@integrity-labs/agt-cli 0.28.714 → 0.28.716

package/dist/{chunk-FBYIO3Z6.js → chunk-OOYUWMTR.js}

@@ -6,13 +6,14 @@ import {
   buildOAuthRemoteMcpProxyEntry,
   buildRemoteMcpEntry,
   expandTemplateVars,
+  getProjectDir,
   isolationMode,
   log,
   mergeEnvIntegrationsContent,
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-F6AZ6KPI.js";
+} from "./chunk-ILDRNSOB.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -50,6 +51,7 @@ import {
   probeComposioMcpToolCall,
   probeHttpProvider,
   probeMcpHttp,
+  readDailySessionPin,
   readRemoteMcpAuthConfig,
   registerFramework,
   remoteMcpConnectionScopedEnvVar,
@@ -57,9 +59,10 @@ import {
   remoteMcpServerKey,
   resolveAvatarEnvUrl,
   resolveConnectivityProbe,
+  sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-FM63TWR3.js";
+} from "./chunk-LHYYO4NY.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -939,11 +942,11 @@ function decodeValue(buf, offset) {
       if (end > buf.length)
         throw new CborDecodeError("cbor: truncated text string");
       const bytes = buf.subarray(head.next, end);
-      const str = bytes.toString("utf8");
-      if (!Buffer.from(str, "utf8").equals(bytes)) {
+      const str2 = bytes.toString("utf8");
+      if (!Buffer.from(str2, "utf8").equals(bytes)) {
         throw new CborDecodeError("cbor: invalid UTF-8 in text string");
       }
-      return { value: str, next: end };
+      return { value: str2, next: end };
     }
     case MAJOR_ARRAY: {
       const arr = [];
@@ -1589,7 +1592,7 @@ function writeEnvIntegrationsForAgent(codeName, args) {
   } catch {
   }
   try {
-    const projectDir = getProjectDir(codeName);
+    const projectDir = getProjectDir2(codeName);
     mkdirSync3(projectDir, { recursive: true });
     const dest = join3(projectDir, ".env.integrations");
     writeFileSync4(dest, content, { mode: SECRET_FILE_MODE });
@@ -1878,7 +1881,7 @@ function syncGitHubBrokerCredentialTooling(projectDir, enabled) {
   chmodSync4(shimPath, BROKER_SCRIPT_MODE);
   return buildGitCredentialEnv(helperPath);
 }
-function getProjectDir(codeName) {
+function getProjectDir2(codeName) {
   return join3(getAgentDir(codeName), "project");
 }
 function getScratchDir(codeName) {
@@ -1954,7 +1957,7 @@ function isFreshWithin(path, cutoff) {
 }
 function syncMcpToProject(codeName) {
   const agentDir = getAgentDir(codeName);
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const provisionMcpPath = join3(agentDir, "provision", ".mcp.json");
   const projectMcpPath = join3(projectDir, ".mcp.json");
   try {
@@ -2001,7 +2004,7 @@ function readIntegrationsSummaryForAgent(codeName) {
 }
 function renderChannelMessageHandlerForAgent(codeName) {
   const agentDir = getAgentDir(codeName);
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const provisionMcpPath = join3(agentDir, "provision", ".mcp.json");
   let mcpServerKeys;
   try {
@@ -2089,7 +2092,7 @@ function ensureWorkspaceTrusted(projectDir) {
   }
 }
 function deployArtifactsToProject(codeName, provisionDir) {
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   mkdirSync3(projectDir, { recursive: true });
   ensureWorkspaceTrusted(projectDir);
   try {
@@ -2280,7 +2283,7 @@ function deployArtifactsToProject(codeName, provisionDir) {
   }
 }
 function provisionStopHook(codeName) {
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const claudeDir = join3(projectDir, ".claude");
   mkdirSync3(claudeDir, { recursive: true });
   const hookScriptPath = join3(claudeDir, "agt-stop-hook.sh");
@@ -3209,7 +3212,7 @@ function provisionStopHook(codeName) {
   writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionIsolationHook(codeName, agentId) {
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const claudeDir = join3(projectDir, ".claude");
   mkdirSync3(claudeDir, { recursive: true });
   const hasAgentId = agentId !== void 0;
@@ -3295,7 +3298,7 @@ function provisionIsolationHook(codeName, agentId) {
   writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionBacklogPullHook(codeName) {
