@integrity-labs/agt-cli 0.28.330 → 0.28.332

package/dist/mcp/telegram-channel.js

@@ -14518,26 +14518,26 @@ var StdioServerTransport = class {
 
 // src/telegram-channel.ts
 import https from "https";
-import { createHash, randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash2, randomUUID as randomUUID3 } from "crypto";
 import {
   closeSync,
   createWriteStream,
-  existsSync as existsSync7,
+  existsSync as existsSync9,
   ftruncateSync,
-  mkdirSync as mkdirSync8,
+  mkdirSync as mkdirSync9,
   openSync,
-  readFileSync as readFileSync11,
-  readdirSync as readdirSync3,
+  readFileSync as readFileSync12,
+  readdirSync as readdirSync4,
   realpathSync,
-  renameSync as renameSync6,
+  renameSync as renameSync7,
   statSync as statSync2,
-  unlinkSync as unlinkSync6,
+  unlinkSync as unlinkSync7,
   watch,
-  writeFileSync as writeFileSync10,
+  writeFileSync as writeFileSync11,
   writeSync
 } from "fs";
 import { homedir as homedir4 } from "os";
-import { basename, extname, join as join10, resolve as resolve2 } from "path";
+import { basename, extname, join as join12, resolve as resolve2 } from "path";
 
 // src/channel-attachments.ts
 import { homedir } from "os";
@@ -17024,6 +17024,68 @@ function applyToChatMarkers(pendingDir, chatId, op, cutoffMs) {
   return applied;
 }
 
+// src/recovery-ledger.ts
+import { existsSync as existsSync6, unlinkSync as unlinkSync5 } from "fs";
+import { join as join8 } from "path";
+function recoveryLedgerEntryExists(ledgerDir, markerName, exists = (p) => existsSync6(p)) {
+  if (!ledgerDir || !markerName) return false;
+  if (markerName.includes("/") || markerName.includes("\\") || markerName.includes("..")) return false;
+  try {
+    return exists(join8(ledgerDir, markerName));
+  } catch {
+    return false;
+  }
+}
+function removeRecoveryLedgerEntry(ledgerDir, markerName, unlink = (p) => {
+  if (existsSync6(p)) unlinkSync5(p);
+}) {
+  if (!ledgerDir || !markerName) return;
+  if (markerName.includes("/") || markerName.includes("\\") || markerName.includes("..")) return;
+  try {
+    unlink(join8(ledgerDir, markerName));
+  } catch {
+  }
+}
+
+// src/inbound-delivery-ledger.ts
+import { existsSync as existsSync7, mkdirSync as mkdirSync7, readdirSync as readdirSync2, readFileSync as readFileSync9, renameSync as renameSync5, writeFileSync as writeFileSync8 } from "fs";
+import { join as join9 } from "path";
+function safeInboundId(inboundId) {
+  return inboundId.replace(/[^A-Za-z0-9_-]/g, "_");
+}
+var defaultDeps = {
+  mkdir: (dir) => mkdirSync7(dir, { recursive: true }),
+  writeFile: (path, data) => writeFileSync8(path, data, "utf8"),
+  rename: (from, to) => renameSync5(from, to),
+  readdir: (dir) => readdirSync2(dir),
+  readFile: (path) => readFileSync9(path, "utf8"),
+  exists: (path) => existsSync7(path)
+};
+function writeInboundDeliveryLedgerEntry(dir, record2, deps = defaultDeps) {
+  if (!dir || !record2.inbound_id || !record2.conv_key) return;
+  const safe = safeInboundId(record2.inbound_id);
+  if (!safe || safe.includes("/") || safe.includes("\\") || safe.includes("..")) return;
+  try {
+    deps.mkdir(dir);
+    const final = join9(dir, `${safe}.json`);
+    const tmp = `${final}.tmp`;
+    deps.writeFile(tmp, JSON.stringify(record2));
+    deps.rename(tmp, final);
+  } catch {
+  }
+}
+
+// src/channel-inbound-id.ts
+import { createHash } from "crypto";
+var INBOUND_ID_HEX_LEN = 12;
+function hashInboundId(payload) {
+  const digest = createHash("sha256").update(payload).digest("hex").slice(0, INBOUND_ID_HEX_LEN);
+  return `ib_${digest}`;
+}
+function telegramInboundId(chatId, messageId) {
+  return hashInboundId(`${chatId}|${messageId}`);
+}
+
 // src/channel-progress.ts
 function channelLiveProgressEnabled() {
   return resolveHostBooleanFlag({
@@ -17208,14 +17270,14 @@ function createKanbanCardActiveClient(args) {
 
 // src/mcp-spawn-lock.ts
 import {
-  existsSync as existsSync6,
-  mkdirSync as mkdirSync7,
-  readFileSync as readFileSync9,
-  renameSync as renameSync5,
-  unlinkSync as unlinkSync5,
-  writeFileSync as writeFileSync8
+  existsSync as existsSync8,
+  mkdirSync as mkdirSync8,
+  readFileSync as readFileSync10,
+  renameSync as renameSync6,
+  unlinkSync as unlinkSync6,
+  writeFileSync as writeFileSync9
