agent-coord-mcp 0.26.6 → 0.26.8

package/dist/tools/worktrees.js

@@ -152,6 +152,30 @@ async function create(a) {
         // made: a verb that silently returns a tree on a different branch than asked
         // for is the adjacent-answer shape.
         const head = git(existing.path, ["rev-parse", "HEAD"]);
+        // IS THE REUSED TREE ACTUALLY AT THE BASE IT CLAIMS?
+        //
+        // The verb warned when an existing tree was on a different BRANCH and said
+        // nothing about it being behind the BASE — so a tree left on last week's
+        // main was handed back as ready. Starting a new task there produces the
+        // "stale main -> confidently-wrong inventories" failure the worker card
+        // already warns about, and nothing about the result looks stale.
+        //
+        // Reported here, not refused: an existing tree legitimately holds
+        // in-progress work mid-slice (1.3). The refusal belongs to `claim`, which
+        // is the verb that means "start something new".
+        let atBase = false;
+        let behindBy = null;
+        try {
+            const baseSha = git(repo, ["rev-parse", "--verify", `${ref}^{commit}`]);
+            atBase = head === baseSha;
+            if (!atBase)
+                behindBy = Number(git(existing.path, ["rev-list", "--count", `HEAD..${ref}`])) || 0;
+        }
+        catch {
+            // NOT MEASURED IS NOT AT-BASE. Leaving `atBase` false is the safe
+            // direction: it makes `claim` ask rather than assume.
+            atBase = false;
+        }
         return {
             ok: true,
             path: existing.path,
@@ -159,6 +183,8 @@ async function create(a) {
             branch: existing.branch,
             created: false,
             base: ref,
+            atBase,
+            behindBy: behindBy ?? 0,
             ...(existing.branch !== branch
                 ? { warning: `existing tree is on '${existing.branch}', not the '${branch}' this call would have created — reusing it, NOT re-pointing it` }
                 : {}),
@@ -177,6 +203,10 @@ async function create(a) {
         branch,
         created: true,
         base: ref,
+        // Cut from `sha`, which IS origin/<base> — true by construction here, and
+        // stated so callers need not special-case "created" to know it.
+        atBase: true,
+        behindBy: 0,
         ...(a.ephemeral
             ? { ephemeral: true, removeWith: `git -C ${repo} worktree remove --force ${target} && git -C ${repo} branch -D ${branch}` }
             : {}),

