@autohq/cli 0.1.441 → 0.1.442

package/dist/agent-bridge.js

@@ -30825,7 +30825,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.441",
+  version: "0.1.442",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -90605,7 +90605,7 @@ function withClaudeStderrDiagnosticsPointer(error51, capturedStderr) {
 var CLAUDE_AGENT_STARTUP_TIMEOUT_MS = 3e4;
 var CLAUDE_INTERRUPT_SETTLE_TIMEOUT_MS = 1e4;
 var CLAUDE_INTERRUPT_ACK_TIMEOUT_MS = 1e4;
-var CLAUDE_MCP_REGISTRATION_TIMEOUT_MS = 3e3;
+var CLAUDE_MCP_REGISTRATION_TIMEOUT_MS = 3e4;
 var CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS = 100;
 var CLAUDE_READ_STATE_SEED_FAILURE_LIMIT = 3;
 var CLAUDE_STARTUP_PROFILE_HOOK_EVENTS = [
@@ -90636,6 +90636,12 @@ var ClaudeMcpRequiredToolsMissingError = class extends Error {
     this.name = "ClaudeMcpRequiredToolsMissingError";
   }
 };
+var ClaudeMcpRegistryNotReadyError = class extends Error {
+  constructor(detail) {
+    super(`MCP tool registry was not ready at session start: ${detail}`);
+    this.name = "ClaudeMcpRegistryNotReadyError";
+  }
+};
 var ClaudeAgentBridgeSessionImpl = class {
   input;
   inputQueue;
@@ -91202,12 +91208,13 @@ var ClaudeAgentBridgeSessionImpl = class {
   }
   // Why this gate is correct without a provider-backed test (it relies on real
   // SDK mcpServerStatus() timing that fakes cannot prove):
-  // - Safe-degrade on uncertainty: pollMcpRegistration never rejects — on
-  //   timeout, a status-read failure, or a closed session it resolves, so an
-  //   *unconfirmed* registry still degrades to today's immediate injection.
-  //   The one fail-closed exit is the confirmed-empty registry: every
-  //   configured server settled and none is serving tools, which is exactly
-  //   the state that produced silent toolless runs in production (FRA-3458).
+  // - Fail closed before first-turn injection whenever configured servers are
+  //   still pending or their status cannot be read. The model must never see a
+  //   callable MCP name whose SDK registry snapshot is not ready to dispatch
+  //   it. Closing the SDK session lets the wrapper's existing bounded command
+  //   delivery retries warm a fresh registry without replaying a tool call.
+  // - Confirmed-empty and missing-required-tool states retain their distinct
+  //   diagnostics and typed failures from FRA-3458.
   // - Provider-path validation is deferred deliberately: the failure is the
   //   intermittent live-prod race on the chief-of-staff singleton (a real
   //   runtime restart dispatching turn-1 while real mcp__* servers reconnect),
@@ -91240,14 +91247,19 @@ var ClaudeAgentBridgeSessionImpl = class {
       };
     }
     const result = await this.mcpRegistrationGate.promise;
-    if (result.outcome !== "empty" && result.outcome !== "missing_required_tools") {
+    if (result.outcome === "ready" || result.outcome === "closed") {
       return;
     }
     this.close();
-    if (result.outcome === "missing_required_tools") {
-      throw new ClaudeMcpRequiredToolsMissingError(result.detail);
+    switch (result.outcome) {
+      case "missing_required_tools":
+        throw new ClaudeMcpRequiredToolsMissingError(result.detail);
+      case "not_ready":
+      case "status_failed":
+        throw new ClaudeMcpRegistryNotReadyError(result.detail);
+      case "empty":
+        throw new ClaudeMcpRegistryEmptyError(result.detail);
     }
-    throw new ClaudeMcpRegistryEmptyError(result.detail);
   }
   // Poll the live query's MCP server status until no configured server is still
   // `pending`, bounded by CLAUDE_MCP_REGISTRATION_TIMEOUT_MS. Terminal states
@@ -91259,7 +91271,9 @@ var ClaudeAgentBridgeSessionImpl = class {
   // status-read failure, timeout, or a closed session all resolve so the caller
   // degrades to immediate injection when the registry state is uncertain. A
   // connected required server with positive zero/missing-tool telemetry fails
-  // immediately even while unrelated configured servers remain pending.
