instar 1.3.507 → 1.3.508

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (62) hide show
  1. package/dist/commands/server.d.ts.map +1 -1
  2. package/dist/commands/server.js +6 -12
  3. package/dist/commands/server.js.map +1 -1
  4. package/dist/config/ConfigDefaults.d.ts.map +1 -1
  5. package/dist/config/ConfigDefaults.js +16 -0
  6. package/dist/config/ConfigDefaults.js.map +1 -1
  7. package/dist/coordination/AnchoredAuthorization.d.ts +66 -0
  8. package/dist/coordination/AnchoredAuthorization.d.ts.map +1 -0
  9. package/dist/coordination/AnchoredAuthorization.js +71 -0
  10. package/dist/coordination/AnchoredAuthorization.js.map +1 -0
  11. package/dist/core/ExternalOperationGate.d.ts +12 -0
  12. package/dist/core/ExternalOperationGate.d.ts.map +1 -1
  13. package/dist/core/ExternalOperationGate.js +6 -0
  14. package/dist/core/ExternalOperationGate.js.map +1 -1
  15. package/dist/core/PostUpdateMigrator.d.ts.map +1 -1
  16. package/dist/core/PostUpdateMigrator.js +9 -0
  17. package/dist/core/PostUpdateMigrator.js.map +1 -1
  18. package/dist/core/devGatedFeatures.d.ts.map +1 -1
  19. package/dist/core/devGatedFeatures.js +5 -0
  20. package/dist/core/devGatedFeatures.js.map +1 -1
  21. package/dist/scaffold/templates.d.ts.map +1 -1
  22. package/dist/scaffold/templates.js +8 -0
  23. package/dist/scaffold/templates.js.map +1 -1
  24. package/dist/server/routes.d.ts.map +1 -1
  25. package/dist/server/routes.js +159 -16
  26. package/dist/server/routes.js.map +1 -1
  27. package/dist/threadline/ContentClassifier.d.ts +15 -0
  28. package/dist/threadline/ContentClassifier.d.ts.map +1 -1
  29. package/dist/threadline/ContentClassifier.js +39 -0
  30. package/dist/threadline/ContentClassifier.js.map +1 -1
  31. package/dist/threadline/ConversationStore.d.ts +32 -0
  32. package/dist/threadline/ConversationStore.d.ts.map +1 -1
  33. package/dist/threadline/ConversationStore.js +74 -0
  34. package/dist/threadline/ConversationStore.js.map +1 -1
  35. package/dist/threadline/NegotiatorGate.d.ts +88 -0
  36. package/dist/threadline/NegotiatorGate.d.ts.map +1 -0
  37. package/dist/threadline/NegotiatorGate.js +148 -0
  38. package/dist/threadline/NegotiatorGate.js.map +1 -0
  39. package/dist/threadline/NegotiatorLease.d.ts +156 -0
  40. package/dist/threadline/NegotiatorLease.d.ts.map +1 -0
  41. package/dist/threadline/NegotiatorLease.js +202 -0
  42. package/dist/threadline/NegotiatorLease.js.map +1 -0
  43. package/dist/threadline/ThreadlineEndpoints.d.ts +2 -1
  44. package/dist/threadline/ThreadlineEndpoints.d.ts.map +1 -1
  45. package/dist/threadline/ThreadlineEndpoints.js +21 -1
  46. package/dist/threadline/ThreadlineEndpoints.js.map +1 -1
  47. package/dist/threadline/ThreadlineMCPServer.d.ts +8 -0
  48. package/dist/threadline/ThreadlineMCPServer.d.ts.map +1 -1
  49. package/dist/threadline/ThreadlineMCPServer.js +14 -1
  50. package/dist/threadline/ThreadlineMCPServer.js.map +1 -1
  51. package/dist/threadline/mcp-http-client.d.ts.map +1 -1
  52. package/dist/threadline/mcp-http-client.js +6 -0
  53. package/dist/threadline/mcp-http-client.js.map +1 -1
  54. package/dist/threadline/recordInboundAck.d.ts +48 -0
  55. package/dist/threadline/recordInboundAck.d.ts.map +1 -0
  56. package/dist/threadline/recordInboundAck.js +46 -0
  57. package/dist/threadline/recordInboundAck.js.map +1 -0
  58. package/package.json +1 -1
  59. package/src/data/builtin-manifest.json +63 -63
  60. package/src/scaffold/templates.ts +8 -0
  61. package/upgrades/1.3.508.md +83 -0
  62. package/upgrades/side-effects/threadline-single-negotiator.md +106 -0
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "$schema": "./builtin-manifest.schema.json",
3
3
  "schemaVersion": 1,
4
- "generatedAt": "2026-06-13T03:59:55.775Z",
5
- "instarVersion": "1.3.507",
4
+ "generatedAt": "2026-06-13T04:16:44.160Z",
5
+ "instarVersion": "1.3.508",
6
6
  "entryCount": 201,
7
7
  "entries": {
8
8
  "hook:session-start": {
@@ -11,7 +11,7 @@
11
11
  "domain": "identity",
12
12
  "sourcePath": "src/core/PostUpdateMigrator.ts",
13
13
  "installedPath": ".instar/hooks/instar/session-start.sh",
14
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
14
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
15
15
