@openscout/scout 0.2.105 → 0.2.107

package/dist/pairing-runtime-controller.mjs

@@ -2734,6 +2734,31 @@ var init_orchestration_provider_map = __esm(() => {
   };
 });
 
+// ../protocol/src/message-reactions.ts
+var REACTION_EMOJI_QUICK, REACTION_EMOJI_MORE, REACTION_EMOJI_ALLOWLIST, REACTION_EMOJI_ALLOWLIST_SET;
+var init_message_reactions = __esm(() => {
+  REACTION_EMOJI_QUICK = ["\uD83D\uDC4D", "\u2764\uFE0F", "\uD83D\uDE02", "\uD83D\uDC40", "\uD83C\uDF89"];
+  REACTION_EMOJI_MORE = [
+    "\uD83D\uDD25",
+    "\uD83D\uDE4F",
+    "\uD83D\uDC4F",
+    "\uD83D\uDE22",
+    "\uD83D\uDE2E",
+    "\uD83D\uDE80",
+    "\u2705",
+    "\uD83D\uDCAF",
+    "\uD83E\uDD14",
+    "\uD83D\uDCA1",
+    "\uD83D\uDE4C",
+    "\u2728"
+  ];
+  REACTION_EMOJI_ALLOWLIST = [
+    ...REACTION_EMOJI_QUICK,
+    ...REACTION_EMOJI_MORE
+  ];
+  REACTION_EMOJI_ALLOWLIST_SET = new Set(REACTION_EMOJI_ALLOWLIST);
+});
+
 // ../protocol/src/permission-policy.ts
 function normalizeScoutPermissionProfile(value) {
   const normalized = value?.trim().replaceAll("-", "_");
@@ -3553,6 +3578,9 @@ var init_terminal_surface_id = () => {};
 // ../protocol/src/terminal-sessions.ts
 var init_terminal_sessions = () => {};
 
+// ../protocol/src/terminal-session-resolve.ts
+var init_terminal_session_resolve = () => {};
+
 // ../protocol/src/terminal-workspaces.ts
 var init_terminal_workspaces = () => {};
 
@@ -3580,6 +3608,8 @@ var init_broker_routes = __esm(() => {
       machines: "/v1/machines",
       machinesScan: "/v1/machines/scan",
       messages: "/v1/messages",
+      messageReactions: "/v1/message-reactions",
+      messageReactionsRemove: "/v1/message-reactions/remove",
       brokerMessages: "/v1/broker/messages",
       eventsStream: "/v1/events/stream",
       commands: "/v1/commands",
@@ -3640,6 +3670,7 @@ var init_src = __esm(() => {
   init_assigned_roles();
   init_orchestrator_prompt();
   init_orchestration_provider_map();
+  init_message_reactions();
   init_agent_runs();
   init_budget();
   init_host_integrations();
@@ -3658,12 +3689,108 @@ var init_src = __esm(() => {
   init_cursor_transport();
   init_terminal_surface_id();
   init_terminal_sessions();
+  init_terminal_session_resolve();
   init_terminal_workspaces();
   init_herdr_workspace_digest();
   init_broker_routes();
   init_rendezvous();
 });
 
+// ../runtime/src/sqlite-observation.ts
+import { createHash as createHash3 } from "crypto";
+function observeSqliteDatabase(database, options) {
+  const configured = options.thresholdMs ?? Number(process.env.OPENSCOUT_SLOW_DB_MS ?? 100);
+  const threshold = Number.isFinite(configured) && configured >= 0 ? configured : 100;
+  if (threshold === 0)
+    return database;
+  const now = options.now ?? (() => performance.now());
+  const emit = options.emit ?? ((event) => console.warn("[scout-db]", JSON.stringify(event)));
+  const statements = new WeakMap;
+  let windowStart = -Infinity;
+  let emitted = 0;
+  let suppressed = 0;
+  function timed(operation, sql2, call) {
+    const start = now();
+    let outcome = "error";
+    try {
+      const result = call();
+      outcome = "ok";
+      return result;
+    } finally {
+      try {
+        const end = now();
+        const duration = end - start;
+        if (duration >= threshold) {
+          if (end - windowStart >= 60000) {
+            windowStart = end;
+            emitted = 0;
+          }
+          if (emitted >= 10) {
+            suppressed += 1;
+          } else {
+            emitted += 1;
+            const caller = (new Error().stack ?? "").split(`
+`).filter((line) => !/sqlite-observation\.(?:ts|js):/.test(line)).map((line) => line.match(/(?:packages|apps)\/[\w./-]+:\d+:\d+/)?.[0]).filter((line) => Boolean(line)).slice(0, 4);
+            emit({
+              event: "slow_sqlite",
+              database: options.database,
+              pid: process.pid,
+              operation,
+              queryId: createHash3("sha256").update(sql2).digest("hex").slice(0, 16),
+              durationMs: Math.round(duration * 100) / 100,
+              outcome,
+              suppressed,
+              caller
+            });
+            suppressed = 0;
+          }
+        }
+      } catch {}
+    }
+  }
+  function statementProxy(statement, sql2) {
+    const existing = statements.get(statement);
+    if (existing)
+      return existing;
+    const proxy = bindProxy(statement, (key, method, args) => {
+      if (["all", "get", "run", "values"].includes(key)) {
+        return timed(key, sql2, () => Reflect.apply(method, statement, args));
+      }
+      return Reflect.apply(method, statement, args);
+    });
+    statements.set(statement, proxy);
+    return proxy;
+  }
+  return bindProxy(database, (key, method, args) => {
+    if (["query", "prepare"].includes(key) && typeof args[0] === "string") {
+      const sql2 = args[0];
+      const statement = timed(`${key}.prepare`, sql2, () => Reflect.apply(method, database, args));
+      return statementProxy(statement, sql2);
+    }
+    if (["exec", "run"].includes(key) && typeof args[0] === "string") {
+      return timed(key, args[0], () => Reflect.apply(method, database, args));
+    }
+    return Reflect.apply(method, database, args);
+  });
+}
+function bindProxy(target, invoke) {
+  const methods = new Map;
+  return new Proxy(target, {
+    get(object, key) {
+      const value = Reflect.get(object, key, object);
+      if (typeof value !== "function" || key === "constructor")
+        return value;
+      const cached = methods.get(key);
+      if (cached?.original === value)
+        return cached.wrapped;
+      const wrapped = (...args) => invoke(String(key), value, args);
+      methods.set(key, { original: value, wrapped });
+      return wrapped;
+    }
+  });
+}
+var init_sqlite_observation = () => {};
+
 // ../runtime/src/runtime-adapters.ts
 function detectRuntimeHost(globalScope = globalThis) {
   return typeof globalScope.Bun === "undefined" ? "node" : "bun";
@@ -3729,13 +3856,13 @@ function openRuntimeSqliteDatabase(path2, options) {
   const adapter = controlPlaneSqliteAdapterKind();
   if (adapter === "bun-sqlite") {
     const { Database } = require2("bun:sqlite");
-    return new Database(path2, options);
+    return observeSqliteDatabase(new Database(path2, options), { database: "runtime" });
   }
   const { DatabaseSync } = require2("node:sqlite");
-  return new NodeSqliteDatabaseAdapter(new DatabaseSync(path2, {
+  return observeSqliteDatabase(new NodeSqliteDatabaseAdapter(new DatabaseSync(path2, {
     open: true,
     readOnly: options?.readonly === true
-  }));
+  })), { database: "runtime" });
 }
 function prepareNodeSqliteSql(sql2) {
   const numberedParamIndexes = [];
@@ -3828,6 +3955,8 @@ class NodeSqliteDatabaseAdapter {
 }
 var require2;
 var init_sqlite_adapter = __esm(() => {
+  init_sqlite_observation();
+  init_sqlite_observation();
   require2 = createRequire(import.meta.url);
 });
 