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const claudeDir = join3(projectDir, ".claude");
   mkdirSync3(claudeDir, { recursive: true });
   const hookScriptPath = join3(claudeDir, "agt-backlog-pull-hook.sh");
@@ -3464,7 +3467,7 @@ exit 0
   return hookScriptPath;
 }
 function provisionAutoKanbanProgressHook(codeName) {
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const claudeDir = join3(projectDir, ".claude");
   mkdirSync3(claudeDir, { recursive: true });
   const hookScriptPath = join3(claudeDir, "agt-auto-kanban-progress-hook.sh");
@@ -3594,7 +3597,7 @@ exit 0
   writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionChannelProgressHook(codeName) {
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const claudeDir = join3(projectDir, ".claude");
   mkdirSync3(claudeDir, { recursive: true });
   const hookScriptPath = join3(claudeDir, "agt-channel-progress-hook.sh");
@@ -3687,7 +3690,7 @@ exit 0
   writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionOrientHook(codeName) {
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const claudeDir = join3(projectDir, ".claude");
   mkdirSync3(claudeDir, { recursive: true });
   const agentDir = getAgentDir(codeName);
@@ -3868,7 +3871,7 @@ function provisionOrientHook(codeName) {
   writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionPreCompactHook(codeName) {
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const claudeDir = join3(projectDir, ".claude");
   mkdirSync3(claudeDir, { recursive: true });
   const agentDir = getAgentDir(codeName);
@@ -4005,7 +4008,7 @@ function provisionPreCompactHook(codeName) {
   writeFileSync4(settingsPath, JSON.stringify(settings, null, 2));
 }
 function provisionSessionStateHook(codeName) {
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const claudeDir = join3(projectDir, ".claude");
   mkdirSync3(claudeDir, { recursive: true });
   const agentDir = getAgentDir(codeName);
@@ -4218,7 +4221,7 @@ function buildSettingsJson(input) {
     }
   };
   settings["model"] = agent.primary_model || "claude-opus-4-7";
-  const projectDir = getProjectDir(agent.code_name);
+  const projectDir = getProjectDir2(agent.code_name);
   const agentDir = getAgentDir(agent.code_name);
   const homeDir = getHomeDir();
   const codenameAliasDir = join3(homeDir, ".augmented", agent.code_name);
@@ -4347,7 +4350,7 @@ ${integrationsBlock}`;
 }
 function renderAugmentedWorkerForAgent(codeName) {
   const agentDir = getAgentDir(codeName);
-  const projectDir = getProjectDir(codeName);
+  const projectDir = getProjectDir2(codeName);
   const provisionMcpPath = join3(agentDir, "provision", ".mcp.json");
   let mcpServerKeys;
   try {
@@ -4481,7 +4484,7 @@ function buildMcpJson(input) {
         // getProjectDir (the ADR-0049 seam), not the MCP child's inherited
         // cwd, so the path stays correct if Claude Code ever spawns the
         // server from somewhere else.
-        XERO_EXPORT_DIR: join3(getProjectDir(input.agent.code_name), "xero-exports"),
+        XERO_EXPORT_DIR: join3(getProjectDir2(input.agent.code_name), "xero-exports"),
         PATH: process.env["PATH"] ?? "",
         HOME: process.env["HOME"] ?? ""
       }
@@ -4493,7 +4496,7 @@ function buildMcpJson(input) {
   }
   const remoteOAuthProxyPaths = {
     proxyPath: join3(getHomeDir(), ".augmented", "_mcp", "remote-oauth-proxy.js"),
-    tokenFile: join3(getProjectDir(input.agent.code_name), ".env.integrations")
+    tokenFile: join3(getProjectDir2(input.agent.code_name), ".env.integrations")
   };
   for (const integration of input.integrations ?? []) {
     const connectionKey = integration.connection_key;
@@ -4877,7 +4880,7 @@ ${sections}`
         ensureIdKeyedLayout(codeName, agentId);
       }
       const agentDir = getAgentDir(codeName);
-      const projectDir = getProjectDir(codeName);
+      const projectDir = getProjectDir2(codeName);
       mkdirSync3(agentDir, { recursive: true });
       mkdirSync3(projectDir, { recursive: true });
       writeFileSync4(join3(agentDir, "registration.json"), JSON.stringify({
