@integrity-labs/agt-cli 0.28.813 → 0.28.814

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-YCE5BY6D.js";
+} from "../chunk-ZBKYMWD4.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.813" : "dev";
+var cliVersion = true ? "0.28.814" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.813" : "dev";
+var cliVersion2 = true ? "0.28.814" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-YCE5BY6D.js → chunk-ZBKYMWD4.js}

@@ -6523,7 +6523,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.813" : "dev";
+var agtCliVersion = true ? "0.28.814" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10818,4 +10818,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-YCE5BY6D.js.map
+//# sourceMappingURL=chunk-ZBKYMWD4.js.map

package/dist/lib/manager-worker.js

@@ -58,7 +58,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-YCE5BY6D.js";
+} from "../chunk-ZBKYMWD4.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -13542,6 +13542,8 @@ function clearAgentCaches(agentId, codeName) {
   boardTokenCache.forget(agentId);
   refreshFetchGate.forget(agentId);
   memoriesFetchGate.forget(agentId);
+  secretsFetchGate.forget(agentId);
+  defaultSchedulesFetchGate.forget(agentId);
   forgetRealtimeRebindState(agentId);
   forgetChannelSyncState(agentId);
   sharedBusyBuckets.reset(codeName);
@@ -13578,7 +13580,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.813" : "dev";
+var agtCliVersion = true ? "0.28.814" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15100,6 +15102,8 @@ var DESIRED_STATE_FETCH_TTL_MS = 6e4;
 var refreshFetchGate = createFetchGate(DESIRED_STATE_FETCH_TTL_MS);
 var lastRefreshPayload = /* @__PURE__ */ new Map();
 var memoriesFetchGate = createFetchGate(DESIRED_STATE_FETCH_TTL_MS);
+var secretsFetchGate = createFetchGate(DESIRED_STATE_FETCH_TTL_MS);
+var defaultSchedulesFetchGate = createFetchGate(DESIRED_STATE_FETCH_TTL_MS);
 var pollCycleFetches = 0;
 var pollCycleFetchSkips = 0;
 var pollCycleMemoriesUnchanged = 0;
@@ -15107,6 +15111,8 @@ var pollCycleMemoriesFull = 0;
 function forceRefreshFetch() {
   refreshFetchGate.forceAll();
   memoriesFetchGate.forceAll();
+  secretsFetchGate.forceAll();
+  defaultSchedulesFetchGate.forceAll();
 }
 var consecutivePollFailures = 0;
 function reorderRestartedFirst(agents, restartedIds) {
@@ -17526,24 +17532,28 @@ async function processAgent(agent, agentStates, managedToolkits) {
   }
   let lastSecretsProvisionAt = state8.agents.find((a) => a.agentId === agent.agent_id)?.lastSecretsProvisionAt ?? null;
   let secretsHash = agentState.knownSecretsHashes.get(agent.agent_id) ?? null;
-  try {
-    const secretsData = await api.post("/host/secrets", { agent_id: agent.agent_id });
-    const newHash = secretsData.secrets_hash;
-    const hashChanged = newHash !== secretsHash;
-    if (hashChanged && secretsData.profiles.length > 0) {
-      frameworkAdapter.writeAuthProfiles(agent.code_name, secretsData.profiles);
-      lastSecretsProvisionAt = (/* @__PURE__ */ new Date()).toISOString();
-      log(`Secrets updated for '${agent.code_name}'`);
-    }
-    if (newHash) {
-      agentState.knownSecretsHashes.set(agent.agent_id, newHash);
-      secretsHash = newHash;
-    } else {
-      agentState.knownSecretsHashes.delete(agent.agent_id);
-      secretsHash = null;
+  const secretsToken = secretsFetchGate.beginFetch(agent.agent_id);
+  if (secretsFetchGate.shouldFetch(agent.agent_id)) {
+    try {
+      const secretsData = await api.post("/host/secrets", { agent_id: agent.agent_id });
+      const newHash = secretsData.secrets_hash;
+      const hashChanged = newHash !== secretsHash;
+      if (hashChanged && secretsData.profiles.length > 0) {
+        frameworkAdapter.writeAuthProfiles(agent.code_name, secretsData.profiles);
+        lastSecretsProvisionAt = (/* @__PURE__ */ new Date()).toISOString();
+        log(`Secrets updated for '${agent.code_name}'`);
+      }
+      if (newHash) {
+        agentState.knownSecretsHashes.set(agent.agent_id, newHash);
