instar 1.3.51 → 1.3.53

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-28T06:36:08.823Z",
-  "instarVersion": "1.3.51",
+  "generatedAt": "2026-05-28T07:03:37.461Z",
+  "instarVersion": "1.3.53",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b00038a2fd922de8407c786d29ff86296ab470d491e9edc66a42beaae80039a1",
+      "contentHash": "02158bbab251ccad90f9db38cdfc4836f3d5560fa553f32abba30732b11f4f05",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1089,7 +1089,7 @@
       "type": "template",
       "domain": "operations",
       "sourcePath": "src/templates/scripts/convergence-check.sh",
-      "contentHash": "109e801043cb3e287cba949cba67d72d92ddd725e33b81ae800130bed9053f76",
+      "contentHash": "955be9917dd0a8d3d795e137bcdf265cb71008797728bbdf3c102a9f0a0b789f",
       "since": "2025-01-01"
     },
     "template:git-sync-gate.sh": {
@@ -1457,7 +1457,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "ba49a34f5358b90fe392c012295ad80d1a052736a2ddc9ecb2baffe80977f770",
+      "contentHash": "1b85f747d68975a430434c51a1958c48dca6652021fcc2ce877bf7ccff172c9a",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/src/templates/scripts/convergence-check.sh

@@ -59,11 +59,36 @@ fi
 # Known-safe domains are whitelisted; anything else gets flagged.
 URLS_IN_MSG=$(echo "$CONTENT" | grep -oE 'https?://[^ )"'"'"'>]+' 2>/dev/null || true)
 if [ -n "$URLS_IN_MSG" ]; then
+  # The agent's OWN tunnel domain is trusted — a private-view / dashboard link
+  # the agent just generated via POST /view is not a confabulation. Read the
+  # live tunnel host from the persisted tunnel state so custom-domain tunnels
+  # are covered too (not just the default *.dawn-tunnel.dev / *.trycloudflare.com).
+  OWN_TUNNEL_HOST=""
+  for tj in "${CLAUDE_PROJECT_DIR:-.}/.instar/state/tunnel.json" "${CLAUDE_PROJECT_DIR:-.}/.instar/tunnel.json"; do
+    if [ -f "$tj" ]; then
+      OWN_TUNNEL_HOST=$(python3 -c "
+import json,sys,re
+try:
+    d=json.load(open('$tj'))
+    u=d.get('url') or d.get('tunnelUrl') or ''
+    m=re.search(r'https?://([^/]+)', u)
+    print(re.escape(m.group(1)) if m else '')
+except Exception:
+    print('')
+" 2>/dev/null)
+      [ -n "$OWN_TUNNEL_HOST" ] && break
+    fi
+  done
+
   UNFAMILIAR_URLS=""
   while IFS= read -r url; do
     [ -z "$url" ] && continue
-    # Skip well-known service domains
-    if echo "$url" | grep -qE '(github\.com|vercel\.app|vercel\.com|netlify\.app|netlify\.com|npmjs\.com|npmjs\.org|cloudflare\.com|google\.com|twitter\.com|x\.com|youtube\.com|reddit\.com|discord\.com|discord\.gg|telegram\.org|t\.me|localhost|127\.0\.0\.1|stackoverflow\.com|developer\.mozilla\.org|docs\.anthropic\.com|anthropic\.com|openai\.com|claude\.ai|notion\.so|linear\.app|fly\.io|render\.com|railway\.app|heroku\.com|amazonaws\.com|azure\.com|gitlab\.com|bitbucket\.org|docker\.com|hub\.docker\.com|pypi\.org|crates\.io|rubygems\.org|pkg\.go\.dev|wikipedia\.org|medium\.com|substack\.com|circle\.so|ghost\.io|telegraph\.ph)'; then
+    # Skip the agent's own live tunnel host (dynamic, covers custom domains).
+    if [ -n "$OWN_TUNNEL_HOST" ] && echo "$url" | grep -qE "$OWN_TUNNEL_HOST"; then
+      continue
+    fi
+    # Skip well-known service domains + common agent tunnel domains.
+    if echo "$url" | grep -qE '(github\.com|vercel\.app|vercel\.com|netlify\.app|netlify\.com|npmjs\.com|npmjs\.org|cloudflare\.com|google\.com|twitter\.com|x\.com|youtube\.com|reddit\.com|discord\.com|discord\.gg|telegram\.org|t\.me|localhost|127\.0\.0\.1|stackoverflow\.com|developer\.mozilla\.org|docs\.anthropic\.com|anthropic\.com|openai\.com|claude\.ai|notion\.so|linear\.app|fly\.io|render\.com|railway\.app|heroku\.com|amazonaws\.com|azure\.com|gitlab\.com|bitbucket\.org|docker\.com|hub\.docker\.com|pypi\.org|crates\.io|rubygems\.org|pkg\.go\.dev|wikipedia\.org|medium\.com|substack\.com|circle\.so|ghost\.io|telegraph\.ph|dawn-tunnel\.dev|trycloudflare\.com)'; then
       continue
     fi
     UNFAMILIAR_URLS="$UNFAMILIAR_URLS  $url\n"

