@askexenow/exe-os 0.9.409 → 0.9.411

package/dist/{chunk-G3ZYXXO7.js → chunk-N7POJZJT.js}

@@ -1,16 +1,16 @@
 import {
   isPaneBusy
-} from "./chunk-KPLMY2GT.js";
+} from "./chunk-HUHR5CKJ.js";
 import {
   recordSessionKill
-} from "./chunk-HFSFWMID.js";
+} from "./chunk-3GGMHSY2.js";
 import {
   buildMergedPrCache,
   getBranchLandedState
-} from "./chunk-PZDAPIQL.js";
+} from "./chunk-VS7V5HNO.js";
 import {
   updateTask
-} from "./chunk-IPBNHPTE.js";
+} from "./chunk-IC2AONBH.js";
 import {
   BUSY_PATTERN,
   countPendingReviews,
@@ -29,14 +29,14 @@ import {
   sessionScopeFilter,
   strictSessionScopeFilter,
   writeNotification
-} from "./chunk-XAGIZVYI.js";
+} from "./chunk-GM4UEZDE.js";
 import {
   LEASE_MINUTES,
   isLeaseExpired
 } from "./chunk-E23LNUWJ.js";
 import {
   listSessions
-} from "./chunk-HFXBL7XE.js";
+} from "./chunk-QSW5DHMZ.js";
 import {
   getTransport
 } from "./chunk-VI4ATC6I.js";
@@ -51,7 +51,7 @@ import {
 } from "./chunk-6L4VIYLZ.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-SA66WRBT.js";
+} from "./chunk-JGBYZTWH.js";
 import {
   checkDispatchStatus,
   readTerminalLauncherFailure,
@@ -79,7 +79,7 @@ import {
   getCoordinatorName,
   isCoordinatorName,
   shouldAutoInstance
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 import {
   eventLoopBlockedMarkerPath
 } from "./chunk-ZQEJ4IX2.js";
@@ -3822,7 +3822,7 @@ function createMergedPrCacheMemo(lookup = buildMergedPrCache) {
 }
 async function createWorktreeReaperRealDeps() {
   const { getPaneCwdAsync } = await import("./lib/tmux-status.js");
-  const { getGitRootAsync, isWorktreeDirtyAsync, GIT_CRYPT_SMUDGE_BYPASS_ARGS } = await import("./worktree-XWVNDBRD.js");
+  const { getGitRootAsync, isWorktreeDirtyAsync, GIT_CRYPT_SMUDGE_BYPASS_ARGS } = await import("./worktree-7V4ZMF3D.js");
   const { statSync: statSync3 } = await import("fs");
   const { basename: basename2 } = await import("path");
   const { promisify: promisify2 } = await import("util");
@@ -4070,7 +4070,7 @@ function shouldNotifyTaskGroupViaIntercom(executionMode) {
 }
 async function pollTaskGroupBarriers() {
   try {
-    const { checkAndFireBarriers } = await import("./tasks-crud-2GHKIZOM.js");
+    const { checkAndFireBarriers } = await import("./tasks-crud-NQDPLHNZ.js");
     const firedGroupIds = await checkAndFireBarriers();
     if (firedGroupIds.length === 0) return 0;
     const { getClient } = await import("./lib/database.js");

package/dist/{chunk-DE2V7547.js → chunk-NCNT2C2P.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-VGMACSEV.js";
 import {
   storeBehavior
-} from "./chunk-F5ZRHLG5.js";
+} from "./chunk-KEDZRQI3.js";
 import {
   getClient
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 import {
   loadConfig
 } from "./chunk-MMS2HBRT.js";

package/dist/{chunk-HK7HIDXP.js → chunk-O3BLL6MY.js}

@@ -4,7 +4,7 @@ import {
 import {
   flushBatch,
   writeMemory
-} from "./chunk-APVU4Q5B.js";
+} from "./chunk-LSHUX7P4.js";
 import {
   SUPPORT_PRODUCTS,
   isWellFormedCommit,

