@integrity-labs/agt-cli 0.28.404 → 0.28.406

package/dist/mcp/direct-chat-channel.js

@@ -30279,10 +30279,14 @@ import {
   mkdirSync as mkdirSync4,
   readFileSync as readFileSync7,
   renameSync as renameSync4,
+  statSync,
   unlinkSync as unlinkSync2,
+  utimesSync,
   writeFileSync as writeFileSync5
 } from "fs";
 import { join as join7 } from "path";
+var STALE_LOCK_MS = 9e4;
+var HEARTBEAT_INTERVAL_MS = 3e4;
 function defaultIsPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
   try {
@@ -30300,6 +30304,9 @@ function acquireMcpSpawnLock(args) {
   const isPidAlive = options.isPidAlive ?? defaultIsPidAlive;
   const selfPid = options.selfPid ?? process.pid;
   const now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+  const nowMs = options.nowMs ?? (() => Date.now());
+  const lockMtimeMs = options.lockMtimeMs ?? defaultLockMtimeMs;
+  const staleMs = options.staleMs ?? STALE_LOCK_MS;
   const path = join7(agentDir, basename);
   const existing = readLockHolder(path);
   if (existing) {
@@ -30307,7 +30314,11 @@ function acquireMcpSpawnLock(args) {
       return { kind: "acquired", path };
     }
     if (isPidAlive(existing.pid)) {
-      return { kind: "blocked", path, holder: existing };
+      const mtime = lockMtimeMs(path);
+      const fresh = mtime !== null && nowMs() - mtime <= staleMs;
+      if (fresh) {
+        return { kind: "blocked", path, holder: existing };
+      }
     }
   }
   mkdirSync4(agentDir, { recursive: true, mode: 448 });
@@ -30328,6 +30339,38 @@ function releaseMcpSpawnLock(lockPath, opts = {}) {
   } catch {
   }
 }
+function refreshMcpSpawnLock(lockPath, opts = {}) {
+  if (!lockPath) return false;
+  const selfPid = opts.selfPid ?? process.pid;
+  const existing = readLockHolder(lockPath);
+  if (!existing || existing.pid !== selfPid) return false;
+  try {
+    const t = (opts.nowMs ?? (() => Date.now()))() / 1e3;
+    utimesSync(lockPath, t, t);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function startMcpSpawnLockHeartbeat(lockPath, opts = {}) {
+  if (!lockPath) return () => {
+  };
+  const intervalMs = opts.intervalMs ?? HEARTBEAT_INTERVAL_MS;
+  const handle = setInterval(() => {
+    if (!refreshMcpSpawnLock(lockPath, { selfPid: opts.selfPid })) {
+      clearInterval(handle);
+    }
+  }, intervalMs);
+  handle.unref?.();
+  return () => clearInterval(handle);
+}
+function defaultLockMtimeMs(path) {
+  try {
+    return statSync(path).mtimeMs;
+  } catch {
+    return null;
+  }
+}
 function readLockHolder(path) {
   if (!existsSync5(path)) return null;
   try {
@@ -30355,7 +30398,7 @@ import {
   existsSync as existsSync6,
   renameSync as renameSync5,
   unlinkSync as unlinkSync3,
-  statSync,
+  statSync as statSync2,
   createWriteStream
 } from "fs";
 
@@ -35186,6 +35229,17 @@ var FLAG_REGISTRY = [
     // call the flag evaluator) can gate the kanban_move `waiting` option. Also the
     // highest-precedence operator override, per ADR-0022.
     envVar: "AGT_KANBAN_WAITING_ENABLED"
+  },
+  {
+    key: "scheduled-task-nudge-durable",
+    description: 'Deliver the scheduled-task "work this card" nudge over the durable direct-chat notice rail instead of unverified tmux send-keys (ENG-8068, re-landing ENG-7971). When ON, routeScheduledTaskViaKanban enqueues the nudge via POST /host/scheduled-task/notify (kind:notice, push-and-consumed by the in-session MCP with a per-card consume-time revalidation) and closes the card + run on an enqueue failure, retiring the ENG-6351 orphaned-card gap where an unsubmitted keystroke left a scheduled task silently unrun. When OFF (default) the manager keeps the current tmux send-keys delivery, byte-for-byte as today. This is the kill switch: ENG-7971 was reverted once because the durable rail 500d on a session_id bug (fixed in ENG-8061); flip OFF to fall back to send-keys instantly without a code rollback if the durable path misbehaves. Resolved host-side by the manager via hostFlagStore().getBoolean (the manager evaluates the decision itself, so no spawn-env materialization is needed). Ships dark.',
+    flagType: "boolean",
+    // Declared safe value is `false`: the current, reverted-to send-keys delivery. Turning
+    // it ON activates the durable rail per org/host once operators are confident. `false`
+    // is also the fail-safe direction - a flag-DB read error must never silently switch a
+    // fleet onto the rail that broke prod twice. Net-new gate, so registry-only (ADR-0022);
+    // consumed by the manager's own logic, not an in-container MCP, so no env materialization.
+    defaultValue: false
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -35819,7 +35873,7 @@ function scheduleDirectChatBusyAck(sessionId, messageId, arrivedWhileBusy) {
     let paneLogFreshAgeMs = null;
     if (DIRECT_CHAT_CODE_NAME_AGENT_DIR) {
       try {
-        const paneMtimeMs = statSync(join10(DIRECT_CHAT_CODE_NAME_AGENT_DIR, "pane.log")).mtimeMs;
+        const paneMtimeMs = statSync2(join10(DIRECT_CHAT_CODE_NAME_AGENT_DIR, "pane.log")).mtimeMs;
         paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
       } catch {
       }
@@ -36045,6 +36099,7 @@ async function pollForMessages(sinceMs) {
   }
 }
 var acquiredLockPath = null;
+var stopLockHeartbeat = null;
 {
   const lockResult = acquireMcpSpawnLock({
     agentDir: DIRECT_CHAT_AGENT_DIR,
@@ -36058,6 +36113,7 @@ var acquiredLockPath = null;
     process.exit(0);
   } else if (lockResult.kind === "acquired") {
     acquiredLockPath = lockResult.path;
+    stopLockHeartbeat = startMcpSpawnLockHeartbeat(acquiredLockPath);
   }
 }
 var DOORBELL_ENABLED = resolveHostBooleanFlag({
@@ -36277,6 +36333,10 @@ function shutdown(reason) {
   }
   if (safetyNetTimer) clearInterval(safetyNetTimer);
   if (progressTickTimer) clearInterval(progressTickTimer);
+  try {
+    stopLockHeartbeat?.();
+  } catch {
+  }
   try {
     releaseMcpSpawnLock(acquiredLockPath);
   } catch {

package/dist/mcp/origami.js

@@ -40845,6 +40845,17 @@ var FLAG_REGISTRY = [
     // call the flag evaluator) can gate the kanban_move `waiting` option. Also the
     // highest-precedence operator override, per ADR-0022.
     envVar: "AGT_KANBAN_WAITING_ENABLED"
+  },
+  {
+    key: "scheduled-task-nudge-durable",
+    description: 'Deliver the scheduled-task "work this card" nudge over the durable direct-chat notice rail instead of unverified tmux send-keys (ENG-8068, re-landing ENG-7971). When ON, routeScheduledTaskViaKanban enqueues the nudge via POST /host/scheduled-task/notify (kind:notice, push-and-consumed by the in-session MCP with a per-card consume-time revalidation) and closes the card + run on an enqueue failure, retiring the ENG-6351 orphaned-card gap where an unsubmitted keystroke left a scheduled task silently unrun. When OFF (default) the manager keeps the current tmux send-keys delivery, byte-for-byte as today. This is the kill switch: ENG-7971 was reverted once because the durable rail 500d on a session_id bug (fixed in ENG-8061); flip OFF to fall back to send-keys instantly without a code rollback if the durable path misbehaves. Resolved host-side by the manager via hostFlagStore().getBoolean (the manager evaluates the decision itself, so no spawn-env materialization is needed). Ships dark.',
+    flagType: "boolean",
+    // Declared safe value is `false`: the current, reverted-to send-keys delivery. Turning
+    // it ON activates the durable rail per org/host once operators are confident. `false`
+    // is also the fail-safe direction - a flag-DB read error must never silently switch a
+    // fleet onto the rail that broke prod twice. Net-new gate, so registry-only (ADR-0022);
+    // consumed by the manager's own logic, not an in-container MCP, so no env materialization.
+    defaultValue: false
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/slack-channel.js

@@ -34764,6 +34764,17 @@ var FLAG_REGISTRY = [
     // call the flag evaluator) can gate the kanban_move `waiting` option. Also the
     // highest-precedence operator override, per ADR-0022.
     envVar: "AGT_KANBAN_WAITING_ENABLED"
+  },
+  {
+    key: "scheduled-task-nudge-durable",
+    description: 'Deliver the scheduled-task "work this card" nudge over the durable direct-chat notice rail instead of unverified tmux send-keys (ENG-8068, re-landing ENG-7971). When ON, routeScheduledTaskViaKanban enqueues the nudge via POST /host/scheduled-task/notify (kind:notice, push-and-consumed by the in-session MCP with a per-card consume-time revalidation) and closes the card + run on an enqueue failure, retiring the ENG-6351 orphaned-card gap where an unsubmitted keystroke left a scheduled task silently unrun. When OFF (default) the manager keeps the current tmux send-keys delivery, byte-for-byte as today. This is the kill switch: ENG-7971 was reverted once because the durable rail 500d on a session_id bug (fixed in ENG-8061); flip OFF to fall back to send-keys instantly without a code rollback if the durable path misbehaves. Resolved host-side by the manager via hostFlagStore().getBoolean (the manager evaluates the decision itself, so no spawn-env materialization is needed). Ships dark.',
+    flagType: "boolean",
+    // Declared safe value is `false`: the current, reverted-to send-keys delivery. Turning
+    // it ON activates the durable rail per org/host once operators are confident. `false`
+    // is also the fail-safe direction - a flag-DB read error must never silently switch a
+    // fleet onto the rail that broke prod twice. Net-new gate, so registry-only (ADR-0022);
+    // consumed by the manager's own logic, not an in-container MCP, so no env materialization.
+    defaultValue: false
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -36683,7 +36694,7 @@ import {
   readFileSync as readFileSync17,
   readdirSync as readdirSync5,
   renameSync as renameSync5,
-  statSync as statSync2,
+  statSync as statSync3,
   unlinkSync as unlinkSync7,
   watch,
   writeFileSync as writeFileSync13,
@@ -38494,10 +38505,14 @@ import {
   mkdirSync as mkdirSync8,
   readFileSync as readFileSync16,
   renameSync as renameSync4,
+  statSync as statSync2,
   unlinkSync as unlinkSync6,
+  utimesSync,
   writeFileSync as writeFileSync12
 } from "fs";
 import { join as join16 } from "path";
+var STALE_LOCK_MS = 9e4;
+var HEARTBEAT_INTERVAL_MS = 3e4;
 function defaultIsPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
   try {
@@ -38515,6 +38530,9 @@ function acquireMcpSpawnLock(args) {
   const isPidAlive = options.isPidAlive ?? defaultIsPidAlive;
   const selfPid = options.selfPid ?? process.pid;
   const now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+  const nowMs = options.nowMs ?? (() => Date.now());
+  const lockMtimeMs = options.lockMtimeMs ?? defaultLockMtimeMs;
+  const staleMs = options.staleMs ?? STALE_LOCK_MS;
   const path = join16(agentDir, basename2);
   const existing = readLockHolder(path);
   if (existing) {
@@ -38522,7 +38540,11 @@ function acquireMcpSpawnLock(args) {
       return { kind: "acquired", path };
     }
     if (isPidAlive(existing.pid)) {
-      return { kind: "blocked", path, holder: existing };
+      const mtime = lockMtimeMs(path);
+      const fresh = mtime !== null && nowMs() - mtime <= staleMs;
+      if (fresh) {
+        return { kind: "blocked", path, holder: existing };
+      }
     }
   }
   mkdirSync8(agentDir, { recursive: true, mode: 448 });
@@ -38543,6 +38565,38 @@ function releaseMcpSpawnLock(lockPath, opts = {}) {
   } catch {
   }
 }
+function refreshMcpSpawnLock(lockPath, opts = {}) {
+  if (!lockPath) return false;
+  const selfPid = opts.selfPid ?? process.pid;
+  const existing = readLockHolder(lockPath);
+  if (!existing || existing.pid !== selfPid) return false;
+  try {
+    const t = (opts.nowMs ?? (() => Date.now()))() / 1e3;
+    utimesSync(lockPath, t, t);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function startMcpSpawnLockHeartbeat(lockPath, opts = {}) {
+  if (!lockPath) return () => {
+  };
+  const intervalMs = opts.intervalMs ?? HEARTBEAT_INTERVAL_MS;
+  const handle = setInterval(() => {
+    if (!refreshMcpSpawnLock(lockPath, { selfPid: opts.selfPid })) {
+      clearInterval(handle);
+    }
+  }, intervalMs);
+  handle.unref?.();
+  return () => clearInterval(handle);
+}
+function defaultLockMtimeMs(path) {
+  try {
+    return statSync2(path).mtimeMs;
+  } catch {
+    return null;
+  }
+}
 function readLockHolder(path) {
   if (!existsSync9(path)) return null;
   try {
@@ -38858,7 +38912,7 @@ var liveAllowedUsersCache = null;
 function readLiveAllowedUsers() {
   if (!SLACK_MCP_CONFIG_PATH) return null;
   try {
-    const mtimeMs = statSync2(SLACK_MCP_CONFIG_PATH).mtimeMs;
+    const mtimeMs = statSync3(SLACK_MCP_CONFIG_PATH).mtimeMs;
     if (liveAllowedUsersCache && liveAllowedUsersCache.mtimeMs === mtimeMs) {
       return liveAllowedUsersCache.value;
     }
@@ -38879,7 +38933,7 @@ var livePingAllowedUsersCache = null;
 function readLivePingAllowedUsers() {
   if (!SLACK_MCP_CONFIG_PATH) return null;
   try {
-    const mtimeMs = statSync2(SLACK_MCP_CONFIG_PATH).mtimeMs;
+    const mtimeMs = statSync3(SLACK_MCP_CONFIG_PATH).mtimeMs;
     if (livePingAllowedUsersCache && livePingAllowedUsersCache.mtimeMs === mtimeMs) {
       return livePingAllowedUsersCache.value;
     }
@@ -39109,7 +39163,7 @@ function scheduleBusyAck(channel, threadTs, messageTs, isThreadReply, arrivedWhi
     let paneLogFreshAgeMs = null;
     if (SLACK_AGENT_DIR) {
       try {
-        const paneMtimeMs = statSync2(join17(SLACK_AGENT_DIR, "pane.log")).mtimeMs;
+        const paneMtimeMs = statSync3(join17(SLACK_AGENT_DIR, "pane.log")).mtimeMs;
         paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
       } catch {
       }
@@ -39376,7 +39430,7 @@ function scanSlackRecoveryRetries() {
     if (!f.includes(".retry-") || f.endsWith(".poison.json")) continue;
     let mtimeMs;
     try {
-      mtimeMs = statSync2(join17(SLACK_RECOVERY_OUTBOX_DIR, f)).mtimeMs;
+      mtimeMs = statSync3(join17(SLACK_RECOVERY_OUTBOX_DIR, f)).mtimeMs;
     } catch {
       continue;
     }
@@ -39433,7 +39487,7 @@ async function processSlackNoticeOutboxFile(filename) {
   try {
     let mtimeMs;
     try {
-      mtimeMs = statSync2(fullPath).mtimeMs;
+      mtimeMs = statSync3(fullPath).mtimeMs;
     } catch {
       return;
     }
@@ -41882,7 +41936,7 @@ ${result.formatted}` : "No messages in range, or the bot is not a member of this
     let bytes;
     let size;
     try {
-      const stat2 = statSync2(resolvedPath);
+      const stat2 = statSync3(resolvedPath);
       if (!stat2.isFile()) {
         return {
           content: [{ type: "text", text: `Upload refused: ${resolvedPath} is not a regular file.` }],
@@ -42673,7 +42727,7 @@ async function replayPendingSlackMarkers() {
   let paneFreshAgeMs = null;
   if (SLACK_AGENT_DIR) {
     try {
-      paneFreshAgeMs = Math.max(0, now - statSync2(join17(SLACK_AGENT_DIR, "pane.log")).mtimeMs);
+      paneFreshAgeMs = Math.max(0, now - statSync3(join17(SLACK_AGENT_DIR, "pane.log")).mtimeMs);
     } catch {
     }
   }
@@ -42785,6 +42839,7 @@ async function resolveUserEmail(userId) {
 var currentWs = null;
 var isShuttingDown = false;
 var acquiredLockPath = null;
+var stopLockHeartbeat = null;
 async function seedMutedChannelsFromApi() {
   try {
     const cfg = statusRuntimeConfig();
@@ -43263,7 +43318,7 @@ async function connectSocketMode() {
       let paneLogFreshAgeMs = null;
       if (SLACK_AGENT_DIR) {
         try {
-          const paneMtimeMs = statSync2(join17(SLACK_AGENT_DIR, "pane.log")).mtimeMs;
+          const paneMtimeMs = statSync3(join17(SLACK_AGENT_DIR, "pane.log")).mtimeMs;
           paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
         } catch {
         }
@@ -43498,6 +43553,10 @@ function shutdown(reason, exitCode = 0) {
     currentWs?.close();
   } catch {
   }
+  try {
+    stopLockHeartbeat?.();
+  } catch {
+  }
   try {
     releaseMcpSpawnLock(acquiredLockPath);
   } catch {
@@ -43527,6 +43586,7 @@ process.on("unhandledRejection", (reason) => {
     process.exit(0);
   } else if (lockResult.kind === "acquired") {
     acquiredLockPath = lockResult.path;
+    stopLockHeartbeat = startMcpSpawnLockHeartbeat(acquiredLockPath);
   }
 }
 if (THREAD_STORE_PATH) {

package/dist/mcp/telegram-channel.js

@@ -30097,7 +30097,7 @@ import {
   readdirSync as readdirSync4,
   realpathSync,
   renameSync as renameSync7,
-  statSync as statSync2,
+  statSync as statSync3,
   unlinkSync as unlinkSync7,
   watch,
   writeFileSync as writeFileSync11,
@@ -35114,6 +35114,17 @@ var FLAG_REGISTRY = [
     // call the flag evaluator) can gate the kanban_move `waiting` option. Also the
     // highest-precedence operator override, per ADR-0022.
     envVar: "AGT_KANBAN_WAITING_ENABLED"
+  },
+  {
+    key: "scheduled-task-nudge-durable",
+    description: 'Deliver the scheduled-task "work this card" nudge over the durable direct-chat notice rail instead of unverified tmux send-keys (ENG-8068, re-landing ENG-7971). When ON, routeScheduledTaskViaKanban enqueues the nudge via POST /host/scheduled-task/notify (kind:notice, push-and-consumed by the in-session MCP with a per-card consume-time revalidation) and closes the card + run on an enqueue failure, retiring the ENG-6351 orphaned-card gap where an unsubmitted keystroke left a scheduled task silently unrun. When OFF (default) the manager keeps the current tmux send-keys delivery, byte-for-byte as today. This is the kill switch: ENG-7971 was reverted once because the durable rail 500d on a session_id bug (fixed in ENG-8061); flip OFF to fall back to send-keys instantly without a code rollback if the durable path misbehaves. Resolved host-side by the manager via hostFlagStore().getBoolean (the manager evaluates the decision itself, so no spawn-env materialization is needed). Ships dark.',
+    flagType: "boolean",
+    // Declared safe value is `false`: the current, reverted-to send-keys delivery. Turning
+    // it ON activates the durable rail per org/host once operators are confident. `false`
+    // is also the fail-safe direction - a flag-DB read error must never silently switch a
+    // fleet onto the rail that broke prod twice. Net-new gate, so registry-only (ADR-0022);
+    // consumed by the manager's own logic, not an in-container MCP, so no env materialization.
+    defaultValue: false
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -37295,10 +37306,14 @@ import {
   mkdirSync as mkdirSync8,
   readFileSync as readFileSync11,
   renameSync as renameSync6,
+  statSync as statSync2,
   unlinkSync as unlinkSync6,
+  utimesSync,
   writeFileSync as writeFileSync9
 } from "fs";
 import { join as join11 } from "path";
+var STALE_LOCK_MS = 9e4;
+var HEARTBEAT_INTERVAL_MS = 3e4;
 function defaultIsPidAlive(pid) {
   if (!Number.isFinite(pid) || pid <= 0) return false;
   try {
@@ -37316,6 +37331,9 @@ function acquireMcpSpawnLock(args) {
   const isPidAlive = options.isPidAlive ?? defaultIsPidAlive;
   const selfPid = options.selfPid ?? process.pid;
   const now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+  const nowMs = options.nowMs ?? (() => Date.now());
+  const lockMtimeMs = options.lockMtimeMs ?? defaultLockMtimeMs;
+  const staleMs = options.staleMs ?? STALE_LOCK_MS;
   const path = join11(agentDir, basename2);
   const existing = readLockHolder(path);
   if (existing) {
@@ -37323,7 +37341,11 @@ function acquireMcpSpawnLock(args) {
       return { kind: "acquired", path };
     }
     if (isPidAlive(existing.pid)) {
-      return { kind: "blocked", path, holder: existing };
+      const mtime = lockMtimeMs(path);
+      const fresh = mtime !== null && nowMs() - mtime <= staleMs;
+      if (fresh) {
+        return { kind: "blocked", path, holder: existing };
+      }
     }
   }
   mkdirSync8(agentDir, { recursive: true, mode: 448 });
@@ -37344,6 +37366,38 @@ function releaseMcpSpawnLock(lockPath, opts = {}) {
   } catch {
   }
 }
+function refreshMcpSpawnLock(lockPath, opts = {}) {
+  if (!lockPath) return false;
+  const selfPid = opts.selfPid ?? process.pid;
+  const existing = readLockHolder(lockPath);
+  if (!existing || existing.pid !== selfPid) return false;
+  try {
+    const t = (opts.nowMs ?? (() => Date.now()))() / 1e3;
+    utimesSync(lockPath, t, t);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function startMcpSpawnLockHeartbeat(lockPath, opts = {}) {
+  if (!lockPath) return () => {
+  };
+  const intervalMs = opts.intervalMs ?? HEARTBEAT_INTERVAL_MS;
+  const handle = setInterval(() => {
+    if (!refreshMcpSpawnLock(lockPath, { selfPid: opts.selfPid })) {
+      clearInterval(handle);
+    }
+  }, intervalMs);
+  handle.unref?.();
+  return () => clearInterval(handle);
+}
+function defaultLockMtimeMs(path) {
+  try {
+    return statSync2(path).mtimeMs;
+  } catch {
+    return null;
+  }
+}
 function readLockHolder(path) {
   if (!existsSync8(path)) return null;
   try {
@@ -38057,7 +38111,7 @@ function scheduleBusyAck(chatId, messageId, arrivedWhileBusy) {
     let paneLogFreshAgeMs = null;
     if (AGENT_DIR) {
       try {
-        const paneMtimeMs = statSync2(join13(AGENT_DIR, "pane.log")).mtimeMs;
+        const paneMtimeMs = statSync3(join13(AGENT_DIR, "pane.log")).mtimeMs;
         paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
       } catch {
       }
@@ -39193,7 +39247,7 @@ function scanRecoveryRetries() {
     if (!f.includes(".retry-") || f.endsWith(".poison.json")) continue;
     let mtimeMs;
     try {
-      mtimeMs = statSync2(join13(RECOVERY_OUTBOX_DIR, f)).mtimeMs;
+      mtimeMs = statSync3(join13(RECOVERY_OUTBOX_DIR, f)).mtimeMs;
     } catch {
       continue;
     }
@@ -39250,7 +39304,7 @@ async function processNoticeOutboxFile(filename) {
   try {
     let mtimeMs;
     try {
-      mtimeMs = statSync2(fullPath).mtimeMs;
+      mtimeMs = statSync3(fullPath).mtimeMs;
     } catch {
       return;
     }
@@ -39970,7 +40024,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
     let bytes;
     let size;
     try {
-      const st = statSync2(realPath);
+      const st = statSync3(realPath);
       if (!st.isFile()) {
         return { content: [{ type: "text", text: `Upload refused: ${resolvedPath} is not a regular file.` }], isError: true };
       }
@@ -40545,7 +40599,7 @@ async function replayPendingTelegramMarkers() {
   let paneFreshAgeMs = null;
   if (AGENT_DIR) {
     try {
-      paneFreshAgeMs = Math.max(0, now - statSync2(join13(AGENT_DIR, "pane.log")).mtimeMs);
+      paneFreshAgeMs = Math.max(0, now - statSync3(join13(AGENT_DIR, "pane.log")).mtimeMs);
     } catch {
     }
   }
@@ -40698,6 +40752,7 @@ var telegramHttp = {
 var nextOffset = loadPersistedOffset(TELEGRAM_OFFSET_FILE);
 var isShuttingDown = false;
 var acquiredLockPath = null;
+var stopLockHeartbeat = null;
 async function pollLoop() {
   while (!isShuttingDown) {
     try {
@@ -41090,7 +41145,7 @@ async function pollLoop() {
         let paneLogFreshAgeMs = null;
         if (AGENT_DIR) {
           try {
-            const paneMtimeMs = statSync2(join13(AGENT_DIR, "pane.log")).mtimeMs;
+            const paneMtimeMs = statSync3(join13(AGENT_DIR, "pane.log")).mtimeMs;
             paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
           } catch {
           }
@@ -41257,6 +41312,10 @@ function shutdown(reason) {
     recentDmPersister?.dispose();
   } catch {
   }
+  try {
+    stopLockHeartbeat?.();
+  } catch {
+  }
   try {
     releaseMcpSpawnLock(acquiredLockPath);
   } catch {
@@ -41281,6 +41340,7 @@ process.on("SIGHUP", () => shutdown("SIGHUP"));
     process.exit(0);
   } else if (lockResult.kind === "acquired") {
     acquiredLockPath = lockResult.path;
+    stopLockHeartbeat = startMcpSpawnLockHeartbeat(acquiredLockPath);
   }
 }
 process.stderr.write(

package/dist/{persistent-session-GRCJPRH5.js → persistent-session-2AC3P5DJ.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-V5CRVBVC.js";
+} from "./chunk-RD7MIR3G.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-GRCJPRH5.js.map
+//# sourceMappingURL=persistent-session-2AC3P5DJ.js.map

package/dist/{responsiveness-probe-DNM5APN5.js → responsiveness-probe-LGJNUSPU.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-V5CRVBVC.js";
+} from "./chunk-RD7MIR3G.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -437,4 +437,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-DNM5APN5.js.map
+//# sourceMappingURL=responsiveness-probe-LGJNUSPU.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.404",
+  "version": "0.28.406",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {