agent-control-plane 0.1.8 → 0.1.12

package/tools/bin/ensure-runtime-sync.sh

@@ -0,0 +1,182 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=/dev/null
+source "${SCRIPT_DIR}/flow-shell-lib.sh"
+
+usage() {
+  cat <<'EOF'
+Usage:
+  ensure-runtime-sync.sh [--source-home <path>] [--runtime-home <path>] [--force] [--quiet]
+
+Detect source/runtime drift for the published agent runtime and run
+`sync-shared-agent-home.sh` only when needed.
+EOF
+}
+
+source_home=""
+runtime_home=""
+force_sync="0"
+quiet="0"
+
+path_looks_like_skill_alias_root() {
+  local candidate="${1:-}"
+  local skill_name=""
+
+  for skill_name in "$(flow_canonical_skill_name)" "$(flow_compat_skill_alias)"; do
+    [[ -n "${skill_name}" ]] || continue
+    [[ "${candidate}" == */skills/openclaw/"${skill_name}" ]] && return 0
+  done
+
+  return 1
+}
+
+read_stamped_source_home() {
+  local stamp_path="${1:-}"
+  local stamped=""
+
+  [[ -f "${stamp_path}" ]] || return 0
+  stamped="$(awk -F= '/^SOURCE_HOME=/{print $2; exit}' "${stamp_path}" 2>/dev/null | tr -d "[:space:]'\" " || true)"
+  [[ -n "${stamped}" ]] || return 0
+  printf '%s\n' "${stamped}"
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --source-home) source_home="${2:-}"; shift 2 ;;
+    --runtime-home) runtime_home="${2:-}"; shift 2 ;;
+    --force) force_sync="1"; shift ;;
+    --quiet) quiet="1"; shift ;;
+    --help|-h) usage; exit 0 ;;
+    *) echo "Unknown argument: $1" >&2; usage >&2; exit 64 ;;
+  esac
+done
+
+FLOW_SKILL_DIR="$(resolve_flow_skill_dir "${BASH_SOURCE[0]}")"
+SYNC_SCRIPT="${ACP_RUNTIME_SYNC_SCRIPT:-${AGENT_CONTROL_PLANE_SYNC_SCRIPT:-${SCRIPT_DIR}/sync-shared-agent-home.sh}}"
+
+if [[ -z "${runtime_home}" ]]; then
+  runtime_home="${ACP_RUNTIME_SYNC_RUNTIME_HOME:-${AGENT_RUNTIME_HOME:-$(resolve_runtime_home)}}"
+fi
+
+runtime_home="$(mkdir -p "${runtime_home}" && cd "${runtime_home}" && pwd -P)"
+stamp_file="${runtime_home}/.agent-control-plane-runtime-sync.env"
+
+if [[ -z "${source_home}" ]]; then
+  source_home="${ACP_RUNTIME_SYNC_SOURCE_HOME:-${AGENT_FLOW_SOURCE_HOME:-}}"
+  if [[ -z "${source_home}" ]]; then
+    if path_looks_like_skill_alias_root "${FLOW_SKILL_DIR}"; then
+      source_home="$(read_stamped_source_home "${stamp_file}")"
+      if [[ -z "${source_home}" ]]; then
+        source_home="$(resolve_shared_agent_home "${FLOW_SKILL_DIR}")"
+      fi
+    else
+      source_home="${FLOW_SKILL_DIR}"
+    fi
+  fi
+fi
+
+source_home="$(cd "${source_home}" && pwd -P)"
+
+resolve_source_skill_dir() {
+  local candidate=""
+  local skill_name=""
+  local root="${1:?source home required}"
+
+  for skill_name in "$(flow_canonical_skill_name)" "$(flow_compat_skill_alias)"; do
+    [[ -n "${skill_name}" ]] || continue
+    candidate="${root}/skills/openclaw/${skill_name}"
+    if flow_is_skill_root "${candidate}"; then
+      printf '%s\n' "${candidate}"
+      return 0
+    fi
+  done
+
+  if flow_is_skill_root "${root}"; then
+    printf '%s\n' "${root}"
+    return 0
+  fi
+
+  return 1
+}
+
+compute_fingerprint() {
+  python3 - "$@" <<'PY'
+import hashlib
+import os
+import sys
+
+h = hashlib.sha256()
+
+for root in sys.argv[1:]:
+    if not root or not os.path.isdir(root):
+        continue
+    root = os.path.realpath(root)
+    h.update(root.encode("utf-8", "surrogateescape"))
+    h.update(b"\0")
+    for dirpath, dirnames, filenames in os.walk(root):
+        dirnames[:] = sorted(d for d in dirnames if d != ".git")
+        for name in sorted(filenames):
+            path = os.path.join(dirpath, name)
+            try:
+                stat_result = os.stat(path)
+            except OSError:
+                continue
+            relpath = os.path.relpath(path, root)
+            h.update(relpath.encode("utf-8", "surrogateescape"))
+            h.update(b"\0")
+            h.update(str(stat_result.st_mtime_ns).encode("ascii"))
+            h.update(b"\0")
+            h.update(str(stat_result.st_size).encode("ascii"))
+            h.update(b"\0")
+
+print(h.hexdigest())
+PY
+}
+
+source_skill_dir="$(resolve_source_skill_dir "${source_home}")"
+source_tools_dir="${source_home}/tools"
+source_quota_manager_dir="${source_home}/skills/openclaw/codex-quota-manager"
+runtime_skill_dir="${runtime_home}/skills/openclaw/$(flow_canonical_skill_name)"
+
+source_fingerprint="$(
+  compute_fingerprint \
+    "${source_tools_dir}" \
+    "${source_quota_manager_dir}" \
+    "${source_skill_dir}"
+)"
+
+existing_fingerprint=""
+if [[ -f "${stamp_file}" ]]; then
+  existing_fingerprint="$(awk -F= '/^SOURCE_FINGERPRINT=/{print $2}' "${stamp_file}" 2>/dev/null | tr -d "[:space:]'\"" || true)"
+fi
+
+sync_status="unchanged"
+if [[ "${force_sync}" == "1" || ! -d "${runtime_skill_dir}" || "${existing_fingerprint}" != "${source_fingerprint}" ]]; then
+  bash "${SYNC_SCRIPT}" "${source_home}" "${runtime_home}" >/dev/null
+  sync_status="updated"
+fi
+
+updated_at="$(date -u +"%Y-%m-%dT%H:%M:%SZ")"
+tmp_file="${stamp_file}.tmp.$$"
+{
+  printf 'SOURCE_HOME=%q\n' "${source_home}"
+  printf 'SOURCE_SKILL_DIR=%q\n' "${source_skill_dir}"
+  printf 'RUNTIME_HOME=%q\n' "${runtime_home}"
+  printf 'RUNTIME_SKILL_DIR=%q\n' "${runtime_skill_dir}"
+  printf 'SOURCE_FINGERPRINT=%q\n' "${source_fingerprint}"
+  printf 'SYNC_STATUS=%q\n' "${sync_status}"
+  printf 'UPDATED_AT=%q\n' "${updated_at}"
+} >"${tmp_file}"
+mv "${tmp_file}" "${stamp_file}"
+
+if [[ "${quiet}" != "1" ]]; then
+  printf 'SYNC_STATUS=%s\n' "${sync_status}"
+  printf 'SOURCE_HOME=%s\n' "${source_home}"
+  printf 'SOURCE_SKILL_DIR=%s\n' "${source_skill_dir}"
+  printf 'RUNTIME_HOME=%s\n' "${runtime_home}"
+  printf 'RUNTIME_SKILL_DIR=%s\n' "${runtime_skill_dir}"
+  printf 'SOURCE_FINGERPRINT=%s\n' "${source_fingerprint}"
+  printf 'STAMP_FILE=%s\n' "${stamp_file}"
+fi

