instar 1.3.434 → 1.3.436

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.434",
+  "version": "1.3.436",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-08T22:46:04.841Z",
-  "instarVersion": "1.3.434",
+  "generatedAt": "2026-06-09T01:17:57.115Z",
+  "instarVersion": "1.3.436",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "cde0ebbb56e26519e8d6bb35d78dca71eaebafa62c2b7c465145ba5f5c644bbb",
+      "contentHash": "f7a6d8ea166aafc80e139f67b814deb0961fd0197db74bc5fd229aef3536e3c1",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1506,7 +1506,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "e07f73675b7bafbe48a0392568e9582a697ef9836691e5483add48393a3bc7cc",
+      "contentHash": "9a67d059090c2fdd1e2a3ca7355ea66099ed6b321eac6d7820c152a6ea81b220",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.435.md

@@ -0,0 +1,26 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The feedback-migration **cutover-readiness parity pass** can now actually complete. `HttpParitySource` gained an opt-in `clustersOnly` mode; the parity-pass closure in `AgentServer` (`runParityCheck`) sets it.
+
+Previously the parity pass paginated Portal's entire ~145K-row feedback table just to collect clusters — but Portal returns the **complete** cluster set in every page's `data.clusters` (verified live: offsets 0/70k/143k and even `limit=1` all return all 1,370 clusters). On the contended server that full grind couldn't finish inside the single-flight max-hold budget, so the parity pass failed every ~20 minutes for hours (`exceeded the max-hold budget (720000ms)`, #948) and the cutover door's parity window went permanently stale. With `clustersOnly`, the parity pass stops after page 0 — one ~1-second request instead of 146 — and refreshes the window.
+
+`captureRaw` (the import rehearsal, which genuinely needs every feedback row) explicitly overrides `clustersOnly`, so that path is unchanged.
+
+## What to Tell Your User
+
+Internal migration infrastructure — nothing to configure. This unblocks the cutover-readiness parity check (it was timing out on a needless full-table fetch) so the parity gate can go green ahead of the operator-gated cutover.
+
+## Summary of New Capabilities
+
+| Capability | How to use |
+|-----------|-----------|
+| Fetch only the cluster snapshot (skip the full feedback pagination) | `new HttpParitySource({ ..., clustersOnly: true })` — stops after page 0; `captureRaw` overrides it |
+
+## Evidence
+
+Unit tests: `tests/unit/feedback-factory/http-parity-source.test.ts` — 22/22 green, incl. 2 new (`clustersOnly` stops after a FULL page 0; `captureRaw` overrides `clustersOnly` so the import path still paginates). `tsc --noEmit` clean. Empirically grounded against the live Portal endpoint (all 1,370 clusters returned per page at offsets 0/70k/143k and at `limit=1`). Earned from topic 12476 (feedback-process migration, Phase-2/cutover-readiness; #948 server-side fetch root).

package/upgrades/1.3.436.md

@@ -0,0 +1,19 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+Adds a new read-only endpoint `GET /subscription-pool/in-use` and a Subscriptions-dashboard indicator that shows which pool account the agent is **currently running on** — distinct from the per-account `status: active`, which only means "healthy/usable." New `InUseAccountResolver` answers this authoritatively by probing `claude auth status` (the active-account surface the client itself uses) and matching its email to a pool account; the result is cached (60s TTL) with concurrent-probe coalescing and degrades to "unknown" rather than throwing. The dashboard fetches `/in-use` best-effort (its failure cannot blank the accounts list) and renders an "● In use now" badge plus a highlighted card on the active account. Wired as a single shared resolver instance through the server so the cache is honored. Read-only and additive: no change to session launch, account selection, or any mutation path; a zero-account pool answers `{ enabled:false }`.
+
+## What to Tell Your User
+
+Your Subscriptions dashboard now shows, at a glance, which of your accounts the agent is actually using right now — marked with a green "In use now" badge and outline. Before, every account just said "Active," which only meant it was healthy, not that it was the one in use. Now you can tell them apart. This is read-only — it just reports which account is live; it doesn't change anything about how the agent picks accounts.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| See which account the agent is running on | Subscriptions dashboard tab — "● In use now" badge |
+| Query the active account | GET /subscription-pool/in-use |

