@integrity-labs/agt-cli 0.28.352 → 0.28.353

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-BERN3B42.js";
+} from "../chunk-5MZMXKVD.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.352" : "dev";
+var cliVersion = true ? "0.28.353" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.352" : "dev";
+var cliVersion2 = true ? "0.28.353" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-BERN3B42.js → chunk-5MZMXKVD.js}

@@ -7111,7 +7111,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.352" : "dev";
+var agtCliVersion = true ? "0.28.353" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9561,4 +9561,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-BERN3B42.js.map
+//# sourceMappingURL=chunk-5MZMXKVD.js.map

package/dist/lib/manager-worker.js

@@ -47,7 +47,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   toOpencodeModel
-} from "../chunk-BERN3B42.js";
+} from "../chunk-5MZMXKVD.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -807,6 +807,19 @@ function countByClass(events) {
   }
   return { crash, provisioning, "credential-rotation": credentialRotation };
 }
+function maxProvisioningBucket(events) {
+  const buckets = /* @__PURE__ */ new Map();
+  for (const e of events) {
+    if (!isProvisioningReloadReason(e.reason)) continue;
+    const key = e.integrationKey ?? "";
+    buckets.set(key, (buckets.get(key) ?? 0) + 1);
+  }
+  let best = { count: 0, key: "" };
+  for (const [key, count] of buckets) {
+    if (count > best.count) best = { count, key };
+  }
+  return best;
+}
 var DEFAULT_MAX = 2;
 var DEFAULT_WINDOW_MS = 6e5;
 var DEFAULT_PROVISIONING_MAX = 5;
@@ -863,20 +876,25 @@ var RestartBreaker = class {
    * without double-counting events. Callers may still record the reason
    * via the decision-log for forensics.
    */
-  record(codeName, reason) {
+  record(codeName, reason, integrationKey) {
     const existing = this.trips.get(codeName);
     if (existing) {
+      const bucket = maxProvisioningBucket(existing.eventsAtTrip);
       return {
         tripped: false,
         trip: existing,
         windowCount: existing.eventsAtTrip.length,
-        classCounts: countByClass(existing.eventsAtTrip)
+        classCounts: countByClass(existing.eventsAtTrip),
+        maxProvisioningBucket: bucket.count,
+        maxProvisioningBucketKey: bucket.key
       };
     }
     const at = this.now();
     const retentionCutoff = at - this.retentionMs;
     const prior = (this.events.get(codeName) ?? []).filter((e) => e.at >= retentionCutoff);
-    prior.push({ reason, at });
+    prior.push(
+      isProvisioningReloadReason(reason) && integrationKey ? { reason, at, integrationKey } : { reason, at }
+    );
     this.events.set(codeName, prior);
     const crashCount = prior.filter(
       (e) => e.at >= at - this.windowMs && restartReasonClass(e.reason) === "crash"
@@ -893,6 +911,7 @@ var RestartBreaker = class {
       provisioning: provEvents.length,
       "credential-rotation": credRotCount
     };
+    const provBucket = maxProvisioningBucket(provEvents);
     let trippedClass;
     let tripEvents;
     let tripWindowMs = this.windowMs;
@@ -902,22 +921,36 @@ var RestartBreaker = class {
         (e) => e.at >= at - this.windowMs && restartReasonClass(e.reason) === "crash"
       );
       tripWindowMs = this.windowMs;
-    } else if (provEvents.length > this.provisioningMax) {
+    } else if (provBucket.count > this.provisioningMax) {
       trippedClass = "provisioning";
-      tripEvents = provEvents;
+      tripEvents = provEvents.filter((e) => (e.integrationKey ?? "") === provBucket.key);
       tripWindowMs = this.provisioningWindowMs;
     }
     if (trippedClass && tripEvents) {
       const trip = {
         trippedAt: at,
         eventsAtTrip: [...tripEvents],
-        statusMessage: formatStatusMessage(tripEvents, tripWindowMs, trippedClass)
+        statusMessage: formatStatusMessage(tripEvents, tripWindowMs, trippedClass, provBucket.key)
       };
       this.trips.set(codeName, trip);
       this.events.delete(codeName);
-      return { tripped: true, trip, windowCount, classCounts, trippedClass };
+      return {
+        tripped: true,
+        trip,
+        windowCount,
+        classCounts,
+        trippedClass,
+        maxProvisioningBucket: provBucket.count,
+        maxProvisioningBucketKey: provBucket.key
+      };
     }
-    return { tripped: false, windowCount, classCounts };
+    return {
+      tripped: false,
+      windowCount,
+      classCounts,
+      maxProvisioningBucket: provBucket.count,
+      maxProvisioningBucketKey: provBucket.key
+    };
   }
   /** Operator-initiated reset: drops the trip + the events log for this agent. */
   clear(codeName) {
@@ -948,14 +981,15 @@ var RestartBreaker = class {
     return (this.events.get(codeName) ?? []).filter((e) => e.at >= cutoff).length;
   }
 };
-function formatStatusMessage(events, windowMs, klass = "crash") {
+function formatStatusMessage(events, windowMs, klass = "crash", integrationKey = "") {
   const last = events[events.length - 1];
   const windowLabel = windowMs < 6e4 ? `${Math.round(windowMs / 1e3)}s` : `${(windowMs / 6e4).toFixed(1).replace(/\.0$/, "")}min`;
   const reasonCounts = /* @__PURE__ */ new Map();
   for (const e of events) reasonCounts.set(e.reason, (reasonCounts.get(e.reason) ?? 0) + 1);
   const breakdown = Array.from(reasonCounts.entries()).map(([r, n]) => `${r}=${n}`).join(", ");
   const classLabel = klass === "provisioning" ? "provisioning-reload " : "";
-  return `Circuit breaker tripped: ${events.length} ${classLabel}restarts in ${windowLabel} (${breakdown}); most recent=${last.reason} at ${new Date(last.at).toISOString()}`;
+  const integrationLabel = klass === "provisioning" && integrationKey ? ` for integration '${integrationKey}'` : "";
+  return `Circuit breaker tripped: ${events.length} ${classLabel}restarts in ${windowLabel}${integrationLabel} (${breakdown}); most recent=${last.reason} at ${new Date(last.at).toISOString()}`;
 }
 
