instar 1.3.140 → 1.3.142

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.140",
+  "version": "1.3.142",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-05-31T04:01:41.213Z",
-  "instarVersion": "1.3.140",
+  "generatedAt": "2026-05-31T04:37:55.427Z",
+  "instarVersion": "1.3.142",
   "entryCount": 193,
   "entries": {
     "hook:session-start": {
@@ -409,7 +409,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -417,7 +417,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -425,7 +425,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -433,7 +433,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -441,7 +441,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -449,7 +449,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -457,7 +457,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -465,7 +465,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -473,7 +473,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -481,7 +481,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -489,7 +489,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -497,7 +497,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -505,7 +505,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -513,7 +513,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -521,7 +521,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -529,7 +529,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -537,7 +537,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -545,7 +545,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -553,7 +553,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -561,7 +561,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -569,7 +569,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -577,7 +577,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -585,7 +585,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -593,7 +593,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -601,7 +601,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -609,7 +609,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -617,7 +617,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -625,7 +625,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -633,7 +633,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -641,7 +641,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -649,7 +649,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -657,7 +657,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -665,7 +665,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -673,7 +673,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -681,7 +681,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -689,7 +689,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -697,7 +697,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -705,7 +705,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -713,7 +713,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -721,7 +721,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -729,7 +729,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -737,7 +737,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -745,7 +745,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -761,7 +761,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "fab80d2d310ae3b0fd392268ebf4c01580d93442610b1059e8fbb72288a70c9b",
+      "contentHash": "ae23600508f36ee8fab00180d252a4c5f374ae910465231768f8e2daad7e7dcf",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1457,7 +1457,7 @@
       "type": "subsystem",
       "domain": "server",
       "sourcePath": "src/server/AgentServer.ts",
-      "contentHash": "9a47e31522e076c933c0e5267b7c1373bb3cd45ab5509114e30796857e9b093e",
+      "contentHash": "e4b33671553c638bfd201a8a7217e76a52722324685dedc1b7f15ef2548060a6",
       "since": "2025-01-01"
     },
     "subsystem:session-manager": {

package/upgrades/1.3.141.md

@@ -0,0 +1,52 @@
+# Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed
+
+**Foundation for agent hard-sleep: the SleepController decision layer (dark).** The
+deepest lever of the Responsible Resource Usage work is letting a deeply-idle agent
+drop its server to near-zero footprint and wake instantly on the next message. That
+mechanism is risky, so this change ships the SAFE half first: the part that decides
+"is it actually safe for this idle agent to sleep right now?" — and nothing else.
+
+The new SleepController returns one of four verdicts — awake, idle-shallow,
+keep-awake, or would-sleep — and applies every safety guard before it will ever say
+would-sleep: it refuses if this machine currently holds the multi-machine serving
+lease, if there is work in flight, or if a scheduled job is about to fire. Each
+guard names itself in the reason. It ships OFF by default and, even when enabled,
+runs in dry-run: it only records its decision to a log and serves it at a status
+endpoint. It has no power to stop a server — that mechanism is a separate slice,
+built only once this decision layer has been watched behaving correctly on a real
+idle agent.
+
+## What to Tell Your User
+
+Nothing to configure, and nothing changes in how your agent behaves. This is the
+groundwork for a future ability where a completely idle agent can quiet down to save
+your machine's resources and wake the instant you message it. For now it only
+watches and decides — it never actually sleeps anything — so it is safe and
+invisible. You can see what it would decide at the sleep status endpoint.
+
+## Summary of New Capabilities
+
+- New SleepController decides whether a deeply-idle agent may hard-sleep, with
+  safety guards for held multi-machine lease, in-flight work, and imminent
+  scheduled jobs. Pure, exhaustively unit-tested on both sides of every boundary.
+- New shared AgentActivityState idle signal, bumped at the inbound-message
+  chokepoint so a genuinely-messaged agent never sleeps.
+- GET /sleep exposes the live verdict, reason, thresholds, and whether sleep is
+  armed. Read-only, Bearer-auth, 503-stub when disabled.
+- Decision transitions audited to logs/agent-sleep-events.jsonl (low-noise).
+- Config monitoring.agentSleep — OFF + dry-run by default.
+
+## Evidence
+
+- `tests/unit/SleepController.test.ts` — both sides of every guard boundary
+  (grace, deep-idle, lease, in-flight, scheduled-job), exact-threshold boundaries,
+  most-recent-of-inbound-vs-activity, dry-run-never-acts, once-per-episode latching,
+  transition-only audit, plus AgentActivityState.
+- `tests/integration/sleep-controller-routes.test.ts` — GET /sleep returns 503
+  unwired and 200 with the live verdict + thresholds when wired (feature is alive),
+  and surfaces the blocking guard reason.
+- Side-effects: `upgrades/side-effects/agent-hard-sleep-controller.md`.

