instar 1.3.631 → 1.3.633

package/dashboard/subscriptions.js

@@ -457,13 +457,18 @@ export function renderAccountMatrix(doc, target, poolScope, pendingScope, transi
     tr.appendChild(el(doc, 'th', 'sub-matrix-acct', sanitizeForDisplay(row.account.email, 'label')));
     for (const c of row.cells) {
       const td = el(doc, 'td', `sub-matrix-cell sub-matrix-${c.state}`);
-      if (c.state === 'empty' || c.state === 'held' || c.state === 'cant-resolve') {
-        // An actionable cell → a "Set up" button (held/cant-resolve let the operator retry).
-        const btn = el(doc, 'button', 'sub-matrix-setup', c.state === 'empty' ? 'Set up' : 'Retry');
+      if (c.state === 'empty' || c.state === 'needs-reauth' || c.state === 'held' || c.state === 'cant-resolve') {
+        // An actionable cell → a button that runs the SAME in-dashboard sign-in flow (PIN → link →
+        // paste code). empty → "Set up"; needs-reauth (an existing account whose login expired) →
+        // "Sign in"; held/cant-resolve → "Retry". A needs-reauth account already resolves to its
+        // email, so the start-cell orchestrator drives a real re-auth — never a cosmetic button.
+        const label = c.state === 'empty' ? 'Set up' : (c.state === 'needs-reauth' ? 'Sign in' : 'Retry');
+        const btn = el(doc, 'button', 'sub-matrix-setup', label);
         btn.setAttribute('data-matrix-setup', '1');
         btn.setAttribute('data-account-id', sanitizeForDisplay(c.accountId, 'label'));
         btn.setAttribute('data-machine-id', sanitizeForDisplay(c.machineId, 'label'));
         if (c.state !== 'empty') {
+          // Show the status word ("⟳ Needs sign-in" / "⚠ Didn't match…") ABOVE the button.
           td.appendChild(el(doc, 'div', 'sub-matrix-glyph', `${MATRIX_CELL_GLYPH[c.state]} ${MATRIX_CELL_WORD[c.state]}`));
         }
         td.appendChild(btn);

package/dist/core/FeedbackManager.d.ts

@@ -22,6 +22,15 @@ export declare class FeedbackManager {
     private version;
     /** Cache of agentName -> pseudonym for resolvePseudonym reverse lookups */
     private pseudonymMap;
+    /**
+     * Webhook backoff state (L364). When the canonical feedback endpoint rate-limits
+     * us (429/503), we stop POSTing until `webhookNextRetryAtMs` and grow the wait
+     * with `webhookConsecutive429s`. In-memory by design: a restart re-probes once
+     * (one cycle) then re-backs-off — back-compatible and self-correcting. This is
+     * what stops `retryUnforwarded()` from re-POSTing the whole backlog every cycle.
+     */
+    private webhookNextRetryAtMs;
+    private webhookConsecutive429s;
     constructor(config: FeedbackConfig);
     /** Standard headers that identify this as a legitimate Instar agent. */
     private getWebhookHeaders;

package/dist/core/FeedbackManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FeedbackManager.d.ts","sourceRoot":"","sources":["../../src/core/FeedbackManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAS/D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,OAAO,CAAS;IACxB,2EAA2E;IAC3E,OAAO,CAAC,YAAY,CAAkC;gBAE1C,MAAM,EAAE,cAAc;IASlC,wEAAwE;IACxE,OAAO,CAAC,iBAAiB;IAoBzB,4EAA4E;IAC5E,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAkBjC;;;OAGG;IACH,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,qBAAqB;IAuBlF;;;OAGG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAS5C;;;OAGG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAoBlD;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,aAAa,GAAG,WAAW,GAAG,gBAAgB,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAqDpH;;OAEG;IACH,IAAI,IAAI,YAAY,EAAE;IAItB;;OAEG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAKpC;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAiDzE,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,cAAc;CAQvB"}
+{"version":3,"file":"FeedbackManager.d.ts","sourceRoot":"","sources":["../../src/core/FeedbackManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAU/D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,OAAO,CAAS;IACxB,2EAA2E;IAC3E,OAAO,CAAC,YAAY,CAAkC;IACtD;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB,CAAK;IACjC,OAAO,CAAC,sBAAsB,CAAK;gBAEvB,MAAM,EAAE,cAAc;IASlC,wEAAwE;IACxE,OAAO,CAAC,iBAAiB;IAoBzB,4EAA4E;IAC5E,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAkBjC;;;OAGG;IACH,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,qBAAqB;IAuBlF;;;OAGG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAS5C;;;OAGG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAoBlD;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,aAAa,GAAG,WAAW,GAAG,gBAAgB,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAiEpH;;OAEG;IACH,IAAI,IAAI,YAAY,EAAE;IAItB;;OAEG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAKpC;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IA0EzE,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,cAAc;CAQvB"}