 // src/lib/mcp-flap-dampener.ts
@@ -3769,6 +3803,17 @@ var agentState = {
   knownModels: /* @__PURE__ */ new Map(),
   knownTasksHashes: /* @__PURE__ */ new Map(),
   knownIntegrationHashes: /* @__PURE__ */ new Map(),
+  /**
+   * ENG-7812: the integration MEMBERSHIP (sorted `definition_id`s, credential/
+   * config churn ignored) observed on the previous refresh. Diffed against the
+   * current membership each poll to derive which integration(s) an
+   * `integration-change` / `hot-reload-mcp` restart is attributable to, which the
+   * restart breaker buckets its provisioning trip by (so onboarding many distinct
+   * integrations doesn't auto-pause a healthy new agent). In-memory only: a
+   * manager restart re-seeds it on the first poll (that first delta is treated as
+   * "no attribution", which is safe: it only widens, never narrows, the trip).
+   */
+  knownIntegrationMembership: /* @__PURE__ */ new Map(),
   knownManagedMcpHashes: /* @__PURE__ */ new Map(),
   knownManagedMcpStructure: /* @__PURE__ */ new Map(),
   /**
@@ -3804,6 +3849,16 @@ var agentState = {
   // ---------------------------------------------------------------------------
   agentDisplayNames: /* @__PURE__ */ new Map(),
   codeNameToAgentId: /* @__PURE__ */ new Map(),
+  /**
+   * ENG-7812: the most recent integration-membership delta for this agent, used
+   * to attribute a provisioning-reload restart to the integration that caused it.
+   * Set when a poll observes an integration add/remove (the changed
+   * `definition_id`s, `+`-joined); read by `recordRestartForBreaker` when a
+   * provisioning restart fires shortly after. `at` bounds its freshness to the
+   * breaker's provisioning window so a stale delta can't mis-attribute a much
+   * later reprovision (those fall through to the shared unattributed bucket).
+   */
+  provisioningAttribution: /* @__PURE__ */ new Map(),
   /**
    * Set of code_names with a live persistent session managed by this worker.
    * Borderline ownership: written from pollCycle and the persistent-session
@@ -3841,6 +3896,7 @@ function clearAgentState(agentId, codeName) {
   agentState.knownModels.delete(agentId);
   agentState.knownTasksHashes.delete(agentId);
   agentState.knownIntegrationHashes.delete(agentId);
+  agentState.knownIntegrationMembership.delete(agentId);
   agentState.knownManagedMcpHashes.delete(agentId);
   agentState.knownManagedMcpStructure.delete(agentId);
   agentState.knownSenderPolicyHashes.delete(agentId);
@@ -3849,6 +3905,7 @@ function clearAgentState(agentId, codeName) {
   agentState.knownGlobalSkillIds.delete(agentId);
   agentState.agentDisplayNames.delete(codeName);
   agentState.codeNameToAgentId.delete(codeName);
+  agentState.provisioningAttribution.delete(codeName);
   let channelCacheMutated = false;
   for (const key of agentState.knownChannelConfigHashes.keys()) {
     if (key.startsWith(`${agentId}:`)) {
@@ -8472,6 +8529,10 @@ var pendingRestartVerifications = /* @__PURE__ */ new Map();
 var restartBreaker = new RestartBreaker();
 var reportedTrips = /* @__PURE__ */ new Map();
