instar 1.3.801 → 1.3.802

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.801",
+  "version": "1.3.802",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-10T09:04:03.807Z",
-  "instarVersion": "1.3.801",
+  "generatedAt": "2026-07-10T10:30:16.122Z",
+  "instarVersion": "1.3.802",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "657dbe81f5a604260f92afaaee083441b07e1d29ff13a09e5e70861aa5847beb",
+      "contentHash": "ebbf2d5b98d390b5b127cda84bc053b0ad9a0b551d59566dee002f4607f2d235",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1538,7 +1538,7 @@
       "type": "subsystem",
       "domain": "sessions",
       "sourcePath": "src/core/SessionManager.ts",
-      "contentHash": "4b5f5b8d691b2780dd8d32f4b44830cfac4a16d0bd345b84d3dc95bb0c7885da",
+      "contentHash": "3de7414d3c906135486c9a14e5f52418ce168cd324373eb43a48e655efc47df3",
       "since": "2025-01-01"
     },
     "subsystem:auto-updater": {
@@ -1562,7 +1562,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "e0b242c961c5b5d2e2587d676a3ce960b5beec78a17353ddeb5d24d25ad0cb48",
+      "contentHash": "edf52d24d575e7dd9b2f77507d8e170f328ade6f6340409a00efa92afbb53411",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -14,7 +14,7 @@
 // existing-agent migration there) so the two can never drift. Imported as a runtime
 // function call inside generateClaudeMd — no module-init cycle (PostUpdateMigrator
 // never imports templates).
-import { PLAYWRIGHT_PROFILE_REGISTRY_CLAUDEMD_SECTION, MACHINE_LOAD_ASSESSMENT_CLAUDEMD_SECTION, DYNAMIC_MCP_CLAUDEMD_SECTION, SENDER_REJECTION_CLAUDEMD_SECTION, SCOPE_ACCRETION_CLAUDEMD_SECTION, MESH_SELF_HEALING_CLAUDEMD_SECTION, WRITE_ADMISSION_CLAUDEMD_SECTION, DOORWAY_REGISTRY_CLAUDEMD_SECTION, EXTERNAL_HOG_CLAUDEMD_SECTION, ROUTING_SPEND_CLAUDEMD_SECTION } from '../core/PostUpdateMigrator.js';
+import { SESSION_LISTING_HYGIENE_CLAUDEMD_SECTION, PLAYWRIGHT_PROFILE_REGISTRY_CLAUDEMD_SECTION, MACHINE_LOAD_ASSESSMENT_CLAUDEMD_SECTION, DYNAMIC_MCP_CLAUDEMD_SECTION, SENDER_REJECTION_CLAUDEMD_SECTION, SCOPE_ACCRETION_CLAUDEMD_SECTION, MESH_SELF_HEALING_CLAUDEMD_SECTION, WRITE_ADMISSION_CLAUDEMD_SECTION, DOORWAY_REGISTRY_CLAUDEMD_SECTION, EXTERNAL_HOG_CLAUDEMD_SECTION, ROUTING_SPEND_CLAUDEMD_SECTION } from '../core/PostUpdateMigrator.js';
 
 export interface AgentIdentity {
   name: string;
@@ -883,6 +883,7 @@ ${MESH_SELF_HEALING_CLAUDEMD_SECTION(port)}
 ${WRITE_ADMISSION_CLAUDEMD_SECTION(port)}
 ${DOORWAY_REGISTRY_CLAUDEMD_SECTION(port)}
 ${ROUTING_SPEND_CLAUDEMD_SECTION(port)}
+${SESSION_LISTING_HYGIENE_CLAUDEMD_SECTION(port)}
 **Per-Feature LLM Metrics & LLM Activity (Observable Intelligence)** — Audit what each of your LLM-driven gates/sentinels actually does: WHICH provider + model ran it, how often it ACTED (fired) vs found nothing (noop), how often it was skipped to save rate limits (shed), cost, and latency. This is the *Observable Intelligence* standard — no autonomous AI action the system takes is allowed to be invisible. Read-only observability — it never gates anything.
 - Check: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/metrics/features?sinceHours=24"\`
 - Returns \`{ totals, features: [{ feature, frameworks, models, byModel, calls, realCalls, tokensIn, tokensOut, tokensCached, fired, noop, shed, fireRate, p50LatencyMs, p95LatencyMs, ... }] }\` — one row per system (e.g. MessagingToneGate, MessageSentinel). \`frameworks\`/\`models\` = which provider(s) actually served the call; \`fireRate\` = how often it acts; \`shed\` = skipped by the rate-limit guard. Filter with \`?feature=<name>\`.

