@integrity-labs/agt-cli 0.27.135 → 0.27.137

package/dist/{claude-pair-runtime-I7SKUE2Q.js → claude-pair-runtime-ZOHU673W.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-56AY3LH6.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-NSN62HZN.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-I7SKUE2Q.js.map
+//# sourceMappingURL=claude-pair-runtime-ZOHU673W.js.map

package/dist/lib/manager-worker.js

@@ -17,7 +17,7 @@ import {
   provisionStopHook,
   requireHost,
   safeWriteJsonAtomic
-} from "../chunk-HC7B2OVZ.js";
+} from "../chunk-UIRCFCED.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -29,6 +29,7 @@ import {
   buildAllowedTools,
   checkChannelInputs,
   creditWatchdogGiveUpCount,
+  expandTemplateVars,
   formatMissingVar,
   getLastFailureContext,
   getProjectDir,
@@ -56,7 +57,7 @@ import {
   stopPersistentSession,
   takeWatchdogGiveUpCount,
   takeZombieDetection
-} from "../chunk-XKX2HEQY.js";
+} from "../chunk-YJOFVGD2.js";
 import {
   KANBAN_CHECK_COMMAND,
   SUPPRESS_SENTINEL,
@@ -83,7 +84,7 @@ import {
   resolveDmTarget,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "../chunk-KZGU4X3A.js";
+} from "../chunk-TDMOEMDM.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -3536,8 +3537,9 @@ async function processOne(flag, opts) {
     await sendError(flag, opts, `\`/restart\` is only supported for Claude Code agents (this agent runs on \`${framework}\`).`);
     return;
   }
-  opts.log(`[restart-handler] Restarting tmux session for '${flag.codeName}' (source: ${flag.source})`);
-  opts.stopSession(flag.codeName);
+  const reasonSuffix = flag.source === "agent" && flag.reason ? ` reason="${flag.reason}"` : "";
+  opts.log(`[restart-handler] Restarting tmux session for '${flag.codeName}' (source: ${flag.source})${reasonSuffix}`);
+  opts.stopSession(flag.codeName, flag);
   await sendAck(flag, opts, `\u{1F504} Restart initiated for \`${flag.codeName}\` \u2014 the replacement session is being created.`);
 }
 async function sendAck(flag, opts, text) {
@@ -4411,13 +4413,26 @@ function projectMcpKeys(_codeName, projectDir) {
     return null;
   }
 }
-function readMcpHttpServerConfig(projectDir, serverKey) {
+function readMcpHttpServerConfig(projectDir, serverKey, env) {
   try {
     const raw = readFileSync9(join8(projectDir, ".mcp.json"), "utf-8");
     const servers = JSON.parse(raw).mcpServers ?? {};
     const entry = servers[serverKey];
     if (entry && typeof entry.url === "string" && (entry.type === "http" || entry.type === void 0)) {
-      return { url: entry.url, ...entry.headers ? { headers: entry.headers } : {} };
+      const unresolved = /* @__PURE__ */ new Set();
+      const sub = (value) => {
+        if (!env) return value;
+        const r = expandTemplateVars(value, env);
+        for (const name of r.unresolved) unresolved.add(name);
+        return r.value;
+      };
+      const url = sub(entry.url);
+      let headers;
+      if (entry.headers) {
+        headers = {};
+        for (const [k, v] of Object.entries(entry.headers)) headers[k] = sub(v);
+      }
+      return { url, ...headers ? { headers } : {}, unresolved: [...unresolved] };
     }
     return null;
   } catch {
@@ -4438,10 +4453,16 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
     fetchImpl: fetch,
     runCli: (binary, args) => runCliProbe(binary, args, { env: probeEnv }),
     mcpProbe: async (target) => {
-      const cfg = readMcpHttpServerConfig(projectDir, target.serverKey);
+      const cfg = readMcpHttpServerConfig(projectDir, target.serverKey, probeEnv);
       if (!cfg) {
         return { status: "transient_error", message: `MCP server '${target.serverKey}' not resolvable from .mcp.json` };
       }
+      if (cfg.unresolved.length > 0) {
+        return {
+          status: "transient_error",
+          message: `MCP '${target.serverKey}' auth unresolved: ${cfg.unresolved.join(", ")}`
+        };
+      }