 } from "fs";
-import { join as join8 } from "path";
+import { join as join10 } from "path";
 function defaultIsPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
   try {
@@ -17233,7 +17295,7 @@ function acquireMcpSpawnLock(args) {
   const isPidAlive = options.isPidAlive ?? defaultIsPidAlive;
   const selfPid = options.selfPid ?? process.pid;
   const now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-  const path = join8(agentDir, basename2);
+  const path = join10(agentDir, basename2);
   const existing = readLockHolder(path);
   if (existing) {
     if (existing.pid === selfPid) {
@@ -17243,11 +17305,11 @@ function acquireMcpSpawnLock(args) {
       return { kind: "blocked", path, holder: existing };
     }
   }
-  mkdirSync7(agentDir, { recursive: true, mode: 448 });
+  mkdirSync8(agentDir, { recursive: true, mode: 448 });
   const tmpPath = `${path}.${selfPid}.tmp`;
   const payload = { pid: selfPid, started_at: now() };
-  writeFileSync8(tmpPath, JSON.stringify(payload), { mode: 384 });
-  renameSync5(tmpPath, path);
+  writeFileSync9(tmpPath, JSON.stringify(payload), { mode: 384 });
+  renameSync6(tmpPath, path);
   return { kind: "acquired", path };
 }
 function releaseMcpSpawnLock(lockPath, opts = {}) {
@@ -17257,14 +17319,14 @@ function releaseMcpSpawnLock(lockPath, opts = {}) {
   if (!existing) return;
   if (existing.pid !== selfPid) return;
   try {
-    unlinkSync5(lockPath);
+    unlinkSync6(lockPath);
   } catch {
   }
 }
 function readLockHolder(path) {
-  if (!existsSync6(path)) return null;
+  if (!existsSync8(path)) return null;
   try {
-    const raw = readFileSync9(path, "utf8");
+    const raw = readFileSync10(path, "utf8");
     const parsed = JSON.parse(raw);
     const pid = typeof parsed.pid === "number" ? parsed.pid : Number(parsed.pid);
     if (!Number.isFinite(pid) || pid <= 0) return null;
@@ -17276,8 +17338,8 @@ function readLockHolder(path) {
 }
 
 // src/ack-reaction.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync10, writeFileSync as writeFileSync9 } from "fs";
-import { join as join9 } from "path";
+import { readdirSync as readdirSync3, readFileSync as readFileSync11, writeFileSync as writeFileSync10 } from "fs";
+import { join as join11 } from "path";
 var REPLY_WEDGED_THRESHOLD_MS = 5 * 60 * 1e3;
 var ACK_STARTUP_GRACE_MS = 6e4;
 var ACK_PANE_FRESH_THRESHOLD_MS = 6e4;
@@ -17350,7 +17412,7 @@ var GIVE_UP_SIGNAL_MAX_AGE_MS = 30 * 60 * 1e3;
 function readGiveUpSignal(path, now = Date.now()) {
   if (!path) return null;
   try {
-    const raw = JSON.parse(readFileSync10(path, "utf8"));
+    const raw = JSON.parse(readFileSync11(path, "utf8"));
     if (typeof raw.gave_up_at !== "string") return null;
     const t = Date.parse(raw.gave_up_at);
     if (!Number.isFinite(t) || t > now) return null;
@@ -17376,7 +17438,7 @@ function oldestPendingMarkerAgeMs(dir, now = Date.now(), opts) {
   if (!dir) return null;
   let names;
   try {
-    names = readdirSync2(dir);
+    names = readdirSync3(dir);
   } catch {
     return null;
   }
@@ -17385,7 +17447,7 @@ function oldestPendingMarkerAgeMs(dir, now = Date.now(), opts) {
     if (!name.endsWith(".json")) continue;
     let receivedAt;
     try {
-      const raw = JSON.parse(readFileSync10(join9(dir, name), "utf-8"));
+      const raw = JSON.parse(readFileSync11(join11(dir, name), "utf-8"));
       if (raw.discretionary === true) continue;
       if (!opts?.includeSeen && typeof raw.seen_at === "string" && raw.seen_at) continue;
       receivedAt = raw.received_at;
@@ -17453,20 +17515,20 @@ function isMarkerGenuinelyAged(receivedAt, nowMs, thresholdMs) {
 }
 var DEFLECTION_COUNTER_SUFFIX = "-deflections.json";
 function deflectionCounterPath(agentDir, channel) {
-  return join9(agentDir, `${channel}${DEFLECTION_COUNTER_SUFFIX}`);
+  return join11(agentDir, `${channel}${DEFLECTION_COUNTER_SUFFIX}`);
 }
 function recordChannelDeflection(agentDir, channel, cause) {
   if (!agentDir) return;
   const path = deflectionCounterPath(agentDir, channel);
   let counts = {};
   try {
-    const parsed = JSON.parse(readFileSync10(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync11(path, "utf-8"));
     if (parsed && typeof parsed === "object") counts = parsed;
   } catch {
   }
   counts[cause] = (counts[cause] ?? 0) + 1;
