instar 1.3.611 → 1.3.613

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.611",
+  "version": "1.3.613",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-17T11:52:44.525Z",
-  "instarVersion": "1.3.611",
+  "generatedAt": "2026-06-17T12:30:56.584Z",
+  "instarVersion": "1.3.613",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "a675d5c6c9ca2d87d258183334cb33e9b8f6cf6caf168dc1caf7647b60997a5e",
+      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.612.md

@@ -0,0 +1,28 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+WS5.2 Account Follow-Me, R12 — the honest revocation data-plane. Revoking "stop following to machine X" is a PIN-gated mandate revoke (control plane — the agent cannot do it) PLUS a real data-plane effect. This PR builds that data-plane effect as a pure, injectable executor (`src/core/AccountFollowMeRevocation.ts`) covering the three R12 branches honestly:
+
+- **Cooperative, online target → `removed`.** The target logs the account out of its config-home, deletes the per-account slot, and `SubscriptionPool.remove(accountId)` fires. Local and total.
+- **De-paired / hostile holder → `provider-rotation-required`.** A re-minted (Mechanism B) login is an independently-refreshable real OAuth credential; instar CANNOT force a logout on a machine that left the pair. The honest path is a phone-first instruction to de-authorize / rotate at the provider — never a false "removed everywhere".
+- **Offline target → bounded `revocation-pending` → `revocation-failed`.** The wipe becomes a durable pending action fired on reconnect (`onTargetReconnect`). The dashboard shows `revocation-pending`, not `removed`. After an operator-tunable reconnect-deadline, `sweepDeadlines()` escalates it to a LOUD `revocation-FAILED — rotate at provider NOW` aggregated HIGH attention item — never a silently-aging "pending".
+
+Fail-closed throughout: a partial or throwing cooperative wipe falls to `revocation-pending` (never a false `removed`); Mechanism A (dark / refused for Anthropic) always flags `provider-rotation-required` because a delivered credential cannot be un-delivered; flag-off / single-machine is a strict no-op. The module is pure/injectable — it touches no shared production file (the destructive effects — framework logout, slot delete, `SubscriptionPool.remove`) are injected seams.
+
+## What to Tell Your User
+
+Nothing to do — this is internal multi-machine account-sharing groundwork, shipped off by default. It guarantees that when you stop sharing an account with one of your machines, the system tells you the TRUTH about what was removed: it never claims a credential was destroyed everywhere when a departed or offline machine still holds its own login — in that case it surfaces a clear "rotate at the provider" instruction instead. No user-facing surface in this release.
+
+## Summary of New Capabilities
+
+Internal: an honest revocation data-plane for Account Follow-Me — cooperative-target total wipe, provider-rotation instruction for a de-paired/hostile holder, and a bounded offline `revocation-pending → revocation-FAILED` escalation. The system can never claim a credential was destroyed when it wasn't. Dark behind `multiMachine.accountFollowMe`; server-shell wiring (consuming the mesh revoke, scheduling the deadline sweep, dashboard render) is a tracked follow-on increment.
+
+## Evidence
+
+- 15 unit tests (`tests/unit/account-followme-revocation.test.ts`): both sides of every boundary — cooperative-online↔revoked↔offline, within-deadline↔past-deadline, clean↔partial↔throwing wipe, Mechanism B↔A, dark↔enabled, reconnect-with-record↔no-record, selective multi-record sweep; an explicit assertion that the message never contains "removed" on non-removed paths. `npx tsc --noEmit` clean.
+- Side-effects review + mandatory independent second-pass security review (concurred): verified `removed` is reachable only after a fully-successful cooperative wipe, all three branches selected without fall-through, the offline give-up is bounded and loud, Mechanism A never claims success without provider-rotation, signal-vs-authority compliant (data-plane executor, not a new blocking authority), injected seams only. Artifact: `upgrades/side-effects/ws52-account-follow-me-revocation.md`.
+- Spec: `docs/specs/ws52-account-follow-me-security.md` R12 (converged, approved).

