instar 1.3.486 → 1.3.488

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-11T22:43:05.837Z",
-  "instarVersion": "1.3.486",
+  "generatedAt": "2026-06-12T04:35:58.435Z",
+  "instarVersion": "1.3.488",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "3aa1f43fd6aec2dba257b59301b3b6b7e5dc214d7a1bb14f30ff9560f1644c63",
+      "contentHash": "5ec77634db273a40d1d6df1e48f050205570f7adf07100e39ce0ccdb087cc73e",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "170d09fc2df979e6ce495f6e3ff092e5bfbd5e54623ef16d421446d534416b4c",
+      "contentHash": "af0b83a1a094d4b9bdad1786490626f9d0c7d8152e2dced208bb6b6562c0a9c1",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -727,9 +727,10 @@ This routes feedback to the Instar maintainers automatically. Valid types: \`bug
 
 **Per-Feature LLM Metrics & LLM Activity (Observable Intelligence)** — Audit what each of your LLM-driven gates/sentinels actually does: WHICH provider + model ran it, how often it ACTED (fired) vs found nothing (noop), how often it was skipped to save rate limits (shed), cost, and latency. This is the *Observable Intelligence* standard — no autonomous AI action the system takes is allowed to be invisible. Read-only observability — it never gates anything.
 - Check: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/metrics/features?sinceHours=24"\`
-- Returns \`{ totals, features: [{ feature, frameworks, models, calls, realCalls, tokensIn, tokensOut, fired, noop, shed, fireRate, p50LatencyMs, p95LatencyMs, ... }] }\` — one row per system (e.g. MessagingToneGate, MessageSentinel). \`frameworks\`/\`models\` = which provider(s) actually served the call; \`fireRate\` = how often it acts; \`shed\` = skipped by the rate-limit guard. Filter with \`?feature=<name>\`.
+- Returns \`{ totals, features: [{ feature, frameworks, models, byModel, calls, realCalls, tokensIn, tokensOut, tokensCached, fired, noop, shed, fireRate, p50LatencyMs, p95LatencyMs, ... }] }\` — one row per system (e.g. MessagingToneGate, MessageSentinel). \`frameworks\`/\`models\` = which provider(s) actually served the call; \`fireRate\` = how often it acts; \`shed\` = skipped by the rate-limit guard. Filter with \`?feature=<name>\`.
+- **Per-model token breakdown (Token-Audit Completeness):** each feature row carries \`byModel\` (feature×model×framework token split incl. \`tokensCached\`, the cache-read subset of \`tokensIn\`); \`totals.byModel\` is the cross-feature aggregate. \`totals.usageCoverage\` reports, per framework, the share of successful calls that recorded REAL token usage — 0 coverage on a non-exempt framework is the drift alarm, not noise (codex reports per-call tokens via exec --json; gemini-cli is the documented exemption). \`totals.unlabeledTokenShare\` + \`totals.unlabeledCallShare\` track unattributed spend (baseline zero, lint-ratcheted).
 - **Dashboard:** the **LLM Activity** tab renders all of this in plain language over a 24h / 7d / 30d window — point the user there rather than pasting curl output.
-- **When to use** (PROACTIVE): "which provider is this sentinel running on?" / "are the sentinels actually doing real work or just being skipped?" / "which checks cost the most or fire the least?" / before tuning a sentinel or gate → read the numbers (\`frameworks\`/\`models\` for provider, \`fireRate\` for effectiveness, \`shed\` for skip rate) instead of guessing. Bounded retention (~30 days; tune \`monitoring.featureMetrics.retentionDays\`). (Specs: \`docs/specs/observable-intelligence.md\`, \`docs/specs/llm-feature-metrics-spec.md\`.)
+- **When to use** (PROACTIVE): "which provider is this sentinel running on?" / "how many tokens did feature X spend, on which model?" / "are we audit-blind anywhere?" / "are the sentinels actually doing real work or just being skipped?" / before tuning a sentinel or gate → read the numbers (\`byModel\` for cost-per-model, \`usageCoverage\` for audit-blindness, \`fireRate\` for effectiveness, \`shed\` for skip rate) instead of guessing. Bounded retention (~30 days; tune \`monitoring.featureMetrics.retentionDays\`). (Specs: \`docs/specs/observable-intelligence.md\`, \`docs/specs/llm-feature-metrics-spec.md\`, \`docs/specs/token-audit-completeness.md\`.)
 
