@integrity-labs/agt-cli 0.27.144 → 0.27.146

package/dist/mcp/telegram-channel.js

@@ -14813,6 +14813,61 @@ function parsePeerAgentModeEnv(raw) {
   return "off";
 }
 
+// src/sender-policy-decline.ts
+function politeDeclineCopy(reason) {
+  switch (reason) {
+    case "internal_only":
+      return "Sorry, I can only respond to people inside our organisation. This conversation appears to be from outside.";
+    case "mode_manager_only":
+      return "Sorry, I only respond to my manager in this channel.";
+    case "mode_team_only":
+      return "Sorry, this agent only replies to its team members.";
+    case "mode_team_agents_only":
+      return "Sorry, I only respond to agents on my team in this channel.";
+    case "mode_agents_only":
+      return "Sorry, I only respond to other agents in this channel.";
+  }
+}
+
+// src/inbound-access.ts
+function decideInboundAccess(input) {
+  if (!input.content.forward) {
+    return { kind: "drop", reason: `content:${input.content.reason}` };
+  }
+  if (input.isSelf) {
+    return { kind: "drop", reason: "self" };
+  }
+  if (input.orgBoundary && !input.orgBoundary.forward) {
+    return { kind: "drop", reason: "org_boundary" };
+  }
+  if (input.senderPolicy && !input.senderPolicy.forward) {
+    const reason = input.senderPolicy.reason;
+    const declineWorthy = input.sameOrg && reason !== "internal_only";
+    return {
+      kind: "drop",
+      reason: `sender_policy:${reason}`,
+      decline: declineWorthy ? politeDeclineCopy(reason) : void 0
+    };
+  }
+  if (input.command && !input.isBot) {
+    return {
+      kind: "command",
+      command: input.command.command,
+      authorized: input.command.authorized
+    };
+  }
+  if (input.isBot) {
+    const peer = input.peer;
+    if (!peer || peer.kind === "self") {
+      return { kind: "drop", reason: peer?.kind === "self" ? "self" : "peer:unclassified" };
+    }
+    if (peer.kind === "drop") {
+      return { kind: "drop", reason: `peer:${peer.reason ?? "unspecified"}` };
+    }
+  }
+  return { kind: "admit" };
+}
+
 // src/telegram-peer-rate-limiter.ts
 var SECOND_MS = 1e3;
 var MINUTE_MS = 60 * SECOND_MS;
@@ -18108,14 +18163,68 @@ async function pollLoop() {
         const content = typeof msg.text === "string" && msg.text.length > 0 ? msg.text : typeof msg.caption === "string" && msg.caption.length > 0 ? msg.caption : "";
         if (content.length === 0 && classifiedAttachments.length === 0) continue;
         const chatId = String(msg.chat.id);
-        if (ALLOWED_CHATS.size > 0 && !ALLOWED_CHATS.has(chatId)) continue;
+        const trimmedContent = content.trim();
+        const isFromBot = !!msg.from?.is_bot;
+        const nowMs = Date.now();
+        const telegramCommand = isHelpSyntax(trimmedContent) ? "help" : isStatusSyntax(trimmedContent) ? "status" : isRestartSyntax(trimmedContent) ? "restart" : isInvestigateSyntax(trimmedContent) ? "investigate" : void 0;
+        let classification;
+        let peerLeaf;
+        if (isFromBot) {
+          if (PEER_DISABLED_GLOBAL) {
+            peerLeaf = { kind: "drop", reason: "peer_disabled_global" };
+          } else {
+            const classifierMsg = {
+              message_id: msg.message_id,
+              text: msg.text,
+              caption: msg.caption,
+              from: msg.from ? { id: msg.from.id, username: msg.from.username, is_bot: msg.from.is_bot } : void 0,
+              chat: { id: msg.chat.id, type: msg.chat.type },
+              reply_to_message: msg.reply_to_message ? {
+                message_id: msg.reply_to_message.message_id,
+                from: msg.reply_to_message.from ? { id: msg.reply_to_message.from.id, is_bot: msg.reply_to_message.from.is_bot } : void 0
+              } : void 0,
+              entities: msg.entities,
+              caption_entities: msg.caption_entities
+            };
+            const self = await resolveBotIdentity();
+            classification = classifyPeerMessage(classifierMsg, PEER_CLASSIFIER_CONFIG, self);
+            peerLeaf = {
+              kind: classification.kind,
+              reason: classification.kind === "drop" ? classification.reason : void 0
+            };
+          }
+        }
+        const access = decideInboundAccess({
+          content: { forward: true },
+          // empty content already filtered above
+          // CodeRabbit: derive self from the peer classification so an echo of
+          // our own outbound is dropped at the self step — BEFORE command
+          // routing — instead of slipping through as a command. (Slack catches
+          // self at evt.user===botUserId and Teams inside its activity filter;
+          // Telegram's only self signal is the peer classifier.)
+          isSelf: peerLeaf?.kind === "self",
+          isBot: isFromBot,
+          peer: peerLeaf,
+          // TELEGRAM_ALLOWED_CHATS is Telegram's org-boundary axis (the drift
+          // the consolidation names). An unlisted chat is external ⇒ silent.
+          orgBoundary: ALLOWED_CHATS.size > 0 && !ALLOWED_CHATS.has(chatId) ? { forward: false } : { forward: true },
+          command: telegramCommand ? { command: telegramCommand, authorized: true } : void 0,
+          // No sender-policy mode system on Telegram, so no same-org decline.
