@integrity-labs/agt-cli 0.28.635 → 0.28.637

package/dist/bin/agt.js

@@ -40,10 +40,10 @@ import {
   success,
   table,
   warn
-} from "../chunk-J6KQDGWM.js";
+} from "../chunk-3JBA6RYG.js";
 import {
   readDirectChatSessionState
-} from "../chunk-GNTCOXZG.js";
+} from "../chunk-W4GVD3KK.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -73,7 +73,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-FKG7DIE2.js";
+} from "../chunk-JT2JQUK3.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4909,7 +4909,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.635" : "dev";
+var cliVersion = true ? "0.28.637" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6089,7 +6089,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.635" : "dev";
+var cliVersion2 = true ? "0.28.637" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-J6KQDGWM.js → chunk-3JBA6RYG.js}

@@ -7,7 +7,7 @@ import {
   expandTemplateVars,
   isolationMode,
   parseEnvIntegrations
-} from "./chunk-GNTCOXZG.js";
+} from "./chunk-W4GVD3KK.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -21,6 +21,8 @@ import {
   RESTART_BREAKER_OPERATOR_MAX,
   RESTART_BREAKER_PROVISIONING_MAX,
   RESTART_BREAKER_PROVISIONING_WINDOW_MS,
+  RESTART_BREAKER_SCHEDULED_MAX,
+  RESTART_BREAKER_SCHEDULED_WINDOW_MS,
   SCRATCH_RETENTION_DAYS,
   SLACK_SOCKET_STATE_FILENAME,
   bestConnectivityEvidence,
@@ -33,6 +35,7 @@ import {
   handshakeToolsListOutcome,
   isControlPlaneOnlyConfigKey,
   isDefaultRemoteMcpConnection,
+  isSessionToolBindCandidate,
   isSlackInboundTransportDown,
   listFlagDefinitions,
   mcpWildcardsForServers,
@@ -51,7 +54,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-FKG7DIE2.js";
+} from "./chunk-JT2JQUK3.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6069,7 +6072,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.635" : "dev";
+var agtCliVersion = true ? "0.28.637" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -7465,7 +7468,12 @@ var KNOWN_REASON_CLASS_MAP = {
   // forced by the Record type, which is exactly why that shape was chosen over
   // a Set literal (ENG-7577, CodeRabbit on #3861) - a new union member cannot
   // be silently omitted from the rehydration allowlist.
-  "self-healing": true
+  "self-healing": true,
+  // ENG-9138: the platform-scheduled class. Same Record-not-Set reasoning: the
+  // compiler forces every new class into this allowlist, so a `trippedClass`
+  // rehydrated from manager-state.json can never name a class this build does
+  // not know about.
+  scheduled: true
 };
 var KNOWN_REASON_CLASSES = new Set(
   Object.keys(KNOWN_REASON_CLASS_MAP)
@@ -7506,6 +7514,12 @@ var SELF_HEALING_REASONS = /* @__PURE__ */ new Set([
 function isSelfHealingReason(reason) {
   return SELF_HEALING_REASONS.has(reason);
 }
+var SCHEDULED_REASONS = /* @__PURE__ */ new Set([
+  "day-rollover"
+]);
+function isScheduledRestartReason(reason) {
+  return SCHEDULED_REASONS.has(reason);
+}
 var OPERATOR_CONFIG_REASONS = /* @__PURE__ */ new Set([
   "operator-integration-change"
 ]);
@@ -7519,6 +7533,7 @@ function restartReasonClass(reason) {
   if (isCredentialRotationReason(reason)) return "credential-rotation";
   if (isSelfHealingReason(reason)) return "self-healing";
   if (isOperatorConfigReason(reason)) return "operator-config";
+  if (isScheduledRestartReason(reason)) return "scheduled";
   return isProvisioningReloadReason(reason) ? "provisioning" : "crash";
 }
 function countByClass(events) {
@@ -7527,12 +7542,14 @@ function countByClass(events) {
   let credentialRotation = 0;
   let selfHealing = 0;
   let operatorConfig = 0;
+  let scheduled = 0;
   for (const e of events) {
     const klass = restartReasonClass(e.reason);
     if (klass === "provisioning") provisioning += 1;
     else if (klass === "credential-rotation") credentialRotation += 1;
     else if (klass === "self-healing") selfHealing += 1;
     else if (klass === "operator-config") operatorConfig += 1;
+    else if (klass === "scheduled") scheduled += 1;
     else crash += 1;
   }
   return {
@@ -7540,7 +7557,8 @@ function countByClass(events) {
     provisioning,
     "credential-rotation": credentialRotation,
     "self-healing": selfHealing,
-    "operator-config": operatorConfig
+    "operator-config": operatorConfig,
+    scheduled
   };
 }
 function maxProvisioningBucket(events) {
@@ -7570,6 +7588,8 @@ var DEFAULT_WINDOW_MS = 6e5;
 var DEFAULT_PROVISIONING_MAX = RESTART_BREAKER_PROVISIONING_MAX;
 var DEFAULT_PROVISIONING_WINDOW_MS = RESTART_BREAKER_PROVISIONING_WINDOW_MS;
 var DEFAULT_OPERATOR_MAX = RESTART_BREAKER_OPERATOR_MAX;
+var DEFAULT_SCHEDULED_MAX = RESTART_BREAKER_SCHEDULED_MAX;
+var DEFAULT_SCHEDULED_WINDOW_MS = RESTART_BREAKER_SCHEDULED_WINDOW_MS;
 function readEnvNumber(name, fallback) {
   const raw = process.env[name];
   if (!raw) return fallback;
@@ -7597,7 +7617,15 @@ var RestartBreaker = class {
    * env var without the other cannot invert the two tallies.
