instar 1.3.48 → 1.3.50

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.48",
+  "version": "1.3.50",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-28T03:46:09.134Z",
-  "instarVersion": "1.3.48",
+  "generatedAt": "2026-05-28T04:22:02.259Z",
+  "instarVersion": "1.3.50",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "8c1ca53475ef9ebe286fcdc8a4bbf5a46e0503b242dfa1040685e15ea0eea830",
+      "contentHash": "dc3bf7dc7f07613be4717b02dc3dfa5ffae4a5e8faa1c401ab1947c010002afb",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1521,7 +1521,7 @@
       "type": "subsystem",
       "domain": "communication",
       "sourcePath": "src/lifeline/TelegramLifeline.ts",
-      "contentHash": "4a2f251ab4d091cf62d9826a1738729838775254ff00d6c743787193ca48dd8b",
+      "contentHash": "f44cbf8d78df7dab429a50f3e70c2bb27b6f36a8fb32ea48e7f088650680eec2",
       "since": "2025-01-01"
     },
     "subsystem:orphan-process-reaper": {

package/upgrades/1.3.49.md

@@ -0,0 +1,31 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+Next increment of the **Feedback Factory Migration** (Dawn → Echo; spec `docs/specs/feedback-factory-migration.md`, approved). Ships the **live Portal adapter** behind the dry-run/compare seam after a clean architectural pivot from Dawn (committed Portal-side at `d65136b3b6`): Prisma Data Platform forbids `CREATE ROLE`/`GRANT` for any account, so a read-only Postgres role can't be minted. Dawn replaced direct DB access with a Portal-internal endpoint `GET /api/instar/read` — Bearer-token-authed (`instar:read` scope), max 1000 rows per request, returns the same three tables (feedback, clusters, dispatches) with paging metadata.
+
+New module:
+
+- **`src/feedback-factory/dryrun/HttpParitySource.ts`** — implements the existing `ParitySource` interface via that endpoint. Async `prepare()` pre-fetches a consistent snapshot (walking pages, deduping clusters by `clusterId`, stopping when `returned_count < limit`). Sync `readPortalClusters()` returns the snapshot. The runner's seam, the parity comparator, the three order-independent invariants, and the JSONL audit trail are all unchanged — only the read adapter swaps.
+
+Still internal — not yet wired into any route or job. Live verification waits on the `instar:read` token landing via Secret Drop.
+
+## What to Tell Your User
+
+- Dawn hit a database-platform limitation (Prisma Cloud refuses to mint a read-only user) and pivoted to an internal HTTP endpoint instead. It's actually a cleaner seam — my dry-run tests against the same contract her Phase-2 work will use, with no Prisma-admin dependency.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| HTTP-backed live ParitySource for Phase-1/3 dry-run | Internal `src/feedback-factory/dryrun/HttpParitySource.ts` — `await new HttpParitySource({baseUrl,token}).prepare()`, then pass to `runDryRunCompare` |
+
+## Evidence
+
+- **10 new unit tests**, all green; full feedback-factory unit dir green; `tsc --noEmit` clean.
+- **Both-sides-of-boundary**: Bearer auth + field mapping (camelCase AND snake_case tolerance), single-page snapshot + multi-page pagination with `clusterId`-dedup + `returned_count < pageSize` stop signal, `maxPages` safety cap, error-status preservation, malformed-row rejection (no silent skip of contract violations), prepare-before-read invariant, defensive-copy snapshot.
+- **Faithful to the existing seam**: `HttpParitySource` is purely additive — implements the same `ParitySource` interface as `InMemoryParitySource`, so the runner / comparator / invariants / cutover gate are byte-identical for in-memory tests and the live Portal path.
+
+Side-effects: `upgrades/side-effects/feedback-factory-http-source.md`.

