@agentproto/runtime 5.14.0 → 5.15.0

package/dist/index.mjs

@@ -8940,7 +8940,7 @@ function boundaryMeta(b) {
   return { [APP_BOUNDARY_META_KEY]: encodeAppBoundary(b) };
 }
 function inAny(canon, zones) {
-  return zones.some((z61) => isPathWithin(canon, canonicalizePath(z61)));
+  return zones.some((z62) => isPathWithin(canon, canonicalizePath(z62)));
 }
 function resolveBoundaryPath(b, input, mode) {
   if (typeof input !== "string" || input.length === 0) {
@@ -26328,6 +26328,163 @@ async function processTreeRss(rootPids, exec = defaultPsExecutor) {
   }
   return result;
 }
+var SessionListFilterError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SessionListFilterError";
+  }
+};
+var SESSION_LIST_FILTER_KEYS = [
+  "q",
+  "excludeLabelPrefix",
+  "excludeLabels",
+  "excludeKinds",
+  "rootOnly",
+  "parentSessionId",
+  "updatedSince",
+  "startedSince",
+  "excludeNoise"
+];
+function pickSessionListFilters(input) {
+  const out = {};
+  for (const key of SESSION_LIST_FILTER_KEYS) {
+    if (input[key] !== void 0) out[key] = input[key];
+  }
+  return out;
+}
+var TIME_UNIT_MS = {
+  s: 1e3,
+  m: 6e4,
+  h: 36e5,
+  d: 864e5,
+  w: 6048e5
+};
+var RELATIVE_RE = /^(\d+(?:\.\d+)?)\s*([smhdw])$/i;
+function parseTimeBound(raw, field, now = Date.now()) {
+  const text13 = raw.trim();
+  const rel = RELATIVE_RE.exec(text13);
+  if (rel) {
+    const n = Number(rel[1]);
+    const unit = TIME_UNIT_MS[rel[2].toLowerCase()];
+    return now - n * unit;
+  }
+  const abs = text13 === "" ? Number.NaN : Date.parse(text13);
+  if (Number.isNaN(abs)) {
+    throw new SessionListFilterError(
+      `${field} must be an ISO-8601 time or a relative age like "30m", "24h", "7d", "2w"; got ${JSON.stringify(raw)}.`
+    );
+  }
+  return abs;
+}
+function toList(v) {
+  if (v === void 0) return [];
+  const parts = typeof v === "string" ? [v] : [...v];
+  return parts.flatMap((p) => p.split(",")).map((s) => s.trim()).filter((s) => s.length > 0);
+}
+var REVIEW_LABEL_PREFIX = "review:";
+var WORKFLOW_LABEL_PREFIX = "wf:";
+var NOISE_ORIGINS = /* @__PURE__ */ new Set(["review", "workflow"]);
+function isNoiseSession(s) {
+  const label = s.label ?? "";
+  if (label.startsWith(REVIEW_LABEL_PREFIX) || label.startsWith(WORKFLOW_LABEL_PREFIX)) return true;
+  if (s.origin !== void 0 && NOISE_ORIGINS.has(s.origin)) return true;
+  const ended = s.status === "exited" || s.status === "killed";
+  if (ended && (s.kind === "command" || s.kind === "terminal" && !s.adapterSlug)) return true;
+  return false;
+}
+function sessionActivityMs(s) {
+  const ms = Date.parse(s.lastActivityAt ?? s.startedAt);
+  return Number.isNaN(ms) ? 0 : ms;
+}
+function sortNewestActivityFirst(rows) {
+  return [...rows].sort((a, b) => sessionActivityMs(b) - sessionActivityMs(a) || a.id.localeCompare(b.id));
+}
+function hasSessionListFilters(input) {
+  return input.q !== void 0 && input.q.trim() !== "" || toList(input.excludeLabelPrefix).length > 0 || toList(input.excludeLabels).length > 0 || toList(input.excludeKinds).length > 0 || input.rootOnly === true || input.parentSessionId !== void 0 && input.parentSessionId !== "" || input.updatedSince !== void 0 && input.updatedSince.trim() !== "" || input.startedSince !== void 0 && input.startedSince.trim() !== "" || input.excludeNoise === true;
+}
+function compileSessionListFilters(input, now = Date.now()) {
+  const q = input.q?.trim().toLowerCase() ?? "";
+  const prefixes = toList(input.excludeLabelPrefix);
+  const labels = new Set(toList(input.excludeLabels));
+  const kinds = new Set(toList(input.excludeKinds));
+  const parentId = input.parentSessionId && input.parentSessionId !== "" ? input.parentSessionId : void 0;
+  const updatedSince = input.updatedSince && input.updatedSince.trim() !== "" ? parseTimeBound(input.updatedSince, "updatedSince", now) : void 0;
+  const startedSince = input.startedSince && input.startedSince.trim() !== "" ? parseTimeBound(input.startedSince, "startedSince", now) : void 0;
+  return (s) => {
+    if (q) {
+      const hit = [s.id, s.name, s.label, s.title, s.cwd].some((f) => f !== void 0 && f.toLowerCase().includes(q));
+      if (!hit) return false;
+    }
+    if (kinds.has(s.kind)) return false;
+    const label = s.label;
+    if (label !== void 0) {
+      if (labels.has(label)) return false;
+      if (prefixes.some((p) => label.startsWith(p))) return false;
+    }
+    if (input.rootOnly === true && s.parentSessionId) return false;
+    if (parentId !== void 0 && s.parentSessionId !== parentId) return false;
+    if (updatedSince !== void 0 && sessionActivityMs(s) < updatedSince) return false;
+    if (startedSince !== void 0) {
+      const started = Date.parse(s.startedAt);
+      if (Number.isNaN(started) || started < startedSince) return false;
+    }
+    if (input.excludeNoise === true && isNoiseSession(s)) return false;
+    return true;
+  };
+}
+function applySessionListFilters(rows, input, now = Date.now()) {
+  if (!hasSessionListFilters(input)) return [...rows];
+  return rows.filter(compileSessionListFilters(input, now));
+}
+function parseSessionListFilterParams(params) {
+  const flag = (k) => {
+    const v = params.get(k);
+    return v === null ? void 0 : v === "true" || v === "1";
+  };
+  const list = (k) => {
+    const all = params.getAll(k);
+    return all.length > 0 ? toList(all) : void 0;
+  };
+  const str3 = (k) => {
+    const v = params.get(k);
+    return v === null || v === "" ? void 0 : v;
+  };
+  const out = {};
+  const q = str3("q");
+  if (q !== void 0) out.q = q;
+  const prefix = list("excludeLabelPrefix");
+  if (prefix) out.excludeLabelPrefix = prefix;
+  const labels = list("excludeLabels");
+  if (labels) out.excludeLabels = labels;
+  const kinds = list("excludeKinds");
+  if (kinds) out.excludeKinds = kinds;
+  const rootOnly = flag("rootOnly");
+  if (rootOnly !== void 0) out.rootOnly = rootOnly;
+  const parent = str3("parentSessionId");
+  if (parent !== void 0) out.parentSessionId = parent;
+  const updatedSince = str3("updatedSince");
+  if (updatedSince !== void 0) out.updatedSince = updatedSince;
+  const startedSince = str3("startedSince");
+  if (startedSince !== void 0) out.startedSince = startedSince;
+  const noise = flag("excludeNoise");
+  if (noise !== void 0) out.excludeNoise = noise;
+  return out;
+}
+var mcpBool2 = z.preprocess((v) => v === "true" ? true : v === "false" ? false : v, z.boolean());
+var stringOrList = z.union([z.string(), z.array(z.string())]);
+var sessionListFilterShape = {
+  q: z.string().optional().describe("Case-insensitive substring over id, name, label, title, cwd."),
+  excludeLabelPrefix: stringOrList.optional().describe("Drop labels starting with any of these, e.g. ['review:','wf:']."),
+  excludeLabels: stringOrList.optional().describe("Drop labels exactly equal to any of these (as session_follow exclude.labels)."),
+  excludeKinds: stringOrList.optional().describe("Drop kinds: terminal | agent-cli | command."),
+  rootOnly: mcpBool2.optional().describe("Only sessions with no parent."),
+  parentSessionId: z.string().optional().describe("Only direct children of this session (id or name)."),
+  updatedSince: z.string().optional().describe("Activity at/after: ISO time or age like '30m','24h','7d'."),
+  startedSince: z.string().optional().describe("Started at/after: ISO time or age like '30m','24h','7d'."),
+  excludeNoise: mcpBool2.optional().describe(
+    'Drop review:*/wf:* sessions and ended command/plain-terminal runs. Details: tool_help {name:"session_list", topic:"excludeNoise"}'
+  )
+};
 
 // src/session-tools.ts
 init_transcript_writer();
@@ -28332,7 +28489,7 @@ function buildSessionTree(sessions) {
   });
   return sessions.filter((s) => !s.parentSessionId || !idSet.has(s.parentSessionId)).sort((a, b) => a.startedAt.localeCompare(b.startedAt)).map(toNode);
 }
-var mcpBool2 = z.preprocess(
+var mcpBool3 = z.preprocess(
   (v) => v === "true" ? true : v === "false" ? false : v,
   z.boolean()
 );
@@ -28568,28 +28725,21 @@ function registerSessionTools(rawServer, opts) {
   };
   registerAgentTools(server, opts);
   const sessionListSchema = z.object({
-    kind: z.enum(["terminal", "agent-cli", "command", "all"]).optional().describe(
-      "Filter by session kind. `all` (default) returns every live-able kind (terminal + agent-cli) but excludes `command` unless `includeCommands` is set. Use `terminal` to list only PTY sessions, `agent-cli` for structured ACP agents, or `command` to list only raw shell-command runs."