+          sameOrg: false
+        });
+        if (access.kind === "drop" && (access.reason === "org_boundary" || access.reason.startsWith("content:"))) {
+          process.stderr.write(
+            `telegram-channel(${AGENT_CODE_NAME}): inbound drop reason=${access.reason} chat=${redactId(chatId)}
+`
+          );
+          continue;
+        }
         observedChatClient?.observe({
           chat_id: chatId,
           chat_title: msg.chat.title ?? msg.chat.username ?? msg.chat.first_name ?? null,
           chat_type: msg.chat.type ?? null
         });
-        const trimmedContent = content.trim();
-        if (isHelpSyntax(trimmedContent)) {
+        if (access.kind === "command" && access.command === "help") {
           const disposition = await classifyRestartCommand(trimmedContent.replace(/^\/help/, "/restart"));
           if (disposition === "act") {
             await handleHelpCommand({
@@ -18125,7 +18234,7 @@ async function pollLoop() {
           }
           continue;
         }
-        if (isStatusSyntax(trimmedContent)) {
+        if (access.kind === "command" && access.command === "status") {
           const disposition = await classifyRestartCommand(
             trimmedContent.replace(/^\/status/, "/restart")
           );
@@ -18137,7 +18246,7 @@ async function pollLoop() {
           }
           continue;
         }
-        if (isRestartSyntax(trimmedContent)) {
+        if (access.kind === "command" && access.command === "restart") {
           const disposition = await classifyRestartCommand(trimmedContent);
           if (disposition === "act") {
             await handleRestartCommand({
@@ -18166,7 +18275,7 @@ async function pollLoop() {
           }
           continue;
         }
-        if (isInvestigateSyntax(trimmedContent)) {
+        if (access.kind === "command" && access.command === "investigate") {
           const disposition = await classifyInvestigateCommand(trimmedContent);
           if (disposition === "act") {
             await handleInvestigateCommand({
@@ -18197,8 +18306,6 @@ async function pollLoop() {
         }
         const userId = msg.from?.id != null ? String(msg.from.id) : "unknown";
         const userName = msg.from?.username || [msg.from?.first_name, msg.from?.last_name].filter(Boolean).join(" ").trim() || userId;
-        const isFromBot = !!msg.from?.is_bot;
-        const nowMs = Date.now();
         if (chatId && !isFromBot) {
           resetThread(chatId, "");
         }
@@ -18207,38 +18314,14 @@ async function pollLoop() {
           peerRateLimiter.recordInboundHuman(chatId, nowMs);
         }
         let peerAgentMeta = null;
-        if (isFromBot) {
-          if (PEER_DISABLED_GLOBAL) {
+        if (access.kind === "drop") {
+          if (access.reason !== "self") {
+            const peerReason = access.reason.startsWith("peer:") ? access.reason.slice("peer:".length) : access.reason;
             process.stderr.write(
-              `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=peer_disabled_global chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
+              `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=${peerReason} chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
 `
             );
-            continue;
-          }
-          const classifierMsg = {
-            message_id: msg.message_id,
-            text: msg.text,
-            caption: msg.caption,
-            from: msg.from ? { id: msg.from.id, username: msg.from.username, is_bot: msg.from.is_bot } : void 0,
-            chat: { id: msg.chat.id, type: msg.chat.type },
-            reply_to_message: msg.reply_to_message ? {
-              message_id: msg.reply_to_message.message_id,
-              from: msg.reply_to_message.from ? { id: msg.reply_to_message.from.id, is_bot: msg.reply_to_message.from.is_bot } : void 0
-            } : void 0,
-            entities: msg.entities,
-            caption_entities: msg.caption_entities
-          };
-          const self = await resolveBotIdentity();
-          const classification = classifyPeerMessage(classifierMsg, PEER_CLASSIFIER_CONFIG, self);
-          if (classification.kind === "self") {
-            continue;
-          }
-          if (classification.kind === "drop") {
-            process.stderr.write(
-              `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=${classification.reason} chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
-`
-            );
-            if (classification.reason === "cross_team_grant_missing") {
+            if (classification?.kind === "drop" && classification.reason === "cross_team_grant_missing") {
               crossTeamPeerAuditClient?.emit({
                 event_type: "telegram.peer.drop.cross_team_grant_missing",
                 peer_agent_id: null,
@@ -18248,52 +18331,52 @@ async function pollLoop() {
                 message_id: String(msg.message_id)
               });
             }
-            continue;
           }
-          if (classification.kind === "peer-ingress") {
-            const limit = await peerRateLimiter.recordInboundPeer(
-              chatId,
-              classification.peer.bot_id,
-              nowMs
-            );
-            if (limit.decision !== "ok") {
-              process.stderr.write(
-                `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=${limit.decision} chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
+          continue;
+        }
+        if (isFromBot && classification?.kind === "peer-ingress") {
+          const limit = await peerRateLimiter.recordInboundPeer(
+            chatId,
+            classification.peer.bot_id,
+            nowMs
+          );
+          if (limit.decision !== "ok") {
+            process.stderr.write(
+              `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=${limit.decision} chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
 `
-              );
-              continue;
-            }
-            if (limit.dailyBudgetWarn && !dailyBudgetWarned) {
-              dailyBudgetWarned = true;
-              process.stderr.write(