package/upgrades/eli16/parity-clusters-only-fastpath.md

@@ -0,0 +1,21 @@
+# ELI16 — Parity-pass clusters-only fast path (#948 fix)
+
+## The problem in plain terms
+
+Before an agent's feedback processing can be "cut over" from Dawn's Portal to Echo, the system runs a safety check called the **parity pass**: it compares Echo's view of the feedback *clusters* against Portal's, over an "invariant" (the fingerprint that identifies each cluster). When that check runs clean for a while, one of the two gates on the cutover door turns green.
+
+That parity pass was **failing every 20 minutes, for hours**. The error always said the same thing: the data fetch "exceeded the max-hold budget (720000ms)" — i.e. it couldn't finish within its 12-minute safety window, so it gave up and recorded nothing. The cutover door's parity gate therefore went, and stayed, stale.
+
+## Why it was failing — and why that was silly
+
+To get Portal's clusters, the fetcher (`HttpParitySource.prepare()`) was paginating through Portal's **entire 145,000-row feedback table** — about 146 pages — because its stop signal is "keep going until a page returns fewer feedback rows than asked." On the busy server, all that page-fetching-and-JSON-parsing competes with everything else the server is doing, and the whole thing stretches past 12 minutes and aborts.
+
+The silly part: **Portal returns the COMPLETE set of clusters (all 1,370 of them) in EVERY single page** — even a `limit=1` request hands back all 1,370 clusters. (Verified empirically against the live endpoint at offsets 0, 70k, and 143k, and at limit=1.) So after the very first page, the fetcher already has every cluster it will ever see. Grinding the other 145 pages of feedback adds nothing to the cluster snapshot — it's pure, budget-burning waste.
+
+## The fix
+
+Add an opt-in `clustersOnly` flag to `HttpParitySource`. When set, `prepare()` stops right after page 0 (it already has all the clusters). Wire the parity-pass closure in `AgentServer` to pass `clustersOnly: true`. Result: the parity pass now does **one ~1-second request** instead of 146, finishes far inside its budget, and the parity window can actually refresh — turning the cutover door's parity gate green and ending the every-20-minute lock-holding failure loop.
+
+## Why it's safe
+
+The flag is **opt-in and narrow**. The import rehearsal (the other caller) genuinely needs every feedback row, so it sets `captureRaw` — and `captureRaw` explicitly **overrides** `clustersOnly`, leaving the import path byte-for-byte unchanged. Nothing else reads the flag. The parity comparison itself is unchanged: it only ever used the clusters (invariant-1 fingerprint), which the fast path still delivers in full. Covered by two new unit tests (stops-after-full-page-0; captureRaw-overrides) on top of the existing pagination suite, all green.

package/upgrades/side-effects/parity-clusters-only-fastpath.md

@@ -0,0 +1,36 @@
+# Side-Effects Review — Parity-pass clusters-only fast path (#948 fix)
+
+**Slug:** `parity-clusters-only-fastpath`
+**Date:** `2026-06-08`
+**Author:** `echo`
+**Tier:** 1 (below risk floor — AgentServer is a fleet/server surface; declared Tier-1 because the change is a single additive opt-in field + one early-loop break, fail-safe, no behavior change to any existing path, fully unit-covered)
+
+## Summary of the change
+
+`HttpParitySource` gains an opt-in `clustersOnly?: boolean`. When set (and `captureRaw` is NOT), `prepare()` stops after page 0 — Portal returns the COMPLETE cluster set on every page (verified live: offsets 0/70k/143k and `limit=1` all return all 1,370 clusters), so paginating the full 145K-row feedback table to collect clusters is wasted work that blows the single-flight max-hold budget (#948). `AgentServer`'s `runParityCheck` closure now passes `clustersOnly: true`. Two new unit tests added.
+
+## Decision-point inventory
+
+1. **`clustersOnly` set AND `captureRaw` set?** → `captureRaw` wins; full pagination (the import rehearsal needs every feedback row). Guarded by `if (this.config.clustersOnly && !this.config.captureRaw) break;` and asserted by the "captureRaw overrides" test.
+2. **`clustersOnly` set, `captureRaw` not?** → break after page 0; snapshot = page-0 clusters (= all clusters).
+3. **`clustersOnly` unset (default)?** → unchanged behavior; existing pagination + stop-signal intact.
+
+## Over-block
+
+Nothing legitimate is rejected. The flag only short-circuits a fetch loop after it already holds the complete cluster set; it changes neither the parity comparison nor any error path. A caller that wrongly set `clustersOnly` on a path needing feedback would get an empty feedback snapshot — but the only caller that sets it (parity-pass) never reads feedback, and `captureRaw` callers are explicitly exempt.
+
+## Under-block
+
+The fast path trusts Portal's documented + empirically-verified contract that all clusters arrive on every page. If Portal ever changed to page clusters across requests, `clustersOnly` would under-collect. Mitigation: it's verified live today, the comparison surfaces any missing cluster as a divergence (fail-loud, not silent), and reverting is a one-line flag removal.
+
+## Level-of-abstraction fit
+
+Right layer: the option lives on the fetch adapter that already owns pagination; the call-site decision (parity needs clusters only) lives in the `AgentServer` closure that already constructs the source. No new module, no new machinery.
+
+## Blast radius
+
+Tiny. New optional field defaulting to off → every existing construction is unaffected (import rehearsal, tests, any other reader). Ships in dist; no migration. Reversible by dropping the flag at the one call site or the field.
+
+## Failure mode
+
+Fail-safe. If the flag misbehaved, the worst case is the parity-pass seeing fewer clusters → a divergence is reported (loud), never a false "clean pass." It cannot fabricate a green parity window. The import/integrity path is wholly untouched.

