@integrity-labs/agt-cli 0.28.301 → 0.28.303

package/dist/{chunk-HRER2SCW.js → chunk-7LFB5DAW.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-E6L7SSE7.js";
+} from "./chunk-5WQATS6J.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5882,7 +5882,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.301" : "dev";
+var agtCliVersion = true ? "0.28.303" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8181,4 +8181,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-HRER2SCW.js.map
+//# sourceMappingURL=chunk-7LFB5DAW.js.map

package/dist/{claude-pair-runtime-BEUY5L6C.js → claude-pair-runtime-FOFN74JS.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-HWVIMZAY.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-52DPSJGK.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-BEUY5L6C.js.map
+//# sourceMappingURL=claude-pair-runtime-FOFN74JS.js.map

package/dist/lib/manager-worker.js

@@ -39,7 +39,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-HRER2SCW.js";
+} from "../chunk-7LFB5DAW.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -127,7 +127,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-E6L7SSE7.js";
+} from "../chunk-5WQATS6J.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -6989,7 +6989,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.301" : "dev";
+var agtCliVersion = true ? "0.28.303" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7844,7 +7844,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-HWVIMZAY.js");
+      const { collectDiagnostics } = await import("../persistent-session-52DPSJGK.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7942,7 +7942,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-HWVIMZAY.js");
+      const { collectDiagnostics } = await import("../persistent-session-52DPSJGK.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -8090,7 +8090,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-WFO4SRHV.js");
+      } = await import("../responsiveness-probe-KXWV4FXD.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -8122,7 +8122,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-WFO4SRHV.js");
+        } = await import("../responsiveness-probe-KXWV4FXD.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -11099,7 +11099,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-HWVIMZAY.js");
+        const { collectDiagnostics } = await import("../persistent-session-52DPSJGK.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -11149,7 +11149,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-HWVIMZAY.js");
+      const { collectDiagnostics } = await import("../persistent-session-52DPSJGK.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -11554,7 +11554,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-BEUY5L6C.js");
+  } = await import("../claude-pair-runtime-FOFN74JS.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/origami.js

@@ -39803,6 +39803,73 @@ var gdriveCommentsTriggerAdapter = {
 };
 registerTriggerSource(gdriveCommentsTriggerAdapter);
 
+// ../core/dist/triggers/adapters/video-render.js
+var VIDEO_RENDER_TRIGGER_PROVIDER = "video_render";
+function isFetcher(v) {
+  return !!v && typeof v.fetchRenderState === "function";
+}
+function sanitizeCode(code) {
+  if (!code)
+    return null;
+  const cleaned = code.trim().toLowerCase().replace(/[^a-z0-9_]/g, "").slice(0, 64);
+  return cleaned || null;
+}
+function collectInstruction(config2) {
+  return `Collect it now: call generate_video with ONLY {"request_id": "${config2.resume_handle}"} (do not resend the prompt - resubmitting starts a new billed render). The tool returns a short-lived download URL; download it to a file under your project directory and deliver it with your channel's upload_file tool.`;
+}
+async function poll(ctx, trigger) {
+  const config2 = trigger.config;
+  if (!config2.request_id || !config2.resume_handle) {
+    throw new Error("video_render trigger config requires request_id and resume_handle");
+  }
+  if (!isFetcher(ctx.credentials)) {
+    throw new Error("video_render poll requires a VideoRenderStatusFetcher via ctx.credentials");
+  }
+  const state = await ctx.credentials.fetchRenderState(config2.request_id);
+  if (state.state === "pending") {
+    return { events: [], cursor: ctx.cursor };
+  }
+  const occurredAt = (/* @__PURE__ */ new Date()).toISOString();
+  const base = {
+    provider: VIDEO_RENDER_TRIGGER_PROVIDER,
+    occurredAt,
+    // One event per render, ever - immutable identity, dedup-enforced.
+    dedupKey: `vr:${config2.request_id}`,
+    // Platform-originated content only (see module header) - renders the clean
+    // un-fenced internal header instead of the external-content fence.
+    sourceTrust: "internal",
+    meaningful: true
+  };
+  let event;
+  if (state.state === "done") {
+    event = {
+      ...base,
+      title: "Video render complete",
+      body: `Your video render has finished. ${collectInstruction(config2)}`
+    };
+  } else if (state.state === "failed") {
+    const code = sanitizeCode(state.code);
+    event = {
+      ...base,
+      title: "Video render failed",
+      body: `Your video render failed provider-side${code ? ` (code: ${code})` : ""}. It was not delivered and cannot be collected. If the video is still needed, submit a new generate_video request (a fresh prompt - the old request_id is dead).`
+    };
+  } else {
+    event = {
+      ...base,
+      title: "Video render expired",
+      body: `Your video render expired before it was collected (the provider no longer holds the output). If the video is still needed, submit a new generate_video request (a fresh prompt - the old request_id is dead).`
+    };
+  }
+  return { events: [event], cursor: ctx.cursor, complete: true };
+}
+var videoRenderTriggerAdapter = {
+  provider: VIDEO_RENDER_TRIGGER_PROVIDER,
+  kind: "poll",
+  poll
+};
+registerTriggerSource(videoRenderTriggerAdapter);
+
 // ../core/dist/feature-flags/registry.js
 var FLAG_REGISTRY = [
   {

package/dist/mcp/slack-channel.js

@@ -15585,6 +15585,57 @@ async function fetchThreadTranscript(channel, threadTs, limit, deps) {
   return { ok: true, count: allMessages.length, formatted: formatThreadMessages(allMessages, nameById) };
 }
 
+// src/slack-channel-history.ts
+var SLACK_HISTORY_DEFAULT_LIMIT = 50;
+var SLACK_HISTORY_MAX_LIMIT = 200;
+async function fetchChannelHistory(channel, limit, deps, options = {}) {
+  const { botToken, resolveUserName: resolveUserName2, fetchImpl = fetch } = deps;
+  const cappedLimit = Math.min(Math.max(limit, 1), SLACK_HISTORY_MAX_LIMIT);
+  const allMessages = [];
+  let cursor;
+  do {
+    const remaining = cappedLimit - allMessages.length;
+    if (remaining <= 0) break;
+    const params = new URLSearchParams({
+      channel,
+      limit: String(Math.min(remaining, 100)),
+      ...options.oldest ? { oldest: options.oldest } : {},
+      ...options.latest ? { latest: options.latest } : {},
+      ...cursor ? { cursor } : {}
+    });
+    let data;
+    try {
+      const res = await fetchImpl(`https://slack.com/api/conversations.history?${params}`, {
+        headers: { Authorization: `Bearer ${botToken}` }
+      });
+      if (!res.ok) return { ok: false, error: `http_${res.status}` };
+      data = await res.json();
+    } catch (err) {
+      return { ok: false, error: err instanceof Error ? err.message : "fetch_failed" };
+    }
+    if (!data.ok) return { ok: false, error: data.error ?? "unknown" };
+    for (const msg of data.messages ?? []) {
+      allMessages.push({
+        user: msg.user ?? msg.bot_id ?? "unknown",
+        text: msg.text ?? "",
+        ts: msg.ts ?? ""
+      });
+    }
+    cursor = data.response_metadata?.next_cursor || void 0;
+  } while (cursor && allMessages.length < cappedLimit);
+  allMessages.sort((a, b) => Number(a.ts) - Number(b.ts));
+  const uniqueUserIds = [...new Set(allMessages.map((m) => m.user))];
+  const resolved = await Promise.all(
+    uniqueUserIds.map(async (id) => [id, await resolveUserName2(id)])
+  );
+  const nameById = new Map(resolved);
+  return {
+    ok: true,
+    count: allMessages.length,
+    formatted: formatThreadMessages(allMessages, nameById)
+  };
+}
+
 // src/impersonation.ts
 var ENV_VAR = "AGT_ACT_AS_AGENT_ID";
 var OVERRIDE_ENV_VAR = "ENABLE_IMPERSONATION_CHANNELS";
@@ -20523,6 +20574,32 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
         required: ["channel", "thread_ts"]
       }
     },
+    {
+      name: "slack.read_history",
+      description: `Read recent top-level messages in a Slack channel the bot is a member of (via conversations.history). Use this to catch up on what was said in a channel \u2014 e.g. an auto-followed channel you have not been @-mentioned in, or to gather context before posting. This reads CHANNEL history; for one thread's replies use slack.read_thread instead. Optional oldest/latest bound the time window (Slack ts values). Returns messages oldest\u2192newest. The bot only sees channels it has been invited to \u2014 a "not_in_channel" error means someone must /invite the bot first.`,
+      inputSchema: {
+        type: "object",
+        properties: {
+          channel: {
+            type: "string",
+            description: "Slack channel ID to read history from (the bot must be a member of it)"
+          },
+          limit: {
+            type: "number",
+            description: "Max messages to return (default 50, max 200)"
+          },
+          oldest: {
+            type: "string",
+            description: 'Optional lower time bound \u2014 only messages AFTER this Slack ts (exclusive), e.g. "1783900000.000000".'
