@integrity-labs/agt-cli 0.27.60 → 0.27.61

package/dist/{chunk-2YSXMB7P.js → chunk-I4RL6YLR.js}

@@ -7163,4 +7163,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-2YSXMB7P.js.map
+//# sourceMappingURL=chunk-I4RL6YLR.js.map

package/dist/lib/manager-worker.js

@@ -15,7 +15,7 @@ import {
   provisionOrientHook,
   provisionStopHook,
   requireHost
-} from "../chunk-2YSXMB7P.js";
+} from "../chunk-I4RL6YLR.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -34,6 +34,7 @@ import {
   isAgentPromptReady,
   isSessionHealthy,
   isStaleForToday,
+  paneLogPath,
   peekCurrentSession,
   prepareForRespawn,
   readPaneLogTail,
@@ -1177,6 +1178,109 @@ function formatCoalesceDeferLogLine(opts) {
   return `[self-update] coalescing \u2014 ${opts.installed} \u2192 ${opts.latest} (${opts.channelLabel}) available, deferring for ${remainingSec}s (last restart inside ${windowMin}min window). See ENG-5862. Override with AGT_SELF_UPDATE_COALESCE_MS=0 during incident response.`;
 }
 
+// src/lib/maintenance-window.ts
+var DEFAULT_WINDOW_START = "01:00";
+var DEFAULT_WINDOW_END = "02:00";
+function isMaintenanceWindowDisabled(env = process.env) {
+  return env["AGT_MAINTENANCE_WINDOW_DISABLE"] === "1";
+}
+var HHMM_RE = /^([01]\d|2[0-3]):([0-5]\d)$/;
+function normalizeHhmm(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return HHMM_RE.test(trimmed) ? trimmed : null;
+}
+function resolveWindow(input) {
+  const tzRaw = typeof input.timezone === "string" ? input.timezone.trim() : "";
+  return {
+    start: normalizeHhmm(input.start) ?? DEFAULT_WINDOW_START,
+    end: normalizeHhmm(input.end) ?? DEFAULT_WINDOW_END,
+    // Blank/whitespace → UTC. An explicit 'UTC' is also UTC. (Unlike
+    // getTeamTimezone we keep 'UTC' here because this is the *evaluation* tz,
+    // not an inherit-or-not decision.)
+    timezone: tzRaw.length > 0 ? tzRaw : "UTC"
+  };
+}
+function hhmmToMinutes(hhmm) {
+  const [h, m] = hhmm.split(":");
+  return Number(h) * 60 + Number(m);
+}
+function localHhmm(now, timezone) {
+  try {
+    const parts = new Intl.DateTimeFormat("en-GB", {
+      timeZone: timezone,
+      hour: "2-digit",
+      minute: "2-digit",
+      hour12: false
+    }).formatToParts(now);
+    const hh = parts.find((p) => p.type === "hour")?.value ?? "00";
+    const mm = parts.find((p) => p.type === "minute")?.value ?? "00";
+    const h = hh === "24" ? "00" : hh;
+    return `${h}:${mm}`;
+  } catch {
+    const h = String(now.getUTCHours()).padStart(2, "0");
+    const m = String(now.getUTCMinutes()).padStart(2, "0");
+    return `${h}:${m}`;
+  }
+}
+function isWithinMaintenanceWindow(input, now) {
+  const w = resolveWindow(input);
+  const start = hhmmToMinutes(w.start);
+  const end = hhmmToMinutes(w.end);
+  if (start === end) return false;
+  const cur = hhmmToMinutes(localHhmm(now, w.timezone));
+  if (start < end) return cur >= start && cur < end;
+  return cur >= start || cur < end;
+}
+function minutesUntilWindowOpen(input, now) {
+  if (isWithinMaintenanceWindow(input, now)) return 0;
+  const w = resolveWindow(input);
+  const start = hhmmToMinutes(w.start);
+  const cur = hhmmToMinutes(localHhmm(now, w.timezone));
+  return cur <= start ? start - cur : 1440 - cur + start;
+}
+function formatWindowDeferLogLine(input, now) {
+  const w = resolveWindow(input);
+  const mins = minutesUntilWindowOpen(input, now);
+  return `next maintenance window ${w.start} ${w.timezone} (~${mins} min)`;
+}
+
+// src/lib/update-window-gate.ts
+function decideMaintenanceWindowGate(opts) {
+  if (isMaintenanceWindowDisabled(opts.env)) return "proceed";
+  if (!opts.window) return "proceed";
+  return isWithinMaintenanceWindow(opts.window, opts.now) ? "proceed" : "defer";
