instar 1.3.398 → 1.3.400

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.398",
+  "version": "1.3.400",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-07T07:05:27.302Z",
-  "instarVersion": "1.3.398",
+  "generatedAt": "2026-06-07T07:57:41.640Z",
+  "instarVersion": "1.3.400",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "397e804f5973a87f0b4476495e57b80d1dca0394c2928753539e91a7761ab6cf",
+      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "278ffe790119f908b0ffcdb5129a52597bdc54b262a82fee7cd32c5f9b40d325",
+      "contentHash": "f2927adade5b10033173d049f8145cfa2aa8134659fbd0c57e50645248586803",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1514,7 +1514,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "dd7e1ac290c0cfdf8e60334519448659de20ff449c9dbb3d56f616c32c1b2763",
+      "contentHash": "d6dfc0966efeaea65b41276b8dfcf079989fb0e6c68b9413a12a56545150ffa6",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {

package/upgrades/1.3.399.md

@@ -0,0 +1,34 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The dashboard machine can now stream a session that lives on another machine. When a browser client subscribes with a remote `machineId`, the WebSocketManager routes it through a per-peer multiplexed upstream link (PeerStreamProxy from phase 1) instead of the local capture path: it mints a single-use ticket from the peer (the phase-2a mesh verb) and opens a real `/pool-stream` connection. Output frames fan back to the subscribed browser clients tagged with the source machine; input is relayed (the serving machine still enforces its own input gate); drops surface honest `peer-stream-lost`/`machine-unreachable` frames. A locally-running session is always served locally even if a stale remote `machineId` is hinted (transfer-staleness guard).
+
+This completes the streaming engine end to end. The on-screen UI (clickable remote tiles + status badges) is phase 3.
+
+## What to Tell Your User
+
+Almost there — the machinery to click a remote machine's session and stream it is now wired both ends. The visible click-to-stream tiles land in the next (final) phase.
+
+- audience: agent-only
+- maturity: preview
+
+## Summary of New Capabilities
+
+- WebSocketManager routes a remote-`machineId` subscribe through a per-peer
+  PeerStreamProxy; output fans back machine-tagged; input relayed; honest error frames.
+- A `PoolStreamConnector` (in server boot) mints a ticket via the mesh verb and
+  opens the upstream `/pool-stream` ws; injected through AgentServer.
+- Transfer-staleness guard: a locally-running session is served locally despite a stale remote hint.
+
+## Evidence
+
+- `tests/unit/WebSocketManager.test.ts` (+7): remote subscribe opens a proxy +
+  fans output tagged; self/local hints stay local; input relayed; drop →
+  peer-stream-lost; remote unsubscribe cleans up.
+- `tests/e2e/pool-stream-roundtrip-alive.test.ts` (new): two real WebSocketManagers
+  + two http servers — a browser subscribe to a remote session streams the serving
+  machine's output back over real sockets, machine-tagged.

