instar 1.3.124 → 1.3.126

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.124",
+  "version": "1.3.126",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-30T21:48:31.075Z",
-  "instarVersion": "1.3.124",
+  "generatedAt": "2026-05-30T22:30:07.950Z",
+  "instarVersion": "1.3.126",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "99680ae28ec1fa663a7c94dc3fc9d584844ed9d52427ad63741ab89bb73e4a01",
+      "contentHash": "31ee7a80d0fc426ffff7585eaf06662863cac0df38eedc6ea7c035cb082f1b1c",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.125.md

@@ -0,0 +1,53 @@
+# Instar Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**Fixed `GET /codex/usage` still timing out on a large codex history under server
+load — by not statting thousands of files.** The previous fix (v1.3.124) narrowed
+`listAllRollouts` to the newest date-partitions, but it still `await fs.stat`-ed
+every file in them — ~3,637 on a real account. That is fast in a healthy process,
+but when the server's event loop is CPU-starved (the log showed a ~14 s drift),
+those thousands of sequential awaited stats each wait for a starved loop turn and
+the route hangs for tens of seconds. (Other endpoints were fine — they do only a
+handful of awaits.) `listAllRollouts` now finds the newest rollouts WITHOUT the
+stat storm: it `readdir`s the newest partitions to collect candidate paths (one
+syscall per dir, no per-file stat), sorts them by the creation timestamp embedded
+in the filename, and `stat`s ONLY the newest `limit * 4` candidates (~32 for the
+usage reader) for the authoritative mtime. The returned newest-N is unchanged.
+This fixes all four callers of the helper at once.
+
+## Summary of New Capabilities
+
+- No new capability — a performance fix. `listAllRollouts` now does ~32 file
+  stats instead of ~3,637 on a large account, so codex usage/ledger/resume reads
+  stay fast even when the server is under heavy load.
+
+## What to Tell Your User
+
+The codex usage check now answers instantly even on a heavy account AND when the
+machine is under heavy load. The earlier fix already stopped it from reading the
+whole history, but it still checked the timestamp of every recent log file — a
+few thousand of them — one at a time, which stalled when the server was
+overloaded. It now reads just the list of recent filenames, picks out the newest
+by the time in the name, and only checks the real timestamps of the few most
+recent. Nothing else changes.
+
+## Evidence
+
+**Reproduction.** After deploying the first fix (v1.3.124) to a server with a
+14,277-file codex history, `GET /codex/usage` STILL returned a connection timeout
+(curl status 000 after 25 s) while `/tokens/summary` (0.19 s) and `/capabilities`
+(0.38 s) on the same server were fast. The server log showed the cause:
+`[SleepWakeDetector] Drift ~14s under load ratio 1.72 — CPU starvation`. The
+reader ran in 57 ms in an isolated process and 250 ms for 5 concurrent calls — so
+the slowness was not the reader's logic but its ~3,637 sequential `await fs.stat`
+calls colliding with a starved event loop (each stat callback waits for a loop
+turn).
+
+**Before / after.** Old: ~3,637 stats per call. New: against the same live
+14,277-file / 1.4 GB tree, a `limit`-8 call does **32 stats in 14 ms**, returning
+the same newest rollout. A unit test (`fs.stat` spy) asserts the bounded stat
+count for a 206-file / 42-partition fixture; the reader / TokenLedger / resume /
+canary suites stay green.

package/upgrades/1.3.126.md

@@ -0,0 +1,53 @@
+# Instar Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**Fixed `GET /codex/usage` still timing out on a large codex history under server
+load — by not statting thousands of files.** The previous fix (v1.3.124) narrowed
+`listAllRollouts` to the newest date-partitions, but it still `await fs.stat`-ed
+every file in them — ~3,637 on a real account. That is fast in a healthy process,
+but when the server's event loop is CPU-starved (the log showed a ~14 s drift),
+those thousands of sequential awaited stats each wait for a starved loop turn and
+the route hangs for tens of seconds. (Other endpoints were fine — they do only a
+handful of awaits.) `listAllRollouts` now finds the newest rollouts WITHOUT the
+stat storm: it `readdir`s the newest partitions to collect candidate paths (one
+syscall per dir, no per-file stat), sorts them by the creation timestamp embedded
+in the filename, and `stat`s ONLY the newest `limit * 4` candidates (~32 for the
+usage reader) for the authoritative mtime. The returned newest-N is unchanged.
+This fixes all four callers of the helper at once.
+
+## Summary of New Capabilities
+
+- No new capability — a performance fix. `listAllRollouts` now does ~32 file
+  stats instead of ~3,637 on a large account, so codex usage/ledger/resume reads
+  stay fast even when the server is under heavy load.
+
+## What to Tell Your User
+
+The codex usage check now answers instantly even on a heavy account AND when the
+machine is under heavy load. The earlier fix already stopped it from reading the
+whole history, but it still checked the timestamp of every recent log file — a
+few thousand of them — one at a time, which stalled when the server was
+overloaded. It now reads just the list of recent filenames, picks out the newest
+by the time in the name, and only checks the real timestamps of the few most
+recent. Nothing else changes.
+
+## Evidence
+
+**Reproduction.** After deploying the first fix (v1.3.124) to a server with a
+14,277-file codex history, `GET /codex/usage` STILL returned a connection timeout
+(curl status 000 after 25 s) while `/tokens/summary` (0.19 s) and `/capabilities`
+(0.38 s) on the same server were fast. The server log showed the cause:
+`[SleepWakeDetector] Drift ~14s under load ratio 1.72 — CPU starvation`. The
+reader ran in 57 ms in an isolated process and 250 ms for 5 concurrent calls — so
+the slowness was not the reader's logic but its ~3,637 sequential `await fs.stat`
+calls colliding with a starved event loop (each stat callback waits for a loop
+turn).
+
+**Before / after.** Old: ~3,637 stats per call. New: against the same live
+14,277-file / 1.4 GB tree, a `limit`-8 call does **32 stats in 14 ms**, returning
+the same newest rollout. A unit test (`fs.stat` spy) asserts the bounded stat
+count for a 206-file / 42-partition fixture; the reader / TokenLedger / resume /
+canary suites stay green.

package/upgrades/side-effects/codex-rollout-scan-perf-v2.md

@@ -0,0 +1,55 @@
+# Side-Effects Review — stat only the newest-created candidates (perf v2)
+
+**Version / slug:** `codex-rollout-scan-perf-v2`
+**Date:** 2026-05-30
+**Author:** Echo (instar-dev agent)
+**Second-pass reviewer:** not required (pure read-path perf optimization; no block/allow/lifecycle/decision surface)
+
+## Summary of the change
+
+`listAllRollouts` no longer `stat`s every file in the newest date-partitions
+(~3,637 on the real machine). It collects candidate paths via `readdir` (no
+per-file stat), sorts them by the creation timestamp embedded in the path, and
+`stat`s ONLY the top `limit * STAT_OVERSCAN` (= 32 for the reader). Fixes
+`GET /codex/usage` still timing out after the v1 fix because ~3,637 sequential
+`await fs.stat`s are pathological under a CPU-starved event loop (server log:
+"Drift ~14s … CPU starvation"). 14,277-file tree: 32 stats / 14 ms (was ~3,637).
+
+## Decision-point inventory
+
+- No decision point. A read helper returns a file list; only the disk-scan
+  strategy changed.
+
+---
+
+## 1. Over-block / ## 2. Under-block
+No block/allow surface. The only "miss" is the documented trade-off (a session
+created older than the newest `limit*4` yet still the single most-recently-
+touched file) — irrelevant for the rate-limit reader (account-wide windows) and
+vanishingly rare for the other callers.
+
+## 3. Level-of-abstraction fit
+Correct — the shared helper, so all four callers (codex-usage reader, TokenLedger
+scan, resume index, canary) get the speedup from one change. The filename-as-
+creation-timestamp ordering is a property of the codex layout the helper already
+encodes.
+
+## 4. Signal vs authority compliance
+Compliant — no authority; a read-only reporter.
+
+## 5. Interactions
+- **Callers:** all pass a finite `limit` and want newest-N; the bounded-stat set
+  preserves that. `readdir` returns all names in one syscall (cheap); the
+  in-memory path sort of a few thousand strings is sub-ms.
+- **No writes / no races:** read-only; opens + closes its own handles.
+- **Robust under load:** the whole point — it now makes ~32 awaits instead of
+  ~3,637, so a starved event loop no longer makes the call hang.
+
+## 6. External surfaces
+- `GET /codex/usage` becomes responsive on a heavy account even when the server
+  is CPU-starved. Response shape/semantics unchanged.
+- No new route, no message.
+
+## 7. Rollback cost
+Trivial — revert the `listAllRollouts` body to the v1 form. No data, no
+migration.