@agentproto/runtime 5.13.0 → 5.14.0

package/dist/index.mjs

@@ -7,7 +7,7 @@ import { ensureChromeDevtoolsMcp, resolveChrome, buildHeadlessBrowserMcpEntry, h
 import { selectPricingTier, getModelProvider, resolveContextWindow, formatTokens, splitContextWindowHint, resolvePricing, LLM_PRICING_CATALOG, resolvePricingExact, MODEL_ALIASES, isKnownLlmId } from '@agentproto/model-catalog/llm';
 import { resolveCustomRoute, registerCustomRoute, tryParseModelRef, resolveLlmModelRoute, formatModelRef, stripRouteSuffix, stripFixedNativeVendor } from '@agentproto/model-catalog/route-identity';
 import { randomBytes, createHmac, randomUUID, timingSafeEqual, createHash } from 'crypto';
-import { createReadStream, promises, readFileSync, mkdirSync, writeFileSync, renameSync, readdirSync, openSync, fstatSync, readSync, closeSync, existsSync, statSync, mkdtempSync, chmodSync, realpathSync, cpSync, appendFileSync, createWriteStream } from 'fs';
+import { createReadStream, promises, readFileSync, mkdirSync, writeFileSync, renameSync, readdirSync, openSync, fstatSync, readSync, closeSync, existsSync, statSync, mkdtempSync, chmodSync, writeSync, fsyncSync, unlinkSync, realpathSync, cpSync, appendFileSync, createWriteStream } from 'fs';
 import { createInterface } from 'readline';
 import * as providers_store_star from '@agentproto/providers-store';
 import { findAnthropicGatewayPreset, anthropicGatewayPresetList, getAnthropicGatewayPreset } from '@agentproto/provider-presets';
@@ -16,7 +16,7 @@ import { z, ZodError } from 'zod';
 import { listAuthProfiles, eligibleProfiles, getAuthProfile, createAuthProfile, AuthProfileValidationError, deleteAuthProfile, updateAuthProfile, KeychainStore, removeAuthProfile, addAuthProfile, setAuthProfileEnabled, setAuthProfileModels, refreshAuthProfileModels, credentialIdentity } from '@agentproto/auth';
 import { CatalogProviderSchema, getModelsByProvider, getStaticModelProvider } from '@agentproto/model-catalog';
 import { resolvePairPageUrl, DEFAULT_PAIR_PAGE } from '@agentproto/secrets/pairing/browser';
-import { ListToolsRequestSchema, CallToolRequestSchema, SUPPORTED_PROTOCOL_VERSIONS, LATEST_PROTOCOL_VERSION } from '@modelcontextprotocol/sdk/types.js';
+import { ListToolsRequestSchema, CallToolRequestSchema, McpError, ErrorCode, SUPPORTED_PROTOCOL_VERSIONS, LATEST_PROTOCOL_VERSION } from '@modelcontextprotocol/sdk/types.js';
 import { makeCredsStore, makeAdapterResolver, makeAdapterLister, discoverAdapterPackages, makeSetupLedger, makeListTool, makeSetupTool } from '@agentproto/provider-kit';
 import { syncPiModels, getConfiguredEndpoints, checkHarnessFit, connectorById } from '@agentproto/llm-endpoint';
 import { createServer, request as request$1 } from 'http';
@@ -38,6 +38,7 @@ import { createBrainManager, parseKnowledgeConfig } from '@agentproto/workspace-
 import { browserAdapters, getBrowserAdapter } from '@agentproto/adapter-browser';
 import { defineHttpDriver } from '@agentproto/driver-http';
 import matter2 from 'gray-matter';
+import { InMemoryTransport } from '@modelcontextprotocol/sdk/inMemory.js';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { WebSocketServer } from 'ws';
@@ -48,8 +49,8 @@ import { createReconnectLogGate } from '@agentproto/pairing-host';
 export { createReconnectLogGate } from '@agentproto/pairing-host';
 import { loadAppBundledTools, loadAppHandle, peekAppUi, unpackApp, safeId, versionSatisfies } from '@agentproto/app-kit';
 import { loadAgent } from '@agentproto/agent';
-import { normalizeToolId } from '@agentproto/driver';
-import { compileWorkflow, runWorkflow, isCompilableJsonSchema, validateAgainstJsonSchema, validateWorkflowInput, buildAgentStep, StepOutcomeError, MissingArtifactError } from '@agentproto/workflow-runtime';
+import { normalizeToolId, runTool } from '@agentproto/driver';
+import { compileWorkflow, runWorkflow, isCompilableJsonSchema, validateAgainstJsonSchema, validateWorkflowInput, buildAgentStep, AgentSessionLostError, StepOutcomeError, MissingArtifactError } from '@agentproto/workflow-runtime';
 import { loadWorkflowHandle } from '@agentproto/workflow-loader';
 import { Cron } from 'croner';
 import { brotliCompressSync, constants, gzipSync } from 'zlib';
@@ -145,15 +146,15 @@ function hasMarker(command, marker) {
   return false;
 }
 function listProcesses() {
-  return new Promise((resolve45) => {
+  return new Promise((resolve47) => {
     execFile("ps", ["-axo", "pid=,command="], { maxBuffer: 32 * 1024 * 1024 }, (err, stdout) => {
-      if (err) return resolve45([]);
+      if (err) return resolve47([]);
       const out = [];
       for (const line of stdout.split("\n")) {
         const m = line.match(/^\s*(\d+)\s+(.*)$/);
         if (m) out.push({ pid: Number(m[1]), command: m[2] ?? "" });
       }
-      resolve45(out);
+      resolve47(out);
     });
   });
 }
@@ -523,7 +524,7 @@ function resolveSessionPricing(model) {
 function tokenCost(tokens, pricePer1M) {
   return tokens === void 0 ? 0 : tokens * pricePer1M / 1e6;
 }
-function deriveSessionUsage(input, resolve45 = defaultResolver) {
+function deriveSessionUsage(input, resolve47 = defaultResolver) {
   const contextUsed = plausibleContextUsed(input.contextSize, input.contextUsed);
   const base = {
     ...input.model !== void 0 ? { model: input.model } : {},
@@ -538,7 +539,7 @@ function deriveSessionUsage(input, resolve45 = defaultResolver) {
   }
   const hasTokens = input.tokensIn !== void 0 || input.tokensOut !== void 0 || input.cacheReadTokens !== void 0 || input.cacheWriteTokens !== void 0;
   if (hasTokens) {
-    const basePricing = input.model !== void 0 ? resolve45(input.model) : void 0;
+    const basePricing = input.model !== void 0 ? resolve47(input.model) : void 0;
     if (!basePricing) {
       return { ...base, source: "no-pricing" };
     }
@@ -1045,8 +1046,8 @@ function createTranscriptWriter(opts) {
       const state = states.get(sessionId);
       if (!state) return Promise.resolve();
       flushBuffers(sessionId, state);
-      return new Promise((resolve45) => {
-        state.stream.write("", () => resolve45());
+      return new Promise((resolve47) => {
+        state.stream.write("", () => resolve47());
       });
     },
     close(sessionId) {
@@ -1054,8 +1055,8 @@ function createTranscriptWriter(opts) {
       if (!state) return Promise.resolve();
       flushBuffers(sessionId, state);
       states.delete(sessionId);
-      return new Promise((resolve45) => {
-        state.stream.end(() => resolve45());
+      return new Promise((resolve47) => {
+        state.stream.end(() => resolve47());
       });
     },
     closeAll() {
@@ -1064,7 +1065,7 @@ function createTranscriptWriter(opts) {
         const state = states.get(sessionId);
         if (!state) continue;
         flushBuffers(sessionId, state);
-        closings.push(new Promise((resolve45) => state.stream.end(() => resolve45())));
+        closings.push(new Promise((resolve47) => state.stream.end(() => resolve47())));
       }
       states.clear();
       return Promise.all(closings).then(() => void 0);
@@ -1225,9 +1226,9 @@ async function exportClaudeCodeSession(adapterSessionId, cwd, configDir) {
   let stream;
   try {
     stream = createReadStream(filePath, { encoding: "utf8" });
-    await new Promise((resolve45, reject) => {
+    await new Promise((resolve47, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve45);
+      stream.once("open", resolve47);
     });
   } catch (err) {
     const code = err.code;
@@ -1501,7 +1502,7 @@ async function discoverHermesSessions(cwd, since, expectedId) {
 }
 async function defaultHermesRunner(adapterSessionId) {
   const { spawn: spawn8 } = await import('child_process');
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve47, reject) => {
     const chunks = [];
     const errChunks = [];
     const proc = spawn8(
@@ -1520,7 +1521,7 @@ async function defaultHermesRunner(adapterSessionId) {
           )
         );
       } else {
-        resolve45(Buffer.concat(chunks).toString("utf8"));
+        resolve47(Buffer.concat(chunks).toString("utf8"));
       }
     });
   });
@@ -1557,9 +1558,9 @@ async function exportDaemonEventsSession(sessionId, desc, baseDir) {
   let stream;
   try {
     stream = createReadStream(filePath, { encoding: "utf8" });
-    await new Promise((resolve45, reject) => {
+    await new Promise((resolve47, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve45);
+      stream.once("open", resolve47);
     });
   } catch (err) {
     const code = err.code;
@@ -1781,7 +1782,11 @@ async function readFirstJsonLine(path) {
 function codexHome() {
   return process.env.CODEX_HOME ?? join(homedir(), ".codex");
 }
-function codexSessionsDir() {
+function codexSessionsDir(configDir) {
+  if (configDir) {
+    const isolated = join(configDir, "sessions");
+    if (existsSync(isolated)) return isolated;
+  }
   return join(codexHome(), "sessions");
 }
 async function walkCodexRollouts(dir) {
@@ -1816,8 +1821,8 @@ function codexBlocksText(content) {
   }
   return acc;
 }
-async function findCodexRolloutFile(conversationId) {
-  const files = await walkCodexRollouts(codexSessionsDir());
+async function findCodexRolloutFile(conversationId, configDir) {
+  const files = await walkCodexRollouts(codexSessionsDir(configDir));
   const byName = files.find((f) => f.endsWith(`-${conversationId}.jsonl`));
   if (byName) return byName;
   for (const f of files) {
@@ -1834,11 +1839,11 @@ async function findCodexRolloutFile(conversationId) {
   }
   return void 0;
 }
-async function exportCodexSession(conversationId) {
-  const file = await findCodexRolloutFile(conversationId);
+async function exportCodexSession(conversationId, configDir) {
+  const file = await findCodexRolloutFile(conversationId, configDir);
   if (!file) {
     throw new Error(
-      `codex: no rollout file for conversation "${conversationId}" under ${codexSessionsDir()}.
+      `codex: no rollout file for conversation "${conversationId}" under ${codexSessionsDir(configDir)}.
 The session may predate persistence, or CODEX_HOME points elsewhere.`
     );
   }
@@ -2488,7 +2493,7 @@ var init_transcript_export = __esm({
         exportSession: (id) => exportHermesSession(id)
       },
       codex: {
-        exportSession: (id) => exportCodexSession(id)
+        exportSession: (id, _cwd, configDir) => exportCodexSession(id, configDir)
       },
       opencode: {
         exportSession: (id) => exportOpenCodeSession(id)
@@ -3907,8 +3912,8 @@ async function enrichWithRemainingQuota(rollup, opts) {
     })
   );
   const capMs = opts.timeoutMs ?? DEFAULT_ENRICH_CAP_MS;
-  const cap = new Promise((resolve45) => {
-    setTimeout(() => resolve45(null), capMs);
+  const cap = new Promise((resolve47) => {
+    setTimeout(() => resolve47(null), capMs);
   });
   const settled = await Promise.race([work, cap]);
   if (settled === null) return rollup;
@@ -3972,8 +3977,8 @@ async function enrichWithAccountCredits(rollup, opts) {
     })
   );
   const capMs = opts.timeoutMs ?? DEFAULT_ENRICH_CAP_MS;
-  const cap = new Promise((resolve45) => {
-    setTimeout(() => resolve45(null), capMs);
+  const cap = new Promise((resolve47) => {
+    setTimeout(() => resolve47(null), capMs);
   });
   const settled = await Promise.race([work, cap]);
   if (settled === null) return rollup;
@@ -4228,14 +4233,14 @@ function parseProcStat(statLine, cmdline, uid, ctx) {
   };
 }
 function execPs(platform, timeoutMs) {
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve47, reject) => {
     execFile(
       "ps",
       psArgs(platform),
       // LC_ALL=C pins the decimal separator of `pcpu` to `.` regardless of the
       // operator's locale.
       { maxBuffer: 32 * 1024 * 1024, timeout: timeoutMs, env: { ...process.env, LC_ALL: "C" } },
-      (err, stdout) => err ? reject(new Error(`ps failed${err.killed ? " (timed out, host overloaded?)" : ""}: ${err.message.trim()}`)) : resolve45(stdout)
+      (err, stdout) => err ? reject(new Error(`ps failed${err.killed ? " (timed out, host overloaded?)" : ""}: ${err.message.trim()}`)) : resolve47(stdout)
     );
   });
 }
@@ -4539,8 +4544,8 @@ function parseVmStatAvailable(text13) {
   return total * Number(size[1]);
 }
 function execText(cmd, args) {
-  return new Promise((resolve45, reject) => {
-    execFile(cmd, args, { timeout: 3e3 }, (err, stdout) => err ? reject(err) : resolve45(stdout));
+  return new Promise((resolve47, reject) => {
+    execFile(cmd, args, { timeout: 3e3 }, (err, stdout) => err ? reject(err) : resolve47(stdout));
   });
 }
 function createProcessStatsService(opts = {}) {
@@ -4566,14 +4571,14 @@ function createProcessStatsService(opts = {}) {
       nowMs: now()
     }).claimedPids;
     const byPid = new Map(rows.map((r) => [r.pid, r]));
-    const keyOf2 = (pid) => `${pid}:${Math.floor((now() - (byPid.get(pid)?.elapsedSec ?? 0) * 1e3) / 2e3)}`;
+    const keyOf3 = (pid) => `${pid}:${Math.floor((now() - (byPid.get(pid)?.elapsedSec ?? 0) * 1e3) / 2e3)}`;
     const candidates = strayEnvCandidates(rows, claimed, uid);
-    const unread = candidates.filter((p) => !envMemo.has(keyOf2(p)));
+    const unread = candidates.filter((p) => !envMemo.has(keyOf3(p)));
     const read = await readEnv(unread);
-    for (const p of unread) envMemo.set(keyOf2(p), read.get(p) ?? null);
+    for (const p of unread) envMemo.set(keyOf3(p), read.get(p) ?? null);
     const envHints = /* @__PURE__ */ new Map();
     for (const p of candidates) {
-      const h = envMemo.get(keyOf2(p));
+      const h = envMemo.get(keyOf3(p));
       if (h) envHints.set(p, h);
     }
     if (envMemo.size > 4096) envMemo.clear();
@@ -5419,9 +5424,9 @@ async function readFirstTurn(sessionId) {
   let stream;
   try {
     stream = createReadStream(sessionEventsPath(sessionId), { encoding: "utf8" });
-    await new Promise((resolve45, reject) => {
+    await new Promise((resolve47, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve45);
+      stream.once("open", resolve47);
     });
   } catch {
     return null;
@@ -9271,7 +9276,7 @@ async function* pollAgentOutputFallback(host, remoteSessionId, since) {
             `sandbox proxy: ${consecutivePollFailures} consecutive poll failures against the box daemon (session "${remoteSessionId}") \u2014 giving up. Last error: ${pollErr instanceof Error ? pollErr.message : String(pollErr)}`
           );
         }
-        await new Promise((resolve45) => setTimeout(resolve45, POLL_RETRY_DELAY_MS));
+        await new Promise((resolve47) => setTimeout(resolve47, POLL_RETRY_DELAY_MS));
         continue;
       }
       if (result.timedOut) continue;
@@ -9506,19 +9511,19 @@ async function startDeviceSandboxBridge(opts) {
     }
   }
   const port = await getFreePort();
-  await new Promise((resolve45, reject) => {
+  await new Promise((resolve47, reject) => {
     server.once("error", reject);
-    server.listen(port, "127.0.0.1", () => resolve45());
+    server.listen(port, "127.0.0.1", () => resolve47());
   });
   return {
     mcpUrl: `http://127.0.0.1:${port}/mcp`,
     async close() {
-      await new Promise((resolve45) => server.close(() => resolve45()));
+      await new Promise((resolve47) => server.close(() => resolve47()));
     }
   };
 }
 async function getFreePort() {
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve47, reject) => {
     const srv = createServer$1();
     srv.once("error", reject);
     srv.listen(0, "127.0.0.1", () => {
@@ -9528,7 +9533,7 @@ async function getFreePort() {
         return;
       }
       const { port } = address;
-      srv.close(() => resolve45(port));
+      srv.close(() => resolve47(port));
     });
   });
 }
@@ -9673,7 +9678,7 @@ async function pollServeReady(url, opts) {
   for (; ; ) {
     if (await probe(url)) return true;
     if (Date.now() >= deadline) return false;
-    await new Promise((resolve45) => setTimeout(resolve45, intervalMs));
+    await new Promise((resolve47) => setTimeout(resolve47, intervalMs));
   }
 }
 async function seedAllowlist(client) {
@@ -9798,7 +9803,7 @@ var init_sandbox_app_serve = __esm({
   }
 });
 async function getFreePort2() {
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve47, reject) => {
     const srv = createServer$1();
     srv.once("error", reject);
     srv.listen(0, "127.0.0.1", () => {
@@ -9808,7 +9813,7 @@ async function getFreePort2() {
         return;
       }
       const { port } = address;
-      srv.close(() => resolve45(port));
+      srv.close(() => resolve47(port));
     });
   });
 }
@@ -9821,7 +9826,7 @@ async function probeHealth(url, timeoutMs) {
     } catch {
     }
     if (Date.now() >= deadline) return false;
-    await new Promise((resolve45) => setTimeout(resolve45, POLL_INTERVAL_MS));
+    await new Promise((resolve47) => setTimeout(resolve47, POLL_INTERVAL_MS));
   }
 }
 var HEALTH_TIMEOUT_MS, POLL_INTERVAL_MS, localSandboxProvider;
@@ -11398,8 +11403,8 @@ async function spawnAgentSession(deps2, input) {
     }
     let resolveClaim;
     claims.set(key, {
-      result: new Promise((resolve45) => {
-        resolveClaim = resolve45;
+      result: new Promise((resolve47) => {
+        resolveClaim = resolve47;
       }),
       // An implicit claim expires sooner than an explicit one — see
       // `IMPLICIT_SPAWN_CLAIM_WINDOW_MS`'s docblock.