+          },
+          latest: {
+            type: "string",
+            description: "Optional upper time bound \u2014 only messages up to and including this Slack ts."
+          }
+        },
+        required: ["channel"]
+      }
+    },
     {
       name: "slack.download_attachment",
       description: "Download an inbound Slack attachment on demand. Use this for non-image files (PDFs, docx, csv, etc.) that arrived via a <channel> tag \u2014 look for `file_id` in the `files` meta. Requires the `channel` attribute from the same <channel> tag so the tool can verify the attachment was shared in the current conversation. Returns the local path where the file was written (inside ~/.augmented/<codeName>/slack-inbound/). Images are auto-downloaded on receipt and don't need this tool.",
@@ -21026,6 +21103,40 @@ ${result.formatted}` : "Thread is empty or not found."
       };
     }
   }
+  if (name === "slack.read_history") {
+    const { channel, limit: rawLimit, oldest, latest } = args;
+    const limit = Math.min(
+      Math.max(rawLimit ?? SLACK_HISTORY_DEFAULT_LIMIT, 1),
+      SLACK_HISTORY_MAX_LIMIT
+    );
+    try {
+      const result = await fetchChannelHistory(
+        channel,
+        limit,
+        { botToken: BOT_TOKEN, resolveUserName },
+        { oldest, latest }
+      );
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: `Slack error: ${result.error}` }],
+          isError: true
+        };
+      }
+      return {
+        content: [{
+          type: "text",
+          text: result.count > 0 ? `Channel history (${result.count} messages, oldest\u2192newest):
+
+${result.formatted}` : "No messages in range, or the bot is not a member of this channel."
+        }]
+      };
+    } catch (err) {
+      return {
+        content: [{ type: "text", text: `Failed: ${err.message}` }],
+        isError: true
+      };
+    }
+  }
   if (name === "slack.upload_file") {
     const {
       path,

package/dist/{persistent-session-HWVIMZAY.js → persistent-session-52DPSJGK.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-E6L7SSE7.js";
+} from "./chunk-5WQATS6J.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-HWVIMZAY.js.map
+//# sourceMappingURL=persistent-session-52DPSJGK.js.map

package/dist/{responsiveness-probe-WFO4SRHV.js → responsiveness-probe-KXWV4FXD.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-E6L7SSE7.js";
+} from "./chunk-5WQATS6J.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -165,8 +165,15 @@ var KNOWN_REPLY_BINDING_KEYS = /* @__PURE__ */ new Set([
   "proactive",
   "unknown_target",
   "legacy",
-  "unknown_inbound_id"
+  "unknown_inbound_id",
   // reserved canary
+  // ENG-7716: the ENG-7542 DM-channel guard writes these into the same counter
+  // file. They are additional reserved keys (channel_mistarget_corrected counts
+  // every cross-channel rewrite; dm_channel_mistarget its DM subset), overlapping
+  // the main classifications the same way unknown_inbound_id does. Allowlisted so
+  // the DM->channel leak signal survives the read/reset fold and reaches CloudWatch.
