instar 1.3.272 → 1.3.274

package/dist/scaffold/templates.js.map

@@ -1 +1 @@
-{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/scaffold/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,OAAO,KAAK,QAAQ,CAAC,IAAI;;;;OAIpB,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;;;;EAIpC,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;6BAsBO,QAAQ,CAAC,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+D7C,CAAC;AAEF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,WAAmB,EAAE,QAAgB;IACrF,OAAO;;;;;;;;;;;;;;;;;;EAkBP,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkDH,QAAQ;;;;;CAKjB,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,KAAK,QAAQ;;;;;;;;;;;;;;4CAcsB,QAAQ;CACnD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,KAAK,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;CAyBtB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,SAAiB,EACjB,IAAY,EACZ,WAAoB,EACpB,cAAuB,KAAK,EAC5B,cAAuB,KAAK;IAE5B,IAAI,OAAO,GAAG,iBAAiB,WAAW;;;;OAIrC,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCT,SAAS;;gCAEgB,IAAI,kFAAkF,IAAI;;;;;;;;;;;;;8EAa5C,IAAI;;;yFAGO,IAAI;;;;;;;uGAOU,IAAI;;;;;;;;;;;;;;;;;;;;;;;0CAuBjE,IAAI;oCACV,IAAI;;;;;;;;;;;;;yDAaiB,IAAI;;;;;;;;;;;;gCAY7B,IAAI;;;;;;;;;sFASkD,IAAI;4FACE,IAAI;;;;;;;mEAO7B,IAAI;8EACO,IAAI;;;mEAGf,IAAI;4EACK,IAAI;;;;;;;sHAOsC,IAAI;+WACqP,IAAI;;;;;uEAK5S,IAAI;;;;;;;+IAOoE,IAAI;wKACqB,IAAI;;;;;sEAKtG,IAAI;;;;;;;;;;;6EAWG,IAAI;;2FAEU,IAAI;qFACV,IAAI;;;;;;mGAMU,IAAI;;;;;yHAKkB,IAAI;8MACiF,IAAI;0JACxD,IAAI;qGACzD,IAAI;mHACU,IAAI;;;;oGAInB,IAAI;yGACC,IAAI;;;;;mEAK1C,IAAI;;;8EAGO,IAAI;6EACL,IAAI;0EACP,IAAI;;;;;6EAKD,IAAI;yCACxC,IAAI;mEACsB,IAAI;4EACK,IAAI;+EACD,IAAI;;;;;2EAKR,IAAI;;;;;;;uFAOQ,IAAI;;;;;;2EAMhB,IAAI;+EACA,IAAI;;;;;;2GAMwB,IAAI;6EAClC,IAAI;+FACc,IAAI;;;;;uFAKZ,IAAI;yFACF,IAAI;kIACqC,IAAI;;;;;;gIAMN,IAAI;sFAC9C,IAAI;0HACgC,IAAI;;;;oGAI1B,IAAI;oIAC4B,IAAI;;;;;;;qEAOnE,IAAI;;;;;;;;4EAQG,IAAI;yEACP,IAAI;+EACE,IAAI;;;;qEAId,IAAI;wFACe,IAAI;2IAC+C,IAAI;;;0EAGrE,IAAI;6EACD,IAAI;oFACG,IAAI;;;;;;;;;8EASV,IAAI;sEACZ,IAAI;8EACI,IAAI;4EACN,IAAI;mFACG,IAAI;;;;oEAInB,IAAI;0EACE,IAAI;4EACF,IAAI;+EACD,IAAI;iFACF,IAAI;;;oEAGjB,IAAI;;;;+EAIO,IAAI;6EACN,IAAI;0EACP,IAAI;uFACS,IAAI;qFACN,IAAI;wEACjB,IAAI;;;;oEAIR,IAAI;;;qEAGH,IAAI;sEACH,IAAI;mKACyF,IAAI;;;sEAGjG,IAAI;;;qEAGL,IAAI;;;8BAG3C,IAAI;;;;4OAI0M,IAAI;;;;;;;;mFAQ7J,IAAI;;;;;uBAKhE,IAAI;;;wFAG6D,IAAI;;;;;;;;;;;;6EAYf,IAAI;sFACK,IAAI;8EACZ,IAAI;;;;;sEAKZ,IAAI;oEACN,IAAI;8EACM,IAAI;yFACO,IAAI;;;;;oEAKzB,IAAI;;;;;qEAKH,IAAI;;;;;iRAKwM,IAAI;8NACvD,IAAI;;;;qEAI7J,IAAI;;;;mFAIU,IAAI;;;;;;wFAMC,IAAI;uFACL,IAAI;;;;4JAIiE,IAAI;;;;;;6EAMnF,IAAI;;;;;;oEAMb,IAAI;+GACuC,IAAI;;;;qEAI9C,IAAI;;;;;;;;;qEASJ,IAAI;6EACI,IAAI;2EACN,IAAI;2EACJ,IAAI;kEACb,IAAI;;;;;0EAKI,IAAI;4FACc,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yDA4EvC,IAAI;;;;;;;;;;;;;;;;;;;;;8EAqBiB,IAAI;4HAC0C,IAAI;kKACkC,IAAI;uJACf,IAAI;;;6GAG9C,IAAI;2FACtB,IAAI;;;2FAGJ,IAAI;;kFAEb,IAAI;wFACE,IAAI;6FACC,IAAI;iJACgD,IAAI;;;;;;;;;;;;;;;;;;;uFAmB9D,IAAI;wFACH,IAAI;;;wFAGJ,IAAI;;0FAEF,IAAI;+FACC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsGrF,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0CA6HmB,IAAI;;;;;;;;;;;mCAWX,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCA8CJ,IAAI;;;;;;;;;;;;;;;;;;;;;;;;mEAwB4B,IAAI;;;;;mEAKJ,IAAI;;;;;mEAKJ,IAAI;;;;mEAIJ,IAAI;;;;;;yDAMd,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2EAiFc,IAAI;yEACN,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqF5E,CAAC;IAEA,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;CAwBd,CAAC;IACA,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgEd,CAAC;IACA,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Bd,CAAC;IACA,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkGZ,CAAC;IAEA,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAmB,EACnB,SAAiB,EACjB,IAAY,EACZ,WAAoB,EACpB,cAAuB,KAAK;IAE5B,IAAI,OAAO,GAAG,iBAAiB,WAAW;;;;OAIrC,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCT,SAAS;;gCAEgB,IAAI,qFAAqF,IAAI;;;;;;CAM5H,CAAC;IAEA,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;CAwBd,CAAC;IACA,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;CAId,CAAC;IACA,CAAC;IAED,OAAO,IAAI;;;;;;;8EAOiE,IAAI;;;yFAGO,IAAI;;;;;;;uGAOU,IAAI;yFAClB,IAAI;;;;;;0DAMnC,IAAI;;;;;;;;;;;;;;;;;;;;;;;2FAuB6B,IAAI;8FACD,IAAI;+MAC6G,IAAI;mGAChH,IAAI;;;;;;;;;;0CAU7D,IAAI;oCACV,IAAI;;;;;;;;;;;;;yDAaiB,IAAI;;;;;;;;0DAQH,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA+GhD,SAAS;;;;;;;;;;;;sEAY+C,IAAI;;CAEzE,CAAC;IAEA,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/scaffold/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,OAAO,KAAK,QAAQ,CAAC,IAAI;;;;OAIpB,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;;;;EAIpC,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;6BAsBO,QAAQ,CAAC,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+D7C,CAAC;AAEF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,WAAmB,EAAE,QAAgB;IACrF,OAAO;;;;;;;;;;;;;;;;;;EAkBP,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkDH,QAAQ;;;;;CAKjB,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,KAAK,QAAQ;;;;;;;;;;;;;;4CAcsB,QAAQ;CACnD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,KAAK,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;CAyBtB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,SAAiB,EACjB,IAAY,EACZ,WAAoB,EACpB,cAAuB,KAAK,EAC5B,cAAuB,KAAK;IAE5B,IAAI,OAAO,GAAG,iBAAiB,WAAW;;;;OAIrC,