    */
   operatorMax;
-  /** Longest window either tally needs — how long the events log must retain. */
+  /**
+   * ENG-9138: the scheduled class's LOOP bar. Readonly and deliberately NOT
+   * floored against any other tally: it gates a REPORT, not a pause, so it
+   * cannot invert anything the way operatorMax/provisioningMax can.
+   */
+  scheduledMax;
+  /** ENG-9138: sliding window for the scheduled tally. */
+  scheduledWindowMs;
+  /** Longest window any tally needs — how long the events log must retain. */
   retentionMs;
   now;
   /** ENG-7891 slice 5b: code_name → durable runtime key (agent_id when id-keyed). Identity on the legacy fleet. */
@@ -7623,6 +7651,8 @@ var RestartBreaker = class {
     this.provisioningMax = opts.provisioningMax ?? readEnvNumber("AGT_RESTART_BREAKER_PROVISIONING_MAX", DEFAULT_PROVISIONING_MAX);
     this.provisioningWindowMs = opts.provisioningWindowMs ?? readEnvNumber("AGT_RESTART_BREAKER_PROVISIONING_WINDOW_MS", DEFAULT_PROVISIONING_WINDOW_MS);
     this.operatorMax = opts.operatorMax ?? readEnvNumber("AGT_RESTART_BREAKER_OPERATOR_MAX", DEFAULT_OPERATOR_MAX);
+    this.scheduledMax = opts.scheduledMax ?? readEnvNumber("AGT_RESTART_BREAKER_SCHEDULED_MAX", DEFAULT_SCHEDULED_MAX);
+    this.scheduledWindowMs = opts.scheduledWindowMs ?? readEnvNumber("AGT_RESTART_BREAKER_SCHEDULED_WINDOW_MS", DEFAULT_SCHEDULED_WINDOW_MS);
     this.now = opts.now ?? Date.now;
     this.runtimeKey = opts.runtimeKey ?? ((codeName) => codeName);
     this.agentCreatedAt = opts.agentCreatedAt ?? (() => void 0);
@@ -7664,7 +7694,7 @@ var RestartBreaker = class {
     if (this.newAgentGraceCeiling < minimumGraceCeiling) {
       this.newAgentGraceCeiling = minimumGraceCeiling;
     }
-    this.retentionMs = Math.max(this.windowMs, this.provisioningWindowMs);
+    this.retentionMs = Math.max(this.windowMs, this.provisioningWindowMs, this.scheduledWindowMs);
   }
   /**
    * ENG-8215: the clamp record, if the configured provisioning max had to be
@@ -7753,14 +7783,23 @@ var RestartBreaker = class {
     const operatorEvents = prior.filter(
       (e) => e.at >= at - this.provisioningWindowMs && isOperatorConfigReason(e.reason)
     );
+    const scheduledEvents = prior.filter(
+      (e) => e.at >= at - this.scheduledWindowMs && isScheduledRestartReason(e.reason)
+    );
     const windowCount = prior.filter((e) => e.at >= at - this.windowMs).length;
     const classCounts = {
       crash: crashCount,
       provisioning: provEvents.length,
       "credential-rotation": credRotCount,
       "self-healing": selfHealCount,
-      "operator-config": operatorEvents.length
+      "operator-config": operatorEvents.length,
+      scheduled: scheduledEvents.length
     };
+    const scheduledLoop = scheduledEvents.length > this.scheduledMax ? {
+      count: scheduledEvents.length,
+      windowMs: this.scheduledWindowMs,
+      reason: scheduledEvents[scheduledEvents.length - 1].reason
+    } : void 0;
     const provBucket = maxProvisioningBucket(provEvents);
     const operatorBucket = maxBucketWhere(operatorEvents, isOperatorConfigReason);
     const createdAt = this.newAgentGraceMs > 0 ? this.agentCreatedAt(codeName) : void 0;
@@ -7820,7 +7859,9 @@ var RestartBreaker = class {
         trippedClass,
         maxProvisioningBucket: provBucket.count,
         maxProvisioningBucketKey: provBucket.key,
-        ...graceCeilingExceeded ? { newAgentGraceCeilingExceeded: true } : {}
+        ...graceCeilingExceeded ? { newAgentGraceCeilingExceeded: true } : {},
+        // ENG-9138: a co-occurring rollover loop still reports on a real trip.
+        ...scheduledLoop ? { scheduledLoop } : {}
       };
     }
     const suppressedOperator = operatorBucket.count > this.operatorMax;
@@ -7832,6 +7873,7 @@ var RestartBreaker = class {
       classCounts,
       maxProvisioningBucket: provBucket.count,
       maxProvisioningBucketKey: provBucket.key,
+      ...scheduledLoop ? { scheduledLoop } : {},
       ...newAgentGraceActive ? {
         newAgentGraceSuppressedTrip: wouldHaveTripped,
         ...newAgentGraceExpiresAt !== void 0 ? { newAgentGraceExpiresAt } : {},
@@ -8300,6 +8342,17 @@ function resolveIntegrationServerKeys(definitionId, declaredKeys, hint) {
   for (const c of candidates) if (declared.has(c)) out.add(c);
   return [...out];
 }
+function hasDeliverySignal(integ) {
+  return DELIVERY_FIELDS.some((k) => Object.prototype.hasOwnProperty.call(integ, k));
+}
+var DELIVERY_FIELDS = [
+  "source_type",
+  "provider",
+  "mcp_command",
+  "mcp_url",
+  "cli_binary",
+  "cli_package"
+];
 function isDue(last, now, intervalMs) {
   if (!last) return true;
   const t = Date.parse(last);
@@ -8320,6 +8373,8 @@ async function runSessionToolBindProbes(integrations, options) {
   const reports = [];
   const rebindCandidates = [];
   let skipped = 0;
+  let notApplicable = 0;
+  const skippedDetail = [];
   let probed = 0;
   for (const integ of batch) {
     const keys = resolveIntegrationServerKeys(
@@ -8328,7 +8383,29 @@ async function runSessionToolBindProbes(integrations, options) {
       integ.mcp_server_key
     );
     if (keys.length === 0) {
+      if (!hasDeliverySignal(integ)) {
+        skipped += 1;
+        skippedDetail.push({ definition_id: integ.definition_id, reason: "delivery-unknown" });
+        continue;
+      }
+      if (!isSessionToolBindCandidate({
+        sourceType: integ.source_type,
+        provider: integ.provider,
+        mcpCommand: integ.mcp_command,
+        mcpUrl: integ.mcp_url,
+        cliBinary: integ.cli_binary,
+        cliPackage: integ.cli_package
+      })) {
+        notApplicable += 1;
+        reports.push({
+          integration_id: integ.id,
+          scope: integ.scope,
+          status: "not_applicable"
+        });
+        continue;
+      }
       skipped += 1;
+      skippedDetail.push({ definition_id: integ.definition_id, reason: "no-declared-server" });
       continue;
     }
     probed += 1;
@@ -8358,6 +8435,7 @@ async function runSessionToolBindProbes(integrations, options) {
     });
     if (status === "unknown") {
       skipped += 1;
+      skippedDetail.push({ definition_id: integ.definition_id, reason: "inconclusive" });
       continue;
     }
     reports.push({ integration_id: integ.id, scope: integ.scope, status });
@@ -8384,7 +8462,7 @@ async function runSessionToolBindProbes(integrations, options) {
       }
     }
   }
-  return { reports, rebindCandidates, due: due.length, probed, skipped };
+  return { reports, rebindCandidates, due: due.length, probed, skipped, skippedDetail, notApplicable };
 }
 
 // src/lib/connectivity-probe-context.ts
@@ -8651,35 +8729,58 @@ import { execFileSync as syncExecFile } from "child_process";
 import { readFileSync as readFileSync7 } from "fs";
 import { join as join6 } from "path";
 import { dirname as dirname4 } from "path";
+function deliveryFields(i) {
+  const keys = ["source_type", "provider", "mcp_command", "mcp_url", "cli_binary", "cli_package"];
+  const out = {};
+  for (const k of keys) {
+    if (Object.prototype.hasOwnProperty.call(i, k)) out[k] = i[k];
+  }
+  return out;
+}
 async function gatherSessionToolBindProbe(agent, integrations, projectDir, opts) {
