@integrity-labs/agt-cli 0.10.14 → 0.10.16

package/dist/lib/manager-worker.js

@@ -10,7 +10,7 @@ import {
   provisionStopHook,
   requireHost,
   resolveChannels
-} from "../chunk-KZ7Y55HJ.js";
+} from "../chunk-XTETZ2D5.js";
 import {
   findTaskByTemplate,
   getProjectDir,
@@ -340,7 +340,7 @@ var GatewayClientPool = class extends EventEmitter {
 };
 
 // src/lib/claude-auth-detect.ts
-import { readFile } from "fs/promises";
+import { readFile, readdir } from "fs/promises";
 import { homedir, platform } from "os";
 import { join } from "path";
 import { execFile } from "child_process";
@@ -364,6 +364,18 @@ async function readOauthCredentials() {
     join(homedir(), ".claude", ".credentials.json"),
     join(homedir(), ".claude", "credentials.json")
   ];
+  const isLinuxRoot = platform() === "linux" && typeof process.getuid === "function" && process.getuid() === 0;
+  if (isLinuxRoot) {
+    try {
+      const entries = await readdir("/home", { withFileTypes: true });
+      for (const entry of entries) {
+        if (!entry.isDirectory()) continue;
+        candidates.push(join("/home", entry.name, ".claude", ".credentials.json"));
+        candidates.push(join("/home", entry.name, ".claude", "credentials.json"));
+      }
+    } catch {
+    }
+  }
   for (const path of candidates) {
     const parsed = await readJsonSilently(path);
     if (parsed) {
@@ -781,48 +793,60 @@ function clearAgentCaches(agentId, codeName) {
 var cachedFrameworkVersion = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
+function resolveBrewPath(execFileSync) {
+  try {
+    const out = execFileSync("which", ["brew"], { timeout: 5e3 }).toString().trim();
+    if (out) return out;
+  } catch {
+  }
+  const fallback = "/home/linuxbrew/.linuxbrew/bin/brew";
+  if (existsSync(fallback)) return fallback;
+  return null;
+}
 async function ensureFrameworkBinary(frameworkId) {
   if (frameworkId !== "claude-code") return;
   if (frameworkBinaryChecked.has(frameworkId)) return;
   frameworkBinaryChecked.add(frameworkId);
   const { execFileSync } = await import("child_process");
-  let brewPath;
-  try {
-    brewPath = execFileSync("which", ["brew"], { timeout: 5e3 }).toString().trim();
-  } catch {
-    log("Homebrew not found \u2014 cannot auto-install/upgrade Claude Code. Install manually: https://claude.ai/download");
+  const brewPath = resolveBrewPath(execFileSync);
+  if (!brewPath) {
+    log("Homebrew not found (no `brew` on PATH, no /home/linuxbrew/.linuxbrew/bin/brew). Cannot auto-install Claude Code. Install manually: https://claude.ai/download");
     return;
   }
-  let claudeExists = false;
-  try {
-    execFileSync("which", ["claude"], { timeout: 5e3 });
-    claudeExists = true;
-  } catch {
+  log(`Using brew at ${brewPath}`);
+  const isRoot = typeof process.getuid === "function" && process.getuid() === 0;
+  const runBrew = (args, opts) => {
+    if (isRoot) {
+      const sudoArgs = ["-u", "ec2-user", "-H", brewPath, ...args];
+      return execFileSync("sudo", sudoArgs, { ...opts, stdio: "pipe" }).toString();
+    }
+    return execFileSync(brewPath, args, { ...opts, stdio: "pipe" }).toString();
+  };
+  let claudeExists = existsSync("/home/linuxbrew/.linuxbrew/bin/claude");
+  if (!claudeExists) {
+    try {
+      execFileSync("which", ["claude"], { timeout: 5e3 });
+      claudeExists = true;
+    } catch {
+    }
   }
   if (!claudeExists) {
-    log("Claude Code binary not found \u2014 installing via Homebrew...");
+    log(`Claude Code binary not found \u2014 installing via Homebrew${isRoot ? " (as ec2-user via sudo)" : ""}...`);
     try {
-      execFileSync(brewPath, ["install", "--cask", "claude-code"], {
-        timeout: 12e4,
-        stdio: "pipe"
-      });
+      runBrew(["install", "--cask", "claude-code"], { timeout: 12e4 });
     } catch (err) {
       log(`Claude Code install failed: ${err.message}`);
       return;
     }
-    try {
-      execFileSync("which", ["claude"], { timeout: 5e3 });
+    if (existsSync("/home/linuxbrew/.linuxbrew/bin/claude")) {
       log("Claude Code installed successfully");
-    } catch {
-      log("Claude Code install completed but binary not found on PATH \u2014 you may need to restart your terminal");
+    } else {