package/dist/core/FeedbackManager.js

@@ -15,6 +15,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { randomUUID, createHmac, createHash } from 'node:crypto';
 import { SafeFsExecutor } from './SafeFsExecutor.js';
+import { decideFeedbackRetry, parseRetryAfterSeconds } from './feedbackBackoff.js';
 /** Maximum number of feedback items stored locally. */
 const MAX_FEEDBACK_ITEMS = 1000;
 /** Default salt for pseudonym generation when no shared secret is configured. */
@@ -25,6 +26,15 @@ export class FeedbackManager {
     version;
     /** Cache of agentName -> pseudonym for resolvePseudonym reverse lookups */
     pseudonymMap = new Map();
+    /**
+     * Webhook backoff state (L364). When the canonical feedback endpoint rate-limits
+     * us (429/503), we stop POSTing until `webhookNextRetryAtMs` and grow the wait
+     * with `webhookConsecutive429s`. In-memory by design: a restart re-probes once
+     * (one cycle) then re-backs-off — back-compatible and self-correcting. This is
+     * what stops `retryUnforwarded()` from re-POSTing the whole backlog every cycle.
+     */
+    webhookNextRetryAtMs = 0;
+    webhookConsecutive429s = 0;
     constructor(config) {
         if (config.webhookUrl) {
             FeedbackManager.validateWebhookUrl(config.webhookUrl);
@@ -138,8 +148,11 @@ export class FeedbackManager {
             submittedAt: new Date().toISOString(),
             forwarded: false,
         };
-        // Forward to webhook if enabled (before persisting, so we know result)
-        if (this.config.enabled && this.config.webhookUrl) {
+        // Forward to webhook if enabled (before persisting, so we know result).
+        // Skip the POST entirely while we're in a rate-limit backoff window (L364):
+        // hammering a 429-ing endpoint only makes it worse. The local record is still
+        // written below, so retryUnforwarded() will pick it up once the window passes.
+        if (this.config.enabled && this.config.webhookUrl && Date.now() >= this.webhookNextRetryAtMs) {
             try {
                 const payload = {
                     feedbackId: feedback.id,
@@ -161,12 +174,21 @@ export class FeedbackManager {
                     body,
                     signal: AbortSignal.timeout(10000), // 10s timeout
                 });
-                if (response.ok) {
+                const decision = decideFeedbackRetry({
+                    ok: response.ok,
+                    status: typeof response.status === 'number' ? response.status : null,
+                    retryAfterSec: parseRetryAfterSeconds(response.headers?.get?.('retry-after')),
+                    nowMs: Date.now(),
+                    consecutive429s: this.webhookConsecutive429s,
+                });
+                this.webhookNextRetryAtMs = decision.nextRetryAtMs;
+                this.webhookConsecutive429s = decision.consecutive429s;
+                if (decision.markForwarded) {
                     feedback.forwarded = true;
                     console.log(`[feedback] Forwarded to webhook`);
                 }
                 else {
-                    console.error(`[feedback] Webhook returned ${response.status}: ${response.statusText}`);
+                    console.error(`[feedback] Webhook returned ${response.status}: ${response.statusText} — ${decision.reason}`);
                 }
             }
             catch (err) {
@@ -200,8 +222,17 @@ export class FeedbackManager {
         if (!this.config.enabled || !this.config.webhookUrl || unforwarded.length === 0) {
             return { retried: 0, succeeded: 0 };
         }
+        // Respect an active rate-limit backoff window (L364): if the endpoint just
+        // 429'd us, do NOT re-POST the whole backlog this cycle — that is exactly the
+        // self-reinforcing storm this fixes (661 items × every cycle = thousands of 429s).
+        if (Date.now() < this.webhookNextRetryAtMs) {
+            return { retried: 0, succeeded: 0 };
+        }
         let succeeded = 0;
+        let attempted = 0;
         for (const item of unforwarded) {
+            attempted++;
+            let decisionBreak = false;
             try {
                 const payload = {
                     feedbackId: item.id,
@@ -222,19 +253,35 @@ export class FeedbackManager {
                     body,
                     signal: AbortSignal.timeout(10000),
                 });
-                if (response.ok) {
+                const decision = decideFeedbackRetry({
+                    ok: response.ok,
+                    status: typeof response.status === 'number' ? response.status : null,
+                    retryAfterSec: parseRetryAfterSeconds(response.headers?.get?.('retry-after')),
+                    nowMs: Date.now(),
+                    consecutive429s: this.webhookConsecutive429s,
+                });
+                this.webhookNextRetryAtMs = decision.nextRetryAtMs;
+                this.webhookConsecutive429s = decision.consecutive429s;
+                if (decision.markForwarded) {
                     item.forwarded = true;
                     succeeded++;
                 }
+                // Rate-limited → stop the batch NOW; the rest retry after the backoff window.
+                if (decision.breakBatch) {
+                    console.error(`[feedback] retry batch halted after ${attempted}/${unforwarded.length}: ${decision.reason}`);
+                    decisionBreak = true;
+                }
             }
             catch {
-                // @silent-fallback-ok — retry on next attempt
+                // @silent-fallback-ok — network/timeout: retry on next cycle
             }
+            if (decisionBreak)
+                break;
         }
         if (succeeded > 0) {
             this.saveFeedback(items);
         }
-        return { retried: unforwarded.length, succeeded };
+        return { retried: attempted, succeeded };
     }
     // ── Private helpers ──────────────────────────────────────────────
     loadFeedback() {

