instar 1.3.492 → 1.3.494

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.492",
+  "version": "1.3.494",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-12T10:12:15.546Z",
-  "instarVersion": "1.3.492",
+  "generatedAt": "2026-06-12T20:01:24.742Z",
+  "instarVersion": "1.3.494",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ffa5c41356e696a7e32d76a85e4ee707edc6af1dbb68a7e32df501b111647254",
+      "contentHash": "0f5e4d269a386192c094f3eeaf9cd502a650f5851717ae57f0a02de9d9f9c533",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1530,7 +1530,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "c36dbda170c97d1f9fd91de0cc96e13561b8e1646c267387b1edf09a6debe3f6",
+      "contentHash": "5fd318e4fbd3ac98c2ecd1aa6356dadfcc86024dbc6f095025e20c486c5e05f3",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "5b08d65e094e2b821757ef8036ef82b04359df32314aff54e2787ddcf76c3788",
+      "contentHash": "1c15a13fe8e5ee084025291842f44c0e6aa97e991662ed91a93bf599c1a938b7",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/data/state-coherence-registry.json

@@ -1043,6 +1043,18 @@
         "state/guard-posture-episodes.json"
       ],
       "grandfathered": false
+    },
+    {
+      "category": "remote-close-audit",
+      "description": "Relaying machine's append-only record of every relayed session-close ORDER (REMOTE-SESSION-CLOSE-SPEC §2.3) - target machine, sessionUuid, observed outcome. The owner's reap-log is the authoritative record of the kill; this is the order-end manifest so a relayed kill sweep cannot be traceless on the relayer. Machine-local audit history, never authority.",
+      "scope": "machine-local",
+      "freshness": "live",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "logs/remote-close-audit.jsonl"
+      ],
+      "grandfathered": false
     }
   ]
 }

package/src/scaffold/templates.ts

@@ -490,6 +490,7 @@ Every guard (monitoring sentinels, reapers, the scheduler, …) is graded by wha
 - **Machine nicknames** are the user-facing handle (auto-assigned, editable). Rename: \`curl -X PATCH -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool/machines/MACHINE_ID -H 'Content-Type: application/json' -d '{"nickname":"the mini"}'\` (or inline on the Machines tab).
 - **Which machine + WHY (never guess):** \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/pool/placement?topic=N"\` → the owning machine + nickname, the **reason** (\`pinned\` = a deliberate move vs \`placed\` = load-balanced vs \`unowned\`), and the lease-holder. Answerable from ANY machine (a standby proxies to the holder, whose pin store is authoritative). Use this instead of inferring placement from a hostname — running ON a machine does NOT mean a topic was deliberately moved there.
 - **Reliable transfer (phrasing-independent):** \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/pool/transfer -H 'Content-Type: application/json' -d '{"topic":N,"to":"<nickname|machineId>"}'\` → runs the same validated planner as "move this to <nickname>" but deterministically (no NL recognition). 404 unknown machine · 409 rate-limited · 409 \`needsConfirmation\` for an offline target (re-send with \`"confirm":true\`). This is the lever to call directly when a natural-language move didn't catch.
+- **Remote close (any machine, from here):** close a session on ANY machine in the pool from this one — \`POST /sessions/<name>/remote-close\` with \`{"machineId":"<id>","sessionUuid":"<uuid>"}\` (Bearer). Same operator authority as the local close: it WILL close a protected session (the dashboard's confirm dialog is the safety, not a server-side refusal). Outcomes are honest — already-closed comes back calm, and a relay timeout reports outcome-UNKNOWN, never "closed" or "nothing happened". The order is audited on BOTH machines: the relayer appends to \`logs/remote-close-audit.jsonl\`; the owning machine's reap-log entry carries \`viaClaim\`.
 - **Proactive triggers:** when the user says "run this on <nickname>" / "move this to <nickname>" → that's a placement/transfer-by-nickname (a session moves to the named machine, resuming like a session restart). "where is this running / why?" → \`GET /pool/placement?topic=N\`. "move it reliably / it didn't move" → \`POST /pool/transfer\`. Deep mechanics: the Machines tab + \`docs/specs/MULTI-MACHINE-SESSION-POOL-SPEC.md\`.
 
