@integrity-labs/agt-cli 0.28.1169 → 0.28.1171

package/dist/{chunk-SJ7ZLQXN.js → chunk-DJNCIWVG.js}

@@ -1,6 +1,6 @@
 import {
   encodeClaudeProjectPath
-} from "./chunk-IRTKOKUI.js";
+} from "./chunk-47P33SZF.js";
 
 // src/lib/daily-session.ts
 import { randomUUID } from "crypto";
@@ -235,4 +235,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-SJ7ZLQXN.js.map
+//# sourceMappingURL=chunk-DJNCIWVG.js.map

package/dist/{chunk-LNWG6TUG.js → chunk-EK6JVOBH.js}

@@ -4,7 +4,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-SJ7ZLQXN.js";
+} from "./chunk-DJNCIWVG.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -47,7 +47,7 @@ import {
   remoteMcpConnectionEnvInfix,
   remoteMcpConnectionLabel,
   remoteMcpConnectionScopedEnvVar
-} from "./chunk-IRTKOKUI.js";
+} from "./chunk-47P33SZF.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   archiveLegacyClaudeJson,
@@ -6130,4 +6130,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-LNWG6TUG.js.map
+//# sourceMappingURL=chunk-EK6JVOBH.js.map

package/dist/{chunk-KDOITWQH.js → chunk-JB23A42P.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-XWVM4KPK.js";
 import {
   FORCED_UPDATE_HARD_DEADLINE_MS
-} from "./chunk-IRTKOKUI.js";
+} from "./chunk-47P33SZF.js";
 import {
   effectiveClaudeJsonPath
 } from "./chunk-EL5MWGGH.js";
@@ -722,4 +722,4 @@ export {
   probeClaudeInstalls,
   maybeUpdateClaudeCode
 };
-//# sourceMappingURL=chunk-KDOITWQH.js.map
+//# sourceMappingURL=chunk-JB23A42P.js.map

package/dist/{chunk-UE66JYZN.js → chunk-TJ4MVWNH.js}

@@ -16,11 +16,11 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-LNWG6TUG.js";
+} from "./chunk-EK6JVOBH.js";
 import {
   readDailySessionPin,
   sessionTranscriptDir
-} from "./chunk-SJ7ZLQXN.js";
+} from "./chunk-DJNCIWVG.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -90,7 +90,7 @@ import {
   scanConfigForLiteralSecrets,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-IRTKOKUI.js";
+} from "./chunk-47P33SZF.js";
 import {
   claudeJsonPathFor,
   effectiveClaudeJsonPath,
@@ -8078,7 +8078,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1169" : "dev";
+var agtCliVersion = true ? "0.28.1171" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -13235,4 +13235,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-UE66JYZN.js.map
+//# sourceMappingURL=chunk-TJ4MVWNH.js.map

package/dist/{claude-code-updater-7N6Z6VM3.js → claude-code-updater-PQYMHNQT.js}

@@ -13,9 +13,9 @@ import {
   probeClaudeInstalls,
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
-} from "./chunk-KDOITWQH.js";
+} from "./chunk-JB23A42P.js";
 import "./chunk-XWVM4KPK.js";
-import "./chunk-IRTKOKUI.js";
+import "./chunk-47P33SZF.js";
 import "./chunk-EL5MWGGH.js";
 import "./chunk-DGUM43GV.js";
 export {
@@ -34,4 +34,4 @@ export {
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
 };
-//# sourceMappingURL=claude-code-updater-7N6Z6VM3.js.map
+//# sourceMappingURL=claude-code-updater-PQYMHNQT.js.map

package/dist/{claude-pair-runtime-4PUDIE65.js → claude-pair-runtime-RKDNAYEU.js}

@@ -8,7 +8,7 @@ import {
 import {
   redactPaneFrame,
   sanitizeTerminalFrame
-} from "./chunk-IRTKOKUI.js";
+} from "./chunk-47P33SZF.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -321,7 +321,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-GB4SLWPX.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-2365YL7P.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -836,4 +836,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-4PUDIE65.js.map
+//# sourceMappingURL=claude-pair-runtime-RKDNAYEU.js.map

