@integrity-labs/agt-cli 0.28.528 → 0.28.529

package/dist/lib/manager-worker.js

@@ -53,7 +53,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-7N55RDMG.js";
+} from "../chunk-MKSL2EQU.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -67,6 +67,7 @@ import {
   CLAUDE_MD_MAX_CHARS,
   CONVERSATION_FAILURE_CATEGORIES,
   DEFAULT_FRAMEWORK,
+  DEFAULT_NEIGHBOURHOOD_MS,
   FLAGS_SCHEMA_VERSION,
   FLAG_REGISTRY,
   FORCED_UPDATE_HARD_DEADLINE_MS,
@@ -99,6 +100,7 @@ import {
   estimateActiveTasksTokens,
   execFilePromiseLong,
   extractFrontmatter,
+  extractQualifyingTurns,
   forcedUpdatePendingForMs,
   formatActorId,
   formatCursorAdvanceShortfall,
@@ -118,6 +120,7 @@ import {
   isAgentIdle,
   isAgentTimezoneOverrideExpired,
   isBareAck,
+  isBucketQualified,
   isConversationFailureCategory,
   isEmptyTotals,
   isForcedUpdatePastDeadline,
@@ -177,16 +180,16 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-PR3QSOLI.js";
+} from "../chunk-Q4XGKOHZ.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
 
 // src/lib/manager-worker.ts
 import { createHash as createHash16 } from "crypto";
-import { readFileSync as readFileSync22, writeFileSync as writeFileSync13, mkdirSync as mkdirSync10, existsSync as existsSync12, rmSync as rmSync5, readdirSync as readdirSync7, statSync as statSync6, copyFileSync } from "fs";
+import { readFileSync as readFileSync22, writeFileSync as writeFileSync13, mkdirSync as mkdirSync10, existsSync as existsSync12, rmSync as rmSync5, readdirSync as readdirSync8, statSync as statSync7, copyFileSync } from "fs";
 import { execFileSync as syncExecFile } from "child_process";
-import { join as join28, dirname as dirname8, delimiter as pathDelimiter } from "path";
+import { join as join29, dirname as dirname8, delimiter as pathDelimiter } from "path";
 import { homedir as homedir12 } from "os";
 import { fileURLToPath } from "url";
 
@@ -2427,7 +2430,7 @@ function accountEnforcementMarkerPath(codeName) {
   return join10(homedir6(), ".augmented", codeName, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
 }
 function syncAccountEnforcementMarker(codeName, level, log2 = (m) => process.stderr.write(`${m}
-`)) {
+`), text) {
   if (level !== "warn" && level !== "mute") {
     clearAccountEnforcementMarker(codeName, log2);
     return;
@@ -2437,7 +2440,7 @@ function syncAccountEnforcementMarker(codeName, level, log2 = (m) => process.std
   const tempPath = `${path}.${process.pid}.tmp`;
   try {
     mkdirSync4(dir, { recursive: true });
-    writeFileSync5(tempPath, serializeAccountEnforcementMarker(level), "utf-8");
+    writeFileSync5(tempPath, serializeAccountEnforcementMarker(level, text), "utf-8");
     renameSync2(tempPath, path);
   } catch (err) {
     try {
@@ -4327,14 +4330,14 @@ import { join as join17 } from "path";
 function integrationSkillHashKey(agentId, skillId) {
   return `plugin-skill:${agentId}:${skillId}`;
 }
-function shouldWriteIntegrationSkill(cache, agentId, skillId, contentHash) {
-  return cache.get(integrationSkillHashKey(agentId, skillId)) !== contentHash;
+function shouldWriteIntegrationSkill(cache2, agentId, skillId, contentHash) {
+  return cache2.get(integrationSkillHashKey(agentId, skillId)) !== contentHash;
 }
-function rememberIntegrationSkill(cache, agentId, skillId, contentHash) {
-  cache.set(integrationSkillHashKey(agentId, skillId), contentHash);
+function rememberIntegrationSkill(cache2, agentId, skillId, contentHash) {
+  cache2.set(integrationSkillHashKey(agentId, skillId), contentHash);
 }
-function forgetIntegrationSkill(cache, agentId, skillId) {
-  cache.delete(integrationSkillHashKey(agentId, skillId));
+function forgetIntegrationSkill(cache2, agentId, skillId) {
+  cache2.delete(integrationSkillHashKey(agentId, skillId));
 }
 function removeIntegrationSkillFolder(opts) {
   forgetIntegrationSkill(opts.cache, opts.agentId, opts.entry);
@@ -6122,15 +6125,174 @@ async function syncAndCheckClaudeScheduler(agent, tasks, boardItems, refreshData
   }
 }
 
+// src/lib/occupancy-gate.ts
+import { closeSync, openSync, readdirSync as readdirSync5, readSync, statSync as statSync5 } from "fs";
+import { join as join25 } from "path";
+var TAIL_BYTES = 256 * 1024;
+var MAX_RECORD_ALIGN_BYTES = 8 * 1024 * 1024;
+var GATE_MAX_BUCKET_AGE_MS = 30 * 6e4;
+var TRANSCRIPT_MTIME_WINDOW_MS4 = GATE_MAX_BUCKET_AGE_MS + DEFAULT_NEIGHBOURHOOD_MS + 6e4;
+var cache = /* @__PURE__ */ new Map();
+function readAlignedTail(path, tailBytes, maxAlignBytes) {
+  let fd = null;
+  try {
+    const size = statSync5(path).size;
+    if (size <= 0) return { content: "", complete: true };
+    fd = openSync(path, "r");
+    let readStart = Math.max(0, size - tailBytes);
+    if (readStart > 0) {
+      const scanFloor = Math.max(0, readStart - maxAlignBytes);
+      const CHUNK = 64 * 1024;
+      let pos = readStart;
+      let boundary = -1;
+      while (pos > scanFloor) {
+        const from = Math.max(scanFloor, pos - CHUNK);
+        const len2 = pos - from;
+        const b = Buffer.allocUnsafe(len2);
+        if (readSync(fd, b, 0, len2, from) !== len2) return null;
+        const idx = b.lastIndexOf(10);
+        if (idx !== -1) {
+          boundary = from + idx + 1;
+          break;
+        }
+        pos = from;
+      }
+      if (boundary !== -1) {
+        readStart = boundary;
+      } else if (scanFloor === 0) {
+        readStart = 0;
+      } else {
+        return { content: "", complete: false };
+      }
+    }
+    const len = size - readStart;
+    const buf = Buffer.allocUnsafe(len);
+    if (readSync(fd, buf, 0, len, readStart) !== len) return null;
+    return { content: buf.toString("utf-8", 0, len), complete: true };
+  } catch {
+    return null;
+  } finally {
+    if (fd != null) {
+      try {
+        closeSync(fd);
+      } catch {
+      }
+    }
+  }
+}
+function isAbsentDirError(err) {
+  const code = err.code;
+  return code === "ENOENT" || code === "ENOTDIR";
+}
+function candidateTranscriptPaths(dir) {
+  const paths = [];
+  let top;
+  try {
+    top = readdirSync5(dir);
+  } catch {
+    return { paths, complete: false };
+  }
+  let complete = true;
+  for (const name of top) {
+    if (name.endsWith(".jsonl")) {
+      paths.push(join25(dir, name));
+      continue;
+    }
+    const subDir = join25(dir, name, "subagents");
+    let subs;
+    try {
+      subs = readdirSync5(subDir);
+    } catch (err) {
+      if (!isAbsentDirError(err)) complete = false;
+      continue;
+    }
+    for (const sub of subs) {
+      if (sub.endsWith(".jsonl")) paths.push(join25(subDir, sub));
+    }
+  }
+  return { paths, complete };
+}
+function collectQualifyingTurns(codeName, nowMs, opts = {}) {
+  const dir = opts.transcriptDir ?? sessionTranscriptDir(getProjectDir(codeName));
+  const tailBytes = opts.tailBytes ?? TAIL_BYTES;
+  const maxAlignBytes = opts.maxAlignBytes ?? MAX_RECORD_ALIGN_BYTES;
+  const sinceMs = nowMs - TRANSCRIPT_MTIME_WINDOW_MS4;
+  const agentCache = cache.get(codeName) ?? /* @__PURE__ */ new Map();
