@integrity-labs/agt-cli 0.28.733 → 0.28.735

package/dist/{chunk-LT7UGH4O.js → chunk-AZZ7MLBE.js}

@@ -13,7 +13,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-7KT2QNXF.js";
+} from "./chunk-5CF4DRXA.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -6427,7 +6427,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.733" : "dev";
+var agtCliVersion = true ? "0.28.735" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10473,4 +10473,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-LT7UGH4O.js.map
+//# sourceMappingURL=chunk-AZZ7MLBE.js.map

package/dist/{claude-pair-runtime-K5OUT4QN.js → claude-pair-runtime-AWLXOAV6.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-H7CP2TUX.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-4KGDH66U.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-K5OUT4QN.js.map
+//# sourceMappingURL=claude-pair-runtime-AWLXOAV6.js.map

package/dist/lib/manager-worker.js

@@ -57,7 +57,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-LT7UGH4O.js";
+} from "../chunk-AZZ7MLBE.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -118,7 +118,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-7KT2QNXF.js";
+} from "../chunk-5CF4DRXA.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -5584,6 +5584,48 @@ var REFRESH_MANIFEST_FLAGS = {
   integration_skills_manifest: true
 };
 
+// src/lib/fetch-cadence.ts
+function createFetchGate(ttlMs) {
+  const lastFetchedAt = /* @__PURE__ */ new Map();
+  const forceCount = /* @__PURE__ */ new Map();
+  const consumedForceCount = /* @__PURE__ */ new Map();
+  let generation = 0;
+  const fetchedAtGeneration = /* @__PURE__ */ new Map();
+  const pendingForces = (key) => (forceCount.get(key) ?? 0) > (consumedForceCount.get(key) ?? 0);
+  return {
+    shouldFetch(key, now = Date.now()) {
+      if (pendingForces(key)) return true;
+      if ((fetchedAtGeneration.get(key) ?? -1) < generation) return true;
+      const last = lastFetchedAt.get(key);
+      if (last === void 0) return true;
+      return now - last >= ttlMs;
+    },
+    beginFetch(key) {
+      return { forceCount: forceCount.get(key) ?? 0, generation };
+    },
+    markFetched(key, token, now = Date.now()) {
+      lastFetchedAt.set(key, now);
+      fetchedAtGeneration.set(key, token.generation);
+      consumedForceCount.set(key, token.forceCount);
+    },
+    forceNext(key) {
+      forceCount.set(key, (forceCount.get(key) ?? 0) + 1);
+    },
+    forceAll() {
+      generation += 1;
+    },
+    forget(key) {
+      lastFetchedAt.delete(key);
+      fetchedAtGeneration.delete(key);
+      forceCount.delete(key);
+      consumedForceCount.delete(key);
+    },
+    size() {
+      return lastFetchedAt.size;
+    }
+  };
+}
+
 // src/lib/channel-hash-cache.ts
 import { existsSync as existsSync8, readFileSync as readFileSync19, writeFileSync as writeFileSync10 } from "fs";
 import { join as join25 } from "path";
@@ -9218,6 +9260,9 @@ function decideInboundAccess(input) {
   if (input.orgBoundary && !input.orgBoundary.forward) {
     return { kind: "drop", reason: "org_boundary" };
   }
+  if (input.chatType && !input.chatType.forward) {
+    return { kind: "drop", reason: "chat_type" };
+  }
   if (input.senderPolicy && !input.senderPolicy.forward) {
     const reason = input.senderPolicy.reason;
     const declineWorthy = input.sameOrg && reason !== "internal_only";
@@ -9993,6 +10038,11 @@ function parsePeerAgentModeEnv2(raw) {
   return "off";
 }
 
+// ../../packages/core/dist/channels/governance/telegram-chat-type.js
+function isTelegramPrivateChat(chatType) {
+  return chatType === "private";
+}
+
 // ../../packages/core/dist/channels/governance/telegram-sender-gate.js
 function evaluateTelegramInboundGate(evt, deps) {
   const isBot = Boolean(evt.from?.is_bot);
@@ -10029,6 +10079,10 @@ function evaluateTelegramInboundGate(evt, deps) {
     // TELEGRAM_ALLOWED_CHATS is Telegram's org-boundary axis. An unlisted chat is
     // external ⇒ silent drop.
     orgBoundary: deps.allowedChats.size > 0 && !deps.allowedChats.has(chatId) ? { forward: false } : { forward: true },
+    // CS-1628: the chat-kind axis. Only ever restricts - when the policy is off
+    // this is `{ forward: true }`, which the composer treats identically to the
+    // field being absent.