-                `telegram-channel(${AGENT_CODE_NAME}): peer_warn reason=daily_budget_80pct
+            );
+            continue;
+          }
+          if (limit.dailyBudgetWarn && !dailyBudgetWarned) {
+            dailyBudgetWarned = true;
+            process.stderr.write(
+              `telegram-channel(${AGENT_CODE_NAME}): peer_warn reason=daily_budget_80pct
 `
-              );
-            }
-            peerAgentMeta = {
-              code_name: classification.peer.code_name,
-              agent_id: classification.peer.agent_id
-            };
-            const gate = classification.peer.gate_path;
-            if (gate && gate !== "same_team" && gate !== "intra_org_unrestricted" && gate.startsWith("grant:")) {
-              crossTeamPeerAuditClient?.emit({
-                event_type: "telegram.peer.ingress.cross_team",
-                peer_agent_id: classification.peer.agent_id || null,
-                gate_path: gate,
-                grant_id: gate.slice("grant:".length),
-                chat_id: String(chatId),
-                message_id: String(msg.message_id)
-              });
-            } else if (gate === "intra_org_unrestricted") {
-              crossTeamPeerAuditClient?.emit({
-                event_type: "telegram.peer.ingress.cross_team",
-                peer_agent_id: classification.peer.agent_id || null,
-                gate_path: gate,
-                grant_id: null,
-                chat_id: String(chatId),
-                message_id: String(msg.message_id)
-              });
-            }
+            );
+          }
+          peerAgentMeta = {
+            code_name: classification.peer.code_name,
+            agent_id: classification.peer.agent_id
+          };
+          const gate = classification.peer.gate_path;
+          if (gate && gate !== "same_team" && gate !== "intra_org_unrestricted" && gate.startsWith("grant:")) {
+            crossTeamPeerAuditClient?.emit({
+              event_type: "telegram.peer.ingress.cross_team",
+              peer_agent_id: classification.peer.agent_id || null,
+              gate_path: gate,
+              grant_id: gate.slice("grant:".length),
+              chat_id: String(chatId),
+              message_id: String(msg.message_id)
+            });
+          } else if (gate === "intra_org_unrestricted") {
+            crossTeamPeerAuditClient?.emit({
+              event_type: "telegram.peer.ingress.cross_team",
+              peer_agent_id: classification.peer.agent_id || null,
+              gate_path: gate,
+              grant_id: null,
+              chat_id: String(chatId),
+              message_id: String(msg.message_id)
+            });
           }
         }
         const messageId = String(msg.message_id);

package/dist/{persistent-session-35PWSTLO.js → persistent-session-EUOWPJPS.js}

@@ -25,9 +25,8 @@ import {
   takeAcpxExecFailureCount,
   takeZombieDetection,
   writePersistentClaudeWrapper
-} from "./chunk-7GKJZBTB.js";
+} from "./chunk-J2HPXKP5.js";
 import "./chunk-WOOYOAPG.js";
-import "./chunk-354FAVQR.js";
 import "./chunk-XWVM4KPK.js";
 export {
   SEND_KEYS_ENTER_DELAY_MS,
@@ -57,4 +56,4 @@ export {
   takeZombieDetection,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-35PWSTLO.js.map
+//# sourceMappingURL=persistent-session-EUOWPJPS.js.map

package/dist/{responsiveness-probe-MA4M2QM4.js → responsiveness-probe-IU3ALQYB.js}

@@ -1,8 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-7GKJZBTB.js";
+} from "./chunk-J2HPXKP5.js";
 import "./chunk-WOOYOAPG.js";
-import "./chunk-354FAVQR.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -155,4 +154,4 @@ export {
   livePendingInboundOldestAgeSeconds,
   oldestLivePendingInboundMtimeMs
 };
-//# sourceMappingURL=responsiveness-probe-MA4M2QM4.js.map
+//# sourceMappingURL=responsiveness-probe-IU3ALQYB.js.map

package/dist/{responsiveness-probe-MA4M2QM4.js.map → responsiveness-probe-IU3ALQYB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/lib/responsiveness-probe.ts"],"sourcesContent":["/**\n * ENG-5399 — Tier 1 responsiveness probe (manager-side).\n *\n * Cheap, fast-cadence canary that catches \"agent went silent\" inside\n * minutes, well before the existing synthetic-probe cron's ~35 min\n * staleness window (`SyntheticReplyAgeSeconds`, ENG-5122).\n *\n * Mechanism: for each managed agent, read the mtime of the agent's\n * `pane.log` and report `now - mtime` as `PaneActivityAgeSeconds` via\n * a new `/host/responsiveness-probe` endpoint. `pane.log` is the\n * tmux pipe-pane sink set up by `setupPaneLog()` — any visible\n * activity (assistant turns, tool calls, in-place progress\n * heartbeats) bumps its mtime. A silent agent has a steadily\n * climbing age that lands in CloudWatch and trips a per-agent alarm.\n *\n * ENG-6017 adds a second per-agent signal on the same cadence:\n * `pending_inbound_oldest_age_seconds` — the age of the oldest marker\n * file across the agent's `*-pending-inbound/` directories (written by\n * the channel MCP servers for inbounds awaiting delivery). This is the\n * one artifact of the \"message typed but never submitted\" failure mode\n * that every other canary is blind to: in the koda incident\n * (2026-06-04) an operator Slack DM sat undelivered for 40+ minutes\n * while pane-activity stayed fresh (health checks), synthetic probes\n * were answered by the one-shot fallback, and heartbeat/session-alive\n * only reflect manager health. The field is OMITTED (not zero) when the\n * agent has no pending-inbound markers — the API treats absent as\n * \"no signal\", never as \"healthy\" (absent-vs-zero matters for\n * mixed-version fleets where old CLIs don't report it at all).\n *\n * Run from `pollCycle()` in `manager-worker.ts` on a configurable\n * interval (default 5 min via `AUGMENTED_RESPONSIVENESS_INTERVAL_MS`).\n */\n\nimport { mkdirSync, readdirSync, readFileSync, renameSync, statSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { paneLogPath } from './persistent-session.js';\n\nexport interface ResponsivenessProbeResult {\n  code_name: string;\n  pane_activity_age_seconds: number;\n  /**\n   * ENG-6017: age (s) of the oldest marker file across the agent's\n   * `*-pending-inbound/` directories. Omitted when no markers exist —\n   * absent means \"no signal\", NOT \"zero / healthy\".