+  const nextCache = /* @__PURE__ */ new Map();
+  const all = /* @__PURE__ */ new Set();
+  let transcriptsRead = 0;
+  const { paths, complete: scanComplete } = candidateTranscriptPaths(dir);
+  let complete = scanComplete;
+  for (const path of paths) {
+    let st;
+    try {
+      st = statSync5(path);
+    } catch (err) {
+      if (!isAbsentDirError(err)) complete = false;
+      continue;
+    }
+    if (!st.isFile()) continue;
+    if (st.mtimeMs < sinceMs) continue;
+    const seen = agentCache.get(path);
+    if (seen && seen.mtimeMs === st.mtimeMs && seen.size === st.size) {
+      transcriptsRead += 1;
+      nextCache.set(path, seen);
+      for (const t of seen.turns) all.add(t);
+      continue;
+    }
+    const aligned = readAlignedTail(path, tailBytes, maxAlignBytes);
+    if (aligned === null) {
+      complete = false;
+      continue;
+    }
+    if (!aligned.complete) {
+      complete = false;
+      continue;
+    }
+    const content = aligned.content;
+    transcriptsRead += 1;
+    const turns = extractQualifyingTurns(content, { startMs: sinceMs });
+    nextCache.set(path, { mtimeMs: st.mtimeMs, size: st.size, turns });
+    for (const t of turns) all.add(t);
+  }
+  cache.set(codeName, nextCache);
+  return { turns: [...all].sort((a, b) => a - b), transcriptsRead, complete };
+}
+function qualifyBuckets(buckets, qualifying, mode, nowMs, neighbourhoodMs = DEFAULT_NEIGHBOURHOOD_MS) {
+  const failOpen = !qualifying.complete;
+  const kept = [];
+  let qualified = 0;
+  let unqualifiedDropped = 0;
+  let unreadable = 0;
+  for (const b of buckets) {
+    const startMs = Date.parse(b.bucket);
+    const parsed = Number.isFinite(startMs);
+    const tooOld = parsed && nowMs - startMs > GATE_MAX_BUCKET_AGE_MS;
+    if (failOpen || tooOld || !parsed) {
+      if (failOpen || !parsed) unreadable += 1;
+      kept.push(b);
+      continue;
+    }
+    if (isBucketQualified(startMs, qualifying.turns, neighbourhoodMs)) {
+      qualified += 1;
+      kept.push(b);
+    } else {
+      unqualifiedDropped += 1;
+      if (mode === "shadow") kept.push(b);
+    }
+  }
+  return { kept, qualified, unqualifiedDropped, unreadable };
+}
+
 // src/lib/pane-occupancy-sampler.ts
-import { statSync as statSync5 } from "fs";
+import { statSync as statSync6 } from "fs";
 var SAMPLE_INTERVAL_MS = 1e4;
 var IDLE_GAP_MS = 12e4;
 var POST_IDLE_CREDIT_MS = 6e4;
 var lastMtimeMs = /* @__PURE__ */ new Map();
 function paneMtimeMs(codeName) {
   try {
-    return statSync5(paneLogPath(codeName)).mtimeMs;
+    return statSync6(paneLogPath(codeName)).mtimeMs;
   } catch {
     return null;
   }
@@ -7293,7 +7455,7 @@ async function fireOpencodeScheduledTask(agent, task) {
 import { createHash as createHash15 } from "crypto";
 import { existsSync as existsSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync19, renameSync as renameSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "fs";
 import { randomUUID } from "crypto";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 
 // src/lib/telegram-ingest.ts
 import https2 from "https";
@@ -7841,7 +8003,7 @@ function createFileOffsetStore(codeName, log2, currentBotId) {
   let filePath;
   try {
     dir = getFramework("opencode").getAgentDir(codeName);
-    filePath = join25(dir, "telegram-getupdates-offset-opencode.json");
+    filePath = join26(dir, "telegram-getupdates-offset-opencode.json");
   } catch {
     dir = null;
     filePath = null;
@@ -8120,24 +8282,24 @@ function partitionActionableByPoison(actionable, states, config2) {
 }
 
 // src/lib/restart-flags.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync8, readdirSync as readdirSync5, readFileSync as readFileSync20, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync11 } from "fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync8, readdirSync as readdirSync6, readFileSync as readFileSync20, renameSync as renameSync5, rmSync as rmSync4, writeFileSync as writeFileSync11 } from "fs";
 import { homedir as homedir11 } from "os";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 function restartFlagsDir() {
-  return join26(homedir11(), ".augmented", "restart-flags");
+  return join27(homedir11(), ".augmented", "restart-flags");
 }
 function flagPath(codeName) {
-  return join26(restartFlagsDir(), `${codeName}.flag`);
+  return join27(restartFlagsDir(), `${codeName}.flag`);
 }
 function readRestartFlags() {
   const dir = restartFlagsDir();
   if (!existsSync11(dir)) return [];
   const out = [];
-  for (const entry of readdirSync5(dir)) {
+  for (const entry of readdirSync6(dir)) {
     if (!entry.endsWith(".flag")) continue;
     try {
-      const raw = readFileSync20(join26(dir, entry), "utf8");
+      const raw = readFileSync20(join27(dir, entry), "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.codeName !== "string" || parsed.codeName.length === 0) {
         parsed.codeName = entry.replace(/\.flag$/, "");
@@ -8255,8 +8417,8 @@ async function sendError(flag, opts, text) {
 }
 
 // src/lib/restart-context.ts
-import { readdirSync as readdirSync6, readFileSync as readFileSync21, writeFileSync as writeFileSync12, mkdirSync as mkdirSync9, unlinkSync as unlinkSync3 } from "fs";
-import { dirname as dirname7, join as join27 } from "path";
+import { readdirSync as readdirSync7, readFileSync as readFileSync21, writeFileSync as writeFileSync12, mkdirSync as mkdirSync9, unlinkSync as unlinkSync3 } from "fs";
+import { dirname as dirname7, join as join28 } from "path";
 var SLACK_PENDING_INBOUND_DIRNAME = "slack-pending-inbound";
 var SLACK_RESTART_CONTEXT_DIRNAME = "slack-restart-context";
 var MAX_TOPIC_CHARS = 140;
@@ -8268,10 +8430,10 @@ function augmentedAgentDir(codeName) {
   return dirname7(getProjectDir(codeName));
 }
 function slackPendingInboundDir(codeName) {
-  return join27(augmentedAgentDir(codeName), SLACK_PENDING_INBOUND_DIRNAME);
+  return join28(augmentedAgentDir(codeName), SLACK_PENDING_INBOUND_DIRNAME);
 }
 function slackRestartContextDir(codeName) {
-  return join27(augmentedAgentDir(codeName), SLACK_RESTART_CONTEXT_DIRNAME);
+  return join28(augmentedAgentDir(codeName), SLACK_RESTART_CONTEXT_DIRNAME);
 }
 function sanitizeTopic(raw) {
   const cleaned = raw.replace(/\s+/g, " ").trim().replace(/[<>]/g, " ").replace(/\s+/g, " ").trim();
@@ -8306,7 +8468,7 @@ function computeRestartContextHints(markers, allTurns, nowMs, reconstruct = reco
 }
 function safeReaddir(dir) {
   try {
-    return readdirSync6(dir);
+    return readdirSync7(dir);
   } catch {
     return [];
   }
@@ -8331,7 +8493,7 @@ function pruneHintsExcept(codeName, freshFilenames) {
     if (!filename.endsWith(".json")) continue;
     if (freshFilenames.has(filename)) continue;
     try {
-      unlinkSync3(join27(ctxDir, filename));
+      unlinkSync3(join28(ctxDir, filename));
     } catch {
     }
   }
@@ -8352,7 +8514,7 @@ function refreshSlackRestartContextHints(codeNames, opts = {}) {
       }
       const markers = [];
       for (const filename of markerFilenames.slice(0, cap)) {