+    chatType: deps.privateChatsOnly && !isTelegramPrivateChat(evt.chat.type) ? { forward: false } : { forward: true },
     // No sender-policy mode system and no command dispatch on the injection gate.
     sameOrg: false
   });
@@ -12347,7 +12401,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-MPPDJSOL.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-HNUYLIFJ.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -12960,6 +13014,9 @@ function resolveAgentFramework(codeName) {
 function clearAgentCaches(agentId, codeName) {
   const channelCacheMutated = clearAgentState(agentId, codeName);
   agentChannelTokens.delete(codeName);
+  lastRefreshPayload.delete(agentId);
+  refreshFetchGate.forget(agentId);
+  memoriesFetchGate.forget(agentId);
   forgetRealtimeRebindState(agentId);
   forgetChannelSyncState(agentId);
   sharedBusyBuckets.reset(codeName);
@@ -12995,7 +13052,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.733" : "dev";
+var agtCliVersion = true ? "0.28.735" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14505,6 +14562,16 @@ ${SKILLS_INDEX_END}`;
     );
   }
 }
+var DESIRED_STATE_FETCH_TTL_MS = 6e4;
+var refreshFetchGate = createFetchGate(DESIRED_STATE_FETCH_TTL_MS);
+var lastRefreshPayload = /* @__PURE__ */ new Map();
+var memoriesFetchGate = createFetchGate(DESIRED_STATE_FETCH_TTL_MS);
+var pollCycleFetches = 0;
+var pollCycleFetchSkips = 0;
+function forceRefreshFetch() {
+  refreshFetchGate.forceAll();
+  memoriesFetchGate.forceAll();
+}
 var consecutivePollFailures = 0;
 function reorderRestartedFirst(agents, restartedIds) {
   if (restartedIds.size === 0) return agents;
@@ -14522,7 +14589,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-H7CP2TUX.js");
+      const { collectDiagnostics } = await import("../persistent-session-4KGDH66U.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -14663,7 +14730,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-H7CP2TUX.js");
+      const { collectDiagnostics } = await import("../persistent-session-4KGDH66U.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -14832,7 +14899,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-MPPDJSOL.js");
+      } = await import("../responsiveness-probe-HNUYLIFJ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -14942,7 +15009,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-MPPDJSOL.js");
+        } = await import("../responsiveness-probe-HNUYLIFJ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15258,6 +15325,9 @@ async function pollCycleInner() {
     const processOrder = fastRespawn ? reorderRestartedFirst(agents, new Set(restartAcks.keys())) : agents;
     const managedToolkits = createManagedToolkitReader(agents.map((a) => a.agent_id));
     managedPruneLedger = createManagedPruneLedger();
+    const cycleStartedAt = Date.now();
+    pollCycleFetches = 0;
+    pollCycleFetchSkips = 0;
     for (const agent of processOrder) {
       if (restartInFlight.has(agent.agent_id)) {
         const existing = state8.agents.find((a) => a.agentId === agent.agent_id);
@@ -15296,6 +15366,9 @@ async function pollCycleInner() {
         promptBindProbeAttempts.set(agent.code_name, PROMPT_BIND_PROBE_ATTEMPTS);
       }
     }
+    log(
+      `[poll-cycle] agents=${processOrder.length} refresh_fetched=${pollCycleFetches} refresh_skipped=${pollCycleFetchSkips} duration_ms=${Date.now() - cycleStartedAt}`
+    );
     void maybeReportActivityCache({ api, log });
     const crossAgentPrune = managedPruneLedger.summarize();
     if (crossAgentPrune) log(crossAgentPrune);
@@ -15814,6 +15887,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   if (previousStatus && previousStatus !== agent.status) {
