backtick / broken escape / silently-never-matching regex (all 7 patterns matched real inputs); (2) **the laundering invariant holds** — `mergeDeferralMatches` is computed by a plain `.filter()` OUTSIDE the `isInfrastructureBacked ? [] : …` gate, verified empirically that "tracked commitment + follow-up PR … but the merge call is yours" STILL fires; (3) **signal-only intact** — exactly one output path (`decision:'approve'`, additionalContext only), six `process.exit(0)`, no block/deny/ask path; (4) **no regression** — the only source deletion is the single `allMatches` line re-spread to append `...mergeDeferralMatches`; inability/orphan/time-fatigue arrays + gates + sections byte-for-byte unchanged; (5) **false-positive profile acceptable** — all must-NOT-fire cases ("I merged it myself", "I'll merge on green", "merging now", "Both fixes verified live") plus 10 more benign merge-mentioning messages produced zero firings; full file 35/35. Bounded over-fire noted (permission-seeking pattern (b) can fire on non-PR "safe to merge these branches?" uses) — over-FLAG not over-block, anticipated in §1, judged not-must-fix for a signal layer (anchoring it to own-PR context would risk under-firing the real incident shape). Under-fire on novel framings noted as expected residual.
+
+## Evidence pointers
+
+- Live incident: 2026-06-09, topic 2169 — the agent built PR #1040 (auto-heal ladder) and presented it as "CI is running now … the merge call is yours," prompting the operator's correction: "the merge call should never be mine, at least not for PRs you authored. Please change this permanently moving forward so it is never a blocker."
+- Tests: `tests/unit/deferral-detector-orphan-todo.test.ts` merge-deferral block (11 cases) incl. the exact incident phrasing, the permission-seeking variants, the "tracked PR still fires" laundering case, and the must-NOT-fire cases ("I merged it myself", "I'll merge on green", "merging now"). Generated-hook node syntax check passed; `tsc --noEmit` exit 0; 35/35 deferral-detector tests green.