@integrity-labs/agt-cli 0.28.728 → 0.28.730

package/dist/{claude-pair-runtime-42GBPDC7.js → claude-pair-runtime-BHULWRDO.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-LP7JOGZ5.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-KHGH6UKC.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-42GBPDC7.js.map
+//# sourceMappingURL=claude-pair-runtime-BHULWRDO.js.map

package/dist/lib/manager-worker.js

@@ -57,7 +57,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-O24LSFRJ.js";
+} from "../chunk-3V7HETFZ.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -118,7 +118,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-ZCTFF4PA.js";
+} from "../chunk-KF3IFJVV.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -203,7 +203,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-IXGIGDJG.js";
+} from "../chunk-WVYNQJRS.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -281,6 +281,49 @@ function createSingleFlight(task, opts = {}) {
   };
 }
 
+// src/lib/poll-rate-limiter.ts
+var DEFAULT_POLL_INTERVAL_MS = 1e4;
+var DEFAULT_POLL_BURST = 3;
+function positiveOr(value, fallback) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : fallback;
+}
+function createPollRateLimiter(opts) {
+  const intervalMs = positiveOr(opts.intervalMs, 1e4);
+  const burst = Math.max(1, positiveOr(opts.burst, DEFAULT_POLL_BURST));
+  const now = opts.now ?? (() => performance.now());
+  let tokens = burst;
+  let lastRefillAt = now();
+  let consecutiveThrottled = 0;
+  let totalThrottled = 0;
+  function refill(at) {
+    if (at < lastRefillAt) {
+      tokens = 0;
+      lastRefillAt = at;
+      return;
+    }
+    const elapsed = at - lastRefillAt;
+    lastRefillAt = at;
+    tokens = Math.min(burst, tokens + elapsed / intervalMs);
+  }
+  function tryAcquire() {
+    const at = now();
+    refill(at);
+    if (tokens >= 1) {
+      tokens -= 1;
+      consecutiveThrottled = 0;
+      return { allowed: true, verdict: "allowed", consecutiveThrottled: 0, totalThrottled };
+    }
+    consecutiveThrottled += 1;
+    totalThrottled += 1;
+    return { allowed: false, verdict: "throttled", consecutiveThrottled, totalThrottled };
+  }
+  return {
+    tryAcquire,
+    totalThrottled: () => totalThrottled,
+    tokens: () => tokens
+  };
+}
+
 // src/lib/claude-code-upgrade-throttle.ts
 import { mkdirSync, readFileSync, writeFileSync } from "fs";
 import { dirname as dirname2, join as join2 } from "path";
@@ -5525,6 +5568,22 @@ function createTickBoardFetcher(fetchBoard) {
   };
 }
 
+// src/lib/refresh-manifest-flags.ts
+var REFRESH_MANIFEST_FLAGS = {
+  /** Knowledge as slug + hash instead of inline bodies. */
+  knowledge_manifest: true,
+  /** Global + shared ROOT skills as metadata + hash. */
+  skills_manifest: true,
+  /**
+   * Integration CHILD skills as metadata + hash. Deliberately not folded into
+   * `skills_manifest`: a manager that claimed the family but could not decode
+   * this lane would read it as empty, and an empty integration-skill list is
+   * what the orphan sweep treats as "every integration was uninstalled" — it
+   * deletes the folders off disk. The flag has to name the exact capability.
+   */
+  integration_skills_manifest: true
+};
+
 // src/lib/channel-hash-cache.ts
 import { existsSync as existsSync8, readFileSync as readFileSync19, writeFileSync as writeFileSync10 } from "fs";
 import { join as join25 } from "path";
@@ -12288,7 +12347,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-TTHNHBBS.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-ASAPVDUQ.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -12936,7 +12995,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.728" : "dev";
+var agtCliVersion = true ? "0.28.730" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14463,7 +14522,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-LP7JOGZ5.js");
+      const { collectDiagnostics } = await import("../persistent-session-KHGH6UKC.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -14478,7 +14537,30 @@ var pollCycleGuard = createSingleFlight(() => pollCycleInner(), {
     log(`[poll-cycle] coalesced an early-poll trigger into the in-flight cycle (total=${total})`);
   }
 });
+var pollRateLimiter = null;
+var pollRateLimiterIntervalMs = 0;
+function getPollRateLimiter() {
+  const intervalMs = config?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  if (!pollRateLimiter || pollRateLimiterIntervalMs !== intervalMs) {
+    pollRateLimiter = createPollRateLimiter({ intervalMs });
+    pollRateLimiterIntervalMs = intervalMs;
+  }
+  return pollRateLimiter;
+}
+var lastPollThrottleLogAt = 0;
+var POLL_THROTTLE_LOG_INTERVAL_MS = 6e4;
 function pollCycle() {
+  const decision = getPollRateLimiter().tryAcquire();
+  if (!decision.allowed) {
+    const at = performance.now();
+    if (decision.consecutiveThrottled === 1 || at - lastPollThrottleLogAt >= POLL_THROTTLE_LOG_INTERVAL_MS) {
+      lastPollThrottleLogAt = at;
+      log(
+        `[poll-rate] throttled a poll pass (consecutive=${decision.consecutiveThrottled}, total=${decision.totalThrottled}, ceiling=1 per ${pollRateLimiterIntervalMs}ms) \u2014 more callers are asking to poll than the configured cadence allows`
+      );
+    }
+    return Promise.resolve({ coalesced: false });
+  }
   return pollCycleGuard.run();
 }
 async function pollCycleInner() {
@@ -14581,7 +14663,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-LP7JOGZ5.js");
+      const { collectDiagnostics } = await import("../persistent-session-KHGH6UKC.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -14750,7 +14832,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-TTHNHBBS.js");
+      } = await import("../responsiveness-probe-ASAPVDUQ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -14860,7 +14942,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-TTHNHBBS.js");
+        } = await import("../responsiveness-probe-ASAPVDUQ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15016,7 +15098,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-YQHE3WKV.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-ABEYQHK3.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -15774,20 +15856,12 @@ async function processAgent(agent, agentStates, managedToolkits) {
   try {
     refreshData = await api.post("/host/refresh", {
       agent_id: agent.agent_id,
-      // ENG-9585: ask for hashes instead of knowledge bodies. An API build that
-      // predates the manifest ignores this and answers with `knowledge` as
-      // before, which the resolution below handles without a version check.
-      knowledge_manifest: true,
-      // ENG-9585: the same for the two root-skill lanes. A separate flag
-      // because the two shipped in different CLI versions — an API that
-      // understands one and not the other must still be able to answer.
-      skills_manifest: true,
-      // ENG-9585: and the integration lane, a third flag for the same reason
-      // one level sharper. A manager that sent `skills_manifest` but could not
-      // decode THIS manifest would read the lane as empty and sweep every
-      // integration skill folder off disk, so the flag has to name the exact
-      // capability rather than the family.
-      integration_skills_manifest: true
+      // ENG-9585: ask for hashes instead of bodies on all three lanes. The
+      // rationale for each flag, and for their staying three flags rather than
+      // one, now lives with the constant — so that a new `/host/refresh` caller
+      // inherits it instead of having to rediscover it. The manifest is
+      // normalised back into `refreshData.knowledge` immediately below.
+      ...REFRESH_MANIFEST_FLAGS
     });
     if (refreshData.knowledge_manifest) {
       const resolved = await resolveKnowledgeFromManifest({
@@ -17113,12 +17187,10 @@ async function processAgent(agent, agentStates, managedToolkits) {
       }
       const freshData = await api.post("/host/refresh", {
         agent_id: agent.agent_id,
-        knowledge_manifest: true,
         // Only `scheduled_tasks` is read here, so ask for the manifest shape on
         // every lane — nothing in this branch consumes a skill body, and the
         // skill lanes are the largest part of the payload being discarded.
-        skills_manifest: true,
-        integration_skills_manifest: true
+        ...REFRESH_MANIFEST_FLAGS
       });
       tasks = freshData.scheduled_tasks ?? tasks;
     }
@@ -18879,6 +18951,17 @@ function restartReasonNeedsRender(reason) {
 function restartReasonStampsTiming(reason) {
   return reason === "integration-change";
 }
+async function fetchSpawnRefreshData(agentId, codeName, lane) {
+  try {
+    return await api.post("/host/refresh", {
+      agent_id: agentId,
+      ...REFRESH_MANIFEST_FLAGS
+    });
+  } catch (err) {
+    log(`[${lane}] refresh failed for '${codeName}', leaving for slow poll: ${err.message}`);
+    return null;
+  }
+}
 async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
   const prev = state8.agents.find((a) => a.agentId === agentId);
   const codeName = prev?.codeName;
@@ -18898,13 +18981,8 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
   try {
     log(`[restart-lane] Fast restart for '${codeName}' at ${requestedAt}`);
     const hostId = await getHostId();
-    let refreshData;
-    try {
-      refreshData = await api.post("/host/refresh", { agent_id: agentId });
-    } catch (err) {
-      log(`[restart-lane] refresh failed for '${codeName}', leaving for slow poll: ${err.message}`);
-      return;
-    }
+    const refreshData = await fetchSpawnRefreshData(agentId, codeName, "restart-lane");
+    if (!refreshData) return;
     const displayName = refreshData.agent?.display_name ?? codeName;
     const framework = refreshData.agent?.framework ?? agentFrameworkCache.get(codeName) ?? DEFAULT_FRAMEWORK;
     if (restartTargetsOpencodeServe(framework)) {
@@ -18931,7 +19009,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-LP7JOGZ5.js");
+        const { collectDiagnostics } = await import("../persistent-session-KHGH6UKC.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -18959,13 +19037,8 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
   restartInFlight.add(agentId);
   try {
     if (isSessionHealthy(codeName)) return;
-    let refreshData;
-    try {
-      refreshData = await api.post("/host/refresh", { agent_id: agentId });
-    } catch (err) {
-      log(`[fast-mcp-respawn] refresh failed for '${codeName}', leaving for slow poll: ${err.message}`);
-      return;
-    }
+    const refreshData = await fetchSpawnRefreshData(agentId, codeName, "fast-mcp-respawn");
+    if (!refreshData) return;
     const displayName = refreshData.agent?.display_name ?? codeName;
     const result = await ensurePersistentSession(
       { agent_id: agentId, code_name: codeName, display_name: displayName },
@@ -18982,7 +19055,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-LP7JOGZ5.js");
+      const { collectDiagnostics } = await import("../persistent-session-KHGH6UKC.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19614,7 +19687,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-42GBPDC7.js");
+  } = await import("../claude-pair-runtime-BHULWRDO.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));