@@ -15274,6 +15403,7 @@ class CodexAppServerTransport {
     });
   }
   async ensureStarted() {
+    this.options.signal?.throwIfAborted();
     if (this.isAlive() && this.threadId) {
       return;
     }
@@ -15305,6 +15435,7 @@ class CodexAppServerTransport {
       });
       throw failure;
     }
+    this.options.signal?.throwIfAborted();
     const codexExecutable = resolveCodexExecutable();
     const launchArgs = normalizeCodexAppServerLaunchArgs(this.options.launchArgs);
     const env = this.options.processEnv ?? mergeEnvironmentOverrides(process.env, this.options.env);
@@ -15688,13 +15819,17 @@ class CodexAppServerClient {
     return this.transport.ensureOnline();
   }
   async invoke(prompt, timeoutMs) {
+    const onDelta = this.options.onDelta;
+    const signal = this.options.signal;
     return this.enqueue(async () => {
+      signal?.throwIfAborted();
       await this.transport.ensureOnline();
+      signal?.throwIfAborted();
       if (!this.transport.currentThreadId) {
         throw new Error(`Codex app-server session for ${this.options.agentName} has no active thread.`);
       }
       const outputPromise = new Promise(async (resolve10, reject) => {
-        const turn = this.createActiveTurn(resolve10, reject);
+        const turn = this.createActiveTurn(resolve10, reject, onDelta);
         try {
           const response = await this.transport.startTurn(prompt);
           turn.turnId = response.turn.id;
@@ -15711,8 +15846,12 @@ class CodexAppServerClient {
     });
   }
   async start(prompt) {
+    const onDelta = this.options.onDelta;
+    const signal = this.options.signal;
     return this.enqueue(async () => {
+      signal?.throwIfAborted();
       await this.transport.ensureOnline();
+      signal?.throwIfAborted();
       if (!this.transport.currentThreadId) {
         throw new Error(`Codex app-server session for ${this.options.agentName} has no active thread.`);
       }
@@ -15721,7 +15860,7 @@ class CodexAppServerClient {
       }
       let turn;
       const completion = new Promise((resolve10, reject) => {
-        turn = this.createActiveTurn(resolve10, reject);
+        turn = this.createActiveTurn(resolve10, reject, onDelta);
       });
       completion.catch(() => {
         return;
@@ -15818,11 +15957,12 @@ class CodexAppServerClient {
     });
     return next;
   }
-  createActiveTurn(resolve10, reject) {
+  createActiveTurn(resolve10, reject, onDelta) {
     if (this.activeTurn) {
       throw new Error(`Codex app-server session for ${this.options.agentName} already has an active turn.`);
     }
     const turn = {
+      onDelta,
       turnId: "",
       startedAt: Date.now(),
       messageOrder: [],
@@ -15899,6 +16039,8 @@ class CodexAppServerClient {
         this.activeTurn.messageByItemId.set(itemId, "");
       }
       this.activeTurn.messageByItemId.set(itemId, (this.activeTurn.messageByItemId.get(itemId) ?? "") + delta);
+      if (delta)
+        this.activeTurn.onDelta?.(delta);
       return;
     }
     if (method === "item/completed") {
@@ -27170,6 +27312,15 @@ var messageMentionsTable = sqliteTable("message_mentions", {
 }, (table) => [
   primaryKey({ columns: [table.messageId, table.actorId] })
 ]);
+var messageReactionsTable = sqliteTable("message_reactions", {
+  messageId: text("message_id").notNull().references(() => messagesTable.id, { onDelete: "cascade" }),
+  actorId: text("actor_id").notNull().references(() => actorsTable.id, { onDelete: "restrict" }),
+  emoji: text("emoji").notNull(),
+  createdAt: integer("created_at").notNull()
+}, (table) => [
+  primaryKey({ columns: [table.messageId, table.actorId, table.emoji] }),
+  index("idx_message_reactions_message").on(table.messageId)
+]);
 var messageAttachmentsTable = sqliteTable("message_attachments", {
   id: text("id").primaryKey(),
   messageId: text("message_id").notNull().references(() => messagesTable.id, { onDelete: "cascade" }),
@@ -28017,6 +28168,16 @@ CREATE TABLE IF NOT EXISTS message_mentions (
   PRIMARY KEY (message_id, actor_id)
 );
 
