instar 1.3.120 → 1.3.122

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-30T13:00:21.305Z",
-  "instarVersion": "1.3.120",
+  "generatedAt": "2026-05-30T19:19:17.451Z",
+  "instarVersion": "1.3.122",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "85676f4062c0ea35989c300891883e3d6db36080e4674bca111020a9d64d1081",
+      "contentHash": "fcb2697c6ec9a8bef582f84a0f536c7eebd9d5b4c52e1679a47684069746f8a6",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.121.md

@@ -0,0 +1,39 @@
+# Instar Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**Threadline session-completion demotion now writes the matched conversation
+directly.**
+
+The v1.3.120 UUID fallback correctly found real inbound Threadline worker
+sessions by `SessionManager` UUID, but the demotion path re-entered the resume
+guard through `onSessionEnd()`. That guard expects a resumable Claude/Codex
+transcript JSONL, while live Threadline spawns persist the `SessionManager`
+session id. The result was a misleading `demoted 1` log with the conversation
+still left `active`.
+
+Fix: `ThreadlineRouter.onSessionComplete()` now demotes from the already matched
+conversation entry instead of re-reading through the resume guard. The existing
+awaiting-reply skip still applies before any write.
+
+## What to Tell Your User
+
+Threadline worker threads now really retire when their spawned session is
+stopped or completes. The previous release could log that it demoted a thread
+without actually moving the conversation out of the active list.
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Direct completion demotion | Automatic when a Threadline worker emits `sessionComplete` |
+| Non-transcript SessionManager UUID support | Automatic for inbound Threadline spawns |
+
+## Evidence
+
+- **Regression:** `ThreadlineRouter.onSessionComplete()` demotes a UUID-matched
+  active thread even when that UUID has no transcript JSONL.
+- **Live canary basis:** v1.3.120 matched by UUID and logged `demoted 1`, but the
+  persisted conversation stayed `active`; this patch fixes that write path.

package/upgrades/1.3.122.md

@@ -0,0 +1,86 @@
+# Instar Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+Four codex-compatibility and robustness fixes found while dogfooding a codex agent.
+
+**1. Codex session resume now works.** `ThreadResumeMap` / `TopicResumeMap`
+`jsonlExists` only checked the Claude transcript layout
+(`~/.claude/projects/<encoded>/<uuid>.jsonl`), so it returned false for every
+codex session — `get()` returned null and resume silently failed fleet-wide for
+codex agents. It now also resolves codex rollout files
+(`$CODEX_HOME/sessions/YYYY/MM/DD/rollout-<ts>-<uuid>.jsonl`) via a new
+`findRolloutFileSync`. The Claude path is byte-for-byte unchanged.
+
+**2. The silence watchdog now sees codex jobs.** `ActiveWorkSilenceSentinel`
+only recognized codex's interactive-TUI "working" signature, so a
+`codex exec --json` job (which emits a JSON event stream, not the TUI status
+line) read as idle and was never watched. The codex activity signature now
+matches the exec-json event stream (`thread`/`turn`/`item` events); the idle
+model-name guard is preserved.
+
+**3. Duplicate agent-to-agent replies fixed.** A sender that timed out on the
+receiver's session spawn retried with a fresh `message.id`, slipping past the
+id-based relay dedup and causing a duplicate reply. A bounded content-hash dedup
+at the `relay-agent` ingress collapses an identical retry within a short window.
+
+**4. Clearer ship-gate error.** The artifact-sha-mismatch block now prints the
+exact sha to write plus the freeze / re-stage / no-amend recipe.
+
+## Summary of New Capabilities
+
+- Codex-based agents resume conversations across restarts and compactions, the
+  same as Claude agents.
+- The silent-freeze watchdog now monitors codex background/job sessions, so a
+  wedged `codex exec --json` job is detected and nudged instead of hanging
+  unseen.
+- Agent-to-agent messaging is idempotent against a slow-retry: an identical
+  message redelivered within the window is acknowledged once, not replied to
+  twice.
+- The developer ship-gate gives an actionable sha-mismatch message instead of a
+  dead end.
+
+## Evidence
+
+**1. Codex resume.** Reproduction: take a codex agent's saved resume UUID and
+call the resume guard. Before: `jsonlExists(uuid)` returned `false` (it only read
+`~/.claude/projects`), so `get()` returned `null` and the session re-spawned
+fresh instead of resuming. After: with a codex rollout present at
+`$CODEX_HOME/sessions/.../rollout-<ts>-<uuid>.jsonl` and no Claude jsonl,
+`jsonlExists(uuid)` returns `true` and resume proceeds. A fixture test sets
+`$HOME` to a codex-only layout and asserts the predicate flipped false to true.
+
+**2. Silence watchdog.** Reproduction observed live 2026-05-30: a
+`codex exec --json` commitment-detection job froze mid-turn (last pane output
+`{"type":"turn.started"}`) and sat idle for ~8.5 hours; the watchdog never
+flagged it because `looksActivelyWorking` returned false for the JSON event
+frame. After: the same frame is recognized as active, so the session is
+silence-eligible and the freeze is detected after the threshold. The idle
+model-name line (`gpt-5.3-codex medium · <dir>`) still reads as inactive (no
+false positive).
+
+**3. Duplicate replies.** Reproduction observed live 2026-05-30: a codex agent's
+reply doubled six times in one evening — the sender timed out on the receiver's
+spawn and resent the same content with a fresh id, which the id-based dedup did
+not catch, so the receiver spawned and replied twice. After: an integration test
+drives the real `POST /messages/relay-agent`; a retry with a fresh id but
+identical `(sender, thread, content)` is deduped and the receiver is handed the
+message exactly once, while genuinely different content and a different sender
+both still process.
+
+**4. Ship-gate message.** Reproduction observed live 2026-05-30: an agent hit the
+sha-mismatch block, regenerated the artifact to "fix" it (which changed the
+volatile `Date:` line, hence the sha), and chased the hash for ~2 hours. Before:
+the message only said "artifact content has changed (sha mismatch)". After: a
+subprocess test stages a deliberately-wrong recorded sha and confirms the block
+now prints the exact computed sha plus the re-stage / no-amend recipe.
+
+## What to Tell Your User
+
+Codex-based agents can now resume conversations and are watched by the
+freeze-detector just like Claude agents; agent-to-agent chats no longer
+double-send on a slow retry; and the developer ship-gate gives an actionable
+message instead of a dead end. No action needed — these land automatically on
+update.

