@integrity-labs/agt-cli 0.28.736 → 0.28.738

package/dist/{chunk-F5UORP7D.js → chunk-WTAZ5GOS.js}

@@ -13,7 +13,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-6J6G4HOG.js";
+} from "./chunk-JDNULCLF.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -62,7 +62,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-IBBBIE4K.js";
+} from "./chunk-MAXKAS4Q.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6427,7 +6427,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.736" : "dev";
+var agtCliVersion = true ? "0.28.738" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10473,4 +10473,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-F5UORP7D.js.map
+//# sourceMappingURL=chunk-WTAZ5GOS.js.map

package/dist/{claude-pair-runtime-R2F4HRID.js → claude-pair-runtime-JUGH4TOW.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-GJMGXFF2.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-E7TUUVAI.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-R2F4HRID.js.map
+//# sourceMappingURL=claude-pair-runtime-JUGH4TOW.js.map

package/dist/lib/manager-worker.js

@@ -57,7 +57,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-F5UORP7D.js";
+} from "../chunk-WTAZ5GOS.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -118,7 +118,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-6J6G4HOG.js";
+} from "../chunk-JDNULCLF.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -203,7 +203,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-IBBBIE4K.js";
+} from "../chunk-MAXKAS4Q.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -655,6 +655,35 @@ function resolveChannelLaunchFlags(channelConfigs, quarantinedChannels) {
   return { devChannels, pluginChannels };
 }
 
+// src/lib/channel-sync-precondition.ts
+var CHANNEL_BACKING_INTEGRATION = Object.freeze({
+  slack: "slack",
+  telegram: "telegram",
+  msteams: "msteams",
+  whatsapp: "whatsapp",
+  discord: "discord"
+});
+function createEffectiveIntegrationObservations() {
+  return /* @__PURE__ */ new Map();
+}
+function recordEffectiveIntegrationIds(observations, agentId, definitionIds) {
+  observations.set(agentId, new Set(definitionIds));
+}
+function forgetEffectiveIntegrations(observations, agentId) {
+  observations.delete(agentId);
+}
+function checkChannelIntegrationPrecondition(observations, agentId, channelId) {
+  const definitionId = Object.prototype.hasOwnProperty.call(CHANNEL_BACKING_INTEGRATION, channelId) ? CHANNEL_BACKING_INTEGRATION[channelId] : void 0;
+  if (!definitionId) return { status: "unknown" };
+  const observed = observations.get(agentId);
+  if (!observed) return { status: "unknown" };
+  if (observed.has(definitionId)) return { status: "ok" };
+  return { status: "integration-missing", definitionId };
+}
+function channelIntegrationMissingReason(channelId, definitionId) {
+  return `the '${definitionId}' integration is not installed on this agent in any scope, so ${channelId} credentials cannot converge \u2014 not retrying until it is installed (ENG-9652)`;
+}
+
 // src/lib/sender-policy-restart-decision.ts
 function decideSenderPolicyRestart(input) {
   const {
@@ -5568,6 +5597,58 @@ function createTickBoardFetcher(fetchBoard) {
   };
 }
 