+CREATE TABLE IF NOT EXISTS message_reactions (
+  message_id TEXT NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
+  actor_id TEXT NOT NULL REFERENCES actors(id) ON DELETE RESTRICT,
+  emoji TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  PRIMARY KEY (message_id, actor_id, emoji)
+);
+CREATE INDEX IF NOT EXISTS idx_message_reactions_message
+  ON message_reactions (message_id);
+
 CREATE TABLE IF NOT EXISTS message_attachments (
   id TEXT PRIMARY KEY,
   message_id TEXT NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
@@ -29733,7 +29894,7 @@ init_node_identity();
 
 // ../runtime/src/mesh-peer-auth.ts
 init_node_identity();
-import { createHash as createHash3, randomBytes as randomBytes3 } from "crypto";
+import { createHash as createHash4, randomBytes as randomBytes3 } from "crypto";
 var PEER_AUTH_HEADERS = {
   peer: "x-openscout-peer",
   ts: "x-openscout-ts",
@@ -29768,7 +29929,7 @@ function peerRequestSigningPayload(input) {
 `);
 }
 function sha256Hex(body) {
-  return createHash3("sha256").update(body).digest("hex");
+  return createHash4("sha256").update(body).digest("hex");
 }
 function signPeerRequest(identity, input) {
   const ts = input.ts ?? Date.now();
@@ -29833,7 +29994,7 @@ import { connect as tlsConnect } from "tls";
 
 // ../runtime/src/node-tls-identity.ts
 import {
-  createHash as createHash4,
+  createHash as createHash5,
   createPrivateKey as createPrivateKey2,
   createPublicKey as createPublicKey2,
   generateKeyPairSync as generateKeyPairSync2,
@@ -41907,7 +42068,7 @@ init_support_paths();
 var TLS_CERT_VALIDITY_MS = 365 * 24 * 60 * 60 * 1000;
 var TLS_CERT_RENEWAL_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
 function tlsSpkiFingerprintFromDer(spkiDer) {
-  return createHash4("sha256").update(spkiDer).digest("hex");
+  return createHash5("sha256").update(spkiDer).digest("hex");
 }
 function tlsSpkiFingerprintFromCertificateDer(certificateDer) {
   const certificate2 = new X509Certificate(asBufferSource(certificateDer));
@@ -42626,7 +42787,7 @@ var require3 = createRequire2(import.meta.url);
 // ../runtime/src/mesh-bind-controller.ts
 init_broker_process_manager();
 // ../runtime/src/mesh-sas.ts
-import { createHash as createHash5, createHmac } from "crypto";
+import { createHash as createHash6, createHmac } from "crypto";
 
 // ../runtime/src/eff-short-wordlist.ts
 var EFF_SHORT_WORDLIST = [
@@ -43931,7 +44092,7 @@ var EFF_SHORT_WORDLIST = [
 // ../runtime/src/mesh-sas.ts
 var SAS_WORD_COUNT = 6;
 function createEnrollmentCommitment(nonce, cardSignature) {
-  return createHash5("sha256").update(Buffer.concat([nonce, Buffer.from(cardSignature, "utf8")])).digest("base64");
+  return createHash6("sha256").update(Buffer.concat([nonce, Buffer.from(cardSignature, "utf8")])).digest("base64");
 }
 function verifyEnrollmentCommitment(commitment, nonce, cardSignature) {
   const expected = createEnrollmentCommitment(nonce, cardSignature);
@@ -45919,6 +46080,7 @@ function resolvePushRelayConfig() {
     meshId: process.env.OPENSCOUT_PUSH_RELAY_MESH_ID?.trim() || null
   };
 }
+var PUSH_RELAY_TRANSPORT_DEVICE_ID = "push-relay";
 function relayAuthHeader(sessionToken) {
   return sessionToken.startsWith("osn_session_") ? `Bearer ${sessionToken}` : `Bearer osn_session_${sessionToken}`;
 }
@@ -46000,7 +46162,7 @@ async function broadcastPushRelayAlert(alert) {
       retryAfterSeconds: retryAfter ? Number.parseInt(retryAfter, 10) || null : null,
       rateLimitWindow: window2,
       failures: [{
-        deviceId: "push-relay",
+        deviceId: PUSH_RELAY_TRANSPORT_DEVICE_ID,
         tokenSuffix: "relay",
         status: 429,
         reason: detail || `HTTP 429 (window=${window2 ?? "unknown"})`
@@ -46016,7 +46178,7 @@ async function broadcastPushRelayAlert(alert) {
       failedCount: 1,
       configMissing: false,
       failures: [{
-        deviceId: "push-relay",
+        deviceId: PUSH_RELAY_TRANSPORT_DEVICE_ID,
         tokenSuffix: "relay",
         status: response.status,
         reason: detail || `HTTP ${response.status}`
@@ -46330,15 +46492,30 @@ async function sendApnsAlertToRegistration(registration, alert) {
     request.end(payload);
   });
 }
+function relayRejectedOurCredential(result) {
+  return result.failures.some((failure) => failure.deviceId === PUSH_RELAY_TRANSPORT_DEVICE_ID && (failure.status === 401 || failure.status === 403));
+}
+function hasDirectApnsCredentials() {
+  try {
+    return loadApnsCredentials() !== null;
+  } catch {
+    return false;
+  }
+}
 async function broadcastApnsAlertToActiveMobileDevices(alert) {
+  let relayFailures = [];
   if (resolvePushRelayConfig()) {
-    return broadcastPushRelayAlert(alert);
+    const relayResult = await broadcastPushRelayAlert(alert);
+    if (!relayRejectedOurCredential(relayResult) || !hasDirectApnsCredentials()) {
+      return relayResult;
+    }
+    relayFailures = relayResult.failures;
   }
   const registrations = listActiveMobilePushRegistrations();
   let deliveredCount = 0;
   let skippedCount = 0;
   let configMissing = false;
-  const failures = [];
+  const failures = [...relayFailures];
   for (const registration of registrations) {
     try {
       const outcome = await sendApnsAlertToRegistration(registration, alert);
@@ -60149,7 +60326,7 @@ function formatTimestamp(value) {
 }
 