package/dist/core/FeedbackManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"FeedbackManager.js","sourceRoot":"","sources":["../../src/core/FeedbackManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,uDAAuD;AACvD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,iFAAiF;AACjF,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAOrD,MAAM,OAAO,eAAe;IAClB,MAAM,CAAiB;IACvB,YAAY,CAAS;IACrB,OAAO,CAAS;IACxB,2EAA2E;IACnE,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEtD,YAAY,MAAsB;QAChC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,eAAe,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC;IAC3C,CAAC;IAED,wEAAwE;IAChE,iBAAiB,CAAC,IAAY;QACpC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,UAAU,IAAI,CAAC,OAAO,UAAU,OAAO,CAAC,OAAO,GAAG;YAChE,kBAAkB,EAAE,IAAI,CAAC,OAAO;SACjC,CAAC;QAEF,qDAAqD;QACrD,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;iBAC7D,MAAM,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;iBAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;YAC1C,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;QAC5C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IACpE,MAAM,CAAC,kBAAkB,CAAC,GAAW;QAC3C,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS;YACpF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,uBAAuB,CAAC,KAAa,EAAE,WAAmB;QACxD,oCAAoC;QACpC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QAC/E,CAAC;QAED,yFAAyF;QACzF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;QACrG,CAAC;QAED,mDAAmD;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC;QACvF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;QACpF,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,SAAiB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;QAClE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/C,wCAAwC;QACxC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,SAAiB;QAChC,8BAA8B;QAC9B,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;QAC3C,CAAC;QAED,qCAAqC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACzD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO,IAAI,CAAC,SAAS,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAA+E;QAC1F,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAiB;YAC7B,GAAG,IAAI;YACP,EAAE,EAAE,MAAM,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YACrC,cAAc;YACd,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,KAAK;SACjB,CAAC;QAEF,uEAAuE;QACvE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,cAAc;oBACd,aAAa,EAAE,IAAI,CAAC,OAAO;oBAC3B,WAAW,EAAE,OAAO,CAAC,OAAO;oBAC5B,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;iBAClC,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBACrC,IAAI;oBACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc;iBACnD,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gBACjD,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iEAAiE;gBACjE,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,EAAU;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACtC,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;oBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBACrC,IAAI;oBACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;iBACnC,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,SAAS,EAAE,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IAED,oEAAoE;IAE5D,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,KAAqB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,oEAAoE;QACpE,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACjG,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACxH,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,IAAkB;QACvC,IAAI,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,sDAAsD;QACtD,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACtC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAEO,cAAc,CAAC,OAAqB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;YACrB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"FeedbackManager.js","sourceRoot":"","sources":["../../src/core/FeedbackManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnF,uDAAuD;AACvD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,iFAAiF;AACjF,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAOrD,MAAM,OAAO,eAAe;IAClB,MAAM,CAAiB;IACvB,YAAY,CAAS;IACrB,OAAO,CAAS;IACxB,2EAA2E;IACnE,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;IACtD;;;;;;OAMG;IACK,oBAAoB,GAAG,CAAC,CAAC;IACzB,sBAAsB,GAAG,CAAC,CAAC;IAEnC,YAAY,MAAsB;QAChC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,eAAe,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC;IAC3C,CAAC;IAED,wEAAwE;IAChE,iBAAiB,CAAC,IAAY;QACpC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,UAAU,IAAI,CAAC,OAAO,UAAU,OAAO,CAAC,OAAO,GAAG;YAChE,kBAAkB,EAAE,IAAI,CAAC,OAAO;SACjC,CAAC;QAEF,qDAAqD;QACrD,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;iBAC7D,MAAM,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;iBAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;YAC1C,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;QAC5C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IACpE,MAAM,CAAC,kBAAkB,CAAC,GAAW;QAC3C,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS;YACpF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,uBAAuB,CAAC,KAAa,EAAE,WAAmB;QACxD,oCAAoC;QACpC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QAC/E,CAAC;QAED,yFAAyF;QACzF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;QACrG,CAAC;QAED,mDAAmD;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC;QACvF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;QACpF,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,SAAiB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;QAClE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/C,wCAAwC;QACxC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,SAAiB;QAChC,8BAA8B;QAC9B,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;QAC3C,CAAC;QAED,qCAAqC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACzD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO,IAAI,CAAC,SAAS,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAA+E;QAC1F,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAiB;YAC7B,GAAG,IAAI;YACP,EAAE,EAAE,MAAM,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YACrC,cAAc;YACd,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,KAAK;SACjB,CAAC;QAEF,wEAAwE;QACxE,4EAA4E;QAC5E,8EAA8E;QAC9E,+EAA+E;QAC/E,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC7F,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,cAAc;oBACd,aAAa,EAAE,IAAI,CAAC,OAAO;oBAC3B,WAAW,EAAE,OAAO,CAAC,OAAO;oBAC5B,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;iBAClC,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBACrC,IAAI;oBACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc;iBACnD,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,mBAAmB,CAAC;oBACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,MAAM,EAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;oBACpE,aAAa,EAAE,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;oBAC7E,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;oBACjB,eAAe,EAAE,IAAI,CAAC,sBAAsB;iBAC7C,CAAC,CAAC;gBACH,IAAI,CAAC,oBAAoB,GAAG,QAAQ,CAAC,aAAa,CAAC;gBACnD,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC,eAAe,CAAC;gBACvD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC3B,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gBACjD,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/G,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iEAAiE;gBACjE,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,EAAU;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACtC,CAAC;QAED,2EAA2E;QAC3E,8EAA8E;QAC9E,mFAAmF;QACnF,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACtC,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,SAAS,EAAE,CAAC;YACZ,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,aAAa,EAAE,IAAI,CAAC,OAAO;oBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBACrC,IAAI;oBACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;iBACnC,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,mBAAmB,CAAC;oBACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,MAAM,EAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;oBACpE,aAAa,EAAE,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;oBAC7E,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;oBACjB,eAAe,EAAE,IAAI,CAAC,sBAAsB;iBAC7C,CAAC,CAAC;gBACH,IAAI,CAAC,oBAAoB,GAAG,QAAQ,CAAC,aAAa,CAAC;gBACnD,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC,eAAe,CAAC;gBACvD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,SAAS,EAAE,CAAC;gBACd,CAAC;gBACD,8EAA8E;gBAC9E,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,uCAAuC,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC5G,aAAa,GAAG,IAAI,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;YACD,IAAI,aAAa;gBAAE,MAAM;QAC3B,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAC3C,CAAC;IAED,oEAAoE;IAE5D,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,KAAqB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,oEAAoE;QACpE,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACjG,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACxH,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,IAAkB;QACvC,IAAI,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,sDAAsD;QACtD,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACtC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAEO,cAAc,CAAC,OAAqB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;YACrB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;CACF"}