  "since": "2025-01-01"
16
16
  },
17
17
  "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
20
20
  "domain": "safety",
21
21
  "sourcePath": "src/core/PostUpdateMigrator.ts",
22
22
  "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
23
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
23
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
24
24
  "since": "2025-01-01"
25
25
  },
26
26
  "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
29
29
  "domain": "safety",
30
30
  "sourcePath": "src/core/PostUpdateMigrator.ts",
31
31
  "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
32
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
32
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
33
33
  "since": "2025-01-01"
34
34
  },
35
35
  "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
38
38
  "domain": "identity",
39
39
  "sourcePath": "src/core/PostUpdateMigrator.ts",
40
40
  "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
41
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
41
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
42
42
  "since": "2025-01-01"
43
43
  },
44
44
  "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
47
47
  "domain": "safety",
48
48
  "sourcePath": "src/core/PostUpdateMigrator.ts",
49
49
  "installedPath": ".instar/hooks/instar/external-operation-gate.js",
50
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
50
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
51
51
  "since": "2025-01-01"
52
52
  },
53
53
  "hook:deferral-detector": {
@@ -56,7 +56,7 @@
56
56
  "domain": "safety",
57
57
  "sourcePath": "src/core/PostUpdateMigrator.ts",
58
58
  "installedPath": ".instar/hooks/instar/deferral-detector.js",
59
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
59
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
60
60
  "since": "2025-01-01"
61
61
  },
62
62
  "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
65
65
  "domain": "coherence",
66
66
  "sourcePath": "src/core/PostUpdateMigrator.ts",
67
67
  "installedPath": ".instar/hooks/instar/self-stop-guard.js",
68
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
68
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
69
69
  "since": "2025-01-01"
70
70
  },
71
71
  "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
74
74
  "domain": "evolution",
75
75
  "sourcePath": "src/core/PostUpdateMigrator.ts",
76
76
  "installedPath": ".instar/hooks/instar/post-action-reflection.js",
77
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
77
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
78
78
  "since": "2025-01-01"
79
79
  },
80
80
  "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
83
83
  "domain": "safety",
84
84
  "sourcePath": "src/core/PostUpdateMigrator.ts",
85
85
  "installedPath": ".instar/hooks/instar/external-communication-guard.js",
86
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
86
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
87
87
  "since": "2025-01-01"
88
88
  },
89
89
  "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
92
92
  "domain": "coherence",
93
93
  "sourcePath": "src/core/PostUpdateMigrator.ts",
94
94
  "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
95
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
95
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
96
96
  "since": "2025-01-01"
97
97
  },
98
98
  "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
101
101
  "domain": "coherence",
102
102
  "sourcePath": "src/core/PostUpdateMigrator.ts",
103
103
  "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
104
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
104
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
105
105
  "since": "2025-01-01"
106
106
  },
107
107
  "hook:free-text-guard": {
@@ -110,7 +110,7 @@
110
110
  "domain": "safety",
111
111
  "sourcePath": "src/core/PostUpdateMigrator.ts",
112
112
  "installedPath": ".instar/hooks/instar/free-text-guard.sh",
113
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
113
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
114
114
  "since": "2025-01-01"
115
115
  },
116
116
  "hook:claim-intercept": {
@@ -119,7 +119,7 @@
119
119
  "domain": "coherence",
120
120
  "sourcePath": "src/core/PostUpdateMigrator.ts",
121
