instar 1.3.607 → 1.3.609

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.607",
+  "version": "1.3.609",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-17T09:04:32.557Z",
-  "instarVersion": "1.3.607",
+  "generatedAt": "2026-06-17T11:03:49.321Z",
+  "instarVersion": "1.3.609",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "c45de820e9612abb3e48d432553ce129c45b36d9a772ddba5074c2b26859317e",
+      "contentHash": "be17078af854f08cbba01afe1d5dd3be118be68f1db475e78743221279ea044b",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1522,7 +1522,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "385a0574dd80a868d14f45b2024608b4592f4a2270816f7557fba4467cc848d8",
+      "contentHash": "7ed80be6bb2846567ed0c9b3b3c9edd1d4f38e166bd919623d691c96d1daff7c",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {
@@ -1554,7 +1554,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "6ba8eb8270f39534f0bb43af9a9c73d89f768df0b5fea421e3673cb6791b5f7c",
+      "contentHash": "78df085f7c5a401392acbb9561c1c1ad014effc6ed889eb8264de8d17e163866",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -486,6 +486,10 @@ Every guard (monitoring sentinels, reapers, the scheduler, …) is graded by wha
 - Stop every job: \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/autonomous/stop-all\`
 - Proactive: user asks "what autonomous jobs are running?" → GET /autonomous/sessions. "stop everything" → POST /autonomous/stop-all. "stop the job on topic X" → POST /autonomous/sessions/X/stop.
 
+**Autonomous Liveness Reconciler** — A level-triggered self-heal for an autonomous run whose state file says it is ACTIVE (with time remaining) but has NO live session executing it ("dead but marked active"). Born from a recycle that died silently with ~15h of work left and nothing watching the contradiction. Per tick it compares desired (run active+remaining) vs actual (a live session exists) and converges: a debounced, lease-gated, quota-gated, pressure-gated respawn of a run that genuinely should be alive, capped (P19) so a flapping run gives up LOUDLY rather than respawn forever, respecting any operator stop. Ships DARK on the fleet (\`monitoring.autonomousLivenessReconciler.enabled\` OMITTED → the dev-agent gate resolves it) and dryRun-FIRST on dev (LOGS "would respawn" until a deliberate \`dryRun:false\` flip).
+- Status (content-free: topic ids + counters + conditions): \`curl -H "Authorization: Bearer $AUTH" http://localhost:${port}/autonomous/liveness\` (503 when dark/disabled).
+- Proactive: user asks "why did my autonomous run come back by itself?" / "why did an autonomous run die / not resume?" → the reconciler noticed the run was marked active with no live session and self-healed it (GET /autonomous/liveness for the conditions; the per-transition audit is \`logs/autonomous-liveness.jsonl\`). A respawn it makes is tagged so a later reaper kill is revived by the resume queue, never silently dropped.
+
 **Autonomous Completion Discipline** — A pre-approved autonomous run is structurally held to its FULL completion bar. The \`/autonomous\` setup defaults to a verifiable \`completion_condition\` (judged each turn by an INDEPENDENT model from what I SURFACE — I cannot self-certify "done"); the self-declared \`<promise>\` is the recorded fallback. The stop hook re-feeds a continue for every NON-stop rationalization ("clean milestone", "needs your steer", "it's late", "good stopping point") — a deterministic milestone-phrase scan flags these to the judge, and the judge is injection-resistant (the transcript is fenced as instruction-inert data; guard-directed phrasing is treated as gaming). The ONLY exits are (a) a genuine HARD external blocker, (b) duration expiry, (c) the condition genuinely met. For (a) I emit a nonce'd \`<hard-blocker>\` terminal marker (what I tried / why I'm stuck / what I'd need); the judge classifies it external-vs-buildable — if what I'd need is something I could build/derive/fetch myself, I'm re-fed to keep working. A clean (a) exit writes \`logs/autonomous-hard-blocker.jsonl\`, raises one /ack-able Attention item, and sends one Telegram. Off-switch + judge budget: \`.instar/config.json\` → \`autonomousSessions.completionDiscipline\` (\`enabled\`, \`judgeTimeoutMs\`); read at the hook chokepoint, so a toggle lands on the next stop with no restart.
 - **Real-check verification (optional, ACT-152):** the completion judge reads the TRANSCRIPT (what I surface) — it does not run tools. When a goal is checkable by a command (a test suite, a build, a grep, a CI status), set a \`verification_command\` in the autonomous state (\`instar\`'s setup takes \`--verification-command "<cmd>"\` and \`--verification-cwd "<dir>"\`, and always records \`work_dir\` so a relative command runs in the right tree). When set, a met:true verdict RUNS the command and the run may stop ONLY if it ALSO passes (exit 0); a fail/timeout/breaker-open keeps me working with the command's output as guidance — it can never CAUSE a premature exit (the safe direction). Bounded timeout, output scrubbed for secrets, destructive commands refused, and a P19 breaker stops a stuck/flaky check from spinning. Audit: \`logs/autonomous-realcheck.jsonl\`. Off-switch: \`autonomousSessions.completionDiscipline.realCheck.enabled\` (read at the chokepoint, no restart). It is a NO-OP unless a job declares a \`verification_command\`.
 