+  "channel_mistarget_corrected",
+  "dm_channel_mistarget"
 ]);
 function readAndResetSlackReplyBindingClassifications(agentHomeDir) {
   let names;
@@ -418,4 +425,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-WFO4SRHV.js.map
+//# sourceMappingURL=responsiveness-probe-KXWV4FXD.js.map

package/dist/responsiveness-probe-KXWV4FXD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/responsiveness-probe.ts"],"sourcesContent":["/**\n * ENG-5399 — Tier 1 responsiveness probe (manager-side).\n *\n * Cheap, fast-cadence canary that catches \"agent went silent\" inside\n * minutes, well before the existing synthetic-probe cron's ~35 min\n * staleness window (`SyntheticReplyAgeSeconds`, ENG-5122).\n *\n * Mechanism: for each managed agent, read the mtime of the agent's\n * `pane.log` and report `now - mtime` as `PaneActivityAgeSeconds` via\n * a new `/host/responsiveness-probe` endpoint. `pane.log` is the\n * tmux pipe-pane sink set up by `setupPaneLog()` — any visible\n * activity (assistant turns, tool calls, in-place progress\n * heartbeats) bumps its mtime. A silent agent has a steadily\n * climbing age that lands in CloudWatch and trips a per-agent alarm.\n *\n * ENG-6017 adds a second per-agent signal on the same cadence:\n * `pending_inbound_oldest_age_seconds` — the age of the oldest marker\n * file across the agent's `*-pending-inbound/` directories (written by\n * the channel MCP servers for inbounds awaiting delivery). This is the\n * one artifact of the \"message typed but never submitted\" failure mode\n * that every other canary is blind to: in the koda incident\n * (2026-06-04) an operator Slack DM sat undelivered for 40+ minutes\n * while pane-activity stayed fresh (health checks), synthetic probes\n * were answered by the one-shot fallback, and heartbeat/session-alive\n * only reflect manager health. The field is OMITTED (not zero) when the\n * agent has no pending-inbound markers — the API treats absent as\n * \"no signal\", never as \"healthy\" (absent-vs-zero matters for\n * mixed-version fleets where old CLIs don't report it at all).\n *\n * Run from `pollCycle()` in `manager-worker.ts` on a configurable\n * interval (default 60s via `AUGMENTED_RESPONSIVENESS_INTERVAL_MS`;\n * lowered from 5 min by ENG-7550 - this post is what refreshes\n * `agents.last_pane_activity_at`, the minutely busy-sampling substrate).\n */\n\nimport { mkdirSync, readdirSync, readFileSync, renameSync, statSync, unlinkSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { paneLogPath } from './persistent-session.js';\n\nexport interface ResponsivenessProbeResult {\n  code_name: string;\n  pane_activity_age_seconds: number;\n  /**\n   * ENG-6017: age (s) of the oldest marker file across the agent's\n   * `*-pending-inbound/` directories. Omitted when no markers exist —\n   * absent means \"no signal\", NOT \"zero / healthy\".\n   */\n  pending_inbound_oldest_age_seconds?: number;\n  /**\n   * ENG-6327: per-cause inbound deflection counts since the last probe (read +\n   * RESET from the channel servers' `<channel>-deflections.json` counter files).\n   * Omitted when there were none. Keyed by DeflectionCause.\n   */\n  deflections?: Record<string, number>;\n  /**\n   * ENG-6408 / ADR-0024 Slice 1.5: shadow lane-classification counts since the\n   * last probe (read + RESET from `<channel>-lane-classifications.json`). Keyed\n   * by `<lane>|<expects_reply>|<source>` plus the reserved\n   * `suspected_misclassification` canary. Omitted when there were none.\n   */\n  lane_classifications?: Record<string, number>;\n  /**\n   * WS0 (Slack cross-thread reply routing): SHADOW reply-target classification\n   * counts since the last probe (read + RESET from\n   * `<channel>-reply-target-classifications.json`). Keyed by\n   * `<result>|<pending_threads_bucket>`. Omitted when there were none.\n   */\n  slack_reply_target_classifications?: Record<string, number>;\n  /**\n   * WS2 (Slack cross-thread reply routing): SHADOW reply-BINDING classification\n   * counts since the last probe (read + RESET from\n   * `<channel>-reply-binding-classifications.json`). Keyed by the binding\n   * classification (bound / coords_corrected / ... / unknown_inbound_id).\n   * Omitted when there were none.\n   */\n  slack_reply_binding_classifications?: Record<string, number>;\n}\n\n/**\n * ENG-6327 — per-channel deflection counter file-layout contract. The channel\n * MCP servers increment `<channel>-deflections.json` in the agent home (via\n * recordChannelDeflection in packages/mcp/ack-reaction.ts); apps/cli does not\n * depend on @integrity-labs/mcp, so the manager re-implements the read against\n * this contract — the same read-only, no-IPC posture as the `*-pending-inbound`\n * scan above. Body is a JSON object keyed by cause with integer counts.\n */\nconst DEFLECTION_COUNTER_SUFFIX = '-deflections.json';\nconst KNOWN_DEFLECTION_CAUSES = [\n  'integration_down',\n  'session_dead',\n  'wedged',\n  'busy',\n  'duplicate', // ENG-6270 — a redundant re-delivery dropped at fresh ingress\n  'replay_orphaned', // ENG-6355 — a replay-payload marker GC'd without ever being replayed\n  'unknown',\n] as const;\n\n/**\n * Read and RESET every `<channel>-deflections.json` in an agent home, returning\n * the summed counts by cause (or null when there are none). Consumes via atomic\n * rename-then-read-then-unlink so an increment racing the reset is carried into\n * the next window rather than lost. Only known causes are accumulated so a\n * corrupt file can't smuggle an unbounded dimension into CloudWatch.\n *\n * Reset-on-read is required: these are deltas-since-last-consume, so the metric\n * would over-count if they weren't cleared each cycle. The trade-off is that a\n * failed POST loses that cycle's counts (under-count) — acceptable for a\n * frequency metric and consistent with the other best-effort probe siblings;\n * unlike the in-memory give-up counter, file-based counts aren't re-credited\n * on POST failure.\n */\nexport function readAndResetChannelDeflections(\n  agentHomeDir: string,\n): Record<string, number> | null {\n  let names: string[];\n  try {\n    names = readdirSync(agentHomeDir);\n  } catch {\n    return null;\n  }\n  const total: Record<string, number> = {};\n  let any = false;\n  for (const name of names) {\n    if (!name.endsWith(DEFLECTION_COUNTER_SUFFIX)) continue;\n    const full = join(agentHomeDir, name);\n    const consuming = `${full}.consuming`;\n    try {\n      renameSync(full, consuming); // atomic; replaces any stale .consuming from a crashed cycle\n    } catch {\n      continue; // vanished / not a regular file — skip\n    }\n    try {\n      const parsed = JSON.parse(readFileSync(consuming, 'utf8')) as Record<string, unknown>;\n      if (parsed && typeof parsed === 'object') {\n        for (const cause of KNOWN_DEFLECTION_CAUSES) {\n          const n = parsed[cause];\n          if (typeof n === 'number' && Number.isFinite(n) && n > 0) {\n            total[cause] = (total[cause] ?? 0) + Math.floor(n);\n            any = true;\n          }\n        }\n      }\n    } catch {\n      /* corrupt — drop it */\n    }\n    try {\n      unlinkSync(consuming);\n    } catch {\n      /* non-fatal */\n    }\n  }\n  return any ? total : null;\n}\n\n/**\n * ENG-6408 / ADR-0024 Slice 1.5 - per-channel lane-classification counter\n * file-layout contract. The channel MCP servers increment\n * `<channel>-lane-classifications.json` in the agent home (via\n * recordLaneClassification in packages/mcp/inbound-lane-telemetry.ts); apps/cli\n * does not depend on @integrity-labs/mcp, so the manager re-implements the read\n * against this contract (same posture as the deflection scan above). Body is a\n * JSON object keyed by `<lane>|<expects_reply>|<source>` (plus the reserved\n * `suspected_misclassification`) with integer counts.\n */\nconst LANE_CLASSIFICATION_COUNTER_SUFFIX = '-lane-classifications.json';\nconst SUSPECTED_MISCLASSIFICATION_KEY = 'suspected_misclassification';\nconst KNOWN_LANES = new Set(['conversational', 'directive', 'liveness']);\nconst KNOWN_LANE_SOURCES = new Set(['slack', 'telegram', 'msteams', 'direct-chat']);\n\n/**\n * Only well-formed composite keys (and the misclassification canary) are\n * accumulated, so a corrupt counter file can't smuggle an unbounded dimension\n * into CloudWatch - the same bounding the deflection reader applies.\n */\nfunction isKnownLaneClassificationKey(key: string): boolean {\n  if (key === SUSPECTED_MISCLASSIFICATION_KEY) return true;\n  const parts = key.split('|');\n  if (parts.length !== 3) return false;\n  const [lane, expectsReply, source] = parts as [string, string, string];\n  return (\n    KNOWN_LANES.has(lane) &&\n    (expectsReply === 'true' || expectsReply === 'false') &&\n    KNOWN_LANE_SOURCES.has(source)\n  );\n}\n\n/**\n * Read and RESET every `<channel>-lane-classifications.json` in an agent home,\n * returning the summed counts by key (or null when there are none). Mirrors\n * readAndResetChannelDeflections exactly: atomic rename-then-read-then-unlink so\n * an increment racing the reset carries into the next window, and only known\n * keys are accumulated. SHADOW telemetry - informs the Slice 2 gate, gates\n * nothing itself.\n */\nexport function readAndResetChannelLaneClassifications(\n  agentHomeDir: string,\n): Record<string, number> | null {\n  let names: string[];\n  try {\n    names = readdirSync(agentHomeDir);\n  } catch {\n    return null;\n  }\n  const total: Record<string, number> = {};\n  let any = false;\n  for (const name of names) {\n    if (!name.endsWith(LANE_CLASSIFICATION_COUNTER_SUFFIX)) continue;\n    const full = join(agentHomeDir, name);\n    const consuming = `${full}.consuming`;\n    try {\n      renameSync(full, consuming); // atomic; replaces any stale .consuming from a crashed cycle\n    } catch {\n      continue; // vanished / not a regular file — skip\n    }\n    try {\n      const parsed = JSON.parse(readFileSync(consuming, 'utf8')) as Record<string, unknown>;\n      if (parsed && typeof parsed === 'object') {\n        for (const [key, raw] of Object.entries(parsed)) {\n          if (!isKnownLaneClassificationKey(key)) continue;\n          if (typeof raw === 'number' && Number.isFinite(raw) && raw > 0) {\n            total[key] = (total[key] ?? 0) + Math.floor(raw);\n            any = true;\n          }\n        }\n      }\n    } catch {\n      /* corrupt — drop it */\n    }\n    try {\n      unlinkSync(consuming);\n    } catch {\n      /* non-fatal */\n    }\n  }\n  return any ? total : null;\n}\n\n/**\n * WS0 (Slack cross-thread reply routing) - per-channel reply-target counter\n * file-layout contract. The channel MCP servers increment\n * `<channel>-reply-target-classifications.json` in the agent home (via\n * recordReplyTargetClassification in packages/mcp/slack-reply-target-telemetry.ts);\n * apps/cli does not depend on @integrity-labs/mcp, so the manager re-implements\n * the read against this contract (same posture as the lane-classification scan\n * above). Body is a JSON object keyed by `<result>|<pending_threads_bucket>`\n * with integer counts.\n */\nconst REPLY_TARGET_CLASSIFICATION_COUNTER_SUFFIX = '-reply-target-classifications.json';\nconst KNOWN_REPLY_TARGET_RESULTS = new Set([\n  'matched_pending',\n  'matched_recent',\n  'crossed_candidate',\n  'unknown_target',\n]);\nconst KNOWN_PENDING_THREAD_BUCKETS = new Set(['0', '1', '2', '3plus']);\n\n/**\n * Only well-formed `<result>|<bucket>` keys are accumulated, so a corrupt counter\n * file can't smuggle an unbounded dimension into CloudWatch - the same bounding\n * the lane-classification / deflection readers apply.\n */\nfunction isKnownReplyTargetKey(key: string): boolean {\n  const parts = key.split('|');\n  if (parts.length !== 2) return false;\n  const [result, bucket] = parts as [string, string];\n  return KNOWN_REPLY_TARGET_RESULTS.has(result) && KNOWN_PENDING_THREAD_BUCKETS.has(bucket);\n}\n\n/**\n * Read and RESET every `<channel>-reply-target-classifications.json` in an agent\n * home, returning the summed counts by key (or null when there are none). Mirrors\n * readAndResetChannelLaneClassifications exactly: atomic\n * rename-then-read-then-unlink so an increment racing the reset carries into the\n * next window, and only known keys are accumulated. SHADOW telemetry - informs\n * the WS2 binding gate, gates nothing itself.\n */\nexport function readAndResetSlackReplyTargetClassifications(\n  agentHomeDir: string,\n): Record<string, number> | null {\n  let names: string[];\n  try {\n    names = readdirSync(agentHomeDir);\n  } catch {\n    return null;\n  }\n  const total: Record<string, number> = {};\n  let any = false;\n  for (const name of names) {\n    if (!name.endsWith(REPLY_TARGET_CLASSIFICATION_COUNTER_SUFFIX)) continue;\n    const full = join(agentHomeDir, name);\n    const consuming = `${full}.consuming`;\n    try {\n      renameSync(full, consuming); // atomic; replaces any stale .consuming from a crashed cycle\n    } catch {\n      continue; // vanished / not a regular file - skip\n    }\n    try {\n      const parsed = JSON.parse(readFileSync(consuming, 'utf8')) as Record<string, unknown>;\n      if (parsed && typeof parsed === 'object') {\n        for (const [key, raw] of Object.entries(parsed)) {\n          if (!isKnownReplyTargetKey(key)) continue;\n          if (typeof raw === 'number' && Number.isFinite(raw) && raw > 0) {\n            total[key] = (total[key] ?? 