instar 1.3.123 → 1.3.125

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.123",
+  "version": "1.3.125",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-30T20:55:40.867Z",
-  "instarVersion": "1.3.123",
+  "generatedAt": "2026-05-30T22:08:54.842Z",
+  "instarVersion": "1.3.125",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.124.md

@@ -0,0 +1,53 @@
+# Instar Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**Fixed: `GET /codex/usage` (and the codex TokenLedger / resume scans) timed out
+on a large codex history.** The shared helper `listAllRollouts` walked the ENTIRE
+`$CODEX_HOME/sessions` tree and `stat`-ed every rollout file before slicing to
+the newest few. On a real account that history is large — one machine measured
+14,277 files / 1.4 GB — so the full walk plus ~14k sequential `stat`s, under
+live server load, made `GET /codex/usage` (shipped in v1.3.123) return a
+connection timeout. It now walks the date-partition directories
+(`sessions/YYYY/MM/DD/`) newest-first and `stat`s only the newest partitions
+(at least two, until it has `limit` candidates), with a full-walk fallback for
+any non-date-partitioned layout. The returned newest-N is unchanged; only the
+scan is bounded. This one change fixes all four callers of the helper (the
+codex-usage reader, the TokenLedger codex scan, the session-resume index, and
+the layout canary).
+
+## Summary of New Capabilities
+
+- No new capability — a performance fix. `listAllRollouts` is now bounded to the
+  most-recent date partitions (helpers `listDayPartitionsDescending` +
+  `readNamesDesc`), so codex usage/ledger/resume reads stay fast regardless of
+  how much rollout history has accumulated.
+
+## What to Tell Your User
+
+The codex usage check now answers instantly even on a heavy account. Before this
+fix, on an account with a very large codex history, asking how much codex usage
+was left could hang and time out, because the check was reading through the
+entire history to find the most recent record. It now looks only at the most
+recent day or two of records, so it returns right away. Nothing else changes.
+
+## Evidence
+
+**Reproduction.** On a real codex account with 14,277 rollout files (1.4 GB)
+under `~/.codex/sessions`, hitting `GET /codex/usage` on the running server
+returned a connection timeout — curl reported status 000 after a 30-second
+`--max-time`, while `GET /health` on the same server responded normally. Root
+cause confirmed by reading the code: `listAllRollouts` recursively walked the
+whole tree and awaited an `fs.stat` on every one of the 14k files before
+sorting and slicing.
+
+**Before / after.** The old full-walk timed out at 30 s+ under load. The fixed
+date-partition walk, run against the same live 14,277-file tree, completed in
+**59 ms** (it scanned the two newest day-partitions, found the newest rollout,
+and stopped) — returning the same newest record. A unit test with 206 fixture
+files across 42 partitions uses an `fs.stat` spy to assert fewer than 20 stats
+occur (only the newest partitions), versus 206 before. All three test tiers for
+the codex-usage feature plus the TokenLedger / resume / canary suites stay
+green.

package/upgrades/1.3.125.md

@@ -0,0 +1,62 @@
+# Instar Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**Fixed the ROOT of duplicate agent-to-agent replies: `POST /messages/relay-agent`
+now responds at the accept boundary instead of after the session spawn.** The
+co-located inbound handler used to AWAIT `handleInboundMessage` — a session
+spawn/resume that routinely takes 9-30 s — before responding. But the sender
+(`MessageRouter.relay`) uses a 5-second fetch timeout and reads only whether the
+request succeeded. So whenever the receiver's spawn outran 5 s, the sender gave
+up, retried with a fresh message id, and the receiver spawned a SECOND session →
+a duplicate reply. The content-hash dedup shipped earlier is the symptom
+backstop; this removes the cause. The handler now responds `{ ok:true,
+accepted:true, threadline:{accepted:true, async:true} }` the instant the message
+is accepted + gated, and runs the spawn in the background. Everything that must
+happen first — the dedup, the reply-waiter resolution, and the warrants-reply
+gate (including its suppress short-circuit) — still runs synchronously before the
+response. Scoped to the co-located path; the cross-machine relay-funnel path
+(which has retry-on-error semantics to preserve) is tracked separately.
+
+## Summary of New Capabilities
+
+- No new capability — a robustness fix. Agent-to-agent messages on the same
+  machine no longer risk a duplicate reply when the receiver's session spawn is
+  slower than the sender's 5-second delivery timeout.
+
+## What to Tell Your User
+
+Agents talking to each other on the same machine no longer occasionally send the
+same reply twice. The cause was that a receiving agent waited until it had fully
+spun up a session — up to half a minute — before telling the sender the message
+arrived, but the sender only waits five seconds and would resend. Now the
+receiver acknowledges the moment the message is safely accepted and does the
+slow work in the background, so the sender never times out and never resends.
+Nothing changes for you; the real reply still arrives as before, just without the
+occasional duplicate.
+
+## Evidence
+
+**Reproduction / root cause.** Confirmed in the code: the co-located sender
+`MessageRouter.relayToAgent` (`src/messaging/MessageRouter.ts:486-510`) wraps its
+POST to `/messages/relay-agent` in `AbortSignal.timeout(5000)` and returns only
+`response.ok`. The receiver's handler awaited `handleInboundMessage` (a 9-30 s
+session spawn) before responding, so any spawn over 5 s aborted the sender's
+fetch → the sender retried with a fresh `message.id`, which slips past the
+id-based relay dedup → a second spawn and a duplicate reply. (The 2026-05-30
+duplicate-reply incidents on the echo↔codey loop are this path.)
+
+**Before / after.** Before: the response is sent only after the full spawn. After:
+the response is `{accepted:true, async:true}` sent at the accept boundary, with
+the spawn running in the background. The rewritten integration test holds the
+background handler open and asserts the HTTP response returns while the handler
+is still mid-spawn (`router-start` present, `router-end` not yet) — i.e. the
+sender is no longer made to wait. The handler still runs to completion in the
+background (not dropped); a background rejection still yields HTTP 200; the
+reply-waiter resolution and the warrants-reply gate's suppress short-circuit stay
+green; the content-hash dedup suite and the keystone gate-before-spawn wiring
+test stay green. An independent second-pass reviewer audited the change (it
+touches inbound messaging) and confirmed correctness after one artifact-honesty
+correction.