\n   */\n  pending_inbound_oldest_age_seconds?: number;\n}\n\nconst DEFAULT_INTERVAL_MS = 5 * 60 * 1000;\n\nexport function getResponsivenessIntervalMs(): number {\n  const raw = process.env.AUGMENTED_RESPONSIVENESS_INTERVAL_MS;\n  if (!raw) return DEFAULT_INTERVAL_MS;\n  const parsed = Number.parseInt(raw, 10);\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_INTERVAL_MS;\n}\n\n/**\n * ENG-6017: oldest pending-inbound marker mtime (ms epoch) for an agent,\n * or null when the agent has no markers / no pending-inbound dirs.\n *\n * The channel MCP servers (slack-channel, telegram-channel, …) write one\n * marker file per inbound into `~/.augmented/<codeName>/<channel>-pending-\n * inbound/` and clear it when the agent acknowledges the message. The\n * directory layout is the contract here — read-only, no IPC with the MCP\n * (the MCP and CLI release independently; file mtimes need no protocol).\n *\n * ENG-6072: only plain, non-hidden files count as markers. The msteams MCP\n * keeps `.markers/` and `.processed/` housekeeping SUBDIRECTORIES inside its\n * pending-inbound dir; their mtimes never advance, so statting every dirent\n * made the gauge climb forever and fired pending-inbound-stale on agents with\n * zero stranded messages (kylie ~3.4d / scout ~34h false ALARMs the moment\n * ENG-6023 activated the alarm). Dot-entries are skipped wholesale — the\n * hidden namespace is reserved for MCP bookkeeping, never for markers.\n */\nfunction oldestPendingInboundMtimeMs(agentHomeDir: string): number | null {\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null; // agent home missing — nothing to report\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      try {\n        const mtimeMs = statSync(join(dir, file.name)).mtimeMs;\n        if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n      } catch {\n        // Marker drained between readdir and stat — that's the happy path.\n      }\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160: classify a marker file for the LIVE-inbound scan.\n *  - `true`  → flagged `\"undeliverable\": true` (dead-letter, exclude).\n *  - `null`  → vanished mid-scan (ENOENT) — drained between stat and read, the\n *              happy path; exclude it rather than count an already-gone file.\n *  - `false` → still present but malformed / unreadable for another reason —\n *              treated as LIVE so a corrupt marker can never mask a real wedge.\n */\nfunction isUndeliverableMarker(markerPath: string): boolean | null {\n  try {\n    const parsed = JSON.parse(readFileSync(markerPath, 'utf8')) as { undeliverable?: unknown };\n    return parsed?.undeliverable === true;\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code === 'ENOENT' ? null : false;\n  }\n}\n\n/**\n * ENG-6160: oldest *LIVE* pending-inbound marker mtime (ms epoch) for an agent,\n * or null when there is no live marker. \"Live\" excludes:\n *\n *  - markers older than `sessionStartMs` — a marker written before the current\n *    session started is a leftover from a PREVIOUS session and cannot mean\n *    *this* session is failing to drain. This is the load-bearing exclusion:\n *    without it, an orphan marker survives a fresh respawn and the wedge\n *    detector re-fires forever on a healthy idle agent (the sherlock enforce\n *    loop, 2026-06-08: `inboundAge=3389s` on a `● Ready.` session).\n *  - markers flagged `undeliverable: true` — already dead-lettered by the channel.\n *\n * Distinct from `oldestPendingInboundMtimeMs` (which counts ALL markers and\n * feeds the ENG-6017 `pending-inbound-stale` CloudWatch alarm — that alarm\n * *wants* to fire on a stuck inbound, so its semantics must NOT change). This\n * variant is wedge-detection-only.\n */\nexport function oldestLivePendingInboundMtimeMs(\n  agentHomeDir: string,\n  opts: { sessionStartMs?: number | null } = {},\n): number | null {\n  const sessionStartMs = opts.sessionStartMs ?? null;\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      const full = join(dir, file.name);\n      let mtimeMs: number;\n      try {\n        mtimeMs = statSync(full).mtimeMs;\n      } catch {\n        continue; // drained between readdir and stat — happy path\n      }\n      if (sessionStartMs !== null && mtimeMs < sessionStartMs) continue; // pre-session leftover\n      const undeliverable = isUndeliverableMarker(full);\n      if (undeliverable === null) continue; // vanished between stat and read — drained, exclude\n      if (undeliverable) continue; // already dead-lettered\n      if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160: age (s) of the oldest LIVE pending-inbound marker for an agent, or\n * null when none. The wedge detector uses this instead of the alarm-facing\n * `pending_inbound_oldest_age_seconds` so a stale/dead-letter marker can't\n * false-fire a respawn.\n */\nexport function livePendingInboundOldestAgeSeconds(\n  codeName: string,\n  sessionStartMs: number | null,\n  now: Date = new Date(),\n): number | null {\n  const oldest = oldestLivePendingInboundMtimeMs(dirname(paneLogPath(codeName)), { sessionStartMs });\n  if (oldest === null) return null;\n  return Math.max(0, Math.floor((now.getTime() - oldest) / 1000));\n}\n\n/**\n * ENG-6160: move every pending-inbound marker for an agent aside into a sibling\n * `<channel>-pending-inbound-stale/` directory (NOT silently deleted — the\n * payload pointer is preserved for forensics), returning the count moved.\n *\n * Called on a force-fresh wedge respawn: the markers belonged to the wedged\n * session that is being torn down; the fresh session cannot meaningfully\n * process a stale, out-of-context message, and leaving them on disk both keeps\n * the ENG-6017 alarm lit and (pre-ENG-6160) re-fed the wedge loop. The stale\n * dir does not end in `-pending-inbound`, so neither the probe nor this scan\n * re-counts moved markers.