     log(`Agent '${agent.code_name}' status changed: ${previousStatus} \u2192 ${agent.status}`);
     agentState.knownVersions.delete(agent.agent_id);
+    refreshFetchGate.forceNext(agent.agent_id);
     if (previousStatus === "paused" && agent.status === "active" && restartBreaker.isTripped(agent.code_name)) {
       restartBreaker.clear(agent.code_name);
       reportedTrips.delete(agent.code_name);
@@ -15853,85 +15927,95 @@ async function processAgent(agent, agentStates, managedToolkits) {
   }
   agentState.knownStatuses.set(agent.agent_id, agent.status);
   let refreshData;
-  try {
-    refreshData = await api.post("/host/refresh", {
-      agent_id: agent.agent_id,
-      // ENG-9585: ask for hashes instead of bodies on all three lanes. The
-      // rationale for each flag, and for their staying three flags rather than
-      // one, now lives with the constant — so that a new `/host/refresh` caller
-      // inherits it instead of having to rediscover it. The manifest is
-      // normalised back into `refreshData.knowledge` immediately below.
-      ...REFRESH_MANIFEST_FLAGS
-    });
-    if (refreshData.knowledge_manifest) {
-      const resolved = await resolveKnowledgeFromManifest({
-        manifest: refreshData.knowledge_manifest,
-        cacheDir: join40(config.configDir, "_knowledge"),
-        delivery: refreshData.agent?.knowledge_delivery ?? "both",
-        fetchContents: async (hashes) => {
-          const res = await api.post(
-            "/host/knowledge/contents",
-            { agent_id: agent.agent_id, hashes }
-          );
-          return res.contents ?? [];
-        },
-        log
-      });
-      refreshData.knowledge = resolved;
-    }
-    if (refreshData.global_skills_manifest || refreshData.shared_skills_manifest) {
-      const resolvedSkills = await resolveSkillsFromManifest({
-        globals: refreshData.global_skills_manifest ?? [],
-        shared: refreshData.shared_skills_manifest ?? [],
-        cacheDir: join40(config.configDir, "_skills"),
-        fetchContents: async (hashes) => {
-          const res = await api.post(
-            "/host/skills/contents",
-            { agent_id: agent.agent_id, hashes }
-          );
-          return res.contents ?? [];
-        },
-        log
-      });
-      if (resolvedSkills) {
-        refreshData.global_skills = resolvedSkills.globals;
-        refreshData.shared_skills = resolvedSkills.shared;
-      }
-    }
-    if (refreshData.integration_skills_manifest) {
-      const resolvedIntegrationSkills = await resolveIntegrationSkillsFromManifest({
-        manifest: refreshData.integration_skills_manifest,
-        cacheDir: join40(config.configDir, "_skills"),
-        fetchContents: async (hashes) => {
-          const res = await api.post(
-            "/host/skills/contents",
-            { agent_id: agent.agent_id, hashes }
-          );
-          return res.contents ?? [];
-        },
-        log
+  const cachedRefresh = lastRefreshPayload.get(agent.agent_id);
+  const refreshToken = refreshFetchGate.beginFetch(agent.agent_id);
+  if (cachedRefresh !== void 0 && !refreshFetchGate.shouldFetch(agent.agent_id)) {
+    refreshData = cachedRefresh;
+    pollCycleFetchSkips += 1;
+  } else {
+    try {
+      refreshData = await api.post("/host/refresh", {
+        agent_id: agent.agent_id,
+        // ENG-9585: ask for hashes instead of bodies on all three lanes. The
+        // rationale for each flag, and for their staying three flags rather than
+        // one, now lives with the constant — so that a new `/host/refresh` caller
+        // inherits it instead of having to rediscover it. The manifest is
+        // normalised back into `refreshData.knowledge` immediately below.
+        ...REFRESH_MANIFEST_FLAGS
       });
-      if (resolvedIntegrationSkills) {
-        refreshData.integration_skills = resolvedIntegrationSkills;
+      if (refreshData.knowledge_manifest) {
+        const resolved = await resolveKnowledgeFromManifest({
+          manifest: refreshData.knowledge_manifest,
+          cacheDir: join40(config.configDir, "_knowledge"),
+          delivery: refreshData.agent?.knowledge_delivery ?? "both",
+          fetchContents: async (hashes) => {
+            const res = await api.post(
+              "/host/knowledge/contents",
+              { agent_id: agent.agent_id, hashes }
+            );
+            return res.contents ?? [];
+          },
+          log
+        });
+        refreshData.knowledge = resolved;
+      }
+      if (refreshData.global_skills_manifest || refreshData.shared_skills_manifest) {
+        const resolvedSkills = await resolveSkillsFromManifest({
+          globals: refreshData.global_skills_manifest ?? [],
+          shared: refreshData.shared_skills_manifest ?? [],
+          cacheDir: join40(config.configDir, "_skills"),
+          fetchContents: async (hashes) => {
+            const res = await api.post(
+              "/host/skills/contents",
+              { agent_id: agent.agent_id, hashes }
+            );
+            return res.contents ?? [];
+          },
+          log
+        });
+        if (resolvedSkills) {
+          refreshData.global_skills = resolvedSkills.globals;
+          refreshData.shared_skills = resolvedSkills.shared;
+        }
       }
+      if (refreshData.integration_skills_manifest) {
+        const resolvedIntegrationSkills = await resolveIntegrationSkillsFromManifest({
+          manifest: refreshData.integration_skills_manifest,
+          cacheDir: join40(config.configDir, "_skills"),
+          fetchContents: async (hashes) => {
+            const res = await api.post(
+              "/host/skills/contents",
+              { agent_id: agent.agent_id, hashes }
+            );
+            return res.contents ?? [];
+          },
+          log
+        });
+        if (resolvedIntegrationSkills) {
+          refreshData.integration_skills = resolvedIntegrationSkills;
+        }
+      }
+    } catch (err) {
+      log(`Refresh failed for '${agent.code_name}': ${err.message}`);
+      const existing = state8.agents.find((a) => a.agentId === agent.agent_id);
+      agentStates.push(existing ?? {
+        agentId: agent.agent_id,
+        codeName: agent.code_name,
+        status: agent.status,
+        charterVersion: "",
+        toolsVersion: "",
+        secretsHash: null,
+        lastRefreshAt: null,
+        lastProvisionAt: null,
+        lastDriftCheckAt: null,
+        lastSecretsProvisionAt: null,
+        acpSessions: []
+      });
+      return;
     }
-  } catch (err) {
-    log(`Refresh failed for '${agent.code_name}': ${err.message}`);
-    const existing = state8.agents.find((a) => a.agentId === agent.agent_id);
-    agentStates.push(existing ?? {
-      agentId: agent.agent_id,
-      codeName: agent.code_name,
-      status: agent.status,
-      charterVersion: "",
-      toolsVersion: "",
-      secretsHash: null,
-      lastRefreshAt: null,
-      lastProvisionAt: null,
-      lastDriftCheckAt: null,
-      lastSecretsProvisionAt: null,
-      acpSessions: []
-    });
-    return;
+    lastRefreshPayload.set(agent.agent_id, refreshData);
+    refreshFetchGate.markFetched(agent.agent_id, refreshToken);
+    pollCycleFetches += 1;
   }
   if (!getAlertSlackWebhook() && refreshData.team?.settings) {
     const webhook = refreshData.team.settings["alert_slack_webhook"];
@@ -16801,8 +16885,8 @@ async function processAgent(agent, agentStates, managedToolkits) {
     for (const integration of integrations) {
       if (integration.auth_type !== "oauth2") continue;
       const expiresAt = integration.credentials?.token_expires_at;
-      const refreshToken = integration.credentials?.refresh_token;
-      if (!expiresAt || !refreshToken) continue;
+      const refreshToken2 = integration.credentials?.refresh_token;
+      if (!expiresAt || !refreshToken2) continue;
       const msRemaining = new Date(expiresAt).getTime() - Date.now();
       if (msRemaining > 10 * 60 * 1e3) continue;
       try {
@@ -17448,7 +17532,14 @@ async function processAgent(agent, agentStates, managedToolkits) {
   }
   const fetchTickBoard = createTickBoardFetcher(async () => {
     const boardData = await api.post("/host/my-kanban", {
-      agent_id: agent.agent_id
+      agent_id: agent.agent_id,
+      // ENG-9585: this is the ONLY caller that polls (every ~10s, per agent),
+      // and it reads exactly `BoardItem`. `description` and `notes` are 57.8%
+      // of the payload and are read here by nothing — but the `kanban_list` MCP
+      // tool and `agt kanban` DO read them, so the route cannot simply drop
+      // them. Asking for the lean shape is this caller saying what it needs;
+      // every other caller keeps the full payload by default.
