instar 1.3.88 → 1.3.90

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.88",
+  "version": "1.3.90",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-29T13:03:58.977Z",
-  "instarVersion": "1.3.88",
+  "generatedAt": "2026-05-29T14:01:29.929Z",
+  "instarVersion": "1.3.90",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -65,7 +65,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -74,7 +74,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -83,7 +83,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -101,7 +101,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -110,7 +110,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -128,7 +128,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1489,7 +1489,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "1fd1742471085a3b4ea20557d99aee966ea8bc4d92582b51cf18791ce76429d3",
+      "contentHash": "02e081441560e8b3a82c3cd7ed647ff0cb8f7042b166a4ab1241a86d8c113883",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.89.md

@@ -0,0 +1,33 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+Instar worktree creation now activates the Husky pre-commit shim in newly
+created worktrees. A fresh worktree could previously have Git configured for
+Husky and the tracked pre-commit script present, while still missing Husky's
+generated local shim. That made commits skip the instar-dev gate until someone
+remembered to run the package prepare step in that worktree.
+
+The worktree manager now verifies the generated shim after creating a worktree.
+When the project has Husky configured, it runs the package prepare step if the
+shim is missing, then fails loudly if the hook is still not runnable.
+
+## What to Tell Your User
+
+- **New worktrees start with the quality gate active**: "When I create a new Instar worktree, I now make sure its pre-commit gate is actually installed before using it. If the gate cannot be activated, I stop instead of silently working in an ungated checkout."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|------------|
+| Worktree hook activation | Automatic when creating Instar worktrees with the built-in worktree command |
+
+## Evidence
+
+Dogfooding found worktrees with Git configured for Husky but missing the
+generated hook shim, so commits bypassed the instar-dev precommit gate. Focused
+unit coverage checks the runnable-shim predicate, and integration coverage
+creates a real worktree and asserts the generated pre-commit shim exists and is
+executable before worktree creation returns.

package/upgrades/1.3.90.md

@@ -0,0 +1,35 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+The self-discovery guidance for capability checks now matches the authenticated
+server contract. Existing instructions told agents to call the capabilities
+endpoint without an authorization header, but the endpoint requires the agent's
+Bearer token. Agents following the documented "know before you claim" step could
+therefore get a 401 instead of the capability matrix.
+
+Fresh initialization now renders the authenticated capabilities command, and the
+post-update migrator both adds the authenticated form for stale files missing the
+section and rewrites legacy unauthenticated capability-check commands in
+existing CLAUDE.md files.
+
+## What to Tell Your User
+
+- **Self-discovery now uses the working authenticated request**: "When I check
+  what I can actually do, my local instructions now use the same authenticated
+  capabilities call the server expects, so the documented verification step no
+  longer fails before it can answer."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|------------|
+| Authenticated self-discovery guidance | Existing agents receive the corrected capability-check instruction on update; new agents get it during initialization |
+
+## Evidence
+
+Unit coverage verifies the post-update migrator rewrites legacy unauthenticated
+capabilities checks and adds the self-discovery section with the authenticated
+form when it is missing.

package/upgrades/side-effects/capabilities-auth-self-discovery.md

@@ -0,0 +1,31 @@
+# Side Effects Review — capabilities auth self-discovery
+
+## Change
+
+Align agent-facing self-discovery instructions with the runtime server contract:
+capability checks require the configured Bearer token.
+
+## Surfaces Touched
+
+- Fresh init CLAUDE.md generation.
+- Post-update CLAUDE.md migration for existing agents.
+- Built-in manifest regeneration for changed source templates.
+
+## Expected Effects
+
+- Agents following "know before you claim" get the capability matrix instead of
+  an authentication error.
+- Existing stale CLAUDE.md files are corrected during update without requiring a
+  full re-init.
+
+## Risk Review
+
+- The change does not relax API auth or expose capability data publicly.
+- The migrator rewrite targets only unauthenticated localhost capabilities curl
+  commands and replaces them with the authenticated form for the configured
+  server port.
+- Existing already-authenticated commands are left unchanged.
+
+## Validation
+
+- Focused unit coverage covers both rewrite and missing-section insertion.