package/upgrades/1.3.50.md

@@ -0,0 +1,70 @@
+# Instar Upgrade Guide — NEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**Fix: mentee receiver wiring now fires on the lifeline-forward path.** The
+mentee receiver wiring shipped in PR #462 installs an a2a hook on the primary
+`TelegramAdapter`. But the hook only fired when the adapter polled directly.
+In production both Echo and Codey run with `--no-telegram` — the primary
+adapter is in send-only mode and never polls; the lifeline polls and forwards
+messages via `/internal/telegram-forward`, which called
+`ctx.telegram.onTopicMessage` directly and BYPASSED the a2a hook gate. The
+mentee-side receiver was dead in production as a result.
+
+This PR closes the gap end-to-end:
+
+1. **`TelegramAdapter.dispatchAgentMessageHook(ctx)` (new public method)** —
+   extracts the hook invocation from the polling text-dispatch path into a
+   reusable dispatcher. Polling now calls it; the lifeline-forward handler
+   ALSO calls it. Same gate, both paths.
+2. **`/internal/telegram-forward` (server)** — invokes
+   `dispatchAgentMessageHook` BEFORE falling through to `onTopicMessage`. If
+   the hook claims the message (`handled:true`), the route short-circuits
+   with `{ ok: true, forwarded: true, agentMessage: true }` and the
+   user-message path is NOT also dispatched.
+3. **`TelegramLifeline.forwardToServer` (lifeline)** — populates `senderIsBot`,
+   `senderChatId`, `senderBotId` in the forward body from the Telegram update.
+   Required so the a2a hook's spoof defense (drop a marker from a real user
+   typing a marker-shaped string) can apply on forwarded messages.
+
+**Backward compatibility:** newer server / older lifeline → `senderIsBot`
+omitted → treated as falsy → marker-bearing forwards drop closed (matches the
+spec invariant: a real user typing a marker MUST be dropped). Newer
+lifeline / older server → unknown fields ignored, no regression.
+
+**Caught by:** dogfood — Echo + Codey on v1.3.49, both with the receiver
+wiring from PR #462 installed and Codey's `config.mentee` block populated.
+Manual `/mentor/tick` failed silently because Codey's hook was never invoked
+on the lifeline-forward path. Spec §Recipient side describes the hook as
+"registered with `TelegramAdapter.onMessage`"; the original implementation
+read this as the polling path, missing the dual-path nature of message
+ingress in send-only mode.
+
+## What to Tell Your User
+
+A small fix that closes a quiet but real gap: the cross-agent mentor pipeline
+now actually fires end-to-end in production, not just in tests. The previous
+release shipped the receiver wiring, but only the polling adapter saw
+inbound a2a messages — and in production we run a separate process for
+polling, so the wiring was dead. After this update, mentor prompts route
+correctly through to mentee sessions, and replies come back. No config
+changes required on your end.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| `TelegramAdapter.dispatchAgentMessageHook(ctx)` | Public dispatcher — any caller in possession of the adapter can invoke the agent-message hook the same way the polling path does. The lifeline-forward handler now does this automatically. |
+| Lifeline-forward carries spoof-defense fields | `senderIsBot`/`senderChatId`/`senderBotId` are populated in the `/internal/telegram-forward` body so the a2a hook's spoof defense applies on forwarded messages. |
+
+## Evidence
+
+11 new tests, all green: 8 unit on `dispatchAgentMessageHook` (no-op safe,
+handled returns true, fall-through, FAIL-OPEN on hook throw, three
+senderBotId derivation modes, caller override); 3 integration on the
+`/internal/telegram-forward` route (short-circuit when claimed,
+fall-through when not, backward-compat with adapters lacking the method).
+`tsc --noEmit` clean. Side-effects review:
+`upgrades/side-effects/mentee-receiver-forward-dispatch.md`.

