@integrity-labs/agt-cli 0.28.505 → 0.28.506

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-3SKLJE7C.js";
+} from "../chunk-43UIRCO7.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-3BRI7LJZ.js";
+} from "../chunk-SMHHGXI5.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.505" : "dev";
+var cliVersion = true ? "0.28.506" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.505" : "dev";
+var cliVersion2 = true ? "0.28.506" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-3SKLJE7C.js → chunk-43UIRCO7.js}

@@ -7,6 +7,7 @@ import {
   MIN_PROVISIONING_MAX_FOR_QUARANTINE_ORDERING,
   OAUTH_PROVIDERS,
   REMOTE_MCP_PROXY_ENV,
+  RESTART_BREAKER_OPERATOR_MAX,
   RESTART_BREAKER_PROVISIONING_MAX,
   RESTART_BREAKER_PROVISIONING_WINDOW_MS,
   bestConnectivityEvidence,
@@ -42,7 +43,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-3BRI7LJZ.js";
+} from "./chunk-SMHHGXI5.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5061,7 +5062,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.505" : "dev";
+var agtCliVersion = true ? "0.28.506" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -6432,6 +6433,9 @@ var KNOWN_REASON_CLASS_MAP = {
   crash: true,
   provisioning: true,
   "credential-rotation": true,
+  // ENG-8388: provisioning reloads a human demonstrably asked for. Same
+  // Record-not-Set reasoning as above — a new class cannot be silently omitted.
+  "operator-config": true,
   // ENG-8215: the self-healing class (bind-remediation - the manager's OWN
   // repair attempts, which must never count toward a trip). Adding it here is
   // forced by the Record type, which is exactly why that shape was chosen over
@@ -6478,9 +6482,19 @@ var SELF_HEALING_REASONS = /* @__PURE__ */ new Set([
 function isSelfHealingReason(reason) {
   return SELF_HEALING_REASONS.has(reason);
 }
+var OPERATOR_CONFIG_REASONS = /* @__PURE__ */ new Set([
+  "operator-integration-change"
+]);
+function isOperatorConfigReason(reason) {
+  return OPERATOR_CONFIG_REASONS.has(reason);
+}
+function isIntegrationBucketedReason(reason) {
+  return isProvisioningReloadReason(reason) || isOperatorConfigReason(reason);
+}
 function restartReasonClass(reason) {
   if (isCredentialRotationReason(reason)) return "credential-rotation";
   if (isSelfHealingReason(reason)) return "self-healing";
+  if (isOperatorConfigReason(reason)) return "operator-config";
   return isProvisioningReloadReason(reason) ? "provisioning" : "crash";
 }
 function countByClass(events) {
@@ -6488,24 +6502,30 @@ function countByClass(events) {
   let provisioning = 0;
   let credentialRotation = 0;
   let selfHealing = 0;
+  let operatorConfig = 0;
   for (const e of events) {
     const klass = restartReasonClass(e.reason);
     if (klass === "provisioning") provisioning += 1;
     else if (klass === "credential-rotation") credentialRotation += 1;
     else if (klass === "self-healing") selfHealing += 1;
+    else if (klass === "operator-config") operatorConfig += 1;
     else crash += 1;
   }
   return {
     crash,
     provisioning,
     "credential-rotation": credentialRotation,
-    "self-healing": selfHealing
+    "self-healing": selfHealing,
+    "operator-config": operatorConfig
   };
 }
 function maxProvisioningBucket(events) {
+  return maxBucketWhere(events, isProvisioningReloadReason);
+}
+function maxBucketWhere(events, matches) {
   const buckets = /* @__PURE__ */ new Map();
   for (const e of events) {
-    if (!isProvisioningReloadReason(e.reason)) continue;
+    if (!matches(e.reason)) continue;
     const key = e.integrationKey ?? "";
     buckets.set(key, (buckets.get(key) ?? 0) + 1);
   }
@@ -6524,6 +6544,7 @@ var DEFAULT_MAX = 2;
 var DEFAULT_WINDOW_MS = 6e5;
 var DEFAULT_PROVISIONING_MAX = RESTART_BREAKER_PROVISIONING_MAX;
 var DEFAULT_PROVISIONING_WINDOW_MS = RESTART_BREAKER_PROVISIONING_WINDOW_MS;
+var DEFAULT_OPERATOR_MAX = RESTART_BREAKER_OPERATOR_MAX;
 function readEnvNumber(name, fallback) {
   const raw = process.env[name];
   if (!raw) return fallback;
@@ -6545,6 +6566,12 @@ var RestartBreaker = class {
    */
   provisioningMax;
   provisioningWindowMs;
+  /**
+   * ENG-8388: the looser operator-config budget. Shares provisioningWindowMs.
+   * NOT readonly - the constructor floors it at `provisioningMax` so setting one
+   * env var without the other cannot invert the two tallies.
+   */
+  operatorMax;
   /** Longest window either tally needs — how long the events log must retain. */
   retentionMs;
   now;
@@ -6564,6 +6591,7 @@ var RestartBreaker = class {
     this.windowMs = opts.windowMs ?? readEnvNumber("AGT_RESTART_BREAKER_WINDOW_MS", DEFAULT_WINDOW_MS);
     this.provisioningMax = opts.provisioningMax ?? readEnvNumber("AGT_RESTART_BREAKER_PROVISIONING_MAX", DEFAULT_PROVISIONING_MAX);
     this.provisioningWindowMs = opts.provisioningWindowMs ?? readEnvNumber("AGT_RESTART_BREAKER_PROVISIONING_WINDOW_MS", DEFAULT_PROVISIONING_WINDOW_MS);
+    this.operatorMax = opts.operatorMax ?? readEnvNumber("AGT_RESTART_BREAKER_OPERATOR_MAX", DEFAULT_OPERATOR_MAX);
     this.now = opts.now ?? Date.now;
