instar 1.3.1338 → 1.3.1339

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.1338",
+  "version": "1.3.1339",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-10-09T21:53:05.040Z",
-  "instarVersion": "1.3.1338",
+  "generatedAt": "2026-10-11T00:18:12.887Z",
+  "instarVersion": "1.3.1339",
   "entryCount": 203,
   "entries": {
     "hook:session-start": {
@@ -427,7 +427,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -435,7 +435,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -443,7 +443,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -451,7 +451,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -459,7 +459,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -467,7 +467,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -475,7 +475,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -483,7 +483,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -491,7 +491,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -499,7 +499,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -507,7 +507,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -515,7 +515,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -523,7 +523,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -531,7 +531,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -539,7 +539,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -547,7 +547,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -555,7 +555,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -563,7 +563,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -571,7 +571,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -579,7 +579,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -587,7 +587,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -595,7 +595,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -603,7 +603,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -611,7 +611,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -619,7 +619,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -627,7 +627,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -635,7 +635,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -643,7 +643,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -651,7 +651,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -659,7 +659,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -667,7 +667,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -675,7 +675,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -683,7 +683,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -691,7 +691,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -699,7 +699,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -707,7 +707,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -715,7 +715,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -723,7 +723,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -731,7 +731,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -739,7 +739,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -747,7 +747,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -755,7 +755,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -763,7 +763,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -779,7 +779,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f19ccb020508cb92e2f35d90f12ddecbf5515f9ea15f1b9fd57f213094647eb7",
+      "contentHash": "4063a5c83ca8f3149333c4090d815bfc4af2a3db56e08101dfab9d72ca88629e",
       "since": "2025-01-01"
     },
     "cli:init": {

package/src/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "35448db940d659661ebdfb09761439033f93a15157540ee2f6eecf825488e1e6",
-  "packageVersion": "1.3.1338",
+  "packageVersion": "1.3.1339",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/src/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "5b4d03f85005340c306df84994bd70cce4183699ef6fc70590635f4e9dbe4b97",
+  "sha256": "c095cc2f04124b77c960da745e9fb02cacf4036692174b7d95780c5f5691c5cc",
   "registrySha256": "35448db940d659661ebdfb09761439033f93a15157540ee2f6eecf825488e1e6",
-  "packageVersion": "1.3.1338"
+  "packageVersion": "1.3.1339"
 }

package/src/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "35448db940d659661ebdfb09761439033f93a15157540ee2f6eecf825488e1e6",
   "articleCount": 92,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1338"
+  "packageVersion": "1.3.1339"
 }

package/upgrades/1.3.1339.md

@@ -0,0 +1,20 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+`POST /sessions/refresh` now answers target refusals synchronously instead of returning 202 "Refresh scheduled" and refusing 500ms later in the server log only (EVO-025, from LRN-034). `SessionRefresh` gains a read-only `precheckRefusal(sessionName)` that runs the same detect phase as `refreshSession()` (now shared via a private `resolveTarget()`), the in-flight check, and a non-recording rate-limit check. The route calls it before the busy precheck: `not_telegram_bound`, `session_not_found`, `refresh_in_progress` and `slack_respawner_unwired` return 409 `{code, error}`; `rate_limited` returns 429. When the name given is a running session's display name, the refusal names its `tmuxSession` (a hint, never a silent remap — display names are not unique). `refreshSession()` still re-checks everything after the 202.
+
+## What to Tell Your User
+
+If you (or I) ask to restart a session by the wrong name, you now hear right away that it can't be done and which name to use, instead of being told the restart was scheduled when it never happened.
+
+## Summary of New Capabilities
+
+- Session restart requests report refusals immediately, with the correct session name when a display name was used.
+
+## Evidence
+
+- Tests: `tests/unit/SessionRefresh.test.ts` (+6: null for a restartable session, not_telegram_bound, display-name hint names the tmux session and the authoritative path kills nothing, no hint for unknown names, session_not_found, rate_limited reported without consuming budget); `tests/unit/sessions-refresh-route.test.ts` (+2: 409 not 202 for an unbindable name with refreshSession never called, 429 for rate_limited). Existing Slack-arm, integration and e2e swap-continuity suites pass unchanged. `tsc` clean.

