instar 1.3.543 → 1.3.545

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.543",
+  "version": "1.3.545",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-13T22:07:14.093Z",
-  "instarVersion": "1.3.543",
+  "generatedAt": "2026-06-13T23:13:47.670Z",
+  "instarVersion": "1.3.545",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a6a1c22fc6213c6ab2da23825c5fcd0b2213fd3dbc4bc9bae094bcdb42c8157c",
+      "contentHash": "47778814f51cfe564085e64c530904ea74db70c12d92b7ae4adc30b425135fd9",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "eebb44af3b15e6feaa36626f8ff14d614e3fd4f008e5d15496312e8241b67765",
+      "contentHash": "f1918be329b7c09a1d557ed196308af9382a3fdde2e79cfe98000ee0014203df",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -769,7 +769,7 @@ Every guard (monitoring sentinels, reapers, the scheduler, …) is graded by wha
 - **Dashboard**: the **Subscriptions tab** shows live quota bars (5h + weekly + reset countdown), status, and the Pending Logins panel — share the dashboard URL + PIN.
 - **When to use** (PROACTIVE): "how much quota is left across my accounts?" / "am I about to hit a limit?" → \`GET /subscription-pool\`; the user wants to add another subscription → drive the enrollment wizard (never ask them to paste a token); a long job is at risk of a quota wall → the continuity guarantee + \`/swap\` keep it alive. Single-account pools are a no-op.
 
-**Live Credential Re-pointing (move a pool account's login between config-home "slots" without restarting — WS5.2)** — Beyond the subscription pool's session-MOVING, this MOVES the credential itself: it exchanges which pool account's OAuth login sits in which config-home "slot" via a staged keychain swap, so the sessions already reading that slot pick up the new account on their NEXT API call — no restart, no re-login, nothing on your screen. The unit shuffled is the CREDENTIAL (always a clean SWAP between two slots, never a copy — one home per credential), verified by identity after every move (quarantine-never-repair when the identity oracle can't confirm). **Ships DARK** behind \`subscriptionPool.credentialRepointing.enabled\` — every lever 503s/no-ops while disabled (byte-for-byte today's behavior); going live needs a deliberate \`enabled:true\` + \`dryRun:false\` flip, and that ON decision is yours, separate from any build.
+**Live Credential Re-pointing (move a pool account's login between config-home "slots" without restarting — WS5.2)** — Beyond the subscription pool's session-MOVING, this MOVES the credential itself: it exchanges which pool account's OAuth login sits in which config-home "slot" via a staged keychain swap, so the sessions already reading that slot pick up the new account on their NEXT API call — no restart, no re-login, nothing on your screen. The unit shuffled is the CREDENTIAL (always a clean SWAP between two slots, never a copy — one home per credential), verified by identity after every move (quarantine-never-repair when the identity oracle can't confirm). **On a development agent it runs LIVE in dry-run** (the developmentAgent gate, \`subscriptionPool.credentialRepointing.enabled\` omitted → resolves live-on-dev / dark-fleet) — the \`/credentials/*\` levers return real data and the balancer runs its full decision loop, but the executor performs ZERO credential writes while \`dryRun\` holds (the write-safety canary; on the fleet every lever 503s). Actually MOVING a credential needs a deliberate \`dryRun:false\` — that decision is yours (gated behind running the §5 livetest battery first).
 - **Which account is in which slot?** (Registry First — read it, never guess) \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/credentials/locations\` → the ledger census (slot ↔ account, since, lastVerifiedAt, quarantine state, journal tail, mode).
 - **Flip your default account (zero-touch)** — \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/credentials/set-default -H 'Content-Type: application/json' -d '{"toAccountId":"<account>"}'\` swaps which account \`~/.claude\` serves, with no restart of the session you're talking to.
 - **Swap two slots' credentials live** — \`POST /credentials/swap\` \`{"slotA":"<home>","slotB":"<home>"}\` (the staged §2.3 exchange). **Restore the enrollment layout** — \`POST /credentials/restore-enrollment\` (parks any identity-incoherent blob one-directionally; never exchanges it into a healthy slot). All levers are DETECTIVE controls — operator-notified + audited + param-validated + per-pair cooldown + a force budget on \`force:true\`. No token material ever exits any \`/credentials/*\` surface (the single CredentialAuditEmit scrub chokepoint).

