@integrity-labs/agt-cli 0.27.136 → 0.27.138

package/dist/{claude-pair-runtime-A5IITZ6J.js → claude-pair-runtime-CNTCM57R.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-5N5NFU27.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-WWEAEEL4.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-A5IITZ6J.js.map
+//# sourceMappingURL=claude-pair-runtime-CNTCM57R.js.map

package/dist/lib/manager-worker.js

@@ -17,7 +17,7 @@ import {
   provisionStopHook,
   requireHost,
   safeWriteJsonAtomic
-} from "../chunk-4B6KOQQL.js";
+} from "../chunk-SCZVYC5P.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -29,6 +29,7 @@ import {
   buildAllowedTools,
   checkChannelInputs,
   creditWatchdogGiveUpCount,
+  expandTemplateVars,
   formatMissingVar,
   getLastFailureContext,
   getProjectDir,
@@ -56,7 +57,7 @@ import {
   stopPersistentSession,
   takeWatchdogGiveUpCount,
   takeZombieDetection
-} from "../chunk-75QM5THV.js";
+} from "../chunk-RT37WJXI.js";
 import {
   KANBAN_CHECK_COMMAND,
   SUPPRESS_SENTINEL,
@@ -83,7 +84,7 @@ import {
   resolveDmTarget,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "../chunk-HDWKI7W3.js";
+} from "../chunk-PDDU4Z5V.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -4412,13 +4413,26 @@ function projectMcpKeys(_codeName, projectDir) {
     return null;
   }
 }
-function readMcpHttpServerConfig(projectDir, serverKey) {
+function readMcpHttpServerConfig(projectDir, serverKey, env) {
   try {
     const raw = readFileSync9(join8(projectDir, ".mcp.json"), "utf-8");
     const servers = JSON.parse(raw).mcpServers ?? {};
     const entry = servers[serverKey];
     if (entry && typeof entry.url === "string" && (entry.type === "http" || entry.type === void 0)) {
-      return { url: entry.url, ...entry.headers ? { headers: entry.headers } : {} };
+      const unresolved = /* @__PURE__ */ new Set();
+      const sub = (value) => {
+        if (!env) return value;
+        const r = expandTemplateVars(value, env);
+        for (const name of r.unresolved) unresolved.add(name);
+        return r.value;
+      };
+      const url = sub(entry.url);
+      let headers;
+      if (entry.headers) {
+        headers = {};
+        for (const [k, v] of Object.entries(entry.headers)) headers[k] = sub(v);
+      }
+      return { url, ...headers ? { headers } : {}, unresolved: [...unresolved] };
     }
     return null;
   } catch {
@@ -4439,10 +4453,16 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
     fetchImpl: fetch,
     runCli: (binary, args) => runCliProbe(binary, args, { env: probeEnv }),
     mcpProbe: async (target) => {
-      const cfg = readMcpHttpServerConfig(projectDir, target.serverKey);
+      const cfg = readMcpHttpServerConfig(projectDir, target.serverKey, probeEnv);
       if (!cfg) {
         return { status: "transient_error", message: `MCP server '${target.serverKey}' not resolvable from .mcp.json` };
       }
+      if (cfg.unresolved.length > 0) {
+        return {
+          status: "transient_error",
+          message: `MCP '${target.serverKey}' auth unresolved: ${cfg.unresolved.join(", ")}`
+        };
+      }
       return probeMcpHttp(cfg);
     },
     // ENG-6139: connected-account binding check for managed (Composio) toolkits.
@@ -4453,10 +4473,16 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
     // authenticates with these), plus the recorded connected_account_id.
     composioProbe: async (definitionId, credentials) => {
       const serverKey = definitionId.replace(/[^a-z0-9]/gi, "_").toLowerCase();
-      const cfg = readMcpHttpServerConfig(projectDir, serverKey);
+      const cfg = readMcpHttpServerConfig(projectDir, serverKey, probeEnv);
       if (!cfg) {
         return { status: "transient_error", message: `MCP server '${serverKey}' not resolvable from .mcp.json` };
       }
+      if (cfg.unresolved.length > 0) {
+        return {
+          status: "transient_error",
+          message: `MCP '${serverKey}' auth unresolved: ${cfg.unresolved.join(", ")}`
+        };
+      }
       const apiKey = cfg.headers?.["x-api-key"] ?? cfg.headers?.["X-API-Key"] ?? "";
       let expectedUserId = "";
       let serverId;
@@ -4476,8 +4502,9 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
     // linkage surfaces as a real `No connected account found` instead of a
     // green handshake. Skips (`null`) when no safe read-only tool is callable.
     composioToolCallProbe: async (target) => {
-      const cfg = readMcpHttpServerConfig(projectDir, target.serverKey);
+      const cfg = readMcpHttpServerConfig(projectDir, target.serverKey, probeEnv);
       if (!cfg) return null;
+      if (cfg.unresolved.length > 0) return null;
       return probeComposioMcpToolCall({ url: cfg.url, headers: cfg.headers });
     }
   };
@@ -4691,7 +4718,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.27.136" : "dev";
+var agtCliVersion = true ? "0.27.138" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -5889,7 +5916,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-5N5NFU27.js");
+      const { collectDiagnostics } = await import("../persistent-session-WWEAEEL4.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -5976,12 +6003,12 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-6L6WKHK5.js");
+      } = await import("../responsiveness-probe-MCKI22FY.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
         if (probeCodeNames.length > 0) {
-          const { takeAcpxExecFailureCount, creditAcpxExecFailureCount } = await import("../persistent-session-5N5NFU27.js");
+          const { takeAcpxExecFailureCount, creditAcpxExecFailureCount } = await import("../persistent-session-WWEAEEL4.js");
           const drainedGiveUps = /* @__PURE__ */ new Map();
           const drainedAcpxFailures = /* @__PURE__ */ new Map();
           const probes = collectResponsivenessProbes(probeCodeNames).map((p) => {
@@ -6015,7 +6042,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           deadLetterPendingInbound
-        } = await import("../responsiveness-probe-6L6WKHK5.js");
+        } = await import("../responsiveness-probe-MCKI22FY.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
         for (const tracked of consecutiveWedgeCycles.keys()) {
@@ -10521,7 +10548,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-A5IITZ6J.js");
+  } = await import("../claude-pair-runtime-CNTCM57R.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));