121
  "installedPath": ".instar/hooks/instar/claim-intercept.js",
122
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
122
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
123
123
  "since": "2025-01-01"
124
124
  },
125
125
  "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
128
128
  "domain": "coherence",
129
129
  "sourcePath": "src/core/PostUpdateMigrator.ts",
130
130
  "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
131
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
131
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
132
132
  "since": "2025-01-01"
133
133
  },
134
134
  "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
137
137
  "domain": "safety",
138
138
  "sourcePath": "src/core/PostUpdateMigrator.ts",
139
139
  "installedPath": ".instar/hooks/instar/stop-gate-router.js",
140
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
140
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
141
141
  "since": "2025-01-01"
142
142
  },
143
143
  "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
146
146
  "domain": "safety",
147
147
  "sourcePath": "src/core/PostUpdateMigrator.ts",
148
148
  "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
149
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
149
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
150
150
  "since": "2025-01-01"
151
151
  },
152
152
  "job:health-check": {
@@ -418,7 +418,7 @@
418
418
  "type": "route-group",
419
419
  "domain": "monitoring",
420
420
  "sourcePath": "src/server/routes.ts",
421
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
421
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
422
422
  "since": "2025-01-01"
423
423
  },
424
424
  "route-group:agents": {
@@ -426,7 +426,7 @@
426
426
  "type": "route-group",
427
427
  "domain": "sessions",
428
428
  "sourcePath": "src/server/routes.ts",
429
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
429
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
430
430
  "since": "2025-01-01"
431
431
  },
432
432
  "route-group:backups": {
@@ -434,7 +434,7 @@
434
434
  "type": "route-group",
435
435
  "domain": "operations",
436
436
  "sourcePath": "src/server/routes.ts",
437
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
437
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
438
438
  "since": "2025-01-01"
439
439
  },
440
440
  "route-group:git": {
@@ -442,7 +442,7 @@
442
442
  "type": "route-group",
443
443
  "domain": "coordination",
444
444
  "sourcePath": "src/server/routes.ts",
445
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
445
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
446
446
  "since": "2025-01-01"
447
447
  },
448
448
  "route-group:memory": {
@@ -450,7 +450,7 @@
450
450
  "type": "route-group",
451
451
  "domain": "memory",
452
452
  "sourcePath": "src/server/routes.ts",
453
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
453
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
454
454
  "since": "2025-01-01"
455
455
  },
456
456
  "route-group:semantic": {
@@ -458,7 +458,7 @@
458
458
  "type": "route-group",
459
459
  "domain": "memory",
460
460
  "sourcePath": "src/server/routes.ts",
461
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
461
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
462
462
  "since": "2025-01-01"
463
463
  },
464
464
  "route-group:status": {
@@ -466,7 +466,7 @@
466
466
  "type": "route-group",
467
467
  "domain": "monitoring",
468
468
  "sourcePath": "src/server/routes.ts",
469
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
469
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
470
470
  "since": "2025-01-01"
471
471
  },
472
472
  "route-group:capabilities": {
@@ -474,7 +474,7 @@
474
474
  "type": "route-group",
475
475
  "domain": "mapping",
476
476
  "sourcePath": "src/server/routes.ts",
477
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
477
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
478
478
  "since": "2025-01-01"
479
479
  },
480
480
  "route-group:project-map": {
@@ -482,7 +482,7 @@
482
482
  "type": "route-group",
483
483
  "domain": "mapping",
484
484
  "sourcePath": "src/server/routes.ts",
485
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
485
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
