instar 1.3.613 → 1.3.614

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.613",
+  "version": "1.3.614",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-17T12:30:56.584Z",
-  "instarVersion": "1.3.613",
+  "generatedAt": "2026-06-17T13:13:46.301Z",
+  "instarVersion": "1.3.614",
   "entryCount": 201,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "4666744e990aab57550cd8216d9d56e2a1c1a33ed90001f6e96afb20399d0f85",
+      "contentHash": "d3b9435003ddf83d05ccfd6574a296907ca85320f54d35b27488fde6b9feeb08",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.614.md

@@ -0,0 +1,22 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+WS5.2 R6b — the Phase-C headless-enrollment reliability contract, layered onto the existing secure enroll-start route without weakening its mandate-gate/authoritative-email guarantees. Three parts: (1) a configurable, larger scrape-timeout budget for remote/cloud enrollments — new config knob `multiMachine.accountFollowMe.remoteScrapeTimeoutMs` (default 180000ms / 3min), threaded into the follow-me enroll path ONLY (normal local enrollment keeps the 60s default); `FrameworkLoginDriver.drive()` gained an optional per-call timeout override (invalid values fall back safely). (2) The honest failure surface: `EnrollmentWizard.start()` now catches a login-drive failure and re-raises a typed `EnrollmentDriveError` — and because the drive runs BEFORE the pending-login is persisted, a failure never leaves a silently-stuck pending-login; both enroll routes map it to an honest, retryable 502 instead of an opaque 500. (3) The two-code Claude case: the remote path prefers the device-code single-code flow where the provider supports it (OpenAI/Codex), and for Claude (no device-code endpoint) the larger budget covers a late-arriving verification URL.
+
+## What to Tell Your User
+
+Still nothing to do — this hardens the multi-machine enrollment (off by default). When a machine enrolls one of your accounts, it now gets a realistic login window (cloud/remote logins are slower than local), prefers the simplest one-code login where possible, and if the login can't start it tells you honestly with a retry instead of leaving a stuck half-started enrollment.
+
+## Summary of New Capabilities
+
+Enrollment reliability (dark): a configurable larger remote scrape-timeout, an honest typed drive-failure surface (no silently-stuck pending logins; retryable 502), and a device-code preference for remote enrollments. No user-facing surface is live in this release.
+
+## Evidence
+
+- 60 tests across 4 files: `enrollment-wizard` (honest-failure + no-dangling-pending for local & remote, remoteKind, device-code preference, explicit-kind-wins, timeout threading), `framework-login-driver` (per-call override reaches a late artifact; default still times out; invalid override falls back), `ws52-account-follow-me-wiring` (the new defaults knob), and the enroll-start integration test (kept all of #1214's security cases: dark→503, denied→403, valid→201 w/ S7 email, unresolvable→409, 400; added: drive-throw→502 honest + no stuck pending, and the drive receives the larger remote timeout + device-code). `tsc --noEmit` clean.
+- Side-effects review + mandatory independent second-pass security review (concurred): CRITICALLY verified the reconciliation kept #1214's mandate gate + authoritative-email resolution intact (this change was reconciled after a parallel-timing collision); confirmed no stuck pending-login, local enrollment unchanged, both callers handle the typed error, and no fail-open.
+- Spec: `docs/specs/ws52-account-follow-me-security.md` R6/R6b (converged, approved).