 var RESTART_BREAKER_PROVISIONING_MAX = readEnvNumber("AGT_RESTART_BREAKER_PROVISIONING_MAX", 5);
+var RESTART_BREAKER_PROVISIONING_WINDOW_MS = readEnvNumber(
+  "AGT_RESTART_BREAKER_PROVISIONING_WINDOW_MS",
+  18e5
+);
 var mcpFlapDampener = new McpFlapDampener();
 var FLAP_BREAKER_COOLDOWN_MS = readEnvNumber2(
   "AGT_MCP_FLAP_BREAKER_COOLDOWN_MS",
@@ -8510,11 +8571,19 @@ function recordRestartForBreaker(codeName, reason) {
     );
     return;
   }
-  const result = restartBreaker.record(codeName, reason);
+  let integrationKey;
+  if (isProvisioningReloadReason(reason)) {
+    const attribution = agentState.provisioningAttribution.get(codeName);
+    if (attribution && Date.now() - attribution.at <= RESTART_BREAKER_PROVISIONING_WINDOW_MS) {
+      integrationKey = attribution.key;
+    }
+  }
+  const result = restartBreaker.record(codeName, reason, integrationKey);
   if (!result.tripped || !result.trip) {
-    if (isProvisioningReloadReason(reason) && result.classCounts.provisioning >= RESTART_BREAKER_PROVISIONING_MAX) {
+    if (isProvisioningReloadReason(reason) && result.maxProvisioningBucket >= RESTART_BREAKER_PROVISIONING_MAX) {
+      const culprit = result.maxProvisioningBucketKey ? ` [${result.maxProvisioningBucketKey}]` : "";
       log(
-        `[restart-breaker] agent=${codeName} provisioning-reload churn at the trip bar: ${result.classCounts.provisioning} provisioning restarts in window (reason=${reason}); one more will auto-pause the agent \u2014 a freshly-added integration is likely churning (ENG-7560)`
+        `[restart-breaker] agent=${codeName} provisioning-reload churn at the trip bar: ${result.maxProvisioningBucket} restarts for one integration${culprit} in window (reason=${reason}); one more will auto-pause the agent; that integration is likely churning (ENG-7560, ENG-7812)`
       );
     }
     return;
@@ -9342,7 +9411,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.352" : "dev";
+var agtCliVersion = true ? "0.28.353" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -12231,6 +12300,25 @@ async function processAgent(agent, agentStates) {
         }
       }
     }
+    const currentIntIds = integrations.map((i) => i.definition_id);
+    const prevIntIds = agentState.knownIntegrationMembership.get(agent.agent_id) ?? [];
+    const prevIntSet = new Set(prevIntIds);
+    const curIntSet = new Set(currentIntIds);
+    const changedIntIds = Array.from(
+      /* @__PURE__ */ new Set([
+        ...currentIntIds.filter((id) => !prevIntSet.has(id)),
+        // added
+        ...prevIntIds.filter((id) => !curIntSet.has(id))
+        // removed
+      ])
+    ).sort();
+    if (changedIntIds.length > 0) {
+      agentState.provisioningAttribution.set(agent.code_name, {
+        key: changedIntIds.join("+"),
+        at: Date.now()
+      });
+    }
+    agentState.knownIntegrationMembership.set(agent.agent_id, currentIntIds);
     if (integrations.length > 0) {
       const intHash = computeIntegrationsHash(integrations);
       const prevIntHash = agentState.knownIntegrationHashes.get(agent.agent_id);