@agentproto/runtime 5.8.0 → 5.9.0

package/dist/index.mjs

@@ -1,12 +1,12 @@
 import { execFile, spawn, execFileSync } from 'child_process';
 import { readFile, unlink, mkdir, writeFile, readdir, stat, readlink, chmod, mkdtemp, rm, rename, copyFile, realpath, appendFile, open, access } from 'fs/promises';
 import { homedir, freemem, loadavg, totalmem, cpus, hostname, tmpdir } from 'os';
-import { join, resolve, dirname, basename, isAbsolute, normalize as normalize$1, relative, sep, extname, delimiter } from 'path';
+import { join, resolve, dirname, isAbsolute, basename, normalize as normalize$1, relative, sep, extname, delimiter } from 'path';
 import { canonicalizePath, resolveCommandSandbox, loadAdapterSpawnSandboxConfig, loadSandboxConfig, COMMAND_SANDBOX_MODE_ENV } from '@agentproto/command-sandbox';
 import { ensureChromeDevtoolsMcp, resolveChrome, buildHeadlessBrowserMcpEntry, headlessBrowserReadPaths } from '@agentproto/plugin-local-browser';
 import { resolvePricing, getModelProvider, resolveContextWindow, formatTokens, LLM_PRICING_CATALOG, resolvePricingExact, splitContextWindowHint, MODEL_ALIASES, isKnownLlmId } from '@agentproto/model-catalog/llm';
 import { randomBytes, randomUUID, timingSafeEqual, createHmac, createHash } from 'crypto';
-import { createReadStream, promises, readFileSync, mkdirSync, writeFileSync, renameSync, readdirSync, existsSync, mkdtempSync, chmodSync, openSync, closeSync, fstatSync, readSync, realpathSync, statSync, cpSync, appendFileSync, createWriteStream } from 'fs';
+import { createReadStream, promises, readFileSync, mkdirSync, writeFileSync, renameSync, readdirSync, openSync, fstatSync, readSync, closeSync, existsSync, statSync, mkdtempSync, chmodSync, realpathSync, cpSync, appendFileSync, createWriteStream } from 'fs';
 import { createInterface } from 'readline';
 import * as providers_store_star from '@agentproto/providers-store';
 import { resolveCustomRoute, registerCustomRoute, formatModelRef, resolveLlmModelRoute, tryParseModelRef, stripRouteSuffix, stripFixedNativeVendor } from '@agentproto/model-catalog/route-identity';
@@ -29,7 +29,7 @@ import { SandboxSpecSchema, resolveLifecyclePolicy, createSandboxAgentSessionHos
 import { APP_UI_DISCOVERY_TOOLS, RUNNER_SELECT_SCRIPT } from '@agentproto/app-client/runner-select';
 import { DISPLAY_MODE_SCRIPT } from '@agentproto/app-client/display-mode';
 import { defineTool, catchErrors, ToolError, pageParamsShape, paginated, toToolResult, paginate, toolText } from '@agentproto/tool';
-import { toMcpTool, createMcpServer, registerBuiltinTool, registerUiResource } from '@agentproto/mcp-server';
+import { toMcpTool, createMcpServer, registerBuiltinTool, registerUiResource, registerEventsMethods } from '@agentproto/mcp-server';
 import { SESSION_CHAT_APP_ID, liveSessionApp, makeLiveSessionApp, sessionsPanelApp, agentsOverviewApp, bureauSessionsApp, sessionStoryApp, workBoardApp, reviewPanelApp, makeSessionsPanelApp, makeAgentsOverviewApp, makeBureauSessionsApp, makeSessionStoryPanelApp, makeSessionChatApp, makeWorkBoardApp, makeReviewPanelApp, sessionChatApp } from '@agentproto/apps';
 import { EventEmitter } from 'events';
 import { inferLegacyModeKind, parseModelSwitchCommand, isModelSwitchAcknowledgement } from '@agentproto/driver-agent-cli';
@@ -2827,7 +2827,7 @@ function tokenizeCommand(s) {
   if (buf) out.push(buf);
   return out;
 }
-var RESUME_STRATEGIES, RESUME_ID_REJECTED_RE;
+var RESUME_STRATEGIES, RESUME_ID_REJECTED_RE, RESUME_CONNECTION_LOST_RE;
 var init_resume_strategies = __esm({
   "src/resume-strategies.ts"() {
     init_conversation_store();
@@ -2856,6 +2856,7 @@ var init_resume_strategies = __esm({
       })
     );
     RESUME_ID_REJECTED_RE = /not found|does not support|not supported|unsupported/i;
+    RESUME_CONNECTION_LOST_RE = /connection closed|connection lost|epipe/i;
   }
 });
 function writeCommandLogEntry(sessionId, entry, baseDir) {
@@ -7284,6 +7285,36 @@ var init_bundles = __esm({
     };
   }
 });
+function directAuthMethods(descriptor, endpoint) {
+  const methods = [];
+  if (subscriptionSurfaceFor(descriptor?.authSubscription, endpoint) !== void 0) {
+    methods.push("oauth-bearer");
+  }
+  if (descriptor?.provider || descriptor?.modelDerivedApiKey) methods.push("api-key");
+  return methods;
+}
+function spawnEligibilityManifest(adapter, descriptor, route, model) {
+  const directEndpoint = descriptor?.provider ?? (model ? descriptor?.modelProviders?.[model] : void 0) ?? (model && descriptor?.modelDerivedApiKey ? modelIdPrefixProvider(model) : void 0) ?? (model ? getModelProvider(model) : void 0);
+  const routeId = route?.gateway ?? directEndpoint;
+  if (!routeId) return void 0;
+  const direct = directEndpoint !== void 0 && routeId === directEndpoint;
+  return {
+    manifest: {
+      id: adapter,
+      endpointByRoute: { [routeId]: direct ? directEndpoint : routeId },
+      methodsByRoute: {
+        [routeId]: direct ? directAuthMethods(descriptor, directEndpoint) : ["api-key"]
+      }
+    },
+    routeId,
+    direct
+  };
+}
+var init_eligibility_manifest = __esm({
+  "src/eligibility-manifest.ts"() {
+    init_spawn_defaults();
+  }
+});
 function normalizeRouterPrefixedId(id) {
   const firstSlash = id.indexOf("/");
   if (firstSlash === -1) return id;
@@ -7508,6 +7539,7 @@ function buildCatalogModels(input) {
   ];
   const merged = mergeContributions(contributions);
   const query = input.query ?? {};
+  const queryAdapter = query.adapter ? input.adapters.find((a) => a.slug === query.adapter) : void 0;
   const servableByRoute = /* @__PURE__ */ new Map();
   for (const row of merged) {
     const set = servableByRoute.get(row.route) ?? /* @__PURE__ */ new Set();
@@ -7522,12 +7554,18 @@ function buildCatalogModels(input) {
     if (query.adapter && !row.adapters.includes(query.adapter)) continue;
     const isDirectVendorRoute = row.route === row.vendor && row.adapterModes.length === 0;
     const walletEligible = !isDirectVendorRoute || checkModelWalletEligibility(`${row.vendor}/${row.product}`, row.route).ok;
-    const manifest = {
+    const projected = queryAdapter === void 0 ? void 0 : queryAdapter.authDescriptor ? spawnEligibilityManifest(
+      queryAdapter.slug,
+      queryAdapter.authDescriptor,
+      { gateway: row.route },
+      row.ref
+    ) : null;
+    const manifest = projected?.manifest ?? {
       id: `${row.vendor}/${row.product}@${row.route}`,
       endpointByRoute: { [row.route]: billedVendor(row.vendor, row.route) },
       methodsByRoute: { [row.route]: row.methods }
     };
-    const eligible = walletEligible ? eligibleProfiles(input.profiles, manifest, row.route).filter(
+    const eligible = walletEligible && projected !== null ? eligibleProfiles(input.profiles, manifest, projected?.routeId ?? row.route).filter(
       (p) => profileAllowsModel(p, row.ref, `${row.vendor}/${row.product}`)
     ) : [];
     const runnable = eligible.length > 0;
@@ -7680,6 +7718,7 @@ var WIDENING_ROUTES, VENDOR_COMPATIBILITY_ROUTES;
 var init_catalog_models = __esm({
   "src/catalog-models.ts"() {
     init_spawn_defaults();
+    init_eligibility_manifest();
     WIDENING_ROUTES = [
       "openrouter",
       "requesty",
@@ -10105,35 +10144,10 @@ function findWorktreeLabelCwdCollision(registry, excludeId, label, cwd) {
 function profileMethodToAuthMode(method) {
   return method === "oauth-bearer" ? "subscription" : "api-key";
 }
-function directAuthMethods(descriptor, endpoint) {
-  const methods = [];
-  if (subscriptionSurfaceFor(descriptor?.authSubscription, endpoint) !== void 0) {
-    methods.push("oauth-bearer");
-  }
-  if (descriptor?.provider || descriptor?.modelDerivedApiKey) methods.push("api-key");
-  return methods;
-}
 function subscriptionOauthMethodId(descriptor, provider) {
   if (!Array.isArray(descriptor?.authSubscription) || !provider) return void 0;
   return `${provider}-oauth`;
 }
-function spawnEligibilityManifest(adapter, descriptor, route, model) {
-  const directEndpoint = descriptor?.provider ?? (model ? descriptor?.modelProviders?.[model] : void 0) ?? (model && descriptor?.modelDerivedApiKey ? modelIdPrefixProvider(model) : void 0) ?? (model ? getModelProvider(model) : void 0);
-  const routeId = route?.gateway ?? directEndpoint;
-  if (!routeId) return void 0;
-  const direct = directEndpoint !== void 0 && routeId === directEndpoint;
-  return {
-    manifest: {
-      id: adapter,
-      endpointByRoute: { [routeId]: direct ? directEndpoint : routeId },
-      methodsByRoute: {
-        [routeId]: direct ? directAuthMethods(descriptor, directEndpoint) : ["api-key"]
-      }
-    },
-    routeId,
-    direct
-  };
-}
 function resolveProfileAwareRoute(adapter, authDescriptor, profile, model) {
   if (!model) return void 0;
   const eligibleCandidates = serviceableModelRoutes(model).map((gateway) => spawnEligibilityManifest(adapter, authDescriptor, { gateway }, model)).filter(
@@ -12246,6 +12260,7 @@ var init_session_spawn = __esm({
     init_bundles();
     init_mcp_imports();
     init_launch_config();
+    init_eligibility_manifest();
     init_claude_code_oauth_source();
     init_providers_store();
     init_catalog_models();
@@ -16638,6 +16653,267 @@ var init_session_end_reason = __esm({
     PROVIDER_LIMIT_ERROR_RE = /\bhit your (?:session|usage) limit\b/i;
   }
 });
+function sessionIndexPath(sessionId, baseDir) {
+  return join(sessionTranscriptDir(sessionId, baseDir), "index.json");
+}
+function capText(text13, max) {
+  const flat = text13.replace(/\s+/g, " ").trim();
+  const points = Array.from(flat);
+  if (points.length <= max) return flat;
+  return points.slice(0, max - 1).join("") + "\u2026";
+}
+function isRecord5(value) {
+  return typeof value === "object" && value !== null;
+}
+function indexEntryFromDescriptor(desc, extra) {
+  const entry = {
+    id: desc.id,
+    kind: desc.kind,
+    status: desc.status,
+    alive: desc.status === "running" || desc.status === "starting",
+    startedAt: desc.startedAt
+  };
+  if (desc.label !== void 0) entry.label = desc.label;
+  if (desc.title !== void 0) entry.title = desc.title;
+  if (desc.renamedByUser !== void 0) entry.renamedByUser = desc.renamedByUser;
+  if (desc.adapterSlug !== void 0) entry.adapter = desc.adapterSlug;
+  if (desc.model !== void 0) entry.model = desc.model;
+  if (desc.cwd !== void 0) entry.cwd = desc.cwd;
+  if (desc.workspaceSlug !== void 0) entry.workspaceSlug = desc.workspaceSlug;
+  if (desc.origin !== void 0) entry.origin = desc.origin;
+  if (desc.depth !== void 0) entry.depth = desc.depth;
+  if (desc.parentSessionId !== void 0) entry.parentSessionId = desc.parentSessionId;
+  if (desc.lastActivityAt !== void 0) entry.lastActivityAt = desc.lastActivityAt;
+  if (desc.lastTurnReason !== void 0) entry.lastTurnReason = desc.lastTurnReason;
+  if (desc.turnsCompleted !== void 0) entry.turnsCompleted = desc.turnsCompleted;
+  if (desc.costUsd !== void 0) entry.costUsd = desc.costUsd;
+  const prompt = extra?.lastUserPrompt;
+  if (prompt && prompt.text.trim()) {
+    entry.lastUserPrompt = { ts: prompt.ts, text: capText(prompt.text, INDEX_MAX_PROMPT) };
+  }
+  const output = extra?.lastOutputText;
+  if (output && output.trim()) entry.lastOutputText = capText(output, INDEX_MAX_OUTPUT);
+  return entry;
+}
+function readSessionIndex(sessionId, baseDir) {
+  let raw;
+  try {
+    raw = readFileSync(sessionIndexPath(sessionId, baseDir), "utf8");
+  } catch {
+    return void 0;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return void 0;
+  }
+  if (!isRecord5(parsed) || typeof parsed.id !== "string" || parsed.id.length === 0) return void 0;
+  return parsed;
+}
+function writeSessionIndex(entry, baseDir) {
+  try {
+    const dir = sessionTranscriptDir(entry.id, baseDir);
+    mkdirSync(dir, { recursive: true });
+    const finalPath = join(dir, "index.json");
+    const tmpPath = `${finalPath}.tmp`;
+    writeFileSync(tmpPath, JSON.stringify(entry) + "\n");
+    renameSync(tmpPath, finalPath);
+  } catch {
+  }
+}
+function readTranscriptTail(eventsPath2, maxBytes = INDEX_TAIL_BYTES) {
+  const empty = { prompts: [], bytesRead: 0 };
+  let fd;
+  try {
+    fd = openSync(eventsPath2, "r");
+  } catch {
+    return empty;
+  }
+  let tail;
+  let bytesRead = 0;
+  try {
+    const size = fstatSync(fd).size;
+    const len = Math.min(size, Math.max(0, maxBytes));
+    if (len === 0) return empty;
+    const buf = Buffer.alloc(len);
+    readSync(fd, buf, 0, len, size - len);
+    bytesRead = len;
+    tail = buf.toString("utf8");
+  } catch {
+    return empty;
+  } finally {
+    closeSync(fd);
+  }
+  const prompts = [];
+  let assistant = "";
+  let lastOutputText;
+  let firstTs;
+  const sealAssistant = () => {