package/dist/core/feedbackBackoff.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Feedback webhook retry/backoff decision (L364 — No Unbounded Self-Reinforcing
+ * Loops; Responsible Resource).
+ *
+ * THE BUG THIS FIXES (observed live 2026-06-20, topic 13481): the agent had a
+ * backlog of 661 un-forwarded feedback items and a canonical feedback endpoint
+ * that was returning 429 (Too Many Requests). `retryUnforwarded()` looped the
+ * ENTIRE backlog every scheduled cycle, POSTing all 661, getting 429 on each,
+ * marking none forwarded — so the next cycle re-POSTed all 661 again, forever
+ * (2,384 429s and climbing). A loop hammering a rate-limited external endpoint
+ * with no backoff: bad-citizenship to the external service AND wasted local work
+ * that contributed to event-loop pressure.
+ *
+ * This pure decider answers, per webhook response, three questions:
+ *   - markForwarded — did this item land (2xx)?
+ *   - breakBatch    — are we rate-limited (429/503)? Then STOP the rest of this
+ *                     batch immediately; sending more only makes the 429 worse.
+ *   - nextRetryAtMs — don't touch the webhook again until this wall-clock ms
+ *                     (honors a Retry-After header, else exponential backoff,
+ *                     capped). The caller gates BOTH submit() and the next
+ *                     retry cycle on this.
+ *
+ * Pure + deterministic → fully unit-testable. SIGNAL-style: it decides cadence,
+ * it never blocks the local record (the local feedback store is always written).
+ */
+export interface FeedbackRetryInputs {
+    /** `response.ok` — the success signal. Robust: every real fetch Response has it,
+     *  and we never depend on a numeric status being present to decide "forwarded". */
+    ok: boolean;
+    /** HTTP status of the webhook POST, or null on a network/timeout error / absent.
+     *  Used ONLY to classify a rate-limit (429/503) for backoff — never for success. */
+    status: number | null;
+    /** Parsed Retry-After header in seconds, if the server sent one (429/503). */
+    retryAfterSec?: number;
+    /** Wall clock now (ms). */
+    nowMs: number;
+    /** Consecutive rate-limit (429/503) responses seen so far (for the exp curve). */
+    consecutive429s: number;
+    /** Base backoff (ms) for the exponential schedule. Default caller: 60_000. */
+    baseBackoffMs?: number;
+    /** Cap on the backoff (ms). Default caller: 3_600_000 (1h). */
+    maxBackoffMs?: number;
+}
+export interface FeedbackRetryDecision {
+    /** The item forwarded successfully (2xx) → mark it forwarded. */
+    markForwarded: boolean;
+    /** Rate-limited → STOP this retry batch (do not hammer the remaining items). */
+    breakBatch: boolean;
+    /** Do not POST the webhook again until this wall-clock ms. 0 = no hold. */
+    nextRetryAtMs: number;
+    /** New consecutive-429 count for the caller to persist. */
+    consecutive429s: number;
+    reason: string;
+}
+export declare function decideFeedbackRetry(i: FeedbackRetryInputs): FeedbackRetryDecision;
+/** Parse a Retry-After header value (delta-seconds form only) → seconds | undefined. */
+export declare function parseRetryAfterSeconds(headerValue: string | null | undefined): number | undefined;
+//# sourceMappingURL=feedbackBackoff.d.ts.map

package/dist/core/feedbackBackoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedbackBackoff.d.ts","sourceRoot":"","sources":["../../src/core/feedbackBackoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,mBAAmB;IAClC;uFACmF;IACnF,EAAE,EAAE,OAAO,CAAC;IACZ;wFACoF;IACpF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,eAAe,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,iEAAiE;IACjE,aAAa,EAAE,OAAO,CAAC;IACvB,gFAAgF;IAChF,UAAU,EAAE,OAAO,CAAC;IACpB,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAID,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,mBAAmB,GAAG,qBAAqB,CAgDjF;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAIjG"}