   try {
-    writeFileSync9(path, JSON.stringify(counts), { mode: 384 });
+    writeFileSync10(path, JSON.stringify(counts), { mode: 384 });
   } catch {
   }
 }
@@ -17537,11 +17599,11 @@ async function actuateHostRestart(opts) {
 
 // src/telegram-channel.ts
 function redactId(id) {
-  return createHash("sha256").update(String(id)).digest("hex").slice(0, 8);
+  return createHash2("sha256").update(String(id)).digest("hex").slice(0, 8);
 }
 var BOT_TOKEN = process.env.TELEGRAM_BOT_TOKEN;
 var AGENT_CODE_NAME = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
-var TELEGRAM_AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join10(homedir4(), ".augmented", AGENT_CODE_NAME) : null;
+var TELEGRAM_AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join12(homedir4(), ".augmented", AGENT_CODE_NAME) : null;
 var AGT_HOST = process.env.AGT_HOST ?? null;
 var AGT_API_KEY = process.env.AGT_API_KEY ?? null;
 var AGT_AGENT_ID = process.env.AGT_AGENT_ID ?? null;
@@ -17645,9 +17707,9 @@ if (!BOT_TOKEN) {
 var stderrLogStream = null;
 if (AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown") {
   try {
-    const logDir = join10(homedir4(), ".augmented", AGENT_CODE_NAME);
-    mkdirSync8(logDir, { recursive: true });
-    stderrLogStream = createWriteStream(join10(logDir, "telegram-channel-stderr.log"), {
+    const logDir = join12(homedir4(), ".augmented", AGENT_CODE_NAME);
+    mkdirSync9(logDir, { recursive: true });
+    stderrLogStream = createWriteStream(join12(logDir, "telegram-channel-stderr.log"), {
       flags: "a",
       mode: 384
     });
@@ -17926,7 +17988,7 @@ function scheduleBusyAck(chatId, messageId, arrivedWhileBusy) {
     let paneLogFreshAgeMs = null;
     if (AGENT_DIR) {
       try {
-        const paneMtimeMs = statSync2(join10(AGENT_DIR, "pane.log")).mtimeMs;
+        const paneMtimeMs = statSync2(join12(AGENT_DIR, "pane.log")).mtimeMs;
         paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
       } catch {
       }
@@ -17956,7 +18018,7 @@ function scheduleBusyAck(chatId, messageId, arrivedWhileBusy) {
 function __resetBusyAckNoticeThrottle() {
   lastBusyAckNoticeAt.clear();
 }
-var RESTART_FLAGS_DIR = join10(homedir4(), ".augmented", "restart-flags");
+var RESTART_FLAGS_DIR = join12(homedir4(), ".augmented", "restart-flags");
 function actuateHostRestartTelegram() {
   return actuateHostRestart({
     agtHost: AGT_HOST,
@@ -18338,10 +18400,10 @@ async function handleRestartCommand(opts) {
       writeTelegramRestartConfirm({ chat_id: opts.chatId, message_id: opts.messageId }, opts.requesterName);
     } else {
       writeTelegramRestartConfirm({ chat_id: opts.chatId, message_id: opts.messageId }, opts.requesterName);
-      if (!existsSync7(RESTART_FLAGS_DIR)) {
-        mkdirSync8(RESTART_FLAGS_DIR, { recursive: true });
+      if (!existsSync9(RESTART_FLAGS_DIR)) {
+        mkdirSync9(RESTART_FLAGS_DIR, { recursive: true });
       }
-      const flagPath = join10(RESTART_FLAGS_DIR, `${AGENT_CODE_NAME}.flag`);
+      const flagPath = join12(RESTART_FLAGS_DIR, `${AGENT_CODE_NAME}.flag`);
       const flag = {
         codeName: AGENT_CODE_NAME,
         source: "telegram",
@@ -18349,8 +18411,8 @@ async function handleRestartCommand(opts) {
         reply: { chat_id: opts.chatId, message_id: opts.messageId }
       };
       const tmpPath = `${flagPath}.${process.pid}.${randomUUID3()}.tmp`;
-      writeFileSync10(tmpPath, JSON.stringify(flag) + "\n", "utf8");
-      renameSync6(tmpPath, flagPath);
+      writeFileSync11(tmpPath, JSON.stringify(flag) + "\n", "utf8");
+      renameSync7(tmpPath, flagPath);
     }
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): /restart queued from chat ${redactId(opts.chatId)}
@@ -18747,14 +18809,16 @@ async function classifyRestartCommand(text) {
   if (!ours) return "verification_failed";
   return target === ours ? "act" : "ignore";
 }
-var AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join10(homedir4(), ".augmented", AGENT_CODE_NAME) : null;
-var PENDING_INBOUND_DIR = AGENT_DIR ? join10(AGENT_DIR, "telegram-pending-inbound") : null;
-var RECOVERY_OUTBOX_DIR = AGENT_DIR ? join10(AGENT_DIR, "telegram-recovery-outbox") : null;
-var RESTART_CONFIRM_FILE = AGENT_DIR ? join10(AGENT_DIR, "telegram-restart-confirm.json") : null;