-        const parsed = readStrandedMarker(join27(markerDir, filename));
+        const parsed = readStrandedMarker(join28(markerDir, filename));
         if (parsed) markers.push({ filename, channel: parsed.channel, thread_ts: parsed.thread_ts });
       }
       if (markers.length === 0) {
@@ -8366,7 +8528,7 @@ function refreshSlackRestartContextHints(codeNames, opts = {}) {
       const freshFilenames = /* @__PURE__ */ new Set();
       for (const { filename, hint } of hints) {
         try {
-          writeHintFile(join27(ctxDir, filename), ctxDir, hint);
+          writeHintFile(join28(ctxDir, filename), ctxDir, hint);
           freshFilenames.add(filename);
         } catch (err) {
           log2(`[restart-context] ${codeName}: hint write failed for ${filename}: ${err.message}`);
@@ -9646,7 +9808,7 @@ function performLazyDayRolloverReset(codeName, agentTimezone) {
 }
 function paneLogAgeSecondsFor(codeName) {
   try {
-    const mtimeMs = statSync6(paneLogPath(codeName)).mtimeMs;
+    const mtimeMs = statSync7(paneLogPath(codeName)).mtimeMs;
     return Math.max(0, Math.floor((Date.now() - mtimeMs) / 1e3));
   } catch (err) {
     if (err?.code === "ENOENT") return null;
@@ -9796,7 +9958,7 @@ var runningChannelSecretHashes = /* @__PURE__ */ new Map();
 var sessionLaunchManagedStructure = /* @__PURE__ */ new Map();
 function projectMcpHash(_codeName, projectDir) {
   try {
-    const raw = readFileSync22(join28(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync22(join29(projectDir, ".mcp.json"), "utf-8");
     return createHash16("sha256").update(canonicalJson(JSON.parse(raw))).digest("hex");
   } catch {
     return null;
@@ -9804,7 +9966,7 @@ function projectMcpHash(_codeName, projectDir) {
 }
 function projectMcpKeys(_codeName, projectDir) {
   try {
-    const raw = readFileSync22(join28(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync22(join29(projectDir, ".mcp.json"), "utf-8");
     const parsed = JSON.parse(raw);
     const servers = parsed.mcpServers;
     if (!servers || typeof servers !== "object") return /* @__PURE__ */ new Set();
@@ -9822,7 +9984,7 @@ function seedSessionLaunchBaselines(codeName, projectDir) {
   else runningMcpServerKeys.delete(codeName);
   let launchStructure = null;
   try {
-    const raw = readFileSync22(join28(projectDir, ".mcp.json"), "utf-8");
+    const raw = readFileSync22(join29(projectDir, ".mcp.json"), "utf-8");
     launchStructure = managedMcpStructureHashFromFile(
       JSON.parse(raw),
       isManagedMcpServerKey
@@ -9932,7 +10094,7 @@ async function runAgentSessionToolBindProbes(agent, integrations, projectDir, op
   if (result && result.rebindCandidates.length > 0 && hostFlagStore().getBoolean("session-tool-rebind")) {
     let mcpJsonForRebind = null;
     try {
-      mcpJsonForRebind = JSON.parse(readFileSync22(join28(projectDir, ".mcp.json"), "utf-8"));
+      mcpJsonForRebind = JSON.parse(readFileSync22(join29(projectDir, ".mcp.json"), "utf-8"));
     } catch {
       mcpJsonForRebind = null;
     }
@@ -10076,7 +10238,7 @@ function checkMcpConfigDriftAndScheduleRestart(codeName, projectDir) {
 function projectChannelSecretHash(projectDir) {
   try {
     const entries = parseEnvIntegrations(
-      readFileSync22(join28(projectDir, ".env.integrations"), "utf-8")
+      readFileSync22(join29(projectDir, ".env.integrations"), "utf-8")
     );
     return channelSecretValueHash(entries, CHANNEL_SECRET_ENV_KEYS);
   } catch {
@@ -10172,7 +10334,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.528" : "dev";
+var agtCliVersion = true ? "0.28.529" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -10560,7 +10722,7 @@ async function ensureOpencodeBinary() {
   try {
     const prefix = execFileSync2("npm", ["prefix", "-g"], { encoding: "utf-8", timeout: 1e4 }).trim();
     if (prefix) {
-      const npmBin = join28(prefix, "bin");
+      const npmBin = join29(prefix, "bin");
       const current = (process.env.PATH ?? "").split(pathDelimiter);
       if (!current.includes(npmBin)) {
         process.env.PATH = [npmBin, ...current.filter(Boolean)].join(pathDelimiter);
@@ -10677,7 +10839,7 @@ ${r.stderr}`;
 }
 var UPDATE_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 function selfUpdateAppliedMarkerPath() {
-  return join28(homedir12(), ".augmented", ".last-self-update-applied");
+  return join29(homedir12(), ".augmented", ".last-self-update-applied");
 }
 var selfUpdateUpToDateLogged = false;
 var selfUpdatePinnedLogged = false;
@@ -10706,7 +10868,7 @@ async function checkAndUpdateCli(opts) {
     const isNpmGlobal = !isBrewFormula && resolvedPath.includes("node_modules");
     if (!isBrewFormula && !isNpmGlobal) return "noop";
     const { readFileSync: readF, writeFileSync: writeF } = await import("fs");
-    const markerPath = join28(homedir12(), ".augmented", ".last-update-check");
+    const markerPath = join29(homedir12(), ".augmented", ".last-update-check");
     if (!force) {
       try {
         const lastCheck = parseInt(readF(markerPath, "utf-8").trim(), 10);
@@ -11066,12 +11228,12 @@ async function checkClaudeAuth() {
 var evalEmptyMcpConfigPath = null;
 function ensureEvalEmptyMcpConfig() {
   if (evalEmptyMcpConfigPath && existsSync12(evalEmptyMcpConfigPath)) return evalEmptyMcpConfigPath;
-  const dir = join28(homedir12(), ".augmented");
+  const dir = join29(homedir12(), ".augmented");
   try {
     mkdirSync10(dir, { recursive: true });
   } catch {
   }
-  const p = join28(dir, ".eval-empty-mcp.json");
+  const p = join29(dir, ".eval-empty-mcp.json");
   writeFileSync13(p, JSON.stringify({ mcpServers: {} }));
   evalEmptyMcpConfigPath = p;
   return p;
@@ -11163,10 +11325,10 @@ function resolveConversationEvalBackend() {
   return conversationEvalBackend;
 }
 function getStateFile() {
-  return join28(config?.configDir ?? join28(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
+  return join29(config?.configDir ?? join29(process.env["HOME"] ?? "/tmp", ".augmented"), "manager-state.json");
 }
 function channelHashCacheDir() {
-  return config?.configDir ?? join28(process.env["HOME"] ?? "/tmp", ".augmented");
+  return config?.configDir ?? join29(process.env["HOME"] ?? "/tmp", ".augmented");
 }
 function loadChannelHashCache2() {
   loadChannelHashCache(agentState.knownChannelConfigHashes, channelHashCacheDir());
@@ -11220,7 +11382,7 @@ function removeDeliveryBaselineEntries(agentId) {
 var _channelQuarantineStore = null;
 function channelQuarantineStore() {
   if (!_channelQuarantineStore) {
-    const dir = config?.configDir ?? join28(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join29(process.env["HOME"] ?? "/tmp", ".augmented");
     _channelQuarantineStore = new ChannelQuarantineStore(defaultQuarantinePath(dir));
   }
   return _channelQuarantineStore;
@@ -11237,7 +11399,7 @@ function claudeMdSizeFor(codeName) {
 var _hostFlagStore = null;
 function hostFlagStore() {
   if (!_hostFlagStore) {
-    const dir = config?.configDir ?? join28(process.env["HOME"] ?? "/tmp", ".augmented");
+    const dir = config?.configDir ?? join29(process.env["HOME"] ?? "/tmp", ".augmented");
     _hostFlagStore = new HostFlagStore({ cachePath: defaultFlagsCachePath(dir), log });
   }
   return _hostFlagStore;
@@ -11264,6 +11426,9 @@ function reportManagerModelCallError(source, err, modelId) {
 function channelQuarantineMode() {
   return hostFlagStore().getString("channel-quarantine-mode");
 }
+function occupancyQualifierMode() {
+  return hostFlagStore().getString("utilization-occupancy-qualifier") === "enforce" ? "enforce" : "shadow";
+}
 function channelQuarantineDwellMs() {
   const raw = parseInt(process.env["AGT_CHANNEL_QUARANTINE_DWELL_MS"] ?? "", 10);
   return Number.isFinite(raw) && raw >= 0 ? raw : 18e4;
@@ -11307,13 +11472,13 @@ function parseSkillFrontmatter(content) {
   return out;
 }
 async function refreshSkillsIndexInClaudeMd(configDir, codeName, log2) {
-  const { readdirSync: readdirSync8, readFileSync: rfs, existsSync: ex, writeFileSync: writeFileSync14 } = await import("fs");
-  const skillsDir = join28(configDir, codeName, "project", ".claude", "skills");
-  const claudeMdPath = join28(configDir, codeName, "project", "CLAUDE.md");
+  const { readdirSync: readdirSync9, readFileSync: rfs, existsSync: ex, writeFileSync: writeFileSync14 } = await import("fs");
+  const skillsDir = join29(configDir, codeName, "project", ".claude", "skills");
+  const claudeMdPath = join29(configDir, codeName, "project", "CLAUDE.md");
   if (!ex(skillsDir) || !ex(claudeMdPath)) return;
   const entries = [];
-  for (const dir of readdirSync8(skillsDir).sort()) {
-    const skillFile = join28(skillsDir, dir, "SKILL.md");
+  for (const dir of readdirSync9(skillsDir).sort()) {
+    const skillFile = join29(skillsDir, dir, "SKILL.md");
     if (!ex(skillFile)) continue;
     try {
       const { name, description } = parseSkillFrontmatter(rfs(skillFile, "utf-8"));
@@ -11380,7 +11545,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-KAHG73SM.js");
+      const { collectDiagnostics } = await import("../persistent-session-T4IY7AJU.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11487,7 +11652,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-KAHG73SM.js");
+      const { collectDiagnostics } = await import("../persistent-session-T4IY7AJU.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11601,8 +11766,9 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
-        getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-MKUXLX4F.js");
+        getResponsivenessIntervalMs,
+        occupancyQualificationClassifications
+      } = await import("../responsiveness-probe-WYGR4B2F.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11617,27 +11783,48 @@ async function pollCycle() {
           });
           const drainedBuckets = /* @__PURE__ */ new Map();
           const drainedCodeNames = /* @__PURE__ */ new Set();
+          const qualifierMode = occupancyQualifierMode();
           const takeBuckets = (codeName) => {
-            if (drainedCodeNames.has(codeName)) return [];
+            if (drainedCodeNames.has(codeName)) return { buckets: [], classifications: null };
             drainedCodeNames.add(codeName);
-            const buckets = sharedBusyBuckets.drainClosed(codeName, Date.now());
-            if (buckets.length > 0) drainedBuckets.set(codeName, buckets);
-            return buckets;
+            const nowMs = Date.now();
+            const raw = sharedBusyBuckets.drainClosed(codeName, nowMs);
+            if (raw.length === 0) return { buckets: [], classifications: null };
+            let q;
+            try {
+              q = qualifyBuckets(raw, collectQualifyingTurns(codeName, nowMs), qualifierMode, nowMs);
+            } catch (err) {
+              log(
+                `[occupancy-gate] qualification failed for '${codeName}' \u2014 reporting ${raw.length} bucket(s) ungated: ${err.message}`
+              );
+              q = { kept: raw, qualified: 0, unqualifiedDropped: 0, unreadable: raw.length };
+            }
+            if (q.kept.length > 0) drainedBuckets.set(codeName, q.kept);
+            return {
+              buckets: q.kept,
+              classifications: occupancyQualificationClassifications(q)
+            };
           };
           const probes = [...collectResponsivenessProbes(probeCodeNames), ...paneless].map((p) => {
             const giveUps = takeWatchdogGiveUpCount(p.code_name);
             if (giveUps > 0) drainedGiveUps.set(p.code_name, giveUps);
-            const busyBuckets = takeBuckets(p.code_name);
+            const { buckets: busyBuckets, classifications } = takeBuckets(p.code_name);
             return {
               ...p,
               input_stuck_give_ups: giveUps,
-              ...busyBuckets.length > 0 ? { busy_buckets: busyBuckets } : {}
+              ...busyBuckets.length > 0 ? { busy_buckets: busyBuckets } : {},
+              ...classifications ? { occupancy_qualification_classifications: classifications } : {}
             };
           });
           for (const codeName of probeCodeNames) {
-            const buckets = takeBuckets(codeName);
-            if (buckets.length > 0) {
-              probes.push({ code_name: codeName, busy_buckets: buckets, input_stuck_give_ups: 0 });
+            const { buckets, classifications } = takeBuckets(codeName);
+            if (buckets.length > 0 || classifications) {
+              probes.push({
+                code_name: codeName,
+                input_stuck_give_ups: 0,
+                ...buckets.length > 0 ? { busy_buckets: buckets } : {},
+                ...classifications ? { occupancy_qualification_classifications: classifications } : {}
+              });
             }
           }
           if (probes.length > 0) {
@@ -11666,7 +11853,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-MKUXLX4F.js");
+        } = await import("../responsiveness-probe-WYGR4B2F.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -11758,10 +11945,10 @@ async function pollCycle() {
                 const paneTail = readFileSync22(paneLogPath(codeName), "utf8").slice(-65536);
                 const transient = detectTransientApiErrorInLog(paneTail);
                 if (transient) {
-                  const wedgeHome = join28(homedir12(), ".augmented", codeName);
+                  const wedgeHome = join29(homedir12(), ".augmented", codeName);
                   if (existsSync12(wedgeHome)) {
                     atomicWriteFileSync(
-                      join28(wedgeHome, "watchdog-give-up.json"),
+                      join29(wedgeHome, "watchdog-give-up.json"),
                       JSON.stringify({
                         gave_up_at: wedgeNow.toISOString(),
                         reason: "transient_overload"
@@ -12032,7 +12219,7 @@ async function pollCycle() {
         const adapter = resolveAgentFramework(prev.codeName);
         stopAgentRuntime2(prev.codeName, "removed-from-host");