486
486
  "since": "2025-01-01"
487
487
  },
488
488
  "route-group:coherence": {
@@ -490,7 +490,7 @@
490
490
  "type": "route-group",
491
491
  "domain": "coherence",
492
492
  "sourcePath": "src/server/routes.ts",
493
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
493
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
494
494
  "since": "2025-01-01"
495
495
  },
496
496
  "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
498
498
  "type": "route-group",
499
499
  "domain": "sessions",
500
500
  "sourcePath": "src/server/routes.ts",
501
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
501
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
502
502
  "since": "2025-01-01"
503
503
  },
504
504
  "route-group:context": {
@@ -506,7 +506,7 @@
506
506
  "type": "route-group",
507
507
  "domain": "context",
508
508
  "sourcePath": "src/server/routes.ts",
509
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
509
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
510
510
  "since": "2025-01-01"
511
511
  },
512
512
  "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
514
514
  "type": "route-group",
515
515
  "domain": "coherence",
516
516
  "sourcePath": "src/server/routes.ts",
517
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
517
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
518
518
  "since": "2025-01-01"
519
519
  },
520
520
  "route-group:canonical-state": {
@@ -522,7 +522,7 @@
522
522
  "type": "route-group",
523
523
  "domain": "state",
524
524
  "sourcePath": "src/server/routes.ts",
525
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
525
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
526
526
  "since": "2025-01-01"
527
527
  },
528
528
  "route-group:ci": {
@@ -530,7 +530,7 @@
530
530
  "type": "route-group",
531
531
  "domain": "monitoring",
532
532
  "sourcePath": "src/server/routes.ts",
533
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
533
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
534
534
  "since": "2025-01-01"
535
535
  },
536
536
  "route-group:sessions": {
@@ -538,7 +538,7 @@
538
538
  "type": "route-group",
539
539
  "domain": "sessions",
540
540
  "sourcePath": "src/server/routes.ts",
541
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
541
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
542
542
  "since": "2025-01-01"
543
543
  },
544
544
  "route-group:jobs": {
@@ -546,7 +546,7 @@
546
546
  "type": "route-group",
547
547
  "domain": "scheduling",
548
548
  "sourcePath": "src/server/routes.ts",
549
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
549
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
550
550
  "since": "2025-01-01"
551
551
  },
552
552
  "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
554
554
  "type": "route-group",
555
555
  "domain": "scheduling",
556
556
  "sourcePath": "src/server/routes.ts",
557
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
557
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
558
558
  "since": "2025-01-01"
559
559
  },
560
560
  "route-group:telegram": {
@@ -562,7 +562,7 @@
562
562
  "type": "route-group",
563
563
  "domain": "communication",
564
564
  "sourcePath": "src/server/routes.ts",
565
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
565
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
566
566
  "since": "2025-01-01"
567
567
  },
568
568
  "route-group:attention": {
@@ -570,7 +570,7 @@
570
570
  "type": "route-group",
571
571
  "domain": "communication",
572
572
  "sourcePath": "src/server/routes.ts",
573
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
573
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
574
574
  "since": "2025-01-01"
575
575
  },
576
576
  "route-group:relationships": {
@@ -578,7 +578,7 @@
578
578
  "type": "route-group",
579
579
  "domain": "relationships",
580
580
  "sourcePath": "src/server/routes.ts",
581
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
581
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
582
582
  "since": "2025-01-01"
583
583
  },
584
584
  "route-group:feedback": {
@@ -586,7 +586,7 @@
586
586
  "type": "route-group",
587
587
  "domain": "feedback",
588
588
  "sourcePath": "src/server/routes.ts",
589
