instar 1.3.79 → 1.3.80

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.79",
+  "version": "1.3.80",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-29T08:53:20.270Z",
-  "instarVersion": "1.3.79",
+  "generatedAt": "2026-05-29T09:40:56.624Z",
+  "instarVersion": "1.3.80",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c61fc73ca69a17414aadfd5c095f7846d0dbaef9f7a2d2d7e67ca1dc5488881f",
+      "contentHash": "ebfff1d513782dbd9f087ba44305986336e4daa3c0c5ee0a70ccf9a2bbacb4bd",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1457,7 +1457,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "11dfce264118d9e24484060fcad8d26d36272045beb088fbeb0accb3b404cb90",
+      "contentHash": "5841418da3e9385c441f0158bc5375025dc0f39bf9ae0b4f14c2bdb7d526bf1b",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1473,7 +1473,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/AutoUpdater.ts",
-      "contentHash": "54bf74ad97fa1b0a32cbada911454a023abab6717ec34ff3762516255ea2b306",
+      "contentHash": "bf97e19c12e7ce6ce21c69b49bdd94edebc155e5be2f16e38933a0067f41b3f5",
       "since": "2025-01-01"
     },
     "subsystem:auto-dispatcher": {

package/upgrades/1.3.80.md

@@ -0,0 +1,35 @@
+# Instar Upgrade Guide — NEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+Two changes that merged after v1.3.79 and are released together here.
+
+**1. AutoUpdater: recurring jobs no longer block restart activation, and the deferral is now visible (#514).**
+
+The AutoUpdater pulls a new version into the shadow-install on its normal cadence (~30-min check + 5-min coalesce), but ACTIVATING it requires a server restart, and the restart gate would defer indefinitely while any "healthy" session existed — including recurring background jobs that perpetually re-appear as active. The result: an always-busy agent kept running the old version with the fix sitting unused on disk. This narrows the blocker set: a background job session (one with a `jobSlug`) no longer blocks restart when `SessionManager.hasActiveProcesses(tmuxSession)` — the existing process-tree ground truth — reports no non-baseline work. Mid-execution jobs still block (they finish first), and if the safety check is unavailable the job still blocks (conservative). Interactive user sessions are deliberately unchanged — whether an update may interrupt a live user session is a separate policy decision and is NOT relaxed here. The restart-deferral state (target version, first-deferred time, reason, current blockers, next retry) is now persisted and surfaced on authenticated `/health` and `/updates/status`, so "installed but not active" is no longer invisible.
+
+**2. Mentor Stage-A surface now includes the mentor's own prior prompts (#515), completing the active-task-driving feature (#513).**
+
+v1.3.79 gave the Framework-Onboarding Mentor an onboarding agenda and a real Stage-A surface, but that surface only contained the mentee's replies — not the mentor's own prior prompts (their content wasn't logged anywhere). So the mentor inferred "what have I already assigned?" only from replies. Now, when the mentor successfully delivers a prompt, its content is appended to `mentor-sent.jsonl`, and the Stage-A surface builder interleaves the mentor's prompts and the mentee's replies chronologically into a real two-sided "Mentor: … / Mentee: …" exchange. The mentor now sees the full conversation and rotates its agenda correctly. Still ships dark (the mentor is off by default and the agenda is empty by default).
+
+## What to Tell Your User
+
+Two under-the-hood improvements, no action needed. First: when your agent has a fix waiting to install, recurring background jobs no longer keep it from applying that fix on its next safe restart, and you can now see on the health page when an agent has an update installed but not yet active (and why). Interactive sessions are untouched — an update still won't interrupt a live conversation. Second: the optional onboarding mentor (off by default) now sees both sides of its conversation with a new agent, so if you ever turn it on it keeps better track of what it has already walked the agent through. Nothing changes unless you enable the mentor.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Restart-deferral visibility | Automatic. `GET /health` and `GET /updates/status` now include a `restartDeferral` object (target version, first-deferred time, reason, blockers, next retry) when an installed update is waiting on a restart. |
+| Recurring jobs don't block restart | Automatic. A background job session no longer blocks update-restart activation when its process tree is idle; mid-execution jobs and interactive sessions still block. |
+| Mentor full two-sided surface | Automatic when the mentor is enabled. The mentor logs its own prompts to `mentor-sent.jsonl` and interleaves them with mentee replies in the Stage-A surface, so agenda rotation reflects the real exchange. |
+
+## Evidence
+
+- #514: `tests/unit/UpdateGate.test.ts` + `AutoUpdater.test.ts` cover safe-idle-job de-counting, mid-execution/interactive conservatism, and persisted+surfaced deferral state; `tests/unit/server.test.ts` covers the `/health` + `/updates/status` output.
+- #515: `tests/unit/MentorStageA.test.ts` covers `parseMentorSent` (defensive parsing) and the chronological interleave of mentor prompts + mentee replies into the surface, with backward-compatible `buildConversationSurface` signature.
+- Both shipped through the full instar-dev gate; live fleet recovery of the prior token-ledger fixes (1.3.77/1.3.78) was observed on monroe/indra (/tokens 503→200 after restart onto the released fix).
+
+Specs: `docs/specs/auto-updater-restart-activation-visibility.md` (#514), `docs/specs/mentor-stagea-full-exchange-surface.md` (#515), `docs/specs/FRAMEWORK-ONBOARDING-MENTOR-SPEC.md` (the 2026-05-29 active-task-driving amendment).

package/upgrades/side-effects/auto-updater-restart-activation-visibility.md

@@ -0,0 +1,93 @@
+# Side-Effects Review — AutoUpdater restart activation visibility
+
+**Version / slug:** `auto-updater-restart-activation-visibility`
+**Date:** `2026-05-29`
+**Author:** `instar-codey`
+**Second-pass reviewer:** `Justin review requested in PR`
+
+## Summary of the change
+
+This change narrows AutoUpdater restart blockers and makes activation waits observable. `src/core/UpdateGate.ts` now ignores a running job session only when it has a `jobSlug`, a tmux session name, and `SessionManager.hasActiveProcesses(tmuxSession)` says no real non-baseline process is running. `src/core/AutoUpdater.ts` persists a restart-wait object with target version, first wait time, reason, blockers, next retry, and updated time. `src/server/routes.ts` surfaces that object on authenticated `/health` and `/updates/status`. Tests cover safe idle jobs, active jobs, interactive session conservatism, AutoUpdater state persistence, and health output.
+
+## Decision-point inventory
+
+- `UpdateGate.canRestart` — modify — decides whether an update-driven server restart can proceed now or must wait.
+- `AutoUpdater.gatedRestart` — modify — records and clears restart-wait state around the existing restart decision.
+- `GET /health` and `GET /updates/status` — modify — surface restart-wait state; no blocking authority.
+
+---
+
+## 1. Over-block
+
+The main remaining over-block is intentional: interactive sessions still block when the monitor reports them healthy, even if a process-tree check would say no active child work. Justin explicitly held the bounded restart policy for interactive sessions, so this PR does not relax that path. Background job sessions also still block when `hasActiveProcesses` is unavailable or fails, because the safe-idle proof is missing.
+
+---
+
+## 2. Under-block
+
+A background job could be incorrectly treated as idle if `hasActiveProcesses` misses a real work process. That risk already exists anywhere the process-tree ground truth is used, but this PR limits reliance to sessions that are explicitly job-spawned and still fails closed when the method is unavailable. A job that is about to start work but has not spawned a non-baseline child yet may be restarted; that is acceptable for the requested "idle/between-runs" class and no different from restarting before a scheduled job fires.
+
+---
+
+## 3. Level-of-abstraction fit
+
+The restart decision belongs in `UpdateGate`, which is already the authority for update-driven restart gating. This change does not add a parallel gate. It feeds the existing authority a stronger low-level signal: the already-established process-tree active-work check. AutoUpdater owns persistence and user/operator visibility, so persisting `restartDeferral` there is the right layer.
+
+---
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change produces a signal consumed by an existing smart gate.
+- [ ] No — this change has no block/allow surface.
+- [ ] Yes — but the logic is a smart gate with full conversational context (LLM-backed with recent history or equivalent).
+- [ ] Yes, with brittle logic — STOP. Reshape the design. Brittle detectors must not own block authority.
+
+`hasActiveProcesses` is a detector-like primitive, but it does not become a standalone blocker or allower. Its output is consumed by the existing restart authority in `UpdateGate`, and only for job sessions where the distinction between idle and executing is mechanically meaningful.
+
+---
+
+## 5. Interactions
+
+- **Shadowing:** The safe-idle job check runs before session-health classification, but only for `jobSlug` sessions with process-tree proof. It does not shadow interactive session health.
+- **Double-fire:** Persisting `restartDeferral` writes the same AutoUpdater state file already used for updater state. It does not write restart-requested signals and cannot trigger a restart by itself.
+- **Races:** The persisted restart-wait object is best-effort observability. If a retry fires while status is being read, readers may see the previous `nextRetryAt` until the next state save; this is acceptable and self-correcting.
+- **Feedback loops:** The old "already applied" loop guard remains. The log/notification language now distinguishes intentional restart waits from generic activation lag, reducing false manual-restart diagnoses.
+
+---
+
+## 6. External surfaces
+
+Authenticated `/health`, `/updates/status`, and `/updates/auto` now expose additive `restartDeferral` fields. Existing callers that ignore unknown fields continue to work. The state file gains an additive `restartDeferral` object; older versions ignore it. Other agents benefit after update activation because idle background jobs stop holding restarts forever, but active user sessions remain protected.
+
+---
+
+## 7. Rollback cost
+
+Rollback is a hot-fix release that reverts the code and tests. No database migration or state repair is needed. The only persistent addition is JSON in `state/auto-updater.json`; leaving it behind is harmless because older code ignores unknown fields.
+
+---
+
+## Conclusion
+
+The change is narrow and matches the approved scope: safe background-job de-counting plus restart-wait observability. The design explicitly avoids the held interactive-session policy and keeps restart authority centralized in `UpdateGate`. Clear to ship for PR review.
+
+---
+
+## Second-pass review (if required)
+
+**Reviewer:** Justin review requested in PR
+**Independent read of the artifact: pending external review**
+
+This touches restart gating, so the PR is intentionally opened for Justin review before merge. I did not implement the held interactive-session restart policy.
+
+---
+
+## Evidence pointers
+
+- `npm test -- --run tests/unit/UpdateGate.test.ts tests/unit/AutoUpdater.test.ts tests/unit/server.test.ts`
+- `npm run lint`
+- `npm run build`
+- `npm run check:upgrade-guide`
+- `node scripts/instar-dev-precommit.js`