package/tools/bin/flow-config-lib.sh

@@ -291,6 +291,13 @@ flow_export_github_cli_auth_env() {
     return 0
   fi
 
+  if command -v gh >/dev/null 2>&1; then
+    if env -u GH_TOKEN -u GITHUB_TOKEN gh auth status >/dev/null 2>&1 \
+      || env -u GH_TOKEN -u GITHUB_TOKEN gh api user --jq .login >/dev/null 2>&1; then
+      return 0
+    fi
+  fi
+
   token="$(flow_git_credential_token_for_repo_slug "${repo_slug}" || true)"
   if [[ -n "${token}" ]]; then
     export GH_TOKEN="${token}"
@@ -302,6 +309,28 @@ flow_export_github_cli_auth_env() {
   fi
 }
 
+flow_github_graphql_available() {
+  local repo_slug="${1:-}"
+  local remaining=""
+
+  if [[ "${FLOW_GITHUB_GRAPHQL_AVAILABLE_CACHE:-}" == "yes" ]]; then
+    return 0
+  fi
+  if [[ "${FLOW_GITHUB_GRAPHQL_AVAILABLE_CACHE:-}" == "no" ]]; then
+    return 1
+  fi
+
+  flow_export_github_cli_auth_env "${repo_slug}"
+  remaining="$(gh api rate_limit --jq '.resources.graphql.remaining' 2>/dev/null || true)"
+  if [[ "${remaining}" =~ ^[0-9]+$ ]] && (( remaining > 0 )); then
+    FLOW_GITHUB_GRAPHQL_AVAILABLE_CACHE="yes"
+    return 0
+  fi
+
+  FLOW_GITHUB_GRAPHQL_AVAILABLE_CACHE="no"
+  return 1
+}
+
 flow_github_repo_id_cache_var() {
   local repo_slug="${1:-}"
   local sanitized="${repo_slug//[^A-Za-z0-9]/_}"
@@ -455,6 +484,22 @@ flow_github_api_repo() {
   return "${status}"
 }
 
+flow_json_or_default() {
+  local raw_value="${1-}"
+  local default_value="${2:-null}"
+
+  if [[ -z "${raw_value}" ]]; then
+    printf '%s\n' "${default_value}"
+    return 0
+  fi
+
+  if jq -e . >/dev/null 2>&1 <<<"${raw_value}"; then
+    printf '%s\n' "${raw_value}"
+  else
+    printf '%s\n' "${default_value}"
+  fi
+}
+
 flow_github_urlencode() {
   local raw_value="${1:-}"
 
@@ -472,15 +517,16 @@ flow_github_issue_view_json() {
   local issue_json=""
   local comment_pages_json=""
 
-  if issue_json="$(gh issue view "${issue_id}" -R "${repo_slug}" --json number,state,title,body,url,labels,comments,createdAt,updatedAt 2>/dev/null)"; then
+  if flow_github_graphql_available "${repo_slug}" \
+    && issue_json="$(gh issue view "${issue_id}" -R "${repo_slug}" --json number,state,title,body,url,labels,comments,createdAt,updatedAt 2>/dev/null)"; then
     printf '%s\n' "${issue_json}"
     return 0
   fi
 
-  issue_json="$(flow_github_api_repo "${repo_slug}" "issues/${issue_id}")" || return 1
-  comment_pages_json="$(
-    flow_github_api_repo "${repo_slug}" "issues/${issue_id}/comments?per_page=100" --paginate --slurp 2>/dev/null || printf '[]\n'
-  )"
+  issue_json="$(flow_github_api_repo "${repo_slug}" "issues/${issue_id}" 2>/dev/null || true)"
+  issue_json="$(flow_json_or_default "${issue_json}" '{}')"
+  comment_pages_json="$(flow_github_api_repo "${repo_slug}" "issues/${issue_id}/comments?per_page=100" --paginate --slurp 2>/dev/null || true)"
+  comment_pages_json="$(flow_json_or_default "${comment_pages_json}" '[]')"
 
   ISSUE_JSON="${issue_json}" COMMENT_PAGES_JSON="${comment_pages_json}" python3 - <<'PY'
 import json
@@ -527,7 +573,8 @@ flow_github_issue_list_json() {
   local issues_json=""
   local per_page="100"
 
-  if issues_json="$(gh issue list -R "${repo_slug}" --state "${state}" --limit "${limit}" --json number,createdAt,updatedAt,title,url,labels 2>/dev/null)"; then
+  if flow_github_graphql_available "${repo_slug}" \
+    && issues_json="$(gh issue list -R "${repo_slug}" --state "${state}" --limit "${limit}" --json number,createdAt,updatedAt,title,url,labels 2>/dev/null)"; then
     printf '%s\n' "${issues_json}"
     return 0
   fi
@@ -536,9 +583,8 @@ flow_github_issue_list_json() {
     per_page="${limit}"
   fi
 