 **Resource Usage (CPU + memory + rate-limit events)** — Durable per-agent record of what you actually consume, mirroring the TokenLedger. Read-only observability — it never gates. Two parts:
 - **CPU + memory** (Phase B): your server process and every running session are sampled continuously for CPU% and memory (RSS). Check current + windowed (avg/peak) usage, broken down per source plus an aggregate: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/resources/summary?sinceHours=1"\` → \`{ sampleCount, sources: [{ source, currentCpuPercent, currentRssBytes, avgCpuPercent, peakCpuPercent, peakRssBytes, ... }] }\` (\`source\` is \`agent-server\`, \`session:<id>\`, or \`aggregate\`). Recent raw samples: \`GET /resources/samples?sinceHours=1&source=aggregate&limit=20\`. The dashboard "Resource Usage" tab renders all of this in plain language.

package/upgrades/1.3.487.md

@@ -0,0 +1,39 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+Implements `docs/specs/token-audit-completeness.md` (converged r6, operator-ratified: *"full token auditability — per feature AND per model — is a requirement for any feature"*). Closes the four holes in the existing `/metrics/features` funnel:
+
+- **Codex calls report real tokens.** `CodexCliIntelligenceProvider` now runs `codex exec --json` through a new streaming spawn helper (`spawnCodexExecJson` in `codexSpawn.ts`): per-call `tokensIn/tokensOut/tokensCached` are parsed line-wise from the event stream (top-level `JSON.parse` + shape validation — model content can never inject counts), while the ANSWER comes only from the `--output-last-message` file (events are signal, the file is authority). The prompt moves off argv to stdin (not `ps`-visible; no ARG_MAX ceiling). Kill-switch: `intelligence.codexExecJson: false` (30s TTL, no restart) or `INSTAR_CODEX_EXEC_JSON=0` restores the previous invocation byte-for-byte. (Note: the legacy path it restores passes the prompt on argv and embeds it in execFile error messages — a pre-existing disclosure channel the json path closes; flipping the switch re-opens it along with token-blindness.)
+- **Failed calls keep their burned cost.** The funnel's error path now records whatever usage the provider parsed before failing — including a timeout-killed call's final post-SIGTERM token count (settlement ordering pinned by tests). Flaky features can no longer look cheap.
+- **Per-model breakdown.** `/metrics/features` gains `byModel` per feature + `totals.byModel` (feature×model×framework, incl. `tokensCached` — the cache-read subset of `tokensIn`), `totals.usageCoverage` (per-framework share of successful calls with real usage; success-only denominator; gemini documented-exempt, interactive-pool excluded, pi/codex NOT exempt), and `totals.unlabeledTokenShare` + `totals.unlabeledCallShare` — all from ONE composite GROUP BY (net-zero extra window scans).
+- **Attribution is structure, not willpower.** All 8 previously-untagged funnel callsites are tagged + registered in `componentCategories.ts`; new lint `scripts/lint-llm-attribution.js` (in the `npm run lint` chain) fails CI on any untagged LLM callsite, with an EMPTY violations allowlist pinned by a ratchet test (3 lists pinned: allowlist, FUNNEL_FILES, wiring exclusions). Runtime backstop: a once-per-process `unlabeled-llm-call` degradation event.
+- **Drift tripwires.** A successful codex `--json` call recording zero usage emits `codex-usage-parse-drift` (fixed constant, once per process); a live integration canary runs ONE real codex call and FAILS on success-with-zero-usage (named-skip on environmental trouble only). `usageCoverage` is the durable surface.
+- **Audit-log rotation.** Per-call SafeFs deletions make `destructive-ops.jsonl` hot-path; `appendAuditEntry` now rotates at 16 MB (rename → `.1`, re-stat-before-rename race guard, rotation-marker first entry so a shrunken log is never mysterious).
+- **Constitution:** new Shipping standard *"Token-Audit Completeness — An Unmetered LLM Call Is an Unaccountable One"* (`docs/STANDARDS-REGISTRY.md`), ratified by operator directive (topic 22726, 2026-06-10). The cartographer freshness sweep's enablement precondition now exists; the sweep itself stays OFF (unchanged posture).
+
+## What to Tell Your User
+
+- "You can now see exactly how many tokens every one of my internal AI features spends — broken down by feature AND by model, including my codex-routed calls, which used to report zero. Ask me 'how much did X spend?' or check the LLM Activity tab."
+- "If token counting ever silently breaks (say a codex update changes its output), I'll know — there's a coverage number that drops and a tripwire that fires, instead of quiet blindness."
+- "Failed calls now count their cost too, so a flaky feature can't hide what it burns."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Per-call codex token usage | Automatic on every codex-routed internal call (`codex exec --json`) |
+| Feature×model token breakdown | `GET /metrics/features` → `features[].byModel`, `totals.byModel` |
+| Usage-coverage drift surface | `GET /metrics/features` → `totals.usageCoverage` (per framework) |
+| Unlabeled-spend shares | `totals.unlabeledTokenShare` / `totals.unlabeledCallShare` (baseline 0) |
+| Attribution lint + ratchet | Automatic in `npm run lint` / pre-commit; empty-baseline allowlist |
+| Codex exec-json kill-switch | `intelligence.codexExecJson: false` or `INSTAR_CODEX_EXEC_JSON=0` |
+
+## Evidence
+
+- 92 new unit tests across 8 files (parser, spawn mechanics incl. real-child EPIPE/stderr-drain/held-fd fixtures, out-dir lifecycle + sweep brakes, kill-switch resolution, funnel error rows end-to-end, byFeatureModel/coverage/shares, audit rotation, lint self-test + 3-list ratchet, provider usage-contract, drift once-per-process) — all green; full unit + integration + e2e suites green; `tsc` + full lint chain clean.
+- **Live canary validated against the real codex CLI on the dev machine:** one real `codex exec --json` call completed and recorded usage end-to-end through the new path.
+- Independent second-pass review of the side-effects artifact (`upgrades/side-effects/token-audit-completeness.md`) + security and spec-conformance review agents.

