instar 1.3.1236 → 1.3.1237

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.1236",
+  "version": "1.3.1237",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",
@@ -150,6 +150,7 @@
     "@types/ssh2": "1.15.5",
     "@types/supertest": "^6.0.3",
     "@types/ws": "^8.18.1",
+    "esbuild": "0.21.5",
     "husky": "^9.1.7",
     "jsdom": "^29.1.1",
     "supertest": "^7.2.2",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-09-11T01:36:49.503Z",
-  "instarVersion": "1.3.1236",
+  "generatedAt": "2026-09-12T09:27:08.868Z",
+  "instarVersion": "1.3.1237",
   "entryCount": 203,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:telegram-origin-guard": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -110,7 +110,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -119,7 +119,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -137,7 +137,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -155,7 +155,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -427,7 +427,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -435,7 +435,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -443,7 +443,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -451,7 +451,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -459,7 +459,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -467,7 +467,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -475,7 +475,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -483,7 +483,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -491,7 +491,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -499,7 +499,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -507,7 +507,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -515,7 +515,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -523,7 +523,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -531,7 +531,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -539,7 +539,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -547,7 +547,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -555,7 +555,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -563,7 +563,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -571,7 +571,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -579,7 +579,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -587,7 +587,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -595,7 +595,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -603,7 +603,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -611,7 +611,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -619,7 +619,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -627,7 +627,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -635,7 +635,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -643,7 +643,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -651,7 +651,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -659,7 +659,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -667,7 +667,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -675,7 +675,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -683,7 +683,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -691,7 +691,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -699,7 +699,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -707,7 +707,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -715,7 +715,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -723,7 +723,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -731,7 +731,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -739,7 +739,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -747,7 +747,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -755,7 +755,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -763,7 +763,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -779,7 +779,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "1ed6463abb17a4f422f2bfdec93e170c43202bb4e9f0c9d43c74e55a2bc80907",
+      "contentHash": "50119e1452df9c1c0bdf37d6ced4d8518c20cbd54c1866bc748fd9c0978b77df",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1539,7 +1539,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "c4b595800555cee1690234db13d944ee6f85c55640164d1589951f977f96e6c4",
+      "contentHash": "15536779711a7da850ee76f7de869b73944ee5254a201c95546b20a9cd2d6ec4",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1571,7 +1571,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "ae6f5bc6538825b0d6b162cb5a9c29816dd1e2ca5ebda81c0d8ad0adf97422ca",
+      "contentHash": "2da8a2c29458d4e7598450bc0f52f4f57086dfc8e0e585198dc40b30f871b532",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "3b12afd2e8d1cf7e26246e69c0af49bf7012a18d3a8bd128fe2aafa332f625c3",
-  "packageVersion": "1.3.1236",
+  "packageVersion": "1.3.1237",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/src/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "53ae7b33250340a148b08228981afd41edd953bf1dbec028fa73005799371038",
+  "sha256": "23ceff9bfc136a93db69ffd53732d121befbc52114b029213e2eda8cc8cd6336",
   "registrySha256": "3b12afd2e8d1cf7e26246e69c0af49bf7012a18d3a8bd128fe2aafa332f625c3",
-  "packageVersion": "1.3.1236"
+  "packageVersion": "1.3.1237"
 }

package/src/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "3b12afd2e8d1cf7e26246e69c0af49bf7012a18d3a8bd128fe2aafa332f625c3",
   "articleCount": 91,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1236"
+  "packageVersion": "1.3.1237"
 }