@@ -11958,13 +11963,13 @@ async function isSharedDirtyCwd(cwd) {
   const identity = resolveWorktreeIdentity(cwd);
   if (identity?.worktreeId !== void 0) return false;
   const { spawn: spawn8 } = await import('child_process');
-  return await new Promise((resolve45) => {
+  return await new Promise((resolve47) => {
     let stdout = "";
     let settled = false;
     const done = (v) => {
       if (!settled) {
         settled = true;
-        resolve45(v);
+        resolve47(v);
       }
     };
     const child = spawn8("git", ["-C", cwd, "status", "--porcelain"], {
@@ -11979,15 +11984,15 @@ async function isSharedDirtyCwd(cwd) {
 }
 async function resolveMcpCredentialHeaders(mcpServers) {
   if (!mcpServers || mcpServers.length === 0) return mcpServers;
-  const { resolveMcpCredentialHeaders: resolve45 } = getMcpCredentialDeps();
-  if (!resolve45) return mcpServers;
+  const { resolveMcpCredentialHeaders: resolve47 } = getMcpCredentialDeps();
+  if (!resolve47) return mcpServers;
   return Promise.all(
     mcpServers.map(async (entry) => {
       const ref = entry.credentialRef;
       if (!ref) return entry;
       let brokered;
       try {
-        brokered = await resolve45({ credentialRef: ref });
+        brokered = await resolve47({ credentialRef: ref });
       } catch (err) {
         console.warn(
           `[agent_start] credentialRef resolution failed for "${entry.name}" (${ref}): ${err instanceof Error ? err.message : String(err)}`
@@ -12083,7 +12088,7 @@ async function startDeviceSessionWithRetry(host, args, target) {
       lastErr = err;
       if (!isDeviceTransportError(err)) throw err;
       if (attempt < attempts) {
-        await new Promise((resolve45) => setTimeout(resolve45, DEVICE_SPAWN_RETRY_DELAY_MS));
+        await new Promise((resolve47) => setTimeout(resolve47, DEVICE_SPAWN_RETRY_DELAY_MS));
       }
     }
   }
@@ -12335,10 +12340,10 @@ function markFailedBootLedger(opts) {
   }
 }
 async function resolveSandboxSecret(slug) {
-  const { resolveSandboxSecret: resolve45 } = getMcpCredentialDeps();
-  if (!resolve45) return null;
+  const { resolveSandboxSecret: resolve47 } = getMcpCredentialDeps();
+  if (!resolve47) return null;
   try {
-    return await resolve45(slug);
+    return await resolve47(slug);
   } catch (err) {
     console.warn(
       `[agent_start] sandbox secret resolution failed for "${slug}": ${err instanceof Error ? err.message : String(err)}`
@@ -13044,8 +13049,8 @@ async function readLogTailSafe(dir, n) {
 async function resolveAppUiBuildState(input) {
   const { dir, uiPath } = input;
   const pending = peekInFlightBuild(uiPath) ?? ensureAppUiBuilt(input);
-  const timeout = new Promise((resolve45) => {
-    const timer = setTimeout(() => resolve45(RESOLVE_TIMEOUT), RESOLVE_FAST_PATH_MS);
+  const timeout = new Promise((resolve47) => {
+    const timer = setTimeout(() => resolve47(RESOLVE_TIMEOUT), RESOLVE_FAST_PATH_MS);
     timer.unref();
   });
   const raced = await Promise.race([pending, timeout]);
@@ -16402,8 +16407,8 @@ function createTerminalTranscriptWriter(opts) {
       const stream = streams.get(sessionId);
       if (!stream) return Promise.resolve();
       streams.delete(sessionId);
-      return new Promise((resolve45) => {
-        stream.end(() => resolve45());
+      return new Promise((resolve47) => {
+        stream.end(() => resolve47());
       });
     },
     closeAll() {
@@ -16412,8 +16417,8 @@ function createTerminalTranscriptWriter(opts) {
         const stream = streams.get(sessionId);
         if (!stream) continue;
         closings.push(
-          new Promise((resolve45) => {
-            stream.end(() => resolve45());
+          new Promise((resolve47) => {
+            stream.end(() => resolve47());
           })
         );
       }
@@ -16860,8 +16865,8 @@ function createRegistryHandoffAsker(registry, desc, baseDir) {
     const turn = registry.sendPrompt(sessionId, prompt, { source: HANDOFF_PROMPT_SOURCE });
     let timer;
     const timedOut = /* @__PURE__ */ Symbol("timeout");
-    const deadline = new Promise((resolve45) => {
-      timer = setTimeout(() => resolve45(timedOut), timeoutMs);
+    const deadline = new Promise((resolve47) => {
+      timer = setTimeout(() => resolve47(timedOut), timeoutMs);
     });
     try {
       const outcome = await Promise.race([turn, deadline]);
@@ -16876,7 +16881,7 @@ function createRegistryHandoffAsker(registry, desc, baseDir) {
     for (let attempt = 0; attempt < REPLY_POLL_ATTEMPTS; attempt++) {
       const reply = readLastAssistantTextSync(eventsPath2);
       if (reply && reply !== before) return reply;
-      await new Promise((resolve45) => setTimeout(resolve45, REPLY_POLL_MS));
+      await new Promise((resolve47) => setTimeout(resolve47, REPLY_POLL_MS));
     }
     throw new Error("source session produced no reply");
   };
@@ -16980,14 +16985,14 @@ function buildRecentDigest(messages) {
 }
 async function captureGitStatus(cwd) {
   if (!cwd) return void 0;
-  return new Promise((resolve45) => {
+  return new Promise((resolve47) => {
     execFile("git", ["status", "--porcelain"], { cwd }, (err, stdout) => {
       if (err) {
-        resolve45(void 0);
+        resolve47(void 0);
         return;
       }
       const trimmed = stdout.trim();
-      resolve45(trimmed || "(working tree clean)");
+      resolve47(trimmed || "(working tree clean)");
     });
   });
 }
@@ -19135,11 +19140,11 @@ function createSessionsRegistry(opts) {
   };
   const waitForTurnSettled = (rt, id, caller) => {
     if (!rt.busy) return Promise.resolve();
-    return new Promise((resolve45, reject) => {
+    return new Promise((resolve47, reject) => {
       const onBusy = (busy) => {
         if (busy) return;
         cleanup();
-        resolve45();
+        resolve47();
       };
       const cleanup = () => {
         clearTimeout(timer);
@@ -19217,9 +19222,9 @@ function createSessionsRegistry(opts) {
           );
           return;
         }
-        const answer = isChildPromptSource(next.source) ? void 0 : matchStructuredQuestionAnswer(liveRt, next.message);
-        if (answer) {
-          await answerStructuredQuestion(liveRt, answer);
+        const answer2 = isChildPromptSource(next.source) ? void 0 : matchStructuredQuestionAnswer(liveRt, next.message);
+        if (answer2) {
+          await answerStructuredQuestion(liveRt, answer2);
           return;
         }
         await runAgentTurn(
@@ -23034,14 +23039,14 @@ var init_pr_provenance_stamp = __esm({
     init_pr_provenance();
     defaultGhRunner = async (args, cwd) => {
       const { spawn: spawn8 } = await import('child_process');
-      return await new Promise((resolve45) => {
+      return await new Promise((resolve47) => {
         let stdout = "";
         const child = spawn8("gh", [...args], { cwd, shell: false });
         child.stdout?.on("data", (d) => {
           stdout += d.toString("utf8");
         });
-        child.on("error", () => resolve45({ exitCode: 1, stdout }));
-        child.on("close", (code) => resolve45({ exitCode: code ?? 1, stdout }));
+        child.on("error", () => resolve47({ exitCode: 1, stdout }));
+        child.on("close", (code) => resolve47({ exitCode: code ?? 1, stdout }));
       });
     };
   }
@@ -23575,6 +23580,19 @@ var init_command_tools = __esm({
   }
 });
 
+// src/liveness-tick-guard.ts
+function createLivenessTickGuard(intervalMs, graceMs, now = Date.now) {
+  let last = now();
+  return {
+    shouldSkip() {
+      const t = now();
+      const late = t - last - intervalMs;
+      last = t;
+      return late > graceMs;
+    }
+  };
+}
+
 // src/index.ts
 init_browser_mount();
 async function writeRuntimeMeta(workspace, meta) {
@@ -25319,10 +25337,10 @@ function sandboxAuthForBox(auth) {
   };
 }
 async function resolveSandboxSecretFromBroker(slug) {
-  const { resolveSandboxSecret: resolve45 } = getMcpCredentialDeps();
-  if (!resolve45) return null;
+  const { resolveSandboxSecret: resolve47 } = getMcpCredentialDeps();
+  if (!resolve47) return null;
   try {
-    return await resolve45(slug);
+    return await resolve47(slug);
   } catch (err) {
     console.warn(
       `[restartAgentSession] sandbox secret resolution failed for "${slug}": ${err instanceof Error ? err.message : String(err)}`
@@ -25916,6 +25934,12 @@ function createMcpObservationStore(opts = {}) {
       const obs = touch(sessionId);
       obs.httpError = { at: obs.lastSeenAt, status };
     },
+    recordResult(sessionId, method, message, clientProtocolVersion) {
+      try {
+        record2(sessionId, method, message, clientProtocolVersion);
+      } catch {
+      }
+    },
     get: (sessionId) => bySession.get(sessionId),
     delete: (sessionId) => {
       bySession.delete(sessionId);
@@ -26240,7 +26264,7 @@ async function runContinueOnBootPass(opts) {
 
 // src/session-tools.ts
 init_session_outcome();
-var defaultPsExecutor = () => new Promise((resolve45, reject) => {
+var defaultPsExecutor = () => new Promise((resolve47, reject) => {
   if (process.platform === "win32") {
     reject(new Error("processTreeRss: ps is not available on win32"));
     return;
@@ -26251,7 +26275,7 @@ var defaultPsExecutor = () => new Promise((resolve45, reject) => {
     { maxBuffer: 16 * 1024 * 1024 },
     (err, stdout) => {
       if (err) reject(err);
-      else resolve45(stdout);
+      else resolve47(stdout);
     }
   );
 });
@@ -26646,15 +26670,15 @@ function computeHostWarnings(input) {
 function createDefaultHostProbes() {
   const platform = process.platform;
   const own = /* @__PURE__ */ new Set();
-  const run = (cmd, args, timeoutMs) => new Promise((resolve45, reject) => {
+  const run = (cmd, args, timeoutMs) => new Promise((resolve47, reject) => {
     const child = execFile(
       cmd,
       args,
       { maxBuffer: 16 * 1024 * 1024, timeout: timeoutMs, env: { ...process.env, LC_ALL: "C" } },
       (err, stdout) => {
-        if (!err) return resolve45(stdout);
+        if (!err) return resolve47(stdout);
         if (err.killed) return reject(new Error(`${cmd} timed out after ${timeoutMs}ms`));
-        return stdout ? resolve45(stdout) : reject(err);
+        return stdout ? resolve47(stdout) : reject(err);
       }
     );
     if (child.pid !== void 0) own.add(child.pid);
@@ -27419,9 +27443,9 @@ async function callJevSystemOne(state, questions, opts) {
       const answers = {};
       const answerErrors = {};
       for (const [key, value] of Object.entries(parsed.data.answers)) {
-        const answer = jevChoiceAnswerSchema.safeParse(value);
-        if (answer.success) answers[key] = answer.data;
-        else answerErrors[key] = describeZodIssues(answer.error);
+        const answer2 = jevChoiceAnswerSchema.safeParse(value);
+        if (answer2.success) answers[key] = answer2.data;
+        else answerErrors[key] = describeZodIssues(answer2.error);
       }
       return {
         ok: true,
@@ -27505,24 +27529,24 @@ async function judgeSessionWithJev(input) {
     }
   );
   if (!outcome.ok) return fail4(outcome.error);
-  const answer = outcome.answers[VERDICT_QUESTION_KEY];
-  if (!answer) {
+  const answer2 = outcome.answers[VERDICT_QUESTION_KEY];
+  if (!answer2) {
     const why = outcome.answerErrors?.[VERDICT_QUESTION_KEY];
     return fail4(`response missing a valid verdict answer${why ? ` \u2014 ${why}` : ""}`);
   }
-  if (!WRAPUP_VERDICTS.includes(answer.choice)) {
-    return fail4(`unknown verdict choice '${answer.choice}'`);
+  if (!WRAPUP_VERDICTS.includes(answer2.choice)) {
+    return fail4(`unknown verdict choice '${answer2.choice}'`);
   }
-  const confidence = answer.confidence ?? answer.probabilities[answer.choice];
+  const confidence = answer2.confidence ?? answer2.probabilities[answer2.choice];
   if (typeof confidence !== "number" || !Number.isFinite(confidence) || confidence < 0 || confidence > 1) {
     return fail4("no usable confidence for the chosen verdict");
   }
   return {
     ok: true,
     sessionId: input.sessionId,
-    verdict: answer.choice,
+    verdict: answer2.choice,
     confidence,
-    probabilities: answer.probabilities,
+    probabilities: answer2.probabilities,
     model: outcome.model ?? model
   };
 }
@@ -27723,7 +27747,6 @@ function createBackgroundJobRegistry(opts) {
       jobId: job.id,
       status: "running",
       startedAt: job.startedAt,
-      resultPath: resultPathFor(job.id),
       followUp: { tool: followUp.tool, args: { jobId: job.id }, pollAfterMs: JOB_POLL_AFTER_MS, hint: followUp.hint }
     }),
     progressView: (job) => job.status === "failed" ? { jobId: job.id, status: job.status, endedAt: job.endedAt, error: job.error } : {
@@ -27731,22 +27754,86 @@ function createBackgroundJobRegistry(opts) {
       status: job.status,
       startedAt: job.startedAt,
       elapsedMs: Date.now() - job.startedMs,
-      resultPath: resultPathFor(job.id),
       followUp: { pollAfterMs: JOB_POLL_AFTER_MS }
     }
   };
 }
 function timedOutWaiting(promise, waitMs) {
-  return new Promise((resolve45) => {
-    const handle = setTimeout(() => resolve45(true), waitMs);
+  return new Promise((resolve47) => {
+    const handle = setTimeout(() => resolve47(true), waitMs);
     const settled = () => {
       clearTimeout(handle);
-      resolve45(false);
+      resolve47(false);
     };
     promise.then(settled, settled);
   });
 }
 
+// src/branch-gc.ts
+function summarizeBranchGcApply(result) {
+  const zero = () => ({ deleted: 0, skipped: 0, failed: 0 });
+  const byScope = { local: zero(), remote: zero(), orphan: zero() };
+  const totals = zero();
+  const byResult = {};
+  let aborted = 0;
+  for (const o of result.outcomes) {
+    byResult[o.result] = (byResult[o.result] ?? 0) + 1;
+    const bucket = o.result === "deleted" ? "deleted" : o.result === "failed" ? "failed" : "skipped";
+    byScope[o.kind][bucket]++;
+    totals[bucket]++;
+    if (o.result.startsWith("aborted-")) aborted++;
+  }
+  const status = totals.deleted === 0 ? totals.failed > 0 ? "failed" : "noop" : totals.failed > 0 || aborted > 0 ? "partial" : "ok";
+  return { status, totals, byScope, byResult, restoreLog: result.restoreLog ?? null };
+}
+function withBranchGcApplySummary(result) {
+  if (result.mode !== "apply") return result;
+  const applySummary = summarizeBranchGcApply(result);
+  return { ...result, status: applySummary.status, applySummary };
+}
+var BRANCH_GC_PAGE_DEFAULT = 100;
+var BRANCH_GC_PAGE_MAX = 500;
+var encodeOffset = (n) => Buffer.from(`o:${n}`).toString("base64url");
+function decodeOffset(cursor) {
+  const m = /^o:(\d+)$/.exec(Buffer.from(cursor, "base64url").toString("utf8"));
+  if (!m) throw new Error("branch_gc_status: invalid `cursor`");
+  return Number(m[1]);
+}
+function sliceBranchGcResult(result, opts) {
+  const section = opts.section ?? (result.mode === "apply" ? "outcomes" : "entries");
+  const scopeOk = (kind) => !opts.scopes?.length || opts.scopes.includes(kind);
+  let rows;
+  if (section === "outcomes") {
+    if (result.mode !== "apply") throw new Error("branch_gc_status: `section: outcomes` is only available on an apply result");
+    rows = result.outcomes.filter((o) => scopeOk(o.kind) && (!opts.results?.length || opts.results.includes(o.result)));
+  } else {
+    rows = result.plan.entries.filter(
+      (e) => scopeOk(e.kind) && (!opts.classes?.length || opts.classes.includes(e.class))
+    );
+  }
+  const limit = Math.min(Math.max(Math.trunc(opts.limit ?? BRANCH_GC_PAGE_DEFAULT), 1), BRANCH_GC_PAGE_MAX);
+  const start = opts.cursor !== void 0 ? decodeOffset(opts.cursor) : 0;
+  const pageRows = rows.slice(start, start + limit);
+  const next = start + limit;
+  const page = {
+    section,
+    total: rows.length,
+    returned: pageRows.length,
+    ...next < rows.length ? { nextCursor: encodeOffset(next) } : {}
+  };
+  const { plan, ...rest } = result;
+  const { entries: _entries, ...planMeta } = plan;
+  const { outcomes: _outcomes, ...restNoOutcomes } = rest;
+  return {
+    page,
+    result: {
+      ...restNoOutcomes,
+      plan: section === "entries" ? { ...planMeta, entries: pageRows } : planMeta,
+      ...section === "outcomes" ? { outcomes: pageRows } : {}
+    }
+  };
+}
+
 // src/session-tools.ts
 init_command_allowlist();
 init_agent_tools();
@@ -28366,25 +28453,27 @@ var sessionWrapupApplyJobs = createBackgroundJobRegistry({
 var BACKGROUND_DEFAULT_WAIT_MS = 25e3;
 var branchGcBackgroundView = (job) => branchGcJobs.backgroundView(job, {
   tool: "branch_gc_status",
-  hint: "Running in the background; a plan on a large repo takes a few minutes. Call branch_gc_status with this jobId about every 30 s. When done it returns the summary; the full result is written to resultPath (pass full: true to get it inline)."
+  hint: "Running in the background; a plan on a large repo takes a few minutes. Call branch_gc_status with this jobId about every 30 s. When done it returns the summary and, once the file exists, a resultPath holding the full result (pass full: true to get a filtered/paged slice inline)."
 });
-var branchGcDoneView = (jobId, resultPath, result, full, endedAt) => ({
+var branchGcDoneView = (jobId, resultPath, result, slice, endedAt) => ({
   jobId,
   status: "done",
   ...endedAt !== void 0 ? { endedAt } : {},
-  resultPath,
+  ...resultPath !== void 0 ? { resultPath } : {},
   summary: result.summary,
-  // Apply results carry the restore log path and a per-outcome tally —
-  // exactly what a caller needs to decide "safe?" without fetching the
-  // full ~MB result with `full: true`.
+  // Apply results carry the restore log path, a per-outcome tally and the
+  // per-scope deleted/skipped/failed summary — exactly what a caller needs
+  // to decide "safe?" without fetching the full ~MB result with `full: true`.
+  // Result files written before `applySummary` existed are summarised here.
   ...result.mode === "apply" ? {
     restoreLog: result.restoreLog ?? null,
     outcomeCounts: result.outcomes.reduce((acc, o) => {
       acc[o.result] = (acc[o.result] ?? 0) + 1;
       return acc;
-    }, {})
+    }, {}),
+    applySummary: result.applySummary ?? summarizeBranchGcApply(result)
   } : {},
-  ...full ? { result } : {}
+  ...slice ? sliceBranchGcResult(result, slice) : {}
 });
 var worktreeGcBackgroundView = (job) => worktreeGcJobs.backgroundView(job, {
   tool: "worktree_gc_status",
@@ -28424,7 +28513,7 @@ var backgroundStatusResult = async (toolName, jobs, jobId) => {
           jobId: job.id,
           status: "done",
           endedAt: job.endedAt,
-          resultPath: jobs.resultPathFor(job.id),
+          ...job.resultPath !== void 0 ? { resultPath: job.resultPath } : {},
           result: job.result
         })
       }
@@ -28471,7 +28560,8 @@ function registerSessionTools(rawServer, opts) {
           project: args.project,
           keyOf: args.keyOf,
           maxLimit: 200,
-          itemKey: args.itemKey
+          itemKey: args.itemKey,
+          ...args.defaultLimit !== void 0 ? { defaultLimit: args.defaultLimit } : {}
         })
       ]
     });
@@ -29218,7 +29308,7 @@ function registerSessionTools(rawServer, opts) {
   });
   registerPaginatedListTool({
     id: "terminal_sessions_list",
-    description: "List terminal/PTY sessions tracked by the daemon. Equivalent to `session_list({kind: 'terminal'})`. Each entry includes `kind`, `pty`, `status`, age, etc. Use this when you only want the terminal subset. COMPACT BY DEFAULT: each entry is session_list's slim projection; pass `full: true` (or `compact: false`) for the complete, unprojected per-session record.",
+    description: "List terminal/PTY sessions tracked by the daemon. Equivalent to `session_list({kind: 'terminal'})`. Each entry includes `kind`, `pty`, `status`, age, etc. Use this when you only want the terminal subset. COMPACT BY DEFAULT: each entry is session_list's slim projection; pass `full: true` (or `compact: false`) for the complete, unprojected per-session record. Without `limit`/`cursor` at most 50 rows come back; when there are more the reply carries `total`, `truncated: true` and a `nextCursor` \u2014 pass it as `cursor` (with a `limit`) for the rest, or filter with `onlyAlive` / `status`.",
     schema: terminalSessionsListSchema,
     body: async (input) => {
       let rows = registry.list({ includeArchived: true });
@@ -29242,7 +29332,10 @@ function registerSessionTools(rawServer, opts) {
     },
     project: compactSessionItemWithProvenance,
     keyOf: (s) => s.id,
-    itemKey: "sessions"
+    itemKey: "sessions",
+    // Dead terminals pile up: an unpaged call used to return every row
+    // (65k+ chars, over the MCP output cap). Cap it and say so.
+    defaultLimit: 50
   });
   const commandListSchema = z.object({
     kind: z.enum(["terminal", "agent-cli", "command", "all"]).optional().describe(
@@ -30124,7 +30217,7 @@ function registerSessionTools(rawServer, opts) {
   const branchGcKind = z.enum(["local", "remote", "orphan"]);
   server.tool(
     "branch_gc",
-    "Garbage-collect a repo's branches. DEFAULTS TO A DRY RUN: returns a plan classifying every local branch, base-remote branch and orphan tracking ref (refs/remotes/<ns>/* of a removed remote) as `reclaim` (work provably in base: the head commit of a merged PR, merged, squash-merged, patch-merged or content-merged), `review` (unmerged, old enough, not protected \u2014 carries coverage + the files not provably in base for a reviewer), or `hold` (base/protected, checked out in a worktree or its remote twin, open PR head, PR check unavailable, or younger than `minAgeDays`). `apply: true` (requires explicit `scopes`) deletes only `reclaim` entries, re-classifying each right before deleting it, and returns the path of a restore log (sha + re-create command per deleted ref). A plan can take minutes on a big repo: as an MCP caller, pass `wait: false` (or `waitMs: 40000`) and poll `branch_gc_status` with the returned jobId instead of blocking. A `wait: false` (or `waitMs` timed-out) response returns a jobId plus a `followUp` block naming the poll tool and cadence \u2014 poll `branch_gc_status` with that jobId.",
+    "Garbage-collect a repo's branches. DEFAULTS TO A DRY RUN: returns a plan classifying every local branch, base-remote branch and orphan tracking ref (refs/remotes/<ns>/* of a removed remote) as `reclaim` (work provably in base: the head commit of a merged PR, merged, squash-merged, patch-merged or content-merged), `review` (unmerged, old enough, not protected \u2014 carries coverage + the files not provably in base for a reviewer), or `hold` (base/protected, checked out in a worktree or its remote twin, open PR head, PR check unavailable, or younger than `minAgeDays`). `apply: true` (requires explicit `scopes`) deletes only `reclaim` entries, re-classifying each right before deleting it, and returns the path of a restore log (sha + re-create command per deleted ref) plus a top-level `status` and an `applySummary` (deleted / skipped / failed counts per scope, and the restore log path). A plan can take minutes on a big repo: as an MCP caller, pass `wait: false` (or `waitMs: 40000`) and poll `branch_gc_status` with the returned jobId instead of blocking. A `wait: false` (or `waitMs` timed-out) response returns a jobId plus a `followUp` block naming the poll tool and cadence \u2014 poll `branch_gc_status` with that jobId.",
     {
       repoRoot: z.string().optional().describe("Absolute path to the git repo. Wins over `workspaceSlug`."),
       workspaceSlug: z.string().optional().describe("Workspace slug from `agentproto workspace list`. The active workspace when omitted."),
@@ -30174,7 +30267,7 @@ function registerSessionTools(rawServer, opts) {
           ...input.minAgeDays !== void 0 ? { minAgeDays: input.minAgeDays } : {},
           ...input.anchor ? { anchor: input.anchor } : {}
         };
-        const { job, promise } = branchGcJobs.start(() => runBranchGc(runInput));
+        const { job, promise } = branchGcJobs.start(async () => withBranchGcApplySummary(await runBranchGc(runInput)));
         if (input.wait === false) {
           return { content: [{ type: "text", text: JSON.stringify(branchGcBackgroundView(job)) }] };
         }
@@ -30193,12 +30286,36 @@ function registerSessionTools(rawServer, opts) {
   );
   server.tool(
     "branch_gc_status",
-    "Poll a branch_gc run started with `wait: false` (or one that fell back to the background via `waitMs`). While running: status + elapsed time. When done: the plan's own summary, the path of the full result saved on disk (`resultPath`), and \u2014 with `full: true` \u2014 the full result itself. While running the view also carries `followUp.pollAfterMs` (poll every 30 s). When failed: the error.",
+    'Poll a branch_gc run started with `wait: false` (or one that fell back to the background via `waitMs`). While running: status + elapsed time. When done: the plan\'s own summary (plus, for an apply, `applySummary` \u2014 deleted/skipped/failed per scope and the restore log path) and the path of the full result saved on disk (`resultPath`). The full result is too big to return whole, so `full: true` (or any of `section`, `classes`, `scopes`, `results`, `limit`, `cursor`) returns ONE filtered page of it: `result` (summary + plan metadata + the selected list) and `page { section, total, returned, nextCursor }` \u2014 default 100 rows, pass `nextCursor` back as `cursor` for the next page. Use `classes: ["reclaim"]` to see only what an apply would delete. While running the view carries `followUp.pollAfterMs` (poll every 30 s). When failed: the error.',
     {
       jobId: z.string().describe("Job id returned by `branch_gc` (`bgc_\u2026`)."),
-      full: mcpBool2.optional().describe("Include the full result JSON, not just the summary. Default false.")