+    const t = assistant.trim();
+    if (t) lastOutputText = t;
+    assistant = "";
+  };
+  for (const line of tail.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    let rec;
+    try {
+      rec = JSON.parse(trimmed);
+    } catch {
+      continue;
+    }
+    if (firstTs === void 0 && typeof rec.ts === "string") firstTs = rec.ts;
+    if (rec.kind === "user-prompt" && typeof rec.text === "string") {
+      sealAssistant();
+      if (rec.text.trim()) {
+        prompts.push({ ts: typeof rec.ts === "string" ? rec.ts : "", text: rec.text });
+      }
+    } else if (rec.kind === "text-delta" && typeof rec.text === "string") {
+      assistant += rec.text;
+    } else if (rec.kind === "tool-call" || rec.kind === "tool-result" || rec.kind === "turn-end") {
+      sealAssistant();
+    }
+  }
+  sealAssistant();
+  return { prompts, ...lastOutputText !== void 0 ? { lastOutputText } : {}, bytesRead, ...firstTs !== void 0 ? { firstTs } : {} };
+}
+function deriveIndexFromTranscript(sessionId, baseDir) {
+  const eventsPath2 = sessionEventsPath(sessionId, baseDir);
+  if (!existsSync(eventsPath2)) return void 0;
+  const tail = readTranscriptTail(eventsPath2);
+  let startedAt;
+  try {
+    const stat19 = statSync(eventsPath2);
+    if (stat19.birthtimeMs > 0) startedAt = stat19.birthtime.toISOString();
+    else startedAt = stat19.mtime.toISOString();
+  } catch {
+  }
+  startedAt = startedAt ?? tail.firstTs ?? (/* @__PURE__ */ new Date(0)).toISOString();
+  const lastPrompt = tail.prompts[tail.prompts.length - 1];
+  return {
+    id: sessionId,
+    kind: "agent-cli",
+    status: "unknown",
+    alive: false,
+    startedAt,
+    ...lastPrompt ? { lastUserPrompt: { ts: lastPrompt.ts, text: capText(lastPrompt.text, INDEX_MAX_PROMPT) } } : {},
+    ...tail.lastOutputText ? { lastOutputText: capText(tail.lastOutputText, INDEX_MAX_OUTPUT) } : {}
+  };
+}
+function readAllSessionIndexes(baseDir) {
+  const dir = baseDir ?? defaultTranscriptBaseDir();
+  let entries;
+  try {
+    entries = readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const ent of entries) {
+    if (!ent.isDirectory()) continue;
+    const id = ent.name;
+    const index = readSessionIndex(id, dir);
+    if (index) {
+      out.push(index);
+      continue;
+    }
+    const derived = deriveIndexFromTranscript(id, dir);
+    if (derived) out.push(derived);
+  }
+  out.sort((a, b) => (b.lastActivityAt ?? b.startedAt).localeCompare(a.lastActivityAt ?? a.startedAt));
+  return out;
+}
+function matchesSessionQuery(entry, query) {
+  const q = query.trim().toLowerCase();
+  if (!q) return true;
+  if (entry.id.toLowerCase().startsWith(q)) return true;
+  for (const field of [entry.label, entry.title, entry.cwd, entry.workspaceSlug]) {
+    if (field && field.toLowerCase().includes(q)) return true;
+  }
+  return false;
+}
+function searchSessionIndexes(entries, query, opts = {}) {
+  const limit = opts.limit ?? INDEX_DEFAULT_LIMIT;
+  return entries.filter((e) => matchesSessionQuery(e, query)).filter((e) => opts.status ? e.status === opts.status : true).sort((a, b) => (b.lastActivityAt ?? b.startedAt).localeCompare(a.lastActivityAt ?? a.startedAt)).slice(0, Math.max(0, limit));
+}
+function buildSessionRecap(input) {
+  const { entry } = input;
+  const last = input.last ?? 8;
+  const tail = readTranscriptTail(input.eventsPath);
+  const source = tail.prompts.length > 0 ? tail.prompts : entry.lastUserPrompt ? [entry.lastUserPrompt] : [];
+  const prompts = source.slice(Math.max(0, source.length - last));
+  const lastOutputText = tail.lastOutputText ?? entry.lastOutputText;
+  return {
+    id: entry.id,
+    status: entry.status,
+    alive: entry.alive,
+    ...entry.label !== void 0 ? { label: entry.label } : {},
+    ...entry.title !== void 0 ? { title: entry.title } : {},
+    ...entry.adapter !== void 0 ? { adapter: entry.adapter } : {},
+    ...entry.model !== void 0 ? { model: entry.model } : {},
+    ...entry.cwd !== void 0 ? { cwd: entry.cwd } : {},
+    ...entry.workspaceSlug !== void 0 ? { workspaceSlug: entry.workspaceSlug } : {},
+    ...entry.parentSessionId !== void 0 ? { parentSessionId: entry.parentSessionId } : {},
+    children: [...input.children ?? []],
+    startedAt: entry.startedAt,
+    ...entry.lastActivityAt !== void 0 ? { lastActivityAt: entry.lastActivityAt } : {},
+    ...entry.turnsCompleted !== void 0 ? { turnsCompleted: entry.turnsCompleted } : {},
+    ...entry.costUsd !== void 0 ? { costUsd: entry.costUsd } : {},
+    ...entry.lastTurnReason !== void 0 ? { lastTurnReason: entry.lastTurnReason } : {},
+    prompts,
+    ...lastOutputText ? { lastOutputText: capText(lastOutputText, INDEX_MAX_OUTPUT) } : {},
+    ...input.queuedPrompts !== void 0 ? { queuedPrompts: input.queuedPrompts } : {}
+  };
+}
+function backfillSessionIndexes(baseDir, opts) {
+  const dir = baseDir ?? defaultTranscriptBaseDir();
+  const byId = /* @__PURE__ */ new Map();
+  if (opts?.descriptors) {
+    for (const desc of opts.descriptors) byId.set(desc.id, desc);
+  }
+  let dirents;
+  try {
+    dirents = readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return { scanned: 0, created: 0, skipped: 0 };
+  }
+  let scanned = 0;
+  let created = 0;
+  let skipped = 0;
+  for (const ent of dirents) {
+    if (!ent.isDirectory()) continue;
+    scanned++;
+    const id = ent.name;
+    if (readSessionIndex(id, dir)) {
+      skipped++;
+      continue;
+    }
+    const desc = byId.get(id);
+    const derived = deriveIndexFromTranscript(id, dir);
+    if (!desc && !derived) {
+      skipped++;
+      continue;
+    }
+    const entry = desc ? indexEntryFromDescriptor(desc, {
+      ...derived?.lastUserPrompt ? { lastUserPrompt: derived.lastUserPrompt } : {},
+      ...derived?.lastOutputText ? { lastOutputText: derived.lastOutputText } : {}
+    }) : derived;
+    writeSessionIndex(entry, dir);
+    created++;
+  }
+  return { scanned, created, skipped };
+}
+var INDEX_MAX_PROMPT, INDEX_MAX_OUTPUT, INDEX_TAIL_BYTES, INDEX_DEFAULT_LIMIT;
+var init_session_index = __esm({
+  "src/session-index.ts"() {
+    init_transcript_writer();
+    INDEX_MAX_PROMPT = 500;
+    INDEX_MAX_OUTPUT = 300;
+    INDEX_TAIL_BYTES = 256 * 1024;
+    INDEX_DEFAULT_LIMIT = 20;
+  }
+});
 function isBackgroundToolCallArguments(args) {
   return typeof args === "object" && args !== null && args.run_in_background === true;
 }
@@ -16817,6 +17093,7 @@ function toSessionSummary(desc) {
     blockedOn: desc.blockedOn,
     stalledSinceMs: desc.stalledSinceMs,
     pendingBgTasks: desc.pendingBgTasks,
+    ...desc.wrapupFlag ? { wrapupFlag: desc.wrapupFlag } : {},
     backgroundTasks: desc.backgroundTasks,
     lastTurnErroredAt: desc.lastTurnErroredAt,
     ...desc.lastError ? { lastError: desc.lastError.slice(0, 2e3) } : {},
@@ -16945,6 +17222,18 @@ function stampInterrupted(desc) {
     delete desc.interrupted;
   }
 }
+function stampAdapterConnected(desc, rt) {
+  const probe = rt.agentSession?.isConnected;
+  if (!probe) {
+    delete desc.adapterConnected;
+    return;
+  }
+  try {
+    desc.adapterConnected = probe.call(rt.agentSession);
+  } catch {
+    delete desc.adapterConnected;
+  }
+}
 function stampLiveModes(desc, rt) {
   const modes = rt.agentSession?.availableModes;
   if (modes && modes.length > 0) {
@@ -16956,6 +17245,9 @@ function stampLiveModes(desc, rt) {
 function isResumable(desc) {
   return desc.kind === "agent-cli" && !!desc.adapterSlug && !!desc.adapterSessionId && !!desc.cwd && !desc.archived;
 }
+function crashReasonText(reason, pid) {
+  return reason === "transport-closed" ? `adapter connection closed (pid ${pid ?? "?"} may still be running) \u2014 session crashed` : `adapter process gone (pid ${pid}) \u2014 session crashed`;
+}
 function canResume(desc) {
   return isResumable(desc) && (desc.resumeAttempts ?? 0) < MAX_RESUME_ATTEMPTS;
 }
@@ -17194,6 +17486,7 @@ function createSessionsRegistry(opts) {
       }
     }
     recordOutcome(rt);
+    writeIndexNow(rt);
     rt.linkProbeStop?.();
     cancelPendingPermissionsForSession(rt);
     if (runWorktreeAutoReclaim && rt.desc.worktreeAutoProvisioned && rt.desc.worktreePath) {
@@ -17428,6 +17721,53 @@ function createSessionsRegistry(opts) {
       void persistSnapshot();
     }, PERSIST_DEBOUNCE_MS2);
   };
+  const INDEX_WRITE_THROTTLE_MS = 400;
+  const dirtyIndexIds = /* @__PURE__ */ new Set();
+  let indexFlushTimer;
+  const captureIndexTail = (rt) => {
+    let lastUserPrompt = rt.lastUserPrompt;
+    let lastOutputText = rt.lastAssistantText;
+    if (lastUserPrompt === void 0 || lastOutputText === void 0) {
+      const tail = readTranscriptTail(sessionEventsPath(rt.desc.id, transcriptBaseDir), INDEX_TAIL_BYTES);
+      if (lastUserPrompt === void 0 && tail.prompts.length > 0) {
+        lastUserPrompt = tail.prompts[tail.prompts.length - 1];
+      }
+      if (lastOutputText === void 0) lastOutputText = tail.lastOutputText;
+    }
+    return {
+      ...lastUserPrompt ? { lastUserPrompt } : {},
+      ...lastOutputText ? { lastOutputText } : {}
+    };
+  };
+  const writeIndexNow = (rt) => {
+    try {
+      writeSessionIndex(indexEntryFromDescriptor(rt.desc, captureIndexTail(rt)), transcriptBaseDir);
+    } catch {
+    }
+  };
+  const flushDirtyIndexes = () => {
+    if (indexFlushTimer) {
+      clearTimeout(indexFlushTimer);
+      indexFlushTimer = void 0;
+    }
+    if (dirtyIndexIds.size === 0) return;
+    const ids = [...dirtyIndexIds];
+    dirtyIndexIds.clear();
+    for (const id of ids) {
+      const rt = sessions.get(id);
+      if (rt) writeIndexNow(rt);
+    }
+  };
+  const scheduleIndexWrite = (rt) => {
+    if (shutdownDone) return;
+    dirtyIndexIds.add(rt.desc.id);
+    if (indexFlushTimer) return;
+    indexFlushTimer = setTimeout(() => {
+      indexFlushTimer = void 0;
+      flushDirtyIndexes();
+    }, INDEX_WRITE_THROTTLE_MS);
+    indexFlushTimer.unref?.();
+  };
   const conversationLinkProbeMs = opts?.conversationLinkProbeMs ?? {
     initialMs: 3e3,
     intervalMs: 15e3
@@ -18030,7 +18370,12 @@ function createSessionsRegistry(opts) {
     schedulePersist();
   };
   const maybeResumeAgent = async (rt, resumedFrom = "daemon-restart") => {
-    if (rt.agentSession) return;
+    if (rt.agentSession) {
+      if (rt.agentSession.isConnected?.() === false) {
+        markCrashedInternal(rt.desc.id, "transport-closed");
+      }
+      if (rt.agentSession) return;
+    }
     if (!resumeAgent) return;
     if (!isResumable(rt.desc)) return;
     if (!canResume(rt.desc)) {
@@ -18076,7 +18421,7 @@ function createSessionsRegistry(opts) {
           recordFailedResume(rt);
           return;
         }
-        rt.agentSession = fresh;
+        bindAgentSession(rt, fresh);
         bindOutOfTurnEvents(rt);
         stampCapabilities(rt);
         rt.adapterSlug = adapterSlug;
@@ -18133,6 +18478,48 @@ function createSessionsRegistry(opts) {
       rt.resumePromise = void 0;
     }
   };
+  const markCrashedInternal = (id, reason = "process-gone") => {
+    const rt = sessions.get(id);
+    if (!rt) return false;
+    if (rt.desc.kind !== "agent-cli" || rt.desc.status !== "running") {
+      return false;
+    }
+    const pid = rt.desc.pid;
+    const providerLimitMessage = isProviderLimitError(rt.lastErrorMessage) ? rt.lastErrorMessage : void 0;
+    const detail = providerLimitMessage ? `provider usage limit hit: ${providerLimitMessage}` : crashReasonText(reason, pid);
+    rt.desc.status = "error";
+    rt.desc.endedAt = (/* @__PURE__ */ new Date()).toISOString();
+    rt.desc.endedReason = providerLimitMessage ? "provider-limit" : "crashed";
+    rt.desc.crashedAt = rt.desc.endedAt;
+    rt.desc.lastError = detail;
+    if (rt.agentSession) {
+      releaseOutOfTurnEvents(rt);
+      delete rt.desc.backgroundTasks;
+      recordExitUsageSnapshot(rt);
+      void rt.agentSession.close().catch(() => void 0);
+      void transcriptWriter.close(rt.desc.id);
+      tracedSessions.delete(rt.desc.id);
+      rt.agentSession = void 0;
+    }
+    schedulePersist();
+    const banner = providerLimitMessage ? `[provider-limit] ${providerLimitMessage}` : `[crashed] ${detail}`;
+    appendLine(rt, banner, "stderr");
+    transcriptWriter.recordEvent(rt.desc.id, { kind: "notice", text: banner });
+    emitExited(rt);
+    return true;
+  };
+  const bindAgentSession = (rt, session) => {
+    rt.agentSession = session;
+    session.onDisconnect?.((err) => {
+      const id = rt.desc.id;
+      if (rt.agentSession !== session) return;
+      if (markCrashedInternal(id, "transport-closed")) {
+        console.warn(
+          `[sessions] ${id}: adapter connection closed (${err.message}) \u2014 marked crashed; the row stays lazy-resumable.`
+        );
