instar 1.3.617 → 1.3.618

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.617",
+  "version": "1.3.618",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-17T18:44:27.024Z",
-  "instarVersion": "1.3.617",
+  "generatedAt": "2026-06-17T22:02:39.555Z",
+  "instarVersion": "1.3.618",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "6122e1de18a07a602a39b840dd9ee199b9b786268b401c901154e0cabced997c",
+      "contentHash": "fbbfc1adac0ebc5e8405574f97a758ce5a391961465f99f40a735cafded65097",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.618.md

@@ -0,0 +1,27 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Fixed a fleet-wide crash in a generated Stop hook. `PostUpdateMigrator.getActionClaimFollowthroughHook()` emitted `.instar/hooks/instar/action-claim-followthrough.js` with a stray, unbalanced `})();` on the last line (the hook body opens with a bare `let data = ''`, not an IIFE). Node rejected the file with `SyntaxError: Unexpected token '}'` on **every** Stop-hook fire — the red "Ran 5 stop hooks → Stop hook error" seen in Claude Code session logs. The hook is signal-only and dark-by-default, so the crash was noisy but harmless (nothing blocked or corrupted); it simply spammed errors once per turn on every agent.
+
+Removed the stray line from the source template. Existing agents auto-heal on their next update via the always-overwrite migration path (`migrateHooks` unconditionally re-writes this hook from the corrected template) — no new migration code needed.
+
+Added a CI parse gate (`tests/unit/generated-hooks-parse.test.ts`) that GENERATES every `get*Hook()` result and runs `node --check` on each JS hook. The pre-existing `no-bare-require-in-generated-hooks.test.ts` only source-scans for one forbidden pattern and never parses, which is exactly how a plain syntax typo shipped. The new gate closes the whole "generated hook fails to parse" class — a hook typo can no longer reach the fleet.
+
+## What to Tell Your User
+
+The recurring "Stop hook error / SyntaxError: Unexpected token '}'" noise in your Claude Code session logs is fixed. It was a harmless-but-noisy typo in one of the always-on bookkeeping hooks — it never blocked or corrupted any work, just printed an error every turn. After this update it's gone, and a new CI check guarantees a broken hook can't ship again.
+
+## Summary of New Capabilities
+
+- No new user capability. This is a reliability fix: a fleet-wide per-turn Stop-hook crash is removed, and CI now parse-checks every generated hook so the class can't recur.
+
+## Evidence
+
+- `tests/unit/generated-hooks-parse.test.ts` — RED before the fix (failed on `getActionClaimFollowthroughHook` with `SyntaxError: Unexpected token '}'`, 23 other generators passed), GREEN after removing the stray line. Runs `node --check` on the real generated output of every `get*Hook()`.
+- `tests/unit/no-bare-require-in-generated-hooks.test.ts` — still GREEN (unchanged; the two tests cover different failure modes).
+- `pnpm build` — clean TypeScript compile after the template edit.
+- Always-overwrite confirmed at `PostUpdateMigrator.ts` (`fs.writeFileSync(..., 'action-claim-followthrough.js', this.getActionClaimFollowthroughHook())`) — the corrected hook is unconditionally re-written on every migration, healing the deployed fleet on update.