-    ),
-    includeCommands: z.boolean().optional().describe(
-      "When true and `kind` is unset/`all`, also include `kind:'command'` rows in the result (they're excluded by default \u2014 see `kind`). No effect when `kind` is set explicitly. Default false."
-    ),
+    kind: z.enum(["terminal", "agent-cli", "command", "all"]).optional().describe("Filter by kind. `all` (default) = terminal + agent-cli, without `command` unless `includeCommands`."),
+    includeCommands: z.boolean().optional().describe("With kind unset/`all`, also include `kind:'command'` rows. Default false."),
     onlyAlive: z.boolean().optional().describe("When true, only running/starting sessions. Default false."),
     status: z.enum(["starting", "running", "exited", "killed", "error"]).optional().describe("Filter by exact status (overrides onlyAlive)."),
-    includeArchived: z.boolean().optional().describe(
-      "When true, also include archived sessions (hidden from every other view by `session_archive`). Default false."
-    ),
-    withMemory: z.boolean().optional().describe(
-      "When true, add `rssBytes` (summed RSS in bytes of the process tree, via `ps`) to every live session that has a pid. Default false \u2014 a distinct opt-in from `full`/`compact` since it costs one `ps` spawn per call; omitted otherwise, so a plain listing never pays for it."
-    ),
+    includeArchived: z.boolean().optional().describe("Also include archived sessions. Default false."),
+    withMemory: z.boolean().optional().describe("Add `rssBytes` (process-tree RSS) to live sessions with a pid; one `ps` per call. Default false."),
     stats: statsParamSchema.describe(
-      'Resource stats per live session - process-tree RSS, %CPU, process count and the top commands by RSS (normalized: `pnpm install`, `vitest`, `tsc`, `git`, \u2026), under each row\'s `stats`. `true` = summary; `"full"` = also every process (pid, ppid, command, RSS, CPU, elapsed). Sampled on demand and cached ~3s; rows with no live process carry no `stats`. Use `session_stats` for the host-level view (daemon / provisioning / orphan buckets, load, free memory).'
+      'Per-live-session RSS, %CPU, process count and top commands under `stats`; `true` = summary, `"full"` = every process. Cached ~3s. Host-level view: `session_stats`.'
     ),
+    ...sessionListFilterShape,
     ...pageParamsShape
   });
   registerBuiltinTool(server, {
     id: "session_list",
-    description: "List sessions tracked by the daemon \u2014 agent-CLI sessions (claude-code, hermes, \u2026) and terminal/PTY sessions (claude TUI, bash, \u2026). Each entry includes `kind`, `pty` (true for real PTYs), `name` (when set at spawn), `status`, `command`, age + exit code. Use this when you need to know what's already running before spawning anything new, or to discover a session id by name. COMPACT BY DEFAULT: each entry is a slim projection (id/kind/name/label/status/command/cwd/model/busy/awaitingInput/blockedOn/lastActivityAt/depth/parentSessionId/continuedFrom/lastTurnErroredAt/interrupted); `interrupted: true` marks a session a daemon restart cut off mid-turn (see `session_continue_interrupted`); pass `full: true` (or `compact: false`) for the complete, unprojected per-session record. Raw shell-command runs (`kind:'command'`) are a log, not a resumable session, so they're excluded from the default view \u2014 pass `kind:'command'` or `includeCommands:true` to see them, or use `command_list`.",
+    description: "List sessions tracked by the daemon (agent-CLI and terminal/PTY). Use it to see what's already running before spawning, or to find a session id by name. NARROW BEFORE YOU READ: hundreds of sessions are mostly noise and without `limit` all come back. Filter (`q`, `excludeNoise`, `rootOnly`, `updatedSince`, \u2026) and/or pass `limit`; rows are newest-activity first, `total` is the filtered count. E.g. `{q:'X', excludeNoise:true, limit:10}`. Rows are COMPACT by default (`fields:[\u2026]` picks keys, `full:true` returns everything). Detail: tool_help {name:\"session_list\"}; ranked text search: `session_search`.",
     inputSchema: sessionListSchema,
     handler: async (input) => {
       let rows = registry.list({ includeArchived: true });
@@ -28612,6 +28762,12 @@ function registerSessionTools(rawServer, opts) {
           (s) => s.status === "running" || s.status === "starting"
         );
       }
+      const { parentSessionId, ...filterRest } = pickSessionListFilters(input);
+      rows = applySessionListFilters(rows, {
+        ...filterRest,
+        ...parentSessionId ? { parentSessionId: registry.findByIdOrName(parentSessionId)?.id ?? parentSessionId } : {}
+      });
+      rows = sortNewestActivityFirst(rows);
       if (input.withMemory) {
         const live = rows.filter(
           (s) => typeof s.pid === "number" && (s.status === "running" || s.status === "starting")
@@ -28636,11 +28792,13 @@ function registerSessionTools(rawServer, opts) {
       return rows.map(publicSessionDescriptor);
     },
     transformers: [
+      catchErrors(),
       paginated({
         project: compactSessionItem,
         keyOf: (s) => s.id,
         maxLimit: 200,
-        itemKey: "sessions"
+        itemKey: "sessions",
+        includeTotal: true
       })
     ]
   });
@@ -28710,7 +28868,7 @@ function registerSessionTools(rawServer, opts) {
     description: 'Resource usage per session, sampled from the OS process table: RSS bytes, %CPU, process count and top commands by RSS for every live session, sorted by RSS (each row labelled with the session\'s `label`/`name`), plus `daemon` (the daemon process + its own children), `provisioning` (worktree setup work such as `pnpm install` not yet attached to a session, with `inFlight` provisions), `orphans` (processes that look agentproto-owned but belong to no live session - reported only, never killed), `totals`, and `host` (load average, free/total memory). `detail:"full"` adds every process (pid, command, RSS, CPU, elapsed) per row. Cached ~3s; `fresh:true` forces a new sample. A subtree-scoped caller sees only its own sessions (no daemon/provisioning/orphan buckets).',
     inputSchema: z.object({
       detail: z.enum(["summary", "full"]).optional().describe('Default "summary".'),
-      fresh: mcpBool2.optional().describe("Bypass the ~3s cache and sample now.")
+      fresh: mcpBool3.optional().describe("Bypass the ~3s cache and sample now.")
     }),
     handler: async (input) => {
       const all = registry.list({ includeArchived: true });
@@ -28730,7 +28888,7 @@ function registerSessionTools(rawServer, opts) {
     description: 'Host-level load report: load average vs core count, CPU user/sys/idle, RAM (used/wired/compressor/free) and swap, per-disk transfers/s + MB/s, the top 10 processes by CPU and by memory footprint (compressed pages included on macOS) each tagged with its owning session (`session`/`daemon`/`provisioning`/`orphan`/`system`/`other`), and `warnings` (swap > 50%, orphaned processes older than 30 min that are busy or serving, deleted-cwd processes, filesystem-wide `find`/`bfs`/`du` scans, several servers on one port, load > 4x cores). `detail:"full"` adds a per-session rollup and every process. Bounded to ~2s: a probe that is slow or unavailable is named in `partial` and the rest still ships (raise `budgetMs` to give the macOS `top` footprint probe longer on a saturated host). Cached ~2s; `fresh:true` resamples. Never needs sudo. A subtree-scoped caller sees host metrics plus only its own sessions\' processes.',
     inputSchema: z.object({
       detail: z.enum(["summary", "full"]).optional().describe('Default "summary".'),
-      fresh: mcpBool2.optional().describe("Bypass the ~2s cache and sample now."),
+      fresh: mcpBool3.optional().describe("Bypass the ~2s cache and sample now."),
       budgetMs: z.coerce.number().int().min(300).max(6e4).optional().describe("Time budget for the sample in ms (default 1900).")