+      }
+    });
+  };
   const buildUsageSnapshot = (rt) => deriveSessionUsage({
     ...rt.desc.model !== void 0 ? { model: rt.desc.model } : {},
     ...rt.adapterReportedCost && rt.desc.costUsd !== void 0 ? { adapterCostUsd: rt.desc.costUsd } : {},
@@ -18592,6 +18979,7 @@ ${message}`;
           ...messageTurn ? { messages: turnOpts.messages } : {}
         } : void 0
       );
+      rt.lastUserPrompt = { ts: (/* @__PURE__ */ new Date()).toISOString(), text: promptTextForIndex(message, turnOpts?.system) };
       const wrapped = typeof message === "string" ? { type: "text", text: message } : message;
       const switchCandidate = typeof message === "string" ? parseModelSwitchCommand(message) : void 0;
       let switchLearned = false;
@@ -18829,6 +19217,7 @@ ${message}`;
           });
         }
       }
+      scheduleIndexWrite(rt);
       if (!interruptedBy) dispatchQueuedPrompt(rt);
       else if (interruptedBy.deliverQueueId) {
         dispatchQueuedPrompt(rt, interruptedBy.deliverQueueId);
@@ -19123,6 +19512,10 @@ ${message}`;
   };
   const registry = {
     bootId,
+    transcriptBaseDir,
+    flushSessionIndexes() {
+      flushDirtyIndexes();
+    },
     recordAutoContinue(id) {
       const rt = sessions.get(id);
       if (!rt) return;
@@ -19199,6 +19592,7 @@ ${message}`;
         emitExited(rt);
       });
       schedulePersist();
+      writeIndexNow(rt);
       return desc;
     },
     register(input) {
@@ -19248,6 +19642,7 @@ ${message}`;
         emitExited(rt);
       });
       schedulePersist();
+      writeIndexNow(rt);
       return desc;
     },
     spawnAgent(input) {
@@ -19349,7 +19744,6 @@ ${message}`;
       }
       const rt = {
         desc,
-        agentSession: input.agentSession,
         adapterSlug: input.adapterSlug,
         recentLines: [],
         recentBytes: [],
@@ -19366,6 +19760,7 @@ ${message}`;
       rt.emitter.setMaxListeners(50);
       sessions.set(id, rt);
       linkContinuedTo(input.resumedFrom, id);
+      bindAgentSession(rt, input.agentSession);
       bindOutOfTurnEvents(rt);
       stampCapabilities(rt);
       armUsageRefresh(rt);
@@ -19383,6 +19778,7 @@ ${message}`;
         "stdout"
       );
       schedulePersist();
+      writeIndexNow(rt);
       recordConversationLink(rt);
       desc.eventsPath = sessionEventsPath(desc.id, transcriptBaseDir);
       if (input.initialPrompt) {
@@ -19501,6 +19897,7 @@ ${message}`;
         "stdout"
       );
       schedulePersist();
+      writeIndexNow(rt);
       desc.eventsPath = sessionEventsPath(desc.id, transcriptBaseDir);
       return desc;
     },
@@ -19556,7 +19953,7 @@ ${message}`;
         emitExited(rt);
         return;
       }
-      rt.agentSession = outcome.agentSession;
+      bindAgentSession(rt, outcome.agentSession);
       bindOutOfTurnEvents(rt);
       stampCapabilities(rt);
       rt.readUsage = outcome.readUsage;
@@ -19578,6 +19975,7 @@ ${message}`;
         "stdout"
       );
       schedulePersist();
+      writeIndexNow(rt);
       recordConversationLink(rt);
       if (outcome.initialPrompt) {
         void runAgentTurn(
@@ -19747,6 +20145,7 @@ ${message}`;
         emitExited(rt);
       });
       schedulePersist();
+      writeIndexNow(rt);
       return desc;
     },
     recordCommand(input) {
@@ -20371,6 +20770,7 @@ ${message}`;
         stampCurrentStatus(rt);
         stampWatchers(desc);
         stampLiveModes(desc, rt);
+        stampAdapterConnected(desc, rt);
         desc.childrenBusy = childrenBusy.get(desc.id) ?? 0;
         desc.queuedPrompts = desc.promptQueue?.length ?? 0;
         return desc;
@@ -20428,6 +20828,7 @@ ${message}`;
         stampCurrentStatus(rt);
         stampWatchers(desc);
         stampLiveModes(desc, rt);
+        stampAdapterConnected(desc, rt);
         desc.childrenBusy = childrenBusyCounts().get(desc.id) ?? 0;
         desc.queuedPrompts = desc.promptQueue?.length ?? 0;
       }
@@ -20683,34 +21084,8 @@ ${message}`;
       emitExited(rt);
       return true;
     },
-    markCrashed(id) {
-      const rt = sessions.get(id);
-      if (!rt) return false;
-      if (rt.desc.kind !== "agent-cli" || rt.desc.status !== "running") {
-        return false;
-      }
-      const pid = rt.desc.pid;
-      const providerLimitMessage = isProviderLimitError(rt.lastErrorMessage) ? rt.lastErrorMessage : void 0;
-      rt.desc.status = "error";
-      rt.desc.endedAt = (/* @__PURE__ */ new Date()).toISOString();
-      rt.desc.endedReason = providerLimitMessage ? "provider-limit" : "crashed";
-      rt.desc.crashedAt = rt.desc.endedAt;
-      rt.desc.lastError = providerLimitMessage ? `provider usage limit hit: ${providerLimitMessage}` : `adapter process gone (pid ${pid}) \u2014 session crashed`;
-      if (rt.agentSession) {
-        releaseOutOfTurnEvents(rt);
-        delete rt.desc.backgroundTasks;
-        recordExitUsageSnapshot(rt);
-        void rt.agentSession.close().catch(() => void 0);
-        void transcriptWriter.close(rt.desc.id);
-        tracedSessions.delete(rt.desc.id);
-        rt.agentSession = void 0;
-      }
-      schedulePersist();
-      const banner = providerLimitMessage ? `[provider-limit] ${providerLimitMessage}` : `[crashed] adapter process gone (pid ${pid}) \u2014 session crashed`;
-      appendLine(rt, banner, "stderr");
-      transcriptWriter.recordEvent(rt.desc.id, { kind: "notice", text: banner });
-      emitExited(rt);
-      return true;
+    markCrashed(id, reason = "process-gone") {
+      return markCrashedInternal(id, reason);
     },
     markStalled(id, stalledSinceMs) {
       const rt = sessions.get(id);
@@ -20876,6 +21251,7 @@ ${message}`;
         ts: (/* @__PURE__ */ new Date()).toISOString()
       });
       stampReadLiveness(rt.desc);
+      writeIndexNow(rt);
       return rt.desc;
     },
     setKeepAlive(id, keepAlive) {
@@ -20999,6 +21375,7 @@ ${message}`;
     if (shutdownDone) return;
     shutdownDone = true;
     if (persistTimer) clearTimeout(persistTimer);
+    flushDirtyIndexes();
     if (persist) {
       try {
         process.off("exit", onProcessExit);
@@ -21151,6 +21528,13 @@ function loadHistorySnapshot(persistPath, sessions, sessionEvents, transcriptBas
     }
   }
 }
+function promptTextForIndex(message, system) {
+  const text13 = typeof message === "string" ? message : (Array.isArray(message) ? message : [message]).map(
+    (b) => b && typeof b === "object" && typeof b.text === "string" ? b.text : ""
+  ).filter(Boolean).join("\n");
+  if (system && text13.startsWith(system)) return text13.slice(system.length).replace(/^\n\n/, "");
+  return text13;
+}
 function quoteArg(arg) {
   if (arg === "") return '""';
   if (/^[a-zA-Z0-9._/=:@,+-]+$/.test(arg)) return arg;
@@ -21190,6 +21574,7 @@ var init_sessions = __esm({
     init_session_continue_fresh();
     init_session_outcome();
     init_session_end_reason();
+    init_session_index();
     init_session_message();
     SESSIONS_FILE_PATH = () => resolve(homedir(), ".agentproto", "sessions.json");
     SESSION_ID_ENV = "AGENTPROTO_SESSION_ID";
@@ -22937,7 +23322,7 @@ init_resume_strategies();
 init_spawn_defaults();
 init_launch_config();
 init_resume_context_digest();
-init_session_spawn();
+init_eligibility_manifest();
 init_providers_store();
 init_catalog_models();
 init_config();
@@ -23435,7 +23820,7 @@ async function restartAgentSession(registry, resolveAgentAdapter, prev, opts = {
     desc = await spawnWithResume(strategy.resumeSessionId);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    if (strategy.resumeSessionId && RESUME_ID_REJECTED_RE.test(msg)) {
+    if (strategy.resumeSessionId && (RESUME_ID_REJECTED_RE.test(msg) || RESUME_CONNECTION_LOST_RE.test(msg))) {
       desc = await spawnWithResume(void 0);
       resumeFallback = true;
     } else {
@@ -23726,7 +24111,7 @@ var EMPTY_SKILLS = {
   byHarness: [],
   defaults: { global: [], byAdapter: {} }
 };
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function classifyDaemonMount(adapter) {
@@ -23879,15 +24264,15 @@ var slugToCamel2 = (slug) => slug.replace(/-([a-z0-9])/g, (_m, c) => c.toUpperCa
 async function readAdapterManifest(adapter) {
   try {
     const mod = await import(adapter.packageName);
-    if (!isRecord5(mod)) return void 0;
+    if (!isRecord6(mod)) return void 0;
     const candidate = mod[slugToCamel2(adapter.slug)] ?? mod.default ?? mod.handle;
-    return isRecord5(candidate) ? candidate : void 0;
+    return isRecord6(candidate) ? candidate : void 0;
   } catch {
     return void 0;
   }
 }
 function asSkillsTarget(value) {
-  if (!isRecord5(value) || typeof value.format !== "string") return void 0;
+  if (!isRecord6(value) || typeof value.format !== "string") return void 0;
   const out = { format: value.format };
   if (typeof value.dir === "string") out.dir = value.dir;
   if (typeof value.outDir === "string") out.outDir = value.outDir;
@@ -23904,10 +24289,10 @@ async function listNativeSkills(adapter) {
 }
 async function buildHarnessEntry(adapter) {
   const manifest = await readAdapterManifest(adapter);
-  const metadata = manifest && isRecord5(manifest.metadata) ? manifest.metadata : void 0;
+  const metadata = manifest && isRecord6(manifest.metadata) ? manifest.metadata : void 0;
   const target = asSkillsTarget(metadata?.skills);
   const options = manifest && Array.isArray(manifest.options) ? manifest.options : [];
-  const spawnOption = options.some((o) => isRecord5(o) && o.id === "skills");
+  const spawnOption = options.some((o) => isRecord6(o) && o.id === "skills");
   const [installed, native] = await Promise.all([
     target ? listInstalledForTarget(target) : Promise.resolve([]),
     listNativeSkills(adapter)
@@ -24293,6 +24678,8 @@ async function processTreeRss(rootPids, exec = defaultPsExecutor) {
 }
 
 // src/session-tools.ts
+init_transcript_writer();
+init_session_index();
 init_process_stats();
 
 // src/host-load.ts
@@ -26086,6 +26473,7 @@ var publicSessionDescriptor = (session) => {
 var compactSessionItem = (s) => ({
   id: s.id,
   kind: s.kind,
+  ...s.origin ? { origin: s.origin } : {},
   name: s.name,
   label: s.label,
   status: s.status,
@@ -26374,6 +26762,66 @@ function registerSessionTools(rawServer, opts) {
       })
     ]
   });
+  const sessionSearchSchema = z.object({
+    query: z.string().describe(
+      "Case-insensitive substring to match: a session id PREFIX, or a substring of label, title, cwd, or workspace slug. Empty matches all."
+    ),
+    status: z.enum(["starting", "running", "exited", "killed", "error"]).optional().describe("Filter by exact status."),
+    ...pageParamsShape
+  });
+  registerBuiltinTool(server, {
+    id: "session_search",
+    description: "Find sessions by a case-insensitive query across id prefix, label, title, cwd and workspace slug \u2014 the daemon-side twin of `agentproto sessions find <query>`. Optional `status` filters to an exact lifecycle status; `limit` (default 20) caps the result. Each hit uses the same compact shape as `session_list`. Read-only; use `session_recap` on a hit to see where that session stopped.",
+    inputSchema: sessionSearchSchema,
+    handler: async (input) => {
+      let rows = registry.list({ includeArchived: true });
+      if (callerScope) {
+        const subtree = collectSubtree(callerScope.ownerSessionId, rows);
+        rows = rows.filter((s) => subtree.has(s.id));
+      }
+      rows = rows.filter((s) => matchesSessionQuery(s, input.query));
+      if (input.status) rows = rows.filter((s) => s.status === input.status);
+      const limit = Math.max(1, Math.min(200, input.limit ?? INDEX_DEFAULT_LIMIT));
+      rows = rows.sort((a, b) => (b.lastActivityAt ?? b.startedAt).localeCompare(a.lastActivityAt ?? a.startedAt)).slice(0, limit);
+      return rows.map(publicSessionDescriptor);
+    },
+    transformers: [
+      paginated({
+        project: compactSessionItem,
+        keyOf: (s) => s.id,
+        maxLimit: 200,
+        itemKey: "sessions"
+      })
+    ]
+  });
+  registerBuiltinTool(server, {
+    id: "session_recap",
+    description: 'One-glance "where did we stop" for a session: the last K user prompts with timestamps, the final assistant text of the last turn, and meta (status/alive, model, adapter, cwd, parent, child ids, cost, queued prompts). Reads the session\'s index sidecar plus a bounded tail of its transcript \u2014 never the whole file. Use it to resume an interrupted session by id (find the id with `session_search`).',
+    inputSchema: z.object({
+      id: z.string().min(1).describe("Session id or name \u2014 from `session_list`/`session_search`."),
+      last: z.number().int().min(1).max(50).optional().describe("How many recent user prompts to include (default 8).")
