instar 1.3.538 → 1.3.539

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.538",
+  "version": "1.3.539",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-13T20:08:21.445Z",
-  "instarVersion": "1.3.538",
+  "generatedAt": "2026-06-13T20:40:05.218Z",
+  "instarVersion": "1.3.539",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "f74833db7b0f1aa8bb9af7e23a789462915024158adbadaceb1c06e891b447dd",
+      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1522,7 +1522,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "97c5a029357f46d71c531d0e519dd817e00a91f3129e6c7b01a96d94015e2c13",
+      "contentHash": "9b9dc8bf6dc2a28591c8559e286f9a7799fbf5c253e094935a7b6f7d5edb7975",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.539.md

@@ -0,0 +1,29 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Makes the staged credential-swap executor (Step 5) reachable as live operator levers, and adds the single place every credential-feature surface passes through so a token can never leak into a log, an HTTP response, or a notification.
+
+- **The secret-scrub chokepoint** — a new `CredentialAuditEmit` (src/core/CredentialAuditEmit.ts) with one `scrub(record)` funnel. Every credential-swaps.jsonl audit write, every /credentials/* response body, and every attention-item routes through it; it deep-walks the record and redacts any token-shaped run (reusing the existing `redactToken`). The no-token-material invariant is structural, not "remember to scrub at each callsite".
+- **Manual levers (Bearer-authed, detective controls)** — `POST /credentials/swap` constructs and runs the live staged exchange (the Step-5 residual "nothing constructs the executor live yet" closes here); `POST /credentials/set-default` flips which account ~/.claude serves (the zero-touch default flip); `POST /credentials/restore-enrollment` tears down to the enrollment layout. Each lever param-validates against known ledger slots (400 otherwise), respects a per-pair cooldown (force:true overrides it, bounded by its own per-window budget), emits an operator notification + audit on every invocation.
+- **restore-enrollment never poisons a healthy slot** — `CredentialRestoreEnrollment.classifyRestoreCoherence` (src/core/CredentialRestoreEnrollment.ts) checks identity-coherence (the blob's access-token account must equal its refresh-token lineage). An incoherent blob — a "Frankenstein" graft of one account's access token onto another's refresh token, an unparseable blob, a refresh-token-less blob, or one the oracle can't confirm — is parked one-directionally (the slot is vacated for re-auth) and is NEVER exchanged into a healthy slot.
+- **Read surfaces** — `GET /credentials/locations` is the ledger census read (slot to account, since, lastVerifiedAt, quarantine, journal tail, mode); `GET /credentials/rebalancer` is the autonomous-balancer surface and returns 503 in Increment A (the balancer is Increment B).
+- **Dark** — gated by the existing `subscriptionPool.credentialRepointing` flag (enabled:false). With the feature off (the fleet + dev default) every lever returns 503/no-op and the executor is a strict no-op — byte-for-byte today's behavior.
+
+## What to Tell Your User
+
+This is internal plumbing that ships turned off, so nothing changes for you day to day. What it builds toward: when I hold more than one of your subscription accounts, I will be able to move a credential between them under the hood without restarting your sessions, flip which account your plain terminal lands on, or tear the whole arrangement back down to the original layout — all as deliberate, audited actions. The most important part is a safety guarantee: there is now one place every one of those actions passes through that strips out any secret before it could reach a log, a status page, or a notification, so a token can never leak out that way. And the teardown is hardened so a corrupted or mismatched credential is set aside for you to re-authenticate rather than being shuffled into a healthy account. It is off by default and does nothing until it is deliberately turned on after a review window.
+
+## Summary of New Capabilities
+
+Three new exported classes — `CredentialAuditEmit` (the single secret-scrub chokepoint), `CredentialManualLevers` (per-pair cooldown + the force-swap budget), and `CredentialRestoreEnrollment` (the identity-coherence one-directional-park decision) — plus five /credentials/* HTTP routes (swap, set-default, restore-enrollment, locations, rebalancer), all gated by the existing `subscriptionPool.credentialRepointing` flag. No new gate flag, no new unfunneled credential write path. Registered in CapabilityIndex; CredentialAuditEmit documented under-the-hood.
+
+## Evidence
+
+- `tests/unit/credential-audit-emit.test.ts` (12) — scrub redacts on all three surfaces (jsonl/response/attention) with a real-shaped sk-ant token, deep-scrubs nested objects/arrays, leaves ids/paths/timestamps intact, never throws on a failing sink/delivery; manual levers (per-pair cooldown, force:true override, §0.g force-budget exhaustion + non-forced exemption + window roll); restore coherence (coherent exchange, Frankenstein park, unparseable park, refresh-token-less park, oracle-down park).
+- `tests/integration/credential-routes.test.ts` (6) — dark=503 on every lever + rebalancer 503; live POST /credentials/swap executes the executor with NO token in the response or audit; param-validate unknown slot → 400; manualLeversEnabled:false → 403; restore-enrollment parks an incoherent slot; Bearer-401 on every lever.
+- `tests/e2e/credential-repointing-routes-alive.test.ts` (4) — feature-alive on the real AgentServer factory: ENABLED swap executes (dry-run) + locations reports active; DARK strict no-op (503 on every lever, rebalancer 503, locations reports dark); every lever requires Bearer; rebalancer 503 even when enabled (Increment A).
+- tsc clean; full `npm run lint` clean (dark-gate unchanged — no ConfigDefaults touched); docs-coverage green; repo-invariants hold.

