instar 1.3.660 → 1.3.662

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (27) hide show
  1. package/dist/commands/server.d.ts.map +1 -1
  2. package/dist/commands/server.js +6 -1
  3. package/dist/commands/server.js.map +1 -1
  4. package/dist/core/MessagingToneGate.d.ts +124 -1
  5. package/dist/core/MessagingToneGate.d.ts.map +1 -1
  6. package/dist/core/MessagingToneGate.js +262 -87
  7. package/dist/core/MessagingToneGate.js.map +1 -1
  8. package/dist/core/PostUpdateMigrator.d.ts.map +1 -1
  9. package/dist/core/PostUpdateMigrator.js +16 -0
  10. package/dist/core/PostUpdateMigrator.js.map +1 -1
  11. package/dist/scaffold/templates.d.ts.map +1 -1
  12. package/dist/scaffold/templates.js +4 -0
  13. package/dist/scaffold/templates.js.map +1 -1
  14. package/dist/server/outboundGateBudget.d.ts +1 -1
  15. package/dist/server/outboundGateBudget.d.ts.map +1 -1
  16. package/dist/server/outboundGateBudget.js +19 -1
  17. package/dist/server/outboundGateBudget.js.map +1 -1
  18. package/dist/server/routes.d.ts.map +1 -1
  19. package/dist/server/routes.js +40 -1
  20. package/dist/server/routes.js.map +1 -1
  21. package/package.json +1 -1
  22. package/src/data/builtin-manifest.json +63 -63
  23. package/src/scaffold/templates.ts +4 -0
  24. package/upgrades/{1.3.660.md → 1.3.661.md} +43 -0
  25. package/upgrades/1.3.662.md +30 -0
  26. package/upgrades/side-effects/blindspot-class-symbol-vs-state.md +41 -0
  27. package/upgrades/side-effects/gate-prompts-judge-by-meaning.md +48 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "instar",
3
- "version": "1.3.660",
3
+ "version": "1.3.662",
4
4
  "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
package/src/data/builtin-manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "$schema": "./builtin-manifest.schema.json",
3
3
  "schemaVersion": 1,
4
- "generatedAt": "2026-06-25T07:17:11.166Z",
5
- "instarVersion": "1.3.660",
4
+ "generatedAt": "2026-06-25T07:48:58.122Z",
5
+ "instarVersion": "1.3.662",
6
6
  "entryCount": 202,
7
7
  "entries": {
8
8
  "hook:session-start": {
@@ -11,7 +11,7 @@
11
11
  "domain": "identity",
12
12
  "sourcePath": "src/core/PostUpdateMigrator.ts",
13
13
  "installedPath": ".instar/hooks/instar/session-start.sh",
14
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
14
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
15
15
  "since": "2025-01-01"
16
16
  },
17
17
  "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
20
20
  "domain": "safety",
21
21
  "sourcePath": "src/core/PostUpdateMigrator.ts",
22
22
  "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
23
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
23
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
24
24
  "since": "2025-01-01"
25
25
  },
26
26
  "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
29
29
  "domain": "safety",
30
30
  "sourcePath": "src/core/PostUpdateMigrator.ts",
31
31
  "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
32
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
32
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
33
33
  "since": "2025-01-01"
34
34
  },
35
35
  "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
38
38
  "domain": "identity",
39
39
  "sourcePath": "src/core/PostUpdateMigrator.ts",
40
40
  "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
41
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
41
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
42
42
  "since": "2025-01-01"
43
43
  },
44
44
  "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
47
47
  "domain": "safety",
48
48
  "sourcePath": "src/core/PostUpdateMigrator.ts",
49
49
  "installedPath": ".instar/hooks/instar/external-operation-gate.js",
50
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
50
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
51
51
  "since": "2025-01-01"
52
52
  },
53
53
  "hook:deferral-detector": {
@@ -56,7 +56,7 @@
56
56
  "domain": "safety",
57
57
  "sourcePath": "src/core/PostUpdateMigrator.ts",
58
58
  "installedPath": ".instar/hooks/instar/deferral-detector.js",
59
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
59
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
60
60
  "since": "2025-01-01"
61
61
  },
62
62
  "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
65
65
  "domain": "coherence",
66
66
  "sourcePath": "src/core/PostUpdateMigrator.ts",
67
67
  "installedPath": ".instar/hooks/instar/self-stop-guard.js",
68
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
68
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
69
69
  "since": "2025-01-01"
70
70
  },
71
71
  "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