\n */\nexport function deadLetterPendingInbound(codeName: string, _now: Date = new Date()): number {\n  const home = dirname(paneLogPath(codeName));\n  let moved = 0;\n  let entries;\n  try {\n    entries = readdirSync(home, { withFileTypes: true });\n  } catch {\n    return 0;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(home, entry.name);\n    const deadDir = join(home, `${entry.name}-stale`);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      try {\n        mkdirSync(deadDir, { recursive: true });\n        renameSync(join(dir, file.name), join(deadDir, file.name));\n        moved++;\n      } catch {\n        // best-effort — a marker that vanished or can't move is left as-is\n      }\n    }\n  }\n  return moved;\n}\n\n/**\n * Compute the pane.log age for each agent. Missing or unreadable\n * pane.log returns null — the caller should drop those entries\n * rather than fabricate a \"fresh\" or \"ancient\" value. A missing\n * file means the agent has never spawned in this manager generation,\n * which is a separate problem covered by SessionAliveAgeSeconds.\n */\nexport function collectResponsivenessProbes(\n  codeNames: string[],\n  now: Date = new Date(),\n): ResponsivenessProbeResult[] {\n  const nowMs = now.getTime();\n  const results: ResponsivenessProbeResult[] = [];\n  for (const codeName of codeNames) {\n    try {\n      const panePath = paneLogPath(codeName);\n      const mtimeMs = statSync(panePath).mtimeMs;\n      const ageSeconds = Math.max(0, Math.floor((nowMs - mtimeMs) / 1000));\n      const result: ResponsivenessProbeResult = {\n        code_name: codeName,\n        pane_activity_age_seconds: ageSeconds,\n      };\n      // ENG-6017: piggyback the pending-inbound drain-age scan on the same\n      // cadence. Field omitted (not 0) when there are no markers.\n      const oldestMarkerMs = oldestPendingInboundMtimeMs(dirname(panePath));\n      if (oldestMarkerMs !== null) {\n        result.pending_inbound_oldest_age_seconds = Math.max(\n          0,\n          Math.floor((nowMs - oldestMarkerMs) / 1000),\n        );\n      }\n      results.push(result);\n    } catch {\n      // No pane.log yet (fresh agent, never spawned) — skip. The\n      // session-alive monitor already covers the \"should be running\n      // but isn't\" case.\n    }\n  }\n  return results;\n}\n"],"mappings":";;;;;;;;AAiCA,SAAS,WAAW,aAAa,cAAc,YAAY,gBAAgB;AAC3E,SAAS,SAAS,YAAY;AAc9B,IAAM,sBAAsB,IAAI,KAAK;AAE9B,SAAS,8BAAsC;AACpD,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,SAAS,OAAO,SAAS,KAAK,EAAE;AACtC,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AAC1D;AAoBA,SAAS,4BAA4B,cAAqC;AACxE,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI;AACF,cAAM,UAAU,SAAS,KAAK,KAAK,KAAK,IAAI,CAAC,EAAE;AAC/C,YAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,MACpD,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAUA,SAAS,sBAAsB,YAAoC;AACjE,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;AAC1D,WAAO,QAAQ,kBAAkB;AAAA,EACnC,SAAS,OAAO;AACd,WAAQ,MAAgC,SAAS,WAAW,OAAO;AAAA,EACrE;AACF;AAmBO,SAAS,gCACd,cACA,OAA2C,CAAC,GAC7B;AACf,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,YAAM,OAAO,KAAK,KAAK,KAAK,IAAI;AAChC,UAAI;AACJ,UAAI;AACF,kBAAU,SAAS,IAAI,EAAE;AAAA,MAC3B,QAAQ;AACN;AAAA,MACF;AACA,UAAI,mBAAmB,QAAQ,UAAU,eAAgB;AACzD,YAAM,gBAAgB,sBAAsB,IAAI;AAChD,UAAI,kBAAkB,KAAM;AAC5B,UAAI,cAAe;AACnB,UAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,IACpD;AAAA,EACF;AACA,SAAO;AACT;AAQO,SAAS,mCACd,UACA,gBACA,MAAY,oBAAI,KAAK,GACN;AACf,QAAM,SAAS,gCAAgC,QAAQ,YAAY,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;AACjG,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO,KAAK,IAAI,GAAG,KAAK,OAAO,IAAI,QAAQ,IAAI,UAAU,GAAI,CAAC;AAChE;AAcO,SAAS,yBAAyB,UAAkB,OAAa,oBAAI,KAAK,GAAW;AAC1F,QAAM,OAAO,QAAQ,YAAY,QAAQ,CAAC;AAC1C,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,MAAM,MAAM,IAAI;AACjC,UAAM,UAAU,KAAK,MAAM,GAAG,MAAM,IAAI,QAAQ;AAChD,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI;AACF,kBAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,mBAAW,KAAK,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,KAAK,IAAI,CAAC;AACzD;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AASO,SAAS,4BACd,WACA,MAAY,oBAAI,KAAK,GACQ;AAC7B,QAAM,QAAQ,IAAI,QAAQ;AAC1B,QAAM,UAAuC,CAAC;AAC9C,aAAW,YAAY,WAAW;AAChC,QAAI;AACF,YAAM,WAAW,YAAY,QAAQ;AACrC,YAAM,UAAU,SAAS,QAAQ,EAAE;AACnC,YAAM,aAAa,KAAK,IAAI,GAAG,KAAK,OAAO,QAAQ,WAAW,GAAI,CAAC;AACnE,YAAM,SAAoC;AAAA,QACxC,WAAW;AAAA,QACX,2BAA2B;AAAA,MAC7B;AAGA,YAAM,iBAAiB,4BAA4B,QAAQ,QAAQ,CAAC;AACpE,UAAI,mBAAmB,MAAM;AAC3B,eAAO,qCAAqC,KAAK;AAAA,UAC/C;AAAA,UACA,KAAK,OAAO,QAAQ,kBAAkB,GAAI;AAAA,QAC5C;AAAA,MACF;AACA,cAAQ,KAAK,MAAM;AAAA,IACrB,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/lib/responsiveness-probe.ts"],"sourcesContent":["/**\n * ENG-5399 — Tier 1 responsiveness probe (manager-side).\n *\n * Cheap, fast-cadence canary that catches \"agent went silent\" inside\n * minutes, well before the existing synthetic-probe cron's ~35 min\n * staleness window (`SyntheticReplyAgeSeconds`, ENG-5122).\n *\n * Mechanism: for each managed agent, read the mtime of the agent's\n * `pane.log` and report `now - mtime` as `PaneActivityAgeSeconds` via\n * a new `/host/responsiveness-probe` endpoint. `pane.log` is the\n * tmux pipe-pane sink set up by `setupPaneLog()` — any visible\n * activity (assistant turns, tool calls, in-place progress\n * heartbeats) bumps its mtime. A silent agent has a steadily\n * climbing age that lands in CloudWatch and trips a per-agent alarm.\n *\n * ENG-6017 adds a second per-agent signal on the same cadence:\n * `pending_inbound_oldest_age_seconds` — the age of the oldest marker\n * file across the agent's `*-pending-inbound/` directories (written by\n * the channel MCP servers for inbounds awaiting delivery). This is the\n * one artifact of the \"message typed but never submitted\" failure mode\n * that every other canary is blind to: in the koda incident\n * (2026-06-04) an operator Slack DM sat undelivered for 40+ minutes\n * while pane-activity stayed fresh (health checks), synthetic probes\n * were answered by the one-shot fallback, and heartbeat/session-alive\n * only reflect manager health. The field is OMITTED (not zero) when the\n * agent has no pending-inbound markers — the API treats absent as\n * \"no signal\", never as \"healthy\" (absent-vs-zero matters for\n * mixed-version fleets where old CLIs don't report it at all).