     }),
     handler: async (input) => {
@@ -28749,7 +28907,7 @@ function registerSessionTools(rawServer, opts) {
     "session_continue_interrupted",
     "List the sessions the LAST daemon restart cut off mid-turn (`interrupted: true`) and \u2014 with `dryRun: false` \u2014 send each a one-shot \"continue\" prompt (the interrupted prompt itself is never re-run). Goes through the normal prompt path, so a dead-but-resumable session resumes in place first. Skips sessions that aren't interrupted, were interrupted by an older restart, aren't resumable, hit the resume attempt cap, are already busy, or whose cwd no longer exists. Returns a per-session outcome (`eligible` on a dry run, else `sent`/`skipped` with a reason/`failed`).",
     {
-      dryRun: mcpBool2.optional().describe("Default true: only report what would be sent. Pass false to send."),
+      dryRun: mcpBool3.optional().describe("Default true: only report what would be sent. Pass false to send."),
       ids: z.array(z.string().min(1)).optional().describe(
         "Restrict to these sessions (id or name). Omitted \u21D2 every session interrupted by the last restart."
       ),
@@ -30067,7 +30225,7 @@ function registerSessionTools(rawServer, opts) {
     workspaceSlug: z.string().optional().describe(
       "Workspace slug from `agentproto workspace list`. Resolves the repo root via the active workspace when omitted."
     ),
-    openOnly: mcpBool2.optional().describe(
+    openOnly: mcpBool3.optional().describe(
       "When true, only return worktrees whose `pr.state` is `open`. Default false."
     ),
     sessionId: z.string().optional().describe(
@@ -30118,19 +30276,19 @@ function registerSessionTools(rawServer, opts) {
       workspaceSlug: z.string().optional().describe(
         "Workspace slug from `agentproto workspace list`. Resolves the repo root via the active workspace when omitted."
       ),
-      apply: mcpBool2.optional().describe(
+      apply: mcpBool3.optional().describe(
         "When true, EXECUTE the plan (reclaim/salvage). Default false \u2014 a dry run that returns the plan and mutates nothing."
       ),
-      salvageDirty: mcpBool2.optional().describe(
+      salvageDirty: mcpBool3.optional().describe(
         "When true, archive (snapshot-then-remove) every `salvage`-class worktree during `apply`. Default false \u2014 salvage entries are left untouched. Ignored on a dry run."
       ),
-      includeDetached: mcpBool2.optional().describe(
+      includeDetached: mcpBool3.optional().describe(
         "When true, a clean, idle detached worktree is reclaimed instead of held. Default false. This is the only flag that can promote an entry toward reclaim; no flag ever weakens a hold otherwise."
       ),
       noisePaths: z.array(z.string()).optional().describe(
         "Worktree-relative paths whose dirt is known noise (a worktree dirty ONLY on these counts as clean). Default `.opencode/package-lock.json`; pass [] to disable."
       ),
-      wait: mcpBool2.optional().describe(
+      wait: mcpBool3.optional().describe(
         "false \u21D2 return a jobId immediately; poll `worktree_gc_status`. true \u21D2 block until the gc finishes (no background fallback). Default: wait up to `waitMs`, then fall back to background."
       ),
       waitMs: mcpNumber.optional().describe(
@@ -30224,12 +30382,12 @@ function registerSessionTools(rawServer, opts) {
       base: z.string().optional().describe("Base ref the work must be in. Default `origin/main`."),
       scopes: z.array(branchGcKind).optional().describe("Ref kinds to consider: local, remote, orphan. Default all three for a plan; REQUIRED for apply."),
       minAgeDays: mcpNumber.optional().describe("Unmerged refs younger than this many days are held. Default 3."),
-      includeReviewed: mcpBool2.optional().describe(
+      includeReviewed: mcpBool3.optional().describe(
         "When true, a `review` ref whose stored verdict (branch_gc_verdict) has gate.agree=true for the SAME tip sha becomes `reclaim` (`reviewed`). Default false."
       ),
       anchor: z.string().optional().describe("Explicit anchor commit for a re-rooted base. Auto-detected when omitted."),
-      apply: mcpBool2.optional().describe("When true, EXECUTE the plan for `scopes`. Default false \u2014 a dry run."),
-      wait: mcpBool2.optional().describe("Block until the gc finishes (default true \u2014 today's behaviour). false \u21D2 return a jobId immediately; poll `branch_gc_status`."),
+      apply: mcpBool3.optional().describe("When true, EXECUTE the plan for `scopes`. Default false \u2014 a dry run."),
+      wait: mcpBool3.optional().describe("Block until the gc finishes (default true \u2014 today's behaviour). false \u21D2 return a jobId immediately; poll `branch_gc_status`."),
       waitMs: mcpNumber.optional().describe('Block at most this many milliseconds, then fall back to background: returns `{ jobId, status: "running" }` to poll with `branch_gc_status`. Only meaningful with the default `wait: true`.')
     },
     async (input) => {
@@ -30289,7 +30447,7 @@ function registerSessionTools(rawServer, opts) {
     'Poll a branch_gc run started with `wait: false` (or one that fell back to the background via `waitMs`). While running: status + elapsed time. When done: the plan\'s own summary (plus, for an apply, `applySummary` \u2014 deleted/skipped/failed per scope and the restore log path) and the path of the full result saved on disk (`resultPath`). The full result is too big to return whole, so `full: true` (or any of `section`, `classes`, `scopes`, `results`, `limit`, `cursor`) returns ONE filtered page of it: `result` (summary + plan metadata + the selected list) and `page { section, total, returned, nextCursor }` \u2014 default 100 rows, pass `nextCursor` back as `cursor` for the next page. Use `classes: ["reclaim"]` to see only what an apply would delete. While running the view carries `followUp.pollAfterMs` (poll every 30 s). When failed: the error.',
     {
       jobId: z.string().describe("Job id returned by `branch_gc` (`bgc_\u2026`)."),
-      full: mcpBool2.optional().describe("Include a filtered/paged slice of the full result (see description). Implied by any other slice param. Default false."),
+      full: mcpBool3.optional().describe("Include a filtered/paged slice of the full result (see description). Implied by any other slice param. Default false."),
       section: z.enum(["entries", "outcomes"]).optional().describe("Which list to return: plan `entries` or apply `outcomes`. Default `entries` for a plan, `outcomes` for an apply."),
       classes: z.array(z.enum(["reclaim", "review", "hold"])).optional().describe('Entries only: keep these classes (e.g. ["reclaim"]).'),
       scopes: z.array(branchGcKind).optional().describe("Keep these ref kinds (local, remote, orphan)."),
@@ -30354,7 +30512,7 @@ function registerSessionTools(rawServer, opts) {
         salvage: z.string().optional().describe("What is worth keeping, if anything.")
       }),
       gate: z.object({
-        agree: mcpBool2.describe("true only if deleting the branch loses nothing of value"),
+        agree: mcpBool3.describe("true only if deleting the branch loses nothing of value"),
         verdict: branchVerdictEnum,
         reason: z.string(),
         evidence: z.array(z.string()).describe("Concrete shas/paths. Required non-empty when agree is true.")
@@ -30967,10 +31125,10 @@ function registerSessionTools(rawServer, opts) {
     "DRY RUN, mutates nothing \u2014 classify every idle agent-cli session for the session steward: `close` (safe to auto-close: idle past `idleMinutes` AND the session's worktree merged or its parent already ended, with no tool call pending, and not `keepAlive`), `stuck` (stuck in `status:'starting'` with no pid for 10+ minutes \u2014 closing it is free, it never ran), `judge` (idle-enough but ambiguous \u2014 no merge/parent-ended signal, a pending tool call, or a `keepAlive` session that would otherwise close, since `keepAlive` can only ever reach `judge`, never `close`), or `keep` (not idle long enough yet, or busy/awaitingInput/awaitingPermission/archived/pinned/has busy children/has a live parent/is the caller's own session \u2014 NEVER eligible for `session_wrapup_apply`; omitted here unless `includeKeep` is set). Also reports `rssBytes` (process-tree RSS) per entry and summed per class in `totals`. Feed `close`/`stuck` ids straight to `session_wrapup_apply`; `judge` ids need a judge's verdict first (FIX-9B). Computing worktree merge status can take minutes: this call waits up to 25 s (`waitMs`), then returns `{ jobId, status: \"running\", followUp }` \u2014 poll `session_wrapup_status` with that jobId.",
     {
       idleMinutes: z.number().int().positive().optional().describe("Idle threshold in minutes a `close` candidate must clear. Default 20."),
-      includeKeep: mcpBool2.optional().describe(
+      includeKeep: mcpBool3.optional().describe(
         "Include `keep`-class entries too. Default false \u2014 `keep` rows are never acted on, so they're omitted to keep the plan focused on what the steward might actually do."
