instar 1.3.533 → 1.3.534

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.533",
+  "version": "1.3.534",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-13T18:27:49.685Z",
-  "instarVersion": "1.3.533",
+  "generatedAt": "2026-06-13T18:31:24.275Z",
+  "instarVersion": "1.3.534",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "e50121c8d8bffbb3440fe77a5f7acc212a684d1181143131c44db974c10d07ae",
+      "contentHash": "4d92fe68ea368764c5d14cc9020ce71deed8b5e407776443186ab2cdcd908d61",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1522,7 +1522,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "b2e47b07c5c16a31785d44f75077223fbd3954c4e9a49ecd3e6a63995e7d65ea",
+      "contentHash": "97c5a029357f46d71c531d0e519dd817e00a91f3129e6c7b01a96d94015e2c13",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "524fcbc2f95d4653889b3f0fe1bdb04a8b1d6c7b8a505ceed18c44c55b996463",
+      "contentHash": "4f6fb3e38e970ffe3c50834d258307fc6f7c51ef46760329198c969e5a71991d",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -455,6 +455,7 @@ Every guard (monitoring sentinels, reapers, the scheduler, …) is graded by wha
 **Model-Tier Escalation (EXPERIMENTAL — escalate the model for heavy work)** — A policy layer that can run my claude-code sessions on the ultra model (\`claude-fable-5\`) for the two heavy-work triggers — spec/project design (\`spec-converge\`) and implementation or long autonomous runs (\`build\`, \`autonomous\`, \`instar-dev\`) — and on the default tier (\`claude-opus-4-8\`) the rest of the time. EXPERIMENTAL and dark by default: \`models.tierEscalation\` in \`.instar/config.json\` ships \`enabled:false\` (and \`dryRun:true\`, which logs intended swaps without performing them). Frameworks with no escalated model configured (codex/gemini/pi) are never touched. Every escalation passes cost guards first (quota headroom, per-account concurrent-escalation cap, hourly budget, TTL + dwell hysteresis) and is audited.
 - Swap a session's tier (server-side authority — body carries a TIER ONLY, never a model id): \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/sessions/SESSION_NAME/model-swap -H 'Content-Type: application/json' -d '{"tier":"escalated"}'\` (\`"default"\` to de-escalate). Refuses protected/non-idle sessions; honors enabled/dryRun; 202 = swap sent but unconfirmed.
 - Proactive: user asks "what model are you running?" / "why are you on Fable/Opus?" → \`GET /sessions\` reports each session's live \`model\`; name the trigger that escalated it (or say escalation is disabled/dry-run on this agent). User says "stop using the expensive model" → set \`models.tierEscalation.enabled:false\` and restart sessions to apply.
+- **Escalation rides a moved topic (WS5.3 — multi-machine).** When a topic running on the escalated tier is moved between my machines via \`POST /pool/transfer\`, the live escalation no longer silently drops on the resumed session. The source carries the topic's escalation TRIGGER as an ephemeral hint and the DESTINATION re-admits the resumed session through ITS OWN \`EscalationGovernor\` cost guards (quota/budget/dwell/TTL) — a trigger carry, NEVER a free tier grant. If the destination's guards refuse (at its concurrent-escalation cap, no quota headroom) or the topic is pinned \`escalationOverride:'suppress'\`, the session runs default tier — the move degrades safely, never smuggles escalation across or strands a wall. Ships dark behind \`models.tierEscalation.ridesTopic\` (default false) under \`tierEscalation.enabled\`; single-machine installs are a no-op. Proactive: user asks "did my heavy-work session keep its bigger model after the move?" → it re-evaluates under the destination's guards; if it dropped to default, name the guard that refused (cap/quota/suppress).
 
 **Sleep/Wake telemetry** — The "why does my agent keep restarting / saying it's overloaded?" answer. My SleepWakeDetector spots real machine sleep via timer drift, but on a CPU-oversubscribed box (many concurrent sessions, load ≫ cores) the event loop starves and a timer fires seconds late — which *looks* identical to a brief sleep. The CPU-starvation guard tells them apart: a short drift under high load (\`loadavg[0]/cpuCount > maxLoadRatio\`) is suppressed instead of triggering expensive wake-recovery (tunnel restart, re-registration) that would pile on more load; a long drift is always honored as real sleep; an emit cooldown caps the recovery rate. So "overloaded" is about CPU, NOT memory — check load average, not RAM.