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
589
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
590
590
  "since": "2025-01-01"
591
591
  },
592
592
  "route-group:updates": {
@@ -594,7 +594,7 @@
594
594
  "type": "route-group",
595
595
  "domain": "updates",
596
596
  "sourcePath": "src/server/routes.ts",
597
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
597
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
598
598
  "since": "2025-01-01"
599
599
  },
600
600
  "route-group:dispatches": {
@@ -602,7 +602,7 @@
602
602
  "type": "route-group",
603
603
  "domain": "dispatches",
604
604
  "sourcePath": "src/server/routes.ts",
605
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
605
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
606
606
  "since": "2025-01-01"
607
607
  },
608
608
  "route-group:quota": {
@@ -610,7 +610,7 @@
610
610
  "type": "route-group",
611
611
  "domain": "monitoring",
612
612
  "sourcePath": "src/server/routes.ts",
613
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
613
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
614
614
  "since": "2025-01-01"
615
615
  },
616
616
  "route-group:publishing": {
@@ -618,7 +618,7 @@
618
618
  "type": "route-group",
619
619
  "domain": "publishing",
620
620
  "sourcePath": "src/server/routes.ts",
621
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
621
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
622
622
  "since": "2025-01-01"
623
623
  },
624
624
  "route-group:private-views": {
@@ -626,7 +626,7 @@
626
626
  "type": "route-group",
627
627
  "domain": "publishing",
628
628
  "sourcePath": "src/server/routes.ts",
629
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
629
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
630
630
  "since": "2025-01-01"
631
631
  },
632
632
  "route-group:tunnel": {
@@ -634,7 +634,7 @@
634
634
  "type": "route-group",
635
635
  "domain": "networking",
636
636
  "sourcePath": "src/server/routes.ts",
637
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
637
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
638
638
  "since": "2025-01-01"
639
639
  },
640
640
  "route-group:events": {
@@ -642,7 +642,7 @@
642
642
  "type": "route-group",
643
643
  "domain": "networking",
644
644
  "sourcePath": "src/server/routes.ts",
645
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
645
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
646
646
  "since": "2025-01-01"
647
647
  },
648
648
  "route-group:evolution": {
@@ -650,7 +650,7 @@
650
650
  "type": "route-group",
651
651
  "domain": "evolution",
652
652
  "sourcePath": "src/server/routes.ts",
653
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
653
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
654
654
  "since": "2025-01-01"
655
655
  },
656
656
  "route-group:watchdog": {
@@ -658,7 +658,7 @@
658
658
  "type": "route-group",
659
659
  "domain": "monitoring",
660
660
  "sourcePath": "src/server/routes.ts",
661
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
661
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
662
662
  "since": "2025-01-01"
663
663
  },
664
664
  "route-group:topic-memory": {
@@ -666,7 +666,7 @@
666
666
  "type": "route-group",
667
667
  "domain": "memory",
668
668
  "sourcePath": "src/server/routes.ts",
669
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
669
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
670
670
  "since": "2025-01-01"
671
671
  },
672
672
  "route-group:state-sync": {
@@ -674,7 +674,7 @@
674
674
  "type": "route-group",
675
675
  "domain": "coordination",
676
676
  "sourcePath": "src/server/routes.ts",
677
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
677
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
678
678
  "since": "2025-01-01"
679
679
  },
680
680
  "route-group:intent": {
@@ -682,7 +682,7 @@
682
682
  "type": "route-group",
683
683
  "domain": "intent",
684
684
  "sourcePath": "src/server/routes.ts",
685
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
685
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
686
686
  "since": "2025-01-01"
687
687
  },
688
688
  "route-group:triage": {
@@ -690,7 +690,7 @@
690
690
  "type": "route-group",
691
691
  "domain": "safety",
692
692
  "sourcePath": "src/server/routes.ts",