package/upgrades/side-effects/ws52-account-follow-me-r6b-reliability.md

@@ -0,0 +1,66 @@
+# Side-Effects Review — WS5.2 R6b: Phase-C headless-enrollment reliability
+
+**Version / slug:** `ws52-account-follow-me-r6b-reliability`
+**Date:** `2026-06-17`
+**Author:** `Echo (instar-dev agent)`
+**Second-pass reviewer:** `pending (high-risk: enrollment/credential path — EnrollmentWizard.start failure handling + the follow-me enroll-start route)`
+
+## Summary of the change
+
+WS5.2 R6b — the Phase-C headless-enrollment reliability contract, layered onto the existing (#1214) secure enroll-start route WITHOUT weakening its mandate-gate/authoritative-email guarantees. Three parts: (1) `FrameworkLoginDriver.drive()` accepts an optional per-call `scrapeTimeoutMs` override (non-finite/≤0 ignored → falls back to the constructor default); a new config knob `multiMachine.accountFollowMe.remoteScrapeTimeoutMs` (default 180000ms / 3min) is threaded into the FOLLOW-ME enroll path only — normal local enrollment keeps the 60s default. (2) The HONEST FAILURE SURFACE: `EnrollmentWizard.start()` now wraps `driveLogin` in try/catch and re-raises a drive failure as a typed `EnrollmentDriveError` (with `code`/`operatorMessage`/`cause`); because `start()` calls `driveLogin` BEFORE `store.issue()`, a drive failure never leaves a stuck pending-login. Both `start()` callers map `EnrollmentDriveError` → an honest, retryable 502 (the generic `/subscription-pool/enroll` route and the follow-me enroll-start route) instead of a bare 500. (3) The two-code Claude case: the follow-me/remote path prefers the device-code single-code flow where the provider supports it (`remoteKind()` → device-code for OpenAI/Codex; Anthropic has no device-code endpoint so it stays `url-code-paste`), and for the no-single-code provider the larger remote timeout covers a late-arriving verification URL (instar only scrapes the URL; the second code is operator→CLI, never scraped). Files: `FrameworkLoginDriver.ts`, `EnrollmentWizard.ts`, `ConfigDefaults.ts`, `routes.ts` (502 mapping + enhancements on #1214's route — the duplicate insecure route an earlier stale-base build added was removed; #1214's secure route is authoritative), + 4 test files.
+
+## Decision-point inventory
+
+- `EnrollmentWizard.start()` drive-failure handling — **modify** — a drive failure becomes a typed error a caller can render honestly, never a silent stuck pending-login.
+- Follow-me enroll-start route 502 mapping + remote timeout/device-code — **modify** (on #1214's route) — enrollment reliability; the mandate gate + authoritative email (the authorization decisions) are UNCHANGED.
+- `remoteScrapeTimeoutMs` config knob — **add** — larger cloud scrape budget, follow-me path only.
+
+---
+
+## 1. Over-block
+
+None. The larger timeout only ever makes the remote path WAIT LONGER before failing — it never rejects a legitimate enrollment that the old 60s would have accepted. The honest-failure path turns a previously-opaque drive throw into a clear 502 retry signal; it does not reject anything that previously succeeded. Local enrollment is byte-for-byte unchanged (the knob is read only on the follow-me path).
+
+## 2. Under-block
+
+The reliability layer does not add authorization — that remains #1214's mandate gate (unchanged). A drive that SUCCEEDS but mints the wrong account is still caught downstream by S7 at `/complete` (email validation) — R6b does not touch that. The honest-failure surface reports a START failure; it does not itself verify the eventual login outcome (by design — the completion gate owns that).
+
+## 3. Level-of-abstraction fit
+
+Correct layers: the timeout knob lives on the driver (which owns the scrape), the failure-typing lives on `EnrollmentWizard.start` (which owns the drive call), and the HTTP mapping lives on the routes (which own the operator-facing surface). The kind-preference (device-code) extends the existing `defaultKind` logic rather than re-implementing flow selection. No logic was duplicated; the earlier stale-base duplicate route was removed in favor of #1214's secure one.
+
+## 4. Signal vs authority compliance
+
+R6b adds NO new authority — it is purely reliability + honest reporting. The only authority on this path (the mandate gate) is #1214's and is untouched. `EnrollmentDriveError` is a signal (a typed failure the caller renders); it never blocks an authorized action — it reports that a drive could not START, with a retry hint. Deterministic (a timeout or a thrown driver error), not heuristic.
+
+## 5. Interactions
+
+The change composes with #1214's enroll-start route (enhances it) and the S7 `/complete` gate (unchanged downstream). The `start()`-before-`issue()` ordering is the load-bearing invariant for "no stuck pending-login on drive failure" — preserved. Both `start()` callers were updated to map the typed error (no caller left throwing an opaque 500). The background `reissueExpired` sweep already swallowed driver errors by design and was deliberately NOT changed (it is not the start path). No double-fire, no shadowing.
+
+## 6. External surfaces
+
+One new config knob (`remoteScrapeTimeoutMs`, additive, defaulted). The enroll-start + generic enroll routes now return 502 (retryable) on a drive failure instead of 500 — a more honest status for the same failure class; both remain dark behind `multiMachine.accountFollowMe` (the follow-me route) / unchanged-gating (the generic route). No new route. No cross-machine surface.
+
+## 7. Multi-machine posture (Cross-Machine Coherence)
+
+The reliability layer is per-machine by nature: the larger timeout + device-code preference apply to the enrollment running ON the target machine (the one minting its own login). The config knob is read locally. Nothing replicates. This directly serves the multi-machine case (a remote/slower target gets a realistic login budget + an honest failure message instead of a silent 60s timeout), which is exactly the Phase-C scenario R6b targets.
+
+## 8. Rollback cost
+
+Low. Dark behind `multiMachine.accountFollowMe` for the follow-me path; the generic-route 502 mapping is a status-code refinement (revert is trivial). The config knob is additive (absence → the driver's existing 60s default). No migration, no persisted state. Single-commit back-out.
+
+---
+
+## Second-pass review
+
+**Concur with the review.** Independent audit (the reconciliation was verified to NOT weaken #1214):
+
+1. **(CRITICAL) Mandate authorization intact** — exactly one `/subscription-pool/follow-me/enroll/start` route; the mandate gate (`ctx.coordination.gate.evaluate({action:'account-follow-me',...})` → 403 on `decision !== 'allow'`) and `resolveFollowMeEnrollTarget` (409 fail-closed, body email never used) are fully preserved. R6b only inserted `remote:true` + `remoteScrapeTimeoutMs` INSIDE the already-gated block.
+2. **No stuck pending-login** — `driveLogin` runs before `store.issue()`; a throw is caught + re-raised as `EnrollmentDriveError` before any persistence; tests assert `pending()` empty after a drive throw.
+3. **Local enrollment unchanged** — the larger budget + `remoteKind` apply only when `remote:true`; the generic route keeps the 60s default.
+4. **Both start() callers handle EnrollmentDriveError** → 502 retryable; none unhandled.
+5. **Config knob** — `remoteScrapeTimeoutMs` default 180000, read on the follow-me path with a `Number.isFinite` guard.
+6. **Device-code preference** — `remoteKind` returns device-code only for openai; Claude stays `url-code-paste` (no unsupported flow forced).
+7. **No fail-open** — invalid timeout falls back to the safe default (tested); deny-by-default gate unchanged.
+
+`tsc --noEmit` EXIT=0; 60/60 tests pass.