instar 1.3.131 → 1.3.133

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.131",
+  "version": "1.3.133",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-31T01:22:54.429Z",
-  "instarVersion": "1.3.131",
+  "generatedAt": "2026-05-31T02:01:18.591Z",
+  "instarVersion": "1.3.133",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -65,7 +65,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -74,7 +74,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -83,7 +83,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -101,7 +101,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -110,7 +110,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -128,7 +128,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ac8998f71c7b2507be5ef139c3a6c4214725fd9f46720167995602b16c9dad48",
+      "contentHash": "b9c2d45fb65577577e734274ad06818c84f085fcbd4a83eb9df4029d44c6939d",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1457,7 +1457,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "73e2eeaf3187a5dbb590d455f80ec40d14f2dc7210e5d433891f9786dd1c106d",
+      "contentHash": "7afd4de6f797ddcf378b91eb0b1cf903bed22b2e153709238ce5fd51dee67659",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1489,7 +1489,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "89b3df4de4f24c8825ec19797392f021c54d12a9a18826cb4380ce6986f4558f",
+      "contentHash": "bc3f160047670b4efe76ea7007ab649646f93f8b5d29eb39f6d2ef4b3b8e9feb",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates/jobs/instar/correction-analyzer.md

@@ -0,0 +1,32 @@
+---
+name: Correction & Preference Learning Analyzer
+description: "Weekly scan of the correction ledger for recurring corrections + preferences. Runs the 3-pronged restart-proof recurrence gate, routes each crossing learning (explicit-preference → preferences write the session-start hook injects; infra-gap → a human-approved /feedback proposal; policy-relaxation → Attention for one-tap approval), and runs the closed-loop verify step. Off by default; turns on with monitoring.correctionLearning.enabled. Tier-1 supervised (this haiku job wraps the deterministic /corrections/analyze endpoint and sanity-checks each routed learning against its evidence). SIGNAL-ONLY — never blocks or rewrites a message. Spec docs/specs/CORRECTION-PREFERENCE-LEARNING-SENTINEL-SPEC.md sections 3.5, 3.6, 3.7."
+schedule: "0 9 * * 3"
+priority: medium
+expectedDurationMinutes: 2
+model: haiku
+enabled: false
+tags:
+  - cat:learning
+  - correction-learning
+  - audit
+toolAllowlist: "*"
+unrestrictedTools: true
+---
+Run the weekly Correction & Preference Learning analysis. This job exists because a correction the user makes in three different sessions over a week looks like three unrelated one-offs — the recurring ones, the ones that matter most, are exactly the ones no single session can see. This turns the accumulated, distilled record into a routed lesson, and closes the loop on the preference path.
+
+The job:
+
+1. Confirm the feature is on. If `monitoring.correctionLearning.enabled` is not true, exit silently — there is nothing to do.
+
+2. Call the analyzer + closed-loop tick:
+   `curl -s -X POST -H "Authorization: Bearer $AUTH" http://localhost:$PORT/corrections/analyze`
+   The response is `{ analysis: { considered, crossed, belowThreshold }, routed: { total, toFeedback, toPreferences, toAttention }, verified }`. The endpoint does the deterministic work: it only routes a learning that crosses the THREE-PRONGED recurrence gate (minSupport AND distinct calendar days AND a second orthogonal prong), keying on a code-determined provenance weight so an injected prompt cannot steer it. An explicit preference is written to the preferences file the session-start hook injects on every boot; an infra-gap becomes a human-approved tracked draft (or, only if autoFeedback is on, a /feedback proposal through the real route guards); a policy-relaxation learning is routed to the Attention queue for your one-tap approval — never silently applied. It can NEVER mint a proposal or edit a memory file (by-construction authority guard).
+
+3. **Tier-1 supervision (your job).** For each routed learning, sanity-check it against its own evidence before you surface it: does the summary actually match a recurring correction, and does the support count justify acting on it? If a routed learning looks malformed or unsupported, do NOT surface it — note it and move on. You are the validation wrapper around the deterministic core.
+
+4. Surface ONLY genuinely-new, decision-bearing learnings, and ONLY when `monitoring.correctionLearning.telegramDigest` is true. Post ONE consolidated, plain-English message to the existing system topic — never a new per-feature topic, never a ping per correction. Lead with what was learned: "I noticed you keep asking me to lead with the one action across a few sessions, so I have saved that as a preference I will follow from now on." If telegramDigest is false (the default), stay silent — the /corrections read surface is the pull surface; do not push.
+
+5. If `verified` is greater than zero, the verify step concluded on one or more past learnings. A preference is marked verified only when it did not recur within its window AND the saved preference is still on disk (silence alone is never treated as success). Mention a verified-effective result only if you are already surfacing other learnings this run.
+
+IMPORTANT: This is a guardian job, not a doer. It distills, records, and routes — it NEVER blocks or rewrites a message, and it NEVER changes the agent's policy or edits a memory file on its own. A policy-relaxation learning always goes to a human, never gets auto-applied. Plain English, under 600 characters, write like you are texting a teammate about a pattern you noticed.

