[jamiepine]

Summary

• Add /autonomy for public status and authority-only /autonomy-on and /autonomy-off controls.
• Restore the last non-off level when autonomy is enabled, with observe as the first-use fallback.
• Serialize level changes with epoch and heartbeat admission so turning autonomy off stops new work while the current epoch settles.
• Keep configured and effective levels distinct when the instance ceiling applies.
• Register the controls across Discord, Telegram, and Slack, with text-command parity for other adapters.
• Align Discord thread admission, Telegram addressing, Slack argument validation, and Mattermost command replies.

Lifecycle

Autonomy transitions and supervisor admission share one lock. An off transition cannot race a new epoch or heartbeat claim. Existing turns and owned workers are not cancelled, but no additional wake events or heartbeat work enter the active epoch after the transition commits.

This PR is stacked on #650.

Testing

• cargo test agent::autonomy::tests
• cargo test api::config::tests
• cargo test commands::
• Targeted Discord, Slack, Telegram, Mattermost, and settings tests
• just preflight
• just gate-pr

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 81dce177-a899-41e9-82e6-0a7fb70d6b1b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}