@integrity-labs/agt-cli 0.28.737 → 0.28.739

package/dist/{chunk-7LRKRRC5.js → chunk-ZKWY6MNV.js}

@@ -13,7 +13,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-MV3QBGO4.js";
+} from "./chunk-JDNULCLF.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -62,7 +62,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-WB2E236K.js";
+} from "./chunk-MAXKAS4Q.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6427,7 +6427,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.737" : "dev";
+var agtCliVersion = true ? "0.28.739" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10473,4 +10473,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-7LRKRRC5.js.map
+//# sourceMappingURL=chunk-ZKWY6MNV.js.map

package/dist/{claude-pair-runtime-57FICYWW.js → claude-pair-runtime-JUGH4TOW.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-NE6DCBFD.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-E7TUUVAI.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-57FICYWW.js.map
+//# sourceMappingURL=claude-pair-runtime-JUGH4TOW.js.map

package/dist/lib/manager-worker.js

@@ -57,7 +57,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-7LRKRRC5.js";
+} from "../chunk-ZKWY6MNV.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -118,7 +118,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-MV3QBGO4.js";
+} from "../chunk-JDNULCLF.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -203,7 +203,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-WB2E236K.js";
+} from "../chunk-MAXKAS4Q.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -5597,6 +5597,58 @@ function createTickBoardFetcher(fetchBoard) {
   };
 }
 
+// src/lib/kanban-board-token.ts
+var BoardTokenCache = class {
+  entries = /* @__PURE__ */ new Map();
+  /** The token to send as `known_token`, or undefined when we hold no board. */
+  tokenFor(agentId) {
+    return this.entries.get(agentId)?.token;
+  }
+  /**
+   * Resolve a response into rows.
+   *
+   * Returns `null` when the server said `unchanged` but we hold nothing for
+   * this agent — which should be impossible (we only send a token we have) but
+   * is reachable across a teardown/re-add race, and the caller must re-fetch
+   * rather than silently serve an empty board. An empty board is not a harmless
+   * default here: section 12 writes whatever it is handed into `notifyBoardCache`
+   * as this tick's truth, so seeding "nothing is done" over a board that has
+   * done cards makes the NEXT tick report every one of them as newly done — a
+   * burst of false completion notifications to real users.
+   */
+  resolve(agentId, res) {
+    if (res.unchanged === true) {
+      const held = this.entries.get(agentId);
+      if (!held) return null;
+      if (typeof res.board_token === "string" && res.board_token.length > 0) {
+        this.entries.set(agentId, { token: res.board_token, rows: held.rows });
+      }
+      return held.rows;
+    }
+    const rows = res.items ?? [];
+    if (typeof res.board_token === "string" && res.board_token.length > 0) {
+      this.entries.set(agentId, { token: res.board_token, rows });
+    } else {
+      this.entries.delete(agentId);
+    }
+    return rows;
+  }
+  /**
+   * Drop an agent's board. Teardown must call this: a board left behind is
+   * served to the agent if it is later RE-ADDED, which is exactly when its work
+   * is most likely to have moved on. Same argument as ENG-9585's
+   * `lastRefreshPayload` purge, and the same reason it is registered in
+   * `clearAgentCaches` rather than deleted ad hoc at each call site.
+   */
+  forget(agentId) {
+    this.entries.delete(agentId);
+  }
+  /** Test/diagnostic only. */
+  size() {
+    return this.entries.size;
+  }
+};
+
 // src/lib/refresh-manifest-flags.ts
 var REFRESH_MANIFEST_FLAGS = {
   /** Knowledge as slug + hash instead of inline bodies. */
@@ -5655,6 +5707,25 @@ function createFetchGate(ttlMs) {
   };
 }
 