package/upgrades/side-effects/mentor-stagea-full-exchange-surface.md

@@ -0,0 +1,90 @@
+# Side-Effects Review — Mentor Stage-A full exchange surface
+
+**Version / slug:** `mentor-stagea-full-exchange-surface`
+**Date:** `2026-05-29`
+**Author:** `instar-codey`
+**Second-pass reviewer:** `Justin review requested in PR`
+
+## Summary of the change
+
+This change completes the mentor Stage-A conversation surface by logging mentor-sent prompt content after successful delivery and interleaving those turns with mentee replies. `src/monitoring/MentorStageA.ts` adds `MentorSentLine`, `parseMentorSent`, and timestamp interleaving in the pure `buildConversationSurface` function. `src/server/AgentServer.ts` appends successful mentor sends to `mentor-sent.jsonl`, reads that log for `getSurface`, and continues reading mentee replies from `mentor-replies.jsonl`. `tests/unit/MentorStageA.test.ts` covers the new parser and the interleave boundary.
+
+## Decision-point inventory
+
+- `MentorStageA.buildConversationSurface` — modify — determines what user-visible conversation Stage A sees.
+- `AgentServer.deliverToMentee` — modify — writes mentor-sent prompt content only after delivery succeeds.
+- `AgentServer.getSurface` wiring — modify — feeds parsed mentor-sent turns plus parsed mentee-reply turns into the pure surface builder.
+
+---
+
+## 1. Over-block
+
+No block/allow surface — over-block not applicable. The parsers drop malformed or empty log rows, but that only removes unusable history from Stage-A context; it does not reject user input, messages, or actions.
+
+---
+
+## 2. Under-block
+
+The main remaining miss is a send that succeeds but crashes before the append finishes. In that case the next surface may still lack the mentor-side prompt. The append is intentionally best-effort and non-fatal so delivery is not turned into a filesystem-dependent operation. Rows without timestamps or text are skipped rather than guessed.
+
+---
+
+## 3. Level-of-abstraction fit
+
+The pure parser and interleave logic belong in `MentorStageA.ts`, which already owns the Stage-A boundary and has focused unit tests. File I/O belongs in `AgentServer`, which already reads the reply log and owns delivery. The change uses the existing a2a transport and outstanding prompt tracker rather than adding a second delivery path.
+
+---
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [ ] No — this change produces a signal consumed by an existing smart gate.
+- [x] No — this change has no block/allow surface.
+- [ ] Yes — but the logic is a smart gate with full conversational context (LLM-backed with recent history or equivalent).
+- [ ] Yes, with brittle logic — STOP. Reshape the design. Brittle detectors must not own block authority.
+
+This change expands the data surface visible to Stage A with mentor-owned, user-visible conversation text. It does not add a new blocker, filter, or authority.
+
+---
+
+## 5. Interactions
+
+- **Shadowing:** The sent-log parser does not replace the reply parser. Both feed the same pure surface builder.
+- **Double-fire:** The sent log is independent from the metadata-only a2a sent ledger. It is intentionally content-bearing because the existing ledger cannot provide prompt text.
+- **Races:** Delivery can succeed while appending the sent row fails. The next surface loses that mentor-side turn, but no transport or reply tracking is broken.
+- **Feedback loops:** Logging occurs only after `deliverA2aMessage` returns true. Failed sends do not create fake conversation history.
+
+---
+
+## 6. External surfaces
+
+The new external surface is a local state JSONL file containing mentor prompt content. It stays under the agent state directory and is not published or sent elsewhere by this change. Stage-A prompt content changes because it can now include both sides of the mentor exchange. The a2a wire format, Telegram behavior, scheduling policy, and reply capture remain unchanged.
+
+---
+
+## 7. Rollback cost
+
+Rollback is a hot-fix release that reverts the MentorStageA, AgentServer, and test changes. The JSONL file can remain on disk; older versions ignore it. No database migration or agent state repair is required.
+
+---
+
+## Conclusion
+
+The change closes the half-history limitation without weakening the two-hats boundary. Stage A still receives only user-visible conversation and the mentor's own agenda, but now that visible conversation includes both mentor prompts and mentee replies. Clear to ship for PR review.
+
+---
+
+## Second-pass review (if required)
+
+**Reviewer:** Justin review requested in PR
+**Independent read of the artifact: pending external review**
+
+This changes a mentor information-flow surface, so the PR is intentionally opened for Justin review before merge.
+
+---
+
+## Evidence pointers
+
+- `npm test -- --run tests/unit/MentorStageA.test.ts`
+- `npm run lint`