package/upgrades/1.3.613.md

@@ -0,0 +1,22 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+WS5.2 Account Follow-Me, R6/R6a(option 2)/S7 — the enroll-drive **START** route, the keystone that makes a cross-machine enrollment actually run after the operator approves it. New dark route `POST /subscription-pool/follow-me/enroll/start`: given an operator-issued `account-follow-me` mandate, it verifies the mandate (deny-by-default — non-allow → 403, the agent can never self-authorize), resolves the operator-APPROVED account email AUTHORITATIVELY from real pool state (local SubscriptionPool + the replicated `subscription-account-meta` peer views — NEVER the request body, per S7; unresolvable → 409 fail-closed), allocates a per-account config-home slot on this machine, and drives the local `EnrollmentWizard.start({…, expectedEmail})` to mint the device-code login. The existing `/complete` route then validates the minted login's email against `expectedEmail` before the account is added. This closes the gap between consent (the scan) and completion (the S7 gate) — the full Mechanism-B flow now runs end-to-end (per-server: the operator drives the target machine's own enroll route; nothing but read-only email metadata crosses machines).
+
+## What to Tell Your User
+
+This is the piece that makes "log in once, it works on every machine" actually run end-to-end (still off by default). When you approve a machine to use one of your accounts (a one-tap dashboard approval), that machine now starts its OWN login for it, and I verify the login that completes is really the account you approved before it's used — no token is ever copied between machines. With this in, the cross-machine enrollment works start-to-finish behind the flag.
+
+## Summary of New Capabilities
+
+The enroll-drive START route (dark): an operator-mandate-gated, per-server route that drives a target machine's own `EnrollmentWizard` with the authoritatively-resolved approved email, completing the WS5.2 Mechanism-B flow (consent → start → email-validated completion → selectable). No user-facing surface is live in this release.
+
+## Evidence
+
+- 11 tests: 6 unit (`resolveFollowMeEnrollTarget` — local-pool resolve, peer-view resolve, local-preferred, and all three fail-closed branches: unknown account, no email, blank email) + 5 Tier-2 integration over the REAL route pipeline (dark→503, denied/no-mandate→403 with zero pending logins, valid+resolvable→201 with a pending login carrying `expectedEmail` and the correct per-account slot, unresolvable email→409 fail-closed, missing fields→400). `tsc --noEmit` clean.
+- Side-effects review + mandatory independent second-pass security review (concurred): verified deny-by-default authorization, `expectedEmail` is authoritative (never from the body), agentFp fails closed (a wrong fp denies, never accidentally allows), config-home path-traversal-safe, fail-closed exhaustiveness, and no regression to normal enrollment.
+- Spec: `docs/specs/ws52-account-follow-me-security.md` R1/R6/R6a/S7 (converged, approved).