+      full: mcpBool2.optional().describe("Include a filtered/paged slice of the full result (see description). Implied by any other slice param. Default false."),
+      section: z.enum(["entries", "outcomes"]).optional().describe("Which list to return: plan `entries` or apply `outcomes`. Default `entries` for a plan, `outcomes` for an apply."),
+      classes: z.array(z.enum(["reclaim", "review", "hold"])).optional().describe('Entries only: keep these classes (e.g. ["reclaim"]).'),
+      scopes: z.array(branchGcKind).optional().describe("Keep these ref kinds (local, remote, orphan)."),
+      results: z.array(
+        z.enum(["deleted", "held", "skipped-review", "aborted-moved", "aborted-vanished", "aborted-reclassified", "failed"])
+      ).optional().describe("Outcomes only: keep these outcome results."),
+      limit: mcpNumber.optional().describe(`Rows per page. Default 100, max ${BRANCH_GC_PAGE_MAX}.`),
+      cursor: z.string().optional().describe("`page.nextCursor` from the previous page.")
     },
     async (input) => {
+      const wantsSlice = input.full === true || input.section !== void 0 || input.classes !== void 0 || input.scopes !== void 0 || input.results !== void 0 || input.limit !== void 0 || input.cursor !== void 0;
+      const slice = wantsSlice ? {
+        ...input.section ? { section: input.section } : {},
+        ...input.classes ? { classes: input.classes } : {},
+        ...input.scopes ? { scopes: input.scopes } : {},
+        ...input.results ? { results: input.results } : {},
+        ...input.limit !== void 0 ? { limit: input.limit } : {},
+        ...input.cursor !== void 0 ? { cursor: input.cursor } : {}
+      } : void 0;
+      const doneView = (...args) => {
+        try {
+          return { content: [{ type: "text", text: JSON.stringify(branchGcDoneView(...args)) }] };
+        } catch (err) {
+          return { content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }], isError: true };
+        }
+      };
       const job = branchGcJobs.get(input.jobId);
       if (!job) {
         const parsed = await branchGcJobs.readResultFile(input.jobId);
@@ -30213,14 +30330,12 @@ function registerSessionTools(rawServer, opts) {
             isError: true
           };
         }
-        const view3 = branchGcDoneView(input.jobId, branchGcJobs.resultPathFor(input.jobId), parsed, input.full === true);
-        return { content: [{ type: "text", text: JSON.stringify(view3) }] };
+        return doneView(input.jobId, branchGcJobs.resultPathFor(input.jobId), parsed, slice);
       }
       if (job.status !== "done") {
         return { content: [{ type: "text", text: JSON.stringify(branchGcJobs.progressView(job)) }] };
       }
-      const view2 = branchGcDoneView(job.id, branchGcJobs.resultPathFor(job.id), job.result, input.full === true, job.endedAt);
-      return { content: [{ type: "text", text: JSON.stringify(view2) }] };
+      return doneView(job.id, job.resultPath, job.result, slice, job.endedAt);
     }
   );
   const branchVerdictEnum = z.enum(["obsolete", "superseded", "salvage", "in-progress", "unclear"]);
@@ -32318,7 +32433,7 @@ function createWorkspaceBrainSubscriber(opts) {
     }
   };
 }
-function makeBrowserHandle(entry, resolve45) {
+function makeBrowserHandle(entry, resolve47) {
   return {
     slug: entry.id,
     name: entry.name,
@@ -32329,7 +32444,7 @@ function makeBrowserHandle(entry, resolve45) {
     // check() is available for on-demand health probes but is never called
     // by the lister (kit invariant OQ-5). Returns true when the adapter
     // is present in the injected resolver map, false otherwise.
-    check: async () => resolve45 ? resolve45(entry.id) != null : true
+    check: async () => resolve47 ? resolve47(entry.id) != null : true
   };
 }
 var noopLedger = {
@@ -34936,7 +35051,7 @@ function startHeartbeat(opts) {
   let timer = null;
   let currentEveryMs = null;
   let firing = false;
-  async function load() {
+  async function load2() {
     if (!existsSync(path)) return null;
     let source;
     try {
@@ -34967,7 +35082,7 @@ function startHeartbeat(opts) {
     firing = true;
     let agentId;
     try {
-      const hb = await load();
+      const hb = await load2();
       if (!hb || !hb.enabled) return;
       agentId = hb.agent;
       const agent = await opts.buildAgent(hb.agent);
@@ -35055,7 +35170,7 @@ function startHeartbeat(opts) {
   return {
     start() {
       if (timer) return;
-      void load().then((hb) => {
+      void load2().then((hb) => {
         const everyMs = hb?.everyMs ?? 6e4;
         reschedule(everyMs);
       });
@@ -35104,6 +35219,356 @@ function preview(text13, max = 120) {
 // src/http-server.ts
 init_process_stats();
 init_browser_mount();
+
+// src/mcp-modern/constants.ts
+var MODERN_PROTOCOL_VERSION = "2026-07-28";
+var DEFAULT_SUPPORTED_VERSIONS = [MODERN_PROTOCOL_VERSION];
+var META_PROTOCOL_VERSION = "io.modelcontextprotocol/protocolVersion";
+var META_CLIENT_INFO = "io.modelcontextprotocol/clientInfo";
+var META_CLIENT_CAPABILITIES = "io.modelcontextprotocol/clientCapabilities";
+var META_SERVER_INFO = "io.modelcontextprotocol/serverInfo";
+var ERR_PARSE = -32700;
+var ERR_INVALID_REQUEST = -32600;
+var ERR_METHOD_NOT_FOUND = -32601;
+var ERR_INVALID_PARAMS = -32602;
+var ERR_INTERNAL = -32603;
+var ERR_HEADER_MISMATCH = -32020;
+var ERR_UNSUPPORTED_VERSION = -32022;
+var FORWARDED_METHODS = /* @__PURE__ */ new Set([
+  "tools/list",
+  "tools/call",
+  "events/list",
+  "events/subscribe",
+  "events/unsubscribe",
+  "resources/list",
+  "resources/templates/list",
+  "resources/read",
+  "prompts/list",
+  "prompts/get"
+]);
+var ALLOWED_METHODS = /* @__PURE__ */ new Set([...FORWARDED_METHODS, "server/discover"]);
+var CACHE_HINT_METHODS = /* @__PURE__ */ new Set([
+  "server/discover",
+  "tools/list",
+  "prompts/list",
+  "resources/list",
+  "resources/templates/list",
+  "resources/read"
+]);
+var NAME_HEADER_SOURCE = /* @__PURE__ */ new Map([
+  ["tools/call", "name"],
+  ["prompts/get", "name"],
+  ["resources/read", "uri"]
+]);
+
+// src/mcp-modern/bridge.ts
+var HANDSHAKE_VERSION = "2025-11-25";
+var BridgeError = class extends Error {
+  code;
+  data;
+  constructor(code, message, data) {
+    super(message);
+    this.code = code;
+    this.data = data;
+  }
+};
+function forwardParams(params) {
+  const { _meta, ...rest } = params;
+  if (typeof _meta !== "object" || _meta === null || Array.isArray(_meta)) return rest;
+  const handshake = /* @__PURE__ */ new Set([META_PROTOCOL_VERSION, META_CLIENT_INFO, META_CLIENT_CAPABILITIES]);
+  const kept = Object.fromEntries(Object.entries(_meta).filter(([key]) => !handshake.has(key)));
+  return Object.keys(kept).length > 0 ? { ...rest, _meta: kept } : rest;
+}
+var isRecord7 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+async function openBridge(server) {
+  const [clientSide, serverSide] = InMemoryTransport.createLinkedPair();
+  const pending = /* @__PURE__ */ new Map();
+  let nextId = 1;
+  clientSide.onmessage = (message) => {
+    if (!("id" in message) || typeof message.id !== "number") return;
+    const entry = pending.get(message.id);
+    if (!entry) return;
+    if ("error" in message) {
+      pending.delete(message.id);
+      entry.reject(new BridgeError(message.error.code, message.error.message, message.error.data));
+    } else if ("result" in message) {
+      pending.delete(message.id);
+      entry.resolve(isRecord7(message.result) ? message.result : {});
+    }
+  };
+  const close = async () => {
+    for (const entry of pending.values()) entry.reject(new Error("bridge closed"));
+    pending.clear();
+    await clientSide.close().catch(() => {
+    });
+    await server.close().catch(() => {
+    });
+  };
+  const call = (method, params, signal) => new Promise((resolve47, reject) => {
+    if (signal?.aborted) {
+      reject(signal.reason ?? new Error("aborted"));
+      return;
+    }
+    const id = nextId++;
+    const onAbort = () => {
+      pending.delete(id);
+      void clientSide.send({ jsonrpc: "2.0", method: "notifications/cancelled", params: { requestId: id, reason: "client disconnected" } }).catch(() => {
+      });
+      reject(signal?.reason ?? new Error("aborted"));
+    };
+    signal?.addEventListener("abort", onAbort, { once: true });
+    pending.set(id, {
+      resolve: (value) => {
+        signal?.removeEventListener("abort", onAbort);
+        resolve47(value);
+      },
+      reject: (error) => {
+        signal?.removeEventListener("abort", onAbort);
+        reject(error);
+      }
+    });
+    clientSide.send({ jsonrpc: "2.0", id, method, params }).catch((error) => {
+      pending.delete(id);
+      signal?.removeEventListener("abort", onAbort);
+      reject(error);
+    });
+  });
+  try {
+    await server.connect(serverSide);
+    await clientSide.start();
+    const init = await call("initialize", {
+      protocolVersion: HANDSHAKE_VERSION,
+      capabilities: {},
+      clientInfo: { name: "agentproto-modern-bridge", version: "0.0.1" }
+    });
+    await clientSide.send({ jsonrpc: "2.0", method: "notifications/initialized" });
+    const info = isRecord7(init.serverInfo) ? init.serverInfo : {};
+    return {
+      capabilities: isRecord7(init.capabilities) ? { ...init.capabilities } : {},
+      serverInfo: {
+        name: typeof info.name === "string" ? info.name : "agentproto",
+        version: typeof info.version === "string" ? info.version : "0"
+      },
+      instructions: typeof init.instructions === "string" ? init.instructions : void 0,
+      request: call,
+      close
+    };
+  } catch (error) {
+    await close();
+    throw error;
+  }
+}
+
+// src/mcp-modern/validate.ts
+var isRecord8 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+function normalizeHeaders(raw) {
+  const out = {};
+  for (const [name, value] of Object.entries(raw)) {
+    if (value === void 0) continue;
+    const joined = (Array.isArray(value) ? value.join(", ") : value).trim();
+    const key = name.toLowerCase();
+    const previous = out[key];
+    out[key] = previous === void 0 ? joined : `${previous}, ${joined}`;
+  }
+  return out;
+}
+function acceptsJson(accept) {
+  if (accept === void 0) return false;
+  return accept.split(",").some((part) => {
+    const type = (part.split(";")[0] ?? "").trim().toLowerCase();
+    return type === "application/json" || type === "application/*" || type === "*/*";
+  });
+}
+function isJsonContentType(contentType) {
+  if (contentType === void 0) return false;
+  return (contentType.split(";")[0] ?? "").trim().toLowerCase() === "application/json";
+}
+function decodeHeaderValue(raw) {
+  const match = /^=\?base64\?(.*)\?=$/.exec(raw);
+  if (!match) return raw;
+  return Buffer.from(match[1] ?? "", "base64").toString("utf8");
+}
+function parseBody(body) {
+  const fail4 = (status, code, message) => ({ ok: false, error: { status, code, message, id: null } });
+  let value;
+  try {
+    value = JSON.parse(body);
+  } catch {
+    return fail4(400, ERR_PARSE, "Parse error");
+  }
+  if (Array.isArray(value)) return fail4(400, ERR_INVALID_REQUEST, "Batch requests are not supported");
+  if (!isRecord8(value)) return fail4(400, ERR_INVALID_REQUEST, "The body must be a single JSON-RPC request or notification");
+  const method = value.method;
+  if (typeof method !== "string" && ("result" in value || "error" in value)) {
+    return fail4(400, ERR_INVALID_REQUEST, "JSON-RPC responses must not be sent to the server");
+  }
+  if (value.jsonrpc !== "2.0" || typeof method !== "string") return fail4(400, ERR_INVALID_REQUEST, "Not a JSON-RPC 2.0 request");
+  const hasId = "id" in value;
+  const id = value.id;
+  if (hasId && typeof id !== "string" && typeof id !== "number") return fail4(400, ERR_INVALID_REQUEST, "`id` must be a string or a number");
+  if (value.params !== void 0 && !isRecord8(value.params)) return fail4(400, ERR_INVALID_PARAMS, "`params` must be an object");
+  return {
+    ok: true,
+    request: {
+      id: hasId ? id : void 0,
+      method,
+      params: isRecord8(value.params) ? value.params : {}
+    }
+  };
+}
+function validateRequest(request3, headers, supported, allowed) {
+  const id = request3.id ?? null;
+  const err = (status, code, message, data) => ({
+    status,
+    code,
+    message,
+    id,
+    ...data !== void 0 ? { data } : {}
+  });
+  const { method, params } = request3;
+  if (method === "initialize") {
+    const requested = typeof params.protocolVersion === "string" ? params.protocolVersion : "unknown";
+    return err(404, ERR_METHOD_NOT_FOUND, "Method not found: initialize (this endpoint is stateless, send server/discover)", {
+      supported: [...supported],
+      requested
+    });
+  }
+  const meta = params._meta;
+  const missing = [];
+  if (!isRecord8(meta) || typeof meta[META_PROTOCOL_VERSION] !== "string") missing.push(META_PROTOCOL_VERSION);
+  if (!isRecord8(meta) || !isRecord8(meta[META_CLIENT_CAPABILITIES])) missing.push(META_CLIENT_CAPABILITIES);
+  if (!isRecord8(meta) || missing.length > 0) return err(400, ERR_INVALID_PARAMS, `Missing required _meta field(s): ${missing.join(", ")}`);
+  const version = String(meta[META_PROTOCOL_VERSION]);
+  if (!supported.includes(version)) {
+    return err(400, ERR_UNSUPPORTED_VERSION, "Unsupported protocol version", { supported: [...supported], requested: version });
+  }
+  const headerVersion = headers["mcp-protocol-version"];
+  if (headerVersion === void 0) return err(400, ERR_HEADER_MISMATCH, "Header mismatch: MCP-Protocol-Version header is missing");
+  if (headerVersion !== version) {
+    return err(400, ERR_HEADER_MISMATCH, `Header mismatch: MCP-Protocol-Version ${headerVersion} does not match _meta ${version}`);
+  }
+  const headerMethod = headers["mcp-method"];
+  if (headerMethod === void 0) return err(400, ERR_HEADER_MISMATCH, "Header mismatch: Mcp-Method header is missing");
+  if (headerMethod !== method) {
+    return err(400, ERR_HEADER_MISMATCH, `Header mismatch: Mcp-Method ${headerMethod} does not match body ${method}`);
+  }
+  const source = NAME_HEADER_SOURCE.get(method);
+  if (source !== void 0) {
+    const expected = params[source];
+    if (typeof expected !== "string") return err(400, ERR_INVALID_PARAMS, `Missing required params.${source}`);
+    const rawName = headers["mcp-name"];
+    if (rawName === void 0) return err(400, ERR_HEADER_MISMATCH, "Header mismatch: Mcp-Name header is missing");
+    if (decodeHeaderValue(rawName) !== expected) {
+      return err(400, ERR_HEADER_MISMATCH, `Header mismatch: Mcp-Name does not match params.${source}`);
+    }
+  }
+  if (!allowed.has(method)) return err(404, ERR_METHOD_NOT_FOUND, `Method not found: ${method}`);
+  return null;
+}
+
+// src/mcp-modern/index.ts
+var DEFAULT_CACHE_POLICY = () => ({ ttlMs: 0, cacheScope: "private" });
+var JSON_HEADERS = { "content-type": "application/json" };
+function errorResponse(error, extraHeaders = {}) {
+  return {
+    status: error.status,
+    headers: { ...JSON_HEADERS, ...extraHeaders },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      id: error.id,
+      error: { code: error.code, message: error.message, ...error.data !== void 0 ? { data: error.data } : {} }
+    })
+  };
+}
+function okResponse(id, result) {
+  return { status: 200, headers: { ...JSON_HEADERS }, body: JSON.stringify({ jsonrpc: "2.0", id, result }) };
+}
+function decorate(method, result, serverInfo, hints) {
+  const meta = typeof result._meta === "object" && result._meta !== null && !Array.isArray(result._meta) ? result._meta : {};
+  const resultType = typeof result.resultType === "string" ? result.resultType : "complete";
+  const decorated = {
+    ...result,
+    resultType,
+    _meta: { ...meta, [META_SERVER_INFO]: meta[META_SERVER_INFO] ?? serverInfo }
+  };
+  if (resultType === "complete" && CACHE_HINT_METHODS.has(method)) {
+    decorated.ttlMs = typeof result.ttlMs === "number" ? result.ttlMs : hints.ttlMs;
+    decorated.cacheScope = typeof result.cacheScope === "string" ? result.cacheScope : hints.cacheScope;
+  }
+  return decorated;
+}
+function fromThrown(error, id) {
+  if (error instanceof BridgeError) {
+    const message = error.message.replace(/^(?:MCP error -?\d+: )+/, "");
+    const status = error.code === ERR_METHOD_NOT_FOUND ? 404 : 200;
+    return errorResponse({ status, code: error.code, message, id, ...error.data !== void 0 ? { data: error.data } : {} });
+  }
+  return errorResponse({ status: 500, code: ERR_INTERNAL, message: "Internal error", id });
+}
+async function answer(request3, bridge, supported, hints, signal) {
+  if (request3.method === "server/discover") {
+    const capabilities = { ...bridge.capabilities };
+    delete capabilities.logging;
+    return decorate(
+      "server/discover",
+      {
+        supportedVersions: [...supported],
+        capabilities,
+        ...bridge.instructions ? { instructions: bridge.instructions } : {}
+      },
+      bridge.serverInfo,
+      hints
+    );
+  }
+  return decorate(request3.method, await bridge.request(request3.method, forwardParams(request3.params), signal), bridge.serverInfo, hints);
+}
+async function handleModernRequest(input, deps2) {
+  const supported = deps2.supportedVersions ?? DEFAULT_SUPPORTED_VERSIONS;
+  const cachePolicy = deps2.cachePolicy ?? DEFAULT_CACHE_POLICY;
+  const headers = normalizeHeaders(input.headers);
+  if (input.method !== "POST") {
+    return errorResponse({ status: 405, code: ERR_INVALID_REQUEST, message: "Only POST is supported", id: null }, { allow: "POST" });
+  }
+  if (!acceptsJson(headers["accept"])) {
+    return errorResponse({ status: 406, code: ERR_INVALID_REQUEST, message: "Accept must allow application/json", id: null });
+  }
+  if (!isJsonContentType(headers["content-type"])) {
+    return errorResponse({ status: 415, code: ERR_INVALID_REQUEST, message: "Content-Type must be application/json", id: null });
+  }
+  const parsed = parseBody(input.body);
+  if (!parsed.ok) return errorResponse(parsed.error);
+  const request3 = parsed.request;
+  if (request3.id === void 0) return { status: 202, headers: {} };
+  const invalid = validateRequest(request3, headers, supported, ALLOWED_METHODS);
+  if (invalid) return errorResponse(invalid);
+  const id = request3.id;
+  let bridge;
+  try {
+    bridge = await openBridge(await deps2.createServer());
+    const result = await answer({ ...request3, id }, bridge, supported, cachePolicy(request3.method), deps2.signal);
+    if (deps2.signal?.aborted) return { status: 499, headers: {} };
+    const response = okResponse(id, result);
+    if ((request3.method === "server/discover" || request3.method === "tools/list") && deps2.onObserved) {
+      try {
+        deps2.onObserved(request3.method, { jsonrpc: "2.0", id, result });
+      } catch {
+      }
+    }
+    return response;
+  } catch (error) {
+    if (deps2.signal?.aborted) return { status: 499, headers: {} };
+    const response = fromThrown(error, id);
+    if ((request3.method === "server/discover" || request3.method === "tools/list") && deps2.onObserved && response.body) {
+      try {
+        deps2.onObserved(request3.method, JSON.parse(response.body));
+      } catch {
+      }
+    }
+    return response;
+  } finally {
+    await bridge?.close();
+  }
+}
 init_sessions();
 init_session_retirement();
 init_session_message();
@@ -35795,7 +36260,7 @@ function createSentinelStore(opts) {
   const persist = opts?.persist ?? opts?.filePath !== void 0;
   let persistTimer = null;
   let secretsPersistTimer = null;
-  const load = () => {
+  const load2 = () => {
     const out = /* @__PURE__ */ new Map();
     if (!persist) return out;
     let raw;
@@ -35819,7 +36284,7 @@ function createSentinelStore(opts) {
     }
     return out;
   };
-  const sentinels = load();
+  const sentinels = load2();
   const loadSecrets = () => {
     const out = /* @__PURE__ */ new Map();
     if (!persist) return out;
@@ -36039,6 +36504,15 @@ function createSentinelStore(opts) {
 function singleMatch(subject, types) {
   return [{ subject, ...types ? { types } : {} }];
 }
+var SentinelBackingExpiredError = class extends Error {
+  code = "backing_subscription_expired";
+  remoteId;
+  constructor(message, remoteId) {
+    super(message);
+    this.name = "SentinelBackingExpiredError";
+    if (remoteId !== void 0) this.remoteId = remoteId;
+  }
+};
 function deliveryPreferenceFor(provider, intervalMs) {
   if (provider.preferredDelivery) return provider.preferredDelivery(intervalMs);
   return provider.capabilities.poll ? { mode: "poll", intervalMs } : { mode: "push" };
@@ -36602,7 +37076,7 @@ function compactPrState(snapshot, extra) {
   const slim = snapshot.state !== "open" && extra.closedEmitted ? { fetchedAt: snapshot.fetchedAt, state: snapshot.state, reviews: [], checks: [] } : snapshot;
   return { snapshot: slim, ...extra };
 }
-function decorate(events, pr) {
+function decorate2(events, pr) {
   const title = pr.title.length > 80 ? `${pr.title.slice(0, 77)}...` : pr.title;
   return events.map((e) => ({
     ...e,
@@ -36666,7 +37140,7 @@ function diffRepoPr(prev, pr, repo) {
     closedEmitted = true;
   }
   return {
-    events: decorate(events, pr),
+    events: decorate2(events, pr),
     next: compactPrState(now, { draft: pr.draft, closedEmitted, ...ciReported ? { ciReported } : {} })
   };
 }
@@ -36698,7 +37172,7 @@ function diffRepo(cursor, prs, repo, fetchedAt) {
           })
         ];
         if (closed) fresh.push(closedEvent(pr.snapshot, { repo, number: pr.number, subject }, false));
-        events.push(...decorate(fresh, pr));
+        events.push(...decorate2(fresh, pr));
       }
       const settled = verdict === "success" || verdict === "failure" || verdict === "neutral";
       next[key] = compactPrState(pr.snapshot, {
@@ -37636,11 +38110,11 @@ function verifySignatureV2(secret, headers, body, nowMs, skewMs = SIGNATURE_V2_S
   if (a.length !== b.length || !timingSafeEqual(a, b)) return { ok: false, reason: "signature_mismatch" };
   return { ok: true, timestampSec };
 }
-var isRecord7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isRecord9 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function toSentinelEvent(raw, seq) {
-  if (!isRecord7(raw)) return null;
+  if (!isRecord9(raw)) return null;
   const { id, source, type, subject, time, data, summary, subjects, terminal, consumerref } = raw;
-  if (raw.specversion !== "1.0" || typeof id !== "string" || id === "" || typeof source !== "string" || typeof type !== "string" || type === "" || typeof subject !== "string" || subject === "" || typeof time !== "string" || !isRecord7(data) || typeof summary !== "string" || !Array.isArray(subjects) || !subjects.every((s) => typeof s === "string") || typeof terminal !== "boolean") {
+  if (raw.specversion !== "1.0" || typeof id !== "string" || id === "" || typeof source !== "string" || typeof type !== "string" || type === "" || typeof subject !== "string" || subject === "" || typeof time !== "string" || !isRecord9(data) || typeof summary !== "string" || !Array.isArray(subjects) || !subjects.every((s) => typeof s === "string") || typeof terminal !== "boolean") {
     return null;
   }
   const envSeq = typeof raw.seq === "number" ? raw.seq : seq;
@@ -37686,9 +38160,36 @@ function stateOf(handle) {
     mode: s.mode === "push" ? "push" : "poll",
     ...typeof s.consumerRef === "string" ? { consumerRef: s.consumerRef } : {},
     ...typeof s.hookKey === "string" ? { hookKey: s.hookKey } : {},
-    ...typeof s.callbackSecret === "string" ? { callbackSecret: s.callbackSecret } : {}
+    ...typeof s.callbackSecret === "string" ? { callbackSecret: s.callbackSecret } : {},
+    ...s.signature === "v2" ? { signature: "v2" } : {}
   };
 }
+function excerptOf(envelope) {
+  if (!isRecord9(envelope)) return void 0;
+  const cap = (v) => typeof v === "string" ? v.slice(0, 200) : void 0;
+  const out = {};
+  const id = cap(envelope.id);
+  const type = cap(envelope.type);
+  const subject = cap(envelope.subject);
+  const source = cap(envelope.source);
+  if (id !== void 0) out.id = id;
+  if (type !== void 0) out.type = type;
+  if (subject !== void 0) out.subject = subject;
+  if (source !== void 0) out.source = source;
+  return Object.keys(out).length > 0 ? out : void 0;
+}
+function whyNotEnvelope(envelope) {
+  if (envelope === void 0 || envelope === null) return "item has no envelope";
+  if (!isRecord9(envelope)) return "envelope is not a JSON object";
+  const missing = [];
+  if (envelope.specversion !== "1.0") missing.push("specversion");
+  for (const k of ["id", "type", "subject"]) if (typeof envelope[k] !== "string" || envelope[k] === "") missing.push(k);
+  for (const k of ["source", "time", "summary"]) if (typeof envelope[k] !== "string") missing.push(k);
+  if (!isRecord9(envelope.data)) missing.push("data");
+  if (!Array.isArray(envelope.subjects) || !envelope.subjects.every((x) => typeof x === "string")) missing.push("subjects");
+  if (typeof envelope.terminal !== "boolean") missing.push("terminal");
+  return `envelope failed validation (invalid or missing: ${missing.join(", ") || "unknown"})`;
+}
 var SUBJECT_SCHEME_RE = /^([A-Za-z][A-Za-z0-9_-]*):/;
 function defaultTypesFor(subject) {
   return subject.startsWith("github:") ? [...GITHUB_DEFAULT_PR_TYPES] : ["*"];
@@ -37746,7 +38247,7 @@ function agentpushSentinelProvider(opts = {}) {
       json3 = void 0;
     }
     if (!res.ok) {
-      const detail = isRecord7(json3) && typeof json3.error === "string" ? json3.error : text13.slice(0, 200);
+      const detail = isRecord9(json3) && typeof json3.error === "string" ? json3.error : text13.slice(0, 200);
       throw new AgentpushHttpError(res.status, `agentpush ${method} ${path} \u2192 HTTP ${res.status}${detail ? `: ${detail}` : ""}`);
     }
     return json3;
@@ -37779,6 +38280,7 @@ function agentpushSentinelProvider(opts = {}) {
     // Credentials come from `setup_sentinel_provider` OR an imported alias, so
     // "set up" is decided by `readiness()`, not the kit's ledger/creds check.
