instar 1.3.123 → 1.3.124

package/dist/providers/adapters/openai-codex/observability/sessionPaths.d.ts

@@ -25,7 +25,29 @@ export declare function findRolloutFile(threadId: string, codexHome?: string): P
  * Claude agent) returns null fast — `readdirSync` throws and is caught.
  */
 export declare function findRolloutFileSync(threadId: string, codexHome?: string): string | null;
-/** List all rollout files under $CODEX_HOME/sessions, newest first. */
+/**
+ * List rollout files under $CODEX_HOME/sessions, newest first (by mtime).
+ *
+ * Codex partitions rollouts by date: `sessions/YYYY/MM/DD/rollout-*.jsonl`. A
+ * busy account accumulates tens of thousands of these over time (one real
+ * machine: 14k files / 1.4 GB). The previous implementation walked AND
+ * `stat`ed EVERY file on every call before slicing to `limit`, which made
+ * callers like `GET /codex/usage` and the TokenLedger scan take tens of
+ * seconds (the route timed out) on a large history.
+ *
+ * This walks the date-partition directories in DESCENDING date order and
+ * `stat`s only the rollout files in the newest partitions, stopping once it has
+ * `limit` candidates (after covering >= MIN_PARTITIONS_SCANNED non-empty
+ * partitions, so a day is never cut mid-way and the cross-midnight boundary is
+ * covered). Work is bounded to the most-recent partitions instead of the entire
+ * history. Trade-off: "newest by mtime" becomes "newest among the most-recent
+ * date partitions, then by mtime" — for the rate-limit reader this is exact
+ * (the account-wide windows are identical across any recently-active session),
+ * and for the resume/token-ledger callers a session older than the scanned
+ * partitions yet still the single most-recently-touched file is the only miss,
+ * which is vanishingly rare in practice. A non-date-partitioned layout falls
+ * back to the original full walk (correctness over speed).
+ */
 export declare function listAllRollouts(codexHome?: string, limit?: number): Promise<ReadonlyArray<{
     path: string;
     mtime: number;

package/dist/providers/adapters/openai-codex/observability/sessionPaths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionPaths.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/observability/sessionPaths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,wBAAgB,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,4EAA4E;AAC5E,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIvF;AAoDD,uEAAuE;AACvE,wBAAsB,eAAe,CACnC,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,SAAM,GACV,OAAO,CAAC,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAMzD"}
+{"version":3,"file":"sessionPaths.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/observability/sessionPaths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,wBAAgB,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,4EAA4E;AAC5E,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIvF;AAyDD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,eAAe,CACnC,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,SAAM,GACV,OAAO,CAAC,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CA0CzD"}