package/dist/tools/worktrees.js.map

@@ -1 +1 @@
-{"version":3,"file":"worktrees.js","sourceRoot":"","sources":["../../src/tools/worktrees.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AACH,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE;IACjD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAc,EAAU,EAAE,CACnD,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAEzG;mFACmF;AACnF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAA8C,EAAE,CAAC;IAC1D,IAAI,GAAG,GAAmD,IAAI,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,IAAI,GAAG;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC9C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE;IACxC,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,0BAA0B;IACzC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAOxC;IACC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,uCAAuC,IAAI,GAAG,EAAE,CAAC;IACjH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;IAErF,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,yBAAyB,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAChH,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,EAAE;IACF,8EAA8E;IAC9E,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,OAAO,MAAM,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAQrB;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAE3C,4EAA4E;IAC5E,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,GAAG,GAAG,UAAU,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;IACnF,CAAC;IACD,IAAI,CAAC;QACH,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAc;YAClB,KAAK,EAAE,GAAG,GAAG,4DAA4D,IAAI,0GAA0G;SACxL,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,iDAAiD;IACjD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACtF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,OAAO,CAAC;IAEnE,6EAA6E;IAC7E,mEAAmE;IACnE,EAAE;IACF,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,gEAAgE;IAChE,EAAE;IACF,4EAA4E;IAC5E,8CAA8C;IAC9C,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAc;YAClB,KAAK,EACH,+CAA+C,OAAO,6DAA6D;gBACnH,yFAAyF;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,IAAI,QAAQ,EAAE,CAAC;QACb,0EAA0E;QAC1E,6EAA6E;QAC7E,oCAAoC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,IAAa;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,GAAG;YACT,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM;gBAC5B,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,QAAQ,CAAC,MAAM,eAAe,MAAM,iEAAiE,EAAE;gBAC5I,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,4BAA4B,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAa;QACjB,IAAI,EAAE,MAAM;QACZ,GAAG;QACH,MAAM;QACN,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,GAAG;QACT,GAAG,CAAC,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,IAAI,4BAA4B,MAAM,cAAc,IAAI,cAAc,MAAM,EAAE,EAAE;YAC3H,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAqD;IAC9F,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,GAAG,GAAG,UAAU,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,GAAG,GAAG,kDAAkD,EAAE,CAAC;IACjG,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;QAClB,IAAI,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,qCAAqC,EAAE,CAAC,CAAC;YAC9F,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,qFAAqF,EAAE,CAAC,CAAC;YAC9I,SAAS;QACX,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,GAAG,EAAE,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC;YACH,KAAK,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,KAAK,qBAAqB,GAAG,iCAAiC,EAAE,CAAC,CAAC;YACrI,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC;YACnF,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,mBAAmB,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3H,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9G,CAAC"}
+{"version":3,"file":"worktrees.js","sourceRoot":"","sources":["../../src/tools/worktrees.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AACH,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE;IACjD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAc,EAAU,EAAE,CACnD,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAEzG;mFACmF;AACnF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAA8C,EAAE,CAAC;IAC1D,IAAI,GAAG,GAAmD,IAAI,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,IAAI,GAAG;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC9C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE;IACxC,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,0BAA0B;IACzC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAOxC;IACC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,uCAAuC,IAAI,GAAG,EAAE,CAAC;IACjH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;IAErF,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,yBAAyB,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAChH,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,EAAE;IACF,8EAA8E;IAC9E,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,OAAO,MAAM,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAQrB;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAE3C,4EAA4E;IAC5E,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,GAAG,GAAG,UAAU,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;IACnF,CAAC;IACD,IAAI,CAAC;QACH,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAc;YAClB,KAAK,EAAE,GAAG,GAAG,4DAA4D,IAAI,0GAA0G;SACxL,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,iDAAiD;IACjD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACtF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,OAAO,CAAC;IAEnE,6EAA6E;IAC7E,mEAAmE;IACnE,EAAE;IACF,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,gEAAgE;IAChE,EAAE;IACF,4EAA4E;IAC5E,8CAA8C;IAC9C,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAc;YAClB,KAAK,EACH,+CAA+C,OAAO,6DAA6D;gBACnH,yFAAyF;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,IAAI,QAAQ,EAAE,CAAC;QACb,0EAA0E;QAC1E,6EAA6E;QAC7E,oCAAoC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,qDAAqD;QACrD,EAAE;QACF,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,iEAAiE;QACjE,EAAE;QACF,kEAAkE;QAClE,0EAA0E;QAC1E,gDAAgD;QAChD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;YACxE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;YAC1B,IAAI,CAAC,MAAM;gBAAE,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnG,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,sDAAsD;YACtD,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAa;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,GAAG;YACT,MAAM;YACN,QAAQ,EAAE,QAAQ,IAAI,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM;gBAC5B,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,QAAQ,CAAC,MAAM,eAAe,MAAM,iEAAiE,EAAE;gBAC5I,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,4BAA4B,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAa;QACjB,IAAI,EAAE,MAAM;QACZ,GAAG;QACH,MAAM;QACN,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,GAAG;QACT,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,CAAC;QACX,GAAG,CAAC,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,IAAI,4BAA4B,MAAM,cAAc,IAAI,cAAc,MAAM,EAAE,EAAE;YAC3H,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAqD;IAC9F,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,GAAG,GAAG,UAAU,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,GAAG,GAAG,kDAAkD,EAAE,CAAC;IACjG,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;QAClB,IAAI,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,qCAAqC,EAAE,CAAC,CAAC;YAC9F,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,qFAAqF,EAAE,CAAC,CAAC;YAC9I,SAAS;QACX,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,GAAG,EAAE,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC;YACH,KAAK,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,KAAK,qBAAqB,GAAG,iCAAiC,EAAE,CAAC,CAAC;YACrI,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC;YACnF,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,mBAAmB,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3H,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9G,CAAC"}

package/hooks/push-cursor.mjs

@@ -0,0 +1,78 @@
+/*
+ * A READER MUST NOT BE ABLE TO CONSUME.
+ *
+ * The read cursor records what the AGENT has taken delivery of. Only the agent
+ * reading may advance it. Anything else that merely LOOKS at the log — a pusher
+ * typing into a pane, a watcher waiting for traffic — is a reader, and a reader
+ * that advances the read cursor consumes on the agent's behalf without the
+ * agent having seen anything.
+ *
+ * This module is the pusher's instance of that rule. `wait_for_message` is the
+ * other one: it must observe the log without consuming from it. They are the
+ * same rule at two callers, not two fixes.
+ *
+ * THE PUSH CURSOR IS NOT THE READ CURSOR.
+ *
+ * These were one file. The pusher advanced `roomOffsets[chan]` the moment a
+ * paste was DEEMED submitted, and `read_messages` reads the same offsets — so a
+ * paste that never reached the pane still marked the message consumed. The
+ * message was then unreachable by every route: not in the pane, and skipped by
+ * the reader.
+ *
+ * That is the parent class of every defect found this week — a failure path
+ * returning a plausible success — with one difference that makes it worse:
+ * this one WRITES THE SUCCESS INTO DURABLE STATE. The others produced a wrong
+ * reading; this destroys the evidence that the reading was wrong.
+ *
+ * Measured on a consumer fleet: an agent's cursor sat past a peer's
+ * `DONE: merged #<n>` at line 1107 of that room's log — a ROOM post, so its
+ * inbox was correctly empty and its `gh` current. Everything looked fine.
+ *
+ * Separating them does NOT make delivery reliable. It converts SILENT LOSS into
+ * NON-DELIVERY: the message stays unread in the read cursor, so `read_messages`
+ * still serves it and the failure becomes visible.
+ *
+ * EXTRACTED SO IT CAN BE EXERCISED. Inline in the daemon, the only thing a test
+ * could reach was the source text — and a source-text assertion cannot tell a
+ * working separation from a broken one. The first version of this fix shipped
+ * with an "end to end" test that passed either way, because the daemon needs a
+ * live tmux pane and never reached the cursor at all.
+ */
+import { existsSync, readFileSync, writeFileSync, renameSync } from "node:fs";
+import path from "node:path";
+
+export const readCursorFile = (file) => {
+  if (!existsSync(file)) return null;
+  try {
+    return JSON.parse(readFileSync(file, "utf8"));
+  } catch {
+    return {};
+  }
+};
+
+export const pushCursorPath = (root, safeId) => path.join(root, "cursors", `${safeId}.push.json`);
+export const readCursorPath = (root, safeId) => path.join(root, "cursors", `${safeId}.json`);
+
+/**
+ * SEEDED FROM THE READ CURSOR ON FIRST RUN, once.
+ *
+ * Without this every existing pusher wakes with an empty push cursor and
+ * re-pushes its entire history into the pane — turning a data-loss fix into a
+ * flood. The seed is a COPY, not a link: after it, the two advance
+ * independently.
+ */
+export function readPushCursor(root, safeId, write = writePushCursor) {
+  const own = readCursorFile(pushCursorPath(root, safeId));
+  if (own !== null) return own;
+  const seed = readCursorFile(readCursorPath(root, safeId)) ?? {};
+  write(root, safeId, seed);
+  return seed;
+}
+
+/** Writes ONLY the push cursor. What the agent has READ is not the pusher's to say. */
+export function writePushCursor(root, safeId, c) {
+  const file = pushCursorPath(root, safeId);
+  const tmp = `${file}.tmp`;
+  writeFileSync(tmp, JSON.stringify(c));
+  renameSync(tmp, file);
+}

package/hooks/tmux-pusher.mjs

@@ -101,6 +101,7 @@ import { spawn, spawnSync } from "node:child_process";
 import { effectiveTier, isGateRunnerRole, TierQueue, formatBatch } from "./tier.mjs";
 import { isCi } from "./roles.mjs";
 import { mergeTransportMarker } from "./marker.mjs";
+import { readPushCursor, writePushCursor } from "./push-cursor.mjs";
 import { pasteAndSubmit as sharedPasteAndSubmit, submitControl as sharedSubmitControl } from "./submit.mjs";
 
