@integrity-labs/agt-cli 0.28.757 → 0.28.759

package/dist/{chunk-43TIELP4.js → chunk-YAONHJW6.js}

@@ -13,7 +13,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-JB2LZVNB.js";
+} from "./chunk-4GGLPSVH.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -63,7 +63,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-45KFVLO4.js";
+} from "./chunk-SD2Y6ZOB.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6436,7 +6436,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.757" : "dev";
+var agtCliVersion = true ? "0.28.759" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10593,4 +10593,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-43TIELP4.js.map
+//# sourceMappingURL=chunk-YAONHJW6.js.map

package/dist/{claude-pair-runtime-MQMZT4AM.js → claude-pair-runtime-I6Q7M7KZ.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-UVO7INXO.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-IUGL5OEF.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-MQMZT4AM.js.map
+//# sourceMappingURL=claude-pair-runtime-I6Q7M7KZ.js.map

package/dist/lib/manager-worker.js

@@ -58,7 +58,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-43TIELP4.js";
+} from "../chunk-YAONHJW6.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -119,7 +119,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-JB2LZVNB.js";
+} from "../chunk-4GGLPSVH.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -208,7 +208,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-45KFVLO4.js";
+} from "../chunk-SD2Y6ZOB.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -393,6 +393,7 @@ function decideManagedMcpRestart(input) {
   const { prevStructureHash, structureHash, launchStructureHash, sessionHealthy, flapping } = input;
   if (prevStructureHash === void 0) return { kind: "skip-first-convergence" };
   if (structureHash === prevStructureHash) return { kind: "skip-no-change" };
+  if (input.deferringPrune === true) return { kind: "skip-prune-deferred" };
   if (!sessionHealthy) return { kind: "skip-unhealthy" };
   if (flapping) return { kind: "skip-flapping" };
   if (launchStructureHash != null && launchStructureHash === structureHash) {
@@ -6451,6 +6452,75 @@ function withScheduleLinkFooter(opts) {
   return appendScheduleLinkFooter(opts.body, url, opts.medium);
 }
 