package/upgrades/1.3.544.md

@@ -0,0 +1,27 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Per operator directive ("none of this should be dark for development agents"), live credential re-pointing now runs LIVE on a development agent (in dry-run), instead of dark for everyone — so it actually gets dogfooded — while the fleet stays dark and no real credential is moved.
+
+- **Re-gated to the developmentAgent gate.** `subscriptionPool.credentialRepointing.enabled` moved from `DARK_GATE_EXCLUSIONS` (off+dry-run for everyone) to `DEV_GATED_FEATURES`; `ConfigDefaults` now OMITS `enabled` so `resolveDevAgentGate` resolves it LIVE on a dev agent + DARK on the fleet. All 6 runtime read sites now resolve through `resolveDevAgentGate`.
+- **The write stays behind the dry-run canary.** `dryRun:true` remains the default (a SEPARATE flag): on a dev agent the `/credentials/*` levers return real data and the balancer runs its full decision loop, but the `CredentialSwapExecutor` returns `dry-run` with ZERO keychain writes. Real credential moves still require a deliberate `dryRun:false` (gated behind the §5 livetest).
+- **Migration parity.** `migrateConfigCredentialRepointingDevGate` strips a default-shaped `enabled:false` from existing agents so the gate resolves (an explicit operator `enabled:true` is preserved); the CLAUDE.md awareness text is re-worded (template + in-place for already-migrated agents) from "ships dark" to "live-on-dev dry-run". Spec §2.8 carries the dated amendment.
+
+## What to Tell Your User
+
+You asked for this not to be dark on development agents, and now it isn't. On a dev agent (like me) the feature is alive: I can show you which account sits in which slot, the balancer runs its real decision loop, and the manual levers work — but a safety switch (dry-run) is still on by default, so it computes and shows you every move it WOULD make without actually moving a single credential. The fleet stays completely dark. The only thing still held back is the final step — letting it ACTUALLY move logins between your accounts — which needs a deliberate flip you control, after the livetest. So: alive and observable for dogfooding, zero real credential moves until you say go.
+
+## Summary of New Capabilities
+
+No new write capability — a gate-posture change. Live credential re-pointing is re-gated from dark-for-everyone to the developmentAgent gate (live-on-dev in dry-run, dark fleet). On a dev agent the `/credentials/*` levers + the balancer status are now live (return 200, run the decision loop) but perform zero credential writes while the `dryRun:true` canary holds; the fleet is unchanged (dark/503). Real writes still require a deliberate `dryRun:false`.
+
+## Evidence
+
+- `tests/unit/credential-repointing-dark-gate.test.ts` (4) — registered in DEV_GATED_FEATURES (not DARK_GATE_EXCLUSIONS); enabled OMITTED in defaults; resolves LIVE on dev / DARK on fleet; honors an explicit operator override.
+- `tests/unit/PostUpdateMigrator-credentialRepointing.test.ts` — installs the block with enabled omitted; STRIPS a default-shaped enabled:false; preserves an explicit enabled:true.
+- `tests/e2e/credential-swap-executor-dark-ship-lifecycle.test.ts` (3) — ZERO credential writes on BOTH a dev (outcome `dry-run`) and fleet (outcome `disabled`) production config.
+- `tests/unit/lint-dev-agent-dark-gate.test.ts` + the dark-gate lint — clean with the entry in DEV_GATED_FEATURES + enabled omitted. Full credential unit/integration/e2e suite green (157 tests). tsc + full lint clean. Independent second-pass review: CONCUR.