@integrity-labs/agt-cli 0.27.166 → 0.27.168

package/dist/bin/agt.js

@@ -33,7 +33,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-DMZQM4DY.js";
+} from "../chunk-ZQGQVROS.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -5019,7 +5019,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.166" : "dev";
+var cliVersion = true ? "0.27.168" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5942,7 +5942,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.166" : "dev";
+var cliVersion2 = true ? "0.27.168" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-DMZQM4DY.js → chunk-ZQGQVROS.js}

@@ -8222,4 +8222,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-DMZQM4DY.js.map
+//# sourceMappingURL=chunk-ZQGQVROS.js.map

package/dist/lib/manager-worker.js

@@ -22,7 +22,7 @@ import {
   provisionStopHook,
   requireHost,
   safeWriteJsonAtomic
-} from "../chunk-DMZQM4DY.js";
+} from "../chunk-ZQGQVROS.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -5041,7 +5041,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.27.166" : "dev";
+var agtCliVersion = true ? "0.27.168" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -6338,7 +6338,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-AL3O7SYZ.js");
+      } = await import("../responsiveness-probe-7NDEHXXZ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -6377,7 +6377,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-AL3O7SYZ.js");
+        } = await import("../responsiveness-probe-7NDEHXXZ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;

package/dist/mcp/slack-channel.js

@@ -14208,6 +14208,9 @@ function decideSlackEngagement(input) {
   const isExplicitMention = input.type === "app_mention" || !!input.botUserId && input.text.includes(`<@${input.botUserId}>`);
   return !(input.isAutoFollowed && !isExplicitMention);
 }
+function decideMarkerArm(input) {
+  return input.shouldEngage || input.isAutoFollowed && input.botPostedInThread;
+}
 function decideSlackAckReaction(input) {
   return Boolean(input.channel && input.ts);
 }
@@ -14585,6 +14588,7 @@ function oldestPendingMarkerAgeMs(dir, now = Date.now()) {
     let receivedAt;
     try {
       const raw = JSON.parse(readFileSync2(join2(dir, name), "utf-8"));
+      if (raw.discretionary === true) continue;
       receivedAt = raw.received_at;
     } catch {
       continue;
@@ -15439,7 +15443,11 @@ function loadThreadStore(filePath, opts = {}) {
       pruned++;
       continue;
     }
-    threads.set(key2, { involvement: entry.involvement, last_seen_at: entry.last_seen_at });
+    threads.set(key2, {
+      involvement: entry.involvement,
+      last_seen_at: entry.last_seen_at,
+      ...entry.bot_posted === true ? { bot_posted: true } : {}
+    });
   }
   return { threads, pruned };
 }
@@ -16600,7 +16608,7 @@ function slackPendingInboundPath(channel, threadTs, messageTs) {
   if (!SLACK_PENDING_INBOUND_DIR) return null;
   return join7(SLACK_PENDING_INBOUND_DIR, safeSlackMarkerName(channel, threadTs, messageTs));
 }
-function writeSlackPendingInboundMarker(channel, threadTs, messageTs, undeliverable = false) {
+function writeSlackPendingInboundMarker(channel, threadTs, messageTs, undeliverable = false, discretionary = false) {
   const path = slackPendingInboundPath(channel, threadTs, messageTs);
   if (!path || !SLACK_PENDING_INBOUND_DIR) return;
   const marker = {
@@ -16608,8 +16616,9 @@ function writeSlackPendingInboundMarker(channel, threadTs, messageTs, undelivera
     thread_ts: threadTs,
     message_ts: messageTs,
     received_at: (/* @__PURE__ */ new Date()).toISOString(),
-    // Only persist the flag when set — keeps healthy-path markers byte-identical.
-    ...undeliverable ? { undeliverable: true } : {}
+    // Only persist the flags when set — keeps healthy-path markers byte-identical.
+    ...undeliverable ? { undeliverable: true } : {},
+    ...discretionary ? { discretionary: true } : {}
   };
   try {
     mkdirSync5(SLACK_PENDING_INBOUND_DIR, { recursive: true, mode: 448 });
@@ -16957,8 +16966,9 @@ function startSlackRecoveryOutboxWatcher() {
 }
 startSlackRecoveryOutboxWatcher();
 var STALE_MARKER_MS = 24 * 60 * 60 * 1e3;
-function trackPendingMessage(channel, threadTs, messageTs, undeliverable = false) {
-  writeSlackPendingInboundMarker(channel, threadTs, messageTs, undeliverable);
+var DISCRETIONARY_MARKER_MS = 10 * 60 * 1e3;
+function trackPendingMessage(channel, threadTs, messageTs, undeliverable = false, discretionary = false) {
+  writeSlackPendingInboundMarker(channel, threadTs, messageTs, undeliverable, discretionary);
 }
 function sweepSlackStaleMarkers(thresholdMs) {
   if (!SLACK_PENDING_INBOUND_DIR) return;
@@ -16995,7 +17005,8 @@ function sweepSlackStaleMarkers(thresholdMs) {
       continue;
     }
     const { channel, thread_ts, message_ts, received_at } = marker;
-    if (!channel || !thread_ts || !message_ts || isPendingMarkerStale(received_at, now, thresholdMs)) {
+    const effectiveThresholdMs = marker.discretionary ? Math.min(thresholdMs, DISCRETIONARY_MARKER_MS) : thresholdMs;
+    if (!channel || !thread_ts || !message_ts || isPendingMarkerStale(received_at, now, effectiveThresholdMs)) {
       try {
         unlinkSync4(fullPath);
       } catch {
@@ -17031,6 +17042,7 @@ function listPendingSlackConversations() {
         );
         if (typeof marker.channel !== "string" || !marker.channel) continue;
         if (typeof marker.thread_ts !== "string" || !marker.thread_ts) continue;
+        if (marker.discretionary === true) continue;
         const isThreadReply = typeof marker.message_ts === "string" && marker.message_ts !== marker.thread_ts;
         const key2 = isThreadReply ? `${marker.channel}:${marker.thread_ts}` : marker.channel;
         if (!byKey.has(key2)) {
@@ -17910,7 +17922,11 @@ function rememberThread(channel, threadTs, involvement, opts = {}) {
   const existing = trackedThreads.get(key2);
   const next = {
     involvement: opts.override || !existing ? involvement : existing.involvement,
-    last_seen_at: (/* @__PURE__ */ new Date()).toISOString()
+    last_seen_at: (/* @__PURE__ */ new Date()).toISOString(),
+    // ENG-6319: sticky — once the bot has posted in a thread it stays a
+    // conversational participant for marker-arming (persisted only when true
+    // so pre-flag entries and never-posted threads stay byte-identical).
+    ...opts.botPosted || existing?.bot_posted ? { bot_posted: true } : {}
   };
   trackedThreads.set(key2, next);
   if (isShuttingDown) {
@@ -18378,7 +18394,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
       recordActivity("reply");
       if (THREAD_AUTO_FOLLOW !== "off") {
         const trackTs = effectiveThreadTs ?? data.ts ?? void 0;
-        rememberThread(channel, trackTs, thread_ts ? "mentioned" : "started");
+        rememberThread(channel, trackTs, thread_ts ? "mentioned" : "started", { botPosted: true });
       }
       if (interactiveHostAvailable() && data.ts) {
         const cfg = {
@@ -19502,6 +19518,9 @@ async function connectSocketMode() {
         isAutoFollowed,
         botUserId
       });
+      const participantEntry = threadKey ? trackedThreads.get(threadKey) : void 0;
+      const botPostedInThread = participantEntry?.bot_posted === true || participantEntry?.involvement === "started";
+      const armMarker = decideMarkerArm({ shouldEngage, isAutoFollowed, botPostedInThread });
       const ackProbe = process.env.TMUX && AGENT_CODE_NAME ? probeAgentSessionCached(AGENT_CODE_NAME) : { tmux: "unknown", claude: "unknown" };
       let paneLogFreshAgeMs = null;
       if (SLACK_AGENT_DIR) {
@@ -19531,13 +19550,13 @@ async function connectSocketMode() {
           body: JSON.stringify({ channel, timestamp: ts, name: reactionName })
         }).catch(() => {
         });
-        if (ackDecision === "undeliverable" && channel && shouldEngage) {
+        if (ackDecision === "undeliverable" && channel && armMarker) {
           postUndeliverableNotice(channel, threadTs, isThreadReply);
         }
       }
-      if (channel && ts && shouldEngage) {
-        trackPendingMessage(channel, threadTs, ts, ackDecision === "undeliverable");
-        if (ackDecision === "ack") {
+      if (channel && ts && armMarker) {
+        trackPendingMessage(channel, threadTs, ts, ackDecision === "undeliverable", !shouldEngage);
+        if (ackDecision === "ack" && shouldEngage) {
           scheduleBusyAck(channel, threadTs, ts, isThreadReply);
         }
       }

package/dist/mcp/telegram-channel.js

@@ -14320,16 +14320,16 @@ import {
   createWriteStream,
   existsSync as existsSync5,
   mkdirSync as mkdirSync4,
-  readFileSync as readFileSync6,
-  readdirSync as readdirSync2,
+  readFileSync as readFileSync7,
+  readdirSync as readdirSync3,
   renameSync as renameSync4,
-  statSync,
+  statSync as statSync2,
   unlinkSync as unlinkSync4,
   watch,
   writeFileSync as writeFileSync4
 } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 
 // src/channel-attachments.ts
 import { homedir } from "os";
@@ -16000,16 +16000,53 @@ var TELEGRAM_EGRESS_TOOLS = /* @__PURE__ */ new Set([
   "channel_request_input"
 ]);
 