package/upgrades/side-effects/ws52-step7-routes-audit.md

@@ -0,0 +1,39 @@
+# Side-effects review — WS5.2 Step 7 (credential re-pointing routes + audit-scrub chokepoint)
+
+**Spec:** `docs/specs/live-credential-repointing-rebalancer.md` (approved:true, converged) §2.4/§2.9/§0.g, build-plan §7.
+**Tier:** 2 (src code + HTTP routes; ships DARK behind the EXISTING `subscriptionPool.credentialRepointing` flag — no new gate).
+**Parent principle:** Cross-Machine Coherence — One Agent, Robust Under Degraded Conditions.
+
+## What changed
+
+- **NEW `src/core/CredentialAuditEmit.ts`** — the SINGLE secret-scrub chokepoint (`scrub`/`scrubString` + a `CredentialAuditEmit` handle). Every `logs/credential-swaps.jsonl` write, every `/credentials/*` response body, and every attention-item routes through it; it deep-walks records and redacts token-shaped runs via the existing `redactToken` (CredentialProvider.ts:56 — reused, not re-authored).
+- **NEW `src/core/CredentialRestoreEnrollment.ts`** — `classifyRestoreCoherence`: the identity-coherence decision (access-tenant == refresh-lineage). Incoherent / unparseable / refresh-token-less / oracle-unavailable → one-directional park verdict (never exchanged into a healthy slot).
+- **NEW `src/core/CredentialManualLevers.ts`** — per-pair cooldown + §0.g `force:true` budget (`maxForcedManualSwapsPerWindow`). Surfaced refusals, never silent.
+- **`src/commands/server.ts`** — constructs the live `CredentialSwapExecutor` (the Step-5 residual "nothing constructs the executor live yet" closes here), the audit emit (jsonl sink + telegram attention), the composed oracle→pool `resolveIdentity`, and the levers; passes the `credentialRepointing` bundle to AgentServer.
+- **`src/server/routes.ts`** — registers `POST /credentials/swap|set-default|restore-enrollment` (Bearer), `GET /credentials/locations` (census #11), `GET /credentials/rebalancer` (503 in Increment A). Every response sent through `audit.response(...)`.
+- **`src/server/AgentServer.ts`** — threads the `credentialRepointing` bundle option → routeCtx.
+- **`src/server/CapabilityIndex.ts`** — registers the `/credentials` prefix + endpoints.
+- **`src/core/types.ts`** — adds `maxForcedManualSwapsPerWindow?` + `forcedManualSwapWindowMs?` config knobs (NUMBER knobs — NO `enabled: false` literal, so the dark-gate line-map is UNCHANGED, verified 16/16 clean).
+- **`site/src/content/docs/architecture/under-the-hood.md`** — documents `CredentialAuditEmit` (the new exported class; ≥2 mentions for docs-coverage).
+
+## State files / migrations
+
+- Writes `logs/credential-swaps.jsonl` (size-rotation is Increment B; Step 7 appends). No new schema; reuses the Step-2 `credential-locations.json` ledger.
+- **No migration in Step 7.** CLAUDE.md awareness template + `migrateConfig`/`migrateClaudeMd` are explicitly scoped to **build-plan §9 (Step 9 — Migration parity)** — tracked there, not deferred silently. The new config knobs are optional with code-level defaults, so an existing agent with no value behaves identically.
+
+## Blast radius / reversibility
+
+- **Ships DARK.** Every lever 503s/no-ops while `subscriptionPool.credentialRepointing.enabled` is false (always, fleet-wide). The executor's own two-flag gate (`enabled`+`dryRun`) makes it a strict no-op too. E2E proves byte-for-byte today's behavior with the flag off.
+- A wrong swap is a reversible, oracle-verified permutation (spec §2.4 supervision Tier 0); no token material is ever returned (the scrub chokepoint).
+- `rebalancer` is 503 in Increment A — the autonomous balancer is Increment B; the route exists + is discoverable now.
+
+## Adversarial review (4 lenses, folded as named tests)
+
+1. **secret-leak-via-audit (THE blocker)** — `scrub` redacts on all 3 surfaces; named test feeds a real-shaped `sk-ant-…` token through jsonl/response/attention and asserts the token core appears in NONE; integration + e2e also assert no token in a response body. Wiring: the route's `credSend` is the only response path and it routes through `audit.response`.
+2. **restore-enrollment poison** — `classifyRestoreCoherence` parks Frankenstein/unparseable/refresh-token-less/oracle-down one-directionally; integration test asserts an incoherent slot is parked, never exchanged.
+3. **auth boundary** — every POST lever + the GET reads 401 without Bearer (integration + e2e named tests); rebalancer 503 dark.
+4. **dark-ship inertness** — flag OFF → 503 on every lever (e2e strict-no-op test, the single most important test).
+
+## Silent-fallback tags
+
+Every new catch is tagged `@silent-fallback-ok` with justification (audit-write best-effort, attention best-effort, cache-bust best-effort, unparseable-blob → coherence-park). no-silent-fallbacks + no-empty-catch-blocks tests pass; no baseline bump needed.