0) + Math.floor(raw);\n            any = true;\n          }\n        }\n      }\n    } catch {\n      /* corrupt - drop it */\n    }\n    try {\n      unlinkSync(consuming);\n    } catch {\n      /* non-fatal */\n    }\n  }\n  return any ? total : null;\n}\n\n// WS2 (Slack cross-thread reply routing) - per-channel reply-BINDING counter\n// file-layout contract. The slack MCP increments\n// `<channel>-reply-binding-classifications.json` (via\n// recordReplyBindingClassification in packages/mcp/slack-reply-binding-telemetry.ts);\n// apps/cli re-implements the read against this contract, same posture as the\n// reply-target scan above. Body is a JSON object keyed by the binding\n// classification (plus the reserved unknown_inbound_id canary) with integer counts.\nconst REPLY_BINDING_CLASSIFICATION_COUNTER_SUFFIX = '-reply-binding-classifications.json';\nconst KNOWN_REPLY_BINDING_KEYS = new Set([\n  'bound',\n  'coords_corrected',\n  'coords_match',\n  'proactive',\n  'unknown_target',\n  'legacy',\n  'unknown_inbound_id', // reserved canary\n  // ENG-7716: the ENG-7542 DM-channel guard writes these into the same counter\n  // file. They are additional reserved keys (channel_mistarget_corrected counts\n  // every cross-channel rewrite; dm_channel_mistarget its DM subset), overlapping\n  // the main classifications the same way unknown_inbound_id does. Allowlisted so\n  // the DM->channel leak signal survives the read/reset fold and reaches CloudWatch.\n  'channel_mistarget_corrected',\n  'dm_channel_mistarget',\n]);\n\n/**\n * Read and RESET every `<channel>-reply-binding-classifications.json` in an agent\n * home, returning the summed counts by classification (or null when there are\n * none). Mirrors readAndResetSlackReplyTargetClassifications; only known keys are\n * accumulated so a corrupt file can't add an unbounded CloudWatch dimension.\n * SHADOW telemetry - informs the enforce flip, gates nothing itself.\n */\nexport function readAndResetSlackReplyBindingClassifications(\n  agentHomeDir: string,\n): Record<string, number> | null {\n  let names: string[];\n  try {\n    names = readdirSync(agentHomeDir);\n  } catch {\n    return null;\n  }\n  const total: Record<string, number> = {};\n  let any = false;\n  for (const name of names) {\n    if (!name.endsWith(REPLY_BINDING_CLASSIFICATION_COUNTER_SUFFIX)) continue;\n    const full = join(agentHomeDir, name);\n    const consuming = `${full}.consuming`;\n    try {\n      renameSync(full, consuming);\n    } catch {\n      continue;\n    }\n    try {\n      const parsed = JSON.parse(readFileSync(consuming, 'utf8')) as Record<string, unknown>;\n      if (parsed && typeof parsed === 'object') {\n        for (const [key, raw] of Object.entries(parsed)) {\n          if (!KNOWN_REPLY_BINDING_KEYS.has(key)) continue;\n          if (typeof raw === 'number' && Number.isFinite(raw) && raw > 0) {\n            total[key] = (total[key] ?? 0) + Math.floor(raw);\n            any = true;\n          }\n        }\n      }\n    } catch {\n      /* corrupt - drop it */\n    }\n    try {\n      unlinkSync(consuming);\n    } catch {\n      /* non-fatal */\n    }\n  }\n  return any ? total : null;\n}\n\n// ENG-7550: 60s default (was 5 min). The probe post is what refreshes\n// agents.last_pane_activity_at, so its cadence is the resolution ceiling for\n// minutely busy sampling (sample_agent_activity at p_window_seconds=60).\n// Sized before lowering: the per-agent CloudWatch alarms already run\n// Period:60/EvaluationPeriods:1 (built for 1-min datapoints), CloudWatch\n// bills per metric not per datapoint, and the 5x Lambda/API-GW invocation\n// increase is trivial at fleet scale. The reset-on-read delta counters\n// (deflections, lane/reply classifications) are cadence-agnostic - smaller\n// batches, same totals.\nconst DEFAULT_INTERVAL_MS = 60 * 1000;\n\nexport function getResponsivenessIntervalMs(): number {\n  const raw = process.env.AUGMENTED_RESPONSIVENESS_INTERVAL_MS;\n  if (!raw) return DEFAULT_INTERVAL_MS;\n  const parsed = Number.parseInt(raw, 10);\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_INTERVAL_MS;\n}\n\n/**\n * ENG-6017: oldest pending-inbound marker mtime (ms epoch) for an agent,\n * or null when the agent has no markers / no pending-inbound dirs.\n *\n * The channel MCP servers (slack-channel, telegram-channel, …) write one\n * marker file per inbound into `~/.augmented/<codeName>/<channel>-pending-\n * inbound/` and clear it when the agent acknowledges the message. The\n * directory layout is the contract here — read-only, no IPC with the MCP\n * (the MCP and CLI release independently; file mtimes need no protocol).\n *\n * ENG-6072: only plain, non-hidden files count as markers. The msteams MCP\n * keeps `.markers/` and `.processed/` housekeeping SUBDIRECTORIES inside its\n * pending-inbound dir; their mtimes never advance, so statting every dirent\n * made the gauge climb forever and fired pending-inbound-stale on agents with\n * zero stranded messages (kylie ~3.4d / scout ~34h false ALARMs the moment\n * ENG-6023 activated the alarm). Dot-entries are skipped wholesale — the\n * hidden namespace is reserved for MCP bookkeeping, never for markers.\n */\nfunction oldestPendingInboundMtimeMs(agentHomeDir: string): number | null {\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null; // agent home missing — nothing to report\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      try {\n        const mtimeMs = statSync(join(dir, file.name)).mtimeMs;\n        if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n      } catch {\n        // Marker drained between readdir and stat — that's the happy path.\n      }\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160 / ENG-6319: read a marker's classification flags.\n *  - `{...}`       → parsed flags.\n *  - `null`        → vanished mid-scan (ENOENT) — drained between stat and\n *                    read, the happy path; callers exclude it.\n *  - `'malformed'` → present but unreadable for another reason. The live\n *                    scan treats this as LIVE (a corrupt marker can never\n *                    mask a real wedge); park leaves it in place (a corrupt\n *                    marker must never become a dropped message).\n */\ninterface MarkerFlags {\n  /** ENG-5846: dead-lettered by the channel (⏳-noticed, never drainable). */\n  undeliverable: boolean;\n  /**\n   * ENG-6319: auto-followed participant-thread inbound the agent may\n   * legitimately skip. Excluded from the wedge live-scan (a deliberate skip\n   * must not read as \"failing to drain\" and force-respawn a healthy\n   * session) but still parked across respawns — it may be a real\n   * operator message awaiting a reply.