     requiresSetup: false,
+    exclusiveRemote: true,
     capabilities: {
       subjects: ["*"],
       push: true,
@@ -37832,7 +38334,7 @@ function agentpushSentinelProvider(opts = {}) {
           ...push ? { callback_url: callbackUrl2(delivery.callbackUrl, hookKey), callback_secret: callbackSecret } : {}
         }
       });
-      const id = isRecord7(json3) && isRecord7(json3.subscription) ? json3.subscription.id : void 0;
+      const id = isRecord9(json3) && isRecord9(json3.subscription) ? json3.subscription.id : void 0;
       if (typeof id !== "string" || id === "") throw new Error("agentpush: create returned no subscription id");
       return {
         provider: AGENTPUSH_SLUG,
@@ -37841,6 +38343,7 @@ function agentpushSentinelProvider(opts = {}) {
         state: {
           mode: push ? "push" : "poll",
           consumerRef,
+          signature: "v2",
           ...push ? { hookKey, callbackSecret } : {}
         }
       };
@@ -37859,7 +38362,7 @@ function agentpushSentinelProvider(opts = {}) {
       let sub;
       try {
         const json3 = await api("GET", subPath(handle));
-        sub = isRecord7(json3) && isRecord7(json3.subscription) ? json3.subscription : void 0;
+        sub = isRecord9(json3) && isRecord9(json3.subscription) ? json3.subscription : void 0;
       } catch (err) {
         if (isHttp(err, 404)) {
           throw new Error(`agentpush subscription ${handle.remoteId} no longer exists \u2014 re-create the sentinel`);
@@ -37887,10 +38390,34 @@ function agentpushSentinelProvider(opts = {}) {
         if (!isHttp(err, 404)) throw err;
       }
     },
+    /**
+     * Extend the remote subscription's lifetime. `PATCH` accepts `until`
+     * without rejecting an already-expired row, so the returned `status` is
+     * checked: anything but `active` (or a 404) means the backing subscription
+     * is gone and must be recreated — never silently re-provisioned here.
+     */
+    async renew(handle, until) {
+      if (!handle.remoteId) throw new SentinelBackingExpiredError("agentpush: handle has no subscription id");
+      let json3;
+      try {
+        json3 = await api("PATCH", subPath(handle), { body: { until } });
+      } catch (err) {
+        if (isHttp(err, 404)) {
+          throw new SentinelBackingExpiredError(`the agentpush subscription ${handle.remoteId} was deleted`, handle.remoteId);
+        }
+        throw err;
+      }
+      const sub = isRecord9(json3) && isRecord9(json3.subscription) ? json3.subscription : void 0;
+      const status = sub && typeof sub.status === "string" ? sub.status : void 0;
+      if (status === "expired" || status === "deleted") {
+        throw new SentinelBackingExpiredError(`the agentpush subscription ${handle.remoteId} is ${status}`, handle.remoteId);
+      }
+      return { ...handle };
+    },
     async status(handle) {
       try {
         const json3 = await api("GET", subPath(handle));
-        const sub = isRecord7(json3) && isRecord7(json3.subscription) ? json3.subscription : void 0;
+        const sub = isRecord9(json3) && isRecord9(json3.subscription) ? json3.subscription : void 0;
         const status = sub && typeof sub.status === "string" ? sub.status : "unknown";
         if (status === "active") return { ok: true };
         return { ok: false, detail: `the agentpush subscription is ${status}` };
@@ -37902,18 +38429,35 @@ function agentpushSentinelProvider(opts = {}) {
       const after = handle.cursor ?? "0";
       if (stateOf(handle).mode === "push") return { events: [], cursor: after };
       const json3 = await api("GET", `${subPath(handle)}/events`, { query: { after, limit: Math.max(1, Math.min(limit, 1e3)) } });
-      const items = isRecord7(json3) && Array.isArray(json3.items) ? json3.items : [];
+      const items = isRecord9(json3) && Array.isArray(json3.items) ? json3.items : [];
       const events = [];
+      const malformed = [];
       let cursor = Number(after);
       if (!Number.isFinite(cursor)) cursor = 0;
       for (const item of items) {
-        if (!isRecord7(item)) continue;
-        const seq = typeof item.seq === "number" ? item.seq : void 0;
+        const seq = isRecord9(item) && typeof item.seq === "number" ? item.seq : void 0;
         if (seq !== void 0 && seq > cursor) cursor = seq;
-        const event = toSentinelEvent(item.envelope, seq);
-        if (event) events.push(event);
+        const envelope = isRecord9(item) ? item.envelope : void 0;
+        const event = toSentinelEvent(envelope, seq);
+        if (event) {
+          events.push(event);
+          continue;
+        }
+        let serialized = "";
+        try {
+          serialized = JSON.stringify(item) ?? "";
+        } catch {
+        }
+        const excerpt = excerptOf(envelope);
+        malformed.push({
+          ...seq !== void 0 ? { seq } : {},
+          ...isRecord9(item) && typeof item.delivery_id === "string" ? { remoteDeliveryId: item.delivery_id } : {},
+          error: isRecord9(item) ? whyNotEnvelope(envelope) : "poll item is not a JSON object",
+          ...excerpt ? { excerpt } : {},
+          ...serialized ? { digest: createHash("sha256").update(serialized).digest("hex"), bytes: Buffer.byteLength(serialized) } : {}
+        });
       }
-      return { events, cursor: String(cursor) };
+      return { events, cursor: String(cursor), ...malformed.length > 0 ? { malformed } : {} };
     },
     /** Called by the runtime after a polled batch is delivered. Nothing new
      *  (cursor unchanged) is a no-op — no request on an empty tick. */
@@ -37930,6 +38474,7 @@ function agentpushSentinelProvider(opts = {}) {
       const signature = headerValue3(req.headers, "x-agentpush-signature");
       if (!signature || signature.trim() === "") return { ok: false, reason: "missing_signature" };
       if (signature.trim().startsWith("sha256=")) {
+        if (st.signature === "v2") return { ok: false, reason: "legacy_signature_rejected" };
         const legacy = verifyInboundSignature("agentpush", {
           rawBody: req.rawBody,
           headers: req.headers,
@@ -38360,6 +38905,13 @@ async function createSentinelWatch(deps2, input) {
 async function cancelSentinelWatch(deps2, id) {
   const sentinel = deps2.store.get(id);
   if (!sentinel) return false;
+  if (deps2.tombstones) {
+    try {
+      await deps2.tombstones.cancel(sentinel.handle, () => deps2.store.remove(id));
+      return true;
+    } catch {
+    }
+  }
   const provider = await deps2.resolveProvider(sentinel.provider);
   if (provider) {
     try {
@@ -38402,7 +38954,7 @@ var fail2 = (code, message) => ({
 var urgencyField2 = z.enum(MESSAGE_URGENCIES);
 var untilField = z.enum(["subject_terminal", "never"]);
 function registerSentinelTools(server, opts) {
-  const { store, runtime, resolveProvider, isSessionAlive, callerSessionId, activeIntervalMs } = opts;
+  const { store, runtime, resolveProvider, isSessionAlive, callerSessionId, activeIntervalMs, tombstones } = opts;
   server.tool(
     "sentinel_watch",
     "Watch a subject \u2014 a GitHub PR/repo (default) or ANOTHER SESSION's own lifecycle \u2014 and deliver matching events as a `system`/`notice` message into a session's AIP-46 inbox. Provide either `prUrl` (sugar: `https://github.com/o/r/pull/N` -> subject `github:o/r#N`, the default PR type set, and `until: subject_terminal`) or a raw `subject`: a GitHub one (`github:o/r#N`, `github:o/r`), or `session:<id>` to watch another session \u2014 woken on its turn-end, awaiting-input, or exit, even if it never calls `message_parent`, with the watch self-expiring once it exits (`until` defaults to `subject_terminal` for this scheme too). Prefer this over `session_follow` for a single, known target that should auto-expire on exit; prefer `session_follow` for a broad selector (`all`/`cwdPrefix`) with coalesced digests across many sessions. `sessionId` (the DELIVERY target) defaults to the calling session \u2014 distinct from the `<id>` inside a `session:<id>` subject (the WATCHED session). `provider` picks the backend: `local-gh` (poll every ~15-60s over the host's authenticated `gh` CLI, zero infra), `webhook` (near-real-time push via a GitHub repo hook; needs a public daemon URL \u2014 a named tunnel or AGENTPROTO_PUBLIC_URL \u2014 and a `gh` token with admin:repo_hook), `agentpush` (hosted, durable subscription: events queue server-side across daemon downtime; needs an agentpush API key; one subject per sentinel) or `session` (in-process, zero infra, no credentials \u2014 the only backend that understands a `session:<id>` subject, and picked automatically for one); see `list_sentinel_adapters` for readiness. Omitted for a GitHub subject, it defaults to `agentpush` when set up, else `webhook` when a stable public URL exists and webhook is ready, else `local-gh`.",
@@ -38434,7 +38986,7 @@ function registerSentinelTools(server, opts) {
     "Stop a sentinel: best-effort cancels the provider-side watch, then removes the record. Idempotent-ish: an unknown id is reported, not thrown.",
     { id: z.string().describe("Sentinel id (sen_...).") },
     async ({ id }) => {
-      const removed = await cancelSentinelWatch({ store, resolveProvider }, id);
+      const removed = await cancelSentinelWatch({ store, resolveProvider, ...tombstones ? { tombstones } : {} }, id);
       if (!removed) return fail2("not_found", `sentinel_unwatch: no sentinel "${id}"`);
       return ok2({ removed: true, id });
     }
@@ -38495,7 +39047,7 @@ function createSessionFollowStore(opts) {
   const debounceMs = opts?.debounceMs ?? PERSIST_DEBOUNCE_MS4;
   const persist = opts?.persist ?? true;
   let persistTimer = null;
-  const load = () => {
+  const load2 = () => {
     const out = /* @__PURE__ */ new Map();
     if (!persist) return out;
     let raw;
@@ -38521,7 +39073,7 @@ function createSessionFollowStore(opts) {
     }
     return out;
   };
-  const follows = load();
+  const follows = load2();
   const snapshot = () => {
     const out = {};
     for (const [id, follow] of follows.entries()) out[id] = follow;
@@ -38803,7 +39355,7 @@ function createHostRegistry(deps2) {
   let probesRunning = 0;
   const probeWaiters = [];
   async function withProbeSlot(fn) {
-    if (probesRunning >= probeConcurrency) await new Promise((resolve45) => probeWaiters.push(resolve45));
+    if (probesRunning >= probeConcurrency) await new Promise((resolve47) => probeWaiters.push(resolve47));
     probesRunning++;
     try {
       return await fn();
@@ -39342,7 +39894,7 @@ function createHostRegistry(deps2) {
   };
 }
 async function awaitTunnelHello(client, sink, record2, closeReason) {
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve47, reject) => {
     if (!sink.isOpen) {
       reject(
         new Error(
@@ -39361,7 +39913,7 @@ async function awaitTunnelHello(client, sink, record2, closeReason) {
     client.ready().then(
       () => {
         offClose();
-        resolve45();
+        resolve47();
       },
       (err) => {
         offClose();
@@ -39406,13 +39958,13 @@ function isLegacyJoinedShape(rec) {
   return rec.addedVia === void 0 && rec.name === rec.fingerprint && rec.provider === void 0 && rec.sandboxId === void 0 && rec.labels === void 0 && rec.lastSeen === rec.createdAt;
 }
 function withTimeout(p, ms, what) {
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve47, reject) => {
     const timer = setTimeout(() => reject(new Error(`${what} timed out after ${ms}ms`)), ms);
     if (typeof timer.unref === "function") timer.unref();
     p.then(
       (v) => {
         clearTimeout(timer);
-        resolve45(v);
+        resolve47(v);
       },
       (e) => {
         clearTimeout(timer);
@@ -39641,7 +40193,7 @@ function isValidPrompt(prompt) {
   return prompt !== null && typeof prompt === "object";
 }
 function sleep(ms) {
-  return new Promise((resolve45) => setTimeout(resolve45, ms));
+  return new Promise((resolve47) => setTimeout(resolve47, ms));
 }
 function httpErrorMessage(body) {
   const raw = Buffer.from(body).toString("utf8");
@@ -40374,6 +40926,8 @@ init_transcript_export();
 init_spawn_defaults();
 init_app_boundary();
 var WORKFLOW_PROMPT_SOURCE = "workflow:agent-step";
+var TRANSPORT_END_REASONS = /* @__PURE__ */ new Set([void 0, "crashed", "daemon-restart"]);
+var TRANSPORT_CLOSED_RE = /\bACP connection closed\b/i;
 function withReviewWorktreeZones(boundary, cwd) {
   const zones = reviewWorktreeReadZones(cwd);
   if (!zones) return boundary;
@@ -40681,7 +41235,35 @@ var SessionsRegistryAgentHost = class {
    * synchronously, before the event bus can fire the rejection asynchronously.