 const AGENT_ID = process.env.AGENT_COORD_ID;
@@ -175,6 +176,36 @@ setInterval(refreshTierCtx, 30_000).unref();
 const SAFE_ID = AGENT_ID.replace(/[^a-zA-Z0-9._-]/g, "_");
 const INBOX_FILE = path.join(ROOT, "inbox", `${SAFE_ID}.jsonl`);
 const CURSOR_FILE = path.join(ROOT, "cursors", `${SAFE_ID}.json`);
+
+/*
+ * THE PUSH CURSOR IS NOT THE READ CURSOR.
+ *
+ * These were one file. The pusher advanced `roomOffsets[chan]` the moment a
+ * paste was DEEMED submitted, and `read_messages` reads the same offsets — so a
+ * paste that never reached the pane still marked the message consumed. The
+ * message was then unreachable by every route: not in the pane, and skipped by
+ * the reader.
+ *
+ * That is today's parent class — a failure path returning a plausible success —
+ * with one difference that makes it worse than every other instance: this one
+ * WRITES THE SUCCESS INTO DURABLE STATE. The others produced a wrong reading;
+ * this destroys the evidence that the reading was wrong.
+ *
+ * Measured on a consumer fleet: an agent's cursor sat past a peer's
+ * `DONE: merged #<n>` at line 1107 of that room's log — a ROOM post, so its
+ * inbox was correctly empty and its `gh` current. Everything looked fine.
+ *
+ * Separating them does NOT make delivery reliable. It converts SILENT LOSS into
+ * mere NON-DELIVERY: the message stays unread in the read cursor, so
+ * `read_messages` still serves it and the failure becomes visible. Cheapest
+ * first, and it is the half that stops data loss rather than a stall.
+ *
+ * The cost is duplication, deliberately: a message pasted into the pane may
+ * also be served by `read_messages`. At-least-once with a visible duplicate
+ * beats at-most-once with an invisible hole — the same ruling as the event
+ * subscriptions' delivery contract.
+ */
+const PUSH_CURSOR_FILE = path.join(ROOT, "cursors", `${SAFE_ID}.push.json`);
 const TRANSPORT_FILE = path.join(ROOT, "transports", `${SAFE_ID}.json`);
 // Out-of-band delivery receipts: stamped AFTER a message is typed into the
 // pane, so the sender can poll for proof of delivery without the receipt ever
@@ -228,19 +259,14 @@ let debounceTimer = null;
 let sending = false;
 let targetMisses = 0;
 
+// Cursor IO lives in ./push-cursor.mjs so it can be EXERCISED — inline here,
+// the only thing a test could reach was the source text.
 function readCursor() {
-  if (!existsSync(CURSOR_FILE)) return {};
-  try {
-    return JSON.parse(readFileSync(CURSOR_FILE, "utf8"));
-  } catch {
-    return {};
-  }
+  return readPushCursor(ROOT, SAFE_ID);
 }
 
 function writeCursor(c) {
-  const tmp = CURSOR_FILE + ".tmp";
-  writeFileSync(tmp, JSON.stringify(c));
-  renameSync(tmp, CURSOR_FILE);
+  writePushCursor(ROOT, SAFE_ID, c);
 }
 
 function readJsonl(file) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-coord-mcp",
-  "version": "0.26.6",
+  "version": "0.26.8",
   "description": "File-backed MCP server for coordinating multiple AI coding agents (Claude Code, Cursor, Cline, etc.). Local stdio or networked over Streamable HTTP.",
   "type": "module",
   "bin": {
@@ -46,7 +46,7 @@
     "@modelcontextprotocol/sdk": "^1.30.0",
     "proper-lockfile": "^4.1.2",
     "zod": "^4.4.3",
-    "@davidbalzan/groundwork-seam": "0.1.8"
+    "@davidbalzan/groundwork-seam": "0.1.10"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",

package/scripts/check-test-count.mjs

@@ -22,7 +22,7 @@
 
 import { spawn } from "node:child_process";
 
-const EXPECTED_TESTS = 452;
+const EXPECTED_TESTS = 520;
 
 const expected = Number(process.env.AGENT_COORD_EXPECTED_TESTS ?? EXPECTED_TESTS);
 // Same glob the suite always used — `--test test/` would recurse differently

package/scripts/coord-attention-clock.mjs

@@ -0,0 +1,122 @@
+#!/usr/bin/env node
+/*
+ * Emit on MERGEABLE-AND-UNATTENDED.
+ *
+ * Two mergeable, CI-green PRs sat 17 hours; two more sat 40 minutes and 1h48 on
+ * the day the coordinator said it was checking for that. Nothing in the room
+ * said so — a worker went looking. This is the mechanism that was missing.
+ *
+ * A TIMER, NOT A TRIGGER, for the reason the stall clock is: a mechanism
+ * without a schedule measures inbound traffic rather than elapsed time, and
+ * cannot fire during exactly the quiet it exists to cover.
+ *
+ * Named unit: com.davidbalzan.coord-attention-clock (see --install).
+ *
+ * UNKNOWN IS NOT UNATTENDED. `mergeable` is UNKNOWN for a while after every
+ * push and an empty rollup is ambiguous; both are reported as unknown, never as
+ * an alert. Inventing an alert from a question GitHub has not answered is the
+ * fabrication class this fleet has spent three days removing.
+ *
+ * REPORTED ONCE, not every tick: delivery goes through the same subscription
+ * machinery as record events, so the idempotency key suppresses a repeat. A DM
+ * every 30 minutes about the same PR trains its own dismissal.
+ */
+import { execFileSync } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { homedir } from "node:os";
+
+const argv = Object.fromEntries(
+  process.argv.slice(2).flatMap((a) => {
+    const m = /^--([^=]+)(?:=(.*))?$/.exec(a);
+    return m ? [[m[1], m[2] ?? true]] : [];
+  }),
+);
+const here = path.dirname(fileURLToPath(import.meta.url));
+const dist = path.join(here, "..", "dist");
+const LABEL = "com.davidbalzan.coord-attention-clock";
+
+if (argv.install) {
+  const repo = String(argv.repo ?? process.cwd());
+  const to = String(argv.to ?? "<coordinator-agent-id>");
+  const every = Number(argv.every ?? 15);
+  const self = path.join(here, "coord-attention-clock.mjs");
+  console.log(`# macOS launchd — Label: ${LABEL}
+#   launchctl bootstrap gui/$(id -u) ~/Library/LaunchAgents/${LABEL}.plist
+<?xml version="1.0" encoding="UTF-8"?>
+<plist version="1.0"><dict>
+  <key>Label</key><string>${LABEL}</string>
+  <key>ProgramArguments</key><array>
+    <string>${process.execPath}</string><string>${self}</string>
+    <string>--repo=${repo}</string><string>--to=${to}</string>
+  </array>
+  <key>StartInterval</key><integer>${every * 60}</integer>
+  <key>RunAtLoad</key><true/>
+  <key>StandardErrorPath</key><string>${path.join(homedir(), "agent-coord", "logs", "attention-clock.err")}</string>
+</dict></plist>
+
+# Linux cron:
+# */${every} * * * * ${process.execPath} ${self} --repo=${repo} --to=${to}
+`);
+  process.exit(0);
+}
+
+const repo = String(argv.repo ?? process.cwd());
+const to = argv.to ? String(argv.to) : null;
+const from = String(argv.from ?? "coord-attention-clock");
+const quietMinutes = Number(argv["quiet-minutes"] ?? 20);
+
+const { partition } = await import(path.join(dist, "tools/attention.js"));
+const { readSubs, evaluate, commitEvaluation } = await import(path.join(dist, "tools/events.js"));
+const { sendMessageTool } = await import(path.join(dist, "tools/messaging.js"));
+
+let prs;
+try {
+  const out = execFileSync(
+    "gh",
+    ["pr", "list", "--state", "open", "--json", "number,state,mergeable,updatedAt,statusCheckRollup"],
+    { cwd: repo, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] },
+  );
+  prs = JSON.parse(out).map((p) => ({ ...p, checks: p.statusCheckRollup ?? [] }));
+} catch (e) {
+  // NOT FETCHED IS NOT NOTHING-TO-REPORT. A silent failure here is exactly the
+  // quiet that let the PRs sit.
+  console.error(`[attention-clock] FAILED to list PRs: ${(e && e.message) || e}`);
+  process.exit(1);
+}
+
+const now = Date.now();
+const { unattended, unknown, attended } = partition(prs, now, quietMinutes * 60_000);
+
+let delivered = 0;
+if (to) {
+  const subs = readSubs();
+  let next = subs;
+  const fresh = [];
+  for (const u of unattended) {
+    const ev = { kind: "pr", target: "mergeable-unattended", ref: `#${u.pr.number}`, summary: u.why };
+    const r = evaluate(next, ev, now);
+    next = r.subs;
+    if (r.deliveries.some((d) => d.status === "delivered")) fresh.push(u);
+  }
+  commitEvaluation(next);
+  if (fresh.length) {
+    await sendMessageTool({
+      from,
+      to,
+      text:
+        `AGENT_ACTION: ${fresh.length} PR(s) MERGEABLE AND UNATTENDED.\n` +
+        fresh.map((u) => `- ${u.why}`).join("\n") +
+        `\n\nScheduled check (${LABEL}), not a person. Verify before merging: this reports GATE-READINESS, never that the change is correct.`,
+    });
+    delivered = fresh.length;
+  }
+}
+
+// The null result every run: a check that only speaks when it fires cannot be
+// told from a broken one. `unknown` is printed separately from `attended`
+// because collapsing them is the defect this script refuses to commit.
+console.log(
+  `[attention-clock] ${prs.length} open · unattended ${unattended.length} (DM'd ${delivered}) · unknown ${unknown.length} · attended ${attended}` +
+    (unknown.length ? `\n  unknown:\n${unknown.map((u) => `    ${u.why}`).join("\n")}` : ""),
+);