package/upgrades/side-effects/sessions-refresh-prebind.md

@@ -0,0 +1,113 @@
+# Side-Effects Review — POST /sessions/refresh answers target refusals before the 202 (EVO-025)
+
+**Version / slug:** `sessions-refresh-prebind`
+**Date:** `2026-09-24`
+**Author:** `Echo`
+**Second-pass reviewer:** `independent reviewer subagent (required: session lifecycle)`
+
+## Summary of the change
+
+`POST /sessions/refresh` returned 202 "Refresh scheduled" and only 500ms later called `SessionRefresh.refreshSession()`; target refusals (`not_telegram_bound`, `session_not_found`, `refresh_in_progress`, `rate_limited`, `slack_respawner_unwired`) reached only `console.warn`. A caller passing a display name ("Jev") instead of the tmux name ("echo-jev") was told the restart was scheduled when it was refused. The detect phase of `refreshSession()` is extracted verbatim into a private `resolveTarget()`; a new read-only `precheckRefusal(sessionName)` runs `resolveTarget()` plus the in-flight check plus a non-recording rate-limit check. The route calls it before the existing busy precheck and answers a refusal synchronously (409 with `{code, error}`; 429 for `rate_limited`). The `not_telegram_bound` and `session_not_found` messages gain a display-name hint naming the matching running session's `tmuxSession`. Files: `src/core/SessionRefresh.ts`, `src/server/routes.ts`, `tests/unit/SessionRefresh.test.ts`, `tests/unit/sessions-refresh-route.test.ts`.
+
+## Decision-point inventory
+
+- `POST /sessions/refresh` admission — modify — target refusals are now answered pre-202 instead of post-202 in the log.
+- `SessionRefresh.refreshSession` detect phase — pass-through — same checks, same order, same refusal codes (the not_telegram_bound / session_not_found messages gain the display-name hint, which also reaches the post-202 log line); moved into `resolveTarget()` and shared.
+- `SessionRefresh.precheckRefusal` — add — read-only early answer; never kills, records, or respawns.
+
+---
+
+## 1. Over-block
+
+The early check refuses only when `refreshSession()` itself would refuse with the same code at that moment, using the same lookups. A binding that is registered in the ≤500ms between the precheck and the scheduled call used to succeed and is now refused (the caller can retry immediately); this window is negligible and the caller now learns the result. No legitimate request that would have been refreshed is refused for any other reason. The work gate is not duplicated here (it has its own precheck), so `force:true` behaviour is unchanged.
+
+---
+
+## 2. Under-block
+
+A refusal that arises only after the 202 (binding removed or the session exiting in the 500ms window, a work-gate verdict change, a respawner failure) is still reported only in the log — `refreshSession()` re-runs every check authoritatively, so this is a reporting gap, not a safety gap. The self-refresh case (the caller is the session being killed) still needs the 202-before-kill ordering and keeps it.
+
+---
+
+## 3. Level-of-abstraction fit
+
+Correct layer: the orchestrator owns the lookup logic and exposes it once; the route only translates a refusal to an HTTP status. No lookup is re-implemented in the route (unlike `restart-all`, which inlines the Telegram lookup). The display-name hint lives in the orchestrator next to the state lookup it depends on.
+
+---
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change has no new block/allow surface.
+
+The refusals are the orchestrator's existing deterministic refusals (binding existence, session existence, in-flight, rate cap) — structural invariants, not judgment. The change moves when the caller hears them; it grants no new authority and removes none. The display-name case is deliberately a hint, never a remap.
+
+---
+
+## 4b. Judgment-point check (Judgment Within Floors standard)
+