+  // immediately even while unrelated configured servers remain pending. A
+  // timeout or status-read failure returns a distinct not-ready result so the
+  // caller closes the session and rejects before first-turn injection.
   async pollMcpRegistration(query) {
     const configuredNames = Object.keys(this.options.mcpServers ?? {});
     const startedAt = Date.now();
@@ -91275,10 +91289,14 @@ var ClaudeAgentBridgeSessionImpl = class {
       try {
         statuses = await query.mcpServerStatus();
       } catch (error51) {
+        const detail = error51 instanceof Error ? error51.message : String(error51);
         this.input.writeOutput?.(
-          `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${error51 instanceof Error ? error51.message : String(error51)}`
+          `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${detail}`
         );
-        return { outcome: "status_failed" };
+        return {
+          outcome: "status_failed",
+          detail: `status read failed: ${detail}`
+        };
       }
       const missingRequiredTools = missingRequiredMcpTools(
         statuses,
@@ -91305,10 +91323,11 @@ var ClaudeAgentBridgeSessionImpl = class {
         return { outcome: "ready" };
       }
       if (Date.now() >= deadline) {
+        const detail = mcpStatusDetailList(statuses);
         this.input.writeOutput?.(
-          `agent_bridge_claude_mcp_gate_timeout duration_ms=${Date.now() - startedAt} servers=${mcpStatusList(statuses)}`
+          `agent_bridge_claude_mcp_gate_not_ready duration_ms=${Date.now() - startedAt} servers=${detail}`
         );
-        return { outcome: "timeout" };
+        return { outcome: "not_ready", detail };
       }
       await delay(
         CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS,

package/dist/index.js

@@ -47834,7 +47834,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.441",
+      version: "0.1.442",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -61626,7 +61626,7 @@ function withClaudeStderrDiagnosticsPointer(error51, capturedStderr) {
 var CLAUDE_AGENT_STARTUP_TIMEOUT_MS = 3e4;
 var CLAUDE_INTERRUPT_SETTLE_TIMEOUT_MS = 1e4;
 var CLAUDE_INTERRUPT_ACK_TIMEOUT_MS = 1e4;
-var CLAUDE_MCP_REGISTRATION_TIMEOUT_MS = 3e3;
+var CLAUDE_MCP_REGISTRATION_TIMEOUT_MS = 3e4;
 var CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS = 100;
 var CLAUDE_READ_STATE_SEED_FAILURE_LIMIT = 3;
 var CLAUDE_STARTUP_PROFILE_HOOK_EVENTS = [
@@ -61657,6 +61657,12 @@ var ClaudeMcpRequiredToolsMissingError = class extends Error {
     this.name = "ClaudeMcpRequiredToolsMissingError";
   }
 };
+var ClaudeMcpRegistryNotReadyError = class extends Error {
+  constructor(detail) {
+    super(`MCP tool registry was not ready at session start: ${detail}`);
+    this.name = "ClaudeMcpRegistryNotReadyError";
+  }
+};
 var ClaudeAgentBridgeSessionImpl = class {
   input;
   inputQueue;
@@ -62223,12 +62229,13 @@ var ClaudeAgentBridgeSessionImpl = class {
   }
   // Why this gate is correct without a provider-backed test (it relies on real
   // SDK mcpServerStatus() timing that fakes cannot prove):
-  // - Safe-degrade on uncertainty: pollMcpRegistration never rejects — on
-  //   timeout, a status-read failure, or a closed session it resolves, so an
-  //   *unconfirmed* registry still degrades to today's immediate injection.