+// src/telegram-pending-inbound-cleanup.ts
+import { readdirSync, readFileSync as readFileSync3, statSync } from "fs";
+import { join as join3 } from "path";
+function markerArrivalMs(fullPath) {
+  try {
+    const received = JSON.parse(readFileSync3(fullPath, "utf-8")).received_at;
+    const parsed = received ? Date.parse(received) : Number.NaN;
+    if (Number.isFinite(parsed)) return parsed;
+  } catch {
+  }
+  try {
+    return statSync(fullPath).mtimeMs;
+  } catch {
+    return Number.POSITIVE_INFINITY;
+  }
+}
+function clearAllTelegramPendingMarkersForChat(pendingDir, chatId, clearMarkerFile, cutoffMs = Number.POSITIVE_INFINITY) {
+  const prefix = `${chatId.replace(/[^A-Za-z0-9_-]/g, "_")}__`;
+  const bounded = Number.isFinite(cutoffMs);
+  let filenames;
+  try {
+    filenames = readdirSync(pendingDir);
+  } catch {
+    return 0;
+  }
+  let cleared = 0;
+  for (const filename of filenames) {
+    if (!filename.startsWith(prefix)) continue;
+    if (!filename.endsWith(".json")) continue;
+    const fullPath = join3(pendingDir, filename);
+    if (bounded && markerArrivalMs(fullPath) > cutoffMs) continue;
+    clearMarkerFile(fullPath);
+    cleared++;
+  }
+  return cleared;
+}
+
 // src/mcp-spawn-lock.ts
 import {
   existsSync as existsSync3,
   mkdirSync as mkdirSync3,
-  readFileSync as readFileSync3,
+  readFileSync as readFileSync4,
   renameSync as renameSync3,
   unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync3
 } from "fs";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 function defaultIsPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
   try {
@@ -16027,7 +16064,7 @@ function acquireMcpSpawnLock(args) {
   const isPidAlive = options.isPidAlive ?? defaultIsPidAlive;
   const selfPid = options.selfPid ?? process.pid;
   const now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-  const path = join3(agentDir, basename);
+  const path = join4(agentDir, basename);
   const existing = readLockHolder(path);
   if (existing) {
     if (existing.pid === selfPid) {
@@ -16058,7 +16095,7 @@ function releaseMcpSpawnLock(lockPath, opts = {}) {
 function readLockHolder(path) {
   if (!existsSync3(path)) return null;
   try {
-    const raw = readFileSync3(path, "utf8");
+    const raw = readFileSync4(path, "utf8");
     const parsed = JSON.parse(raw);
     const pid = typeof parsed.pid === "number" ? parsed.pid : Number(parsed.pid);
     if (!Number.isFinite(pid) || pid <= 0) return null;
@@ -16070,15 +16107,15 @@ function readLockHolder(path) {
 }
 
 // src/ack-reaction.ts
-import { readdirSync, readFileSync as readFileSync5 } from "fs";
-import { join as join5 } from "path";
+import { readdirSync as readdirSync2, readFileSync as readFileSync6 } from "fs";
+import { join as join6 } from "path";
 