+      log("Claude Code install completed but binary not found at expected path \u2014 check brew logs");
     }
   } else {
-    log("Checking for Claude Code updates...");
+    log(`Checking for Claude Code updates${isRoot ? " (as ec2-user via sudo)" : ""}...`);
     try {
-      const output = execFileSync(brewPath, ["upgrade", "--cask", "claude-code"], {
-        timeout: 12e4,
-        stdio: "pipe"
-      }).toString();
+      const output = runBrew(["upgrade", "--cask", "claude-code"], { timeout: 12e4 });
       if (output.includes("already installed") || output.includes("up-to-date")) {
         log("Claude Code is already up to date");
       } else {
@@ -837,7 +861,7 @@ async function ensureFrameworkBinary(frameworkId) {
       }
     }
   }
-  agentRuntimeAuthenticated = checkClaudeAuth(execFileSync);
+  agentRuntimeAuthenticated = await checkClaudeAuth();
 }
 var UPDATE_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 async function checkAndUpdateCli() {
@@ -889,28 +913,23 @@ async function checkAndUpdateCli() {
   } catch {
   }
 }
-function checkClaudeAuth(execFileSync) {
+async function checkClaudeAuth() {
   try {
-    const authOutput = execFileSync("claude", ["auth", "status"], { timeout: 1e4, stdio: "pipe" }).toString().trim();
-    let loggedIn = null;
-    try {
-      const parsed = JSON.parse(authOutput);
-      if (typeof parsed.loggedIn === "boolean") loggedIn = parsed.loggedIn;
-    } catch {
-      const lower = authOutput.toLowerCase();
-      if (lower.includes("not logged in") || lower.includes("logged out")) loggedIn = false;
-      else if (lower.includes("logged in")) loggedIn = true;
-    }
-    if (loggedIn === false) {
-      log('\u26A0\uFE0F  Claude Code is not authenticated. Run "claude" in a terminal to log in, then restart the manager.');
+    const report = await detectClaudeAuth();
+    if (!report) {
+      log("\u26A0\uFE0F  Claude Code is not authenticated. Run `claude /login` (or set `ANTHROPIC_API_KEY`) on the host, then the manager will pick it up on the next cycle.");
       return false;
-    } else if (loggedIn === null) {
-      log('\u26A0\uFE0F  Could not determine Claude Code auth state. Run "claude" in a terminal to verify login.');
+    }
+    if (report.status === "expired") {
+      log(`\u26A0\uFE0F  Claude Code auth expired (${report.mode}). Re-run \`claude /login\` to refresh.`);
       return false;
     }
+    if (report.status === "expiring_soon") {
+      log(`[auth] Claude Code token expiring soon (expires_at=${report.expires_at}) \u2014 still valid, proceeding`);
+    }
     return true;
-  } catch {
-    log('\u26A0\uFE0F  Could not check Claude Code auth status. Run "claude" in a terminal to ensure it is logged in.');
+  } catch (err) {
+    log(`\u26A0\uFE0F  Claude Code auth probe failed: ${err.message}`);
     return false;
   }
 }
@@ -2792,8 +2811,7 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
   }
   devChannels.push("server:direct-chat");
   if (!agentRuntimeAuthenticated) {
-    const { execFileSync } = await import("child_process");
-    agentRuntimeAuthenticated = checkClaudeAuth(execFileSync);
+    agentRuntimeAuthenticated = await checkClaudeAuth();
     if (!agentRuntimeAuthenticated) {
       log(`[persistent-session] Skipping '${codeName}' \u2014 Claude Code not authenticated`);
       return;
@@ -4213,8 +4231,27 @@ async function stopPolling() {
 function startManager(opts) {
   config = opts;
   deployMcpAssets();
+  void ensureHostFrameworkBinaries();
   startPolling();
 }
+async function ensureHostFrameworkBinaries() {
+  const apiKey = getApiKey();
+  if (!apiKey) {
+    log("[framework-install] AGT_API_KEY not set \u2014 skipping host framework binary check");
+    return;
+  }
+  try {
+    const exchange = await exchangeApiKey(apiKey);
+    if (!exchange.framework) {
+      log("[framework-install] host has no framework set \u2014 skipping");
+      return;
+    }
+    log(`[framework-install] host framework = ${exchange.framework}`);
+    await ensureFrameworkBinary(exchange.framework);
+  } catch (err) {
+    log(`[framework-install] failed: ${err.message}`);
+  }
+}
 function deployMcpAssets() {
   const targetDir = join2(homedir2(), ".augmented", "_mcp");
   mkdirSync(targetDir, { recursive: true });