-  //   The one fail-closed exit is the confirmed-empty registry: every
-  //   configured server settled and none is serving tools, which is exactly
-  //   the state that produced silent toolless runs in production (FRA-3458).
+  // - Fail closed before first-turn injection whenever configured servers are
+  //   still pending or their status cannot be read. The model must never see a
+  //   callable MCP name whose SDK registry snapshot is not ready to dispatch
+  //   it. Closing the SDK session lets the wrapper's existing bounded command
+  //   delivery retries warm a fresh registry without replaying a tool call.
+  // - Confirmed-empty and missing-required-tool states retain their distinct
+  //   diagnostics and typed failures from FRA-3458.
   // - Provider-path validation is deferred deliberately: the failure is the
   //   intermittent live-prod race on the chief-of-staff singleton (a real
   //   runtime restart dispatching turn-1 while real mcp__* servers reconnect),
@@ -62261,14 +62268,19 @@ var ClaudeAgentBridgeSessionImpl = class {
       };
     }
     const result = await this.mcpRegistrationGate.promise;
-    if (result.outcome !== "empty" && result.outcome !== "missing_required_tools") {
+    if (result.outcome === "ready" || result.outcome === "closed") {
       return;
     }
     this.close();
-    if (result.outcome === "missing_required_tools") {
-      throw new ClaudeMcpRequiredToolsMissingError(result.detail);
+    switch (result.outcome) {
+      case "missing_required_tools":
+        throw new ClaudeMcpRequiredToolsMissingError(result.detail);
+      case "not_ready":
+      case "status_failed":
+        throw new ClaudeMcpRegistryNotReadyError(result.detail);
+      case "empty":
+        throw new ClaudeMcpRegistryEmptyError(result.detail);
     }
-    throw new ClaudeMcpRegistryEmptyError(result.detail);
   }
   // Poll the live query's MCP server status until no configured server is still
   // `pending`, bounded by CLAUDE_MCP_REGISTRATION_TIMEOUT_MS. Terminal states
@@ -62280,7 +62292,9 @@ var ClaudeAgentBridgeSessionImpl = class {
   // status-read failure, timeout, or a closed session all resolve so the caller
   // degrades to immediate injection when the registry state is uncertain. A
   // connected required server with positive zero/missing-tool telemetry fails
-  // immediately even while unrelated configured servers remain pending.
+  // immediately even while unrelated configured servers remain pending. A
+  // timeout or status-read failure returns a distinct not-ready result so the
+  // caller closes the session and rejects before first-turn injection.
   async pollMcpRegistration(query) {
     const configuredNames = Object.keys(this.options.mcpServers ?? {});
     const startedAt = Date.now();
@@ -62296,10 +62310,14 @@ var ClaudeAgentBridgeSessionImpl = class {
       try {
         statuses = await query.mcpServerStatus();
       } catch (error51) {
+        const detail = error51 instanceof Error ? error51.message : String(error51);
         this.input.writeOutput?.(
-          `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${error51 instanceof Error ? error51.message : String(error51)}`
+          `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${detail}`
         );
-        return { outcome: "status_failed" };
+        return {
+          outcome: "status_failed",
+          detail: `status read failed: ${detail}`
+        };
       }
       const missingRequiredTools = missingRequiredMcpTools(
         statuses,
@@ -62326,10 +62344,11 @@ var ClaudeAgentBridgeSessionImpl = class {
         return { outcome: "ready" };
       }
       if (Date.now() >= deadline) {
+        const detail = mcpStatusDetailList(statuses);
         this.input.writeOutput?.(
-          `agent_bridge_claude_mcp_gate_timeout duration_ms=${Date.now() - startedAt} servers=${mcpStatusList(statuses)}`
+          `agent_bridge_claude_mcp_gate_not_ready duration_ms=${Date.now() - startedAt} servers=${detail}`
         );
-        return { outcome: "timeout" };
+        return { outcome: "not_ready", detail };
       }
       await delay(
         CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.441",
+  "version": "0.1.442",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"