instar 1.3.1319 → 1.3.1321

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-10-05T10:15:07.984Z",
-  "instarVersion": "1.3.1319",
+  "generatedAt": "2026-10-06T19:27:33.914Z",
+  "instarVersion": "1.3.1321",
   "entryCount": 203,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:telegram-origin-guard": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -110,7 +110,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -119,7 +119,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -137,7 +137,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -155,7 +155,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -427,7 +427,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -435,7 +435,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -443,7 +443,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -451,7 +451,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -459,7 +459,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -467,7 +467,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -475,7 +475,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -483,7 +483,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -491,7 +491,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -499,7 +499,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -507,7 +507,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -515,7 +515,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -523,7 +523,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -531,7 +531,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -539,7 +539,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -547,7 +547,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -555,7 +555,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -563,7 +563,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -571,7 +571,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -579,7 +579,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -587,7 +587,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -595,7 +595,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -603,7 +603,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -611,7 +611,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -619,7 +619,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -627,7 +627,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -635,7 +635,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -643,7 +643,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -651,7 +651,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -659,7 +659,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -667,7 +667,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -675,7 +675,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -683,7 +683,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -691,7 +691,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -699,7 +699,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -707,7 +707,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -715,7 +715,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -723,7 +723,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -731,7 +731,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -739,7 +739,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -747,7 +747,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -755,7 +755,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -763,7 +763,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -771,7 +771,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/machineRoutes.ts",
-      "contentHash": "d47c43b15dd3390f1920b3ac2d1bed3162a042993ecf044e147b8863ad61b5b2",
+      "contentHash": "5f478ae149912db1d765d8167180be481e8d3eb46a7360d3538c936b1a5f0e53",
       "since": "2025-01-01"
     },
     "route-group:secret-drop": {
@@ -779,7 +779,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9478b87a843a965a555afc59a771f9db7846d3cc64aecdb3e5b0a343649f5fbd",
+      "contentHash": "19ee4ce028fd5b4d4c0fea0797d6d1efaac5eaaf8f21fbd6b1b28f22cf887e3e",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1571,7 +1571,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "c8398b2d50276d3c6412cc0fb1753e3545782dc1d0aa61a0c8f68d15a1a66874",
+      "contentHash": "1944edf03d572006dca750f8d935cbbfb6982b0527ae7f112abfcd3f94dedda6",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "35448db940d659661ebdfb09761439033f93a15157540ee2f6eecf825488e1e6",
-  "packageVersion": "1.3.1319",
+  "packageVersion": "1.3.1321",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/src/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "a511b29b16fa5db7231b6d21fc2070c9220ed7e46b8488e8862a58d43a44e68b",
+  "sha256": "b1e3523bdc4928248eefaadbf30c38b85fa6bdc0bce7dd8c04f19e2e20a24fc3",
   "registrySha256": "35448db940d659661ebdfb09761439033f93a15157540ee2f6eecf825488e1e6",
-  "packageVersion": "1.3.1319"
+  "packageVersion": "1.3.1321"
 }

package/src/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "35448db940d659661ebdfb09761439033f93a15157540ee2f6eecf825488e1e6",
   "articleCount": 92,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1319"
+  "packageVersion": "1.3.1321"
 }

package/src/scaffold/templates.ts

@@ -370,10 +370,11 @@ This project uses instar for persistent agent capabilities. I am not a vanilla C
 
 ### API Authentication
 
-Most server endpoints require an auth token when \`authToken\` is configured in \`.instar/config.json\`. Read it once per session:
+Most server endpoints require an auth token. Sessions already have it as \`$INSTAR_AUTH_TOKEN\`; outside a session, read it from the secret store (once \`instar pair\` has moved secrets out of \`.instar/config.json\`, the config only holds a placeholder there):
 
 \`\`\`bash
-AUTH=$(python3 -c "import json; print(json.load(open('.instar/config.json')).get('authToken',''))" 2>/dev/null)
+AUTH="\${INSTAR_AUTH_TOKEN:-$(node .instar/scripts/secret-get.mjs authToken 2>/dev/null)}"
+AUTH="\${AUTH:-$(python3 -c "import json; v=json.load(open('.instar/config.json')).get('authToken',''); print(v if isinstance(v, str) else '')" 2>/dev/null)}"
 \`\`\`
 
