instar 1.3.270 → 1.3.271

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.270",
+  "version": "1.3.271",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-05T06:21:50.311Z",
-  "instarVersion": "1.3.270",
+  "generatedAt": "2026-06-05T07:00:47.575Z",
+  "instarVersion": "1.3.271",
   "entryCount": 198,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ead2b15d5f1de57032d079d1b91227e6e2bea43a1151f81bdddf9152ccc79c38",
+      "contentHash": "cf7f085ec0c44508ccdf944b0fe1ddc9a9c09a56509a02919e9dd0c28ffc4095",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1498,7 +1498,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "30a413b5f098c00a676aa9daf20f6b00d13e3030973e0d819c885c6d8f14edd2",
+      "contentHash": "bfa5d3cc7133335bf91fccc7890453c0b5710deb6d9295a4f7519000c454dd00",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1530,7 +1530,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "a1858a5e7af66dc8aec221987a384c586564fa371de77c51fdd5c55e926d4da1",
+      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -454,6 +454,7 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 
 **Multi-Machine Session Pool (active-active — spread conversations across machines)** — The longer arc beyond one-awake-machine: with the pool enabled I run conversations across ALL my machines at once and can MOVE a conversation between them. Ships DARK behind \`multiMachine.sessionPool.stage\` (default 'dark'); a single-machine agent is a no-op.
 - **See the pool:** the **Machines tab** in the dashboard, or \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool\` → which machine is the router ("dispatcher") + every machine's nickname, hardware, online status, load, and clock-skew status.
+- **Every session, every machine:** the dashboard sessions list shows ALL sessions across the pool, each tagged with the machine it runs on. API: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/sessions?scope=pool"\` → \`{ sessions: [...each with machineId/machineNickname...], pool: { peersOk, failed } }\`. An unreachable peer degrades to a \`failed\` entry — local sessions always answer.
 - **Machine nicknames** are the user-facing handle (auto-assigned, editable). Rename: \`curl -X PATCH -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool/machines/MACHINE_ID -H 'Content-Type: application/json' -d '{"nickname":"the mini"}'\` (or inline on the Machines tab).
 - **Which machine + WHY (never guess):** \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/pool/placement?topic=N"\` → the owning machine + nickname, the **reason** (\`pinned\` = a deliberate move vs \`placed\` = load-balanced vs \`unowned\`), and the lease-holder. Answerable from ANY machine (a standby proxies to the holder, whose pin store is authoritative). Use this instead of inferring placement from a hostname — running ON a machine does NOT mean a topic was deliberately moved there.
 - **Reliable transfer (phrasing-independent):** \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool/transfer -H 'Content-Type: application/json' -d '{"topic":N,"to":"<nickname|machineId>"}'\` → runs the same validated planner as "move this to <nickname>" but deterministically (no NL recognition). 404 unknown machine · 409 rate-limited · 409 \`needsConfirmation\` for an offline target (re-send with \`"confirm":true\`). This is the lever to call directly when a natural-language move didn't catch.
@@ -500,7 +501,7 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 - **Atomic use-and-consume (PREFERRED when the value feeds one command)**: \`node .instar/scripts/secret-drop-retrieve.mjs TOKEN field --run -- <cmd...>\` — pipes the value to \`<cmd>\`'s stdin and consumes the submission ONLY if \`<cmd>\` exits 0. A failed handoff never destroys the secret, so the user never has to resubmit. Example: \`node .instar/scripts/secret-drop-retrieve.mjs TOKEN github_token --run -- gh auth login --with-token\`. Do NOT fire a standalone \`--consume\` after a step that has not verified success.
 - List pending: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/secrets/pending\`
 - Cancel: \`curl -X DELETE -H "Authorization: Bearer $AUTH" http://localhost:${port}/secrets/pending/TOKEN\`
-- **Security**: One-time use, expires after 15 minutes, in-memory only (never written to disk), CSRF-protected.
+- **Security**: One-time link, expires after 15 minutes, CSRF-protected. The moment a secret is SUBMITTED it is also persisted store-first to the durable AES-256-GCM encrypted SecretStore — so it survives session restarts, compaction, and cross-machine handoff instead of evaporating with the in-memory copy. Retrieval transparently falls back to the durable copy, and a successful consume deletes both. (Opt out with \`secrets.persistDrops: false\` in \`.instar/config.json\`.)
 - **Multi-field support**: Request multiple values at once by passing a \`fields\` array (e.g., username + password).
 - **When to use** (PROACTIVE — this is the trigger): the moment a user offers to give you a credential (API key, password, token) or you realize you need one, use Secret Drop. It is the ONLY correct way to collect a secret. NEVER accept it pasted into Telegram or chat, and NEVER create a local file (e.g. \`.instar/secrets/foo.env\`) and ask the user to edit/paste into it — that defeats the one-time, in-memory, never-on-disk guarantee and asks the user to edit files (which you must never do). Always issue a Secret Drop one-time link instead.
 
@@ -688,6 +689,12 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 - **You cannot issue or revoke mandates.** \`POST /mandate/issue\` and \`POST /mandate/:id/revoke\` require the operator's dashboard PIN — your Bearer token is structurally insufficient. NEVER ask the user to paste their PIN into chat; point them at the dashboard.
 - Every evaluation (allow AND deny) is audited. Act as if the audit is read by the operator — because it is. (Spec: \`docs/specs/coordination-mandate.md\`.)
 
+**ReviewExchange (autonomous code review)** — The structured way two mandate-named agents sign off a code review WITHOUT the operator relaying. One exchange = one review package, content-addressed (\`packageSha256\` fixed at creation), moving linearly: proposed → delivered → verdict-recorded → complete (or changes-requested — rework is a NEW exchange). BOTH sign-offs (the peer's authenticated approve-verdict AND your countersignature) are evaluated through the mandate gate's \`sign-code-review\` authority before acceptance; every accepted signature carries the audit hash of the gate decision that authorized it.
+- Create: \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/review-exchange -H 'Content-Type: application/json' -d '{"mandateId":"<id>","artifact":"migration-port","packageRef":"docs/...-review-package.md","packageSha256":"<sha256 of the package>","parties":["<your-fp>","<peer-fp>"]}'\`
+- Drive it: \`POST /review-exchange/:id/delivered\` (after you actually sent the package over Threadline — record the message ref as evidence) → \`POST /review-exchange/:id/peer-verdict\` (the peer's authenticated verdict; approve = their sign-off, mandate-gated) → \`POST /review-exchange/:id/sign\` (your countersignature, mandate-gated → complete).
+- **When to use** (PROACTIVE — this is the trigger): the moment a mandate with \`sign-code-review\` exists and you need a peer agent's review of work in its scope, drive it through an exchange — NEVER improvise a sign-off in chat prose (an unrecorded "LGTM" over Threadline is not a sign-off; the gate-audited exchange is). A 403 on a sign step means the mandate denied it — STOP, do not work around it.
+- Inspect: \`GET /review-exchange\` · \`GET /review-exchange/:id\` (signatures + audit hashes).
+
 **Session Clock** — How long have you been running, and how much time is left? For any active time-boxed (autonomous) session, this returns the computed elapsed + remaining so you never have to guess or compute it yourself. Read-only observability.
 - Check: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/session/clock"\` (optional \`?topic=<N>\` to bind to one session)
 - Returns \`{ now, nowIso, sessions: [{ label, kind, startedAt, endsAt, elapsedSeconds, remainingSeconds, elapsedHuman, remainingHuman, percentElapsed, status }] }\`; \`{ sessions: [] }\` when nothing is time-boxed. Per-machine (the record is local).