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCT,SAAS;;gCAEgB,IAAI,kFAAkF,IAAI;;;;;;;;;;;;;8EAa5C,IAAI;;;yFAGO,IAAI;;;;;;;uGAOU,IAAI;;;;;;;;;;;;;;;;;;;;;;;0CAuBjE,IAAI;oCACV,IAAI;;;;;;;;;;;;;yDAaiB,IAAI;;;;;;;;;;;;gCAY7B,IAAI;;;;;;;;;sFASkD,IAAI;4FACE,IAAI;;;;;;;mEAO7B,IAAI;8EACO,IAAI;;;mEAGf,IAAI;4EACK,IAAI;;;;;;;sHAOsC,IAAI;+WACqP,IAAI;;;;;uEAK5S,IAAI;;;;;;;+IAOoE,IAAI;wKACqB,IAAI;;;;;sEAKtG,IAAI;;;;;;;;;;;6EAWG,IAAI;;2FAEU,IAAI;qFACV,IAAI;;;;;;mGAMU,IAAI;;;;;yHAKkB,IAAI;8MACiF,IAAI;;;0JAGxD,IAAI;qGACzD,IAAI;mHACU,IAAI;;;;oGAInB,IAAI;yGACC,IAAI;;;;;mEAK1C,IAAI;;;8EAGO,IAAI;6EACL,IAAI;0EACP,IAAI;;;;;6EAKD,IAAI;yCACxC,IAAI;mEACsB,IAAI;4EACK,IAAI;+EACD,IAAI;;;;;2EAKR,IAAI;;;;;;;uFAOQ,IAAI;;;;;;2EAMhB,IAAI;+EACA,IAAI;;;;;;2GAMwB,IAAI;6EAClC,IAAI;+FACc,IAAI;;;;;uFAKZ,IAAI;yFACF,IAAI;kIACqC,IAAI;;;;;;gIAMN,IAAI;sFAC9C,IAAI;0HACgC,IAAI;;;;oGAI1B,IAAI;oIAC4B,IAAI;;;;;;;qEAOnE,IAAI;;;;;;;;4EAQG,IAAI;yEACP,IAAI;+EACE,IAAI;;;;qEAId,IAAI;wFACe,IAAI;2IAC+C,IAAI;;;0EAGrE,IAAI;6EACD,IAAI;oFACG,IAAI;;;;;;;;;8EASV,IAAI;sEACZ,IAAI;8EACI,IAAI;4EACN,IAAI;mFACG,IAAI;;;;oEAInB,IAAI;0EACE,IAAI;4EACF,IAAI;+EACD,IAAI;iFACF,IAAI;;;oEAGjB,IAAI;;;;+EAIO,IAAI;6EACN,IAAI;0EACP,IAAI;uFACS,IAAI;qFACN,IAAI;wEACjB,IAAI;;;;oEAIR,IAAI;;;qEAGH,IAAI;sEACH,IAAI;mKACyF,IAAI;;;sEAGjG,IAAI;;;qEAGL,IAAI;;;8BAG3C,IAAI;;;;4OAI0M,IAAI;;;;;;;;mFAQ7J,IAAI;;;;;uBAKhE,IAAI;;;wFAG6D,IAAI;;;;;;;;;;;;6EAYf,IAAI;sFACK,IAAI;8EACZ,IAAI;;;;;sEAKZ,IAAI;oEACN,IAAI;8EACM,IAAI;yFACO,IAAI;;;;;oEAKzB,IAAI;;;;;qEAKH,IAAI;;;;;iRAKwM,IAAI;8NACvD,IAAI;;;;qEAI7J,IAAI;;;;mFAIU,IAAI;;;;;;wFAMC,IAAI;uFACL,IAAI;;;;4JAIiE,IAAI;;;;;;6EAMnF,IAAI;;;;;;oEAMb,IAAI;+GACuC,IAAI;;;;qEAI9C,IAAI;;;;;;;;;qEASJ,IAAI;6EACI,IAAI;2EACN,IAAI;2EACJ,IAAI;kEACb,IAAI;;;;;0EAKI,IAAI;4FACc,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yDA4EvC,IAAI;;;;;;;;;;;;;;;;;;;;;8EAqBiB,IAAI;4HAC0C,IAAI;kKACkC,IAAI;uJACf,IAAI;;;6GAG9C,IAAI;2FACtB,IAAI;;;2FAGJ,IAAI;;kFAEb,IAAI;wFACE,IAAI;6FACC,IAAI;iJACgD,IAAI;;;;;;;;;;;;;;;;;;;uFAmB9D,IAAI;wFACH,IAAI;;;wFAGJ,IAAI;;0FAEF,IAAI;+FACC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsGrF,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0CA6HmB,IAAI;;;;;;;;;;;mCAWX,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCA8CJ,IAAI;;;;;;;;;;;;;;;;;;;;;;;;mEAwB4B,IAAI;;;;;mEAKJ,IAAI;;;;;mEAKJ,IAAI;;;;mEAIJ,IAAI;;;;;;yDAMd,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2EAiFc,IAAI;yEACN,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqF5E,CAAC;IAEA,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;CAwBd,CAAC;IACA,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgEd,CAAC;IACA,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Bd,CAAC;IACA,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkGZ,CAAC;IAEA,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAmB,EACnB,SAAiB,EACjB,IAAY,EACZ,WAAoB,EACpB,cAAuB,KAAK;IAE5B,IAAI,OAAO,GAAG,iBAAiB,WAAW;;;;OAIrC,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCT,SAAS;;gCAEgB,IAAI,qFAAqF,IAAI;;;;;;CAM5H,CAAC;IAEA,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;;;;;;;;;;;;;;;;;;;;;CAwBd,CAAC;IACA,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAI;;;;CAId,CAAC;IACA,CAAC;IAED,OAAO,IAAI;;;;;;;8EAOiE,IAAI;;;yFAGO,IAAI;;;;;;;uGAOU,IAAI;yFAClB,IAAI;;;;;;0DAMnC,IAAI;;;;;;;;;;;;;;;;;;;;;;;2FAuB6B,IAAI;8FACD,IAAI;+MAC6G,IAAI;mGAChH,IAAI;;;;;;;;;;0CAU7D,IAAI;oCACV,IAAI;;;;;;;;;;;;;yDAaiB,IAAI;;;;;;;;0DAQH,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA+GhD,SAAS;;;;;;;;;;;;sEAY+C,IAAI;;CAEzE,CAAC;IAEA,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.272",
+  "version": "1.3.274",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-05T07:17:46.846Z",
-  "instarVersion": "1.3.272",
+  "generatedAt": "2026-06-05T07:46:09.205Z",
+  "instarVersion": "1.3.274",
   "entryCount": 198,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "a81bb8757e0c6d92510d7ca7d0b6dc4975b11f21ec8d7664616d0bc07fcfbc93",
+      "contentHash": "632f0930e03da8cfe8b7df7ec72e256d2606230b21f84fb277c677a0572e042a",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {
@@ -1530,7 +1530,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "19d5f542d77a72d0df01407d083920148cf587463267dce415a1302cda5e93f4",
+      "contentHash": "3ded8ee5789307525929dba01a9550a49570129bce2db0d1d5c1f989ad6dbb3e",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -455,6 +455,8 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 **Multi-Machine Session Pool (active-active — spread conversations across machines)** — The longer arc beyond one-awake-machine: with the pool enabled I run conversations across ALL my machines at once and can MOVE a conversation between them. Ships DARK behind \`multiMachine.sessionPool.stage\` (default 'dark'); a single-machine agent is a no-op.
 - **See the pool:** the **Machines tab** in the dashboard, or \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool\` → which machine is the router ("dispatcher") + every machine's nickname, hardware, online status, load, and clock-skew status.
 - **Every session, every machine:** the dashboard sessions list shows ALL sessions across the pool, each tagged with the machine it runs on. API: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/sessions?scope=pool"\` → \`{ sessions: [...each with machineId/machineNickname...], pool: { peersOk, failed } }\`. An unreachable peer degrades to a \`failed\` entry — local sessions always answer.