 Then include in ALL API calls (except \`/health\`, which is public):
@@ -494,6 +495,7 @@ If one of my machines loses its local signing/encryption files, it can prove con
 **Threadline Conversation Coherence (which machine holds each agent-to-agent thread)** — Every A2A conversation's lifecycle (started / tied to a topic / closed) is recorded content-free in the coherence journal and replicated, so ANY machine can answer "which machine holds the Dawn thread?" from local disk. When a topic moves machines, its conversation deliberately does NOT move (the relay address is part of that machine's identity) — the merged view names the holder honestly instead.
 - The view: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/threadline/conversations?scope=mesh"\` → \`{ conversations: [{ conversationId, peerFingerprint, holderMachineId, boundTopicId, status, stalenessMs }] }\` (own rows live; replica rows staleness-tagged; \`scope\` omitted = local only).
 - **When to use** (PROACTIVE — this is the trigger): the user references an A2A thread that is NOT held on this machine ("what did Dawn and I agree?") → consult the mesh view and NAME THE HOLDER ("that conversation lives on <machine>, as of <staleness> ago") — never claim the thread doesn't exist. If the holder is offline, quote the relay's REAL bound: peers' messages queue in memory for ~24h and may then drop.
+- **A quiet standby does not connect to the relay.** The relay admits ONE connection per agent identity, so on a multi-machine agent only the awake machine (the one owning the Telegram poll) connects; a machine with \`multiMachine.telegramPolling: false\` logs \`relay connection SUPPRESSED (standby)\` and keeps its local Threadline tools. If a peer says I am unreachable while I am the standby, that is this rule, not an outage — the awake machine answers for me.
 
 **🩺 Agent Health lane (calm self-health notices)** — Routine notices about MY OWN internal state (a session that looks stuck, a peer I can't reach) land in ONE calm, named "🩺 Agent Health" Telegram topic — never topic-after-topic. Each is normal-priority (not a user-critical alert), names the topic in plain language (e.g. "the 'EXO 3.0' session", never \`topic-19077\`), ends with a next step you can just reply to, and same-session re-escalations are de-duped so the lane stays quiet. Ships **default-on, no config** (it's a delivery-shaper in code — it never gates or drops anything; every notice is still in the attention store). Tune via \`messaging[].config.agentHealthLane\` = \`{ "enabled": true, "topicName": "🩺 Agent Health", "dedupWindowMs": 1800000 }\` (set \`enabled:false\` for the old per-item-topic behavior). Proactive: user asks "what's this Agent Health topic?" / "why are my stale-session notices grouped?" → explain the calm lane (the StaleSessionBackstop now routes its "looks stuck" heads-up here at normal priority instead of spawning a topic each time).
 
@@ -531,6 +533,10 @@ With \`intelligence.jevMemoryPicker\` on (spec: jev-memory-picker.md), each sess
 
 A dark research instrument (spec: jev-circles-shadow.md). Every 5 tool actions in a Claude Code session, the server reads the last 15 actions from that session's own transcript, secret-scrubs them, and asks Jev (TypeSafe) whether the agent is going in circles (the third try at the same fix for the same failure), polling, converging, or working normally. It only writes a content-free row to \`logs/jev-circles-shadow.jsonl\` (label, confidence, and whether a nudge WOULD have fired, with a 30-minute cooldown per session). It never sends anything to any session, user or topic. Summary: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/jev-circles/summary\` (checks run, would-nudges, per-session counts). Live on a development agent, dark on the fleet (omitted \`enabled\`); \`intelligence.jevCirclesShadow.enabled: false\` is the kill switch, read live. It needs the vault \`typesafe_api_key\` and has a daily call cap. If the user asks "would a going-in-circles nudge fire too often?" — this is the measurement; read the summary.
 
+### Jev Review-Flag Shadow (log-only "does this reply need your review?" measurement)
+
+A dark research instrument (spec: jev-review-flag-shadow.md). Once a minute the server reads the newest agent replies in its own Telegram history (\`.instar/telegram-messages.jsonl\`, conversational sends only, at most 30 minutes old), secret-scrubs each reply and the operator message it answers, and asks Jev (TypeSafe) whether the reply needs the operator's review (it claims done without evidence, asks the operator to decide or act, reports a costly step, or misses the ask), is fine, or cannot be told. It only writes a content-free row to \`logs/jev-review-flag-shadow.jsonl\` (the Telegram message ids, the label, P(needs review), and whether a flag WOULD have been shown). It never sends anything to any session, user or topic. Summary: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/jev-review-flag/summary\` (checks, would-flags, per-topic counts). Live on a development agent, dark on the fleet (omitted \`enabled\`); \`intelligence.jevReviewFlagShadow.enabled: false\` is the kill switch, read live. It needs the vault \`typesafe_api_key\` and has a daily call cap. If the user asks "could you tell which replies need my eyes?" — this is the measurement; read the summary.
+
 **Token-Burn Alerts** — The "an unknown component is using more than a quarter of the agent's token budget" heads-up. The BurnDetector watches per-component 24h token share and the 1h spend rate, and alerts when one component is *actively* burning. Two things to know when a user asks about the noise:
 - An alert only fires for a component spending **right now** (last-1h tokens above \`absoluteShareActivityFloorTokens\`, default 0 = any positive current spend). A finished heavy session — high 24h share but zero current rate — is NOT a burn and is silenced; this is the activity gate that closed the "consumed 67% of 24h spend … Projected 0 tokens" re-alarm-for-a-full-day bug. Most context-cache usage spread across many warm sessions never trips it.
 - Silence or tune it in \`.instar/config.json\` → \`monitoring.burnDetection\`: \`{"enabled": false}\` is the master off-switch; \`absoluteShareThreshold\` (default 0.25), \`absoluteShareActivityFloorTokens\`, \`alertTopicId\` (where alerts post), \`autoThrottle\` / \`autoThrottleOnUnknown\` tune behaviour without code changes. Absence preserves the shipped defaults.
@@ -2229,10 +2235,11 @@ This project uses instar for persistent agent capabilities.
 