 // ../web/server/core/broker/service.ts
-import { createHash as createHash6, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash7, randomUUID as randomUUID4 } from "crypto";
 init_src();
 init_setup();
 init_broker_api();
@@ -60644,7 +60821,7 @@ function deliveryRequestId(clientMessageId, createdAt) {
   if (!normalized) {
     return `deliver-${createdAt.toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
   }
-  const digest = createHash6("sha256").update(normalized).digest("hex").slice(0, 32);
+  const digest = createHash7("sha256").update(normalized).digest("hex").slice(0, 32);
   return `deliver-client-${digest}`;
 }
 function stableBrokerRecordId(prefix, clientMessageId, createdAt, discriminator = "") {
@@ -60652,7 +60829,7 @@ function stableBrokerRecordId(prefix, clientMessageId, createdAt, discriminator
   if (!normalized) {
     return `${prefix}-${createdAt.toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
   }
-  const digest = createHash6("sha256").update(`${normalized}\x00${discriminator}`).digest("hex").slice(0, 32);
+  const digest = createHash7("sha256").update(`${normalized}\x00${discriminator}`).digest("hex").slice(0, 32);
   return `${prefix}-client-${digest}`;
 }
 function metadataBoolean(metadata, key) {
@@ -62028,6 +62205,7 @@ var {
 } = scoutAgentService;
 