package/dist/{chunk-YLWKWEJJ.js → chunk-O6KQAJCC.js}

@@ -1,10 +1,10 @@
 import {
   withScopedReadWindow
-} from "./chunk-QPMKVSHU.js";
+} from "./chunk-KN5GAVCG.js";
 import {
   requireOrgPartnerBinding,
   resolvePartnerIdentities
-} from "./chunk-WYNIWJRN.js";
+} from "./chunk-CJ6CS2IH.js";
 import {
   allocateOutboundSeq,
   approveBriefManually,
@@ -22,7 +22,7 @@ import {
   sealMailboxEnvelope,
   unrecordedText,
   verifyManifest
-} from "./chunk-DACRR362.js";
+} from "./chunk-XQ7BIVLI.js";
 import {
   queueMailboxDeposit
 } from "./chunk-3FGBBJYM.js";

package/dist/{chunk-QUK3UDZV.js → chunk-OHHZNNUD.js}

@@ -10,7 +10,7 @@ import {
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-DIKLSAJE.js";
+} from "./chunk-EOWJXCYC.js";
 import {
   EXE_AI_DIR,
   loadConfig

package/dist/{chunk-6JLVCMKH.js → chunk-PDQGR5LZ.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 
 // src/lib/token-budget.ts
 var WARN_THRESHOLD = 0.8;

package/dist/{chunk-LE3DIA25.js → chunk-PTF5TB6O.js}

@@ -7,10 +7,10 @@ import {
 import {
   createCRMWebhookHandler,
   parseTwentyWebhook
-} from "./chunk-QYIR64RR.js";
+} from "./chunk-RHJOTGEU.js";
 import {
   WhatsAppAdapter
-} from "./chunk-BM467PZN.js";
+} from "./chunk-3N24FV22.js";
 import {
   SignalAdapter
 } from "./chunk-RJT7H2KR.js";
@@ -42,7 +42,7 @@ import {
   retryWithBackoff,
   routeMessage,
   validateGatewayConfig
-} from "./chunk-OEHZ46WQ.js";
+} from "./chunk-XEAZJXMZ.js";
 import {
   OllamaProvider
 } from "./chunk-FWFFZGSC.js";

package/dist/{chunk-KBHK2WNO.js → chunk-PYXXL7N7.js}

@@ -22,7 +22,7 @@ var OrgOriginProvenanceError = class extends Error {
 async function mintOrgOriginStamp(input) {
   if (!input.orgId) throw new OrgOriginProvenanceError("An org-origin stamp requires a non-empty org_id (\xA71.5)");
   if (!input.requestId) throw new OrgOriginProvenanceError("An org-origin stamp requires a request id");
-  const { getTaskRequest } = await import("./task-request-inbox-AY3C6DND.js");
+  const { getTaskRequest } = await import("./task-request-inbox-2TN4ZUH2.js");
   const req = getTaskRequest(input.orgId, input.requestId);
   if (!req) {
     throw new OrgOriginProvenanceError(

package/dist/{chunk-QK3Z4TKQ.js → chunk-Q6KUBP6R.js}

@@ -1,24 +1,24 @@
 import {
   recordSessionKill
-} from "./chunk-HFSFWMID.js";
+} from "./chunk-3GGMHSY2.js";
 import {
   sessionScopeFilter,
   verifyPaneAtCapacity,
   writeNotification
-} from "./chunk-XAGIZVYI.js";
+} from "./chunk-GM4UEZDE.js";
 import {
   listSessions
-} from "./chunk-HFXBL7XE.js";
+} from "./chunk-QSW5DHMZ.js";
 import {
   getTransport
 } from "./chunk-VI4ATC6I.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-SA66WRBT.js";
+} from "./chunk-JGBYZTWH.js";
 import {
   getClient,
   isCoordinatorName
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 
 // src/lib/capacity-monitor.ts
 var CAPACITY_PATTERNS = [

package/dist/{chunk-NDCW4G55.js → chunk-QJWLQXR7.js}

@@ -2,7 +2,7 @@ import {
   deleteKeychainSecret,
   getKeychainSecret,
   setKeychainSecret
-} from "./chunk-KIJRAZWR.js";
+} from "./chunk-4J77TCTX.js";
 