 ### API Authentication
 
-Most server endpoints require an auth token. Read it once per session:
+Most server endpoints require an auth token. Sessions already have it as \`$INSTAR_AUTH_TOKEN\`; outside a session, read it from the secret store (once \`instar pair\` has moved secrets out of \`.instar/config.json\`, the config only holds a placeholder there):
 
 \`\`\`bash
-AUTH=$(python3 -c "import json; print(json.load(open('.instar/config.json')).get('authToken',''))" 2>/dev/null)
+AUTH="\${INSTAR_AUTH_TOKEN:-$(node .instar/scripts/secret-get.mjs authToken 2>/dev/null)}"
+AUTH="\${AUTH:-$(python3 -c "import json; v=json.load(open('.instar/config.json')).get('authToken',''); print(v if isinstance(v, str) else '')" 2>/dev/null)}"
 \`\`\`
 
 Then include in ALL API calls (except \`/health\`, which is public):
@@ -2407,6 +2414,13 @@ export function jevSignalLiveAwareness(): string {
   return '\n\n' + '### Jev Artefact Signals (live advisory input to the tone gate)\n\nBefore an outbound message is judged, the tone gate lists "artefact signals" (a raw path, a command, a config key, an endpoint, code to paste, an env var, a cron line or internal slug) for its judge. With `intelligence.jevSignalLive` on (spec: jev-signal-live.md), Jev (TypeSafe) is asked those questions first, within about a second: where Jev is confident its answer decides that signal; where it is unsure, or slow, down, or erroring, the hand-written detectors decide exactly as before. A detector match that Jev confidently rejects is still shown to the judge, marked as a disagreement. It is advisory only: it takes effect only where the tone gate\'s B1–B7 rules are overridable (the advisory migration, with decision-quality recording live), never adds a hard block, and leaves the credential wall and the degraded-mode floor untouched. Live on a development agent, dark on the fleet (omitted `enabled`); `"enabled": false` is the kill switch, read live. It needs the vault `typesafe_api_key`; the text is secret-scrubbed before it leaves the machine. Each message\'s row in `logs/jev-signal-shadow.jsonl` records which source (jev / detector-fallback) decided each signal. If the user asks "what decides whether my messages are too technical?" — the judge decides; this only improves what it is shown.' + '\n';
 }
 
+/** Jev review-flag-shadow awareness card (spec: jev-review-flag-shadow.md) —
+ * appended by generateClaudeMd above and by PostUpdateMigrator.migrateClaudeMd
+ * for existing agents (Agent Awareness + Migration Parity). */
+export function jevReviewFlagShadowAwareness(port: number): string {
+  return '\n\n' + '### Jev Review-Flag Shadow (log-only "does this reply need your review?" measurement)\n\n' + 'A dark research instrument (spec: jev-review-flag-shadow.md). Once a minute the server reads the newest agent replies in its own Telegram history (`.instar/telegram-messages.jsonl`, conversational sends only, at most 30 minutes old), secret-scrubs each reply and the operator message it answers, and asks Jev (TypeSafe) whether the reply needs the operator\'s review (it claims done without evidence, asks the operator to decide or act, reports a costly step, or misses the ask), is fine, or cannot be told. It only writes a content-free row to `logs/jev-review-flag-shadow.jsonl` (the Telegram message ids, the label, P(needs review), and whether a flag WOULD have been shown). It never sends anything to any session, user or topic. Summary: `curl -H "Authorization: Bearer $AUTH" http://localhost:PORT/jev-review-flag/summary` (checks, would-flags, per-topic counts). Live on a development agent, dark on the fleet (omitted `enabled`); `intelligence.jevReviewFlagShadow.enabled: false` is the kill switch, read live. It needs the vault `typesafe_api_key` and has a daily call cap. If the user asks "could you tell which replies need my eyes?" — this is the measurement; read the summary.'.replace('PORT', String(port)) + '\n';
+}
+
 /** Jev circles-shadow awareness card (spec: jev-circles-shadow.md) — appended
  * by generateClaudeMd above and by PostUpdateMigrator.migrateClaudeMd for
  * existing agents (Agent Awareness + Migration Parity). */