+- **Post-transfer closeout (automatic):** when a topic moves to another machine, the OLD machine's session for it is closed automatically (immediately on an explicit "move", or within ~2 reaper ticks for any other path) — no duplicate sessions doing duplicate work. The close is recorded in the reap-log with reason "topic moved to <machine>"; protected sessions are never auto-closed.
+- **Quota-aware placement (automatic):** capacity heartbeats carry each machine's LLM-account quota state, and placement avoids machines whose account is currently rate-limited/blocked (no more topics placed onto a silent machine). A hard pin still wins (flagged \`pinned-machine-quota-blocked\`); if EVERY machine is blocked, placement proceeds least-loaded with \`all-machines-quota-blocked\` flagged. \`GET /pool\` shows each machine's \`quotaState\`.
 - **Machine nicknames** are the user-facing handle (auto-assigned, editable). Rename: \`curl -X PATCH -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool/machines/MACHINE_ID -H 'Content-Type: application/json' -d '{"nickname":"the mini"}'\` (or inline on the Machines tab).
 - **Which machine + WHY (never guess):** \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/pool/placement?topic=N"\` → the owning machine + nickname, the **reason** (\`pinned\` = a deliberate move vs \`placed\` = load-balanced vs \`unowned\`), and the lease-holder. Answerable from ANY machine (a standby proxies to the holder, whose pin store is authoritative). Use this instead of inferring placement from a hostname — running ON a machine does NOT mean a topic was deliberately moved there.
 - **Reliable transfer (phrasing-independent):** \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool/transfer -H 'Content-Type: application/json' -d '{"topic":N,"to":"<nickname|machineId>"}'\` → runs the same validated planner as "move this to <nickname>" but deterministically (no NL recognition). 404 unknown machine · 409 rate-limited · 409 \`needsConfirmation\` for an offline target (re-send with \`"confirm":true\`). This is the lever to call directly when a natural-language move didn't catch.

package/upgrades/1.3.273.md

@@ -0,0 +1,52 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+When a conversation (topic) moves from one machine to another in the
+multi-machine session pool, the OLD machine's session for that topic is now
+closed automatically — previously it lingered indefinitely, doing duplicate
+work alongside the new machine's session (the operator-named duplicate-sessions
+issue).
+
+Two layers:
+
+1. **Immediate** — an explicit "move this to X" closes the local session the
+   moment the move executes (the user's command is the authority; protected
+   sessions are never auto-closed; the close is silent since the user already
+   got the "Moving…" confirmation).
+2. **Standing invariant** — the SessionReaper closes any topic-bound session
+   whose topic the ownership registry shows owned by ANOTHER machine, after a
+   2-tick (~4 min) dwell that absorbs in-progress transfers. This covers
+   failovers and automatic re-placements. The close goes through the existing
+   guarded terminate authority: a KEEP-guard veto is audited and retried, never
+   forced. Works even when the duplicate is BUSY — busy-on-a-duplicate is the
+   bug.
+
+Every close (and every refusal) lands in the reap-log with reason "topic moved
+to <machine>". Config: `monitoring.sessionReaper.topicMovedCloseout` (default
+true; inert on single-machine installs) + `topicMovedConfirmTicks` (default 2).
+
+## What to Tell Your User
+
+When you move a conversation to another machine, the machine you left now
+cleans up after itself — no more duplicate sessions quietly doing the same
+work twice. If you ever wonder where a session went, the reap-log says exactly
+why ("topic moved to Laptop").
+
+## Summary of New Capabilities
+
+- Explicit topic moves immediately close the old machine's session.
+- A reaper rule guarantees eventual closeout for failover/re-placement paths.
+- `monitoring.sessionReaper.topicMovedCloseout` / `topicMovedConfirmTicks` config.
+- Reap-log + audit rows (`rule: 'topic-moved-away'`) for full traceability.
+- CLAUDE.md template + migration so agents explain auto-closed sessions correctly.