-  issues_json="$(
-    flow_github_api_repo "${repo_slug}" "issues?state=${state}&per_page=${per_page}" --paginate --slurp
-  )" || return 1
+  issues_json="$(flow_github_api_repo "${repo_slug}" "issues?state=${state}&per_page=${per_page}" --paginate --slurp 2>/dev/null || true)"
+  issues_json="$(flow_json_or_default "${issues_json}" '[]')"
 
   ISSUE_PAGES_JSON="${issues_json}" ISSUE_LIMIT="${limit}" python3 - <<'PY'
 import json
@@ -583,16 +629,18 @@ flow_github_pr_view_json() {
   local check_runs_json="{}"
   local status_json="{}"
 
-  if pr_json="$(gh pr view "${pr_number}" -R "${repo_slug}" --json number,title,body,url,headRefName,baseRefName,mergeStateStatus,statusCheckRollup,labels,comments,state,isDraft 2>/dev/null)"; then
+  if flow_github_graphql_available "${repo_slug}" \
+    && pr_json="$(gh pr view "${pr_number}" -R "${repo_slug}" --json number,title,body,url,headRefName,baseRefName,mergeStateStatus,statusCheckRollup,labels,comments,state,isDraft 2>/dev/null)"; then
     printf '%s\n' "${pr_json}"
     return 0
   fi
 
-  pr_json="$(flow_github_api_repo "${repo_slug}" "pulls/${pr_number}")" || return 1
-  issue_json="$(flow_github_api_repo "${repo_slug}" "issues/${pr_number}")" || return 1
-  comment_pages_json="$(
-    flow_github_api_repo "${repo_slug}" "issues/${pr_number}/comments?per_page=100" --paginate --slurp 2>/dev/null || printf '[]\n'
-  )"
+  pr_json="$(flow_github_api_repo "${repo_slug}" "pulls/${pr_number}" 2>/dev/null || true)"
+  pr_json="$(flow_json_or_default "${pr_json}" '{}')"
+  issue_json="$(flow_github_api_repo "${repo_slug}" "issues/${pr_number}" 2>/dev/null || true)"
+  issue_json="$(flow_json_or_default "${issue_json}" '{}')"
+  comment_pages_json="$(flow_github_api_repo "${repo_slug}" "issues/${pr_number}/comments?per_page=100" --paginate --slurp 2>/dev/null || true)"
+  comment_pages_json="$(flow_json_or_default "${comment_pages_json}" '[]')"
   head_sha="$(
     PR_JSON="${pr_json}" python3 - <<'PY'
 import json
@@ -604,12 +652,10 @@ print(head.get("sha") or "")
 PY
   )"
   if [[ -n "${head_sha}" ]]; then
-    check_runs_json="$(
-      flow_github_api_repo "${repo_slug}" "commits/${head_sha}/check-runs?per_page=100" 2>/dev/null || printf '{}\n'
-    )"
-    status_json="$(
-      flow_github_api_repo "${repo_slug}" "commits/${head_sha}/status" 2>/dev/null || printf '{}\n'
-    )"
+    check_runs_json="$(flow_github_api_repo "${repo_slug}" "commits/${head_sha}/check-runs?per_page=100" 2>/dev/null || true)"
+    check_runs_json="$(flow_json_or_default "${check_runs_json}" '{}')"
+    status_json="$(flow_github_api_repo "${repo_slug}" "commits/${head_sha}/status" 2>/dev/null || true)"
+    status_json="$(flow_json_or_default "${status_json}" '{}')"
   fi
 
   PR_JSON="${pr_json}" ISSUE_JSON="${issue_json}" COMMENT_PAGES_JSON="${comment_pages_json}" CHECK_RUNS_JSON="${check_runs_json}" STATUS_JSON="${status_json}" python3 - <<'PY'
@@ -698,7 +744,8 @@ flow_github_pr_list_json() {
   local comment_pages_json=""
   local pr_number=""
 