       ),
-      wait: mcpBool2.optional().describe(
+      wait: mcpBool3.optional().describe(
         "false \u21D2 return a jobId immediately; poll `session_wrapup_status`. true \u21D2 block until the plan is computed. Default: wait up to `waitMs`, then fall back to background."
       ),
       waitMs: mcpNumber.optional().describe("Block at most this many milliseconds, then fall back to background. Default 25000.")
@@ -31036,7 +31194,7 @@ function registerSessionTools(rawServer, opts) {
       judgedBy: z.string().optional().describe(
         "A judge session id. When set, the outcome's `source` is `'judged'` and a `judge`-class session also becomes eligible (not just `close`/`stuck`). Omitted \u21D2 `source:'declared'`, `judgedBy:'steward-rules'`, and only `close`/`stuck` are eligible."
       ),
-      wait: mcpBool2.optional().describe(
+      wait: mcpBool3.optional().describe(
         "false \u21D2 return a jobId immediately; poll `session_wrapup_status`. true \u21D2 block until done. Default: wait up to `waitMs`, then fall back to background (the apply keeps running)."
       ),
       waitMs: mcpNumber.optional().describe("Block at most this many milliseconds, then fall back to background. Default 25000.")
@@ -31487,7 +31645,7 @@ function registerSessionTools(rawServer, opts) {
     "Set or clear a session's idle-reaper exemption. When `keepAlive` is true, the idle-reaper (`isReapable`) never auto-retires this session no matter how long it sits idle \u2014 for a supervisor that legitimately parks waiting on a child or a scheduled wake, which otherwise looks identical to a finished session. Set false to clear the exemption. Persists across daemon restarts. Does NOT touch the running agent.",
     {
       idOrName: z.string().min(1).describe("Session id or name to update \u2014 from `session_list`."),
-      keepAlive: mcpBool2.describe(
+      keepAlive: mcpBool3.describe(
         "true to exempt this session from the idle-reaper, false to clear the exemption."
       )
     },
@@ -31549,7 +31707,7 @@ function registerSessionTools(rawServer, opts) {
     "Set or clear a session's list-visibility pin. When `pinned` is true, the session sorts to the top of `agentproto sessions` and the VS Code sessions webview's dedicated Pinned group. Set false to clear it. Persists across daemon restarts. Purely a sort/display flag \u2014 does NOT touch the idle-reaper, keepAlive, or emit any notification, and does NOT touch the running agent.",
     {
       idOrName: z.string().min(1).describe("Session id or name to update \u2014 from `session_list`."),
-      pinned: mcpBool2.describe(
+      pinned: mcpBool3.describe(
         "true to pin this session to the top of the list, false to unpin it."
       )
     },
@@ -31834,7 +31992,7 @@ function registerSessionTools(rawServer, opts) {
     {
       idOrName: z.string().min(1).describe("Session id or name \u2014 from `session_list`."),
       key: z.string().min(1).describe("Artifact key, from `session_artifact_list`."),
-      pinned: mcpBool2.describe("true to pin, false to unpin.")
+      pinned: mcpBool3.describe("true to pin, false to unpin.")
     },
     async (input) => {
       const prev = registry.findByIdOrName(input.idOrName);
@@ -32055,7 +32213,7 @@ function registerSessionTools(rawServer, opts) {
       lastBytes: z.number().int().min(1).max(64 * 1024).optional().describe(
         "Max bytes from the tail. Default 4096; the full ~64 KiB ring remains reachable by passing `lastBytes: 65536` explicitly."
       ),
-      clean: mcpBool2.optional().describe(
+      clean: mcpBool3.optional().describe(
         "Strip ANSI codes, returning human-readable text (as `text` instead of `b64`). Default false = raw base64."
       )
     },
@@ -32147,7 +32305,7 @@ function registerSessionTools(rawServer, opts) {
 
 // src/index.ts
 init_agent_tools();
-var mcpBool3 = z.preprocess(
+var mcpBool4 = z.preprocess(
   (v) => v === "true" ? true : v === "false" ? false : v,
   z.boolean()
 );
@@ -32232,10 +32390,10 @@ function registerBrainTools(server, opts) {
     {
       workspace: z.string().optional().describe("Workspace slug. Omit to use the calling session's workspace."),
       sessionId: z.string().optional().describe("Ingest one specific session (sess_xxx) instead of the backlog."),
-      reindex: mcpBool3.optional().describe(
+      reindex: mcpBool4.optional().describe(
         'When `sessionId` is set and it was already ingested, force a re-ingest from the current transcript. Default false. Pass `true` or the string "true" to enable.'
       ),
-      reindexStale: mcpBool3.optional().describe(
+      reindexStale: mcpBool4.optional().describe(
         'When `sessionId` is NOT set (backlog mode), also force-reingest every already-indexed session whose pipeline version is older than the code running now. Default false. Pass `true` or the string "true" to enable.'
       )
     },
@@ -38944,6 +39102,9 @@ function sentinelView(s) {
     ...s.lastError ? { lastError: s.lastError } : {}
   };
 }
+function sentinelViewWithDelivery(s, deliveryStatus) {
+  return deliveryStatus ? { ...sentinelView(s), deliveryStatus } : sentinelView(s);
+}
 var ok2 = (body) => ({
   content: [{ type: "text", text: JSON.stringify({ ok: true, ...body }) }]
 });
@@ -38977,9 +39138,9 @@ function registerSentinelTools(server, opts) {
   );
   server.tool(
     "sentinel_list",
-    "List every sentinel this daemon is tracking, with status, match clauses, target, and event counters. Credentials are never returned.",
+    "List every sentinel this daemon is tracking, with status, match clauses, target, and event counters (webhook targets also report `deliveryStatus`). Credentials are never returned.",
     {},
-    async () => ok2({ sentinels: store.list().map(sentinelView) })
+    async () => ok2({ sentinels: store.list().map((s) => sentinelViewWithDelivery(s, opts.deliveryStatus?.(s.id))) })
   );
   server.tool(
     "sentinel_unwatch",
@@ -40931,7 +41092,7 @@ var TRANSPORT_CLOSED_RE = /\bACP connection closed\b/i;
 function withReviewWorktreeZones(boundary, cwd) {
   const zones = reviewWorktreeReadZones(cwd);
   if (!zones) return boundary;
-  const extra = [zones.worktree, zones.gitCommonDir].filter((z61) => !boundary.readOnly.includes(z61));
+  const extra = [zones.worktree, zones.gitCommonDir].filter((z62) => !boundary.readOnly.includes(z62));
   return extra.length === 0 ? boundary : { ...boundary, readOnly: [...boundary.readOnly, ...extra] };
 }
 function agentStepMcpServers(input) {
@@ -45273,9 +45434,17 @@ function policyToActivities(policy) {
   return records;
 }
 var STALE_TURN_AFTER_MS = 10 * 6e4;
+var TURN_NAME_MAX = 60;
+function sessionDisplayName(session) {
+  const name = session.title?.trim() || session.label?.trim();
+  if (!name) return session.id;
+  const clipped = name.length > TURN_NAME_MAX ? `${name.slice(0, TURN_NAME_MAX - 1).trimEnd()}\u2026` : name;
+  return `"${clipped}"`;
+}
 function turnToActivities(session, opts = {}) {
   if (session.kind !== "agent-cli") return [];
   const completed = session.turnsCompleted ?? 0;
+  const name = sessionDisplayName(session);
   const base = (turn, title) => ({
     id: `turn:${session.id}:${turn}`,
     kind: "turn",
@@ -45289,20 +45458,20 @@ function turnToActivities(session, opts = {}) {
   if (terminal) {
     if (session.killedMidTurn === true) {
       const rec = record(
-        base(completed + 1, `Turn ${completed + 1} interrupted on ${session.id}`),
+        base(completed + 1, `Turn ${completed + 1} interrupted on ${name}`),
         session.status === "error" ? "failed" : "cancelled"
       );
       return [{ ...rec, ...session.lastActivityAt ? { endedAt: session.lastActivityAt } : {} }];
     }
     if (completed > 0) {