    */
   async sendPromptAndWait(sessionId, prompt) {
-    await Promise.all([this.waitTurnEnd(sessionId), this.registry.sendPrompt(sessionId, prompt, { source: WORKFLOW_PROMPT_SOURCE })]);
+    await Promise.all([
+      this.waitTurnEnd(sessionId),
+      this.registry.sendPrompt(sessionId, prompt, { source: WORKFLOW_PROMPT_SOURCE }).catch((err) => {
+        throw this.classifyPromptFailure(sessionId, err);
+      })
+    ]);
+  }
+  /** True when `sessionId` dying (with `reason`) is the session's transport
+   *  failing under the step — not this host's own cancel/release, and not a
+   *  deliberate end (see {@link TRANSPORT_END_REASONS}). */
+  diedUnderStep(sessionId, reason) {
+    if (this.opts?.signal?.aborted) return false;
+    if (!this.unreleased.has(sessionId)) return false;
+    return TRANSPORT_END_REASONS.has(reason);
+  }
+  /** The error a wait rejects with when the session ends mid-turn. */
+  sessionEndedError(sessionId, status, reason) {
+    const message = `session ${sessionId} ended with status '${status}'${reason ? ` (${reason})` : ""}`;
+    return this.diedUnderStep(sessionId, reason) ? new AgentSessionLostError(sessionId, message) : new Error(message);
+  }
+  /** `registry.sendPrompt` rejected: a closed ACP connection or an already-
+   *  dead session is a transport loss ({@link AgentSessionLostError});
+   *  anything else propagates unchanged. */
+  classifyPromptFailure(sessionId, err) {
+    if (!(err instanceof Error)) return err;
+    const desc = this.registry.get(sessionId);
+    const dead = err instanceof SessionNotAliveError || TRANSPORT_CLOSED_RE.test(err.message) || desc?.status === "killed" || desc?.status === "error";
+    if (!dead || !this.diedUnderStep(sessionId, desc?.endedReason)) return err;
+    return new AgentSessionLostError(sessionId, `session ${sessionId} lost before its turn ended \u2014 ${err.message}`, err);
   }
   resolveByLabel(stepId) {
     return this.sessionsByLabel.get(stepId);
@@ -40769,15 +41351,15 @@ var SessionsRegistryAgentHost = class {
   }
   // ── Internal helpers ──────────────────────────────────────────────────
   waitTurnEnd(sessionId) {
-    return new Promise((resolve45, reject) => {
+    return new Promise((resolve47, reject) => {
       const unsubs = [];
       const done = () => {
         for (const u of unsubs) u();
-        resolve45();
+        resolve47();
       };
       const fail4 = (reason) => {
         for (const u of unsubs) u();
-        reject(new Error(reason));
+        reject(typeof reason === "string" ? new Error(reason) : reason);
       };
       unsubs.push(
         this.sessionEvents.on("session:turn-end", (ev) => {
@@ -40804,7 +41386,7 @@ var SessionsRegistryAgentHost = class {
         this.sessionEvents.on("session:exited", (ev) => {
           if (ev.sessionId !== sessionId) return;
           if (ev.status === "killed" || ev.status === "error") {
-            fail4(`session ${sessionId} ended with status '${ev.status}'`);
+            fail4(this.sessionEndedError(sessionId, ev.status, ev.reason));
           } else {
             done();
           }
@@ -40814,7 +41396,7 @@ var SessionsRegistryAgentHost = class {
       if (desc?.status === "exited" || desc?.awaitingInput === true) {
         done();
       } else if (desc?.status === "killed" || desc?.status === "error") {
-        fail4(`session ${sessionId} ended with status '${desc.status}'`);
+        fail4(this.sessionEndedError(sessionId, desc.status, desc.endedReason));
       }
     });
   }
@@ -40824,11 +41406,11 @@ function sanitize(cacheKey) {
   const cleaned = cacheKey.replace(/[^a-zA-Z0-9._-]/g, "_");
   return cleaned.length > 0 ? cleaned : "default";
 }
-function isRecord8(v) {
+function isRecord10(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function isEntry2(v) {
-  return isRecord8(v) && typeof v.resolvedInputHash === "string" && "output" in v;
+  return isRecord10(v) && typeof v.resolvedInputHash === "string" && "output" in v;
 }
 function createFileStepCache(cacheKey, opts) {
   const dir = opts?.dir ?? DEFAULT_CACHE_DIR();
@@ -40841,7 +41423,7 @@ function createFileStepCache(cacheKey, opts) {
     } catch {
       return {};
     }
-    if (!isRecord8(parsed)) return {};
+    if (!isRecord10(parsed)) return {};
     const out = {};
     for (const [k, v] of Object.entries(parsed)) if (isEntry2(v)) out[k] = v;
     return out;
@@ -41137,6 +41719,7 @@ function findStepDef(defs, stepId) {
 var DEFAULT_PERSIST_PATH2 = () => join(homedir(), ".agentproto", "workflow-runs.json");
 var DEFAULT_LEASE_TTL_MS = 6e4;
 var DEFAULT_HEARTBEAT_INTERVAL_MS = 15e3;
+var DEFAULT_PERSIST_MIN_INTERVAL_MS = 2e3;
 function cancelledStageStatus(stage) {
   return stage.steps.some((s) => s.status === "failed") ? "failed" : "cancelled";
 }
@@ -41228,9 +41811,7 @@ function saveRuns(runs, persistPath) {
   try {
     mkdirSync(dirname(persistPath), { recursive: true });
     const payload = JSON.stringify(
-      Array.from(runs.values()).map((s) => s.run),
-      null,
-      2
+      Array.from(runs.values()).map((s) => s.run)
     ) + "\n";
     const tmp = `${persistPath}.tmp.${process.pid}`;
     writeFileSync(tmp, payload, "utf8");
@@ -41306,7 +41887,7 @@ function createOnEscalate(state, persist) {
     state.run.status = "awaiting-input";
     persist();
     try {
-      return await new Promise((resolve45, reject) => {
+      return await new Promise((resolve47, reject) => {
         const timeoutMs = policy.timeoutMs ?? 3e5;
         const timer = setTimeout(() => {
           state.pendingResolve = void 0;
@@ -41318,7 +41899,7 @@ function createOnEscalate(state, persist) {
           resolver: (response) => {
             clearTimeout(timer);
             state.pendingResolve = void 0;
-            resolve45(response);
+            resolve47(response);
           }
         };
       });
@@ -41454,7 +42035,7 @@ async function executeRunWorkflow(state, runtimeWf, agents, signal, sessionEvent
       // `resolveApproval` (wired to `workflow_escalation_resolve`'s approval
       // form); the decision lands on the app ledger (`kind: "approval"`,
       // `by: "human"`) per the trame rule.
-      approve: (req) => new Promise((resolve45) => {
+      approve: (req) => new Promise((resolve47) => {
         const approvalId = `wfappr_${randomUUID()}`;
         const requestedAt = (/* @__PURE__ */ new Date()).toISOString();
         state.run.status = "awaiting-approval";
@@ -41511,7 +42092,7 @@ async function executeRunWorkflow(state, runtimeWf, agents, signal, sessionEvent
               runId: state.run.runId
             }
           });
-          resolve45(decision);
+          resolve47(decision);
         };
         if (req.timeoutMs !== void 0) {
           timer = setTimeout(() => {
@@ -41528,7 +42109,7 @@ async function executeRunWorkflow(state, runtimeWf, agents, signal, sessionEvent
       // resumes through `resumeSuspend` (workflow_escalation_resolve's
       // suspend form); after a daemon restart the run stays suspended and
       // the pending entry is re-registered below.
-      resume: (req) => new Promise((resolve45) => {
+      resume: (req) => new Promise((resolve47) => {
         const since = (/* @__PURE__ */ new Date()).toISOString();
         state.run.status = "awaiting-input";
         state.run.awaitingSuspend = {
@@ -41566,7 +42147,7 @@ async function executeRunWorkflow(state, runtimeWf, agents, signal, sessionEvent
           });
           eventLog?.append({ stepId: req.stepId, type: "step.resumed", data: {} });
           eventLog?.append({ type: "run.resumed", data: { stepId: req.stepId } });
-          resolve45(payload);
+          resolve47(payload);
         };
         signal.addEventListener("abort", onAbort, { once: true });
         state.pendingSuspend = { stepId: req.stepId, resolve: finish };
@@ -41582,7 +42163,7 @@ async function executeRunWorkflow(state, runtimeWf, agents, signal, sessionEvent
       // read of the turn's text). On resume, `execAgentStep` sends the
       // validated payload back to the SAME session as its next prompt and
       // re-applies the outcome rule — this hook only parks and resolves.
-      onInputRequired: (req) => new Promise((resolve45) => {
+      onInputRequired: (req) => new Promise((resolve47) => {
         const since = (/* @__PURE__ */ new Date()).toISOString();
         const suspend = {
           reason: "input-required",
@@ -41635,7 +42216,7 @@ async function executeRunWorkflow(state, runtimeWf, agents, signal, sessionEvent
           });
           eventLog?.append({ stepId: req.stepId, type: "step.resumed", data: {} });
           eventLog?.append({ type: "run.resumed", data: { stepId: req.stepId } });
-          resolve45(payload);
+          resolve47(payload);
         };
         signal.addEventListener("abort", onAbort, { once: true });
         state.pendingSuspend = { stepId: req.stepId, resolve: finish };
@@ -41671,6 +42252,19 @@ async function executeRunWorkflow(state, runtimeWf, agents, signal, sessionEvent
           }
         }
       },
+      onAgentRetry: (ev) => {
+        eventLog?.append({
+          stepId: ev.stepId,
+          type: "step.retrying",
+          data: {
+            attempt: ev.attempt,
+            maxAttempts: ev.maxAttempts,
+            error: ev.error,
+            delayMs: ev.delayMs,
+            ...ev.sessionId !== void 0 ? { sessionId: ev.sessionId } : {}
+          }
+        });
+      },
       onStepStart: (stepId, info) => {
         const cached = info?.cached === true;
         if (nonLeafStepIds.has(stepId)) return;
@@ -41974,8 +42568,44 @@ function createWorkflowRunner(opts) {
     });
   };
   const runs = shouldPersist ? loadRuns(persistPath, runsRoot) : /* @__PURE__ */ new Map();
+  const persistMinIntervalMs = opts.persistMinIntervalMs ?? DEFAULT_PERSIST_MIN_INTERVAL_MS;
+  let lastFlushAt = 0;
+  let lastStatusSig = "";
+  let trailingFlush;
+  let dirty = false;
+  const flushRuns = () => {
+    if (trailingFlush) {
+      clearTimeout(trailingFlush);
+      trailingFlush = void 0;
+    }
+    dirty = false;
+    lastFlushAt = Date.now();
+    saveRuns(runs, persistPath);
+  };
+  const statusSig = () => {
+    let sig = "";
+    for (const st of runs.values()) sig += `${st.run.runId}:${st.run.status}|`;
+    return sig;
+  };
+  if (shouldPersist && persistMinIntervalMs > 0) {
+    process.once("exit", () => {
+      if (dirty) flushRuns();
+    });
+  }
   const persist = () => {
-    if (shouldPersist) saveRuns(runs, persistPath);
+    if (!shouldPersist) return;
+    if (persistMinIntervalMs <= 0) return flushRuns();
+    const sig = statusSig();
+    const wait = lastFlushAt + persistMinIntervalMs - Date.now();
+    if (sig !== lastStatusSig || wait <= 0) {
+      lastStatusSig = sig;
+      return flushRuns();
+    }
+    dirty = true;
+    if (!trailingFlush) {
+      trailingFlush = setTimeout(flushRuns, wait);
+      trailingFlush.unref?.();
+    }
   };
   const newEventLog = (runId) => shouldPersist ? createRunEventLog(runId, runsRoot) : void 0;
   const workspaceRunsRoot = () => shouldPersist ? runsRoot : void 0;
@@ -43628,14 +44258,14 @@ function createSupervisorTaskGateRunner(opts) {
   const { supervisor, registry, workspace } = opts;
   const exec = opts.runCommand ?? runCommand;
   const settleTimeoutMs = opts.settleTimeoutMs ?? DEFAULT_VERIFY_SETTLE_TIMEOUT_MS;
-  const waitForSettle = (policyId) => new Promise((resolve45) => {
+  const waitForSettle = (policyId) => new Promise((resolve47) => {
     let settled = false;
     const finish = (outcome) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
       unsub();
-      resolve45(outcome);
+      resolve47(outcome);
     };
     const read = () => {
       const state = supervisor.getStatus(policyId);
@@ -44982,7 +45612,7 @@ async function monitorSessionWait(opts) {
       };
     }
   }
-  return new Promise((resolve45) => {
+  return new Promise((resolve47) => {
     const unsubs = [];
     let settled = false;
     const watcherLabel = callerScope?.ownerSessionId ? registry.get(callerScope.ownerSessionId)?.label ?? registry.get(callerScope.ownerSessionId)?.title : void 0;
@@ -45022,7 +45652,7 @@ async function monitorSessionWait(opts) {
           ts: (/* @__PURE__ */ new Date()).toISOString()
         });
       }
-      resolve45(result);
+      resolve47(result);
     };
     const relevantTypes = targetEvent === "any" ? ["session:turn-end", "session:awaiting-input", "session:exited"] : targetEvent === "turn-end" ? ["session:turn-end", "session:awaiting-input"] : targetEvent === "awaiting-input" ? ["session:awaiting-input"] : ["session:exited"];
     const idSet = new Set(resolvedIds);
@@ -45063,13 +45693,13 @@ async function monitorPolicyWait(opts) {
   if (isSettledStatus(initial.status)) {
     return { timedOut: false, state: initial };
   }
-  return new Promise((resolve45) => {
+  return new Promise((resolve47) => {
     let settled = false;
     const timer = setTimeout(() => {
       if (settled) return;
       settled = true;
       unsub();
-      resolve45({ timedOut: true });
+      resolve47({ timedOut: true });
     }, timeoutMs);
     const unsub = supervisor.onSettle((id) => {
       if (id !== policyId) return;
@@ -45079,7 +45709,7 @@ async function monitorPolicyWait(opts) {
       settled = true;
       clearTimeout(timer);
       unsub();
-      resolve45({ timedOut: false, state });
+      resolve47({ timedOut: false, state });
     });
   });
 }
@@ -46994,7 +47624,7 @@ async function waitForSessionTerminal(registry, sessionId) {
   for (let attempt = 0; attempt < MAX_SEQUENTIAL_POLLS; attempt++) {
     const status = registry.get(sessionId)?.status;
     if (isSessionTerminal(status)) return;
-    await new Promise((resolve45) => setTimeout(resolve45, SEQUENTIAL_POLL_INTERVAL_MS));
+    await new Promise((resolve47) => setTimeout(resolve47, SEQUENTIAL_POLL_INTERVAL_MS));
   }
 }
 var MODEL_ROUTED_ADAPTER = "claude-code";
@@ -47160,7 +47790,7 @@ function buildAppInstallPreview(args) {
     runsBuildCommand: !isAgentapp && args.allowBuild === true
   };
 }
-async function dispatchAllowlistedAppTool(declaredAllowlist, input, deps2) {
+async function dispatchAllowlistedAppTool(declaredAllowlist, input, deps2, appDir) {
   const effectiveAllowlist = [...declaredAllowlist, ...APP_UI_DISCOVERY_TOOLS];
   if (!effectiveAllowlist.includes(input.tool)) {
     return errorResult2(
@@ -47168,8 +47798,14 @@ async function dispatchAllowlistedAppTool(declaredAllowlist, input, deps2) {
     );
   }
   const args = input.args ?? {};
-  if (input.tool === "app_install" && appInstallConfirmationClass(args)?.confirmed === false) {
-    return textResult2(buildAppInstallPreview(args));
+  let dispatchArgs = args;
+  if (input.tool === "app_install") {
+    const cls = appInstallConfirmationClass(args);
+    if (cls?.confirmed === false) return textResult2(buildAppInstallPreview(args));
+    if (cls?.confirmed === true) {
+      const { confirm: _confirmNonce, ...rest } = args;
+      dispatchArgs = rest;
+    }
   }
   try {
     if (input.tool.startsWith("imported:")) {
@@ -47181,11 +47817,19 @@ async function dispatchAllowlistedAppTool(declaredAllowlist, input, deps2) {
           `app_tool_call: malformed imported tool id "${input.tool}" \u2014 expected "imported:<alias>/<toolName>".`
         );
       }
-      const result2 = await deps2.callImportedTool(rest.slice(0, slash), rest.slice(slash + 1), args);
+      const result2 = await deps2.callImportedTool(rest.slice(0, slash), rest.slice(slash + 1), dispatchArgs);
       return textResult2(result2);
     }
+    if (appDir !== void 0) {
+      const bundled = await loadAppBundledTools(appDir);
+      const bundledTool = bundled.tools.find((t) => t.id === input.tool);
+      if (bundledTool) {
+        const output = await runTool({ tool: bundledTool, candidates: bundled.drivers, input: args });
+        return textResult2(output);
+      }
+    }
     if (!deps2.dispatchTool) return notEnabled("app_tool_call");
-    const result = await deps2.dispatchTool(input.tool, args);
+    const result = await deps2.dispatchTool(input.tool, dispatchArgs);
     return textResult2(result);
   } catch (err) {
     return errorResult2(`app_tool_call: ${err instanceof Error ? err.message : String(err)}`);
@@ -47196,7 +47840,7 @@ async function performAppToolCall(appRegistry, input, deps2) {
   if (!installed || !installed.ui) {
     return errorResult2(`app_tool_call: app "${input.appId}" is not installed or has no UI.`);
   }
-  return dispatchAllowlistedAppTool(installed.ui.tools ?? [], input, deps2);
+  return dispatchAllowlistedAppTool(installed.ui.tools ?? [], input, deps2, installed.dir);
 }
 async function performBuiltinPanelToolCall(tools, input, deps2) {
   if (tools === void 0) {
@@ -47323,7 +47967,7 @@ async function performAppCall(appRegistry, input, deps2) {
         error: `app_call: workflow "${input.workflow}" on "${input.appId}" did not finish within ${timeoutMs}ms (run ${run.runId} still ${status?.status ?? "unknown"}).`
       };
     }
-    await new Promise((resolve45) => setTimeout(resolve45, APP_CALL_POLL_INTERVAL_MS));
+    await new Promise((resolve47) => setTimeout(resolve47, APP_CALL_POLL_INTERVAL_MS));
   }
 }
 function refIdOf(ref) {
@@ -48709,12 +49353,12 @@ async function readBody2(req) {
   }
   return { raw: Buffer.concat(chunks).toString("utf8") };
 }
-var isRecord9 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isRecord11 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function parseParts(raw) {
   if (!Array.isArray(raw)) throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "message.parts must be an array");
   const parts = [];
   for (const p of raw) {
-    if (!isRecord9(p)) throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "each message part must be an object");
+    if (!isRecord11(p)) throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "each message part must be an object");
     if ("text" in p) {
       if (typeof p.text !== "string") throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "part.text must be a string");
       parts.push({ text: p.text });
@@ -48747,13 +49391,13 @@ async function handleA2aTaskRequest(req, res, path, deps2) {
     send(res, 200, { jsonrpc: "2.0", id: null, error: { code: JSON_RPC_ERROR.parse, message: "parse error: body is not valid JSON" } });
     return true;
   }
-  if (!isRecord9(rpc) || rpc.jsonrpc !== "2.0" || typeof rpc.method !== "string") {
+  if (!isRecord11(rpc) || rpc.jsonrpc !== "2.0" || typeof rpc.method !== "string") {
     send(res, 200, { jsonrpc: "2.0", id: null, error: { code: JSON_RPC_ERROR.invalidRequest, message: 'invalid request: expected a JSON-RPC 2.0 object with a string "method" (batches are not supported)' } });
     return true;
   }
   const id = typeof rpc.id === "string" || typeof rpc.id === "number" ? rpc.id : null;
   const method = rpc.method;
-  const params = isRecord9(rpc.params) ? rpc.params : {};
+  const params = isRecord11(rpc.params) ? rpc.params : {};
   const requested = negotiateVersion(
     typeof req.headers["a2a-version"] === "string" ? req.headers["a2a-version"] : void 0,
     new URL(req.url ?? "/", "http://localhost").searchParams.get("version")
@@ -48811,14 +49455,14 @@ async function handleA2aTaskRequest(req, res, path, deps2) {
           throw new RpcFailure(JSON_RPC_ERROR.unsupportedOperation, `method "SendMessage" is not allowed for app "${appId}": its manifest does not declare accepts.tasks: true`);
         }
         const rawMessage = params.message;
-        if (!isRecord9(rawMessage) || rawMessage.role !== "ROLE_USER") {
+        if (!isRecord11(rawMessage) || rawMessage.role !== "ROLE_USER") {
           throw new RpcFailure(JSON_RPC_ERROR.invalidParams, 'params.message must be an object with role "ROLE_USER"');
         }
         const parts = parseParts(rawMessage.parts);
         const { skill, prompt } = extractSkillRequest(
-          { parts, ...isRecord9(rawMessage.metadata) ? { metadata: rawMessage.metadata } : {} },
+          { parts, ...isRecord11(rawMessage.metadata) ? { metadata: rawMessage.metadata } : {} },
           appId,
-          isRecord9(params.metadata) ? params.metadata : void 0
+          isRecord11(params.metadata) ? params.metadata : void 0
         );
         if (!skill) {
           throw new RpcFailure(JSON_RPC_ERROR.invalidParams, 'no skill requested: set message.metadata.skill or start the first text part with "skill:<id>"');
@@ -49828,6 +50472,7 @@ async function startHttpServer(opts) {
     const auth = readAuth();
     if (auth.mode !== "bearer") return true;
     if (path === "/health") return true;
+    if (opts.eventsMcp && path.startsWith("/mcp/events/")) return true;
     if (/^\/inbound\/[^/]+$/.test(path)) return true;
     if (isAppUiShellRequest(method, path)) return true;
     const header = req.headers.authorization;
@@ -50094,6 +50739,47 @@ async function startHttpServer(opts) {
     const server2 = await opts.orchestratorMcpServerFactory(scope);
     await serveMcp(req, res, server2);
   }
+  const EVENTS_BODY_CAP = 1024 * 1024;
+  async function handleEventsMcp(req, res, presented) {
+    const cfg = opts.eventsMcp;
+    const send2 = (status, headers, body) => {
+      res.writeHead(status, { "cache-control": "no-store", ...headers });
+      res.end(body);
+    };
+    if (!cfg) return send2(404, { "content-type": "application/json" }, JSON.stringify({ error: "not_found" }));
+    const want = Buffer.from(cfg.secret);
+    const got = Buffer.from(presented);
+    if (got.length !== want.length || !timingSafeEqual(got, want)) {
+      return send2(404, { "content-type": "application/json" }, JSON.stringify({ error: "not_found" }));
+    }
+    const origin = req.headers.origin;
+    if (typeof origin === "string" && !(cfg.allowedOrigins ?? []).includes(origin)) {
+      return send2(403, { "content-type": "application/json" }, JSON.stringify({ error: "origin_not_allowed" }));
+    }
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+      const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+      size += buf.length;
+      if (size > EVENTS_BODY_CAP) {
+        return send2(413, { "content-type": "application/json" }, JSON.stringify({ error: "body_too_large" }));
+      }
+      chunks.push(buf);
+    }
+    const controller = new AbortController();
+    res.on("close", () => {
+      if (!res.writableEnded) controller.abort();
+    });
+    const out = await handleModernRequest(
+      {
+        method: req.method ?? "GET",
+        headers: req.headers,
+        body: Buffer.concat(chunks).toString("utf8")
+      },
+      { createServer: cfg.createServer, signal: controller.signal }
+    );
+    send2(out.status, out.headers, out.body);
+  }
   async function handleImportedMcp(req, res, importId) {
     if (!authorizeMcp(req, res)) return;
     if (!opts.mcpProxy) {
@@ -50360,7 +51046,7 @@ async function startHttpServer(opts) {
           });
         }
         applyCors(req, res);
-        if (req.method === "OPTIONS") {
+        if (req.method === "OPTIONS" && !(opts.eventsMcp && path.startsWith("/mcp/events/"))) {
           res.writeHead(204);
           res.end();
           return;
@@ -50387,6 +51073,21 @@ async function startHttpServer(opts) {
           handleEvents(req, res);
           return;
         }
+        if (path.startsWith("/mcp/events/")) {
+          let presented;
+          try {
+            presented = decodeURIComponent(path.slice("/mcp/events/".length));
+          } catch (error) {
+            if (!(error instanceof URIError)) throw error;
+          }
+          if (presented === void 0) {
+            res.writeHead(404, { "content-type": "application/json", "cache-control": "no-store" });
+            res.end(JSON.stringify({ error: "not_found" }));
+            return;
+          }
+          await handleEventsMcp(req, res, presented);
+          return;
+        }
         if (path === "/mcp/orchestrator") {
           await handleOrchestratorMcp(req, res);
           return;
@@ -50994,15 +51695,17 @@ async function startHttpServer(opts) {
           try {
             const base = str3("base");
             const anchor = str3("anchor");
-            const result = await opts.runBranchGc({
-              repoRoot: resolved.repoRoot,
-              apply,
-              includeReviewed: bool3("includeReviewed"),
-              ...base ? { base } : {},
-              ...scopes?.length ? { scopes } : {},
-              ...minAgeDays !== void 0 && Number.isFinite(minAgeDays) ? { minAgeDays } : {},
-              ...anchor ? { anchor } : {}
-            });
+            const result = withBranchGcApplySummary(
+              await opts.runBranchGc({
+                repoRoot: resolved.repoRoot,
+                apply,
+                includeReviewed: bool3("includeReviewed"),
+                ...base ? { base } : {},
+                ...scopes?.length ? { scopes } : {},
+                ...minAgeDays !== void 0 && Number.isFinite(minAgeDays) ? { minAgeDays } : {},
+                ...anchor ? { anchor } : {}
+              })
+            );
             res.writeHead(200, { "content-type": "application/json" });