package/dist/lib/manager-worker.js

@@ -77,7 +77,7 @@ import {
   setConfigHash,
   shellGuard,
   tripClass
-} from "../chunk-UE66JYZN.js";
+} from "../chunk-TJ4MVWNH.js";
 import {
   CLAUDE_CODE_SECURITY_FLOOR,
   SELF_UPDATE_TIMEOUTS,
@@ -91,7 +91,7 @@ import {
   runSafeCleanup,
   tightestDiskStat,
   withPackageCacheLock
-} from "../chunk-KDOITWQH.js";
+} from "../chunk-JB23A42P.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -178,7 +178,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-LNWG6TUG.js";
+} from "../chunk-EK6JVOBH.js";
 import {
   isAgentIdle,
   isStaleForToday,
@@ -187,7 +187,7 @@ import {
   sessionTranscriptDir,
   subagentActivityAgeSeconds,
   transcriptActivityAgeSeconds
-} from "../chunk-SJ7ZLQXN.js";
+} from "../chunk-DJNCIWVG.js";
 import {
   classifyUnanswerablePane,
   focusedConfirmDialogBlock,
@@ -305,7 +305,7 @@ import {
   serializeAccountEnforcementMarker,
   stabiliseResetInstant,
   sumTranscriptUsageInWindow
-} from "../chunk-IRTKOKUI.js";
+} from "../chunk-47P33SZF.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -970,7 +970,9 @@ function claudeCodeUpgradeThrottled() {
 
 // src/lib/claude-pair-loop.ts
 var PAIR_LOOP_ACTIVE_INTERVAL_MS = 2e3;
-var PAIR_LOOP_IDLE_INTERVAL_MS = 1e4;
+var PAIR_LOOP_IDLE_INTERVAL_MS = 3e4;
+var PAIR_LOOP_FIRST_TICK_MS = 1e4;
+var PAIR_LOOP_FAILURE_BASE_MS = 1e4;
 var PAIR_LOOP_MAX_BACKOFF_MS = 12e4;
 var PAIR_LOOP_ARMED_MAX_MS = 15 * 6e4;
 function pairLoopArmed(opts) {
@@ -993,7 +995,8 @@ function pairLoopArmed(opts) {
 function nextPairLoopDelayMs(armed, consecutiveFailures) {
   if (consecutiveFailures > 0) {
     const exp = Math.min(consecutiveFailures - 1, 16);
-    return Math.min(PAIR_LOOP_IDLE_INTERVAL_MS * 2 ** exp, PAIR_LOOP_MAX_BACKOFF_MS);
+    const backoff = Math.min(PAIR_LOOP_FAILURE_BASE_MS * 2 ** exp, PAIR_LOOP_MAX_BACKOFF_MS);
+    return armed ? backoff : Math.max(backoff, PAIR_LOOP_IDLE_INTERVAL_MS);
   }
   return armed ? PAIR_LOOP_ACTIVE_INTERVAL_MS : PAIR_LOOP_IDLE_INTERVAL_MS;
 }
@@ -1013,11 +1016,11 @@ var ClaudePairLoop = class {
   inFlightTick = null;
   setTimer;
   clearTimer;
-  /** Arm the loop. The first tick runs after one idle interval. Idempotent. */
+  /** Arm the loop. The first tick runs after {@link PAIR_LOOP_FIRST_TICK_MS}. Idempotent. */
   start() {
     if (this.started) return;
     this.started = true;
-    this.schedule(PAIR_LOOP_IDLE_INTERVAL_MS);
+    this.schedule(PAIR_LOOP_FIRST_TICK_MS);
   }
   /**
    * Disarm the loop. No new tick starts, and a callback from this generation
@@ -7452,6 +7455,21 @@ function createTickBoardFetcher(fetchBoard) {
     return inflight;
   };
 }
+async function fetchBoardThroughGate(opts) {
+  const now = opts.now ?? Date.now;
+  const token = opts.gate.beginFetch(opts.key);
+  if (!opts.gate.shouldFetch(opts.key, now())) {
+    const held = opts.held();
+    if (held !== void 0) {
+      opts.onDecision?.("gated");
+      return held;
+    }
+  }
+  const rows = await opts.fetch();
+  opts.gate.markFetched(opts.key, token, now());
+  opts.onDecision?.("fetched");
+  return rows;
+}
 
