@integrity-labs/agt-cli 0.28.280 → 0.28.282

package/dist/{claude-pair-runtime-EXW6NBLU.js → claude-pair-runtime-JOYTDNXZ.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-SZ4TUGED.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-7H3IYXXP.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-EXW6NBLU.js.map
+//# sourceMappingURL=claude-pair-runtime-JOYTDNXZ.js.map

package/dist/lib/manager-worker.js

@@ -38,7 +38,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-JGM444JK.js";
+} from "../chunk-6SRVCYKR.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -125,7 +125,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-7USLYY43.js";
+} from "../chunk-C4QMCOAN.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -186,6 +186,29 @@ function managedMcpStructureHash(entries) {
   const basis = entries.slice().sort((a, b) => a.serverId.localeCompare(b.serverId)).map((e) => `${e.serverId}|${Object.keys(e.headers ?? {}).sort().join(",")}`).join("\n");
   return createHash("sha256").update(basis).digest("hex").slice(0, 16);
 }
+function managedMcpStructureHashFromFile(mcpConfig, isManagedKey) {
+  if (!mcpConfig || typeof mcpConfig !== "object") return null;
+  const servers = mcpConfig.mcpServers;
+  if (!servers || typeof servers !== "object") return managedMcpStructureHash([]);
+  const entries = [];
+  for (const [key, value] of Object.entries(servers)) {
+    if (!isManagedKey(key)) continue;
+    const headers = value && typeof value === "object" && value.headers && typeof value.headers === "object" ? value.headers : void 0;
+    entries.push({ serverId: key, headers });
+  }
+  return managedMcpStructureHash(entries);
+}
+function decideManagedMcpRestart(input) {
+  const { prevStructureHash, structureHash, launchStructureHash, sessionHealthy, flapping } = input;
+  if (prevStructureHash === void 0) return { kind: "skip-first-convergence" };
+  if (structureHash === prevStructureHash) return { kind: "skip-no-change" };
+  if (!sessionHealthy) return { kind: "skip-unhealthy" };
+  if (flapping) return { kind: "skip-flapping" };
+  if (launchStructureHash != null && launchStructureHash === structureHash) {
+    return { kind: "suppress-already-live" };
+  }
+  return { kind: "restart" };
+}
 function channelSecretValueHash(envEntries, channelSecretKeys) {
   if (!envEntries) return null;
   const basis = channelSecretKeys.slice().sort().filter((k) => Object.prototype.hasOwnProperty.call(envEntries, k)).map((k) => `${k}=${envEntries[k]}`).join("\n");
@@ -626,7 +649,10 @@ function reaperRestartBreakerReason(activeKeys) {
 var PROVISIONING_RELOAD_REASONS = /* @__PURE__ */ new Set([
   "hot-reload-mcp",
   "managed-mcp-churn",
-  "bind-remediation"
+  "bind-remediation",
+  // ENG-7576: the dashboard integration-add stop itself - the first restart of
+  // the very burst this class exists for, previously uncounted entirely.
+  "integration-change"
 ]);
 function isProvisioningReloadReason(reason) {
   return PROVISIONING_RELOAD_REASONS.has(reason);
@@ -6286,7 +6312,15 @@ async function maybeResumeReconcile(agent) {
   }
 }
 function restartReasonBindsNewMcp(breakerReason) {
-  return breakerReason === "hot-reload-mcp" || breakerReason === "managed-mcp-churn" || breakerReason === "bind-remediation" || breakerReason === "channel-set-change";
+  return breakerReason === "hot-reload-mcp" || breakerReason === "managed-mcp-churn" || breakerReason === "bind-remediation" || breakerReason === "channel-set-change" || // ENG-7576: the dashboard integration-add stop (the poll's restart-consumption
+  // loop) is the archetypal "stop to rebind a changed MCP set" - the docstring
+  // above always described it, but the path passed no breakerReason so it never
+  // hit this predicate. Including it arms the ENG-6174 respawn verification for
+  // the ONE real respawn of an integration add.