74
74
  "domain": "evolution",
75
75
  "sourcePath": "src/core/PostUpdateMigrator.ts",
76
76
  "installedPath": ".instar/hooks/instar/post-action-reflection.js",
77
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
77
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
78
78
  "since": "2025-01-01"
79
79
  },
80
80
  "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
83
83
  "domain": "safety",
84
84
  "sourcePath": "src/core/PostUpdateMigrator.ts",
85
85
  "installedPath": ".instar/hooks/instar/external-communication-guard.js",
86
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
86
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
87
87
  "since": "2025-01-01"
88
88
  },
89
89
  "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
92
92
  "domain": "coherence",
93
93
  "sourcePath": "src/core/PostUpdateMigrator.ts",
94
94
  "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
95
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
95
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
96
96
  "since": "2025-01-01"
97
97
  },
98
98
  "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
101
101
  "domain": "coherence",
102
102
  "sourcePath": "src/core/PostUpdateMigrator.ts",
103
103
  "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
104
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
104
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
105
105
  "since": "2025-01-01"
106
106
  },
107
107
  "hook:free-text-guard": {
@@ -110,7 +110,7 @@
110
110
  "domain": "safety",
111
111
  "sourcePath": "src/core/PostUpdateMigrator.ts",
112
112
  "installedPath": ".instar/hooks/instar/free-text-guard.sh",
113
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
113
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
114
114
  "since": "2025-01-01"
115
115
  },
116
116
  "hook:claim-intercept": {
@@ -119,7 +119,7 @@
119
119
  "domain": "coherence",
120
120
  "sourcePath": "src/core/PostUpdateMigrator.ts",
121
121
  "installedPath": ".instar/hooks/instar/claim-intercept.js",
122
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
122
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
123
123
  "since": "2025-01-01"
124
124
  },
125
125
  "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
128
128
  "domain": "coherence",
129
129
  "sourcePath": "src/core/PostUpdateMigrator.ts",
130
130
  "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
131
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
131
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
132
132
  "since": "2025-01-01"
133
133
  },
134
134
  "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
137
137
  "domain": "safety",
138
138
  "sourcePath": "src/core/PostUpdateMigrator.ts",
139
139
  "installedPath": ".instar/hooks/instar/stop-gate-router.js",
140
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
140
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
141
141
  "since": "2025-01-01"
142
142
  },
143
143
  "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
146
146
  "domain": "safety",
147
147
  "sourcePath": "src/core/PostUpdateMigrator.ts",
148
148
  "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
149
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
149
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
150
150
  "since": "2025-01-01"
151
151
  },
152
152
  "job:health-check": {
@@ -418,7 +418,7 @@
418
418
  "type": "route-group",
419
419
  "domain": "monitoring",
420
420
  "sourcePath": "src/server/routes.ts",
421
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
421
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
422
422
  "since": "2025-01-01"
423
423
  },
424
424
  "route-group:agents": {
@@ -426,7 +426,7 @@
426
426
  "type": "route-group",
427
427
  "domain": "sessions",
428
428
  "sourcePath": "src/server/routes.ts",
429
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
429
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
430
430
  "since": "2025-01-01"
431
431
  },
432
432
  "route-group:backups": {
@@ -434,7 +434,7 @@
434
434
  "type": "route-group",
435
435
  "domain": "operations",
436
436
  "sourcePath": "src/server/routes.ts",
437
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
437
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
438
438
  "since": "2025-01-01"
439
439
  },
440
440
  "route-group:git": {
@@ -442,7 +442,7 @@
442
442
  "type": "route-group",
443
443
  "domain": "coordination",
444
444
  "sourcePath": "src/server/routes.ts",
445
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
445
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
446
446