package/dist/core/feedbackBackoff.js

@@ -0,0 +1,81 @@
+/**
+ * Feedback webhook retry/backoff decision (L364 — No Unbounded Self-Reinforcing
+ * Loops; Responsible Resource).
+ *
+ * THE BUG THIS FIXES (observed live 2026-06-20, topic 13481): the agent had a
+ * backlog of 661 un-forwarded feedback items and a canonical feedback endpoint
+ * that was returning 429 (Too Many Requests). `retryUnforwarded()` looped the
+ * ENTIRE backlog every scheduled cycle, POSTing all 661, getting 429 on each,
+ * marking none forwarded — so the next cycle re-POSTed all 661 again, forever
+ * (2,384 429s and climbing). A loop hammering a rate-limited external endpoint
+ * with no backoff: bad-citizenship to the external service AND wasted local work
+ * that contributed to event-loop pressure.
+ *
+ * This pure decider answers, per webhook response, three questions:
+ *   - markForwarded — did this item land (2xx)?
+ *   - breakBatch    — are we rate-limited (429/503)? Then STOP the rest of this
+ *                     batch immediately; sending more only makes the 429 worse.
+ *   - nextRetryAtMs — don't touch the webhook again until this wall-clock ms
+ *                     (honors a Retry-After header, else exponential backoff,
+ *                     capped). The caller gates BOTH submit() and the next
+ *                     retry cycle on this.
+ *
+ * Pure + deterministic → fully unit-testable. SIGNAL-style: it decides cadence,
+ * it never blocks the local record (the local feedback store is always written).
+ */
+const RATE_LIMIT_STATUSES = new Set([429, 503]);
+export function decideFeedbackRetry(i) {
+    const base = i.baseBackoffMs ?? 60_000;
+    const cap = i.maxBackoffMs ?? 3_600_000;
+    // Success → forwarded, clear any backoff. Driven by response.ok (always present),
+    // NOT by a numeric status, so it is robust to any response shape.
+    if (i.ok) {
+        return {
+            markForwarded: true,
+            breakBatch: false,
+            nextRetryAtMs: 0,
+            consecutive429s: 0,
+            reason: `forwarded${i.status !== null ? ` (${i.status})` : ''}`,
+        };
+    }
+    // Rate-limited (429) or service-unavailable (503) → back off AND halt the batch.
+    if (i.status !== null && RATE_LIMIT_STATUSES.has(i.status)) {
+        const n = i.consecutive429s + 1;
+        let waitMs;
+        if (i.retryAfterSec !== undefined && Number.isFinite(i.retryAfterSec) && i.retryAfterSec > 0) {
+            waitMs = Math.min(i.retryAfterSec * 1000, cap);
+        }
+        else {
+            // Exponential from base: base, 2×base, 4×base, … capped.
+            waitMs = Math.min(base * 2 ** (n - 1), cap);
+        }
+        return {
+            markForwarded: false,
+            breakBatch: true,
+            nextRetryAtMs: i.nowMs + waitMs,
+            consecutive429s: n,
+            reason: `rate-limited (${i.status}) — backing off ${Math.round(waitMs / 1000)}s, batch halted`,
+        };
+    }
+    // Any other non-2xx, or a network/timeout error: leave the item un-forwarded so
+    // it retries on the next cycle (today's behavior), but do NOT halt the batch —
+    // a per-item error is not a pool-wide rate-limit. PRESERVE the 429 streak (do not
+    // reset it): an endpoint flapping between 429 and 500 must keep climbing the
+    // exponential curve, not restart it at base on every interleaved 500. Only a
+    // genuine 2xx success (above) clears the streak.
+    return {
+        markForwarded: false,
+        breakBatch: false,
+        nextRetryAtMs: 0,
+        consecutive429s: i.consecutive429s,
+        reason: i.status === null ? 'network/timeout error — retry next cycle' : `error ${i.status} — retry next cycle`,
+    };
+}
+/** Parse a Retry-After header value (delta-seconds form only) → seconds | undefined. */
+export function parseRetryAfterSeconds(headerValue) {
+    if (!headerValue)
+        return undefined;
+    const n = Number(headerValue.trim());
+    return Number.isFinite(n) && n >= 0 ? n : undefined;
+}
+//# sourceMappingURL=feedbackBackoff.js.map

package/dist/core/feedbackBackoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedbackBackoff.js","sourceRoot":"","sources":["../../src/core/feedbackBackoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAiCH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEhD,MAAM,UAAU,mBAAmB,CAAC,CAAsB;IACxD,MAAM,IAAI,GAAG,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC;IACvC,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,IAAI,SAAS,CAAC;IAExC,kFAAkF;IAClF,kEAAkE;IAClE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QACT,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,UAAU,EAAE,KAAK;YACjB,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,MAAM,EAAE,YAAY,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;SAChE,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;QAChC,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC7F,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,yDAAyD;YACzD,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,CAAC,CAAC,KAAK,GAAG,MAAM;YAC/B,eAAe,EAAE,CAAC;YAClB,MAAM,EAAE,iBAAiB,CAAC,CAAC,MAAM,mBAAmB,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB;SAC/F,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,+EAA+E;IAC/E,kFAAkF;IAClF,6EAA6E;IAC7E,6EAA6E;IAC7E,iDAAiD;IACjD,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,UAAU,EAAE,KAAK;QACjB,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,qBAAqB;KAChH,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,sBAAsB,CAAC,WAAsC;IAC3E,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.631",
+  "version": "1.3.633",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-20T13:47:07.338Z",
-  "instarVersion": "1.3.631",
+  "generatedAt": "2026-06-20T22:29:33.870Z",
+  "instarVersion": "1.3.633",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {

package/upgrades/1.3.632.md

@@ -0,0 +1,31 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The Subscriptions dashboard's account × machine matrix had a dead-end. A cell whose login had expired showed only the grey text "⟳ Needs sign-in" with **no button to act on** — so you could see an account needed re-authentication but had no way to do anything about it from the dashboard. Every other cell-state was already actionable: an empty cell gets a "Set up" button, a failed cell gets a "Retry" button. The `needs-reauth` state was simply left out of the branch that renders a button and fell through to the "just draw text" path.
+
+This fix moves `needs-reauth` into the actionable branch in `dashboard/subscriptions.js`. The cell now shows the status word "⟳ Needs sign-in" **and** a "Sign in" button directly below it. The button carries the same `(account, machine)` ids as the "Set up" button and runs the exact same in-dashboard flow (PIN → provider sign-in link → paste code). Because a needs-sign-in account already resolves to its email, the `start-cell` orchestrator drives a genuine re-authentication — the button is real, not cosmetic. No server route, authority, or data model changed; the PIN gate on starting a login is untouched.
+
+## What to Tell Your User
+
+If you saw an account in your Subscriptions grid marked "Needs sign-in" with no way to fix it, that's now a one-tap action. The cell shows "Needs sign-in" with a **Sign in** button right below — tap it, enter your PIN, open the sign-in link, and paste the code back, exactly like setting up a new account. Everything stays inside the dashboard; nothing changed about who's allowed to start a login.
+
+## Summary of New Capabilities
+
+- The account × machine matrix's "Needs sign-in" cell is now actionable: it renders the status word **plus a "Sign in" button** that runs the existing in-dashboard re-authentication flow (PIN → link → paste code).
+- The button works for an account whose login expired on this machine OR on a peer machine — it rides the same PIN-gated, mesh-delivered `start-cell` path the "Set up" button already uses.
+- No change to authorization: starting a login still requires the operator's dashboard PIN.
+
+## Evidence
+
+- New regression unit test in `tests/unit/subscriptions-render.test.ts`: asserts a `needs-reauth` cell renders the "Needs sign-in" word AND a `.sub-matrix-setup` "Sign in" button wired to the start-cell flow (`data-matrix-setup`, correct account/machine ids). 34/34 in that file pass.
+- Related front-end tests green: `follow-me-controller-wiring.test.ts` (8) and `account-follow-me-locally-executable.test.ts` (9) — confirms the existing tap-handler/flow this button re-uses is unchanged.
+- Traced root cause directly in `renderAccountMatrix`: `needs-reauth` was absent from the actionable-cell branch condition; the server `start-cell` route resolves an existing account's email and drives a real re-auth, so the new button is functional.
+- Side-effects review: `upgrades/side-effects/matrix-needs-signin-button.md` (no block/allow surface; no new authority; machine-local render of an existing pool-scope flow). Tier 1.
+
+## ELI16
+
+The Subscriptions screen has a grid showing which account is signed in on which machine. Empty squares had a "Set up" button you could tap. But a square for an account whose login had run out just said "Needs sign-in" in grey — with no button. So you could see the problem but couldn't fix it from the screen. Turns out the code that decides "should this square have a button?" simply forgot to include the "needs sign-in" case, so it drew plain text instead. This fix adds the button: the square now says "Needs sign-in" with a "Sign in" button right under it, and tapping it runs the same sign-in steps as setting up a new account (enter your PIN, open the link, paste the code). It actually signs the account back in — it's not a fake button — and it works whether the account expired on this machine or another one.

package/upgrades/1.3.633.md

@@ -0,0 +1,37 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+`FeedbackManager` now treats a `429`/`503` from the canonical feedback endpoint as a
+stop-signal: it HALTS the current retry batch and waits (honoring `Retry-After`, else
+exponential 60s→1h) before POSTing again. Previously `retryUnforwarded()` re-POSTed the
+ENTIRE un-forwarded backlog every scheduled cycle regardless of rate-limiting — against
+a 429-ing endpoint that re-sent the whole backlog forever (observed live: 661 backlog
+items → 2,384+ failed POSTs). A pure `decideFeedbackRetry()` helper makes the cadence
+decision; the local feedback record is always written (nothing is lost or dropped).
+
+## What to Tell Your User
+
+If your agent had been quietly retrying feedback against a busy endpoint, it now backs
+off politely instead of hammering it — fewer wasted network calls and less background
+churn. Nothing you do changes; no feedback is lost (notes are still saved locally and
+sent once the endpoint is ready).
+
+## Summary of New Capabilities
+
+- Rate-limit-aware feedback forwarding: halts on 429/503, honors `Retry-After`, backs
+  off exponentially (capped), and never re-sends the whole backlog against a limited
+  endpoint. Back-compatible on a healthy endpoint (forwards immediately as before).
+
+## Evidence
+
+- New `tests/unit/feedbackBackoff.test.ts` (11 cases): 2xx clears backoff; 429/503 halt
+  + exponential backoff capped at 1h; `Retry-After` honored + capped; non-429 errors
+  retry-next-cycle and PRESERVE the 429 streak (flap protection); junk/negative
+  `Retry-After` rejected.
+- `tests/unit/FeedbackManager.test.ts` (+2 cases): a 429 halts the batch after ONE POST
+  (not the whole backlog) and the next cycle POSTs zero times while backed off; no item
+  lost. Independent second-pass review concurred.