package/upgrades/side-effects/subscription-inuse-account.md

@@ -0,0 +1,26 @@
+# Side-effects review — subscription-pool "in-use account" dashboard surface
+
+## What changed
+- New `src/core/InUseAccountResolver.ts`: resolves which pool account the agent is CURRENTLY running on, by probing `claude auth status` (the authoritative active-account surface) and matching its email to a pool account. Read-only; probe + clock injected; result cached (TTL 60s) with concurrent-probe coalescing.
+- `src/server/routes.ts`: new `GET /subscription-pool/in-use` → `{ enabled, activeAccountId, activeEmail }`. Registered before `/subscription-pool/:id` (literal beats param). Lazy-constructs a resolver if none on ctx; never 500s/503s.
+- `src/server/AgentServer.ts` + `src/commands/server.ts`: wire a single shared resolver instance through the ctor → RouteContext (so the cache is honored).
+- `dashboard/subscriptions.js`: controller fetches `/in-use` (best-effort, its failure can't blank the accounts list) and badges the in-use account card. `renderAccounts` gained an OPTIONAL trailing `inUseAccountId` param (backward compatible — existing callers/tests unaffected).
+- `dashboard/index.html`: CSS for the in-use badge + card highlight.
+
+## Blast radius
+- Purely ADDITIVE + READ-ONLY. No change to session launch, account selection, swapping, or any mutation path. A pool of zero accounts → route answers `{ enabled:false }`; single-account agents unaffected.
+- The only new side effect is spawning `claude auth status` (read-only, 15s timeout, maxBuffer bounded) at most once per 60s when the dashboard `/in-use` route is hit. If `claude` is missing or errors, the resolver degrades to `activeAccountId:null` (no badge) — never throws, never blocks.
+
+## Framework generality
+- Does NOT touch the session launch/inject abstraction (frameworkSessionLaunch / MessageDelivery). The resolver is claude-code-specific by design (it answers "which Claude account"), and `matchAccountByEmail` filters to anthropic/claude-code accounts, so a codex/gemini account can never be mis-reported as the active Claude login.
+
+## Honest scope note
+- This is the DISPLAY half of the request ("show which account is in use"). It reflects reality: normal sessions run on the default config, which this resolves authoritatively. The DETERMINISM half (pinning sessions to an explicit pool account so the default is never ambiguous) touches the critical session-launch path and is intentionally a separate, carefully-reviewed change — not bundled here. <!-- tracked: CMT-1185 -->
+
+## Migration parity
+- No agent-installed files change (no settings.json, config defaults, CLAUDE.md template, hooks, or skills). New route + dashboard asset ship with the package; existing agents get them on update. No `PostUpdateMigrator` entry needed.
+
+## Tests
+- Unit: `in-use-account-resolver.test.ts` (matcher both sides, resolve, cache TTL, coalescing, failure-degradation); `subscriptions-render.test.ts` (in-use badge present/absent).
+- Integration: `subscription-inuse-route.test.ts` (HTTP route: match / no-match / dark / does-not-shadow-`:id`).
+- E2E: `subscription-inuse-lifecycle.test.ts` (feature-alive: 200 in dark + live).