  "since": "2025-01-01"
447
447
  },
448
448
  "route-group:memory": {
@@ -450,7 +450,7 @@
450
450
  "type": "route-group",
451
451
  "domain": "memory",
452
452
  "sourcePath": "src/server/routes.ts",
453
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
453
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
454
454
  "since": "2025-01-01"
455
455
  },
456
456
  "route-group:semantic": {
@@ -458,7 +458,7 @@
458
458
  "type": "route-group",
459
459
  "domain": "memory",
460
460
  "sourcePath": "src/server/routes.ts",
461
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
461
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
462
462
  "since": "2025-01-01"
463
463
  },
464
464
  "route-group:status": {
@@ -466,7 +466,7 @@
466
466
  "type": "route-group",
467
467
  "domain": "monitoring",
468
468
  "sourcePath": "src/server/routes.ts",
469
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
469
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
470
470
  "since": "2025-01-01"
471
471
  },
472
472
  "route-group:capabilities": {
@@ -474,7 +474,7 @@
474
474
  "type": "route-group",
475
475
  "domain": "mapping",
476
476
  "sourcePath": "src/server/routes.ts",
477
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
477
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
478
478
  "since": "2025-01-01"
479
479
  },
480
480
  "route-group:project-map": {
@@ -482,7 +482,7 @@
482
482
  "type": "route-group",
483
483
  "domain": "mapping",
484
484
  "sourcePath": "src/server/routes.ts",
485
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
485
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
486
486
  "since": "2025-01-01"
487
487
  },
488
488
  "route-group:coherence": {
@@ -490,7 +490,7 @@
490
490
  "type": "route-group",
491
491
  "domain": "coherence",
492
492
  "sourcePath": "src/server/routes.ts",
493
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
493
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
494
494
  "since": "2025-01-01"
495
495
  },
496
496
  "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
498
498
  "type": "route-group",
499
499
  "domain": "sessions",
500
500
  "sourcePath": "src/server/routes.ts",
501
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
501
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
502
502
  "since": "2025-01-01"
503
503
  },
504
504
  "route-group:context": {
@@ -506,7 +506,7 @@
506
506
  "type": "route-group",
507
507
  "domain": "context",
508
508
  "sourcePath": "src/server/routes.ts",
509
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
509
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
510
510
  "since": "2025-01-01"
511
511
  },
512
512
  "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
514
514
  "type": "route-group",
515
515
  "domain": "coherence",
516
516
  "sourcePath": "src/server/routes.ts",
517
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
517
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
518
518
  "since": "2025-01-01"
519
519
  },
520
520
  "route-group:canonical-state": {
@@ -522,7 +522,7 @@
522
522
  "type": "route-group",
523
523
  "domain": "state",
524
524
  "sourcePath": "src/server/routes.ts",
525
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
525
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
526
526
  "since": "2025-01-01"
527
527
  },
528
528
  "route-group:ci": {
@@ -530,7 +530,7 @@
530
530
  "type": "route-group",
531
531
  "domain": "monitoring",
532
532
  "sourcePath": "src/server/routes.ts",
533
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
533
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
534
534
  "since": "2025-01-01"
535
535
  },
536
536
  "route-group:sessions": {
@@ -538,7 +538,7 @@
538
538
  "type": "route-group",
539
539
  "domain": "sessions",
540
540
  "sourcePath": "src/server/routes.ts",
541
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
541
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
542
542
  "since": "2025-01-01"
543
543
  },
544
544
  "route-group:jobs": {
@@ -546,7 +546,7 @@
546
546
  "type": "route-group",
547
547
  "domain": "scheduling",
548
548
  "sourcePath": "src/server/routes.ts",
549
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
549
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
550
550
  "since": "2025-01-01"
551
551
  },
552
552
  "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
554
554
  "type": "route-group",
555
555
  "domain": "scheduling",
556
556
  "sourcePath": "src/server/routes.ts",
557
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
557
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
558
558