 // ../web/server/db/internal/db.ts
+init_sqlite_adapter();
 import { Database as Database2 } from "bun:sqlite";
 import { homedir as homedir33 } from "os";
 import { join as join42 } from "path";
@@ -62043,13 +62221,18 @@ function configureReadonlyDb(db) {
 }
 function db() {
   if (!_db) {
-    _db = new Database2(resolveDbPath(), { readonly: true });
+    _db = observeSqliteDatabase(new Database2(resolveDbPath(), { readonly: true }), {
+      database: "web-control-plane"
+    });
     configureReadonlyDb(_db);
   }
   return _db;
 }
 // ../web/server/db/internal/parse.ts
 init_src();
+function jsonBoolean(value) {
+  return value === 1 || value === "1" || value === "true";
+}
 function normalizeTimestampMs(value) {
   return epochMs(value);
 }
@@ -62113,7 +62296,9 @@ function agentFlightPhaseFromFlightState(state) {
 function queryAgentFlightPhases(database = db()) {
   const phases = new Map;
   const rows = database.prepare(`SELECT target_agent_id, state FROM invocations
-     WHERE state IN (${sqlPlaceholders(ACTIVE_FLIGHT_STATES4.length)})`).all(...ACTIVE_FLIGHT_STATES4);
+     WHERE state IN (${sqlPlaceholders(ACTIVE_FLIGHT_STATES4.length)})
+       AND COALESCE(json_extract(flight_metadata_json, '$.requesterTimedOut'), 0) != 1
+       AND COALESCE(json_extract(flight_metadata_json, '$.timeoutScope'), '') != 'requester_wait'`).all(...ACTIVE_FLIGHT_STATES4);
   for (const row of rows) {
     const phase = agentFlightPhaseFromFlightState(row.state);
     if (!phase) {
@@ -62362,6 +62547,7 @@ function queryFleetActivity(opts) {
 }
 var TERMINAL_FLIGHT_STATES = new Set(["completed", "failed", "cancelled"]);
 var FLEET_RECENT_COMPLETED_MAX_AGE_MS = 3 * 24 * 60 * 60 * 1000;
+var ATTENTION_STALE_AFTER_MS = 7 * 24 * 60 * 60 * 1000;
 function fleetRequesterIds() {
   const operatorName = resolveOperatorName().trim() || "operator";
   return Array.from(new Set([operatorName, "operator"]));
@@ -62402,6 +62588,8 @@ function queryFleetAskRows(requesterIds, limit) {
        json_extract(inv.flight_metadata_json, '$.failureSeverity') AS failure_severity,
        json_extract(inv.flight_metadata_json, '$.dispatchOutcome.status') AS dispatch_outcome_status,
        json_extract(inv.flight_metadata_json, '$.dispatchOutcome.reason') AS dispatch_outcome_reason,
+       json_extract(inv.flight_metadata_json, '$.requesterTimedOut') AS requester_timed_out,
+       json_extract(inv.flight_metadata_json, '$.timeoutScope') AS timeout_scope,
        (
          SELECT MAX(COALESCE(recovery_inv.completed_at, recovery_inv.started_at, 0))
          FROM invocations recovery_inv
@@ -62488,7 +62676,8 @@ function projectFleetAsk(row, requesterIdSet) {
   const queuedFlight = row.flight_state === "queued";
   const queuedUntilOnline = queuedFlight && row.dispatch_outcome_status === "queued_until_online";
   const staleActiveFlight = hasFlight && row.flight_state !== null && !TERMINAL_FLIGHT_STATES.has(row.flight_state) && isStaleActiveFlight(row.started_at, row.created_at);
-  const isActiveFlight = hasFlight && row.flight_state !== null && !TERMINAL_FLIGHT_STATES.has(row.flight_state) && !failed && !staleActiveFlight;
+  const requesterStoppedWaiting = hasFlight && row.flight_state !== null && !TERMINAL_FLIGHT_STATES.has(row.flight_state) && (jsonBoolean(row.requester_timed_out) || row.timeout_scope === "requester_wait");
+  const isActiveFlight = hasFlight && row.flight_state !== null && !TERMINAL_FLIGHT_STATES.has(row.flight_state) && !failed && !staleActiveFlight && !requesterStoppedWaiting;
   const attentionEligibleState = row.record_kind === "work_item" && row.work_state !== null && ["open", "working", "waiting", "review"].includes(row.work_state) || row.record_kind === "question" && row.work_state !== null && ["open", "answered"].includes(row.work_state);
   const recordDismissedAt = normalizeTimestampMs(row.record_dismissed_at);
   const recordUpdatedAt = normalizeTimestampMs(row.work_updated_at);
@@ -62522,7 +62711,7 @@ function projectFleetAsk(row, requesterIdSet) {
     collaborationRecordId: row.collaboration_record_id,
     task: row.task,
     status,
-    statusLabel: status === "working" && replied ? "Acknowledged" : status === "failed" && queuedUntilOnline ? "Not delivered" : status === "failed" && noteworthyFailure ? stoppedFailure ? "Stopped" : "Interrupted" : fleetStatusLabel(status),
+    statusLabel: requesterStoppedWaiting && status === "completed" ? "Stopped waiting" : status === "working" && replied ? "Acknowledged" : status === "failed" && queuedUntilOnline ? "Not delivered" : status === "failed" && noteworthyFailure ? stoppedFailure ? "Stopped" : "Interrupted" : fleetStatusLabel(status),
     acknowledgedAt: status === "working" && replied ? normalizeTimestampMs(row.status_ts) : null,
     attention: status === "needs_attention" ? "badge" : status === "failed" && queuedUntilOnline ? "badge" : status === "failed" && !failedDismissed && !recoveredDeliveryFailure ? noteworthyFailure ? "badge" : "interrupt" : "silent",
     agentState: summarizeAgentState(row.endpoint_state, agentFlightPhaseFromFlightState(row.flight_state)),
@@ -62536,34 +62725,54 @@ function projectFleetAsk(row, requesterIdSet) {
 }
 function queryFleetAttentionRows(requesterIds, limit) {
   const requesterClause = sqlPlaceholders(requesterIds.length);
-  return db().prepare(`SELECT
-       cr.kind AS record_kind,
-       cr.id AS record_id,
+  const staleBefore = Date.now() - ATTENTION_STALE_AFTER_MS;
+  return db().prepare(`WITH live_attention AS (
+       SELECT
+         cr.kind AS record_kind,
+         cr.id AS record_id,
+         cr.title,
+         cr.summary,
+         cr.conversation_id,
+         cr.state,
+         cr.acceptance_state,
+         cr.updated_at,
+         cr.owner_id AS agent_id,
+         ROW_NUMBER() OVER (
+           PARTITION BY cr.title, cr.owner_id
+           ORDER BY cr.updated_at DESC, cr.id DESC
+         ) AS duplicate_rank
+       FROM collaboration_records cr
+       WHERE (
+           (cr.kind = 'work_item' AND cr.state IN ('open', 'working', 'waiting', 'review'))
+           OR (cr.kind = 'question' AND cr.state IN ('open', 'answered'))
+         )
+         AND cr.next_move_owner_id IN (${requesterClause})
+         AND cr.updated_at >= ?
+         AND NOT EXISTS (
+           SELECT 1
+           FROM collaboration_events dismissed
+           WHERE dismissed.record_id = cr.id
+             AND dismissed.kind = 'dismissed'
+             AND dismissed.actor_id IN (${requesterClause})
+             AND dismissed.created_at >= cr.updated_at
+         )
+     )
+     SELECT
+       cr.record_kind,
+       cr.record_id,
        cr.title,
        cr.summary,
        cr.conversation_id,
        cr.state,
        cr.acceptance_state,
        cr.updated_at,
-       cr.owner_id AS agent_id,
+       cr.agent_id,
        owner.display_name AS agent_name
-     FROM collaboration_records cr
-     LEFT JOIN actors owner ON owner.id = cr.owner_id
-     WHERE (
-         (cr.kind = 'work_item' AND cr.state IN ('open', 'working', 'waiting', 'review'))
-         OR (cr.kind = 'question' AND cr.state IN ('open', 'answered'))
-       )
-       AND cr.next_move_owner_id IN (${requesterClause})
-       AND NOT EXISTS (
-         SELECT 1
-         FROM collaboration_events dismissed
-         WHERE dismissed.record_id = cr.id
-           AND dismissed.kind = 'dismissed'
-           AND dismissed.actor_id IN (${requesterClause})
-           AND dismissed.created_at >= cr.updated_at
-       )
+     FROM live_attention cr
+     LEFT JOIN actors owner ON owner.id = cr.agent_id
+     WHERE cr.duplicate_rank = 1
      ORDER BY cr.updated_at DESC
-     LIMIT ?`).all(...requesterIds, ...requesterIds, limit);
+     LIMIT ?`).all(...requesterIds, staleBefore, ...requesterIds, limit);
 }
 function queryOperatorAttentionRows(limit = 48) {
   return queryFleetAttentionRows(fleetRequesterIds(), limit).map((row) => ({
@@ -62777,7 +62986,7 @@ function isMissingTerminalSessionRegistryError(error) {
   return /no such table: terminal_session_registry/i.test(message);
 }
 // ../web/server/service-budgets.ts
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import { existsSync as existsSync37, mkdirSync as mkdirSync17, readdirSync as readdirSync6, readFileSync as readFileSync22, renameSync as renameSync6, statSync as statSync11, writeFileSync as writeFileSync13 } from "fs";
 import { open, readdir as readdir4, stat as stat6 } from "fs/promises";
 import { homedir as homedir35 } from "os";
@@ -62789,7 +62998,9 @@ init_pi_rpc();
 init_system_probes();
 import { Database as Database3 } from "bun:sqlite";
 var CACHE_TTL_MS = 60 * 1000;
+var FIVE_HOUR_MS = 5 * 3600 * 1000;
 var WEEK_MS = 7 * 24 * 3600 * 1000;
+var MONTH_MS = 30 * 24 * 3600 * 1000;
 var CODEX_LOOKBACK_DAYS = 3;
 var CODEX_JSONL_TAIL_MAX_BYTES = 2 * 1024 * 1024;
 var CODEX_INITIAL_FILE_LIMIT = 32;
@@ -63162,25 +63373,46 @@ function readClaudeStatuslineHistory(minCapturedAt) {
   }
   return out;
 }
+function claudeStatuslineWindowSpec(key) {
+  const raw2 = key.trim();
+  if (!raw2)
+    return null;
+  const normalized = raw2.toLowerCase().replace(/[-_\s]/gu, "");