package/upgrades/1.3.802.md

@@ -0,0 +1,36 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Session-listing hygiene (CMT-1936; live evidence 2026-07-09: the Mac Mini's `GET /sessions` answered 53 rows of which 52 were finished background runs — 22 `mentor-stage-a-*` headless one-shots + 28 `job-*` records — read by the operator as "duplicate sessions running across both machines"). Three parts:
+
+1. **Bounded finished-session retention** (`SessionManager.cleanupStaleSessions`): `failed` records are now pruned (previously retained FOREVER); a terminal record with a missing/unparseable `endedAt` falls back to `startedAt` instead of being skipped forever (the second unbounded hole); headless one-shots (`launchLane:'headless'` — the mentor Stage-A shape) get the 60-min background TTL instead of the 24-h interactive TTL; the hard cap (default 50, oldest-ended first) now counts every terminal class. All knobs config-tunable via `sessions.retention` (`killedTtlMinutes` / `completedJobTtlMinutes` / `completedTtlHours` / `maxFinished`), applied at the next server restart (SessionManager snapshots config at boot) — absence preserves shipped defaults.
+2. **Active-by-default listing** (`GET /sessions`): the default answer is ACTIVE sessions only (`starting`/`running`); `?include=all` returns the full registry; `?status=<valid>` keeps its exact prior semantics. The `scope=pool` fan-out forwards the caller's opt-in to peers and defensively filters a LEGACY peer's full-registry answer (the server-side twin of the dashboard's 2026-06-11 client-side filter), and `pool.machines[].sessionCount` now counts the requested view — no more finished-record-inflated machine counts.
+3. **Genuine cross-machine duplicate flag**: the pool view computes `pool.duplicateTopics` — the SAME conversation (platform + platformId) with a LIVE session on ≥2 machines at once — tags each such row `duplicateTopic: true`, and the dashboard badges it red. The same recurring job on each machine (benign, by design) is never flagged.
+
+Agent Awareness + Migration Parity: new `Session Listing Hygiene` CLAUDE.md section shipped in `generateClaudeMd` and appended to existing agents via `migrateClaudeMd` (content-sniffed, idempotent).
+
+## What to Tell Your User
+
+- Your session list now shows what is actually RUNNING. Finished background chores no longer pile up in the view — on 2026-07-09 one machine showed "53 sessions" when only 1 was really running; that misread is structurally gone.
+- Finished session records are cleaned up on a real schedule now (background runs after an hour, conversations after a day, hard cap 50) — and you can tune every window in config if you want longer history.
+- If the SAME conversation is ever genuinely live on two of your machines at once — the real incoherency — the dashboard flags it with a red "duplicate" badge instead of leaving you to guess. Matching job names across machines are each machine's own scheduled copy and are deliberately not flagged.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|---|---|
+| Active-only session listing (default) | `GET /sessions` (Bearer) — running/starting only |
+| Full registry incl. finished runs | `GET /sessions?include=all` (or `?status=completed|failed|killed`) |
+| Genuine cross-machine duplicate flag | `GET /sessions?scope=pool` → `pool.duplicateTopics` + per-row `duplicateTopic:true`; red badge on the dashboard sessions list |
+| Finished-record retention knobs | `.instar/config.json` → `sessions.retention` (`killedTtlMinutes`, `completedJobTtlMinutes`, `completedTtlHours`, `maxFinished`) — applies at the next server restart |
+
+## Evidence
+
+- Tier 1: `tests/unit/SessionManager-retention.test.ts` (9 behavioral tests — both sides of every TTL boundary, failed/killed pruning, endedAt→startedAt fallback, unparseable-timestamp expiry, running never touched, maxFinished oldest-first cap, config knobs live, nonsensical config falls back to defaults); `tests/unit/SessionManager-injection.test.ts` hard-cap block updated to the new implementation.
+- Tier 2: `tests/integration/sessions-listing-hygiene.test.ts` (8 tests — default active-only, include=all, status semantics preserved, invalid status → default, legacy-peer defensive filter + honest machine counts, include=all forwarding, genuine duplicate flagged both rows, benign shapes NOT flagged even under include=all).
+- Tier 3: `tests/e2e/sessions-listing-hygiene-lifecycle.test.ts` (5 tests — real AgentServer + real on-disk records on the production init path: default view, include=all, status filter, additive `pool.duplicateTopics`, Bearer auth).
+- Regression sweep: sessions-pool-scope (integration + e2e), remote-session-close, sessions-launch-lane, dashboard poolTileStatusFilter/sessionMachineBadge, route-validation-edge, route-completeness, all PostUpdateMigrator suites, scaffold-templates, capabilities-discoverability, server-full — green.