package/upgrades/1.3.142.md

@@ -0,0 +1,39 @@
+---
+review-convergence: complete
+approved: true
+approved-by: echo (standing 12h deploy mandate, topic 13435; test-only parity-coverage addition from the codex audit)
+---
+
+# Upgrade Guide — vNEXT
+
+<!-- bump: patch -->
+
+## What Changed — codex adapter observability readers now have conformance coverage
+
+The provider-adapter conformance harness only exercised the OneShotCompletion primitive, and
+only against the two Anthropic adapters. The codex adapter shipped conversation-log readers and
+a session-resume index, but no test exercised them — so a codex adapter that declared one of
+those capabilities while wiring no implementation (or drifting a method shape) would have passed
+CI. This adds a contract-shape conformance suite that runs the SAME assertions against BOTH the
+Anthropic and codex adapters for all three observability read primitives.
+
+## Summary of New Capabilities
+
+- New `tests/integration/conformance/observabilityReaders.conformance.test.ts` asserts, for the
+  `anthropic-headless` and `openai-codex` adapters: each declares the ConversationLogReader /
+  ConversationLogTailer / SessionResumeIndex capability, returns a primitive carrying the
+  matching capability marker, and exposes the interface methods as callables (18 cases).
+- Test-only; no runtime/src change. Confirms the codex adapter wires all three readers correctly
+  and guards against future drift.
+
+## What to Tell Your User
+
+Nothing user-facing — this is internal test coverage that makes the codex (and future
+non-Claude) adapters safer to evolve.
+
+## Evidence
+
+- `npx vitest run tests/integration/conformance/observabilityReaders.conformance.test.ts` → 18 passed.
+- `tsc --noEmit` clean; `npm run lint` clean.
+- Closes the parity-coverage gap logged in the framework-issue ledger
+  (dedupKey `codex-adapter-readers-no-conformance-coverage`).

package/upgrades/side-effects/agent-hard-sleep-controller.md

@@ -0,0 +1,101 @@
+# Side-Effects Review — Agent hard-sleep SleepController (Stage B, slice 1)
+
+**Version / slug:** `agent-hard-sleep-controller`
+**Date:** `2026-05-31`
+**Author:** `echo`
+**Second-pass reviewer:** `not required — dark + dry-run + signal-only; the module holds no blocking authority and never stops a process`
+
+## Summary of the change
+
+Adds the DECISION half of agent hard-sleep: `SleepController` (pure `evaluateSleep`
++ a thin ticking class) decides whether a deeply-idle agent may drop to near-zero
+footprint, applying every safety guard (held multi-machine lease / in-flight work /
+imminent scheduled job). A shared `AgentActivityState` idle signal is bumped at the
+inbound chokepoint (`/internal/telegram-forward`). Wired into the server (off +
+dry-run by default), exposed read-only at `GET /sleep`, audited to
+`logs/agent-sleep-events.jsonl` on decision transitions. Files: new
+`src/monitoring/SleepController.ts`, `src/monitoring/AgentActivityState.ts`;
+config `monitoring.agentSleep` (types.ts + ConfigDefaults.ts); wiring in
+server.ts + AgentServer.ts + routes.ts; CapabilityIndex classification.
+
+## Decision-point inventory
+
+- `evaluateSleep` (new decision) — add — the awake/idle-shallow/keep-awake/would-sleep verdict with guards.
+- `SleepController` audit + (live-only) sleep-request — add — transition-only audit; `requestSleep` is unwired in this slice (no consumer).
+- `GET /sleep` route — add — read-only verdict surface (503 when unwired).
+- Inbound chokepoint — pass-through — adds a non-blocking `markInbound()` side-call.
+
+---
+
+## 1. Over-block
+
+No block/allow surface over any message or user action. The verdict is advisory;
+in this slice nothing consumes a would-sleep (the `requestSleep` consumer is the
+next slice). Over-block not applicable.
+
+## 2. Under-block
+
+The decision could, in principle, say "would-sleep" when it shouldn't (e.g. the
+in-flight signal is approximate in this slice — it reads `currentInboundByTopic`
+but not yet the relay/forward queue or the scheduler's next-fire). This is harmless
+here: dry-run never acts on the verdict, and the next slice wires the remaining
+in-flight + scheduler-wake signals BEFORE the mechanism that actually sleeps. The
+guards that ARE wired (sessions, lease, recent activity) are exact.
+
+## 3. Level-of-abstraction fit
+
+Correct. The decision is a pure, exhaustively-tested function; the controller is a
+thin cadence wrapper that mirrors the existing dark monitors (SessionReaper,
+AgentWorktreeReaper) — same dark + dry-run discipline, same audit-on-transition,
+same `snapshot()` route shape. It deliberately does NOT contain the mechanism
+(supervisor stop / lifeline respawn); that is a separate slice so the decision can
+be validated first.
+
+## 4. Signal vs authority compliance
+
+**Required reference:** [docs/signal-vs-authority.md](../../docs/signal-vs-authority.md)
+
+- [x] No — this change produces a SIGNAL (a verdict + audit) with no blocking
+  authority over any message or process. In live mode (the mechanism slice) the verdict
+  would feed the supervisor handshake, but even then "sleep" is gated like the
+  SessionReaper (positive proof + KEEP-on-ambiguity), not a brittle detector with
+  kill authority.
+
+## 5. Interactions
+
+- **Shadowing:** none. `GET /sleep` is a new route; the inbound `markInbound()` is a
+  fire-and-forget side-call after the boot guard and does not alter the
+  forward's control flow or response.
+- **Double-fire:** none. The controller is the only consumer of `AgentActivityState`.
+  No other monitor sleeps a server.
+- **Races:** the controller ticks on a single timer (unref'd); `AgentActivityState`
+  is plain in-memory single-writer-per-event. The `sleepRequested` latch prevents
+  repeated requests within a would-sleep episode.
+- **Feedback loops:** none — dry-run writes only an audit log it never reads back.
+
+## 6. External surfaces
+
+- **Other agents / install base:** pure additive source + a default-off config
+  block (auto-applied via ConfigDefaults; code reads with `?? default` so an agent
+  whose config lacks the block behaves identically — OFF). No agent-installed-file
+  change requiring a CLAUDE.md/hook migration; the route is internal observability
+  (classified in CapabilityIndex like /worktrees/agent-reaper), so no template/
+  awareness section is required for this dark slice.
+- **External systems:** none.
+- **Persistent state:** one best-effort append-only audit log
+  (`logs/agent-sleep-events.jsonl`), written only on decision transitions.
+- **Timing:** one unref'd 60s timer when enabled; never started when disabled.
+
+## 7. Rollback cost
+
+Pure additive code + a default-off config block. Revert the commit → the controller,
+route, config, and audit disappear; nothing else changes. No migration, no agent
+state repair, no user-visible behavior (it never acted).
+
+## Conclusion
+
+This review confirmed the slice is observability-only: a tested decision function
+with all safety guards, shipped dark + dry-run, with no authority and no mechanism.
+It is the safe foundation the next (mechanism) slice will build on, and the dry-run
+audit is exactly what makes that next slice safe to wire. Clear to ship; validate by
+watching `GET /sleep` + the audit log on a real idle agent before enabling.