@integrity-labs/agt-cli 0.28.384 → 0.28.385

package/dist/lib/manager-worker.js

@@ -43,7 +43,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-IXN2AFOX.js";
+} from "../chunk-P3SY6KTF.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -8207,6 +8207,7 @@ function hasRevokedResiduals(state7) {
   return state7.gatewayRunning || state7.portAllocated || state7.provisionDirExists;
 }
 var pendingSessionRestarts = /* @__PURE__ */ new Map();
+var lastRestartWasExternal = /* @__PURE__ */ new Map();
 var pendingRestartVerifications = /* @__PURE__ */ new Map();
 var restartBreaker = new RestartBreaker();
 var reportedTrips = /* @__PURE__ */ new Map();
@@ -8907,6 +8908,7 @@ function stopPersistentSessionAndForgetMcpBaseline(codeName, breakerReason, gate
   }
   cancelPendingSessionRestart(codeName);
   stopPersistentSession(codeName, log);
+  lastRestartWasExternal.set(codeName, gateReason !== "mcp-presence-reaper");
   runningMcpHashes.delete(codeName);
   runningMcpServerKeys.delete(codeName);
   runningChannelSecretHashes.delete(codeName);
@@ -9093,7 +9095,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.384" : "dev";
+var agtCliVersion = true ? "0.28.385" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -12723,6 +12725,14 @@ async function processAgent(agent, agentStates) {
           // but-not-yet-live MCP, so don't let the reaper re-fire + inflate the
           // McpReaperRestartsHourly metric into a false flapping alarm.
           restartPending: pendingSessionRestarts.has(agent.code_name),
+          // ENG-8013 (storm-awareness): tell the reaper whether THIS session
+          // generation was born from an external respawn (integration-change /
+          // channel-set-change / day-rollover / wedge / operator restart, or a
+          // storm) vs the reaper's own recovery restart. When external, a missing
+          // channel MCP is churn collateral and must not accrue quarantine budget,
+          // the durable fix for the ENG-8003 storm-quarantine incident. Absent map
+          // entry (first boot) → false → count normally.
+          currentGenerationExternallyStarted: lastRestartWasExternal.get(agent.code_name) ?? false,
           // ENG-5441 / ENG-5547: a mcp-presence-reaper restart counts against
           // the agent-wide breaker ONLY when several distinct MCP servers are
           // missing at once — a thrashing collection that rotates restarts of