-  if pr_json="$(gh pr list -R "${repo_slug}" --state "${state}" --limit "${limit}" --json number,title,body,url,headRefName,labels,comments,createdAt,mergedAt,isDraft 2>/dev/null)"; then
+  if flow_github_graphql_available "${repo_slug}" \
+    && pr_json="$(gh pr list -R "${repo_slug}" --state "${state}" --limit "${limit}" --json number,title,body,url,headRefName,labels,comments,createdAt,mergedAt,isDraft 2>/dev/null)"; then
     printf '%s\n' "${pr_json}"
     return 0
   fi
@@ -710,9 +757,8 @@ flow_github_pr_list_json() {
     per_page="${limit}"
   fi
 
-  pull_pages_json="$(
-    flow_github_api_repo "${repo_slug}" "pulls?state=${pulls_state}&per_page=${per_page}" --paginate --slurp
-  )" || return 1
+  pull_pages_json="$(flow_github_api_repo "${repo_slug}" "pulls?state=${pulls_state}&per_page=${per_page}" --paginate --slurp 2>/dev/null || true)"
+  pull_pages_json="$(flow_json_or_default "${pull_pages_json}" '[]')"
 
   selected_prs_json="$(
     PULL_PAGES_JSON="${pull_pages_json}" PR_LIMIT="${limit}" PR_STATE_FILTER="${state}" python3 - <<'PY'
@@ -751,7 +797,7 @@ for pr in pulls:
 
 print(json.dumps(result))
 PY
-  )"
+  )" || selected_prs_json='[]'
 
   item_jsonl_file="$(mktemp)"
   trap 'rm -f "${item_jsonl_file}"' RETURN
@@ -760,10 +806,10 @@ PY
     [[ -n "${current_pr_json}" ]] || continue
     pr_number="$(jq -r '.number // ""' <<<"${current_pr_json}")"
     [[ -n "${pr_number}" ]] || continue
-    issue_json="$(flow_github_api_repo "${repo_slug}" "issues/${pr_number}" 2>/dev/null || printf '{}\n')"
-    comment_pages_json="$(
-      flow_github_api_repo "${repo_slug}" "issues/${pr_number}/comments?per_page=100" --paginate --slurp 2>/dev/null || printf '[]\n'
-    )"
+    issue_json="$(flow_github_api_repo "${repo_slug}" "issues/${pr_number}" 2>/dev/null || true)"
+    issue_json="$(flow_json_or_default "${issue_json}" '{}')"
+    comment_pages_json="$(flow_github_api_repo "${repo_slug}" "issues/${pr_number}/comments?per_page=100" --paginate --slurp 2>/dev/null || true)"
+    comment_pages_json="$(flow_json_or_default "${comment_pages_json}" '[]')"
     PR_JSON="${current_pr_json}" ISSUE_JSON="${issue_json}" COMMENT_PAGES_JSON="${comment_pages_json}" python3 - <<'PY' >>"${item_jsonl_file}"
 import json
 import os

package/tools/bin/flow-resident-worker-lib.sh

@@ -547,14 +547,20 @@ flow_resident_issue_lane_openclaw_agent_id() {
 flow_resident_issue_openclaw_session_id() {
   local config_file="${1:-}"
   local issue_id="${2:?issue id required}"
+  local task_count="${3:-}"
   local adapter_id=""
+  local base_id=""
 
   if [[ -z "${config_file}" ]]; then
     config_file="$(resolve_flow_config_yaml "${BASH_SOURCE[1]:-${BASH_SOURCE[0]}}")"
   fi
 
   adapter_id="$(flow_resolve_adapter_id "${config_file}")"
-  flow_resident_sanitize_id "${adapter_id}-resident-session-issue-${issue_id}"
+  base_id="${adapter_id}-resident-session-issue-${issue_id}"
+  if [[ -n "${task_count}" ]]; then
+    base_id="${base_id}-cycle-${task_count}"
+  fi
+  flow_resident_sanitize_id "${base_id}"
 }
 
 flow_resident_issue_lane_openclaw_session_id() {
@@ -629,6 +635,26 @@ print(int(dt.timestamp()))
 PY
 }
 
