@integrity-labs/agt-cli 0.10.19 → 0.10.22

package/dist/lib/manager-worker.js

@@ -10,7 +10,7 @@ import {
   provisionStopHook,
   requireHost,
   resolveChannels
-} from "../chunk-XTETZ2D5.js";
+} from "../chunk-VWYAPGHB.js";
 import {
   findTaskByTemplate,
   getProjectDir,
@@ -28,7 +28,7 @@ import {
   startPersistentSession,
   stopAllSessionsAndWait,
   stopPersistentSession
-} from "../chunk-B37H4CPW.js";
+} from "../chunk-QALSARWM.js";
 
 // src/lib/manager-worker.ts
 import { createHash } from "crypto";
@@ -355,11 +355,7 @@ async function detectClaudeAuth() {
   if (!creds) return null;
   return computeSubscriptionStatus(creds);
 }
-async function readOauthCredentials() {
-  if (platform() === "darwin") {
-    const fromKeychain = await readMacKeychain();
-    if (fromKeychain) return fromKeychain;
-  }
+async function findClaudeCredentialsPaths() {
   const candidates = [
     join(homedir(), ".claude", ".credentials.json"),
     join(homedir(), ".claude", "credentials.json")
@@ -376,6 +372,14 @@ async function readOauthCredentials() {
     } catch {
     }
   }
+  return candidates;
+}
+async function readOauthCredentials() {
+  if (platform() === "darwin") {
+    const fromKeychain = await readMacKeychain();
+    if (fromKeychain) return fromKeychain;
+  }
+  const candidates = await findClaudeCredentialsPaths();
   for (const path of candidates) {
     const parsed = await readJsonSilently(path);
     if (parsed) {
@@ -1328,7 +1332,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-5YGASFOA.js");
+      const { collectDiagnostics } = await import("../persistent-session-RPSYBZYO.js");
       const diagCodeNames = [...persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -2796,6 +2800,7 @@ function fireClaudeWorkTrigger(codeName, agentId, boardItems) {
   });
 }
 var persistentSessionAgents = /* @__PURE__ */ new Set();
+var claudeAuthTupleBySession = /* @__PURE__ */ new Map();
 async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
   const codeName = agent.code_name;
   const projectDir = getProjectDir2(codeName);
@@ -2823,6 +2828,36 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
       return;
     }
   }
+  let claudeAuthMode;
+  let anthropicApiKey;
+  let anthropicApiKeyFingerprint;
+  try {
+    const apiKey = getApiKey();
+    if (!apiKey) {
+      log(`[persistent-session] Skipping '${codeName}' \u2014 AGT_API_KEY not set`);
+      return;
+    }
+    const exchange = await exchangeApiKey(apiKey, false, { forceRefresh: true });
+    claudeAuthMode = exchange.claudeAuthMode;
+    anthropicApiKey = exchange.anthropicApiKey;
+    anthropicApiKeyFingerprint = exchange.anthropicApiKeyFingerprint;
+  } catch (err) {
+    const msg = err.message;
+    log(`[persistent-session] Failed to resolve auth for '${codeName}': ${msg} \u2014 refusing to spawn`);
+    if (isSessionHealthy(codeName)) {
+      stopPersistentSession(codeName, log);
+      persistentSessionAgents.delete(codeName);
+      claudeAuthTupleBySession.delete(codeName);
+    }
+    return;
+  }
+  const currentAuthTuple = `${claudeAuthMode}:${anthropicApiKeyFingerprint ?? "none"}`;
+  const recordedAuthTuple = claudeAuthTupleBySession.get(codeName);
+  if (recordedAuthTuple && recordedAuthTuple !== currentAuthTuple && isSessionHealthy(codeName)) {
+    log(`[persistent-session] Auth config changed for '${codeName}' (${recordedAuthTuple} \u2192 ${currentAuthTuple}) \u2014 restarting session`);
+    stopPersistentSession(codeName, log);
+    persistentSessionAgents.delete(codeName);
+  }
   if (!isSessionHealthy(codeName)) {
     if (persistentSessionAgents.has(codeName)) {
       log(`[persistent-session] Session for '${codeName}' is unhealthy, will restart`);
@@ -2846,12 +2881,18 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
       channels,
       devChannels,
       apiHost: requireHost(),
+      claudeAuthMode,
+      anthropicApiKey,
       log
     });
     persistentSessionAgents.add(codeName);
+    claudeAuthTupleBySession.set(codeName, currentAuthTuple);
     return;
   }
   resetRestartCount(codeName);
+  if (!claudeAuthTupleBySession.has(codeName)) {
+    claudeAuthTupleBySession.set(codeName, currentAuthTuple);
+  }
   const stableTasksHash = createHash("sha256").update(JSON.stringify(tasks)).digest("hex").slice(0, 16);
   const prevHash = knownTasksHashes.get(agent.agent_id);
   if (stableTasksHash !== prevHash) {