+var AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join12(homedir4(), ".augmented", AGENT_CODE_NAME) : null;
+var PENDING_INBOUND_DIR = AGENT_DIR ? join12(AGENT_DIR, "telegram-pending-inbound") : null;
+var RECOVERY_OUTBOX_DIR = AGENT_DIR ? join12(AGENT_DIR, "telegram-recovery-outbox") : null;
+var RECOVERY_LEDGER_DIR = AGENT_DIR ? join12(AGENT_DIR, ".agt-telegram-recovery-ledger") : null;
+var DELIVERY_LEDGER_DIR = AGENT_DIR ? join12(AGENT_DIR, ".agt-inbound-delivery-ledger") : null;
+var RESTART_CONFIRM_FILE = AGENT_DIR ? join12(AGENT_DIR, "telegram-restart-confirm.json") : null;
 var TELEGRAM_PROCESS_BOOT_MS = Date.now();
-var TELEGRAM_RECENT_DMS_FILE = AGENT_DIR ? join10(AGENT_DIR, "telegram-recent-dms.json") : null;
-var TELEGRAM_CHANNEL_ADD_RESTART_FILE = AGENT_DIR ? join10(AGENT_DIR, "telegram-channel-add-restart.json") : null;
-var TELEGRAM_OFFSET_FILE = AGENT_DIR ? join10(AGENT_DIR, "telegram-getupdates-offset.json") : null;
+var TELEGRAM_RECENT_DMS_FILE = AGENT_DIR ? join12(AGENT_DIR, "telegram-recent-dms.json") : null;
+var TELEGRAM_CHANNEL_ADD_RESTART_FILE = AGENT_DIR ? join12(AGENT_DIR, "telegram-channel-add-restart.json") : null;
+var TELEGRAM_OFFSET_FILE = AGENT_DIR ? join12(AGENT_DIR, "telegram-getupdates-offset.json") : null;
 var recentDms = /* @__PURE__ */ new Map();
 var recentDmPersister = TELEGRAM_RECENT_DMS_FILE ? createRecentDmPersister({
   filePath: TELEGRAM_RECENT_DMS_FILE,
@@ -18809,7 +18873,7 @@ function safeMarkerName(chatId, messageId) {
 }
 function pendingInboundPath(chatId, messageId) {
   if (!PENDING_INBOUND_DIR) return null;
-  return join10(PENDING_INBOUND_DIR, safeMarkerName(chatId, messageId));
+  return join12(PENDING_INBOUND_DIR, safeMarkerName(chatId, messageId));
 }
 function writePendingInboundMarker(chatId, messageId, chatType, undeliverable = false, payload) {
   const path = pendingInboundPath(chatId, messageId);
@@ -18819,6 +18883,8 @@ function writePendingInboundMarker(chatId, messageId, chatType, undeliverable =
     message_id: messageId,
     chat_type: chatType,
     received_at: (/* @__PURE__ */ new Date()).toISOString(),
+    // ENG-7806 (fm1): stamp the deterministic inbound id (marker-semantics-neutral).
+    inbound_id: telegramInboundId(chatId, messageId),
     // Only persist the flag when set — keeps healthy-path markers byte-identical.
     ...undeliverable ? { undeliverable: true } : {},
     // ENG-5969: carry the replay payload only when provided (the durable-replay
@@ -18826,8 +18892,8 @@ function writePendingInboundMarker(chatId, messageId, chatType, undeliverable =
     ...payload ? { payload } : {}
   };
   try {
-    mkdirSync8(PENDING_INBOUND_DIR, { recursive: true, mode: 448 });
-    writeFileSync10(path, JSON.stringify(marker), { mode: 384 });
+    mkdirSync9(PENDING_INBOUND_DIR, { recursive: true, mode: 448 });
+    writeFileSync11(path, JSON.stringify(marker), { mode: 384 });
   } catch (err) {
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): pending-inbound marker write failed: ${err.message}
@@ -18855,7 +18921,7 @@ function rewriteTelegramMarkerInPlace(path, marker) {
 function clearTelegramMarkerFileWithHeal(fullPath) {
   let marker = null;
   try {
-    marker = JSON.parse(readFileSync11(fullPath, "utf-8"));
+    marker = JSON.parse(readFileSync12(fullPath, "utf-8"));
   } catch {
   }
   if (marker && decideRecoveryHeal({
@@ -18865,14 +18931,14 @@ function clearTelegramMarkerFileWithHeal(fullPath) {
     notifyBackOnline(marker.chat_id);
   }
   try {
-    if (existsSync7(fullPath)) unlinkSync6(fullPath);
+    if (existsSync9(fullPath)) unlinkSync7(fullPath);
   } catch {
   }
 }
 function markTelegramMarkerSeenInPlace(fullPath) {
   let marker;
   try {
-    marker = JSON.parse(readFileSync11(fullPath, "utf-8"));
+    marker = JSON.parse(readFileSync12(fullPath, "utf-8"));
   } catch {
     return;
   }
@@ -18884,7 +18950,7 @@ function markTelegramMarkerSeenInPlace(fullPath) {
 function markTelegramMarkerSeenWithHeal(fullPath) {
   let marker = null;
   try {
-    marker = JSON.parse(readFileSync11(fullPath, "utf-8"));
+    marker = JSON.parse(readFileSync12(fullPath, "utf-8"));
   } catch {
     return;
   }
@@ -18898,9 +18964,9 @@ function markTelegramMarkerSeenWithHeal(fullPath) {