+
+## Evidence
+
+`tests/unit/session-reaper-topic-moved.test.ts` (9 — including closing a BUSY
+duplicate, churn-resets-dwell, guard-veto-retry, dry-run, budgets, all inert
+paths) + 3 migration tests; full reaper family regression 65/65 green; tsc +
+lint clean.

package/upgrades/1.3.274.md

@@ -0,0 +1,47 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The multi-machine session pool no longer places conversations onto a machine
+whose LLM account is rate-limited or quota-blocked. Each machine's 30-second
+capacity heartbeat now self-reports a `quotaState` (provider block in effect,
+or the 5-hour window ≥95% — read strictly from that machine's OWN quota
+tracker), and the placement engine:
+
+- drops quota-blocked machines from the candidate pool (new placements,
+  soft preferences, AND stickiness — a conversation currently on a machine
+  that becomes blocked moves off it on the next message);
+- still honors an explicit hard pin to a blocked machine (the user's command
+  wins), flagged `pinned-machine-quota-blocked` so the user can be told why
+  it's quiet;
+- falls back to least-loaded-among-blocked when EVERY machine is blocked,
+  flagged `all-machines-quota-blocked`.
+
+Older machines that don't report the field are treated as not blocked —
+mixed-version pools behave exactly as before. `GET /pool` shows each
+machine's `quotaState`.
+
+## What to Tell Your User
+
+Your messages stop landing on a machine whose AI account has hit its limit —
+the pool quietly routes conversations to a machine that can actually answer.
+The only way to stay on a rate-limited machine is to have pinned the
+conversation there yourself, and then I can tell you exactly why it's quiet
+and when the limit resets.
+
+## Summary of New Capabilities
+
+- Per-machine `quotaState` in capacity heartbeats + `GET /pool`.
+- Placement avoids quota-blocked machines; blocked owners lose stickiness.
+- Hard pins win with a `pinned-machine-quota-blocked` flag; all-blocked
+  pools place least-loaded with `all-machines-quota-blocked`.
+
+## Evidence
+
+`tests/unit/PlacementExecutor.test.ts` +8 (including the verbatim incident
+case — a quota-blocked current owner loses stickiness) with all 29
+pre-existing placement tests green; `tests/unit/MachinePoolRegistry.test.ts`
++1 (passthrough + clears on a quota-free heartbeat). tsc + lint clean.

package/upgrades/side-effects/post-transfer-session-closeout.md

@@ -0,0 +1,116 @@
+# Side-Effects Review — Post-transfer session closeout
+
+**Version / slug:** `post-transfer-session-closeout`
+**Date:** `2026-06-05`
+**Author:** `echo`
+**Second-pass reviewer:** `not required` (kill-path change, but every kill goes through the existing terminate authority; every boundary side test-pinned; inert single-machine)
+
+## Summary of the change
+
+Two halves closing the operator-named duplicate-sessions gap: (A) the transfer
+handler immediately closes the local topic session when the user explicitly
+moves a topic to another machine (operator origin, protected-skipped, silent
+recovery-bounce disposition); (B) a SessionReaper rule closes any topic-bound
+session whose topic the ownership registry shows OWNED BY ANOTHER MACHINE,
+after a 2-tick dwell, through the guarded autonomous terminate (vetoes audited
++ retried). New `topicOwnerElsewhere` reaper dep late-binds the pool objects;
+config `monitoring.sessionReaper.topicMovedCloseout` (default true) +
+`topicMovedConfirmTicks` (default 2).
+
+## Decision-point inventory
+
+1. Plan is `transfer` to another machine vs `noop`/self → immediate close vs
+   none. Covered by the rule conditions + transfer tests from #790 (noop paths
+   unchanged).
+2. Session protected → immediate close skipped (and the sweeper's guard veto
+   path). Pinned via reaper-family protected test + the explicit skip.
+3. Topic owned elsewhere vs by-self vs unowned vs no binding vs dep absent →
+   sweeper fires vs inert. All five pinned.
+4. Dwell below/at threshold; churn reset. Pinned.
+5. killsEnabled (enabled/dryRun/auto-disabled) → terminate vs `would-reap`
+   audit. Pinned.