package/upgrades/side-effects/ws52-account-follow-me-enroll-start.md

@@ -0,0 +1,65 @@
+# Side-Effects Review — WS5.2 Account Follow-Me enroll-drive START route
+
+**Version / slug:** `ws52-account-follow-me-enroll-start`
+**Date:** `2026-06-17`
+**Author:** `Echo (instar-dev agent)`
+**Second-pass reviewer:** `pending (high-risk: mandate authorization + credential enrollment + the live-proof keystone)`
+
+## Summary of the change
+
+WS5.2 R6/R6a(option 2)/S7. The keystone that makes the cross-machine enrollment actually run: a new dark route `POST /subscription-pool/follow-me/enroll/start` (per-server — the operator drives the TARGET machine's own enroll route). Given an operator-issued `account-follow-me` mandate, it (1) verifies the mandate via `ctx.coordination.gate.evaluate({action:'account-follow-me', params:{accountId, targetMachineId, mechanism:'re-mint'}, agentFp, mandateId})` — deny-by-default, non-allow → 403; (2) resolves the operator-APPROVED account email AUTHORITATIVELY (local SubscriptionPool then the replicated `subscription-account-meta` peer views — NEVER the request body, per S7) via the new pure helper `resolveFollowMeEnrollTarget`, unresolvable → 409 fail-closed; (3) allocates a per-account configHome slot on this machine; (4) calls `EnrollmentWizard.start({..., expectedEmail})` returning the device-code/URL. The EXISTING `/complete` route then finishes via `completeFollowMe` (validates the minted login's email == expectedEmail before adding). Files: `src/server/routes.ts` (route + a `resolveAgentFingerprint` helper), `src/core/resolveFollowMeEnrollTarget.ts` (new pure helper), + 2 test files. Dark behind `multiMachine.accountFollowMe`.
+
+## Decision-point inventory
+
+- `POST /subscription-pool/follow-me/enroll/start` mandate check — **add** — the authorization decision: a follow-me enrollment STARTS only under a valid operator `account-follow-me` mandate for this exact (account, this machine, mechanism). Deny-by-default.
+- `resolveFollowMeEnrollTarget` — **add** — the S7 decision input: `expectedEmail` is the authoritatively-resolved approved email, never self-asserted; unresolvable → refuse.
+
+---
+
+## 1. Over-block
+
+A legitimate enrollment whose account email is not yet known on this machine (the replicated `subscription-account-meta` hasn't arrived, or the peer holding it is offline) is refused with 409. This is deliberate fail-closed (S7: never start an enrollment without the approved email to validate against). The operator retries once the account metadata has replicated (the scan that produced the consent already proves the email is known mesh-wide, so in the real flow the email is present). No legitimate "start without a known approved email" case exists.
+
+## 2. Under-block
+
+The route authorizes the START; the actual credential admission is gated downstream by S7 at `/complete` (the minted email must match expectedEmail) and by §6.2 (`isLocallyExecutable`) at selection. This route does not itself verify the device-code login outcome — by design, the completion gate owns that. It also trusts the mandate gate's verdict (the mandate is the authorizer); a mis-issued mandate is the operator's PIN-gated responsibility, not this route's. agentFp resolution that fails (returns a fallback) makes the mandate evaluate DENY (the mandate is party-bound) — safe direction, never an accidental allow.
+
+## 3. Level-of-abstraction fit
+
+Correct layer (R6a option 2): the START runs ON the target machine's own server, driven by the operator from that machine's dashboard after they issue the mandate locally — so the device-code is minted on the machine that will hold the credential and never transits. The mandate check reuses the existing `ctx.coordination.gate` (no new authorization primitive). The email resolution reuses the same authoritative source the scan uses (local pool + replicated meta peer views), extracted into a pure, testable helper rather than re-implemented inline.
+
+## 4. Signal vs authority compliance
+
+This route holds genuine authority (it starts a credential enrollment), exercised through the EXISTING deny-by-default MandateGate — not a new brittle check. The authorization is the mandate (PIN-gated, operator-issued); the route is a consumer of that authority, never a self-grant (requester≠authorizer preserved — the agent cannot issue the mandate). Every uncertain path fails closed (no/denied mandate → 403; unresolvable email → 409). Reference `docs/signal-vs-authority.md`: authority delegated from the operator mandate, deny-by-default, is correctly-placed authority.
+
+## 5. Interactions
+
+Pairs with the existing scan (detection→consent), the S7 `/complete` gate, and §6.2 selection — this route is the missing START link between consent and completion. It does NOT touch the generic `/subscription-pool/enroll` route (normal enrollment unchanged). The configHome slot is per-account (`.claude-followme-<accountId>`), isolated from other accounts. The pending login it issues carries `expectedEmail`, which `completeFollowMe` reads — the two routes compose without shared mutable state beyond the PendingLoginStore (single-flow-per-id discipline). No double-fire (one pending login per start; the wizard's id discipline applies).
+
+## 6. External surfaces
+
+One new HTTP route, dark behind `multiMachine.accountFollowMe` (503 when off — proven by the integration test). It returns a device-code/verificationUrl (already public per the EnrollmentWizard contract). No new config. It is the per-server enroll path (R6a option 2) and does not reach across the mesh itself (the operator drives it on the target's own dashboard).
+
+## 7. Multi-machine posture (Cross-Machine Coherence)
+
+**Machine-local execution BY DESIGN, fed by replicated read-only metadata.** The enrollment runs on the TARGET machine (the one gaining the login); `targetMachineId` is this machine (`ctx.meshSelfId`). The only cross-machine input is the READ-ONLY `subscription-account-meta` projection (the approved email), consumed via the existing peer-views fetch — no credential or configHome crosses. The mandate is verified locally against `ctx.coordination.gate`. This is the intended Mechanism-B posture: each machine mints its own login locally; nothing is replicated except the email metadata used to validate identity.
+
+## 8. Rollback cost
+
+Low. The route is dark by default (no agent runs it until `multiMachine.accountFollowMe` is enabled). No persisted schema change (the configHome slot is created only on a real enrollment; PendingLogin already carries `expectedEmail` from S7). Revert is a single-commit back-out of the route + helper; no migration, no state repair.
+
+---
+
+## Second-pass review
+
+**Concur with the review.** Independent audit of the full route (`routes.ts:20886-20947`), `resolveAgentFingerprint`, the pure resolver, `MandateGate.evaluate` (`:85-135`), `EnrollmentWizard.start`/`completeFollowMe`, and both test files. tsc EXIT=0; 11/11 pass.
+
+1. **Deny-by-default** — missing ids → 400; gate called with the exact action/params/mandateId; `verdict.decision !== 'allow'` → 403 (correctly not `=== 'deny'`). No path starts without allow. Route never issues/widens a mandate (requester≠authorizer).
+2. **expectedEmail authoritative (S7)** — resolver reads only `localAccounts` + `peerViews`, never `req.body` (route destructures only `mandateId`/`accountId`); blank/missing → 409 fail-closed, `start` not called. Chain holds: `start` persists expectedEmail, `completeFollowMe` validates it.
+3. **agentFp (critical)** — fails closed: a wrong/fallback fp is not a named mandate party → MandateGate step 5 denies. A wrong fp can never produce allow.
+4. **configHome isolation** — `accountId.replace(/[^a-z0-9-]/gi,'-')`; `../../etc` → `------etc`, no traversal; per-account slot.
+5. **No regression** — routes.ts diff +93/-0 purely additive; generic `/enroll` + `/complete` untouched.
+6. **Fail-closed exhaustiveness** — dark→503, missing deps→503, bad body→400, non-allow→403, unresolvable email→409, start throws→500. None start a bogus enrollment.
+7. **Test adequacy** — dark→503, denied/no-mandate→403 (zero pending logins), valid→201 (pending carries expectedEmail + correct slot), unresolvable→409, 400; unit covers resolved + all fail-closed branches.
+
+Minor note (not a defect): the integration test stubs `gate.evaluate` (exercises route branching, not real party-binding — that guarantee rests on MandateGate, verified directly).