-      const rec = record(base(completed, `Turn ${completed} completed on ${session.id}`), "done");
+      const rec = record(base(completed, `Turn ${completed} completed on ${name}`), "done");
       return [{ ...rec, ...session.lastActivityAt ? { endedAt: session.lastActivityAt } : {} }];
     }
     return [];
   }
   if (session.awaitingPermission === true) {
     return [
-      pendingRecord(base(completed + 1, `Turn ${completed + 1} on ${session.id} held on a permission`), {
+      pendingRecord(base(completed + 1, `Turn ${completed + 1} on ${name} held on a permission`), {
         kind: "human-ack",
         refs: [session.id],
         detail: "permission request parked for permissions_respond"
@@ -45310,7 +45479,7 @@ function turnToActivities(session, opts = {}) {
     ];
   }
   if (session.busy === true) {
-    const rec = record(base(completed + 1, `Turn ${completed + 1} running on ${session.id}`), "active");
+    const rec = record(base(completed + 1, `Turn ${completed + 1} running on ${name}`), "active");
     if (opts.now && session.lastActivityAt) {
       const nowMs = Date.parse(opts.now);
       const lastMs = Date.parse(session.lastActivityAt);
@@ -45322,7 +45491,7 @@ function turnToActivities(session, opts = {}) {
   }
   if (session.awaitingInput === true) {
     return [
-      pendingRecord(base(completed + 1, `Awaiting human input on ${session.id}`), {
+      pendingRecord(base(completed + 1, `Awaiting human input on ${name}`), {
         kind: "human-ack",
         refs: [session.id],
         detail: "session asked a question; next turn needs a human prompt"
@@ -45330,7 +45499,7 @@ function turnToActivities(session, opts = {}) {
     ];
   }
   if (completed > 0) {
-    const rec = record(base(completed, `Turn ${completed} completed on ${session.id}`), "done");
+    const rec = record(base(completed, `Turn ${completed} completed on ${name}`), "done");
     return [{ ...rec, ...session.lastActivityAt ? { endedAt: session.lastActivityAt } : {} }];
   }
   return [];
@@ -47574,16 +47743,34 @@ var FIRST_PARTY_CATALOG_ENTRIES = [
     "description": "View and continue any agentproto daemon session's conversation in the Agentik chat UI (assistant-ui based). Pick a session from the live/recent list or deep-link with ?session=<id>; the page replays the session's full transcript, then follows it live over SSE, and lets you send follow-up prompts into the same session. Built on @agstudio/react-agentproto (SSE transcript projection, permission approval, thread list) and @agstudio/chat-starter's assistant-ui shell, reused almost as-is.",
     "source": {
       "kind": "agentapp",
-      "url": "https://github.com/agentproto/apps/releases/download/session-chat%400.1.0/session-chat-0.1.0.agentapp",
-      "sha256": "12216f65fa3cff9bfb9fcd49c46c9166eb68a790d278d466e07e0a95df5f4eef",
-      "version": "0.1.0",
-      "size": 518621
+      "url": "https://github.com/agentproto/apps/releases/download/session-chat%400.1.1/session-chat-0.1.1.agentapp",
+      "sha256": "e8084a125e335cbc408b0e8dd3371711191f6aa0019dad4907f26b19ec9f344b",
+      "version": "0.1.1",
+      "size": 516437
     },
-    "version": "0.1.0",
+    "icon": "https://raw.githubusercontent.com/agentproto/apps/main/media/@agentik/session-chat/0.1.1/icon.svg",
+    "version": "0.1.1",
     "tier": "bundle",
+    "publisher": "Agentik",
     "license": {
       "kind": "free"
-    }
+    },
+    "tagline": "Read and continue any agentproto session as a chat thread.",
+    "longDescription": "Session Chat turns any agentproto session into a chat thread you can read and continue.\n\nPick a running or recent session, or open one directly with `?session=<id>`. The page replays the full transcript, then follows the session live as the agent works, and lets you send follow-up prompts into the same session.\n\n## What you get\n\n- **Transcript replay and live follow**: the whole conversation, then new turns as they stream in.\n- **Tool activity at a glance**: file reads, commands and edits grouped under each reply, with the files an agent changed.\n- **Reply into the session**: send a follow-up, interrupt a running turn, queue prompts while the agent works.\n- **Approvals**: answer the agent's permission requests from the thread.\n- **Session list**: running and recent sessions, grouped by workspace, with search and pins.\n- **Start a session**: pick a harness and model and start a new chat from the same page.\n\n## Requirements\n\nSession Chat talks to your local agentproto daemon. Its bundled agent runs on the `mastra-agent` adapter: install it first with `agentproto install mastra-agent`.",
+    "screenshots": [
+      {
+        "url": "https://raw.githubusercontent.com/agentproto/apps/main/media/@agentik/session-chat/0.1.1/conversation.png",
+        "alt": "A finished session replayed as a chat thread, with a markdown table in the agent's reply and the composer below",
+        "width": 1280,
+        "height": 800
+      }
+    ],
+    "categories": [
+      "chat",
+      "sessions",
+      "developer-tools"
+    ],
+    "homepage": "https://agentproto.sh/apps/session-chat"
   }
 ];
 
@@ -53526,8 +53713,45 @@ async function handleSessions(req, res, path, registry, resolveAgentAdapter, pty
       if (kindParam && kindParam !== "all") return s.kind === kindParam;
       return includeCommands || s.kind !== "command";
     };
+    const listFilters = parseSessionListFilterParams(params);
+    if (listFilters.parentSessionId) {
+      listFilters.parentSessionId = registry.findByIdOrName(listFilters.parentSessionId)?.id ?? listFilters.parentSessionId;
+    }
+    const statusParam = params.get("status");
+    const onlyAlive = params.get("onlyAlive") === "true";
+    const limitParam = params.get("limit");
+    const limit = limitParam === null ? void 0 : Number.parseInt(limitParam, 10);
+    if (limit !== void 0 && (!Number.isInteger(limit) || limit < 1)) {
+      json3(400, {
+        error: "invalid_limit",
+        message: `?limit must be a positive integer, got ${JSON.stringify(limitParam)}.`
+      });
+      return true;
+    }
+    const narrowed = hasSessionListFilters(listFilters) || statusParam !== null || onlyAlive || limit !== void 0;
+    let narrow;
+    try {
+      const keep = compileSessionListFilters(listFilters);
+      narrow = (list) => list.filter((s) => {
+        if (statusParam) {
+          if (s.status !== statusParam) return false;
+        } else if (onlyAlive && s.status !== "running" && s.status !== "starting") {
+          return false;
+        }
+        return keep(s);
+      });
+    } catch (err) {
+      if (err instanceof SessionListFilterError) {
+        json3(400, { error: "invalid_filter", message: err.message });
+        return true;
+      }
+      throw err;
+    }
     let rows = registry.list({ includeArchived });
-    rows = rows.filter(matchesFilter);
+    rows = narrow(rows.filter(matchesFilter));
+    if (narrowed) rows = sortNewestActivityFirst(rows);
+    const total = rows.length;
+    if (limit !== void 0 && sinceParam === null) rows = rows.slice(0, limit);
     let body;
     if (sinceParam !== null) {
       const sinceMs = Date.parse(sinceParam);
@@ -53543,11 +53767,14 @@ async function handleSessions(req, res, path, registry, resolveAgentAdapter, pty
         return Number.isNaN(ts) || ts >= sinceMs;
       });
       const removed = includeArchived ? [] : registry.list({ includeArchived: true }).filter(
-        (s) => s.archived && matchesFilter(s) && (s.archivedAt === void 0 || Date.parse(s.archivedAt) >= sinceMs)
+        (s) => s.archived && matchesFilter(s) && narrow([s]).length > 0 && (s.archivedAt === void 0 || Date.parse(s.archivedAt) >= sinceMs)
       ).map((s) => s.id);
       body = { sessions: changed.map((s) => projectSessionForHttp(s, fields)), removed };
     } else {
-      body = { sessions: rows.map((s) => projectSessionForHttp(s, fields)) };
+      body = {
+        sessions: rows.map((s) => projectSessionForHttp(s, fields)),
+        ...narrowed ? { total } : {}
+      };
     }
     const serialized = JSON.stringify(body);
     const etag = strongEtag(serialized);
@@ -55230,7 +55457,7 @@ async function handleSentinels(req, res, path, deps2) {
     res.end(JSON.stringify(body));
   };
   if (path === "/sentinels" && req.method === "GET") {
-    json3(200, { sentinels: deps2.store.list().map(sentinelView) });
+    json3(200, { sentinels: deps2.store.list().map((s) => sentinelViewWithDelivery(s, deps2.deliveryStatus?.(s.id))) });
     return true;
   }
   if (path === "/sentinels" && req.method === "POST") {
@@ -58410,6 +58637,23 @@ function rawPost(args) {
 }
 
 // src/webhook-egress/delivery.ts
+function callbackHost(url) {
+  try {
+    return new URL(url).host;
+  } catch {
+    return "invalid-url";
+  }
+}
+function redactUrls(text13) {
+  return text13.replace(/https?:\/\/[^\s'"<>)]+/gi, (m) => {
+    try {
+      const u = new URL(m);
+      return `${u.protocol}//${u.host}`;
+    } catch {
+      return "<url>";
+    }
+  });
+}
 var CLAMP_LIMIT_BYTES = 262144;
 var MAX_ATTEMPTS = 5;
 var BACKOFF_BASE_MS = 250;
@@ -58441,6 +58685,12 @@ async function deliverEventEnvelope(replay, event, deps2 = {}) {
   const sleep3 = deps2.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const fetcher = deps2.fetch ?? ((url, init) => ssrfFetch(url, init));
   const { bytes: payloadBytes } = envelopeClampedBytes(event);
+  const note = (info) => {
+    try {
+      deps2.onAttempt?.(info);
+    } catch {
+    }
+  };
   const delivery = { attempts: 0 };
   for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
     if (attempt > 0) await sleep3(deliveryBackoffDelay(attempt));
@@ -58452,6 +58702,7 @@ async function deliverEventEnvelope(replay, event, deps2 = {}) {
       signed = signWebhook({ msgId: event.eventId, timestamp, payload: payloadBytes, secrets: replay.secrets });
     } catch (err) {
       delivery.lastError = `signing failed: ${err.message}`;
+      note({ attempt: delivery.attempts, error: "invalid_secret", outcome: "dead" });
       return { ok: false, reason: "invalid_secret", delivery };
     }
     let response;
@@ -58464,18 +58715,27 @@ async function deliverEventEnvelope(replay, event, deps2 = {}) {
         // delivery default (challenge uses 10_000)
       });
     } catch (err) {
-      delivery.lastError = err instanceof Error ? err.message : String(err);
-      if (attempt < MAX_ATTEMPTS - 1) continue;
+      delivery.lastError = redactUrls(err instanceof Error ? err.message : String(err));
+      const last = attempt >= MAX_ATTEMPTS - 1;
+      note({ attempt: delivery.attempts, error: delivery.lastError, outcome: last ? "dead" : "retry" });
+      if (!last) continue;
       return { ok: false, reason: "network", delivery };
     }
     if (response.status >= 200 && response.status <= 299) {
+      note({ attempt: delivery.attempts, status: response.status, outcome: "delivered" });
       return { ok: true, delivery };
     }
     if (TERMINAL_NO_RETRY_STATUSES.has(response.status)) {
       delivery.lastError = `terminal status ${response.status}`;
+      note({ attempt: delivery.attempts, status: response.status, outcome: "dead" });
       return { ok: false, reason: `http_${response.status}`, delivery };
     }
     delivery.lastError = `retryable status ${response.status}`;
+    note({
+      attempt: delivery.attempts,
+      status: response.status,
+      outcome: attempt >= MAX_ATTEMPTS - 1 ? "dead" : "retry"
+    });
   }
   return { ok: false, reason: "retries_exhausted", delivery };
 }
@@ -59093,7 +59353,20 @@ function createSentinelWebhookOutbox(opts) {
   const debounceMs = opts.debounceMs ?? PERSIST_DEBOUNCE_MS8;
   const log = opts.log ?? ((line) => console.warn(line));
   const persist = opts.persist ?? opts.filePath !== void 0;
-  const deliverEvent = opts.deliverEvent ?? (async (input) => deliverEventEnvelope(input.replay, input.row.envelope));
+  const deliveryLog = (row, host, detail) => {
+    log(`[sentinel-webhook-outbox] sentinel=${row.sentinelId} event=${row.eventId} host=${host} ${detail}`);
+  };
+  const deliverEvent = opts.deliverEvent ?? (async (input) => {
+    const host = callbackHost(input.replay.callbackUrl);
+    return deliverEventEnvelope(input.replay, input.row.envelope, {
+      ...opts.deliverDeps,
+      onAttempt: (a) => deliveryLog(
+        input.row,
+        host,
+        `attempt=${a.attempt} ${a.status !== void 0 ? `http=${a.status}` : `error="${a.error ?? "unknown"}"`} ${a.outcome}`
+      )
+    });
+  });
   const rowKey = (sentinelId, eventId) => `${sentinelId}::${eventId}`;
   const load2 = () => {
     const out = /* @__PURE__ */ new Map();
@@ -59204,14 +59477,19 @@ function createSentinelWebhookOutbox(opts) {
         row.failReason = outcome.reason;
       }
       row.terminalAt = nowMs();
+      deliveryLog(
+        row,
+        callbackHost(replay.callbackUrl),
+        `final=${row.status} attempts=${outcome.delivery.attempts}` + (outcome.ok ? "" : ` reason=${outcome.reason}`)
+      );
     } catch (err) {
       row.deliveryState = {
         ...row.deliveryState ?? { attempts: 0 },
-        lastError: err instanceof Error ? err.message : String(err),
+        lastError: redactUrls(err instanceof Error ? err.message : String(err)),
         lastAt: new Date(nowMs()).toISOString()
       };
       row.status = "pending";
-      log(`[sentinel-webhook-outbox] dispatch failed, row left pending: ${row.sentinelId} ${row.eventId}`);
+      deliveryLog(row, callbackHost(replay.callbackUrl), "dispatch failed, row left pending");
     }
     schedulePersist();
     if (row.status === "delivered" || row.status === "dead") {
@@ -59306,6 +59584,27 @@ function createSentinelWebhookOutbox(opts) {
     rows() {
       return Array.from(rows.values());
     },
+    deliveryStatus(sentinelId) {
+      let latest;
+      let active = false;
+      let dead = 0;
+      for (const row of rows.values()) {
+        if (row.sentinelId !== sentinelId) continue;
+        if (row.status === "pending") active = true;
+        if (row.status === "dead") dead++;
+        if (!latest || (row.terminalAt ?? row.createdAt) >= (latest.terminalAt ?? latest.createdAt)) latest = row;
+      }
+      if (!latest) return void 0;
+      const lastError = latest.deliveryState.lastError ?? latest.failReason ?? latest.deadReason;
+      return {
+        active,
+        ...latest.deliveryState.lastAt ? { lastDeliveryAt: latest.deliveryState.lastAt } : {},
+        lastStatus: latest.status,
+        ...lastError && latest.status !== "delivered" ? { lastError: redactUrls(lastError) } : {},
+        attempts: latest.deliveryState.attempts,
+        dead
+      };
+    },
     flushSync
   };
 }
@@ -70404,6 +70703,7 @@ async function createGateway(opts) {
       store: sentinelStore,
       runtime: sentinelRuntime,
       tombstones: sentinelRuntime.cancelTombstones,
+      deliveryStatus: (id) => sentinelRuntime.webhookOutbox.deliveryStatus(id),
       resolveProvider: resolveSentinelProviderResolved,
       isSessionAlive,
       ...callerSessionId ? { callerSessionId } : {}
@@ -70555,7 +70855,8 @@ async function createGateway(opts) {
       resolveProvider: resolveSentinelProviderResolved,
       isSessionAlive,
       runtime: sentinelRuntime,
-      tombstones: sentinelRuntime.cancelTombstones
+      tombstones: sentinelRuntime.cancelTombstones,
+      deliveryStatus: (id) => sentinelRuntime.webhookOutbox.deliveryStatus(id)
     },
     follows: {
       store: sessionFollowStore,