@@ -5254,7 +5257,7 @@ ${sections}`
             return;
           }
           syncMcpToProject(codeName);
-          const staleChannelsPath = join3(getProjectDir(codeName), ".mcp-channels.json");
+          const staleChannelsPath = join3(getProjectDir2(codeName), ".mcp-channels.json");
           if (existsSync4(staleChannelsPath)) {
             try {
               rmSync2(staleChannelsPath, { force: true });
@@ -5590,7 +5593,7 @@ ${sections}`
   },
   seedProfileConfig(codeName) {
     const agentDir = getAgentDir(codeName);
-    const projectDir = getProjectDir(codeName);
+    const projectDir = getProjectDir2(codeName);
     mkdirSync3(join3(agentDir, "provision"), { recursive: true });
     mkdirSync3(projectDir, { recursive: true });
   },
@@ -5677,7 +5680,7 @@ ${sections}`
         envUpdates[scoped] = value;
       }
     }
-    Object.assign(envUpdates, syncGitHubBrokerCredentialTooling(getProjectDir(codeName), decryptedIntegrations.some((i) => i.definition_id === "github" && i.credentialDelivery === "broker")));
+    Object.assign(envUpdates, syncGitHubBrokerCredentialTooling(getProjectDir2(codeName), decryptedIntegrations.some((i) => i.definition_id === "github" && i.credentialDelivery === "broker")));
     writeEnvIntegrationsForAgent(codeName, {
       mode: "replace-preserving",
       updates: envUpdates
@@ -5734,7 +5737,7 @@ ${sections}`
     }
     const remoteOAuthProxyPaths = {
       proxyPath: join3(getHomeDir(), ".augmented", "_mcp", "remote-oauth-proxy.js"),
-      tokenFile: join3(getProjectDir(codeName), ".env.integrations")
+      tokenFile: join3(getProjectDir2(codeName), ".env.integrations")
     };
     for (const integration of integrations) {
       const connectionKey = integration.connection_key;
@@ -5968,7 +5971,7 @@ ${sections}`
         }
       }
     }
-    const projectDir = getProjectDir(codeName);
+    const projectDir = getProjectDir2(codeName);
     const claudeMdPath = join3(projectDir, "CLAUDE.md");
     try {
       const existing = readFileSync4(claudeMdPath, "utf-8");
@@ -6101,7 +6104,7 @@ ${sections}`
     const READ_ONLY_MODE = 292;
     const READ_WRITE_MODE = 420;
     const agentDir = getAgentDir(codeName);
-    const projectDir = getProjectDir(codeName);
+    const projectDir = getProjectDir2(codeName);
     for (const baseDir of [join3(agentDir, "skills"), join3(projectDir, ".claude", "skills")]) {
       const skillDir = join3(baseDir, skillId);
       mkdirSync3(skillDir, { recursive: true });
@@ -6163,7 +6166,7 @@ ${sections}`
   provisionPluginFull(codeName, plugin, contextValues, options) {
     assertValidCodeName(codeName);
     assertValidCodeName(plugin.slug);
-    const projectDir = getProjectDir(codeName);
+    const projectDir = getProjectDir2(codeName);
     const claudeDir = join3(projectDir, ".claude");
     mkdirSync3(claudeDir, { recursive: true });
     const sourceSpec = options?.scriptSource ?? `augmented-plugin:${plugin.slug}`;
@@ -6246,7 +6249,7 @@ ${sections}`
   executePluginHook(ctx) {
     assertValidCodeName(ctx.codeName);
     const agentRootDir = join3(getHomeDir(), ".augmented", ctx.codeName);
-    const projectDir = getProjectDir(ctx.codeName);
+    const projectDir = getProjectDir2(ctx.codeName);
     mkdirSync3(agentRootDir, { recursive: true });
     mkdirSync3(projectDir, { recursive: true });
     const startedAt = Date.now();
@@ -6425,7 +6428,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.714" : "dev";
+var agtCliVersion = true ? "0.28.716" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -6735,8 +6738,8 @@ function writeFlagsCache(path, file) {
   atomicWriteFileSync(path, `${JSON.stringify(file, null, 2)}
 `);
 }
-function flagsCacheAgeSeconds(cache, path, now = /* @__PURE__ */ new Date()) {
-  const fromRecorded = Date.parse(cache.updated_at);
+function flagsCacheAgeSeconds(cache2, path, now = /* @__PURE__ */ new Date()) {
+  const fromRecorded = Date.parse(cache2.updated_at);
   if (!Number.isNaN(fromRecorded)) {