package/dist/providers/adapters/openai-codex/observability/sessionPaths.js

@@ -96,13 +96,110 @@ async function walkForUuid(root, uuid) {
     }
     return null;
 }
-/** List all rollout files under $CODEX_HOME/sessions, newest first. */
+// Always cover at least this many newest non-empty day-partitions before an
+// early break, so the cross-midnight boundary (and a session that started
+// "yesterday" but is still the most recently active) is not missed.
+const MIN_PARTITIONS_SCANNED = 2;
+/**
+ * List rollout files under $CODEX_HOME/sessions, newest first (by mtime).
+ *
+ * Codex partitions rollouts by date: `sessions/YYYY/MM/DD/rollout-*.jsonl`. A
+ * busy account accumulates tens of thousands of these over time (one real
+ * machine: 14k files / 1.4 GB). The previous implementation walked AND
+ * `stat`ed EVERY file on every call before slicing to `limit`, which made
+ * callers like `GET /codex/usage` and the TokenLedger scan take tens of
+ * seconds (the route timed out) on a large history.
+ *
+ * This walks the date-partition directories in DESCENDING date order and
+ * `stat`s only the rollout files in the newest partitions, stopping once it has
+ * `limit` candidates (after covering >= MIN_PARTITIONS_SCANNED non-empty
+ * partitions, so a day is never cut mid-way and the cross-midnight boundary is
+ * covered). Work is bounded to the most-recent partitions instead of the entire
+ * history. Trade-off: "newest by mtime" becomes "newest among the most-recent
+ * date partitions, then by mtime" — for the rate-limit reader this is exact
+ * (the account-wide windows are identical across any recently-active session),
+ * and for the resume/token-ledger callers a session older than the scanned
+ * partitions yet still the single most-recently-touched file is the only miss,
+ * which is vanishingly rare in practice. A non-date-partitioned layout falls
+ * back to the original full walk (correctness over speed).
+ */
 export async function listAllRollouts(codexHome, limit = 100) {
     const root = path.join(codexHomeFromConfig(codexHome), 'sessions');
-    const all = [];
-    await walkCollect(root, all);
-    all.sort((a, b) => b.mtime - a.mtime);
-    return all.slice(0, limit);
+    const dayDirs = await listDayPartitionsDescending(root);
+    if (dayDirs === null) {
+        // Unexpected/flat layout — fall back to the full walk so we never silently
+        // miss files just because the date partitions weren't where we expected.
+        const all = [];
+        await walkCollect(root, all);
+        all.sort((a, b) => b.mtime - a.mtime);
+        return all.slice(0, limit);
+    }
+    const out = [];
+    let partitionsWithFiles = 0;
+    for (const dir of dayDirs) {
+        let entries;
+        try {
+            entries = await fs.readdir(dir);
+        }
+        catch {
+            continue;
+        }
+        let had = false;
+        for (const entry of entries) {
+            if (!entry.startsWith('rollout-') || !entry.endsWith('.jsonl'))
+                continue;
+            const full = path.join(dir, entry);
+            let stat;
+            try {
+                stat = await fs.stat(full);
+            }
+            catch {
+                continue;
+            }
+            if (stat.isFile()) {
+                out.push({ path: full, mtime: stat.mtimeMs });
+                had = true;
+            }
+        }
+        if (had)
+            partitionsWithFiles++;
+        if (out.length >= limit && partitionsWithFiles >= MIN_PARTITIONS_SCANNED)
+            break;
+    }
+    out.sort((a, b) => b.mtime - a.mtime);
+    return out.slice(0, limit);
+}
+/**
+ * Enumerate the `sessions/YYYY/MM/DD` day-partition directories in descending
+ * date order WITHOUT statting their contents. Returns null when no
+ * date-partitioned structure is present (so the caller can fall back to a full
+ * walk). Numeric-name sort (zero-padded YYYY/MM/DD) is lexicographic-correct.
+ */
+async function listDayPartitionsDescending(root) {
+    const dirs = [];
+    const years = await readNamesDesc(root, /^\d{4}$/);
+    for (const y of years) {
+        const yPath = path.join(root, y);
+        const months = await readNamesDesc(yPath, /^\d{2}$/);
+        for (const m of months) {
+            const mPath = path.join(yPath, m);
+            const days = await readNamesDesc(mPath, /^\d{2}$/);
+            for (const d of days)
+                dirs.push(path.join(mPath, d));
+        }
+    }
+    return dirs.length > 0 ? dirs : null;
+}
+/** readdir + filter by name pattern + descending sort. [] on any read error. */
+async function readNamesDesc(dir, pattern) {
+    let entries;
+    try {
+        entries = await fs.readdir(dir);
+    }
+    catch {
+        return [];
+    }
+    return entries.filter((e) => pattern.test(e)).sort().reverse();
 }
 async function walkCollect(dir, out) {
     let entries;

package/dist/providers/adapters/openai-codex/observability/sessionPaths.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionPaths.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/observability/sessionPaths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,mBAAmB,CAAC,SAAkB;IACpD,OAAO,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,SAAkB;IAElB,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IACnE,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,SAAkB;IACtE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IACnE,OAAO,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACnD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAkB,EAClB,KAAK,GAAG,GAAG;IAEX,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IACnE,MAAM,GAAG,GAA2C,EAAE,CAAC;IACvD,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,GAA2C;IACjF,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"sessionPaths.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/observability/sessionPaths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,mBAAmB,CAAC,SAAkB;IACpD,OAAO,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,SAAkB;IAElB,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IACnE,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,SAAkB;IACtE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IACnE,OAAO,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACnD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,0EAA0E;AAC1E,oEAAoE;AACpE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAkB,EAClB,KAAK,GAAG,GAAG;IAEX,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAExD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,GAAG,GAA2C,EAAE,CAAC;QACvD,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,GAAG,GAA2C,EAAE,CAAC;IACvD,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,GAAG,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACzE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9C,GAAG,GAAG,IAAI,CAAC;YACb,CAAC;QACH,CAAC;QACD,IAAI,GAAG;YAAE,mBAAmB,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK,IAAI,mBAAmB,IAAI,sBAAsB;YAAE,MAAM;IAClF,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,2BAA2B,CAAC,IAAY;IACrD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,OAAe;IACvD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,GAA2C;IACjF,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.123",
+  "version": "1.3.124",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-30T20:55:40.867Z",
-  "instarVersion": "1.3.123",
+  "generatedAt": "2026-05-30T21:48:31.075Z",
+  "instarVersion": "1.3.124",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {

package/upgrades/1.3.124.md

@@ -0,0 +1,53 @@
+# Instar Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**Fixed: `GET /codex/usage` (and the codex TokenLedger / resume scans) timed out
+on a large codex history.** The shared helper `listAllRollouts` walked the ENTIRE
+`$CODEX_HOME/sessions` tree and `stat`-ed every rollout file before slicing to
+the newest few. On a real account that history is large — one machine measured
+14,277 files / 1.4 GB — so the full walk plus ~14k sequential `stat`s, under
+live server load, made `GET /codex/usage` (shipped in v1.3.123) return a
+connection timeout. It now walks the date-partition directories
+(`sessions/YYYY/MM/DD/`) newest-first and `stat`s only the newest partitions
+(at least two, until it has `limit` candidates), with a full-walk fallback for
+any non-date-partitioned layout. The returned newest-N is unchanged; only the
+scan is bounded. This one change fixes all four callers of the helper (the
+codex-usage reader, the TokenLedger codex scan, the session-resume index, and
+the layout canary).
+
+## Summary of New Capabilities
+
+- No new capability — a performance fix. `listAllRollouts` is now bounded to the
+  most-recent date partitions (helpers `listDayPartitionsDescending` +
+  `readNamesDesc`), so codex usage/ledger/resume reads stay fast regardless of
+  how much rollout history has accumulated.
+
+## What to Tell Your User
+
+The codex usage check now answers instantly even on a heavy account. Before this
+fix, on an account with a very large codex history, asking how much codex usage
+was left could hang and time out, because the check was reading through the
+entire history to find the most recent record. It now looks only at the most
+recent day or two of records, so it returns right away. Nothing else changes.
+
+## Evidence
+
+**Reproduction.** On a real codex account with 14,277 rollout files (1.4 GB)
+under `~/.codex/sessions`, hitting `GET /codex/usage` on the running server
+returned a connection timeout — curl reported status 000 after a 30-second
+`--max-time`, while `GET /health` on the same server responded normally. Root
+cause confirmed by reading the code: `listAllRollouts` recursively walked the
+whole tree and awaited an `fs.stat` on every one of the 14k files before
+sorting and slicing.
+
+**Before / after.** The old full-walk timed out at 30 s+ under load. The fixed
+date-partition walk, run against the same live 14,277-file tree, completed in
+**59 ms** (it scanned the two newest day-partitions, found the newest rollout,
+and stopped) — returning the same newest record. A unit test with 206 fixture
+files across 42 partitions uses an `fs.stat` spy to assert fewer than 20 stats
+occur (only the newest partitions), versus 206 before. All three test tiers for
+the codex-usage feature plus the TokenLedger / resume / canary suites stay
+green.

package/upgrades/side-effects/codex-rollout-scan-perf.md

@@ -0,0 +1,64 @@
+# Side-Effects Review — bound the codex rollout scan to the newest partitions
+
+**Version / slug:** `codex-rollout-scan-perf`
+**Date:** 2026-05-30
+**Author:** Echo (instar-dev agent)
+**Second-pass reviewer:** not required (pure read-path perf optimization; no block/allow/lifecycle/decision surface)
+
+## Summary of the change
+
+`listAllRollouts` (`src/providers/adapters/openai-codex/observability/sessionPaths.ts`)
+no longer walks + `stat`s the ENTIRE `$CODEX_HOME/sessions` tree to return the
+newest-N rollouts. It now walks date-partition dirs newest-first and stats only
+the newest partitions (>= 2, until `limit` candidates), with a full-walk
+fallback for non-date-partitioned layouts. Fixes the `GET /codex/usage` timeout
+(and the shared TokenLedger / resume-index cost) on a large codex history
+(measured 14,277 files / 1.4 GB → route timed out at 30 s; now 59 ms).
+
+## Decision-point inventory
+
+- No decision point. `listAllRollouts` returns data (a list of file paths +
+  mtimes). The change is purely the disk-scan strategy used to produce that
+  list; the returned newest-N is unchanged for the common case.
+
+---
+
+## 1. Over-block
+No block/allow surface — not applicable. It returns a file list; it rejects
+nothing.
+
+## 2. Under-block
+Not applicable. The closest "miss" is the documented trade-off: a session OLDER
+than the scanned partitions yet still the single most-recently-touched file on
+disk would not be in the candidate set. For the rate-limit reader this changes
+nothing (account-wide windows are identical across any recently-active session);
+for the resume/token-ledger callers it is a vanishingly rare miss (sessions are
+not active for days) and `MIN_PARTITIONS_SCANNED = 2` covers the common
+cross-midnight case.
+
+## 3. Level-of-abstraction fit
+Correct layer — the fix is in the shared helper, so all four callers
+(codex-usage reader, TokenLedger scan, resume index, layout canary) get the
+speedup from one change rather than each re-implementing a bounded scan.
+
+## 4. Signal vs authority compliance
+Compliant — no authority at all. A read helper that returns data; it gates,
+blocks, and decides nothing (`docs/signal-vs-authority.md` n/a beyond "this is
+not a decision point").
+
+## 5. Interactions
+- **Shared helper:** all callers benefit; none depend on the *full* unbounded
+  list (every caller passes a `limit` and wants newest-N). Verified the four
+  call sites pass a finite limit.
+- **No races / no writes:** read-only; opens + closes its own dir/file handles.
+- **Canary:** `codexSessionLayoutCanary` uses date-partitioned fixtures → hits
+  the fast path → stays green (verified).
+
+## 6. External surfaces
+- Makes `GET /codex/usage` actually responsive on a heavy account (it returns
+  fast instead of timing out). No change to the response shape or semantics.
+- No new route, no message, no change visible to other agents.
+
+## 7. Rollback cost
+Trivial. Revert the `listAllRollouts` rewrite + the two private helpers + the new
+test. No data, no migration, no behavior to repair — only the scan strategy.