instar 1.3.641 → 1.3.642

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.641",
+  "version": "1.3.642",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-22T03:53:34.493Z",
-  "instarVersion": "1.3.641",
+  "generatedAt": "2026-06-22T07:19:14.502Z",
+  "instarVersion": "1.3.642",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1562,7 +1562,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "b8cabbf22cdb28187bc70a5337a9e340996eb8eace88790b9bf8ba2d9a2b5630",
+      "contentHash": "80fdbcd7e2b0c600a1766e7ebc736aa394e0eb8ccf73417a10a9643903d7a7b4",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.642.md

@@ -0,0 +1,46 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+A new guard in the agent's Stop hook catches a specific, recurring self-sabotage: the agent names
+clear work it knows how to do next, then stops anyway with a self-protective excuse — "this session
+is too long," "it's late," "I made mistakes so I'll be careful," "I don't want to rush," "it's
+tracked so it won't slip," "I'll do it next session." Those are false reasons to stop. The guard
+detects the pattern (a named next action plus one of those rationalizations) and blocks the stop
+once, re-feeding a reminder that the excuse is false and to proceed now. It can never trap the agent
+in a loop, and it leaves a genuine stop alone (a real external blocker, work actually finished, or a
+decision only the user can make).
+
+## What to Tell Your User
+
+Your agent should stop wasting your time by quitting partway through work it clearly knows how to
+finish. If it tries to stop with an excuse like "it's late" or "let's do this next session" while
+there's an obvious next step, it now gets caught and nudged to just do the thing — so you no longer
+have to come back and say "okay, do the thing you just said you'd do."
+
+## Summary of New Capabilities
+
+- `stop-gate-router` hook gains a mode-independent `falseExcuseDeferralGuard`: when the final message
+  contains BOTH a named piece of remaining work AND a self-protective deferral rationalization
+  (session-length, time-of-day, made-mistakes, don't-rush, tracked-so-it-won't-slip, next-session),
+  it blocks the stop once and re-feeds a "this is false — proceed now" directive.
+- Pure substring matching, fires once per stop (the `stop_hook_active` loop guard prevents traps),
+  and requires the AND of both signals so a genuine completion or a no-work time reference is not
+  blocked.
+- Ships to every agent automatically via the always-overwrite hook update path (no per-agent
+  migration needed).
+
+## Evidence
+
+**Before:** the Stop gate only caught "stated-continuation" (the agent saying "I'll do X now" then
+not). It did NOT catch the inverse — the agent explicitly justifying NOT doing the clear next thing
+("after a long session I won't rush this; it's tracked"). That pattern repeatedly ended sessions
+early and forced the operator to re-issue "do the thing you just said." **After:** the new guard
+catches it. Reproduced by `tests/unit/stop-gate-false-excuse-deferral.test.ts` (6 cases): it renders
+valid JS, blocks the real-world excuse-stop and a session-length/next-session deferral, does NOT
+block a genuine completion or a time reference with no pending work, and does NOT re-block under
+`stop_hook_active`. The existing `stop-gate-stated-continuation` + `generated-hooks-parse` suites
+stay green.

package/upgrades/side-effects/false-excuse-deferral-stop-guard.md

@@ -0,0 +1,75 @@
+# Side-Effects Review — False-Excuse Deferral Stop-Guard
+
+**Slug:** `false-excuse-deferral-stop-guard` · **Tier:** 1 (small, low-risk hook behavior addition;
+operator-requested direct fix, no spec). Touches `PostUpdateMigrator.getStopGateRouterHook()` (a
+hook template), so the tier signal flags `belowFloor` (a PostUpdateMigrator touch raises the floor) —
+accepted: the change is a self-contained substring guard, fully reversible, no external surface.
+
+## Summary of the change
+
+`stop-gate-router` hook gains `falseExcuseDeferralGuard`, mirroring the existing
+`statedContinuationGuard`: a mode-independent IIFE that, on a Stop, blocks ONCE when the final
+assistant message contains BOTH (a) a named piece of remaining work AND (b) a self-protective
+deferral rationalization (session-length / time-of-day / made-mistakes / don't-rush /
+tracked-so-it-won't-slip / next-session), re-feeding a "this excuse is false — proceed" directive.
+Same change in the deployed copy is overwritten from this source on the next update (Migration
+Parity — always-overwrite built-in hooks), so it reaches every agent.
+
+## 1. Over-block / false positive
+
+The AND-of-both-signals requirement is the false-positive control: a self-protective phrase alone
+(e.g. "it's late, but everything is done") does NOT block — `knownWork` must also match. Tested:
+a genuine completion and a time-reference-with-no-pending-work both pass through (no block). Cost of
+any residual false positive is bounded to ONE extra turn (the agent re-affirms and re-stops), because
+the guard fires once.
+
+## 2. Under-block
+
+If the agent stops with an excuse but uses wording outside the phrase lists, it slips through (a
+false negative) — acceptable: the guard is a high-precision catch for the documented recurring
+phrasings, not a complete classifier. The lists cover the operator-cited forms and the agent's actual
+observed messages. Tunable by extending the arrays.
+
+## 4. Signal vs authority
+
+The guard is a one-shot re-feed (block decision with a reminder), exactly like the
+stated-continuation guard. It never silences or rewrites a message and takes no destructive action.
+The `stop_hook_active` loop guard guarantees the agent is never trapped — a legitimate stop (real
+external blocker / work complete / a user-only decision) re-stops cleanly on the next attempt.
+
+## 5. Interactions
+
+Sits directly after `statedContinuationGuard` in the same hook, before the server round-trip — so it
+works even when the server-side stop-gate is in shadow/off mode (which is exactly when these stalls
+slip through). No new dependency, no network call, no state. Pure substring matching. Cannot recurse
+or grow unbounded.
+
+## 6. External surfaces
+
+None. No route, no egress, no spend (no LLM call — deterministic substring matching in the hook
+subprocess).
+
+## 7. Multi-machine posture
+
+Machine-local: the hook runs per-session on whichever machine hosts the session. No replicated state.
+Each agent on each machine gets the guard via the standard hook update.
+
+## 8. Rollback cost
+
+Trivial: delete the `falseExcuseDeferralGuard` IIFE from `getStopGateRouterHook()`; the next update
+overwrites the deployed copy back to guard-free. No data, no migration to unwind.
+
+## Evidence pointers
+
+- `tests/unit/stop-gate-false-excuse-deferral.test.ts` (6): renders valid JS containing the guard;
+  blocks the real-world excuse-stop (named work + self-protective excuse); blocks a
+  session-length/next-session deferral; does NOT block a genuine completion; does NOT block a time
+  reference with no deferred work (false-positive control); does NOT re-block under `stop_hook_active`.
+- `tests/unit/stop-gate-stated-continuation.test.ts` + `tests/unit/generated-hooks-parse.test.ts`
+  stay green (the template literal still renders valid JS). Full `tsc` clean.
+
+## Conclusion
+
+Delivers the operator-requested structural catch for the recurring false-excuse early-stop, as an
+instar feature that ships to every agent. High-precision, loop-safe, reversible, no external surface.
+Ship.