         killAgentChannelProcesses(prev.codeName, { log });
-        const agentDir = join28(adapter.getAgentDir(prev.codeName), "provision");
+        const agentDir = join29(adapter.getAgentDir(prev.codeName), "provision");
         await cleanupAgentFiles(prev.codeName, agentDir);
         clearAgentCaches(prev.agentId, prev.codeName);
       }
@@ -12119,10 +12306,10 @@ async function pollCycle() {
         // pending-inbound marker. Best-effort: a write failure is logged by
         // the watchdog, never fails the poll cycle.
         signalGiveUp: (codeName) => {
-          const dir = join28(homedir12(), ".augmented", codeName);
+          const dir = join29(homedir12(), ".augmented", codeName);
           if (!existsSync12(dir)) return;
           atomicWriteFileSync(
-            join28(dir, "watchdog-give-up.json"),
+            join29(dir, "watchdog-give-up.json"),
             JSON.stringify({ gave_up_at: (/* @__PURE__ */ new Date()).toISOString() })
           );
         }
@@ -12207,7 +12394,12 @@ async function getOrCacheRegisteredAgents(adapter, profile) {
 async function processAgent(agent, agentStates) {
   if (!config) return;
   const renderIntegrationsSection = shouldRenderIntegrationsSection();
-  syncAccountEnforcementMarker(agent.code_name, agent.enforcement ?? null, log);
+  syncAccountEnforcementMarker(
+    agent.code_name,
+    agent.enforcement ?? null,
+    log,
+    agent.enforcement_text ?? null
+  );
   const previousKnownStatus = agentState.knownStatuses.get(agent.agent_id);
   agentState.agentDisplayNames.set(agent.code_name, agent.display_name);
   agentState.codeNameToAgentId.set(agent.code_name, agent.agent_id);
@@ -12264,7 +12456,7 @@ async function processAgent(agent, agentStates) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const adapter = resolveAgentFramework(agent.code_name);
-  let agentDir = join28(adapter.getAgentDir(agent.code_name), "provision");
+  let agentDir = join29(adapter.getAgentDir(agent.code_name), "provision");
   if (agent.status === "draft" || agent.status === "paused") {
     if (previousKnownStatus !== agent.status) {
       log(`Agent '${agent.code_name}' is ${agent.status}, skipping provisioning`);
@@ -12438,7 +12630,7 @@ async function processAgent(agent, agentStates) {
   const frameworkId = refreshData.agent.framework ?? DEFAULT_FRAMEWORK;
   agentFrameworkCache.set(agent.code_name, frameworkId);
   const frameworkAdapter = getFramework(frameworkId);
-  agentDir = join28(frameworkAdapter.getAgentDir(agent.code_name), "provision");
+  agentDir = join29(frameworkAdapter.getAgentDir(agent.code_name), "provision");
   cacheAgentDeliveryMetadata(agent.code_name, refreshData);
   agentRestartTimezoneInputs.set(agent.code_name, {
     agentTimezone: typeof refreshData.agent.timezone === "string" ? refreshData.agent.timezone : null,
@@ -12487,7 +12679,7 @@ async function processAgent(agent, agentStates) {
     const changedFiles = [];
     mkdirSync10(agentDir, { recursive: true });
     for (const artifact of artifacts) {
-      const filePath = join28(agentDir, artifact.relativePath);
+      const filePath = join29(agentDir, artifact.relativePath);
       let existingHash;
       let newHash;
       let writeContent = artifact.content;
@@ -12506,7 +12698,7 @@ async function processAgent(agent, agentStates) {
         };
         newHash = sha256(stripDynamicSections(artifact.content));
         try {
-          const projectClaudeMd = join28(config.configDir, agent.code_name, "project", "CLAUDE.md");
+          const projectClaudeMd = join29(config.configDir, agent.code_name, "project", "CLAUDE.md");
           const existing = readFileSync22(projectClaudeMd, "utf-8");
           existingHash = sha256(stripDynamicSections(existing));
         } catch {
@@ -12557,12 +12749,12 @@ async function processAgent(agent, agentStates) {
       }
     }
     if (changedFiles.length > 0) {
-      const isFirst = !existsSync12(join28(agentDir, "CHARTER.md"));
+      const isFirst = !existsSync12(join29(agentDir, "CHARTER.md"));
       const verb = isFirst ? "Provisioning" : "Updating";
       const fileNames = changedFiles.map((f) => f.relativePath).join(", ");
       log(`${verb} '${agent.code_name}': ${fileNames}`);
       for (const file of changedFiles) {
-        const filePath = join28(agentDir, file.relativePath);
+        const filePath = join29(agentDir, file.relativePath);
         mkdirSync10(dirname8(filePath), { recursive: true });
         if (file.relativePath === ".mcp.json") {
           safeWriteJsonAtomic(filePath, file.content, { mode: 384 });
@@ -12571,12 +12763,12 @@ async function processAgent(agent, agentStates) {
         }
       }
       try {
-        const provSkillsDir = join28(agentDir, ".claude", "skills");
+        const provSkillsDir = join29(agentDir, ".claude", "skills");
         if (existsSync12(provSkillsDir)) {
-          for (const folder of readdirSync7(provSkillsDir)) {
+          for (const folder of readdirSync8(provSkillsDir)) {
             if (folder.startsWith("knowledge-")) {
               try {
-                rmSync5(join28(provSkillsDir, folder), { recursive: true });
+                rmSync5(join29(provSkillsDir, folder), { recursive: true });
               } catch {
               }
             }
@@ -12589,7 +12781,7 @@ async function processAgent(agent, agentStates) {
       const trackedFiles2 = frameworkAdapter.driftTrackedFiles();
       const hashes = /* @__PURE__ */ new Map();
       for (const file of trackedFiles2) {
-        const h = hashFile(join28(agentDir, file));
+        const h = hashFile(join29(agentDir, file));
         if (h) hashes.set(file, h);
       }
       agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -12607,14 +12799,14 @@ async function processAgent(agent, agentStates) {
     }
     if (Array.isArray(refreshData.workflows)) {
       try {
-        const provWorkflowsDir = join28(agentDir, ".claude", "workflows");
+        const provWorkflowsDir = join29(agentDir, ".claude", "workflows");
         if (existsSync12(provWorkflowsDir)) {
           const expected = new Set(refreshData.workflows.map((w) => `${w.name}.js`));
-          for (const file of readdirSync7(provWorkflowsDir)) {
+          for (const file of readdirSync8(provWorkflowsDir)) {
             if (!file.endsWith(".js")) continue;
             if (expected.has(file)) continue;
             try {
-              rmSync5(join28(provWorkflowsDir, file));
+              rmSync5(join29(provWorkflowsDir, file));
             } catch {
             }
           }
@@ -12696,7 +12888,7 @@ async function processAgent(agent, agentStates) {
   if (written && existsSync12(agentDir)) {
     const driftedFiles = [];
     for (const [file, expectedHash] of written) {
-      const localHash = hashFile(join28(agentDir, file));
+      const localHash = hashFile(join29(agentDir, file));
       if (localHash && localHash !== expectedHash) {
         driftedFiles.push(file);
       }
@@ -12707,7 +12899,7 @@ async function processAgent(agent, agentStates) {
       try {
         const localHashes = {};
         for (const file of driftedFiles) {
-          localHashes[file] = hashFile(join28(agentDir, file));
+          localHashes[file] = hashFile(join29(agentDir, file));
         }
         await api.post("/host/drift", {
           agent_id: agent.agent_id,
@@ -12909,7 +13101,7 @@ async function processAgent(agent, agentStates) {
     const addedChannels = [...restartDecision.added];
     const writeDmNoticeMarkers = isChannelAddRestart ? () => {
       try {
-        const agentAugmentedDir = join28(homedir12(), ".augmented", agent.code_name);
+        const agentAugmentedDir = join29(homedir12(), ".augmented", agent.code_name);
         mkdirSync10(agentAugmentedDir, { recursive: true });
         const markerJson = JSON.stringify({
           version: 1,
@@ -12917,7 +13109,7 @@ async function processAgent(agent, agentStates) {
           added: addedChannels
         });
         for (const file of ["slack-channel-add-restart.json", "telegram-channel-add-restart.json"]) {
-          atomicWriteFileSync(join28(agentAugmentedDir, file), markerJson);
+          atomicWriteFileSync(join29(agentAugmentedDir, file), markerJson);
         }
       } catch (err) {
         log(`[hot-reload] channel-add DM-notice marker write failed for '${agent.code_name}' (non-fatal): ${err.message}`);
@@ -13106,18 +13298,18 @@ async function processAgent(agent, agentStates) {
   if (agentSessionMode === "persistent" && (agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK) === "claude-code") {
     try {
       const agentProvisionDir = agentDir;
-      const projectDir = join28(homedir12(), ".augmented", agent.code_name, "project");
+      const projectDir = join29(homedir12(), ".augmented", agent.code_name, "project");
       mkdirSync10(agentProvisionDir, { recursive: true });
       mkdirSync10(projectDir, { recursive: true });
-      const provisionMcpPath = join28(agentProvisionDir, ".mcp.json");
-      const projectMcpPath = join28(projectDir, ".mcp.json");
+      const provisionMcpPath = join29(agentProvisionDir, ".mcp.json");
+      const projectMcpPath = join29(projectDir, ".mcp.json");
       let mcpConfig = { mcpServers: {} };
       try {
         mcpConfig = JSON.parse(readFileSync22(provisionMcpPath, "utf-8"));
         if (!mcpConfig.mcpServers) mcpConfig.mcpServers = {};
       } catch {
       }
-      const localDirectChatChannel = join28(homedir12(), ".augmented", "_mcp", "direct-chat-channel.js");
+      const localDirectChatChannel = join29(homedir12(), ".augmented", "_mcp", "direct-chat-channel.js");
       const directChatTeamSettings = refreshData.team?.settings;
       const directChatTz = (() => {
         const tz = directChatTeamSettings?.["timezone"];
@@ -13143,7 +13335,7 @@ async function processAgent(agent, agentStates) {
           // ~/.augmented/<codeName>/.current-turn-initiator.json. Note getAgentDir
           // returns the agent root (NOT the /provision subdir `agentDir` points at),
           // so it byte-matches the broker readers' path.
-          AGT_TURN_INITIATOR_FILE: join28(
+          AGT_TURN_INITIATOR_FILE: join29(
             frameworkAdapter.getAgentDir(agent.code_name),
             ".current-turn-initiator.json"
           )
@@ -13163,7 +13355,7 @@ async function processAgent(agent, agentStates) {
           log(`Channel credentials written for '${agent.code_name}/direct-chat'`);
         }
       }
-      const staleChannelsPath = join28(projectDir, ".mcp-channels.json");
+      const staleChannelsPath = join29(projectDir, ".mcp-channels.json");
       if (existsSync12(staleChannelsPath)) {
         try {
           rmSync5(staleChannelsPath, { force: true });
@@ -13253,7 +13445,7 @@ async function processAgent(agent, agentStates) {
     }
     if (hostFlagStore().getBoolean("connectivity-probe")) {
       try {
-        const probeProjectDir = join28(homedir12(), ".augmented", agent.code_name, "project");
+        const probeProjectDir = join29(homedir12(), ".augmented", agent.code_name, "project");
         let probeSet = integrations;
         try {
           const quarantined = await api.post("/host/agent-integrations/quarantined", { agent_id: agent.agent_id });
@@ -13299,7 +13491,7 @@ async function processAgent(agent, agentStates) {
       const forceDue = attemptsLeft > 0;
       let probeRan = false;
       try {
-        const probeProjectDir = join28(homedir12(), ".augmented", agent.code_name, "project");
+        const probeProjectDir = join29(homedir12(), ".augmented", agent.code_name, "project");
         probeRan = await runAgentSessionToolBindProbes(agent, integrations, probeProjectDir, { forceDue });
       } catch (err) {
         log(`Session-tool-bind probe failed for '${agent.code_name}': ${err.message}`);
@@ -13376,8 +13568,8 @@ async function processAgent(agent, agentStates) {
       const intHash = computeIntegrationsHash(integrations);
       const prevIntHash = agentState.knownIntegrationHashes.get(agent.agent_id);
       if (intHash !== prevIntHash) {
-        const projectDir = join28(homedir12(), ".augmented", agent.code_name, "project");
-        const envIntPath = join28(projectDir, ".env.integrations");
+        const projectDir = join29(homedir12(), ".augmented", agent.code_name, "project");
+        const envIntPath = join29(projectDir, ".env.integrations");
         let preWriteEnv;
         try {
           preWriteEnv = readFileSync22(envIntPath, "utf-8");
@@ -13399,7 +13591,7 @@ async function processAgent(agent, agentStates) {
         }
         if (fw === "claude-code" && isSessionHealthy(agent.code_name)) {
           try {
-            const projectMcpPath = join28(projectDir, ".mcp.json");
+            const projectMcpPath = join29(projectDir, ".mcp.json");
             const postWriteEnv = readFileSync22(envIntPath, "utf-8");
             const mcpContent = readFileSync22(projectMcpPath, "utf-8");
             const changedVars = diffEnvIntegrations(preWriteEnv, postWriteEnv);
@@ -13664,23 +13856,23 @@ async function processAgent(agent, agentStates) {
         }
       }
       try {
-        const { readdirSync: readdirSync8, rmSync: rmSync6 } = await import("fs");
+        const { readdirSync: readdirSync9, rmSync: rmSync6 } = await import("fs");
         const { homedir: homedir13 } = await import("os");
         const frameworkId2 = frameworkAdapter.id;
         const candidateSkillDirs = [
           // Claude Code — framework runtime tree
-          join28(homedir13(), ".augmented", agent.code_name, "skills"),
+          join29(homedir13(), ".augmented", agent.code_name, "skills"),
           // Claude Code — project tree
-          join28(homedir13(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+          join29(homedir13(), ".augmented", agent.code_name, "project", ".claude", "skills"),
           // Defensive: legacy provision-side path, not currently an
           // install target but cheap to sweep.
-          join28(agentDir, ".claude", "skills")
+          join29(agentDir, ".claude", "skills")
         ];
         const existingDirs = candidateSkillDirs.filter((d) => existsSync12(d));
         const discoveredEntries = /* @__PURE__ */ new Set();
         for (const dir of existingDirs) {
           try {
-            for (const entry of readdirSync8(dir)) {
+            for (const entry of readdirSync9(dir)) {
               if (entry.startsWith("plugin-") || entry.startsWith("integration-")) {
                 discoveredEntries.add(entry);
               }
@@ -13715,7 +13907,7 @@ async function processAgent(agent, agentStates) {
         const sharedSkillsPayload = refreshAny.shared_skills;
         const desiredResolved = globalSkillsPayload !== void 0 || sharedSkillsPayload !== void 0;
         const manifestPath = managedSkillManifestPath(
-          join28(homedir12(), ".augmented", agent.code_name)
+          join29(homedir12(), ".augmented", agent.code_name)
         );
         const prevIds = /* @__PURE__ */ new Set([
           ...agentState.knownGlobalSkillIds.get(agent.agent_id) ?? /* @__PURE__ */ new Set(),
@@ -13735,15 +13927,15 @@ async function processAgent(agent, agentStates) {
         }
         if (plan.removes.length) {
           const globalSkillDirs = [
-            join28(homedir12(), ".augmented", agent.code_name, "skills"),
-            join28(homedir12(), ".augmented", agent.code_name, "project", ".claude", "skills"),
-            join28(agentDir, ".claude", "skills")
+            join29(homedir12(), ".augmented", agent.code_name, "skills"),
+            join29(homedir12(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+            join29(agentDir, ".claude", "skills")
           ];
           for (const id of plan.removes) {
             let prunedAny = false;
             for (const dir of globalSkillDirs) {
-              const p = join28(dir, id);
-              if (existsSync12(p) && existsSync12(join28(p, "SKILL.md"))) {
+              const p = join29(dir, id);
+              if (existsSync12(p) && existsSync12(join29(p, "SKILL.md"))) {
                 rmSync5(p, { recursive: true, force: true });
                 prunedAny = true;
               }
@@ -13974,7 +14166,7 @@ async function processAgent(agent, agentStates) {
         const sess = getSessionState(agent.code_name);
         let mcpJsonParsed = null;
         try {
-          const mcpPath = join28(getProjectDir(agent.code_name), ".mcp.json");
+          const mcpPath = join29(getProjectDir(agent.code_name), ".mcp.json");
           mcpJsonParsed = JSON.parse(readFileSync22(mcpPath, "utf-8"));
         } catch {
         }
@@ -14401,7 +14593,7 @@ Retried to the limit after repeated stalls \u2014 needs a look.`).catch(() => {
   if (trackedFiles.length > 0 && existsSync12(agentDir)) {
     const hashes = /* @__PURE__ */ new Map();
     for (const file of trackedFiles) {
-      const h = hashFile(join28(agentDir, file));
+      const h = hashFile(join29(agentDir, file));
       if (h) hashes.set(file, h);
     }
     agentState.writtenHashes.set(agent.agent_id, hashes);
@@ -14416,7 +14608,7 @@ Retried to the limit after repeated stalls \u2014 needs a look.`).catch(() => {
         refreshData.agent.onboarding_state
       );
       const obStep = obState.step;
-      const markerPath = join28(homedir12(), ".augmented", agent.code_name, "onboarding-drive.json");
+      const markerPath = join29(homedir12(), ".augmented", agent.code_name, "onboarding-drive.json");
       const marker = readOnboardingDriveMarker(markerPath);
       const decision = decideOnboardingDrive(obStep, marker, Date.now(), obState.generation ?? 0);
       if (decision.clearMarker) {
@@ -14504,7 +14696,7 @@ async function ensureOpencodeRuntime(agent, refreshData, agentTimezone) {
   }
   stopOpencodeSlackIngest(codeName, log);
   stopOpencodeTelegramIngest(codeName, log);
-  const opencodeProjectDir = join28(getFramework("opencode").getAgentDir(codeName), "provision");
+  const opencodeProjectDir = join29(getFramework("opencode").getAgentDir(codeName), "provision");
   const serveEnv = {
     AGT_HOST: requireHost(),
     AGT_API_KEY: getApiKey() ?? void 0,
@@ -14554,8 +14746,8 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
     });
   }
   const projectDir = getProjectDir(codeName);
-  const mcpConfigPath = join28(projectDir, ".mcp.json");
-  const claudeMdPath = join28(projectDir, "CLAUDE.md");
+  const mcpConfigPath = join29(projectDir, ".mcp.json");
+  const claudeMdPath = join29(projectDir, "CLAUDE.md");
   if (restartBreaker.isTripped(codeName)) {
     const trip = restartBreaker.getTrip(codeName);
     return {
@@ -15186,7 +15378,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-KAHG73SM.js");
+        const { collectDiagnostics } = await import("../persistent-session-T4IY7AJU.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15236,7 +15428,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-KAHG73SM.js");
+      const { collectDiagnostics } = await import("../persistent-session-T4IY7AJU.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15760,7 +15952,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-KQOPJSUJ.js");
+  } = await import("../claude-pair-runtime-TC2TTMIJ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -16014,8 +16206,8 @@ function parseMemoryFile(raw, fallbackName) {
   };
 }
 async function syncMemories(agent, configDir, log2) {
-  const projectDir = join28(configDir, agent.code_name, "project");
-  const memoryDir = join28(projectDir, "memory");
+  const projectDir = join29(configDir, agent.code_name, "project");
+  const memoryDir = join29(projectDir, "memory");
   const isFreshSync = pendingFreshMemorySync.has(agent.agent_id);
   if (isFreshSync) {
     log2(`[memory-sync] Fresh-sync requested for '${agent.code_name}' \u2014 pulling DB first`);
@@ -16030,10 +16222,10 @@ async function syncMemories(agent, configDir, log2) {
     const prevHashes = memoryFileHashes.get(agent.agent_id) ?? /* @__PURE__ */ new Map();
     const currentHashes = /* @__PURE__ */ new Map();
     const changedMemories = [];
-    for (const file of readdirSync7(memoryDir)) {