package/scripts/coord-stall-clock.mjs

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+/*
+ * THE CLOCK. Runs `stall_check` on a schedule and DMs the duty officer on HIT.
+ *
+ * WHY A SCHEDULER AND NOT AN AGENT LOOP: a mechanism without a schedule is
+ * REACTIVE, and its null reports measure inbound traffic rather than elapsed
+ * time. console-worker-1's standing trigger ran zero times in seventeen hours
+ * because it only fired when a message woke it — so it could not run during
+ * exactly the period it existed to cover, a fleet gone quiet. `wait_for_message`
+ * is disqualified for the same reason (Task 3.3).
+ *
+ * THE UNIT IS NAMED, because "standing" without a named scheduler is a habit:
+ *   macOS   launchd  com.davidbalzan.coord-stall-clock   (see --install)
+ *   Linux   cron     the line --install prints
+ *
+ * WHAT IT MEASURES WHEN NOBODY IS WATCHING: that is the whole point, and it is
+ * why this is a timer rather than a trigger.
+ *
+ * MISS IS SILENT TO THE DUTY OFFICER AND NEVER SILENT TO THE RECORD. A DM every
+ * 30 minutes trains its own dismissal; a missing run mark makes a dead clock
+ * look like a healthy fleet. `stall_check` writes the mark itself; this script
+ * additionally records FAILURES, without which a clock that throws every time
+ * leaves no marks at all and is identical on disk to one never installed.
+ *
+ * It does NOT speak MCP: `stallCheckTool` is a plain function over
+ * ~/agent-coord and the repo's board, so a timer needs no server and no
+ * transport. One less thing that can be up while the thing it watches is down.
+ */
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { homedir } from "node:os";
+
+const argv = Object.fromEntries(
+  process.argv.slice(2).flatMap((a) => {
+    const m = /^--([^=]+)(?:=(.*))?$/.exec(a);
+    return m ? [[m[1], m[2] ?? true]] : [];
+  }),
+);
+
+const here = path.dirname(fileURLToPath(import.meta.url));
+const dist = path.join(here, "..", "dist");
+
+const LABEL = "com.davidbalzan.coord-stall-clock";
+
+if (argv.install) {
+  const repo = String(argv.repo ?? process.cwd());
+  const duty = String(argv.duty ?? "<duty-officer-agent-id>");
+  const every = Number(argv.every ?? 30);
+  const self = path.join(here, "coord-stall-clock.mjs");
+  const node = process.execPath;
+  console.log(`# macOS — launchd. Label: ${LABEL}
+# Write to ~/Library/LaunchAgents/${LABEL}.plist, then:
+#   launchctl bootstrap gui/$(id -u) ~/Library/LaunchAgents/${LABEL}.plist
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+  <key>Label</key><string>${LABEL}</string>
+  <key>ProgramArguments</key><array>
+    <string>${node}</string><string>${self}</string>
+    <string>--repo=${repo}</string><string>--duty=${duty}</string>
+  </array>
+  <key>StartInterval</key><integer>${every * 60}</integer>
+  <key>RunAtLoad</key><true/>
+  <key>StandardErrorPath</key><string>${path.join(homedir(), "agent-coord", "logs", "stall-clock.err")}</string>
+</dict></plist>
+
+# Linux — cron:
+# */${every} * * * * ${node} ${self} --repo=${repo} --duty=${duty}
+`);
+  process.exit(0);
+}
+
+const repo = String(argv.repo ?? process.cwd());
+const duty = argv.duty ? String(argv.duty) : null;
+const from = String(argv.from ?? "coord-stall-clock");
+const stallMinutes = argv["stall-minutes"] ? Number(argv["stall-minutes"]) : undefined;
+
+const { stallCheckTool, markRunFailure } = await import(path.join(dist, "tools/stall.js"));
+const { sendMessageTool } = await import(path.join(dist, "tools/messaging.js"));
+
+try {
+  const r = await stallCheckTool({ repo, ...(stallMinutes ? { stallMinutes } : {}) });
+
+  // `ok:false` is a FAILURE, not a quiet fleet — e.g. no board at that path.
+  // Recorded, or the next `stall_clock_status` reads a stopped clock as absent
+  // rather than broken.
+  if (!r.ok) {
+    markRunFailure(r.error ?? "stall_check returned ok:false with no reason");
+    console.error(`[stall-clock] FAILED: ${r.error}`);
+    process.exit(1);
+  }
+
+  if (r.hits.length && duty) {
+    const lines = r.hits.map((h) =>
+      h.kind === "no-heartbeat"
+        ? `- ${h.agentId}: no heartbeat for ${h.minutes}m (${h.stream})`
+        : `- ${h.agentId}: no commits on ${h.branch} for ${h.minutes}m`,
+    );
+    await sendMessageTool({
+      from,
+      to: duty,
+      text: `AGENT_ACTION: stall_check HIT — ${r.hits.length} of ${r.checked} in-flight row(s) stalled.\n${lines.join("\n")}\n\nThis is a scheduled check (${LABEL}), not a person watching. Verify before acting: a stall is a claim about the BOARD, not about the agent.`,
+    });
+  }
+
+  // Null result to stdout every run: the log is the record a human reads, and a
+  // trigger that only speaks when it fires cannot be told from a broken one.
+  const um = r.unmeasurable?.length ? `, ${r.unmeasurable.length} unmeasurable` : "";
+  console.log(
+    r.hits.length
+      ? `[stall-clock] HIT ${r.hits.length}/${r.checked}${um}${duty ? ` — DM sent to ${duty}` : " — NO DUTY OFFICER SET, no DM"}`
+      : `[stall-clock] MISS 0/${r.checked}${um} — no DM, run recorded`,
+  );
+} catch (e) {
+  // THE CLAUSE MOST EASILY SKIPPED. A clock that throws every time leaves no
+  // marks, which on disk is identical to a clock that was never installed.
+  const reason = (e && e.message) || String(e);
+  try {
+    markRunFailure(reason);
+  } catch {
+    /* if even the mark cannot be written, stderr is all that is left */
+  }
+  console.error(`[stall-clock] FAILED: ${reason}`);
+  process.exit(1);
+}

package/src/server.ts

@@ -8,6 +8,7 @@ import { unlinkSync, writeFileSync } from "node:fs";
 import { z, type ZodRawShape } from "zod";
 import { coordAwaySchema, coordAwayTool, readAway, awayRefusal, secondCoordinatorRefusal } from "./tools/away.js";
 import { rotateSchema, rotateTool, rotateReconcileSchema, rotateReconcileTool } from "./tools/rotate.js";
+import { subscribeSchema, subscribeTool, unsubscribeSchema, unsubscribeTool, listSubscriptionsSchema, listSubscriptionsTool } from "./tools/events.js";
 import {
   ensureDirs,
   getTokenMap,
@@ -626,6 +627,27 @@ function buildServer(initialBound?: string, opts: { trackSession?: boolean } = {
     gate("agentId", rotateReconcileTool as (a: Record<string, unknown>) => Promise<unknown>),
   );
 
+  addTool(
+    "subscribe",
+    "Register for a record event: a task completing, a phase completing, or a queue item closing. Events are DERIVED from the record \u2014 emitted by `land` after the DONE entry is written, and refused if the ref is not in the record \u2014 so the stream can never claim something the authoritative markdown does not. Re-subscribing returns the existing registration rather than a duplicate.",
+    subscribeSchema,
+    gate("agentId", subscribeTool as (a: Record<string, unknown>) => Promise<unknown>),
+  );
+
+  addTool(
+    "unsubscribe",
+    "Remove one of YOUR subscriptions. Refuses another agent's: silently dropping someone else's notification is how a miss is manufactured.",
+    unsubscribeSchema,
+    gate("agentId", unsubscribeTool as (a: Record<string, unknown>) => Promise<unknown>),
+  );
+
+  addTool(
+    "list_subscriptions",
+    "List subscriptions with their health. A subscription NEVER EVALUATED is an ERROR, not a quiet zero \u2014 'no events yet' and 'never ran' are the same output and only one is healthy. Carries its population, because 'no subscriptions' and 'none listed for you' are different claims.",
+    listSubscriptionsSchema,
+    gate(null, listSubscriptionsTool as (a: Record<string, unknown>) => Promise<unknown>),
+  );
+
   addTool(
     "export_work",
     "Render a project's work documents back out of the store, reproducing the pinned glyph contract exactly (ref after the last ' \u2014 ', date after a trailing ' \u00b7 '). Reports by default; pass write:true to rewrite the files. Refuses to export from an empty store rather than blanking a document. Refuses write:true when that write would emit a new 5-col lanes-v0 table (parse-only; write grammar is workstreams.v1). Any declared Task 4 write scope is REPORTED alongside the write, never enforced.",

package/src/tools/attention.ts

@@ -0,0 +1,91 @@
+/*
+ * Emit on the state that has twice cost hours: a PR that is MERGEABLE and
+ * UNATTENDED.
+ *
+ * Two mergeable, CI-green PRs sat 17 hours; two more sat 40 minutes and 1h48
+ * on the day the coordinator said it was checking for exactly that. Nothing in
+ * the room said so — a worker went looking and found it. There is no mechanism
+ * that reports "these PRs are mergeable and nobody is acting".
+ *
+ * 6.2 APPLIES HERE TOO: the event is DERIVED from observable state, never a
+ * parallel claim. Everything below is computed from what GitHub actually
+ * reports, and anything it has not answered yet is `unknown`.
+ */
+import { normalizeChecks } from "./records.js";
+
+export type PrFactsForAttention = {
+  number: number;
+  state: string;
+  mergeable: string;
+  updatedAt: string;
+  checks: unknown[];
+  repo?: string;
+};
+
+export type Attention =
+  | { state: "unattended"; why: string }
+  | { state: "unknown"; why: string }
+  | { state: "attended"; why: string };
+
+/**
+ * UNKNOWN IS NOT UNATTENDED, and this is the clause the coordinator and I have
+ * both been bitten by today.
+ *
+ * `mergeable` is `UNKNOWN` for a while after every push — GitHub computes it
+ * asynchronously — and an empty check rollup is ambiguous between "not yet" and
+ * "never will be". Reading either as "nobody is acting" invents an alert out of
+ * a question GitHub has not answered, which is the fabrication class this fleet
+ * has spent three days removing.
+ */
+export function classifyPr(pr: PrFactsForAttention, nowMs: number, quietMs: number): Attention {
+  if (pr.state !== "OPEN") return { state: "attended", why: `#${pr.number} is ${pr.state}` };
+
+  if (!pr.mergeable || pr.mergeable === "UNKNOWN")
+    return {
+      state: "unknown",
+      why: `#${pr.number}: GitHub has not computed mergeability yet (frequently the case right after a push). UNKNOWN is not unattended — reporting it would invent an alert from an unanswered question.`,
+    };
+
+  if (pr.mergeable === "CONFLICTING")
+    return { state: "attended", why: `#${pr.number} is CONFLICTING — it needs its author, not a gate` };
+
+  const checks = normalizeChecks(pr.checks ?? []);
+  if (checks.length === 0)
+    return {
+      state: "unknown",
+      why: `#${pr.number} reports ZERO checks — ambiguous between "not started" and "never will". No checks is not passing checks, and it is not unattended either.`,
+    };
+
+  const pending = checks.filter((c) => c.verdict === "pending");
+  if (pending.length)
+    return { state: "unknown", why: `#${pr.number}: ${pending.length} check(s) still running — not yet a gate's turn` };
+
+  const failed = checks.filter((c) => c.verdict === "fail");
+  if (failed.length)
+    return { state: "attended", why: `#${pr.number} has failing checks (${failed.map((c) => c.name).join(", ")}) — the author's move, not the gate's` };
+
+  // Quiet is measured from the PR's own last update. A PR touched a minute ago
+  // is not unattended; its author may still be pushing.
+  const quietFor = nowMs - Date.parse(pr.updatedAt);
+  if (!Number.isFinite(quietFor))
+    return { state: "unknown", why: `#${pr.number}: unreadable updatedAt '${pr.updatedAt}' — cannot say how long it has waited` };
+  if (quietFor < quietMs)
+    return { state: "attended", why: `#${pr.number} was updated ${Math.round(quietFor / 60000)}m ago — still moving` };
+
+  return {
+    state: "unattended",
+    why: `#${pr.number} is MERGEABLE, all ${checks.length} check(s) pass, and nothing has touched it for ${Math.round(quietFor / 60000)}m`,
+  };
+}
+
+/** The three states are distinct on purpose; a caller must not collapse them. */
+export function partition(prs: PrFactsForAttention[], nowMs: number, quietMs: number) {
+  const out = { unattended: [] as { pr: PrFactsForAttention; why: string }[], unknown: [] as { pr: PrFactsForAttention; why: string }[], attended: 0 };
+  for (const pr of prs) {
+    const c = classifyPr(pr, nowMs, quietMs);
+    if (c.state === "unattended") out.unattended.push({ pr, why: c.why });
+    else if (c.state === "unknown") out.unknown.push({ pr, why: c.why });
+    else out.attended++;
+  }
+  return out;
+}