693
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
693
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
694
694
  "since": "2025-01-01"
695
695
  },
696
696
  "route-group:operations": {
@@ -698,7 +698,7 @@
698
698
  "type": "route-group",
699
699
  "domain": "safety",
700
700
  "sourcePath": "src/server/routes.ts",
701
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
701
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
702
702
  "since": "2025-01-01"
703
703
  },
704
704
  "route-group:sentinel": {
@@ -706,7 +706,7 @@
706
706
  "type": "route-group",
707
707
  "domain": "safety",
708
708
  "sourcePath": "src/server/routes.ts",
709
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
709
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
710
710
  "since": "2025-01-01"
711
711
  },
712
712
  "route-group:trust": {
@@ -714,7 +714,7 @@
714
714
  "type": "route-group",
715
715
  "domain": "safety",
716
716
  "sourcePath": "src/server/routes.ts",
717
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
717
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
718
718
  "since": "2025-01-01"
719
719
  },
720
720
  "route-group:monitoring": {
@@ -722,7 +722,7 @@
722
722
  "type": "route-group",
723
723
  "domain": "monitoring",
724
724
  "sourcePath": "src/server/routes.ts",
725
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
725
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
726
726
  "since": "2025-01-01"
727
727
  },
728
728
  "route-group:commitments": {
@@ -730,7 +730,7 @@
730
730
  "type": "route-group",
731
731
  "domain": "commitments",
732
732
  "sourcePath": "src/server/routes.ts",
733
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
733
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
734
734
  "since": "2025-01-01"
735
735
  },
736
736
  "route-group:episodes": {
@@ -738,7 +738,7 @@
738
738
  "type": "route-group",
739
739
  "domain": "memory",
740
740
  "sourcePath": "src/server/routes.ts",
741
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
741
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
742
742
  "since": "2025-01-01"
743
743
  },
744
744
  "route-group:messages": {
@@ -746,7 +746,7 @@
746
746
  "type": "route-group",
747
747
  "domain": "coordination",
748
748
  "sourcePath": "src/server/routes.ts",
749
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
749
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
750
750
  "since": "2025-01-01"
751
751
  },
752
752
  "route-group:system-reviews": {
@@ -754,7 +754,7 @@
754
754
  "type": "route-group",
755
755
  "domain": "monitoring",
756
756
  "sourcePath": "src/server/routes.ts",
757
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
757
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
758
758
  "since": "2025-01-01"
759
759
  },
760
760
  "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
770
770
  "type": "route-group",
771
771
  "domain": "security",
772
772
  "sourcePath": "src/server/routes.ts",
773
- "contentHash": "3057ff7850c1235d4e5bd360909419c7adf92a663f9bd3ad6b76b0d727c89cad",
773
+ "contentHash": "6de3bcd2af62b1d3ca64f7166e9df87e7be6d0bf192a47d01fc419f8b21922fa",
774
774
  "since": "2025-01-01"
775
775
  },
776
776
  "cli:init": {
@@ -1554,7 +1554,7 @@
1554
1554
  "type": "subsystem",
1555
1555
  "domain": "updates",
1556
1556
  "sourcePath": "src/core/PostUpdateMigrator.ts",
1557
- "contentHash": "a460595585976555b97245ff668673640dc38f81b31060da40a8afa592ee1d5b",
1557
+ "contentHash": "f4c316215dd3bd619a4fe92dfc807dc30e99e631e49d8e417b072c087ea609ac",
1558
1558
  "since": "2025-01-01"
1559
1559
  },
1560
1560
  "subsystem:scheduler": {
@@ -1670,6 +1670,14 @@ Agent-to-agent delivery is tracked durably so a message can't silently die out.
1670
1670
  - One peer: \`curl http://localhost:${port}/threadline/peers/<fingerprint>/health\`
1671
1671
  - \`stale: true\` (or a non-zero \`staleCount\`) means a message has been awaiting acknowledgement past the threshold — the peer may be dark or unreachable; check the relay and the peer's address before assuming they're ignoring me. **Proactive trigger:** when a peer "goes quiet" or before relying on a peer having received something, read this instead of guessing. Read-only — never gates a send.