 // src/flags-cache-read.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync5 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 function defaultFlagsCachePath() {
-  return join4(homedir2(), ".augmented", "flags-cache.json");
+  return join5(homedir2(), ".augmented", "flags-cache.json");
 }
 function envBoolean(raw) {
   if (raw === void 0) return void 0;
@@ -16091,7 +16128,7 @@ function envBoolean(raw) {
 function cachedBoolean(key2, path) {
   try {
     if (!existsSync4(path)) return void 0;
-    const parsed = JSON.parse(readFileSync4(path, "utf8"));
+    const parsed = JSON.parse(readFileSync5(path, "utf8"));
     if (!parsed || typeof parsed !== "object") return void 0;
     const flags = parsed.flags;
     if (!flags || typeof flags !== "object") return void 0;
@@ -16171,7 +16208,7 @@ var GIVE_UP_SIGNAL_MAX_AGE_MS = 30 * 60 * 1e3;
 function readGiveUpSignalAtMs(path, now = Date.now()) {
   if (!path) return null;
   try {
-    const raw = JSON.parse(readFileSync5(path, "utf8"));
+    const raw = JSON.parse(readFileSync6(path, "utf8"));
     if (typeof raw.gave_up_at !== "string") return null;
     const t = Date.parse(raw.gave_up_at);
     if (!Number.isFinite(t) || t > now) return null;
@@ -16194,7 +16231,7 @@ function oldestPendingMarkerAgeMs(dir, now = Date.now()) {
   if (!dir) return null;
   let names;
   try {
-    names = readdirSync(dir);
+    names = readdirSync2(dir);
   } catch {
     return null;
   }
@@ -16203,7 +16240,8 @@ function oldestPendingMarkerAgeMs(dir, now = Date.now()) {
     if (!name.endsWith(".json")) continue;
     let receivedAt;
     try {
-      const raw = JSON.parse(readFileSync5(join5(dir, name), "utf-8"));
+      const raw = JSON.parse(readFileSync6(join6(dir, name), "utf-8"));
+      if (raw.discretionary === true) continue;
       receivedAt = raw.received_at;
     } catch {
       continue;
@@ -16251,7 +16289,7 @@ function redactId(id) {
 }
 var BOT_TOKEN = process.env.TELEGRAM_BOT_TOKEN;
 var AGENT_CODE_NAME = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
-var TELEGRAM_AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join6(homedir3(), ".augmented", AGENT_CODE_NAME) : null;
+var TELEGRAM_AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join7(homedir3(), ".augmented", AGENT_CODE_NAME) : null;
 var AGT_HOST = process.env.AGT_HOST ?? null;
 var AGT_API_KEY = process.env.AGT_API_KEY ?? null;
 var AGT_AGENT_ID = process.env.AGT_AGENT_ID ?? null;
@@ -16345,9 +16383,9 @@ if (!BOT_TOKEN) {
 var stderrLogStream = null;
 if (AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown") {
   try {
-    const logDir = join6(homedir3(), ".augmented", AGENT_CODE_NAME);
+    const logDir = join7(homedir3(), ".augmented", AGENT_CODE_NAME);
     mkdirSync4(logDir, { recursive: true });
-    stderrLogStream = createWriteStream(join6(logDir, "telegram-channel-stderr.log"), {
+    stderrLogStream = createWriteStream(join7(logDir, "telegram-channel-stderr.log"), {
       flags: "a",
       mode: 384
     });
@@ -16537,7 +16575,7 @@ function scheduleBusyAck(chatId, messageId) {
     let paneLogFreshAgeMs = null;
     if (AGENT_DIR) {
       try {
-        const paneMtimeMs = statSync(join6(AGENT_DIR, "pane.log")).mtimeMs;
+        const paneMtimeMs = statSync2(join7(AGENT_DIR, "pane.log")).mtimeMs;
         paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
       } catch {
       }
@@ -16559,7 +16597,7 @@ function scheduleBusyAck(chatId, messageId) {
 function __resetBusyAckNoticeThrottle() {
   lastBusyAckNoticeAt.clear();
 }
-var RESTART_FLAGS_DIR = join6(homedir3(), ".augmented", "restart-flags");
+var RESTART_FLAGS_DIR = join7(homedir3(), ".augmented", "restart-flags");
 function writeTelegramRestartConfirm(reply, requesterName) {
   if (!RESTART_CONFIRM_FILE) return;
   const marker = {
@@ -16752,7 +16790,7 @@ async function handleRestartCommand(opts) {
     if (!existsSync5(RESTART_FLAGS_DIR)) {
       mkdirSync4(RESTART_FLAGS_DIR, { recursive: true });
     }
-    const flagPath = join6(RESTART_FLAGS_DIR, `${AGENT_CODE_NAME}.flag`);
+    const flagPath = join7(RESTART_FLAGS_DIR, `${AGENT_CODE_NAME}.flag`);
     writeTelegramRestartConfirm(
       { chat_id: opts.chatId, message_id: opts.messageId },
       opts.requesterName
@@ -17135,10 +17173,10 @@ async function classifyRestartCommand(text) {
   if (!ours) return "verification_failed";
   return target === ours ? "act" : "ignore";
 }
-var AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join6(homedir3(), ".augmented", AGENT_CODE_NAME) : null;
-var PENDING_INBOUND_DIR = AGENT_DIR ? join6(AGENT_DIR, "telegram-pending-inbound") : null;
-var RECOVERY_OUTBOX_DIR = AGENT_DIR ? join6(AGENT_DIR, "telegram-recovery-outbox") : null;
-var RESTART_CONFIRM_FILE = AGENT_DIR ? join6(AGENT_DIR, "telegram-restart-confirm.json") : null;
+var AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join7(homedir3(), ".augmented", AGENT_CODE_NAME) : null;
+var PENDING_INBOUND_DIR = AGENT_DIR ? join7(AGENT_DIR, "telegram-pending-inbound") : null;
+var RECOVERY_OUTBOX_DIR = AGENT_DIR ? join7(AGENT_DIR, "telegram-recovery-outbox") : null;
+var RESTART_CONFIRM_FILE = AGENT_DIR ? join7(AGENT_DIR, "telegram-restart-confirm.json") : null;
 var TELEGRAM_PROCESS_BOOT_MS = Date.now();
 function safeMarkerName(chatId, messageId) {
   const safe = (s) => s.replace(/[^A-Za-z0-9_-]/g, "_");
@@ -17146,7 +17184,7 @@ function safeMarkerName(chatId, messageId) {
 }
 function pendingInboundPath(chatId, messageId) {
   if (!PENDING_INBOUND_DIR) return null;
-  return join6(PENDING_INBOUND_DIR, safeMarkerName(chatId, messageId));
+  return join7(PENDING_INBOUND_DIR, safeMarkerName(chatId, messageId));
 }
 function writePendingInboundMarker(chatId, messageId, chatType, undeliverable = false, payload) {
   const path = pendingInboundPath(chatId, messageId);
@@ -17175,7 +17213,7 @@ function writePendingInboundMarker(chatId, messageId, chatType, undeliverable =
 function clearTelegramMarkerFileWithHeal(fullPath) {
   let marker = null;
   try {
-    marker = JSON.parse(readFileSync6(fullPath, "utf-8"));
+    marker = JSON.parse(readFileSync7(fullPath, "utf-8"));
   } catch {
   }
   if (marker && decideRecoveryHeal({
@@ -17189,16 +17227,11 @@ function clearTelegramMarkerFileWithHeal(fullPath) {
   } catch {
   }
 }
-function clearPendingInboundMarker(chatId, messageId) {
-  const path = pendingInboundPath(chatId, messageId);
-  if (!path) return;
-  clearTelegramMarkerFileWithHeal(path);
-}
 function readPendingInboundMarker(chatId, messageId) {
   const path = pendingInboundPath(chatId, messageId);
   if (!path || !existsSync5(path)) return null;
   try {
-    return JSON.parse(readFileSync6(path, "utf-8"));
+    return JSON.parse(readFileSync7(path, "utf-8"));
   } catch {
     return null;
   }
@@ -17218,10 +17251,10 @@ function nextRetryName(filename) {
 async function processRecoveryOutboxFile(filename) {
   if (!RECOVERY_OUTBOX_DIR) return;
   if (filename.endsWith(".poison.json") || filename.endsWith(".tmp")) return;
-  const fullPath = join6(RECOVERY_OUTBOX_DIR, filename);
+  const fullPath = join7(RECOVERY_OUTBOX_DIR, filename);
   let payload;
   try {
-    const raw = readFileSync6(fullPath, "utf-8");
+    const raw = readFileSync7(fullPath, "utf-8");
     payload = JSON.parse(raw);
   } catch (err) {
     process.stderr.write(
@@ -17253,6 +17286,7 @@ async function processRecoveryOutboxFile(filename) {
   };
   if (payload.message_id) body.reply_to_message_id = Number(payload.message_id);
   let sendSucceeded = false;
+  const recoveryDrainCutoffMs = Date.now();
   try {
     const resp = await telegramApiCall("sendMessage", body, 15e3);
     if (resp.ok) {
@@ -17261,7 +17295,7 @@ async function processRecoveryOutboxFile(filename) {
         `telegram-channel(${AGENT_CODE_NAME}): ghost-reply recovery sent (chat=${redactId(payload.chat_id)} msg=${redactId(payload.message_id ?? "")})
 `
       );
-      if (payload.message_id) clearPendingMessage(payload.chat_id, payload.message_id);
+      clearPendingMessage(payload.chat_id, recoveryDrainCutoffMs);
     } else {
       process.stderr.write(
         `telegram-channel(${AGENT_CODE_NAME}): ghost-reply recovery failed (chat=${redactId(payload.chat_id)}): ${resp.description ?? "unknown"}
@@ -17284,7 +17318,7 @@ async function processRecoveryOutboxFile(filename) {