package/upgrades/side-effects/feedback-factory-http-source.md

@@ -0,0 +1,99 @@
+# Side-effects review — feedback-factory HttpParitySource adapter
+
+Spec: `docs/specs/feedback-factory-migration.md` (converged v2, approved 2026-05-26).
+Increment: the live Portal `/api/instar/read` adapter implementing the existing
+`ParitySource` seam. Single new src module + its unit test; zero edits to existing
+code.
+
+## What this ships
+
+The HTTP adapter behind the dry-run/compare seam after Dawn's architectural pivot
+(committed Portal-side at `d65136b3b6`): Prisma Data Platform forbids `CREATE ROLE`/
+`GRANT`/`REVOKE` for any account including superusers, so a read-only Postgres role
+couldn't be minted. Dawn replaced direct DB access with a Portal-internal endpoint
+`GET /api/instar/read` (max 1000 rows/request, Bearer-token-authed,
+`instar:read` scope, JSON envelope with `data.{feedback,clusters,dispatches}` +
+`meta.{total_feedback_rows,returned_count,query_time_ms,timestamp}`).
+
+`HttpParitySource` implements `ParitySource` by pre-fetching that snapshot via an
+async `prepare()` and serving it through the existing sync `readPortalClusters()`
+read. The runner's seam, comparator (parity.ts), invariants, audit trail
+(JSONL), and `divergent === true` cutover gate are unchanged — only the read
+adapter swaps. This is exactly what the dependency-injection seam was for.
+
+## Over-block / under-block
+
+- **Errors**: any non-OK Portal response throws `HttpParitySourceError` with the
+  preserved status code. No silent partial snapshots — a 401/403/5xx surfaces
+  immediately and halts the prepare(). This is the right direction (false
+  block is recoverable; a silent partial snapshot would produce a phantom
+  "divergent" verdict that blocks Phase 4 cutover for the wrong reason).
+- **Malformed cluster rows**: a row missing required fields (`clusterId` / `type`
+  / `title`) throws, NOT silently skipped. A contract violation from Portal is
+  exactly the kind of thing we need to see, not hide.
+- **Field naming tolerance**: the mapper accepts both camelCase (Prisma default)
+  and snake_case (raw SQL projection) — chosen because Dawn's endpoint contract
+  doesn't pin the projection style and over-strictness here would cause
+  needless live-rollout friction.
+- **Snapshot freshness**: `prepare()` is idempotent — re-calling re-fetches.
+  Callers that want a stable snapshot for one dry-run pass simply call it once;
+  callers that want a fresh snapshot per pass call it per pass. Neither path is
+  blocked.
+- **`readPortalClusters()` before `prepare()`**: throws (no silent empty array).
+  An empty snapshot would also produce a phantom "divergent: false" verdict that
+  would mis-gate cutover.
+
+## Level-of-abstraction fit
+
+- The adapter lives in `dryrun/` next to `dryRunCompare.ts` because it is the
+  composition's read-source, not a pure piece of the processor logic
+  (`processor/` stays pure / decision-only).
+- It implements the existing `ParitySource` interface verbatim — the seam was
+  designed for exactly this swap. The runner doesn't know whether it's reading
+  from `InMemoryParitySource` or `HttpParitySource`; that's the test/live
+  symmetry the migration spec called for.
+- `fetch` is injected via `fetchImpl` so unit tests can stub it. The default
+  uses the runtime's global `fetch` (Node ≥18 / modern fetch).
+
+## Signal-vs-authority compliance
+
+Still signal-only. The adapter produces data; the runner produces a verdict; no
+authority to act flows from this code. Portal stays sole writer (the
+read-only API surface does not expose mutation). The cutover authority remains
+where the spec puts it: Dawn's line-by-line review + Justin's go/no-go.
+
+## Interactions
+
+- **Portal `/api/instar/read`**: the only external surface this adapter touches.
+  Read-only by Dawn's design (no PUT/POST/DELETE in the endpoint contract). The
+  Bearer token (`instar:read` scope) sits in the adapter's config — never logged,
+  never persisted by the adapter, owned by the caller. Token delivery happens
+  out of band via Secret Drop (in-memory only, never on disk, never in chat
+  history).
+- **`ParitySource` interface, `runDryRunCompare`, `parity.ts`**: unchanged. No
+  edits to existing feedback-factory code — additive only.
+- **No config, hook, route, template, or migration surface is touched.** No
+  Migration Parity / Agent Awareness obligation triggered.
+- **Pagination contract**: keyed off the feedback table (`returned_count <
+  pageSize` = exhausted). Clusters/dispatches per Dawn's contract accompany
+  each page; the adapter dedupes clusters by `clusterId` across pages, so
+  repeated clusters across pages cost only the network round-trip, not
+  correctness. Safety cap at `maxPages` (default 200 = 200k feedback rows)
+  prevents infinite-loop pathology if Portal returned the wrong meta.
+
+## Rollback cost
+
+Trivial. One new `src/feedback-factory/dryrun/HttpParitySource.ts` plus its test.
+Nothing imports it from production paths yet. Reverting removes the adapter
+without any downstream impact.
+
+## Deferrals
+
+- **Live verification** waits on the `instar:read` token landing via the open
+  Secret Drop. The adapter + 10 unit tests fully prove the read shape, mapping,
+  pagination, error path, and prepare-invariant against a stubbed `fetch`; the
+  live token only exercises the actual Portal endpoint. <!-- tracked: topic-12476 -->
+- **Cursor-based pagination** (a Last-Modified-style cursor instead of offset)
+  is not used: Dawn's documented contract is offset/limit. If she adds a cursor
+  later, the adapter takes one config field and a small page-loop tweak. The
+  current offset-with-dedup is correct under offset semantics. <!-- tracked: topic-12476 -->