@integrity-labs/agt-cli 0.28.379 → 0.28.381

package/dist/{claude-pair-runtime-SJW25IRD.js → claude-pair-runtime-YF3ZEFKV.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-PGKQK5VU.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-FZF7EPUW.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-SJW25IRD.js.map
+//# sourceMappingURL=claude-pair-runtime-YF3ZEFKV.js.map

package/dist/lib/manager-worker.js

@@ -43,7 +43,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-KODU4EUV.js";
+} from "../chunk-TRTVQUQL.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -145,7 +145,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-REVQSDNX.js";
+} from "../chunk-EP6TURK5.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -287,6 +287,13 @@ function computeIntegrationsHash(integrations) {
   );
   return createHash2("sha256").update(JSON.stringify(payload)).digest("hex").slice(0, 16);
 }
+function computeCapabilitySurfaceHash(integrations) {
+  const payload = [...integrations].sort((a, b) => a.definition_id.localeCompare(b.definition_id)).map((i) => {
+    const caps = [...i.capabilities ?? []].sort((a, b) => a.id.localeCompare(b.id)).map((c) => `${c.id}:${c.access}`);
+    return `${i.definition_id}:${i.display_name ?? ""}:${JSON.stringify(caps)}`;
+  });
+  return createHash2("sha256").update(JSON.stringify(payload)).digest("hex").slice(0, 16);
+}
 