package/upgrades/1.3.608.md

@@ -0,0 +1,29 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The **Autonomous Liveness Reconciler** — a level-triggered control loop that self-heals an autonomous run whose per-topic state file still says `active: true` (with time remaining) but has **no live session** executing it ("dead but marked active"). Born from the 2026-06-16 incident where an `age-limit` recycle on topic 12476 was tagged `midWork:false`, never offered to the resume queue, and silently died with ~15h left — and nothing watched for the contradiction. Ships **DARK on the fleet** (`monitoring.autonomousLivenessReconciler.enabled` OMITTED in ConfigDefaults → the dev-agent gate resolves it live-on-dev / dark-fleet) and **dryRun-FIRST** on dev (the component code-defaults `dryRun:true` — it only LOGS `would-respawn` + a shadow `would-have-capped` until a deliberate `dryRun:false` flip).
+
+This effort ships TWO changes in the same PR (a backstop must not mask a deterministic bug):
+
+1. **Root-cause edge fix (`server.ts` `considerEnqueue`):** at the reap instant, when `getTopicForSession` returns null (the session-name→topic map can be stale/evicted exactly when an `age-limit` recycle should resume), the active-autonomous-run injection branch was silently skipped and the run died. The fix falls back to resolving the topic from the session NAME (the same parse used by the coherence-journal emit) and adopts it ONLY when the run-state file confirms an active run — so the `autonomousRunRemainingForTopic` check still runs and the recycle is offered to the resume queue.
+2. **The reconciler (`src/monitoring/AutonomousLivenessReconciler.ts`):** a level-triggered backstop for the residual orphaning the edge fix can't cover (a crash, sleep/wake, a missed enqueue, a drainer that gave up). Per tick it reads the active runs (reusing `activeAutonomousJobs` + `autonomousRunRemainingForTopic`), evaluates 8 candidate criteria (active+remaining+CURRENT-generation, not-paused, not-operator-stopped, not-mid-move, owned+lease-held by THIS machine, no-live-session, not-already-spawning, unambiguous-binding), debounces across N ticks + a window, then respawns through the SAME `spawnSessionForTopic` primitive the ResumeQueueDrainer uses — bounded by a timeout, a bounded pressure gate, the same quota/session-count/migration gates, an atomic in-process claim + actuation-instant recheck + post-spawn settle-kill, and a P19 loop brake with SEPARATED redie / spawn-failure counters (the redie cap unified with the queue's resurrection count). The respawned session is tagged `midWork:true` so a later reaper kill is revived by the queue, attacking the incident root cause. All respawn inputs come from authoritative sources (`_topicResumeMap`, the topic-binding registry realpath-jailed to the agent home) — NEVER the untrusted state file; a missing resume UUID / unsafe cwd / ambiguous binding raises ONE deduped attention item and refuses, never spawns against a guess.
+
+The drainer's shared dep closures (`topicOwnerElsewhere`, `operatorStopSince`, the quota/session-count/migration gates, the live-session resolver) were **extracted to named consts** and passed by the SAME reference into BOTH the drainer and the reconciler — drift-prevention so "the reaper, the drainer, and the reconciler agree" is structurally true. New read-only route `GET /autonomous/liveness` (503 when dark, Bearer-auth'd, content-free: topic ids + counters + conditions only).
+
+## What to Tell Your User
+
+Nothing changes for you yet — this ships off on the fleet and observe-only on the dev agent. Once it's flipped live, if one of my autonomous runs ever loses its live session but still has work + time remaining (a crash, a sleep/wake, a recycle that didn't resume), I'll notice within a couple minutes and quietly bring it back — picking up where it left off — instead of sitting silently dead until you message me. If asked "why did my autonomous run come back by itself?" the answer is: my state said the run was still active but no session was executing it, so the reconciler self-healed it (bounded, capped, and respecting any stop you issued).
+
+## Summary of New Capabilities
+
+Level-triggered autonomous-run self-heal (dark/dryRun-first): detects a run marked active with no live session and respawns it conversation-preserving — debounced, lease-gated, quota-gated, bounded by a pressure gate + a P19 cap that gives up loudly, with an atomic-claim + settle-kill that can't bypass an operator stop. Plus the root-cause edge fix that stops a stale session→topic map from silently dropping an `age-limit` recycle. New read surface: `GET /autonomous/liveness`.
+
+## Evidence
+
+- 41 unit tests (both sides of each of the 8 criteria; the stable-live-vs-blip debounce reset; the two separated counters incl. the queue-unification; the bounded pressure gate deferring-then-acting/escalating; the atomic-claim settle-kill on a stop-during-spawn; the untrusted-state refusals; generation rejection of an obsolete run; durable cap restore; dryRun would-respawn + shadow would-have-capped), 4 integration tests (`GET /autonomous/liveness` → 401 unauth / 503 dark / 200 wired + wiring-integrity that the route serves the SAME live instance), 10 e2e tests (the Phase-1 "feature is alive" 200-not-503 mirroring the production init path; the seeded orphaned→respawn lifecycle; operator-stopped/paused/mid-move/in-queue/not-lease-holder → NOT respawned; pressure deferral then act; cap → one loud attention item; the root-cause parse + run-state confirmation). All 55 green.
+- `tsc --noEmit` clean; the no-silent-fallbacks + no-empty-catch ratchets pass (every new fail-toward-safe catch is tagged `@silent-fallback-ok` with a real justification); the notification burst-invariant test passes (all give-up surfaces are per-topic-per-episode deduped).
+- Side-effects review artifact: `upgrades/side-effects/autonomous-liveness-reconciler.md`. Spec: `docs/specs/autonomous-liveness-reconciler.md` (converged round 4, approved under standing autonomous authorization).