package/upgrades/eli16/feedback-429-backoff.eli16.md

@@ -0,0 +1,47 @@
+# Feedback retry storm fix — in plain terms
+
+## What this is
+
+Your agent has a little "phone home" feature: when something noteworthy happens, it
+saves a feedback note locally and tries to send a copy to a central feedback inbox
+over the internet. A background job periodically retries any notes that haven't been
+sent yet.
+
+## What was broken
+
+The central inbox started replying "429 — too many requests" (it was rate-limiting
+us). The retry job didn't understand "429" as "slow down." It just kept re-sending
+the **entire** backlog of unsent notes — 661 of them — every single cycle. Each one
+got a 429, none were marked as sent, so the next cycle tried all 661 again. Over time
+that piled up to **2,384+ failed sends**, and the repeated bursts of work were one of
+the things briefly freezing the agent's main loop (which, knock-on, made the two
+machines' clocks look out of sync and broke their handshake — the very problem the
+larger project is fixing).
+
+## What's new
+
+The retry now reads the inbox's reply and reacts like a polite client:
+- If a note sends fine, it's marked done.
+- If the inbox says "429 / try later," the agent **stops the batch immediately**
+  (no point hammering a server that's asking us to back off) and **waits** before
+  trying again. If the server says exactly how long to wait, it obeys that; otherwise
+  it waits a minute, then two, then four… up to an hour, then settles there.
+- New notes submitted during a backoff are still saved locally and just wait their
+  turn — nothing is lost.
+
+## The safeguards
+
+- **Nothing is dropped.** Every note is still stored locally; backoff only delays
+  *sending*, never *recording*.
+- **Self-correcting.** The backoff lives in memory; after a restart it tries once and
+  re-learns the backoff — no stuck state.
+- **Back-compatible.** When the inbox is healthy, behavior is identical to before
+  (send immediately, never wait).
+- **Reversible.** It's two files; reverting restores the old behavior exactly.
+
+## What you need to decide
+
+Nothing — it's a contained, reversible fix that only makes the agent a better
+internet citizen and stops wasted work. The only judgment call baked in: we treat the
+two standard "slow down" replies (429 and 503) as stop-signals, and treat other
+errors as one-off retries — matching how the wider web expects clients to behave.

package/upgrades/side-effects/feedback-429-backoff.md

@@ -0,0 +1,71 @@
+# Side-Effects Review — Feedback webhook 429 backoff (stop the retry storm)
+
+**Tier:** 1 (contained fix to one manager + a pure helper).
+**Files:** `src/core/feedbackBackoff.ts` (new pure helper), `src/core/FeedbackManager.ts` (wiring), `tests/unit/feedbackBackoff.test.ts`, `tests/unit/FeedbackManager.test.ts`.
+
+## What changed
+
+`FeedbackManager.retryUnforwarded()` previously looped the ENTIRE un-forwarded
+backlog every scheduled cycle, POSTing each item; on a non-2xx it simply left the
+item un-forwarded — so against a 429-ing endpoint it re-POSTed the whole backlog
+forever (observed live 2026-06-20, topic 13481: 661 un-forwarded items, 2,384+ 429s).
+
+Now a pure `decideFeedbackRetry()` classifies each webhook response:
+- 2xx → mark forwarded, clear backoff.
+- **429/503 → HALT the batch immediately** and set a backoff window (`Retry-After`
+  if present, else exponential from 60s, capped at 1h).
+- other non-2xx / network error → leave un-forwarded, retry next cycle (unchanged),
+  no batch halt.
+
+`submit()` and `retryUnforwarded()` both skip the webhook entirely while inside the
+backoff window. State (`webhookNextRetryAtMs`, `webhookConsecutive429s`) is in-memory.
+
+## The 8 questions
+
+1. **Over-block.** While backed off, `submit()` skips the live POST and the item is
+   stored locally un-forwarded (picked up by the next allowed retry cycle). No
+   feedback is lost — only deferred. The local store is always written, exactly as
+   before. Worst case: a feedback item is forwarded minutes later instead of
+   instantly, during an active rate-limit — acceptable and correct.
+2. **Under-block.** A non-429/503 error (e.g. a one-off 500) does NOT halt the batch
+   — by design, since it is a per-item issue, not a pool-wide rate-limit. If an
+   endpoint signalled overload with a bare 500 (not 503/429) the storm guard would
+   not engage; this is the documented trade (we only treat the standard rate-limit
+   statuses as "stop"). The exponential cap still bounds total backoff growth.
+3. **Level-of-abstraction fit.** Correct layer: the decision is a pure helper; the
+   FeedbackManager owns the I/O and the (in-memory) backoff state. No new subsystem.
+4. **Signal vs authority.** It governs the webhook POST cadence only. It NEVER blocks
+   the local feedback record (always written) and never gates anything else. It is
+   the "Responsible Resource" / L364 (No Unbounded Self-Reinforcing Loops) standard
+   made real for this loop.
+5. **Interactions.** No shadowing. The scheduled `feedback-retry` job still drives
+   `retryUnforwarded()`; this only changes what one cycle does (halt-on-429 instead
+   of POST-all). The `feedback-factory` receiver/processor are unaffected (different
+   path). In-memory state means a server restart re-probes once then re-backs-off —
+   self-correcting, no persistence coupling.
+6. **External surfaces.** This DECREASES external load (fewer POSTs to the canonical
+   feedback endpoint) — strictly better citizenship. No new external call. Honors the
+   server's `Retry-After` when provided.
+7. **Multi-machine posture.** Machine-local BY DESIGN: each machine forwards its own
+   local feedback store and keeps its own in-memory backoff. There is no shared state
+   to replicate (the backoff is about THIS machine's POST cadence to the endpoint).
+   No topic-transfer or URL-survival concern (no user-facing surface).
+8. **Rollback cost.** Trivial: revert the two files. No migration, no persisted state,
+   no config. Back-compatible — on a healthy (2xx) endpoint behavior is identical to
+   before (forward immediately, no backoff ever set).
+
+## Second-pass
+
+Requested (retry/recovery loop with external side-effects).
+
+**Reviewer verdict (independent): Concur with the review.** Confirmed: (1) stop-after-
+first-429 is correct (`breakBatch`→`break` before any further POST); (2) next-cycle
+gating is symmetric (submit `>= nextRetryAtMs`, retry early-returns on `<`); (3) no
+item loss (un-forwarded items stay persisted+retryable, success-only save is safe);
+(4) no stuck-forever (a 2xx always returns `nextRetryAtMs:0`+`consecutive429s:0`).
+Two non-blocking notes: (a) the load→fetch→full-overwrite race in `retryUnforwarded()`
+is **pre-existing** (`appendFeedback` already read-modify-writes) and untouched here —
+not a regression; (b) a non-429 error mid-recovery reset the 429 streak, softening the
+curve on a flapping endpoint. **Note (b) addressed in code**: the helper now PRESERVES
+`consecutive429s` on a non-429 error and clears it only on a genuine 2xx, with a
+flap-protection test. Note (a) is logged as a separate pre-existing item, out of scope.