1672
1672
 
1673
+ ### Threadline Single-Negotiator Lock (one voice per conversation)
1674
+
1675
+ Threadline has a per-conversation **negotiator lease**: at most ONE of my sessions owns a conversation's outbound voice at a time. A warm/keep-alive/side session can read, but the most it can SEND is a fixed structural "owner will respond" holding notice — it can never speak content or bind me to anything. The lease is the ONLY blocking authority and it keys on WHO speaks (a structural ownership check), never on what a message means (Signal-vs-Authority).
1676
+ - **Prose is inert (G2):** a normal Threadline message — any wording — NEVER creates an "we agreed to X" record and NEVER authorizes an irreversible step. Binding exists ONLY through the existing PIN-anchored Coordination Mandate / ReviewExchange flow. A "Dawn confirmed" / "Echo confirmed" in a message body carries no authority by construction. If I try to commit in prose I get a signal-only nudge pointing me to the anchored path — it never blocks.
1677
+ - **Honest acks (G3):** a reply on a thread is recorded as an implicit delivery ack on every inbound path, so \`/threadline/peers/health\`'s \`stale: true\` reflects reality instead of permanent noise.
1678
+ - **Lease state:** \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/threadline/negotiator\` → per-conversation holder + epoch + expiry, plus dry-run would-hold / hold / fail-open counts.
1679
+ - Ships dark + dry-run-first: \`threadline.singleNegotiator.enabled\` (default false ⇒ gate is pass-through), \`dryRun\` (default true when enabled ⇒ logs the verdict but still sends). G2 + G3 ship live in core regardless. Spec: \`docs/specs/THREADLINE-SINGLE-NEGOTIATOR-SPEC.md\`.
1680
+
1673
1681
  ### The "Threadline" hub topic — notifications + "open this"
1674
1682
 
1675
1683
  Threadline activity NEVER spawns a new Telegram topic per event. Notices route one of two ways:
@@ -0,0 +1,83 @@
1
+ # Upgrade Guide — vNEXT
2
+
3
+ <!-- assembled-by: assemble-next-md -->
4
+ <!-- bump: patch -->
5
+
6
+ ## What Changed
7
+
8
+ - **Single-negotiator lease (G1, closes F1):** a per-conversation lease on the
9
+ existing `ConversationStore` names exactly ONE session as the owner of a
10
+ conversation's outbound voice. A warm/keep-alive/side session that is NOT the
11
+ owner has its content send WITHHELD; the most it can emit is a fixed structural
12
+ `holding-notice` to the peer. The lease is the only blocking authority and it
13
+ keys on a STRUCTURAL ownership check `(ownerSessionName, ownerMachineId, epoch)`
14
+ over the CAS record — never on message content. Renew-on-send, 90s TTL, dead-owner
15
+ reclaim, epoch-fenced stale holders, no background timers.
16
+ - **Ships dark + dry-run-first:** `threadline.singleNegotiator.enabled` (default
17
+ false ⇒ pure pass-through, zero behavior change) and `dryRun` (default true when
18
+ enabled ⇒ logs the verdict it WOULD reach to `logs/threadline-negotiator-*.jsonl`
19
+ but still sends). Enforcement (withholding a real send) requires an explicit
20
+ `dryRun:false`. Fail-open on a lease-store error (raises a HIGH attention item —
21
+ never silent), because prose is inert.
22
+ - **Prose is inert (G2) via a POSITIVE boundary:** new `AnchoredAuthorization` type
23
+ + `requireAnchoredAuthorization` guard — an irreversible-action gate accepts
24
+ authorization ONLY as a typed anchored artifact (mandate / review-exchange /
25
+ operator-confirm reference), never a string/transcript/summary/classifier output.
26
+ Wired into `ExternalOperationGate` (fails CLOSED on prose for an irreversible op).
27
+ `ContentClassifier` gains a SIGNAL-ONLY `detectCommitmentClass` nudge (advisory,
28
+ never blocks, fails open to no-nudge).
