instar 1.3.237 → 1.3.239

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-04T03:45:40.313Z",
-  "instarVersion": "1.3.237",
+  "generatedAt": "2026-06-04T04:41:03.490Z",
+  "instarVersion": "1.3.239",
   "entryCount": 198,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c4e13cbb2d40c5989e9ab6fd8f3eb215eb178d59704e2485784a0ae67527c522",
+      "contentHash": "fb6b78b207ab5bebff38e4a238bf65e1e9b91a6df1c0bbbced46d2867d4ce915",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1498,7 +1498,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "4b914b879d2956a2491aa2afdf44c1ca8a6acc09a67dd4a92fc7cb4db90316c6",
+      "contentHash": "e72905d8a8de5d22c7cedb5c599f9341f61ac9139f65f32bde7011a1c5202ef7",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.238.md

@@ -0,0 +1,68 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Wires the Gemini multi-turn loop-driver engine (`need-gem-002`, increment 1,
+already merged) into a real, budget-gated, **dark** capability — so the Gemini
+mentee can be handed a goal it works across turns instead of one reply.
+
+- `geminiLoopProduction.ts` — the production dependencies: a subscription-auth
+  spawn (routes through the billing-env-stripping gemini transport, so no run can
+  introduce an API key), a `gemini --list-sessions` handle parser that picks the
+  freshest session by age, and a budget gate that reuses the existing QuotaTracker
+  spawn-admission signal (fails open if no tracker).
+- `GeminiLoopRunner` — a multi-turn run can take minutes, so `POST` ADMITS a run
+  (enabled? under the concurrency cap? budget open?) and returns a `runId`
+  immediately; the loop runs in the background and the result lands in a bounded
+  in-memory registry.
+- Routes `POST /gemini-loop/runs` + `GET /gemini-loop/runs[/:id]`.
+- Config `autonomousSessions.geminiLoopDriver` (`enabled`, `model`, `maxTurns`
+  default 12, `minTurnIntervalMs`, `maxConcurrent` default 1, `turnTimeoutMs`).
+
+Ships **dark** behind `autonomousSessions.geminiLoopDriver.enabled` (default
+`false`); the `developmentAgent` gate turns it on for development agents only.
+Rollback = set the flag `false` (instant, no redeploy). Subscription auth is
+structural. 21 new tests across all three tiers (unit + integration route + e2e
+alive + wired-source check). Spec: `docs/specs/gemini-multi-turn-loop-driver.md`.
+
+**The Parallel-Work overlap councilor can now actually run.** The previous change shipped the
+detector and the sentinel as tested library code; this wires the `ParallelWorkSentinel` into
+the server so it ticks on a cadence over the cross-topic activity index, spots when two of
+your topics are working on the same thing, and nudges you once — with a cooldown so it never
+re-nags. It is signal-only and never gates.
+
+It ships **dark**: off by default behind `monitoring.parallelWorkSentinel.enabled`. A
+false-positive nudge is worse than silence, so it graduates only after it is shown to be
+quiet. When on, it scans every ~15 minutes, audits every transition to
+`logs/sentinel-events.jsonl`, and the timer is unref'd + cleaned up on shutdown.
+
+## What to Tell Your User
+
+On development agents I can now be handed a multi-step task for the Gemini side
+and work it across several turns on my own — on subscription login, never an API
+key — with a hard turn cap and a spend gate so it can't run away. On every other
+agent it ships turned off, so nothing changes there. This is the capability the
+apprenticeship program needed so the Gemini mentee can do real multi-step work
+instead of stopping after one reply.
+
+Optional: if your agent works across many topics and you want it to proactively notice when
+two topics are doing the same work, you can turn on the overlap councilor in your monitoring
+config. It is off by default and only ever sends a gentle heads-up -- it never blocks anything.
+
+## Summary of New Capabilities
+
+- `monitoring.parallelWorkSentinel.enabled` (default false, ships dark) +
+  `cadenceMinutes` (default 15) — turns on and tunes the proactive overlap councilor.
+- The `ParallelWorkSentinel` is now constructed + cadenced in the server when enabled, with
+  every transition audited to `logs/sentinel-events.jsonl`.
+
+## Evidence
+
+- Wiring-integrity test (Testing Integrity Standard): boots the real AgentServer and asserts
+  the sentinel is NOT constructed when the flag is off (ships dark) and IS constructed +
+  ticks when the flag is on. tsc clean.
+- The detector + sentinel logic is already covered by 17 unit tests (shipped with the
+  prior change); this change only turns them on.

package/upgrades/1.3.239.md

@@ -0,0 +1,96 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The automated mentor-onboarding tick now records a keystone
+`mentor-mentee-differential` apprenticeship **cycle** each run (in addition to the
+existing per-finding ledger capture) — the structural version of the manual
+differential-oversight loop. The mentee's Stage-A transcript becomes the cycle's
+`menteeOutput`; the forensics findings become the `overseerDifferential`.
+
+It is wired via a new optional `recordCycle` injected into `runMentorTick` and
+`MentorOnboardingRunner`, and a new `mentor.apprenticeshipInstanceId` config field.
+`AgentServer.buildMentorRunner` resolves it to the ApprenticeshipCycleStore only
+when that instance id is set — so it is **opt-in and a no-op by default**
+(back-compat). This makes the automated loop fire the keystone axis the program's
+role-coverage drift-warning watches, instead of only the easy finding-capture path.
+
+Fixed the production **agent-to-agent (Threadline) continuity break**: a live
+Echo↔Dawn round-trip proved that every peer-to-peer follow-up message was being
+handled by a fresh, memoryless session (2 Spawned / 0 Resumed on a single thread)
+instead of the session already in the conversation — the "crowd of fragments
+wearing my name" incoherence.
+
+Root cause funnels through one guard. `ThreadResumeMap.get()`
+(`src/threadline/ThreadResumeMap.ts`) nulled the entire resume entry whenever the
+session transcript JSONL was absent — and for relay/pipe-spawned A2A sessions the
+uuid is a spawn-time placeholder that never gets upgraded, so the guard discarded
+the entry (including the still-valid live `sessionName`) on every follow-up. With
+a null entry, `ThreadlineRouter.handleInboundMessage` skips the already-built
+`tryInjectIntoLiveSession` + `resumeThread` machinery and cold-spawns.
+
+The fix has two parts. **(1)** When the transcript is absent, `get()` now returns
+the entry anyway **if its tmux session is still alive** (new protected
+`sessionAlive()`, exact-match `tmux has-session -t =name`), so the follow-up routes
+into the running session (live-inject, or a resume that carries the conversation
+history) — no transcript needed. Dead session + no transcript still nulls (resume
+guard intact); topic-bound + pinned exemptions unchanged. **(2)** Part 1 was inert
+without the real session name: `spawnNewThread` recorded the resume entry's
+`sessionName` from the spawn result, but the `spawnSession` callback only returned
+the bare instar session id, so a useless fallback name was stored that
+`sessionAlive()`/`getBySessionName` could never match. The callback contract now
+returns `string | { sessionId, tmuxSession }` (back-compatible);
+`SpawnRequestManager.evaluate` forwards the real tmux name through to the entry. Also lands the `WarmSessionPool`
+(`src/threadline/WarmSessionPool.ts`) per-peer warm-session registry (caps + TTL +
+LRU) — the tested foundation for the follow-up that keeps A2A sessions warm so
+follow-ups inject even after the first reply completes.
+
+1511 threadline unit tests pass; tsc clean. Tier-1 (ELI16 +
+side-effects artifact).
+
+## What to Tell Your User
+
+Nothing changes by default. When I'm running an automated mentorship for a
+configured apprenticeship instance, the loop now records proper differential cycles
+on its own — the same keystone cycles I capture by hand — so the program can see
+the real mentor↔mentee work, not just logged findings.
+
+When another agent talks to me across several messages in a row, I now stay one
+coherent conversation instead of answering each message as if I'd never seen the
+earlier ones. This is the foundation the agent-to-agent collaboration (and the
+upcoming feedback-process work) relies on. It's an internal robustness fix — there
+is nothing to turn on, and it doesn't change how I talk to you directly.
+
+## Summary of New Capabilities
+
+- **Threadline A2A continuity:** agent-to-agent threads stay coherent across rapid
+  follow-ups — a follow-up now injects into the session already handling the thread
+  instead of cold-spawning a fresh, memoryless one.
+- **WarmSessionPool foundation:** a per-peer warm-session registry (caps + TTL +
+  LRU) lands as the tested groundwork for keeping A2A sessions warm.
+
+## Evidence
+
+Reproduced on this machine, before/after.
+
+**Before (live Echo↔Dawn round-trip, 2026-06-04 ~01:55Z):** sent Dawn one opener on
+a fresh non-topic thread `echo-dawn-continuity-20260604`; her inbound replies
+produced — in `logs/server.log` — `2× [relay] Spawned session`, `0× Resumed
+session`, `1× Spawn denied: Cooldown`. The resume-map never gained an entry for the
+thread; every follow-up cold-spawned a memoryless session (a parallel relay-spawn
+even answered Dawn with "No previous history available").
+
+**After (integration test against REAL tmux —
+`tests/integration/threadline-live-inject-real-tmux.test.ts`, 2026-06-04):** with a
+placeholder uuid (no transcript) on a non-topic thread —
+- while a real tmux session of that name is **alive** → `get()` returns the entry,
+  so `ThreadlineRouter.tryInjectIntoLiveSession` is reachable (was: null →
+  cold-spawn). ✓
+- after the tmux session is **killed** → `get()` returns null (resume guard intact;
+  dead session → cold-spawn). ✓
+
+The end-to-end live Dawn round-trip showing `Injected`/`Resumed` instead of
+`Spawned` runs post-deploy (Echo auto-updates on this release).