     return Math.max(0, (now.getTime() - fromRecorded) / 1e3);
   }
@@ -8930,6 +8933,14 @@ function deriveMcpServerKey(input) {
   if (isDefaultRemoteMcpConnection(input.connectionKey)) return base;
   return remoteMcpServerKey(input.definitionId, input.connectionKey);
 }
+var SYSTEM_PATH_FLOOR = [
+  "/usr/local/sbin",
+  "/usr/local/bin",
+  "/usr/sbin",
+  "/usr/bin",
+  "/sbin",
+  "/bin"
+];
 function buildProbeEnv(projectDir, agentId) {
   const probeEnv = { ...process.env };
   try {
@@ -8945,7 +8956,14 @@ function buildProbeEnv(projectDir, agentId) {
   try {
     const agentBinDir = join6(projectDir, ".claude", "agt-bin");
     if (existsSync7(agentBinDir)) {
-      probeEnv.PATH = probeEnv.PATH ? `${agentBinDir}${pathDelimiter}${probeEnv.PATH}` : agentBinDir;
+      const parts = probeEnv.PATH ? probeEnv.PATH.split(pathDelimiter) : [];
+      parts.unshift(agentBinDir);
+      if (process.platform !== "win32") {
+        for (const dir of SYSTEM_PATH_FLOOR) {
+          if (!parts.includes(dir)) parts.push(dir);
+        }
+      }
+      probeEnv.PATH = [...new Set(parts.filter((p) => p.length > 0))].join(pathDelimiter);
     }
   } catch {
   }
@@ -9272,6 +9290,288 @@ function describeWorkerModuleFailure(err) {
   return `[startup] FATAL \u2014 the manager worker module failed to load, so this process will never poll. The pidfile it already wrote would otherwise make it look like a healthy manager forever (ENG-9129). Exiting so the supervisor can react. Cause: ${detail}`;
 }
 
+// src/lib/drain-transcript-flush.ts
+import { existsSync as existsSync8, readdirSync as readdirSync2 } from "fs";
+import { homedir as homedir5 } from "os";
+import { dirname as dirname6, join as join8, relative as relative2, sep } from "path";
+import { spawn as spawn2 } from "child_process";
+
+// src/lib/host-archive-address.ts
+import { readFileSync as readFileSync9 } from "fs";
+var DEFAULT_ARCHIVE_ADDRESS_PATH = "/var/lib/augmented/session-archive-address.json";
+var CACHE_TTL_MS = 5 * 60 * 1e3;
+var cache = /* @__PURE__ */ new Map();
+function str(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function readHostArchiveAddress(path) {
+  const file = path ?? process.env["ARCHIVE_ADDRESS_FILE"]?.trim() ?? process.env["AGT_SESSION_ARCHIVE_ADDRESS_FILE"]?.trim() ?? DEFAULT_ARCHIVE_ADDRESS_PATH;
+  const now = Date.now();
+  const hit = cache.get(file);
+  if (hit && now - hit.at < CACHE_TTL_MS) return hit.value;
+  let value = null;
+  try {
+    const raw = readFileSync9(file, "utf-8");
+    const parsed = JSON.parse(raw);
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      const obj = parsed;
+      const bucket = str(obj["bucket"]);
+      const keyPrefix = str(obj["key_prefix"]);
+      if (bucket && keyPrefix) {
+        value = {
+          bucket,
+          region: str(obj["region"]),
+          instanceId: str(obj["instance_id"]),
+          keyPrefix
+        };
+      }
+    }
+  } catch {
+    value = null;
+  }
+  cache.set(file, { at: now, value });
+  return value;
+}
+
+// src/lib/drain-transcript-flush.ts
+function sessionsBaseDir() {
+  return join8(homedir5(), ".claude", "projects");
+}
+var PER_FILE_UPLOAD_TIMEOUT_MS = 3e4;
+var UPLOAD_CONCURRENCY = 4;
+var DRAIN_MANIFEST_VERSION = 1;
+var DRAIN_MANIFEST_FILENAME = "_augmented-drain-manifest.json";
+function listJsonlFiles(dir) {
+  if (!existsSync8(dir)) return [];
+  const out = [];
+  const walk = (d) => {
+    for (const entry of readdirSync2(d, { withFileTypes: true })) {
+      const full = join8(d, entry.name);
+      if (entry.isDirectory()) walk(full);
+      else if (entry.isFile() && entry.name.endsWith(".jsonl")) out.push(full);
+    }
+  };
+  try {
+    walk(dir);
+  } catch {
+  }
+  return out;
+}
+function transcriptObjectKey(keyPrefix, baseDir, file) {
+  const rel = relative2(baseDir, file).split(sep).join("/");
+  if (!rel || rel.startsWith("../") || rel === "..") return null;
+  return `${keyPrefix.replace(/\/+$/, "")}/${rel}`;
+}
+function drainManifestObjectKey(keyPrefix, baseDir, transcriptDir) {
