instar 1.3.531 → 1.3.533

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.531",
+  "version": "1.3.533",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-13T17:06:31.521Z",
-  "instarVersion": "1.3.531",
+  "generatedAt": "2026-06-13T18:27:49.685Z",
+  "instarVersion": "1.3.533",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "b1c400b233d2c98d6f7fee08efe1a3d2d80f64cc87b3028242bd702555d02549",
+      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "79fcb088361a80eb71fb4276a70252666e74e934e94f261e2bc039dea9760e10",
+      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -760,6 +760,7 @@ Every guard (monitoring sentinels, reapers, the scheduler, …) is graded by wha
 
 **Subscription Pool (multi-account quota + auto-swap + enrollment)** — Hold ALL of your subscriptions for a provider (e.g. several Claude logins) and use them as one pool: I read each account's live quota, drain each before its reset, and when a session hits an account's limit I resume it on another account instead of letting it die. The registry stores each account's login LOCATION (its config home), NEVER a token.
 - See the pool + each account's live quota: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/subscription-pool\` · one account's quota + burn: \`GET /subscription-pool/:id/quota\` · poll all now: \`POST /subscription-pool/poll\`.
+- **Quota across ALL my machines** (pool-scope read) — \`GET /subscription-pool?scope=pool\` fans out to every ONLINE peer's plain pool, tags each account with the machine holding it (\`machineId\`/\`machineNickname\`/\`remote:true\`), and merges into ONE dark-peer-tolerant object \`{ enabled, accounts:[...], pool:{ selfMachineId, peersQueried, peersOk, failed }, scope:'pool' }\`. A down/slow/unauth peer is a classified \`pool.failed\` row (normalized reason — never a peer URL or token), never a silent omission and never a 500. Per-machine seat is meaningful, so the SAME account on two machines stays individually visible (never coalesced). Single-machine → the plain self-only view tagged \`scope:'pool'\`. Use this when the operator asks "how much quota is left across ALL my machines?".
 - **Continuity guarantee** — a long session that hits its account's quota resumes on another eligible account (conversation preserved via \`--resume\`), never dies. Manual lever: \`POST /subscription-pool/swap\` \`{"sessionName":"...","exhaustedAccountId":"..."}\`. Auto-swap on rate-limit ships OFF (opt-in via \`subscriptionPool.autoSwapOnRateLimit\` — it moves a live session, real authority).
 - **Pre-limit (proactive) swap** — beyond the reactive swap above, I can move a session OFF an account BEFORE it walls, at a lag-aware measured threshold (default 80% — the polled reading trails real usage, so the swap completes with margin). It also covers the UNTAGGED interactive session (resolves its account from the default login), so the session you talk to doesn't wedge at the wall. Opt-in via \`subscriptionPool.proactiveSwap.enabled\` (same authority as auto-swap, earlier trigger). Status: \`GET /subscription-pool/proactive-swap\`; run a pass now: \`POST /subscription-pool/proactive-swap/check\`.
 - **Enroll a new account from your phone** — \`POST /subscription-pool/enroll\` \`{"id","label","provider","framework","configHome"}\` starts a login and returns a public code/URL (never a token); \`GET /subscription-pool/pending-logins\` is the surface; expired codes are auto-reissued. Mark done with \`POST /subscription-pool/enroll/:id/complete\`.