  "since": "2025-01-01"
559
559
  },
560
560
  "route-group:telegram": {
@@ -562,7 +562,7 @@
562
562
  "type": "route-group",
563
563
  "domain": "communication",
564
564
  "sourcePath": "src/server/routes.ts",
565
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
565
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
566
566
  "since": "2025-01-01"
567
567
  },
568
568
  "route-group:attention": {
@@ -570,7 +570,7 @@
570
570
  "type": "route-group",
571
571
  "domain": "communication",
572
572
  "sourcePath": "src/server/routes.ts",
573
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
573
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
574
574
  "since": "2025-01-01"
575
575
  },
576
576
  "route-group:relationships": {
@@ -578,7 +578,7 @@
578
578
  "type": "route-group",
579
579
  "domain": "relationships",
580
580
  "sourcePath": "src/server/routes.ts",
581
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
581
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
582
582
  "since": "2025-01-01"
583
583
  },
584
584
  "route-group:feedback": {
@@ -586,7 +586,7 @@
586
586
  "type": "route-group",
587
587
  "domain": "feedback",
588
588
  "sourcePath": "src/server/routes.ts",
589
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
589
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
590
590
  "since": "2025-01-01"
591
591
  },
592
592
  "route-group:updates": {
@@ -594,7 +594,7 @@
594
594
  "type": "route-group",
595
595
  "domain": "updates",
596
596
  "sourcePath": "src/server/routes.ts",
597
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
597
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
598
598
  "since": "2025-01-01"
599
599
  },
600
600
  "route-group:dispatches": {
@@ -602,7 +602,7 @@
602
602
  "type": "route-group",
603
603
  "domain": "dispatches",
604
604
  "sourcePath": "src/server/routes.ts",
605
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
605
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
606
606
  "since": "2025-01-01"
607
607
  },
608
608
  "route-group:quota": {
@@ -610,7 +610,7 @@
610
610
  "type": "route-group",
611
611
  "domain": "monitoring",
612
612
  "sourcePath": "src/server/routes.ts",
613
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
613
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
614
614
  "since": "2025-01-01"
615
615
  },
616
616
  "route-group:publishing": {
@@ -618,7 +618,7 @@
618
618
  "type": "route-group",
619
619
  "domain": "publishing",
620
620
  "sourcePath": "src/server/routes.ts",
621
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
621
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
622
622
  "since": "2025-01-01"
623
623
  },
624
624
  "route-group:private-views": {
@@ -626,7 +626,7 @@
626
626
  "type": "route-group",
627
627
  "domain": "publishing",
628
628
  "sourcePath": "src/server/routes.ts",
629
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
629
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
630
630
  "since": "2025-01-01"
631
631
  },
632
632
  "route-group:tunnel": {
@@ -634,7 +634,7 @@
634
634
  "type": "route-group",
635
635
  "domain": "networking",
636
636
  "sourcePath": "src/server/routes.ts",
637
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
637
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
638
638
  "since": "2025-01-01"
639
639
  },
640
640
  "route-group:events": {
@@ -642,7 +642,7 @@
642
642
  "type": "route-group",
643
643
  "domain": "networking",
644
644
  "sourcePath": "src/server/routes.ts",
645
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
645
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
646
646
  "since": "2025-01-01"
647
647
  },
648
648
  "route-group:evolution": {
@@ -650,7 +650,7 @@
650
650
  "type": "route-group",
651
651
  "domain": "evolution",
652
652
  "sourcePath": "src/server/routes.ts",
653
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
653
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
654
654
  "since": "2025-01-01"
655
655
  },
656
656
  "route-group:watchdog": {
@@ -658,7 +658,7 @@
658
658
  "type": "route-group",
659
659
  "domain": "monitoring",
660
660
  "sourcePath": "src/server/routes.ts",
661
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
661
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
662
662
  "since": "2025-01-01"
663
663
  },
664
664
  "route-group:topic-memory": {
@@ -666,7 +666,7 @@
666
666
  "type": "route-group",
667
667
  "domain": "memory",
668
668
  "sourcePath": "src/server/routes.ts",
669
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
669
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
670