+  return transcriptObjectKey(keyPrefix, baseDir, join8(transcriptDir, DRAIN_MANIFEST_FILENAME));
+}
+async function flushAgentTranscriptsOnDrain(codeName, deps) {
+  const dir = deps.resolveTranscriptDir(codeName);
+  const files = deps.listTranscripts(dir);
+  if (files.length === 0) {
+    return {
+      status: "no-transcripts",
+      uploaded: 0,
+      failed: 0,
+      total: 0,
+      manifest: "skipped",
+      manifestKey: null
+    };
+  }
+  const address = deps.readAddress();
+  if (!address || !address.bucket || !address.keyPrefix) {
+    deps.log(
+      `[drain-flush] NO S3 ADDRESS for '${codeName}' \u2014 ${files.length} transcript file(s) will NOT be shipped before teardown; this session may be lost (ENG-9491). The host archive address is unresolved (agt-session-archiver has published none).`
+    );
+    return {
+      status: "no-address",
+      uploaded: 0,
+      failed: files.length,
+      total: files.length,
+      manifest: "skipped",
+      manifestKey: null
+    };
+  }
+  const { bucket, keyPrefix, region } = address;
+  let uploaded = 0;
+  let failed = 0;
+  const keys = [];
+  const missing = [];
+  let cursor = 0;
+  const worker = async () => {
+    for (; ; ) {
+      const i = cursor;
+      cursor += 1;
+      if (i >= files.length) return;
+      const file = files[i];
+      const key = transcriptObjectKey(keyPrefix, deps.baseDir, file);
+      if (!key) {
+        failed += 1;
+        missing.push(file);
+        deps.log(
+          `[drain-flush] SKIP '${file}' for '${codeName}' \u2014 outside sessions base dir '${deps.baseDir}', cannot key it (ENG-9491)`
+        );
+        continue;
+      }
+      const res = await deps.uploadFile({ file, bucket, key, region });
+      if (res.ok) {
+        uploaded += 1;
+        keys.push(key);
+      } else {
+        failed += 1;
+        missing.push(file);
+        deps.log(
+          `[drain-flush] UPLOAD FAILED for '${codeName}' '${file}' \u2192 s3://${bucket}/${key}: ${res.detail} (ENG-9491)`
+        );
+      }
+    }
+  };
+  await Promise.all(
+    Array.from({ length: Math.min(UPLOAD_CONCURRENCY, files.length) }, () => worker())
+  );
+  const uploadStatus = failed === 0 ? "flushed" : uploaded === 0 ? "failed" : "partial";
+  if (uploadStatus !== "flushed") {
+    deps.log(
+      `[drain-flush] INCOMPLETE for '${codeName}': ${uploaded}/${files.length} transcript file(s) shipped, ${failed} FAILED before teardown \u2014 session data may be lost (ENG-9491).`
+    );
+  }
+  const { manifest, manifestKey } = await writeDrainManifest(codeName, deps, {
+    bucket,
+    keyPrefix,
+    region,
+    transcriptDir: dir,
+    keys,
+    missing,
+    complete: failed === 0
+  });
+  const status = uploadStatus === "flushed" && manifest !== "written" ? "no-manifest" : uploadStatus;
+  return { status, uploaded, failed, total: files.length, manifest, manifestKey };
+}
+async function writeDrainManifest(codeName, deps, ctx) {
+  const manifestKey = drainManifestObjectKey(ctx.keyPrefix, deps.baseDir, ctx.transcriptDir);
+  if (!manifestKey) {
+    deps.log(
+      `[drain-flush] NO MANIFEST for '${codeName}' \u2014 transcript dir '${ctx.transcriptDir}' is outside sessions base dir '${deps.baseDir}', so no manifest key could be computed. Any shipped object is UNRESTORABLE: nothing records the session pin or the source layout (ENG-9566).`
+    );
+    return { manifest: "unkeyable", manifestKey: null };
+  }
+  let layout = null;
+  try {
+    layout = deps.readSourceLayout(codeName);
+  } catch (err) {
+    deps.log(
+      `[drain-flush] could not resolve source layout for '${codeName}': ${err.message} \u2014 manifest will record it as unknown (ENG-9566)`
+    );
+  }
+  let sessionPin = null;
+  try {
+    sessionPin = deps.readSessionPin(codeName);
+  } catch (err) {
+    deps.log(
+      `[drain-flush] could not read the session pin for '${codeName}': ${err.message} \u2014 a restore will not be able to identify the live conversation (ENG-9566)`
+    );