package/upgrades/1.3.488.md

@@ -0,0 +1,27 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Fixes the registry leak that made the dashboard show N "duplicate sessions" that were really one terminal plus N−1 stale bookkeeping records (2026-06-11 Mac Mini: 5 `running` records all pointing at the single tmux session `echo-resource-limitation-mitigation`, leaked one-per-respawn during the June crisis).
+
+`StateManager.saveSession` — the single funnel every spawn/update callsite passes through — now enforces *one live record per tmux session name*: a record registering as `running`/`starting` supersedes any OTHER record still marked live for the same `tmuxSession` (closed as `completed` with `endedReason: 'superseded'` + new additive `Session.supersededBy` field naming the replacement). Ghosts close through `saveSession` itself, so the coherence journal records each transition. Best-effort + fail-open: hygiene can never block the live registration. Per-machine registries only — a tmux name legitimately reused on another machine collides with nothing. Existing on-disk ghosts self-heal on each name's next respawn.
+
+## What to Tell Your User
+
+- "The dashboard no longer shows duplicate copies of one session — each real terminal appears exactly once. Leftover duplicates from old restarts clean themselves up the next time that session restarts."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| One dashboard entry per real terminal | Automatic — no settings, no migration |
+| Ghost forensics | A superseded record carries `supersededBy` (the replacing record's id) + `endedReason: 'superseded'` |
+
+## Evidence
+
+- 6 new unit tests (3 behavior — proven failing on the unfixed code first, including the exact 5-ghost Mac Mini shape — + 3 no-op guards: same-id re-saves, distinct names, terminal saves). One existing fixture updated (it unknowingly relied on two running records sharing one tmux name — the bug shape itself).
+- StateManager test family (7 files, 96 tests) green; full unit suite green; `pnpm build` clean.
+- Independent second-pass review (session-lifecycle adjacency) appended to the side-effects artifact.