instar 1.3.370 → 1.3.372

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.370",
+  "version": "1.3.372",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T14:18:40.647Z",
-  "instarVersion": "1.3.370",
+  "generatedAt": "2026-06-06T14:48:38.252Z",
+  "instarVersion": "1.3.372",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "833db0b6f4476090c1260cc7996ab8239d9a103e7784cf64fd63fccd534cf0cd",
+      "contentHash": "ff8e41ed6a286911bd694af312327ddf4bf783a9f1a3d81307fdf7965675a28a",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "1f69ce038731bab478d16eec75ab741610caa6d98524cbcfbfea7f1645084b10",
+      "contentHash": "ae1117a1dd98d8e48ccc13d247cdc0c821c68eacc428deebc64c71ebc6052c3d",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/src/data/state-coherence-registry.json

@@ -76,6 +76,30 @@
       ],
       "grandfathered": false
     },
+    {
+      "category": "commitment-pending-mutations",
+      "description": "Durable owner-routed mutation intents awaiting an offline owner (COMMITMENTS-COHERENCE-SPEC P1.5 \u00a73.4). Stores INTENT only - a FRESH signed envelope is re-issued at fire time; single-writer serialized funnel; per-(origin,id) and per-owner enqueue bounds; TTL 7d with one honest expiry notice.",
+      "scope": "machine-local",
+      "freshness": "live",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/commitment-replicas/pending-mutations.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "commitment-opkeys",
+      "description": "Owner-side durable opKey replay window for commitment-mutate (COMMITMENTS-COHERENCE-SPEC P1.5 \u00a73.4) - the replay control beyond the 60s envelope nonce window; records verdicts, survives restarts, TTL >= pending-mutation TTL.",
+      "scope": "machine-local",
+      "freshness": "live",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/coherence-journal/commitment-opkeys.json"
+      ],
+      "grandfathered": false
+    },
     {
       "category": "attention-queue",
       "description": "Attention items surfaced to the user, plus the per-source coalescing/suppression ledger.",

package/upgrades/1.3.371.md

@@ -0,0 +1,62 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The "what are all my hands doing?" view now sees ALL machines: ask
+`GET /parallel-work/activities?scope=pool` and every machine's activity
+appears in one list — local rows live-accurate, remote rows derived from
+the already-replicated coherence journal with honest staleness labels and
+named absences (a remote topic's description text stays on its machine by
+design; the row says so instead of guessing). When the SAME conversation
+shows running on two machines, the view flags the pair — and recognizes
+the routine settling window after a deliberate move so it doesn't cry
+wolf on every transfer.
+
+Two more wiring truths surfaced by the live two-machine proof:
+
+1. The "this conversation was deliberately moved here" pin is kept by the
+   machine that DID the moving (the lease holder) — the machine it moved
+   TO couldn't see it, so the workspace fetch still refused on the
+   receiving side. The receiver now also accepts the mover's replicated
+   placement diary entry (emitted at the router's CAS chokepoint) as
+   proof it's the home; the per-write ownership recheck still aborts on
+   any real claim.
+2. Machines announced their promise-list versions on every heartbeat, but
+   the listener's response parsing discarded the field — so commitment
+   replication NEVER actually fired in either direction. One pass-through
+   line fixes it, plus a source-shape regression test on the seam the
+   integration suite had bypassed.
+
+## What to Tell Your User
+
+Ask any machine what you're working on across ALL machines and it
+answers in one list — including flagging the should-never-persist case of
+one conversation active in two places at once.
+
+Nothing to do — these complete the "files follow the conversation" and
+"promises visible everywhere" features so they work from the machine that
+actually needs them, not just in tests.
+
+## Summary of New Capabilities
+
+- `GET /parallel-work/activities?scope=pool` — the pool-wide view
+  (default scope unchanged).
+- `src/core/PoolActivityView.ts` — the per-instance replica fold with
+  overlap + recentMove + lowConfidence honesty.
+
+- wsOwnerOf second fallback: newest topic-placement journal entry
+  (own+replica) ⇒ self-ownership for the pull (issue #930).
+- fetchPeerCapacity passes commitmentsAdvert through to
+  driveCommitmentsSync (the P1.5a replication enabler).
+
+## Evidence
+
+5 unit tests incl. the B-terminal-never-masks-A aggregation and the
+remote↔remote overlap pair; typecheck/lint green.
+
+tests/unit/working-set-ownerof-wiring.test.ts (both fallback steps + the
+advert pass-through); typecheck + wiring suites green. The staged live
+proofs complete on the echo pair once this ships.