+No new static heuristic at a competing-signals decision point. The checks are enumerable invariants (is there a binding, is there a running session with this tmux name, is a refresh in flight, is the fixed rate cap reached).
+
+---
+
+## 5. Interactions
+
+- **Shadowing:** the new precheck runs before the busy precheck. For an unbound name the caller now gets 409 `not_telegram_bound` instead of a busy verdict — correct, since the refresh could not run anyway. Likewise a session that is both busy and out of rate budget now gets 429 `rate_limited` where it used to get 409 `session-busy`; both are correct refusals. The busy precheck and post-202 authoritative path are unchanged.
+- **Double-fire:** none — the precheck performs no action.
+- **Races:** `precheckRefusal` reads `inFlight` and the rate window without writing (the rate check's opportunistic prune of expired timestamps is idempotent and already happens on every refresh). Test proves repeated prechecks consume no budget.
+- **Feedback loops:** the loop-guarded mcp-autorefresh hook POSTs this route fire-and-forget; a 409 is simply logged by curl, no retry loop. Internal callers (ContextWedgeSentinel, quota swap, restart-all) call `refreshSession()` directly and are unaffected.
+
+---
+
+## 6. External surfaces
+
+- The HTTP response for a refused target changes from 202 to 409/429 with `{code, error}`. This is the intended fix; the documented usage already says to pass the tmux name. No in-repo caller depends on a 202 for a refused name (grep of src, scripts, templates).
+- No persistent state, no external systems, no notices.
+- Operator surface: no operator-facing actions added.
+
+---
+
+## 6b. Operator-surface quality (Operator-Surface Quality standard)
+
+No operator surface — not applicable.
+
+---
+
+## 7. Multi-machine posture (Cross-Machine Coherence)
+
+Machine-local by design: a refresh acts on a tmux session on the machine serving the request, and the orchestrator's in-flight set and rate window are already per-process. No notices, no durable state, no URLs.
+
+---
+
+## 8. Rollback cost
+
+Pure code change — revert and ship a patch. No persistent state, no migration, no agent state repair. During a rollback window callers would again receive 202 for refused names (the prior behaviour).
+
+---
+
+## Conclusion
+
+Small correctness fix: the route now tells callers the truth about target refusals it previously hid in the log. The detect phase was extracted without behaviour change (the existing SessionRefresh, Slack-arm, route, integration and e2e swap-continuity suites pass unchanged apart from the route mock gaining the new method). GET /sessions already exposes the binding as `platform`/`platformId`; the stored `topicId` field is left as-is rather than redefined. Second-pass reviewer concurred; clear to ship.
+
+---
+
+## Second-pass review (if required)
+
+**Reviewer:** independent general-purpose reviewer subagent (read-only, same worktree)
+**Independent read of the artifact: concur**
+
+Concur: the extraction is behaviour-preserving, `precheckRefusal` is non-mutating (the rate-window prune only drops already-expired timestamps), the self-refresh 202 still precedes the kill, and the suites plus `tsc` pass. Two artifact corrections raised and applied: messages (not only codes) gain the display-name hint, and busy + rate-exhausted now answers 429 instead of 409 session-busy.
+
+---
+
+## Evidence pointers
+
+- `npx vitest run tests/unit/SessionRefresh.test.ts tests/unit/sessions-refresh-route.test.ts tests/unit/sessionRefresh-slack.test.ts tests/integration/swap-continuity-antithrash-routes.test.ts tests/e2e/swap-continuity-antithrash-lifecycle.test.ts` → 5 files, 74 tests passed.
+- `tsc --noEmit` clean.
+
+---
+
+## Class-Closure Declaration (display-only mirror)
+
+No agent-authored-artifact defect — not applicable. (Route response-ordering bug in server source; not a prompt/hook/config/skill/standards defect, and not a self-triggered controller.)