instar 1.3.51 → 1.3.52

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-28T06:36:08.823Z",
-  "instarVersion": "1.3.51",
+  "generatedAt": "2026-05-28T06:51:41.833Z",
+  "instarVersion": "1.3.52",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1457,7 +1457,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "ba49a34f5358b90fe392c012295ad80d1a052736a2ddc9ecb2baffe80977f770",
+      "contentHash": "1b85f747d68975a430434c51a1958c48dca6652021fcc2ce877bf7ccff172c9a",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.52.md

@@ -0,0 +1,39 @@
+# Instar Upgrade Guide — NEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**"Open this" topics now arrive named + summarized.** When you promote a Threadline
+conversation into its own topic ("open this" in the Threadline hub), the new topic used to
+get a crude name (the first ~5 words of the cold message) and a single generic "tied to this
+topic" marker — an unlabelled, empty room. Now an LLM names the topic from what the
+conversation is actually about and writes a short orientation summary as the first message
+(who the other agent is, what it's about, where it stands), so you walk in oriented.
+
+This is strictly additive on top of the deterministic "open this" intercept. It NEVER fails
+the bind: if the LLM can't run (timeout, daily spend cap, rate-limit, scrubbed output, or
+the deps aren't wired in your build), "open this" degrades to a deterministic templated brief
+(peer · message count · last activity · latest line) — and only falls back to the bare marker
+when there's literally no conversation behind the entry yet. The LLM is a generator, never a
+gate. The naming/summary call runs on the shared interactive LLM lane (you're waiting on it)
+with a 3.5s ceiling, ~1 cent per call, governed by the existing daily spend cap.
+
+Credential scrubbing uses value-pattern detection (actual `sk-…`/`xoxb-…`/`ghp_…`/key blocks),
+not bare english words — so a legitimate technical topic ("token refresh triage", "API key
+rotation") is named normally, while a pasted secret never lands in your chat-list title or the
+first message.
+
+## What to Tell Your User
+
+Nothing to do — it's automatic. Next time you "open this" in the Threadline topic, the new
+topic shows up with a real name and a short summary of the conversation inside it, instead of
+an empty room. "Tie this to <existing topic>" is unchanged. (The topic takes a few seconds to
+appear while the summary is generated; if the model is slow you still get an instant plain brief.)
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| "Open this" topics are LLM-named + summarized | In the Threadline hub topic, say "open this" — the new topic gets an LLM-generated name and a summary of the conversation as its first message. Automatic; no command or flag. |
+| Always-contextful fallback | If the LLM can't run (timeout / daily cap / unwired), the new topic still gets a deterministic templated brief (peer · message count · last activity · latest line) instead of the old empty marker. The bind never fails on LLM trouble. |