+  breakerReason === "integration-change";
+}
+function dashboardRestartBreakerReason(restartReason) {
+  return restartReason === "integration-change" ? "integration-change" : void 0;
 }
 function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-reload-mcp", beforeStop) {
   const existing = pendingSessionRestarts.get(codeName);
@@ -6332,6 +6366,7 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
     stopPersistentSession(codeName, log);
     markRestartStopped(codeName, log);
     runningMcpHashes.delete(codeName);
+    sessionLaunchManagedStructure.delete(codeName);
     recordRestartForBreaker(codeName, breakerReason);
     log(`[hot-reload] Session stopped for '${codeName}' \u2014 will respawn with ${reason}`);
     const bindsNewMcp = restartReasonBindsNewMcp(breakerReason);
@@ -6510,6 +6545,7 @@ function isHostBusyForForcedUpdate() {
 var runningMcpHashes = /* @__PURE__ */ new Map();
 var runningMcpServerKeys = /* @__PURE__ */ new Map();
 var runningChannelSecretHashes = /* @__PURE__ */ new Map();
+var sessionLaunchManagedStructure = /* @__PURE__ */ new Map();
 function projectMcpHash(_codeName, projectDir) {
   try {
     const raw = readFileSync15(join17(projectDir, ".mcp.json"), "utf-8");
@@ -6529,6 +6565,28 @@ function projectMcpKeys(_codeName, projectDir) {
     return null;
   }
 }
+function seedSessionLaunchBaselines(codeName, projectDir) {
+  const hash = projectMcpHash(codeName, projectDir);
+  const keys = projectMcpKeys(codeName, projectDir);
+  if (hash) runningMcpHashes.set(codeName, hash);
+  else runningMcpHashes.delete(codeName);
+  if (keys) runningMcpServerKeys.set(codeName, keys);
+  else runningMcpServerKeys.delete(codeName);
+  let launchStructure = null;
+  try {
+    const raw = readFileSync15(join17(projectDir, ".mcp.json"), "utf-8");
+    launchStructure = managedMcpStructureHashFromFile(
+      JSON.parse(raw),
+      isManagedMcpServerKey
+    );
+  } catch {
+  }
+  if (launchStructure !== null) {
+    sessionLaunchManagedStructure.set(codeName, launchStructure);
+  } else {
+    sessionLaunchManagedStructure.delete(codeName);
+  }
+}
 async function runAgentConnectivityProbes(agent, integrations, projectDir) {
   if (integrations.length === 0) return;
   const probeEnv = buildProbeEnv(projectDir);
@@ -6654,12 +6712,13 @@ function stopPersistentSessionAndForgetMcpBaseline(codeName, breakerReason, gate
   runningMcpHashes.delete(codeName);
   runningMcpServerKeys.delete(codeName);
   runningChannelSecretHashes.delete(codeName);
+  sessionLaunchManagedStructure.delete(codeName);
   closeInjectedRunIfOpen(codeName, "cancelled", `session stopped (${breakerReason ?? "deprovision"})`);
   closeScheduledRunsForCode(codeName, "cancelled", `session stopped (${breakerReason ?? "deprovision"})`);
   if (breakerReason) {
     recordRestartForBreaker(codeName, breakerReason);
   }
-  if (breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag") {
+  if (breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag" && breakerReason !== "integration-change") {
     const restartAgentId = agentState.codeNameToAgentId.get(codeName);
     if (restartAgentId) {
       void api.post("/host/restart-event", {
@@ -6827,7 +6886,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.280" : "dev";
+var agtCliVersion = true ? "0.28.282" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7677,7 +7736,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-SZ4TUGED.js");
+      const { collectDiagnostics } = await import("../persistent-session-7H3IYXXP.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7775,7 +7834,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-SZ4TUGED.js");
+      const { collectDiagnostics } = await import("../persistent-session-7H3IYXXP.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7923,7 +7982,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-MKFZAUV5.js");
+      } = await import("../responsiveness-probe-PFJM4QMQ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7955,7 +8014,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-MKFZAUV5.js");
+        } = await import("../responsiveness-probe-PFJM4QMQ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -8174,13 +8233,31 @@ async function pollCycle() {
       const lastProcessed = prev?.lastRestartProcessedAt ?? null;
       const alreadyServiced = lastProcessed != null && Date.parse(lastProcessed) >= Date.parse(requested);
       if (!alreadyServiced) {
-        log(`[restart] Dashboard requested restart for '${agent.code_name}' at ${requested}`);
+        const restartReason = agent.restart_reason ?? null;
+        log(
+          `[restart] Dashboard requested restart for '${agent.code_name}' at ${requested} (reason=${restartReason ?? "manual"})`