+// src/lib/manager/managed-prune-streak.ts
+var DEFAULT_PRUNE_CONFIRM_CYCLES = 5;
+function pruneConfirmCycles(env = process.env) {
+  const raw = env["AUGMENTED_MANAGED_PRUNE_CONFIRM_CYCLES"];
+  if (raw === void 0) return DEFAULT_PRUNE_CONFIRM_CYCLES;
+  const trimmed = raw.trim();
+  if (!/^\d+$/.test(trimmed)) return DEFAULT_PRUNE_CONFIRM_CYCLES;
+  const n = Number(trimmed);
+  if (!Number.isSafeInteger(n) || n < 1) return DEFAULT_PRUNE_CONFIRM_CYCLES;
+  return n;
+}
+var ManagedPruneStreaks = class {
+  constructor(threshold = DEFAULT_PRUNE_CONFIRM_CYCLES) {
+    this.threshold = threshold;
+  }
+  streaks = /* @__PURE__ */ new Map();
+  /**
+   * Record one poll cycle for one agent.
+   *
+   * MUST BE CALLED ON EVERY CYCLE, including cycles where nothing changed —
+   * see the trap above. `declaredManagedKeys` is what the agent's config
+   * currently declares; `expectedKeys` is what the API says it should have.
+   *
+   * A key present in `expectedKeys` has its streak cleared IMMEDIATELY, which is
+   * what makes a toolkit's reappearance undo the wait rather than merely pause
+   * it.
+   *
+   * Returns a decision per absent key, in the order given, so the caller can log
+   * the deferrals as well as act on the matured ones.
+   */
+  observe(agentId, declaredManagedKeys, expectedKeys) {
+    let perAgent = this.streaks.get(agentId);
+    if (perAgent) {
+      for (const key of expectedKeys) perAgent.delete(key);
+    }
+    const decisions = [];
+    for (const key of declaredManagedKeys) {
+      if (expectedKeys.has(key)) continue;
+      if (!perAgent) {
+        perAgent = /* @__PURE__ */ new Map();
+        this.streaks.set(agentId, perAgent);
+      }
+      const streak = (perAgent.get(key) ?? 0) + 1;
+      perAgent.set(key, streak);
+      decisions.push({ serverKey: key, streak, mature: streak >= this.threshold });
+    }
+    if (perAgent) {
+      const declared = new Set(declaredManagedKeys);
+      for (const key of [...perAgent.keys()]) {
+        if (!declared.has(key)) perAgent.delete(key);
+      }
+      if (perAgent.size === 0) this.streaks.delete(agentId);
+    }
+    return decisions;
+  }
+  /** Current streak for one key. Zero when untracked. */
+  streakFor(agentId, serverKey) {
+    return this.streaks.get(agentId)?.get(serverKey) ?? 0;
+  }
+  /** Drop everything for an agent — used when an agent leaves the host. */
+  forget(agentId) {
+    this.streaks.delete(agentId);
+  }
+  /** Number of agents currently carrying at least one streak (tests/diagnostics). */
+  get trackedAgents() {
+    return this.streaks.size;
+  }
+};
+
 // src/lib/manager/agent-state.ts
 var agentState = {
   // ---------------------------------------------------------------------------
@@ -6558,7 +6628,19 @@ var agentState = {
    * it, so an unpublish during a restart window leaves the folder until the next
    * unpublish — acceptable for a platform-staff-rare action.
    */
-  knownGlobalSkillIds: /* @__PURE__ */ new Map()
+  knownGlobalSkillIds: /* @__PURE__ */ new Map(),
+  /**
+   * ENG-9708: consecutive cycles each managed MCP server key has been ABSENT
+   * from /host/managed-toolkits, per agent. A key must miss N consecutive polls
+   * before it is pruned, so one degraded-but-well-formed response can no longer
+   * destroy fleet state that does not self-heal (2026-08-31: 24 composio_*
+   * servers across 6+ agents, removed in under two minutes, recovered only by a
+   * manual bulk-reconnect).
+   *
+   * In-memory on purpose: a manager restart clears every streak, which delays a
+   * legitimate prune by a few minutes and can never cause a spurious one.
+   */
+  managedPruneStreaks: new ManagedPruneStreaks(pruneConfirmCycles())
 };
 function clearAgentState(agentId, codeName) {
   agentState.knownVersions.delete(agentId);
@@ -6577,6 +6659,7 @@ function clearAgentState(agentId, codeName) {
   agentState.knownMsTeamsBehaviourHashes.delete(agentId);
   agentState.knownSlackBehaviourHashes.delete(agentId);
   agentState.knownGlobalSkillIds.delete(agentId);
+  agentState.managedPruneStreaks.forget(agentId);
   agentState.agentDisplayNames.delete(codeName);
   agentState.codeNameToAgentId.delete(codeName);
   agentState.provisioningAttribution.delete(codeName);
@@ -12725,7 +12808,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-3F3O7D7H.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-N7QDT6AE.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13385,7 +13468,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.757" : "dev";
+var agtCliVersion = true ? "0.28.759" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14926,7 +15009,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-UVO7INXO.js");
+      const { collectDiagnostics } = await import("../persistent-session-IUGL5OEF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15067,7 +15150,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-UVO7INXO.js");
+      const { collectDiagnostics } = await import("../persistent-session-IUGL5OEF.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15236,7 +15319,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-3F3O7D7H.js");