       return probeMcpHttp(cfg);
     },
     // ENG-6139: connected-account binding check for managed (Composio) toolkits.
@@ -4452,10 +4473,16 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
     // authenticates with these), plus the recorded connected_account_id.
     composioProbe: async (definitionId, credentials) => {
       const serverKey = definitionId.replace(/[^a-z0-9]/gi, "_").toLowerCase();
-      const cfg = readMcpHttpServerConfig(projectDir, serverKey);
+      const cfg = readMcpHttpServerConfig(projectDir, serverKey, probeEnv);
       if (!cfg) {
         return { status: "transient_error", message: `MCP server '${serverKey}' not resolvable from .mcp.json` };
       }
+      if (cfg.unresolved.length > 0) {
+        return {
+          status: "transient_error",
+          message: `MCP '${serverKey}' auth unresolved: ${cfg.unresolved.join(", ")}`
+        };
+      }
       const apiKey = cfg.headers?.["x-api-key"] ?? cfg.headers?.["X-API-Key"] ?? "";
       let expectedUserId = "";
       let serverId;
@@ -4475,8 +4502,9 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
     // linkage surfaces as a real `No connected account found` instead of a
     // green handshake. Skips (`null`) when no safe read-only tool is callable.
     composioToolCallProbe: async (target) => {
-      const cfg = readMcpHttpServerConfig(projectDir, target.serverKey);
+      const cfg = readMcpHttpServerConfig(projectDir, target.serverKey, probeEnv);
       if (!cfg) return null;
+      if (cfg.unresolved.length > 0) return null;
       return probeComposioMcpToolCall({ url: cfg.url, headers: cfg.headers });
     }
   };
@@ -4690,7 +4718,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.27.135" : "dev";
+var agtCliVersion = true ? "0.27.137" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -5825,8 +5853,9 @@ async function pollCycle() {
     await processRestartFlags({
       log,
       resolveFramework: (codeName) => agentFrameworkCache.get(codeName) ?? null,
-      stopSession: (codeName) => {
-        stopPersistentSessionAndForgetMcpBaseline(codeName, "channel-restart-flag");
+      stopSession: (codeName, flag) => {
+        const breakerReason = flag.source === "agent" ? "agent-requested" : "channel-restart-flag";
+        stopPersistentSessionAndForgetMcpBaseline(codeName, breakerReason);
         agentState.persistentSessionAgents.delete(codeName);
         claudeAuthTupleBySession.delete(codeName);
       },
@@ -5887,7 +5916,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-56AY3LH6.js");
+      const { collectDiagnostics } = await import("../persistent-session-NSN62HZN.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -5974,12 +6003,12 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-L6B7WINR.js");
+      } = await import("../responsiveness-probe-RF5ZCTE7.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
         if (probeCodeNames.length > 0) {
-          const { takeAcpxExecFailureCount, creditAcpxExecFailureCount } = await import("../persistent-session-56AY3LH6.js");
+          const { takeAcpxExecFailureCount, creditAcpxExecFailureCount } = await import("../persistent-session-NSN62HZN.js");
           const drainedGiveUps = /* @__PURE__ */ new Map();
           const drainedAcpxFailures = /* @__PURE__ */ new Map();
           const probes = collectResponsivenessProbes(probeCodeNames).map((p) => {
@@ -6013,7 +6042,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           deadLetterPendingInbound
-        } = await import("../responsiveness-probe-L6B7WINR.js");
+        } = await import("../responsiveness-probe-RF5ZCTE7.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
         for (const tracked of consecutiveWedgeCycles.keys()) {
@@ -10519,7 +10548,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-I7SKUE2Q.js");
+  } = await import("../claude-pair-runtime-ZOHU673W.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));