 }
 function readPendingInboundMarker(chatId, messageId) {
   const path = pendingInboundPath(chatId, messageId);
-  if (!path || !existsSync7(path)) return null;
+  if (!path || !existsSync9(path)) return null;
   try {
-    return JSON.parse(readFileSync11(path, "utf-8"));
+    return JSON.parse(readFileSync12(path, "utf-8"));
   } catch {
     return null;
   }
@@ -18920,10 +18986,10 @@ function nextRetryName(filename) {
 async function processRecoveryOutboxFile(filename) {
   if (!RECOVERY_OUTBOX_DIR) return;
   if (filename.endsWith(".poison.json") || filename.endsWith(".tmp")) return;
-  const fullPath = join10(RECOVERY_OUTBOX_DIR, filename);
+  const fullPath = join12(RECOVERY_OUTBOX_DIR, filename);
   let payload;
   try {
-    const raw = readFileSync11(fullPath, "utf-8");
+    const raw = readFileSync12(fullPath, "utf-8");
     payload = JSON.parse(raw);
   } catch (err) {
     process.stderr.write(
@@ -18931,7 +18997,7 @@ async function processRecoveryOutboxFile(filename) {
 `
     );
     try {
-      renameSync6(fullPath, `${fullPath}.parse-error.poison`);
+      renameSync7(fullPath, `${fullPath}.parse-error.poison`);
     } catch {
     }
     return;
@@ -18941,8 +19007,9 @@ async function processRecoveryOutboxFile(filename) {
       `telegram-channel(${AGENT_CODE_NAME}): recovery outbox malformed (${filename}): missing chat_id or text
 `
     );
+    removeRecoveryLedgerEntry(RECOVERY_LEDGER_DIR, payload.marker_name);
     try {
-      renameSync6(fullPath, `${fullPath}.malformed.poison`);
+      renameSync7(fullPath, `${fullPath}.malformed.poison`);
     } catch {
     }
     return;
@@ -18969,8 +19036,9 @@ async function processRecoveryOutboxFile(filename) {
     );
     if (decision.action === "suppress") {
       clearPendingMessage(payload.chat_id, recoveryDrainCutoffMs);
+      removeRecoveryLedgerEntry(RECOVERY_LEDGER_DIR, payload.marker_name);
       try {
-        unlinkSync6(fullPath);
+        unlinkSync7(fullPath);
       } catch {
       }
       return;
@@ -19005,8 +19073,9 @@ async function processRecoveryOutboxFile(filename) {
     );
   }
   if (sendSucceeded) {
+    removeRecoveryLedgerEntry(RECOVERY_LEDGER_DIR, payload.marker_name);
     try {
-      unlinkSync6(fullPath);
+      unlinkSync7(fullPath);
     } catch {
     }
     return;
@@ -19014,12 +19083,13 @@ async function processRecoveryOutboxFile(filename) {
   const next = nextRetryName(filename);
   if (next) {
     try {
-      renameSync6(fullPath, join10(RECOVERY_OUTBOX_DIR, next.next));
+      renameSync7(fullPath, join12(RECOVERY_OUTBOX_DIR, next.next));
       if (next.attempt >= MAX_RECOVERY_ATTEMPTS) {
         process.stderr.write(
           `telegram-channel(${AGENT_CODE_NAME}): ghost-reply recovery exhausted retries \u2014 moved to ${next.next}
 `
         );
+        removeRecoveryLedgerEntry(RECOVERY_LEDGER_DIR, payload.marker_name);
       }
     } catch {
     }
@@ -19045,7 +19115,7 @@ function scanRecoveryRetries() {
   if (!RECOVERY_OUTBOX_DIR) return;
   let entries;
   try {
-    entries = readdirSync3(RECOVERY_OUTBOX_DIR);
+    entries = readdirSync4(RECOVERY_OUTBOX_DIR);
   } catch {
     return;
   }
@@ -19054,7 +19124,7 @@ function scanRecoveryRetries() {
     if (!f.includes(".retry-") || f.endsWith(".poison.json")) continue;
     let mtimeMs;
     try {
-      mtimeMs = statSync2(join10(RECOVERY_OUTBOX_DIR, f)).mtimeMs;
+      mtimeMs = statSync2(join12(RECOVERY_OUTBOX_DIR, f)).mtimeMs;
     } catch {
       continue;
     }
@@ -19066,7 +19136,7 @@ function scanRecoveryRetries() {
 function startRecoveryOutboxWatcher() {
   if (!RECOVERY_OUTBOX_DIR) return;
   try {
-    mkdirSync8(RECOVERY_OUTBOX_DIR, { recursive: true, mode: 448 });
+    mkdirSync9(RECOVERY_OUTBOX_DIR, { recursive: true, mode: 448 });
   } catch (err) {
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): recovery outbox mkdir failed: ${err.message}
@@ -19075,7 +19145,7 @@ function startRecoveryOutboxWatcher() {
     return;
   }
   try {
-    for (const f of readdirSync3(RECOVERY_OUTBOX_DIR)) {
+    for (const f of readdirSync4(RECOVERY_OUTBOX_DIR)) {
       if (isFirstAttemptOutboxFile(f)) void processRecoveryOutboxFile(f);
     }
   } catch {
@@ -19084,7 +19154,7 @@ function startRecoveryOutboxWatcher() {