   const next = nextRetryName(filename);
   if (next) {
     try {
-      renameSync4(fullPath, join6(RECOVERY_OUTBOX_DIR, next.next));
+      renameSync4(fullPath, join7(RECOVERY_OUTBOX_DIR, next.next));
       if (next.attempt >= MAX_RECOVERY_ATTEMPTS) {
         process.stderr.write(
           `telegram-channel(${AGENT_CODE_NAME}): ghost-reply recovery exhausted retries \u2014 moved to ${next.next}
@@ -17315,7 +17349,7 @@ function scanRecoveryRetries() {
   if (!RECOVERY_OUTBOX_DIR) return;
   let entries;
   try {
-    entries = readdirSync2(RECOVERY_OUTBOX_DIR);
+    entries = readdirSync3(RECOVERY_OUTBOX_DIR);
   } catch {
     return;
   }
@@ -17324,7 +17358,7 @@ function scanRecoveryRetries() {
     if (!f.includes(".retry-") || f.endsWith(".poison.json")) continue;
     let mtimeMs;
     try {
-      mtimeMs = statSync(join6(RECOVERY_OUTBOX_DIR, f)).mtimeMs;
+      mtimeMs = statSync2(join7(RECOVERY_OUTBOX_DIR, f)).mtimeMs;
     } catch {
       continue;
     }
@@ -17345,7 +17379,7 @@ function startRecoveryOutboxWatcher() {
     return;
   }
   try {
-    for (const f of readdirSync2(RECOVERY_OUTBOX_DIR)) {
+    for (const f of readdirSync3(RECOVERY_OUTBOX_DIR)) {
       if (isFirstAttemptOutboxFile(f)) void processRecoveryOutboxFile(f);
     }
   } catch {
@@ -17354,7 +17388,7 @@ function startRecoveryOutboxWatcher() {
     const watcher = watch(RECOVERY_OUTBOX_DIR, (event, filename) => {
       if (event !== "rename" || !filename) return;
       if (!isFirstAttemptOutboxFile(filename)) return;
-      if (existsSync5(join6(RECOVERY_OUTBOX_DIR, filename))) {
+      if (existsSync5(join7(RECOVERY_OUTBOX_DIR, filename))) {
         void processRecoveryOutboxFile(filename);
       }
     });
@@ -17378,7 +17412,7 @@ function sweepTelegramStaleMarkers(thresholdMs) {
   if (!existsSync5(PENDING_INBOUND_DIR)) return;
   let filenames;
   try {
-    filenames = readdirSync2(PENDING_INBOUND_DIR);
+    filenames = readdirSync3(PENDING_INBOUND_DIR);
   } catch (err) {
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): stale-marker readdir failed: ${err.message}
@@ -17391,10 +17425,10 @@ function sweepTelegramStaleMarkers(thresholdMs) {
   for (const filename of filenames) {
     if (!filename.endsWith(".json")) continue;
     if (filename.endsWith(".tmp")) continue;
-    const fullPath = join6(PENDING_INBOUND_DIR, filename);
+    const fullPath = join7(PENDING_INBOUND_DIR, filename);
     let marker;
     try {
-      marker = JSON.parse(readFileSync6(fullPath, "utf-8"));
+      marker = JSON.parse(readFileSync7(fullPath, "utf-8"));
     } catch (err) {
       process.stderr.write(
         `telegram-channel(${AGENT_CODE_NAME}): stale-marker parse failed for ${redactId(filename)}: ${err.message}
@@ -17436,11 +17470,11 @@ function listPendingInboundChatIds() {
   if (!PENDING_INBOUND_DIR || !existsSync5(PENDING_INBOUND_DIR)) return [];
   const chats = /* @__PURE__ */ new Set();
   try {
-    for (const name of readdirSync2(PENDING_INBOUND_DIR)) {
+    for (const name of readdirSync3(PENDING_INBOUND_DIR)) {
       if (!name.endsWith(".json")) continue;
       try {
         const marker = JSON.parse(
-          readFileSync6(join6(PENDING_INBOUND_DIR, name), "utf8")
+          readFileSync7(join7(PENDING_INBOUND_DIR, name), "utf8")
         );
         if (typeof marker.chat_id === "string" && marker.chat_id) chats.add(marker.chat_id);
       } catch {
@@ -17481,7 +17515,7 @@ async function notifyWatchdogGiveUp(chatId) {
 }
 function checkWatchdogGiveUpNotice() {
   if (!AGENT_DIR) return;
-  const signalAtMs = readGiveUpSignalAtMs(join6(AGENT_DIR, GIVE_UP_SIGNAL_FILENAME));
+  const signalAtMs = readGiveUpSignalAtMs(join7(AGENT_DIR, GIVE_UP_SIGNAL_FILENAME));
   const act = decideGiveUpNotice({
     signalAtMs,
     lastHandledAtMs: lastGiveUpHandledAtMs,
@@ -17531,6 +17565,7 @@ async function deliverQueuedReply(p) {
     }
     const body = { chat_id: p.chatId, text: p.text };
     if (p.replyToMessageId) body.reply_to_message_id = Number(p.replyToMessageId);
+    const drainCutoffMs = Date.now();
     const data = await telegramApiCall("sendMessage", body, 15e3);
     if (!data.ok) {
       process.stderr.write(
@@ -17541,7 +17576,7 @@ async function deliverQueuedReply(p) {
     }
     recordReply(p.chatId, "", Date.now(), p.throttleCfg);
     if (p.isReplyTool) {
-      clearPendingMessage(p.chatId, p.replyToMessageId);
+      clearPendingMessage(p.chatId, drainCutoffMs);
     }
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): reply_queue_delivered chat=${redactId(p.chatId)}
@@ -17554,29 +17589,18 @@ async function deliverQueuedReply(p) {
     );
   }
 }
-function clearPendingMessage(chatId, messageId) {
-  if (messageId) {
-    clearPendingInboundMarker(chatId, messageId);
-    return;
-  }
+function clearPendingMessage(chatId, cutoffMs = Number.POSITIVE_INFINITY) {
   if (!PENDING_INBOUND_DIR || !existsSync5(PENDING_INBOUND_DIR)) return;
-  const safeChatId = chatId.replace(/[^A-Za-z0-9_-]/g, "_");
-  const prefix = `${safeChatId}__`;
-  let filenames;
-  try {
-    filenames = readdirSync2(PENDING_INBOUND_DIR);
-  } catch {
-    return;
-  }
-  for (const filename of filenames) {
-    if (!filename.startsWith(prefix)) continue;
-    if (!filename.endsWith(".json")) continue;
-    clearTelegramMarkerFileWithHeal(join6(PENDING_INBOUND_DIR, filename));
-  }
+  clearAllTelegramPendingMarkersForChat(
+    PENDING_INBOUND_DIR,
+    chatId,
+    clearTelegramMarkerFileWithHeal,
+    cutoffMs
+  );
 }
-function noteThreadActivity(chatId, messageId) {
+function noteThreadActivity(chatId, cutoffMs = Number.POSITIVE_INFINITY) {
   if (!chatId) return;
-  clearPendingMessage(chatId, messageId);
+  clearPendingMessage(chatId, cutoffMs);
 }
 var mcp = new Server(
   { name: "telegram", version: "0.1.0" },
@@ -17840,6 +17864,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
     try {
       const body = { chat_id, text };
       if (reply_to_message_id) body.reply_to_message_id = Number(reply_to_message_id);
+      const drainCutoffMs = Date.now();
       const data = await telegramApiCall("sendMessage", body, 15e3);
       if (!data.ok) {
         return {
@@ -17849,7 +17874,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
       }
       recordReply(chat_id, "", tgThrottleNow, tgThrottleCfg);
       if (name === "telegram.reply") {
-        clearPendingMessage(chat_id, reply_to_message_id);
+        clearPendingMessage(chat_id, drainCutoffMs);
       }
       return { content: [{ type: "text", text: "sent" }] };
     } catch (err) {
@@ -17867,7 +17892,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
         isError: true
       };
     }
-    noteThreadActivity(chat_id, message_id);
+    const drainCutoffMs = Date.now();
     try {
       const data = await telegramApiCall(
         "setMessageReaction",
@@ -17884,6 +17909,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
           isError: true
         };
       }
+      noteThreadActivity(chat_id, drainCutoffMs);
       return { content: [{ type: "text", text: emoji2 ? "reacted" : "cleared" }] };
     } catch (err) {
       return {
@@ -18176,7 +18202,7 @@ async function replayPendingTelegramMarkers() {
   if (!sessionAlive) return;
   let filenames;
   try {
-    filenames = readdirSync2(PENDING_INBOUND_DIR);
+    filenames = readdirSync3(PENDING_INBOUND_DIR);
   } catch {
     return;
   }
@@ -18184,10 +18210,10 @@ async function replayPendingTelegramMarkers() {
   const entries = [];
   for (const name of filenames) {
     if (!name.endsWith(".json") || name.endsWith(".tmp")) continue;
-    const fullPath = join6(PENDING_INBOUND_DIR, name);
+    const fullPath = join7(PENDING_INBOUND_DIR, name);
     let marker;
     try {
-      marker = JSON.parse(readFileSync6(fullPath, "utf-8"));
+      marker = JSON.parse(readFileSync7(fullPath, "utf-8"));
     } catch {
       continue;
     }
@@ -18595,7 +18621,7 @@ async function pollLoop() {
         let paneLogFreshAgeMs = null;
         if (AGENT_DIR) {
           try {
-            const paneMtimeMs = statSync(join6(AGENT_DIR, "pane.log")).mtimeMs;
+            const paneMtimeMs = statSync2(join7(AGENT_DIR, "pane.log")).mtimeMs;
             paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
           } catch {
           }

