instar 1.3.400 → 1.3.402

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.400",
+  "version": "1.3.402",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-07T07:57:41.640Z",
-  "instarVersion": "1.3.400",
+  "generatedAt": "2026-06-07T08:26:35.260Z",
+  "instarVersion": "1.3.402",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "5216944296c49960c882e7d4766e05e5f09dfc7c2d103c65d0ef0f377f92b8f1",
+      "contentHash": "71db98cdd2a2ec55361f6a66447e40f0f97436817e2ae4b8f0496dc803248cbf",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "f2927adade5b10033173d049f8145cfa2aa8134659fbd0c57e50645248586803",
+      "contentHash": "1b7d450ba6a4b4793a0497d93dde540c42227edb34d6b6fd92ab641c76b64438",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/src/scaffold/templates.ts

@@ -642,6 +642,7 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 - Remote: When a tunnel is running, the dashboard is accessible at \`{tunnelUrl}/dashboard\`
 - Authentication: Uses a 6-digit PIN (auto-generated in \`dashboardPin\` in \`.instar/config.json\`). NEVER mention "bearer tokens" or "auth tokens" to users — just give them the PIN.
 - Features: Real-time terminal streaming, session management, file browser/editor, model badges, mobile-responsive
+- **One dashboard, every machine (Pool Dashboard Streaming)**: when you run on more than one machine, the dashboard lists sessions from ALL of them and you can CLICK any of them — including a session running on another machine — to stream its live terminal right there. No need to open that machine's dashboard separately. Watching is always available; TYPING into another machine's session is OFF by default (security) — enable it per machine via \`dashboard.poolStream.allowRemoteInput: true\` in that machine's \`.instar/config.json\`. Failure states are shown honestly on screen (unreachable / reconnecting / "remote typing disabled" / moved), never a frozen terminal. Proactive: if a user asks "why can't I click the Mac mini's session?" or wants to watch another machine's session — they now can, just click the tile; if typing doesn't work, that machine has remote input off.
 - **Sharing the dashboard**: When the user wants to check on sessions from their phone, give them the tunnel URL + PIN. Read the PIN from your config.json. Check tunnel status: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/tunnel\`
 - **Dashboard Telegram Topic**: A dedicated "Dashboard" topic is auto-created in your Telegram group on server startup. It always contains the latest dashboard URL + PIN, pinned for instant access. If your tunnel URL changes (quick tunnel restart), a new message is posted and pinned automatically. Users should check this topic for the current dashboard link. If you have a named tunnel (persistent URL), the link never changes.
 

package/upgrades/1.3.401.md

@@ -0,0 +1,30 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The single-dashboard streaming feature is now usable on screen. Remote session tiles (sessions running on another machine, surfaced via `/sessions?scope=pool`) are now clickable — selecting one streams its terminal from the owning machine through the relay, with a "streaming from <machine>" note. Input is sent with the session's machineId so the server relays it (the owning machine enforces its own remote-input gate). Every failure state is shown honestly in the terminal — machine-unreachable, peer-stream-lost (reconnecting), input-not-allowed, session-transferred, invalid/not-found — never a frozen screen or a silently swallowed keystroke. The dashboard WebSocket now resubscribes the active session after a reconnect so a server restart doesn't strand the terminal.
+
+## What to Tell Your User
+
+It's live: open your dashboard, click any session — including ones on your other machines — and watch it stream. Typing into a remote machine is off by default (turn it on per machine in settings).
+
+- audience: user
+- maturity: stable
+
+## Summary of New Capabilities
+
+- Remote session tiles are clickable → stream the session from its owning machine.
+- Input/keys carry machineId for remote sessions (server relays; owner gates).
+- Honest on-screen states for every stream failure (no frozen/silent UI).
+- WS reconnect resubscribes the active session (survives server restarts).
+
+## Evidence
+
+- `dashboard/index.html` inline JS — extracted + `node --check` clean.
+- The engine beneath is covered by the phase 1/2a/2b suites (PeerStreamProxy 13,
+  StreamTicketStore 11, WSManager routing 34, two serving + round-trip e2e).
+- Live-verified on the laptop+Mini pair (click a Mini session from the laptop
+  dashboard → streams).

