@integrity-labs/agt-cli 0.28.1 → 0.28.3

package/dist/{claude-pair-runtime-H73LQ5AR.js → claude-pair-runtime-OACH27NE.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-QXLGGGO2.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-DSG4HI4R.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-H73LQ5AR.js.map
+//# sourceMappingURL=claude-pair-runtime-OACH27NE.js.map

package/dist/lib/manager-worker.js

@@ -22,7 +22,7 @@ import {
   provisionStopHook,
   requireHost,
   safeWriteJsonAtomic
-} from "../chunk-PPCOPZTK.js";
+} from "../chunk-CPJ4TFUO.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -64,7 +64,7 @@ import {
   takeWatchdogGiveUpCount,
   takeZombieDetection,
   transcriptActivityAgeSeconds
-} from "../chunk-K2HIV5DB.js";
+} from "../chunk-LIB6VTH3.js";
 import {
   FLAGS_SCHEMA_VERSION,
   KANBAN_CHECK_COMMAND,
@@ -96,7 +96,7 @@ import {
   sumTranscriptUsageInWindow,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "../chunk-I6QV3IE7.js";
+} from "../chunk-NS4G4HHD.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -3599,7 +3599,22 @@ var agentState = {
   // compound-keyed (`agentId:<suffix>`)
   // ---------------------------------------------------------------------------
   knownChannelConfigHashes: /* @__PURE__ */ new Map(),
-  knownSkillHashes: /* @__PURE__ */ new Map()
+  knownSkillHashes: /* @__PURE__ */ new Map(),
+  // ---------------------------------------------------------------------------
+  // agentId-keyed (global skills, ENG-6349)
+  // ---------------------------------------------------------------------------
+  /**
+   * ENG-6349 (ADR-0023): per-agent set of global-skill ids (bare code_names)
+   * this worker installed on the previous refresh. Global skills have no folder
+   * prefix (they're written as `.claude/skills/<code_name>/` so `/<code_name>`
+   * resolves), so the integration orphan sweep — which scans for `integration-`/
+   * `plugin-` prefixes — can't see them. We track the delivered set here instead
+   * and remove only the ids that drop out (an unpublished global), never the
+   * agent's own or integration skills. In-memory only: a manager restart resets
+   * it, so an unpublish during a restart window leaves the folder until the next
+   * unpublish — acceptable for a platform-staff-rare action.
+   */
+  knownGlobalSkillIds: /* @__PURE__ */ new Map()
 };
 function clearAgentState(agentId, codeName) {
   agentState.knownVersions.delete(agentId);
@@ -3615,6 +3630,7 @@ function clearAgentState(agentId, codeName) {
   agentState.knownSenderPolicyHashes.delete(agentId);
   agentState.knownMsTeamsBehaviourHashes.delete(agentId);
   agentState.knownSlackBehaviourHashes.delete(agentId);
+  agentState.knownGlobalSkillIds.delete(agentId);
   agentState.agentDisplayNames.delete(codeName);
   agentState.codeNameToAgentId.delete(codeName);
   let channelCacheMutated = false;
@@ -3632,6 +3648,28 @@ function clearAgentState(agentId, codeName) {
   return channelCacheMutated;
 }
 
