@integrity-labs/agt-cli 0.28.281 → 0.28.283

package/dist/{chunk-QVAOI4TB.js → chunk-DDQKILX6.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-C4QMCOAN.js";
+} from "./chunk-CUQUOIPW.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5882,7 +5882,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.281" : "dev";
+var agtCliVersion = true ? "0.28.283" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8162,4 +8162,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-QVAOI4TB.js.map
+//# sourceMappingURL=chunk-DDQKILX6.js.map

package/dist/{claude-pair-runtime-JOYTDNXZ.js → claude-pair-runtime-ERIXG5MQ.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-7H3IYXXP.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-WRL7JV3G.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-JOYTDNXZ.js.map
+//# sourceMappingURL=claude-pair-runtime-ERIXG5MQ.js.map

package/dist/lib/manager-worker.js

@@ -38,7 +38,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-QVAOI4TB.js";
+} from "../chunk-DDQKILX6.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -125,7 +125,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-C4QMCOAN.js";
+} from "../chunk-CUQUOIPW.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -186,6 +186,29 @@ function managedMcpStructureHash(entries) {
   const basis = entries.slice().sort((a, b) => a.serverId.localeCompare(b.serverId)).map((e) => `${e.serverId}|${Object.keys(e.headers ?? {}).sort().join(",")}`).join("\n");
   return createHash("sha256").update(basis).digest("hex").slice(0, 16);
 }
+function managedMcpStructureHashFromFile(mcpConfig, isManagedKey) {
+  if (!mcpConfig || typeof mcpConfig !== "object") return null;
+  const servers = mcpConfig.mcpServers;
+  if (!servers || typeof servers !== "object") return managedMcpStructureHash([]);
+  const entries = [];
+  for (const [key, value] of Object.entries(servers)) {
+    if (!isManagedKey(key)) continue;
+    const headers = value && typeof value === "object" && value.headers && typeof value.headers === "object" ? value.headers : void 0;
+    entries.push({ serverId: key, headers });
+  }
+  return managedMcpStructureHash(entries);
+}
+function decideManagedMcpRestart(input) {
+  const { prevStructureHash, structureHash, launchStructureHash, sessionHealthy, flapping } = input;
+  if (prevStructureHash === void 0) return { kind: "skip-first-convergence" };
+  if (structureHash === prevStructureHash) return { kind: "skip-no-change" };
+  if (!sessionHealthy) return { kind: "skip-unhealthy" };
+  if (flapping) return { kind: "skip-flapping" };
+  if (launchStructureHash != null && launchStructureHash === structureHash) {
+    return { kind: "suppress-already-live" };
+  }
+  return { kind: "restart" };
+}
 function channelSecretValueHash(envEntries, channelSecretKeys) {
   if (!envEntries) return null;
   const basis = channelSecretKeys.slice().sort().filter((k) => Object.prototype.hasOwnProperty.call(envEntries, k)).map((k) => `${k}=${envEntries[k]}`).join("\n");
@@ -6343,6 +6366,7 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
     stopPersistentSession(codeName, log);
     markRestartStopped(codeName, log);
     runningMcpHashes.delete(codeName);
+    sessionLaunchManagedStructure.delete(codeName);
     recordRestartForBreaker(codeName, breakerReason);
     log(`[hot-reload] Session stopped for '${codeName}' \u2014 will respawn with ${reason}`);
     const bindsNewMcp = restartReasonBindsNewMcp(breakerReason);
@@ -6521,6 +6545,7 @@ function isHostBusyForForcedUpdate() {
 var runningMcpHashes = /* @__PURE__ */ new Map();
 var runningMcpServerKeys = /* @__PURE__ */ new Map();
 var runningChannelSecretHashes = /* @__PURE__ */ new Map();
+var sessionLaunchManagedStructure = /* @__PURE__ */ new Map();
 function projectMcpHash(_codeName, projectDir) {
   try {
     const raw = readFileSync15(join17(projectDir, ".mcp.json"), "utf-8");
@@ -6540,6 +6565,28 @@ function projectMcpKeys(_codeName, projectDir) {
     return null;
   }
 }
+function seedSessionLaunchBaselines(codeName, projectDir) {
+  const hash = projectMcpHash(codeName, projectDir);
+  const keys = projectMcpKeys(codeName, projectDir);
+  if (hash) runningMcpHashes.set(codeName, hash);
+  else runningMcpHashes.delete(codeName);
+  if (keys) runningMcpServerKeys.set(codeName, keys);
+  else runningMcpServerKeys.delete(codeName);
+  let launchStructure = null;
+  try {
+    const raw = readFileSync15(join17(projectDir, ".mcp.json"), "utf-8");
+    launchStructure = managedMcpStructureHashFromFile(
+      JSON.parse(raw),
+      isManagedMcpServerKey
+    );
+  } catch {
+  }
+  if (launchStructure !== null) {
+    sessionLaunchManagedStructure.set(codeName, launchStructure);
+  } else {
+    sessionLaunchManagedStructure.delete(codeName);
+  }
+}
 async function runAgentConnectivityProbes(agent, integrations, projectDir) {
   if (integrations.length === 0) return;
   const probeEnv = buildProbeEnv(projectDir);
@@ -6665,6 +6712,7 @@ function stopPersistentSessionAndForgetMcpBaseline(codeName, breakerReason, gate
   runningMcpHashes.delete(codeName);
   runningMcpServerKeys.delete(codeName);