 // src/lib/consent-passphrase.ts
 import crypto from "crypto";

package/dist/{chunk-ME733Y2F.js → chunk-QOFQY7BJ.js}

@@ -85,7 +85,7 @@ async function getRetrievalHealth() {
     totalMemories = Number(totalRes.rows[0]?.cnt ?? 0);
     memoriesWithVectors = Number(vectorRes.rows[0]?.cnt ?? 0);
     try {
-      const { getGraphStats } = await import("./graph-query-VAQN2RK3.js");
+      const { getGraphStats } = await import("./graph-query-7YA3YNKL.js");
       const stats = await getGraphStats(client);
       entities = stats.entities;
       relationships = stats.relationships;
@@ -111,10 +111,12 @@ async function getRetrievalHealth() {
     ledgerReadFailures["db-restore"] = err instanceof Error ? err.message : String(err);
   }
   let dbIntegrity = NO_INTEGRITY_EVENTS;
+  let backupFailedDetails = [];
   try {
-    const { getDbIntegrityHealth } = await import("./db-integrity-events-6363LLDT.js");
+    const { getDbIntegrityHealth, listDbIntegrityEvents } = await import("./db-integrity-events-6363LLDT.js");
     dbIntegrity = getDbIntegrityHealth();
     if (dbIntegrity.readFailure) ledgerReadFailures["db-integrity"] = dbIntegrity.readFailure;
+    backupFailedDetails = listDbIntegrityEvents().filter((e) => e.kind === "backup-failed").map((e) => e.detail ?? "");
   } catch (err) {
     ledgerReadFailures["db-integrity"] = err instanceof Error ? err.message : String(err);
   }
@@ -138,7 +140,8 @@ async function getRetrievalHealth() {
     },
     dbRestore,
     dbIntegrity,
-    ledgerReadFailures
+    ledgerReadFailures,
+    backupFailedDetails
   };
   return {
     ...summary,
@@ -146,6 +149,8 @@ async function getRetrievalHealth() {
   };
 }
 var NO_INTEGRITY_EVENTS = NO_DB_INTEGRITY_EVENTS;
+var BACKUP_ARTIFACT_FAILURE = /ARTIFACT is unreadable|dirty-WAL backup could not be manifested/;
+var BACKUP_ARTIFACT_FAILURE_SOURCE_VERIFIED = /backup ARTIFACT is unreadable while the source check said "verified"/;
 function computeDegradations(h) {
   const out = [];
   for (const [ledger, reason] of Object.entries(h.ledgerReadFailures ?? {})) {
@@ -224,12 +229,35 @@ function computeDegradations(h) {
   }
   const gi = h.dbIntegrity ?? NO_INTEGRITY_EVENTS;
   if (gi.failedBackups > 0) {
-    out.push({
-      code: "backup_source_corrupt",
-      severity: "critical",
-      message: `${gi.failedBackups} backup(s) failed their source integrity check \u2014 the database itself did not verify`,
-      remediation: "Do NOT trust recent backups. Run `exe-os doctor` to confirm, and restore from the newest backup that carries a `backup-verified` ledger entry."
-    });
+    const details = h.backupFailedDetails ?? [];
+    const artifactFailures = details.filter((d) => BACKUP_ARTIFACT_FAILURE.test(d)).length;
+    const verifiedSourceArtifactFailures = details.filter(
+      (d) => BACKUP_ARTIFACT_FAILURE_SOURCE_VERIFIED.test(d)
+    ).length;
+    const unknownSourceArtifactFailures = artifactFailures - verifiedSourceArtifactFailures;
+    const sourceFailures = gi.failedBackups - artifactFailures;
+    if (sourceFailures > 0) {
+      out.push({
+        code: "backup_source_corrupt",
+        severity: "critical",
+        message: `${sourceFailures} backup(s) failed their source integrity check \u2014 the database itself did not verify`,
+        remediation: "Do NOT trust recent backups. Run `exe-os doctor` to confirm, and restore from the newest backup that carries a `backup-verified` ledger entry."
+      });
+    } else if (unknownSourceArtifactFailures > 0) {
+      out.push({
+        code: "backup_artifact_source_unknown",
+        severity: "warn",
+        message: `${unknownSourceArtifactFailures} backup ARTIFACT(s) failed after capture without a successful source check on record \u2014 the live database's integrity is UNKNOWN (neither proven clean nor proven corrupt)`,
+        remediation: "Do not assume the live DB is clean and do not restore over it on this evidence alone. Run `exe-os doctor` (or take a fresh backup and confirm its `backup-verified` event) to establish the live DB's integrity; the failed copies were quarantined and are not valid backups."
+      });
+    } else {
+      out.push({
+        code: "backup_artifact_unreadable",
+        severity: "warn",
+        message: `${gi.failedBackups} backup ARTIFACT(s) were unreadable after capture \u2014 the live database itself PASSED its integrity check`,
+        remediation: "The live DB is NOT corrupt \u2014 do NOT restore. The unreadable copies were quarantined and are not valid backups; the next scheduled backup replaces them. Run `exe-os doctor` to confirm."
+      });
+    }
   }
   if (gi.lastProvenBackupOnDisk && !postCaptureReverifyEnabled()) {
     out.push({

