@integrity-labs/agt-cli 0.27.159 → 0.27.160

package/dist/{claude-pair-runtime-FTU6NTBF.js → claude-pair-runtime-G4MYOINJ.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-EWHFMQRC.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-W6V2DO3R.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-FTU6NTBF.js.map
+//# sourceMappingURL=claude-pair-runtime-G4MYOINJ.js.map

package/dist/lib/manager-worker.js

@@ -1,10 +1,13 @@
 import {
   ApiError,
   CHANNEL_SECRET_ENV_KEYS,
+  HostFlagStore,
   INTEGRATIONS_SECTION_END,
   INTEGRATIONS_SECTION_START,
   SUPERVISOR_RESTART_EXIT_CODE,
   api,
+  atomicWriteFileSync,
+  defaultFlagsCachePath,
   estimateActiveTasksTokens,
   exchangeApiKey,
   extractCommandNotFound,
@@ -19,7 +22,7 @@ import {
   provisionStopHook,
   requireHost,
   safeWriteJsonAtomic
-} from "../chunk-F5ZAIJHI.js";
+} from "../chunk-O24XVAYZ.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -61,8 +64,9 @@ import {
   takeWatchdogGiveUpCount,
   takeZombieDetection,
   transcriptActivityAgeSeconds
-} from "../chunk-GJVY7WKU.js";
+} from "../chunk-7RCGHACC.js";
 import {
+  FLAGS_SCHEMA_VERSION,
   KANBAN_CHECK_COMMAND,
   MAX_AVATAR_ENV_URL_BYTES,
   SUPPRESS_SENTINEL,
@@ -91,7 +95,7 @@ import {
   resolveDmTarget,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "../chunk-5E5B4T7K.js";
+} from "../chunk-BC26YO7P.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -99,10 +103,10 @@ import {
 
 // src/lib/manager-worker.ts
 import { createHash as createHash3 } from "crypto";
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync4, appendFileSync, mkdirSync as mkdirSync4, chmodSync, existsSync as existsSync5, rmSync as rmSync2, readdirSync as readdirSync4, statSync as statSync3, unlinkSync, copyFileSync } from "fs";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync4, appendFileSync, mkdirSync as mkdirSync3, chmodSync, existsSync as existsSync5, rmSync as rmSync2, readdirSync as readdirSync4, statSync as statSync3, unlinkSync, copyFileSync } from "fs";
 import https from "https";
 import { execFileSync as syncExecFile } from "child_process";
-import { join as join9, dirname as dirname3 } from "path";
+import { join as join9, dirname as dirname2 } from "path";
 import { homedir as homedir5 } from "os";
 import { fileURLToPath } from "url";
 
@@ -752,40 +756,6 @@ function extractSlackBehaviourSubset(config2) {
 // src/lib/channel-quarantine.ts
 import { readFileSync } from "fs";
 import { join } from "path";
-
-// src/lib/atomic-write.ts
-import { closeSync, fsyncSync, openSync, writeSync, renameSync, mkdirSync } from "fs";
-import { dirname } from "path";
-function atomicWriteFileSync(path, data) {
-  const dirPath = dirname(path);
-  const tmpPath = `${path}.tmp.${process.pid}.${Math.random().toString(36).slice(2, 8)}`;
-  try {
-    mkdirSync(dirPath, { recursive: true });
-  } catch {
-  }
-  const fd = openSync(tmpPath, "w", 420);
-  try {
-    writeSync(fd, data);
-    try {
-      fsyncSync(fd);
-    } catch {
-    }
-  } finally {
-    closeSync(fd);
-  }
-  renameSync(tmpPath, path);
-  try {
-    const dirFd = openSync(dirPath, "r");
-    try {
-      fsyncSync(dirFd);
-    } finally {
-      closeSync(dirFd);
-    }
-  } catch {
-  }
-}
-
-// src/lib/channel-quarantine.ts
 var ESSENTIAL_CHANNEL_KEYS = /* @__PURE__ */ new Set(["direct-chat", "augmented"]);
 var OPTIONAL_CHANNEL_KEYS = /* @__PURE__ */ new Set([
   "telegram",
@@ -1391,8 +1361,8 @@ function runCliProbe(binary, args, opts = {}) {
 }
 
