instar 1.3.561 → 1.3.562

package/dist/messaging/slack/sanitize.d.ts

@@ -3,6 +3,10 @@
  *
  * Prevents prompt injection, path traversal, and SSRF attacks
  * by validating and cleaning user-controlled fields before use.
+ *
+ * CONTRACT-EVIDENCE: EXEMPT — pure string-validation/slug helpers; this module
+ * makes NO Slack API calls and touches no API-contract surface. The added
+ * slugifyChannelName is covered by tests/unit/slack-channel-slug.test.ts.
  */
 /**
  * Sanitize a Slack display name for safe injection into session context.
@@ -21,6 +25,19 @@ export declare function validateChannelId(id: string): boolean;
  * Must be lowercase alphanumeric with hyphens/underscores, max 80 chars.
  */
 export declare function validateChannelName(name: string): boolean;
+/**
+ * Slugify an arbitrary string into a valid Slack channel name.
+ *
+ * Slack channel names must be lowercase and may only contain [a-z0-9-_]
+ * (see {@link validateChannelName}). A workspace-derived name like
+ * "SageMind Live Test" contains spaces and uppercase, which `createChannel`
+ * rejects via validate-and-throw. This produces a guaranteed-valid slug:
+ * lowercase, non-[a-z0-9] runs collapsed to a single hyphen, leading/trailing
+ * hyphens trimmed, and clamped to Slack's 80-char limit.
+ *
+ * Mirrors the session-channel slug logic in SlackAdapter.
+ */
+export declare function slugifyChannelName(name: string): string;
 /**
  * Validate that a URL hostname belongs to *.slack.com.
  * Used to prevent SSRF via manipulated upload URLs.

package/dist/messaging/slack/sanitize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/messaging/slack/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMxD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO1D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjD"}
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/messaging/slack/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMxD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMvD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO1D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjD"}

package/dist/messaging/slack/sanitize.js

@@ -3,6 +3,10 @@
  *
  * Prevents prompt injection, path traversal, and SSRF attacks
  * by validating and cleaning user-controlled fields before use.
+ *
+ * CONTRACT-EVIDENCE: EXEMPT — pure string-validation/slug helpers; this module
+ * makes NO Slack API calls and touches no API-contract surface. The added
+ * slugifyChannelName is covered by tests/unit/slack-channel-slug.test.ts.
  */
 const CHANNEL_ID_PATTERN = /^[CDG][A-Z0-9]{8,12}$/;
 const CHANNEL_NAME_PATTERN = /^[a-z0-9][a-z0-9\-_]{0,79}$/;
@@ -36,6 +40,25 @@ export function validateChannelId(id) {
 export function validateChannelName(name) {
     return CHANNEL_NAME_PATTERN.test(name);
 }
+/**
+ * Slugify an arbitrary string into a valid Slack channel name.
+ *
+ * Slack channel names must be lowercase and may only contain [a-z0-9-_]
+ * (see {@link validateChannelName}). A workspace-derived name like
+ * "SageMind Live Test" contains spaces and uppercase, which `createChannel`
+ * rejects via validate-and-throw. This produces a guaranteed-valid slug:
+ * lowercase, non-[a-z0-9] runs collapsed to a single hyphen, leading/trailing
+ * hyphens trimmed, and clamped to Slack's 80-char limit.
+ *
+ * Mirrors the session-channel slug logic in SlackAdapter.
+ */
+export function slugifyChannelName(name) {
+    return name
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 80);
+}
 /**
  * Validate that a URL hostname belongs to *.slack.com.
  * Used to prevent SSRF via manipulated upload URLs.

package/dist/messaging/slack/sanitize.js.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../../src/messaging/slack/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AACnD,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAC3D,4CAA4C;AAC5C,MAAM,aAAa,GAAG,kBAAkB,CAAC;AACzC,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI;SACR,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AACnC,CAAC"}
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../../src/messaging/slack/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AACnD,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAC3D,4CAA4C;AAC5C,MAAM,aAAa,GAAG,kBAAkB,CAAC;AACzC,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI;SACR,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AACnC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.561",
+  "version": "1.3.562",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-14T10:35:51.901Z",
-  "instarVersion": "1.3.561",
+  "generatedAt": "2026-06-14T11:06:11.902Z",
+  "instarVersion": "1.3.562",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {

package/upgrades/1.3.562.md

@@ -0,0 +1,46 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The boot helpers that auto-create the Slack "Updates" and "Attention" channels
+(`ensureSlackUpdatesChannel` / `ensureSlackAttentionChannel` in
+`src/commands/server.ts`) passed a raw, workspace-derived name straight into
+`SlackAdapter.createChannel`. When the workspace name contained spaces or
+uppercase (e.g. "SageMind Live Test"), that produced an invalid Slack channel
+name like `SageMind Live Test-sys-updates`, which `createChannel` rejects via
+`validateChannelName` — so the channel never got created and the boot logged
+`Failed to create Slack Updates channel: Invalid channel name`.
+
+Both callers now slugify the name first through a new shared
+`slugifyChannelName` helper in `src/messaging/slack/sanitize.ts` (lowercase,
+collapse non-`[a-z0-9]` runs to a single hyphen, trim edge hyphens, clamp to
+Slack's 80-char limit) — mirroring the per-session channel slug logic the
+adapter already used on its `-sess-` path. The `createChannel` /
+`validateChannelName` contract other callers rely on is untouched.
+
+## What to Tell Your User
+
+If your Slack workspace name has spaces or capital letters and your agent failed
+to create its Updates or Attention channel (an "Invalid channel name" error on
+startup), that's now fixed — the channel name is cleaned into a valid Slack
+slug before creation. Workspaces whose name was already lowercase-and-dashes see
+no change at all.
+
+## Summary of New Capabilities
+
+- New `slugifyChannelName(name)` helper in the Slack sanitize module — a single
+  source of truth for turning an arbitrary name into a valid Slack channel name.
+- The Slack Updates and Attention boot channels now create reliably regardless
+  of workspace-name casing or spaces.
+
+## Evidence
+
+- `tests/unit/slack-channel-slug.test.ts` — the exact failing name
+  ("SageMind Live Test-sys-updates") now slugifies to a name `validateChannelName`
+  accepts; covers lowercasing, space-collapse, punctuation stripping, edge-hyphen
+  trim, already-valid passthrough, 80-char clamp, and a regression assertion that
+  the raw un-slugified name is rejected.
+- `npx tsc --noEmit` clean; 9/9 new unit tests green.

package/upgrades/eli16/slack-updates-channel-slug.md

@@ -0,0 +1,16 @@
+# Why the Slack Updates channel failed to create (and now doesn't)
+
+## The one-sentence version
+When your Slack workspace had a space or a capital letter in its name (like "SageMind Live Test"), the agent tried to make a Slack channel literally named "SageMind Live Test-sys-updates" — but Slack only allows lowercase, no-spaces channel names, so the creation crashed every time. Now the name is cleaned up first.
+
+## Picture it
+Imagine a mailroom that will only accept package labels written in lowercase with dashes instead of spaces. The agent was handing it a label that said "SageMind Live Test-sys-updates" — capital letters, spaces and all — and the mailroom kept rejecting it. The fix is a tiny label-printer that rewrites the label as "sagemind-live-test-sys-updates" before handing it over.
+
+## What changed, precisely
+- The two callers that auto-create the Slack "Updates" and "Attention" channels were passing a raw, workspace-derived name straight into channel creation.
+- That raw name kept its spaces and capitals, which Slack rejects — so the channel never got made and you saw "Invalid channel name".
+- Now both callers run the name through a small slugifier first (lowercase it, turn anything that isn't a-z/0-9 into a single dash, trim stray dashes, cap at Slack's 80-char limit) — exactly the same cleanup the per-session Slack channels already used.
+
+## Why this is safe
+- It only changes how the name is *built* before creation; it does not touch the channel-creation rule that other code relies on (that rule still rejects bad names — it just never sees one now).
+- A name that was already valid passes through unchanged.

package/upgrades/side-effects/slack-updates-channel-slug.md

@@ -0,0 +1,46 @@
+# Side-Effects Review — Slack Updates/Attention channel name slugify
+
+## Change summary
+Caller-side fix in `src/commands/server.ts`: the `ensureSlackUpdatesChannel` and
+`ensureSlackAttentionChannel` boot helpers now slugify the workspace-derived
+channel name before calling `SlackAdapter.createChannel`, via a new shared
+`slugifyChannelName` helper in `src/messaging/slack/sanitize.ts`. Mirrors the
+existing per-session channel slug logic in `SlackAdapter` (`-sess-` path).
+
+## Tier
+Tier 1 — small, low-risk, single-machine Slack-adapter boot-path bugfix. No
+converged spec required.
+
+## Files touched
+- `src/messaging/slack/sanitize.ts` — adds exported `slugifyChannelName(name)`.
+- `src/commands/server.ts` — imports the helper; wraps both `-sys-updates` and
+  `-sys-attention` channel names with it before `createChannel`.
+- `tests/unit/slack-channel-slug.test.ts` — new focused unit test.
+
+## Behavioral side-effects
+- **Channel names on FRESH creation**: a workspace name containing spaces or
+  uppercase now yields a slugified channel (e.g. "SageMind Live Test" →
+  `sagemind-live-test-sys-updates`) instead of a hard failure. For workspaces
+  whose name was already slug-clean (lowercase, no spaces), the produced name is
+  byte-identical to before — no change.
+- **No change to `createChannel` / `validateChannelName`**: the validate-and-throw
+  behavior other callers depend on is untouched; the fix only ensures these two
+  callers never hand it an invalid name.
+- **Idempotent at the state layer**: both helpers early-return when their
+  `slack-*-channel` state key is already set, so this only affects the one-time
+  creation path; existing installs that already created a channel are unaffected.
+
+## Migration parity
+- No agent-installed file changed (no `.claude/settings.json` hooks, no
+  `.instar/config.json` defaults, no CLAUDE.md template, no hook scripts, no
+  built-in skills). This is server-side runtime code shipped in the normal
+  build — existing agents receive it on their next update with no migration.
+
+## Rollback
+- Revert the squash commit. The change is self-contained (one helper + two call
+  sites + one test); no data migration, no state schema change, nothing to undo.
+
+## Blast radius
+- Limited to the Slack adapter boot path. Telegram / WhatsApp / iMessage and all
+  non-Slack code paths are untouched. Dark-gate config line-map unchanged (no
+  ConfigDefaults edit).