+    }),
+    handler: async (input) => {
+      const resolved = registry.findByIdOrName(input.id);
+      if (!resolved) throw new Error(`session_recap: no session "${input.id}"`);
+      const desc = registry.get(resolved.id) ?? resolved;
+      const baseDir = registry.transcriptBaseDir;
+      const index = readSessionIndex(desc.id, baseDir);
+      const entry = indexEntryFromDescriptor(desc, {
+        ...index?.lastUserPrompt ? { lastUserPrompt: index.lastUserPrompt } : {},
+        ...index?.lastOutputText ? { lastOutputText: index.lastOutputText } : {}
+      });
+      const children = registry.list({ includeArchived: true }).filter((s) => s.parentSessionId === desc.id).map((s) => s.id);
+      return buildSessionRecap({
+        entry,
+        eventsPath: sessionEventsPath(desc.id, baseDir),
+        last: input.last ?? 8,
+        children,
+        ...desc.queuedPrompts !== void 0 ? { queuedPrompts: desc.queuedPrompts } : {}
+      });
+    },
+    transformers: [catchErrors()]
+  });
   registerBuiltinTool(server, {
     id: "session_stats",
     description: 'Resource usage per session, sampled from the OS process table: RSS bytes, %CPU, process count and top commands by RSS for every live session, sorted by RSS (each row labelled with the session\'s `label`/`name`), plus `daemon` (the daemon process + its own children), `provisioning` (worktree setup work such as `pnpm install` not yet attached to a session, with `inFlight` provisions), `orphans` (processes that look agentproto-owned but belong to no live session - reported only, never killed), `totals`, and `host` (load average, free/total memory). `detail:"full"` adds every process (pid, command, RSS, CPU, elapsed) per row. Cached ~3s; `fresh:true` forces a new sample. A subtree-scoped caller sees only its own sessions (no daemon/provisioning/orphan buckets).',
@@ -28621,8 +29069,8 @@ function registerSessionTools(rawServer, opts) {
     'Record a verdict on specific sessions \u2014 the mutating half of `session_wrapup_plan`. Each id is RE-CLASSIFIED from scratch immediately before acting (a plan computed moments earlier can be stale) and is only acted on if it is STILL `close` or `stuck`. Pass `judgedBy` (a judge session id) to also accept a `judge`-class id \u2014 the judge\'s verdict is what makes it safe to act on. `keep`-class ids are ALWAYS refused, no exception. `verdict: "done"` or `"abandoned"` actually CLOSES the session (tagged `endedReason:\'steward-completed\'`/`\'steward-abandoned\'`) and leaves it resumable (same as the idle reaper) \u2014 this never deletes anything. `verdict: "blocked"` or `"needs-input"` is NOT a completion: the session is left running untouched and the verdict is recorded as a flag (`SessionDescriptor.wrapupFlag`) instead \u2014 the per-id result\'s `action` says `closed` vs `flagged`. Also refused (result `ok:false`, `error:\'refused_stale_or_busy\'`) if the session is busy/awaitingInput/awaitingPermission or has a background task outstanding at the moment of the call, for either kind of action. A scoped orchestrator may only act on its own subtree. Returns a per-id result. Only the requested sessions are re-checked (never a full plan). If it outlasts 25 s (`waitMs`) it returns `{ jobId, status: "running", followUp }` \u2014 poll `session_wrapup_status`; the apply keeps running regardless.',
     {
       sessionIds: z.array(z.string().min(1)).min(1).describe("Session ids or names, from `session_wrapup_plan`."),
-      verdict: z.enum(["done", "abandoned", "blocked", "needs-input"]).describe(
-        'What the session\'s work amounted to. "done"/"abandoned" CLOSE the session (`endedReason:\'steward-completed\'`/`\'steward-abandoned\'`); "blocked"/"needs-input" only FLAG it (`SessionDescriptor.wrapupFlag`) \u2014 the session keeps running.'
+      verdict: z.enum(["done", "abandoned", "partial", "failed", "blocked", "needs-input"]).describe(
+        'What the session\'s work amounted to. "done"/"abandoned"/"partial"/"failed" CLOSE the session (`endedReason:\'steward-completed\'`/`\'steward-abandoned\'` \u2014 done only), the verdict nuance kept on the outcome; "blocked"/"needs-input" only FLAG it (`SessionDescriptor.wrapupFlag`) \u2014 the session keeps running.'
       ),
       note: z.string().optional().describe("Free-text note recorded on the outcome or the flag."),
       judgedBy: z.string().optional().describe(
@@ -28697,6 +29145,70 @@ function registerSessionTools(rawServer, opts) {
       }
     }
   );
+  server.tool(
+    "session_mark_completed",
+    "Mark a live session as completed \u2014 closes it with verdict:'done' and tags it as steward-completed. Use when a human (or an agent's judge) decides the session's work is done \u2014 the declared path: no wrapup plan, no classification. One call fuses what would otherwise be `session_wrapup_apply` without a plan: the verdict (with an optional summary + who judged it) is written onto the session's Level-2 `SessionOutcome` and the session is closed gracefully the same way wrapup-apply does, left lazy-resumable (never deleted). `verdict:'partial'`/'failed'/'abandoned' close as not-completed (`endedReason:'steward-abandoned'`); `'blocked'`/'needs-input' are NOT completions \u2014 the session stays running and the verdict is recorded as a flag instead. Refused (result ok:false) when the session is missing, not agent-cli, already terminal, mid-turn/awaiting input/permission, or has a background task in flight.",
+    {
+      sessionId: z.string().min(1).describe("Session id or name \u2014 from `session_list`, must be a live agent-cli session."),
+      verdict: z.enum(["done", "abandoned", "partial", "failed", "blocked", "needs-input"]).optional().describe(
+        "Default 'done'. 'done' closes as completed (`endedReason:'steward-completed'`); 'partial'/'failed'/'abandoned' close as not-completed (steward-abandoned) with the verdict nuance kept on the outcome; 'blocked'/'needs-input' flag instead \u2014 the session keeps running."
+      ),
+      summary: z.string().optional().describe("Overrides the outcome's derived summary (trimmed to the same cap as the derived one)."),
+      note: z.string().optional().describe("Free-text note explaining the verdict."),
+      judgedBy: z.string().optional().describe(
+        "A judge session id \u2014 sets the outcome's source to 'judged'. Omitted \u21D2 'declared', judgedBy:'steward-rules'."
+      )
+    },
+    async (input) => {
+      const desc = registry.findByIdOrName(input.sessionId);
+      if (!desc) {
+        return { content: [{ type: "text", text: JSON.stringify({ ok: false, error: "not_found", sessionId: input.sessionId }) }] };
+      }
+      if (callerScope) {
+        const subtree = collectSubtree(callerScope.ownerSessionId, registry.list({ includeArchived: true }));
+        if (!subtree.has(desc.id)) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify({
+                  ok: false,
+                  error: "orchestrator_session_out_of_scope",
+                  message: `session_mark_completed: session "${desc.id}" is not in your subtree \u2014 a scoped orchestrator can only mark sessions it (transitively) spawned.`,
+                  sessionId: desc.id
+                })
+              }
+            ],
+            isError: true
+          };
+        }
+      }
+      const verdict = input.verdict ?? "done";
+      const status = registry.get(desc.id)?.status ?? desc.status;
+      if (status !== "running" && status !== "starting") {
+        return {
+          content: [{ type: "text", text: JSON.stringify({ ok: false, error: "not_live", status, sessionId: desc.id }) }],
+          isError: true
+        };
+      }
+      const source = input.judgedBy ? "judged" : "declared";
+      const applied = registry.closeWithOutcome(desc.id, {
+        verdict,
+        ...input.summary !== void 0 ? { summary: input.summary } : {},
+        ...input.note !== void 0 ? { note: input.note } : {},
+        judgedBy: input.judgedBy ?? "steward-rules",
+        source
+      });
+      const out = {
+        ok: applied,
+        sessionId: desc.id,
+        verdict,
+        action: verdict === "blocked" || verdict === "needs-input" ? "flagged" : "closed",
+        ...!applied ? { error: "refused_stale_or_busy" } : {}
+      };
+      return { content: [{ type: "text", text: JSON.stringify(applied ? { ...out, endedReason: registry.get(desc.id)?.endedReason } : out) }] };
+    }
+  );
   server.tool(
     "session_evidence",
     "READ-ONLY \u2014 a compact evidence object for ONE session, as fed to the session-steward judge: label, cwd, adapter, status, keepAlive, awaitingInput, busy, idle minutes, the last ~10 user/assistant turns (trimmed to ~3 KB total, newest kept first), and \u2014 for a session in a linked worktree \u2014 branch, dirty counts, ahead/behind and PR state/number. Mutates nothing.",
@@ -34924,11 +35436,11 @@ function verifySignatureV2(secret, headers, body, nowMs, skewMs = SIGNATURE_V2_S
   if (a.length !== b.length || !timingSafeEqual(a, b)) return { ok: false, reason: "signature_mismatch" };
   return { ok: true, timestampSec };
 }
-var isRecord6 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isRecord7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function toSentinelEvent(raw, seq) {
-  if (!isRecord6(raw)) return null;
+  if (!isRecord7(raw)) return null;
   const { id, source, type, subject, time, data, summary, subjects, terminal, consumerref } = raw;
-  if (raw.specversion !== "1.0" || typeof id !== "string" || id === "" || typeof source !== "string" || typeof type !== "string" || type === "" || typeof subject !== "string" || subject === "" || typeof time !== "string" || !isRecord6(data) || typeof summary !== "string" || !Array.isArray(subjects) || !subjects.every((s) => typeof s === "string") || typeof terminal !== "boolean") {
+  if (raw.specversion !== "1.0" || typeof id !== "string" || id === "" || typeof source !== "string" || typeof type !== "string" || type === "" || typeof subject !== "string" || subject === "" || typeof time !== "string" || !isRecord7(data) || typeof summary !== "string" || !Array.isArray(subjects) || !subjects.every((s) => typeof s === "string") || typeof terminal !== "boolean") {
     return null;
   }
   const envSeq = typeof raw.seq === "number" ? raw.seq : seq;
@@ -35034,7 +35546,7 @@ function agentpushSentinelProvider(opts = {}) {
       json3 = void 0;
     }
     if (!res.ok) {
-      const detail = isRecord6(json3) && typeof json3.error === "string" ? json3.error : text13.slice(0, 200);
+      const detail = isRecord7(json3) && typeof json3.error === "string" ? json3.error : text13.slice(0, 200);
       throw new AgentpushHttpError(res.status, `agentpush ${method} ${path} \u2192 HTTP ${res.status}${detail ? `: ${detail}` : ""}`);
     }
     return json3;
@@ -35120,7 +35632,7 @@ function agentpushSentinelProvider(opts = {}) {
           ...push ? { callback_url: callbackUrl2(delivery.callbackUrl, hookKey), callback_secret: callbackSecret } : {}
         }
       });
-      const id = isRecord6(json3) && isRecord6(json3.subscription) ? json3.subscription.id : void 0;
+      const id = isRecord7(json3) && isRecord7(json3.subscription) ? json3.subscription.id : void 0;
       if (typeof id !== "string" || id === "") throw new Error("agentpush: create returned no subscription id");
       return {
         provider: AGENTPUSH_SLUG,
@@ -35147,7 +35659,7 @@ function agentpushSentinelProvider(opts = {}) {
       let sub;
       try {
         const json3 = await api("GET", subPath(handle));
-        sub = isRecord6(json3) && isRecord6(json3.subscription) ? json3.subscription : void 0;
+        sub = isRecord7(json3) && isRecord7(json3.subscription) ? json3.subscription : void 0;
       } catch (err) {
         if (isHttp(err, 404)) {
           throw new Error(`agentpush subscription ${handle.remoteId} no longer exists \u2014 re-create the sentinel`);
@@ -35178,7 +35690,7 @@ function agentpushSentinelProvider(opts = {}) {
     async status(handle) {
       try {
         const json3 = await api("GET", subPath(handle));
-        const sub = isRecord6(json3) && isRecord6(json3.subscription) ? json3.subscription : void 0;
+        const sub = isRecord7(json3) && isRecord7(json3.subscription) ? json3.subscription : void 0;
         const status = sub && typeof sub.status === "string" ? sub.status : "unknown";
         if (status === "active") return { ok: true };
         return { ok: false, detail: `the agentpush subscription is ${status}` };
@@ -35190,12 +35702,12 @@ function agentpushSentinelProvider(opts = {}) {
       const after = handle.cursor ?? "0";
       if (stateOf(handle).mode === "push") return { events: [], cursor: after };
       const json3 = await api("GET", `${subPath(handle)}/events`, { query: { after, limit: Math.max(1, Math.min(limit, 1e3)) } });
-      const items = isRecord6(json3) && Array.isArray(json3.items) ? json3.items : [];
+      const items = isRecord7(json3) && Array.isArray(json3.items) ? json3.items : [];
       const events = [];
       let cursor = Number(after);
       if (!Number.isFinite(cursor)) cursor = 0;
       for (const item of items) {
-        if (!isRecord6(item)) continue;
+        if (!isRecord7(item)) continue;
         const seq = typeof item.seq === "number" ? item.seq : void 0;
         if (seq !== void 0 && seq > cursor) cursor = seq;
         const event = toSentinelEvent(item.envelope, seq);
@@ -37571,11 +38083,11 @@ function sanitize(cacheKey) {
   const cleaned = cacheKey.replace(/[^a-zA-Z0-9._-]/g, "_");
   return cleaned.length > 0 ? cleaned : "default";
 }
-function isRecord7(v) {
+function isRecord8(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function isEntry2(v) {
-  return isRecord7(v) && typeof v.resolvedInputHash === "string" && "output" in v;
+  return isRecord8(v) && typeof v.resolvedInputHash === "string" && "output" in v;
 }
 function createFileStepCache(cacheKey, opts) {
   const dir = opts?.dir ?? DEFAULT_CACHE_DIR();
@@ -37588,7 +38100,7 @@ function createFileStepCache(cacheKey, opts) {
     } catch {
       return {};
     }
-    if (!isRecord7(parsed)) return {};
+    if (!isRecord8(parsed)) return {};
     const out = {};
     for (const [k, v] of Object.entries(parsed)) if (isEntry2(v)) out[k] = v;
     return out;
@@ -44722,12 +45234,12 @@ async function readBody2(req) {
   }
   return { raw: Buffer.concat(chunks).toString("utf8") };
 }
-var isRecord8 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isRecord9 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function parseParts(raw) {
   if (!Array.isArray(raw)) throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "message.parts must be an array");
   const parts = [];
   for (const p of raw) {
-    if (!isRecord8(p)) throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "each message part must be an object");
+    if (!isRecord9(p)) throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "each message part must be an object");
     if ("text" in p) {
       if (typeof p.text !== "string") throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "part.text must be a string");
       parts.push({ text: p.text });
@@ -44760,13 +45272,13 @@ async function handleA2aTaskRequest(req, res, path, deps2) {
     send(res, 200, { jsonrpc: "2.0", id: null, error: { code: JSON_RPC_ERROR.parse, message: "parse error: body is not valid JSON" } });
     return true;
   }
-  if (!isRecord8(rpc) || rpc.jsonrpc !== "2.0" || typeof rpc.method !== "string") {
+  if (!isRecord9(rpc) || rpc.jsonrpc !== "2.0" || typeof rpc.method !== "string") {
     send(res, 200, { jsonrpc: "2.0", id: null, error: { code: JSON_RPC_ERROR.invalidRequest, message: 'invalid request: expected a JSON-RPC 2.0 object with a string "method" (batches are not supported)' } });
     return true;
   }
   const id = typeof rpc.id === "string" || typeof rpc.id === "number" ? rpc.id : null;
   const method = rpc.method;
-  const params = isRecord8(rpc.params) ? rpc.params : {};