 // src/lib/self-update-coalesce.ts
-import { readFileSync as readFileSync2, writeFileSync, mkdirSync as mkdirSync2 } from "fs";
-import { dirname as dirname2 } from "path";
+import { readFileSync as readFileSync2, writeFileSync, mkdirSync } from "fs";
+import { dirname } from "path";
 var DEFAULT_SELF_UPDATE_COALESCE_MS = 30 * 60 * 1e3;
 function resolveCoalesceWindowMs(env = process.env) {
   const raw = env.AGT_SELF_UPDATE_COALESCE_MS;
@@ -1414,7 +1384,7 @@ function readLastSelfUpdateAppliedMs(markerPath, now = Date.now(), read = (p) =>
   return v;
 }
 function stampLastSelfUpdateApplied(markerPath, now = Date.now(), write = (p, v) => {
-  mkdirSync2(dirname2(p), { recursive: true });
+  mkdirSync(dirname(p), { recursive: true });
   writeFileSync(p, v);
 }) {
   try {
@@ -3655,7 +3625,7 @@ function partitionActionableByPoison(actionable, states, config2) {
 }
 
 // src/lib/restart-flags.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync3, readFileSync as readFileSync8, renameSync as renameSync2, rmSync, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readdirSync as readdirSync3, readFileSync as readFileSync8, renameSync, rmSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join8 } from "path";
 import { randomUUID } from "crypto";
@@ -4924,7 +4894,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.27.159" : "dev";
+var agtCliVersion = true ? "0.27.160" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -5019,7 +4989,7 @@ async function ensureToolkitCli(toolkitSlug) {
         toolkitCliEnsured.add(toolkitSlug);
         return;
       }
-      brewBinDir = dirname3(brewPath);
+      brewBinDir = dirname2(brewPath);
       const isRoot = typeof process.getuid === "function" && process.getuid() === 0;
       log(`[toolkit-install] ${toolkitSlug}: installing via brew (${pkg})\u2026`);
       if (isRoot) {
@@ -5117,7 +5087,7 @@ function ensureClaudeManagedSettings(path = claudeManagedSettingsPath()) {
     }
     if (settings.channelsEnabled === true) return "ok";
     settings.channelsEnabled = true;
-    mkdirSync4(dirname3(path), { recursive: true });
+    mkdirSync3(dirname2(path), { recursive: true });
     writeFileSync4(path, `${JSON.stringify(settings, null, 2)}
 `);
     log(`[managed-settings] set channelsEnabled:true in ${path} (ENG-5786 \u2014 unblocks Claude Code channels)`);
@@ -5159,7 +5129,7 @@ async function ensureFrameworkBinary(frameworkId) {
       log(`Claude Code install failed: ${err.message}`);
       return;
     }
-    const brewBinDir = dirname3(brewPath);
+    const brewBinDir = dirname2(brewPath);
     if (!process.env.PATH?.split(":").includes(brewBinDir)) {
       process.env.PATH = `${brewBinDir}:${process.env.PATH ?? ""}`;
     }
@@ -5538,7 +5508,7 @@ function ensureEvalEmptyMcpConfig() {
   if (evalEmptyMcpConfigPath && existsSync5(evalEmptyMcpConfigPath)) return evalEmptyMcpConfigPath;
   const dir = join9(homedir5(), ".augmented");
   try {
-    mkdirSync4(dir, { recursive: true });
+    mkdirSync3(dir, { recursive: true });
   } catch {
   }
   const p = join9(dir, ".eval-empty-mcp.json");
@@ -5622,7 +5592,7 @@ function loadGatewayPorts() {
   }
 }
 function saveGatewayPorts(ports) {
-  mkdirSync4(AUGMENTED_DIR, { recursive: true });
+  mkdirSync3(AUGMENTED_DIR, { recursive: true });
   writeFileSync4(GATEWAY_PORTS_FILE, JSON.stringify(ports, null, 2));
 }
 function allocatePort(codeName) {
@@ -5665,6 +5635,14 @@ function channelQuarantineStore() {