package/src/scaffold/templates.ts

@@ -494,6 +494,7 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 
 **Preferences I've learned about you** — The Correction & Preference Learning Sentinel turns repeated corrections into durable, structurally-injected preferences. When the user keeps correcting you the same way ("no, plainer", "stop asking me that", "from now on lead with the action"), the loop distills the lesson into a preference and writes it to \`.instar/preferences.json\`. From then on, the session-start hook fetches \`GET /preferences/session-context\` on EVERY boot and injects the learned preferences into your context wrapped in an \`<auto-learned-preference src='correction-loop'>\` envelope — so you SEE them from message one without having to remember. SIGNAL-ONLY: these are preferences, NOT authoritative instructions, and the loop NEVER blocks or rewrites an outbound message. Ships OFF (\`monitoring.correctionLearning.enabled\`).
 - See the active block the hook injects: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/preferences/session-context\` — returns the structured, byte-bounded, priority-ordered block (503 when disabled; \`{ present: false }\` when there are none yet).
+- See the distilled correction/preference records the loop has captured: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/corrections\` (deduped, scrubbed records — the raw conversation is NEVER stored or served; \`GET /corrections/:id\` for one). The weekly off-by-default \`correction-analyzer\` job drives \`POST /corrections/analyze\` (the 3-pronged recurrence gate + closed-loop tick).
 - **When to use** (PROACTIVE — this is the trigger): when the user corrects you repeatedly on the SAME thing, the loop is already watching and will turn it into a durable preference; you don't have to manually remember it across sessions. If preferences are already injected at session start, honor them by default. The preferences are advisory signals — real instructions and safety always win.
 
 **Cloudflare Tunnel** — Expose the local server to the internet via Cloudflare. Enables remote access to private views, the API, and file serving.