package/upgrades/side-effects/matrix-needs-signin-button.md

@@ -0,0 +1,70 @@
+# Side-Effects Review — Account matrix "Needs sign-in" → actionable Sign-in button
+
+**Version / slug:** `matrix-needs-signin-button`
+**Date:** `2026-06-20`
+**Author:** `Instar Agent (echo)`
+**Second-pass reviewer:** `not required (no block/allow surface, no lifecycle/gate/sentinel)`
+
+## Summary of the change
+
+The account × machine matrix in the Subscriptions dashboard had a cell-state, `needs-reauth` ("Needs sign-in"), that rendered as static text with no actionable control — a dead-end. This change (one branch condition + a button label in `dashboard/subscriptions.js`, plus one unit test in `tests/unit/subscriptions-render.test.ts`) moves `needs-reauth` into the actionable rendering branch so it draws the status word "⟳ Needs sign-in" AND a "Sign in" button directly below it. The button carries the same `data-matrix-setup` / `data-account-id` / `data-machine-id` attributes the empty-cell "Set up" button does, so it routes through the EXISTING, unchanged PIN-gated `start-cell` → sign-in-link → code-paste flow. No server route, authority, or data model is touched.
+
+## Decision-point inventory
+
+This change touches NO decision point. It is presentation logic only: it decides which DOM (a button vs plain text) to render for an already-computed cell state. The authority that gates starting a login (the dashboard-PIN check on `POST /subscription-pool/matrix/start-cell`) is unchanged and continues to be the sole gate.
+
+- `renderAccountMatrix` cell rendering (`dashboard/subscriptions.js`) — modify — adds `needs-reauth` to the set of cell-states that render an actionable button; pure view logic, no gating.
+
+---
+
+## 1. Over-block
+
+No block/allow surface — over-block not applicable. The change ADDS an affordance; it rejects nothing.
+
+---
+
+## 2. Under-block
+
+No block/allow surface — under-block not applicable. The PIN gate on `start-cell` is unchanged, so this adds no new path that bypasses authorization: tapping "Sign in" still requires the operator's PIN to actually start a login, exactly as "Set up" does.
+
+---
+
+## 3. Level-of-abstraction fit
+
+Correct layer. This is a view-rendering concern living in the dashboard front-end, exactly where the sibling "Set up"/"Retry" button logic already lives. It re-uses the existing `start-cell` orchestrator rather than re-implementing any email-resolution / mandate / login logic — it feeds the smart gate that already exists instead of running parallel to it.
+
+---
+
+## 4. Signal vs authority compliance
+
+Compliant. The change adds NO blocking authority and NO brittle decision logic. It renders a button that, when tapped, calls an existing PIN-gated authority (`start-cell`). The button itself holds no authority; the server endpoint remains the single authority and is untouched.
+
+---
+
+## 5. Interactions
+
+- The new button uses the SAME delegated tap handler (`wireMatrixSetup` → `onSetupTap` → `onConfirmTap` → `start-cell`) as the empty-cell "Set up" button, so it cannot double-fire or shadow another handler — it is the same code path keyed on `data-matrix-setup`.
+- `start-cell` already handles an existing account: it resolves the account email from the accountId (`resolveFollowMeEnrollTarget`) and has self-target idempotency that reuses an in-flight pending login. A needs-reauth account resolves to its email, so the flow drives a real re-auth and does not mint a duplicate when one is already pending.
+- No race with adjacent cleanup: the cell re-renders from durable state each poll; an in-progress login transitions the cell to the in-progress (◷) state with its Cancel button, exactly as a "Set up"-initiated login does.
+
+---
+
+## 6. External surfaces
+
+The only external surface is the dashboard UI: a `needs-reauth` cell now shows a "Sign in" button. No change to any API response, agent-to-agent surface, or other system. No new timing/conversation-state dependency — rendering is a pure function of the already-fetched pool/pending state.
+
+### 6b. Operator-surface quality
+
+This change EXISTS to improve operator-surface quality: it converts a non-actionable status into a one-tap action, matching the operator's directive that everything be actionable from the dashboard. The button label ("Sign in") matches the flow's existing vocabulary; the status word remains visible so the operator still understands WHY the action is offered.
+
+---
+
+## 7. Multi-machine posture (Cross-Machine Coherence)
+
+Machine-local rendering of a pool-scope read, BY DESIGN. The matrix already reads `scope=pool` (peers merged) and the `start-cell` flow already delivers the mandate over the mesh for a peer-target cell. A needs-reauth cell on a PEER machine (e.g. the account expired on the Laptop while the Mini fronts the dashboard) routes its "Sign in" through the same proven cross-machine `start-cell` → peer enroll/start path the "Set up" button uses. No new replication or per-machine state is introduced; the change rides the existing cross-machine plumbing.
+
+---
+
+## 8. Rollback cost
+
+Trivial. Revert the single commit (one branch condition + label + one test) — the cell returns to showing static "Needs sign-in" text. No data migration, no agent-state repair, no release coordination. Dashboard files ship static (no compiled artifact), so a revert is immediately effective on next deploy.