package/upgrades/1.3.402.md

@@ -0,0 +1,64 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+Added the enrollment wizard — the fourth piece of the Subscription & Auth
+Standard, on top of the P1.1 account registry, P1.2 quota poller, and P1.3
+auto-swap scheduler. It assists logging a new subscription account into the pool
+from a phone, and makes the flow expiry-proof.
+
+Three new core pieces:
+
+- **`PendingLoginStore`** — a durable ledger of logins-in-progress. Each record
+  holds PUBLIC artifacts only: the verification URL, the optional short device
+  code, the flow kind, when it expires, and a re-issue count. There is no field
+  to hold a token — credential-safety by construction, the same structural guard
+  the account registry uses. The store persists to disk, so an in-flight login
+  survives a server restart.
+- **`EnrollmentWizard`** — orchestration on top of the store: start a login
+  (drive the framework's login flow, capture the public code/URL, store it with
+  its TTL visible), and a sweep that auto-reissues any expired login WITHOUT the
+  operator asking — the exact gap the pi-harness live-test exposed (a code that
+  expired before the operator got to it). A failed re-drive is skipped and retried
+  next sweep, so one bad login can't abort the sweep.
+- **`FrameworkLoginDriver`** — the concrete driver: spawns the framework's login
+  command under the target account's config home and scrapes the public
+  verification URL + device code + TTL from the pane (Codex = device-code; Claude =
+  URL + paste-back-code). The scrape logic is pure and unit-tested against real
+  captured-output fixtures.
+
+Routes (under `/subscription-pool`, internal/dark until graduation):
+`POST /subscription-pool/enroll`, `GET /subscription-pool/pending-logins`,
+`POST /subscription-pool/enroll/:id/complete`,
+`POST /subscription-pool/enroll/reissue-expired`. A low-frequency background tick
+calls the reissue sweep. The list/sweep routes answer `200 { enabled:false }` when
+the wizard is unwired — never 503.
+
+Coverage: unit tests for the store, the wizard (incl. the auto-reissue gap +
+driver-failure resilience), and the driver scrape logic; integration tests for
+the HTTP routes (asserting no token field ever appears in a response); an
+end-to-end test that confirms the routes are alive and a started enrollment
+survives a server restart.
+
+## What to Tell Your User
+
+You can add another subscription account from your phone. I'll show you a short
+code and a link; you open the provider's own page and approve. Nothing secret
+ever passes through me — only the public code and link. And if the code expires
+before you get to it, I quietly issue a fresh one instead of leaving you stuck —
+no trip back to a terminal. An enrollment you start is remembered even if I
+restart in the middle.
+
+## Summary of New Capabilities
+
+- **Phone-friendly enrollment** — start a new-account login and get a short
+  code + link to approve on the provider's own page; nothing secret transits the
+  agent.
+- **Auto-reissue on expiry** — an expired login code is silently refreshed on a
+  sweep, so a code that ages out before you act doesn't strand the flow.
+- **Durable pending logins** — in-flight logins survive a server restart.
+- **Pending-logins surface** — `GET /subscription-pool/pending-logins` lists the
+  active codes/links + their TTL (the phone surface + the dashboard panel feed).

package/upgrades/side-effects/dashboard-stream-phase3-ui.md

@@ -0,0 +1,58 @@
+# Side-Effects Review — Pool dashboard streaming phase 3 (UI)
+
+**Version / slug:** `dashboard-stream-phase3-ui`
+**Date:** `2026-06-07`
+**Author:** `echo`
+**Second-pass reviewer:** `not required`
+
+## Summary of the change
+
+Front-end only (dashboard/index.html): remote tiles clickable; subscribe/
+input/key carry machineId for remote sessions; honest error-state rendering for
+the new codes; resubscribe-on-reconnect. No server/TS change.
+
+## Decision-point inventory
+
+(1) Remote tile click → selectSession (was informational). (2) Error code →
+visible terminal message (was console.error). (3) On WS reconnect → resubscribe
+active session (was nothing).
+
+## 1. Over-block
+
+None — a UI change. Local sessions behave exactly as before (machineId only
+added when session.remote). 
+
+## 2. Under-block
+
+The client trusts the session.machineId it rendered from /sessions?scope=pool;
+a wrong value is re-checked server-side (transfer-staleness guard serves local
+if the session is actually local; otherwise the peer only streams its own
+sessions). No new client-side authority.
+
+## 3. Level-of-abstraction fit
+
+Pure presentation: clickability, machineId pass-through, honest state rendering.
+All gating/auth remains server-side (phases 2a/2b). Reuses the existing
+selectSession / wsSend / error-handler paths.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+No authority. The UI only surfaces server decisions honestly (the spec §2.4
+"never a lying state" requirement) and relays the user's intent with the
+machineId the server validates.
+
+## 5. Interactions
+
+- /ws message handler: the error case now renders new codes; unknown codes
+  still console.error (unchanged fallback).
+- Reconnect: resubscribe-on-open fixes a pre-existing gap (the terminal went
+  stale after a server restart even for LOCAL sessions) — an improvement for
+  both local and remote.
+- Backwards compatible: a server without phase 2a/2b ignores machineId and
+  serves local (or nothing), so the UI degrades gracefully.
+
+## 6. External surfaces
+
+dashboard/index.html only. No HTTP/WS/config/notification change.