+        );
         try {
           const { execSync: es } = await import("child_process");
           es(`tmux kill-session -t agt-${agent.code_name} 2>/dev/null`, { stdio: "ignore" });
         } catch {
         }
-        stopPersistentSessionAndForgetMcpBaseline(agent.code_name);
+        const breakerReason = dashboardRestartBreakerReason(restartReason);
+        stopPersistentSessionAndForgetMcpBaseline(agent.code_name, breakerReason);
+        if (breakerReason && restartReasonBindsNewMcp(breakerReason)) {
+          noteRestartRequested(agent.code_name, requested);
+          beginRestartTiming(
+            agent.code_name,
+            { reason: "integration-change (dashboard restart)", delivered: null, injectDelayMs: null },
+            log
+          );
+          markRestartStopped(agent.code_name, log);
+          const prior = pendingRestartVerifications.get(agent.code_name);
+          pendingRestartVerifications.set(agent.code_name, {
+            firedAt: Date.now(),
+            attempts: prior?.attempts ?? 0
+          });
+        }
         restartAcks.set(agent.agent_id, requested);
       }
       restartClears.push({ agentId: agent.agent_id, requestedAt: requested });
@@ -9579,12 +9656,19 @@ async function processAgent(agent, agentStates) {
           }
           agentState.knownManagedMcpHashes.set(agent.agent_id, mcpHash);
           agentState.knownManagedMcpStructure.set(agent.agent_id, structureHash);
-          if (prevStructureHash !== void 0 && structureHash !== prevStructureHash && fwForMcp === "claude-code" && isSessionHealthy(agent.code_name) && // ENG-6123: hold the restart + inject-notice while the managed-MCP
-          // membership is oscillating. The .mcp.json above was still written
-          // (the file converges to the live set); we only withhold the
-          // opus-facing notice + the session reload — the two per-flip burns.
-          // When the set settles, the next structural change restarts once.
-          !mcpFlap.flapping) {
+          const mcpRestartDecision = fwForMcp === "claude-code" && prevStructureHash !== void 0 && structureHash !== prevStructureHash ? decideManagedMcpRestart({
+            prevStructureHash,
+            structureHash,
+            launchStructureHash: sessionLaunchManagedStructure.get(agent.code_name),
+            sessionHealthy: isSessionHealthy(agent.code_name),
+            flapping: mcpFlap.flapping
+          }) : null;
+          if (mcpRestartDecision?.kind === "suppress-already-live") {
+            log(
+              `[hot-reload] Restart suppressed for '${agent.code_name}': the managed MCP structure change is already live in the running session (launched with it) - no respawn needed (ENG-7576)`
+            );
+          }
+          if (mcpRestartDecision?.kind === "restart") {
             const mcpNames = agentToolkits.map((tk) => tk.toolkit_name).join(", ") || "none (all removed)";
             log(`[hot-reload] MCP servers changed for '${agent.code_name}': ${mcpNames} \u2014 restarting session`);
             const restartNotice = agentToolkits.length > 0 ? `New MCP tool servers have been configured: ${mcpNames}. Note: MCP servers require a session restart to connect. Your manager will restart your session shortly.` : "Managed MCP tool servers were removed. Your manager will restart your session shortly so the session drops those tools.";
@@ -10590,6 +10674,7 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash11("sha256")
     });
     agentState.persistentSessionAgents.add(codeName);
     claudeAuthTupleBySession.set(codeName, currentAuthTuple);
+    seedSessionLaunchBaselines(codeName, projectDir);
     return {
       decision: "spawn",
       spawnAttempted: true,
@@ -10845,7 +10930,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-SZ4TUGED.js");
+        const { collectDiagnostics } = await import("../persistent-session-7H3IYXXP.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -10895,7 +10980,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-SZ4TUGED.js");
+      const { collectDiagnostics } = await import("../persistent-session-7H3IYXXP.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -11299,7 +11384,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-EXW6NBLU.js");
+  } = await import("../claude-pair-runtime-JOYTDNXZ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -12200,6 +12285,7 @@ export {
   claudeCodeUpgradeMarkerPath,
   claudeCodeUpgradeThrottled,
   claudeManagedSettingsPath,
+  dashboardRestartBreakerReason,
   ensureClaudeManagedSettings,
   extractCharterSlackPeers,
   extractCharterTelegramPeers,