instar 1.3.375 → 1.3.376

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.375",
+  "version": "1.3.376",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T17:27:52.711Z",
-  "instarVersion": "1.3.375",
+  "generatedAt": "2026-06-06T19:12:50.527Z",
+  "instarVersion": "1.3.376",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "0c773d13455cad3b10e084501775f77ca5970e94b381f34af58ce2bddc8e94db",
+      "contentHash": "a95f4c1b784f5e913759c89b1464fbd2b4fa7b93d7df9065ef8c84d4b9063990",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1514,7 +1514,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "a7d126e3eae782ae7b6eb2f3146b326cf2e14eae89376d91720526736d90fda9",
+      "contentHash": "45517522f35828717e749c72c8fae66d400e94ded983525391a2c74227e86d80",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {

package/upgrades/1.3.376.md

@@ -0,0 +1,72 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The claudeSessionId bridge (instar session record ↔ Claude Code conversation
+UUID) was write-once: the first hook event froze the UUID forever. A fresh
+respawn or `claude --resume` rotates the conversation UUID, so after any
+respawn the record pointed at a transcript that never grew — or never existed
+(6 of 7 inspected records on the dev box were phantom). Both sentinels that
+verify recovery by transcript growth (RateLimitSentinel, CompactionSentinel)
+resolved that exact file, got null, and could NEVER observe a recovery: the
+result was 6 futile resume nudges against actively-answering sessions and a
+false "no jsonl growth after 6 attempts" escalation (2026-06-06 echo-api-errors
+and echo-exo-3-0 incidents).
+
+Fixes, root cause first:
+
+1. The bridge is now last-writer-wins — every hook event carries the live
+   conversation UUID, and the record updates on rotation (logged old → new).
+   This also freshens every other claudeSessionId consumer (topic resume saves,
+   reap guards) that always wanted the live conversation's id.
+2. Both sentinels degrade a stale uuid (recorded transcript missing) to the
+   newest-jsonl heuristic the no-uuid case already uses, instead of returning
+   null — guaranteed-unverifiable is strictly worse than the shared accepted
+   heuristic. Exact-uuid behavior when the file exists is byte-for-byte
+   unchanged (sibling growth still doesn't count).
+
+Regression tests replay the live incident on both sentinels plus the bridge
+rotation; the sibling-precision guard is tested on the valid-uuid arm.
+
+## What to Tell Your User
+
+Nothing — housekeeping. The visible effect is the ABSENCE of noise: no more
+repeated "throttle should have cleared — please continue" nudges landing in a
+session that's already working, and no more false "still can't get through
+after 6 tries" alerts on sessions that recovered fine.
+
+## Summary of New Capabilities
+
+- claudeSessionId bridge follows conversation rotation (last-writer-wins, logged).
+- RateLimitSentinel + CompactionSentinel: stale-uuid → newest-jsonl fallback in
+  recovery verification; false-escalation class on healthy sessions closed.
+
+## Evidence
+
+Reproduced live in production on 2026-06-06 (the bug was diagnosed FROM the
+affected session):
+
+- **Before:** `logs/sentinel-events.jsonl` 16:47:12Z→17:11Z — `throttle-detected`
+  on echo-api-errors, then the full resume-nudge ladder (attempts 1–6, each
+  "resume nudge injected via internal recovery channel") against a session that
+  was actively answering its operator the entire time; the episode ends
+  `throttle-escalated: "no jsonl growth after 6 attempts"`. The session record
+  held `claudeSessionId = 563a7027-…` with NO such transcript on disk while the
+  live transcript `a538d58f-….jsonl` grew throughout. Same morning, 09:26Z:
+  echo-exo-3-0 falsely escalated `"no jsonl growth after 6 attempts over 22m"`.
+  6 of 7 inspected exo-family session records pointed at phantom transcripts.
+- **After (mechanism):** with the fallback, `readJsonlBaseline` resolves the
+  growing live transcript (logged "stale claudeSessionId … falling back to
+  newest jsonl"), so the first nudge's verify window observes growth and the
+  episode finalizes `recovered` — regression tests replay exactly this shape on
+  both sentinels (phantom uuid + growing sibling file ⇒ recovered, never
+  escalated; verified to FAIL on pre-fix code). The bridge fix is additionally
+  proven on the real SessionManager: rotation `first-uuid → second-uuid`
+  persists (previously refused by the write-once guard).
+- Post-deploy wild proof: the next real throttle on a respawned session should
+  log `throttle-recovered` instead of a false escalation; the rotation log line
+  (`claudeSessionId rotated for "<session>": old → new`) will appear on the
+  first hook event after any respawn.