package/upgrades/1.3.372.md

@@ -0,0 +1,37 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Final build slice of Commitments Coherence: "mark it delivered" now works
+from ANY of the agent's machines. A close issued on the wrong machine
+forwards ONE signed command to the promise's home machine, which applies
+it under the exact same rules as a local close and returns the real
+verdict. If the home machine is ASLEEP, the intent is written down
+durably (surviving restarts), the user gets an honest "queued — applies
+the moment it returns", and a FRESH signed command fires on its return —
+with a durable replay window making double-application impossible even
+when a timeout left the outcome ambiguous.
+
+## What to Tell Your User
+
+On synced machine pairs: tell ANY machine "mark that done" — it lands on
+the right machine, or queues honestly if that machine is asleep and
+applies when it wakes. Single-machine setups: nothing changes.
+
+## Summary of New Capabilities
+
+- `commitment-mutate` MeshCommand (own RBAC case; verifyEnvelope sole
+  authority; owner-side durable opKey replay window).
+- `src/core/CommitmentMutation.ts` — verdict-bearing apply + OpKeyWindow +
+  PendingMutationLedger (intent-only, bounded, fresh-envelope re-fire).
+- deliver / withdraw / resume / beacon-PATCH routes: owner-routing with
+  409-ambiguity (?origin), 202-queued honesty, owner verdicts.
+
+## Evidence
+
+10 unit + 2 integration tests (real signed transport; the offline case
+end-to-end incl. restart survival + idempotent post-apply re-fire);
+tracker's 77 tests unchanged; full lint/typecheck/registry (72) clean.

package/upgrades/side-effects/commitment-mutation-p15b.md

@@ -0,0 +1,70 @@
+# Side-Effects Review — Commitments owner-routed mutation (P1.5b)
+
+**Version / slug:** `commitment-mutation-p15b`
+**Date:** `2026-06-06`
+**Author:** `echo`
+**Second-pass reviewer:** `not required (implements §3.4 of the 3-round-converged spec; mutating verb fenced by the durable opKey window + the unchanged CAS state machine; everything dark behind the explicit replication gate)`
+
+## Summary of the change
+
+P1.5b — promises become CLOSE-REQUESTABLE from every machine:
+
+1. `src/core/CommitmentMutation.ts`: verdict-bearing owner-side apply
+   (applied | idempotent-noop | invalid-transition | not-found — the
+   tracker's null-on-terminal collapsing is disambiguated WITHOUT touching
+   the tracker); the durable owner-side OpKeyWindow (the replay control
+   beyond the 60s nonce window — records verdicts, survives restarts, TTL
+   7d, corrupt → quarantine with worst-case one idempotent re-apply);
+   PendingMutationLedger (INTENT-only queue, serialized single-writer
+   funnel, per-(origin,id)=4 + per-owner=64 enqueue bounds, TTL with one
+   agent-health expiry notice, corrupt-quarantine).
+2. `commitment-mutate` verb: union member + its OWN RBAC case (explicitly
+   documents verifyEnvelope as the SOLE authority — mesh adds reach, not
+   authority) + the owner-side handler (opKey check → apply → record,
+   write-ordered).
+3. server.ts: forward fn (single attempt, 5s timeout; timeout = AMBIGUOUS
+   → queue with the SAME opKey + honest answer; old-peer 403/501 → queue +
+   honest answer, never quiet back-off); re-fire on the returning-peer
+   seam issues FRESH signed envelopes (the queue is never an
+   unauthenticated apply surface); 10-min TTL sweep.
+4. routes: deliver / withdraw / resume / beacon-PATCH gain owner-routing
+   (own → byte-identical local path; replica → forward with verdict or
+   202-queued; bare-id ambiguity → 409 with ?origin retry).
+5. Registry: commitment-pending-mutations + commitment-opkeys (72 total).
+
+## Decision-point inventory
+
+- opKey window checked BEFORE apply, recorded AFTER the store write — a
+  crash between resolves as idempotent-noop on the re-fire (§4.5).
+- Timeout ambiguity: queue with the SAME opKey — if the owner did apply,
+  the re-fire returns the recorded verdict; double-transition is
+  impossible by construction (proven in integration).
+- Local path untouched: a machine whose layer is dark (or single-machine)
+  behaves byte-identically; replica-targeted mutations answer an honest
+  409 when forwarding is unavailable.
+
+## 1-2. Over/Under-block
+
+Over: enqueue bounds refuse a 5th op on one commitment ('bounded' —
+deliberate anti-staging). Under: beacon heartbeats stay owner-side (the
+§2 Out deferral, tracked); the merged-view's pendingMutation join uses
+the ledger written here.
+
+## 3. Fit / 4. Blast radius
+
+Engine in core (seam-injected); tracker UNTOUCHED (its 77 tests
+unchanged); route guards precede byte-identical local paths. Dark
+everywhere but explicit replication pairs.
+
+## Evidence
+
+- tests/unit/CommitmentMutation.test.ts — 10 passing (verdict matrix incl.
+  stale-observation annotation + patch allowlist; opKey replay + TTL +
+  corrupt; ledger dedupe/bounds/TTL-once/pendingKeys/corrupt-notice).
+- tests/integration/commitment-mutate-roundtrip.test.ts — 2 passing over
+  the REAL signed transport: deliver-from-B transitions A's on-disk store
+  (file oracle) + replayed opKey returns the recorded verdict without
+  re-applying; THE OFFLINE CASE end-to-end (queue → restart-survival →
+  fresh-envelope re-fire → applied → post-apply re-fire idempotent).
+- Full sweep: 192 tests across the commitments suites green; wiring +
+  parity gates green; typecheck + lint (72 registry categories) clean.