package/upgrades/side-effects/threadline-open-this-llm-naming.md

@@ -0,0 +1,72 @@
+# Side-Effects Review — Threadline "open this" LLM topic-name + summary (CMT-567)
+
+**Version / slug:** `threadline-open-this-llm-naming`
+**Date:** `2026-05-27`
+**Author:** `echo`
+**Spec:** `docs/specs/THREADLINE-OPEN-THIS-LLM-NAMING-SPEC.md` (converged 2-round / 4-reviewer, approved)
+**Second-pass reviewer:** `not required` (UX continuation of #399, no new external surface; standard 2-round convergence applied)
+
+## Summary of the change
+
+When the deterministic "open this" intercept (CMT-529 / PR #399) promotes a Threadline
+conversation into its own topic, the new topic is now named by an LLM (from the conversation
+gist) and its first message is an LLM-written orientation summary. A three-tier degrade
+guarantees the bind never fails on LLM trouble:
+
+- **Tier A — LLM.** Real conversation (≥2 messages) → Haiku call using the proven PURPOSE-line
+  convention (reuses `parsePurposeFromResponse` from `TopicSummarizer`, NOT JSON). PURPOSE →
+  topic name; body → summary. Runs on the shared `interactive` LlmQueue lane (operator is
+  waiting), `costCents=2`, 3.5s race (timeout + queue-abort, since `intelligence.evaluate`
+  honors `timeoutMs` but not an AbortSignal).
+- **Tier B — deterministic template.** LLM skipped/failed → `💬 Conversation with <peer> · N
+  messages · last activity <when>. Latest: "<scrubbed inbound>"`. Zero cost/latency.
+- **Tier C — slug + legacy marker.** No backing conversation (hub-notice-only entry) → existing
+  slug name + the legacy "tied to this topic" marker. No LLM call attempted.
+
+Files touched:
+- `src/threadline/openConversationBrief.ts` (**add**) — the 3-tier generator. Pure compute; never throws; never returns empty.
+- `src/threadline/hubCommands.ts` (modify) — `HubBindDeps.brief?: BriefDeps` (optional); `open` branch calls `generateConversationBrief`, posts `brief.summary` as the first message, adds the `[hub/bind] open …` observability log line. `tie` branch unchanged (still posts the tie-marker; brief NOT invoked).
+- `src/commands/server.ts` (modify) — build ONE `briefDeps` after `collaborationSurfacer`; thread to both `getHubDeps` closures + the `AgentServer` ctor.
+- `src/server/AgentServer.ts` (modify) — `briefDeps?` on options interface; `briefDeps: options.briefDeps ?? null` into routeCtx.
+- `src/server/routes.ts` (modify) — `briefDeps` on `RouteContext`; `POST /threadline/hub/bind` passes `brief: ctx.briefDeps ?? undefined`.
+- `tests/unit/threadline/openConversationBrief.test.ts` (**add**) — 19 cases.
+- `tests/unit/hubCommands.test.ts` (modify) — +4 brief-path cases (LLM / template / Tier-C / tie-not-invoked).
+- `tests/integration/threadline/hub-bind-routes.test.ts` (modify) — +3 cases (LLM happy path; LLM-throws → bind still 200 + template; intelligence:null → bind still 200).
+- `upgrades/NEXT.md` (modify) — release note.
+
+## Decision-point inventory
+
+- `generateConversationBrief()` — **add** — three tiers; per-FIELD scrub-degrade (a credential in the PURPOSE degrades only the name, a credential in the body degrades only the summary). Never throws.
+- Credential detection — **new, intentionally different from hubCommands.CREDENTIAL_RE.** `SECRET_VALUE_RE` (vendor-prefixed tokens / key blocks / JWT-ish) is applied to LLM output; `SECRET_ASSIGN_RE` (`password|secret|token|api_key… : value`) additionally guards the RAW inbound snippet. The bare-english-word regex used by the existing slug path would false-positive on normal technical prose ("token refresh", "API key rotation") and degrade most real summaries — so it is deliberately NOT reused for the prose summary. The existing slug-path `CREDENTIAL_RE` in `hubCommands.ts` is untouched.
+- LlmQueue lane = `interactive` — operator is actively waiting; `background` would let a PresenceProxy arrival abort the in-flight brief (LlmQueue preempts only background victims).
+- `HubBindDeps.brief` is OPTIONAL — when absent (existing callers / tests that don't wire it), the `open` path degrades to slug + legacy marker (exact pre-CMT-567 behavior). No back-compat break.
+- `BriefDeps.topicNameFallback` is OPTIONAL — server-built `briefDeps` omits it (topicNameFor is private to hubCommands); `bindHubConversation` injects the real `topicNameFor` so the brief's slug matches the legacy path. A built-in `defaultSlug` guards direct callers.
+- Single shared `briefDeps` (built once in server.ts) — closes the round-2 finding that the `POST /threadline/hub/bind` route had no scope path to `sharedLlmQueue`. One construction, three consumers (2 closures + ctx).
+- Observability — one structured `console.log` per open: `nameSource / summarySource / latencyMs / reason`. Makes silent fallback diagnosable from `logs/server.log`.
+
+## Blast radius / reversibility
+
+- **Additive only.** `tie` path, the deterministic intercept itself, the parent-topic reply surfacing, and all other Threadline routing are untouched.
+- **No state files, no migrations.** Pure compute module; no persisted artifacts; `PostUpdateMigrator` needs no entry (verified — no agent-installed file changes).
+- **No new agent API.** The agent doesn't call this; it fires inside the operator-invoked "open this". No CLAUDE.md template change needed (Agent Awareness Standard N/A).
+- **Rollback:** single revert of the commit restores slug-name + legacy-marker verbatim.
+
+## Tests
+
+- Unit (new module): 19 cases — all three tiers, every fallback cause, per-field credential scrub, technical-vocab-not-scrubbed, input truncation, never-empty invariant (incl. empty/whitespace threadId).
+- Unit (hubCommands): +4 — LLM summary posted (not marker), LLM-throws → template, Tier-C marker, tie does not invoke brief.
+- Integration (hub/bind route): +3 — LLM happy path names+summarizes; LLM-throws → 200 + template (regression guard: LLM failure NEVER fails the bind); intelligence:null → 200.
+- Full threadline suite: 1580 passing, zero regressions. Production build clean (`tsc --noEmit` + `pnpm build`).
+
+## Test-as-self (live, real LLM — completed 2026-05-27)
+
+Two-stage, real-dependency validation (no mocks):
+
+1. **Real-LLM harness (Echo's Claude provider, real threadline data).** Ran the BUILT `generateConversationBrief` against two real Echo threads with a real `ClaudeCliIntelligenceProvider`, real `LlmQueue`, real `ThreadlineObservability`. Produced clean LLM names + summaries (`reason: ok`). **This caught a production-breaking bug the mocks hid:** a real CLI call took ~8-10s, over the original 3.5s timeout — so the happy path would have silently fallen to the template in production. Fixed: default timeout 3.5s → 15s (+ word-boundary cap on the name so a long title doesn't read "…path resol"). Re-ran with the production default: `nameSource=llm`, ~9.7s, clean name "Arm the full response-review stack".
+
+2. **Live deploy on a real peer agent (instar-codey, Codex/gpt-5.2).** Backed up Codey's shadow-install dist + hub state, deployed this build, restarted via launchd, drove a real `POST /threadline/hub/bind action:open` against a 4-message unbound hub conversation. Result: topic 680 created, `topicName="Mentor ledger dedup strategy"` (LLM, not slug), server log `[hub/bind] open threadId=f3d471e9 topic=680 nameSource=llm summarySource=llm` — proving briefDeps booted non-null and the real Codex LLM produced both fields through the live server. Cleaned up: deleted test topic 680 (Bot API), restored dist + hub state, restarted Codey onto the released build, verified f3d471e9 reverted to unbound.
+
+## Post-test-as-self deviations (folded into this commit)
+
+- Default `timeoutMs` 3.5s → **15s** (spec §3a updated with the measured rationale). The LLM tier is now the common outcome; template covers overruns.
+- `scrubName` caps on a **word boundary** (no mid-word truncation in the chat-list title).