 // src/lib/kanban-board-token.ts
 var BoardTokenCache = class {
@@ -7510,6 +7528,20 @@ var BoardTokenCache = class {
     }
     return rows;
   }
+  /**
+   * ENG-11720: the raw rows of the last board a successful request returned, or
+   * undefined when none is held. Served by the `/host/my-kanban` fetch gate
+   * while it is closed. Returns the held array itself: the one caller re-maps
+   * it through `sanitizeBoardItem` on every serve, which is what keeps the
+   * consumers from aliasing it (see the header).
+   *
+   * Counts nothing. The stats above describe what the conditional REQUEST did,
+   * and a gated pass made no request — counting it as `unchanged` would report
+   * a server-confirmed hit that never happened.
+   */
+  held(agentId) {
+    return this.entries.get(agentId)?.rows;
+  }
   /**
    * Drop an agent's board. Teardown must call this: a board left behind is
    * served to the agent if it is later RE-ADDED, which is exactly when its work
@@ -7583,6 +7615,13 @@ function createFetchGate(ttlMs) {
     }
   };
 }
+async function runIfDue(gate, key, fn, now = Date.now) {
+  const token = gate.beginFetch(key);
+  if (!gate.shouldFetch(key, now())) return { ran: false };
+  const value = await fn();
+  gate.markFetched(key, token, now());
+  return { ran: true, value };
+}
 function forceGates(gates, agentId) {
   for (const gate of gates) {
     if (agentId === void 0) gate.forceAll();
@@ -13898,7 +13937,15 @@ function recordLatency(ms) {
   }
 }
 function startRealtimeKanban(config2) {
-  const { agentIds, onTodayItem, onCompletion, log: log2 } = config2;
+  const { agentIds, onTodayItem, onCompletion, onBoardChanged, log: log2 } = config2;
+  const boardChanged = (agentId) => {
+    if (!onBoardChanged || !agentId) return;
+    try {
+      onBoardChanged(agentId);
+    } catch (err) {
+      log2(`[realtime] Kanban board-change handler error: ${err.message}`);
+    }
+  };
   if (agentIds.length === 0) return;
   const sb = ensureClient(config2);
   const filterStr = agentIds.length === 1 ? `agent_id=eq.${agentIds[0]}` : `agent_id=in.(${agentIds.join(",")})`;
@@ -13909,6 +13956,7 @@ function startRealtimeKanban(config2) {
     filter: filterStr
   }, (payload) => {
     const item = payload.new;
+    boardChanged(item?.agent_id);
     if (item.status === "todo") {
       log2(`[realtime] New kanban item in 'todo': item_id=${item.id} agent=${item.agent_id}`);
       onTodayItem(item);
@@ -13921,6 +13969,7 @@ function startRealtimeKanban(config2) {
   }, (payload) => {
     const item = payload.new;
     const old = payload.old;
+    boardChanged(item?.agent_id);
     if (item.status === "todo" && old.status !== "todo") {
       log2(`[realtime] Kanban item moved to 'todo': item_id=${item.id} agent=${item.agent_id}`);
       onTodayItem(item);
@@ -15082,7 +15131,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-GIID6ZH2.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-7HARR32R.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -15830,6 +15879,7 @@ function clearAgentCaches(agentId, codeName) {
   pendingRecoveryCost.delete(codeName);
   lastRefreshPayload.delete(agentId);
   boardTokenCache.forget(agentId);
+  boardFetchGate.forget(agentId);
   refreshFetchGate.forget(agentId);
   memoriesFetchGate.forget(agentId);
   secretsFetchGate.forget(agentId);
@@ -15878,7 +15928,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1169" : "dev";
+var agtCliVersion = true ? "0.28.1171" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -17627,6 +17677,11 @@ var integrationsFetchGate = createFetchGate(DESIRED_STATE_FETCH_TTL_MS);
 var lastIntegrationsPayload = /* @__PURE__ */ new Map();
 var quarantinedFetchGate = createFetchGate(DESIRED_STATE_FETCH_TTL_MS);
 var lastQuarantinedPayload = /* @__PURE__ */ new Map();