package/upgrades/1.3.400.md

@@ -0,0 +1,55 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+Added `QuotaAwareScheduler` — the third piece of the Subscription & Auth
+Standard, on top of the P1.1 account registry and P1.2 quota poller. It selects
+the optimal account for a session (reset-date-optimal "use before reset"
+draining) and enforces a continuity guarantee: a long-lived session that hits
+its account's quota resumes on another eligible account and keeps going, rather
+than dying on the limit.
+
+The swap reuses the existing session-restart machinery. A session is launched
+pointed at a specific account's config home (`CLAUDE_CONFIG_DIR`); because
+resuming a conversation is agnostic to which account's config home it runs under,
+the same conversation picks up on a fresh account with nothing lost. The
+account-swap parameters were threaded additively through the whole restart path
+(SessionRefresh → respawn → spawn → launch builder), so every existing restart,
+recovery, and spawn is byte-for-byte unchanged when no swap is requested.
+
+Automatic swapping on rate-limit detection ships dark behind
+`subscriptionPool.autoSwapOnRateLimit` (default off) — auto-swapping a live
+session is real authority, so it is opt-in. A manual swap route
+(`POST /subscription-pool/swap`) and the selection logic are always available.
+When a session hits a wall and there is no eligible alternate, the scheduler
+reports that honestly and raises one alert instead of pretending it swapped.
+
+Coverage: scheduler unit tests (selection ordering, the swap-and-resume
+guarantee, no-alternate, refresh-failure) + an end-to-end test that drives a
+session to a mocked quota limit and asserts it resumes on the alternate account's
+config home; existing session-restart tests stay green.
+
+## What to Tell Your User
+
+When one of your subscription accounts runs low, I can move the work to another
+of your accounts and keep the same conversation going — so a long session never
+just dies when an account hits its limit. I pick accounts so each one gets used
+up before its quota resets, instead of wasting it. This is switched off for
+automatic use until you turn it on (moving a live session is a big enough action
+that I want your say-so), but I can do it on request any time. Nothing changes
+for how your sessions restart today.
+
+## Summary of New Capabilities
+
+- **Quota-aware account selection** — picks the account with the most room that
+  resets soonest, draining each before its quota resets.
+- **Session-continuity guarantee** — a session at a quota limit resumes on another
+  account (conversation preserved) instead of dying; if no account is available,
+  it says so and leaves the existing back-off in place.
+- **Manual swap** — `POST /subscription-pool/swap` resumes a named session on
+  another eligible account on demand.
+- **Opt-in auto-swap** — automatic swapping on rate-limit detection is available
+  behind a config flag, off by default.

package/upgrades/side-effects/dashboard-stream-phase2b-requesting.md

@@ -0,0 +1,64 @@
+# Side-Effects Review — Pool dashboard streaming phase 2b (requesting side)
+
+**Version / slug:** `dashboard-stream-phase2b-requesting`
+**Date:** `2026-06-07`
+**Author:** `echo`
+**Second-pass reviewer:** `not required`
+
+## Summary of the change
+
+WebSocketManager routes a remote-machineId subscribe through a per-peer
+PeerStreamProxy (phase 1) + a PoolStreamConnector (mint ticket via the phase-2a
+mesh verb, open /pool-stream). Output fans back machine-tagged; input relayed;
+honest error frames; transfer-staleness guard.
+
+## Decision-point inventory
+
+(1) Is a subscribe remote? → machineId present, !== self, AND session not
+running locally (stale-hint guard). (2) Input on a remote sub → relayed
+upstream (serving machine gates), never local tmux.
+
+## 1. Over-block
+
+A remote subscribe whose connector returns null (peer unreachable) surfaces
+machine-unreachable — honest, not silent. A session that exists locally is
+never routed remote (served locally) even with a remote hint.
+
+## 2. Under-block
+
+The browser client is trusted to supply the correct machineId (it rendered the
+tile from /sessions?scope=pool). A wrong machineId routes to the wrong peer;
+the serving peer only streams sessions IT runs, so a bad hint yields no output
+(and the connector/ticket fail), not cross-talk. Local-existence is re-checked
+server-side regardless of the hint.
+
+## 3. Level-of-abstraction fit
+
+Routing lives in WSManager.handleMessage beside the local path; the per-peer
+link + reconnect/idle logic is the phase-1 PeerStreamProxy (reused, not
+reimplemented); ticket-mint + ws-connect is the connector in server boot (it
+owns meshClient + peerUrl). One streaming model; the remote path only swaps the
+source.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+No new authority on the requesting side — it consumes the serving side's
+authority (ticket, input gate). Errors are honest frames, never silent.
+
+## 5. Interactions
+
+- Local /ws path: unchanged for local sessions; only a machineId-tagged remote
+  subscribe diverges.
+- PeerStreamProxy (phase 1): the per-peer multiplex/reconnect engine, reused.
+- Serving side (phase 2a): the connector consumes its mesh verb + /pool-stream.
+- Client close: drops all remote subs from their proxies (no leak).
+- pool-stream-ticket verb: the connector mints with a sentinel session ('*') —
+  the ticket is per-connection, not session-bound.
+
+## 6. External surfaces
+
+No new HTTP/WS endpoint on the requesting side (it's a CLIENT of the peer's
+/pool-stream). No new config (allowRemoteInput is serving-side). New AgentServer
+options: poolStreamConnector + selfMachineId.