@integrity-labs/agt-cli 0.28.486 → 0.28.488

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-XP53UXQR.js";
+} from "../chunk-PMDCZKFQ.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-SRR5XVWJ.js";
+} from "../chunk-XZI5IHQP.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.486" : "dev";
+var cliVersion = true ? "0.28.488" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.486" : "dev";
+var cliVersion2 = true ? "0.28.488" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-XP53UXQR.js → chunk-PMDCZKFQ.js}

@@ -30,7 +30,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-SRR5XVWJ.js";
+} from "./chunk-XZI5IHQP.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -3094,6 +3094,25 @@ function buildMcpJson(input) {
       args: [localXeroMcpPath],
       env: {
         ...brokerMode ? {} : { XERO_CLIENT_BEARER_TOKEN: "${XERO_ACCESS_TOKEN}" },
+        // ENG-8264: broker mode must ALSO declare which env var holds the
+        // credential, or dropping the `${XERO_ACCESS_TOKEN}` reference above
+        // silently re-classifies it. `findMcpServersUsingVars` only sees vars
+        // referenced as `${VAR}`, so with that reference gone the manager's
+        // `envOnlyRespawnVars` treats XERO_ACCESS_TOKEN as env-only and
+        // schedules a FULL SESSION RESPAWN on every OAuth rotation (~30 min) -
+        // trading the ~20-min child kill ENG-5318 fixed for something worse.
+        // Observed live on stirling at 2026-08-02T07:29:34Z.
+        //
+        // This is a declaration of fact, not a carve-out: in broker mode the
+        // server fetches the freshest token from the credential broker on every
+        // call (that is what AGT_INTEGRATION_ID/AGT_AGENT_ID above are for), so
+        // a rotation genuinely needs no restart - exactly what
+        // AGT_REMOTE_MCP_TOKEN_VAR means. `liveProxyTokenVars` reads this key
+        // off ANY mcpServers entry, not only remote-proxy ones, so the manager
+        // filters the var out of the respawn set. The `${VAR}` reference stays
+        // absent, so stale-mcp-reaper stays quiet too: both restart paths
+        // satisfied at once.
+        ...brokerMode ? { AGT_REMOTE_MCP_TOKEN_VAR: "XERO_ACCESS_TOKEN" } : {},
         XERO_TENANT_ID: "${XERO_TENANT_ID}",
         AGT_HOST: "${AGT_HOST}",
         AGT_TOKEN: "${AGT_TOKEN}",
@@ -4285,6 +4304,13 @@ ${sections}`
       const brokerMode = Boolean(agentId && xeroIntegration.id);
       const xeroEnv = {
         ...brokerMode ? {} : { XERO_CLIENT_BEARER_TOKEN: "${XERO_ACCESS_TOKEN}" },
+        // ENG-8264: declare the credential var in broker mode so the manager
+        // does not re-classify it as env-only and respawn the whole session on
+        // every rotation. Mirrors the buildMcpJson path above - see that block
+        // for the full rationale. Kept in both renderers deliberately: they
+        // produce the same entry by two routes, and a fix in only one of them
+        // is a fix that holds until whichever path the agent happens to take.
+        ...brokerMode ? { AGT_REMOTE_MCP_TOKEN_VAR: "XERO_ACCESS_TOKEN" } : {},
         XERO_TENANT_ID: "${XERO_TENANT_ID}",
         // ENG-4922: writes go through xero-broker → read-only vendor server.
         ...hasXeroBroker ? { XERO_WRITES_VIA_BROKER: "true" } : {},
@@ -4938,7 +4964,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.486" : "dev";
+var agtCliVersion = true ? "0.28.488" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -7667,4 +7693,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-XP53UXQR.js.map
+//# sourceMappingURL=chunk-PMDCZKFQ.js.map