+  const params = isRecord9(rpc.params) ? rpc.params : {};
   const requested = negotiateVersion(
     typeof req.headers["a2a-version"] === "string" ? req.headers["a2a-version"] : void 0,
     new URL(req.url ?? "/", "http://localhost").searchParams.get("version")
@@ -44824,14 +45336,14 @@ async function handleA2aTaskRequest(req, res, path, deps2) {
           throw new RpcFailure(JSON_RPC_ERROR.unsupportedOperation, `method "SendMessage" is not allowed for app "${appId}": its manifest does not declare accepts.tasks: true`);
         }
         const rawMessage = params.message;
-        if (!isRecord8(rawMessage) || rawMessage.role !== "ROLE_USER") {
+        if (!isRecord9(rawMessage) || rawMessage.role !== "ROLE_USER") {
           throw new RpcFailure(JSON_RPC_ERROR.invalidParams, 'params.message must be an object with role "ROLE_USER"');
         }
         const parts = parseParts(rawMessage.parts);
         const { skill, prompt } = extractSkillRequest(
-          { parts, ...isRecord8(rawMessage.metadata) ? { metadata: rawMessage.metadata } : {} },
+          { parts, ...isRecord9(rawMessage.metadata) ? { metadata: rawMessage.metadata } : {} },
           appId,
-          isRecord8(params.metadata) ? params.metadata : void 0
+          isRecord9(params.metadata) ? params.metadata : void 0
         );
         if (!skill) {
           throw new RpcFailure(JSON_RPC_ERROR.invalidParams, 'no skill requested: set message.metadata.skill or start the first text part with "skill:<id>"');
@@ -52347,9 +52859,13 @@ function isCrashed(desc) {
   if (desc.kind !== "agent-cli") return false;
   if (desc.status !== "running") return false;
   if (desc.remote === true) return false;
+  if (desc.adapterConnected === false) return true;
   if (desc.pid === null || desc.pid === void 0) return false;
   return desc.processAlive === false;
 }
+function crashReasonFor(desc) {
+  return desc.adapterConnected === false ? "transport-closed" : "process-gone";
+}
 function runCrashDetectPass(opts) {
   const { registry, isServed } = opts;
   const intervalMs = opts.crashDetectIntervalMs;
@@ -52365,7 +52881,7 @@ function runCrashDetectPass(opts) {
     ids: []
   };
   for (const d of candidates) {
-    if (registry.markCrashed(d.id)) {
+    if (registry.markCrashed(d.id, crashReasonFor(d))) {
       summary.crashed++;
       summary.ids.push(d.id);
     }
@@ -52535,6 +53051,7 @@ async function resolveMessagingDefaults(loadCfg = loadConfig) {
 
 // src/index.ts
 init_transcript_writer();
+init_session_index();
 var BINDINGS_FILE_PATH = () => resolve(homedir(), ".agentproto", "transmitter-bindings.json");
 var PERSIST_DEBOUNCE_MS5 = 1500;
 var keyOf = (alias, source, contactRef) => `${alias}:${source}:${contactRef}`;
@@ -52948,12 +53465,13 @@ async function ssrfFetch(url, init, io = {}) {
   if ((init.body?.byteLength ?? 0) > MAX_REQUEST_BODY_BYTES) {
     throw new SsrfFetchError("connect", `request body exceeds the ${MAX_REQUEST_BODY_BYTES}-byte clamp`);
   }
+  const port = parsed.port ? Number(parsed.port) : 443;
   if (testDispatcher) {
     const literal = parseIpv4(parsed.hostname);
     if (literal && !ipv4Public(literal[0], literal[1], literal[2], literal[3])) {
       throw new SsrfFetchError("private_target", `literal non-public address ${parsed.hostname}`);
     }
-    return await testDispatcher({ url, headers: init.headers ?? {}, body: init.body, timeoutMs: init.timeoutMs });
+    return await testDispatcher({ url, headers: finalHeaders(init.headers ?? {}, parsed.hostname, port), body: init.body, timeoutMs: init.timeoutMs });
   }
   const candidates = await resolveHost(parsed.hostname, io.resolvers ?? {});
   if (candidates.length === 0) {
@@ -52965,17 +53483,26 @@ async function ssrfFetch(url, init, io = {}) {
   }
   const connectIp = candidates[0] ?? candidates[candidates.length - 1];
   if (connectIp === void 0) throw new SsrfFetchError("connect", "no address available for connect");
-  const port = parsed.port ? Number(parsed.port) : 443;
   return await rawPost({
     connectIp,
     servername: parsed.hostname,
     port,
     path: `${parsed.pathname}${parsed.search}`,
-    headers: init.headers ?? {},
+    // HTTP Host header must stay the ORIGINAL hostname — `request({host})`
+    // below only picks the TCP destination; a literal-IP Host is answered
+    // 403/421 by name-based vhosts (tested live against cloudflared+CF edge),
+    // which would falsely categorise every virtual-hosted subscriber as
+    // non_2xx. An explicit caller Host header wins (finalHeaders keeps it).
+    headers: finalHeaders(init.headers ?? {}, parsed.hostname, port),
     body: init.body,
     timeoutMs: init.timeoutMs
   });
 }
+function finalHeaders(headers, hostname6, port) {
+  const hasHost = "Host" in headers || "host" in headers;
+  if (hasHost) return headers;
+  return { ...headers, Host: port === 443 ? hostname6 : `${hostname6}:${port}` };
+}
 function rawPost(args) {
   return new Promise((resolve42, reject) => {
     const req = request({
@@ -52986,6 +53513,8 @@ function rawPost(args) {
       path: args.path,
       method: "POST",
       servername: args.servername,
+      // Host already defaulted to the ORIGINAL hostname by finalHeaders —
+      // the socket only carries `args.connectIp` as its TCP destination.
       headers: args.headers,
       rejectUnauthorized: true
     });
@@ -53103,6 +53632,562 @@ async function deliverEventEnvelope(replay, event, deps2 = {}) {
   }
   return { ok: false, reason: "retries_exhausted", delivery };
 }
+function challengeReasonForSsrf(reason) {
+  if (reason === "non_https") return "non_https";
+  if (reason === "private_target" || reason === "redirect") return "ssrf_blocked";
+  return "timeout";
+}
+var CHALLENGE_TTL_MS = 10 * 60 * 1e3;
+var encoder = new TextEncoder();
+var cache = /* @__PURE__ */ new Map();
+function challengeCacheSize() {
+  return cache.size;
+}
+function resetChallengeCacheForTests() {
+  cache.clear();
+}
+function normalizeCallbackUrl(url) {
+  try {
+    const u = new URL(url);
+    const port = u.port === "443" ? "" : `:${u.port}`;
+    return `${u.protocol.toLowerCase()}//${u.hostname.toLowerCase()}${port}${u.pathname}${u.search}`;
+  } catch {
+    return null;
+  }
+}
+function hashSecret(secret) {
+  return createHash("sha256").update(secret, "utf8").digest("hex");
+}
+function constantTimeEq(a, b) {
+  const da = createHash("sha256").update(a, "utf8").digest();
+  const db = createHash("sha256").update(b, "utf8").digest();
+  return timingSafeEqual(da, db);
+}
+async function verifyCallback(input, deps2 = {}) {
+  const now = deps2.now ?? (() => Date.now());
+  const normalized = normalizeCallbackUrl(input.url);
+  if (normalized === null || !normalized.startsWith("https://")) {
+    return { ok: false, reason: "non_https", detail: "callback URL must be an https URL" };
+  }
+  if (decodeWhsecSecret(input.secret) === null) {
+    return {
+      ok: false,
+      reason: "challenge_failed",
+      detail: "invalid secret format \u2014 must be whsec_ + base64 decoding to 24..64 bytes (the caller validates before this; a bad secret is never cached)"
+    };
+  }
+  const cacheKey = `${input.principal}|${normalized}|${hashSecret(input.secret)}`;
+  const cached = cache.get(cacheKey);
+  if (cached && cached.expiresAt > now()) {
+    return { ok: true, verificationBytes: cached.requestBytes };
+  }
+  if (cached) cache.delete(cacheKey);
+  const challenge = randomBytes(32).toString("hex");
+  const requestBytes = encoder.encode(JSON.stringify({ type: "verification", challenge }));
+  const msgId = `msg_verification_${randomBytes(12).toString("hex")}`;
+  const timestamp = Math.floor(now() / 1e3);
+  let headers;
+  try {
+    const signed = signWebhook({ msgId, timestamp, payload: requestBytes, secrets: [input.secret] });
+    headers = {
+      ...signed,
+      "content-type": "application/json",
+      "X-MCP-Subscription-Id": input.subscriptionId
+    };
+  } catch (err) {
+    return { ok: false, reason: "challenge_failed", detail: `signing failed: ${err.message}` };
+  }
+  let response;
+  try {
+    response = await (deps2.fetch ?? ssrfFetch)(input.url, {
+      method: "POST",
+      headers,
+      body: requestBytes,
+      timeoutMs: 1e4
+      // default challenge timeout (delivery uses 15_000)
+    });
+  } catch (err) {
+    if (err instanceof SsrfFetchError) {
+      return { ok: false, reason: challengeReasonForSsrf(err.reason), detail: `${err.reason}: ${err.message}` };
+    }
+    return { ok: false, reason: "timeout", detail: err.message };
+  }
+  if (response.status < 200 || response.status > 299) {
+    return { ok: false, reason: "non_2xx", detail: `callback responded with status ${response.status}` };
+  }
+  let parsedBody;
+  try {
+    parsedBody = JSON.parse(response.body);
+  } catch {
+    return { ok: false, reason: "challenge_failed", detail: "response body is not JSON" };
+  }
+  const echoed = parsedBody?.challenge;
+  if (typeof echoed !== "string" || !constantTimeEq(echoed, challenge)) {
+    return { ok: false, reason: "challenge_failed", detail: "response did not echo the fresh challenge" };
+  }
+  cache.set(cacheKey, { requestBytes, expiresAt: now() + CHALLENGE_TTL_MS });
+  return { ok: true, verificationBytes: requestBytes };
+}
+function canonicalizeJcs(value) {
+  if (value === null) return "null";
+  switch (typeof value) {
+    case "boolean":
+      return value ? "true" : "false";
+    case "number":
+      if (!Number.isFinite(value)) throw new Error("JCS: non-finite number is not JSON");
+      return JSON.stringify(value);
+    case "string":
+      return JSON.stringify(value);
+    case "object":
+      break;
+    default:
+      throw new Error(`JCS: unsupported value type "${typeof value}"`);
+  }
+  if (Array.isArray(value)) {
+    return `[${value.map(canonicalizeJcs).join(",")}]`;
+  }
+  const obj = value;
+  const keys = Object.keys(obj).sort();
+  const members = keys.map((key) => `${JSON.stringify(key)}:${canonicalizeJcs(obj[key])}`);
+  return `{${members.join(",")}}`;
+}
+function subscriptionId(identity) {
+  const canonical3 = canonicalizeJcs({
+    principal: identity.principal,
+    callbackUrl: identity.callbackUrl,
+    eventName: identity.eventName,
+    args: identity.args
+  });
+  const digest = createHash("sha256").update(canonical3, "utf8").digest("hex");
+  return `sub_${digest.slice(0, 32)}`;
+}
+
+// src/mcp-events/events-registry.ts
+function daemonBearerPrincipal() {
+  return "daemon-bearer";
+}
+function sessionPrincipal(sessionId) {
+  return `session:${sessionId}`;
+}
+function typeMatches(type, value) {
+  if (Array.isArray(type)) return type.some((t) => typeMatches(t, value));
+  switch (type) {
+    case "object":
+      return typeof value === "object" && value !== null && !Array.isArray(value);
+    case "array":
+      return Array.isArray(value);
+    case "string":
+      return typeof value === "string";
+    case "number":
+      return typeof value === "number" && Number.isFinite(value);
+    case "integer":
+      return typeof value === "number" && Number.isInteger(value);
+    case "boolean":
+      return typeof value === "boolean";
+    case "null":
+      return value === null;
+    default:
+      return true;
+  }
+}
+function deepEqual2(a, b) {
+  if (a === b) return true;
+  if (typeof a !== typeof b) return false;
+  if (Array.isArray(a) && Array.isArray(b)) {
+    return a.length === b.length && a.every((v, i) => deepEqual2(v, b[i]));
+  }
+  if (typeof a === "object" && a !== null && typeof b === "object" && b !== null) {
+    const ao = a;
+    const bo = b;
+    const ak = Object.keys(ao);
+    const bk = Object.keys(bo);
+    return ak.length === bk.length && ak.every((k) => deepEqual2(ao[k], bo[k]));
+  }
+  return false;
+}
+function validateNode(schema, value, path) {
+  const at = path || "$";
+  if (schema.type !== void 0 && !typeMatches(schema.type, value)) {
+    return { ok: false, reason: `${at}: expected ${String(schema.type)}` };
+  }
+  if (schema.const !== void 0 && !deepEqual2(schema.const, value)) {
+    return { ok: false, reason: `${at}: must equal the const value` };
+  }
+  if (Array.isArray(schema.enum) && !schema.enum.some((e) => deepEqual2(e, value))) {
+    return { ok: false, reason: `${at}: not one of the allowed values` };
+  }
+  if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+    const obj = value;
+    const required = Array.isArray(schema.required) ? schema.required : [];
+    for (const key of required) {
+      if (!(key in obj)) return { ok: false, reason: `${at}: missing required property "${key}"` };
+    }
+    const properties = schema.properties ?? {};
+    if (schema.additionalProperties === false) {
+      for (const key of Object.keys(obj)) {
+        if (!(key in properties)) return { ok: false, reason: `${at}: unexpected property "${key}"` };
+      }
+    }
+    for (const [key, sub] of Object.entries(properties)) {
+      if (key in obj) {
+        const result = validateNode(sub, obj[key], `${path}.${key}`);
+        if (!result.ok) return result;
+      }
+    }
+  }
+  if (Array.isArray(value) && schema.items !== void 0) {
+    const items = schema.items;
+    for (let i = 0; i < value.length; i++) {
+      const result = validateNode(items, value[i], `${path}[${i}]`);
+      if (!result.ok) return result;
+    }
+  }
+  if (typeof value === "string") {
+    if (typeof schema.minLength === "number" && value.length < schema.minLength) {
+      return { ok: false, reason: `${at}: shorter than ${schema.minLength}` };
+    }
+    if (typeof schema.pattern === "string" && !new RegExp(schema.pattern).test(value)) {
+      return { ok: false, reason: `${at}: does not match the required pattern` };
+    }
+  }
+  if (typeof value === "number" && typeof schema.minimum === "number" && value < schema.minimum) {
+    return { ok: false, reason: `${at}: below the minimum ${schema.minimum}` };
+  }
+  return { ok: true };
+}
+function validateAgainstInputSchema(schema, args) {
+  return validateNode(schema, args, "");
+}
+var PR_ARGS_INPUT_SCHEMA = {
+  type: "object",
+  properties: {
+    repo: {
+      type: "string",
+      description: "Repository in `owner/name` form, e.g. `agentproto/ts`.",
+      pattern: "^[^/\\s]+/[^/\\s]+$"
+    },
+    number: {
+      type: "integer",
+      description: "Pull request number.",
+      minimum: 1
+    }
+  },
+  required: ["repo", "number"],
+  additionalProperties: false
+};
+var ENVELOPE_DATA_PROPERTIES = {
+  subject: { type: "string", description: "CloudEvents subject the event is filed under." },
+  summary: { type: "string", description: "One-line human-readable summary." }
+};
+function payloadSchema2(properties, required) {
+  return {
+    type: "object",
+    properties: { ...properties, ...ENVELOPE_DATA_PROPERTIES },
+    required: [...required, "subject", "summary"],
+    additionalProperties: false
+  };
+}
+function githubPrArgumentsToMatch(eventName) {
+  return (args) => {
+    const repo = args.repo;
+    const number = args.number;
+    if (typeof repo !== "string" || !/^[^/\s]+\/[^/\s]+$/.test(repo)) {
+      return { ok: false, reason: "`repo` must be `owner/name`" };
+    }
+    if (typeof number !== "number" || !Number.isInteger(number) || number <= 0) {
+      return { ok: false, reason: "`number` must be a positive integer" };
+    }
+    return {
+      ok: true,
+      matchClauses: [{ subject: `github:${repo}#${number}`, types: [eventName] }],
+      providerSlug: "local-gh"
+    };
+  };
+}
+function githubAuthorize(_args, _principal) {
+  return true;
+}
+function githubEvent(input) {
+  return {
+    definition: {
+      name: input.name,
+      description: input.description,
+      delivery: ["webhook"],
+      inputSchema: PR_ARGS_INPUT_SCHEMA,
+      payloadSchema: input.payloadSchema
+    },
+    meta: {
+      // v1 REALITY: no provider has historical replay (plan §2) — every
+      // definition is non-replayable and always returns `cursor: null`.
