@integrity-labs/agt-cli 0.28.274 → 0.28.276

package/dist/lib/manager-worker.js

@@ -38,7 +38,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-73NA6BKT.js";
+} from "../chunk-NY47D6QP.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -211,6 +211,18 @@ function decidePostRestartVerification(pending, sessionStartedAt, sessionHealthy
 function shouldRemediateUnverifiedRestart(outcome, ctx) {
   return ctx.enabled && !ctx.breakerTripped && outcome.kind === "unverified" && outcome.final;
 }
+function computeFirstConnectUnsettled(integrations, now, windowMs) {
+  return integrations.some((i) => {
+    if (i.last_connectivity_status !== "transient_error") return false;
+    if (!i.created_at) return false;
+    const addedAt = Date.parse(i.created_at);
+    if (!Number.isFinite(addedAt)) return false;
+    return now - addedAt <= windowMs;
+  });
+}
+function shouldDeferBindRemediationForFirstConnect(outcome, ctx) {
+  return ctx.enabled && !ctx.breakerTripped && ctx.firstConnectUnsettled && ctx.deferralsSoFar < ctx.maxDeferrals && outcome.kind === "unverified" && outcome.final;
+}
 
 // src/lib/integration-hash.ts
 import { createHash as createHash2 } from "crypto";
@@ -6352,6 +6364,16 @@ function bindRemediationEnabled() {
   return v === "true" || v === "1";
 }
 var BIND_REMEDIATION_JITTER_MS = 3e4;
+var BIND_REMEDIATION_FIRST_CONNECT_WINDOW_MS = readEnvNumber(
+  "AGT_BIND_REMEDIATION_FIRST_CONNECT_WINDOW_MS",
+  9e5
+  // 15 min
+);
+var BIND_REMEDIATION_MAX_CONNECTIVITY_DEFERRALS = readEnvNumber(
+  "AGT_BIND_REMEDIATION_MAX_CONNECTIVITY_DEFERRALS",
+  3
+);
+var firstConnectUnsettledByAgent = /* @__PURE__ */ new Map();
 function verifyPendingRestarts(now) {
   if (pendingRestartVerifications.size === 0) return;
   for (const [codeName, pending] of pendingRestartVerifications) {
@@ -6373,6 +6395,24 @@ function verifyPendingRestarts(now) {
         break;
       case "unverified":
         if (outcome.final) {
+          const deferrals = pending.connectivityDeferrals ?? 0;
+          if (shouldDeferBindRemediationForFirstConnect(outcome, {
+            enabled: bindRemediationEnabled(),
+            breakerTripped: restartBreaker.isTripped(codeName),
+            firstConnectUnsettled: firstConnectUnsettledByAgent.get(codeName) ?? false,
+            deferralsSoFar: deferrals,
+            maxDeferrals: BIND_REMEDIATION_MAX_CONNECTIVITY_DEFERRALS
+          })) {
+            pendingRestartVerifications.set(codeName, {
+              firedAt: now,
+              attempts: pending.attempts,
+              connectivityDeferrals: deferrals + 1
+            });
+            log(
+              `[bind-remediation] '${codeName}' deferring forced re-respawn (${deferrals + 1}/${BIND_REMEDIATION_MAX_CONNECTIVITY_DEFERRALS}) \u2014 a freshly-added integration is still transient_error; waiting for first-connect to settle before re-binding its tools (ENG-7575)`
+            );
+            break;
+          }
           pendingRestartVerifications.delete(codeName);
           log(
             `[restart-verify] ERROR '${codeName}' did NOT respawn healthy after ${outcome.attempt} attempts following an MCP change \u2014 the live session may be stuck on its pre-restart tools. Check session health / manager.log; a manual session restart may be required (ENG-6174)`
@@ -6788,7 +6828,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.274" : "dev";
+var agtCliVersion = true ? "0.28.276" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -9321,6 +9361,10 @@ async function processAgent(agent, agentStates) {
   try {
     const integrationsData = await api.post("/host/agent-integrations", { agent_id: agent.agent_id });
     const integrations = (integrationsData.integrations ?? []).map(withResolvedRemoteMcp);
+    firstConnectUnsettledByAgent.set(
+      agent.code_name,
+      computeFirstConnectUnsettled(integrations, Date.now(), BIND_REMEDIATION_FIRST_CONNECT_WINDOW_MS)
+    );
     for (const integration of integrations) {
       if (integration.auth_type !== "oauth2") continue;
       const expiresAt = integration.credentials?.token_expires_at;
@@ -12067,7 +12111,18 @@ function deployMcpAssets() {
     // with the session and a bundle update applies on the next natural
     // session restart. It fetches its credential + identity per call, so it
     // never needs restarting to pick up a key rotation either.
-    "origami.js"
+    "origami.js",
+    // ENG-7579: the Xero vendor MCP (our @integrity-labs/xero-mcp-server fork),
+    // now bundled with the CLI instead of resolved at runtime via
+    // `npx @integrity-labs/xero-mcp-server@latest`. The npx form required a
+    // manual npm publish on every change and silently stranded the fleet on the
+    // last-published version (CS-1440's attachment tool shipped in 0.0.21 but
+    // npm @latest stayed at 0.0.20). Same treatment as origami - NOT a channel,
+    // so not in RESTARTABLE_CHANNEL_FILES; the reaper (re)starts it with the
+    // session and a bundle update applies on the next natural session restart.
+    // In broker mode it fetches the freshest access_token per call, so it never
+    // needs restarting to pick up a token rotation.
+    "xero.js"
   ]) {
     const src = join17(mcpSourceDir, file);
     const dst = join17(targetDir, file);