@integrity-labs/agt-cli 0.10.21 → 0.10.23

package/dist/lib/manager-worker.js

@@ -10,7 +10,7 @@ import {
   provisionStopHook,
   requireHost,
   resolveChannels
-} from "../chunk-XTETZ2D5.js";
+} from "../chunk-VWYAPGHB.js";
 import {
   findTaskByTemplate,
   getProjectDir,
@@ -28,7 +28,7 @@ import {
   startPersistentSession,
   stopAllSessionsAndWait,
   stopPersistentSession
-} from "../chunk-UJJDJME5.js";
+} from "../chunk-4TBTAMRH.js";
 
 // src/lib/manager-worker.ts
 import { createHash } from "crypto";
@@ -1332,7 +1332,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-EBTRDD7A.js");
+      const { collectDiagnostics } = await import("../persistent-session-SXBLRKM6.js");
       const diagCodeNames = [...persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -2800,6 +2800,7 @@ function fireClaudeWorkTrigger(codeName, agentId, boardItems) {
   });
 }
 var persistentSessionAgents = /* @__PURE__ */ new Set();
+var claudeAuthTupleBySession = /* @__PURE__ */ new Map();
 async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
   const codeName = agent.code_name;
   const projectDir = getProjectDir2(codeName);
@@ -2820,12 +2821,47 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
     }
   }
   devChannels.push("server:direct-chat");
-  if (!agentRuntimeAuthenticated) {
-    agentRuntimeAuthenticated = await checkClaudeAuth();
-    if (!agentRuntimeAuthenticated) {
-      log(`[persistent-session] Skipping '${codeName}' \u2014 Claude Code not authenticated`);
+  let claudeAuthMode;
+  let anthropicApiKey;
+  let anthropicApiKeyFingerprint;
+  try {
+    const apiKey = getApiKey();
+    if (!apiKey) {
+      log(`[persistent-session] Skipping '${codeName}' \u2014 AGT_API_KEY not set`);
       return;
     }
+    const exchange = await exchangeApiKey(apiKey, false, { forceRefresh: true });
+    claudeAuthMode = exchange.claudeAuthMode;
+    anthropicApiKey = exchange.anthropicApiKey;
+    anthropicApiKeyFingerprint = exchange.anthropicApiKeyFingerprint;
+  } catch (err) {
+    const msg = err.message;
+    log(`[persistent-session] Failed to resolve auth for '${codeName}': ${msg} \u2014 refusing to spawn`);
+    if (isSessionHealthy(codeName)) {
+      stopPersistentSession(codeName, log);
+      persistentSessionAgents.delete(codeName);
+      claudeAuthTupleBySession.delete(codeName);
+    }
+    return;
+  }
+  if (claudeAuthMode === "subscription") {
+    if (!agentRuntimeAuthenticated) {
+      agentRuntimeAuthenticated = await checkClaudeAuth();
+      if (!agentRuntimeAuthenticated) {
+        log(`[persistent-session] Skipping '${codeName}' \u2014 Claude Code not authenticated (subscription mode)`);
+        return;
+      }
+    }
+  } else if (!anthropicApiKey) {
+    log(`[persistent-session] Skipping '${codeName}' \u2014 api_key mode but no key returned from exchange`);
+    return;
+  }
+  const currentAuthTuple = `${claudeAuthMode}:${anthropicApiKeyFingerprint ?? "none"}`;
+  const recordedAuthTuple = claudeAuthTupleBySession.get(codeName);
+  if (recordedAuthTuple && recordedAuthTuple !== currentAuthTuple && isSessionHealthy(codeName)) {
+    log(`[persistent-session] Auth config changed for '${codeName}' (${recordedAuthTuple} \u2192 ${currentAuthTuple}) \u2014 restarting session`);
+    stopPersistentSession(codeName, log);
+    persistentSessionAgents.delete(codeName);
   }
   if (!isSessionHealthy(codeName)) {
     if (persistentSessionAgents.has(codeName)) {
@@ -2850,12 +2886,18 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
       channels,
       devChannels,
       apiHost: requireHost(),
+      claudeAuthMode,
+      anthropicApiKey,
       log
     });
     persistentSessionAgents.add(codeName);
+    claudeAuthTupleBySession.set(codeName, currentAuthTuple);
     return;
   }
   resetRestartCount(codeName);
+  if (!claudeAuthTupleBySession.has(codeName)) {
+    claudeAuthTupleBySession.set(codeName, currentAuthTuple);
+  }
   const stableTasksHash = createHash("sha256").update(JSON.stringify(tasks)).digest("hex").slice(0, 16);
   const prevHash = knownTasksHashes.get(agent.agent_id);
   if (stableTasksHash !== prevHash) {