+  if (["fivehour", "fivehours", "primary", "5h"].includes(normalized)) {
+    return { label: "5h", windowKind: "primary", windowMs: FIVE_HOUR_MS };
+  }
+  if (["sevenday", "weekly", "secondary", "7d"].includes(normalized)) {
+    return { label: "7d", windowKind: "secondary", windowMs: WEEK_MS };
+  }
+  if (["monthly", "month", "thirtyday", "30d"].includes(normalized)) {
+    return { label: "30d", windowKind: "monthly", windowMs: MONTH_MS };
+  }
+  if (normalized.includes("month")) {
+    return { label: "30d", windowKind: "monthly", windowMs: MONTH_MS };
+  }
+  if (normalized.includes("fivehour") || normalized.endsWith("5h")) {
+    return { label: raw2.replace(/_/gu, " "), windowKind: raw2, windowMs: FIVE_HOUR_MS };
+  }
+  if (normalized.startsWith("sevenday") || normalized.includes("weekly")) {
+    return { label: raw2.replace(/_/gu, " "), windowKind: raw2, windowMs: WEEK_MS };
+  }
+  return { label: raw2.replace(/_/gu, " "), windowKind: raw2, windowMs: WEEK_MS };
+}
 function claudeQuotaSnapshotsFromStatusline(record2) {
   const rateLimits = recordValue(record2.rate_limits);
   if (!rateLimits)
     return [];
   const capturedAt = claudeStatuslineCapturedAt(record2);
-  return [
-    claudeQuotaSnapshotFromStatuslineWindow(record2, rateLimits.five_hour, {
-      label: "5h",
-      windowKind: "primary",
-      windowMs: 5 * 3600 * 1000,
-      capturedAt
-    }),
-    claudeQuotaSnapshotFromStatuslineWindow(record2, rateLimits.seven_day, {
-      label: "7d",
-      windowKind: "secondary",
-      windowMs: WEEK_MS,
+  return Object.entries(rateLimits).flatMap(([key, value]) => {
+    const spec = claudeStatuslineWindowSpec(key);
+    if (!spec)
+      return [];
+    const snapshot = claudeQuotaSnapshotFromStatuslineWindow(record2, value, {
+      ...spec,
       capturedAt
-    })
-  ].filter((entry) => entry !== null);
+    });
+    return snapshot ? [snapshot] : [];
+  });
 }
 function claudeQuotaSnapshotFromStatuslineWindow(record2, value, options) {
   const window2 = recordValue(value);
@@ -63259,15 +63491,12 @@ function loadPersistedProviderQuotaSnapshots(input) {
     metadata: parseMetadataJson(row.metadataJson)
   }));
 }
-function quotaGaugeFromSnapshots(input, snapshots) {
+function selectLatestQuotaSnapshots(snapshots, input) {
   const latestByWindow = new Map;
-  const historyByWindow = quotaHistoryByWindow(snapshots);
-  const now = Date.now();
-  const minCurrentCapturedAt = input.maxCurrentAgeMs === undefined ? Number.NEGATIVE_INFINITY : now - input.maxCurrentAgeMs;
   for (const row of snapshots) {
-    if (row.capturedAt < minCurrentCapturedAt)
+    if (row.capturedAt < input.minCurrentCapturedAt)
       continue;
-    if (!input.allowExpiredWindows && quotaSnapshotIsExpired(row, now))
+    if (!input.allowExpiredWindows && quotaSnapshotIsExpired(row, input.now))
       continue;
     const key = quotaSnapshotWindowKey(row);
     const existing = latestByWindow.get(key);
@@ -63293,7 +63522,36 @@ function quotaGaugeFromSnapshots(input, snapshots) {
       latestByWindow.set(key, row);
     }
   }
-  const windows = [...latestByWindow.values()].map((snapshot) => storedQuotaWindowGauge(snapshot, historyByWindow.get(quotaSnapshotWindowKey(snapshot)) ?? [])).filter((window2) => Boolean(window2)).sort((a, b) => quotaWindowSortRank(a.label) - quotaWindowSortRank(b.label) || a.label.localeCompare(b.label));
+  return latestByWindow;
+}
+function quotaGaugeFromSnapshots(input, snapshots) {
+  const historyByWindow = quotaHistoryByWindow(snapshots);
+  const now = Date.now();
+  const minCurrentCapturedAt = input.maxCurrentAgeMs === undefined ? Number.NEGATIVE_INFINITY : now - input.maxCurrentAgeMs;
+  const latestByWindow = selectLatestQuotaSnapshots(snapshots, {
+    minCurrentCapturedAt,
+    now,
+    allowExpiredWindows: input.allowExpiredWindows
+  });
+  const awaitingKeys = new Set;
+  if (latestByWindow.size > 0 && !input.allowExpiredWindows) {
+    const expiredSiblings = selectLatestQuotaSnapshots(snapshots, {
+      minCurrentCapturedAt,
+      now,
+      allowExpiredWindows: true
+    });
+    for (const [key, row] of expiredSiblings) {
+      if (latestByWindow.has(key))
+        continue;
+      if (!quotaSnapshotIsExpired(row, now))
+        continue;
+      if (!shouldRetainExpiredWindow(row, now))
+        continue;
+      latestByWindow.set(key, row);
+      awaitingKeys.add(key);
+    }
+  }
+  const windows = [...latestByWindow.values()].map((snapshot) => storedQuotaWindowGauge(snapshot, historyByWindow.get(quotaSnapshotWindowKey(snapshot)) ?? [], { awaitingReset: awaitingKeys.has(quotaSnapshotWindowKey(snapshot)), now })).filter((window2) => Boolean(window2)).sort((a, b) => quotaWindowSortRank(a.label) - quotaWindowSortRank(b.label) || a.label.localeCompare(b.label));
   if (windows.length === 0)
     return null;
   const displayWindow = windows.find((window2) => window2.label === "7d") ?? windows[windows.length - 1];
@@ -63356,6 +63614,34 @@ function quotaSnapshotIsExpired(row, now) {
   const resetAt = finiteNumber(row.resetAt);
   return resetAt !== undefined && resetAt <= now;
 }
+function inferredQuotaWindowMs(row) {
+  const explicit = finiteNumber(row.windowMs);
+  if (explicit !== undefined)
+    return explicit;
+  const label = row.label.trim().toLowerCase();
+  if (label === "5h" || row.windowKind === "primary")
+    return FIVE_HOUR_MS;
+  if (label === "7d" || label === "weekly" || row.windowKind === "secondary")
+    return WEEK_MS;
+  if (label === "30d" || label === "monthly" || row.windowKind === "monthly")
+    return MONTH_MS;
+  return;
+}
+function shouldRetainExpiredWindow(row, now) {
+  const windowMs = inferredQuotaWindowMs(row) ?? FIVE_HOUR_MS;
+  const silenceMs = Math.min(WEEK_MS, Math.max(24 * 3600 * 1000, windowMs * 2));
+  return row.capturedAt >= now - silenceMs;
+}
+function forwardedResetAt(resetAt, windowMs, now) {
+  if (resetAt === undefined)
+    return;
+  if (resetAt > now)
+    return resetAt;
+  if (windowMs === undefined || windowMs <= 0)
+    return resetAt;
+  const cycles = Math.floor((now - resetAt) / windowMs) + 1;
+  return resetAt + cycles * windowMs;
+}
 function quotaSnapshotUsage(row) {
   const remainingPercent = finiteNumber(row.percentRemaining);
   const usedPercent = finiteNumber(row.usedPercent) ?? (remainingPercent === undefined ? undefined : 100 - remainingPercent) ?? deriveUsedPercent(row.used, row.limitValue);
@@ -63372,20 +63658,27 @@ function quotaSnapshotUsage(row) {
     unitLabel: used === undefined || limit === undefined ? "quota" : "req"
   };
 }
-function storedQuotaWindowGauge(row, history = []) {
+function storedQuotaWindowGauge(row, history = [], options = {}) {
   const usage = quotaSnapshotUsage(row);
   if (!usage)
     return null;
-  const windowMs = finiteNumber(row.windowMs);
-  const resetAt = finiteNumber(row.resetAt) ?? (windowMs === undefined ? undefined : row.capturedAt + windowMs) ?? Date.now();
+  const windowMs = finiteNumber(row.windowMs) ?? inferredQuotaWindowMs(row);
+  const now = options.now ?? Date.now();
+  const rawResetAt = finiteNumber(row.resetAt) ?? (windowMs === undefined ? undefined : row.capturedAt + windowMs) ?? now;
+  const awaitingReset = options.awaitingReset === true;
+  const resetAt = awaitingReset ? forwardedResetAt(rawResetAt, windowMs, now) ?? rawResetAt : rawResetAt;
   return {
     label: formatStoredQuotaWindowLabel(row),
-    ...usage,
+    fill: awaitingReset ? 0 : usage.fill,
+    usedLabel: awaitingReset ? "\u2014" : usage.usedLabel,
+    capLabel: usage.capLabel,
+    unitLabel: usage.unitLabel,
     resetAt,
     ...windowMs === undefined ? {} : { windowMs },
     capturedAt: row.capturedAt,
     source: quotaSnapshotSourceLabel(row),
-    ...history.length === 0 ? {} : { history }
+    ...history.length === 0 ? {} : { history },
+    ...awaitingReset ? { awaitingReset: true } : {}
   };
 }
 function quotaSnapshotSourceLabel(row) {
@@ -63428,6 +63721,8 @@ function formatStoredQuotaWindowLabel(row) {
   if (fromDuration)
     return fromDuration;
   const label = explicitDuration.toLowerCase();
+  if (label === "monthly" || label === "month" || row.windowKind === "monthly")
+    return "30d";
   if (label === "weekly" || label === "week" || row.windowKind === "secondary")
     return "7d";
   if (label === "primary" || row.windowKind === "primary")
@@ -63445,7 +63740,9 @@ function quotaWindowSortRank(label) {
     return 0;
   if (label === "7d")
     return 1;
-  return 2;
+  if (label === "30d" || label === "monthly")
+    return 2;
+  return 3;
 }
 async function loadKimiGauge(forceRefresh = false) {
   const fresh = loadPersistedProviderQuotaGauge({
@@ -64299,7 +64596,7 @@ function quotaHistoryMetadata(snapshot) {
   };
 }
 function stableHash(value) {
-  return createHash7("sha256").update(JSON.stringify(value)).digest("hex").slice(0, 24);
+  return createHash8("sha256").update(JSON.stringify(value)).digest("hex").slice(0, 24);
 }
 function timestampMs(value) {
   const normalized = epochMs(value);
@@ -66955,7 +67252,7 @@ async function markScoutMobileConversationRead(input) {
 
