@integrity-labs/agt-cli 0.10.15 → 0.10.16

package/dist/bin/agt.js

@@ -3705,7 +3705,7 @@ async function acpxCloseCommand(agent2, _opts, cmd) {
 import { execSync } from "child_process";
 import chalk20 from "chalk";
 import ora15 from "ora";
-var cliVersion = true ? "0.10.15" : "dev";
+var cliVersion = true ? "0.10.16" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4104,7 +4104,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.10.15" : "dev";
+var cliVersion2 = true ? "0.10.16" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {

package/dist/lib/manager-worker.js

@@ -340,7 +340,7 @@ var GatewayClientPool = class extends EventEmitter {
 };
 
 // src/lib/claude-auth-detect.ts
-import { readFile } from "fs/promises";
+import { readFile, readdir } from "fs/promises";
 import { homedir, platform } from "os";
 import { join } from "path";
 import { execFile } from "child_process";
@@ -364,6 +364,18 @@ async function readOauthCredentials() {
     join(homedir(), ".claude", ".credentials.json"),
     join(homedir(), ".claude", "credentials.json")
   ];
+  const isLinuxRoot = platform() === "linux" && typeof process.getuid === "function" && process.getuid() === 0;
+  if (isLinuxRoot) {
+    try {
+      const entries = await readdir("/home", { withFileTypes: true });
+      for (const entry of entries) {
+        if (!entry.isDirectory()) continue;
+        candidates.push(join("/home", entry.name, ".claude", ".credentials.json"));
+        candidates.push(join("/home", entry.name, ".claude", "credentials.json"));
+      }
+    } catch {
+    }
+  }
   for (const path of candidates) {
     const parsed = await readJsonSilently(path);
     if (parsed) {
@@ -849,7 +861,7 @@ async function ensureFrameworkBinary(frameworkId) {
       }
     }
   }
-  agentRuntimeAuthenticated = checkClaudeAuth(execFileSync);
+  agentRuntimeAuthenticated = await checkClaudeAuth();
 }
 var UPDATE_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 async function checkAndUpdateCli() {
@@ -901,28 +913,23 @@ async function checkAndUpdateCli() {
   } catch {
   }
 }
-function checkClaudeAuth(execFileSync) {
+async function checkClaudeAuth() {
   try {
-    const authOutput = execFileSync("claude", ["auth", "status"], { timeout: 1e4, stdio: "pipe" }).toString().trim();
-    let loggedIn = null;
-    try {
-      const parsed = JSON.parse(authOutput);
-      if (typeof parsed.loggedIn === "boolean") loggedIn = parsed.loggedIn;
-    } catch {
-      const lower = authOutput.toLowerCase();
-      if (lower.includes("not logged in") || lower.includes("logged out")) loggedIn = false;
-      else if (lower.includes("logged in")) loggedIn = true;
-    }
-    if (loggedIn === false) {
-      log('\u26A0\uFE0F  Claude Code is not authenticated. Run "claude" in a terminal to log in, then restart the manager.');
+    const report = await detectClaudeAuth();
+    if (!report) {
+      log("\u26A0\uFE0F  Claude Code is not authenticated. Run `claude /login` (or set `ANTHROPIC_API_KEY`) on the host, then the manager will pick it up on the next cycle.");
       return false;
-    } else if (loggedIn === null) {
-      log('\u26A0\uFE0F  Could not determine Claude Code auth state. Run "claude" in a terminal to verify login.');
+    }
+    if (report.status === "expired") {
+      log(`\u26A0\uFE0F  Claude Code auth expired (${report.mode}). Re-run \`claude /login\` to refresh.`);
       return false;
     }
+    if (report.status === "expiring_soon") {
+      log(`[auth] Claude Code token expiring soon (expires_at=${report.expires_at}) \u2014 still valid, proceeding`);
+    }
     return true;
-  } catch {
-    log('\u26A0\uFE0F  Could not check Claude Code auth status. Run "claude" in a terminal to ensure it is logged in.');
+  } catch (err) {
+    log(`\u26A0\uFE0F  Claude Code auth probe failed: ${err.message}`);
     return false;
   }
 }
@@ -2804,8 +2811,7 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
   }
   devChannels.push("server:direct-chat");
   if (!agentRuntimeAuthenticated) {
-    const { execFileSync } = await import("child_process");
-    agentRuntimeAuthenticated = checkClaudeAuth(execFileSync);
+    agentRuntimeAuthenticated = await checkClaudeAuth();
     if (!agentRuntimeAuthenticated) {
       log(`[persistent-session] Skipping '${codeName}' \u2014 Claude Code not authenticated`);
       return;