670
  "since": "2025-01-01"
671
671
  },
672
672
  "route-group:state-sync": {
@@ -674,7 +674,7 @@
674
674
  "type": "route-group",
675
675
  "domain": "coordination",
676
676
  "sourcePath": "src/server/routes.ts",
677
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
677
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
678
678
  "since": "2025-01-01"
679
679
  },
680
680
  "route-group:intent": {
@@ -682,7 +682,7 @@
682
682
  "type": "route-group",
683
683
  "domain": "intent",
684
684
  "sourcePath": "src/server/routes.ts",
685
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
685
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
686
686
  "since": "2025-01-01"
687
687
  },
688
688
  "route-group:triage": {
@@ -690,7 +690,7 @@
690
690
  "type": "route-group",
691
691
  "domain": "safety",
692
692
  "sourcePath": "src/server/routes.ts",
693
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
693
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
694
694
  "since": "2025-01-01"
695
695
  },
696
696
  "route-group:operations": {
@@ -698,7 +698,7 @@
698
698
  "type": "route-group",
699
699
  "domain": "safety",
700
700
  "sourcePath": "src/server/routes.ts",
701
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
701
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
702
702
  "since": "2025-01-01"
703
703
  },
704
704
  "route-group:sentinel": {
@@ -706,7 +706,7 @@
706
706
  "type": "route-group",
707
707
  "domain": "safety",
708
708
  "sourcePath": "src/server/routes.ts",
709
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
709
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
710
710
  "since": "2025-01-01"
711
711
  },
712
712
  "route-group:trust": {
@@ -714,7 +714,7 @@
714
714
  "type": "route-group",
715
715
  "domain": "safety",
716
716
  "sourcePath": "src/server/routes.ts",
717
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
717
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
718
718
  "since": "2025-01-01"
719
719
  },
720
720
  "route-group:monitoring": {
@@ -722,7 +722,7 @@
722
722
  "type": "route-group",
723
723
  "domain": "monitoring",
724
724
  "sourcePath": "src/server/routes.ts",
725
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
725
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
726
726
  "since": "2025-01-01"
727
727
  },
728
728
  "route-group:commitments": {
@@ -730,7 +730,7 @@
730
730
  "type": "route-group",
731
731
  "domain": "commitments",
732
732
  "sourcePath": "src/server/routes.ts",
733
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
733
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
734
734
  "since": "2025-01-01"
735
735
  },
736
736
  "route-group:episodes": {
@@ -738,7 +738,7 @@
738
738
  "type": "route-group",
739
739
  "domain": "memory",
740
740
  "sourcePath": "src/server/routes.ts",
741
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
741
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
742
742
  "since": "2025-01-01"
743
743
  },
744
744
  "route-group:messages": {
@@ -746,7 +746,7 @@
746
746
  "type": "route-group",
747
747
  "domain": "coordination",
748
748
  "sourcePath": "src/server/routes.ts",
749
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
749
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
750
750
  "since": "2025-01-01"
751
751
  },
752
752
  "route-group:system-reviews": {
@@ -754,7 +754,7 @@
754
754
  "type": "route-group",
755
755
  "domain": "monitoring",
756
756
  "sourcePath": "src/server/routes.ts",
757
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
757
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
758
758
  "since": "2025-01-01"
759
759
  },
760
760
  "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
770
770
  "type": "route-group",
771
771
  "domain": "security",
772
772
  "sourcePath": "src/server/routes.ts",
773
- "contentHash": "fba7ee802dbc21caf906ea9a2d63506294ac4425fcb68749ef258fcca82cbbab",
773
+ "contentHash": "5b17cc050ac363efff00c48ebfddb2779d975d701b54de9942f915c58f6d3fc9",
774
774
  "since": "2025-01-01"
775
775
  },
776
776
  "cli:init": {
@@ -1562,7 +1562,7 @@
1562
1562
  "type": "subsystem",
1563
1563
  "domain": "updates",
1564
1564
  "sourcePath": "src/core/PostUpdateMigrator.ts",
1565
- "contentHash": "4c5fa1d050d577392ce8e682974c6d495df23727ff7622a0ed01ff8fd6663c48",
1565
+ "contentHash": "1498dde6dd7c50457734d66245474781b703ecea97ea6d51391ca4de91ddaf3d",
1566
1566
  "since": "2025-01-01"
1567
1567
  },
1568
1568
  "subsystem:scheduler": {
package/src/scaffold/templates.ts CHANGED
@@ -1552,6 +1552,10 @@ instar playbook doctor # Verify everything is healthy
1552
1552
 