+  }
+  const manifestBody = {
+    version: DRAIN_MANIFEST_VERSION,
+    codeName,
+    writtenAt: deps.now().toISOString(),
+    sourceLayout: layout?.layout ?? null,
+    sourceAgentDir: layout?.agentDir ?? null,
+    sourceTranscriptDir: ctx.transcriptDir,
+    sourceBaseDir: deps.baseDir,
+    bucket: ctx.bucket,
+    keyPrefix: ctx.keyPrefix,
+    keys: ctx.keys,
+    missing: ctx.missing,
+    complete: ctx.complete,
+    sessionPin
+  };
+  const res = await deps.uploadManifest({
+    body: `${JSON.stringify(manifestBody, null, 2)}
+`,
+    bucket: ctx.bucket,
+    key: manifestKey,
+    region: ctx.region
+  });
+  if (!res.ok) {
+    deps.log(
+      `[drain-flush] MANIFEST UPLOAD FAILED for '${codeName}' \u2192 s3://${ctx.bucket}/${manifestKey}: ${res.detail}. ${ctx.keys.length} shipped object(s) are UNRESTORABLE without it (ENG-9566).`
+    );
+    return { manifest: "failed", manifestKey: null };
+  }
+  return { manifest: "written", manifestKey };
+}
+function drainTranscriptFlushDeps(log2) {
+  return {
+    resolveTranscriptDir: (codeName) => sessionTranscriptDir(getProjectDir(codeName)),
+    readAddress: () => readHostArchiveAddress(),
+    listTranscripts: listJsonlFiles,
+    baseDir: sessionsBaseDir(),
+    now: () => /* @__PURE__ */ new Date(),
+    // ENG-9566: derive the layout from the seam's OUTPUT rather than re-running
+    // its lstat. getProjectDir already resolved the codename symlink (or didn't);
+    // if what came back is not under the codename dir, this host is id-keyed.
+    // Observing the resolver keeps a second copy of ADR-0049's rule out of the
+    // tree — the thing host-archive-address.ts's header warns about.
+    readSourceLayout: (codeName) => {
+      const agentDir = dirname6(getProjectDir(codeName));
+      const codeNameDir = join8(homedir5(), ".augmented", codeName);
+      return { layout: agentDir === codeNameDir ? "codename-keyed" : "id-keyed", agentDir };
+    },
+    readSessionPin: (codeName) => readDailySessionPin(codeName),
+    uploadFile: ({ file, bucket, key, region }) => runAwsCp(awsCpArgs(file, bucket, key, region), null),
+    uploadManifest: ({ body, bucket, key, region }) => (
+      // `-` is `aws s3 cp`'s stdin source, so the manifest never touches disk.
+      runAwsCp(
+        [...awsCpArgs("-", bucket, key, region), "--content-type", "application/json"],
+        body
+      )
+    ),
+    log: log2
+  };
+}
+function awsCpArgs(source, bucket, key, region) {
+  const args = ["s3", "cp", source, `s3://${bucket}/${key}`, "--only-show-errors"];
+  if (region) args.push("--region", region);
+  return args;
+}
+function runAwsCp(args, body) {
+  return new Promise((resolve) => {
+    const child = spawn2("aws", args, {
+      stdio: [body === null ? "ignore" : "pipe", "ignore", "pipe"]
+    });
+    let stderr = "";
+    let settled = false;
+    const finish = (r) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolve(r);
+    };
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      finish({ ok: false, detail: `aws s3 cp timed out after ${PER_FILE_UPLOAD_TIMEOUT_MS}ms` });
+    }, PER_FILE_UPLOAD_TIMEOUT_MS);
+    child.stderr?.on("data", (d) => {
+      stderr += String(d);
+    });
+    child.on("error", (err) => finish({ ok: false, detail: err.message }));
+    child.on(
+      "close",
+      (code) => finish(
+        code === 0 ? { ok: true, detail: "" } : { ok: false, detail: stderr.trim().slice(0, 500) || `aws exited with code ${code ?? "null"}` }
+      )
+    );
+    if (body !== null) {
+      child.stdin?.on("error", () => {
+      });
+      child.stdin?.end(body);
+    }
+  });
+}
+
 // src/lib/self-update-pin.ts
 function isValidPinVersion(v) {
   return PIN_VERSION_RE.test(v);
@@ -9304,25 +9604,25 @@ function decidePin(opts) {
 
 // src/commands/manager.ts
 import chalk3 from "chalk";
-import { existsSync as existsSync9, realpathSync as realpathSync2 } from "fs";
-import { join as join9 } from "path";
-import { homedir as homedir5, userInfo } from "os";