+      detail: "board"
     });
     return (boardData.items ?? []).map(sanitizeBoardItem);
   });
@@ -18933,6 +19024,7 @@ function ensureRealtimeDriftStarted(agentStates) {
         const agent = agentStates.find((a) => a.agentId === doc.agent_id);
         if (agent) {
           agentState.knownVersions.delete(doc.agent_id);
+          refreshFetchGate.forceNext(doc.agent_id);
           log(`[realtime] Drift invalidated for '${agent.codeName}' \u2014 will re-provision next cycle`);
         }
       },
@@ -19009,7 +19101,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-H7CP2TUX.js");
+        const { collectDiagnostics } = await import("../persistent-session-4KGDH66U.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19055,7 +19147,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-H7CP2TUX.js");
+      const { collectDiagnostics } = await import("../persistent-session-4KGDH66U.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19096,6 +19188,8 @@ function ensureRealtimeAssignStarted(agentStates) {
         );
       },
       onAssign: (payload) => {
+        refreshFetchGate.forceNext(payload.agent_id);
+        memoriesFetchGate.forceNext(payload.agent_id);
         log(`[realtime] Agent ${payload.agent_id} assigned \u2014 will pick up next cycle`);
         markAgentForFreshMemorySync(payload.agent_id);
       },
@@ -19311,6 +19405,7 @@ function triggerEarlyPoll(reason) {
     pollTimer = null;
   }
   log(`[realtime] Triggering early poll: ${reason}`);
+  forceRefreshFetch();
   pollTimer = setTimeout(() => {
     void pollCycleAndReschedule(pollCycle, {
       onError: (err) => log(`[poll-loop] early-poll cycle rejected: ${err?.message ?? String(err)}`),
@@ -19687,7 +19782,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-K5OUT4QN.js");
+  } = await import("../claude-pair-runtime-AWLXOAV6.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -20191,10 +20286,15 @@ async function downloadMemories(agent, memoryDir, log2, { force, configDir }) {
   const localListHash = createHash19("sha256").update(localFiles.join(",")).digest("hex").slice(0, 16);
   const prevLocalHash = lastLocalFileHash.get(agent.agent_id);
   const prevDownload = lastDownloadHash.get(agent.agent_id);
+  const memoriesToken = memoriesFetchGate.beginFetch(agent.agent_id);
+  if (!force && !memoriesFetchGate.shouldFetch(agent.agent_id)) {
+    return { status: "deferred", tombstones: null, truncated: false };
+  }
   try {
     const dbMemories = await api.post("/host/memories", {
       agent_id: agent.agent_id
     });
+    memoriesFetchGate.markFetched(agent.agent_id, memoriesToken);
     const tombstones = Array.isArray(dbMemories.tombstones) ? dbMemories.tombstones : null;
     const responseHash = createHash19("sha256").update(JSON.stringify({ m: dbMemories.memories ?? [], t: tombstones })).digest("hex").slice(0, 16);
     if (!force && prevDownload && prevLocalHash === localListHash && lastDownloadHash.get(agent.agent_id) === responseHash) {