@integrity-labs/agt-cli 0.28.275 → 0.28.276

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-5CEKL35C.js";
+} from "../chunk-NY47D6QP.js";
 import {
   CHANNEL_REGISTRY,
   DEFAULT_FRAMEWORK,
@@ -4826,7 +4826,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.275" : "dev";
+var cliVersion = true ? "0.28.276" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5840,7 +5840,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.275" : "dev";
+var cliVersion2 = true ? "0.28.276" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-5CEKL35C.js → chunk-NY47D6QP.js}

@@ -5882,7 +5882,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.275" : "dev";
+var agtCliVersion = true ? "0.28.276" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8159,4 +8159,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-5CEKL35C.js.map
+//# sourceMappingURL=chunk-NY47D6QP.js.map

package/dist/lib/manager-worker.js

@@ -38,7 +38,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-5CEKL35C.js";
+} from "../chunk-NY47D6QP.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -211,6 +211,18 @@ function decidePostRestartVerification(pending, sessionStartedAt, sessionHealthy
 function shouldRemediateUnverifiedRestart(outcome, ctx) {
   return ctx.enabled && !ctx.breakerTripped && outcome.kind === "unverified" && outcome.final;
 }
+function computeFirstConnectUnsettled(integrations, now, windowMs) {
+  return integrations.some((i) => {
+    if (i.last_connectivity_status !== "transient_error") return false;
+    if (!i.created_at) return false;
+    const addedAt = Date.parse(i.created_at);
+    if (!Number.isFinite(addedAt)) return false;
+    return now - addedAt <= windowMs;
+  });
+}
+function shouldDeferBindRemediationForFirstConnect(outcome, ctx) {
+  return ctx.enabled && !ctx.breakerTripped && ctx.firstConnectUnsettled && ctx.deferralsSoFar < ctx.maxDeferrals && outcome.kind === "unverified" && outcome.final;
+}
 
 // src/lib/integration-hash.ts
 import { createHash as createHash2 } from "crypto";
@@ -6352,6 +6364,16 @@ function bindRemediationEnabled() {
   return v === "true" || v === "1";
 }
 var BIND_REMEDIATION_JITTER_MS = 3e4;
+var BIND_REMEDIATION_FIRST_CONNECT_WINDOW_MS = readEnvNumber(
+  "AGT_BIND_REMEDIATION_FIRST_CONNECT_WINDOW_MS",
+  9e5
+  // 15 min
+);
+var BIND_REMEDIATION_MAX_CONNECTIVITY_DEFERRALS = readEnvNumber(
+  "AGT_BIND_REMEDIATION_MAX_CONNECTIVITY_DEFERRALS",
+  3
+);
+var firstConnectUnsettledByAgent = /* @__PURE__ */ new Map();
 function verifyPendingRestarts(now) {
   if (pendingRestartVerifications.size === 0) return;
   for (const [codeName, pending] of pendingRestartVerifications) {
@@ -6373,6 +6395,24 @@ function verifyPendingRestarts(now) {
         break;
       case "unverified":
         if (outcome.final) {
+          const deferrals = pending.connectivityDeferrals ?? 0;
+          if (shouldDeferBindRemediationForFirstConnect(outcome, {
+            enabled: bindRemediationEnabled(),
+            breakerTripped: restartBreaker.isTripped(codeName),
+            firstConnectUnsettled: firstConnectUnsettledByAgent.get(codeName) ?? false,
+            deferralsSoFar: deferrals,
+            maxDeferrals: BIND_REMEDIATION_MAX_CONNECTIVITY_DEFERRALS
+          })) {
+            pendingRestartVerifications.set(codeName, {
+              firedAt: now,
+              attempts: pending.attempts,
+              connectivityDeferrals: deferrals + 1
+            });
+            log(
+              `[bind-remediation] '${codeName}' deferring forced re-respawn (${deferrals + 1}/${BIND_REMEDIATION_MAX_CONNECTIVITY_DEFERRALS}) \u2014 a freshly-added integration is still transient_error; waiting for first-connect to settle before re-binding its tools (ENG-7575)`
+            );
+            break;
+          }
           pendingRestartVerifications.delete(codeName);
           log(
             `[restart-verify] ERROR '${codeName}' did NOT respawn healthy after ${outcome.attempt} attempts following an MCP change \u2014 the live session may be stuck on its pre-restart tools. Check session health / manager.log; a manual session restart may be required (ENG-6174)`
@@ -6788,7 +6828,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.275" : "dev";
+var agtCliVersion = true ? "0.28.276" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -9321,6 +9361,10 @@ async function processAgent(agent, agentStates) {
   try {
     const integrationsData = await api.post("/host/agent-integrations", { agent_id: agent.agent_id });
     const integrations = (integrationsData.integrations ?? []).map(withResolvedRemoteMcp);
+    firstConnectUnsettledByAgent.set(
+      agent.code_name,
+      computeFirstConnectUnsettled(integrations, Date.now(), BIND_REMEDIATION_FIRST_CONNECT_WINDOW_MS)
+    );
     for (const integration of integrations) {
       if (integration.auth_type !== "oauth2") continue;
       const expiresAt = integration.credentials?.token_expires_at;