package/upgrades/side-effects/action-claim-hook-parse-fix.md

@@ -0,0 +1,67 @@
+# Side-Effects Review — Fix fleet-wide stray-`})();` in action-claim Stop hook + CI parse gate
+
+**Version / slug:** `action-claim-hook-parse-fix`
+**Date:** `2026-06-17`
+**Author:** `Echo (instar-dev agent)`
+**Second-pass reviewer:** `not required` (no decision-point / no runtime authority — CI-only guard + a generated-text fix)
+
+## Summary of the change
+
+`PostUpdateMigrator.getActionClaimFollowthroughHook()` emitted a hook whose template literal ended with `});\n})();` — but the hook body is **not** wrapped in an IIFE (it opens with a bare `let data = ''`). The trailing `})();` is therefore unbalanced, so `node` rejects the generated `.instar/hooks/instar/action-claim-followthrough.js` with `SyntaxError: Unexpected token '}'` on **every** Stop-hook fire. Because built-in hooks are always-overwritten on every migration, this broken hook shipped to the entire fleet and crashes once per turn (visible as the red "Ran 5 stop hooks → Stop hook error" in Claude Code). The hook is signal-only and dark-by-default, so the crash was noisy-but-harmless (it never blocked or corrupted work) — but it spammed errors continuously.
+
+Two files change:
+- `src/core/PostUpdateMigrator.ts` — remove the single stray `})();` line from the template (the hook body was already correct top-level code; only the extra IIFE-close was wrong).
+- `tests/unit/generated-hooks-parse.test.ts` (new) — GENERATES every `get*Hook()` result and runs `node --check` on each JS hook. This is the gate that was missing: the existing `no-bare-require-in-generated-hooks.test.ts` only source-scans for one forbidden pattern and never parses, so a plain typo sailed past it.
+
+The deployed fleet auto-heals on next update via the existing always-overwrite migration path (`migrateHooks` unconditionally re-writes this hook from the now-correct template). No new migration code required.
+
+## Decision-point inventory
+
+This change adds no runtime decision point. It corrects generated text and adds a CI test.
+
+- `getActionClaimFollowthroughHook()` template — **modify** — remove one stray line; generated hook now parses.
+- `tests/unit/generated-hooks-parse.test.ts` — **add** — CI-time parse gate over all generated hooks. A build-time signal (fails CI); it holds no runtime authority over any agent.
+
+---
+
+## 1. Over-block
+
+No block/allow surface — over-block not applicable. The CI test only fails the build when a generated hook genuinely fails `node --check`; that is the intended (and only) "block."
+
+## 2. Under-block
+
+`node --check` validates parse-ability, not runtime correctness — a hook that parses but throws at runtime would still pass this test. That gap is acceptable for this layer (parse failure was the actual fleet bug) and is the explicit motivation for Fix B (the runtime session-start hook-integrity guard), which catches post-deploy/runtime breakage. The test also skips `.sh`/`.py` generators (it is a `node` parse gate); shell/python hooks are out of scope here.
+
+## 3. Level-of-abstraction fit
+
+Correct layer. The bug is in source-generated text, so the prevention belongs in CI over the source generators (cheap, deterministic, runs before ship). The complementary runtime layer (heal already-broken hooks on disk without waiting for an update) is deliberately a separate change (Fix B) — this one does not try to be both.
+
+## 4. Signal vs authority compliance
+
+- [x] No — this change has no block/allow surface. The new test is a CI signal (fails the build); it never gates agent behavior at runtime. The template edit is a correctness fix to generated code. `docs/signal-vs-authority.md` reviewed — no brittle-detector-with-authority introduced.
+
+## 5. Interactions
+
+- **Shadowing:** None. The new test is additive and independent of `no-bare-require-in-generated-hooks.test.ts` (that one keeps its narrower source-scan; this one parses). They cover different failure modes and do not shadow each other.
+- **Double-fire:** N/A — test-only + a one-line generated-text fix.
+- **Races:** None. The test writes to a per-run `mkdtemp` dir; no shared state.
+- **Feedback loops:** None.
+
+## 6. External surfaces
+
+- **Other agents / install base:** Positive-only. On next update every agent's `action-claim-followthrough.js` is re-written from the corrected template (always-overwrite), so the per-turn `SyntaxError` stops fleet-wide. No behavior change when the feature is enabled — the hook body is byte-identical except for the removed invalid line.
+- **External systems:** None.
+- **Persistent state:** None.
+- **Operator surface:** No operator-facing actions — not applicable.
+
+## 6b. Operator-surface quality
+
+No operator surface (no `dashboard/*` or form files touched) — not applicable.
+
+## 7. Multi-machine posture (Cross-Machine Coherence)
+
+**machine-local BY DESIGN** — the fix is to a generated on-disk hook file; each machine installs and runs its own hook files locally (hooks are per-checkout infrastructure). The correction reaches every machine through the same always-overwrite migration each machine runs on update — there is no cross-machine state, notice, durable record, or generated URL involved. No one-voice gating, no topic-transfer stranding, no machine-boundary links.
+
+## 8. Rollback cost
+
+Trivial. Revert the two-file commit: the template line returns (re-breaking the hook) and the test is removed. No data migration, no agent-state repair. Because the hook is always-overwritten, a roll-forward or roll-back simply re-writes the hook from whichever template version is shipped.