@integrity-labs/agt-cli 0.28.388 → 0.28.390

package/dist/lib/manager-worker.js

@@ -43,7 +43,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-3TKW2SSS.js";
+} from "../chunk-OIVIZ7Z3.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -679,6 +679,9 @@ var OPTIONAL_CHANNEL_KEYS = /* @__PURE__ */ new Set([
   "irc",
   "nostr"
 ]);
+function isKnownChannelKey(serverKey) {
+  return ESSENTIAL_CHANNEL_KEYS.has(serverKey) || OPTIONAL_CHANNEL_KEYS.has(serverKey);
+}
 function readDeclaredCriticality(entry) {
   if (!entry || typeof entry !== "object") return void 0;
   const meta = entry._augmented;
@@ -1602,14 +1605,18 @@ var GATEABLE_RESTART_REASONS = /* @__PURE__ */ new Set([
   "channel-set-change",
   "sender-policy-change",
   "channel-behaviour-change",
-  "mcp-presence-reaper"
+  "mcp-presence-reaper",
+  // ENG-7949: same gate-but-window-exempt shape as 'mcp-presence-reaper' — see
+  // WINDOW_EXEMPT_RESTART_REASONS below for why this one skips the window too.
+  "channel-mcp-down"
 ]);
 function isGateableRestartReason(reason) {
   return reason != null && GATEABLE_RESTART_REASONS.has(reason);
 }
 var WINDOW_EXEMPT_RESTART_REASONS = /* @__PURE__ */ new Set([
   "channel-set-change",
-  "sender-policy-change"
+  "sender-policy-change",
+  "channel-mcp-down"
 ]);
 function isWindowExemptRestartReason(reason) {
   return reason != null && WINDOW_EXEMPT_RESTART_REASONS.has(reason);
@@ -9113,7 +9120,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.388" : "dev";
+var agtCliVersion = true ? "0.28.390" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -12769,13 +12776,24 @@ async function processAgent(agent, agentStates) {
           // MCP) is decoupled from the GATE reason. Pre-6264 an undefined breaker
           // reason also made the restart non-gateable → 'bypass' → the session was
           // torn down mid-turn (the common single-MCP case interrupted busy
-          // agents). Always pass 'mcp-presence-reaper' as the gate reason so the
-          // restart defers-until-idle, while breakerReason still governs whether it
-          // counts against the breaker.
+          // agents). Pass 'mcp-presence-reaper' as the gate reason so the restart
+          // defers-until-idle, while breakerReason still governs whether it counts
+          // against the breaker.
+          //
+          // ENG-7949: EXCEPT when at least one dead MCP (ctx.activeKeys, already
+          // confirmed to have no live children) is a recognised CHANNEL server —
+          // then the gate reason promotes to 'channel-mcp-down', which is
+          // window-exempt (still defer-until-idle, never interrupts a live turn,
+          // but skips the up-to-~14h off-peak window wait). A dead channel MCP
+          // means the agent is unreachable on that channel right now; sitting
+          // silently deferred until the window opens is a worse outcome than a
+          // gated restart. A routine tool-MCP-only reaper restart (xero,
+          // composio_*, unrecognised keys) keeps the original 'mcp-presence-
+          // reaper' gate reason and still waits for the window as before.
           stopSession: (codeName, ctx) => stopPersistentSessionAndForgetMcpBaseline(
             codeName,
             reaperRestartBreakerReason(ctx.activeKeys),
-            "mcp-presence-reaper"
+            ctx.activeKeys.some(isKnownChannelKey) ? "channel-mcp-down" : "mcp-presence-reaper"
           ),
           // ENG-5292: when the reaper gives up on a managed MCP (cap from
           // ENG-5279 + state-preservation from ENG-5285 both said "this