@integrity-labs/agt-cli 0.28.300 → 0.28.302

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-ITBY43DH.js";
+} from "../chunk-D5BJLFH7.js";
 import {
   CHANNEL_REGISTRY,
   DEFAULT_FRAMEWORK,
@@ -67,7 +67,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-KMJHNKPQ.js";
+} from "../chunk-5WQATS6J.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4826,7 +4826,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.300" : "dev";
+var cliVersion = true ? "0.28.302" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5843,7 +5843,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.300" : "dev";
+var cliVersion2 = true ? "0.28.302" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-KMJHNKPQ.js → chunk-5WQATS6J.js}

@@ -2362,7 +2362,7 @@ function runTelegramPeerRules(diagnostics, charter, peers, teamPeers, grants, no
   for (let i = 0; i < peers.length; i++) {
     const peer = peers[i];
     const path = `multi_agent.telegram_peers[${i}]`;
-    const match = teamPeers.find((p) => p.telegram_bot_id === peer.bot_id);
+    const match = teamPeers.find((p2) => p2.telegram_bot_id === peer.bot_id);
     if (peer.code_name === charter.code_name || match?.agent_id === charter.agent_id) {
       diagnostics.push({
         file: "CHARTER.md",
@@ -2473,7 +2473,7 @@ function runSlackPeerRules(diagnostics, charter, peers, teamPeers, grants, now)
   for (let i = 0; i < peers.length; i++) {
     const peer = peers[i];
     const path = `multi_agent.slack_peers[${i}]`;
-    const match = teamPeers.find((p) => p.slack_bot_user_id === peer.bot_user_id);
+    const match = teamPeers.find((p2) => p2.slack_bot_user_id === peer.bot_user_id);
     if (peer.code_name === charter.code_name || match?.agent_id === charter.agent_id) {
       diagnostics.push({
         file: "CHARTER.md",
@@ -3097,6 +3097,167 @@ var ajv2 = new Ajv20202({ allErrors: true, strict: false });
 addFormats2(ajv2);
 var compiledMetaSchema = ajv2.compile(context_meta_schema_default);
 
+// ../../packages/core/dist/integrations/tool-tier-heuristic.js
+var READ_VERBS = "GET|LIST|FIND|FETCH|RETRIEVE|SEARCH|QUERY|DESCRIBE|INSPECT|SCAN|SHOW|VIEW|READ|EXPORT|DOWNLOAD";
+var NO_READ_VERB_ACTION = `(?!(?:^|.*[_-])(${READ_VERBS})[_-])`;
+var NO_READ_VERB_INCL_SUFFIX = `(?!(?:^|.*[_-])(${READ_VERBS})(?:[_-]|$))`;
+function p(re) {
+  return { re, label: re.source };
+}
+function highRisk(core) {
+  return { re: new RegExp(`^${NO_READ_VERB_ACTION}.*${core.source}`, "i"), label: core.source };
+}
+var TIER_PATTERNS = [
+  {
+    tier: "admin",
+    patterns: [
+      p(/_PERMISSION/i),
+      p(/_GRANT[_S]?(_|$)/i),
+      p(/_AUTHORI[SZ]E/i),
+      // Reading OAuth grants / a webhook's config can expose secrets or the
+      // full authorization surface, so — unlike _SETTINGS/_CONFIG — these
+      // stay admin even with a read verb (deliberate; see the
+      // tool-tier-heuristic test for HUBSPOT_LIST_GRANTED_OAUTH_SCOPES /
+      // ATTIO_GET_WEBHOOK).
+      p(/_OAUTH/i),
+      p(/_WEBHOOK/i),
+      // SETTINGS / CONFIG are admin only when MUTATED. A read verb anywhere —
+      // prefix (GET_..._SETTINGS), infix (..._GET_..._SETTINGS), or suffix
+      // (..._SETTINGS_GET / ..._SETTINGS_LIST) — means it's a settings
+      // *lookup*, so it falls through to `read` and auto-executes instead of
+      // routing to approval and hanging (e.g. GOOGLEANALYTICS_GET_DATA_RETENTION_SETTINGS,
+      // GOOGLECALENDAR_LIST_SETTINGS, GOOGLECALENDAR_SETTINGS_GET). The suffix
+      // form is safe HERE because the object noun (SETTINGS/CONFIG) is
+      // unambiguous; the generic high-risk guard stays suffix-blind on purpose
+      // (a trailing _LIST/_VIEW can be a noun — ENG-7684). Unlike
+      // _OAUTH/_WEBHOOK/_CREDENTIAL/_VAULT/_PERMISSION above, reading app
+      // settings/config is benign, so only the mutating form stays admin.
+      p(new RegExp(`^${NO_READ_VERB_INCL_SUFFIX}.*_SETTINGS?(_|$)`, "i")),
+      p(new RegExp(`^${NO_READ_VERB_INCL_SUFFIX}.*_CONFIG`, "i")),
+      p(/_VAULT/i),
+      p(/_CREDENTIAL/i),
+      p(/_ENROL/i),
+      p(/_REGISTER/i)
+    ]
+  },
+  {
+    tier: "write_destructive",
+    patterns: [
+      p(/_BATCH_DELETE/i),
+      p(/_DELETE(_|$)/i),
+      p(/_REVOKE/i),
+      p(/_REMOVE(_|$)/i),
+      p(/_TRASH/i),
+      p(/_DROP(_|$)/i),
+      p(/_CLEAR(_|$)/i),
+      p(/_HIDE(_|$)/i),
+      // Kebab-case verbs used by native MCP servers (e.g. xero's `void-invoice`).
+      p(/^void-/i)
+    ]
+  },
+  {
+    // Every pattern here is read-verb-guarded (ENG-7684): a high-risk NOUN
+    // (_EMAIL, _IMPORT, _FORWARD, _POST, _PUBLISH) inside a read-verb name
+    // (…_GET_…, …_FETCH_…) is a read, not a high-risk action, and must
+    // auto-execute instead of routing to approval.
+    tier: "write_high_risk",
+    patterns: [
+      highRisk(/_BATCH_MODIFY/i),
+      highRisk(/_SEND(_|$)/i),
+      highRisk(/_POST(_|$)/i),
+      highRisk(/_PUBLISH/i),
+      highRisk(/_REPLY/i),
+      // Message/email forwarding is high-risk. The negative lookbehind
+      // exempts browser *navigation* forward (e.g. Anchor's
+      // `anchor_navigate_forward`), which is benign and classifies as read;
+      // the read-verb guard additionally exempts GMAIL_GET_AUTO_FORWARDING.
+      highRisk(/(?<!navigate)_FORWARD/i),
+      highRisk(/_EMAIL/i),
+      highRisk(/_INVITE/i),
+      highRisk(/_NOTIFY/i),
+      highRisk(/_IMPORT/i),
+      // Sharing-preference MUTATIONS grant external access to content —
+      // exfiltration-shaped, so they must not fall through to the generic
+      // `_ADD`/`_UPDATE` write patterns (ENG-6027 council finding: e.g.
+      // GOOGLEDRIVE_ADD_FILE_SHARING_PREFERENCE). Anchored to a mutating
+      // verb so read-shaped names (METAADS_LIST_*_SHARING_REQUESTS,
+      // GOOGLEANALYTICS_GET_DATA_SHARING_SETTINGS) keep their read/admin
+      // classification.
+      highRisk(/_(ADD|UPDATE|SET|CREATE|MODIFY|CHANGE|ENABLE)_[A-Z0-9_]*SHAR(E|ING)/i)
+    ]
+  },
+  {
+    tier: "write",
+    patterns: [
+      p(/_ASSERT/i),
+      p(/_UPSERT/i),
+      p(/_PATCH/i),
+      // The negative lookbehind prevents `MONDAY_GET_UPDATES` (and similar
+      // "fetch the comment thread" reads) from being mis-tagged as a write
+      // just because the noun happens to be "update".
+      p(/(?<!_GET)_UPDATE/i),
+      p(/_INSERT/i),
+      p(/_CREATE/i),
+      p(/_ADD(_|$)/i),
+      p(/_MOVE(_|$)/i),
+      p(/_COPY(_|$)/i),
+      // Kebab-case verbs used by native MCP servers (e.g. xero).
+      p(/^create-/i),
+      p(/^update-/i),
+      p(/^attach-/i)
+    ]
+  },
+  {
+    tier: "read",
+    patterns: [
+      p(/_GET/i),
+      p(/_FIND/i),
+      p(/_LIST/i),
+      p(/_SEARCH/i),
+      p(/_FETCH/i),
+      p(/_RETRIEVE/i),
+      p(/_EXPORT/i),
+      p(/_DOWNLOAD/i),
+      p(/_READ(_|$)/i),
+      p(/_VIEW(_|$)/i),
+      // Cloud-style verbs (used by aws_*, gcloud, kubectl etc.) and other
+      // common read-shaped names that don't follow Composio's GET prefix.
+      p(/_DESCRIBE/i),
+      p(/_CHECK/i),
+      p(/_INSPECT/i),
+      p(/_QUERY/i),
+      p(/_SCAN/i),
+      p(/_SHOW(_|$)/i),
+      // Native MCP servers use bare leading verbs in snake_case (Kajabi:
+      // `get_landing_page`, `list_people`) or kebab-case (xero: `list-invoices`,
+      // `get-invoice`; github: `search-code`; granola: `read-transcript`). The
+      // uppercase/infix `_GET`/`_LIST` patterns miss both, so they fell through
+      // to the `write` fallback. One delimiter-agnostic pattern covers every
+      // read verb in either convention. Read is the lowest-precedence tier, so
+      // a leading-verb MUTATION still matches earlier: `get_or_create_x` hits
+      // `write` (_CREATE), `list_credentials` hits `admin` (_CREDENTIAL).
+      // ENG-7684.
+      p(new RegExp(`^(${READ_VERBS})[_-]`, "i")),
+      // `report-*` (xero's `report-profit-and-loss`) — not a read verb but a
+      // read-shaped native prefix. Anchored so it can't match report-* writers.
+      p(/^report-/i),
+      // ENG-5855: Anchor Browser observation tools (hosted MCP, `anchor_*`
+      // names). Anchored to `^anchor_` so they only ever classify Anchor's
+      // own tools and can't reclassify another toolkit's keys when the seed
+      // is regenerated. The other read-shaped Anchor tools already match
+      // generic patterns (`anchor_get_body_html` → _GET, `anchor_tab_list`
+      // → _LIST). `anchor_network_requests` is deliberately NOT here — it
+      // dumps auth headers/tokens, so it's raised to write_high_risk as a
+      // manual escalation in the seed.
+      p(/^anchor_navigate/i),
+      p(/^anchor_snapshot/i),
+      p(/^anchor_take_screenshot/i),
+      p(/^anchor_wait_for/i),
+      p(/^anchor_console_messages/i)
+    ]
+  }
+];
+
 // ../../packages/core/dist/integrations/augmented-live/markup.js
 var MARKUP_MARKER = "__augmentedLiveMarkup";
 var MARKUP_CONTROL_MARKER = "__augmentedLiveMarkupControl";
@@ -4354,11 +4515,11 @@ function resolveProbeTool(tools, override) {
 }
 function isAccountResolutionError(message) {
   const m = message.toLowerCase();
-  return ACCOUNT_RESOLUTION_ERROR_PATTERNS.some((p) => m.includes(p));
+  return ACCOUNT_RESOLUTION_ERROR_PATTERNS.some((p2) => m.includes(p2));
 }
 function isUpstreamAuthError(message) {
   const m = message.toLowerCase();
-  if (UPSTREAM_AUTH_ERROR_PATTERNS.some((p) => m.includes(p)))
+  if (UPSTREAM_AUTH_ERROR_PATTERNS.some((p2) => m.includes(p2)))
     return true;
   if (/\b(401|403)\s+client error/.test(m))
     return true;
@@ -5036,7 +5197,7 @@ var INTEGRATION_REGISTRY = [
     id: "video-gen",
     name: "Video Generation",
     category: "media",
-    description: "AI video generation from a text prompt. An agent passes a prompt to generate_video and gets back a short generated video with audio, which it can deliver to a chat channel. Augmented Team manages the model access for you - there is no key to enter. Generation runs direct against xAI (Grok Imagine Video 1.5 today). It is a PREMIUM, usage-billed capability: gated on a per-org opt-in and a monthly USD budget, and metered per second of generated video.",
+    description: "AI video generation from a text prompt or an input image. An agent passes a prompt (plus optionally image_url) to generate_video and gets back a short generated video with audio, which it can deliver to a chat channel. Augmented Team manages the model access for you - there is no key to enter. Generation runs direct against xAI Grok Imagine: text-to-video on the base grok-imagine-video model, image-to-video on grok-imagine-video-1.5. It is a PREMIUM, usage-billed capability: gated on a per-org opt-in and a monthly USD budget, and metered per second of generated video.",
     // Platform-key model (mirrors Grok Voice / ADR-0031): Augmented holds one xAI
     // account key (XAI_API_KEY) and every customer render bills back to it, so
     // auth is `none` - customers never enter a key.
@@ -5063,6 +5224,10 @@ var INTEGRATION_REGISTRY = [
       pricing: "usage",
       note: "Billed per second of generated video; the rate depends on the resolution.",
       meters: [
+        // 1.0 (grok-imagine-video) is the text-to-video model (ENG-7696: xAI's
+        // 1.5 is image-to-video ONLY, so t2v runs on the base model).
+        { event_type: "grok_imagine_video_1_0_480p", unit: "second" },
+        { event_type: "grok_imagine_video_1_0_720p", unit: "second" },
         { event_type: "grok_imagine_video_1_5_480p", unit: "second" },
         { event_type: "grok_imagine_video_1_5_720p", unit: "second" },
         // 1080p is image-to-video only (xAI restriction); metered when the
@@ -6378,6 +6543,9 @@ function stripTrailingSlash(value) {
   return value.replace(/\/+$/, "");
 }
 
+// ../../packages/core/dist/delivery/scheduled-turn-marker.js
+var SCHEDULED_TURN_MARKER_FILENAME = ".current-scheduled-turn.json";
+
 // ../../packages/core/dist/liveness/agent-liveness.js
 var FRESH_HEARTBEAT_THRESHOLD_MS = 2 * 60 * 1e3;
 
@@ -7060,6 +7228,73 @@ var gdriveCommentsTriggerAdapter = {
 };
 registerTriggerSource(gdriveCommentsTriggerAdapter);
 
+// ../../packages/core/dist/triggers/adapters/video-render.js
+var VIDEO_RENDER_TRIGGER_PROVIDER = "video_render";
+function isFetcher(v) {
+  return !!v && typeof v.fetchRenderState === "function";
+}
+function sanitizeCode(code) {
+  if (!code)
+    return null;
+  const cleaned = code.trim().toLowerCase().replace(/[^a-z0-9_]/g, "").slice(0, 64);
+  return cleaned || null;
+}
+function collectInstruction(config) {
+  return `Collect it now: call generate_video with ONLY {"request_id": "${config.resume_handle}"} (do not resend the prompt - resubmitting starts a new billed render). The tool returns a short-lived download URL; download it to a file under your project directory and deliver it with your channel's upload_file tool.`;
+}
+async function poll(ctx, trigger) {
+  const config = trigger.config;
+  if (!config.request_id || !config.resume_handle) {
+    throw new Error("video_render trigger config requires request_id and resume_handle");
+  }
+  if (!isFetcher(ctx.credentials)) {
+    throw new Error("video_render poll requires a VideoRenderStatusFetcher via ctx.credentials");
+  }
+  const state = await ctx.credentials.fetchRenderState(config.request_id);
+  if (state.state === "pending") {
+    return { events: [], cursor: ctx.cursor };
+  }
+  const occurredAt = (/* @__PURE__ */ new Date()).toISOString();
+  const base = {
+    provider: VIDEO_RENDER_TRIGGER_PROVIDER,
+    occurredAt,
+    // One event per render, ever - immutable identity, dedup-enforced.
+    dedupKey: `vr:${config.request_id}`,
+    // Platform-originated content only (see module header) - renders the clean
+    // un-fenced internal header instead of the external-content fence.
+    sourceTrust: "internal",
+    meaningful: true
+  };
+  let event;
+  if (state.state === "done") {
+    event = {
+      ...base,
+      title: "Video render complete",
+      body: `Your video render has finished. ${collectInstruction(config)}`
+    };
+  } else if (state.state === "failed") {
+    const code = sanitizeCode(state.code);
+    event = {
+      ...base,
+      title: "Video render failed",
+      body: `Your video render failed provider-side${code ? ` (code: ${code})` : ""}. It was not delivered and cannot be collected. If the video is still needed, submit a new generate_video request (a fresh prompt - the old request_id is dead).`
+    };
+  } else {
+    event = {
+      ...base,
+      title: "Video render expired",
+      body: `Your video render expired before it was collected (the provider no longer holds the output). If the video is still needed, submit a new generate_video request (a fresh prompt - the old request_id is dead).`
+    };
+  }
+  return { events: [event], cursor: ctx.cursor, complete: true };
+}
+var videoRenderTriggerAdapter = {
+  provider: VIDEO_RENDER_TRIGGER_PROVIDER,
+  kind: "poll",
+  poll
+};
+registerTriggerSource(videoRenderTriggerAdapter);
+
 // ../../packages/core/dist/feature-flags/registry.js
 var FLAG_REGISTRY = [
   {
@@ -7588,6 +7823,20 @@ var FLAG_REGISTRY = [
     // explicit confirm (ADR-0022 §4).
     sensitive: true
   },
+  {
+    key: "notify-dispatch",
+    description: "Membership-based channel-notify dispatch (ENG-7682 / notify Slice 1). off = today's behaviour: a non-@mention top-level channel message is dropped by the mention_only engagement gate (SLACK_CHANNEL_RESPONSE_MODE). membership = the agent's Slack MCP ADMITS non-@mention channel messages in channels its bot is a member of (the Socket Mode websocket already receives them), waking the agent in-thread via the SAME existing wake path used for @mentions/DMs. Only the mention_only engagement gate is relaxed - the echo/dedup, bot_id/self, and peer-classifier safety leaves still apply, so this never opens a bot-to-bot wake loop. The channel server can't evaluate flags, so the manager materializes the resolved value into the AGT_NOTIFY_DISPATCH spawn env (operator/canary override, ADR-0022). Enum leaves room for a later Slice 2 'filter' value (per-channel filters). Ships dark (default off).",
+    flagType: "enum",
+    allowedValues: ["off", "membership"],
+    // Declared safe value is `off`: the mention_only gate stays in force, byte-
+    // identical to today. membership is the deliberate, per-agent flip that
+    // widens what wakes the agent.
+    defaultValue: "off",
+    envVar: "AGT_NOTIFY_DISPATCH",
+    // membership widens agent-wake ingress (more inbound wakes = more cost /
+    // surface), so flipping it on is worth an explicit confirm (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "workflows-down-sync",
     description: "Down-sync active dynamic workflows to agents via /host/refresh (ADR-0012, ENG-6352). When on, the API populates the per-agent workflow set (team default \u222A agent override) and the claude-code adapter writes each as .claude/workflows/<name>.js. Boolean gate; ships dark.",
@@ -7981,8 +8230,8 @@ function minutesSinceLocalMidnight(now = /* @__PURE__ */ new Date(), timezone) {
         hourCycle: "h23"
       });
       const parts = fmt.formatToParts(now);
-      const hh = Number(parts.find((p) => p.type === "hour")?.value ?? "0");
-      const mm = Number(parts.find((p) => p.type === "minute")?.value ?? "0");
+      const hh = Number(parts.find((p2) => p2.type === "hour")?.value ?? "0");
+      const mm = Number(parts.find((p2) => p2.type === "minute")?.value ?? "0");
       if (Number.isFinite(hh) && Number.isFinite(mm)) return hh * 60 + mm;
     } catch {
     }
@@ -8329,10 +8578,10 @@ function resolveClaudeBinary() {
     "/opt/homebrew/bin/claude",
     "/usr/local/bin/claude"
   ];
-  for (const p of candidates) {
-    if (existsSync3(p)) {
-      cachedClaudePath = p;
-      return p;
+  for (const p2 of candidates) {
+    if (existsSync3(p2)) {
+      cachedClaudePath = p2;
+      return p2;
     }
   }
   return "claude";
@@ -8377,10 +8626,10 @@ function egressAllowlistHostPath(codeName, homeDir) {
   return join2(home, ".augmented", "_egress", `${codeName}.txt`);
 }
 function writeEgressAllowlist(codeName, domains, homeDir) {
-  const p = egressAllowlistHostPath(codeName, homeDir);
-  mkdirSync2(dirname(p), { recursive: true });
-  writeFileSync3(p, domains.join("\n") + "\n", { mode: 420 });
-  return p;
+  const p2 = egressAllowlistHostPath(codeName, homeDir);
+  mkdirSync2(dirname(p2), { recursive: true });
+  writeFileSync3(p2, domains.join("\n") + "\n", { mode: 420 });
+  return p2;
 }
 var EGRESS_DOCKER_TIMEOUT_MS = 1e4;
 function isNoSuchContainer(err) {
@@ -8413,7 +8662,7 @@ function restartEgressSidecar(codeName) {
   }
 }
 function buildDockerRunCommand(args) {
-  const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting } = args;
+  const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting, forwardNotifyDispatch } = args;
   const q = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
   const agentDir = join2(homeDir, ".augmented", codeName);
   const agentIdDir = join2(homeDir, ".augmented", agentId);
@@ -8449,6 +8698,7 @@ function buildDockerRunCommand(args) {
   if (forwardSlackReplyBinding) envArgs.push("-e AGT_SLACK_REPLY_BINDING");
   if (forwardBlockTurnEndAllMarkers) envArgs.push("-e AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED");
   if (forwardKanbanWaiting) envArgs.push("-e AGT_KANBAN_WAITING_ENABLED");
+  if (forwardNotifyDispatch) envArgs.push("-e AGT_NOTIFY_DISPATCH");
   const egressImage = process.env.AGT_EGRESS_IMAGE || "agt-squid:latest";
   const internalNet = `agt-net-${codeName}`;
   const squidName = `agt-squid-${codeName}`;
@@ -8647,9 +8897,9 @@ function readDirectChatSessionState(agentId) {
   }
 }
 function writeDirectChatSessionState(agentId, state) {
-  const p = directChatSessionStatePath(agentId);
-  mkdirSync2(dirname(p), { recursive: true });
-  writeFileSync3(p, JSON.stringify(state));
+  const p2 = directChatSessionStatePath(agentId);
+  mkdirSync2(dirname(p2), { recursive: true });
+  writeFileSync3(p2, JSON.stringify(state));
 }
 function startPersistentSession(config) {
   const existing = sessions.get(config.codeName);
@@ -8707,11 +8957,11 @@ function spawnSession(config, session) {
     } else {
       const claudeDir = join2(homedir2(), ".claude");
       for (const filename of [".credentials.json", "credentials.json"]) {
-        const p = join2(claudeDir, filename);
-        if (existsSync3(p)) {
+        const p2 = join2(claudeDir, filename);
+        if (existsSync3(p2)) {
           try {
-            rmSync(p, { force: true });
-            log(`[persistent-session] Removed ${p} (api_key mode active \u2014 preventing OAuth fallback)`);
+            rmSync(p2, { force: true });
+            log(`[persistent-session] Removed ${p2} (api_key mode active \u2014 preventing OAuth fallback)`);
           } catch {
           }
         }
@@ -8799,6 +9049,9 @@ function spawnSession(config, session) {
     if (config.kanbanWaitingEnabled && !process.env["AGT_KANBAN_WAITING_ENABLED"]) {
       tmuxSessionEnvArgs.push("-e", "AGT_KANBAN_WAITING_ENABLED=true");
     }
+    if (config.notifyDispatchMode && config.notifyDispatchMode !== "off" && !process.env["AGT_NOTIFY_DISPATCH"]) {
+      tmuxSessionEnvArgs.push("-e", `AGT_NOTIFY_DISPATCH=${config.notifyDispatchMode}`);
+    }
     const sessionHomeDir = process.env.HOME?.trim() || homedir2();
     let egress;
     if (egressMode(codeName) === "allowlist") {
@@ -8826,8 +9079,12 @@ function spawnSession(config, session) {
       // feature-gate-allow: registry-flag envVar operator-override precedence, not a new gate
       // ENG-7493 (ADR-0044): forward AGT_KANBAN_WAITING_ENABLED if it will be in
       // the session env (operator-set OR materialized from the flag above).
-      forwardKanbanWaiting: !!process.env["AGT_KANBAN_WAITING_ENABLED"] || !!config.kanbanWaitingEnabled
+      forwardKanbanWaiting: !!process.env["AGT_KANBAN_WAITING_ENABLED"] || !!config.kanbanWaitingEnabled,
       // feature-gate-allow: registry-flag envVar operator-override precedence, not a new gate
+      // ENG-7682 (notify Slice 1): forward AGT_NOTIFY_DISPATCH if it will be in
+      // the session env (operator-set OR materialized from the flag above).
+      forwardNotifyDispatch: !!process.env["AGT_NOTIFY_DISPATCH"] || // feature-gate-allow: registry-flag envVar operator-override precedence, not a new gate
+      !!config.notifyDispatchMode && config.notifyDispatchMode !== "off"
     }) : JSON.stringify(wrapperPath);
     const tmuxEnv = {
       ...process.env,
@@ -8914,7 +9171,7 @@ function hasMcpChildren(tmuxSession) {
       { encoding: "utf-8" }
     ).trim();
     if (!claudePidOut) return false;
-    const pids = claudePidOut.split("\n").map((p) => Number(p)).filter((p) => p > 0);
+    const pids = claudePidOut.split("\n").map((p2) => Number(p2)).filter((p2) => p2 > 0);
     if (pids.length === 0) return false;
     const claudePid = Math.max(...pids);
     const childrenOut = execSync(
@@ -8922,7 +9179,7 @@ function hasMcpChildren(tmuxSession) {
       { encoding: "utf-8" }
     ).trim();
     if (!childrenOut) return false;
-    const childPids = childrenOut.split("\n").map((p) => p.trim()).filter(Boolean);
+    const childPids = childrenOut.split("\n").map((p2) => p2.trim()).filter(Boolean);
     for (const cp of childPids) {
       const cmdline = execSync(
         `cat /proc/${cp}/cmdline 2>/dev/null | tr '\\0' ' ' || ps -p ${cp} -o args= 2>/dev/null || true`,
@@ -9441,6 +9698,7 @@ export {
   resolveDmTarget,
   isResolveError,
   deriveConsoleUrl,
+  SCHEDULED_TURN_MARKER_FILENAME,
   parseUsageBanner,
   formatRunMarker,
   parseTranscriptUsage,
@@ -9510,4 +9768,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-KMJHNKPQ.js.map
+//# sourceMappingURL=chunk-5WQATS6J.js.map