+      } = await import("../responsiveness-probe-N7QDT6AE.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15346,7 +15429,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-3F3O7D7H.js");
+        } = await import("../responsiveness-probe-N7QDT6AE.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15502,7 +15585,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-Z6TCXJ4R.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-VE5NYGT7.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -17532,32 +17615,59 @@ async function processAgent(agent, agentStates, managedToolkits) {
           );
           recordConfigChurnEvent(agent.agent_id, agent.code_name, FLAP_CHANNEL_MANAGED_MCP, mcpMembership);
         }
+        const deferredPruneKeys = [];
+        if (frameworkAdapter.removeMcpServer && frameworkAdapter.readMcpServers) {
+          try {
+            const declaredManaged = Object.keys(
+              frameworkAdapter.readMcpServers(agent.code_name)
+            ).filter(isManagedMcpServerKey);
+            const decisions = agentState.managedPruneStreaks.observe(
+              agent.agent_id,
+              declaredManaged,
+              expectedServerIds
+            );
+            for (const d of decisions) {
+              if (!d.mature) {
+                deferredPruneKeys.push(d.serverKey);
+                log(
+                  `[managed-toolkit] ${agent.code_name}: '${d.serverKey}' absent for ${d.streak}/${pruneConfirmCycles()} cycles \u2014 deferring prune (ENG-9708)`
+                );
+                continue;
+              }
+              frameworkAdapter.removeMcpServer(agent.code_name, d.serverKey);
+              log(
+                `[managed-toolkit] Removed stale MCP server '${d.serverKey}' for '${agent.code_name}' after ${d.streak} consecutive absences (ENG-9708)`
+              );
+              managedPruneLedger.record(agent.code_name, d.serverKey);
+            }
+          } catch {
+          }
+        }
         if (mcpHash !== prevMcpHash) {
           for (const e of desiredEntries) {
             frameworkAdapter.writeMcpServer(agent.code_name, e.serverId, { url: e.url, headers: e.headers });
             const urlHash = createHash20("sha256").update(e.url).digest("hex").slice(0, 12);
             log(`[managed-toolkit] ${agent.code_name}: wrote '${e.name}' (serverId=${e.serverId}, url_hash=${urlHash})`);
           }
-          if (frameworkAdapter.removeMcpServer && frameworkAdapter.readMcpServers) {
-            try {
-              for (const key of Object.keys(frameworkAdapter.readMcpServers(agent.code_name))) {
-                if (isManagedMcpServerKey(key) && !expectedServerIds.has(key)) {
-                  frameworkAdapter.removeMcpServer(agent.code_name, key);
-                  log(`[managed-toolkit] Removed stale MCP server '${key}' for '${agent.code_name}'`);
-                  managedPruneLedger.record(agent.code_name, key);
-                }
-              }
-            } catch {
-            }
+          if (deferredPruneKeys.length === 0) {
+            agentState.knownManagedMcpHashes.set(agent.agent_id, mcpHash);
+            agentState.knownManagedMcpStructure.set(agent.agent_id, structureHash);
+          } else {
+            log(
+              `[managed-toolkit] ${agent.code_name}: holding the managed-MCP baseline and session restart while ${deferredPruneKeys.length} prune(s) await confirmation (${deferredPruneKeys.join(", ")}) \u2014 ENG-9708`
+            );
           }
-          agentState.knownManagedMcpHashes.set(agent.agent_id, mcpHash);
-          agentState.knownManagedMcpStructure.set(agent.agent_id, structureHash);
           const mcpRestartDecision = fwForMcp === "claude-code" && prevStructureHash !== void 0 && structureHash !== prevStructureHash ? decideManagedMcpRestart({
             prevStructureHash,
             structureHash,
             launchStructureHash: sessionLaunchManagedStructure.get(agent.code_name),
             sessionHealthy: isSessionHealthy(agent.code_name),
-            flapping: mcpFlap.flapping
+            flapping: mcpFlap.flapping,
+            // ENG-9708: an unconfirmed prune holds the restart too. The
+            // structural change it would announce ("servers were removed")
+            // has not been applied to the file yet, so restarting now
+            // would churn the session and tell the agent something untrue.
+            deferringPrune: deferredPruneKeys.length > 0
           }) : null;
           if (mcpRestartDecision?.kind === "suppress-already-live") {
             log(
@@ -19453,7 +19563,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-UVO7INXO.js");
+        const { collectDiagnostics } = await import("../persistent-session-IUGL5OEF.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19499,7 +19609,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-UVO7INXO.js");
+      const { collectDiagnostics } = await import("../persistent-session-IUGL5OEF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20135,7 +20245,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-MQMZT4AM.js");
+  } = await import("../claude-pair-runtime-I6Q7M7KZ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));