instar 1.2.66 → 1.2.68

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-25T01:54:04.610Z",
-  "instarVersion": "1.2.66",
+  "generatedAt": "2026-05-25T02:41:21.838Z",
+  "instarVersion": "1.2.68",
   "entryCount": 191,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -65,7 +65,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -74,7 +74,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -83,7 +83,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -101,7 +101,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -110,7 +110,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -128,7 +128,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -392,7 +392,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -400,7 +400,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -408,7 +408,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -416,7 +416,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -424,7 +424,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -432,7 +432,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -440,7 +440,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -448,7 +448,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -456,7 +456,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -464,7 +464,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -472,7 +472,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -480,7 +480,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -488,7 +488,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -496,7 +496,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -504,7 +504,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -512,7 +512,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -520,7 +520,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -528,7 +528,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -536,7 +536,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -544,7 +544,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -552,7 +552,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -560,7 +560,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -568,7 +568,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -576,7 +576,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -584,7 +584,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -592,7 +592,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -600,7 +600,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -608,7 +608,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -616,7 +616,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -624,7 +624,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -632,7 +632,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -640,7 +640,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -648,7 +648,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -656,7 +656,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -664,7 +664,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -672,7 +672,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -680,7 +680,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -688,7 +688,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -696,7 +696,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -704,7 +704,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -712,7 +712,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -720,7 +720,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -728,7 +728,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -744,7 +744,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1397612a42656f1c9bc6649aee811f7eb3842fbc14f7bcec7438644b187ea6d6",
+      "contentHash": "6a31120bfd57e5d3ee971467e04df141698c7706d1f827900d79bb10abe364f1",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1440,7 +1440,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "099c0f4c933b7a97018d9eeb17727c90a195fa72eb69d4dca8b46b8a654dd772",
+      "contentHash": "cbf06f2573314195ce811cdff252431d100f7a524c0339d4bc8c7a10b091ef48",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1448,7 +1448,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "b7aa2fc772416581aaa26e266159050c706ec449039db9916093e8b8822aa4de",
+      "contentHash": "748c6c940caad86e120730d64cd0ab478522470ae4127dde10a24df8536d774e",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {
@@ -1472,7 +1472,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "12706baa0f474d541a3d47fb6548a02e988727c7b150ac6ac351adaed4480e19",
+      "contentHash": "b4bdac2474bf38d74e5cb801067dfe0e3bf8fb147591b589238735a0ff4c5945",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.2.67.md

@@ -0,0 +1,57 @@
+# Upgrade Guide — Codex safety hooks run unprompted in autonomous sessions
+
+<!-- bump: patch -->
+<!-- patch = bug fixes, refactors, test additions, doc updates -->
+
+## What Changed
+
+**Codex (codex-cli) agents now run instar's safety hooks without the interactive
+"trust these hooks?" prompt that would otherwise freeze an unattended session.**
+
+Codex requires a one-time review/trust of any command hook before it runs. In an
+interactive session that prompt blocks until answered — and it even offers a
+"continue without trusting (hooks won't run)" option, so an agent could decline its
+own guards. instar now launches codex with `--dangerously-bypass-hook-trust` (added
+in codex 0.133), which runs the already-vetted instar hooks with no prompt.
+
+This is safe-by-construction: instar both writes the hooks (`installCodexHooks`) and
+owns the launch command, so there's no untrusted third-party hook to guard against,
+and the agent can't strip a flag from a launch it doesn't construct. It's a per-agent
+launch setting — it touches nothing system-wide and does not affect the operator's own
+personal codex sessions (those still prompt normally).
+
+The flag is **capability-gated**: instar probes `codex --help` once per binary and only
+adds the flag when present. On codex <0.133 (which lacks the flag and would reject it),
+it's omitted and behaviour degrades to the safe-by-blocking trust-prompt path.
+
+## What to Tell Your User
+
+If I'm running on Codex without you watching, my safety guard now kicks in on its own
+instead of stopping to ask you "do you trust this guard?" first — a question that would
+have frozen me mid-task, and that technically let me wave my own guard off. Now the
+guard just runs. This only applies to how I launch Codex; when you use Codex yourself it
+behaves exactly as before.
+
+## Summary of New Capabilities
+
+No new user-facing capabilities — this completes the Codex enforcement-hook layer so its
+guards work in unattended/autonomous sessions, not just interactive ones where a human can
+answer the trust prompt. Internal: `codexCapabilities.codexSupportsHookTrustBypass()`
+(memoized feature probe) + both codex launch builders append the flag when supported.
+
+## Evidence
+
+**Live reproduction (real codex 0.133, no trust ever granted).** Launched interactive
+codex with `--dangerously-bypass-hook-trust` and a hook whose trust hash had been
+invalidated:
+
+- Codex launched **straight to the prompt — no "trust these hooks?" review** (banner:
+  `⚠ Enabled hooks may run without review for this invocation`).
+- Told it to run `echo 'rm -rf /'` — the guard fired and blocked it; codex itself reported
+  it was blocked for the catastrophic `rm -rf /` pattern, and the guard's debug trace
+  logged the fire. Before this, the same setup either blocked on the trust prompt or ran
+  unguarded.
+
+Also verified instar's builder emits the flag for the real codex binary, and the
+capability probe correctly omits it for a binary whose `--help` lacks it. Unit coverage:
+`codexCapabilities` (5) + `frameworkSessionLaunch` (+4). `tsc` clean.