   runningChannelSecretHashes.delete(codeName);
+  sessionLaunchManagedStructure.delete(codeName);
   closeInjectedRunIfOpen(codeName, "cancelled", `session stopped (${breakerReason ?? "deprovision"})`);
   closeScheduledRunsForCode(codeName, "cancelled", `session stopped (${breakerReason ?? "deprovision"})`);
   if (breakerReason) {
@@ -6838,7 +6886,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.281" : "dev";
+var agtCliVersion = true ? "0.28.283" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7688,7 +7736,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-7H3IYXXP.js");
+      const { collectDiagnostics } = await import("../persistent-session-WRL7JV3G.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7786,7 +7834,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-7H3IYXXP.js");
+      const { collectDiagnostics } = await import("../persistent-session-WRL7JV3G.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7934,7 +7982,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-PFJM4QMQ.js");
+      } = await import("../responsiveness-probe-LSRBQ5OJ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7966,7 +8014,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-PFJM4QMQ.js");
+        } = await import("../responsiveness-probe-LSRBQ5OJ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -9608,12 +9656,19 @@ async function processAgent(agent, agentStates) {
           }
           agentState.knownManagedMcpHashes.set(agent.agent_id, mcpHash);
           agentState.knownManagedMcpStructure.set(agent.agent_id, structureHash);
-          if (prevStructureHash !== void 0 && structureHash !== prevStructureHash && fwForMcp === "claude-code" && isSessionHealthy(agent.code_name) && // ENG-6123: hold the restart + inject-notice while the managed-MCP
-          // membership is oscillating. The .mcp.json above was still written
-          // (the file converges to the live set); we only withhold the
-          // opus-facing notice + the session reload — the two per-flip burns.
-          // When the set settles, the next structural change restarts once.
-          !mcpFlap.flapping) {
+          const mcpRestartDecision = fwForMcp === "claude-code" && prevStructureHash !== void 0 && structureHash !== prevStructureHash ? decideManagedMcpRestart({
+            prevStructureHash,
+            structureHash,
+            launchStructureHash: sessionLaunchManagedStructure.get(agent.code_name),
+            sessionHealthy: isSessionHealthy(agent.code_name),
+            flapping: mcpFlap.flapping
+          }) : null;
+          if (mcpRestartDecision?.kind === "suppress-already-live") {
+            log(
+              `[hot-reload] Restart suppressed for '${agent.code_name}': the managed MCP structure change is already live in the running session (launched with it) - no respawn needed (ENG-7576)`
+            );
+          }
+          if (mcpRestartDecision?.kind === "restart") {
             const mcpNames = agentToolkits.map((tk) => tk.toolkit_name).join(", ") || "none (all removed)";
             log(`[hot-reload] MCP servers changed for '${agent.code_name}': ${mcpNames} \u2014 restarting session`);
             const restartNotice = agentToolkits.length > 0 ? `New MCP tool servers have been configured: ${mcpNames}. Note: MCP servers require a session restart to connect. Your manager will restart your session shortly.` : "Managed MCP tool servers were removed. Your manager will restart your session shortly so the session drops those tools.";
@@ -10614,11 +10669,16 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash11("sha256")
       // unless an operator env override is already present (which keeps precedence).
       slackReplyBindingMode: hostFlagStore().getString("slack-reply-binding"),
       blockTurnEndAllMarkers: hostFlagStore().getBoolean("block-turn-end-all-markers"),
+      // ENG-7493 (ADR-0044): materialize kanban-waiting-status into the spawn env
+      // (AGT_KANBAN_WAITING_ENABLED) so the stdio kanban MCP exposes the `waiting`
+      // option. Host-grained (HostFlagStore); the per-org API gate is authoritative.
+      kanbanWaitingEnabled: hostFlagStore().getBoolean("kanban-waiting-status"),
       egressAllowlist,
       log
     });
     agentState.persistentSessionAgents.add(codeName);
     claudeAuthTupleBySession.set(codeName, currentAuthTuple);
+    seedSessionLaunchBaselines(codeName, projectDir);
     return {
       decision: "spawn",
       spawnAttempted: true,
@@ -10874,7 +10934,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-7H3IYXXP.js");
+        const { collectDiagnostics } = await import("../persistent-session-WRL7JV3G.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -10924,7 +10984,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-7H3IYXXP.js");
+      const { collectDiagnostics } = await import("../persistent-session-WRL7JV3G.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -11328,7 +11388,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-JOYTDNXZ.js");
+  } = await import("../claude-pair-runtime-ERIXG5MQ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));