             res.end(JSON.stringify(result));
           } catch (err) {
@@ -52074,16 +52777,16 @@ async function startHttpServer(opts) {
     });
   });
   const bind = opts.bind ?? "127.0.0.1";
-  await new Promise((resolve45, reject) => {
+  await new Promise((resolve47, reject) => {
     server.once("error", reject);
-    server.listen(opts.port, bind, () => resolve45());
+    server.listen(opts.port, bind, () => resolve47());
   });
   return {
     url: `http://${bind}:${opts.port}`,
     async stop() {
       wss.close();
       server.closeAllConnections();
-      await new Promise((resolve45) => server.close(() => resolve45()));
+      await new Promise((resolve47) => server.close(() => resolve47()));
     }
   };
 }
@@ -52292,9 +52995,9 @@ async function currentTranscriptSeq(id) {
   let stream;
   try {
     stream = createReadStream(filePath, { encoding: "utf8" });
-    await new Promise((resolve45, reject) => {
+    await new Promise((resolve47, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve45);
+      stream.once("open", resolve47);
     });
   } catch (err) {
     if (err.code === "ENOENT") return 0;
@@ -52319,9 +53022,9 @@ async function* transcriptDiskRecords(id) {
   let stream;
   try {
     stream = createReadStream(filePath, { encoding: "utf8" });
-    await new Promise((resolve45, reject) => {
+    await new Promise((resolve47, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve45);
+      stream.once("open", resolve47);
     });
   } catch (err) {
     if (err.code === "ENOENT") return;
@@ -54077,9 +54780,9 @@ async function handleSessions(req, res, path, registry, resolveAgentAdapter, pty
     let fileStream;
     try {
       fileStream = createReadStream(filePath, { encoding: "utf8" });
-      await new Promise((resolve45, reject) => {
+      await new Promise((resolve47, reject) => {
         fileStream.once("error", reject);
-        fileStream.once("open", resolve45);
+        fileStream.once("open", resolve47);
       });
     } catch (err) {
       const code = err.code;
@@ -54135,9 +54838,9 @@ async function handleSessions(req, res, path, registry, resolveAgentAdapter, pty
     let fileStream;
     try {
       fileStream = createReadStream(filePath, { encoding: "utf8" });
-      await new Promise((resolve45, reject) => {
+      await new Promise((resolve47, reject) => {
         fileStream.once("error", reject);
-        fileStream.once("open", resolve45);
+        fileStream.once("open", resolve47);
       });
     } catch (err) {
       const code = err.code;
@@ -54581,7 +55284,10 @@ async function handleSentinels(req, res, path, deps2) {
     return true;
   }
   if (req.method === "DELETE") {
-    const removed = await cancelSentinelWatch({ store: deps2.store, resolveProvider: deps2.resolveProvider }, id);
+    const removed = await cancelSentinelWatch(
+      { store: deps2.store, resolveProvider: deps2.resolveProvider, ...deps2.tombstones ? { tombstones: deps2.tombstones } : {} },
+      id
+    );
     if (!removed) {
       json3(404, { error: "sentinel_not_found", id });
       return true;
@@ -56891,7 +57597,7 @@ function createTransmitterBindingStore(opts) {
   const nowMs = Date.now;
   const debounceMs = PERSIST_DEBOUNCE_MS6;
   let persistTimer = null;
-  const load = () => {
+  const load2 = () => {
     const out = /* @__PURE__ */ new Map();
     let raw;
     try {
@@ -56916,7 +57622,7 @@ function createTransmitterBindingStore(opts) {
     }
     return out;
   };
-  const bindings = load();
+  const bindings = load2();
   const snapshot = () => {
     const out = {};
     for (const [key, binding] of bindings.entries()) out[key] = binding;
@@ -56976,7 +57682,7 @@ function createInboundEndpointStore(opts) {
   const debounceMs = opts?.debounceMs ?? PERSIST_DEBOUNCE_MS7;
   const persist = opts?.persist ?? opts?.filePath !== void 0;
   let persistTimer = null;
-  const load = () => {
+  const load2 = () => {
     const out = /* @__PURE__ */ new Map();
     if (!persist) return out;
     let raw;
@@ -57002,7 +57708,7 @@ function createInboundEndpointStore(opts) {
     }
     return out;
   };
-  const endpoints = load();
+  const endpoints = load2();
   const seen = /* @__PURE__ */ new Map();
   let totalSeen = 0;
   const snapshot = () => {
@@ -57165,6 +57871,299 @@ init_session_message();
 init_sessions();
 init_session_end_reason();
 init_session_retirement();
+var tmpSeq6 = 0;
+var tmpPathFor2 = (filePath) => `${filePath}.tmp.${process.pid}.${++tmpSeq6}`;
+function isDirSyncUnsupported(err) {
+  const code = err.code;
+  return code === "EINVAL" || code === "EPERM" || code === "EISDIR" || code === "ENOTSUP";
+}
+async function writeFileDurable(filePath, data, opts = {}) {
+  const mode = opts.mode ?? 384;
+  const dir = dirname(filePath);
+  await promises.mkdir(dir, { recursive: true });
+  const tmp = tmpPathFor2(filePath);
+  try {
+    const fh = await promises.open(tmp, "w", mode);
+    try {
+      await fh.writeFile(data);
+      await fh.chmod(mode);
+      await fh.sync();
+    } finally {
+      await fh.close();
+    }
+    if (opts.commitIf && !opts.commitIf()) {
+      await promises.unlink(tmp).catch(() => void 0);
+      return;
+    }
+    await promises.rename(tmp, filePath);
+  } catch (err) {
+    await promises.unlink(tmp).catch(() => void 0);
+    throw err;
+  }
+  try {
+    const dh = await promises.open(dir, "r");
+    try {
+      await dh.sync();
+    } finally {
+      await dh.close();
+    }
+  } catch (err) {
+    if (!isDirSyncUnsupported(err)) throw err;
+  }
+}
+function writeFileDurableSync(filePath, data, mode = 384) {
+  const dir = dirname(filePath);
+  mkdirSync(dir, { recursive: true });
+  const tmp = tmpPathFor2(filePath);
+  try {
+    const fd = openSync(tmp, "w", mode);
+    try {
+      writeSync(fd, data);
+      fsyncSync(fd);
+    } finally {
+      closeSync(fd);
+    }
+    renameSync(tmp, filePath);
+  } catch (err) {
+    try {
+      unlinkSync(tmp);
+    } catch {
+    }
+    throw err;
+  }
+  try {
+    const dfd = openSync(dir, "r");
+    try {
+      fsyncSync(dfd);
+    } finally {
+      closeSync(dfd);
+    }
+  } catch (err) {
+    if (!isDirSyncUnsupported(err)) throw err;
+  }
+}
+function appendLineDurableSync(filePath, line, mode = 384) {
+  mkdirSync(dirname(filePath), { recursive: true });
+  const existed = (() => {
+    try {
+      closeSync(openSync(filePath, "r"));
+      return true;
+    } catch {
+      return false;
+    }
+  })();
+  const fd = openSync(filePath, "a", mode);
+  try {
+    appendFileSync(fd, line.endsWith("\n") ? line : `${line}
+`);
+    fsyncSync(fd);
+  } finally {
+    closeSync(fd);
+  }
+  if (!existed) {
+    try {
+      const dfd = openSync(dirname(filePath), "r");
+      try {
+        fsyncSync(dfd);
+      } finally {
+        closeSync(dfd);
+      }
+    } catch (err) {
+      if (!isDirSyncUnsupported(err)) throw err;
+    }
+  }
+}
+
+// src/sentinel-cancel-tombstones.ts
+function defaultCancelTombstonePath() {
+  return resolve(process.env.AGENTPROTO_HOME ?? join(homedir(), ".agentproto"), "sentinel-cancel-tombstones.json");
+}
+var SECRETISH = /secret|token|key|password|credential|authorization/i;
+function stripSecrets(handle) {
+  const state = {};
+  for (const [k, v] of Object.entries(handle.state ?? {})) if (!SECRETISH.test(k)) state[k] = v;
+  return {
+    provider: handle.provider,
+    ...handle.remoteId !== void 0 ? { remoteId: handle.remoteId } : {},
+    ...handle.cursor !== void 0 ? { cursor: handle.cursor } : {},
+    ...Object.keys(state).length > 0 ? { state } : {}
+  };
+}
+var keyOf2 = (provider, remoteId) => `${provider}|${remoteId}`;
+function load(filePath) {
+  try {
+    const parsed = JSON.parse(readFileSync(filePath, "utf8"));
+    if (!Array.isArray(parsed.tombstones)) return [];
+    return parsed.tombstones.filter(
+      (t) => typeof t === "object" && t !== null && typeof t.key === "string"
+    );
+  } catch {
+    return [];
+  }
+}
+function createCancelTombstoneStore(opts) {
+  const nowMs = opts.nowMs ?? Date.now;
+  const log = opts.log ?? ((line) => console.warn(line));
+  const base = opts.baseBackoffMs ?? 3e4;
+  const max = opts.maxBackoffMs ?? 60 * 60 * 1e3;
+  const rows = /* @__PURE__ */ new Map();
+  if (opts.filePath) for (const t of load(opts.filePath)) rows.set(t.key, t);
+  let writeTail = Promise.resolve();
+  function persist() {
+    if (!opts.filePath) return Promise.resolve();
+    const filePath = opts.filePath;
+    const run = () => writeFileDurable(filePath, JSON.stringify({ version: 1, tombstones: [...rows.values()] }, null, 2));
+    const next = writeTail.then(run, run);
+    writeTail = next.catch(() => void 0);
+    return next;
+  }
+  const inFlight2 = /* @__PURE__ */ new Map();
+  async function attempt(t, explicit = false) {
+    const running = inFlight2.get(t.key);
+    if (running) return running;
+    const p = (async () => {
+      if (!explicit && opts.isRemoteInUse?.(t.provider, t.remoteId)) {
+        rows.delete(t.key);
+        await persist().catch((err) => log(`[sentinel-tombstones] persist failed: ${String(err)}`));
+        return true;
+      }
+      const provider = await opts.resolveProvider(t.provider);
+      let error;
+      if (!provider) error = `unknown sentinel provider "${t.provider}"`;
+      else {
+        try {
+          await provider.cancel(t.handle);
+        } catch (err) {
+          error = err instanceof Error ? err.message : String(err);
+        }
+      }
+      const live = rows.get(t.key);
+      if (error === void 0) {
+        if (live) rows.delete(t.key);
+        await persist().catch((err) => log(`[sentinel-tombstones] persist failed: ${String(err)}`));
+        return true;
+      }
+      if (live) {
+        live.attempts += 1;
+        live.lastAttemptAt = nowMs();
+        live.lastError = error.slice(0, 300);
+        live.nextAttemptAt = nowMs() + Math.min(max, base * 2 ** Math.min(live.attempts, 20));
+        await persist().catch((err) => log(`[sentinel-tombstones] persist failed: ${String(err)}`));
+      }
+      return false;
+    })().finally(() => inFlight2.delete(t.key));
+    inFlight2.set(t.key, p);
+    return p;
+  }
+  return {
+    async cancel(handle, afterRecorded) {
+      const provider = await opts.resolveProvider(handle.provider);
+      if (!handle.remoteId || !provider?.exclusiveRemote) {
+        afterRecorded?.();
+        let converged2 = true;
+        try {
+          await provider?.cancel(handle);
+        } catch {
+          converged2 = false;
+        }
+        return { converged: converged2 };
+      }
+      const key = keyOf2(handle.provider, handle.remoteId);
+      let t = rows.get(key);
+      if (!t) {
+        const now = nowMs();
+        t = {
+          key,
+          provider: handle.provider,
+          remoteId: handle.remoteId,
+          handle: stripSecrets(handle),
+          createdAt: now,
+          attempts: 0,
+          nextAttemptAt: now
+        };
+        rows.set(key, t);
+        try {
+          await persist();
+        } catch (err) {
+          rows.delete(key);
+          throw err;
+        }
+      }
+      afterRecorded?.();
+      const converged = await attempt(t, true);
+      const remaining = rows.get(key);
+      return { converged, ...remaining ? { tombstone: remaining } : {} };
+    },
+    async sweep() {
+      const now = nowMs();
+      const due = [...rows.values()].filter((t) => t.nextAttemptAt <= now);
+      let converged = 0;
+      for (const t of due) if (await attempt(t)) converged++;
+      return { attempted: due.length, converged, remaining: rows.size };
+    },
+    list: () => [...rows.values()],
+    has: (provider, remoteId) => rows.has(keyOf2(provider, remoteId))
+  };
+}
+function defaultSentinelQuarantinePath() {
+  return resolve(process.env.AGENTPROTO_HOME ?? join(homedir(), ".agentproto"), "sentinel-quarantine.jsonl");
+}
+function keyFor(sentinelId, provider, item) {
+  const identity = item.remoteDeliveryId ?? (item.seq !== void 0 ? `seq:${item.seq}` : "");
+  return [sentinelId, provider, identity, item.digest ?? ""].join("|");
+}
+function loadFile(filePath) {
+  if (!existsSync(filePath)) return [];
+  const out = [];
+  for (const line of readFileSync(filePath, "utf8").split("\n")) {
+    if (line.trim() === "") continue;
+    try {
+      const rec = JSON.parse(line);
+      if (rec && typeof rec.key === "string") out.push(rec);
+    } catch {
+    }
+  }
+  return out;
+}
+function createSentinelQuarantine(opts = {}) {
+  const nowMs = opts.nowMs ?? Date.now;
+  const records = /* @__PURE__ */ new Map();
+  let loaded = false;
+  function ensureLoaded() {
+    if (loaded) return;
+    if (opts.filePath) for (const rec of loadFile(opts.filePath)) records.set(rec.key, rec);
+    loaded = true;
+  }
+  return {
+    record({ sentinelId, provider, remoteId, item }) {
+      ensureLoaded();
+      const key = keyFor(sentinelId, provider, item);
+      const existing = records.get(key);
+      if (existing) return existing;
+      const rec = {
+        key,
+        quarantinedAt: new Date(nowMs()).toISOString(),
+        sentinelId,
+        provider,
+        ...remoteId !== void 0 ? { remoteId } : {},
+        ...item.seq !== void 0 ? { seq: item.seq } : {},
+        ...item.remoteDeliveryId !== void 0 ? { remoteDeliveryId: item.remoteDeliveryId } : {},
+        error: item.error,
+        ...item.excerpt ? { excerpt: item.excerpt } : {},
+        ...item.digest !== void 0 ? { digest: item.digest } : {},
+        ...item.bytes !== void 0 ? { bytes: item.bytes } : {}
+      };
+      if (opts.filePath) appendLineDurableSync(opts.filePath, JSON.stringify(rec));
+      records.set(key, rec);
+      return rec;
+    },
+    list(filter) {
+      ensureLoaded();
+      const all = [...records.values()];
+      return filter?.sentinelId ? all.filter((r) => r.sentinelId === filter.sentinelId) : all;
+    }
+  };
+}
 
 // src/webhook-egress/delivery.ts
 init_signing();
@@ -57352,7 +58351,7 @@ function finalHeaders(headers, hostname6, port) {
   return { ...headers, Host: port === 443 ? hostname6 : `${hostname6}:${port}` };
 }
 function rawPost(args) {
-  return new Promise((resolve45, reject) => {
+  return new Promise((resolve47, reject) => {
     const req = request({
       // Connect to the PRE-VALIDATED address; keep the original hostname in
       // `servername` so SNI and the certificate check never loosen.
@@ -57376,7 +58375,7 @@ function rawPost(args) {
     const ok4 = (status, body) => {
       if (settled) return;
       settled = true;
-      resolve45({ status, body });
+      resolve47({ status, body });
     };
     req.setTimeout(args.timeoutMs, () => fail4("timeout", `no response within ${args.timeoutMs}ms`));
     req.on("error", (err) => {
@@ -57459,7 +58458,7 @@ async function deliverEventEnvelope(replay, event, deps2 = {}) {
     try {
       response = await fetcher(replay.callbackUrl, {
         method: "POST",
-        headers: { ...signed, "content-type": "application/json" },
+        headers: { ...signed, "content-type": "application/json", "X-MCP-Subscription-Id": replay.subId },
         body: payloadBytes,
         timeoutMs: 15e3
         // delivery default (challenge uses 10_000)
@@ -57891,13 +58890,16 @@ function invalidParams(reason, detail) {
 function callbackEndpointError(reason, detail) {
   return new McpEventsError(-32015, `CallbackEndpointError: ${detail}`, { reason });
 }
+function backingSubscriptionError(reason, detail, subscriptionId2) {
+  return new McpEventsError(-32016, `BackingSubscriptionError: ${detail}`, { reason, subscriptionId: subscriptionId2 });
+}
 var mutationChain = Promise.resolve();
 function withSubscribeMutex(fn) {
   const run = mutationChain.then(fn, fn);
   mutationChain = run.catch(() => void 0);
   return run;
 }
-function isRecord10(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var LIST_PAGE_DEFAULT = 50;
@@ -57918,7 +58920,7 @@ function decodeListCursor(cursor) {
   }
 }
 function requireWebhookDelivery(delivery) {
-  if (!isRecord10(delivery) || delivery.mode !== "webhook") {
+  if (!isRecord12(delivery) || delivery.mode !== "webhook") {
     throw invalidParams("unsupported_delivery_mode", 'delivery.mode must be "webhook"');
   }
   if (typeof delivery.url !== "string" || delivery.url.length === 0) {
@@ -57927,7 +58929,7 @@ function requireWebhookDelivery(delivery) {
   return { mode: "webhook", url: delivery.url, ...typeof delivery.secret === "string" ? { secret: delivery.secret } : {} };
 }
 function validateArgsOrThrow(name, registration, args) {
-  if (!isRecord10(args)) throw invalidParams("invalid_arguments", "`arguments` must be an object");
+  if (!isRecord12(args)) throw invalidParams("invalid_arguments", "`arguments` must be an object");
   const schemaCheck = validateAgainstInputSchema(registration.definition.inputSchema, args);
   if (!schemaCheck.ok) {
     throw invalidParams("invalid_arguments", `arguments for "${name}": ${schemaCheck.reason}`);
@@ -57983,10 +58985,30 @@ async function eventsSubscribe(input, ctx) {
       if (target.kind !== "webhook") {
         throw invalidParams("identity_conflict", `subscription ${id} exists with a non-webhook target`);
       }
+      let handle2 = existing.handle;
+      const provider2 = await ctx.resolveProvider(existing.provider);
+      if (provider2?.renew) {
+        try {
+          handle2 = await provider2.renew(existing.handle, until);
+        } catch (err) {
+          if (err instanceof SentinelBackingExpiredError) {
+            throw backingSubscriptionError(
+              "backing_subscription_expired",
+              `${err.message}; unsubscribe and subscribe again`,
+              id
+            );
+          }
+          throw backingSubscriptionError(
+            "backing_renew_failed",
+            err instanceof Error ? err.message : String(err),
+            id
+          );
+        }
+      }
       const ref = ctx.store.materializeWebhookTargetRef(target);
       if (ref !== void 0) ctx.store.putSentinelSecret(ref, { secret });
-      ctx.store.update(id, { spec: { ...existing.spec, until }, status: "active" });
-      return { id, refreshBefore: computeRefreshBefore(until), cursor: null };
+      ctx.store.update(id, { spec: { ...existing.spec, until }, handle: handle2, status: "active" });
+      return { id, refreshBefore: computeRefreshBefore(until), cursor: null, truncated: false };
     }
     const provider = await ctx.resolveProvider(mapped.providerSlug);
     if (!provider) {
@@ -58002,7 +59024,7 @@ async function eventsSubscribe(input, ctx) {
       sentinelId: id
     });
     ctx.store.create({ id, spec, provider: mapped.providerSlug, handle });
-    return { id, refreshBefore: computeRefreshBefore(until), cursor: null };
+    return { id, refreshBefore: computeRefreshBefore(until), cursor: null, truncated: false };
   });
 }
 async function eventsUnsubscribe(input, ctx) {
@@ -58022,6 +59044,13 @@ async function eventsUnsubscribe(input, ctx) {
   await withSubscribeMutex(async () => {
     const existing = ctx.store.get(id);
     if (!existing) return;
+    if (ctx.tombstones) {
+      try {
+        await ctx.tombstones.cancel(existing.handle, () => ctx.store.remove(id));
+        return;
+      } catch {
+      }
+    }
     const provider = await ctx.resolveProvider(existing.provider);
     if (provider) {
       try {
@@ -58051,7 +59080,6 @@ var PERSIST_DEBOUNCE_MS8 = 1500;
 var DELIVERED_REAP_MS = 24 * 60 * 60 * 1e3;
 var PENDING_AGE_OUT_MS = 7 * 24 * 60 * 60 * 1e3;
 var ROW_CAP = 2e3;
-var tmpSeq6 = 0;
 function webhookRequestId(sentinelId, eventId) {
   const digest = createHash("sha256").update(`${sentinelId}:${eventId}`).digest("hex");
   return `sub_${digest.slice(0, 32)}`;
@@ -58067,7 +59095,7 @@ function createSentinelWebhookOutbox(opts) {
   const persist = opts.persist ?? opts.filePath !== void 0;
   const deliverEvent = opts.deliverEvent ?? (async (input) => deliverEventEnvelope(input.replay, input.row.envelope));
   const rowKey = (sentinelId, eventId) => `${sentinelId}::${eventId}`;
-  const load = () => {
+  const load2 = () => {
     const out = /* @__PURE__ */ new Map();
     if (!persist) return out;
     let raw;
@@ -58091,28 +59119,34 @@ function createSentinelWebhookOutbox(opts) {
     }
     return out;
   };
-  const rows = load();
+  const rows = load2();
   const snapshot = () => {
     const out = {};
     for (const [key, row] of rows.entries()) out[key] = row;
     return out;
   };
   let persistTimer = null;
+  let writeTail = Promise.resolve();
+  let syncGeneration = 0;
+  const persistNow = () => {
+    if (!persist) return Promise.resolve();
+    const run = async () => {
+      const generation = syncGeneration;
+      const body = JSON.stringify(snapshot(), null, 2) + "\n";
+      await writeFileDurable(filePath, body, { commitIf: () => generation === syncGeneration });
+    };
+    const next = writeTail.then(run, run);
+    writeTail = next.catch(() => void 0);
+    return next;
+  };
   const schedulePersist = () => {
     if (!persist) return;
     if (persistTimer) clearTimeout(persistTimer);
     persistTimer = setTimeout(() => {
-      void (async () => {
-        try {
-          await promises.mkdir(dirname(filePath), { recursive: true });
-          const tmp = `${filePath}.tmp.${process.pid}.${++tmpSeq6}`;
-          await promises.writeFile(tmp, JSON.stringify(snapshot(), null, 2) + "\n", { mode: 384 });
-          await promises.chmod(tmp, 384);
-          await promises.rename(tmp, filePath);
-        } catch (err) {
-          log(`[sentinel-webhook-outbox] persist failed: ${err instanceof Error ? err.message : String(err)}`);
-        }
-      })();
+      persistTimer = null;
+      persistNow().catch((err) => {
+        log(`[sentinel-webhook-outbox] persist failed: ${err instanceof Error ? err.message : String(err)}`);
+      });
     }, debounceMs);
   };
   const flushSync = () => {
@@ -58121,12 +59155,9 @@ function createSentinelWebhookOutbox(opts) {
       clearTimeout(persistTimer);
       persistTimer = null;
     }
+    syncGeneration++;
     try {
-      mkdirSync(dirname(filePath), { recursive: true });
-      const tmp = `${filePath}.tmp.${process.pid}.${++tmpSeq6}`;
-      writeFileSync(tmp, JSON.stringify(snapshot(), null, 2) + "\n", { mode: 384 });
-      chmodSync(tmp, 384);
-      renameSync(tmp, filePath);
+      writeFileDurableSync(filePath, JSON.stringify(snapshot(), null, 2) + "\n");
     } catch {
     }
   };
@@ -58203,7 +59234,14 @@ function createSentinelWebhookOutbox(opts) {
       const key = rowKey(sentinelId, event.id);
       const existing = rows.get(key);
       if (existing) {
-        if (existing.status !== "pending") opts.onTerminal(sentinelId, existing);
+        if (existing.status !== "pending") {
+          opts.onTerminal(sentinelId, existing);
+          return void 0;
+        }
+        await writeTail;
+        if (rows.get(key) !== existing) {
+          throw new Error(`webhook outbox row ${key} was not persisted`);
+        }
         return void 0;
       }
       const envelope = toWebhookEnvelope(event);
@@ -58219,12 +59257,23 @@ function createSentinelWebhookOutbox(opts) {
         envelope,
         event
       };
+      let evicted;
       if (rows.size >= ROW_CAP) {
         const oldest = oldestTerminalRowKey();
-        if (oldest) rows.delete(oldest);
+        const evictedRow = oldest ? rows.get(oldest) : void 0;
+        if (oldest && evictedRow) {
+          evicted = [oldest, evictedRow];
+          rows.delete(oldest);
+        }
       }
       rows.set(key, row);
-      schedulePersist();
+      try {
+        await persistNow();
+      } catch (err) {
+        if (rows.get(key) === row) rows.delete(key);
+        if (evicted && !rows.has(evicted[0])) rows.set(evicted[0], evicted[1]);
+        throw err;
+      }
       enqueueDispatch();
       return row;
     },
@@ -58354,14 +59403,27 @@ function createSentinelRuntime(opts) {
     if (store.get(sentinel.id)?.status !== "expired") {
       store.update(sentinel.id, { status: "expired" });
     }
-    const provider = await opts.resolveProvider(sentinel.provider);
-    if (!provider) return;
     try {
-      await provider.cancel(sentinel.handle);
+      await cancelTombstones.cancel(sentinel.handle);
     } catch (err) {
       log(`[sentinel-runtime] expiry cancel failed for ${sentinel.id}: ${describeError(err)}`);
     }
   }
+  const outboxPersistent = opts.outboxPersist ?? (opts.outboxPath !== void 0 || opts.deliverEvent === void 0);
+  const quarantinePath = opts.quarantinePath ?? (outboxPersistent ? defaultSentinelQuarantinePath() : void 0);
+  const quarantine = createSentinelQuarantine({
+    ...quarantinePath !== void 0 ? { filePath: quarantinePath } : {},
+    nowMs
+  });
+  const cancelTombstonePath = opts.cancelTombstonePath ?? (outboxPersistent ? defaultCancelTombstonePath() : void 0);
+  const cancelTombstones = createCancelTombstoneStore({
+    ...cancelTombstonePath !== void 0 ? { filePath: cancelTombstonePath } : {},
+    resolveProvider: opts.resolveProvider,
+    // A live local watch that owns the remote makes the tombstone stale.
