instar 1.3.335 → 1.3.337

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.335",
+  "version": "1.3.337",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T03:50:02.661Z",
-  "instarVersion": "1.3.335",
+  "generatedAt": "2026-06-06T04:27:42.668Z",
+  "instarVersion": "1.3.337",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "538d1cb91709f8101b27562caede175c9c6f22a86119f3ee9dcca7c82e6c50ee",
+      "contentHash": "53d9f4dd41e84b754d3b7a239dfd509e41987c3bcdd8c9504159f8c5345ea6d9",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1538,7 +1538,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "95566e07396ebe97b2096817786f681f79dd6cc7d3a4ecc8f787c2948857c09b",
+      "contentHash": "a502a72add49bb29376a4932c9c6b9378193a7eb2bd9614156cbd55f6a9b5857",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.336.md

@@ -0,0 +1,45 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Audit fix #5 under "No Unbounded Loops" (P19), completing the mesh-transport
+brake set #874 started: `HttpLiveTailTransport` (conversation-tail streaming)
+and `ReplyMarkerTransport` (cross-machine "already answered" markers) get
+`AbortSignal.timeout` on their fetches (30s default — the #874 reviewer's
+stall-envelope sizing, applied from the start) and `PeerFailureLogGate`
+state-change failure logging (first / every-Nth / recovery; previously one
+line per failed attempt, and silent for non-ok responses). Verified: neither
+transport feeds lease renewal/suspend (`isReachable()`'s only consumer is the
+lease wire), so the timeout carries zero authority coupling. The reviewer
+confirmed the marker-drop trade-off under a 30s abort is pre-accepted by the
+marker's documented design (fire-and-forget; provider redelivery + dedup gate
++ synced ledger are the backstops).
+
+## What to Tell Your User
+
+If you run me on more than one machine: the last two machine-to-machine sync
+channels now have the same protections as the rest — a stuck network
+connection can't silently jam them, and a down machine produces a handful of
+meaningful log lines instead of one per failed attempt. All four cross-machine
+wires now follow the loop-safety standard.
+
+## Summary of New Capabilities
+
+- Hung-socket protection + bounded failure logging on the live-tail and
+  reply-marker transports (no configuration needed; recovery and
+  rejecting-peer visibility included).
+
+## Evidence
+
+CMT-1109 audit, mechanical completion of the #874 pattern (line-level
+CONCUR-reviewed tonight) on two lower-blast-radius transports. Focused
+adversarial second-pass: CONCUR on all probes (Two-Generals widening
+pre-accepted by design — broadcast is void-discarded at its only callsite;
+gate memory peer-bounded; alternating ok/fail chatter is diagnostic at reply
+cadence; local encryptFor throws disambiguate via error detail). Tests: 6 new
+green (AbortSignal pins both transports; P19 bounds — 25 failed flushes → 3
+lines, 12 rejected markers → 2 lines; recovery-once; steady-success silence)
++ pre-existing transport suites untouched and green; tsc clean.

package/upgrades/1.3.337.md

@@ -0,0 +1,56 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Second wedge-signature family + the API fresh-respawn lever, from the
+2026-06-05 EXO 3.0 incident. A session whose transcript accumulated literal
+red-team test payloads (generated during MTP security-harness work) got EVERY
+reply rejected by the API's Usage Policy classifier — `API Error: … appears to
+violate our Usage Policy` on each turn, because every turn re-sends the full
+conversation. Same permanent-death shape as the thinking-block 400 (still
+emitting output, so the silence + socket sentinels miss it), but the
+ContextWedgeSentinel only knew the thinking-block signature, so it watched the
+session die for an hour and said nothing. Recovery required hand-editing
+`topic-resume-map.json` because `/sessions/refresh` did not forward `fresh`.
+
+Now: `classifyWedgeTail()` recognizes both families and tags every sentinel
+event with `kind` (`thinking-block-400` | `aup-rejection`) in the audit trail
+and escalation wording. The AUP family carries an extra discriminator — the
+signature must appear on MORE THAN ONE line (the loop always repeats; a benign
+one-off rejection must not cost the session its conversation). And
+`POST /sessions/refresh` accepts `fresh: true`, reaching the same
+SessionRefresh fresh-mode the sentinel uses internally.
+
+## What to Tell Your User
+
+If a conversation ever dies the way the EXO session did — every reply
+instantly refused by the AI provider because of what's accumulated in the
+transcript — I now notice it, can recover it automatically with a fresh
+restart (when auto-recovery is enabled), and explain what happened instead of
+leaving you staring at "delivered" receipts with no answers.
+
+## Summary of New Capabilities
+
+- ContextWedgeSentinel detects the AUP-rejection loop (second signature
+  family) with a repetition discriminator against benign one-off rejections;
+  audit events + escalations carry the wedge kind. No configuration change —
+  rides the existing `monitoring.contextWedgeSentinel` settings.
+- `POST /sessions/refresh` accepts `fresh: true` — kill + respawn WITHOUT
+  `--resume` (clears the topic's resume UUID), the recovery lever for any
+  poisoned transcript.
+- CLAUDE.md template + migration: existing agents learn about the second
+  family, the API lever, and the prevention rule (adversarial payloads live in
+  files on disk, never pasted into conversation transcripts).
+
+## Evidence
+
+Live incident recovery (2026-06-05, topic 19437): manual kill + resume-map
+clear + fresh spawn verified end-to-end — fresh session answered immediately
+where the wedged one had failed every turn for ~1h. Unit: 32 sentinel tests
+(incl. both sides of the one-off-vs-loop boundary, kind tagging, escalation
+wording per family) + 8 route tests (fresh validation, forwarding, 202 shape)
++ 3 migrator tests (fresh install carries the note; existing-section patch;
+idempotency). Integration + e2e wedge suites green; tsc clean; preflight PASS.