   }
   return _channelQuarantineStore;
 }
+var _hostFlagStore = null;
+function hostFlagStore() {
+  if (!_hostFlagStore) {
+    const dir = config?.configDir ?? join9(process.env["HOME"] ?? "/tmp", ".augmented");
+    _hostFlagStore = new HostFlagStore({ cachePath: defaultFlagsCachePath(dir), log });
+  }
+  return _hostFlagStore;
+}
 function channelQuarantineMode() {
   const v = process.env["AGT_CHANNEL_QUARANTINE_MODE"]?.toLowerCase();
   if (v === "off") return "off";
@@ -5716,7 +5694,7 @@ function log(msg) {
   if (!managerLogPath) {
     try {
       managerLogPath = join9(homedir5(), ".augmented", "manager.log");
-      mkdirSync4(dirname3(managerLogPath), { recursive: true });
+      mkdirSync3(dirname2(managerLogPath), { recursive: true });
       if (existsSync5(managerLogPath)) {
         chmodSync(managerLogPath, 384);
       }
@@ -5849,7 +5827,7 @@ async function migrateToProfiles() {
     const profileAuthDir = join9(profileDir, "agents", codeName, "agent");
     const authFile = join9(sharedAuthDir, "auth-profiles.json");
     if (existsSync5(authFile)) {
-      mkdirSync4(profileAuthDir, { recursive: true });
+      mkdirSync3(profileAuthDir, { recursive: true });
       const authContent = readFileSync9(authFile, "utf-8");
       writeFileSync4(join9(profileAuthDir, "auth-profiles.json"), authContent);
     }
@@ -6122,7 +6100,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-EWHFMQRC.js");
+      const { collectDiagnostics } = await import("../persistent-session-W6V2DO3R.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -6185,11 +6163,18 @@ async function pollCycle() {
         // ALL channel inbound — the API opens a host-scoped alert on it.
         // Omitted (undefined) on hosts that haven't run the assertion
         // (non-claude-code frameworks).
-        channels_setting_status: lastManagedSettingsStatus ?? void 0
+        channels_setting_status: lastManagedSettingsStatus ?? void 0,
+        // ENG-6251: capability advertisement — the flags schema version this
+        // CLI compiled with, so the admin UI can show flip reach across a
+        // mixed-CLI fleet (an older CLI sends an older fingerprint).
+        flags_schema_version: FLAGS_SCHEMA_VERSION
       });
       if (hbResp?.maintenance_window) {
         cachedMaintenanceWindow = hbResp.maintenance_window;
       }
+      if (hbResp?.feature_flags) {
+        hostFlagStore().applyHeartbeat(hbResp.feature_flags, hbResp.flags_schema_version);
+      }
       try {
         if (decideMaintenanceWindowGate({ window: cachedMaintenanceWindow, now: /* @__PURE__ */ new Date() }) === "proceed") {
           const { maybeUpdateClaudeCode } = await import("../claude-code-updater-4E5T2X3Z.js");
@@ -6209,12 +6194,12 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-SWHB27QI.js");
+      } = await import("../responsiveness-probe-LY2H2XR5.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
         if (probeCodeNames.length > 0) {
-          const { takeAcpxExecFailureCount, creditAcpxExecFailureCount } = await import("../persistent-session-EWHFMQRC.js");
+          const { takeAcpxExecFailureCount, creditAcpxExecFailureCount } = await import("../persistent-session-W6V2DO3R.js");
           const drainedGiveUps = /* @__PURE__ */ new Map();
           const drainedAcpxFailures = /* @__PURE__ */ new Map();
           const probes = collectResponsivenessProbes(probeCodeNames).map((p) => {