package/dist/{responsiveness-probe-AL3O7SYZ.js → responsiveness-probe-7NDEHXXZ.js}

@@ -42,12 +42,15 @@ function oldestPendingInboundMtimeMs(agentHomeDir) {
   }
   return oldest;
 }
-function isUndeliverableMarker(markerPath) {
+function readMarkerFlags(markerPath) {
   try {
     const parsed = JSON.parse(readFileSync(markerPath, "utf8"));
-    return parsed?.undeliverable === true;
+    return {
+      undeliverable: parsed?.undeliverable === true,
+      discretionary: parsed?.discretionary === true
+    };
   } catch (error) {
-    return error.code === "ENOENT" ? null : false;
+    return error.code === "ENOENT" ? null : "malformed";
   }
 }
 function oldestLivePendingInboundMtimeMs(agentHomeDir, opts = {}) {
@@ -78,9 +81,9 @@ function oldestLivePendingInboundMtimeMs(agentHomeDir, opts = {}) {
         continue;
       }
       if (sessionStartMs !== null && mtimeMs < sessionStartMs) continue;
-      const undeliverable = isUndeliverableMarker(full);
-      if (undeliverable === null) continue;
-      if (undeliverable) continue;
+      const flags = readMarkerFlags(full);
+      if (flags === null) continue;
+      if (flags !== "malformed" && (flags.undeliverable || flags.discretionary)) continue;
       if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;
     }
   }
@@ -122,9 +125,9 @@ function parkPendingInbound(codeName, _now = /* @__PURE__ */ new Date()) {
     }
     for (const file of files) {
       if (!file.isFile() || file.name.startsWith(".")) continue;
-      const undeliverable = isUndeliverableMarker(join(dir, file.name));
-      if (undeliverable === null) continue;
-      if (undeliverable) {
+      const flags = readMarkerFlags(join(dir, file.name));
+      if (flags === null) continue;
+      if (flags !== "malformed" && flags.undeliverable) {
         if (moveMarkerToStale(dir, deadDir, file.name)) result.deadLettered++;
       } else {
         result.parked++;
@@ -192,4 +195,4 @@ export {
   oldestLivePendingInboundMtimeMs,
   parkPendingInbound
 };
-//# sourceMappingURL=responsiveness-probe-AL3O7SYZ.js.map
+//# sourceMappingURL=responsiveness-probe-7NDEHXXZ.js.map