+flow_resident_issue_worktree_is_usable() {
+  local worktree="${1:-}"
+  local worktree_realpath="${2:-}"
+  local resolved_worktree=""
+  local resolved_realpath=""
+
+  [[ -n "${worktree}" && -d "${worktree}" ]] || return 1
+  [[ -e "${worktree}/.git" ]] || return 1
+
+  if [[ -n "${worktree_realpath}" ]]; then
+    [[ -d "${worktree_realpath}" && -e "${worktree_realpath}/.git" ]] || return 1
+    resolved_worktree="$(cd "${worktree}" 2>/dev/null && pwd -P || true)"
+    resolved_realpath="$(cd "${worktree_realpath}" 2>/dev/null && pwd -P || true)"
+    [[ -n "${resolved_worktree}" && -n "${resolved_realpath}" ]] || return 1
+    [[ "${resolved_worktree}" == "${resolved_realpath}" ]] || return 1
+  fi
+
+  return 0
+}
+
 flow_resident_issue_can_reuse() {
   local metadata_file="${1:?metadata file required}"
   local max_tasks="${2:-0}"
@@ -648,7 +674,7 @@ flow_resident_issue_can_reuse() {
     source "${metadata_file}"
     set +a
 
-    [[ -n "${WORKTREE:-}" && -d "${WORKTREE:-}" && -e "${WORKTREE:-}/.git" ]] || exit 1
+    flow_resident_issue_worktree_is_usable "${WORKTREE:-}" "${WORKTREE_REALPATH:-}" || exit 1
 
     task_count="${TASK_COUNT:-0}"
     case "${task_count}" in

package/tools/bin/flow-shell-lib.sh

@@ -137,13 +137,28 @@ flow_is_skill_root() {
 
 flow_print_dir() {
   local candidate="${1:-}"
+  local parent_dir=""
+  local base_name=""
   [[ -n "${candidate}" ]] || return 1
-  (cd "${candidate}" && pwd -P)
+  if [[ -e "${candidate}" ]]; then
+    (cd "${candidate}" && pwd -P)
+    return 0
+  fi
+
+  parent_dir="$(dirname "${candidate}")"
+  base_name="$(basename "${candidate}")"
+  if [[ -d "${parent_dir}" ]]; then
+    printf '%s/%s\n' "$(cd "${parent_dir}" && pwd -P)" "${base_name}"
+    return 0
+  fi
+
+  printf '%s\n' "${candidate}"
 }
 
 resolve_flow_skill_dir() {
   local script_path="${1:-}"
   local candidate=""
+  local search_dir=""
   local skill_name=""
 
   for candidate in \
@@ -158,13 +173,18 @@ resolve_flow_skill_dir() {
   done
 
   if [[ -n "${script_path}" ]]; then
-    candidate="$(
-      cd "$(dirname "${script_path}")/../.." 2>/dev/null && pwd -P
-    )" || candidate=""
-    if flow_is_skill_root "${candidate}"; then
-      printf '%s\n' "${candidate}"
-      return 0
-    fi
+    search_dir="$(
+      cd "$(dirname "${script_path}")" 2>/dev/null && pwd -P
+    )" || search_dir=""
+    while [[ -n "${search_dir}" && "${search_dir}" != "/" ]]; do
+      if flow_is_skill_root "${search_dir}"; then
+        printf '%s\n' "${search_dir}"
+        return 0
+      fi
+      candidate="$(dirname "${search_dir}")"
+      [[ "${candidate}" != "${search_dir}" ]] || break
+      search_dir="${candidate}"
+    done
   fi
 