package/dist/{chunk-HFXBL7XE.js → chunk-QSW5DHMZ.js}

@@ -1,6 +1,6 @@
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-SA66WRBT.js";
+} from "./chunk-JGBYZTWH.js";
 import {
   atomicWriteJsonSync
 } from "./chunk-HSGBZSCA.js";

package/dist/{chunk-OFT5KSBM.js → chunk-QV26G2BF.js}

@@ -22,7 +22,7 @@ import {
 import {
   getCachedMonitorIdentity,
   recomputeEnvelopeWrapKey
-} from "./chunk-VLAENYCN.js";
+} from "./chunk-7SHU5MOD.js";
 
 // src/lib/crypto.ts
 import crypto from "crypto";

package/dist/{chunk-LVEMYNYH.js → chunk-RHHEYC6H.js}

@@ -4,10 +4,10 @@ import {
   extractIdentifiers,
   isGarbageEntity,
   normalizeEntityName
-} from "./chunk-XGPBHKU3.js";
+} from "./chunk-HTFM7ZDD.js";
 import {
   getClient
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 
 // src/lib/memory-graph-extractor.ts
 function relationshipId(sourceId, targetId, relType) {
@@ -432,7 +432,7 @@ async function upsertMemoryGraph(result, memoryId, opts) {
     });
   }
   try {
-    const { createCoOccurrenceEdges } = await import("./co-occurrence-6EELW2L2.js");
+    const { createCoOccurrenceEdges } = await import("./co-occurrence-F5TMSEQZ.js");
     await createCoOccurrenceEdges(result.entities, memoryId, { linkOnly });
   } catch {
   }

package/dist/{chunk-QYIR64RR.js → chunk-RHJOTGEU.js}

@@ -1,6 +1,6 @@
 import {
   processCRMEvent
-} from "./chunk-CLV7ALXV.js";
+} from "./chunk-CFO47VW4.js";
 
 // src/gateway/adapters/crm-webhook.ts
 function parseTwentyWebhook(payload) {

package/dist/{chunk-HUMNRJZE.js → chunk-RJIH7JXM.js}

@@ -1,12 +1,12 @@
 import {
   sendMessage
-} from "./chunk-IUBCS6TA.js";
+} from "./chunk-7KPZQ65I.js";
 import {
   getActiveAgent
-} from "./chunk-OISOA6NX.js";
+} from "./chunk-GL5ZG72X.js";
 import {
   resolveExeSession
-} from "./chunk-XAGIZVYI.js";
+} from "./chunk-GM4UEZDE.js";
 import {
   getDispatcherSession
 } from "./chunk-PCV52RYM.js";
@@ -16,7 +16,7 @@ import {
 import {
   getCoordinatorName,
   isCoordinatorName
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 
 // src/mcp/tools/send-message.ts
 import { z } from "zod";

package/dist/{chunk-6TB7UXCA.js → chunk-RMC2A6EE.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 
 // src/lib/boot-generation.ts
 var SYNC_META_KEY = "daemon_boot_generation";

package/dist/{chunk-XCPD7NGP.js → chunk-RYMXD2NT.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-WCGNCH3Q.js";
 import {
   registerAllTools
-} from "./chunk-W5XAB2SW.js";
+} from "./chunk-6HJF7IA3.js";
 
 // src/mcp/mcp-surface-hash.ts
 function computeMcpSurfaceHash() {

package/dist/{chunk-W2VDJKTB.js → chunk-RYYFFCJG.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 import {
   loadConfig
 } from "./chunk-MMS2HBRT.js";

package/dist/{chunk-YUAOQJVV.js → chunk-SINIRUYZ.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-MMS2HBRT.js";
 