package/upgrades/session-listing-hygiene.eli16.md

@@ -0,0 +1,26 @@
+# Session Listing Hygiene — plain-English overview
+
+## What this actually is
+
+When you ask your agent "what sessions are running?" — or open the dashboard — the answer was polluted: on 2026-07-09 the Mac Mini reported 53 sessions, and 52 of them were FINISHED background chores (little 5-minute mentor runs and scheduled job checks) that had already ended but were still sitting in the list. Both machines also run the same scheduled jobs on purpose, so the wall of near-identical names looked exactly like "the same session running twice across my machines" — a scary bug that wasn't actually happening.
+
+This change makes the session list tell the truth in three ways:
+
+1. **The list shows what's RUNNING.** `GET /sessions` now answers with active sessions only. The finished ones aren't deleted from view forever — add `?include=all` and you get the whole registry, exactly as before.
+2. **Finished records get cleaned up on a real schedule.** Finished background runs are pruned after an hour, finished conversations after a day, and there's a hard cap of 50 retained records no matter what. Two genuine leaks are fixed: records of FAILED sessions were never cleaned up at all, and a record missing its end-timestamp was kept forever. Every window is tunable in config (`sessions.retention`) if you want longer history.
+3. **A REAL duplicate now shouts.** The cross-machine view computes the one case that actually matters: the SAME conversation with a LIVE session on two machines at once. That gets a red "duplicate" badge on the dashboard and a `pool.duplicateTopics` entry in the API. The benign look-alike — each machine running its own copy of a scheduled job — is never flagged, because that's how the system is designed to work.
+
+## What already existed
+
+A cleanup pass already pruned some finished records (jobs after 1 h, conversations after 24 h, cap 50) — but the mentor-run shape slipped into the 24 h bucket, `failed` records slipped through entirely, and the listing itself never distinguished finished from running. The dashboard privately filtered finished rows out of its tiles; the API (what the agent itself and the pool view read) did not.
+
+## The safeguards, in plain terms
+
+- Nothing running is ever touched — only records of sessions that already ended.
+- Old machines and new machines can mix during rollout: the merged view filters an old machine's unfiltered answer, so no wall of stale rows sneaks back in.
+- The duplicate badge is a signal only. It never kills or blocks anything — the existing safety layers own that.
+- Rollback is cheap: config knobs restore any retention window; the listing change reverts with the PR.
+
+## What you actually need to decide
+
+Nothing — defaults are chosen to match the existing behavior everywhere except the two leak fixes and the mentor-run class (24 h → 1 h, the exact accumulation that caused the misread). If you want finished runs kept longer, set `sessions.retention.completedJobTtlMinutes` (or `completedTtlHours` / `maxFinished`) in `.instar/config.json` — it takes effect at the next server restart (the session manager reads its config once, at boot).