1553
1553
  Record what I learn. Build infrastructure, not one-offs. Grow to meet the user's needs. Every session should leave things slightly better than I found them.
1554
1554
 
1555
+ ### Outbound Message Gate
1556
+
1557
+ Your messages to the user pass an always-on LLM gate (the tone gate) before they send. It blocks high-stakes leaks (CLI commands, file paths, config keys, endpoints) AND the self-stop anti-patterns (B15–B18: quitting on yourself for a context/fatigue reason, calling a doable thing impossible, parking your own work on the user). It judges the behavioral rules **by MEANING, not by literal phrases — a paraphrase of the anti-pattern is caught exactly the same as the canonical wording**, so do not assume rewording evades it. The gate FAILS CLOSED (holds the message, queued for retry — never silently delivers) if it can't produce a verdict (provider down, unparseable output, or a slow-review timeout); the operator kill-switch is \`messaging.toneGate.failClosedOnExhaustion\`. Constitution: "Intelligent Prompts — An LLM Gate Must Not String-Match".
1558
+
1555
1559
  ## Worktree Convention
1556
1560
 
1557
1561
  Create worktrees for collaborator repos with \`instar worktree create <branch>\` — it resolves your agent's home automatically. Never hardcode another agent's name or place worktrees inside the shared checkout.
package/upgrades/{1.3.660.md → 1.3.661.md} RENAMED
@@ -5,6 +5,26 @@
5
5
 
6
6
  ## What Changed
7
7
 
8
+ Adds a new constitutional standard, **"Verify the State, Not Its Symbol"**, to
9
+ `docs/STANDARDS-REGISTRY.md` (Substrate family), and registers it as **P20** in
10
+ `docs/INSTAR-DESIGN-PRINCIPLES-AND-LESSONS.md` so the `/spec-converge` lessons-aware
11
+ reviewer fires on every future spec. Lesson L5 is re-pointed to P20 as its parent.
12
+
13
+ The standard names a class of blind spot that has bitten the fleet repeatedly under
14
+ different disguises: a detector, gate, verifier, or sentinel that trusts a *symbol*
15
+ of a state (a string on a pane, a marker, the presence or absence of a proxy signal)
16
+ instead of confirming the *state itself* — in both directions, where the presence of
17
+ a symbol is taken as the condition being true and the absence of a signal is taken as
18
+ the condition being true. When the evidence needed to decide is unavailable, the result
19
+ is **unknown**, and unknown must fail toward the least-harmful action for that specific
20
+ detector — which is not always "closed".
21
+
22
+ Documentation-only: this change adds no runtime, gate, or `src` surface. The companion
23
+ fix for the crystallizing instance (the RateLimitSentinel false-positive) is specified
24
+ and review-converged in `docs/specs/ratelimit-sentinel-false-positive-hardening.md`,
25
+ which this change also lands so the standard's enforcement-first citation resolves to a
26
+ real file; the implementation of that fix ships as a separate, tracked follow-on PR.
27
+
8
28
  Fixed the "session paused" hang: an autonomous session would freeze indefinitely the first time a helper sub-agent (spawned via the Task/Agent tool) ran a shell command. Root cause: a sub-agent does NOT inherit the parent session's `--dangerously-skip-permissions` MODE — confirmed against Claude Code docs, it inherits only the permission RULES from `.claude/settings.json`. With no allow-rules configured, the sub-agent's first `Bash` call surfaced the interactive "This command requires approval" dialog, and in an unattended run there was no human to answer it, so the session sat modal-blocked forever (indistinguishable from "paused"). It affected the whole fleet because every agent shipped with an empty permissions block.
9
29
 
10
30
  `PostUpdateMigrator.ensurePermissionAllowRules()` now runs inside `migrateSettings()` and adds a `permissions.allow` list for the built-in tools a sub-agent uses (`Bash`, `Read`, `Edit`, `Write`, `Glob`, `Grep`, `Task`, `NotebookEdit`, `WebFetch`, `WebSearch`, `TodoWrite`). Sub-agents inherit permission rules, so the allow-rule is the structural lever that reliably applies — unlike the existing `PermissionRequest` auto-approve hook, which does not reliably fire for sub-agent calls. The migration is idempotent (adds only missing tool names), never touches the operator's `deny`/`ask` lists, and deliberately excludes MCP tools (`mcp__*`) so external/network operations keep their external-operation-gate approval posture. Because it rides `migrateSettings()`, every existing agent picks it up on its next update and every new agent gets it at init (Migration Parity).
@@ -13,14 +33,37 @@ Safety is unchanged: the allow-rules only skip the duplicative human-in-the-loop
13
33
 