package/dist/responsiveness-probe-7NDEHXXZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/responsiveness-probe.ts"],"sourcesContent":["/**\n * ENG-5399 — Tier 1 responsiveness probe (manager-side).\n *\n * Cheap, fast-cadence canary that catches \"agent went silent\" inside\n * minutes, well before the existing synthetic-probe cron's ~35 min\n * staleness window (`SyntheticReplyAgeSeconds`, ENG-5122).\n *\n * Mechanism: for each managed agent, read the mtime of the agent's\n * `pane.log` and report `now - mtime` as `PaneActivityAgeSeconds` via\n * a new `/host/responsiveness-probe` endpoint. `pane.log` is the\n * tmux pipe-pane sink set up by `setupPaneLog()` — any visible\n * activity (assistant turns, tool calls, in-place progress\n * heartbeats) bumps its mtime. A silent agent has a steadily\n * climbing age that lands in CloudWatch and trips a per-agent alarm.\n *\n * ENG-6017 adds a second per-agent signal on the same cadence:\n * `pending_inbound_oldest_age_seconds` — the age of the oldest marker\n * file across the agent's `*-pending-inbound/` directories (written by\n * the channel MCP servers for inbounds awaiting delivery). This is the\n * one artifact of the \"message typed but never submitted\" failure mode\n * that every other canary is blind to: in the koda incident\n * (2026-06-04) an operator Slack DM sat undelivered for 40+ minutes\n * while pane-activity stayed fresh (health checks), synthetic probes\n * were answered by the one-shot fallback, and heartbeat/session-alive\n * only reflect manager health. The field is OMITTED (not zero) when the\n * agent has no pending-inbound markers — the API treats absent as\n * \"no signal\", never as \"healthy\" (absent-vs-zero matters for\n * mixed-version fleets where old CLIs don't report it at all).\n *\n * Run from `pollCycle()` in `manager-worker.ts` on a configurable\n * interval (default 5 min via `AUGMENTED_RESPONSIVENESS_INTERVAL_MS`).\n */\n\nimport { mkdirSync, readdirSync, readFileSync, renameSync, statSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { paneLogPath } from './persistent-session.js';\n\nexport interface ResponsivenessProbeResult {\n  code_name: string;\n  pane_activity_age_seconds: number;\n  /**\n   * ENG-6017: age (s) of the oldest marker file across the agent's\n   * `*-pending-inbound/` directories. Omitted when no markers exist —\n   * absent means \"no signal\", NOT \"zero / healthy\".\n   */\n  pending_inbound_oldest_age_seconds?: number;\n}\n\nconst DEFAULT_INTERVAL_MS = 5 * 60 * 1000;\n\nexport function getResponsivenessIntervalMs(): number {\n  const raw = process.env.AUGMENTED_RESPONSIVENESS_INTERVAL_MS;\n  if (!raw) return DEFAULT_INTERVAL_MS;\n  const parsed = Number.parseInt(raw, 10);\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_INTERVAL_MS;\n}\n\n/**\n * ENG-6017: oldest pending-inbound marker mtime (ms epoch) for an agent,\n * or null when the agent has no markers / no pending-inbound dirs.\n *\n * The channel MCP servers (slack-channel, telegram-channel, …) write one\n * marker file per inbound into `~/.augmented/<codeName>/<channel>-pending-\n * inbound/` and clear it when the agent acknowledges the message. The\n * directory layout is the contract here — read-only, no IPC with the MCP\n * (the MCP and CLI release independently; file mtimes need no protocol).\n *\n * ENG-6072: only plain, non-hidden files count as markers. The msteams MCP\n * keeps `.markers/` and `.processed/` housekeeping SUBDIRECTORIES inside its\n * pending-inbound dir; their mtimes never advance, so statting every dirent\n * made the gauge climb forever and fired pending-inbound-stale on agents with\n * zero stranded messages (kylie ~3.4d / scout ~34h false ALARMs the moment\n * ENG-6023 activated the alarm). Dot-entries are skipped wholesale — the\n * hidden namespace is reserved for MCP bookkeeping, never for markers.\n */\nfunction oldestPendingInboundMtimeMs(agentHomeDir: string): number | null {\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null; // agent home missing — nothing to report\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      try {\n        const mtimeMs = statSync(join(dir, file.name)).mtimeMs;\n        if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n      } catch {\n        // Marker drained between readdir and stat — that's the happy path.\n      }\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160 / ENG-6319: read a marker's classification flags.\n *  - `{...}`       → parsed flags.\n *  - `null`        → vanished mid-scan (ENOENT) — drained between stat and\n *                    read, the happy path; callers exclude it.\n *  - `'malformed'` → present but unreadable for another reason. The live\n *                    scan treats this as LIVE (a corrupt marker can never\n *                    mask a real wedge); park leaves it in place (a corrupt\n *                    marker must never become a dropped message).\n */\ninterface MarkerFlags {\n  /** ENG-5846: dead-lettered by the channel (⏳-noticed, never drainable). */\n  undeliverable: boolean;\n  /**\n   * ENG-6319: auto-followed participant-thread inbound the agent may\n   * legitimately skip. Excluded from the wedge live-scan (a deliberate skip\n   * must not read as \"failing to drain\" and force-respawn a healthy\n   * session) but still parked across respawns — it may be a real\n   * operator message awaiting a reply.\n   */\n  discretionary: boolean;\n}\n\nfunction readMarkerFlags(markerPath: string): MarkerFlags | null | 'malformed' {\n  try {\n    const parsed = JSON.parse(readFileSync(markerPath, 'utf8')) as {\n      undeliverable?: unknown;\n      discretionary?: unknown;\n    };\n    return {\n      undeliverable: parsed?.undeliverable === true,\n      discretionary: parsed?.discretionary === true,\n    };\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code === 'ENOENT' ? null : 'malformed';\n  }\n}\n\n/**\n * ENG-6160: oldest *LIVE* pending-inbound marker mtime (ms epoch) for an agent,\n * or null when there is no live marker. \"Live\" excludes:\n *\n *  - markers older than `sessionStartMs` — a marker written before the current\n *    session started is a leftover from a PREVIOUS session and cannot mean\n *    *this* session is failing to drain. This is the load-bearing exclusion:\n *    without it, an orphan marker survives a fresh respawn and the wedge\n *    detector re-fires forever on a healthy idle agent (the sherlock enforce\n *    loop, 2026-06-08: `inboundAge=3389s` on a `● Ready.` session).\n *  - markers flagged `undeliverable: true` — already dead-lettered by the channel.\n *  - markers flagged `discretionary: true` (ENG-6319) — skippable auto-followed\n *    participant-thread inbound; a deliberate skip must not force-respawn a\n *    healthy session.\n *\n * Distinct from `oldestPendingInboundMtimeMs` (which counts ALL markers and\n * feeds the ENG-6017 `pending-inbound-stale` CloudWatch alarm — that alarm\n * *wants* to fire on a stuck inbound, so its semantics must NOT change). This\n * variant is wedge-detection-only.\n */\nexport function oldestLivePendingInboundMtimeMs(\n  agentHomeDir: string,\n  opts: { sessionStartMs?: number | null } = {},\n): number | null {\n  const sessionStartMs = opts.sessionStartMs ?? null;\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      const full = join(dir, file.name);\n      let mtimeMs: number;\n      try {\n        mtimeMs = statSync(full).mtimeMs;\n      } catch {\n        continue; // drained between readdir and stat — happy path\n      }\n      if (sessionStartMs !== null && mtimeMs < sessionStartMs) continue; // pre-session leftover\n      const flags = readMarkerFlags(full);\n      if (flags === null) continue; // vanished between stat and read — drained, exclude\n      if (flags !== 'malformed' && (flags.undeliverable || flags.discretionary)) continue;\n      if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160: age (s) of the oldest LIVE pending-inbound marker for an agent, or\n * null when none. The wedge detector uses this instead of the alarm-facing\n * `pending_inbound_oldest_age_seconds` so a stale/dead-letter marker can't\n * false-fire a respawn.\n */\nexport function livePendingInboundOldestAgeSeconds(\n  codeName: string,\n  sessionStartMs: number | null,\n  now: Date = new Date(),\n): number | null {\n  const oldest = oldestLivePendingInboundMtimeMs(dirname(paneLogPath(codeName)), { sessionStartMs });\n  if (oldest === null) return null;\n  return Math.max(0, Math.floor((now.getTime() - oldest) / 1000));\n}\n\n/**\n * ENG-6160: move every pending-inbound marker for an agent aside into a sibling\n * `<channel>-pending-inbound-stale/` directory (NOT silently deleted — the\n * payload pointer is preserved for forensics), returning the count moved.\n *\n * ENG-6289: no longer called on wedge respawn — the wedge path parks instead\n * (see `parkPendingInbound` above; blanket dead-letter permanently dropped the\n * user's message). Kept as the explicit \"move everything aside\" seam for tests\n * and operator emergencies. The stale dir does not end in `-pending-inbound`,\n * so neither the probe nor this scan re-counts moved markers.\n */\n/**\n * ENG-6289: park-not-drop. On a force-fresh wedge respawn, KEEP undrained\n * pending-inbound markers in their live dirs instead of dead-lettering them —\n * the fresh session's orient hook surfaces them (\"N queued messages\" + details)\n * and ENG-5969 replay (when enabled) re-pushes their payloads. Markers are NOT\n * rewritten (no counter, no mtime bump): the ENG-6160 pre-session exclusion in\n * `oldestLivePendingInboundMtimeMs` already keeps an untouched parked marker\n * out of the fresh session's wedge signal, and re-delivery stays bounded by\n * the existing machinery — the channel-side `replay_count` cap (≤3) and the\n * orphan sweep's received_at TTL. A manager-side rewrite would be the first\n * cross-process writer into marker files, where a torn read in the channel\n * sweep DELETES the marker (`unlinkSync` on parse failure) — the exact drop\n * this function exists to prevent.\n *\n * Only markers already flagged `undeliverable: true` are dead-lettered (moved\n * to `-stale`) — the channel already gave the user the ⏳ notice for those, so\n * nothing can ever drain them. Malformed markers are LEFT IN PLACE, matching\n * the live-scan philosophy above (a corrupt marker must never mask — or\n * become — a dropped message).\n *\n * The msteams dir is skipped wholesale: its top-level files are raw Bot\n * Framework activity payloads (the transport queue, not bookkeeping — real\n * markers live in the hidden `.markers/` subdir this scan never touches), and\n * the teams channel server's boot drain redelivers them to the fresh session\n * on its own. Moving them aside (what the pre-ENG-6289 dead-letter did) was\n * actively defeating the one channel with native respawn recovery.\n */\nexport interface ParkPendingInboundResult {\n  parked: number;\n  deadLettered: number;\n}\n\n/**\n * Move one marker into the sibling `-stale` dead-letter dir (moved, not\n * deleted — preserved for forensics). Returns true on success; best-effort —\n * a marker that vanished or can't move is left as-is.\n */\nfunction moveMarkerToStale(dir: string, deadDir: string, name: string): boolean {\n  try {\n    mkdirSync(deadDir, { recursive: true });\n    renameSync(join(dir, name), join(deadDir, name));\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function parkPendingInbound(codeName: string, _now: Date = new Date()): ParkPendingInboundResult {\n  const home = dirname(paneLogPath(codeName));\n  const result: ParkPendingInboundResult = { parked: 0, deadLettered: 0 };\n  let entries;\n  try {\n    entries = readdirSync(home, { withFileTypes: true });\n  } catch {\n    return result;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    if (entry.name === 'msteams-pending-inbound') continue; // transport queue — boot drain owns recovery\n    const dir = join(home, entry.name);\n    const deadDir = join(home, `${entry.name}-stale`);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      const flags = readMarkerFlags(join(dir, file.name));\n      if (flags === null) continue; // drained mid-scan — already gone\n      // Only undeliverable markers dead-letter. Discretionary markers\n      // (ENG-6319) PARK like engaged ones — they may be a real operator\n      // message awaiting a reply (the live silent-loss class); malformed\n      // markers park too (corrupt must never become a drop).\n      if (flags !== 'malformed' && flags.undeliverable) {\n        if (moveMarkerToStale(dir, deadDir, file.name)) result.deadLettered++;\n      } else {\n        result.parked++;\n      }\n    }\n  }\n  return result;\n}\n\nexport function deadLetterPendingInbound(codeName: string, _now: Date = new Date()): number {\n  const home = dirname(paneLogPath(codeName));\n  let moved = 0;\n  let entries;\n  try {\n    entries = readdirSync(home, { withFileTypes: true });\n  } catch {\n    return 0;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(home, entry.name);\n    const deadDir = join(home, `${entry.name}-stale`);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      if (moveMarkerToStale(dir, deadDir, file.name)) moved++;\n    }\n  }\n  return moved;\n}\n\n/**\n * Compute the pane.log age for each agent. Missing or unreadable\n * pane.log returns null — the caller should drop those entries\n * rather than fabricate a \"fresh\" or \"ancient\" value. A missing\n * file means the agent has never spawned in this manager generation,\n * which is a separate problem covered by SessionAliveAgeSeconds.\n */\nexport function collectResponsivenessProbes(\n  codeNames: string[],\n  now: Date = new Date(),\n): ResponsivenessProbeResult[] {\n  const nowMs = now.getTime();\n  const results: ResponsivenessProbeResult[] = [];\n  for (const codeName of codeNames) {\n    try {\n      const panePath = paneLogPath(codeName);\n      const mtimeMs = statSync(panePath).mtimeMs;\n      const ageSeconds = Math.max(0, Math.floor((nowMs - mtimeMs) / 1000));\n      const result: ResponsivenessProbeResult = {\n        code_name: codeName,\n        pane_activity_age_seconds: ageSeconds,\n      };\n      // ENG-6017: piggyback the pending-inbound drain-age scan on the same\n      // cadence. Field omitted (not 0) when there are no markers.\n      const oldestMarkerMs = oldestPendingInboundMtimeMs(dirname(panePath));\n      if (oldestMarkerMs !== null) {\n        result.pending_inbound_oldest_age_seconds = Math.max(\n          0,\n          Math.floor((nowMs - oldestMarkerMs) / 1000),\n        );\n      }\n      results.push(result);\n    } catch {\n      // No pane.log yet (fresh agent, never spawned) — skip. The\n      // session-alive monitor already covers the \"should be running\n      // but isn't\" case.\n    }\n  }\n  return results;\n}\n"],"mappings":";;;;;;;AAiCA,SAAS,WAAW,aAAa,cAAc,YAAY,gBAAgB;AAC3E,SAAS,SAAS,YAAY;AAc9B,IAAM,sBAAsB,IAAI,KAAK;AAE9B,SAAS,8BAAsC;AACpD,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,SAAS,OAAO,SAAS,KAAK,EAAE;AACtC,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AAC1D;AAoBA,SAAS,4BAA4B,cAAqC;AACxE,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI;AACF,cAAM,UAAU,SAAS,KAAK,KAAK,KAAK,IAAI,CAAC,EAAE;AAC/C,YAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,MACpD,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAyBA,SAAS,gBAAgB,YAAsD;AAC7E,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;AAI1D,WAAO;AAAA,MACL,eAAe,QAAQ,kBAAkB;AAAA,MACzC,eAAe,QAAQ,kBAAkB;AAAA,IAC3C;AAAA,EACF,SAAS,OAAO;AACd,WAAQ,MAAgC,SAAS,WAAW,OAAO;AAAA,EACrE;AACF;AAsBO,SAAS,gCACd,cACA,OAA2C,CAAC,GAC7B;AACf,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,YAAM,OAAO,KAAK,KAAK,KAAK,IAAI;AAChC,UAAI;AACJ,UAAI;AACF,kBAAU,SAAS,IAAI,EAAE;AAAA,MAC3B,QAAQ;AACN;AAAA,MACF;AACA,UAAI,mBAAmB,QAAQ,UAAU,eAAgB;AACzD,YAAM,QAAQ,gBAAgB,IAAI;AAClC,UAAI,UAAU,KAAM;AACpB,UAAI,UAAU,gBAAgB,MAAM,iBAAiB,MAAM,eAAgB;AAC3E,UAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,IACpD;AAAA,EACF;AACA,SAAO;AACT;AAQO,SAAS,mCACd,UACA,gBACA,MAAY,oBAAI,KAAK,GACN;AACf,QAAM,SAAS,gCAAgC,QAAQ,YAAY,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;AACjG,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO,KAAK,IAAI,GAAG,KAAK,OAAO,IAAI,QAAQ,IAAI,UAAU,GAAI,CAAC;AAChE;AAkDA,SAAS,kBAAkB,KAAa,SAAiB,MAAuB;AAC9E,MAAI;AACF,cAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,eAAW,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC;AAC/C,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB,UAAkB,OAAa,oBAAI,KAAK,GAA6B;AACtG,QAAM,OAAO,QAAQ,YAAY,QAAQ,CAAC;AAC1C,QAAM,SAAmC,EAAE,QAAQ,GAAG,cAAc,EAAE;AACtE,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,QAAI,MAAM,SAAS,0BAA2B;AAC9C,UAAM,MAAM,KAAK,MAAM,MAAM,IAAI;AACjC,UAAM,UAAU,KAAK,MAAM,GAAG,MAAM,IAAI,QAAQ;AAChD,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,YAAM,QAAQ,gBAAgB,KAAK,KAAK,KAAK,IAAI,CAAC;AAClD,UAAI,UAAU,KAAM;AAKpB,UAAI,UAAU,eAAe,MAAM,eAAe;AAChD,YAAI,kBAAkB,KAAK,SAAS,KAAK,IAAI,EAAG,QAAO;AAAA,MACzD,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,UAAkB,OAAa,oBAAI,KAAK,GAAW;AAC1F,QAAM,OAAO,QAAQ,YAAY,QAAQ,CAAC;AAC1C,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,MAAM,MAAM,IAAI;AACjC,UAAM,UAAU,KAAK,MAAM,GAAG,MAAM,IAAI,QAAQ;AAChD,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI,kBAAkB,KAAK,SAAS,KAAK,IAAI,EAAG;AAAA,IAClD;AAAA,EACF;AACA,SAAO;AACT;AASO,SAAS,4BACd,WACA,MAAY,oBAAI,KAAK,GACQ;AAC7B,QAAM,QAAQ,IAAI,QAAQ;AAC1B,QAAM,UAAuC,CAAC;AAC9C,aAAW,YAAY,WAAW;AAChC,QAAI;AACF,YAAM,WAAW,YAAY,QAAQ;AACrC,YAAM,UAAU,SAAS,QAAQ,EAAE;AACnC,YAAM,aAAa,KAAK,IAAI,GAAG,KAAK,OAAO,QAAQ,WAAW,GAAI,CAAC;AACnE,YAAM,SAAoC;AAAA,QACxC,WAAW;AAAA,QACX,2BAA2B;AAAA,MAC7B;AAGA,YAAM,iBAAiB,4BAA4B,QAAQ,QAAQ,CAAC;AACpE,UAAI,mBAAmB,MAAM;AAC3B,eAAO,qCAAqC,KAAK;AAAA,UAC/C;AAAA,UACA,KAAK,OAAO,QAAQ,kBAAkB,GAAI;AAAA,QAC5C;AAAA,MACF;AACA,cAAQ,KAAK,MAAM;AAAA,IACrB,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.27.166",
+  "version": "0.27.168",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {

package/dist/responsiveness-probe-AL3O7SYZ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/lib/responsiveness-probe.ts"],"sourcesContent":["/**\n * ENG-5399 — Tier 1 responsiveness probe (manager-side).\n *\n * Cheap, fast-cadence canary that catches \"agent went silent\" inside\n * minutes, well before the existing synthetic-probe cron's ~35 min\n * staleness window (`SyntheticReplyAgeSeconds`, ENG-5122).\n *\n * Mechanism: for each managed agent, read the mtime of the agent's\n * `pane.log` and report `now - mtime` as `PaneActivityAgeSeconds` via\n * a new `/host/responsiveness-probe` endpoint. `pane.log` is the\n * tmux pipe-pane sink set up by `setupPaneLog()` — any visible\n * activity (assistant turns, tool calls, in-place progress\n * heartbeats) bumps its mtime. A silent agent has a steadily\n * climbing age that lands in CloudWatch and trips a per-agent alarm.\n *\n * ENG-6017 adds a second per-agent signal on the same cadence:\n * `pending_inbound_oldest_age_seconds` — the age of the oldest marker\n * file across the agent's `*-pending-inbound/` directories (written by\n * the channel MCP servers for inbounds awaiting delivery). This is the\n * one artifact of the \"message typed but never submitted\" failure mode\n * that every other canary is blind to: in the koda incident\n * (2026-06-04) an operator Slack DM sat undelivered for 40+ minutes\n * while pane-activity stayed fresh (health checks), synthetic probes\n * were answered by the one-shot fallback, and heartbeat/session-alive\n * only reflect manager health. The field is OMITTED (not zero) when the\n * agent has no pending-inbound markers — the API treats absent as\n * \"no signal\", never as \"healthy\" (absent-vs-zero matters for\n * mixed-version fleets where old CLIs don't report it at all).\n *\n * Run from `pollCycle()` in `manager-worker.ts` on a configurable\n * interval (default 5 min via `AUGMENTED_RESPONSIVENESS_INTERVAL_MS`).\n */\n\nimport { mkdirSync, readdirSync, readFileSync, renameSync, statSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { paneLogPath } from './persistent-session.js';\n\nexport interface ResponsivenessProbeResult {\n  code_name: string;\n  pane_activity_age_seconds: number;\n  /**\n   * ENG-6017: age (s) of the oldest marker file across the agent's\n   * `*-pending-inbound/` directories. Omitted when no markers exist —\n   * absent means \"no signal\", NOT \"zero / healthy\".\n   */\n  pending_inbound_oldest_age_seconds?: number;\n}\n\nconst DEFAULT_INTERVAL_MS = 5 * 60 * 1000;\n\nexport function getResponsivenessIntervalMs(): number {\n  const raw = process.env.AUGMENTED_RESPONSIVENESS_INTERVAL_MS;\n  if (!raw) return DEFAULT_INTERVAL_MS;\n  const parsed = Number.parseInt(raw, 10);\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_INTERVAL_MS;\n}\n\n/**\n * ENG-6017: oldest pending-inbound marker mtime (ms epoch) for an agent,\n * or null when the agent has no markers / no pending-inbound dirs.\n *\n * The channel MCP servers (slack-channel, telegram-channel, …) write one\n * marker file per inbound into `~/.augmented/<codeName>/<channel>-pending-\n * inbound/` and clear it when the agent acknowledges the message. The\n * directory layout is the contract here — read-only, no IPC with the MCP\n * (the MCP and CLI release independently; file mtimes need no protocol).\n *\n * ENG-6072: only plain, non-hidden files count as markers. The msteams MCP\n * keeps `.markers/` and `.processed/` housekeeping SUBDIRECTORIES inside its\n * pending-inbound dir; their mtimes never advance, so statting every dirent\n * made the gauge climb forever and fired pending-inbound-stale on agents with\n * zero stranded messages (kylie ~3.4d / scout ~34h false ALARMs the moment\n * ENG-6023 activated the alarm). Dot-entries are skipped wholesale — the\n * hidden namespace is reserved for MCP bookkeeping, never for markers.\n */\nfunction oldestPendingInboundMtimeMs(agentHomeDir: string): number | null {\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null; // agent home missing — nothing to report\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      try {\n        const mtimeMs = statSync(join(dir, file.name)).mtimeMs;\n        if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n      } catch {\n        // Marker drained between readdir and stat — that's the happy path.\n      }\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160: classify a marker file for the LIVE-inbound scan.\n *  - `true`  → flagged `\"undeliverable\": true` (dead-letter, exclude).\n *  - `null`  → vanished mid-scan (ENOENT) — drained between stat and read, the\n *              happy path; exclude it rather than count an already-gone file.\n *  - `false` → still present but malformed / unreadable for another reason —\n *              treated as LIVE so a corrupt marker can never mask a real wedge.\n */\nfunction isUndeliverableMarker(markerPath: string): boolean | null {\n  try {\n    const parsed = JSON.parse(readFileSync(markerPath, 'utf8')) as { undeliverable?: unknown };\n    return parsed?.undeliverable === true;\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code === 'ENOENT' ? null : false;\n  }\n}\n\n/**\n * ENG-6160: oldest *LIVE* pending-inbound marker mtime (ms epoch) for an agent,\n * or null when there is no live marker. \"Live\" excludes:\n *\n *  - markers older than `sessionStartMs` — a marker written before the current\n *    session started is a leftover from a PREVIOUS session and cannot mean\n *    *this* session is failing to drain. This is the load-bearing exclusion:\n *    without it, an orphan marker survives a fresh respawn and the wedge\n *    detector re-fires forever on a healthy idle agent (the sherlock enforce\n *    loop, 2026-06-08: `inboundAge=3389s` on a `● Ready.` session).\n *  - markers flagged `undeliverable: true` — already dead-lettered by the channel.\n *\n * Distinct from `oldestPendingInboundMtimeMs` (which counts ALL markers and\n * feeds the ENG-6017 `pending-inbound-stale` CloudWatch alarm — that alarm\n * *wants* to fire on a stuck inbound, so its semantics must NOT change). This\n * variant is wedge-detection-only.\n */\nexport function oldestLivePendingInboundMtimeMs(\n  agentHomeDir: string,\n  opts: { sessionStartMs?: number | null } = {},\n): number | null {\n  const sessionStartMs = opts.sessionStartMs ?? null;\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      const full = join(dir, file.name);\n      let mtimeMs: number;\n      try {\n        mtimeMs = statSync(full).mtimeMs;\n      } catch {\n        continue; // drained between readdir and stat — happy path\n      }\n      if (sessionStartMs !== null && mtimeMs < sessionStartMs) continue; // pre-session leftover\n      const undeliverable = isUndeliverableMarker(full);\n      if (undeliverable === null) continue; // vanished between stat and read — drained, exclude\n      if (undeliverable) continue; // already dead-lettered\n      if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160: age (s) of the oldest LIVE pending-inbound marker for an agent, or\n * null when none. The wedge detector uses this instead of the alarm-facing\n * `pending_inbound_oldest_age_seconds` so a stale/dead-letter marker can't\n * false-fire a respawn.\n */\nexport function livePendingInboundOldestAgeSeconds(\n  codeName: string,\n  sessionStartMs: number | null,\n  now: Date = new Date(),\n): number | null {\n  const oldest = oldestLivePendingInboundMtimeMs(dirname(paneLogPath(codeName)), { sessionStartMs });\n  if (oldest === null) return null;\n  return Math.max(0, Math.floor((now.getTime() - oldest) / 1000));\n}\n\n/**\n * ENG-6160: move every pending-inbound marker for an agent aside into a sibling\n * `<channel>-pending-inbound-stale/` directory (NOT silently deleted — the\n * payload pointer is preserved for forensics), returning the count moved.\n *\n * ENG-6289: no longer called on wedge respawn — the wedge path parks instead\n * (see `parkPendingInbound` above; blanket dead-letter permanently dropped the\n * user's message). Kept as the explicit \"move everything aside\" seam for tests\n * and operator emergencies. The stale dir does not end in `-pending-inbound`,\n * so neither the probe nor this scan re-counts moved markers.\n */\n/**\n * ENG-6289: park-not-drop. On a force-fresh wedge respawn, KEEP undrained\n * pending-inbound markers in their live dirs instead of dead-lettering them —\n * the fresh session's orient hook surfaces them (\"N queued messages\" + details)\n * and ENG-5969 replay (when enabled) re-pushes their payloads. Markers are NOT\n * rewritten (no counter, no mtime bump): the ENG-6160 pre-session exclusion in\n * `oldestLivePendingInboundMtimeMs` already keeps an untouched parked marker\n * out of the fresh session's wedge signal, and re-delivery stays bounded by\n * the existing machinery — the channel-side `replay_count` cap (≤3) and the\n * orphan sweep's received_at TTL. A manager-side rewrite would be the first\n * cross-process writer into marker files, where a torn read in the channel\n * sweep DELETES the marker (`unlinkSync` on parse failure) — the exact drop\n * this function exists to prevent.\n *\n * Only markers already flagged `undeliverable: true` are dead-lettered (moved\n * to `-stale`) — the channel already gave the user the ⏳ notice for those, so\n * nothing can ever drain them. Malformed markers are LEFT IN PLACE, matching\n * the live-scan philosophy above (a corrupt marker must never mask — or\n * become — a dropped message).\n *\n * The msteams dir is skipped wholesale: its top-level files are raw Bot\n * Framework activity payloads (the transport queue, not bookkeeping — real\n * markers live in the hidden `.markers/` subdir this scan never touches), and\n * the teams channel server's boot drain redelivers them to the fresh session\n * on its own. Moving them aside (what the pre-ENG-6289 dead-letter did) was\n * actively defeating the one channel with native respawn recovery.\n */\nexport interface ParkPendingInboundResult {\n  parked: number;\n  deadLettered: number;\n}\n\n/**\n * Move one marker into the sibling `-stale` dead-letter dir (moved, not\n * deleted — preserved for forensics). Returns true on success; best-effort —\n * a marker that vanished or can't move is left as-is.\n */\nfunction moveMarkerToStale(dir: string, deadDir: string, name: string): boolean {\n  try {\n    mkdirSync(deadDir, { recursive: true });\n    renameSync(join(dir, name), join(deadDir, name));\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function parkPendingInbound(codeName: string, _now: Date = new Date()): ParkPendingInboundResult {\n  const home = dirname(paneLogPath(codeName));\n  const result: ParkPendingInboundResult = { parked: 0, deadLettered: 0 };\n  let entries;\n  try {\n    entries = readdirSync(home, { withFileTypes: true });\n  } catch {\n    return result;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    if (entry.name === 'msteams-pending-inbound') continue; // transport queue — boot drain owns recovery\n    const dir = join(home, entry.name);\n    const deadDir = join(home, `${entry.name}-stale`);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      const undeliverable = isUndeliverableMarker(join(dir, file.name));\n      if (undeliverable === null) continue; // drained mid-scan — already gone\n      if (undeliverable) {\n        if (moveMarkerToStale(dir, deadDir, file.name)) result.deadLettered++;\n      } else {\n        result.parked++;\n      }\n    }\n  }\n  return result;\n}\n\nexport function deadLetterPendingInbound(codeName: string, _now: Date = new Date()): number {\n  const home = dirname(paneLogPath(codeName));\n  let moved = 0;\n  let entries;\n  try {\n    entries = readdirSync(home, { withFileTypes: true });\n  } catch {\n    return 0;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(home, entry.name);\n    const deadDir = join(home, `${entry.name}-stale`);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      if (moveMarkerToStale(dir, deadDir, file.name)) moved++;\n    }\n  }\n  return moved;\n}\n\n/**\n * Compute the pane.log age for each agent. Missing or unreadable\n * pane.log returns null — the caller should drop those entries\n * rather than fabricate a \"fresh\" or \"ancient\" value. A missing\n * file means the agent has never spawned in this manager generation,\n * which is a separate problem covered by SessionAliveAgeSeconds.\n */\nexport function collectResponsivenessProbes(\n  codeNames: string[],\n  now: Date = new Date(),\n): ResponsivenessProbeResult[] {\n  const nowMs = now.getTime();\n  const results: ResponsivenessProbeResult[] = [];\n  for (const codeName of codeNames) {\n    try {\n      const panePath = paneLogPath(codeName);\n      const mtimeMs = statSync(panePath).mtimeMs;\n      const ageSeconds = Math.max(0, Math.floor((nowMs - mtimeMs) / 1000));\n      const result: ResponsivenessProbeResult = {\n        code_name: codeName,\n        pane_activity_age_seconds: ageSeconds,\n      };\n      // ENG-6017: piggyback the pending-inbound drain-age scan on the same\n      // cadence. Field omitted (not 0) when there are no markers.\n      const oldestMarkerMs = oldestPendingInboundMtimeMs(dirname(panePath));\n      if (oldestMarkerMs !== null) {\n        result.pending_inbound_oldest_age_seconds = Math.max(\n          0,\n          Math.floor((nowMs - oldestMarkerMs) / 1000),\n        );\n      }\n      results.push(result);\n    } catch {\n      // No pane.log yet (fresh agent, never spawned) — skip. The\n      // session-alive monitor already covers the \"should be running\n      // but isn't\" case.\n    }\n  }\n  return results;\n}\n"],"mappings":";;;;;;;AAiCA,SAAS,WAAW,aAAa,cAAc,YAAY,gBAAgB;AAC3E,SAAS,SAAS,YAAY;AAc9B,IAAM,sBAAsB,IAAI,KAAK;AAE9B,SAAS,8BAAsC;AACpD,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,SAAS,OAAO,SAAS,KAAK,EAAE;AACtC,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AAC1D;AAoBA,SAAS,4BAA4B,cAAqC;AACxE,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI;AACF,cAAM,UAAU,SAAS,KAAK,KAAK,KAAK,IAAI,CAAC,EAAE;AAC/C,YAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,MACpD,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAUA,SAAS,sBAAsB,YAAoC;AACjE,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;AAC1D,WAAO,QAAQ,kBAAkB;AAAA,EACnC,SAAS,OAAO;AACd,WAAQ,MAAgC,SAAS,WAAW,OAAO;AAAA,EACrE;AACF;AAmBO,SAAS,gCACd,cACA,OAA2C,CAAC,GAC7B;AACf,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,YAAM,OAAO,KAAK,KAAK,KAAK,IAAI;AAChC,UAAI;AACJ,UAAI;AACF,kBAAU,SAAS,IAAI,EAAE;AAAA,MAC3B,QAAQ;AACN;AAAA,MACF;AACA,UAAI,mBAAmB,QAAQ,UAAU,eAAgB;AACzD,YAAM,gBAAgB,sBAAsB,IAAI;AAChD,UAAI,kBAAkB,KAAM;AAC5B,UAAI,cAAe;AACnB,UAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,IACpD;AAAA,EACF;AACA,SAAO;AACT;AAQO,SAAS,mCACd,UACA,gBACA,MAAY,oBAAI,KAAK,GACN;AACf,QAAM,SAAS,gCAAgC,QAAQ,YAAY,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;AACjG,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO,KAAK,IAAI,GAAG,KAAK,OAAO,IAAI,QAAQ,IAAI,UAAU,GAAI,CAAC;AAChE;AAkDA,SAAS,kBAAkB,KAAa,SAAiB,MAAuB;AAC9E,MAAI;AACF,cAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,eAAW,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC;AAC/C,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB,UAAkB,OAAa,oBAAI,KAAK,GAA6B;AACtG,QAAM,OAAO,QAAQ,YAAY,QAAQ,CAAC;AAC1C,QAAM,SAAmC,EAAE,QAAQ,GAAG,cAAc,EAAE;AACtE,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,QAAI,MAAM,SAAS,0BAA2B;AAC9C,UAAM,MAAM,KAAK,MAAM,MAAM,IAAI;AACjC,UAAM,UAAU,KAAK,MAAM,GAAG,MAAM,IAAI,QAAQ;AAChD,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,YAAM,gBAAgB,sBAAsB,KAAK,KAAK,KAAK,IAAI,CAAC;AAChE,UAAI,kBAAkB,KAAM;AAC5B,UAAI,eAAe;AACjB,YAAI,kBAAkB,KAAK,SAAS,KAAK,IAAI,EAAG,QAAO;AAAA,MACzD,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,UAAkB,OAAa,oBAAI,KAAK,GAAW;AAC1F,QAAM,OAAO,QAAQ,YAAY,QAAQ,CAAC;AAC1C,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,MAAM,MAAM,IAAI;AACjC,UAAM,UAAU,KAAK,MAAM,GAAG,MAAM,IAAI,QAAQ;AAChD,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI,kBAAkB,KAAK,SAAS,KAAK,IAAI,EAAG;AAAA,IAClD;AAAA,EACF;AACA,SAAO;AACT;AASO,SAAS,4BACd,WACA,MAAY,oBAAI,KAAK,GACQ;AAC7B,QAAM,QAAQ,IAAI,QAAQ;AAC1B,QAAM,UAAuC,CAAC;AAC9C,aAAW,YAAY,WAAW;AAChC,QAAI;AACF,YAAM,WAAW,YAAY,QAAQ;AACrC,YAAM,UAAU,SAAS,QAAQ,EAAE;AACnC,YAAM,aAAa,KAAK,IAAI,GAAG,KAAK,OAAO,QAAQ,WAAW,GAAI,CAAC;AACnE,YAAM,SAAoC;AAAA,QACxC,WAAW;AAAA,QACX,2BAA2B;AAAA,MAC7B;AAGA,YAAM,iBAAiB,4BAA4B,QAAQ,QAAQ,CAAC;AACpE,UAAI,mBAAmB,MAAM;AAC3B,eAAO,qCAAqC,KAAK;AAAA,UAC/C;AAAA,UACA,KAAK,OAAO,QAAQ,kBAAkB,GAAI;AAAA,QAC5C;AAAA,MACF;AACA,cAAQ,KAAK,MAAM;AAAA,IACrB,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,SAAO;AACT;","names":[]}