package/src/scaffold/templates.ts

@@ -903,6 +903,7 @@ I declare owner/blockedOn at commitment creation; a later state change goes thro
 - See the pool + each account's live quota: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/subscription-pool\` · one account's quota + burn: \`GET /subscription-pool/:id/quota\` · poll all now: \`POST /subscription-pool/poll\`.
 - **Sign-in reliability history (passive, never repair authority)** — \`GET /subscription-pool/login-history?summary=1&days=7\` shows exchange-corroborated re-login episodes separately from provisional credential-read observations. Missing credentials require 3 matching passes spanning 30 minutes before an observation window opens, and never disable an account or trigger login/repair by themselves. Raw reads are bounded to 30 days and 500 rows. Use this when asked “how often do subscriptions need sign-in again?” or “was this a real auth failure or a credential-store visibility gap?”.
 - **Assisted sign-in repair (one approval, then autonomous)** — when a corroborated Claude Code authentication incident opens, \`GET /subscription-relogin\` shows the exact account/profile repair proposal. The operator taps **Repair sign-in** once in the dashboard; the bounded flow then handles provider-native login, CLI completion, identity verification, authenticated-use proof, pool recovery, and exact incident closure. CAPTCHA, phone confirmation, unexpected origins, identity ambiguity, or permission expansion stop in an operator-only/refused state. Never ask for or paste credentials into chat. Cancel: \`POST /subscription-relogin/EPISODE/cancel\`; inspect the redacted audit: \`GET /subscription-relogin/EPISODE/events\`.
+- **One-click repair across all machines** — the Subscriptions grid reads \`GET /subscription-relogin?scope=pool\` and puts the action on the exact account×machine cell. After one dashboard unlock, \`POST /subscription-relogin/repair-cell\` delivers a signed, action-bound mandate to that machine; **Repair sign-in**, **Try repair again**, and **Cancel repair** map to durable approve/retry/cancel states. A dark assisted-repair feature leaves the manual sign-in path available; an unreachable peer is shown honestly and suppresses competing actions until truth returns.
 - **Quota across ALL my machines** (pool-scope read) — \`GET /subscription-pool?scope=pool\` fans out to every ONLINE peer's plain pool, tags each account with the machine holding it (\`machineId\`/\`machineNickname\`/\`remote:true\`), and merges into ONE dark-peer-tolerant object \`{ enabled, accounts:[...], pool:{ selfMachineId, peersQueried, peersOk, failed }, scope:'pool' }\`. A down/slow/unauth peer is a classified \`pool.failed\` row (normalized reason — never a peer URL or token), never a silent omission and never a 500. Per-machine seat is meaningful, so the SAME account on two machines stays individually visible (never coalesced). Single-machine → the plain self-only view tagged \`scope:'pool'\`. Use this when the operator asks "how much quota is left across ALL my machines?".
 - **Continuity guarantee** — a long session that hits its account's quota resumes on another eligible account (conversation preserved via \`--resume\`), never dies. Manual lever: \`POST /subscription-pool/swap\` \`{"sessionName":"...","exhaustedAccountId":"..."}\`. Auto-swap on rate-limit ships OFF (opt-in via \`subscriptionPool.autoSwapOnRateLimit\` — it moves a live session, real authority).
 - **Codex quota is first-class in the pool:** Codex accounts read the real 5-hour + weekly windows from their latest rollout instead of appearing permanently empty. Placement and every reactive/proactive swap are framework-safe: a Codex session can use only Codex accounts, and a Claude session only Claude accounts.

package/upgrades/1.3.1237.md

@@ -0,0 +1,27 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+- The Subscriptions grid now loads assisted re-login episodes from every reachable machine and binds each repair to the exact account×machine cell.
+- One **Repair sign-in** click after dashboard unlock issues a signed, exact-bounds re-mint mandate and starts the autonomous flow on the machine that owns the broken credential.
+- The target machine independently re-verifies the account, machine, episode, and mandate before acting. Ordinary API access remains insufficient.
+
+## What to Tell Your User
+
+When a Claude account needs authentication on a machine, unlock the dashboard and click **Repair sign-in** on that exact grid cell. Instar handles the routine login autonomously on the target machine. It asks for help only when the provider presents a genuine security challenge it is not allowed to bypass.
+
+## Summary of New Capabilities
+
+- Central, phone-friendly one-click repair across the machine fleet.
+- Machine-tagged repair progress and typed peer failures in one dashboard.
+- Signed cross-machine authorization with target-local point-of-use verification.
+- Single-use, 15-minute repair permissions with durable replay refusal.
+
+## Evidence
+
+- Focused dashboard, route, rendering, authority, and write-domain tests cover the one-click request, exact binding, remote episode aggregation, and deny/allow boundaries.
+- Target-side tests cover expiry, first-use consumption, replay refusal, and redelivery tombstones.
+- TypeScript build passes; full repository and remote CI remain release gates.

package/upgrades/relogin-pool-one-click.eli16.md

@@ -0,0 +1,9 @@
+# One-click Claude sign-in repair across your machines
+
+Today, a Claude account can be signed out on the Laptop while the dashboard you opened lives on the Mac Studio. The old repair feature could do the hard login work, but its approval lived on the machine with the broken account. That left an awkward gap: you could see the problem centrally without being able to fix that exact machine centrally.
+
+This change closes that gap. In the Subscriptions grid, the broken account's exact machine cell shows **Repair sign-in**. Once you have unlocked the dashboard, one click sends a short-lived, signed permission slip to that machine and starts the existing bounded repair flow there. The permission slip names the exact account, machine, repair episode, evidence snapshot, and action, so it cannot be reused for another account or for ordinary account setup.
+
+The cell continues to be useful after the first click. A safely failed repair offers **Try repair again**. Work in progress offers **Cancel repair**. If the repair feature is intentionally unavailable, or if a repair is refused for safety, the normal manual sign-in option remains available. If the machine's status cannot be trusted because it is offline or unreachable, competing actions are hidden until the dashboard can see the truth again.
+
+The target machine still owns all credentials and browser state. The central dashboard never receives passwords, cookies, codes, or login profiles. CAPTCHA, phone verification, unexpected sites, identity ambiguity, permission changes, and billing/security changes continue to stop safely for operator help instead of being bypassed.