     this.runtimeKey = opts.runtimeKey ?? ((codeName) => codeName);
     if (!Number.isFinite(this.max) || this.max < 1) {
@@ -6575,6 +6603,12 @@ var RestartBreaker = class {
     if (!Number.isFinite(this.provisioningMax) || this.provisioningMax < 1) {
       throw new Error("restart-breaker provisioningMax must be a finite number >= 1");
     }
+    if (!Number.isFinite(this.operatorMax) || this.operatorMax < 1) {
+      throw new Error("restart-breaker operatorMax must be a finite number >= 1");
+    }
+    if (this.operatorMax < this.provisioningMax) {
+      this.operatorMax = this.provisioningMax;
+    }
     if (this.provisioningMax < MIN_PROVISIONING_MAX_FOR_QUARANTINE_ORDERING) {
       this.quarantineOrderingClamped = {
         requested: this.provisioningMax,
@@ -6657,9 +6691,8 @@ var RestartBreaker = class {
     const at = this.now();
     const retentionCutoff = at - this.retentionMs;
     const prior = (this.events.get(key) ?? []).filter((e) => e.at >= retentionCutoff);
-    prior.push(
-      isProvisioningReloadReason(reason) && integrationKey ? { reason, at, integrationKey } : { reason, at }
-    );
+    const bucketed = isIntegrationBucketedReason(reason);
+    prior.push(bucketed && integrationKey ? { reason, at, integrationKey } : { reason, at });
     this.events.set(key, prior);
     const crashCount = prior.filter(
       (e) => e.at >= at - this.windowMs && restartReasonClass(e.reason) === "crash"
@@ -6673,33 +6706,45 @@ var RestartBreaker = class {
     const selfHealCount = prior.filter(
       (e) => e.at >= at - this.provisioningWindowMs && isSelfHealingReason(e.reason)
     ).length;
+    const operatorEvents = prior.filter(
+      (e) => e.at >= at - this.provisioningWindowMs && isOperatorConfigReason(e.reason)
+    );
     const windowCount = prior.filter((e) => e.at >= at - this.windowMs).length;
     const classCounts = {
       crash: crashCount,
       provisioning: provEvents.length,
       "credential-rotation": credRotCount,
-      "self-healing": selfHealCount
+      "self-healing": selfHealCount,
+      "operator-config": operatorEvents.length
     };
     const provBucket = maxProvisioningBucket(provEvents);
+    const operatorBucket = maxBucketWhere(operatorEvents, isOperatorConfigReason);
     let trippedClass;
     let tripEvents;
     let tripWindowMs = this.windowMs;
+    let tripBucketKey = "";
     if (crashCount > this.max) {
       trippedClass = "crash";
       tripEvents = prior.filter(
         (e) => e.at >= at - this.windowMs && restartReasonClass(e.reason) === "crash"
       );
       tripWindowMs = this.windowMs;
+    } else if (operatorBucket.count > this.operatorMax) {
+      trippedClass = "operator-config";
+      tripEvents = operatorEvents.filter((e) => (e.integrationKey ?? "") === operatorBucket.key);
+      tripWindowMs = this.provisioningWindowMs;
+      tripBucketKey = operatorBucket.key;
     } else if (provBucket.count > this.provisioningMax) {
       trippedClass = "provisioning";
       tripEvents = provEvents.filter((e) => (e.integrationKey ?? "") === provBucket.key);
       tripWindowMs = this.provisioningWindowMs;
+      tripBucketKey = provBucket.key;
     }
     if (trippedClass && tripEvents) {
       const trip = {
         trippedAt: at,
         eventsAtTrip: [...tripEvents],
-        statusMessage: formatStatusMessage(tripEvents, tripWindowMs, trippedClass, provBucket.key),
+        statusMessage: formatStatusMessage(tripEvents, tripWindowMs, trippedClass, tripBucketKey),
         // ENG-7577: persist the tripping class so the recovery path can gate on
         // it after a manager restart, without re-deriving it from prose.
         trippedClass
@@ -6768,8 +6813,8 @@ function formatStatusMessage(events, windowMs, klass = "crash", integrationKey =
   const reasonCounts = /* @__PURE__ */ new Map();
   for (const e of events) reasonCounts.set(e.reason, (reasonCounts.get(e.reason) ?? 0) + 1);
   const breakdown = Array.from(reasonCounts.entries()).map(([r, n]) => `${r}=${n}`).join(", ");
-  const classLabel = klass === "provisioning" ? "provisioning-reload " : "";
-  const integrationLabel = klass === "provisioning" && integrationKey ? ` for integration '${integrationKey}'` : "";
+  const classLabel = klass === "provisioning" ? "provisioning-reload " : klass === "operator-config" ? "operator-requested config-reload " : "";
+  const integrationLabel = (klass === "provisioning" || klass === "operator-config") && integrationKey ? ` for integration '${integrationKey}'` : "";
   return `Circuit breaker tripped: ${events.length} ${classLabel}restarts in ${windowLabel}${integrationLabel} (${breakdown}); most recent=${last.reason} at ${new Date(last.at).toISOString()}`;
 }
 
@@ -8295,6 +8340,7 @@ export {
   reapMissingMcpSessions,
   reaperRestartBreakerReason,
   isProvisioningReloadReason,
+  isIntegrationBucketedReason,
   tripClass,
   readEnvNumber,
   RestartBreaker,
@@ -8322,4 +8368,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-3SKLJE7C.js.map
+//# sourceMappingURL=chunk-43UIRCO7.js.map