+6. Guard veto → `reap-skipped-topic-moved` + retry. Pinned.
+7. Per-tick + hourly budgets. Pinned (per-tick), hourly shares the existing
+   tested budget mechanism.
+
+## 1. Over-block
+
+The rule only ever closes MORE sessions, never keeps one it shouldn't — the
+risk axis is over-KILLING, addressed in Under-block. No legitimate
+operation is rejected; single-machine installs are bit-identical in behavior
+(dep absent → rule unreachable).
+
+## 2. Under-block (over-kill risk — the one that matters)
+
+- **Wrong-owner false positive:** the ownership registry is the same source
+  routing already trusts; a 2-tick dwell absorbs CAS churn mid-transfer, and
+  churn RESETS the dwell (test-pinned). Worst case (registry wrong for >2
+  ticks): the session closes while the registry routes messages to the other
+  machine anyway — the close follows the routing truth, not vice versa.
+- **In-flight work on the duplicate:** deliberately closable — duplicate work
+  is the bug (operator's words). The sweeper still honors KEEP-guard vetoes
+  (retry, not force); the immediate half is the user's explicit command.
+- **Protected sessions:** never auto-closed on either half.
+- **Half A races the release CAS:** the close is fired after the release
+  attempt regardless of CAS outcome — but only when `plan.action ===
+  'transfer'`, which already passed the planner's owner/pin checks; a failed
+  CAS still means the user commanded the move, and the pin routes the next
+  message away from this machine.
+
+## 3. Level-of-abstraction fit
+
+The immediate half lives in the one handler that executes user moves; the
+invariant lives in the reaper — the component whose job is "sessions that
+should not be running, aren't" — via an injected signal, keeping
+SessionReaper free of pool imports (fully unit-testable, same pattern as
+every other dep). The terminate authority remains the single kill funnel.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+The sweeper REQUESTS kills through the guarded authority (autonomous origin —
+vetoes win). The immediate half uses operator origin, which is the documented
+user-command bypass; the terminateSession doc comment is updated to name this
+second stamp site, and protected sessions are excluded before the call so the
+bypass never reaches them on this path.
+
+## 5. Interactions
+
+- ReapGuard/ReapAuthority untouched — same funnel, same vetoes.
+- Reap-log + §P3 notifier: sweeper closes are `terminal` (one honest "session
+  was shut down — topic moved to X" notice via the existing reapNotify);
+  Half A is `recovery-bounce` (silent — the user just got "Moving…").
+- Ownership registry is read-only here (ownerOf) — no new writers.
+- The dep's try/catch absorbs the construction-order TDZ window (reaper is
+  built before the mesh block wires the registry) — rule inert until wired.
+
+## 6. External surfaces
+
+Two config keys (defaults preserve behavior except the new closeout itself,
+which is the fix). New audit rows (`rule: 'topic-moved-away'`,
+`reap-skipped-topic-moved`). CLAUDE.md template line + idempotent append
+migration. No routes, no schema.
+
+## 7. Rollback cost
+
+`monitoring.sessionReaper.topicMovedCloseout: false` is an instant per-agent
+off-switch; full revert restores the old lingering behavior. No state.
+
+## Conclusion
+
+The operator-named duplicate-session bug closed at both speeds — instantly on
+the explicit command, eventually-but-guaranteed everywhere else — without a
+single new kill path outside the existing authority.
+
+## Second-pass review (if required)
+
+Not required — see header.
+
+## Evidence pointers
+
+- `tests/unit/session-reaper-topic-moved.test.ts` (9) — incl. the headline
+  "closes a BUSY duplicate" case.
+- `tests/unit/PostUpdateMigrator-poolSessionsVisibility.test.ts` (+3).
+- Reaper family regression 65/65 green; tsc clean.
+- `docs/specs/post-transfer-session-closeout.md` + `.eli16.md`.