+var MY_KANBAN_FETCH_TTL_MS = 3e4;
+var boardFetchGate = createFetchGate(MY_KANBAN_FETCH_TTL_MS);
+var RECURRING_SPAWN_INTERVAL_MS = 6e4;
+var RECURRING_SPAWN_GATE_KEY = "host";
+var recurringSpawnGate = createFetchGate(RECURRING_SPAWN_INTERVAL_MS);
 function forceIntegrationsFetch(agentId) {
   integrationsFetchGate.forceNext(agentId);
   quarantinedFetchGate.forceNext(agentId);
@@ -17639,13 +17694,20 @@ var pollCycleQuarantinedFetches = 0;
 var pollCycleQuarantinedSkips = 0;
 var pollCycleMemoriesUnchanged = 0;
 var pollCycleMemoriesFull = 0;
+var pollCycleBoardFetched = 0;
+var pollCycleBoardGated = 0;
 var DESIRED_STATE_FETCH_GATES = [
   refreshFetchGate,
   memoriesFetchGate,
   secretsFetchGate,
   defaultSchedulesFetchGate,
   integrationsFetchGate,
-  quarantinedFetchGate
+  quarantinedFetchGate,
+  // ENG-11720. None of the lanes reaching here changes the board (the board
+  // has its own push, `onBoardChanged`), so this entry is the maintenance rule
+  // above applied, not a freshness requirement. Cost: one board round trip for
+  // the pushed agent, which is the pre-gate every-pass behaviour at worst.
+  boardFetchGate
 ];
 function forceRefreshFetch(agentId) {
   forceGates(DESIRED_STATE_FETCH_GATES, agentId);
@@ -17678,7 +17740,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-GB4SLWPX.js");
+      const { collectDiagnostics } = await import("../persistent-session-2365YL7P.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -17821,7 +17883,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-GB4SLWPX.js");
+      const { collectDiagnostics } = await import("../persistent-session-2365YL7P.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -18025,7 +18087,7 @@ async function pollCycleInner() {
       setConfigHash(hbResp?.config_hash ?? null);
       try {
         const desiredClaudeCodeVersion = hbResp?.desired_claude_code_version?.trim();
-        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-7N6Z6VM3.js");
+        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-PQYMHNQT.js");
         const securityFloor = currentSecurityFloor();
         claudeUpdaterInFlight = true;
         if (desiredClaudeCodeVersion && (claudePairLoop.busy || claudePairingInProgress())) {
@@ -18060,7 +18122,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-GIID6ZH2.js");
+      } = await import("../responsiveness-probe-7HARR32R.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -18177,7 +18239,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-GIID6ZH2.js");
+        } = await import("../responsiveness-probe-7HARR32R.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -18463,7 +18525,7 @@ async function pollCycleInner() {
                 }
               }
             );
-            const { parkPendingInbound } = await import("../responsiveness-probe-GIID6ZH2.js");
+            const { parkPendingInbound } = await import("../responsiveness-probe-7HARR32R.js");
             const { parked, deadLettered } = parkPendingInbound(codeName, new Date(fatalNowMs));
             paneFatalStreak.delete(codeName);
             paneFatalRestarts.set(codeName, [...history, fatalNowMs]);
@@ -18494,7 +18556,7 @@ async function pollCycleInner() {
         TRANSCRIPT_MOUNT_ESCALATION_REFRESH_MS,
         bindSourceEscalations
       } = await import("../transcript-mount-health-OHE6IVJV.js");
-      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-GB4SLWPX.js");
+      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-2365YL7P.js");
       const mountConfig = resolveTranscriptMountConfig();
       const liveAgents = agentState.persistentSessionAgents;
       for (const tracked of [
@@ -18659,7 +18721,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-ZTHC2VD4.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-2JJLKURE.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -19062,6 +19124,8 @@ async function pollCycleInner() {
     pollCycleQuarantinedSkips = 0;
     pollCycleMemoriesUnchanged = 0;
     pollCycleMemoriesFull = 0;
+    pollCycleBoardFetched = 0;
+    pollCycleBoardGated = 0;
     boardTokenCache.resetStats();
     for (const agent of processOrder) {
       if (restartInFlight.has(agent.agent_id)) {
@@ -19103,7 +19167,7 @@ async function pollCycleInner() {
     }
     const boardStats = boardTokenCache.stats();
     log(
-      `[poll-cycle] agents=${processOrder.length} refresh_fetched=${pollCycleFetches} refresh_skipped=${pollCycleFetchSkips} memories_unchanged=${pollCycleMemoriesUnchanged} memories_full=${pollCycleMemoriesFull} board_unchanged=${boardStats.unchanged} board_full=${boardStats.full} board_refetch=${boardStats.refetch} integrations_fetched=${pollCycleIntegrationsFetches} integrations_skipped=${pollCycleIntegrationsSkips} quarantined_fetched=${pollCycleQuarantinedFetches} quarantined_skipped=${pollCycleQuarantinedSkips} duration_ms=${Date.now() - cycleStartedAt}`
+      `[poll-cycle] agents=${processOrder.length} refresh_fetched=${pollCycleFetches} refresh_skipped=${pollCycleFetchSkips} memories_unchanged=${pollCycleMemoriesUnchanged} memories_full=${pollCycleMemoriesFull} board_unchanged=${boardStats.unchanged} board_full=${boardStats.full} board_refetch=${boardStats.refetch} board_fetched=${pollCycleBoardFetched} board_gated=${pollCycleBoardGated} integrations_fetched=${pollCycleIntegrationsFetches} integrations_skipped=${pollCycleIntegrationsSkips} quarantined_fetched=${pollCycleQuarantinedFetches} quarantined_skipped=${pollCycleQuarantinedSkips} duration_ms=${Date.now() - cycleStartedAt}`
     );
     void maybeReportActivityCache({ api, log });
     const crossAgentPrune = managedPruneLedger.summarize();
@@ -19340,9 +19404,13 @@ async function pollCycleInner() {
     ensureRealtimeKanbanStarted(agentStates);
     ensureRealtimeIntegrationContextStarted(agentStates);
     try {
-      const spawnData = await api.post("/host/kanban/recurring/spawn");
-      if (spawnData.spawned > 0) {
-        log(`Spawned ${spawnData.spawned} recurring kanban item(s)`);
+      const spawn = await runIfDue(
+        recurringSpawnGate,
+        RECURRING_SPAWN_GATE_KEY,
+        () => api.post("/host/kanban/recurring/spawn")
+      );
+      if (spawn.ran && spawn.value.spawned > 0) {
+        log(`Spawned ${spawn.value.spawned} recurring kanban item(s)`);
       }
     } catch {
     }
@@ -21491,23 +21559,35 @@ async function processAgent(agent, agentStates, managedToolkits) {
     }
   }
   const fetchTickBoard = createTickBoardFetcher(async () => {
-    const knownToken = boardTokenCache.tokenFor(agent.agent_id);
-    const post = (token) => api.post("/host/my-kanban", {
-      agent_id: agent.agent_id,
-      // ENG-9585: this is the ONLY caller that polls (every ~10s, per agent),
-      // and it reads exactly `BoardItem`. `description` and `notes` are 57.8%
-      // of the payload and are read here by nothing — but the `kanban_list` MCP
-      // tool and `agt kanban` DO read them, so the route cannot simply drop
-      // them. Asking for the lean shape is this caller saying what it needs;
-      // every other caller keeps the full payload by default.
-      detail: "board",
-      ...token ? { known_token: token } : {}
+    const rawRows = await fetchBoardThroughGate({
+      key: agent.agent_id,
+      gate: boardFetchGate,
+      held: () => boardTokenCache.held(agent.agent_id),
+      onDecision: (decision) => {
+        if (decision === "gated") pollCycleBoardGated += 1;
+        else pollCycleBoardFetched += 1;
+      },
+      fetch: async () => {
+        const knownToken = boardTokenCache.tokenFor(agent.agent_id);
+        const post = (token) => api.post("/host/my-kanban", {
+          agent_id: agent.agent_id,
+          // ENG-9585: this is the ONLY caller that polls (every ~10s, per agent),
+          // and it reads exactly `BoardItem`. `description` and `notes` are 57.8%
+          // of the payload and are read here by nothing — but the `kanban_list` MCP
+          // tool and `agt kanban` DO read them, so the route cannot simply drop
+          // them. Asking for the lean shape is this caller saying what it needs;
+          // every other caller keeps the full payload by default.
+          detail: "board",
+          ...token ? { known_token: token } : {}
+        });
+        let rows = boardTokenCache.resolve(agent.agent_id, await post(knownToken));
+        if (rows === null) {
+          rows = boardTokenCache.resolve(agent.agent_id, await post(void 0)) ?? [];
+        }
+        return rows;
+      }
     });
-    let rows = boardTokenCache.resolve(agent.agent_id, await post(knownToken));
-    if (rows === null) {
-      rows = boardTokenCache.resolve(agent.agent_id, await post(void 0)) ?? [];
-    }
-    return rows.map(sanitizeBoardItem);
+    return rawRows.map(sanitizeBoardItem);
   });
   let boardItems = [];
   let boardItemsStale = false;
@@ -22110,6 +22190,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
                 reason: `Timed out \u2014 in progress for ${age} minutes with no update`
               });
               reapAction = reapResult.action ?? null;
+              boardFetchGate.forceNext(agentId);
               log(
                 `Reap result for item_id=${item.id}: updated=${reapResult.updated} action=${reapResult.action ?? reapResult.reason ?? "none"}`
               );
@@ -23329,7 +23410,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-GIID6ZH2.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-7HARR32R.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -23372,7 +23453,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-GB4SLWPX.js");
+        const { collectDiagnostics } = await import("../persistent-session-2365YL7P.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -23423,7 +23504,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-GB4SLWPX.js");
+      const { collectDiagnostics } = await import("../persistent-session-2365YL7P.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -23495,6 +23576,14 @@ function ensureRealtimeKanbanStarted(agentStates) {
       supabaseAnonKey: exchange.supabaseAnonKey,
       token: exchange.token,
       agentIds: activeAgentIds,
+      // ENG-11720: what makes the `/host/my-kanban` gate safe. Any change to one
+      // of this agent's cards reopens it, so the next pass fetches — no early
+      // poll, because a card change is not urgent enough to pull a whole cycle
+      // forward, and forces are counters, so a burst of UPDATEs (embedding
+      // writes, notes) still costs at most one fetch per pass.
+      onBoardChanged: (agentId) => {
+        boardFetchGate.forceNext(agentId);
+      },
       onTodayItem: (item) => {
         if (item.source_type === "scheduled_task") return;
         const agent = agentStates.find((a) => a.agentId === item.agent_id);
@@ -24117,7 +24206,7 @@ async function processClaudePairSessions(agents) {
     snapshotPairConfig,
     // ENG-11659: result -> report body + the manager.log line that records it.
     planPairStartReport
-  } = await import("../claude-pair-runtime-4PUDIE65.js");
+  } = await import("../claude-pair-runtime-RKDNAYEU.js");
   const { resetClaudeSignin, describeSigninResetForLog, describeSigninResetFailure } = await import("../claude-signin-reset-EF3UO5IK.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);