+    for (const file of readdirSync8(memoryDir)) {
       if (!file.endsWith(".md")) continue;
       try {
-        const raw = readFileSync22(join28(memoryDir, file), "utf-8");
+        const raw = readFileSync22(join29(memoryDir, file), "utf-8");
         const fileHash = createHash16("sha256").update(raw).digest("hex").slice(0, 16);
         currentHashes.set(file, fileHash);
         if (prevHashes.get(file) === fileHash) continue;
@@ -16058,7 +16250,7 @@ async function syncMemories(agent, configDir, log2) {
       } catch (err) {
         for (const mem of changedMemories) {
           for (const [file] of currentHashes) {
-            const parsed = parseMemoryFile(readFileSync22(join28(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
+            const parsed = parseMemoryFile(readFileSync22(join29(memoryDir, file), "utf-8"), file.replace(/\.md$/, ""));
             if (parsed?.name === mem.name) currentHashes.delete(file);
           }
         }
@@ -16071,7 +16263,7 @@ async function syncMemories(agent, configDir, log2) {
   }
 }
 async function downloadMemories(agent, memoryDir, log2, { force }) {
-  const localFiles = existsSync12(memoryDir) ? readdirSync7(memoryDir).filter((f) => f.endsWith(".md")).sort() : [];
+  const localFiles = existsSync12(memoryDir) ? readdirSync8(memoryDir).filter((f) => f.endsWith(".md")).sort() : [];
   const localListHash = createHash16("sha256").update(localFiles.join(",")).digest("hex").slice(0, 16);
   const prevLocalHash = lastLocalFileHash.get(agent.agent_id);
   const prevDownload = lastDownloadHash.get(agent.agent_id);
@@ -16093,7 +16285,7 @@ async function downloadMemories(agent, memoryDir, log2, { force }) {
         const mem = dbMemories.memories[i];
         const rawSlug = mem.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "").slice(0, 60);
         const slug = rawSlug || `memory-${i}`;
-        const filePath = join28(memoryDir, `${slug}.md`);
+        const filePath = join29(memoryDir, `${slug}.md`);
         const desired = `---
 name: ${JSON.stringify(mem.name)}
 type: ${mem.type}
@@ -16117,7 +16309,7 @@ ${mem.content}
         }
       }
       if (written > 0 || overwritten > 0) {
-        const updatedFiles = readdirSync7(memoryDir).filter((f) => f.endsWith(".md")).sort();
+        const updatedFiles = readdirSync8(memoryDir).filter((f) => f.endsWith(".md")).sort();
         lastLocalFileHash.set(agent.agent_id, createHash16("sha256").update(updatedFiles.join(",")).digest("hex").slice(0, 16));
         log2(`Memory download for '${agent.code_name}': wrote ${written} new, overwrote ${overwritten} stale`);
       }
@@ -16396,7 +16588,7 @@ function startManager(opts) {
     log(`[startup] state rehydration failed (continuing with empty state): ${err.message}`);
   }
   log(
-    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join28(homedir12(), ".augmented", "manager.log")}`
+    `[startup] worker pid=${process.pid} ppid=${process.ppid} node=${process.version} log=${join29(homedir12(), ".augmented", "manager.log")}`
   );
   deployMcpAssets();
   reapOrphanChannelMcps({ log });
@@ -16522,14 +16714,14 @@ function restartRunningChannelMcps(basenames) {
   }
 }
 function deployMcpAssets() {
-  const targetDir = join28(homedir12(), ".augmented", "_mcp");
+  const targetDir = join29(homedir12(), ".augmented", "_mcp");
   mkdirSync10(targetDir, { recursive: true });
   const moduleDir = dirname8(fileURLToPath(import.meta.url));
   let mcpSourceDir = "";
   let dir = moduleDir;
   for (let i = 0; i < 6; i++) {
-    const candidate = join28(dir, "dist", "mcp");
-    if (existsSync12(join28(candidate, "index.js"))) {
+    const candidate = join29(dir, "dist", "mcp");
+    if (existsSync12(join29(candidate, "index.js"))) {
       mcpSourceDir = candidate;
       break;
     }
@@ -16585,6 +16777,13 @@ function deployMcpAssets() {
     // RESTARTABLE_CHANNEL_FILES; the reaper (re)starts it with the session and a
     // bundle update applies on the next natural session restart.
     "augmented-support.js",
+    // ENG-8332: the help-knowledge-base broker, split out of augmented-support
+    // so the docs can be granted without its ticket-filing and org-state
+    // surface. Bundled with the CLI (never published to npm). Same treatment as
+    // augmented-support - NOT a channel, so not in RESTARTABLE_CHANNEL_FILES;
+    // the reaper (re)starts it with the session and a bundle update applies on
+    // the next natural session restart.
+    "augmented-help-kb.js",
     // ENG-6859: the remote OAuth MCP proxy (brand-ninja, granola). NOT in
     // RESTARTABLE_CHANNEL_FILES - it's not a channel; a bundle update applies on
     // the next natural session restart. It re-reads the token from the secrets
@@ -16609,8 +16808,8 @@ function deployMcpAssets() {
     // needs restarting to pick up a token rotation.
     "xero.js"
   ]) {
-    const src = join28(mcpSourceDir, file);
-    const dst = join28(targetDir, file);
+    const src = join29(mcpSourceDir, file);
+    const dst = join29(targetDir, file);
     if (!existsSync12(src)) continue;
     const before = fileHash(dst);
     try {
@@ -16628,14 +16827,14 @@ function deployMcpAssets() {
     log(`[manager] Bundle(s) updated: ${changedBasenames.join(", ")} \u2014 signalling running instances to restart`);
     restartRunningChannelMcps(changedBasenames);
   }
-  const localMcpPath = join28(targetDir, "index.js");
+  const localMcpPath = join29(targetDir, "index.js");
   try {
-    const agentsDir = join28(homedir12(), ".augmented", "agents");
+    const agentsDir = join29(homedir12(), ".augmented", "agents");
     if (existsSync12(agentsDir)) {
-      for (const entry of readdirSync7(agentsDir, { withFileTypes: true })) {
+      for (const entry of readdirSync8(agentsDir, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         for (const subdir of ["provision", "project"]) {
-          const mcpJsonPath = join28(agentsDir, entry.name, subdir, ".mcp.json");
+          const mcpJsonPath = join29(agentsDir, entry.name, subdir, ".mcp.json");
           try {
             const raw = readFileSync22(mcpJsonPath, "utf-8");
             if (!raw.includes("@integrity-labs/augmented-mcp")) continue;