+      replayable: false,
+      argumentsToMatch: githubPrArgumentsToMatch(input.name),
+      authorize: githubAuthorize
+    }
+  };
+}
+var GITHUB_SCHEME = {
+  scheme: "github",
+  events: [
+    githubEvent({
+      name: "github.pull_request.closed",
+      description: "A pull request was closed or merged.",
+      payloadSchema: payloadSchema2(
+        {
+          action: { type: "string", const: "closed" },
+          merged: { type: "boolean", description: "True when the PR was merged rather than closed unmerged." },
+          repo: { type: "string" },
+          number: { type: "integer" }
+        },
+        ["action", "merged", "repo", "number"]
+      )
+    }),
+    githubEvent({
+      name: "github.pull_request.synchronize",
+      description: "New commits were pushed to a pull request's head branch.",
+      payloadSchema: payloadSchema2(
+        {
+          action: { type: "string", const: "synchronize" },
+          repo: { type: "string" },
+          number: { type: "integer" },
+          headSha: { type: "string" }
+        },
+        ["action", "repo", "number", "headSha"]
+      )
+    }),
+    githubEvent({
+      name: "github.pull_request_review.submitted",
+      description: "A review was submitted on a pull request.",
+      payloadSchema: payloadSchema2(
+        {
+          action: { type: "string", const: "submitted" },
+          state: { type: "string", description: "Review state, e.g. `approved`, `changes_requested`." },
+          repo: { type: "string" },
+          number: { type: "integer" },
+          actor: { type: "string" }
+        },
+        ["action", "state", "repo", "number", "actor"]
+      )
+    }),
+    githubEvent({
+      name: "github.check_suite.completed",
+      description: "The checks on a pull request finished (a `failure` conclusion is the build-failed signal).",
+      payloadSchema: payloadSchema2(
+        {
+          action: { type: "string", const: "completed" },
+          conclusion: { type: "string", description: "Rolled-up worst-of conclusion across the completed checks." },
+          repo: { type: "string" },
+          number: { type: "integer" },
+          checks: {
+            type: "array",
+            items: {
+              type: "object",
+              properties: {
+                name: { type: "string" },
+                conclusion: { type: ["string", "null"] }
+              },
+              required: ["name", "conclusion"],
+              additionalProperties: true
+            }
+          }
+        },
+        ["action", "conclusion", "repo", "number", "checks"]
+      )
+    })
+  ]
+};
+var EVENT_REGISTRY = [GITHUB_SCHEME];
+function tenantScope(_principal) {
+  return EVENT_REGISTRY;
+}
+function findEventDefinition(name) {
+  for (const scheme of EVENT_REGISTRY) {
+    for (const event of scheme.events) {
+      if (event.definition.name === name) return event;
+    }
+  }
+  return void 0;
+}
+
+// src/mcp-events/adapter.ts
+var DEFAULT_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+var MAX_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
+var MIN_TTL_MS = 60 * 1e3;
+function computeRefreshBefore(until) {
+  return until.kind === "at" ? new Date(until.ms).toISOString() : null;
+}
+function untilForTtl(ttlMs, now) {
+  if (ttlMs === null) return { kind: "never" };
+  const requested = ttlMs === void 0 ? DEFAULT_TTL_MS : ttlMs;
+  const granted = Math.max(MIN_TTL_MS, Math.min(requested, MAX_TTL_MS));
+  return { kind: "at", ms: now + granted };
+}
+var McpEventsError = class extends Error {
+  code;
+  data;
+  constructor(code, message, data) {
+    super(message);
+    this.name = "McpEventsError";
+    this.code = code;
+    this.data = data;
+  }
+};
+function invalidParams(reason, detail) {
+  return new McpEventsError(-32602, `Invalid params: ${detail}`, { reason });
+}
+function callbackEndpointError(reason, detail) {
+  return new McpEventsError(-32015, `CallbackEndpointError: ${detail}`, { reason });
+}
+var mutationChain = Promise.resolve();
+function withSubscribeMutex(fn) {
+  const run = mutationChain.then(fn, fn);
+  mutationChain = run.catch(() => void 0);
+  return run;
+}
+function isRecord10(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var LIST_PAGE_DEFAULT = 50;
+var LIST_PAGE_MAX = 200;
+function encodeListCursor(offset, scheme) {
+  return Buffer.from(JSON.stringify({ offset, scheme }), "utf8").toString("base64url");
+}
+function decodeListCursor(cursor) {
+  if (cursor === void 0 || cursor === "") return 0;
+  try {
+    const parsed = JSON.parse(Buffer.from(cursor, "base64url").toString("utf8"));
+    if (typeof parsed.offset !== "number" || !Number.isInteger(parsed.offset) || parsed.offset < 0) {
+      throw new Error("bad offset");
+    }
+    return parsed.offset;
+  } catch {
+    throw invalidParams("invalid_cursor", "`cursor` is not a cursor issued by a previous events/list response");
+  }
+}
+function requireWebhookDelivery(delivery) {
+  if (!isRecord10(delivery) || delivery.mode !== "webhook") {
+    throw invalidParams("unsupported_delivery_mode", 'delivery.mode must be "webhook"');
+  }
+  if (typeof delivery.url !== "string" || delivery.url.length === 0) {
+    throw invalidParams("invalid_callback_url", "delivery.url is required");
+  }
+  return { mode: "webhook", url: delivery.url, ...typeof delivery.secret === "string" ? { secret: delivery.secret } : {} };
+}
+function validateArgsOrThrow(name, registration, args) {
+  if (!isRecord10(args)) throw invalidParams("invalid_arguments", "`arguments` must be an object");
+  const schemaCheck = validateAgainstInputSchema(registration.definition.inputSchema, args);
+  if (!schemaCheck.ok) {
+    throw invalidParams("invalid_arguments", `arguments for "${name}": ${schemaCheck.reason}`);
+  }
+  return args;
+}
+async function eventsList(r, ctx) {
+  const schemes = tenantScope(ctx.principal);
+  const definitions = schemes.flatMap((scheme2) => scheme2.events.map((event) => event.definition));
+  const requested = r.pageSize ?? LIST_PAGE_DEFAULT;
+  const pageSize = Math.max(1, Math.min(Number.isFinite(requested) ? Math.floor(requested) : LIST_PAGE_DEFAULT, LIST_PAGE_MAX));
+  const offset = decodeListCursor(r.cursor);
+  const page = definitions.slice(offset, offset + pageSize);
+  const next = offset + page.length;
+  const scheme = schemes[0]?.scheme ?? "*";
+  return { events: page, nextCursor: next < definitions.length ? encodeListCursor(next, scheme) : null };
+}
+async function eventsSubscribe(input, ctx) {
+  const now = ctx.nowMs ?? Date.now;
+  const registration = findEventDefinition(input.name);
+  if (!registration) throw invalidParams("unknown_event", `unknown event "${input.name}"`);
+  const args = validateArgsOrThrow(input.name, registration, input.arguments);
+  if (!registration.meta.authorize(args, ctx.principal)) {
+    throw invalidParams("unauthorized", `not authorized to subscribe to "${input.name}" with the given arguments`);
+  }
+  const mapped = registration.meta.argumentsToMatch(args);
+  if (!mapped.ok) throw invalidParams("invalid_arguments", `arguments for "${input.name}": ${mapped.reason}`);
+  const delivery = requireWebhookDelivery(input.delivery);
+  const secret = delivery.secret;
+  if (secret === void 0 || decodeWhsecSecret(secret) === null) {
+    throw invalidParams(
+      "invalid_secret",
+      "delivery.secret must be `whsec_` followed by base64 that decodes to 24..64 bytes"
+    );
+  }
+  if (input.ttlMs !== void 0 && input.ttlMs !== null && (typeof input.ttlMs !== "number" || !Number.isFinite(input.ttlMs))) {
+    throw invalidParams("invalid_ttl", "`ttlMs` must be a finite number or null");
+  }
+  const id = subscriptionId({
+    principal: ctx.principal,
+    callbackUrl: delivery.url,
+    eventName: input.name,
+    args
+  });
+  const verify = ctx.verify ?? verifyCallback;
+  const outcome = await verify({ principal: ctx.principal, url: delivery.url, subscriptionId: id, secret });
+  if (!outcome.ok) throw callbackEndpointError(outcome.reason, outcome.detail);
+  return withSubscribeMutex(async () => {
+    const until = untilForTtl(input.ttlMs, now());
+    const existing = ctx.store.get(id);
+    if (existing) {
+      const target = existing.spec.target;
+      if (target.kind !== "webhook") {
+        throw invalidParams("identity_conflict", `subscription ${id} exists with a non-webhook target`);
+      }
+      const ref = ctx.store.materializeWebhookTargetRef(target);
+      if (ref !== void 0) ctx.store.putSentinelSecret(ref, { secret });
+      ctx.store.update(id, { spec: { ...existing.spec, until }, status: "active" });
+      return { id, refreshBefore: computeRefreshBefore(until), cursor: null };
+    }
+    const provider = await ctx.resolveProvider(mapped.providerSlug);
+    if (!provider) {
+      throw invalidParams("provider_unavailable", `sentinel provider "${mapped.providerSlug}" is not available`);
+    }
+    const spec = {
+      match: mapped.matchClauses,
+      until,
+      target: { kind: "webhook", url: delivery.url, secret },
+      provider: mapped.providerSlug
+    };
+    const handle = await provider.create(spec, deliveryPreferenceFor(provider, ctx.activeIntervalMs ?? 15e3), {
+      sentinelId: id
+    });
+    ctx.store.create({ id, spec, provider: mapped.providerSlug, handle });
+    return { id, refreshBefore: computeRefreshBefore(until), cursor: null };
+  });
+}
+async function eventsUnsubscribe(input, ctx) {
+  const registration = findEventDefinition(input.name);
+  if (!registration) throw invalidParams("unknown_event", `unknown event "${input.name}"`);
+  const args = validateArgsOrThrow(input.name, registration, input.arguments);
+  if (!registration.meta.authorize(args, ctx.principal)) {
+    throw invalidParams("unauthorized", `not authorized to unsubscribe from "${input.name}" with the given arguments`);
+  }
+  const delivery = requireWebhookDelivery(input.delivery);
+  const id = subscriptionId({
+    principal: ctx.principal,
+    callbackUrl: delivery.url,
+    eventName: input.name,
+    args
+  });
+  await withSubscribeMutex(async () => {
+    const existing = ctx.store.get(id);
+    if (!existing) return;
+    const provider = await ctx.resolveProvider(existing.provider);
+    if (provider) {
+      try {
+        await provider.cancel(existing.handle);
+      } catch {
+      }
+    }
+    ctx.store.remove(id);
+  });
+  return {};
+}
+function toMcpEvent(event) {
+  return {
+    eventId: event.id,
+    name: event.type,
+    timestamp: event.time,
+    data: { ...event.data, subject: event.subject, summary: event.summary },
+    cursor: null
+  };
+}
 
 // src/sentinel-webhook-outbox.ts
 function agentprotoHome3() {
@@ -53118,13 +54203,7 @@ function webhookRequestId(sentinelId, eventId) {
   return `sub_${digest.slice(0, 32)}`;
 }
 function toWebhookEnvelope(event) {
-  return {
-    eventId: event.id,
-    name: event.type,
-    timestamp: event.time,
-    data: { ...event.data, subject: event.subject, summary: event.summary },
-    cursor: null
-  };
+  return toMcpEvent(event);
 }
 function createSentinelWebhookOutbox(opts) {
   const filePath = opts.filePath ?? resolve(agentprotoHome3(), "sentinel-webhook-outbox.json");
@@ -55026,12 +56105,12 @@ function canonicalJson(value) {
 }
 function isToolAppVisible(tool) {
   const meta = tool._meta;
-  const ui = isRecord9(meta?.ui) ? meta.ui : void 0;
+  const ui = isRecord11(meta?.ui) ? meta.ui : void 0;
   const visibility = ui?.visibility;
   if (!Array.isArray(visibility)) return true;
   return visibility.includes("app");
 }
-function isRecord9(v) {
+function isRecord11(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function buildUiToolIndex(tools) {
@@ -55556,19 +56635,19 @@ function classifyMcpError(err) {
   return { status: "unreachable", error };
 }
 function uiMetaOf(meta) {
-  if (!isRecord10(meta) || !isRecord10(meta.ui)) return {};
+  if (!isRecord12(meta) || !isRecord12(meta.ui)) return {};
   const ui = meta.ui;
   const csp = cspOf(ui.csp);
   return {
     ...csp ? { csp } : {},
-    ...isRecord10(ui.permissions) ? { permissions: ui.permissions } : {},
+    ...isRecord12(ui.permissions) ? { permissions: ui.permissions } : {},
     ...typeof ui.prefersBorder === "boolean" ? { prefersBorder: ui.prefersBorder } : {},
     ...typeof ui.domain === "string" ? { domain: ui.domain } : {}
