@integrity-labs/agt-cli 0.28.474 → 0.28.475

package/dist/mcp/direct-chat-channel.js

@@ -18867,7 +18867,7 @@ var require_filters = __commonJS({
       return r.copySafeness(str, res);
     }
     _exports.indent = indent;
-    function join15(arr, del, attr) {
+    function join14(arr, del, attr) {
       del = del || "";
       if (attr) {
         arr = lib.map(arr, function(v) {
@@ -18876,7 +18876,7 @@ var require_filters = __commonJS({
       }
       return arr.join(del);
     }
-    _exports.join = join15;
+    _exports.join = join14;
     function last(arr) {
       return arr[arr.length - 1];
     }
@@ -30087,40 +30087,6 @@ function resolveHostBooleanFlag(opts) {
   if (cached2 !== void 0) return cached2;
   return opts.defaultValue;
 }
-var USAGE_LIMIT_REACTIVE_FLAG_KEY = "usage-limit-reactive-notice";
-function parseUsageLimitReactiveMode(raw) {
-  if (raw === void 0) return void 0;
-  const v = raw.trim().toLowerCase();
-  if (v === "") return void 0;
-  if (v === "off" || v === "shadow" || v === "enforce") return v;
-  const b = envBoolean(raw);
-  if (b === true) return "enforce";
-  if (b === false) return "off";
-  return void 0;
-}
-function cachedUsageLimitReactiveMode(path) {
-  try {
-    if (!existsSync4(path)) return void 0;
-    const parsed = JSON.parse(readFileSync6(path, "utf8"));
-    if (!parsed || typeof parsed !== "object") return void 0;
-    const flags = parsed.flags;
-    if (!flags || typeof flags !== "object") return void 0;
-    const value = flags[USAGE_LIMIT_REACTIVE_FLAG_KEY];
-    if (typeof value === "string") return parseUsageLimitReactiveMode(value);
-    if (typeof value === "boolean") return value ? "enforce" : "off";
-    return void 0;
-  } catch {
-    return void 0;
-  }
-}
-function resolveUsageLimitReactiveMode(opts) {
-  const env2 = opts?.env ?? process.env;
-  const modeOverride = parseUsageLimitReactiveMode(env2["AGT_USAGE_LIMIT_REACTIVE_MODE"]);
-  if (modeOverride !== void 0) return modeOverride;
-  const cached2 = cachedUsageLimitReactiveMode(opts?.cachePath ?? defaultFlagsCachePath());
-  if (cached2 !== void 0) return cached2;
-  return "off";
-}
 
 // src/ack-reaction.ts
 var REPLY_WEDGED_THRESHOLD_MS = 5 * 60 * 1e3;
@@ -33691,30 +33657,11 @@ function parseResetDateTime(humanDate, now) {
   return resolved;
 }
 
-// ../core/dist/claude-code-usage/usage-limit-marker.js
-var USAGE_LIMIT_MARKER_FILENAME = "claude-usage-limit.json";
-var USAGE_LIMIT_MARKER_VERSION = 1;
-function parseUsageLimitMarker(raw) {
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return null;
-  }
-  if (typeof parsed !== "object" || parsed === null || parsed.version !== USAGE_LIMIT_MARKER_VERSION) {
-    return null;
-  }
-  const until = parsed.limited_until;
-  if (typeof until !== "string" || !Number.isFinite(Date.parse(until)))
-    return null;
-  return { version: USAGE_LIMIT_MARKER_VERSION, limited_until: until };
-}
-function resolveUsageLimitUntil(marker, now) {
-  if (!marker)
-    return null;
-  const until = new Date(marker.limited_until);
-  return until.getTime() > now.getTime() ? until : null;
-}
+// ../core/dist/claude-code-usage/run-marker.js
+var RUN_MARKER_RE = /<!--\s*agt-run:([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\s*-->/;
+var RUN_MARKER_RE_GLOBAL = new RegExp(RUN_MARKER_RE.source, "g");
+
+// ../core/dist/claude-code-usage/usage-limit-notice-text.js
 function formatUtcClock(date3) {
   const hours = date3.getUTCHours();
   const minutes = date3.getUTCMinutes();
@@ -34646,42 +34593,6 @@ var FLAG_REGISTRY = [
     // projectDefinition, so setting it does not roll FLAGS_SCHEMA_VERSION.