   if (integrations.length === 0) return null;
-  let mcpJson = null;
+  let mcpRaw = null;
   try {
-    mcpJson = JSON.parse(readFileSync7(join6(projectDir, ".mcp.json"), "utf-8"));
+    mcpRaw = readFileSync7(join6(projectDir, ".mcp.json"), "utf-8");
   } catch {
-    return null;
+    mcpRaw = null;
   }
-  if (!mcpJson?.mcpServers || Object.keys(mcpJson.mcpServers).length === 0) return null;
+  let parsed = null;
+  if (mcpRaw !== null) {
+    try {
+      parsed = JSON.parse(mcpRaw);
+    } catch {
+      return null;
+    }
+  }
+  const declaredServers = parsed?.mcpServers && typeof parsed.mcpServers === "object" ? parsed.mcpServers : {};
+  const mcpJson = {
+    ...parsed ?? {},
+    mcpServers: declaredServers
+  };
+  const declaredServerCount = Object.keys(declaredServers).length;
   const isolated = isolationMode(agent.code_name) === "docker";
   const hasDeclaredStdio = Object.values(mcpJson.mcpServers).some(
     (entry) => typeof entry?.command === "string"
   );
   let missingStdioKeys = /* @__PURE__ */ new Set();
-  try {
-    const psOutput = isolated ? syncExecFile("docker", ["exec", `agt-${agent.code_name}`, "ps", "-eo", "pid,ppid,args"], {
-      encoding: "utf-8",
-      timeout: 8e3
-    }) : syncExecFile("ps", ["-eo", "pid,ppid,args"], { encoding: "utf-8", timeout: 5e3 });
-    missingStdioKeys = new Set(
-      findMissingMcpServers({
-        rows: parsePsRows(psOutput),
-        codeName: agent.code_name,
-        mcpJson,
-        inContainer: isolated
-      })
-    );
-  } catch {
-    if (hasDeclaredStdio) return null;
+  if (declaredServerCount > 0) {
+    try {
+      const psOutput = isolated ? syncExecFile("docker", ["exec", `agt-${agent.code_name}`, "ps", "-eo", "pid,ppid,args"], {
+        encoding: "utf-8",
+        timeout: 8e3
+      }) : syncExecFile("ps", ["-eo", "pid,ppid,args"], { encoding: "utf-8", timeout: 5e3 });
+      missingStdioKeys = new Set(
+        findMissingMcpServers({
+          rows: parsePsRows(psOutput),
+          codeName: agent.code_name,
+          mcpJson,
+          inContainer: isolated
+        })
+      );
+    } catch {
+      if (hasDeclaredStdio) return null;
+    }
   }
   const probeEnv = buildProbeEnv(projectDir, agent.agent_id);
   const probeDeps = buildConnectivityProbeDeps(projectDir, probeEnv);
@@ -8696,6 +8797,15 @@ async function gatherSessionToolBindProbe(agent, integrations, projectDir, opts)
       definition_id: i.definition_id,
       scope: i.scope,
       last_session_tool_bind_at: i.last_session_tool_bind_at ?? null,
+      // ENG-9114: forwarded by PRESENCE, not by value. `hasDeliverySignal` in
+      // the runner asks "did the API speak about delivery at all?", and spreading
+      // these unconditionally would have made it impossible to answer: a key
+      // written as `undefined` is still an own property, so an old API's omitted
+      // columns would have looked identical to a current API's explicit nulls.
+      // Both readings are needed and they mean opposite things - explicit null is
+      // a real answer (this toolkit sets no mcp_command), absence is no answer at
+      // all. Omitting the key here is what keeps them distinguishable. (CodeRabbit)
+      ...deliveryFields(i),
       // Server-key hint for managed/remote-MCP kinds; the runner also tries the
       // raw + sanitised definition_id against the real `.mcp.json` keys.
       mcp_server_key: deriveMcpServerKey({
@@ -9630,4 +9740,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-J6KQDGWM.js.map
+//# sourceMappingURL=chunk-3JBA6RYG.js.map