 // ../web/server/core/pairing/runtime/bridge/mobile-terminal-provision.ts
 init_system_probes();
-import { createHash as createHash10 } from "crypto";
+import { createHash as createHash11 } from "crypto";
 import {
   chmodSync as chmodSync2,
   closeSync as closeSync2,
@@ -66971,7 +67268,7 @@ import { homedir as homedir38, hostname as hostname3, userInfo as userInfo2 } fr
 import { join as join47 } from "path";
 
 // ../web/server/core/pairing/runtime/bridge/ssh-terminal-access.ts
-import { createHash as createHash8 } from "crypto";
+import { createHash as createHash9 } from "crypto";
 var SCOUT_AUTHORIZED_KEY_MARKER = "scout:terminal-access:v0";
 var SCOUT_AUTHORIZED_KEY_OPTIONS = "restrict,pty";
 var SUPPORTED_IOS_PUBLIC_KEY_ALGORITHMS = new Set([
@@ -67143,10 +67440,10 @@ function readSshWireString(buffer, offset) {
   };
 }
 function fingerprintKeyData(keyData) {
-  return `SHA256:${createHash8("sha256").update(Buffer.from(keyData, "base64")).digest("base64").replace(/=+$/, "")}`;
+  return `SHA256:${createHash9("sha256").update(Buffer.from(keyData, "base64")).digest("base64").replace(/=+$/, "")}`;
 }
 function fingerprintUtf8(value) {
-  return `SHA256:${createHash8("sha256").update(value, "utf8").digest("base64").replace(/=+$/, "")}`;
+  return `SHA256:${createHash9("sha256").update(value, "utf8").digest("base64").replace(/=+$/, "")}`;
 }
 function encodeMarkerValue(value) {
   return Buffer.from(value, "utf8").toString("base64url");
@@ -67157,7 +67454,7 @@ function decodeMarkerValue(value) {
 }
 