package/upgrades/1.3.132.md

@@ -0,0 +1,42 @@
+<!-- bump: minor -->
+
+# Correction & Preference Learning Sentinel — Slice 1b (the sentinel loop)
+
+## What Changed
+
+Slice 1b of the Correction & Preference Learning Sentinel ships the loop that turns the moments a user has to correct the agent into durable, structurally-applied learning. It builds on the Slice-1a preferences read-surface and is **SIGNAL-ONLY** — it never blocks or rewrites an outbound message. It ships **dark** behind `monitoring.correctionLearning.enabled` (default false); only the free, metadata-only Layer-0 classification is always-on.
+
+- **Layer-0 extension** (`src/monitoring/HumanAsDetectorLog.ts`): two distinctly-tagged signal families — `preference` ("from now on", "I'd rather", "keep it") and `frustration` ("you keep …ing", "every time", "stop asking me"). They are **excluded from `summarizeByLayer()`** so the guardian-failure heat map's precision contract is untouched. `classify()` now exposes `deterministicWeight` + `learningKind`. A drift-canary counter records regex-recall misses.
+- **Shared `scrubSecrets`** (`src/monitoring/scrubSecrets.ts`): extracted from `CiFailurePoller` with extended coverage (Telegram bot tokens, AWS access keys, Slack tokens, URLs with embedded credentials). Applied PRE-scrub before the distill prompt egresses and POST-scrub before persist.
+- **`CorrectionLedger`** (`src/monitoring/CorrectionLedger.ts`): SQLite at `<stateDir>/correction-ledger.db`. Dedupe-upsert on `kind:normalizedLearningHash` (SHA-256 over a canonical normalized form — hash stability is a unit-tested invariant), bounded `correction_occurrences` (prune-in-transaction, cap 200), distinct-days/topics with a deterministic-weight provenance filter, `toApiView()` strips raw `learning`, `countRecords()` health metric.
+- **`CorrectionAnalyzer`** (`src/monitoring/CorrectionAnalyzer.ts`): the 3-pronged restart-proof recurrence gate (`minSupport` AND distinct calendar days AND a second orthogonal prong — distinct topics for preferences / cross-agent Rising Tide downstream for infra-gaps). `llm_confidence` is advisory and never alone admits a record.
+- **`CorrectionLoopDriver`** (`src/monitoring/CorrectionLoopDriver.ts`): the by-construction authority-bounded router. Its `LoopDeps` carry only `addAction`, `createInitiative`, `feedbackLoopbackPost`, `recordPreference`, `attentionRoute` — no proposal-minting, no direct memory-file write. Explicit preference → `recordPreference()`; policy-relaxation phrasing → Attention (human disposes, never silently applied); infra-gap → tracked Action + draft Initiative (or loopback `/feedback` when `autoFeedback` is on). Closed-loop verify keyed on `dedupeKey`; silence alone is never treated as effective.
+- **`CorrectionCaptureLoop`** (`src/monitoring/CorrectionCaptureLoop.ts`): the hot-path capture → distill → ledger hop, wired VOID fire-and-forget into the inbound message chain so it can never block delivery or propagate an error. Per-topic LRU/TTL-evicted ring (never serialized into `/health`); prompt-injection-hardened distillation; all three `LlmQueue` throw paths caught → silent drop.
+- **Routes** (`src/server/routes.ts`): `GET /corrections`, `GET /corrections/:id`, `POST /corrections` (requires `X-Instar-Request: 1`), `POST /corrections/analyze` (the recurrence gate + closed-loop tick). 503 when disabled. Plus the `correction-analyzer` weekly Tier-1 cron job template (off by default).
+- Boot wiring in `src/server/AgentServer.ts` + `src/commands/server.ts`; `CapabilityIndex` entry; CLAUDE.md template + migration backfill.
+
+## What to Tell Your User
+
+I now learn from the moments you have to correct me, instead of letting each lesson evaporate when the session ends. When you correct me the same way across several days — plainer language, no tables in chat, lead with the one action, stop asking the same question every session — I quietly distil the recurring lesson and either save it as a preference I will carry forward on every future session, or, if it points at a gap in the tool itself, queue a proposal for a human to review. I only act on a lesson once it has genuinely recurred across distinct days, never on a one-off.
+
+This is watching-only. It never blocks, rewrites, or delays anything I send you. It is turned off by default and turns on only when you ask. Your raw words are never stored — only a short, secret-scrubbed summary plus counts. And I will never quietly relax a safety or confirmation step on my own: if a learned preference looks like it would loosen a guard, I route it to you for a one-tap approval rather than applying it myself.
+
+You can ask me what I have learned about you, and I will show you the saved preferences and the patterns I have noticed.
+
+## Summary of New Capabilities
+
+- `GET /corrections` — list distilled, scrubbed correction/preference records (keyset pagination via `?before`/`?limit`/`?kind`/`?status`; raw learning text is never served).
+- `GET /corrections/:id` — one record (scrubbed summary + metadata only).
+- `POST /corrections` — agent-diagnosed one-tap record (requires `X-Instar-Request: 1`).
+- `POST /corrections/analyze` — runs the 3-pronged recurrence gate + the closed-loop routing/verify tick (driven by the off-by-default `correction-analyzer` weekly job).
+- All routes 503 when `monitoring.correctionLearning.enabled` is false (the default).
+
+## Evidence
+
+- **Build**: `npm run build` green (tsc + manifest regen + lockfile sign).
+- **Lint**: `npm run lint` green.
+- **Unit** (5 files, classifier/ledger/analyzer/router/capture): both-sides classification + lone-weak-never + `summarizeByLayer()` unchanged + drift canary; ledger dedupe/prune/distinct-days/hash-stability/toApiView; analyzer 3-pronged below-vs-at + provenance filter + llm-confidence-alone-never; routing split + policy-keyword→Attention + by-construction authority + silence≠effective; capture both-sided scrub + prompt-injection-not-followed + over-apology + all-three-LlmQueue-throws.
+- **Wiring-integrity** (`tests/unit/correction-learning-wiring-integrity.test.ts`): ledger constructed iff enabled (200/503 + db-created on the production AgentServer boot path); LoopDeps surface is exactly the five bounded deps; `captureAndDistill` resolves and never throws into the delivery seam; loopback `/feedback` refuses (returns false) without crashing or double-routing.
+- **Integration** (`tests/integration/corrections-routes.test.ts`): 401 without bearer; 503 when disabled; `X-Instar-Request` required on POST; `toApiView` strips raw learning + sessionId; pagination; `/health` never serializes the capture ring.
+- **E2E** (`tests/e2e/correction-learning-lifecycle.test.ts`): feature-alive 200/503 on the production boot path; the §8 acceptance fixtures — a recurring explicit preference written to `.instar/preferences.json` with `provenance: correction-loop`, and the force-push nag routed as an infra-gap; raw learning never served.
+- **Parity guards** green: `feature-delivery-completeness`, `capabilities-discoverability`, `builtin-manifest`, `ConfigDefaults`.