+// src/lib/conditional-fetch.ts
+function stillHeld(quoted, live) {
+  if (!quoted || !live) return void 0;
+  return live.hash === quoted.hash ? live : void 0;
+}
+function resolveConditionalResponse(wire, hasCachedBody) {
+  if (wire.unchanged === true) {
+    return hasCachedBody ? { use: "cached" } : { use: "no-body" };
+  }
+  const token = wire.payload_hash;
+  return {
+    use: "wire",
+    // An empty string is rejected as well as a non-string: it would round-trip
+    // as a token the server can never match, so it is indistinguishable from
+    // absent and should be stored as absent rather than as a hash of "".
+    token: typeof token === "string" && token.length > 0 ? token : null
+  };
+}
+
 // src/lib/channel-hash-cache.ts
 import { existsSync as existsSync8, readFileSync as readFileSync19, writeFileSync as writeFileSync10 } from "fs";
 import { join as join25 } from "path";
@@ -12430,7 +12501,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-VN4OPV56.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-PXXWLOML.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13044,6 +13115,7 @@ function clearAgentCaches(agentId, codeName) {
   const channelCacheMutated = clearAgentState(agentId, codeName);
   agentChannelTokens.delete(codeName);
   lastRefreshPayload.delete(agentId);
+  boardTokenCache.forget(agentId);
   refreshFetchGate.forget(agentId);
   memoriesFetchGate.forget(agentId);
   forgetRealtimeRebindState(agentId);
@@ -13065,6 +13137,7 @@ function clearAgentCaches(agentId, codeName) {
   memoryFileHashes.delete(agentId);
   lastDownloadHash.delete(agentId);
   lastLocalFileHash.delete(agentId);
+  lastMemoriesBody.delete(agentId);
   for (const key of taskDisplayInfo.keys()) {
     if (key.startsWith(`${codeName}:`)) taskDisplayInfo.delete(key);
   }
@@ -13081,7 +13154,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.737" : "dev";
+var agtCliVersion = true ? "0.28.739" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14599,6 +14672,8 @@ var lastRefreshPayload = /* @__PURE__ */ new Map();
 var memoriesFetchGate = createFetchGate(DESIRED_STATE_FETCH_TTL_MS);
 var pollCycleFetches = 0;
 var pollCycleFetchSkips = 0;
+var pollCycleMemoriesUnchanged = 0;
+var pollCycleMemoriesFull = 0;
 function forceRefreshFetch() {
   refreshFetchGate.forceAll();
   memoriesFetchGate.forceAll();
@@ -14620,7 +14695,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-NE6DCBFD.js");
+      const { collectDiagnostics } = await import("../persistent-session-E7TUUVAI.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -14761,7 +14836,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-NE6DCBFD.js");
+      const { collectDiagnostics } = await import("../persistent-session-E7TUUVAI.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -14930,7 +15005,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-VN4OPV56.js");
+      } = await import("../responsiveness-probe-PXXWLOML.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15040,7 +15115,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-VN4OPV56.js");
+        } = await import("../responsiveness-probe-PXXWLOML.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15196,7 +15271,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-TI6JWW4G.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-HZZJK37X.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -15359,6 +15434,8 @@ async function pollCycleInner() {
     const cycleStartedAt = Date.now();
     pollCycleFetches = 0;
     pollCycleFetchSkips = 0;
+    pollCycleMemoriesUnchanged = 0;
+    pollCycleMemoriesFull = 0;
     for (const agent of processOrder) {
       if (restartInFlight.has(agent.agent_id)) {
         const existing = state8.agents.find((a) => a.agentId === agent.agent_id);
@@ -15398,7 +15475,7 @@ async function pollCycleInner() {
       }
     }
     log(
-      `[poll-cycle] agents=${processOrder.length} refresh_fetched=${pollCycleFetches} refresh_skipped=${pollCycleFetchSkips} duration_ms=${Date.now() - cycleStartedAt}`
+      `[poll-cycle] agents=${processOrder.length} refresh_fetched=${pollCycleFetches} refresh_skipped=${pollCycleFetchSkips} memories_unchanged=${pollCycleMemoriesUnchanged} memories_full=${pollCycleMemoriesFull} duration_ms=${Date.now() - cycleStartedAt}`
     );
     void maybeReportActivityCache({ api, log });
     const crossAgentPrune = managedPruneLedger.summarize();
@@ -17580,7 +17657,8 @@ async function processAgent(agent, agentStates, managedToolkits) {
     }
   }
   const fetchTickBoard = createTickBoardFetcher(async () => {
-    const boardData = await api.post("/host/my-kanban", {
+    const knownToken = boardTokenCache.tokenFor(agent.agent_id);
+    const post = (token) => api.post("/host/my-kanban", {
       agent_id: agent.agent_id,