 // ../web/server/core/pairing/runtime/bridge/mobile-terminal-session.ts
-import { createHash as createHash9 } from "crypto";
+import { createHash as createHash10 } from "crypto";
 
 class InvalidMobileTerminalSessionError extends Error {
   constructor(message = "Invalid mobile terminal session name") {
@@ -67167,7 +67464,7 @@ class InvalidMobileTerminalSessionError extends Error {
 }
 function mobileTerminalSessionName(sshPublicKey, deviceClass) {
   const normalizedClass = normalizeMobileTerminalDeviceClass(deviceClass);
-  const signature = createHash9("sha256").update(sshPublicKey.trim()).digest("hex").slice(0, 8);
+  const signature = createHash10("sha256").update(sshPublicKey.trim()).digest("hex").slice(0, 8);
   return `scout-${normalizedClass}-${signature}`;
 }
 function provisionedMobileTerminalSessionName(sshPublicKey, deviceClass) {
@@ -67330,7 +67627,7 @@ function readRequiredHostKeyFingerprint() {
     const keyData = pub.trim().split(/\s+/)[1];
     if (!keyData)
       throw new Error("missing key data");
-    const digest = createHash10("sha256").update(Buffer.from(keyData, "base64")).digest("base64").replace(/=+$/, "");
+    const digest = createHash11("sha256").update(Buffer.from(keyData, "base64")).digest("base64").replace(/=+$/, "");
     return `SHA256:${digest}`;
   } catch (error) {
     const detail = error instanceof Error ? error.message : String(error);