     since: "0.28.421"
   },
-  {
-    key: "usage-limit-reactive-notice",
-    description: "Report a Claude Code usage cap REACTIVELY instead of predicting it (ENG-8201). Today the manager guesses from the agent transcript that the next turn will be refused, writes a marker, and every channel MCP refuses to dispatch on the strength of that guess - so a wrong guess is a swallowed message, and because the notice is throttled per (channel, sender) while the DROP is not, the usual symptom is total silence rather than a wrong reply. A refused turn actually costs nothing (rejected in under a second, zero tokens) and Claude Code records it with the reset time in it, so there is no need to guess: dispatch, and report the refusal if one comes back. off = today behaviour (pre-dispatch marker gate, no watcher). shadow = still gate on the marker, but ALSO watch dispatched messages and log the refusal that would have been reported - measures the true-positive rate with no user-visible change. enforce = stop reading the marker before dispatch; every admitted human message reaches the agent and a refusal is answered in-thread with the reset time from the error itself. Read live from the heartbeat flags-cache (or the env override).",
-    flagType: "enum",
-    allowedValues: ["off", "shadow", "enforce"],
-    // Ships dark: off preserves today's gate byte-for-byte. shadow is a free
-    // local log line (the watch is a transcript read, no model spend), so it is a
-    // cheap soak; enforce changes what reaches the agent, so it is the audited
-    // per-org flip.
-    defaultValue: "off",
-    // Enum override AGT_USAGE_LIMIT_REACTIVE_MODE (off|shadow|enforce), resolved
-    // by resolveUsageLimitReactiveMode in the channel-server bundle.
-    envVar: "AGT_USAGE_LIMIT_REACTIVE_MODE",
-    // enforce sends a message to an agent the host currently believes is capped -
-    // a deliberate availability trade (the refusal is free, but it is still a
-    // dispatch the operator previously suppressed), so flipping toward it is an
-    // audited change (ADR-0022 sensitive-flag confirm).
-    sensitive: true,
-    // ENG-8149 / ENG-8229: the agt-cli that first carries
-    // resolveUsageLimitReactiveMode in ALL THREE channel servers - published from
-    // the ENG-8207 merge 0294fa1a8. Without this the flip-reach modal reports FULL
-    // reach, because an undefined `since` means "every host can honour it" - true
-    // for flags that predate the reach work, wrong for a NEW host-read flag whose
-    // reader older hosts simply do not have. Excluded from projectDefinition, so
-    // setting it does not roll FLAGS_SCHEMA_VERSION.
-    //
-    // Deliberately the LATER of the two versions this flag's reader shipped in.
-    // Unlike its siblings, this reader landed in two stages: direct-chat at the
-    // ENG-8201 Slice 2 publish, slack + telegram only at 0.28.450 (ENG-8207) - and
-    // `since` is one version per flag, so it cannot express "partially honoured".
-    // A host in between genuinely honours the flag for direct-chat and is still
-    // classified `stale`. That understates reach rather than overstating it, which
-    // is the safe direction, and it is the useful one while the flag sits at
-    // enforce and slack/telegram adoption is what an operator needs to track.
-    since: "0.28.450"
-  },
   {
     key: "slack-hot-thread-guard",
     description: "Server-side hot-thread guard on the slack.reply surface (ENG-7462). Prevents an agent posting a NEW top-level Slack message when it meant to reply inside the thread it is already working in - a prompt/memory rule proved insufficient (the agent had the rule and still slipped). When a reply would otherwise post to channel ROOT (no thread_ts / message_ts / inbound_id, no active kanban card) and the agent has a recent active thread in that channel (its last bot-posted thread, from the persisted trackedThreads cache, within a freshness window), the reply is redirected into that thread. proactive:true no longer implies channel root; posting at root becomes a deliberate action (the to_channel_root flag, or the thread_ts:null sentinel). off = guard never runs, replies with no coords root exactly as today (ships dark). shadow = compute + log the would-redirect but STILL post to root (measure the fire rate before acting). enforce = apply the redirect (a soft-block: redirect + inform, never a hard rejection). Read live from the heartbeat flags-cache (or the env override); enforce is a deliberate per-org flip after a shadow soak.",
@@ -35783,14 +35694,14 @@ function readLockHolder(path) {
 }
 
 // src/direct-chat-channel.ts
-import { homedir as homedir5 } from "os";
-import { join as join14 } from "path";
+import { homedir as homedir4 } from "os";
+import { join as join13 } from "path";
 import { randomUUID } from "crypto";
 import {
   watch,
   mkdirSync as mkdirSync5,
   writeFileSync as writeFileSync6,
-  readFileSync as readFileSync13,
+  readFileSync as readFileSync12,
   readdirSync as readdirSync6,
   existsSync as existsSync6,
   renameSync as renameSync5,
@@ -36222,30 +36133,10 @@ function isMaintenanceModeActive(opts) {
   });
 }
 
-// src/usage-limit-notice.ts
+// src/account-enforcement-notice.ts
 import { readFileSync as readFileSync11 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join12 } from "path";
-function usageLimitMarkerPath(codeName) {
-  if (!codeName) return null;
-  return join12(homedir3(), ".augmented", codeName, USAGE_LIMIT_MARKER_FILENAME);
-}
-function readUsageLimitUntil(opts) {
-  const path = opts.filePath ?? usageLimitMarkerPath(opts.codeName);
-  if (!path) return null;
-  let raw;
-  try {
-    raw = readFileSync11(path, "utf-8");
-  } catch {
-    return null;
-  }
-  return resolveUsageLimitUntil(parseUsageLimitMarker(raw), opts.now ?? /* @__PURE__ */ new Date());
-}
-
-// src/account-enforcement-notice.ts
-import { readFileSync as readFileSync12 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join13 } from "path";
 
 // ../core/dist/channels/governance/sender-policy-decline.js
 function decideDeclineReply(input) {
@@ -36263,14 +36154,14 @@ function decideDeclineReply(input) {
 // src/account-enforcement-notice.ts
 function accountEnforcementMarkerPath(codeName) {
   if (!codeName) return null;
-  return join13(homedir4(), ".augmented", codeName, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
+  return join12(homedir3(), ".augmented", codeName, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
 }
 function readAccountEnforcementLevel(opts) {
   const path = opts.filePath ?? accountEnforcementMarkerPath(opts.codeName);
   if (!path) return null;
   let raw;
   try {
-    raw = readFileSync12(path, "utf-8");
+    raw = readFileSync11(path, "utf-8");
   } catch {
     return null;
   }
@@ -36288,6 +36179,17 @@ function shouldSendAccountWarn(opts) {
   }).reply;
 }
 
+// src/usage-limit-reactive-decision.ts
+import { createHash } from "crypto";
+function shouldArmWatch(opts) {
+  return !opts.isBot && opts.replyOwed;
+}
+function describeUnparsedRefusal(text) {
+  if (!text) return "refusal=absent";
+  const hash = createHash("sha256").update(text).digest("hex").slice(0, 12);
+  return `refusal_hash=${hash} refusal_len=${text.length}`;
+}
+
 // src/direct-chat-channel.ts
 var DIRECT_CHAT_MAINTENANCE_CACHE = /* @__PURE__ */ new Map();
 var DIRECT_CHAT_MAINTENANCE_COOLDOWN_MS = (() => {
@@ -36306,21 +36208,21 @@ var DIRECT_CHAT_ACCOUNT_WARN_COOLDOWN_MS = (() => {
 var AGT_HOST = process.env.AGT_HOST;
 var AGT_API_KEY = process.env.AGT_API_KEY;
 var AGT_AGENT_ID = process.env.AGT_AGENT_ID;
-var DIRECT_CHAT_AGENT_DIR = AGT_AGENT_ID ? join14(homedir5(), ".augmented", AGT_AGENT_ID) : null;
+var DIRECT_CHAT_AGENT_DIR = AGT_AGENT_ID ? join13(homedir4(), ".augmented", AGT_AGENT_ID) : null;
 var INBOUND_ATTACHMENTS_DIR = resolveInboundAttachmentsDir({
   codeName: process.env.AGT_AGENT_CODE_NAME,
   turnInitiatorFile: process.env.AGT_TURN_INITIATOR_FILE,
   agentId: AGT_AGENT_ID,
-  homeDir: homedir5()
+  homeDir: homedir4()
 });
 var AGT_AGENT_CODE_NAME = process.env.AGT_AGENT_CODE_NAME;
 var directChatStderrLogStream = null;
 if (AGT_AGENT_CODE_NAME) {
   try {
-    const logDir = join14(homedir5(), ".augmented", AGT_AGENT_CODE_NAME);
+    const logDir = join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME);
     mkdirSync5(logDir, { recursive: true });
     directChatStderrLogStream = createWriteStream(
-      join14(logDir, "direct-chat-channel-stderr.log"),
+      join13(logDir, "direct-chat-channel-stderr.log"),
       { flags: "a", mode: 384 }
     );
     directChatStderrLogStream.on("error", () => {
@@ -36339,10 +36241,10 @@ if (AGT_AGENT_CODE_NAME) {
   } catch {
   }
 }
-var PROGRESS_HEARTBEAT_PATH = AGT_AGENT_CODE_NAME ? join14(homedir5(), ".augmented", AGT_AGENT_CODE_NAME, "channel-progress-heartbeat.json") : null;
-var DIRECT_CHAT_PENDING_INBOUND_DIR = AGT_AGENT_CODE_NAME ? join14(homedir5(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-pending-inbound") : null;
-var DIRECT_CHAT_DELIVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join14(homedir5(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-inbound-delivery-ledger") : null;
-var DIRECT_CHAT_CODE_NAME_AGENT_DIR = AGT_AGENT_CODE_NAME ? join14(homedir5(), ".augmented", AGT_AGENT_CODE_NAME) : null;
+var PROGRESS_HEARTBEAT_PATH = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, "channel-progress-heartbeat.json") : null;
+var DIRECT_CHAT_PENDING_INBOUND_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-pending-inbound") : null;
+var DIRECT_CHAT_DELIVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-inbound-delivery-ledger") : null;
+var DIRECT_CHAT_CODE_NAME_AGENT_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME) : null;
 var DIRECT_CHAT_STALE_MARKER_MS = 24 * 60 * 60 * 1e3;
 function recordDirectChatDelivery(sessionId, messageIds) {
   if (!sessionId) return;
@@ -36353,8 +36255,8 @@ function recordDirectChatDelivery(sessionId, messageIds) {
     delivered_at: (/* @__PURE__ */ new Date()).toISOString()
   });
 }
-var DIRECT_CHAT_RECOVERY_OUTBOX_DIR = AGT_AGENT_CODE_NAME ? join14(homedir5(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-recovery-outbox") : null;
-var DIRECT_CHAT_RECOVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join14(homedir5(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-direct-chat-recovery-ledger") : null;
+var DIRECT_CHAT_RECOVERY_OUTBOX_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-recovery-outbox") : null;
+var DIRECT_CHAT_RECOVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-direct-chat-recovery-ledger") : null;
 var progressReceivedAt = /* @__PURE__ */ new Map();
 var directChatProgressState = { tracked: null };
 var directChatProgressTickRunning = false;
@@ -36373,7 +36275,7 @@ var directChatKanbanCardClient = createKanbanCardActiveClient({
 function readProgressHeartbeat() {
   if (!PROGRESS_HEARTBEAT_PATH || !existsSync6(PROGRESS_HEARTBEAT_PATH)) return null;
   try {
-    return parseProgressHeartbeat(readFileSync13(PROGRESS_HEARTBEAT_PATH, "utf-8"));
+    return parseProgressHeartbeat(readFileSync12(PROGRESS_HEARTBEAT_PATH, "utf-8"));
   } catch {
     return null;
   }
@@ -36382,7 +36284,7 @@ function seedProgressHeartbeat() {
   if (!PROGRESS_HEARTBEAT_PATH) return;
   const tmp = `${PROGRESS_HEARTBEAT_PATH}.${process.pid}.tmp`;
   try {
-    mkdirSync5(join14(homedir5(), ".augmented", AGT_AGENT_CODE_NAME), { recursive: true });
+    mkdirSync5(join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME), { recursive: true });
     writeFileSync6(tmp, serializeProgressHeartbeat(SEED_PROGRESS_STEP, Date.now()), { mode: 384 });
     renameSync5(tmp, PROGRESS_HEARTBEAT_PATH);
   } catch {
@@ -36577,7 +36479,7 @@ var inboundAttachmentDeps = {
   },
   ensureDir: (dir) => mkdirSync5(dir, { recursive: true }),
   writeFile: (path, bytes) => writeFileSync6(path, bytes, { mode: 384 }),
-  joinPath: (...parts) => join14(...parts),
+  joinPath: (...parts) => join13(...parts),
   warn: (msg) => process.stderr.write(`${msg}
 `)
 };
@@ -36911,7 +36813,7 @@ function scheduleDirectChatBusyAck(sessionId, messageId, arrivedWhileBusy) {
     let paneLogFreshAgeMs = null;
     if (DIRECT_CHAT_CODE_NAME_AGENT_DIR) {
       try {
-        const paneMtimeMs = statSync4(join14(DIRECT_CHAT_CODE_NAME_AGENT_DIR, "pane.log")).mtimeMs;
+        const paneMtimeMs = statSync4(join13(DIRECT_CHAT_CODE_NAME_AGENT_DIR, "pane.log")).mtimeMs;
         paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
       } catch {
       }
@@ -37004,14 +36906,7 @@ function armUsageLimitWatch(args) {
       if (!refusal) return;
       if (!refusal.resetsAt) {
         process.stderr.write(
-          `direct-chat-channel: [usage-limit-reactive] mode=${args.mode} refusal detected for session=${args.sessionId} but no reset time in it (${refusal.text ?? "no text"}) - no notice
-`
-        );
-        return;
-      }
-      if (args.mode === "shadow") {
-        process.stderr.write(
-          `direct-chat-channel: [usage-limit-reactive] mode=shadow WOULD notify session=${args.sessionId} message=${args.messageId} resets=${refusal.resetsAt.toISOString()}
+          `direct-chat-channel: [usage-limit-reactive] refusal detected for session=${args.sessionId} but no reset time in it (${describeUnparsedRefusal(refusal.text)}) - no notice
 `
         );
         return;
@@ -37084,9 +36979,7 @@ async function pollForMessages(sinceMs) {
       const isNotice = msg.kind === "notice";
       const maintenanceActive = !isNotice && isMaintenanceModeActive();
       const accountMuted = !isNotice && !maintenanceActive ? readAccountEnforcementLevel({ codeName: AGT_AGENT_CODE_NAME ?? null }) === "mute" : false;
-      const reactiveMode = resolveUsageLimitReactiveMode();
-      const usageLimitUntil = !isNotice && !maintenanceActive && !accountMuted && reactiveMode !== "enforce" ? readUsageLimitUntil({ codeName: AGT_AGENT_CODE_NAME ?? null }) : null;
-      if (!isNotice && !maintenanceActive && !accountMuted && !usageLimitUntil) {
+      if (!isNotice && !maintenanceActive && !accountMuted) {
         markProcessed(msg.id);
         claimTracker.track(msg.session_id, msg.id);
         if (!progressReceivedAt.has(msg.session_id)) {
@@ -37151,37 +37044,6 @@ async function pollForMessages(sinceMs) {
           if (throttle.reply) DIRECT_CHAT_ACCOUNT_MUTE_CACHE.delete(throttleKey);
           process.stderr.write(
             `direct-chat-channel: account-mute reply failed: ${err.message}
-`
-          );
-        }
-        continue;
-      }
-      if (usageLimitUntil) {
-        const throttleKey = `${msg.session_id}|usage_limit`;
-        const throttle = decideDeclineReply({
-          cache: DIRECT_CHAT_USAGE_LIMIT_CACHE,
-          key: throttleKey,
-          cooldownMs: DIRECT_CHAT_MAINTENANCE_COOLDOWN_MS,
-          now: Date.now()
-        });
-        const route = throttle.reply ? "/host/direct-chat/reply" : "/host/direct-chat/consume";
-        const body = throttle.reply ? { agent_id: AGT_AGENT_ID, session_id: msg.session_id, content: buildUsageLimitReplyText(usageLimitUntil), message_ids: [msg.id], kind: "notice" } : { agent_id: AGT_AGENT_ID, session_id: msg.session_id, message_ids: [msg.id] };
-        try {
-          const res2 = await apiPost(route, body);
-          const data2 = await res2.json().catch(() => ({}));
-          if (res2.ok && data2.error == null) {
-            markProcessed(msg.id);
-          } else {
-            if (throttle.reply) DIRECT_CHAT_USAGE_LIMIT_CACHE.delete(throttleKey);
-            process.stderr.write(
-              `direct-chat-channel: usage-limit ${throttle.reply ? "reply" : "consume"} failed: ${data2.error ?? `HTTP ${res2.status}`}
-`
-            );
-          }
-        } catch (err) {
-          if (throttle.reply) DIRECT_CHAT_USAGE_LIMIT_CACHE.delete(throttleKey);
-          process.stderr.write(
-            `direct-chat-channel: usage-limit reply failed: ${err.message}
 `
           );
         }
@@ -37264,9 +37126,8 @@ async function pollForMessages(sinceMs) {
         `direct-chat-channel: Injected message ${msg.id} (session=${msg.session_id})
 `
       );
-      if (!isNotice && reactiveMode !== "off") {
+      if (shouldArmWatch({ isBot: false, replyOwed: !isNotice })) {
         armUsageLimitWatch({
-          mode: reactiveMode,
           sessionId: msg.session_id,
           messageId: msg.id,
           sinceMs: dispatchedAtMs
@@ -37385,7 +37246,7 @@ function sweepAgedDirectChatMarkersNow(thresholdMs) {
   const now = Date.now();
   const res = sweepAgedDirectChatMarkers(DIRECT_CHAT_PENDING_INBOUND_DIR, {
     readdir: (dir) => readdirSync6(dir),
-    readFile: (p2) => readFileSync13(p2, "utf8"),
+    readFile: (p2) => readFileSync12(p2, "utf8"),
     unlink: (p2) => {
       if (existsSync6(p2)) unlinkSync4(p2);
     },
@@ -37421,7 +37282,7 @@ function sanitizeRecoveryText(text) {
 }
 function directChatRecoveryDeps() {
   return {
-    readFile: (p2) => readFileSync13(p2, "utf-8"),
+    readFile: (p2) => readFileSync12(p2, "utf-8"),
     renameFile: (from, to) => renameSync5(from, to),
     unlinkFile: (p2) => {
       if (existsSync6(p2)) unlinkSync4(p2);
@@ -37434,7 +37295,7 @@ function directChatRecoveryDeps() {
       if (!DIRECT_CHAT_RECOVERY_LEDGER_DIR) return;
       if (markerName.includes("/") || markerName.includes("\\") || markerName.includes("..")) return;
       try {
-        const p2 = join14(DIRECT_CHAT_RECOVERY_LEDGER_DIR, markerName);
+        const p2 = join13(DIRECT_CHAT_RECOVERY_LEDGER_DIR, markerName);
         if (existsSync6(p2)) unlinkSync4(p2);
       } catch {
       }
@@ -37470,7 +37331,7 @@ async function processDirectChatRecoveryOutboxFile(filename) {
   if (!enabled) return;
   directChatRecoveryInFlight.add(filename);
   try {
-    const fullPath = join14(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, filename);
+    const fullPath = join13(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, filename);
     await consumeDirectChatRecoveryFile(fullPath, filename, directChatRecoveryDeps());
   } catch (err) {
     process.stderr.write(
@@ -37498,7 +37359,7 @@ if (DIRECT_CHAT_RECOVERY_OUTBOX_DIR) {
       if (!filename) return;
       const name = filename.toString();
       if (!name.endsWith(".json")) return;
-      if (existsSync6(join14(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, name))) {
+      if (existsSync6(join13(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, name))) {
         void processDirectChatRecoveryOutboxFile(name);
       }
     });

package/dist/mcp/origami.js

@@ -39878,6 +39878,10 @@ var BANNER_PATTERNS = [
 ];
 var MS_PER_DAY = 24 * 60 * 60 * 1e3;
 
+// ../core/dist/claude-code-usage/run-marker.js
+var RUN_MARKER_RE = /<!--\s*agt-run:([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\s*-->/;
+var RUN_MARKER_RE_GLOBAL = new RegExp(RUN_MARKER_RE.source, "g");
+
 // ../core/dist/claude-code-usage/rate-limit-classifier.js
 var UNKNOWN_RATE_LIMIT = Object.freeze({
   verdict: "unknown",
@@ -40536,42 +40540,6 @@ var FLAG_REGISTRY = [
     // projectDefinition, so setting it does not roll FLAGS_SCHEMA_VERSION.
     since: "0.28.421"
   },
-  {
-    key: "usage-limit-reactive-notice",
-    description: "Report a Claude Code usage cap REACTIVELY instead of predicting it (ENG-8201). Today the manager guesses from the agent transcript that the next turn will be refused, writes a marker, and every channel MCP refuses to dispatch on the strength of that guess - so a wrong guess is a swallowed message, and because the notice is throttled per (channel, sender) while the DROP is not, the usual symptom is total silence rather than a wrong reply. A refused turn actually costs nothing (rejected in under a second, zero tokens) and Claude Code records it with the reset time in it, so there is no need to guess: dispatch, and report the refusal if one comes back. off = today behaviour (pre-dispatch marker gate, no watcher). shadow = still gate on the marker, but ALSO watch dispatched messages and log the refusal that would have been reported - measures the true-positive rate with no user-visible change. enforce = stop reading the marker before dispatch; every admitted human message reaches the agent and a refusal is answered in-thread with the reset time from the error itself. Read live from the heartbeat flags-cache (or the env override).",
-    flagType: "enum",
-    allowedValues: ["off", "shadow", "enforce"],
-    // Ships dark: off preserves today's gate byte-for-byte. shadow is a free
-    // local log line (the watch is a transcript read, no model spend), so it is a
-    // cheap soak; enforce changes what reaches the agent, so it is the audited
-    // per-org flip.
-    defaultValue: "off",
-    // Enum override AGT_USAGE_LIMIT_REACTIVE_MODE (off|shadow|enforce), resolved
-    // by resolveUsageLimitReactiveMode in the channel-server bundle.
-    envVar: "AGT_USAGE_LIMIT_REACTIVE_MODE",
-    // enforce sends a message to an agent the host currently believes is capped -
-    // a deliberate availability trade (the refusal is free, but it is still a
-    // dispatch the operator previously suppressed), so flipping toward it is an
-    // audited change (ADR-0022 sensitive-flag confirm).
-    sensitive: true,
-    // ENG-8149 / ENG-8229: the agt-cli that first carries
-    // resolveUsageLimitReactiveMode in ALL THREE channel servers - published from
-    // the ENG-8207 merge 0294fa1a8. Without this the flip-reach modal reports FULL
-    // reach, because an undefined `since` means "every host can honour it" - true
-    // for flags that predate the reach work, wrong for a NEW host-read flag whose
-    // reader older hosts simply do not have. Excluded from projectDefinition, so
-    // setting it does not roll FLAGS_SCHEMA_VERSION.
-    //
-    // Deliberately the LATER of the two versions this flag's reader shipped in.
-    // Unlike its siblings, this reader landed in two stages: direct-chat at the
-    // ENG-8201 Slice 2 publish, slack + telegram only at 0.28.450 (ENG-8207) - and
-    // `since` is one version per flag, so it cannot express "partially honoured".
-    // A host in between genuinely honours the flag for direct-chat and is still
-    // classified `stale`. That understates reach rather than overstating it, which
-    // is the safe direction, and it is the useful one while the flag sits at
-    // enforce and slack/telegram adoption is what an operator needs to track.
-    since: "0.28.450"
-  },
   {
     key: "slack-hot-thread-guard",
     description: "Server-side hot-thread guard on the slack.reply surface (ENG-7462). Prevents an agent posting a NEW top-level Slack message when it meant to reply inside the thread it is already working in - a prompt/memory rule proved insufficient (the agent had the rule and still slipped). When a reply would otherwise post to channel ROOT (no thread_ts / message_ts / inbound_id, no active kanban card) and the agent has a recent active thread in that channel (its last bot-posted thread, from the persisted trackedThreads cache, within a freshness window), the reply is redirected into that thread. proactive:true no longer implies channel root; posting at root becomes a deliberate action (the to_channel_root flag, or the thread_ts:null sentinel). off = guard never runs, replies with no coords root exactly as today (ships dark). shadow = compute + log the would-redirect but STILL post to root (measure the fire rate before acting). enforce = apply the redirect (a soft-block: redirect + inform, never a hard rejection). Read live from the heartbeat flags-cache (or the env override); enforce is a deliberate per-org flip after a shadow soak.",