package/upgrades/sentinel-stale-uuid-fallback.eli16.md

@@ -0,0 +1,15 @@
+# Sentinels stop failing healthy sessions over a stale transcript pointer
+
+When a session gets throttled by the API, a watchdog (the RateLimitSentinel) nudges it back awake and then checks "did it actually recover?" by watching the session's transcript file grow — output means alive. Same trick for compaction recovery (CompactionSentinel).
+
+The bug: the server remembers WHICH transcript file belongs to a session by its conversation ID — but that memory was write-once. The first time a session ever reported its ID, it was frozen forever. When a session later respawned or resumed (which gives the conversation a NEW ID and a NEW transcript file), the record kept pointing at the OLD file — one that never grows again, or never even existed. On this box, 6 of 7 checked session records pointed at transcripts that didn't exist.
+
+The consequence: for any such session, "did it recover?" could literally never come back yes. The watchdog would nudge 6 times over ~20 minutes — against a session that was actively answering the user the whole time — then falsely declare it stuck ("no jsonl growth after 6 attempts"). This happened live on 2026-06-06: one session got 6 pointless wake-up nudges mid-conversation, and another was falsely escalated at 2am.
+
+Two fixes, root cause first:
+
+1. **The pointer now follows the conversation.** Every hook event a session sends carries its current conversation ID; the record now updates whenever that ID changes (a respawn/resume rotates it), instead of refusing to ever change. A rotation is logged so drift is diagnosable.
+
+2. **A stale pointer degrades instead of failing.** If the recorded ID's transcript file is missing, both sentinels now fall back to watching the newest transcript in the project — the exact same heuristic they already use when no ID is known at all — instead of returning "no file, recovery unverifiable, forever." When the exact file exists, behavior is byte-for-byte unchanged (a sibling session's output still doesn't count as your recovery).
+
+Regression tests replay the live incident: phantom ID + a growing real transcript must produce "recovered", never a false escalation.

package/upgrades/side-effects/sentinel-stale-uuid-fallback.md

@@ -0,0 +1,75 @@
+# Side-Effects Review — Sentinel stale-uuid fallback + last-writer-wins bridge
+
+**Version / slug:** `sentinel-stale-uuid-fallback`
+**Date:** `2026-06-06`
+**Author:** `echo`
+**Second-pass reviewer:** `pending (Phase 3 review agents)`
+
+## Summary of the change
+
+Two-layer fix for the 2026-06-06 false-escalation incident (echo-api-errors: 6
+futile resume nudges against an actively-answering session; echo-exo-3-0: false
+"no jsonl growth after 6 attempts over 22m" escalation at 02:26 PDT):
+
+1. `SessionManager.setClaudeSessionId` + the `/hooks/events` route guard change
+   from write-once to last-writer-wins, so the claudeSessionId record follows
+   conversation-UUID rotation (fresh respawn / `claude --resume`).
+2. `RateLimitSentinel.readJsonlBaseline` + `CompactionSentinel.readJsonlBaseline`
+   degrade a stale uuid (recorded transcript missing on disk) to the existing
+   newest-jsonl heuristic instead of returning null (which made recovery
+   verification permanently unable to succeed).
+
+## Decision-point inventory
+
+- Bridge update condition: `session.claudeSessionId !== payload.session_id`
+  (route) / identical-id no-op (manager). Both sides tested.
+- Sentinel baseline resolution: exact-uuid file exists → exact (unchanged);
+  uuid recorded but file missing → newest-jsonl fallback (NEW); no uuid →
+  newest-jsonl (unchanged). All three arms tested.
+
+## 1. Over-block
+
+Nothing new is rejected. The bridge accepts strictly MORE updates than before
+(rotations were previously dropped). The sentinels accept strictly MORE
+verification evidence than before.
+
+## 2. Under-block / residual risk
+
+- **Sibling false-positive on the fallback arm:** in a multi-session project
+  root, the newest jsonl can belong to ANOTHER session, so a genuinely-stuck
+  session with a stale pointer could be falsely marked "recovered" when a
+  sibling produces output. This is the SAME accepted risk profile as the
+  pre-existing no-uuid arm, it only applies while the pointer is stale (layer 1
+  re-freshens it on the next hook event, typically within seconds on an active
+  session), and the failure mode it replaces — guaranteed false escalation +
+  6 wasted nudge-refires on healthy sessions — is strictly worse. A falsely
+  "recovered" stuck session is still backstopped by ActiveWorkSilenceSentinel.
+- **Stale event flip-back:** a late-arriving hook event from a dying old
+  conversation could briefly flip the pointer backwards; the next event from
+  the live conversation flips it forward again, and all consumers re-resolve
+  per call (no cached snapshot), so the effect is transient.
+- Sessions that emit no hook events (none expected — the reporter fires on
+  every tool use/stop) keep whatever pointer they have; the sentinel fallback
+  covers them.
+
+## 3. Level-of-abstraction fit
+
+The rotation fix lives at the single bridge chokepoint both consumers share
+(`setClaudeSessionId` + its one route caller). The degrade-not-fail fix lives
+inside each sentinel's existing `readJsonlBaseline`, the single resolution
+point per sentinel; codex/gemini framework arms are untouched (they never used
+the uuid path). No migration needed: the fix is pure server code; existing
+stale records self-heal on the first post-deploy hook event per session.
+
+## Rollback
+
+Single revert of the PR restores write-once + null-on-missing exactly (no
+state-shape changes, no config, no new files).
+
+## Blast radius
+
+Server-side only. No agent-installed files, no hook templates, no config
+defaults, no CLAUDE.md template changes → no Migration Parity obligations.
+Consumers of `claudeSessionId` (session resume save, reaper guards,
+TopicResumeMap, sentinels) now see a FRESHER value — the value they were
+always designed to expect.