-import { spawn as spawn3 } from "child_process";
+import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
+import { join as join10 } from "path";
+import { homedir as homedir6, userInfo } from "os";
+import { spawn as spawn4 } from "child_process";
 
 // src/lib/watchdog.ts
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4, existsSync as existsSync8, mkdirSync as mkdirSync6, openSync as openSync2, closeSync as closeSync2, chmodSync as chmodSync5 } from "fs";
-import { join as join8 } from "path";
-import { spawn as spawn2, execFileSync as execFileSync3 } from "child_process";
-var DEFAULT_CONFIG_DIR = join8(process.env["HOME"] ?? "/tmp", ".augmented");
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4, existsSync as existsSync9, mkdirSync as mkdirSync6, openSync as openSync2, closeSync as closeSync2, chmodSync as chmodSync5 } from "fs";
+import { join as join9 } from "path";
+import { spawn as spawn3, execFileSync as execFileSync3 } from "child_process";
+var DEFAULT_CONFIG_DIR = join9(process.env["HOME"] ?? "/tmp", ".augmented");
 function getManagerPaths(configDir) {
   return {
-    pidFile: join8(configDir, "manager.pid"),
-    stateFile: join8(configDir, "manager-state.json"),
-    logFile: join8(configDir, "manager.log")
+    pidFile: join9(configDir, "manager.pid"),
+    stateFile: join9(configDir, "manager-state.json"),
+    logFile: join9(configDir, "manager.log")
   };
 }
 function ensureDir(configDir) {
-  if (!existsSync8(configDir)) {
+  if (!existsSync9(configDir)) {
     mkdirSync6(configDir, { recursive: true });
   }
 }
@@ -9332,7 +9632,7 @@ function writePidFile(configDir, pid) {
 }
 function readPidFile(configDir) {
   try {
-    const raw = readFileSync9(getManagerPaths(configDir).pidFile, "utf-8").trim();
+    const raw = readFileSync10(getManagerPaths(configDir).pidFile, "utf-8").trim();
     const pid = parseInt(raw, 10);
     return isNaN(pid) ? null : pid;
   } catch {
@@ -9378,7 +9678,7 @@ function defaultPgrep() {
 }
 function readStateFile(configDir) {
   try {
-    const raw = readFileSync9(getManagerPaths(configDir).stateFile, "utf-8");
+    const raw = readFileSync10(getManagerPaths(configDir).stateFile, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -9416,7 +9716,7 @@ function startWatchdog(opts) {
     } catch {
     }
     const intervalSec = String(Math.max(Math.floor(opts.intervalMs / 1e3), 5));
-    const child = spawn2(
+    const child = spawn3(
       process.execPath,
       [process.argv[1], "manager", "start", "--interval", intervalSec, "--config-dir", configDir, "--supervise"],
       {
@@ -9434,7 +9734,7 @@ function startWatchdog(opts) {
     const deadline = Date.now() + 5e3;
     const sleepBuf = new Int32Array(new SharedArrayBuffer(4));
     while (Date.now() < deadline) {
-      if (existsSync8(pidFile)) {
+      if (existsSync9(pidFile)) {
         return { pid: child.pid };
       }
       if (child.exitCode !== null) {
@@ -9540,7 +9840,7 @@ function normalizePinInEnv(env) {
 function managerStartCommand(opts) {
   const json = isJsonMode();
   if (!process.env.HOME || !process.env.HOME.trim()) {
-    const fallback = homedir5();
+    const fallback = homedir6();
     process.env.HOME = fallback;
     if (!json) {
       info(`HOME was not set in the manager env \u2014 defaulting to ${fallback}.`);
@@ -9574,7 +9874,7 @@ function managerStartCommand(opts) {
     process.exitCode = 1;
     return;
   }
-  const configDir = opts.configDir ?? join9(homedir5(), ".augmented");
+  const configDir = opts.configDir ?? join10(homedir6(), ".augmented");
   if (opts.supervise) {
     if (json) {
       jsonOutput({ ok: false, error: "--supervise is not supported with --json" });
@@ -9629,7 +9929,7 @@ function runSupervisorLoop(intervalSec, configDir) {
   process.on("SIGINT", forwardOrExit("SIGINT"));
   const runOne = () => {
     respawnTimer = null;
-    currentChild = spawn3(
+    currentChild = spawn4(
       process.execPath,
       [process.argv[1], "manager", "start", "--interval", String(intervalSec), "--config-dir", configDir],
       { stdio: "inherit", env: process.env }
@@ -9670,7 +9970,7 @@ function runSupervisorLoop(intervalSec, configDir) {
 }
 async function managerStopCommand(opts = {}) {
   const json = isJsonMode();
-  const configDir = opts.configDir ?? join9(homedir5(), ".augmented");
+  const configDir = opts.configDir ?? join10(homedir6(), ".augmented");
   try {
     const result = await stopWatchdog(configDir);
     if (!result.stopped && !result.pid) {
@@ -9698,7 +9998,7 @@ async function managerStopCommand(opts = {}) {
 }
 function managerStatusCommand(opts = {}) {
   const json = isJsonMode();
-  const configDir = opts.configDir ?? join9(homedir5(), ".augmented");
+  const configDir = opts.configDir ?? join10(homedir6(), ".augmented");
   const status = getManagerStatus(configDir);
   if (!status) {
     if (json) {
@@ -9770,7 +10070,7 @@ function resolveStableAgtBin(rawPath) {
   if (!prefix || !formula) return rawPath;
   const candidates = [`${prefix}/bin/${formula}`, `${prefix}/bin/agt`];
   for (const candidate of candidates) {
-    if (!existsSync9(candidate)) continue;
+    if (!existsSync10(candidate)) continue;
     try {
       realpathSync2(candidate);
       return candidate;
@@ -9790,7 +10090,7 @@ async function managerInstallCommand(opts = {}) {
     process.exitCode = 1;
     return;
   }
-  const configDir = opts.configDir ?? join9(homedir5(), ".augmented");
+  const configDir = opts.configDir ?? join10(homedir6(), ".augmented");
   const rawAgtBin = process.argv[1];
   if (!rawAgtBin) {
     const msg = "Could not resolve the agt binary path from argv. Re-run via the installed `agt` command.";
@@ -9801,9 +10101,9 @@ async function managerInstallCommand(opts = {}) {
   }
   const agtBin = resolveStableAgtBin(rawAgtBin);
   if (process.platform === "darwin") {
-    const home = homedir5();
+    const home = homedir6();
     const protectedRoots = ["Documents", "Downloads", "Desktop", "Movies", "Music", "Pictures"];
-    const offending = protectedRoots.map((r) => join9(home, r)).find((p) => agtBin === p || agtBin.startsWith(`${p}/`));
+    const offending = protectedRoots.map((r) => join10(home, r)).find((p) => agtBin === p || agtBin.startsWith(`${p}/`));
     if (offending) {
       const msg = `agt binary at ${agtBin} sits inside a macOS TCC-protected folder (${offending}). launchd-spawned processes cannot read files there and the manager would EPERM on startup. Either install agt globally (\`npm install -g @integrity-labs/agt-cli\`) or copy the dist outside protected folders before running this command.`;
       if (json) jsonOutput({ ok: false, error: msg });
@@ -9816,7 +10116,7 @@ async function managerInstallCommand(opts = {}) {
     AGT_HOST: getHost(),
     // ?? alone wouldn't catch `HOME=""` from a stripped systemd env.
     // Treat empty / whitespace-only as missing.
-    HOME: process.env.HOME?.trim() || homedir5(),
+    HOME: process.env.HOME?.trim() || homedir6(),
     USER: process.env.USER?.trim() || userInfo().username
   };
   const apiKey = getApiKey();
@@ -9872,7 +10172,7 @@ async function managerInstallSystemUnitCommand(opts = {}) {
     return;
   }
   const user = opts.user ?? "root";
-  const configDir = opts.configDir ?? (user === "root" ? "/root/.augmented" : join9("/home", user, ".augmented"));
+  const configDir = opts.configDir ?? (user === "root" ? "/root/.augmented" : join10("/home", user, ".augmented"));
   const rawAgtBin = process.argv[1];
   if (!rawAgtBin) {
     const msg = "Could not resolve the agt binary path from argv. Re-run via the installed `agt` command.";
@@ -10149,6 +10449,10 @@ export {
   gatherSessionToolBindProbe,
   provision,
   describeStartupCompletion,
+  readHostArchiveAddress,
+  DRAIN_MANIFEST_FILENAME,
+  flushAgentTranscriptsOnDrain,
+  drainTranscriptFlushDeps,
   executeConnectivityProbe,
   isValidPinVersion,
   resolveEffectivePinRaw,
@@ -10166,4 +10470,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-FBYIO3Z6.js.map
+//# sourceMappingURL=chunk-OOYUWMTR.js.map