@@ -6248,7 +6233,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-SWHB27QI.js");
+        } = await import("../responsiveness-probe-LY2H2XR5.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -6960,7 +6945,7 @@ async function processAgent(agent, agentStates) {
   try {
     const artifacts = generateArtifacts(agent, refreshData, frameworkAdapter);
     const changedFiles = [];
-    mkdirSync4(agentDir, { recursive: true });
+    mkdirSync3(agentDir, { recursive: true });
     for (const artifact of artifacts) {
       const filePath = join9(agentDir, artifact.relativePath);
       let existingHash;
@@ -7028,7 +7013,7 @@ async function processAgent(agent, agentStates) {
       log(`${verb} '${agent.code_name}': ${fileNames}`);
       for (const file of changedFiles) {
         const filePath = join9(agentDir, file.relativePath);
-        mkdirSync4(dirname3(filePath), { recursive: true });
+        mkdirSync3(dirname2(filePath), { recursive: true });
         if (file.relativePath === ".mcp.json") {
           safeWriteJsonAtomic(filePath, file.content, { mode: 384 });
         } else {
@@ -7458,8 +7443,8 @@ async function processAgent(agent, agentStates) {
     try {
       const agentProvisionDir = agentDir;
       const projectDir = join9(homedir5(), ".augmented", agent.code_name, "project");
-      mkdirSync4(agentProvisionDir, { recursive: true });
-      mkdirSync4(projectDir, { recursive: true });
+      mkdirSync3(agentProvisionDir, { recursive: true });
+      mkdirSync3(projectDir, { recursive: true });
       const provisionMcpPath = join9(agentProvisionDir, ".mcp.json");
       const projectMcpPath = join9(projectDir, ".mcp.json");
       let mcpConfig = { mcpServers: {} };
@@ -10838,7 +10823,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-FTU6NTBF.js");
+  } = await import("../claude-pair-runtime-G4MYOINJ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -11220,7 +11205,7 @@ async function downloadMemories(agent, memoryDir, log2, { force }) {
     lastDownloadHash.set(agent.agent_id, responseHash);
     lastLocalFileHash.set(agent.agent_id, localListHash);
     if (dbMemories.memories?.length) {
-      mkdirSync4(memoryDir, { recursive: true });
+      mkdirSync3(memoryDir, { recursive: true });
       let written = 0;
       let overwritten = 0;
       for (let i = 0; i < dbMemories.memories.length; i++) {
@@ -11389,6 +11374,7 @@ function startPolling() {
   running = true;
   void startCaffeinate();
   loadChannelHashCache2();
+  hostFlagStore().init();
   log(`Starting poll loop (interval=${config.intervalMs}ms, configDir=${config.configDir})`);
   void killAllAgtTmuxSessions().catch(() => {
   }).then(() => migrateToProfiles()).then(() => {
@@ -11646,8 +11632,8 @@ function restartRunningChannelMcps(basenames) {
 }
 function deployMcpAssets() {
   const targetDir = join9(homedir5(), ".augmented", "_mcp");
-  mkdirSync4(targetDir, { recursive: true });
-  const moduleDir = dirname3(fileURLToPath(import.meta.url));
+  mkdirSync3(targetDir, { recursive: true });
+  const moduleDir = dirname2(fileURLToPath(import.meta.url));
   let mcpSourceDir = "";
   let dir = moduleDir;
   for (let i = 0; i < 6; i++) {
@@ -11656,7 +11642,7 @@ function deployMcpAssets() {
       mcpSourceDir = candidate;
       break;
     }
-    const parent = dirname3(dir);
+    const parent = dirname2(dir);
     if (parent === dir) break;
     dir = parent;
   }