 // src/lib/db-backup.ts
-import { existsSync, readdirSync, unlinkSync, statSync, statfsSync, appendFileSync, writeFileSync } from "fs";
+import { existsSync, readdirSync, unlinkSync, statSync, statfsSync, appendFileSync, writeFileSync, readFileSync } from "fs";
 import { copyFile, mkdir, unlink, rename } from "fs/promises";
 import { randomBytes } from "crypto";
 import path from "path";
@@ -35,6 +35,28 @@ function clearBackupInFlight(backupPath) {
   } catch {
   }
 }
+function sweepStaleInflightMarkers(now = Date.now()) {
+  let removed = 0;
+  let files;
+  try {
+    files = readdirSync(BACKUP_DIR);
+  } catch {
+    return 0;
+  }
+  for (const file of files) {
+    if (!file.endsWith(INFLIGHT_MARKER_SUFFIX)) continue;
+    const backupPath = path.join(BACKUP_DIR, file.slice(0, -INFLIGHT_MARKER_SUFFIX.length));
+    if (activeBackupPaths.has(backupPath)) continue;
+    const marker = path.join(BACKUP_DIR, file);
+    try {
+      if (now - statSync(marker).mtimeMs < INFLIGHT_MARKER_STALE_MS) continue;
+      unlinkSync(marker);
+      removed++;
+    } catch {
+    }
+  }
+  return removed;
+}
 function isBackupInFlight(backupPath) {
   if (activeBackupPaths.has(backupPath)) return true;
   try {
@@ -206,7 +228,48 @@ async function preBackupCheckpoint(dbPath, checkpointMode) {
 `);
   }
 }
-async function quickCheckBackupSourceAfterCopy(reason, backupPath) {
+async function offloadedSourceQuickCheck(dbPath) {
+  try {
+    const { backupVerifyOffloadEnabled, runInBackupVerifyWorker, reportBackupVerifyWorkerMissing } = await import("./backup-verify-AG54CYGR.js");
+    if (!backupVerifyOffloadEnabled()) return null;
+    if (!backupOffloadCreds || path.resolve(backupOffloadCreds.dbPath) !== path.resolve(dbPath)) {
+      process.stderr.write(
+        `[db-backup] off-loop source quick_check skipped: backup offload is ${backupOffloadCreds ? "registered for a different db" : "not registered yet"}; running the source quick_check on the main thread.
+`
+      );
+      return null;
+    }
+    const run = await runInBackupVerifyWorker({
+      op: "source",
+      dbPath,
+      keyHex: backupOffloadCreds.encryptionKeyHex ?? null
+    });
+    if (run.ok && run.response.op === "source") {
+      if (run.response.verdict.toLowerCase() === "ok") return "ok";
+      process.stderr.write(
+        `[db-backup] off-loop source quick_check returned "${run.response.verdict.slice(0, 200)}"; re-checking on the trusted main-thread connection before acting on it.
+`
+      );
+      return null;
+    }
+    if (!run.ok && run.unavailable) {
+      reportBackupVerifyWorkerMissing("backup source quick_check", run.reason);
+      return null;
+    }
+    process.stderr.write(
+      `[db-backup] off-loop source quick_check did not complete (${run.ok ? "unexpected reply" : run.reason}); falling back to the main-thread check.
+`
+    );
+    return null;
+  } catch (err) {
+    process.stderr.write(
+      `[db-backup] off-loop source quick_check failed (${err instanceof Error ? err.message : String(err)}); falling back to the main-thread check.
+`
+    );
+    return null;
+  }
+}
+async function quickCheckBackupSourceAfterCopy(reason, backupPath, dbPath) {
   const route = await (async () => {
     try {
       const { isDbReadWorkerReady } = await import("./lib/db-read-worker-client.js");
@@ -238,8 +301,14 @@ async function quickCheckBackupSourceAfterCopy(reason, backupPath) {
     if (!await canTrustIntegrityVerdict(client)) {
       return markUnverified("connection is query_only; an FTS5 verdict from it is not trustworthy");
     }
-    const chk = await client.execute("PRAGMA quick_check;");
-    const result = String(chk.rows[0]?.quick_check ?? chk.rows[0]?.[0] ?? "").trim();
+    const offloaded = await offloadedSourceQuickCheck(dbPath);
+    let result;
+    if (offloaded === "ok") {