       // ENG-9585: this is the ONLY caller that polls (every ~10s, per agent),
       // and it reads exactly `BoardItem`. `description` and `notes` are 57.8%
@@ -17588,9 +17666,14 @@ async function processAgent(agent, agentStates, managedToolkits) {
       // tool and `agt kanban` DO read them, so the route cannot simply drop
       // them. Asking for the lean shape is this caller saying what it needs;
       // every other caller keeps the full payload by default.
-      detail: "board"
+      detail: "board",
+      ...token ? { known_token: token } : {}
     });
-    return (boardData.items ?? []).map(sanitizeBoardItem);
+    let rows = boardTokenCache.resolve(agent.agent_id, await post(knownToken));
+    if (rows === null) {
+      rows = boardTokenCache.resolve(agent.agent_id, await post(void 0)) ?? [];
+    }
+    return rows.map(sanitizeBoardItem);
   });
   let boardItems = [];
   let boardItemsStale = false;
@@ -19150,7 +19233,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-NE6DCBFD.js");
+        const { collectDiagnostics } = await import("../persistent-session-E7TUUVAI.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19196,7 +19279,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-NE6DCBFD.js");
+      const { collectDiagnostics } = await import("../persistent-session-E7TUUVAI.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19813,6 +19896,7 @@ async function maybeInjectKanbanCheck(codeName, agentId, actionableCount, signat
 var lastHarvestAt = /* @__PURE__ */ new Map();
 var HARVEST_INTERVAL_MS = 3 * 60 * 1e3;
 var kanbanBoardCache = /* @__PURE__ */ new Map();
+var boardTokenCache = new BoardTokenCache();
 var notifyBoardCache = /* @__PURE__ */ new Map();
 var notifiedWaitingHumanIds = /* @__PURE__ */ new Map();
 var spawnedPairIds = /* @__PURE__ */ new Set();
@@ -19831,7 +19915,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-57FICYWW.js");
+  } = await import("../claude-pair-runtime-JUGH4TOW.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -20054,6 +20138,7 @@ function generateArtifacts(agent, refreshData, adapter, renderIntegrationsSectio
 var memoryFileHashes = /* @__PURE__ */ new Map();
 var lastDownloadHash = /* @__PURE__ */ new Map();
 var lastLocalFileHash = /* @__PURE__ */ new Map();
+var lastMemoriesBody = /* @__PURE__ */ new Map();
 var memoryManifests = /* @__PURE__ */ new Map();
 function memoryRetirementDir(configDir, codeName) {
   return join40(configDir, "_memory-retirement", codeName);
@@ -20122,6 +20207,7 @@ function markAgentForFreshMemorySync(agentId) {
   memoryFileHashes.delete(agentId);
   lastDownloadHash.delete(agentId);
   lastLocalFileHash.delete(agentId);
+  lastMemoriesBody.delete(agentId);
 }
 function parseMemoryFile(raw, fallbackName) {
   const trimmed = raw.trim();
@@ -20340,10 +20426,37 @@ async function downloadMemories(agent, memoryDir, log2, { force, configDir }) {
     return { status: "deferred", tombstones: null, truncated: false };
   }
   try {
-    const dbMemories = await api.post("/host/memories", {
-      agent_id: agent.agent_id
+    const quoted = lastMemoriesBody.get(agent.agent_id);
+    let wire = await api.post("/host/memories", {
+      agent_id: agent.agent_id,
+      ...quoted ? { known_hash: quoted.hash } : {}
     });
     memoriesFetchGate.markFetched(agent.agent_id, memoriesToken);
+    let held = stillHeld(quoted, lastMemoriesBody.get(agent.agent_id));
+    if (resolveConditionalResponse(wire, held !== void 0).use === "no-body") {
+      log2(
+        `Memory download for '${agent.code_name}': unchanged marker with no cached body (cache purged mid-flight?) \u2014 re-fetching in full`
+      );
+      wire = await api.post("/host/memories", { agent_id: agent.agent_id });
+      held = void 0;
+    }
+    let dbMemories;
+    const decision = resolveConditionalResponse(wire, held !== void 0);
+    if (decision.use === "cached") {
+      dbMemories = held.body;
+      pollCycleMemoriesUnchanged += 1;
+    } else if (decision.use === "no-body") {
+      log2(`Memory download for '${agent.code_name}': server sent 'unchanged' for an untokened request`);
+      return { status: "failed", tombstones: null, truncated: false };
+    } else {
+      dbMemories = wire;
+      if (decision.token) {
+        lastMemoriesBody.set(agent.agent_id, { hash: decision.token, body: dbMemories });
+      } else {
+        lastMemoriesBody.delete(agent.agent_id);
+      }
+      pollCycleMemoriesFull += 1;
+    }
     const tombstones = Array.isArray(dbMemories.tombstones) ? dbMemories.tombstones : null;
     const responseHash = createHash19("sha256").update(JSON.stringify({ m: dbMemories.memories ?? [], t: tombstones })).digest("hex").slice(0, 16);
     if (!force && prevDownload && prevLocalHash === localListHash && lastDownloadHash.get(agent.agent_id) === responseHash) {