+    isRemoteInUse: (provider, remoteId) => store.list().some((s) => s.provider === provider && s.handle.remoteId === remoteId && s.status !== "expired"),
+    nowMs,
+    log
+  });
   const outbox = createSentinelWebhookOutbox({
     ...opts.outboxPath !== void 0 ? { filePath: opts.outboxPath } : {},
     nowMs,
@@ -58383,7 +59445,7 @@ function createSentinelRuntime(opts) {
       if (stored.prevSecret && stored.rotatedAt !== void 0 && nowMs() - stored.rotatedAt < windowMs) {
         secretsOut.push(stored.prevSecret);
       }
-      const subId = `sub_${createHash("sha256").update(`${sentinelId}:${target.url}`).digest("hex").slice(0, 32)}`;
+      const subId = sentinelId;
       return { subId, callbackUrl: target.url, secrets: secretsOut };
     },
     /** Expiry gate consulted BEFORE every dispatch (plan §4 W-B task 2b). */
@@ -58578,13 +59640,21 @@ function createSentinelRuntime(opts) {
   }
   async function processEvents(sentinelId, provider, events) {
     let haltedOnError = false;
+    let stoppedEarly = false;
     let delivered = 0;
     for (const event of events) {
       const current = store.get(sentinelId);
-      if (!current) break;
-      if (!POLLABLE_STATUSES.has(current.status)) break;
+      if (!current) {
+        stoppedEarly = true;
+        break;
+      }
+      if (!POLLABLE_STATUSES.has(current.status)) {
+        stoppedEarly = true;
+        break;
+      }
       if (isExpiredSpec(current)) {
         await expireSentinel(current);
+        stoppedEarly = true;
         break;
       }
       if (store.isSeen(current.id, event.id)) continue;
@@ -58623,7 +59693,7 @@ function createSentinelRuntime(opts) {
       });
       if (updated) await applyLifetime(updated, event, provider);
     }
-    return { haltedOnError, delivered };
+    return { haltedOnError, delivered, stoppedEarly };
   }
   async function pollSentinel(sentinel) {
     const provider = await opts.resolveProvider(sentinel.provider);
@@ -58635,19 +59705,35 @@ function createSentinelRuntime(opts) {
       store.update(sentinel.id, { lastError: describeError(err) });
       return;
     }
-    const { haltedOnError } = await processEvents(sentinel.id, provider, result.events);
-    if (!haltedOnError) {
-      const latest = store.get(sentinel.id);
-      if (latest) {
-        if (provider.ack) {
-          try {
-            await provider.ack(latest.handle, result.cursor);
-          } catch (err) {
-            log(`[sentinel-runtime] ack failed for ${sentinel.id}: ${describeError(err)}`);
-          }
+    let quarantineFailed = false;
+    for (const item of result.malformed ?? []) {
+      try {
+        quarantine.record({
+          sentinelId: sentinel.id,
+          provider: sentinel.provider,
+          ...sentinel.handle.remoteId !== void 0 ? { remoteId: sentinel.handle.remoteId } : {},
+          item
+        });
+      } catch (err) {
+        quarantineFailed = true;
+        log(`[sentinel-runtime] quarantine write failed for ${sentinel.id}: ${describeError(err)}`);
+      }
+    }
+    const { haltedOnError, stoppedEarly } = await processEvents(sentinel.id, provider, result.events);
+    if (haltedOnError || stoppedEarly || quarantineFailed) {
+      if (quarantineFailed) store.update(sentinel.id, { lastError: "quarantine write failed; batch not acknowledged" });
+      return;
+    }
+    const latest = store.get(sentinel.id);
+    if (latest) {
+      if (provider.ack) {
+        try {
+          await provider.ack(latest.handle, result.cursor);
+        } catch (err) {
+          log(`[sentinel-runtime] ack failed for ${sentinel.id}: ${describeError(err)}`);
         }
-        store.update(sentinel.id, { handle: { ...latest.handle, cursor: result.cursor } });
       }
+      store.update(sentinel.id, { handle: { ...latest.handle, cursor: result.cursor } });
     }
   }
   async function pollOnce() {
@@ -58655,6 +59741,7 @@ function createSentinelRuntime(opts) {
     inFlight2 = true;
     try {
       await sweepExpiredSentinels();
+      await cancelTombstones.sweep().catch((err) => log(`[sentinel-runtime] tombstone sweep failed: ${describeError(err)}`));
       outbox.sweep();
       const pollable = store.list().filter((s) => POLLABLE_STATUSES.has(s.status));
       for (const sentinel of pollable) {
@@ -58724,6 +59811,7 @@ function createSentinelRuntime(opts) {
     async start() {
       await reattachAll();
       await sweepExpiredSentinels();
+      await cancelTombstones.sweep().catch((err) => log(`[sentinel-runtime] tombstone sweep failed: ${describeError(err)}`));
       await outbox.dispatch();
       if (!timer) scheduleNext();
     },
@@ -58735,7 +59823,9 @@ function createSentinelRuntime(opts) {
     },
     pollOnce,
     deliverPushed,
-    webhookOutbox: outbox
+    webhookOutbox: outbox,
+    quarantine,
+    cancelTombstones
   };
 }
 var BUILTIN_SENTINEL_PROVIDERS = {
@@ -58812,7 +59902,7 @@ async function spawnCloudflaredUntil(argv, opts) {
   };
   let settled = false;
   let forwardedLen = 0;
-  return await new Promise((resolve45, reject) => {
+  return await new Promise((resolve47, reject) => {
     const poll = setInterval(() => {
       const text13 = readAll();
       if (opts.onLog) {
@@ -58830,7 +59920,7 @@ async function spawnCloudflaredUntil(argv, opts) {
       if (m) {
         settled = true;
         clearTimeout(timer);
-        resolve45({ proc, match: m[0], stopTail: () => clearInterval(poll) });
+        resolve47({ proc, match: m[0], stopTail: () => clearInterval(poll) });
       }
     }, POLL_INTERVAL_MS2);
     if (poll.unref) poll.unref();
@@ -58967,15 +60057,15 @@ function quickTunnelProvider() {
         }
       }, 3e3);
       timer.unref();
-      await new Promise((resolve45) => {
+      await new Promise((resolve47) => {
         if (proc.exitCode !== null) {
           clearTimeout(timer);
-          resolve45();
+          resolve47();
           return;
         }
         proc.once("exit", () => {
           clearTimeout(timer);
-          resolve45();
+          resolve47();
         });
       });
     }
@@ -59128,15 +60218,15 @@ function namedTunnelProvider(cfg) {
         }
       }, 3e3);
       timer.unref();
-      await new Promise((resolve45) => {
+      await new Promise((resolve47) => {
         if (proc.exitCode !== null) {
           clearTimeout(timer);
-          resolve45();
+          resolve47();
           return;
         }
         proc.once("exit", () => {
           clearTimeout(timer);
-          resolve45();
+          resolve47();
         });
       });
     }
@@ -59260,7 +60350,7 @@ function ngrokTunnelProvider(opts) {
       };
       proc.stderr?.on("data", forwardLogs);
       proc.stdout?.on("data", forwardLogs);
-      const url = await new Promise((resolve45, reject) => {
+      const url = await new Promise((resolve47, reject) => {
         let settled = false;
         const timer = setTimeout(() => {
           if (settled) return;
@@ -59288,7 +60378,7 @@ function ngrokTunnelProvider(opts) {
                 settled = true;
                 clearTimeout(timer);
                 if (apiPollHandle) clearInterval(apiPollHandle);
-                resolve45(pubUrl);
+                resolve47(pubUrl);
               }
             } catch {
             }
@@ -59303,7 +60393,7 @@ function ngrokTunnelProvider(opts) {
             settled = true;
             clearTimeout(timer);
             if (apiPollHandle) clearInterval(apiPollHandle);
-            resolve45(reMatch[1]);
+            resolve47(reMatch[1]);
             return;
           }
           for (const line of text13.split(/\r?\n/)) {
@@ -59314,7 +60404,7 @@ function ngrokTunnelProvider(opts) {
                 settled = true;
                 clearTimeout(timer);
                 if (apiPollHandle) clearInterval(apiPollHandle);
-                resolve45(parsed.url);
+                resolve47(parsed.url);
                 return;
               }
             } catch {
@@ -59361,15 +60451,15 @@ function ngrokTunnelProvider(opts) {
         }
       }, 3e3);
       timer.unref();
-      await new Promise((resolve45) => {
+      await new Promise((resolve47) => {
         if (proc.exitCode !== null) {
           clearTimeout(timer);
-          resolve45();
+          resolve47();
           return;
         }
         proc.once("exit", () => {
           clearTimeout(timer);
-          resolve45();
+          resolve47();
         });
       });
     }
@@ -59581,7 +60671,7 @@ function sameCollapseGroup(a, b) {
   if ((a.key ?? "") !== (b.key ?? "")) return false;
   return a.event === b.event || TURN_FAMILY.has(a.event) && TURN_FAMILY.has(b.event);
 }
-function excerptOf(text13) {
+function excerptOf2(text13) {
   if (!text13) return void 0;
   const flat = text13.replace(/\s+/g, " ").trim();
   if (!flat) return void 0;
@@ -59596,7 +60686,7 @@ function formatFollowDigest(entries, resolveText, desc) {
     const cwd = d?.cwd ?? entry.cwd;
     const parts = [`[session-follow] ${who} ${entry.event}`];
     if (cwd) parts.push(basename(cwd) || cwd);
-    const text13 = excerptOf(resolveText(entry));
+    const text13 = excerptOf2(resolveText(entry));
     if (text13) parts.push(text13);
     return parts.join(" \u2014 ");
   });
@@ -59872,6 +60962,31 @@ function createSentinelAutoLinker(opts) {
     linkNow: link
   };
 }
+function isSubscriptionPermitted(params, repoAllowlist) {
+  const args = params.arguments;
+  if (typeof args !== "object" || args === null || Array.isArray(args)) return false;
+  const repo = args.repo;
+  return typeof repo === "string" && repoAllowlist.includes(repo);
+}
+function createEventsSurfaceServer(opts) {
+  const server = new McpServer({ name: "agentproto-events", version: opts.version }, { capabilities: { tools: {} } });
+  server.registerTool(
+    "events_ping",
+    { description: "Liveness probe for the events surface. Returns ok.", inputSchema: {} },
+    async () => ({ content: [{ type: "text", text: "ok" }] })
+  );
+  registerEventsMethods(server, {
+    list: (params) => opts.handlers.list(params),
+    subscribe: async (params) => {
+      if (!isSubscriptionPermitted(params, opts.repoAllowlist)) {
+        throw new McpError(ErrorCode.InvalidParams, "subscription not permitted");
+      }
+      return opts.handlers.subscribe(params);
+    },
+    unsubscribe: (params) => opts.handlers.unsubscribe(params)
+  });
+  return server;
+}
 var TELEGRAM_BOT_CREDS_FAMILY = "telegram-bot";
 function makeTelegramBotCredsStore(home) {
   const store = makeCredsStore({
@@ -60350,12 +61465,12 @@ function canonicalJson(value) {
 }
 function isToolAppVisible(tool) {
   const meta = tool._meta;
-  const ui = isRecord11(meta?.ui) ? meta.ui : void 0;
+  const ui = isRecord13(meta?.ui) ? meta.ui : void 0;
   const visibility = ui?.visibility;
   if (!Array.isArray(visibility)) return true;
   return visibility.includes("app");
 }
-function isRecord11(v) {
+function isRecord13(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function buildUiToolIndex(tools) {
@@ -60880,19 +61995,19 @@ function classifyMcpError(err) {
   return { status: "unreachable", error };
 }
 function uiMetaOf(meta) {
-  if (!isRecord12(meta) || !isRecord12(meta.ui)) return {};
+  if (!isRecord14(meta) || !isRecord14(meta.ui)) return {};
   const ui = meta.ui;
   const csp = cspOf(ui.csp);
   return {
     ...csp ? { csp } : {},
-    ...isRecord12(ui.permissions) ? { permissions: ui.permissions } : {},
+    ...isRecord14(ui.permissions) ? { permissions: ui.permissions } : {},
     ...typeof ui.prefersBorder === "boolean" ? { prefersBorder: ui.prefersBorder } : {},
     ...typeof ui.domain === "string" ? { domain: ui.domain } : {}
   };
 }
 var CSP_DOMAIN_KEYS = ["connectDomains", "resourceDomains", "frameDomains", "baseUriDomains"];
 function cspOf(raw) {
-  if (!isRecord12(raw)) return void 0;
+  if (!isRecord14(raw)) return void 0;
   const csp = {};
   for (const key of CSP_DOMAIN_KEYS) {
     const value = raw[key];
@@ -60902,7 +62017,7 @@ function cspOf(raw) {
   }
   return Object.keys(csp).length > 0 ? csp : void 0;
 }
-function isRecord12(v) {
+function isRecord14(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function errorMessage(err) {
@@ -63139,14 +64254,14 @@ function createActivityProjector(opts) {
       if (current && isTerminalActivityState(current.state)) {
         return Promise.resolve(current);
       }
-      return new Promise((resolve45) => {
+      return new Promise((resolve47) => {
         let settled = false;
         const finish = (value) => {
           if (settled) return;
           settled = true;
           clearTimeout(timer);
           unsubscribeWait();
-          resolve45(value);
+          resolve47(value);
         };
         const timer = setTimeout(() => finish(null), timeoutMs);
         const unsubscribeWait = opts.sessionEvents.on("activity:changed", (ev) => {
@@ -63308,7 +64423,7 @@ function createApprovalsEngine(opts) {
     const list2 = waiters.get(record2.id);
     if (!list2) return;
     waiters.delete(record2.id);
-    for (const resolve45 of list2) resolve45(record2);
+    for (const resolve47 of list2) resolve47(record2);
   };
   const emit = (type, record2) => {
     const ts = (/* @__PURE__ */ new Date()).toISOString();
@@ -63378,17 +64493,17 @@ function createApprovalsEngine(opts) {
     const current = liveGet(id);
     if (!current) return Promise.resolve(void 0);
     if (current.status !== "pending") return Promise.resolve(current);
-    return new Promise((resolve45) => {
+    return new Promise((resolve47) => {
       const list2 = waiters.get(id) ?? [];
-      list2.push(resolve45);
+      list2.push(resolve47);
       waiters.set(id, list2);
       const timer = setTimeout(() => {
         const list22 = waiters.get(id);
         if (!list22) return;
-        const idx = list22.indexOf(resolve45);
+        const idx = list22.indexOf(resolve47);
         if (idx >= 0) list22.splice(idx, 1);
         if (list22.length === 0) waiters.delete(id);
-        resolve45(liveGet(id));
+        resolve47(liveGet(id));
       }, timeoutMs);
       timer.unref?.();
     });
@@ -63551,7 +64666,7 @@ function humanizeKey(key) {
   const words = key.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_\-.]+/g, " ").replace(/\s+/g, " ").trim().toLowerCase();
   return words.length === 0 ? "Value" : words.charAt(0).toUpperCase() + words.slice(1);
 }
-function isRecord13(value) {
+function isRecord15(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function scalarText(value) {
@@ -63581,7 +64696,7 @@ function flattenRows(value, label, depth, out) {
     });
     return;
   }
-  if (isRecord13(value)) {
+  if (isRecord15(value)) {
     if (depth >= MAX_DEPTH) return;
     for (const [key, child] of Object.entries(value)) {
       flattenRows(child, label ? `${label} / ${humanizeKey(key)}` : humanizeKey(key), depth + 1, out);
@@ -63603,7 +64718,7 @@ function renderMail(preview2) {
   const cc = addressList(preview2.cc);
   const subject = scalarText(preview2.subject) ?? "";
   const body = scalarText(preview2.body) ?? "";
-  const attachments = Array.isArray(preview2.attachments) ? preview2.attachments.filter(isRecord13).map((a) => {
+  const attachments = Array.isArray(preview2.attachments) ? preview2.attachments.filter(isRecord15).map((a) => {
     const name = scalarText(a.fileName) ?? "";
     const size = typeof a.sizeBytes === "number" ? humanSize(a.sizeBytes) : "";
     return size ? `${name} (${size})` : name;
@@ -63618,9 +64733,9 @@ function renderMail(preview2) {
 }
 function renderPreview(record2) {
   const preview2 = record2.preview;
-  if (isRecord13(preview2) && preview2.kind === "mail") return renderMail(preview2);
+  if (isRecord15(preview2) && preview2.kind === "mail") return renderMail(preview2);
   const rows = [];
-  if (isRecord13(preview2)) {
+  if (isRecord15(preview2)) {
     for (const [key, value] of Object.entries(preview2)) flattenRows(value, humanizeKey(key), 1, rows);
   } else {
     flattenRows(preview2, "Details", 1, rows);
@@ -65717,9 +66832,9 @@ async function* readEventRecords(path) {
   let stream;
   try {
     stream = createReadStream(path, { encoding: "utf8" });
-    await new Promise((resolve45, reject) => {
+    await new Promise((resolve47, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve45);
+      stream.once("open", resolve47);
     });
   } catch (err) {
     if (err.code === "ENOENT") return;
@@ -66177,13 +67292,13 @@ function createLinkGuard(opts) {
   return {
     async start() {
       server = createServer(onRequest);
-      return new Promise((resolve45, reject) => {
+      return new Promise((resolve47, reject) => {
         server.once("error", reject);
         server.listen(0, "127.0.0.1", () => {
           log(
             `[link-guard] listening on 127.0.0.1:${currentPort()} -> ${opts.target.host}:${opts.target.port}`
           );
-          resolve45(handle());
+          resolve47(handle());
         });
       });
     },
@@ -66191,8 +67306,8 @@ function createLinkGuard(opts) {
       if (!server) return;
       const toClose = server;
       server = null;
-      await new Promise((resolve45, reject) => {
-        toClose.close((err) => err ? reject(err) : resolve45());
+      await new Promise((resolve47, reject) => {
+        toClose.close((err) => err ? reject(err) : resolve47());
       });
     },
     revoke() {
@@ -68203,13 +69318,13 @@ function createJoinTokenRegistry(deps2) {
   return { create, list, revoke, startAutoconnect, shutdown };
 }
 function sleep2(ms, signal) {
-  return new Promise((resolve45) => {
-    if (signal.aborted) return resolve45();
-    const timer = setTimeout(resolve45, ms);
+  return new Promise((resolve47) => {
+    if (signal.aborted) return resolve47();
+    const timer = setTimeout(resolve47, ms);
     if (typeof timer.unref === "function") timer.unref();
     signal.addEventListener("abort", () => {
       clearTimeout(timer);
-      resolve45();
+      resolve47();
     });
   });
 }
@@ -68899,7 +70014,14 @@ async function createGateway(opts) {
     registry: sessions,
     followStore: sessionFollowStore,
     sentinelStore,
-    cancelSentinel: (id) => cancelSentinelWatch({ store: sentinelStore, resolveProvider: resolveSentinelProviderResolved }, id)
+    cancelSentinel: (id) => cancelSentinelWatch(
+      {
+        store: sentinelStore,
+        resolveProvider: resolveSentinelProviderResolved,
+        tombstones: sentinelRuntime.cancelTombstones
+      },
+      id
+    )
   });