@@ -70904,6 +71205,6 @@ var export_readPairingsSnapshot = pairing_registry_exports.readPairingsSnapshot;
 var export_removeProviderKey = providers_store_exports.removeProviderKey;
 var export_setProviderKey = providers_store_exports.setProviderKey;
 
-export { AnthropicRemainingQuotaReader, AuthResolutionError, BUCKETS_ROOT, CLAMP_LIMIT_BYTES, CLAUDE_CODE_OAUTH_SOURCE, CONTINUE_PROMPT_SOURCE, DEAD_SESSION_STATUSES, DEFAULT_ALWAYS_ON_TOOLS, DEFAULT_BUCKET, DEFAULT_CONTINUE_PROMPT, DEFAULT_HOST_LOAD_BUDGET_MS, DEFAULT_HOST_LOAD_THRESHOLDS, DEFAULT_MODEL_ROLES, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_TTL_MS, DEFAULT_WORKTREE_ISOLATION, DEFAULT_WORKTREE_PROVISION_CONCURRENCY, DEVICE_PROMPT_PATH_PREFIX, EVENT_REGISTRY, FOLLOW_EVENTS, GC_REAPABLE_STATES, GITHUB_SCHEME, HOSTS_VERSION, HOST_HANDSHAKE_REMEDIATION_HINT, HOST_SCOPE_HEADER, HarnessPresetValidationError, INBOUND_PROVIDERS, INDEX_DEFAULT_LIMIT, INDEX_MAX_OUTPUT, INDEX_MAX_PROMPT, INDEX_TAIL_BYTES, JOIN_TOKENS_VERSION, LEGACY_SESSIONS_FILE, MAX_ATTEMPTS, MAX_AUTO_CONTINUE_ATTEMPTS, MAX_MESSAGE_DATA_BYTES, MAX_TTL_MS, MCP_APP_BRIDGE_SCRIPT, MESSAGE_KINDS, MESSAGE_PREAMBLE, MESSAGE_TAG, MESSAGE_URGENCIES, MIN_TTL_MS, MODEL_ROLE_REF_PREFIX, McpEventsError, NO_OUTPUT_STALL_TURN_ERROR, export_PAIRINGS_VERSION as PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, export_PROVIDER_ENV_VARS as PROVIDER_ENV_VARS, PrLookupError, ResumeDisabledError, SESSION_END_REASONS, SESSION_ID_ENV, SIGN_NAMESPACE, SentinelBackingExpiredError, SessionRetiredError, SsrfFetchError, SubscriptionSourceError, TASK_STATUSES, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, WORKTREE_PROVISION_CONCURRENCY_ENV, activityCounts, addHarnessPreset, allowedSignersLine, appendConversationRecord, attachSandbox, backfillSessionIndexes, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogModels, buildCatalogProviderModels, buildHostLoadReport, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, buildSessionRecap, canonicalForModeId, canonicalizeJcs, challengeCacheSize, challengeReasonForSsrf, claudeProjectSlug, collectGcCandidates, collectHostSample, compactOutcome, composeMode, composeSessionObservers, composedFromRangeSha, computeHostWarnings, computeRefreshBefore, continueInterruptedSessions, continueSkipReason, conversationIndexPath, createActivityProjector, createDaemonReviewerHost, createDefaultHostProbes, createDeviceRegistry, createFileStepCache, createGateway, createHostLoadService, createHostRegistry, createInboundEndpointStore, createJoinTokenRegistry, createOrchestratorInjector, createOrchestratorMcpServerFactory, export_createPairingRegistry as createPairingRegistry, createPrProvenanceReconciler, createProcessStatsService, createReviewLaneExecutor, createReviewLedger, createReviewPackLoader, createReviewRunner, createScopeTokenRegistry, createSentinelWebhookOutbox, createSessionFollowStore, createSessionMessage, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, createWorkspaceFs, credentialFingerprint, daemonBearerPrincipal, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, decodeWhsecSecret, decomposeMode, defaultBrowserAdapterIds, defaultBrowserAdapterResolution, defaultReviewKeysDir, defaultReviewLedgerRoot, defaultReviewPackCacheDir, defaultTranscriptBaseDir, defineBraveSearchHttpDriver, defineSerperHttpDriver, deleteUserPreset, deliverEventEnvelope, deliveryBackoffDelay, deriveIndexFromTranscript, deriveSessionOutcome, deriveSessionUsage, describeOwner, encodeWhsecSecret, enrichRollupWithProviderQuota, enrichWithRemainingQuota, ensureReviewSigningKey, envelopeClampedBytes, escapeHumanPrompt, escapeMessageBody, evaluateCostBudget, eventsList, eventsSubscribe, eventsUnsubscribe, execGh, extractHelpSection, fetchHostTurns, fetchPrStatus, fileConversationStore, fileExists3 as fileExists, filterActivities, findComposeCandidate, findConversationRecord, findEventDefinition, findNativeMode, findPrForCommit, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getHostLoadService, getMcpCredentialDeps, getProcessStatsService, export_getProviderKey as getProviderKey, getToolHelp, getUserPreset, githubRepoOf, harnessPresetsPath, hostPlaceholders, hostRecordToMirrorRecord, indexEntryFromDescriptor, injectMcpAppBridge, export_injectProviderKeysIntoEnv as injectProviderKeysIntoEnv, isAgentCliAuthConfigured, isAutomatedPromptSource, isClosedTaskStatus, isKnownSessionEndReason, isMessageAllowed, isNoSessionPromptFailure, isProviderLimitError, isPubliclyRoutable, isRetired, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listModelRoles, listPresets, listToolHelpTopics, listUserPresets, loadHarnessPresets, export_loadProviders as loadProviders, loadQuotaStore, loadUserPresets, loadWorkspaceModelRoles, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeRestartForRouting, makeSandboxCredsStore, makeSandboxResolver, matchesMessageFilter, matchesSessionQuery, measureTool, measureToolList, messageFrom, migrateLegacySessionsFile, migrationMarkerPath, mintMessageId, mirrorCursorForSession, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeCallbackUrl, normalizeCommand, normalizeInbound, normalizeModeId, normalizeRemote, normalizeSkillsOption, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseDuration, parseModelRoleRef, parsePrUrl, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, pickUsageDetail, policyToActivities, policyWatchesSession, prHeadSha, prToActivities, projectBrowserTools, projectSessionUsage, promptDeviceSession, promptHostSession, export_providerEnvVar as providerEnvVar, export_providersPath as providersPath, readAllSessionIndexes, readConversationIndex, readDaemonRegistry, readHostsSnapshot, export_readPairingsSnapshot as readPairingsSnapshot, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readSessionIndex, readTranscriptTail, readUsageSnapshots, reapGcEntry, reapOrphanedDescendants, reconcileSandboxLedger, recordProfileQuota, recordSandboxBoot, recordSandboxLiveness, recordSandboxOrigin, recordSandboxState, registerBrainTools, registerBuiltinRoutes, registerDeviceTools, registerPairingTools, registerReviewTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, export_removeProviderKey as removeProviderKey, removeSandboxLedgerEntry, renderInboxDigest, renderSessionMessage, renderSessionMessages, repoSlug, resetChallengeCacheForTests, resolveAuthSpec, resolveBucketSlug, resolveDeferredToolsGatewayOption, resolveDevicePromptMapping, resolveEffectiveLlmEndpointFlag, resolveModelRole, resolveNativeLink, resolvePosture, resolvePrincipal, resolveRelation, resolveReuseFromLedger, resolveReviewerPreset, resolveSpawnDefaults, resolveSubscriptionCredential, resolveSuccessor, rollupSessionSubtree, rollupUsage, runContinueOnBootPass, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runShellLane, runStallWatchdogPass, sandboxLedgerPath, sanitizeLabel, saveUserPreset, searchSessionIndexes, seedWalkForTranscript, serializeEnvelope, sessionEventsPath, sessionIndexPath, sessionPrincipal, sessionTranscriptDir, setDefaultPreset, setDefaultSessionsBaseDir, setEgressDispatcherForTests, setMcpCredentialDeps, export_setProviderKey as setProviderKey, signAttestation, signWebhook, ssrfFetch, subscriptionId, summarizeBranchGcApply, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, syncDeviceMirror, tenantScope, toMcpEvent, toWebhookEnvelope, toWorktreeStatusView, trackWorktreeProvision, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, untilForTtl, updateHarnessPreset, upsertSandboxLedger, userPresetsPath, validateAgainstInputSchema, verifyCallback, verifyInboundSignature, verifySignedAttestation, webSearchTool, webhookRequestId, wireSessionFollow, withBranchGcApplySummary, withPr, withPrStatus, workflowToActivities, writeDaemonRegistryEntry, writeSessionIndex };
+export { AnthropicRemainingQuotaReader, AuthResolutionError, BUCKETS_ROOT, CLAMP_LIMIT_BYTES, CLAUDE_CODE_OAUTH_SOURCE, CONTINUE_PROMPT_SOURCE, DEAD_SESSION_STATUSES, DEFAULT_ALWAYS_ON_TOOLS, DEFAULT_BUCKET, DEFAULT_CONTINUE_PROMPT, DEFAULT_HOST_LOAD_BUDGET_MS, DEFAULT_HOST_LOAD_THRESHOLDS, DEFAULT_MODEL_ROLES, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_TTL_MS, DEFAULT_WORKTREE_ISOLATION, DEFAULT_WORKTREE_PROVISION_CONCURRENCY, DEVICE_PROMPT_PATH_PREFIX, EVENT_REGISTRY, FOLLOW_EVENTS, GC_REAPABLE_STATES, GITHUB_SCHEME, HOSTS_VERSION, HOST_HANDSHAKE_REMEDIATION_HINT, HOST_SCOPE_HEADER, HarnessPresetValidationError, INBOUND_PROVIDERS, INDEX_DEFAULT_LIMIT, INDEX_MAX_OUTPUT, INDEX_MAX_PROMPT, INDEX_TAIL_BYTES, JOIN_TOKENS_VERSION, LEGACY_SESSIONS_FILE, MAX_ATTEMPTS, MAX_AUTO_CONTINUE_ATTEMPTS, MAX_MESSAGE_DATA_BYTES, MAX_TTL_MS, MCP_APP_BRIDGE_SCRIPT, MESSAGE_KINDS, MESSAGE_PREAMBLE, MESSAGE_TAG, MESSAGE_URGENCIES, MIN_TTL_MS, MODEL_ROLE_REF_PREFIX, McpEventsError, NO_OUTPUT_STALL_TURN_ERROR, export_PAIRINGS_VERSION as PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, export_PROVIDER_ENV_VARS as PROVIDER_ENV_VARS, PrLookupError, ResumeDisabledError, SESSION_END_REASONS, SESSION_ID_ENV, SESSION_LIST_FILTER_KEYS, SIGN_NAMESPACE, SentinelBackingExpiredError, SessionListFilterError, SessionRetiredError, SsrfFetchError, SubscriptionSourceError, TASK_STATUSES, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, WORKTREE_PROVISION_CONCURRENCY_ENV, activityCounts, addHarnessPreset, allowedSignersLine, appendConversationRecord, applySessionListFilters, attachSandbox, backfillSessionIndexes, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogModels, buildCatalogProviderModels, buildHostLoadReport, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, buildSessionRecap, canonicalForModeId, canonicalizeJcs, challengeCacheSize, challengeReasonForSsrf, claudeProjectSlug, collectGcCandidates, collectHostSample, compactOutcome, compileSessionListFilters, composeMode, composeSessionObservers, composedFromRangeSha, computeHostWarnings, computeRefreshBefore, continueInterruptedSessions, continueSkipReason, conversationIndexPath, createActivityProjector, createDaemonReviewerHost, createDefaultHostProbes, createDeviceRegistry, createFileStepCache, createGateway, createHostLoadService, createHostRegistry, createInboundEndpointStore, createJoinTokenRegistry, createOrchestratorInjector, createOrchestratorMcpServerFactory, export_createPairingRegistry as createPairingRegistry, createPrProvenanceReconciler, createProcessStatsService, createReviewLaneExecutor, createReviewLedger, createReviewPackLoader, createReviewRunner, createScopeTokenRegistry, createSentinelWebhookOutbox, createSessionFollowStore, createSessionMessage, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, createWorkspaceFs, credentialFingerprint, daemonBearerPrincipal, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, decodeWhsecSecret, decomposeMode, defaultBrowserAdapterIds, defaultBrowserAdapterResolution, defaultReviewKeysDir, defaultReviewLedgerRoot, defaultReviewPackCacheDir, defaultTranscriptBaseDir, defineBraveSearchHttpDriver, defineSerperHttpDriver, deleteUserPreset, deliverEventEnvelope, deliveryBackoffDelay, deriveIndexFromTranscript, deriveSessionOutcome, deriveSessionUsage, describeOwner, encodeWhsecSecret, enrichRollupWithProviderQuota, enrichWithRemainingQuota, ensureReviewSigningKey, envelopeClampedBytes, escapeHumanPrompt, escapeMessageBody, evaluateCostBudget, eventsList, eventsSubscribe, eventsUnsubscribe, execGh, extractHelpSection, fetchHostTurns, fetchPrStatus, fileConversationStore, fileExists3 as fileExists, filterActivities, findComposeCandidate, findConversationRecord, findEventDefinition, findNativeMode, findPrForCommit, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getHostLoadService, getMcpCredentialDeps, getProcessStatsService, export_getProviderKey as getProviderKey, getToolHelp, getUserPreset, githubRepoOf, harnessPresetsPath, hasSessionListFilters, hostPlaceholders, hostRecordToMirrorRecord, indexEntryFromDescriptor, injectMcpAppBridge, export_injectProviderKeysIntoEnv as injectProviderKeysIntoEnv, isAgentCliAuthConfigured, isAutomatedPromptSource, isClosedTaskStatus, isKnownSessionEndReason, isMessageAllowed, isNoSessionPromptFailure, isNoiseSession, isProviderLimitError, isPubliclyRoutable, isRetired, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listModelRoles, listPresets, listToolHelpTopics, listUserPresets, loadHarnessPresets, export_loadProviders as loadProviders, loadQuotaStore, loadUserPresets, loadWorkspaceModelRoles, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeRestartForRouting, makeSandboxCredsStore, makeSandboxResolver, matchesMessageFilter, matchesSessionQuery, measureTool, measureToolList, messageFrom, migrateLegacySessionsFile, migrationMarkerPath, mintMessageId, mirrorCursorForSession, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeCallbackUrl, normalizeCommand, normalizeInbound, normalizeModeId, normalizeRemote, normalizeSkillsOption, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseDuration, parseModelRoleRef, parsePrUrl, parseSessionListFilterParams, parseTaskStatus, parseTimeBound, parseWindow, parseWorktreeIsolationMode, pickSessionListFilters, pickUsageDetail, policyToActivities, policyWatchesSession, prHeadSha, prToActivities, projectBrowserTools, projectSessionUsage, promptDeviceSession, promptHostSession, export_providerEnvVar as providerEnvVar, export_providersPath as providersPath, readAllSessionIndexes, readConversationIndex, readDaemonRegistry, readHostsSnapshot, export_readPairingsSnapshot as readPairingsSnapshot, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readSessionIndex, readTranscriptTail, readUsageSnapshots, reapGcEntry, reapOrphanedDescendants, reconcileSandboxLedger, recordProfileQuota, recordSandboxBoot, recordSandboxLiveness, recordSandboxOrigin, recordSandboxState, registerBrainTools, registerBuiltinRoutes, registerDeviceTools, registerPairingTools, registerReviewTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, export_removeProviderKey as removeProviderKey, removeSandboxLedgerEntry, renderInboxDigest, renderSessionMessage, renderSessionMessages, repoSlug, resetChallengeCacheForTests, resolveAuthSpec, resolveBucketSlug, resolveDeferredToolsGatewayOption, resolveDevicePromptMapping, resolveEffectiveLlmEndpointFlag, resolveModelRole, resolveNativeLink, resolvePosture, resolvePrincipal, resolveRelation, resolveReuseFromLedger, resolveReviewerPreset, resolveSpawnDefaults, resolveSubscriptionCredential, resolveSuccessor, rollupSessionSubtree, rollupUsage, runContinueOnBootPass, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runShellLane, runStallWatchdogPass, sandboxLedgerPath, sanitizeLabel, saveUserPreset, searchSessionIndexes, seedWalkForTranscript, serializeEnvelope, sessionActivityMs, sessionEventsPath, sessionIndexPath, sessionListFilterShape, sessionPrincipal, sessionTranscriptDir, setDefaultPreset, setDefaultSessionsBaseDir, setEgressDispatcherForTests, setMcpCredentialDeps, export_setProviderKey as setProviderKey, signAttestation, signWebhook, sortNewestActivityFirst, ssrfFetch, subscriptionId, summarizeBranchGcApply, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, syncDeviceMirror, tenantScope, toMcpEvent, toWebhookEnvelope, toWorktreeStatusView, trackWorktreeProvision, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, untilForTtl, updateHarnessPreset, upsertSandboxLedger, userPresetsPath, validateAgainstInputSchema, verifyCallback, verifyInboundSignature, verifySignedAttestation, webSearchTool, webhookRequestId, wireSessionFollow, withBranchGcApplySummary, withPr, withPrStatus, workflowToActivities, writeDaemonRegistryEntry, writeSessionIndex };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map