package/upgrades/side-effects/codex-rollout-scan-perf.md

@@ -0,0 +1,64 @@
+# Side-Effects Review — bound the codex rollout scan to the newest partitions
+
+**Version / slug:** `codex-rollout-scan-perf`
+**Date:** 2026-05-30
+**Author:** Echo (instar-dev agent)
+**Second-pass reviewer:** not required (pure read-path perf optimization; no block/allow/lifecycle/decision surface)
+
+## Summary of the change
+
+`listAllRollouts` (`src/providers/adapters/openai-codex/observability/sessionPaths.ts`)
+no longer walks + `stat`s the ENTIRE `$CODEX_HOME/sessions` tree to return the
+newest-N rollouts. It now walks date-partition dirs newest-first and stats only
+the newest partitions (>= 2, until `limit` candidates), with a full-walk
+fallback for non-date-partitioned layouts. Fixes the `GET /codex/usage` timeout
+(and the shared TokenLedger / resume-index cost) on a large codex history
+(measured 14,277 files / 1.4 GB → route timed out at 30 s; now 59 ms).
+
+## Decision-point inventory
+
+- No decision point. `listAllRollouts` returns data (a list of file paths +
+  mtimes). The change is purely the disk-scan strategy used to produce that
+  list; the returned newest-N is unchanged for the common case.
+
+---
+
+## 1. Over-block
+No block/allow surface — not applicable. It returns a file list; it rejects
+nothing.
+
+## 2. Under-block
+Not applicable. The closest "miss" is the documented trade-off: a session OLDER
+than the scanned partitions yet still the single most-recently-touched file on
+disk would not be in the candidate set. For the rate-limit reader this changes
+nothing (account-wide windows are identical across any recently-active session);
+for the resume/token-ledger callers it is a vanishingly rare miss (sessions are
+not active for days) and `MIN_PARTITIONS_SCANNED = 2` covers the common
+cross-midnight case.
+
+## 3. Level-of-abstraction fit
+Correct layer — the fix is in the shared helper, so all four callers
+(codex-usage reader, TokenLedger scan, resume index, layout canary) get the
+speedup from one change rather than each re-implementing a bounded scan.
+
+## 4. Signal vs authority compliance
+Compliant — no authority at all. A read helper that returns data; it gates,
+blocks, and decides nothing (`docs/signal-vs-authority.md` n/a beyond "this is
+not a decision point").
+
+## 5. Interactions
+- **Shared helper:** all callers benefit; none depend on the *full* unbounded
+  list (every caller passes a `limit` and wants newest-N). Verified the four
+  call sites pass a finite limit.
+- **No races / no writes:** read-only; opens + closes its own dir/file handles.
+- **Canary:** `codexSessionLayoutCanary` uses date-partitioned fixtures → hits
+  the fast path → stays green (verified).
+
+## 6. External surfaces
+- Makes `GET /codex/usage` actually responsive on a heavy account (it returns
+  fast instead of timing out). No change to the response shape or semantics.
+- No new route, no message, no change visible to other agents.
+
+## 7. Rollback cost
+Trivial. Revert the `listAllRollouts` rewrite + the two private helpers + the new
+test. No data, no migration, no behavior to repair — only the scan strategy.