@integrity-labs/agt-cli 0.28.494 → 0.28.496

package/dist/mcp/direct-chat-channel.js

@@ -18867,7 +18867,7 @@ var require_filters = __commonJS({
       return r.copySafeness(str, res);
     }
     _exports.indent = indent;
-    function join14(arr, del, attr) {
+    function join15(arr, del, attr) {
       del = del || "";
       if (attr) {
         arr = lib.map(arr, function(v) {
@@ -18876,7 +18876,7 @@ var require_filters = __commonJS({
       }
       return arr.join(del);
     }
-    _exports.join = join14;
+    _exports.join = join15;
     function last(arr) {
       return arr[arr.length - 1];
     }
@@ -32373,6 +32373,23 @@ var ASSET_TYPES = {
 var DEFAULT_CHUNK_BUDGET_BYTES = 180 * 1024;
 var textEncoder = new TextEncoder();
 
+// ../core/dist/integrations/remote-mcp-proxy-env.js
+var REMOTE_MCP_PROXY_ENV = {
+  url: "AGT_REMOTE_MCP_URL",
+  tokenFile: "AGT_REMOTE_MCP_TOKEN_FILE",
+  tokenVar: "AGT_REMOTE_MCP_TOKEN_VAR",
+  label: "AGT_REMOTE_MCP_LABEL",
+  authHeader: "AGT_REMOTE_MCP_AUTH_HEADER",
+  extraHeaders: "AGT_REMOTE_MCP_EXTRA_HEADERS",
+  toolAllowlist: "AGT_REMOTE_MCP_TOOL_ALLOWLIST",
+  preEnableToolsets: "AGT_REMOTE_MCP_PREENABLE_TOOLSETS"
+};
+var REMOTE_MCP_AUTH_ENV_KEYS = [
+  REMOTE_MCP_PROXY_ENV.tokenVar,
+  REMOTE_MCP_PROXY_ENV.authHeader,
+  REMOTE_MCP_PROXY_ENV.extraHeaders
+];
+
 // ../core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
   {
@@ -33518,6 +33535,65 @@ var DIRECT_CHAT_UPLOAD_MAX_BYTES = 10 * MB2;
 var AGENT_DIRECTED_NOTICE_KINDS = ["scheduled_task_nudge", "kanban_check"];
 var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
 
+// ../core/dist/direct-chat/cursor-advance.js
+var CURSOR_SHORTFALL_REASONS = [
+  "not_found",
+  "gave_up",
+  "already_delivered",
+  "error",
+  "undiagnosed",
+  "unknown",
+  "unreported",
+  "malformed_count",
+  "other"
+];
+var KNOWN_REASONS = new Set(CURSOR_SHORTFALL_REASONS);
+function normalizeCursorShortfallReason(raw) {
+  if (raw == null || raw === "")
+    return "unreported";
+  return KNOWN_REASONS.has(raw) ? raw : "other";
+}
+function classifyCursorAdvance(input) {
+  const body = input.body ?? void 0;
+  if (!input.httpOk || body?.error != null) {
+    const error2 = body?.error ?? input.statusText ?? (input.httpStatus !== void 0 ? `HTTP ${input.httpStatus}` : "request failed");
+    return { outcome: "failed", error: error2 };
+  }
+  const expected = new Set(input.messageIds).size;
+  const raw = body?.consumed;
+  if (raw === void 0 || raw === null) {
+    return { outcome: "advanced", reported: false, expected, consumed: 0 };
+  }
+  if (typeof raw !== "number" || !Number.isSafeInteger(raw) || raw < 0) {
+    if (expected === 0)
+      return { outcome: "advanced", reported: false, expected, consumed: 0 };
+    return {
+      outcome: "shortfall",
+      expected,
+      consumed: 0,
+      reason: "malformed_count",
+      partial: false
+    };
+  }
+  if (raw < expected) {
+    return {
+      outcome: "shortfall",
+      expected,
+      consumed: raw,
+      reason: normalizeCursorShortfallReason(body?.reason),
+      partial: raw > 0
+    };
+  }
+  return { outcome: "advanced", reported: true, expected, consumed: raw };
+}
+function cursorShortfallKey(route, reason, partial2) {
+  return `${route}|${reason}|${partial2 ? "true" : "false"}`;
+}
+function formatCursorAdvanceShortfall(verdict, ctx) {
+  const cleared = ctx.cleared.length > 0 ? ctx.cleared.join(",") : "none";
+  return `[direct-chat] cursor advance shortfall route=/${ctx.route} site=${ctx.site} session=${ctx.sessionId} expected=${verdict.expected} consumed=${verdict.consumed} reason=${verdict.reason} partial=${verdict.partial} cleared_anyway=${cleared}`;
+}
+
 // ../core/dist/onboarding/state-machine.js
 var AREA_ORDER = [
   "framing",
@@ -35839,13 +35915,13 @@ function readLockHolder(path) {
 
 // src/direct-chat-channel.ts
 import { homedir as homedir4 } from "os";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 import { randomUUID } from "crypto";
 import {
   watch,
   mkdirSync as mkdirSync5,
-  writeFileSync as writeFileSync6,
-  readFileSync as readFileSync10,
+  writeFileSync as writeFileSync7,
+  readFileSync as readFileSync11,
   readdirSync as readdirSync6,
   existsSync as existsSync6,
   renameSync as renameSync5,
@@ -36323,6 +36399,58 @@ function shouldSendAccountWarn(opts) {
   }).reply;
 }
 
+// ../core/dist/direct-chat/cursor-advance-telemetry.js
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "fs";
+import { join as join13 } from "path";
+var CURSOR_SHORTFALL_COUNTER_SUFFIX = "-cursor-advance-classifications.json";
+function recordCursorAdvanceShortfall(agentDir, source, classification) {
+  if (!agentDir)
+    return;
+  const path = join13(agentDir, `${source}${CURSOR_SHORTFALL_COUNTER_SUFFIX}`);
+  const counts = {};
+  try {
+    const parsed = JSON.parse(readFileSync10(path, "utf-8"));
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      for (const [k, v] of Object.entries(parsed)) {
+        if (typeof v === "number" && Number.isInteger(v) && v >= 0)
+          counts[k] = v;
+      }
+    }
+  } catch {
+  }
+  const key = cursorShortfallKey(classification.route, classification.reason, classification.partial);
+  counts[key] = (counts[key] ?? 0) + 1;
+  try {
+    writeFileSync6(path, JSON.stringify(counts), { mode: 384 });
+  } catch {
+  }
+}
+
+// src/direct-chat-cursor-body.ts
+async function readCursorAdvanceBody(res) {
+  let body;
+  let bodyError;
+  try {
+    const parsed = await res.json();
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+      bodyError = "invalid";
+    } else {
+      body = parsed;
+    }
+  } catch {
+    bodyError = "unreadable";
+  }
+  return {
+    body,
+    httpOk: res.ok && bodyError === void 0,
+    // `res.statusText` is '' on HTTP/2, where it does not exist at all. Passing
+    // '' through is not caught by `classifyCursorAdvance`'s `??` fallback (an
+    // empty string is not nullish), so the operator would get `Reply failed: `
+    // with nothing after it.
+    statusText: bodyError === void 0 ? res.statusText || `HTTP ${res.status}` : `HTTP ${res.status} (${bodyError} response body)`
+  };
+}
+
 // src/usage-limit-reactive-decision.ts
 import { createHash } from "crypto";
 function shouldArmWatch(opts) {
@@ -36335,6 +36463,9 @@ function decideUsageLimitCursorCall(opts) {
       body: {
         agent_id: opts.agentId,
         session_id: opts.sessionId,
+        // This module BUILDS the body but never posts it; the POST and its
+        // verdict live at the `usage-limit-reactive` site in direct-chat-channel.ts.
+        // cursor-advance-allow: body-only, judged at the call site.
         message_ids: [opts.messageId]
       }
     };
@@ -36345,6 +36476,7 @@ function decideUsageLimitCursorCall(opts) {
       agent_id: opts.agentId,
       session_id: opts.sessionId,
       content: opts.noticeText,
+      // cursor-advance-allow: body-only, as above — judged at the call site.
       message_ids: [opts.messageId],
       // ENG-8274: a cap refusal is the SYSTEM speaking, not the agent.
       // Orthogonal to message_ids — consuming the cursor is about delivery,
@@ -36377,7 +36509,7 @@ var DIRECT_CHAT_ACCOUNT_WARN_COOLDOWN_MS = (() => {
 var AGT_HOST = process.env.AGT_HOST;
 var AGT_API_KEY = process.env.AGT_API_KEY;
 var AGT_AGENT_ID = process.env.AGT_AGENT_ID;
-var DIRECT_CHAT_AGENT_DIR = AGT_AGENT_ID ? join13(homedir4(), ".augmented", AGT_AGENT_ID) : null;
+var DIRECT_CHAT_AGENT_DIR = AGT_AGENT_ID ? join14(homedir4(), ".augmented", AGT_AGENT_ID) : null;
 var INBOUND_ATTACHMENTS_DIR = resolveInboundAttachmentsDir({
   codeName: process.env.AGT_AGENT_CODE_NAME,
   turnInitiatorFile: process.env.AGT_TURN_INITIATOR_FILE,
@@ -36388,10 +36520,10 @@ var AGT_AGENT_CODE_NAME = process.env.AGT_AGENT_CODE_NAME;
 var directChatStderrLogStream = null;
 if (AGT_AGENT_CODE_NAME) {
   try {
-    const logDir = join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME);
+    const logDir = join14(homedir4(), ".augmented", AGT_AGENT_CODE_NAME);
     mkdirSync5(logDir, { recursive: true });
     directChatStderrLogStream = createWriteStream(
-      join13(logDir, "direct-chat-channel-stderr.log"),
+      join14(logDir, "direct-chat-channel-stderr.log"),
       { flags: "a", mode: 384 }
     );
     directChatStderrLogStream.on("error", () => {
@@ -36410,11 +36542,24 @@ if (AGT_AGENT_CODE_NAME) {
   } catch {
   }
 }
-var PROGRESS_HEARTBEAT_PATH = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, "channel-progress-heartbeat.json") : null;
-var DIRECT_CHAT_PENDING_INBOUND_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-pending-inbound") : null;
-var DIRECT_CHAT_DELIVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-inbound-delivery-ledger") : null;
-var DIRECT_CHAT_CODE_NAME_AGENT_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME) : null;
+var PROGRESS_HEARTBEAT_PATH = AGT_AGENT_CODE_NAME ? join14(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, "channel-progress-heartbeat.json") : null;
+var DIRECT_CHAT_PENDING_INBOUND_DIR = AGT_AGENT_CODE_NAME ? join14(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-pending-inbound") : null;
+var DIRECT_CHAT_DELIVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join14(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-inbound-delivery-ledger") : null;
+var DIRECT_CHAT_CODE_NAME_AGENT_DIR = AGT_AGENT_CODE_NAME ? join14(homedir4(), ".augmented", AGT_AGENT_CODE_NAME) : null;
 var DIRECT_CHAT_STALE_MARKER_MS = 24 * 60 * 60 * 1e3;
+function judgeCursorAdvance(input, ctx) {
+  const verdict = classifyCursorAdvance(input);
+  if (verdict.outcome === "shortfall") {
+    process.stderr.write(`direct-chat-channel: ${formatCursorAdvanceShortfall(verdict, ctx)}
+`);
+    recordCursorAdvanceShortfall(DIRECT_CHAT_CODE_NAME_AGENT_DIR, "direct-chat", {
+      route: ctx.route,
+      reason: verdict.reason,
+      partial: verdict.partial
+    });
+  }
+  return verdict;
+}
 function recordDirectChatDelivery(sessionId, messageIds) {
   if (!sessionId) return;
   writeInboundDeliveryLedgerEntry(DIRECT_CHAT_DELIVERY_LEDGER_DIR, {
@@ -36424,8 +36569,8 @@ function recordDirectChatDelivery(sessionId, messageIds) {
     delivered_at: (/* @__PURE__ */ new Date()).toISOString()
   });
 }
-var DIRECT_CHAT_RECOVERY_OUTBOX_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-recovery-outbox") : null;
-var DIRECT_CHAT_RECOVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-direct-chat-recovery-ledger") : null;
+var DIRECT_CHAT_RECOVERY_OUTBOX_DIR = AGT_AGENT_CODE_NAME ? join14(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-recovery-outbox") : null;
+var DIRECT_CHAT_RECOVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join14(homedir4(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-direct-chat-recovery-ledger") : null;
 var progressReceivedAt = /* @__PURE__ */ new Map();
 var directChatProgressState = { tracked: null };
 var directChatProgressTickRunning = false;
@@ -36444,7 +36589,7 @@ var directChatKanbanCardClient = createKanbanCardActiveClient({
 function readProgressHeartbeat() {
   if (!PROGRESS_HEARTBEAT_PATH || !existsSync6(PROGRESS_HEARTBEAT_PATH)) return null;
   try {
-    return parseProgressHeartbeat(readFileSync10(PROGRESS_HEARTBEAT_PATH, "utf-8"));
+    return parseProgressHeartbeat(readFileSync11(PROGRESS_HEARTBEAT_PATH, "utf-8"));
   } catch {
     return null;
   }
@@ -36453,8 +36598,8 @@ function seedProgressHeartbeat() {
   if (!PROGRESS_HEARTBEAT_PATH) return;
   const tmp = `${PROGRESS_HEARTBEAT_PATH}.${process.pid}.tmp`;
   try {
-    mkdirSync5(join13(homedir4(), ".augmented", AGT_AGENT_CODE_NAME), { recursive: true });
-    writeFileSync6(tmp, serializeProgressHeartbeat(SEED_PROGRESS_STEP, Date.now()), { mode: 384 });
+    mkdirSync5(join14(homedir4(), ".augmented", AGT_AGENT_CODE_NAME), { recursive: true });
+    writeFileSync7(tmp, serializeProgressHeartbeat(SEED_PROGRESS_STEP, Date.now()), { mode: 384 });
     renameSync5(tmp, PROGRESS_HEARTBEAT_PATH);
   } catch {
     try {
@@ -36614,6 +36759,9 @@ async function maybeSendDirectChatAccountWarn(sessionId) {
       agent_id: AGT_AGENT_ID,
       session_id: sessionId,
       content: buildAccountIssueReplyText(),
+      // The L1 warn nag is an extra message alongside the agent's real reply,
+      // which has already advanced the cursor.
+      // cursor-advance-allow: deliberately EMPTY — nothing to advance, no count to read.
       message_ids: [],
       // ENG-8274: kind:'notice' — an account-auth nag is the system speaking, not
       // the agent, and owes no reply.
@@ -36647,8 +36795,8 @@ var inboundAttachmentDeps = {
     };
   },
   ensureDir: (dir) => mkdirSync5(dir, { recursive: true }),
-  writeFile: (path, bytes) => writeFileSync6(path, bytes, { mode: 384 }),
-  joinPath: (...parts) => join13(...parts),
+  writeFile: (path, bytes) => writeFileSync7(path, bytes, { mode: 384 }),
+  joinPath: (...parts) => join14(...parts),
   warn: (msg) => process.stderr.write(`${msg}
 `)
 };
@@ -36813,11 +36961,29 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
           content: slices[0],
           message_ids
         });
-        const data = await res.json();
-        if (!res.ok || data.error || !data.message_id) {
+        const { body: data, httpOk, statusText } = await readCursorAdvanceBody(res);
+        const verdict = judgeCursorAdvance(
+          {
+            messageIds: message_ids,
+            httpOk,
+            httpStatus: res.status,
+            statusText,
+            body: data
+          },
+          {
+            route: "reply",
+            site: "direct_chat.reply:stream-anchor",
+            sessionId: session_id,
+            cleared: ["claim", "markers", "delivery-ledger"]
+          }
+        );
+        if (verdict.outcome === "failed" || !data?.message_id) {
           return {
             content: [
-              { type: "text", text: `Reply failed: ${data.error ?? res.statusText}` }
+              {
+                type: "text",
+                text: `Reply failed: ${verdict.outcome === "failed" ? verdict.error : "no message_id returned"}`
+              }
             ],
             isError: true
           };
@@ -36862,10 +37028,25 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
         content,
         message_ids
       });
-      const data = await res.json();
-      if (!res.ok || data.error) {
+      const { body: data, httpOk, statusText } = await readCursorAdvanceBody(res);
+      const verdict = judgeCursorAdvance(
+        {
+          messageIds: message_ids,
+          httpOk,
+          httpStatus: res.status,
+          statusText,
+          body: data
+        },
+        {
+          route: "reply",
+          site: "direct_chat.reply:single-shot",
+          sessionId: session_id,
+          cleared: ["claim", "markers", "delivery-ledger"]
+        }
+      );
+      if (verdict.outcome === "failed") {
         return {
-          content: [{ type: "text", text: `Reply failed: ${data.error ?? res.statusText}` }],
+          content: [{ type: "text", text: `Reply failed: ${verdict.error}` }],
           isError: true
         };
       }
@@ -36893,10 +37074,25 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
         session_id,
         message_ids
       });
-      const data = await res.json();
-      if (!res.ok || data.error) {
+      const { body: data, httpOk, statusText } = await readCursorAdvanceBody(res);
+      const verdict = judgeCursorAdvance(
+        {
+          messageIds: message_ids,
+          httpOk,
+          httpStatus: res.status,
+          statusText,
+          body: data
+        },
+        {
+          route: "consume",
+          site: "direct_chat.consume",
+          sessionId: session_id,
+          cleared: ["claim", "markers", "delivery-ledger"]
+        }
+      );
+      if (verdict.outcome === "failed") {
         return {
-          content: [{ type: "text", text: `Consume failed: ${data.error ?? res.statusText}` }],
+          content: [{ type: "text", text: `Consume failed: ${verdict.error}` }],
           isError: true
         };
       }
@@ -36982,7 +37178,7 @@ function scheduleDirectChatBusyAck(sessionId, messageId, arrivedWhileBusy) {
     let paneLogFreshAgeMs = null;
     if (DIRECT_CHAT_CODE_NAME_AGENT_DIR) {
       try {
-        const paneMtimeMs = statSync4(join13(DIRECT_CHAT_CODE_NAME_AGENT_DIR, "pane.log")).mtimeMs;
+        const paneMtimeMs = statSync4(join14(DIRECT_CHAT_CODE_NAME_AGENT_DIR, "pane.log")).mtimeMs;
         paneLogFreshAgeMs = Math.max(0, Date.now() - paneMtimeMs);
       } catch {
       }
@@ -37095,8 +37291,23 @@ function armUsageLimitWatch(args) {
         noticeText: buildUsageLimitReplyText(refusal.resetsAt)
       });
       const res = await apiPost(route, body);
-      const data = await res.json().catch(() => ({}));
-      if (res.ok && data.error == null) {
+      const { body: data, httpOk, statusText } = await readCursorAdvanceBody(res);
+      const verdict = judgeCursorAdvance(
+        {
+          messageIds: [args.messageId],
+          httpOk,
+          httpStatus: res.status,
+          statusText,
+          body: data
+        },
+        {
+          route: throttle.reply ? "reply" : "consume",
+          site: "usage-limit-reactive",
+          sessionId: args.sessionId,
+          cleared: ["claim", "markers"]
+        }
+      );
+      if (verdict.outcome !== "failed") {
         claimTracker.clear(args.sessionId, [args.messageId]);
         clearDirectChatPendingMarkersForSession(DIRECT_CHAT_PENDING_INBOUND_DIR, args.sessionId);
         process.stderr.write(
@@ -37106,7 +37317,7 @@ function armUsageLimitWatch(args) {
       } else {
         if (throttle.reply) DIRECT_CHAT_USAGE_LIMIT_CACHE.delete(throttleKey);
         process.stderr.write(
-          `direct-chat-channel: [usage-limit-reactive] ${throttle.reply ? "notice" : "consume"} failed for session=${args.sessionId}: ${data.error ?? `HTTP ${res.status}`}
+          `direct-chat-channel: [usage-limit-reactive] ${throttle.reply ? "notice" : "consume"} failed for session=${args.sessionId}: ${verdict.error}
 `
         );
       }
@@ -37164,13 +37375,28 @@ async function pollForMessages(sinceMs) {
         const body = throttle.reply ? { agent_id: AGT_AGENT_ID, session_id: msg.session_id, content: MAINTENANCE_OFFLINE_MESSAGE, message_ids: [msg.id], kind: "notice" } : { agent_id: AGT_AGENT_ID, session_id: msg.session_id, message_ids: [msg.id] };
         try {
           const res2 = await apiPost(route, body);
-          const data2 = await res2.json().catch(() => ({}));
-          if (res2.ok && data2.error == null) {
+          const { body: data2, httpOk, statusText } = await readCursorAdvanceBody(res2);
+          const verdict = judgeCursorAdvance(
+            {
+              messageIds: [msg.id],
+              httpOk,
+              httpStatus: res2.status,
+              statusText,
+              body: data2
+            },
+            {
+              route: throttle.reply ? "reply" : "consume",
+              site: "maintenance-offline",
+              sessionId: msg.session_id,
+              cleared: ["processed-marker"]
+            }
+          );
+          if (verdict.outcome !== "failed") {
             markProcessed(msg.id);
           } else {
             if (throttle.reply) DIRECT_CHAT_MAINTENANCE_CACHE.delete(throttleKey);
             process.stderr.write(
-              `direct-chat-channel: maintenance ${throttle.reply ? "reply" : "consume"} failed: ${data2.error ?? `HTTP ${res2.status}`}
+              `direct-chat-channel: maintenance ${throttle.reply ? "reply" : "consume"} failed: ${verdict.error}
 `
             );
           }
@@ -37195,13 +37421,28 @@ async function pollForMessages(sinceMs) {
         const body = throttle.reply ? { agent_id: AGT_AGENT_ID, session_id: msg.session_id, content: buildAccountIssueReplyText(), message_ids: [msg.id], kind: "notice" } : { agent_id: AGT_AGENT_ID, session_id: msg.session_id, message_ids: [msg.id] };
         try {
           const res2 = await apiPost(route, body);
-          const data2 = await res2.json().catch(() => ({}));
-          if (res2.ok && data2.error == null) {
+          const { body: data2, httpOk, statusText } = await readCursorAdvanceBody(res2);
+          const verdict = judgeCursorAdvance(
+            {
+              messageIds: [msg.id],
+              httpOk,
+              httpStatus: res2.status,
+              statusText,
+              body: data2
+            },
+            {
+              route: throttle.reply ? "reply" : "consume",
+              site: "account-mute",
+              sessionId: msg.session_id,
+              cleared: ["processed-marker"]
+            }
+          );
+          if (verdict.outcome !== "failed") {
             markProcessed(msg.id);
           } else {
             if (throttle.reply) DIRECT_CHAT_ACCOUNT_MUTE_CACHE.delete(throttleKey);
             process.stderr.write(
-              `direct-chat-channel: account-mute ${throttle.reply ? "reply" : "consume"} failed: ${data2.error ?? `HTTP ${res2.status}`}
+              `direct-chat-channel: account-mute ${throttle.reply ? "reply" : "consume"} failed: ${verdict.error}
 `
             );
           }
@@ -37271,7 +37512,23 @@ async function pollForMessages(sinceMs) {
             session_id: msg.session_id,
             message_ids: [msg.id]
           });
-          if (!res2.ok) throw new Error(`consume returned HTTP ${res2.status}`);
+          const { body: data2, httpOk, statusText } = await readCursorAdvanceBody(res2);
+          const verdict = judgeCursorAdvance(
+            {
+              messageIds: [msg.id],
+              httpOk,
+              httpStatus: res2.status,
+              statusText,
+              body: data2
+            },
+            {
+              route: "consume",
+              site: "notice-push-consume",
+              sessionId: msg.session_id,
+              cleared: ["processed-marker"]
+            }
+          );
+          if (verdict.outcome === "failed") throw new Error(verdict.error);
           markProcessed(msg.id);
         } catch (err) {
           process.stderr.write(
@@ -37411,7 +37668,7 @@ function sweepAgedDirectChatMarkersNow(thresholdMs) {
   const now = Date.now();
   const res = sweepAgedDirectChatMarkers(DIRECT_CHAT_PENDING_INBOUND_DIR, {
     readdir: (dir) => readdirSync6(dir),
-    readFile: (p2) => readFileSync10(p2, "utf8"),
+    readFile: (p2) => readFileSync11(p2, "utf8"),
     unlink: (p2) => {
       if (existsSync6(p2)) unlinkSync4(p2);
     },
@@ -37447,7 +37704,7 @@ function sanitizeRecoveryText(text) {
 }
 function directChatRecoveryDeps() {
   return {
-    readFile: (p2) => readFileSync10(p2, "utf-8"),
+    readFile: (p2) => readFileSync11(p2, "utf-8"),
     renameFile: (from, to) => renameSync5(from, to),
     unlinkFile: (p2) => {
       if (existsSync6(p2)) unlinkSync4(p2);
@@ -37460,7 +37717,7 @@ function directChatRecoveryDeps() {
       if (!DIRECT_CHAT_RECOVERY_LEDGER_DIR) return;
       if (markerName.includes("/") || markerName.includes("\\") || markerName.includes("..")) return;
       try {
-        const p2 = join13(DIRECT_CHAT_RECOVERY_LEDGER_DIR, markerName);
+        const p2 = join14(DIRECT_CHAT_RECOVERY_LEDGER_DIR, markerName);
         if (existsSync6(p2)) unlinkSync4(p2);
       } catch {
       }
@@ -37473,8 +37730,23 @@ function directChatRecoveryDeps() {
           content,
           message_ids: messageIds
         });
-        const data = await res.json().catch(() => ({}));
-        if (!res.ok || data.error) return { ok: false, error: data.error ?? `HTTP ${res.status}` };
+        const { body: data, httpOk, statusText } = await readCursorAdvanceBody(res);
+        const verdict = judgeCursorAdvance(
+          {
+            messageIds,
+            httpOk,
+            httpStatus: res.status,
+            statusText,
+            body: data
+          },
+          {
+            route: "reply",
+            site: "recovery-outbox",
+            sessionId,
+            cleared: ["claim", "markers", "outbox-payload", "recovery-ledger"]
+          }
+        );
+        if (verdict.outcome === "failed") return { ok: false, error: verdict.error };
         return { ok: true };
       } catch (err) {
         return { ok: false, error: err.message };
@@ -37496,7 +37768,7 @@ async function processDirectChatRecoveryOutboxFile(filename) {
   if (!enabled) return;
   directChatRecoveryInFlight.add(filename);
   try {
-    const fullPath = join13(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, filename);
+    const fullPath = join14(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, filename);
     await consumeDirectChatRecoveryFile(fullPath, filename, directChatRecoveryDeps());
   } catch (err) {
     process.stderr.write(
@@ -37524,7 +37796,7 @@ if (DIRECT_CHAT_RECOVERY_OUTBOX_DIR) {
       if (!filename) return;
       const name = filename.toString();
       if (!name.endsWith(".json")) return;
-      if (existsSync6(join13(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, name))) {
+      if (existsSync6(join14(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, name))) {
         void processDirectChatRecoveryOutboxFile(name);
       }
     });

package/dist/mcp/origami.js

@@ -38700,6 +38700,23 @@ var ASSET_TYPES = {
 var DEFAULT_CHUNK_BUDGET_BYTES = 180 * 1024;
 var textEncoder = new TextEncoder();
 
+// ../core/dist/integrations/remote-mcp-proxy-env.js
+var REMOTE_MCP_PROXY_ENV = {
+  url: "AGT_REMOTE_MCP_URL",
+  tokenFile: "AGT_REMOTE_MCP_TOKEN_FILE",
+  tokenVar: "AGT_REMOTE_MCP_TOKEN_VAR",
+  label: "AGT_REMOTE_MCP_LABEL",
+  authHeader: "AGT_REMOTE_MCP_AUTH_HEADER",
+  extraHeaders: "AGT_REMOTE_MCP_EXTRA_HEADERS",
+  toolAllowlist: "AGT_REMOTE_MCP_TOOL_ALLOWLIST",
+  preEnableToolsets: "AGT_REMOTE_MCP_PREENABLE_TOOLSETS"
+};
+var REMOTE_MCP_AUTH_ENV_KEYS = [
+  REMOTE_MCP_PROXY_ENV.tokenVar,
+  REMOTE_MCP_PROXY_ENV.authHeader,
+  REMOTE_MCP_PROXY_ENV.extraHeaders
+];
+
 // ../core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
   {
@@ -39845,6 +39862,20 @@ var DIRECT_CHAT_UPLOAD_MAX_BYTES = 10 * MB2;
 var AGENT_DIRECTED_NOTICE_KINDS = ["scheduled_task_nudge", "kanban_check"];
 var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
 
+// ../core/dist/direct-chat/cursor-advance.js
+var CURSOR_SHORTFALL_REASONS = [
+  "not_found",
+  "gave_up",
+  "already_delivered",
+  "error",
+  "undiagnosed",
+  "unknown",
+  "unreported",
+  "malformed_count",
+  "other"
+];
+var KNOWN_REASONS = new Set(CURSOR_SHORTFALL_REASONS);
+
 // ../core/dist/onboarding/state-machine.js
 var AREA_ORDER = [
   "framing",