   };
 }
 var CSP_DOMAIN_KEYS = ["connectDomains", "resourceDomains", "frameDomains", "baseUriDomains"];
 function cspOf(raw) {
-  if (!isRecord10(raw)) return void 0;
+  if (!isRecord12(raw)) return void 0;
   const csp = {};
   for (const key of CSP_DOMAIN_KEYS) {
     const value = raw[key];
@@ -55578,7 +56657,7 @@ function cspOf(raw) {
   }
   return Object.keys(csp).length > 0 ? csp : void 0;
 }
-function isRecord10(v) {
+function isRecord12(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function errorMessage(err) {
@@ -58087,7 +59166,7 @@ function humanizeKey(key) {
   const words = key.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_\-.]+/g, " ").replace(/\s+/g, " ").trim().toLowerCase();
   return words.length === 0 ? "Value" : words.charAt(0).toUpperCase() + words.slice(1);
 }
-function isRecord11(value) {
+function isRecord13(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function scalarText(value) {
@@ -58117,7 +59196,7 @@ function flattenRows(value, label, depth, out) {
     });
     return;
   }
-  if (isRecord11(value)) {
+  if (isRecord13(value)) {
     if (depth >= MAX_DEPTH) return;
     for (const [key, child] of Object.entries(value)) {
       flattenRows(child, label ? `${label} / ${humanizeKey(key)}` : humanizeKey(key), depth + 1, out);
@@ -58139,7 +59218,7 @@ function renderMail(preview2) {
   const cc = addressList(preview2.cc);
   const subject = scalarText(preview2.subject) ?? "";
   const body = scalarText(preview2.body) ?? "";
-  const attachments = Array.isArray(preview2.attachments) ? preview2.attachments.filter(isRecord11).map((a) => {
+  const attachments = Array.isArray(preview2.attachments) ? preview2.attachments.filter(isRecord13).map((a) => {
     const name = scalarText(a.fileName) ?? "";
     const size = typeof a.sizeBytes === "number" ? humanSize(a.sizeBytes) : "";
     return size ? `${name} (${size})` : name;
@@ -58154,9 +59233,9 @@ function renderMail(preview2) {
 }
 function renderPreview(record2) {
   const preview2 = record2.preview;
-  if (isRecord11(preview2) && preview2.kind === "mail") return renderMail(preview2);
+  if (isRecord13(preview2) && preview2.kind === "mail") return renderMail(preview2);
   const rows = [];
-  if (isRecord11(preview2)) {
+  if (isRecord13(preview2)) {
     for (const [key, value] of Object.entries(preview2)) flattenRows(value, humanizeKey(key), 1, rows);
   } else {
     flattenRows(preview2, "Details", 1, rows);
@@ -59608,6 +60687,8 @@ async function reconcileSandboxLedger(deps2) {
 // src/index.ts
 init_session_outcome();
 init_session_end_reason();
+init_transcript_writer();
+init_session_index();
 init_sessions();
 init_sessions();
 init_process_stats();
@@ -59627,12 +60708,12 @@ function measureToolList(tools) {
 }
 var packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 var helpDir = join(packageRoot, "docs", "mcp-tools");
-var cache = /* @__PURE__ */ new Map();
+var cache2 = /* @__PURE__ */ new Map();
 function getToolHelp(name) {
-  if (cache.has(name)) return cache.get(name);
+  if (cache2.has(name)) return cache2.get(name);
   const path = join(helpDir, `${name}.md`);
   const content = existsSync(path) ? readFileSync(path, "utf8") : void 0;
-  cache.set(name, content);
+  cache2.set(name, content);
   return content;
 }
 function listToolHelpTopics() {
@@ -61925,7 +63006,7 @@ async function registerSentinelAdapterTools(server, opts = {}) {
   makeListTool({
     server,
     toolName: "list_sentinel_adapters",
-    description: "List known sentinel providers with their status (supported/available/ready), version, and declared capabilities (subjects, push, poll, durable, needsPublicUrl, requiresAuth, typicalLatencyMs). Credentials are never returned. Use `setup_sentinel_provider` to configure a provider that needs creds.",
+    description: "List known sentinel providers with their status (supported/available/ready), version, and declared capabilities (subjects, push, poll, durable, needsPublicUrl, requiresAuth, typicalLatencyMs). Credentials are never returned. Use `setup_sentinel_provider` to configure a provider that needs creds. A `webhook` sentinel target (Standard Webhooks signed delivery to an external HTTP callback, with persisted outbox and resume post-restart) is accepted since W-B; the `mcp-events` MCP surface (events/list, events/subscribe, events/unsubscribe) ships with W-C.",
     lister: makeSentinelLister({ credsStore, ledger })
   });
   const { validSlugs, fields } = await collectSetupSchema3();
@@ -62050,102 +63131,6 @@ function createWorkspaceFs(opts) {
 
 // src/index.ts
 init_role();
-function challengeReasonForSsrf(reason) {
-  if (reason === "non_https") return "non_https";
-  if (reason === "private_target" || reason === "redirect") return "ssrf_blocked";
-  return "timeout";
-}
-var CHALLENGE_TTL_MS = 10 * 60 * 1e3;
-var encoder = new TextEncoder();
-var cache2 = /* @__PURE__ */ new Map();
-function challengeCacheSize() {
-  return cache2.size;
-}
-function resetChallengeCacheForTests() {
-  cache2.clear();
-}
-function normalizeCallbackUrl(url) {
-  try {
-    const u = new URL(url);
-    const port = u.port === "443" ? "" : `:${u.port}`;
-    return `${u.protocol.toLowerCase()}//${u.hostname.toLowerCase()}${port}${u.pathname}${u.search}`;
-  } catch {
-    return null;
-  }
-}
-function hashSecret(secret) {
-  return createHash("sha256").update(secret, "utf8").digest("hex");
-}
-function constantTimeEq(a, b) {
-  const da = createHash("sha256").update(a, "utf8").digest();
-  const db = createHash("sha256").update(b, "utf8").digest();
-  return timingSafeEqual(da, db);
-}
-async function verifyCallback(input, deps2 = {}) {
-  const now = deps2.now ?? (() => Date.now());
-  const normalized = normalizeCallbackUrl(input.url);
-  if (normalized === null || !normalized.startsWith("https://")) {
-    return { ok: false, reason: "non_https", detail: "callback URL must be an https URL" };
-  }
-  if (decodeWhsecSecret(input.secret) === null) {
-    return {
-      ok: false,
-      reason: "challenge_failed",
-      detail: "invalid secret format \u2014 must be whsec_ + base64 decoding to 24..64 bytes (the caller validates before this; a bad secret is never cached)"
-    };
-  }
-  const cacheKey = `${input.principal}|${normalized}|${hashSecret(input.secret)}`;
-  const cached = cache2.get(cacheKey);
-  if (cached && cached.expiresAt > now()) {
-    return { ok: true, verificationBytes: cached.requestBytes };
-  }
-  if (cached) cache2.delete(cacheKey);
-  const challenge = randomBytes(32).toString("hex");
-  const requestBytes = encoder.encode(JSON.stringify({ type: "verification", challenge }));
-  const msgId = `msg_verification_${randomBytes(12).toString("hex")}`;
-  const timestamp = Math.floor(now() / 1e3);
-  let headers;
-  try {
-    const signed = signWebhook({ msgId, timestamp, payload: requestBytes, secrets: [input.secret] });
-    headers = {
-      ...signed,
-      "content-type": "application/json",
-      "X-MCP-Subscription-Id": input.subscriptionId
-    };
-  } catch (err) {
-    return { ok: false, reason: "challenge_failed", detail: `signing failed: ${err.message}` };
-  }
-  let response;
-  try {
-    response = await (deps2.fetch ?? ssrfFetch)(input.url, {
-      method: "POST",
-      headers,
-      body: requestBytes,
-      timeoutMs: 1e4
-      // default challenge timeout (delivery uses 15_000)
-    });
-  } catch (err) {
-    if (err instanceof SsrfFetchError) {
-      return { ok: false, reason: challengeReasonForSsrf(err.reason), detail: `${err.reason}: ${err.message}` };
-    }
-    return { ok: false, reason: "timeout", detail: err.message };
-  }
-  if (response.status < 200 || response.status > 299) {
-    return { ok: false, reason: "non_2xx", detail: `callback responded with status ${response.status}` };
-  }
-  let parsedBody;
-  try {
-    parsedBody = JSON.parse(response.body);
-  } catch {
-    return { ok: false, reason: "challenge_failed", detail: "response body is not JSON" };
-  }
-  const echoed = parsedBody?.challenge;
-  if (typeof echoed !== "string" || !constantTimeEq(echoed, challenge)) {
-    return { ok: false, reason: "challenge_failed", detail: "response did not echo the fresh challenge" };
-  }
-  cache2.set(cacheKey, { requestBytes, expiresAt: now() + CHALLENGE_TTL_MS });
-  return { ok: true, verificationBytes: requestBytes };
-}
 async function hasNamedLlmEndpoints() {
   const override = process.env.LLM_ENDPOINT_ENDPOINTS_FILE?.trim();
   const path = override && override.length > 0 ? override : join(homedir(), ".agentproto", "llm-endpoints.json");
@@ -62174,7 +63159,7 @@ init_worktree_isolation();
 var pairing_registry_exports = {};
 __reExport(pairing_registry_exports, pairing_host_star);
 var JOIN_TOKENS_VERSION = 1;
-var DEFAULT_TTL_MS = 90 * 864e5;
+var DEFAULT_TTL_MS2 = 90 * 864e5;
 var DEFAULT_RECONNECT_MIN_MS = 1e3;
 var DEFAULT_RECONNECT_MAX_MS = 3e4;
 var DEFAULT_HANDSHAKE_TIMEOUT_MS = 11e4;
@@ -62284,7 +63269,7 @@ function createJoinTokenRegistry(deps2) {
     const secret = b64url(randomBytes(16));
     const id = randomBytes(6).toString("hex");
     const nowIso2 = new Date(now()).toISOString();
-    const ttlMs = input.ttlMs ?? DEFAULT_TTL_MS;
+    const ttlMs = input.ttlMs ?? DEFAULT_TTL_MS2;
     const expiresAt = new Date(now() + ttlMs).toISOString();
     const record2 = {
       id,
@@ -63456,6 +64441,20 @@ async function createGateway(opts) {
     });
     registerEvalReporterTools(server);
     registerPresetTools(server);
+    const eventsPrincipal = callerSessionId ? sessionPrincipal(callerSessionId) : daemonBearerPrincipal();
+    registerEventsMethods(server, {
+      list: (params) => eventsList(params, { principal: eventsPrincipal }),
+      subscribe: (params) => eventsSubscribe(params, {
+        principal: eventsPrincipal,
+        store: sentinelStore,
+        resolveProvider: resolveSentinelProviderResolved
+      }),
+      unsubscribe: (params) => eventsUnsubscribe(params, {
+        principal: eventsPrincipal,
+        store: sentinelStore,
+        resolveProvider: resolveSentinelProviderResolved
+      })
+    });
     return server;
   };
   let internalToolServerPromise;
@@ -63780,6 +64779,15 @@ async function createGateway(opts) {
         ...passOpts?.isServed ? { isServed: passOpts.isServed } : {}
       });
     },
+    backfillSessionIndexes() {
+      try {
+        return backfillSessionIndexes(sessions.transcriptBaseDir, {
+          descriptors: sessions.list({ includeArchived: true })
+        });
+      } catch {
+        return { scanned: 0, created: 0, skipped: 0 };
+      }
+    },
     async stop() {
       heartbeat.stop();
       if (idleReapTimer) clearInterval(idleReapTimer);
@@ -63852,6 +64860,6 @@ var export_readPairingsSnapshot = pairing_registry_exports.readPairingsSnapshot;
 var export_removeProviderKey = providers_store_exports.removeProviderKey;
 var export_setProviderKey = providers_store_exports.setProviderKey;
 