+}
+function isUrgentUpgrade(opts) {
+  if (!opts.urgentTarget) return false;
+  if (opts.installed === "dev") return false;
+  return opts.isNewer(opts.installed, opts.urgentTarget);
+}
+var RESTART_IDLE_THRESHOLD_SECONDS = 120;
+var RESTART_INBOUND_QUIET_SECONDS = 300;
+var GATEABLE_RESTART_REASONS = /* @__PURE__ */ new Set([
+  "model-change",
+  "channel-set-change",
+  "sender-policy-change",
+  "hot-reload-mcp",
+  "mcp-presence-reaper"
+]);
+function isGateableRestartReason(reason) {
+  return reason != null && GATEABLE_RESTART_REASONS.has(reason);
+}
+function decideRestartGate(opts) {
+  if (isMaintenanceWindowDisabled(opts.env)) return "proceed";
+  if (opts.window && !isWithinMaintenanceWindow(opts.window, opts.now)) {
+    return "defer-window";
+  }
+  const paneThreshold = opts.idleThresholdSeconds ?? RESTART_IDLE_THRESHOLD_SECONDS;
+  const inboundThreshold = opts.inboundQuietSeconds ?? RESTART_INBOUND_QUIET_SECONDS;
+  const paneBusy = opts.paneLogAgeSeconds !== null && opts.paneLogAgeSeconds < paneThreshold;
+  const inboundBusy = opts.inboundAgeSeconds !== null && opts.inboundAgeSeconds < inboundThreshold;
+  if (paneBusy || inboundBusy) return "defer-idle";
+  return "proceed";
+}
+
 // src/lib/claude-pid-tracker.ts
 import { existsSync, readFileSync as readFileSync3 } from "fs";
 function readPidFile(path) {
@@ -3375,6 +3479,14 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
   }
   const timer = setTimeout(() => {
     pendingSessionRestarts.delete(codeName);
+    const gate = restartGateFor(codeName, breakerReason);
+    if (gate !== "bypass" && gate !== "proceed") {
+      log(
+        `[maintenance-window] Deferring '${reason}' restart for '${codeName}' (${gate}) \u2014 re-checking in ${RESTART_DEFER_RECHECK_MS / 1e3}s`
+      );
+      scheduleSessionRestart(codeName, RESTART_DEFER_RECHECK_MS, reason, breakerReason);
+      return;
+    }
     stopPersistentSession(codeName, log);
     runningMcpHashes.delete(codeName);
     recordRestartForBreaker(codeName, breakerReason);
@@ -3390,6 +3502,34 @@ function cancelPendingSessionRestart(codeName) {
   pendingSessionRestarts.delete(codeName);
   log(`[hot-reload] Cancelled pending restart timer for '${codeName}' (another teardown path is handling it)`);
 }
+var RESTART_DEFER_RECHECK_MS = 6e4;
+var lastInboundMs = /* @__PURE__ */ new Map();
+function noteInbound(codeName) {
+  lastInboundMs.set(codeName, Date.now());
+}
+function inboundAgeSecondsFor(codeName) {
+  const ts = lastInboundMs.get(codeName);
+  if (ts === void 0) return null;
+  return Math.max(0, Math.floor((Date.now() - ts) / 1e3));
+}
+function paneLogAgeSecondsFor(codeName) {
+  try {
+    const mtimeMs = statSync2(paneLogPath(codeName)).mtimeMs;
+    return Math.max(0, Math.floor((Date.now() - mtimeMs) / 1e3));
+  } catch (err) {
+    if (err?.code === "ENOENT") return null;
+    return 0;
+  }
+}
+function restartGateFor(codeName, breakerReason) {
+  if (!isGateableRestartReason(breakerReason)) return "bypass";
+  return decideRestartGate({
+    window: cachedMaintenanceWindow,
+    paneLogAgeSeconds: paneLogAgeSecondsFor(codeName),
+    inboundAgeSeconds: inboundAgeSecondsFor(codeName),
+    now: /* @__PURE__ */ new Date()
+  });
+}
 var runningMcpHashes = /* @__PURE__ */ new Map();
 var runningMcpServerKeys = /* @__PURE__ */ new Map();
 function projectMcpHash(_codeName, projectDir) {
@@ -3468,6 +3608,11 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
   }
 }
 function stopPersistentSessionAndForgetMcpBaseline(codeName, breakerReason) {
+  const gate = restartGateFor(codeName, breakerReason);
+  if (gate !== "bypass" && gate !== "proceed") {
+    log(`[maintenance-window] Deferring '${breakerReason}' restart for '${codeName}' (${gate})`);
+    return;
+  }
   cancelPendingSessionRestart(codeName);
   stopPersistentSession(codeName, log);
   runningMcpHashes.delete(codeName);
@@ -3595,10 +3740,11 @@ function clearAgentCaches(agentId, codeName) {
   if (channelCacheMutated) saveChannelHashCache2();
 }
 var cachedFrameworkVersion = null;
+var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.27.60" : "dev";
+var agtCliVersion = true ? "0.27.61" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -3867,6 +4013,9 @@ function claudeCodeUpgradeThrottled() {
 async function maybeUpgradeClaudeCode() {
   if (claudeCodeUpgradeInFlight) return;
   if (claudeCodeUpgradeThrottled()) return;
+  if (decideMaintenanceWindowGate({ window: cachedMaintenanceWindow, now: /* @__PURE__ */ new Date() }) === "defer") {
+    return;
+  }
   claudeCodeUpgradeInFlight = true;
   stampClaudeCodeUpgradeMarker();
   const { execFileSync: execFileSync4 } = await import("child_process");
@@ -3972,6 +4121,12 @@ async function checkAndUpdateCliViaBrew() {
     if (agtOutdated) {
       const installed = agtOutdated.installed_versions?.[0] ?? "unknown";
       const latest = agtOutdated.current_version ?? "unknown";
+      if (decideMaintenanceWindowGate({ window: cachedMaintenanceWindow, now: /* @__PURE__ */ new Date() }) === "defer") {
+        log(
+          `[self-update] agt CLI ${installed} \u2192 ${latest} (brew) deferred \u2014 ` + formatWindowDeferLogLine(cachedMaintenanceWindow ?? {}, /* @__PURE__ */ new Date())
+        );
+        return;
+      }
       const coalesceWindowMs = resolveCoalesceWindowMs();
       const coalesce = decideSelfUpdateCoalesce({
         windowMs: coalesceWindowMs,
@@ -4010,7 +4165,6 @@ async function checkAndUpdateCliViaBrew() {
   }
 }
 async function checkAndUpdateCliViaNpm() {
-  const { execFileSync: execFileSync4 } = await import("child_process");
   if (agtCliVersion === "dev") return;
   const channel = process.env.AGT_CLI_RELEASE_CHANNEL || "latest";
   let latest;
@@ -4036,6 +4190,18 @@ async function checkAndUpdateCliViaNpm() {
     log(`[self-update] npm registry fetch failed: ${err.message}`);
     return;
   }
+  const urgentTarget = await fetchUrgentDistTagVersion();
+  if (isUrgentUpgrade({
+    urgentTarget,
+    installed: agtCliVersion,
+    isNewer: (installed, candidate) => candidate !== installed && !isOlderSemverTuple(installed, candidate)
+  })) {
+    log(
+      `[self-update] URGENT agt CLI hotfix ${agtCliVersion} \u2192 ${urgentTarget} (overrides channel=${channel} + maintenance window). Upgrading via npm...`
+    );
+    await installAgtCliViaNpm(urgentTarget, "urgent");
+    return;
+  }
   let shouldUpdate;
   if (channel === "latest") {
     shouldUpdate = isNewerSemver(agtCliVersion, latest);
@@ -4056,6 +4222,12 @@ async function checkAndUpdateCliViaNpm() {
     }
     return;
   }
+  if (decideMaintenanceWindowGate({ window: cachedMaintenanceWindow, now: /* @__PURE__ */ new Date() }) === "defer") {
+    log(
+      `[self-update] agt CLI ${agtCliVersion} \u2192 ${latest} (channel=${channel}) deferred \u2014 ` + formatWindowDeferLogLine(cachedMaintenanceWindow ?? {}, /* @__PURE__ */ new Date())
+    );
+    return;
+  }
   const coalesceWindowMs = resolveCoalesceWindowMs();
   const coalesce = decideSelfUpdateCoalesce({
     windowMs: coalesceWindowMs,
@@ -4073,27 +4245,40 @@ async function checkAndUpdateCliViaNpm() {
     return;
   }
   log(`[self-update] agt CLI update available: ${agtCliVersion} \u2192 ${latest} (channel=${channel}). Upgrading via npm...`);
+  await installAgtCliViaNpm(latest, `channel=${channel}`);
+}
+async function fetchUrgentDistTagVersion() {
+  try {
+    const res = await fetch("https://registry.npmjs.org/@integrity-labs/agt-cli/urgent", {
+      signal: AbortSignal.timeout(1e4),
+      headers: { Accept: "application/json" }
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return body.version ?? null;
+  } catch {
+    return null;
+  }
+}
+async function installAgtCliViaNpm(version, reasonLabel) {
+  const { execFileSync: execFileSync4 } = await import("child_process");
   const isRoot = typeof process.getuid === "function" && process.getuid() === 0;
   const cmd = isRoot ? "npm" : "sudo";
-  const args = isRoot ? [
-    "install",
-    "-g",
-    `@integrity-labs/agt-cli@${latest}`,
-    "--registry=https://registry.npmjs.org"
-  ] : [
-    "-n",
-    "npm",
+  const installArgs = [
     "install",
     "-g",
-    `@integrity-labs/agt-cli@${latest}`,
+    `@integrity-labs/agt-cli@${version}`,
     "--registry=https://registry.npmjs.org"
   ];
+  const args = isRoot ? installArgs : ["-n", "npm", ...installArgs];
   try {
     execFileSync4(cmd, args, { timeout: 18e4, stdio: "pipe" });
-    log(`[self-update] agt CLI upgraded to ${latest}. Scheduling manager restart so the new binary takes effect.`);
+    log(
+      `[self-update] agt CLI upgraded to ${version} (${reasonLabel}). Scheduling manager restart so the new binary takes effect.`
+    );
     stampLastSelfUpdateApplied(selfUpdateAppliedMarkerPath());
     restartAfterUpgrade = true;
-    pendingUpgradeVersion = latest;
+    pendingUpgradeVersion = version;
   } catch (err) {
     log(`[self-update] npm upgrade failed: ${err.message}`);
   }
@@ -4612,7 +4797,7 @@ async function pollCycle() {
       log,
       resolveFramework: (codeName) => agentFrameworkCache.get(codeName) ?? null,
       stopSession: (codeName) => {
-        stopPersistentSessionAndForgetMcpBaseline(codeName, "channel-set-change");
+        stopPersistentSessionAndForgetMcpBaseline(codeName, "channel-restart-flag");
         agentState.persistentSessionAgents.delete(codeName);
         claudeAuthTupleBySession.delete(codeName);
       },
@@ -4724,13 +4909,18 @@ async function pollCycle() {
         // behind a fresh heartbeat.
         realtime_socket_connected: isRealtimeSocketConnected()
       });
+      if (hbResp?.maintenance_window) {
+        cachedMaintenanceWindow = hbResp.maintenance_window;
+      }
       try {
-        const { maybeUpdateClaudeCode } = await import("../claude-code-updater-4E5T2X3Z.js");
-        await maybeUpdateClaudeCode({
-          desiredVersion: hbResp?.desired_claude_code_version ?? "latest",
-          currentVersion: cachedFrameworkVersion,
-          log
-        });
+        if (decideMaintenanceWindowGate({ window: cachedMaintenanceWindow, now: /* @__PURE__ */ new Date() }) === "proceed") {
+          const { maybeUpdateClaudeCode } = await import("../claude-code-updater-4E5T2X3Z.js");
+          await maybeUpdateClaudeCode({
+            desiredVersion: hbResp?.desired_claude_code_version ?? "latest",
+            currentVersion: cachedFrameworkVersion,
+            log
+          });
+        }
       } catch (err) {
         log(`Claude Code updater error: ${err.message}`);
       }
@@ -7779,6 +7969,7 @@ async function pollDirectChatMessages(agentStates) {
   }
 }
 async function processDirectChatMessage(agent, msg) {
+  noteInbound(agent.codeName);
   const fw = agentFrameworkCache.get(agent.codeName) ?? "openclaw";
   log(`[direct-chat] Processing message for '${agent.codeName}' (fw=${fw}): id=${msg.id} len=${msg.content.length}`);
   if (isDirectChatMessageExpired(msg.created_at, Date.now(), directChatMaxAgeMs())) {