\n *\n * Run from `pollCycle()` in `manager-worker.ts` on a configurable\n * interval (default 5 min via `AUGMENTED_RESPONSIVENESS_INTERVAL_MS`).\n */\n\nimport { mkdirSync, readdirSync, readFileSync, renameSync, statSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { paneLogPath } from './persistent-session.js';\n\nexport interface ResponsivenessProbeResult {\n  code_name: string;\n  pane_activity_age_seconds: number;\n  /**\n   * ENG-6017: age (s) of the oldest marker file across the agent's\n   * `*-pending-inbound/` directories. Omitted when no markers exist —\n   * absent means \"no signal\", NOT \"zero / healthy\".\n   */\n  pending_inbound_oldest_age_seconds?: number;\n}\n\nconst DEFAULT_INTERVAL_MS = 5 * 60 * 1000;\n\nexport function getResponsivenessIntervalMs(): number {\n  const raw = process.env.AUGMENTED_RESPONSIVENESS_INTERVAL_MS;\n  if (!raw) return DEFAULT_INTERVAL_MS;\n  const parsed = Number.parseInt(raw, 10);\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_INTERVAL_MS;\n}\n\n/**\n * ENG-6017: oldest pending-inbound marker mtime (ms epoch) for an agent,\n * or null when the agent has no markers / no pending-inbound dirs.\n *\n * The channel MCP servers (slack-channel, telegram-channel, …) write one\n * marker file per inbound into `~/.augmented/<codeName>/<channel>-pending-\n * inbound/` and clear it when the agent acknowledges the message. The\n * directory layout is the contract here — read-only, no IPC with the MCP\n * (the MCP and CLI release independently; file mtimes need no protocol).\n *\n * ENG-6072: only plain, non-hidden files count as markers. The msteams MCP\n * keeps `.markers/` and `.processed/` housekeeping SUBDIRECTORIES inside its\n * pending-inbound dir; their mtimes never advance, so statting every dirent\n * made the gauge climb forever and fired pending-inbound-stale on agents with\n * zero stranded messages (kylie ~3.4d / scout ~34h false ALARMs the moment\n * ENG-6023 activated the alarm). Dot-entries are skipped wholesale — the\n * hidden namespace is reserved for MCP bookkeeping, never for markers.\n */\nfunction oldestPendingInboundMtimeMs(agentHomeDir: string): number | null {\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null; // agent home missing — nothing to report\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      try {\n        const mtimeMs = statSync(join(dir, file.name)).mtimeMs;\n        if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n      } catch {\n        // Marker drained between readdir and stat — that's the happy path.\n      }\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160: classify a marker file for the LIVE-inbound scan.\n *  - `true`  → flagged `\"undeliverable\": true` (dead-letter, exclude).\n *  - `null`  → vanished mid-scan (ENOENT) — drained between stat and read, the\n *              happy path; exclude it rather than count an already-gone file.\n *  - `false` → still present but malformed / unreadable for another reason —\n *              treated as LIVE so a corrupt marker can never mask a real wedge.\n */\nfunction isUndeliverableMarker(markerPath: string): boolean | null {\n  try {\n    const parsed = JSON.parse(readFileSync(markerPath, 'utf8')) as { undeliverable?: unknown };\n    return parsed?.undeliverable === true;\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code === 'ENOENT' ? null : false;\n  }\n}\n\n/**\n * ENG-6160: oldest *LIVE* pending-inbound marker mtime (ms epoch) for an agent,\n * or null when there is no live marker. \"Live\" excludes:\n *\n *  - markers older than `sessionStartMs` — a marker written before the current\n *    session started is a leftover from a PREVIOUS session and cannot mean\n *    *this* session is failing to drain. This is the load-bearing exclusion:\n *    without it, an orphan marker survives a fresh respawn and the wedge\n *    detector re-fires forever on a healthy idle agent (the sherlock enforce\n *    loop, 2026-06-08: `inboundAge=3389s` on a `● Ready.` session).\n *  - markers flagged `undeliverable: true` — already dead-lettered by the channel.\n *\n * Distinct from `oldestPendingInboundMtimeMs` (which counts ALL markers and\n * feeds the ENG-6017 `pending-inbound-stale` CloudWatch alarm — that alarm\n * *wants* to fire on a stuck inbound, so its semantics must NOT change). This\n * variant is wedge-detection-only.\n */\nexport function oldestLivePendingInboundMtimeMs(\n  agentHomeDir: string,\n  opts: { sessionStartMs?: number | null } = {},\n): number | null {\n  const sessionStartMs = opts.sessionStartMs ?? null;\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      const full = join(dir, file.name);\n      let mtimeMs: number;\n      try {\n        mtimeMs = statSync(full).mtimeMs;\n      } catch {\n        continue; // drained between readdir and stat — happy path\n      }\n      if (sessionStartMs !== null && mtimeMs < sessionStartMs) continue; // pre-session leftover\n      const undeliverable = isUndeliverableMarker(full);\n      if (undeliverable === null) continue; // vanished between stat and read — drained, exclude\n      if (undeliverable) continue; // already dead-lettered\n      if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160: age (s) of the oldest LIVE pending-inbound marker for an agent, or\n * null when none. The wedge detector uses this instead of the alarm-facing\n * `pending_inbound_oldest_age_seconds` so a stale/dead-letter marker can't\n * false-fire a respawn.\n */\nexport function livePendingInboundOldestAgeSeconds(\n  codeName: string,\n  sessionStartMs: number | null,\n  now: Date = new Date(),\n): number | null {\n  const oldest = oldestLivePendingInboundMtimeMs(dirname(paneLogPath(codeName)), { sessionStartMs });\n  if (oldest === null) return null;\n  return Math.max(0, Math.floor((now.getTime() - oldest) / 1000));\n}\n\n/**\n * ENG-6160: move every pending-inbound marker for an agent aside into a sibling\n * `<channel>-pending-inbound-stale/` directory (NOT silently deleted — the\n * payload pointer is preserved for forensics), returning the count moved.