package/upgrades/side-effects/worktree-husky-hook-shim.md

@@ -0,0 +1,108 @@
+# Side-Effects Review — Worktree creation activates Husky hooks
+
+**Version / slug:** `worktree-husky-hook-shim`
+**Date:** `2026-05-29`
+**Author:** `instar-codey`
+**Second-pass reviewer:** `instar-codey second-pass checklist`
+
+## Summary of the change
+
+This change makes `instar worktree create` ensure the generated Husky
+pre-commit shim exists and is executable in each newly-created Instar worktree.
+If the tracked Husky pre-commit script and package prepare script are present
+but the generated shim is missing, the manager runs the prepare step in the new
+worktree and verifies the shim afterward. If activation fails, worktree creation
+fails instead of returning an ungated checkout.
+
+## Decision-point inventory
+
+- `createWorktree` — modify — calls hook activation after git identity is set
+  and before returning the new worktree.
+- `ensureHuskyHooksActive` — add — detects project Husky configuration, runs
+  prepare when needed, and fails closed if the shim remains missing.
+- `hasRunnableHookShim` — add — small predicate for unit coverage and activation
+  verification.
+- Worktree integration fixture — modify — simulates Husky prepare and asserts a
+  created worktree has the runnable shim.
+
+---
+
+## 1. Over-block
+
+Worktree creation can now fail if a project has a tracked Husky pre-commit
+script and package prepare script but prepare is broken. That is intentional:
+returning a checkout that looks protected while commits bypass the gate is the
+failure class this change fixes.
+
+Repositories without a tracked Husky pre-commit script are skipped. This keeps
+the convention repo-specific rather than imposing Husky on unrelated checkouts.
+
+## 2. Under-block
+
+The check proves the generated shim exists and is executable, not that every
+hook command inside the tracked script will pass. That is the correct boundary
+for worktree creation: it guarantees Git can invoke the hook, while the hook
+itself owns later lint, trace, and migration checks.
+
+## 3. Level-of-abstraction fit
+
+The manager owns the structural properties of a newly-created agent worktree:
+location, identity, audit ledger, and now hook availability. Keeping this in the
+manager means CLI callers, wrapper callers, and tests share one enforcement
+path.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [ ] No — this change produces a signal consumed by an existing smart gate.
+- [ ] No — this change has no block/allow surface.
+- [ ] Yes — but the logic is a smart gate with full conversational context.
+- [x] Not applicable to conversational/product judgment — this is structural
+  local hook activation for developer worktrees.
+
+## 5. Interactions
+
+- **Shadowing:** This does not replace the pre-commit hook. It only ensures the
+  generated dispatch shim exists so Git can call the tracked hook.
+- **Double-fire:** Prepare runs once during worktree creation only when the shim
+  is missing. Existing runnable shims are left alone.
+- **Races:** Concurrent creation of different worktrees runs prepare in separate
+  directories, so no shared shim file is mutated.
+- **Feedback loops:** The activation step runs before any user commit, so it
+  closes the "remember to install hooks" loop at the source.
+
+## 6. External surfaces
+
+Agents and developers using the built-in worktree command receive a checkout
+whose pre-commit gate is actually runnable. If hook activation fails, they get a
+clear creation error instead of a silently ungated worktree.
+
+## 7. Rollback cost
+
+Rollback is a code and test revert. Existing worktrees keep whatever local hook
+state they already have.
+
+## Conclusion
+
+The diagnosis showed that hook configuration can be present while Husky's
+ignored generated shim is absent. This change makes worktree creation repair
+and verify that local generated state, turning the gate from remembered setup
+into structure.
+
+---
+
+## Second-pass review (if required)
+
+**Reviewer:** instar-codey second-pass checklist
+**Independent read of the artifact:** concur
+
+The second pass agrees that the fail-closed behavior is appropriate for the
+official Instar worktree command and that the activation boundary is narrow.
+
+---
+
+## Evidence pointers
+
+- `tests/unit/InstarWorktreeManager.test.ts`
+- `tests/integration/instar-worktree-create.test.ts`