\n   */\n  discretionary: boolean;\n}\n\nfunction readMarkerFlags(markerPath: string): MarkerFlags | null | 'malformed' {\n  try {\n    const parsed = JSON.parse(readFileSync(markerPath, 'utf8')) as {\n      undeliverable?: unknown;\n      discretionary?: unknown;\n    };\n    return {\n      undeliverable: parsed?.undeliverable === true,\n      discretionary: parsed?.discretionary === true,\n    };\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code === 'ENOENT' ? null : 'malformed';\n  }\n}\n\n/**\n * ENG-6160: oldest *LIVE* pending-inbound marker mtime (ms epoch) for an agent,\n * or null when there is no live marker. \"Live\" excludes:\n *\n *  - markers older than `sessionStartMs` — a marker written before the current\n *    session started is a leftover from a PREVIOUS session and cannot mean\n *    *this* session is failing to drain. This is the load-bearing exclusion:\n *    without it, an orphan marker survives a fresh respawn and the wedge\n *    detector re-fires forever on a healthy idle agent (the sherlock enforce\n *    loop, 2026-06-08: `inboundAge=3389s` on a `● Ready.` session).\n *  - markers flagged `undeliverable: true` — already dead-lettered by the channel.\n *  - markers flagged `discretionary: true` (ENG-6319) — skippable auto-followed\n *    participant-thread inbound; a deliberate skip must not force-respawn a\n *    healthy session.\n *\n * Distinct from `oldestPendingInboundMtimeMs` (which counts ALL markers and\n * feeds the ENG-6017 `pending-inbound-stale` CloudWatch alarm — that alarm\n * *wants* to fire on a stuck inbound, so its semantics must NOT change). This\n * variant is wedge-detection-only.\n */\nexport function oldestLivePendingInboundMtimeMs(\n  agentHomeDir: string,\n  opts: { sessionStartMs?: number | null } = {},\n): number | null {\n  const sessionStartMs = opts.sessionStartMs ?? null;\n  let oldest: number | null = null;\n  let entries;\n  try {\n    entries = readdirSync(agentHomeDir, { withFileTypes: true });\n  } catch {\n    return null;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(agentHomeDir, entry.name);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      const full = join(dir, file.name);\n      let mtimeMs: number;\n      try {\n        mtimeMs = statSync(full).mtimeMs;\n      } catch {\n        continue; // drained between readdir and stat — happy path\n      }\n      if (sessionStartMs !== null && mtimeMs < sessionStartMs) continue; // pre-session leftover\n      const flags = readMarkerFlags(full);\n      if (flags === null) continue; // vanished between stat and read — drained, exclude\n      if (flags !== 'malformed' && (flags.undeliverable || flags.discretionary)) continue;\n      if (oldest === null || mtimeMs < oldest) oldest = mtimeMs;\n    }\n  }\n  return oldest;\n}\n\n/**\n * ENG-6160: age (s) of the oldest LIVE pending-inbound marker for an agent, or\n * null when none. The wedge detector uses this instead of the alarm-facing\n * `pending_inbound_oldest_age_seconds` so a stale/dead-letter marker can't\n * false-fire a respawn.\n */\nexport function livePendingInboundOldestAgeSeconds(\n  codeName: string,\n  sessionStartMs: number | null,\n  now: Date = new Date(),\n): number | null {\n  const oldest = oldestLivePendingInboundMtimeMs(dirname(paneLogPath(codeName)), { sessionStartMs });\n  if (oldest === null) return null;\n  return Math.max(0, Math.floor((now.getTime() - oldest) / 1000));\n}\n\n/**\n * ENG-6160: move every pending-inbound marker for an agent aside into a sibling\n * `<channel>-pending-inbound-stale/` directory (NOT silently deleted — the\n * payload pointer is preserved for forensics), returning the count moved.\n *\n * ENG-6289: no longer called on wedge respawn — the wedge path parks instead\n * (see `parkPendingInbound` above; blanket dead-letter permanently dropped the\n * user's message). Kept as the explicit \"move everything aside\" seam for tests\n * and operator emergencies. The stale dir does not end in `-pending-inbound`,\n * so neither the probe nor this scan re-counts moved markers.\n */\n/**\n * ENG-6289: park-not-drop. On a force-fresh wedge respawn, KEEP undrained\n * pending-inbound markers in their live dirs instead of dead-lettering them —\n * the fresh session's orient hook surfaces them (\"N queued messages\" + details)\n * and ENG-5969 replay (when enabled) re-pushes their payloads. Markers are NOT\n * rewritten (no counter, no mtime bump): the ENG-6160 pre-session exclusion in\n * `oldestLivePendingInboundMtimeMs` already keeps an untouched parked marker\n * out of the fresh session's wedge signal, and re-delivery stays bounded by\n * the existing machinery — the channel-side `replay_count` cap (≤3) and the\n * orphan sweep's received_at TTL. A manager-side rewrite would be the first\n * cross-process writer into marker files, where a torn read in the channel\n * sweep DELETES the marker (`unlinkSync` on parse failure) — the exact drop\n * this function exists to prevent.\n *\n * Only markers already flagged `undeliverable: true` are dead-lettered (moved\n * to `-stale`) — the channel already gave the user the ⏳ notice for those, so\n * nothing can ever drain them. Malformed markers are LEFT IN PLACE, matching\n * the live-scan philosophy above (a corrupt marker must never mask — or\n * become — a dropped message).\n *\n * The msteams dir is skipped wholesale: its top-level files are raw Bot\n * Framework activity payloads (the transport queue, not bookkeeping — real\n * markers live in the hidden `.markers/` subdir this scan never touches), and\n * the teams channel server's boot drain redelivers them to the fresh session\n * on its own. Moving them aside (what the pre-ENG-6289 dead-letter did) was\n * actively defeating the one channel with native respawn recovery.\n */\nexport interface ParkPendingInboundResult {\n  parked: number;\n  deadLettered: number;\n}\n\n/**\n * Move one marker into the sibling `-stale` dead-letter dir (moved, not\n * deleted — preserved for forensics). Returns true on success; best-effort —\n * a marker that vanished or can't move is left as-is.