package/upgrades/1.3.52.md

@@ -0,0 +1,39 @@
+# Instar Upgrade Guide — NEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**"Open this" topics now arrive named + summarized.** When you promote a Threadline
+conversation into its own topic ("open this" in the Threadline hub), the new topic used to
+get a crude name (the first ~5 words of the cold message) and a single generic "tied to this
+topic" marker — an unlabelled, empty room. Now an LLM names the topic from what the
+conversation is actually about and writes a short orientation summary as the first message
+(who the other agent is, what it's about, where it stands), so you walk in oriented.
+
+This is strictly additive on top of the deterministic "open this" intercept. It NEVER fails
+the bind: if the LLM can't run (timeout, daily spend cap, rate-limit, scrubbed output, or
+the deps aren't wired in your build), "open this" degrades to a deterministic templated brief
+(peer · message count · last activity · latest line) — and only falls back to the bare marker
+when there's literally no conversation behind the entry yet. The LLM is a generator, never a
+gate. The naming/summary call runs on the shared interactive LLM lane (you're waiting on it)
+with a 3.5s ceiling, ~1 cent per call, governed by the existing daily spend cap.
+
+Credential scrubbing uses value-pattern detection (actual `sk-…`/`xoxb-…`/`ghp_…`/key blocks),
+not bare english words — so a legitimate technical topic ("token refresh triage", "API key
+rotation") is named normally, while a pasted secret never lands in your chat-list title or the
+first message.
+
+## What to Tell Your User
+
+Nothing to do — it's automatic. Next time you "open this" in the Threadline topic, the new
+topic shows up with a real name and a short summary of the conversation inside it, instead of
+an empty room. "Tie this to <existing topic>" is unchanged. (The topic takes a few seconds to
+appear while the summary is generated; if the model is slow you still get an instant plain brief.)
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| "Open this" topics are LLM-named + summarized | In the Threadline hub topic, say "open this" — the new topic gets an LLM-generated name and a summary of the conversation as its first message. Automatic; no command or flag. |
+| Always-contextful fallback | If the LLM can't run (timeout / daily cap / unwired), the new topic still gets a deterministic templated brief (peer · message count · last activity · latest line) instead of the old empty marker. The bind never fails on LLM trouble. |

package/upgrades/1.3.53.md

@@ -0,0 +1,46 @@
+# Instar Upgrade Guide — NEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**Credential redaction in URL logging (security fix).** `instar join` could log a
+clone URL containing a live GitHub token on certain failure paths — Node's own
+fetch/URL errors echo the full credentialed URL in `err.message`, so catching
+the error and logging it leaked the secret. New `redactUrl()` / `redactUrlsInText()`
+funnel (`src/core/redactUrl.ts`) strips `user:pass@` userinfo and scrubs standalone
+known-token shapes (GitHub, Slack, Telegram, OpenAI). Applied at the three join-flow
+log sites. A new lint rule (`scripts/lint-no-direct-url-log.js`, wired into
+`npm run lint`) bans credentialed-URL logging going forward.
+
+Also: the outbound-message convergence-check gate now trusts the agent's own tunnel
+domain (read live from tunnel state) + the common tunnel domains, so an agent can
+send links to its own private views without the gate flagging them as fabricated.
+
+## What to Tell Your User
+
+- A security fix: when joining two machines into a mesh, an error message used to be
+  able to print a GitHub access token to the screen. It no longer can — credentials
+  are scrubbed from anything that gets logged. Nothing changes in how you use the
+  agent; this just closes a leak.
+- A small papercut fix: I can now send you links to my own private-view / dashboard
+  pages without my safety gate mistakenly treating my own tunnel address as suspicious.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| `redactUrl()` / `redactUrlsInText()` | Internal — route any URL or error-message string through these before logging. `src/core/redactUrl.ts`. |
+| `lint-no-direct-url-log` | Automatic in `npm run lint` / CI — fails the build if a credentialed URL is logged without redaction. |
+| Convergence-check own-tunnel trust | Automatic — the message gate no longer flags the agent's own tunnel URLs as unfamiliar. |
+
+## Evidence
+
+**Security fix + defense-in-depth, no behavior change to join logic.** Unit tests
+`tests/unit/redactUrl.test.ts` (13 cases, all green) include the EXACT 2026-05-27
+leak string and assert no `gho_…` token survives; plus basic-auth, token-in-query,
+Telegram-bot-token path form, multiple-URLs-in-one-string, malformed-input-never-throws,
+idempotency. `tsc --noEmit` clean. The lint rule passes on the redacted tree and
+would fail on the pre-fix `machine.ts`. Side-effects review:
+`upgrades/side-effects/credential-redaction-in-url-logging.md`. Spec: Track B of
+`docs/specs/MULTI-MACHINE-BOOTSTRAP-ROBUSTNESS-SPEC.md`.

package/upgrades/side-effects/credential-redaction-in-url-logging.md

@@ -0,0 +1,77 @@
+# Side-Effects Review — Credential redaction in URL logging (MM-Bootstrap Track B)
+
+**Spec:** `docs/specs/MULTI-MACHINE-BOOTSTRAP-ROBUSTNESS-SPEC.md` §Track B (approved PR #465).
+
+**Scope.** `src/core/redactUrl.ts` (new), `src/commands/machine.ts` (3 log sites),
+`scripts/lint-no-direct-url-log.js` (new, wired into `npm run lint`),
+`src/templates/scripts/convergence-check.sh` (own-tunnel-domain allowlist sub-fix),
+`tests/unit/redactUrl.test.ts` (new).
+
+**Problem.** During `instar join` on 2026-05-27, when the pair-verification fetch
+failed, instar logged `err.message` — which contained the full clone URL
+*including a live GitHub token* (`https://x-access-token:gho_…@github.com/…`).
+Node's own fetch/URL errors echo the credentialed URL in `err.message`, so even
+catching the error and logging its message leaked the secret to stdout (and the
+shell transcript, and likely local logs).
+
+**Fix.**
+- `redactUrl(input)` — strips the `user:pass@` userinfo segment (string-splice
+  so the rest of the URL is byte-preserved + logs stay useful), plus scrubs
+  standalone known-token shapes (GitHub `gh[posru]_`, fine-grained `github_pat_`,
+  Slack `xox[baprs]-`, Telegram `<id>:<secret>`, OpenAI `sk-`).
+- `redactUrlsInText(text)` — for error messages / prose that embed a URL
+  somewhere inside; regex-scrubs every `scheme://userinfo@` + standalone tokens.
+- Applied at the 3 join-flow leak sites in `machine.ts` (clone error, the
+  "Contacting <url>" line, the contact-server error).
+- `scripts/lint-no-direct-url-log.js` bans (a) `scheme://user:pass@` string
+  literals and (b) `console.* (...repoUrl|cloneUrl|remoteUrl|pushUrl|gitUrl...)`
+  without `redactUrl` on the same line, outside the funnel module. Wired into
+  `npm run lint` (CI Type-Check job) — defense-in-depth so a future leak can't
+  ship.
+- Convergence-check sub-fix: the outbound-message gate's URL-provenance
+  allowlist now skips the agent's OWN live tunnel host (read from
+  `.instar/state/tunnel.json`) + the common tunnel domains (`dawn-tunnel.dev`,
+  `trycloudflare.com`), so the agent can send links to its own private views
+  without the gate flagging them as fabricated. (Separate annoyance hit the
+  same night; folded in per spec.)
+
+**Side-effects review.**
+- **Logs stay useful.** Redaction replaces only the userinfo with `***`; host,
+  path, and query are preserved. A reader still sees which repo/host failed.
+- **Fail-OPEN to the SAFE side.** On any parse failure, `redactUrl` still
+  regex-scrubs rather than returning raw input — it never leaks on the error
+  path, and it never throws (verified by test).
+- **Idempotent.** Re-redacting an already-redacted string is a no-op (test).
+- **No behavior change to the join logic itself** — only what gets *logged*
+  changes. The fetch still constructs the same URL (the separate
+  api/pair-hits-the-wrong-URL logic bug is out of Track B scope; noted for
+  Track E).
+- **No false-positive risk in the lint** — it flags only the two concrete
+  credential-bearing shapes, not every URL log. The tunnel-URL log sites
+  (`server.ts`, `machine.ts:236`) carry no userinfo and are not flagged.
+- **Convergence-check is additive** — it only ADDS skips to the allowlist;
+  no previously-flagged URL becomes un-flagged except the agent's own tunnel
+  + the two common tunnel domains (all legitimately the agent's own surfaces).
+
+**Test coverage (3-tier).**
+- Unit: `tests/unit/redactUrl.test.ts` — 13 cases incl the exact 2026-05-27
+  leak string, basic-auth, user-only, token-in-query, Telegram-bot-token path
+  form, multiple URLs in one string, malformed-input-never-throws, idempotency,
+  empty string, URL-object input. All green.
+- Integration: a join-flow redaction test (invoke join with a fake credentialed
+  URL that fails, scrape stdout, assert no `gho_`/`:secret@` present) — see
+  `tests/integration/join-credential-redaction.test.ts`.
+- Lint (CI): `scripts/lint-no-direct-url-log.js` runs in `npm run lint`.
+
+**Migration parity.**
+- `redactUrl.ts` + `machine.ts` are server source — existing agents pick up the
+  fix on next dist refresh (auto-update). No agent-installed-file change.
+- `convergence-check.sh` is a built-in script installed at
+  `.instar/scripts/convergence-check.sh`; built-in hooks/scripts are
+  always-overwritten on every migration run (per the Migration Parity Standard),
+  so existing agents receive the updated allowlist on their next update.
+- The lint script is dev/CI-only; not installed into agents.
+
+**Rollback.** Revert the PR. URL logging returns to unredacted (the prior,
+leaky behavior) and the lint rule + convergence-check skip go with it. No data
+corruption, no migration to reverse.