@integrity-labs/agt-cli 0.28.389 → 0.28.391

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-GZKD4K7H.js";
+} from "../chunk-F2HXWMB6.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.389" : "dev";
+var cliVersion = true ? "0.28.391" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.389" : "dev";
+var cliVersion2 = true ? "0.28.391" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-GZKD4K7H.js → chunk-F2HXWMB6.js}

@@ -6196,7 +6196,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.389" : "dev";
+var agtCliVersion = true ? "0.28.391" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8650,4 +8650,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-GZKD4K7H.js.map
+//# sourceMappingURL=chunk-F2HXWMB6.js.map

package/dist/lib/manager-worker.js

@@ -43,7 +43,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-GZKD4K7H.js";
+} from "../chunk-F2HXWMB6.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -679,6 +679,9 @@ var OPTIONAL_CHANNEL_KEYS = /* @__PURE__ */ new Set([
   "irc",
   "nostr"
 ]);
+function isKnownChannelKey(serverKey) {
+  return ESSENTIAL_CHANNEL_KEYS.has(serverKey) || OPTIONAL_CHANNEL_KEYS.has(serverKey);
+}
 function readDeclaredCriticality(entry) {
   if (!entry || typeof entry !== "object") return void 0;
   const meta = entry._augmented;
@@ -1602,14 +1605,18 @@ var GATEABLE_RESTART_REASONS = /* @__PURE__ */ new Set([
   "channel-set-change",
   "sender-policy-change",
   "channel-behaviour-change",
-  "mcp-presence-reaper"
+  "mcp-presence-reaper",
+  // ENG-7949: same gate-but-window-exempt shape as 'mcp-presence-reaper' — see
+  // WINDOW_EXEMPT_RESTART_REASONS below for why this one skips the window too.
+  "channel-mcp-down"
 ]);
 function isGateableRestartReason(reason) {
   return reason != null && GATEABLE_RESTART_REASONS.has(reason);
 }
 var WINDOW_EXEMPT_RESTART_REASONS = /* @__PURE__ */ new Set([
   "channel-set-change",
-  "sender-policy-change"
+  "sender-policy-change",
+  "channel-mcp-down"
 ]);
 function isWindowExemptRestartReason(reason) {
   return reason != null && WINDOW_EXEMPT_RESTART_REASONS.has(reason);
@@ -9113,7 +9120,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.389" : "dev";
+var agtCliVersion = true ? "0.28.391" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -12769,13 +12776,24 @@ async function processAgent(agent, agentStates) {
           // MCP) is decoupled from the GATE reason. Pre-6264 an undefined breaker
           // reason also made the restart non-gateable → 'bypass' → the session was
           // torn down mid-turn (the common single-MCP case interrupted busy
-          // agents). Always pass 'mcp-presence-reaper' as the gate reason so the
-          // restart defers-until-idle, while breakerReason still governs whether it
-          // counts against the breaker.
+          // agents). Pass 'mcp-presence-reaper' as the gate reason so the restart
+          // defers-until-idle, while breakerReason still governs whether it counts
+          // against the breaker.
+          //
+          // ENG-7949: EXCEPT when at least one dead MCP (ctx.activeKeys, already
+          // confirmed to have no live children) is a recognised CHANNEL server —
+          // then the gate reason promotes to 'channel-mcp-down', which is
+          // window-exempt (still defer-until-idle, never interrupts a live turn,
+          // but skips the up-to-~14h off-peak window wait). A dead channel MCP
+          // means the agent is unreachable on that channel right now; sitting
+          // silently deferred until the window opens is a worse outcome than a
+          // gated restart. A routine tool-MCP-only reaper restart (xero,
+          // composio_*, unrecognised keys) keeps the original 'mcp-presence-
+          // reaper' gate reason and still waits for the window as before.
           stopSession: (codeName, ctx) => stopPersistentSessionAndForgetMcpBaseline(
             codeName,
             reaperRestartBreakerReason(ctx.activeKeys),
-            "mcp-presence-reaper"
+            ctx.activeKeys.some(isKnownChannelKey) ? "channel-mcp-down" : "mcp-presence-reaper"
           ),
           // ENG-5292: when the reaper gives up on a managed MCP (cap from
           // ENG-5279 + state-preservation from ENG-5285 both said "this