\n */\nfunction moveMarkerToStale(dir: string, deadDir: string, name: string): boolean {\n  try {\n    mkdirSync(deadDir, { recursive: true });\n    renameSync(join(dir, name), join(deadDir, name));\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function parkPendingInbound(codeName: string, _now: Date = new Date()): ParkPendingInboundResult {\n  const home = dirname(paneLogPath(codeName));\n  const result: ParkPendingInboundResult = { parked: 0, deadLettered: 0 };\n  let entries;\n  try {\n    entries = readdirSync(home, { withFileTypes: true });\n  } catch {\n    return result;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    if (entry.name === 'msteams-pending-inbound') continue; // transport queue — boot drain owns recovery\n    const dir = join(home, entry.name);\n    const deadDir = join(home, `${entry.name}-stale`);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      const flags = readMarkerFlags(join(dir, file.name));\n      if (flags === null) continue; // drained mid-scan — already gone\n      // Only undeliverable markers dead-letter. Discretionary markers\n      // (ENG-6319) PARK like engaged ones — they may be a real operator\n      // message awaiting a reply (the live silent-loss class); malformed\n      // markers park too (corrupt must never become a drop).\n      if (flags !== 'malformed' && flags.undeliverable) {\n        if (moveMarkerToStale(dir, deadDir, file.name)) result.deadLettered++;\n      } else {\n        result.parked++;\n      }\n    }\n  }\n  return result;\n}\n\nexport function deadLetterPendingInbound(codeName: string, _now: Date = new Date()): number {\n  const home = dirname(paneLogPath(codeName));\n  let moved = 0;\n  let entries;\n  try {\n    entries = readdirSync(home, { withFileTypes: true });\n  } catch {\n    return 0;\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory() || !entry.name.endsWith('-pending-inbound')) continue;\n    const dir = join(home, entry.name);\n    const deadDir = join(home, `${entry.name}-stale`);\n    let files;\n    try {\n      files = readdirSync(dir, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const file of files) {\n      if (!file.isFile() || file.name.startsWith('.')) continue;\n      if (moveMarkerToStale(dir, deadDir, file.name)) moved++;\n    }\n  }\n  return moved;\n}\n\n/**\n * Compute the pane.log age for each agent. Missing or unreadable\n * pane.log returns null — the caller should drop those entries\n * rather than fabricate a \"fresh\" or \"ancient\" value. A missing\n * file means the agent has never spawned in this manager generation,\n * which is a separate problem covered by SessionAliveAgeSeconds.\n */\nexport function collectResponsivenessProbes(\n  codeNames: string[],\n  now: Date = new Date(),\n): ResponsivenessProbeResult[] {\n  const nowMs = now.getTime();\n  const results: ResponsivenessProbeResult[] = [];\n  for (const codeName of codeNames) {\n    try {\n      const panePath = paneLogPath(codeName);\n      const mtimeMs = statSync(panePath).mtimeMs;\n      const ageSeconds = Math.max(0, Math.floor((nowMs - mtimeMs) / 1000));\n      const result: ResponsivenessProbeResult = {\n        code_name: codeName,\n        pane_activity_age_seconds: ageSeconds,\n      };\n      // ENG-6017: piggyback the pending-inbound drain-age scan on the same\n      // cadence. Field omitted (not 0) when there are no markers.\n      const oldestMarkerMs = oldestPendingInboundMtimeMs(dirname(panePath));\n      if (oldestMarkerMs !== null) {\n        result.pending_inbound_oldest_age_seconds = Math.max(\n          0,\n          Math.floor((nowMs - oldestMarkerMs) / 1000),\n        );\n      }\n      // ENG-6327: read + RESET the per-channel deflection counters on the same\n      // cadence so each cause's frequency reaches CloudWatch (ChannelDeflections,\n      // Cause dimension). Omitted when there were none this window.\n      const deflections = readAndResetChannelDeflections(dirname(panePath));\n      if (deflections) {\n        result.deflections = deflections;\n      }\n      // ENG-6408 / ADR-0024 Slice 1.5: read + RESET the shadow lane-classification\n      // counters on the same cadence so the classification mix (and the\n      // misclassification canary) reaches CloudWatch. Omitted when none this window.\n      const laneClassifications = readAndResetChannelLaneClassifications(dirname(panePath));\n      if (laneClassifications) {\n        result.lane_classifications = laneClassifications;\n      }\n      // WS0: read + RESET the shadow reply-target counters on the same cadence so\n      // the cross-thread classification mix reaches CloudWatch. Omitted when none.\n      const replyTargetClassifications = readAndResetSlackReplyTargetClassifications(\n        dirname(panePath),\n      );\n      if (replyTargetClassifications) {\n        result.slack_reply_target_classifications = replyTargetClassifications;\n      }\n      // WS2: read + RESET the shadow reply-binding counters on the same cadence\n      // so the bound / coords_corrected / unknown_target mix (the enforce-flip\n      // gate) reaches CloudWatch. Omitted when none this window.\n      const replyBindingClassifications = readAndResetSlackReplyBindingClassifications(\n        dirname(panePath),\n      );\n      if (replyBindingClassifications) {\n        result.slack_reply_binding_classifications = replyBindingClassifications;\n      }\n      results.push(result);\n    } catch {\n      // No pane.log yet (fresh agent, never spawned) — skip. The\n      // session-alive monitor already covers the \"should be running\n      // but isn't\" case.\n    }\n  }\n  return results;\n}\n"],"mappings":";;;;;;AAmCA,SAAS,WAAW,aAAa,cAAc,YAAY,UAAU,kBAAkB;AACvF,SAAS,SAAS,YAAY;AAkD9B,IAAM,4BAA4B;AAClC,IAAM,0BAA0B;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AACF;AAgBO,SAAS,+BACd,cAC+B;AAC/B,MAAI;AACJ,MAAI;AACF,YAAQ,YAAY,YAAY;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,QAAgC,CAAC;AACvC,MAAI,MAAM;AACV,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,KAAK,SAAS,yBAAyB,EAAG;AAC/C,UAAM,OAAO,KAAK,cAAc,IAAI;AACpC,UAAM,YAAY,GAAG,IAAI;AACzB,QAAI;AACF,iBAAW,MAAM,SAAS;AAAA,IAC5B,QAAQ;AACN;AAAA,IACF;AACA,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,aAAa,WAAW,MAAM,CAAC;AACzD,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,mBAAW,SAAS,yBAAyB;AAC3C,gBAAM,IAAI,OAAO,KAAK;AACtB,cAAI,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,KAAK,IAAI,GAAG;AACxD,kBAAM,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,MAAM,CAAC;AACjD,kBAAM;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,QAAI;AACF,iBAAW,SAAS;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,MAAM,QAAQ;AACvB;AAYA,IAAM,qCAAqC;AAC3C,IAAM,kCAAkC;AACxC,IAAM,cAAc,oBAAI,IAAI,CAAC,kBAAkB,aAAa,UAAU,CAAC;AACvE,IAAM,qBAAqB,oBAAI,IAAI,CAAC,SAAS,YAAY,WAAW,aAAa,CAAC;AAOlF,SAAS,6BAA6B,KAAsB;AAC1D,MAAI,QAAQ,gCAAiC,QAAO;AACpD,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,MAAM,cAAc,MAAM,IAAI;AACrC,SACE,YAAY,IAAI,IAAI,MACnB,iBAAiB,UAAU,iBAAiB,YAC7C,mBAAmB,IAAI,MAAM;AAEjC;AAUO,SAAS,uCACd,cAC+B;AAC/B,MAAI;AACJ,MAAI;AACF,YAAQ,YAAY,YAAY;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,QAAgC,CAAC;AACvC,MAAI,MAAM;AACV,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,KAAK,SAAS,kCAAkC,EAAG;AACxD,UAAM,OAAO,KAAK,cAAc,IAAI;AACpC,UAAM,YAAY,GAAG,IAAI;AACzB,QAAI;AACF,iBAAW,MAAM,SAAS;AAAA,IAC5B,QAAQ;AACN;AAAA,IACF;AACA,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,aAAa,WAAW,MAAM,CAAC;AACzD,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,mBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,cAAI,CAAC,6BAA6B,GAAG,EAAG;AACxC,cAAI,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,KAAK,MAAM,GAAG;AAC9D,kBAAM,GAAG,KAAK,MAAM,GAAG,KAAK,KAAK,KAAK,MAAM,GAAG;AAC/C,kBAAM;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,QAAI;AACF,iBAAW,SAAS;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,MAAM,QAAQ;AACvB;AAYA,IAAM,6CAA6C;AACnD,IAAM,6BAA6B,oBAAI,IAAI;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACD,IAAM,+BAA+B,oBAAI,IAAI,CAAC,KAAK,KAAK,KAAK,OAAO,CAAC;AAOrE,SAAS,sBAAsB,KAAsB;AACnD,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,QAAQ,MAAM,IAAI;AACzB,SAAO,2BAA2B,IAAI,MAAM,KAAK,6BAA6B,IAAI,MAAM;AAC1F;AAUO,SAAS,4CACd,cAC+B;AAC/B,MAAI;AACJ,MAAI;AACF,YAAQ,YAAY,YAAY;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,QAAgC,CAAC;AACvC,MAAI,MAAM;AACV,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,KAAK,SAAS,0CAA0C,EAAG;AAChE,UAAM,OAAO,KAAK,cAAc,IAAI;AACpC,UAAM,YAAY,GAAG,IAAI;AACzB,QAAI;AACF,iBAAW,MAAM,SAAS;AAAA,IAC5B,QAAQ;AACN;AAAA,IACF;AACA,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,aAAa,WAAW,MAAM,CAAC;AACzD,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,mBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,cAAI,CAAC,sBAAsB,GAAG,EAAG;AACjC,cAAI,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,KAAK,MAAM,GAAG;AAC9D,kBAAM,GAAG,KAAK,MAAM,GAAG,KAAK,KAAK,KAAK,MAAM,GAAG;AAC/C,kBAAM;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,QAAI;AACF,iBAAW,SAAS;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,MAAM,QAAQ;AACvB;AASA,IAAM,8CAA8C;AACpD,IAAM,2BAA2B,oBAAI,IAAI;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AACF,CAAC;AASM,SAAS,6CACd,cAC+B;AAC/B,MAAI;AACJ,MAAI;AACF,YAAQ,YAAY,YAAY;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,QAAgC,CAAC;AACvC,MAAI,MAAM;AACV,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,KAAK,SAAS,2CAA2C,EAAG;AACjE,UAAM,OAAO,KAAK,cAAc,IAAI;AACpC,UAAM,YAAY,GAAG,IAAI;AACzB,QAAI;AACF,iBAAW,MAAM,SAAS;AAAA,IAC5B,QAAQ;AACN;AAAA,IACF;AACA,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,aAAa,WAAW,MAAM,CAAC;AACzD,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,mBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,cAAI,CAAC,yBAAyB,IAAI,GAAG,EAAG;AACxC,cAAI,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,KAAK,MAAM,GAAG;AAC9D,kBAAM,GAAG,KAAK,MAAM,GAAG,KAAK,KAAK,KAAK,MAAM,GAAG;AAC/C,kBAAM;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,QAAI;AACF,iBAAW,SAAS;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,MAAM,QAAQ;AACvB;AAWA,IAAM,sBAAsB,KAAK;AAE1B,SAAS,8BAAsC;AACpD,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,SAAS,OAAO,SAAS,KAAK,EAAE;AACtC,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS;AAC1D;AAoBA,SAAS,4BAA4B,cAAqC;AACxE,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI;AACF,cAAM,UAAU,SAAS,KAAK,KAAK,KAAK,IAAI,CAAC,EAAE;AAC/C,YAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,MACpD,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAyBA,SAAS,gBAAgB,YAAsD;AAC7E,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;AAI1D,WAAO;AAAA,MACL,eAAe,QAAQ,kBAAkB;AAAA,MACzC,eAAe,QAAQ,kBAAkB;AAAA,IAC3C;AAAA,EACF,SAAS,OAAO;AACd,WAAQ,MAAgC,SAAS,WAAW,OAAO;AAAA,EACrE;AACF;AAsBO,SAAS,gCACd,cACA,OAA2C,CAAC,GAC7B;AACf,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,MAAI,SAAwB;AAC5B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,cAAc,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,cAAc,MAAM,IAAI;AACzC,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,YAAM,OAAO,KAAK,KAAK,KAAK,IAAI;AAChC,UAAI;AACJ,UAAI;AACF,kBAAU,SAAS,IAAI,EAAE;AAAA,MAC3B,QAAQ;AACN;AAAA,MACF;AACA,UAAI,mBAAmB,QAAQ,UAAU,eAAgB;AACzD,YAAM,QAAQ,gBAAgB,IAAI;AAClC,UAAI,UAAU,KAAM;AACpB,UAAI,UAAU,gBAAgB,MAAM,iBAAiB,MAAM,eAAgB;AAC3E,UAAI,WAAW,QAAQ,UAAU,OAAQ,UAAS;AAAA,IACpD;AAAA,EACF;AACA,SAAO;AACT;AAQO,SAAS,mCACd,UACA,gBACA,MAAY,oBAAI,KAAK,GACN;AACf,QAAM,SAAS,gCAAgC,QAAQ,YAAY,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;AACjG,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO,KAAK,IAAI,GAAG,KAAK,OAAO,IAAI,QAAQ,IAAI,UAAU,GAAI,CAAC;AAChE;AAkDA,SAAS,kBAAkB,KAAa,SAAiB,MAAuB;AAC9E,MAAI;AACF,cAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,eAAW,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC;AAC/C,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAmB,UAAkB,OAAa,oBAAI,KAAK,GAA6B;AACtG,QAAM,OAAO,QAAQ,YAAY,QAAQ,CAAC;AAC1C,QAAM,SAAmC,EAAE,QAAQ,GAAG,cAAc,EAAE;AACtE,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,QAAI,MAAM,SAAS,0BAA2B;AAC9C,UAAM,MAAM,KAAK,MAAM,MAAM,IAAI;AACjC,UAAM,UAAU,KAAK,MAAM,GAAG,MAAM,IAAI,QAAQ;AAChD,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,YAAM,QAAQ,gBAAgB,KAAK,KAAK,KAAK,IAAI,CAAC;AAClD,UAAI,UAAU,KAAM;AAKpB,UAAI,UAAU,eAAe,MAAM,eAAe;AAChD,YAAI,kBAAkB,KAAK,SAAS,KAAK,IAAI,EAAG,QAAO;AAAA,MACzD,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,UAAkB,OAAa,oBAAI,KAAK,GAAW;AAC1F,QAAM,OAAO,QAAQ,YAAY,QAAQ,CAAC;AAC1C,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,KAAK,SAAS,kBAAkB,EAAG;AACtE,UAAM,MAAM,KAAK,MAAM,MAAM,IAAI;AACjC,UAAM,UAAU,KAAK,MAAM,GAAG,MAAM,IAAI,QAAQ;AAChD,QAAI;AACJ,QAAI;AACF,cAAQ,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IAClD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,EAAG;AACjD,UAAI,kBAAkB,KAAK,SAAS,KAAK,IAAI,EAAG;AAAA,IAClD;AAAA,EACF;AACA,SAAO;AACT;AASO,SAAS,4BACd,WACA,MAAY,oBAAI,KAAK,GACQ;AAC7B,QAAM,QAAQ,IAAI,QAAQ;AAC1B,QAAM,UAAuC,CAAC;AAC9C,aAAW,YAAY,WAAW;AAChC,QAAI;AACF,YAAM,WAAW,YAAY,QAAQ;AACrC,YAAM,UAAU,SAAS,QAAQ,EAAE;AACnC,YAAM,aAAa,KAAK,IAAI,GAAG,KAAK,OAAO,QAAQ,WAAW,GAAI,CAAC;AACnE,YAAM,SAAoC;AAAA,QACxC,WAAW;AAAA,QACX,2BAA2B;AAAA,MAC7B;AAGA,YAAM,iBAAiB,4BAA4B,QAAQ,QAAQ,CAAC;AACpE,UAAI,mBAAmB,MAAM;AAC3B,eAAO,qCAAqC,KAAK;AAAA,UAC/C;AAAA,UACA,KAAK,OAAO,QAAQ,kBAAkB,GAAI;AAAA,QAC5C;AAAA,MACF;AAIA,YAAM,cAAc,+BAA+B,QAAQ,QAAQ,CAAC;AACpE,UAAI,aAAa;AACf,eAAO,cAAc;AAAA,MACvB;AAIA,YAAM,sBAAsB,uCAAuC,QAAQ,QAAQ,CAAC;AACpF,UAAI,qBAAqB;AACvB,eAAO,uBAAuB;AAAA,MAChC;AAGA,YAAM,6BAA6B;AAAA,QACjC,QAAQ,QAAQ;AAAA,MAClB;AACA,UAAI,4BAA4B;AAC9B,eAAO,qCAAqC;AAAA,MAC9C;AAIA,YAAM,8BAA8B;AAAA,QAClC,QAAQ,QAAQ;AAAA,MAClB;AACA,UAAI,6BAA6B;AAC/B,eAAO,sCAAsC;AAAA,MAC/C;AACA,cAAQ,KAAK,MAAM;AAAA,IACrB,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.301",
+  "version": "0.28.303",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {