instar 1.3.540 → 1.3.542

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.540",
+  "version": "1.3.542",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-13T21:07:38.641Z",
-  "instarVersion": "1.3.540",
+  "generatedAt": "2026-06-13T22:02:57.992Z",
+  "instarVersion": "1.3.542",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "664e8fc82415ef692376c937deb21d4fc9a848f2ae581702993246e8e6e3406e",
+      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1530,7 +1530,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "c505368755a51f57c461447eae1b32da1815444b25060d985ab2381779bd6311",
+      "contentHash": "1e282ecacc10ebe6ab4adeaabc00ff2f0295b1b0954ee5b48e2314c368594577",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "89f1c4adb1425bfc568e7e2b34e0ddf527fcc5e807e4f9f4d28e472bf4a5edbd",
+      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -769,6 +769,13 @@ Every guard (monitoring sentinels, reapers, the scheduler, …) is graded by wha
 - **Dashboard**: the **Subscriptions tab** shows live quota bars (5h + weekly + reset countdown), status, and the Pending Logins panel — share the dashboard URL + PIN.
 - **When to use** (PROACTIVE): "how much quota is left across my accounts?" / "am I about to hit a limit?" → \`GET /subscription-pool\`; the user wants to add another subscription → drive the enrollment wizard (never ask them to paste a token); a long job is at risk of a quota wall → the continuity guarantee + \`/swap\` keep it alive. Single-account pools are a no-op.
 
+**Live Credential Re-pointing (move a pool account's login between config-home "slots" without restarting — WS5.2)** — Beyond the subscription pool's session-MOVING, this MOVES the credential itself: it exchanges which pool account's OAuth login sits in which config-home "slot" via a staged keychain swap, so the sessions already reading that slot pick up the new account on their NEXT API call — no restart, no re-login, nothing on your screen. The unit shuffled is the CREDENTIAL (always a clean SWAP between two slots, never a copy — one home per credential), verified by identity after every move (quarantine-never-repair when the identity oracle can't confirm). **Ships DARK** behind \`subscriptionPool.credentialRepointing.enabled\` — every lever 503s/no-ops while disabled (byte-for-byte today's behavior); going live needs a deliberate \`enabled:true\` + \`dryRun:false\` flip, and that ON decision is yours, separate from any build.
+- **Which account is in which slot?** (Registry First — read it, never guess) \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/credentials/locations\` → the ledger census (slot ↔ account, since, lastVerifiedAt, quarantine state, journal tail, mode).
+- **Flip your default account (zero-touch)** — \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/credentials/set-default -H 'Content-Type: application/json' -d '{"toAccountId":"<account>"}'\` swaps which account \`~/.claude\` serves, with no restart of the session you're talking to.
+- **Swap two slots' credentials live** — \`POST /credentials/swap\` \`{"slotA":"<home>","slotB":"<home>"}\` (the staged §2.3 exchange). **Restore the enrollment layout** — \`POST /credentials/restore-enrollment\` (parks any identity-incoherent blob one-directionally; never exchanges it into a healthy slot). All levers are DETECTIVE controls — operator-notified + audited + param-validated + per-pair cooldown + a force budget on \`force:true\`. No token material ever exits any \`/credentials/*\` surface (the single CredentialAuditEmit scrub chokepoint).
+- **The autonomous balancer surface** — \`GET /credentials/rebalancer\` (the use-it-or-lose-it drainer is Increment B; this surfaces the env-token applicability gate's verdict + WHY re-pointing would refuse, when enabled).
+- **When to use** (PROACTIVE — these are the triggers): "flip my default account to X" / "make X my default" → \`POST /credentials/set-default\`; "which account is this session/slot on?" / "where does ~/.claude point?" → \`GET /credentials/locations\` (read it, don't infer from \`claude auth status\` — that reads a metadata file, not the live credential). Single-account agents are a no-op. (Spec: \`docs/specs/live-credential-repointing-rebalancer.md\`.)
+
 **Per-Feature LLM Metrics & LLM Activity (Observable Intelligence)** — Audit what each of your LLM-driven gates/sentinels actually does: WHICH provider + model ran it, how often it ACTED (fired) vs found nothing (noop), how often it was skipped to save rate limits (shed), cost, and latency. This is the *Observable Intelligence* standard — no autonomous AI action the system takes is allowed to be invisible. Read-only observability — it never gates anything.
 - Check: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/metrics/features?sinceHours=24"\`
 - Returns \`{ totals, features: [{ feature, frameworks, models, byModel, calls, realCalls, tokensIn, tokensOut, tokensCached, fired, noop, shed, fireRate, p50LatencyMs, p95LatencyMs, ... }] }\` — one row per system (e.g. MessagingToneGate, MessageSentinel). \`frameworks\`/\`models\` = which provider(s) actually served the call; \`fireRate\` = how often it acts; \`shed\` = skipped by the rate-limit guard. Filter with \`?feature=<name>\`.

package/upgrades/1.3.541.md

@@ -0,0 +1,29 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Enforces the spec's applicability precondition: live credential re-pointing only works for sessions that read their credential from the per-config-home store. A session launched with an env token bypasses that store and is invisible to the mechanism — so this step records, at spawn, WHERE each session's Anthropic credential comes from, and refuses to run the feature whenever an env-token session is present.
+
+- **Durable per-session provenance flag** — a new `credentialSource: 'store' | 'env'` field on the session record, set at every claude-code spawn lane. It is derived from the IDENTICAL expression that selects the session's Anthropic env block — `(config.anthropicApiKey ?? '') !== '' ? 'env' : 'store'`, computed at the spawn site — so the flag can never drift from what actually launched the session (single source of truth; an independent recomputation would re-create the staleness class this spec exists to kill).
+- **The env-token gate** — a new `CredentialEnvTokenGate` (src/core/CredentialEnvTokenGate.ts), a pure evaluator. It REFUSES the feature, with a NAMED category reason, when either the config field `anthropicApiKey` is any non-empty value (an OAuth token OR a direct API key — both bypass the store) OR any running claude-code session's provenance flag is `env`. Checking the LIVE fleet — not just the config field — closes the mid-life-flip hole: an operator setting an env token mid-run would otherwise leave already-running store sessions steerable while new env spawns are silently un-steered.
+- **Named reason on the status route** — `GET /credentials/rebalancer`, when the feature flag is ON, now surfaces the gate verdict (refused, the reason category, and the count of env sessions), scrubbed through the existing secret-scrub chokepoint. Dark (flag off) it stays a strict 503 no-op.
+- **Attribution-suppression** — on a gate refusal the location gate behaves as dark, so the quota poller stops routing reads/attribution through moved slots: an env session's usage is never mis-attributed to a slot tenant.
+- **Dark** — gated by the existing `subscriptionPool.credentialRepointing` flag. With the feature off (the fleet + dev default) the gate is never consulted and the only delta is the additive provenance field on new session records (free metadata, never read) — byte-for-byte today's behavior.
+
+## What to Tell Your User
+
+This is internal plumbing that ships turned off, so nothing changes for you day to day. What it builds toward, with a safety guarantee baked in: the under-the-hood feature that moves a credential between your subscription accounts only works for sessions that read their login from the on-disk store I manage. If a session was instead launched with a login token handed straight to it in its environment, that session ignores the store entirely and the moving trick would be a no-op for it. So this step teaches me to record, the moment each session starts, which of those two kinds it is — and to refuse to run the whole moving feature at all whenever any running session is the kind I cannot steer. That refusal is deliberate and visible, with a plain reason, rather than the feature quietly mis-handling a session it does not actually control. It is off by default and does nothing until the feature is turned on after a review window.
+
+## Summary of New Capabilities
+
+One new exported class — `CredentialEnvTokenGate` (the env-token applicability gate: refuses on the config field OR a live env-token session in the fleet, with a named reason) — plus a new additive optional `Session.credentialSource` provenance field set at every claude-code spawn lane, and the `GET /credentials/rebalancer` route surfacing the gate verdict. All gated by the existing `subscriptionPool.credentialRepointing` flag. No new gate flag, no new unfunneled credential write path.
+
+## Evidence
+
+- `tests/unit/credential-env-token-gate.test.ts` (18) — config predicate (permits empty/undefined; refuses on sk-ant-oat, on a direct sk-ant-api03 key, and on any non-empty value); live-fleet path (refuses on one running env session with config empty, counts multiple, ignores a non-running env session and a non-claude env session, treats undefined as store, config-field refusal short-circuits before the fleet scan); attribution-suppression (`shouldAttributeSlotTenant` false for env, true for store/undefined); and the single-source-of-truth blocker proven by a static grep-assert against the real SessionManager source (exactly 3 env-block predicates + 3 identical provenance derivations + 4 record writes).
+- `tests/integration/credential-routes.test.ts` (+3) — the rebalancer route surfaces the config-field refusal (scrubbed, no token leak), the live-fleet refusal (mid-life flip, config empty), and permits when config empty + all-store fleet.
+- `tests/e2e/credential-repointing-routes-alive.test.ts` (+3) — feature-alive on the real AgentServer factory: rebalancer DARK is a strict 503 no-op, ENABLED + clean config + all-store fleet permits, ENABLED + a live env-token session refuses with the named reason.
+- tsc clean; full `npm run lint` clean (dark-gate 16/16 unchanged — no ConfigDefaults touched); no-silent-fallbacks + no-empty-catch-blocks + feature-delivery-completeness + docs-coverage green.

package/upgrades/1.3.542.md

@@ -0,0 +1,25 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Closes the Migration Parity + Agent Awareness gap for live credential re-pointing: existing agents (not just fresh installs) learn the `/credentials/*` manual levers and the zero-touch default-account flip on their next update, and the dark config defaults are proven to install in place.
+
+- **CLAUDE.md awareness (new + existing agents)** — `generateClaudeMd()` (new agents) and `migrateClaudeMd()` (existing agents, content-sniffed + idempotent) both gain a "Live Credential Re-pointing" section documenting the levers (`GET /credentials/locations`, `POST /credentials/swap`, `POST /credentials/set-default`, `POST /credentials/restore-enrollment`, `GET /credentials/rebalancer`) and the two proactive triggers: "flip my default account" → `set-default`; "which account is this slot on?" → `GET /credentials/locations` (read the ledger, never infer from `claude auth status`).
+- **Config-defaults parity (proven)** — the dark `subscriptionPool.credentialRepointing` block (`enabled:false`, `dryRun:true`, `manualLeversEnabled:true`) already rides the generic `ConfigDefaults` → `getMigrationDefaults` → `applyDefaults` add-missing path onto existing agents. This step adds the parity test that proves it installs on a config lacking it AND never overwrites an operator who explicitly set `enabled:true`.
+- **Dark** — every lever still 503s/no-ops behind the existing `subscriptionPool.credentialRepointing.enabled` flag. This step adds zero runtime behavior; it only makes the (still-off) feature discoverable and its dark defaults durable across the install base.
+
+## What to Tell Your User
+
+Nothing changes for you yet — the underlying feature is still switched off. What this does is make me *aware* of it so that, once it's turned on after a review window, you can just say "flip my default account to X" or "which account is this session on?" and I'll know exactly which lever to use instead of guessing. It also makes sure that awareness reaches agents that were set up before this feature existed, not only brand-new ones — so the capability isn't silently missing on an older install.
+
+## Summary of New Capabilities
+
+No new runtime capability — this is the Migration Parity + Agent Awareness step. New + existing agents' CLAUDE.md now documents the live-credential-re-pointing levers and the "flip my default account" / "which account is this slot on?" proactive triggers, and the feature's dark config defaults are proven to install on existing agents without clobbering an operator's explicit settings. The feature itself remains dark behind `subscriptionPool.credentialRepointing.enabled`.
+
+## Evidence
+
+- `tests/unit/PostUpdateMigrator-credentialRepointing.test.ts` (8) — migrateClaudeMd adds the section when absent (with both proactive triggers + the dark-posture line + the `claude auth status` honesty caveat present), is idempotent (no duplicate on re-run, byte-identical), preserves prior content, and gracefully skips a missing CLAUDE.md; the generateClaudeMd template emits the same section (source parity); and migrateConfig installs the DARK credentialRepointing block on a config lacking it, NEVER clobbers an operator's explicit `enabled:true` (fills only the missing sibling default), and is idempotent.
+- tsc clean; full `npm run lint` clean (dark-gate unchanged — no ConfigDefaults edit; the defaults already existed from Steps 1/7).