     const watcher = watch(RECOVERY_OUTBOX_DIR, (event, filename) => {
       if (event !== "rename" || !filename) return;
       if (!isFirstAttemptOutboxFile(filename)) return;
-      if (existsSync7(join10(RECOVERY_OUTBOX_DIR, filename))) {
+      if (existsSync9(join12(RECOVERY_OUTBOX_DIR, filename))) {
         void processRecoveryOutboxFile(filename);
       }
     });
@@ -19099,7 +19169,7 @@ function startRecoveryOutboxWatcher() {
   retryTimer.unref?.();
 }
 startRecoveryOutboxWatcher();
-var NOTICE_OUTBOX_DIR = AGENT_DIR ? join10(AGENT_DIR, "telegram-notice-outbox") : null;
+var NOTICE_OUTBOX_DIR = AGENT_DIR ? join12(AGENT_DIR, "telegram-notice-outbox") : null;
 var NOTICE_MAX_AGE_MS = 9e4;
 var NOTICE_INFLIGHT = /* @__PURE__ */ new Set();
 async function processNoticeOutboxFile(filename) {
@@ -19107,7 +19177,7 @@ async function processNoticeOutboxFile(filename) {
   if (filename.startsWith(".") || filename.endsWith(".tmp") || !filename.endsWith(".json")) return;
   if (NOTICE_INFLIGHT.has(filename)) return;
   NOTICE_INFLIGHT.add(filename);
-  const fullPath = join10(NOTICE_OUTBOX_DIR, filename);
+  const fullPath = join12(NOTICE_OUTBOX_DIR, filename);
   try {
     let mtimeMs;
     try {
@@ -19117,26 +19187,26 @@ async function processNoticeOutboxFile(filename) {
     }
     if (Date.now() - mtimeMs > NOTICE_MAX_AGE_MS) {
       try {
-        unlinkSync6(fullPath);
+        unlinkSync7(fullPath);
       } catch {
       }
       return;
     }
     let payload;
     try {
-      const parsed = JSON.parse(readFileSync11(fullPath, "utf-8"));
+      const parsed = JSON.parse(readFileSync12(fullPath, "utf-8"));
       if (!parsed || typeof parsed !== "object") throw new Error("not an object");
       payload = parsed;
     } catch {
       try {
-        unlinkSync6(fullPath);
+        unlinkSync7(fullPath);
       } catch {
       }
       return;
     }
     if (!payload.chat_id || !payload.text) {
       try {
-        unlinkSync6(fullPath);
+        unlinkSync7(fullPath);
       } catch {
       }
       return;
@@ -19147,7 +19217,7 @@ async function processNoticeOutboxFile(filename) {
       defaultValue: false
     })) {
       try {
-        unlinkSync6(fullPath);
+        unlinkSync7(fullPath);
       } catch {
       }
       return;
@@ -19176,7 +19246,7 @@ async function processNoticeOutboxFile(filename) {
       );
     }
     try {
-      unlinkSync6(fullPath);
+      unlinkSync7(fullPath);
     } catch {
     }
   } finally {
@@ -19186,7 +19256,7 @@ async function processNoticeOutboxFile(filename) {
 function startNoticeOutboxWatcher() {
   if (!NOTICE_OUTBOX_DIR) return;
   try {
-    mkdirSync8(NOTICE_OUTBOX_DIR, { recursive: true, mode: 448 });
+    mkdirSync9(NOTICE_OUTBOX_DIR, { recursive: true, mode: 448 });
   } catch (err) {
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): notice outbox mkdir failed: ${err.message}
@@ -19195,13 +19265,13 @@ function startNoticeOutboxWatcher() {
     return;
   }
   try {
-    for (const f of readdirSync3(NOTICE_OUTBOX_DIR)) void processNoticeOutboxFile(f);
+    for (const f of readdirSync4(NOTICE_OUTBOX_DIR)) void processNoticeOutboxFile(f);
   } catch {
   }
   try {
     const watcher = watch(NOTICE_OUTBOX_DIR, (event, filename) => {
       if (event !== "rename" || !filename) return;
-      if (existsSync7(join10(NOTICE_OUTBOX_DIR, filename))) void processNoticeOutboxFile(filename);
+      if (existsSync9(join12(NOTICE_OUTBOX_DIR, filename))) void processNoticeOutboxFile(filename);
     });
     watcher.unref?.();
   } catch (err) {
@@ -19218,10 +19288,10 @@ function trackPendingMessage(chatId, messageId, chatType, undeliverable = false,
 }
 function sweepTelegramStaleMarkers(thresholdMs) {
   if (!PENDING_INBOUND_DIR) return;
-  if (!existsSync7(PENDING_INBOUND_DIR)) return;
+  if (!existsSync9(PENDING_INBOUND_DIR)) return;
   let filenames;
   try {
-    filenames = readdirSync3(PENDING_INBOUND_DIR);
+    filenames = readdirSync4(PENDING_INBOUND_DIR);
   } catch (err) {
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): stale-marker readdir failed: ${err.message}
@@ -19234,17 +19304,17 @@ function sweepTelegramStaleMarkers(thresholdMs) {
   for (const filename of filenames) {
     if (!filename.endsWith(".json")) continue;