+        secretsHash = newHash;
+      } else {
+        agentState.knownSecretsHashes.delete(agent.agent_id);
+        secretsHash = null;
+      }
+      secretsFetchGate.markFetched(agent.agent_id, secretsToken);
+    } catch (err) {
+      log(`Secrets fetch failed for '${agent.code_name}': ${err.message}`);
     }
-  } catch (err) {
-    log(`Secrets fetch failed for '${agent.code_name}': ${err.message}`);
   }
   try {
     const integrationsData = await api.post("/host/agent-integrations", { agent_id: agent.agent_id });
@@ -17953,35 +17963,39 @@ async function processAgent(agent, agentStates, managedToolkits) {
   let tasks = refreshData.scheduled_tasks ?? [];
   const existingTemplateIds = new Set(tasks.map((t) => t.template_id));
   const kanbanWorkRetired = (agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK) === "claude-code" && agentSessionMode === "persistent";
-  try {
-    const defaultsData = await api.post("/host/resolve-default-schedules", { agent_id: agent.agent_id });
-    const allSchedules = (defaultsData.schedules ?? []).filter(
-      (s) => !(kanbanWorkRetired && s.template_id === "kanban-work")
-    );
-    const missing = allSchedules.filter(
-      (s) => !existingTemplateIds.has(s.template_id)
-    );
-    if (allSchedules.length > 0) {
-      await api.post("/host/ensure-default-schedules", {
-        agent_id: agent.agent_id,
-        team_id: defaultsData.team_id,
-        timezone: defaultsData.timezone,
-        schedules: allSchedules
-      });
-      if (missing.length > 0) {
-        log(`Auto-provisioned ${missing.length} default schedule(s) for '${agent.code_name}': ${missing.map((s) => s.template_id).join(", ")}`);
+  const defaultSchedulesToken = defaultSchedulesFetchGate.beginFetch(agent.agent_id);
+  if (defaultSchedulesFetchGate.shouldFetch(agent.agent_id)) {
+    try {
+      const defaultsData = await api.post("/host/resolve-default-schedules", { agent_id: agent.agent_id });
+      const allSchedules = (defaultsData.schedules ?? []).filter(
+        (s) => !(kanbanWorkRetired && s.template_id === "kanban-work")
+      );
+      const missing = allSchedules.filter(
+        (s) => !existingTemplateIds.has(s.template_id)
+      );
+      if (allSchedules.length > 0) {
+        await api.post("/host/ensure-default-schedules", {
+          agent_id: agent.agent_id,
+          team_id: defaultsData.team_id,
+          timezone: defaultsData.timezone,
+          schedules: allSchedules
+        });
+        if (missing.length > 0) {
+          log(`Auto-provisioned ${missing.length} default schedule(s) for '${agent.code_name}': ${missing.map((s) => s.template_id).join(", ")}`);
+        }
+        const freshData = await api.post("/host/refresh", {
+          agent_id: agent.agent_id,
+          // Only `scheduled_tasks` is read here, so ask for the manifest shape on
+          // every lane — nothing in this branch consumes a skill body, and the
+          // skill lanes are the largest part of the payload being discarded.
+          ...REFRESH_MANIFEST_FLAGS
+        });
+        tasks = freshData.scheduled_tasks ?? tasks;
       }
-      const freshData = await api.post("/host/refresh", {
-        agent_id: agent.agent_id,
-        // Only `scheduled_tasks` is read here, so ask for the manifest shape on
-        // every lane — nothing in this branch consumes a skill body, and the
-        // skill lanes are the largest part of the payload being discarded.
-        ...REFRESH_MANIFEST_FLAGS
-      });
-      tasks = freshData.scheduled_tasks ?? tasks;
+      defaultSchedulesFetchGate.markFetched(agent.agent_id, defaultSchedulesToken);
+    } catch (err) {
+      log(`Default schedule provisioning failed for '${agent.code_name}': ${err.message}`);
     }
-  } catch (err) {
-    log(`Default schedule provisioning failed for '${agent.code_name}': ${err.message}`);
   }
   if (kanbanWorkRetired) {
     tasks = tasks.filter((t) => t.template_id !== "kanban-work");