 - Read it: \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/monitoring/sleep-wake\` → \`{ wakeCount, totalSleepSeconds, longestSleepSeconds, suppressedCount, suppressedByReason: { 'cpu-starvation', cooldown }, lastSuppressedAt }\`. \`?sinceMs=<epoch>\` windows it. Read-only.

package/upgrades/1.3.534.md

@@ -0,0 +1,44 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The session reaper's shared guard (`ReapGuard`) had two halves that disagreed about a *stale* open commitment. The KILL decision (`evaluate()`) already treats a commitment as abandoned after 8h of topic silence and lets the idle session be reaped. But the RESUME-eligibility decision (`workEvidence()`) counted **any** open commitment as proof of interrupted work — with no staleness gate. So an idle session was killed (commitment stale ⇒ reap) and immediately revived (commitment exists ⇒ resume-eligible), in an endless loop.
+
+This patch applies the **same 8h staleness gate** to the resume-eligibility probe that the kill decision already uses, so the two halves agree: a stale commitment neither keeps a session alive nor revives it, and a fresh one keeps the session alive so it never needs reviving. Strictly safer — it can only ever revive *less*, never more. Genuine interrupted work (a live build, an active sub-agent, a pending injection, a running process) is untouched.
+
+When a topic running on the escalated (ultra Fable) tier is moved between my machines via `POST /pool/transfer`, the live escalation no longer silently drops on the resumed session.
+
+- **Source capture (`/pool/transfer`)** — when the moving topic has a LIVE session on this machine running on an escalated model id, and the topic is not pinned `escalationOverride:'suppress'`, the source files an ephemeral `EscalationHint` keyed by topic. A non-escalated / suppressed / default-tier topic files nothing.
+- **The carry (existing acquire pull)** — the hint rides the EXISTING authenticated `topic-profile-pull` acquire pull (no new verb, no broadcast, N-machine-safe). The serve handler PEEKS the source hint; the destination's apply-landing — AFTER the mandatory ownership recheck — drives the re-admit for the now-owned topic. The same-machine (target==self) path consumes the local hint at the resumed-session spawn.
+- **Destination re-admit (the safety invariant)** — re-admission is literally `ModelSwapService.swap(name,'escalated')`, which calls the destination's own `EscalationGovernor.admit()` — every cost guard intact (quota headroom, per-account concurrent-escalation cap, hourly budget, daily ultra-token cap, TTL, dwell/hysteresis). Admitted → swapped; refused (any guard) → left default; `suppress` consult → never escalated. The hint is a TRIGGER carry, never a tier grant: there is no second admit path, so escalation can never be smuggled across.
+- **Ephemeral, not a pin** — the hint lives in its own TTL-bounded (6h), consume-once file (`state/model-tier-escalation/rides-topic-hints.json`), never resolved into the durable topic profile.
+- **Dark** — the whole path is behind `models.tierEscalation.ridesTopic` (default false) under the existing `tierEscalation.enabled`. With escalation off (the fleet default), it is a strict no-op. Single-machine installs are a no-op.
+- **Awareness** — an "Escalation rides a moved topic" bullet extends the existing Model-Tier Escalation section in both `generateClaudeMd` (new agents) and an idempotent `migrateClaudeMd` additive-bullet patcher (existing agents).
+
+A precise per-trigger hint label (carrying the actual originating trigger rather than the generic transfer audit label) is DEFERRED as a tracked follow-up (CMT-1416): the live trigger that escalated a session is not durably recorded per-session today, and the destination governor re-evaluates from real state regardless, so the precise label is audit-nicety, not load-bearing.
+
+## What to Tell Your User
+
+Sessions that finished their work but still had an old, untouched promise on the books were being killed and revived over and over. That loop is fixed. You'll see fewer "🪦 your session was shut down — a restart is queued" notices on topics where nothing was actually unfinished. Promises still get followed up on by the commitment system — that part is unchanged.