+// src/lib/manager/global-skills.ts
+function sanitizeGlobalSkillId(codeName) {
+  return codeName.trim().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+}
+function planGlobalSkillSync(globalSkills, prevIds, hashOf, knownHash) {
+  const currentIds = /* @__PURE__ */ new Set();
+  const installs = [];
+  for (const gs of globalSkills ?? []) {
+    const codeName = (gs?.code_name ?? "").trim();
+    const content = gs?.content ?? "";
+    if (!codeName || !content.trim()) continue;
+    const skillId = sanitizeGlobalSkillId(codeName);
+    if (!skillId) continue;
+    currentIds.add(skillId);
+    const hash = hashOf(content);
+    if (knownHash(skillId) === hash) continue;
+    installs.push({ skillId, content, hash });
+  }
+  const removes = [...prevIds].filter((id) => !currentIds.has(id));
+  return { installs, removes, currentIds };
+}
+
 // src/lib/wedge-detection.ts
 var DEFAULTS = {
   inboundWaitSeconds: 120,
@@ -5041,7 +5079,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1" : "dev";
+var agtCliVersion = true ? "0.28.3" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -6244,7 +6282,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-QXLGGGO2.js");
+      const { collectDiagnostics } = await import("../persistent-session-DSG4HI4R.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -6338,7 +6376,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-3BUUOZZO.js");
+      } = await import("../responsiveness-probe-GX5W4ZMI.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -6370,7 +6408,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-3BUUOZZO.js");
+        } = await import("../responsiveness-probe-GX5W4ZMI.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -7198,6 +7236,23 @@ async function processAgent(agent, agentStates) {
       }
       send({ type: "provisioned", agentId: agent.agent_id, codeName: agent.code_name });
     }
+    if (Array.isArray(refreshData.workflows)) {
+      try {
+        const provWorkflowsDir = join10(agentDir, ".claude", "workflows");
+        if (existsSync5(provWorkflowsDir)) {
+          const expected = new Set(refreshData.workflows.map((w) => `${w.name}.js`));
+          for (const file of readdirSync5(provWorkflowsDir)) {
+            if (!file.endsWith(".js")) continue;
+            if (expected.has(file)) continue;
+            try {
+              rmSync2(join10(provWorkflowsDir, file));
+            } catch {
+            }
+          }
+        }
+      } catch {
+      }
+    }
     if (frameworkAdapter.deployArtifactsToProject) {
       frameworkAdapter.deployArtifactsToProject(agent.code_name, agentDir);
     }
@@ -8018,6 +8073,40 @@ async function processAgent(agent, agentStates) {
       } catch (err) {
         log(`Integration skill cleanup failed for '${agent.code_name}': ${err.message}`);
       }
+      try {
+        const plan = planGlobalSkillSync(
+          refreshAny.global_skills ?? [],
+          agentState.knownGlobalSkillIds.get(agent.agent_id) ?? /* @__PURE__ */ new Set(),
+          (content) => createHash4("sha256").update(content).digest("hex").slice(0, 12),
+          (skillId) => agentState.knownSkillHashes.get(`global-skill:${agent.agent_id}:${skillId}`)
+        );
+        for (const { skillId, content, hash } of plan.installs) {
+          frameworkAdapter.installSkillFiles(agent.code_name, skillId, [{ relativePath: "SKILL.md", content }]);
+          agentState.knownSkillHashes.set(`global-skill:${agent.agent_id}:${skillId}`, hash);
+          log(`Installed global skill '${skillId}' for '${agent.code_name}'`);
+        }
+        if (plan.removes.length) {
+          const { rmSync: rmSync3 } = await import("fs");
+          const { homedir: homedir6 } = await import("os");
+          const globalSkillDirs = [
+            join10(homedir6(), ".augmented", agent.code_name, "skills"),
+            join10(homedir6(), ".augmented", agent.code_name, "project", ".claude", "skills"),
+            join10(homedir6(), `.openclaw-${agent.code_name}`, "skills"),
+            join10(agentDir, ".claude", "skills")
+          ];
+          for (const id of plan.removes) {
+            for (const dir of globalSkillDirs) {
+              const p = join10(dir, id);
+              if (existsSync5(p)) rmSync3(p, { recursive: true, force: true });
+            }
+            agentState.knownSkillHashes.delete(`global-skill:${agent.agent_id}:${id}`);
+            log(`Removed unpublished global skill '${id}' for '${agent.code_name}'`);
+          }
+        }
+        agentState.knownGlobalSkillIds.set(agent.agent_id, plan.currentIds);
+      } catch (err) {
+        log(`Global skill install failed for '${agent.code_name}': ${err.message}`);
+      }
       try {
         const agentFwForIndex = agentFrameworkCache.get(agent.code_name) ?? "openclaw";
         if (agentFwForIndex === "claude-code") {
@@ -10966,7 +11055,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-H73LQ5AR.js");
+  } = await import("../claude-pair-runtime-OACH27NE.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -11237,7 +11326,11 @@ function generateArtifacts(agent, refreshData, adapter) {
     knowledgeDelivery: refreshData.agent.knowledge_delivery ?? "both",
     teamMembers: refreshData.team_members ?? void 0,
     people: refreshData.people ?? void 0,
-    guardrails: refreshData.guardrails
+    guardrails: refreshData.guardrails,
+    // ADR-0012 / ENG-6352: down-synced dynamic workflows (flag-gated, resolved
+    // server-side). The claude-code adapter renders each as
+    // `.claude/workflows/<name>.js`; undefined/empty no-ops.
+    workflows: refreshData.workflows
   };
   const provisionOutput = provision(provisionInput, adapter.id);
   return provisionOutput.artifacts;