package/upgrades/side-effects/quota-aware-placement.md

@@ -0,0 +1,99 @@
+# Side-Effects Review — Quota-aware placement
+
+**Version / slug:** `quota-aware-placement`
+**Date:** `2026-06-05`
+**Author:** `echo`
+**Second-pass reviewer:** `not required` (pure-function gate + additive optional field; absent field = bit-identical behavior; every boundary side test-pinned)
+
+## Summary of the change
+
+Capacity heartbeats self-report a per-machine `quotaState` (from THIS
+machine's own QuotaTracker: provider block active OR 5-hour ≥95%), the
+registry passes it through to `MachineCapacity`, and `PlacementExecutor`
+drops quota-blocked machines from the candidate pool — with a
+place-somewhere fallback when ALL are blocked (`all-machines-quota-blocked`)
+and a pin-wins exception (`pinned-machine-quota-blocked`).
+
+## Decision-point inventory
+
+1. Heartbeat quota computation: block active / 5h exhausted / neither /
+   tracker absent / tracker throws. All produce defined outputs (blocked /
+   blocked / not-blocked / omitted / omitted); the omitted side = not blocked.
+2. Gate: blocked machine vs not vs absent-field vs `blocked:false`. All four
+   pinned.
+3. All-blocked fallback vs some-unblocked. Both pinned.
+4. Hard pin to blocked (honored+flagged) vs soft preference (degrades) vs
+   sticky owner blocked (loses stickiness — the incident case). All pinned.
+5. Pin path capability check preserved (never capability-blind). Pinned.
+
+## 1. Over-block
+
+A quota-blocked machine still serves: hard pins, the all-blocked fallback,
+and every EXISTING session (placement only affects new/re-placements — the
+gate cannot strand a running conversation). A false `blocked: true`
+self-report (tracker over-reporting) shifts new placements to peers, which is
+exactly the desired degraded behavior; the worst case equals today's behavior
+when all machines report blocked.
+
+## 2. Under-block
+
+- A false `blocked: false` (stale tracker file) reproduces today's behavior —
+  never worse than the status quo.
+- The signal refreshes every 30s heartbeat; a block that begins mid-window is
+  seen at most 30s late.
+- A topic already on a machine that becomes blocked moves only on its NEXT
+  message (placement is per-message by design) — no proactive eviction here.
+
+## 3. Level-of-abstraction fit
+
+The quota READ lives on the machine that owns the account (heartbeat
+producer); the DECISION lives in the one pure placement function every
+placement flows through; the registry is a dumb passthrough. No new
+cross-machine channel — the signal rides the existing heartbeat.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+The gate redirects NEW placements only; it never kills, blocks a message, or
+overrides the user (pin wins). Failure modes degrade to current behavior
+(absent/unknown = not blocked); the heartbeat computation is try/caught with
+an explicit unknown ≠ blocked rule.
+
+## 5. Interactions
+
+- Stickiness intentionally weakened for blocked owners — that IS the incident
+  fix; hysteresis still applies among unblocked candidates.
+- The gemini quota-conflation lesson honored: each machine reads only its own
+  QuotaTracker — no cross-machine quota file reads.
+- Mixed-version pools safe: older machines simply omit the field.
+- `GET /pool` and the Machines tab now show `quotaState` (additive).
+
+## 6. External surfaces
+
+One optional field on `MachineCapacity`/`HeartbeatObservation` (additive,
+visible in `GET /pool`). No config, no routes, no migration (absence =
+default). CLAUDE.md template line + idempotent append migration.
+
+## 7. Rollback cost
+
+Trivial — revert the PR; the field disappears from heartbeats and the gate
+from decide(). No state, no schema.
+
+## Conclusion
+
+The quota-blind placement hole closed at the pure-function layer with
+strictly-degrading failure modes: every uncertain case behaves exactly like
+today.
+
+## Second-pass review (if required)
+
+Not required — see header.
+
+## Evidence pointers
+
+- `tests/unit/PlacementExecutor.test.ts` (+8, incl. the verbatim incident
+  case: a blocked current owner loses stickiness).
+- `tests/unit/MachinePoolRegistry.test.ts` (+1 passthrough + clears-on-next-heartbeat).
+- 29 pre-existing placement tests green; tsc + lint clean.
+- `docs/specs/quota-aware-placement.md` + `.eli16.md`.