     if (filename.endsWith(".tmp")) continue;
-    const fullPath = join10(PENDING_INBOUND_DIR, filename);
+    const fullPath = join12(PENDING_INBOUND_DIR, filename);
     let marker;
     try {
-      marker = JSON.parse(readFileSync11(fullPath, "utf-8"));
+      marker = JSON.parse(readFileSync12(fullPath, "utf-8"));
     } catch (err) {
       process.stderr.write(
         `telegram-channel(${AGENT_CODE_NAME}): stale-marker parse failed for ${redactId(filename)}: ${err.message}
 `
       );
       try {
-        unlinkSync6(fullPath);
+        unlinkSync7(fullPath);
       } catch {
       }
       cleared++;
@@ -19262,7 +19332,7 @@ function sweepTelegramStaleMarkers(thresholdMs) {
         );
       }
       try {
-        unlinkSync6(fullPath);
+        unlinkSync7(fullPath);
       } catch {
       }
       cleared++;
@@ -19283,13 +19353,13 @@ var orphanSweepTimer = setInterval(() => {
   checkWatchdogGiveUpNotice();
 }, orphanSweepIntervalMs());
 orphanSweepTimer.unref?.();
-var TELEGRAM_PROGRESS_HEARTBEAT_PATH = AGENT_DIR ? join10(AGENT_DIR, "channel-progress-heartbeat.json") : null;
+var TELEGRAM_PROGRESS_HEARTBEAT_PATH = AGENT_DIR ? join12(AGENT_DIR, "channel-progress-heartbeat.json") : null;
 var telegramTrackedProgress = null;
 var telegramProgressTickRunning = false;
 function readTelegramProgressHeartbeat() {
-  if (!TELEGRAM_PROGRESS_HEARTBEAT_PATH || !existsSync7(TELEGRAM_PROGRESS_HEARTBEAT_PATH)) return null;
+  if (!TELEGRAM_PROGRESS_HEARTBEAT_PATH || !existsSync9(TELEGRAM_PROGRESS_HEARTBEAT_PATH)) return null;
   try {
-    return parseProgressHeartbeat(readFileSync11(TELEGRAM_PROGRESS_HEARTBEAT_PATH, "utf-8"));
+    return parseProgressHeartbeat(readFileSync12(TELEGRAM_PROGRESS_HEARTBEAT_PATH, "utf-8"));
   } catch {
     return null;
   }
@@ -19298,25 +19368,25 @@ function seedTelegramProgressHeartbeat() {
   if (!TELEGRAM_PROGRESS_HEARTBEAT_PATH) return;
   const tmp = `${TELEGRAM_PROGRESS_HEARTBEAT_PATH}.${process.pid}.tmp`;
   try {
-    writeFileSync10(tmp, serializeProgressHeartbeat(SEED_PROGRESS_STEP, Date.now()), { mode: 384 });
-    renameSync6(tmp, TELEGRAM_PROGRESS_HEARTBEAT_PATH);
+    writeFileSync11(tmp, serializeProgressHeartbeat(SEED_PROGRESS_STEP, Date.now()), { mode: 384 });
+    renameSync7(tmp, TELEGRAM_PROGRESS_HEARTBEAT_PATH);
   } catch {
     try {
-      unlinkSync6(tmp);
+      unlinkSync7(tmp);
     } catch {
     }
   }
 }
 function findTelegramProgressTarget() {
-  if (!PENDING_INBOUND_DIR || !existsSync7(PENDING_INBOUND_DIR)) return null;
+  if (!PENDING_INBOUND_DIR || !existsSync9(PENDING_INBOUND_DIR)) return null;
   let best = null;
   let bestMs = Infinity;
   try {
-    for (const name of readdirSync3(PENDING_INBOUND_DIR)) {
+    for (const name of readdirSync4(PENDING_INBOUND_DIR)) {
       if (!name.endsWith(".json")) continue;
       let m;
       try {
-        m = JSON.parse(readFileSync11(join10(PENDING_INBOUND_DIR, name), "utf-8"));
+        m = JSON.parse(readFileSync12(join12(PENDING_INBOUND_DIR, name), "utf-8"));
       } catch {
         continue;
       }
@@ -19440,14 +19510,14 @@ if (BOT_TOKEN && PENDING_INBOUND_DIR) {
 }
 var lastGiveUpHandledAtMs = null;
 function listPendingInboundChatIds() {
-  if (!PENDING_INBOUND_DIR || !existsSync7(PENDING_INBOUND_DIR)) return [];
+  if (!PENDING_INBOUND_DIR || !existsSync9(PENDING_INBOUND_DIR)) return [];
   const chats = /* @__PURE__ */ new Set();
   try {
-    for (const name of readdirSync3(PENDING_INBOUND_DIR)) {
+    for (const name of readdirSync4(PENDING_INBOUND_DIR)) {
       if (!name.endsWith(".json")) continue;
       try {
         const marker = JSON.parse(
-          readFileSync11(join10(PENDING_INBOUND_DIR, name), "utf8")
+          readFileSync12(join12(PENDING_INBOUND_DIR, name), "utf8")
         );
         if (typeof marker.seen_at === "string" && marker.seen_at) continue;
         if (typeof marker.chat_id === "string" && marker.chat_id) chats.add(marker.chat_id);
@@ -19489,7 +19559,7 @@ async function notifyWatchdogGiveUp(chatId, reason) {
 }
 function checkWatchdogGiveUpNotice() {
   if (!AGENT_DIR) return;
-  const signal = readGiveUpSignal(join10(AGENT_DIR, GIVE_UP_SIGNAL_FILENAME));
+  const signal = readGiveUpSignal(join12(AGENT_DIR, GIVE_UP_SIGNAL_FILENAME));