 **Cross-Machine Secret Sync (drop once, usable everywhere)** — A secret you give me on one machine — a Telegram token, an API key, a GitHub PAT — becomes usable by me on your OTHER machines automatically. It's encrypted to each recipient machine's own X25519 key (never on disk in plaintext, only ever pushed to your registered paired machines), so you never re-enter a credential per machine. Ships DARK behind \`multiMachine.secretSync.enabled\` (default on for the dev agent).

package/upgrades/1.3.493.md

@@ -0,0 +1,33 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+Implements `docs/specs/REMOTE-SESSION-CLOSE-SPEC.md` (converged 3 iterations, operator-approved 2026-06-12, topic 13481 — "Why can't I close out a mac mini session from the dashboard like I can the laptop sessions?").
+
+- **`POST /sessions/:name/remote-close`** (Bearer, rate-limited): relays the operator's close to the owning machine. `machineId` is a registry LOOKUP KEY only (crafted/unknown ids → 404 with zero outbound traffic); the pool Bearer token only travels to a `lastKnownUrl` passing the shared `peerUrlGuard` https/allowlist; the relayed request is the peer's PLAIN UUID-targeted local DELETE (single-hop by construction — ghost-safe on peers carrying stale records); a NEW path so pre-feature servers 404 it cleanly (no mixed-version wrong-machine kill).
+- **Same authority as the local ×** (spec §2.0, stated honestly): an operator close bypasses the autonomous-cleanup guards by design — including protected sessions. The safety is INFORMED CONSENT: `GET /sessions` rows now carry an additive `protected: boolean`, and the dashboard confirm names the machine and flags protected sessions ("protection status unknown" for rows from pre-update machines). The local × gains the protected warning too.
+- **Delivery honesty**: peer-404 → calm "already closed — refreshing"; relay timeout → "outcome unknown" (the peer may be mid-kill), never "closed nothing"; non-JSON tunnel error pages (Cloudflare 502/530 HTML) normalized to a reasoned error.
+- **Dual-end trail**: the relayer appends every ORDER to `logs/remote-close-audit.jsonl` (new `RemoteCloseAudit`, state-coherence-registered); the owner's reap-log records `origin:'operator'` plus an additive UNTRUSTED `viaClaim:'remote-dashboard'` (a signal in the trail — a Tier-1 test pins that a forged claim cannot alter any authority decision).
+- **Agent awareness + migration parity**: CLAUDE.md template Multi-Machine bullet + content-sniffed `migrateClaudeMd()` migration; the stale `sessions` capability-classification reason refreshed.
+
+## What to Tell Your User
+
+- "You can now close any machine's session from the one dashboard — the confirm tells you which machine and warns about protected sessions, results are reported honestly, and every remote close is recorded on both machines."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Close a remote machine's session | Dashboard: × on any remote tile (confirm shows the machine) |
+| Agent API | `POST /sessions/<name>/remote-close` `{"machineId","sessionUuid"}` (Bearer) |
+| Order trail (relayer side) | `logs/remote-close-audit.jsonl` |
+| Kill trail (owner side) | reap-log rows now carry `viaClaim` for relayed closes |
+
+## Evidence
+
+- Tier-1+2: `tests/integration/remote-session-close.test.ts` (16 — zero-outbound machineId pins, no-token-on-url-rejected, single-hop assertion, forged-via pin, ghost-safe UUID targeting, calm/unknown outcome paths, protected flag).
+- Tier-3: `tests/e2e/remote-session-close-lifecycle.test.ts` (11 — feature-alive 404-not-503, full real-HTTP relay with both on-disk trails verified, wired source guards on the viaClaim plumb).
+- Side-effects artifact: `upgrades/side-effects/remote-session-close.md` (second-pass reviewed).