29
+ - **Honest acks (G3, closes F4):** the verified relay inbound path
30
+ (`POST /threadline/messages/receive`) now records the implicit delivery ack, via a
31
+ shared `recordInboundAck` funnel that all three inbound-receive sites route
32
+ through — so `/threadline/peers/health`'s `stale:true` reflects reality instead of
33
+ permanent false noise.
34
+ - **New read route** `GET /threadline/negotiator` (bearer-gated, paginated): per-
35
+ conversation holder + epoch + expiry, plus dry-run would-hold / hold / fail-open
36
+ counts.
37
+ - CLAUDE.md template + `PostUpdateMigrator` migration + `ConfigDefaults` default +
38
+ dark-gate classification, so new AND deployed agents learn the capability and
39
+ backfill the config (Agent Awareness + Migration Parity).
40
+
41
+ ## What to Tell Your User
42
+
43
+ Threadline is now much harder to confuse when I'm running more than one session at
44
+ once. Before, a background "warm" session could speak in my name on a conversation —
45
+ that's how, on June 11, a side session "confirmed" an irreversible cutover window
46
+ that no coherent single me had actually agreed to. Now exactly one of my sessions
47
+ owns each conversation's voice at a time; any other session is held back and can only
48
+ post a short "the owner will respond" notice — it can never speak content or commit me
49
+ to anything. And a plain chat message can never authorize an irreversible step on its
50
+ own: real commitments only travel through the PIN-anchored approval path, by design.
51
+ This ships OFF by default and in a measure-only mode first, so nothing about how I
52
+ talk to other agents changes until it's proven safe to turn on.
53
+
54
+ ## Summary of New Capabilities
55
+
56
+ - A per-conversation negotiator lease guarantees single-voice (one owning session)
57
+ per conversation; warm/side sessions are structurally withheld.
58
+ - Prose carries no authority by construction; irreversible-action gates accept only a
59
+ typed anchored authorization artifact (`AnchoredAuthorization`).
60
+ - Honest agent-to-agent delivery acks on the verified relay inbound path (closes the
61
+ false-`stale` peer-health noise).
62
+ - `GET /threadline/negotiator` surfaces lease state + dry-run telemetry.
63
+ - Off by default; dry-run-first; `threadline.singleNegotiator.*` config.
64
+
65
+ ## Evidence
66
+
67
+ - Unit (31): `tests/unit/NegotiatorLease.test.ts` (20 — acquire/renew/expire/epoch-
68
+ fence, CAS race, dead-owner reclaim, backward-compat, holding-notice per-epoch +
69
+ min-interval limits, config resolver, holder-singularity, observability log),
70
+ `tests/unit/AnchoredAuthorization.test.ts` (7), `tests/unit/recordInboundAck.test.ts`
71
+ (4 — clears pending by threadId; the F4 mechanism).
72
+ - Integration (9): `negotiator-send-gate.test.ts` (enforce→held content withheld +
73
+ only the holding notice reaches the peer + NO awaiting-ack record; owner delivered;
74
+ dry-run still sends; advisory nudge; `/threadline/negotiator` 200/bearer/paginated),
75
+ `inbound-ack-wiring.test.ts` (every inbound site funnels through recordInboundAck).
76
+ - E2E (10): `threadline-negotiator-alive.test.ts` (route alive 200/bearer + real
77
+ lease state), `threadline-g2-boundary.test.ts` (import-boundary; gate rejects prose
78
+ / accepts anchored; holder-singularity invariant).
79
+ - Existing suites green: threadline integration (172), ConversationStore +
80
+ A2ADeliveryTracker + ContentClassifier (137), PostUpdateMigrator + ConfigDefaults
81
+ (452), manifest integrity (30). `pnpm lint` clean; build green.
82
+ - Independent second-pass review (outbound messaging block/allow surface) — CONCUR,
83
+ verdict appended to `upgrades/side-effects/threadline-single-negotiator.md`.