+
+When you run me on more than one machine and move a heavy-work conversation from one to another, the bigger model it was using no longer silently disappears the moment the conversation resumes on the new machine. The new machine asks itself whether that conversation should be on the bigger model and re-runs its own cost checks first — quota, budget, anti-flapping, how many big-model sessions it is already running. Only if all of those pass does it put the resumed conversation back on the bigger model. If they do not, or if you pinned that topic to never escalate, it simply runs on the normal model. So the bigger-model state follows your moved conversation, but it is always re-priced against the machine it lands on, never smuggled across to dodge a budget. This ships off by default and does nothing at all on a single machine.
+
+## Summary of New Capabilities
+
+No new capability — this is a bugfix. It removes a spurious session kill→revive loop driven by stale (long-untouched) open commitments by aligning the reaper guard's resume-eligibility decision with its existing kill-decision staleness rule.
+
+`models.tierEscalation.ridesTopic` (default false) — when on (under `tierEscalation.enabled`), a topic moved via `POST /pool/transfer` while escalated carries its escalation trigger as an ephemeral hint, and the destination re-admits the resumed session through its own EscalationGovernor cost guards. New exported `EscalationHintStore` (the ephemeral per-topic hint carrier). No new HTTP route; rides the existing `/pool/transfer` + `topic-profile-pull` surfaces.
+
+## Evidence
+
+- Live `logs/reap-log.jsonl` (2026-06-13): **13** age-limit reaps with `midWork=true`, every one carrying solely `workEvidence=[open-commitment]`, across 6 topics — and corresponding repeated `reason=age-limit` respawn entries in the resume queue (several doubled per topic). The loop, captured.
+- Root cause confirmed in source: `ReapGuard.evaluate()` gates the open-commitment KEEP on `recentUserMessage(topicId, staleCommitmentWindowMs)`; `ReapGuard.workEvidence()` did not.
+- New regression tests in `tests/unit/work-evidence.test.ts`: a stale commitment emits no `open-commitment` evidence (and `isMidWork`→false); a fresh one still does; an explicit `evaluate()`/`workEvidence()` consistency assertion; and the `protectOpenCommitments:false` boundary. All 22 work-evidence + 19 reap-guard unit tests green; 164 related reap/resume tests green; `tsc --noEmit` clean.
+- Independent second-pass review (lifecycle change): **Concur** — confirmed the age-limit path uses the patched fallback, no legitimate revival is lost, downstream ResumeQueue / live-enqueue / boot-reconciliation re-enqueue (all `midWork`/`evidenceEligible`-gated) all behave correctly.
+
+- `tests/unit/escalation-hint-store.test.ts` — the EscalationHintStore lifecycle (file / peek-without-consume / consume-once / TTL expiry / suppress-clear / durable restart round-trip / corrupt-file = no-hint = safe / all() prune); the topic-profile pull serve-handler peek carry (the hint rides the existing pull, independent of the durable profile present/absent branch; omitted when unwired = back-compat); and THE NAMED SAFETY INVARIANT driven through ModelSwapService against a synthetic governor — a REFUSING governor yields default tier (never a bypass, the guard is always consulted), an ADMITTING governor swaps, a suppress consult refuses, an already-on-tier re-run is a no-op. Green.
+- `tests/integration/escalation-rides-topic.test.ts` — the cross-machine carry + re-admit end to end against a mock governor: a transfer payload carrying the hint + governor ALLOW → swapped; the SAME payload + governor REFUSE → default (the bypass invariant); a hint landing while the topic is owned ELSEWHERE never fires the re-admit (ownership recheck); no source hint → no re-admit. Green.
+- `tests/e2e/escalation-rides-topic-lifecycle.test.ts` — Phase-1 "feature is alive" on the production AgentServer init path: the EscalationHintStore is constructed and exposed via `getEscalationHintStore()`; with `tierEscalation.enabled` false the store is alive but inert (file/peek never throw, empty by default); `POST /pool/transfer` is alive and returns the honest dark 503 on a single-machine install (never 404/500). Green.