+      result = "ok";
+    } else {
+      const chk = await client.execute("PRAGMA quick_check;");
+      result = String(chk.rows[0]?.quick_check ?? chk.rows[0]?.[0] ?? "").trim();
+    }
     if (result && result !== "ok") {
       process.stderr.write(`[db-backup] CRITICAL: backup source failed quick_check (${reason}): ${result}
 `);
@@ -417,6 +486,16 @@ async function createBackupAsync(reason = "manual", opts = {}) {
   const dbPath = findActiveDb();
   if (!dbPath) return null;
   await mkdir(BACKUP_DIR, { recursive: true });
+  if (!opts.skipRetention && reason !== "pre-restore") {
+    try {
+      enforceSizeRetention();
+    } catch {
+    }
+    try {
+      enforceKeepOneRetention();
+    } catch {
+    }
+  }
   let lowDisk = null;
   try {
     let dbSize = 0;
@@ -476,7 +555,7 @@ async function createBackupAsync(reason = "manual", opts = {}) {
   markBackupInFlight(backupPath);
   try {
     await promoteTmpBackup(tmpBackupPath, backupPath, bytePreservingSidecars);
-    const sourceStatus = preserveForRestore ? null : await quickCheckBackupSourceAfterCopy(reason, backupPath);
+    const sourceStatus = preserveForRestore ? null : await quickCheckBackupSourceAfterCopy(reason, backupPath, dbPath);
     if (sourceStatus === "failed") return null;
     if (sourceStatus === "repaired") {
       if (opts._retriedAfterFtsRepair) {
@@ -497,7 +576,7 @@ async function createBackupAsync(reason = "manual", opts = {}) {
     let artifactState = "not-checked";
     let artifactDetail = "artifact read-back did not run";
     try {
-      const { manifestWriteEnabled, readBackBackupArtifact, manifestPathFor } = await import("./backup-verify-QIAQ63VC.js");
+      const { manifestWriteEnabled, readBackBackupArtifact, manifestPathFor } = await import("./backup-verify-AG54CYGR.js");
       if (manifestWriteEnabled()) {
         const readback = await readBackBackupArtifact(backupPath, dbName, { keyHex: encryptionKey });
         artifactState = readback.artifact;
@@ -737,7 +816,7 @@ function recordMissedBackup(entry) {
 function alertMissedBackup(message, skipped) {
   void (async () => {
     try {
-      const { pushNotifyAsync } = await import("./push-notifications-YVOP4KGN.js");
+      const { pushNotifyAsync } = await import("./push-notifications-QW4BWRC7.js");
       pushNotifyAsync({
         event: "backup_failed",
         title: skipped ? "Backup SKIPPED \u2014 disk full" : "Backup FAILED \u2014 disk full",
@@ -878,14 +957,21 @@ function backupSizeCapBytes() {
   return Math.max(3 * currentDbSize, DEFAULT_BACKUP_SIZE_CAP_FLOOR_BYTES);
 }
 function backupVerifiedProbe(backupPath) {
+  let raw;
   try {
-    statSync(backupPath + ".manifest.json");
-    return true;
+    raw = readFileSync(backupPath + ".manifest.json", "utf-8");
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT" || code === "ENOTDIR") return false;
     return null;
   }
+  if (raw.trim() === "") return false;
+  try {
+    const parsed = JSON.parse(raw);
+    return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed);
+  } catch {
+    return false;
+  }
 }
 function enforceSizeRetention() {
   if (!existsSync(BACKUP_DIR)) return 0;
@@ -975,6 +1061,10 @@ function tryUnlinkInBackupDir(p) {
 function enforceKeepOneRetention() {
   if (!existsSync(BACKUP_DIR)) return 0;
   let deleted = 0;
+  try {
+    sweepStaleInflightMarkers();
+  } catch {
+  }
   try {
     const files = readdirSync(BACKUP_DIR);
     const candidates = [];
@@ -1258,6 +1348,7 @@ function getBackupDir() {
 }
 
 export {
+  sweepStaleInflightMarkers,
   isBackupInFlight,
   findActiveDb,
   registerBackupOffload,
@@ -1289,6 +1380,7 @@ export {
   reasonFromBackupName,
   discoverBackupReasons,
   enforceRetention,
+  backupVerifiedProbe,
   enforceSizeRetention,
   keepVerifiedCount,
   selectKeepOneRetentionDeletions,