\n *\n * Called on a force-fresh wedge respawn: the markers belonged to the wedged\n * session that is being torn down; the fresh session cannot meaningfully\n * process a stale, out-of-context message, and leaving them on disk both keeps\n * the ENG-6017 alarm lit and (pre-ENG-6160) re-fed the wedge loop. The stale\n * dir does not end in `-pending-inbound`, so neither the probe nor this scan\n * re-counts moved markers.\n */\nexport function deadLetterPendingInbound(codeName: string, _now: Date = new Date()): number {\n  const home = dirname(paneLogPath(codeName));\n  let moved = 0;\n  let entries;\n  try {\n    entries = readdirSync(home, { withFileTypes: true });\n  } catch {\n    return 0;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(home, entry.name);\n    const deadDir = join(home, `${entry.name}-stale`);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      try {\n        mkdirSync(deadDir, { recursive: true });\n        renameSync(join(dir, file.name), join(deadDir, file.name));\n        moved++;\n      } catch {\n        // best-effort — a marker that vanished or can't move is left as-is\n      }\n    }\n  }\n  return moved;\n}\n\n/**\n * Compute the pane.log age for each agent. Missing or unreadable\n * pane.log returns null — the caller should drop those entries\n * rather than fabricate a \"fresh\" or \"ancient\" value. A missing\n * file means the agent has never spawned in this manager generation,\n * which is a separate problem covered by SessionAliveAgeSeconds.\n */\nexport function collectResponsivenessProbes(\n  codeNames: string[],\n  now: Date = new Date(),\n): ResponsivenessProbeResult[] {\n  const nowMs = now.getTime();\n  const results: ResponsivenessProbeResult[] = [];\n  for (const codeName of codeNames) {\n    try {\n      const panePath = paneLogPath(codeName);\n      const mtimeMs = statSync(panePath).mtimeMs;\n      const ageSeconds = Math.max(0, Math.floor((nowMs - mtimeMs) / 1000));\n      const result: ResponsivenessProbeResult = {\n        code_name: codeName,\n        pane_activity_age_seconds: ageSeconds,\n      };\n      // ENG-6017: piggyback the pending-inbound drain-age scan on the same\n      // cadence. Field omitted (not 0) when there are no markers.\n      const oldestMarkerMs = oldestPendingInboundMtimeMs(dirname(panePath));\n      if (oldestMarkerMs !== null) {\n        result.pending_inbound_oldest_age_seconds = Math.max(\n          0,\n          Math.floor((nowMs - oldestMarkerMs) / 1000),\n        );\n      }\n      results.push(result);\n    } catch {\n      // No pane.log yet (fresh agent, never spawned) — skip. The\n      // session-alive monitor already covers the \"should be running\n      // but isn't\" case.\n    }\n  }\n  return results;\n}\n"],"mappings":";;;;;;;AAiCA,SAAS,WAAW,aAAa,cAAc,YAAY,gBAAgB;AAC3E,SAAS,SAAS,YAAY;AAc9B,IAAM,sBAAsB,IAAI,KAAK;AAE9B,SAAS,8BAAsC;AACpD,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,SAAS,OAAO,SAAS,KAAK,EAAE;AACtC,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AAC1D;AAoBA,SAAS,4BAA4B,cAAqC;AACxE,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI;AACF,cAAM,UAAU,SAAS,KAAK,KAAK,KAAK,IAAI,CAAC,EAAE;AAC/C,YAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,MACpD,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAUA,SAAS,sBAAsB,YAAoC;AACjE,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;AAC1D,WAAO,QAAQ,kBAAkB;AAAA,EACnC,SAAS,OAAO;AACd,WAAQ,MAAgC,SAAS,WAAW,OAAO;AAAA,EACrE;AACF;AAmBO,SAAS,gCACd,cACA,OAA2C,CAAC,GAC7B;AACf,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,YAAM,OAAO,KAAK,KAAK,KAAK,IAAI;AAChC,UAAI;AACJ,UAAI;AACF,kBAAU,SAAS,IAAI,EAAE;AAAA,MAC3B,QAAQ;AACN;AAAA,MACF;AACA,UAAI,mBAAmB,QAAQ,UAAU,eAAgB;AACzD,YAAM,gBAAgB,sBAAsB,IAAI;AAChD,UAAI,kBAAkB,KAAM;AAC5B,UAAI,cAAe;AACnB,UAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,IACpD;AAAA,EACF;AACA,SAAO;AACT;AAQO,SAAS,mCACd,UACA,gBACA,MAAY,oBAAI,KAAK,GACN;AACf,QAAM,SAAS,gCAAgC,QAAQ,YAAY,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;AACjG,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO,KAAK,IAAI,GAAG,KAAK,OAAO,IAAI,QAAQ,IAAI,UAAU,GAAI,CAAC;AAChE;AAcO,SAAS,yBAAyB,UAAkB,OAAa,oBAAI,KAAK,GAAW;AAC1F,QAAM,OAAO,QAAQ,YAAY,QAAQ,CAAC;AAC1C,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,MAAM,MAAM,IAAI;AACjC,UAAM,UAAU,KAAK,MAAM,GAAG,MAAM,IAAI,QAAQ;AAChD,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI;AACF,kBAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,mBAAW,KAAK,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,KAAK,IAAI,CAAC;AACzD;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AASO,SAAS,4BACd,WACA,MAAY,oBAAI,KAAK,GACQ;AAC7B,QAAM,QAAQ,IAAI,QAAQ;AAC1B,QAAM,UAAuC,CAAC;AAC9C,aAAW,YAAY,WAAW;AAChC,QAAI;AACF,YAAM,WAAW,YAAY,QAAQ;AACrC,YAAM,UAAU,SAAS,QAAQ,EAAE;AACnC,YAAM,aAAa,KAAK,IAAI,GAAG,KAAK,OAAO,QAAQ,WAAW,GAAI,CAAC;AACnE,YAAM,SAAoC;AAAA,QACxC,WAAW;AAAA,QACX,2BAA2B;AAAA,MAC7B;AAGA,YAAM,iBAAiB,4BAA4B,QAAQ,QAAQ,CAAC;AACpE,UAAI,mBAAmB,MAAM;AAC3B,eAAO,qCAAqC,KAAK;AAAA,UAC/C;AAAA,UACA,KAAK,OAAO,QAAQ,kBAAkB,GAAI;AAAA,QAC5C;AAAA,MACF;AACA,cAAQ,KAAK,MAAM;AAAA,IACrB,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.27.144",
+  "version": "0.27.146",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {
@@ -23,7 +23,7 @@
   },
   "scripts": {
     "build": "tsup && npm run build:mcp-assets && npm run build:cli-assets",
-    "build:mcp-assets": "mkdir -p dist/mcp && cp ../../packages/mcp/dist/index.js dist/mcp/index.js && cp ../../packages/mcp/dist/slack-channel.js dist/mcp/slack-channel.js && cp ../../packages/mcp/dist/direct-chat-channel.js dist/mcp/direct-chat-channel.js && cp ../../packages/mcp/dist/telegram-channel.js dist/mcp/telegram-channel.js && cp ../../packages/mcp/dist/teams-channel.js dist/mcp/teams-channel.js",
+    "build:mcp-assets": "mkdir -p dist/mcp && cp ../../packages/mcp/dist/index.js dist/mcp/index.js && cp ../../packages/mcp/dist/slack-channel.js dist/mcp/slack-channel.js && cp ../../packages/mcp/dist/direct-chat-channel.js dist/mcp/direct-chat-channel.js && cp ../../packages/mcp/dist/telegram-channel.js dist/mcp/telegram-channel.js && cp ../../packages/mcp/dist/teams-channel.js dist/mcp/teams-channel.js && cp ../../packages/augmented-admin-mcp/dist/index.js dist/mcp/augmented-admin.js",
     "build:cli-assets": "mkdir -p dist/assets && cp assets/impersonate-statusline.sh dist/assets/impersonate-statusline.sh && chmod +x dist/assets/impersonate-statusline.sh",
     "dev": "tsx watch src/bin/agt.ts",
     "test": "vitest run",
@@ -52,6 +52,7 @@
   "devDependencies": {
     "@augmented/core": "workspace:*",
     "@integrity-labs/augmented-mcp": "workspace:*",
+    "@integrity-labs/augmented-admin-mcp": "workspace:*",
     "@types/node": "22.19.11",
     "@types/react": "19.2.14",
     "@types/ws": "8.18.1",

package/dist/chunk-354FAVQR.js

@@ -1,173 +0,0 @@
-// src/lib/daily-session.ts
-import { randomUUID } from "crypto";
-import { existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
-var HISTORY_DAYS = 7;
-function profileDir(codeName) {
-  return join(homedir(), ".augmented", codeName);
-}
-function dailySessionPath(codeName) {
-  return join(profileDir(codeName), "daily-session.json");
-}
-function todayLocalIso(now = /* @__PURE__ */ new Date(), timezone) {
-  if (timezone) {
-    try {
-      const fmt = new Intl.DateTimeFormat("en-CA", {
-        timeZone: timezone,
-        year: "numeric",
-        month: "2-digit",
-        day: "2-digit"
-      });
-      return fmt.format(now);
-    } catch {
-    }
-  }
-  const y = now.getFullYear();
-  const m = String(now.getMonth() + 1).padStart(2, "0");
-  const d = String(now.getDate()).padStart(2, "0");
-  return `${y}-${m}-${d}`;
-}
-function readFile(codeName) {
-  const path = dailySessionPath(codeName);
-  if (!existsSync(path)) return { current: null, history: [] };
-  try {
-    const raw = readFileSync(path, "utf-8");
-    const parsed = JSON.parse(raw);
-    return {
-      current: parsed.current ?? null,
-      history: Array.isArray(parsed.history) ? parsed.history : []
-    };
-  } catch {
-    return { current: null, history: [] };
-  }
-}
-function writeFile(codeName, data) {
-  const dir = profileDir(codeName);
-  mkdirSync(dir, { recursive: true });
-  const finalPath = dailySessionPath(codeName);
-  const tmpPath = `${finalPath}.${process.pid}.${randomUUID()}.tmp`;
-  writeFileSync(tmpPath, JSON.stringify(data, null, 2), "utf-8");
-  renameSync(tmpPath, finalPath);
-}
-function trimHistory(history, now, timezone) {
-  const cutoff = new Date(now);
-  cutoff.setDate(cutoff.getDate() - HISTORY_DAYS);
-  const cutoffIso = todayLocalIso(cutoff, timezone);
-  return history.filter((h) => h.date >= cutoffIso).slice(0, HISTORY_DAYS);
-}
-function getOrCreateDailySession(codeName, now = /* @__PURE__ */ new Date(), timezone) {
-  const today = todayLocalIso(now, timezone);
-  const file = readFile(codeName);
-  if (file.current && file.current.date === today) {
-    return { sessionId: file.current.sessionId, isNew: false };
-  }
-  const next = {
-    date: today,
-    sessionId: randomUUID(),
-    startedAt: now.toISOString()
-  };
-  const history = trimHistory(
-    [...file.current ? [file.current] : [], ...file.history],
-    now,
-    timezone
-  );
-  writeFile(codeName, { current: next, history });
-  return { sessionId: next.sessionId, isNew: true };
-}
-function markDailySessionSpawn(codeName, sessionId, now = /* @__PURE__ */ new Date(), timezone) {
-  const today = todayLocalIso(now, timezone);
-  const file = readFile(codeName);
-  if (file.current && file.current.date === today && file.current.sessionId === sessionId) {
-    return;
-  }
-  const next = {
-    date: today,
-    sessionId,
-    startedAt: now.toISOString()
-  };
-  const history = trimHistory(
-    [...file.current ? [file.current] : [], ...file.history],
-    now,
-    timezone
-  );
-  writeFile(codeName, { current: next, history });
-}
-function rotateDailySession(codeName, now = /* @__PURE__ */ new Date(), timezone) {
-  const today = todayLocalIso(now, timezone);
-  const file = readFile(codeName);
-  const next = {
-    date: today,
-    sessionId: randomUUID(),
-    startedAt: now.toISOString()
-  };
-  const history = trimHistory(
-    [...file.current ? [file.current] : [], ...file.history],
-    now,
-    timezone
-  );
-  writeFile(codeName, { current: next, history });
-  return next.sessionId;
-}
-function encodeProjectPath(projectDir) {
-  return "-" + projectDir.replace(/^\//, "").replace(/[/.]/g, "-");
-}
-function sessionFileExists(projectDir, sessionId) {
-  const path = join(
-    homedir(),
-    ".claude",
-    "projects",
-    encodeProjectPath(projectDir),
-    `${sessionId}.jsonl`
-  );
-  return existsSync(path);
-}
-function sessionTranscriptDir(projectDir) {
-  return join(homedir(), ".claude", "projects", encodeProjectPath(projectDir));
-}
-function sessionFilePath(projectDir, sessionId) {
-  return join(sessionTranscriptDir(projectDir), `${sessionId}.jsonl`);
-}
-function transcriptActivityAgeSeconds(projectDir, sessionId, now = /* @__PURE__ */ new Date()) {
-  if (!sessionId) return null;
-  try {
-    const mtimeMs = statSync(sessionFilePath(projectDir, sessionId)).mtimeMs;
-    return Math.max(0, Math.floor((now.getTime() - mtimeMs) / 1e3));
-  } catch {
-    return null;
-  }
-}
-function isAgentIdle(projectDir, sessionId, idleSeconds = 60, now = /* @__PURE__ */ new Date()) {
-  const path = sessionFilePath(projectDir, sessionId);
-  if (!existsSync(path)) return true;
-  try {
-    const mtimeMs = statSync(path).mtimeMs;
-    return now.getTime() - mtimeMs >= idleSeconds * 1e3;
-  } catch {
-    return false;
-  }
-}
-function isStaleForToday(codeName, now = /* @__PURE__ */ new Date(), timezone) {
-  const file = readFile(codeName);
-  if (!file.current) return false;
-  return file.current.date !== todayLocalIso(now, timezone);
-}
-function peekCurrentSession(codeName) {
-  return readFile(codeName).current;
-}
-var _internals = { todayLocalIso, dailySessionPath, profileDir, encodeProjectPath };
-
-export {
-  getOrCreateDailySession,
-  markDailySessionSpawn,
-  rotateDailySession,
-  sessionFileExists,
-  sessionTranscriptDir,
-  sessionFilePath,
-  transcriptActivityAgeSeconds,
-  isAgentIdle,
-  isStaleForToday,
-  peekCurrentSession,
-  _internals
-};
-//# sourceMappingURL=chunk-354FAVQR.js.map