   const signalAtMs = signal?.atMs ?? null;
   const act = decideGiveUpNotice({
     signalAtMs,
@@ -19551,7 +19621,7 @@ async function deliverQueuedReply(p) {
   }
 }
 function clearPendingMessage(chatId, cutoffMs = Number.POSITIVE_INFINITY) {
-  if (!PENDING_INBOUND_DIR || !existsSync7(PENDING_INBOUND_DIR)) return;
+  if (!PENDING_INBOUND_DIR || !existsSync9(PENDING_INBOUND_DIR)) return;
   clearAllTelegramPendingMarkersForChat(
     PENDING_INBOUND_DIR,
     chatId,
@@ -19560,7 +19630,7 @@ function clearPendingMessage(chatId, cutoffMs = Number.POSITIVE_INFINITY) {
   );
 }
 function markSeenPendingMessage(chatId, cutoffMs = Number.POSITIVE_INFINITY) {
-  if (!PENDING_INBOUND_DIR || !existsSync7(PENDING_INBOUND_DIR)) return;
+  if (!PENDING_INBOUND_DIR || !existsSync9(PENDING_INBOUND_DIR)) return;
   markSeenAllTelegramPendingMarkersForChat(
     PENDING_INBOUND_DIR,
     chatId,
@@ -19845,7 +19915,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
           isError: true
         };
       }
-      bytes = readFileSync11(realPath);
+      bytes = readFileSync12(realPath);
     } catch (err) {
       return { content: [{ type: "text", text: `Failed to read file: ${err.message}` }], isError: true };
     }
@@ -19986,6 +20056,12 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
       if (name === "telegram.reply") {
         if (interim) markSeenPendingMessage(chat_id, drainCutoffMs);
         else clearPendingMessage(chat_id, drainCutoffMs);
+        writeInboundDeliveryLedgerEntry(DELIVERY_LEDGER_DIR, {
+          inbound_id: telegramInboundId(chat_id, reply_to_message_id ? String(reply_to_message_id) : ""),
+          source: "telegram",
+          conv_key: chat_id,
+          delivered_at: (/* @__PURE__ */ new Date()).toISOString()
+        });
       }
       return { content: [{ type: "text", text: "sent" }] };
     } catch (err) {
@@ -20386,13 +20462,13 @@ await mcp.connect(new StdioServerTransport());
 var REPLAY_SCAN_INTERVAL_MS = 6e4;
 async function replayPendingTelegramMarkers() {
   if (!channelReplayEnabled()) return;
-  if (!PENDING_INBOUND_DIR || !existsSync7(PENDING_INBOUND_DIR)) return;
+  if (!PENDING_INBOUND_DIR || !existsSync9(PENDING_INBOUND_DIR)) return;
   const probe = process.env.TMUX && AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? probeAgentSessionCached(AGENT_CODE_NAME) : { tmux: "unknown", claude: "unknown" };
   const sessionAlive = probe.tmux === "alive" && probe.claude === "alive";
   if (!sessionAlive) return;
   let filenames;
   try {
-    filenames = readdirSync3(PENDING_INBOUND_DIR);
+    filenames = readdirSync4(PENDING_INBOUND_DIR);
   } catch {
     return;
   }
@@ -20400,7 +20476,7 @@ async function replayPendingTelegramMarkers() {
   let paneFreshAgeMs = null;
   if (AGENT_DIR) {
     try {
-      paneFreshAgeMs = Math.max(0, now - statSync2(join10(AGENT_DIR, "pane.log")).mtimeMs);
+      paneFreshAgeMs = Math.max(0, now - statSync2(join12(AGENT_DIR, "pane.log")).mtimeMs);
     } catch {
     }
   }
@@ -20408,10 +20484,10 @@ async function replayPendingTelegramMarkers() {
   const entries = [];
   for (const name of filenames) {
     if (!name.endsWith(".json") || name.endsWith(".tmp")) continue;
-    const fullPath = join10(PENDING_INBOUND_DIR, name);
+    const fullPath = join12(PENDING_INBOUND_DIR, name);
     let marker;
     try {
-      marker = JSON.parse(readFileSync11(fullPath, "utf-8"));
+      marker = JSON.parse(readFileSync12(fullPath, "utf-8"));
     } catch {
       continue;
     }
@@ -20421,6 +20497,7 @@ async function replayPendingTelegramMarkers() {
   }
   entries.sort((a, b) => b.ageMs - a.ageMs);
   for (const { path, marker, ageMs } of entries) {
+    if (recoveryLedgerEntryExists(RECOVERY_LEDGER_DIR, basename(path))) continue;
     if (!shouldReplayMarker({
       enabled: true,
       hasPayload: Boolean(marker.payload),
@@ -20930,7 +21007,7 @@ async function pollLoop() {
         let paneLogFreshAgeMs = null;
         if (AGENT_DIR) {
           try {
-            const paneMtimeMs = statSync2(join10(AGENT_DIR, "pane.log")).mtimeMs;
+            const paneMtimeMs = statSync2(join12(AGENT_DIR, "pane.log")).mtimeMs;
             paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
           } catch {
           }