package/upgrades/1.3.532.md

@@ -0,0 +1,30 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+`GET /subscription-pool?scope=pool` is a new read-side branch that gives the operator ONE view of "how much quota is left across ALL my machines and accounts" — not just the machine they happened to ask. It mirrors the already-shipped WS4.1 sessions pool fan-out (`GET /sessions?scope=pool`) line-for-line.
+
+- **The fan-out** — when `scope=pool`, the handler fans out over `ctx.resolvePeerUrls()` (online mesh peers, authenticated URLs), fetching each peer's PLAIN `/subscription-pool` (never `scope=pool` — no recursion), carrying THIS machine's Bearer, with a 5-second timeout each. Each remote account is tagged with the machine that holds it (`machineId` / `machineNickname` / `remote: true`); self accounts are tagged `remote: false`.
+- **Tolerant by design** — a down / slow / unauthorized peer becomes a classified `pool.failed` row with a NORMALIZED reason (`timeout` / `unreachable` / `unauthorized` / `error`) — never a raw error, peer URL, or token; never a silent omission; never a 500. The new peer-fetch catch is tagged `@silent-fallback-ok` (the degrade is reported up-stack, not swallowed).
+- **Per-machine seat preserved** — the SAME account on two machines stays individually visible (NOT coalesced); a per-machine seat is quota-meaningful.
+- **Strict no-op superset** — single-machine / no peers → the self-only view tagged `scope: 'pool'` with empty `pool.failed`. The plain `GET /subscription-pool` (no `scope`) is byte-for-byte unchanged.
+- **Awareness** — a "Quota across ALL my machines" bullet added to the Subscription Pool section in both `generateClaudeMd` (new agents) and an idempotent `migrateClaudeMd` patcher (existing agents).
+
+The placement tie-breaker (prefer the machine with more account-pool headroom on an otherwise-equal tie) is DEFERRED as a tracked follow-up (CMT-1416): it needs account-pool aggregate headroom carried in the capacity heartbeat, which `MachineCapacity` does not have yet. This slice ships the read alone.
+
+## What to Tell Your User
+
+When you run me on more than one machine, you can now ask me how much subscription quota is left across ALL of them at once, instead of one machine at a time. Each account shows which machine holds it, and a machine that is asleep or unreachable shows up honestly as a named failed entry rather than silently vanishing, so you can always tell "that machine has no accounts" apart from "that machine is dark right now." A machine that is dark is never mistaken for a machine with nothing. If you run me on a single machine, nothing changes.
+
+## Summary of New Capabilities
+
+`GET /subscription-pool?scope=pool` — pool-wide quota visibility: fans out to every online peer's plain pool, tags each account by machine, merges into one dark-peer-tolerant object (`{ enabled, accounts, pool: { selfMachineId, peersQueried, peersOk, failed }, scope: 'pool' }`). No new exported symbol; no new config flag.
+
+## Evidence
+
+- `tests/unit/subscription-pool-scope.test.ts` — merge/tag/classify on synthetic peers: self `remote:false` + remote `remote:true` with machine identity; per-reason `pool.failed` classification (401→unauthorized, 5xx→error, Timeout/Abort→timeout, other→unreachable); credential/URL-leak lens (an IP:port + the local token in the raw error never surface); same-account-on-two-machines kept individually visible; no-recursion lens (the peer fetch targets the PLAIN route, one call per peer); auth-boundary lens (the outbound Bearer is the self token, never a caller-supplied one); single-machine + unwired-pool no-op supersets. Green.
+- `tests/integration/subscription-pool-scope.test.ts` — over a REAL peer routes app + a REAL 401-enforcing peer + a dead port: object shape, every peer accounted for in `pool.failed`, an unauth peer's accounts never leaked, the plain route stays the back-compat shape. Green.
+- `tests/e2e/subscription-pool-scope-lifecycle.test.ts` — Phase-1 "feature is alive" on the production AgentServer init path: plain route stays a back-compat object; `scope=pool` answers 200 with the envelope + empty failed on a single-machine install (never 503); both require Bearer auth. Green.

package/upgrades/1.3.533.md

@@ -0,0 +1,25 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The session reaper's shared guard (`ReapGuard`) had two halves that disagreed about a *stale* open commitment. The KILL decision (`evaluate()`) already treats a commitment as abandoned after 8h of topic silence and lets the idle session be reaped. But the RESUME-eligibility decision (`workEvidence()`) counted **any** open commitment as proof of interrupted work — with no staleness gate. So an idle session was killed (commitment stale ⇒ reap) and immediately revived (commitment exists ⇒ resume-eligible), in an endless loop.
+
+This patch applies the **same 8h staleness gate** to the resume-eligibility probe that the kill decision already uses, so the two halves agree: a stale commitment neither keeps a session alive nor revives it, and a fresh one keeps the session alive so it never needs reviving. Strictly safer — it can only ever revive *less*, never more. Genuine interrupted work (a live build, an active sub-agent, a pending injection, a running process) is untouched.
+
+## What to Tell Your User
+
+Sessions that finished their work but still had an old, untouched promise on the books were being killed and revived over and over. That loop is fixed. You'll see fewer "🪦 your session was shut down — a restart is queued" notices on topics where nothing was actually unfinished. Promises still get followed up on by the commitment system — that part is unchanged.
+
+## Summary of New Capabilities
+
+No new capability — this is a bugfix. It removes a spurious session kill→revive loop driven by stale (long-untouched) open commitments by aligning the reaper guard's resume-eligibility decision with its existing kill-decision staleness rule.
+
+## Evidence
+
+- Live `logs/reap-log.jsonl` (2026-06-13): **13** age-limit reaps with `midWork=true`, every one carrying solely `workEvidence=[open-commitment]`, across 6 topics — and corresponding repeated `reason=age-limit` respawn entries in the resume queue (several doubled per topic). The loop, captured.
+- Root cause confirmed in source: `ReapGuard.evaluate()` gates the open-commitment KEEP on `recentUserMessage(topicId, staleCommitmentWindowMs)`; `ReapGuard.workEvidence()` did not.
+- New regression tests in `tests/unit/work-evidence.test.ts`: a stale commitment emits no `open-commitment` evidence (and `isMidWork`→false); a fresh one still does; an explicit `evaluate()`/`workEvidence()` consistency assertion; and the `protectOpenCommitments:false` boundary. All 22 work-evidence + 19 reap-guard unit tests green; 164 related reap/resume tests green; `tsc --noEmit` clean.
+- Independent second-pass review (lifecycle change): **Concur** — confirmed the age-limit path uses the patched fallback, no legitimate revival is lost, downstream ResumeQueue / live-enqueue / boot-reconciliation re-enqueue (all `midWork`/`evidenceEligible`-gated) all behave correctly.