package/upgrades/side-effects/1.3.121.md

@@ -0,0 +1,97 @@
+# Side-Effects Review — Threadline completion direct demotion
+
+**Version / slug:** `1.3.121`
+**Date:** 2026-05-30
+**Author:** `instar-codey`
+**Second-pass reviewer:** `live canary`
+
+## Summary of the change
+
+This patch fixes the final write step in Threadline session-completion
+retirement. The v1.3.120 UUID lookup found live inbound worker conversations,
+but `ThreadlineRouter.onSessionComplete()` delegated to `onSessionEnd()`, which
+re-read the thread through the resume guard. For live Threadline spawns the
+stored UUID is a `SessionManager` id, not a resumable transcript UUID, so the
+guard could return null. The completion log then said `demoted 1` while the
+conversation stayed `active`.
+
+The router now writes the matched entry to `idle` directly after the
+awaiting-reply guard passes.
+
+## Decision-point inventory
+
+- `ThreadlineRouter.onSessionComplete()` — modify — demotes from the matched
+  live conversation entry instead of re-entering the transcript resume guard.
+- `ThreadlineRouter.onSessionEnd()` — unchanged — remains the explicit
+  thread-id + resumable-UUID path.
+
+---
+
+## 1. Over-block
+
+No block/allow surface. The over-demotion risk is unchanged from v1.3.120:
+only active conversations already matched by bound session name or
+SessionManager UUID are moved to `idle`, and `awaiting-reply` conversations are
+skipped before any write.
+
+---
+
+## 2. Under-block
+
+The change still cannot demote records that have neither a matching
+`boundSessionName` nor a matching `sessionUuid`. The observed live path does
+persist `sessionUuid`, and v1.3.120 added the lookup.
+
+---
+
+## 3. Level-of-abstraction fit
+
+The fix stays in the lifecycle router, where the completion decision already
+lives. `ThreadResumeMap` remains the storage adapter; it is not given new
+authority to decide lifecycle state.
+
+---
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change has no block/allow surface.
+
+The authoritative completion signal still comes from `SessionManager`. This
+patch only corrects how the router applies that signal to a matched local
+conversation.
+
+---
+
+## 5. Interactions
+
+- **Resume guard:** direct demotion intentionally bypasses the transcript
+  existence guard because the match already came from a live conversation
+  record, not from a user-initiated resume lookup.
+- **Awaiting reply:** preserved; `awaiting-reply` records are counted and left
+  untouched before direct demotion runs.
+- **Double match:** still deduped by `threadId` before writes.
+- **Logging:** the existing `demoted N / skipped M` log now reflects actual
+  writes instead of possible guard-filtered no-ops.
+
+---
+
+## 6. External surfaces
+
+Other agents and dashboards should see completed Threadline worker conversations
+leave the active set promptly. Existing records are not migrated; they demote
+when their bound worker emits a completion event.
+
+---
+
+## 7. Rollback cost
+
+Rollback is a small patch reverting `onSessionComplete()` to delegate through
+`onSessionEnd()`. No schema or data migration is involved.
+
+## Conclusion
+
+The live canary caught a false-positive demotion log. This patch keeps the
+v1.3.120 name/UUID matching and makes the matched completion path actually
+persist `idle`.