 // src/lib/host-integration-mapping.ts
 function withResolvedRemoteMcp(integration) {
@@ -3810,6 +3817,18 @@ var agentState = {
   knownModels: /* @__PURE__ */ new Map(),
   knownTasksHashes: /* @__PURE__ */ new Map(),
   knownIntegrationHashes: /* @__PURE__ */ new Map(),
+  /**
+   * ENG-7946: hash of the integration CAPABILITY SURFACE (definition_id +
+   * display_name + capabilities), updated each poll alongside
+   * `knownIntegrationHashes`. The `integration-update` notice injected into
+   * the agent's session is gated on THIS hash changing, not the full
+   * credential+config hash — so token refreshes (which bump
+   * `knownIntegrationHashes` via the `credentials` field) do not fire a
+   * spurious notice. In-memory only: a manager restart clears it, and the
+   * first-poll delta fires exactly one notice on startup, which is correct
+   * (it reflects the true current surface).
+   */
+  knownCapabilitySurfaceHashes: /* @__PURE__ */ new Map(),
   /**
    * ENG-7812: the integration MEMBERSHIP (sorted `definition_id`s, credential/
    * config churn ignored) observed on the previous refresh. Diffed against the
@@ -3903,6 +3922,7 @@ function clearAgentState(agentId, codeName) {
   agentState.knownModels.delete(agentId);
   agentState.knownTasksHashes.delete(agentId);
   agentState.knownIntegrationHashes.delete(agentId);
+  agentState.knownCapabilitySurfaceHashes.delete(agentId);
   agentState.knownIntegrationMembership.delete(agentId);
   agentState.knownManagedMcpHashes.delete(agentId);
   agentState.knownManagedMcpStructure.delete(agentId);
@@ -9100,7 +9120,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.379" : "dev";
+var agtCliVersion = true ? "0.28.381" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -10229,7 +10249,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-PGKQK5VU.js");
+      const { collectDiagnostics } = await import("../persistent-session-FZF7EPUW.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -10328,7 +10348,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-PGKQK5VU.js");
+      const { collectDiagnostics } = await import("../persistent-session-FZF7EPUW.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -10483,7 +10503,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-T2VF5SVF.js");
+      } = await import("../responsiveness-probe-JYF7XPI2.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -10515,7 +10535,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-T2VF5SVF.js");
+        } = await import("../responsiveness-probe-JYF7XPI2.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-HYOOQV4A.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -12128,17 +12148,22 @@ async function processAgent(agent, agentStates) {
       });
     }
     agentState.knownIntegrationMembership.set(agent.agent_id, currentIntIds);
+    const capSurfaceHash = computeCapabilitySurfaceHash(integrations);
+    const prevCapSurfaceHash = agentState.knownCapabilitySurfaceHashes.get(agent.agent_id);
+    const capSurfaceNames = integrations.map((i) => i.display_name || i.definition_id).join(", ");
+    const intMembership = membershipSignature(integrations.map((i) => i.definition_id));
+    const intFlap = mcpFlapDampener.record(agent.code_name, FLAP_CHANNEL_INTEGRATIONS, intMembership);
+    if (intFlap.onset) {
+      log(
+        `[mcp-flap-dampener] integration set for '${agent.code_name}' is FLAPPING (${intFlap.tier} tier: ${intFlap.transitions} transitions / ${intFlap.distinctStates} states in window) - suppressing integration-update notices until it settles (ENG-6123, ENG-6512)`
+      );
+      recordConfigChurnEvent(agent.agent_id, agent.code_name, FLAP_CHANNEL_INTEGRATIONS, intMembership);
+    }
+    let reapNote = "";
+    let rotationHandled = true;
     if (integrations.length > 0) {
       const intHash = computeIntegrationsHash(integrations);
       const prevIntHash = agentState.knownIntegrationHashes.get(agent.agent_id);
-      const intMembership = membershipSignature(integrations.map((i) => i.definition_id));
-      const intFlap = mcpFlapDampener.record(agent.code_name, FLAP_CHANNEL_INTEGRATIONS, intMembership);
-      if (intFlap.onset) {
-        log(
-          `[mcp-flap-dampener] integration set for '${agent.code_name}' is FLAPPING (${intFlap.tier} tier: ${intFlap.transitions} transitions / ${intFlap.distinctStates} states in window) \u2014 suppressing integration-update notices until it settles (ENG-6123, ENG-6512)`
-        );
-        recordConfigChurnEvent(agent.agent_id, agent.code_name, FLAP_CHANNEL_INTEGRATIONS, intMembership);
-      }
       if (intHash !== prevIntHash) {
         const projectDir = join21(homedir10(), ".augmented", agent.code_name, "project");
         const envIntPath = join21(projectDir, ".env.integrations");
@@ -12159,7 +12184,6 @@ async function processAgent(agent, agentStates) {
           );
           stopOpencodeSession(agent.code_name, log);
         }
-        let rotationHandled = true;
         if (fw === "claude-code" && isSessionHealthy(agent.code_name)) {
           try {
             const projectMcpPath = join21(projectDir, ".mcp.json");
@@ -12186,18 +12210,11 @@ async function processAgent(agent, agentStates) {
             const rotatedOnlyVars = new Set(envDiff.rotated);
             const envRespawnReason = respawnVars.length > 0 && respawnVars.every((v) => rotatedOnlyVars.has(v)) ? "credential-rotation" : "hot-reload-mcp";
             const needsRespawn = respawnVars.length > 0 && !intFlap.flapping;
-            const names = integrations.map((i) => i.display_name || i.definition_id).join(", ");
             const reconnectNote = affectedServerKeys.length > 0 ? ` The MCP servers that depend on rotating credentials (${affectedServerKeys.join(", ")}) have been signalled to reconnect.` : "";
             const restartNote = needsRespawn ? " Your session will restart shortly to apply the change (ENG-7510)." : "";
-            const reapNote = `${reconnectNote}${restartNote}`;
-            if (intFlap.flapping) {
-              log(`[mcp-flap-dampener] suppressed integration-update notice for '${agent.code_name}' (set flapping, ENG-6123): ${names}`);
-            } else {
-              injectMessage(agent.code_name, "system", `Your integrations have been refreshed. You have access to: ${names}.${reapNote}`, {
-                task_name: "integration-update"
-              }, log).catch(() => {
-              });
-              log(`[hot-reload] Notified '${agent.code_name}' about integration update: ${names} (reaped ${affectedServerKeys.length} stale MCP server(s))`);
+            reapNote = `${reconnectNote}${restartNote}`;
+            if (!intFlap.flapping && capSurfaceHash === prevCapSurfaceHash) {
+              log(`[hot-reload] Suppressed integration-update notice for '${agent.code_name}' - capability surface unchanged (credential/config rotation only, ENG-7946): ${capSurfaceNames}`);
             }
             if (needsRespawn) {
               scheduleSessionRestart(
@@ -12220,6 +12237,18 @@ async function processAgent(agent, agentStates) {
         }
       }
     }
+    if (capSurfaceHash !== prevCapSurfaceHash && rotationHandled) {
+      if (intFlap.flapping) {
+        log(`[mcp-flap-dampener] suppressed integration-update notice for '${agent.code_name}' (set flapping, ENG-6123): ${capSurfaceNames}`);
+      } else {
+        injectMessage(agent.code_name, "system", `Your integrations have been refreshed. You have access to: ${capSurfaceNames}.${reapNote}`, {
+          task_name: "integration-update"
+        }, log).catch(() => {
+        });
+        log(`[hot-reload] Notified '${agent.code_name}' about integration update: ${capSurfaceNames}`);
+      }
+      agentState.knownCapabilitySurfaceHashes.set(agent.agent_id, capSurfaceHash);
+    }
     const fwForMcp = agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK;
     if (frameworkAdapter.writeMcpServer) {
       try {
@@ -13701,7 +13730,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-PGKQK5VU.js");
+        const { collectDiagnostics } = await import("../persistent-session-FZF7EPUW.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -13751,7 +13780,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-PGKQK5VU.js");
+      const { collectDiagnostics } = await import("../persistent-session-FZF7EPUW.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -14204,7 +14233,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-SJW25IRD.js");
+  } = await import("../claude-pair-runtime-YF3ZEFKV.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));