package/upgrades/mentor-tick-cycle-capture.eli16.md

@@ -0,0 +1,18 @@
+# Mentor tick records keystone cycles — explained simply
+
+When the automated mentor job runs a "tick" (it watches the mentee, gathers
+findings), it used to log those findings to one place — but it never recorded a
+proper "cycle" of the mentorship the way the apprenticeship program tracks them.
+
+That mattered because the program's #1 failure mode is "role drift": the easy work
+gets logged, but the actual keystone — the mentor↔mentee differential — quietly
+never gets exercised. The manual loop I run by hand records those keystone cycles;
+the automated job didn't.
+
+This change wires the automated tick to ALSO record a real
+`mentor-mentee-differential` cycle each time: the mentee's output becomes the
+cycle's menteeOutput, the forensics findings become the differential. It only
+does this when an apprenticeship instance is configured (a new
+`mentor.apprenticeshipInstanceId` setting) — so by default nothing changes; it's
+opt-in. Now the automated loop fires the same keystone axis the manual loop does,
+which is the structural fix for that drift.

package/upgrades/side-effects/gemini-loop-driver-wiring.md

@@ -0,0 +1,59 @@
+# Side-Effects Review — Gemini loop-driver wiring (need-gem-002, increment 2)
+
+**Version / slug:** `gemini-loop-driver-wiring`
+**Date:** `2026-06-04`
+**Author:** `echo`
+**Second-pass reviewer:** `not required` (ships DARK behind
+`autonomousSessions.geminiLoopDriver.enabled`; the developmentAgent gate turns it
+on for dev agents only; rollback = flag false, instant)
+
+## Summary of the change
+
+Wires the (already-merged, increment 1) `GeminiLoopDriver` engine into a real,
+budget-gated, dark capability:
+- `geminiLoopProduction.ts` — production deps: the subscription-auth spawn
+  (`createGeminiLoopSpawn` → the billing-env-stripping transport), the
+  `--list-sessions` handle parser (`parseLatestGeminiSessionHandle`, min-age), and
+  the QuotaTracker-backed budget gate (`createQuotaBudgetGate`).
+- `GeminiLoopRunner.ts` — admits + launches runs async (a loop can take minutes,
+  so a run returns a `runId` immediately) into a bounded in-memory registry.
+- Routes `POST /gemini-loop/runs` (admit) + `GET /gemini-loop/runs[/:id]` (poll).
+- `server.ts` constructs it under the developmentAgent gate; `types.ts` adds
+  `autonomousSessions.geminiLoopDriver`.
+
+## Decision-point inventory
+
+Admission has four refusal boundaries (disabled / at-capacity / budget / invalid)
+plus the OK path; the handle parser picks min-age or null; the budget gate maps
+the QuotaTracker signal (fail-open with no tracker). All covered both-sides
+across the unit/integration suites.
+
+## 1. Over-block
+
+**What legitimate inputs does this change reject?** Nothing on the fleet — it
+ships dark (disabled → POST returns 409 'disabled'). When enabled: a closed budget
+gate refuses to start (intended — the overspend guard), `maxConcurrent: 1` refuses
+a 2nd concurrent run (intended — keeps shared-cwd handle capture unambiguous), and
+an empty goal is 400. A requested `maxTurns` is clamped DOWN to the config cap, never
+up. These are all the guardrails, not false rejections.
+
+## 2. Under-block
+
+**What does this still miss?** Handle capture uses the shared process cwd, so it is
+only unambiguous at `maxConcurrent: 1` (a per-loop cwd needs a transport `cwd`
+option — deferred; documented in the spec risks). The runner does not persist runs
+across a restart (in-memory registry — acceptable for a dev dark feature; a SQLite
+store is a later increment if it graduates). A 429/capacity wall ends a turn via
+the engine's spawn-failure path rather than a graceful gemini-capacity-policy
+pause (noted as a refinement). A mentee that finishes silently (no sentinel) runs
+to the turn cap rather than an LLM-judge early-exit (judge = a later increment).
+
+## 3. Level-of-abstraction fit
+
+**Right layer?** Yes. Production deps live in `monitoring/` beside the engine and
+depend only on the gemini transport (subscription-auth guarantee stays in the
+transport, reused not re-implemented). The runner is constructed beside the other
+dark monitoring features in `server.ts` under the same `developmentAgent` gate
+pattern, and threads through the existing `AgentServer` options → `RouteContext`
+plumbing (mirrors `mcpProcessReaper`). The budget gate reuses the existing
+QuotaTracker spawn-admission decision rather than inventing new accounting.