-export { AnthropicRemainingQuotaReader, AuthResolutionError, BUCKETS_ROOT, CLAMP_LIMIT_BYTES, CLAUDE_CODE_OAUTH_SOURCE, CONTINUE_PROMPT_SOURCE, DEAD_SESSION_STATUSES, DEFAULT_ALWAYS_ON_TOOLS, DEFAULT_BUCKET, DEFAULT_CONTINUE_PROMPT, DEFAULT_HOST_LOAD_BUDGET_MS, DEFAULT_HOST_LOAD_THRESHOLDS, DEFAULT_MODEL_ROLES, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_WORKTREE_ISOLATION, DEFAULT_WORKTREE_PROVISION_CONCURRENCY, DEVICE_PROMPT_PATH_PREFIX, GC_REAPABLE_STATES, HOSTS_VERSION, HOST_HANDSHAKE_REMEDIATION_HINT, HOST_SCOPE_HEADER, HarnessPresetValidationError, INBOUND_PROVIDERS, JOIN_TOKENS_VERSION, LEGACY_SESSIONS_FILE, MAX_ATTEMPTS, MAX_AUTO_CONTINUE_ATTEMPTS, MAX_MESSAGE_DATA_BYTES, MCP_APP_BRIDGE_SCRIPT, MESSAGE_KINDS, MESSAGE_PREAMBLE, MESSAGE_TAG, MESSAGE_URGENCIES, MODEL_ROLE_REF_PREFIX, export_PAIRINGS_VERSION as PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, export_PROVIDER_ENV_VARS as PROVIDER_ENV_VARS, PrLookupError, ResumeDisabledError, SESSION_END_REASONS, SESSION_ID_ENV, SIGN_NAMESPACE, SsrfFetchError, SubscriptionSourceError, TASK_STATUSES, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, WORKTREE_PROVISION_CONCURRENCY_ENV, activityCounts, addHarnessPreset, allowedSignersLine, appendConversationRecord, attachSandbox, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogModels, buildCatalogProviderModels, buildHostLoadReport, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, canonicalForModeId, challengeCacheSize, challengeReasonForSsrf, claudeProjectSlug, collectGcCandidates, collectHostSample, compactOutcome, composeMode, composeSessionObservers, composedFromRangeSha, computeHostWarnings, continueInterruptedSessions, continueSkipReason, conversationIndexPath, createActivityProjector, createDaemonReviewerHost, createDefaultHostProbes, createDeviceRegistry, createFileStepCache, createGateway, createHostLoadService, createHostRegistry, createInboundEndpointStore, createJoinTokenRegistry, createOrchestratorInjector, createOrchestratorMcpServerFactory, export_createPairingRegistry as createPairingRegistry, createPrProvenanceReconciler, createProcessStatsService, createReviewLaneExecutor, createReviewLedger, createReviewPackLoader, createReviewRunner, createScopeTokenRegistry, createSentinelWebhookOutbox, createSessionMessage, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, createWorkspaceFs, credentialFingerprint, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, decodeWhsecSecret, decomposeMode, defaultBrowserAdapterIds, defaultBrowserAdapterResolution, defaultReviewKeysDir, defaultReviewLedgerRoot, defaultReviewPackCacheDir, defineBraveSearchHttpDriver, defineSerperHttpDriver, deleteUserPreset, deliverEventEnvelope, deliveryBackoffDelay, deriveSessionOutcome, deriveSessionUsage, describeOwner, encodeWhsecSecret, enrichRollupWithProviderQuota, enrichWithRemainingQuota, ensureReviewSigningKey, envelopeClampedBytes, escapeHumanPrompt, escapeMessageBody, evaluateCostBudget, execGh, extractHelpSection, fetchHostTurns, fetchPrStatus, fileConversationStore, fileExists3 as fileExists, filterActivities, findComposeCandidate, findConversationRecord, findNativeMode, findPrForCommit, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getHostLoadService, getMcpCredentialDeps, getProcessStatsService, export_getProviderKey as getProviderKey, getToolHelp, getUserPreset, githubRepoOf, harnessPresetsPath, hostPlaceholders, hostRecordToMirrorRecord, injectMcpAppBridge, export_injectProviderKeysIntoEnv as injectProviderKeysIntoEnv, isAgentCliAuthConfigured, isClosedTaskStatus, isKnownSessionEndReason, isMessageAllowed, isNoSessionPromptFailure, isProviderLimitError, isPubliclyRoutable, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listModelRoles, listPresets, listToolHelpTopics, listUserPresets, loadHarnessPresets, export_loadProviders as loadProviders, loadQuotaStore, loadUserPresets, loadWorkspaceModelRoles, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeSandboxCredsStore, makeSandboxResolver, matchesMessageFilter, measureTool, measureToolList, messageFrom, migrateLegacySessionsFile, migrationMarkerPath, mintMessageId, mirrorCursorForSession, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeCallbackUrl, normalizeCommand, normalizeInbound, normalizeModeId, normalizeRemote, normalizeSkillsOption, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseDuration, parseModelRoleRef, parsePrUrl, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, pickUsageDetail, policyToActivities, policyWatchesSession, prHeadSha, prToActivities, projectBrowserTools, projectSessionUsage, promptDeviceSession, promptHostSession, export_providerEnvVar as providerEnvVar, export_providersPath as providersPath, readConversationIndex, readDaemonRegistry, readHostsSnapshot, export_readPairingsSnapshot as readPairingsSnapshot, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readUsageSnapshots, reapGcEntry, reapOrphanedDescendants, reconcileSandboxLedger, recordProfileQuota, recordSandboxBoot, recordSandboxLiveness, recordSandboxOrigin, recordSandboxState, registerBrainTools, registerBuiltinRoutes, registerDeviceTools, registerPairingTools, registerReviewTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, export_removeProviderKey as removeProviderKey, removeSandboxLedgerEntry, renderInboxDigest, renderSessionMessage, renderSessionMessages, repoSlug, resetChallengeCacheForTests, resolveAuthSpec, resolveBucketSlug, resolveDeferredToolsGatewayOption, resolveDevicePromptMapping, resolveEffectiveLlmEndpointFlag, resolveModelRole, resolveNativeLink, resolvePosture, resolvePrincipal, resolveRelation, resolveReuseFromLedger, resolveReviewerPreset, resolveSpawnDefaults, resolveSubscriptionCredential, rollupSessionSubtree, rollupUsage, runContinueOnBootPass, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runShellLane, runStallWatchdogPass, sandboxLedgerPath, sanitizeLabel, saveUserPreset, seedWalkForTranscript, serializeEnvelope, setDefaultPreset, setEgressDispatcherForTests, setMcpCredentialDeps, export_setProviderKey as setProviderKey, signAttestation, signWebhook, ssrfFetch, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, syncDeviceMirror, toWebhookEnvelope, toWorktreeStatusView, trackWorktreeProvision, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, updateHarnessPreset, upsertSandboxLedger, userPresetsPath, verifyCallback, verifyInboundSignature, verifySignedAttestation, webSearchTool, webhookRequestId, withPr, withPrStatus, workflowToActivities, writeDaemonRegistryEntry };
+export { AnthropicRemainingQuotaReader, AuthResolutionError, BUCKETS_ROOT, CLAMP_LIMIT_BYTES, CLAUDE_CODE_OAUTH_SOURCE, CONTINUE_PROMPT_SOURCE, DEAD_SESSION_STATUSES, DEFAULT_ALWAYS_ON_TOOLS, DEFAULT_BUCKET, DEFAULT_CONTINUE_PROMPT, DEFAULT_HOST_LOAD_BUDGET_MS, DEFAULT_HOST_LOAD_THRESHOLDS, DEFAULT_MODEL_ROLES, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_TTL_MS, DEFAULT_WORKTREE_ISOLATION, DEFAULT_WORKTREE_PROVISION_CONCURRENCY, DEVICE_PROMPT_PATH_PREFIX, EVENT_REGISTRY, GC_REAPABLE_STATES, GITHUB_SCHEME, HOSTS_VERSION, HOST_HANDSHAKE_REMEDIATION_HINT, HOST_SCOPE_HEADER, HarnessPresetValidationError, INBOUND_PROVIDERS, INDEX_DEFAULT_LIMIT, INDEX_MAX_OUTPUT, INDEX_MAX_PROMPT, INDEX_TAIL_BYTES, JOIN_TOKENS_VERSION, LEGACY_SESSIONS_FILE, MAX_ATTEMPTS, MAX_AUTO_CONTINUE_ATTEMPTS, MAX_MESSAGE_DATA_BYTES, MAX_TTL_MS, MCP_APP_BRIDGE_SCRIPT, MESSAGE_KINDS, MESSAGE_PREAMBLE, MESSAGE_TAG, MESSAGE_URGENCIES, MIN_TTL_MS, MODEL_ROLE_REF_PREFIX, McpEventsError, export_PAIRINGS_VERSION as PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, export_PROVIDER_ENV_VARS as PROVIDER_ENV_VARS, PrLookupError, ResumeDisabledError, SESSION_END_REASONS, SESSION_ID_ENV, SIGN_NAMESPACE, SsrfFetchError, SubscriptionSourceError, TASK_STATUSES, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, WORKTREE_PROVISION_CONCURRENCY_ENV, activityCounts, addHarnessPreset, allowedSignersLine, appendConversationRecord, attachSandbox, backfillSessionIndexes, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogModels, buildCatalogProviderModels, buildHostLoadReport, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, buildSessionRecap, canonicalForModeId, canonicalizeJcs, challengeCacheSize, challengeReasonForSsrf, claudeProjectSlug, collectGcCandidates, collectHostSample, compactOutcome, composeMode, composeSessionObservers, composedFromRangeSha, computeHostWarnings, computeRefreshBefore, continueInterruptedSessions, continueSkipReason, conversationIndexPath, createActivityProjector, createDaemonReviewerHost, createDefaultHostProbes, createDeviceRegistry, createFileStepCache, createGateway, createHostLoadService, createHostRegistry, createInboundEndpointStore, createJoinTokenRegistry, createOrchestratorInjector, createOrchestratorMcpServerFactory, export_createPairingRegistry as createPairingRegistry, createPrProvenanceReconciler, createProcessStatsService, createReviewLaneExecutor, createReviewLedger, createReviewPackLoader, createReviewRunner, createScopeTokenRegistry, createSentinelWebhookOutbox, createSessionMessage, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, createWorkspaceFs, credentialFingerprint, daemonBearerPrincipal, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, decodeWhsecSecret, decomposeMode, defaultBrowserAdapterIds, defaultBrowserAdapterResolution, defaultReviewKeysDir, defaultReviewLedgerRoot, defaultReviewPackCacheDir, defaultTranscriptBaseDir, defineBraveSearchHttpDriver, defineSerperHttpDriver, deleteUserPreset, deliverEventEnvelope, deliveryBackoffDelay, deriveIndexFromTranscript, deriveSessionOutcome, deriveSessionUsage, describeOwner, encodeWhsecSecret, enrichRollupWithProviderQuota, enrichWithRemainingQuota, ensureReviewSigningKey, envelopeClampedBytes, escapeHumanPrompt, escapeMessageBody, evaluateCostBudget, eventsList, eventsSubscribe, eventsUnsubscribe, execGh, extractHelpSection, fetchHostTurns, fetchPrStatus, fileConversationStore, fileExists3 as fileExists, filterActivities, findComposeCandidate, findConversationRecord, findEventDefinition, findNativeMode, findPrForCommit, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getHostLoadService, getMcpCredentialDeps, getProcessStatsService, export_getProviderKey as getProviderKey, getToolHelp, getUserPreset, githubRepoOf, harnessPresetsPath, hostPlaceholders, hostRecordToMirrorRecord, indexEntryFromDescriptor, injectMcpAppBridge, export_injectProviderKeysIntoEnv as injectProviderKeysIntoEnv, isAgentCliAuthConfigured, isClosedTaskStatus, isKnownSessionEndReason, isMessageAllowed, isNoSessionPromptFailure, isProviderLimitError, isPubliclyRoutable, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listModelRoles, listPresets, listToolHelpTopics, listUserPresets, loadHarnessPresets, export_loadProviders as loadProviders, loadQuotaStore, loadUserPresets, loadWorkspaceModelRoles, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeSandboxCredsStore, makeSandboxResolver, matchesMessageFilter, matchesSessionQuery, measureTool, measureToolList, messageFrom, migrateLegacySessionsFile, migrationMarkerPath, mintMessageId, mirrorCursorForSession, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeCallbackUrl, normalizeCommand, normalizeInbound, normalizeModeId, normalizeRemote, normalizeSkillsOption, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseDuration, parseModelRoleRef, parsePrUrl, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, pickUsageDetail, policyToActivities, policyWatchesSession, prHeadSha, prToActivities, projectBrowserTools, projectSessionUsage, promptDeviceSession, promptHostSession, export_providerEnvVar as providerEnvVar, export_providersPath as providersPath, readAllSessionIndexes, readConversationIndex, readDaemonRegistry, readHostsSnapshot, export_readPairingsSnapshot as readPairingsSnapshot, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readSessionIndex, readTranscriptTail, readUsageSnapshots, reapGcEntry, reapOrphanedDescendants, reconcileSandboxLedger, recordProfileQuota, recordSandboxBoot, recordSandboxLiveness, recordSandboxOrigin, recordSandboxState, registerBrainTools, registerBuiltinRoutes, registerDeviceTools, registerPairingTools, registerReviewTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, export_removeProviderKey as removeProviderKey, removeSandboxLedgerEntry, renderInboxDigest, renderSessionMessage, renderSessionMessages, repoSlug, resetChallengeCacheForTests, resolveAuthSpec, resolveBucketSlug, resolveDeferredToolsGatewayOption, resolveDevicePromptMapping, resolveEffectiveLlmEndpointFlag, resolveModelRole, resolveNativeLink, resolvePosture, resolvePrincipal, resolveRelation, resolveReuseFromLedger, resolveReviewerPreset, resolveSpawnDefaults, resolveSubscriptionCredential, rollupSessionSubtree, rollupUsage, runContinueOnBootPass, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runShellLane, runStallWatchdogPass, sandboxLedgerPath, sanitizeLabel, saveUserPreset, searchSessionIndexes, seedWalkForTranscript, serializeEnvelope, sessionEventsPath, sessionIndexPath, sessionPrincipal, sessionTranscriptDir, setDefaultPreset, setDefaultSessionsBaseDir, setEgressDispatcherForTests, setMcpCredentialDeps, export_setProviderKey as setProviderKey, signAttestation, signWebhook, ssrfFetch, subscriptionId, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, syncDeviceMirror, tenantScope, toMcpEvent, toWebhookEnvelope, toWorktreeStatusView, trackWorktreeProvision, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, untilForTtl, updateHarnessPreset, upsertSandboxLedger, userPresetsPath, validateAgainstInputSchema, verifyCallback, verifyInboundSignature, verifySignedAttestation, webSearchTool, webhookRequestId, withPr, withPrStatus, workflowToActivities, writeDaemonRegistryEntry, writeSessionIndex };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map