   const inboundWatcher = opts.resolveAgentAdapter ? createInboundWatcher({
     mcpProxy,
@@ -69281,6 +70403,7 @@ async function createGateway(opts) {
     registerSentinelTools(server, {
       store: sentinelStore,
       runtime: sentinelRuntime,
+      tombstones: sentinelRuntime.cancelTombstones,
       resolveProvider: resolveSentinelProviderResolved,
       isSessionAlive,
       ...callerSessionId ? { callerSessionId } : {}
@@ -69310,11 +70433,39 @@ async function createGateway(opts) {
       unsubscribe: (params) => eventsUnsubscribe(params, {
         principal: eventsPrincipal,
         store: sentinelStore,
-        resolveProvider: resolveSentinelProviderResolved
+        resolveProvider: resolveSentinelProviderResolved,
+        tombstones: sentinelRuntime.cancelTombstones
       })
     });
     return server;
   };
+  const eventsSecret = process.env.AGENTPROTO_MCP_EVENTS_SECRET ?? "";
+  const eventsRepos = (process.env.AGENTPROTO_MCP_EVENTS_REPOS ?? "").split(",").map((s) => s.trim()).filter(Boolean);
+  const eventsMcp = eventsSecret.length >= 32 ? {
+    secret: eventsSecret,
+    allowedOrigins: (process.env.AGENTPROTO_MCP_EVENTS_ORIGINS ?? "").split(",").map((s) => s.trim()).filter(Boolean),
+    createServer: async () => {
+      const principal = sessionPrincipal("mcp-events-origin");
+      return createEventsSurfaceServer({
+        version: opts.version ?? "0.1.0-alpha",
+        repoAllowlist: eventsRepos,
+        handlers: {
+          list: (params) => eventsList(params, { principal }),
+          subscribe: (params) => eventsSubscribe(params, {
+            principal,
+            store: sentinelStore,
+            resolveProvider: resolveSentinelProviderResolved
+          }),
+          unsubscribe: (params) => eventsUnsubscribe(params, {
+            principal,
+            store: sentinelStore,
+            resolveProvider: resolveSentinelProviderResolved,
+            tombstones: sentinelRuntime.cancelTombstones
+          })
+        }
+      });
+    }
+  } : void 0;
   let internalToolServerPromise;
   dispatchToolBox.fn = async (name, inputs) => {
     if (!internalToolServerPromise) internalToolServerPromise = mcpServerFactory();
@@ -69385,6 +70536,7 @@ async function createGateway(opts) {
     },
     mcpServerFactory,
     orchestratorMcpServerFactory,
+    ...eventsMcp ? { eventsMcp } : {},
     verifyOrchestratorScope: scopeTokens.verify,
     conversations,
     events,
@@ -69402,7 +70554,8 @@ async function createGateway(opts) {
       store: sentinelStore,
       resolveProvider: resolveSentinelProviderResolved,
       isSessionAlive,
-      runtime: sentinelRuntime
+      runtime: sentinelRuntime,
+      tombstones: sentinelRuntime.cancelTombstones
     },
     follows: {
       store: sessionFollowStore,
@@ -69595,7 +70748,12 @@ async function createGateway(opts) {
   }, pendingPromptSweepMs);
   pendingPromptTimer.unref?.();
   const livenessSweepIntervalMs = 3e4;
+  const livenessTickGuard = createLivenessTickGuard(livenessSweepIntervalMs, 5e3);
   const livenessSweepTimer = setInterval(() => {
+    if (livenessTickGuard.shouldSkip()) {
+      console.warn("[liveness-sweep] tick fired late (event loop starved) \u2014 skipping this sweep");
+      return;
+    }
     try {
       const orphanedRuns = workflowRunner?.sweep().orphaned ?? [];
       if (orphanedRuns.length > 0) {
@@ -69746,6 +70904,6 @@ var export_readPairingsSnapshot = pairing_registry_exports.readPairingsSnapshot;
 var export_removeProviderKey = providers_store_exports.removeProviderKey;
 var export_setProviderKey = providers_store_exports.setProviderKey;
 
-export { AnthropicRemainingQuotaReader, AuthResolutionError, BUCKETS_ROOT, CLAMP_LIMIT_BYTES, CLAUDE_CODE_OAUTH_SOURCE, CONTINUE_PROMPT_SOURCE, DEAD_SESSION_STATUSES, DEFAULT_ALWAYS_ON_TOOLS, DEFAULT_BUCKET, DEFAULT_CONTINUE_PROMPT, DEFAULT_HOST_LOAD_BUDGET_MS, DEFAULT_HOST_LOAD_THRESHOLDS, DEFAULT_MODEL_ROLES, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_TTL_MS, DEFAULT_WORKTREE_ISOLATION, DEFAULT_WORKTREE_PROVISION_CONCURRENCY, DEVICE_PROMPT_PATH_PREFIX, EVENT_REGISTRY, FOLLOW_EVENTS, GC_REAPABLE_STATES, GITHUB_SCHEME, HOSTS_VERSION, HOST_HANDSHAKE_REMEDIATION_HINT, HOST_SCOPE_HEADER, HarnessPresetValidationError, INBOUND_PROVIDERS, INDEX_DEFAULT_LIMIT, INDEX_MAX_OUTPUT, INDEX_MAX_PROMPT, INDEX_TAIL_BYTES, JOIN_TOKENS_VERSION, LEGACY_SESSIONS_FILE, MAX_ATTEMPTS, MAX_AUTO_CONTINUE_ATTEMPTS, MAX_MESSAGE_DATA_BYTES, MAX_TTL_MS, MCP_APP_BRIDGE_SCRIPT, MESSAGE_KINDS, MESSAGE_PREAMBLE, MESSAGE_TAG, MESSAGE_URGENCIES, MIN_TTL_MS, MODEL_ROLE_REF_PREFIX, McpEventsError, NO_OUTPUT_STALL_TURN_ERROR, export_PAIRINGS_VERSION as PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, export_PROVIDER_ENV_VARS as PROVIDER_ENV_VARS, PrLookupError, ResumeDisabledError, SESSION_END_REASONS, SESSION_ID_ENV, SIGN_NAMESPACE, SessionRetiredError, SsrfFetchError, SubscriptionSourceError, TASK_STATUSES, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, WORKTREE_PROVISION_CONCURRENCY_ENV, activityCounts, addHarnessPreset, allowedSignersLine, appendConversationRecord, attachSandbox, backfillSessionIndexes, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogModels, buildCatalogProviderModels, buildHostLoadReport, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, buildSessionRecap, canonicalForModeId, canonicalizeJcs, challengeCacheSize, challengeReasonForSsrf, claudeProjectSlug, collectGcCandidates, collectHostSample, compactOutcome, composeMode, composeSessionObservers, composedFromRangeSha, computeHostWarnings, computeRefreshBefore, continueInterruptedSessions, continueSkipReason, conversationIndexPath, createActivityProjector, createDaemonReviewerHost, createDefaultHostProbes, createDeviceRegistry, createFileStepCache, createGateway, createHostLoadService, createHostRegistry, createInboundEndpointStore, createJoinTokenRegistry, createOrchestratorInjector, createOrchestratorMcpServerFactory, export_createPairingRegistry as createPairingRegistry, createPrProvenanceReconciler, createProcessStatsService, createReviewLaneExecutor, createReviewLedger, createReviewPackLoader, createReviewRunner, createScopeTokenRegistry, createSentinelWebhookOutbox, createSessionFollowStore, createSessionMessage, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, createWorkspaceFs, credentialFingerprint, daemonBearerPrincipal, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, decodeWhsecSecret, decomposeMode, defaultBrowserAdapterIds, defaultBrowserAdapterResolution, defaultReviewKeysDir, defaultReviewLedgerRoot, defaultReviewPackCacheDir, defaultTranscriptBaseDir, defineBraveSearchHttpDriver, defineSerperHttpDriver, deleteUserPreset, deliverEventEnvelope, deliveryBackoffDelay, deriveIndexFromTranscript, deriveSessionOutcome, deriveSessionUsage, describeOwner, encodeWhsecSecret, enrichRollupWithProviderQuota, enrichWithRemainingQuota, ensureReviewSigningKey, envelopeClampedBytes, escapeHumanPrompt, escapeMessageBody, evaluateCostBudget, eventsList, eventsSubscribe, eventsUnsubscribe, execGh, extractHelpSection, fetchHostTurns, fetchPrStatus, fileConversationStore, fileExists3 as fileExists, filterActivities, findComposeCandidate, findConversationRecord, findEventDefinition, findNativeMode, findPrForCommit, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getHostLoadService, getMcpCredentialDeps, getProcessStatsService, export_getProviderKey as getProviderKey, getToolHelp, getUserPreset, githubRepoOf, harnessPresetsPath, hostPlaceholders, hostRecordToMirrorRecord, indexEntryFromDescriptor, injectMcpAppBridge, export_injectProviderKeysIntoEnv as injectProviderKeysIntoEnv, isAgentCliAuthConfigured, isAutomatedPromptSource, isClosedTaskStatus, isKnownSessionEndReason, isMessageAllowed, isNoSessionPromptFailure, isProviderLimitError, isPubliclyRoutable, isRetired, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listModelRoles, listPresets, listToolHelpTopics, listUserPresets, loadHarnessPresets, export_loadProviders as loadProviders, loadQuotaStore, loadUserPresets, loadWorkspaceModelRoles, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeRestartForRouting, makeSandboxCredsStore, makeSandboxResolver, matchesMessageFilter, matchesSessionQuery, measureTool, measureToolList, messageFrom, migrateLegacySessionsFile, migrationMarkerPath, mintMessageId, mirrorCursorForSession, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeCallbackUrl, normalizeCommand, normalizeInbound, normalizeModeId, normalizeRemote, normalizeSkillsOption, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseDuration, parseModelRoleRef, parsePrUrl, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, pickUsageDetail, policyToActivities, policyWatchesSession, prHeadSha, prToActivities, projectBrowserTools, projectSessionUsage, promptDeviceSession, promptHostSession, export_providerEnvVar as providerEnvVar, export_providersPath as providersPath, readAllSessionIndexes, readConversationIndex, readDaemonRegistry, readHostsSnapshot, export_readPairingsSnapshot as readPairingsSnapshot, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readSessionIndex, readTranscriptTail, readUsageSnapshots, reapGcEntry, reapOrphanedDescendants, reconcileSandboxLedger, recordProfileQuota, recordSandboxBoot, recordSandboxLiveness, recordSandboxOrigin, recordSandboxState, registerBrainTools, registerBuiltinRoutes, registerDeviceTools, registerPairingTools, registerReviewTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, export_removeProviderKey as removeProviderKey, removeSandboxLedgerEntry, renderInboxDigest, renderSessionMessage, renderSessionMessages, repoSlug, resetChallengeCacheForTests, resolveAuthSpec, resolveBucketSlug, resolveDeferredToolsGatewayOption, resolveDevicePromptMapping, resolveEffectiveLlmEndpointFlag, resolveModelRole, resolveNativeLink, resolvePosture, resolvePrincipal, resolveRelation, resolveReuseFromLedger, resolveReviewerPreset, resolveSpawnDefaults, resolveSubscriptionCredential, resolveSuccessor, rollupSessionSubtree, rollupUsage, runContinueOnBootPass, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runShellLane, runStallWatchdogPass, sandboxLedgerPath, sanitizeLabel, saveUserPreset, searchSessionIndexes, seedWalkForTranscript, serializeEnvelope, sessionEventsPath, sessionIndexPath, sessionPrincipal, sessionTranscriptDir, setDefaultPreset, setDefaultSessionsBaseDir, setEgressDispatcherForTests, setMcpCredentialDeps, export_setProviderKey as setProviderKey, signAttestation, signWebhook, ssrfFetch, subscriptionId, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, syncDeviceMirror, tenantScope, toMcpEvent, toWebhookEnvelope, toWorktreeStatusView, trackWorktreeProvision, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, untilForTtl, updateHarnessPreset, upsertSandboxLedger, userPresetsPath, validateAgainstInputSchema, verifyCallback, verifyInboundSignature, verifySignedAttestation, webSearchTool, webhookRequestId, wireSessionFollow, withPr, withPrStatus, workflowToActivities, writeDaemonRegistryEntry, writeSessionIndex };
+export { AnthropicRemainingQuotaReader, AuthResolutionError, BUCKETS_ROOT, CLAMP_LIMIT_BYTES, CLAUDE_CODE_OAUTH_SOURCE, CONTINUE_PROMPT_SOURCE, DEAD_SESSION_STATUSES, DEFAULT_ALWAYS_ON_TOOLS, DEFAULT_BUCKET, DEFAULT_CONTINUE_PROMPT, DEFAULT_HOST_LOAD_BUDGET_MS, DEFAULT_HOST_LOAD_THRESHOLDS, DEFAULT_MODEL_ROLES, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_TTL_MS, DEFAULT_WORKTREE_ISOLATION, DEFAULT_WORKTREE_PROVISION_CONCURRENCY, DEVICE_PROMPT_PATH_PREFIX, EVENT_REGISTRY, FOLLOW_EVENTS, GC_REAPABLE_STATES, GITHUB_SCHEME, HOSTS_VERSION, HOST_HANDSHAKE_REMEDIATION_HINT, HOST_SCOPE_HEADER, HarnessPresetValidationError, INBOUND_PROVIDERS, INDEX_DEFAULT_LIMIT, INDEX_MAX_OUTPUT, INDEX_MAX_PROMPT, INDEX_TAIL_BYTES, JOIN_TOKENS_VERSION, LEGACY_SESSIONS_FILE, MAX_ATTEMPTS, MAX_AUTO_CONTINUE_ATTEMPTS, MAX_MESSAGE_DATA_BYTES, MAX_TTL_MS, MCP_APP_BRIDGE_SCRIPT, MESSAGE_KINDS, MESSAGE_PREAMBLE, MESSAGE_TAG, MESSAGE_URGENCIES, MIN_TTL_MS, MODEL_ROLE_REF_PREFIX, McpEventsError, NO_OUTPUT_STALL_TURN_ERROR, export_PAIRINGS_VERSION as PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, export_PROVIDER_ENV_VARS as PROVIDER_ENV_VARS, PrLookupError, ResumeDisabledError, SESSION_END_REASONS, SESSION_ID_ENV, SIGN_NAMESPACE, SentinelBackingExpiredError, SessionRetiredError, SsrfFetchError, SubscriptionSourceError, TASK_STATUSES, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, WORKTREE_PROVISION_CONCURRENCY_ENV, activityCounts, addHarnessPreset, allowedSignersLine, appendConversationRecord, attachSandbox, backfillSessionIndexes, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogModels, buildCatalogProviderModels, buildHostLoadReport, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, buildSessionRecap, canonicalForModeId, canonicalizeJcs, challengeCacheSize, challengeReasonForSsrf, claudeProjectSlug, collectGcCandidates, collectHostSample, compactOutcome, composeMode, composeSessionObservers, composedFromRangeSha, computeHostWarnings, computeRefreshBefore, continueInterruptedSessions, continueSkipReason, conversationIndexPath, createActivityProjector, createDaemonReviewerHost, createDefaultHostProbes, createDeviceRegistry, createFileStepCache, createGateway, createHostLoadService, createHostRegistry, createInboundEndpointStore, createJoinTokenRegistry, createOrchestratorInjector, createOrchestratorMcpServerFactory, export_createPairingRegistry as createPairingRegistry, createPrProvenanceReconciler, createProcessStatsService, createReviewLaneExecutor, createReviewLedger, createReviewPackLoader, createReviewRunner, createScopeTokenRegistry, createSentinelWebhookOutbox, createSessionFollowStore, createSessionMessage, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, createWorkspaceFs, credentialFingerprint, daemonBearerPrincipal, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, decodeWhsecSecret, decomposeMode, defaultBrowserAdapterIds, defaultBrowserAdapterResolution, defaultReviewKeysDir, defaultReviewLedgerRoot, defaultReviewPackCacheDir, defaultTranscriptBaseDir, defineBraveSearchHttpDriver, defineSerperHttpDriver, deleteUserPreset, deliverEventEnvelope, deliveryBackoffDelay, deriveIndexFromTranscript, deriveSessionOutcome, deriveSessionUsage, describeOwner, encodeWhsecSecret, enrichRollupWithProviderQuota, enrichWithRemainingQuota, ensureReviewSigningKey, envelopeClampedBytes, escapeHumanPrompt, escapeMessageBody, evaluateCostBudget, eventsList, eventsSubscribe, eventsUnsubscribe, execGh, extractHelpSection, fetchHostTurns, fetchPrStatus, fileConversationStore, fileExists3 as fileExists, filterActivities, findComposeCandidate, findConversationRecord, findEventDefinition, findNativeMode, findPrForCommit, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getHostLoadService, getMcpCredentialDeps, getProcessStatsService, export_getProviderKey as getProviderKey, getToolHelp, getUserPreset, githubRepoOf, harnessPresetsPath, hostPlaceholders, hostRecordToMirrorRecord, indexEntryFromDescriptor, injectMcpAppBridge, export_injectProviderKeysIntoEnv as injectProviderKeysIntoEnv, isAgentCliAuthConfigured, isAutomatedPromptSource, isClosedTaskStatus, isKnownSessionEndReason, isMessageAllowed, isNoSessionPromptFailure, isProviderLimitError, isPubliclyRoutable, isRetired, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listModelRoles, listPresets, listToolHelpTopics, listUserPresets, loadHarnessPresets, export_loadProviders as loadProviders, loadQuotaStore, loadUserPresets, loadWorkspaceModelRoles, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeRestartForRouting, makeSandboxCredsStore, makeSandboxResolver, matchesMessageFilter, matchesSessionQuery, measureTool, measureToolList, messageFrom, migrateLegacySessionsFile, migrationMarkerPath, mintMessageId, mirrorCursorForSession, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeCallbackUrl, normalizeCommand, normalizeInbound, normalizeModeId, normalizeRemote, normalizeSkillsOption, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseDuration, parseModelRoleRef, parsePrUrl, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, pickUsageDetail, policyToActivities, policyWatchesSession, prHeadSha, prToActivities, projectBrowserTools, projectSessionUsage, promptDeviceSession, promptHostSession, export_providerEnvVar as providerEnvVar, export_providersPath as providersPath, readAllSessionIndexes, readConversationIndex, readDaemonRegistry, readHostsSnapshot, export_readPairingsSnapshot as readPairingsSnapshot, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readSessionIndex, readTranscriptTail, readUsageSnapshots, reapGcEntry, reapOrphanedDescendants, reconcileSandboxLedger, recordProfileQuota, recordSandboxBoot, recordSandboxLiveness, recordSandboxOrigin, recordSandboxState, registerBrainTools, registerBuiltinRoutes, registerDeviceTools, registerPairingTools, registerReviewTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, export_removeProviderKey as removeProviderKey, removeSandboxLedgerEntry, renderInboxDigest, renderSessionMessage, renderSessionMessages, repoSlug, resetChallengeCacheForTests, resolveAuthSpec, resolveBucketSlug, resolveDeferredToolsGatewayOption, resolveDevicePromptMapping, resolveEffectiveLlmEndpointFlag, resolveModelRole, resolveNativeLink, resolvePosture, resolvePrincipal, resolveRelation, resolveReuseFromLedger, resolveReviewerPreset, resolveSpawnDefaults, resolveSubscriptionCredential, resolveSuccessor, rollupSessionSubtree, rollupUsage, runContinueOnBootPass, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runShellLane, runStallWatchdogPass, sandboxLedgerPath, sanitizeLabel, saveUserPreset, searchSessionIndexes, seedWalkForTranscript, serializeEnvelope, sessionEventsPath, sessionIndexPath, sessionPrincipal, sessionTranscriptDir, setDefaultPreset, setDefaultSessionsBaseDir, setEgressDispatcherForTests, setMcpCredentialDeps, export_setProviderKey as setProviderKey, signAttestation, signWebhook, ssrfFetch, subscriptionId, summarizeBranchGcApply, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, syncDeviceMirror, tenantScope, toMcpEvent, toWebhookEnvelope, toWorktreeStatusView, trackWorktreeProvision, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, untilForTtl, updateHarnessPreset, upsertSandboxLedger, userPresetsPath, validateAgainstInputSchema, verifyCallback, verifyInboundSignature, verifySignedAttestation, webSearchTool, webhookRequestId, wireSessionFollow, withBranchGcApplySummary, withPr, withPrStatus, workflowToActivities, writeDaemonRegistryEntry, writeSessionIndex };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map