   if [[ -n "${SHARED_AGENT_HOME:-}" ]]; then

package/tools/bin/heartbeat-safe-auto.sh

@@ -57,6 +57,7 @@ CODEX_QUOTA_BIN="$(flow_resolve_codex_quota_bin "${FLOW_SKILL_DIR}")"
 CODEX_QUOTA_MANAGER_SCRIPT="$(flow_resolve_codex_quota_manager_script "${FLOW_SKILL_DIR}")"
 CODEX_QUOTA_CACHE_DIR="${XDG_CACHE_HOME:-$HOME/.cache}/codex-quota-manager"
 CODEX_QUOTA_FULL_CACHE_FILE="${CODEX_QUOTA_MANAGER_FULL_CACHE_FILE:-${CODEX_QUOTA_CACHE_DIR}/codex-full-quota.json}"
+CODEX_QUOTA_CACHE_MAX_AGE_SECONDS="${CODEX_QUOTA_CACHE_MAX_AGE_SECONDS:-${ACP_CODEX_QUOTA_CACHE_MAX_AGE_SECONDS:-${F_LOSNING_CODEX_QUOTA_CACHE_MAX_AGE_SECONDS:-900}}}"
 DYNAMIC_CONCURRENCY_ENABLED="${ACP_DYNAMIC_CONCURRENCY_ENABLED:-${F_LOSNING_DYNAMIC_CONCURRENCY_ENABLED:-1}}"
 ALLOW_INFRA_CI_BYPASS="${ACP_ALLOW_INFRA_CI_BYPASS:-${F_LOSNING_ALLOW_INFRA_CI_BYPASS:-1}}"
 RETAINED_WORKTREE_AUDIT_ENABLED="${ACP_RETAINED_WORKTREE_AUDIT_ENABLED:-${F_LOSNING_RETAINED_WORKTREE_AUDIT_ENABLED:-1}}"
@@ -299,6 +300,24 @@ EFFECTIVE_QUOTA_POOLS=""
 
   printf 'CODEX_QUOTA_ROTATION_STRATEGY=%s\n' "${CODEX_QUOTA_ROTATION_STRATEGY}"
 
+  local quota_cache_age_seconds=""
+  quota_cache_age_seconds="$(
+    /opt/homebrew/bin/python3 - "${CODEX_QUOTA_FULL_CACHE_FILE}" <<'PY' 2>/dev/null || true
+import os
+import sys
+import time
+
+path = sys.argv[1]
+try:
+    stat = os.stat(path)
+except OSError:
+    sys.exit(1)
+
+age = max(0, int(time.time() - stat.st_mtime))
+print(age)
+PY
+  )"
+
   if [[ ! -f "${CODEX_QUOTA_FULL_CACHE_FILE}" || ! -s "${CODEX_QUOTA_FULL_CACHE_FILE}" ]] || ! command -v jq >/dev/null 2>&1; then
     printf 'DYNAMIC_CONCURRENCY_QUOTA_MODE=failure-driven-static\n'
     printf 'EFFECTIVE_MAX_CONCURRENT_WORKERS=%s\n' "${EFFECTIVE_MAX_CONCURRENT_WORKERS}"
@@ -308,6 +327,19 @@ EFFECTIVE_QUOTA_POOLS=""
     return 0
   fi
 
+  if [[ "${CODEX_QUOTA_CACHE_MAX_AGE_SECONDS}" =~ ^[0-9]+$ ]] \
+    && [[ "${quota_cache_age_seconds:-}" =~ ^[0-9]+$ ]] \
+    && (( quota_cache_age_seconds > CODEX_QUOTA_CACHE_MAX_AGE_SECONDS )); then
+    printf 'DYNAMIC_CONCURRENCY_QUOTA_MODE=failure-driven-static\n'
+    printf 'DYNAMIC_CONCURRENCY_QUOTA_CACHE_STALE=yes\n'
+    printf 'DYNAMIC_CONCURRENCY_QUOTA_CACHE_AGE_SECONDS=%s\n' "${quota_cache_age_seconds}"
+    printf 'EFFECTIVE_MAX_CONCURRENT_WORKERS=%s\n' "${EFFECTIVE_MAX_CONCURRENT_WORKERS}"
+    printf 'EFFECTIVE_MAX_CONCURRENT_PR_WORKERS=%s\n' "${EFFECTIVE_MAX_CONCURRENT_PR_WORKERS}"
+    printf 'EFFECTIVE_MAX_RECURRING_ISSUE_WORKERS=%s\n' "${EFFECTIVE_MAX_RECURRING_ISSUE_WORKERS}"
+    printf 'EFFECTIVE_MAX_LAUNCHES_PER_HEARTBEAT=%s\n' "${EFFECTIVE_MAX_LAUNCHES_PER_HEARTBEAT}"
+    return 0
+  fi
+
   local healthy_pools=""
   local rotation_pools=""
   local effective_pools=""