package/upgrades/1.3.609.md

@@ -0,0 +1,24 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+WS5.2 Account Follow-Me, PR2 — the cross-machine enrollment **detection→consent surface** (Mechanism B re-mint). When the agent runs on more than one machine and a machine has no usable account for an operator subscription (a "depth-zero" machine), it now proactively detects that and surfaces ONE aggregated, phone-first consent ("authorize on the dashboard?") — and **enrolls nothing on its own**. Authorization remains the operator's PIN-gated mandate (issued on the target's own dashboard, per-server per OQ6); a peer can never enroll an account onto itself.
+
+Built on PR1's primitives: the request-never-self-authorize orchestrator, the depth-zero detector (R7-bounded), the per-machine depth adapter, the tolerant peer-views fetcher (reuses the `?scope=pool` fan-out, metadata-only — no token or config-home ever crosses), the cross-machine mandate bridge (R4a), and the composing service. Wired through `server.ts`/`AgentServer`/`RouteContext` and exposed at `POST /subscription-pool/follow-me/scan`. Ships DARK behind `multiMachine.accountFollowMe` (503 on the fleet, live on a development agent).
+
+## What to Tell Your User
+
+Still nothing to do yet — this is the next layer toward "log in once, it works on every machine," shipped off by default. With it, when one of your machines has no account, I'll notice and offer you a one-tap dashboard approval to enroll it (rather than ever doing it silently) — and no login token is copied between machines. The actual one-tap enrollment + safety checks land in the next PR.
+
+## Summary of New Capabilities
+
+Proactive cross-machine account-enrollment detection + consent (dark): the agent detects a machine with no usable account and surfaces ONE operator approval, enrolling nothing on its own. No user-facing surface is live in this release.
+
+## Evidence
+
+- 37 tests: 35 unit across 7 modules + 2 Tier-2 integration over the real HTTP pipeline (dark→503; enabled→detects a depth-zero peer→ONE consent, enrolls nothing); `tsc --noEmit` clean.
+- Side-effects review + mandatory independent second-pass security review (concurred) — verified no self-authorization path, no credential leak (peer fetch is metadata-only, configHome discarded), genuinely-inert fleet default, and no fail-open paths. Artifact: `upgrades/side-effects/ws52-account-follow-me-pr2.md`.
+- Spec: `docs/specs/ws52-account-follow-me-security.md` (converged, approved).