+// src/lib/kanban-board-token.ts
+var BoardTokenCache = class {
+  entries = /* @__PURE__ */ new Map();
+  /** The token to send as `known_token`, or undefined when we hold no board. */
+  tokenFor(agentId) {
+    return this.entries.get(agentId)?.token;
+  }
+  /**
+   * Resolve a response into rows.
+   *
+   * Returns `null` when the server said `unchanged` but we hold nothing for
+   * this agent — which should be impossible (we only send a token we have) but
+   * is reachable across a teardown/re-add race, and the caller must re-fetch
+   * rather than silently serve an empty board. An empty board is not a harmless
+   * default here: section 12 writes whatever it is handed into `notifyBoardCache`
+   * as this tick's truth, so seeding "nothing is done" over a board that has
+   * done cards makes the NEXT tick report every one of them as newly done — a
+   * burst of false completion notifications to real users.
+   */
+  resolve(agentId, res) {
+    if (res.unchanged === true) {
+      const held = this.entries.get(agentId);
+      if (!held) return null;
+      if (typeof res.board_token === "string" && res.board_token.length > 0) {
+        this.entries.set(agentId, { token: res.board_token, rows: held.rows });
+      }
+      return held.rows;
+    }
+    const rows = res.items ?? [];
+    if (typeof res.board_token === "string" && res.board_token.length > 0) {
+      this.entries.set(agentId, { token: res.board_token, rows });
+    } else {
+      this.entries.delete(agentId);
+    }
+    return rows;
+  }
+  /**
+   * Drop an agent's board. Teardown must call this: a board left behind is
+   * served to the agent if it is later RE-ADDED, which is exactly when its work
+   * is most likely to have moved on. Same argument as ENG-9585's
+   * `lastRefreshPayload` purge, and the same reason it is registered in
+   * `clearAgentCaches` rather than deleted ad hoc at each call site.
+   */
+  forget(agentId) {
+    this.entries.delete(agentId);
+  }
+  /** Test/diagnostic only. */
+  size() {
+    return this.entries.size;
+  }
+};
+
 // src/lib/refresh-manifest-flags.ts
 var REFRESH_MANIFEST_FLAGS = {
   /** Knowledge as slug + hash instead of inline bodies. */
@@ -12401,7 +12482,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-34ECZDWQ.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-PXXWLOML.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13015,6 +13096,7 @@ function clearAgentCaches(agentId, codeName) {
   const channelCacheMutated = clearAgentState(agentId, codeName);
   agentChannelTokens.delete(codeName);
   lastRefreshPayload.delete(agentId);
+  boardTokenCache.forget(agentId);
   refreshFetchGate.forget(agentId);
   memoriesFetchGate.forget(agentId);
   forgetRealtimeRebindState(agentId);
@@ -13052,7 +13134,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.736" : "dev";
+var agtCliVersion = true ? "0.28.738" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14218,6 +14300,7 @@ function saveChannelHashCache2() {
 var channelWriteFailureCounts = /* @__PURE__ */ new Map();
 var CHANNEL_WRITE_FAILURE_ESCALATE_EVERY = 90;
 var channelSyncFailures = /* @__PURE__ */ new Map();
+var effectiveIntegrationObservations = createEffectiveIntegrationObservations();
 var channelSyncAttemptedSets = /* @__PURE__ */ new Map();
 var channelCredentialVerdicts = /* @__PURE__ */ new Map();
 function sameChannelSet(a, b) {
@@ -14230,6 +14313,7 @@ function forgetChannelSyncState(agentId) {
   channelSyncFailures.delete(agentId);
   channelSyncAttemptedSets.delete(agentId);
   channelCredentialVerdicts.delete(agentId);
+  forgetEffectiveIntegrations(effectiveIntegrationObservations, agentId);
 }
 var CHANNEL_SYNC_FREE_ATTEMPTS = 3;
 var CHANNEL_SYNC_MAX_BACKOFF_MS = 5 * 6e4;
@@ -14589,7 +14673,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-GJMGXFF2.js");
+      const { collectDiagnostics } = await import("../persistent-session-E7TUUVAI.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -14730,7 +14814,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-GJMGXFF2.js");
+      const { collectDiagnostics } = await import("../persistent-session-E7TUUVAI.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -14899,7 +14983,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-34ECZDWQ.js");
+      } = await import("../responsiveness-probe-PXXWLOML.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15009,7 +15093,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-34ECZDWQ.js");
+        } = await import("../responsiveness-probe-PXXWLOML.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15165,7 +15249,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-TK3KNAH4.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-HZZJK37X.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -16448,6 +16532,19 @@ async function processAgent(agent, agentStates, managedToolkits) {
                 );
               }
             }
+            const precondition = checkChannelIntegrationPrecondition(
+              effectiveIntegrationObservations,
+              agent.agent_id,
+              channelId
+            );
+            if (precondition.status === "integration-missing") {
+              channelConfigConverged = false;
+              channelConfigFailureReason = channelIntegrationMissingReason(
+                channelId,
+                precondition.definitionId
+              );
+              continue;
+            }
             frameworkAdapter.writeChannelCredentials(
               agent.code_name,
               channelId,
@@ -16878,6 +16975,11 @@ async function processAgent(agent, agentStates, managedToolkits) {
   try {
     const integrationsData = await api.post("/host/agent-integrations", { agent_id: agent.agent_id });
     const integrations = (integrationsData.integrations ?? []).map(withResolvedRemoteMcp);
+    recordEffectiveIntegrationIds(
+      effectiveIntegrationObservations,
+      agent.agent_id,
+      integrations.map((i) => i.definition_id)
+    );
     firstConnectUnsettledByAgent.set(
       agent.code_name,
       computeFirstConnectUnsettled(integrations, Date.now(), BIND_REMEDIATION_FIRST_CONNECT_WINDOW_MS)
@@ -17531,7 +17633,8 @@ async function processAgent(agent, agentStates, managedToolkits) {
     }
   }
   const fetchTickBoard = createTickBoardFetcher(async () => {
-    const boardData = await api.post("/host/my-kanban", {
+    const knownToken = boardTokenCache.tokenFor(agent.agent_id);
+    const post = (token) => api.post("/host/my-kanban", {
       agent_id: agent.agent_id,
       // ENG-9585: this is the ONLY caller that polls (every ~10s, per agent),
       // and it reads exactly `BoardItem`. `description` and `notes` are 57.8%
@@ -17539,9 +17642,14 @@ async function processAgent(agent, agentStates, managedToolkits) {
       // tool and `agt kanban` DO read them, so the route cannot simply drop
       // them. Asking for the lean shape is this caller saying what it needs;
       // every other caller keeps the full payload by default.
-      detail: "board"
+      detail: "board",
+      ...token ? { known_token: token } : {}
     });
-    return (boardData.items ?? []).map(sanitizeBoardItem);
+    let rows = boardTokenCache.resolve(agent.agent_id, await post(knownToken));
+    if (rows === null) {
+      rows = boardTokenCache.resolve(agent.agent_id, await post(void 0)) ?? [];
+    }
+    return rows.map(sanitizeBoardItem);
   });
   let boardItems = [];
   let boardItemsStale = false;
@@ -19101,7 +19209,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-GJMGXFF2.js");
+        const { collectDiagnostics } = await import("../persistent-session-E7TUUVAI.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19147,7 +19255,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-GJMGXFF2.js");
+      const { collectDiagnostics } = await import("../persistent-session-E7TUUVAI.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19764,6 +19872,7 @@ async function maybeInjectKanbanCheck(codeName, agentId, actionableCount, signat
 var lastHarvestAt = /* @__PURE__ */ new Map();
 var HARVEST_INTERVAL_MS = 3 * 60 * 1e3;
 var kanbanBoardCache = /* @__PURE__ */ new Map();
+var boardTokenCache = new BoardTokenCache();
 var notifyBoardCache = /* @__PURE__ */ new Map();
 var notifiedWaitingHumanIds = /* @__PURE__ */ new Map();
 var spawnedPairIds = /* @__PURE__ */ new Set();
@@ -19782,7 +19891,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-R2F4HRID.js");
+  } = await import("../claude-pair-runtime-JUGH4TOW.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));