14
34
  ## What to Tell Your User
15
35
 
36
+ - **A new "verify the real state, not a sign of it" rule**: "I added a standard to how I'm
37
+ built so that my own watchers can't cry wolf at a word on the screen, or go silent because
38
+ they looked for proof in the wrong place. From now on, anything I build that watches for a
39
+ problem has to confirm the problem is really happening before it acts — and when it genuinely
40
+ can't tell, it errs toward the quiet, least-harmful choice instead of the loudest one. This
41
+ came straight out of the false 'you're throttled' alarms you saw tonight."
42
+
16
43
  If your agent ever seemed to "pause" mid-task during an unattended/autonomous run — silently stuck and only resuming when you messaged it — this is a common cause: a helper it spawned hit an approval prompt nobody was there to answer. After this update (and a session restart so the new settings load), helper tasks no longer stall on those prompts, so autonomous runs keep moving. Your safety guards are unchanged — every command still passes the same pre-action checks; the only thing removed is the approval pop-up that had no one to answer it.
17
44
 
18
45
  ## Summary of New Capabilities
19
46
 
47
+ | Capability | How to Use |
48
+ |-----------|-----------|
49
+ | "Verify the State, Not Its Symbol" standard (P20) | automatic — the `/spec-converge` lessons-aware reviewer now flags any future spec whose detector fires on a single uncorroborated symbol, reads a self-writable channel, or treats absence as the bad state |
50
+
20
51
  - `PostUpdateMigrator.ensurePermissionAllowRules()` — adds inherited `permissions.allow` rules for sub-agent built-in tools to every agent's `.claude/settings.json` via the migration path (new agents at init, existing agents on update). Idempotent, non-clobbering of operator `deny`/`ask`, and scoped to local tools (MCP stays gated by the external-operation-gate).
21
52
 
22
53
  ## Evidence
23
54
 
55
+ Earned from a live recurrence, not a hypothetical. On 2026-06-24 (topic 16566) the
56
+ RateLimitSentinel fired "this turn died on an API error" because the literal words
57
+ `API Error:` were on the session pane — placed there by the session *investigating* API
58
+ errors, with nothing actually failed — then cried wolf for ~11 minutes because its recovery
59
+ verifier looked for the session transcript in one Claude account home while the session ran
60
+ under another, reading absence-of-file as "never recovered". The detector that diagnosed the
61
+ bug was, live, tripped by the bug. The same class had recurred 4+ times before under different
62
+ disguises (2026-06-06 stale-transcript-pointer crying-wolf, the AUP-rejection wedge, the origin
63
+ of lesson L5), each patched point-wise without ever naming the class — the registry's promotion
64
+ signal. The companion code fix's reproduction + before/after is carried in its own spec and
65
+ follow-on PR; this PR is documentation-only and changes no runtime behavior to reproduce.
66
+
24
67
  - **Reproduction (2026-06-24):** an unattended autonomous run sat silent for ~68 min; a screenshot showed the session modal-blocked on a sub-agent's `Bash` "This command requires approval" dialog. Confirmed the same class on a second agent (AI Guy). Settings inspection showed the `permissions` block was entirely absent (no allow-rules for sub-agents to inherit).
25
68
  - **Mechanism confirmed:** Claude Code docs — sub-agents inherit permission RULES but not the permission MODE; PreToolUse hooks run BEFORE permission-rule evaluation and a hook exiting 2 blocks the call even for an allowed tool (so allow-rules cannot weaken the guards).
26
69
  - **Tests:** `tests/unit/PostUpdateMigrator-permissionAllowRules.test.ts` — 6 tests: adds all sub-agent tools when absent; includes Bash; does NOT blanket-allow MCP; preserves operator allow entries with no duplicates; never touches deny/ask; idempotent on second pass. All passing. Adjacent `PostUpdateMigrator-cleanupPeriodDays.test.ts` (same migrateSettings path) still green. `npm run build` green.