@integrity-labs/agt-cli 0.28.1012 → 0.28.1014

package/dist/{claude-pair-runtime-NPXBXUSE.js → claude-pair-runtime-4F73QFXF.js}

@@ -266,7 +266,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-KPASTJIV.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-IEGA6OSO.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -734,4 +734,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-NPXBXUSE.js.map
+//# sourceMappingURL=claude-pair-runtime-4F73QFXF.js.map

package/dist/lib/manager-worker.js

@@ -64,7 +64,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-O3DODZVZ.js";
+} from "../chunk-7QXIJNLA.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -145,11 +145,13 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-K73BIWKA.js";
+} from "../chunk-QBQLG2PY.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
+  CLAUDE_MD_BUDGET_CHARS,
   CLAUDE_MD_CONTEXT_ALARM_CHARS,
+  CLAUDE_MD_MANAGER_APPEND_HEADROOM_CHARS,
   CONVERSATION_FAILURE_CATEGORIES,
   DEFAULT_FRAMEWORK,
   DEFAULT_NEIGHBOURHOOD_MS,
@@ -166,6 +168,8 @@ import {
   KANBAN_NUDGE_ACTIONABLE_STATUSES,
   MAX_AVATAR_ENV_URL_BYTES,
   SCHEDULED_TURN_MARKER_FILENAME,
+  SKILLS_INDEX_SECTION_END,
+  SKILLS_INDEX_SECTION_START,
   SUPPRESS_SENTINEL,
   StreamEncoder,
   UNKNOWN_RATE_LIMIT,
@@ -244,7 +248,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-LV72A4BE.js";
+} from "../chunk-MLCGPEN6.js";
 import "../chunk-DHWNVVX4.js";
 import {
   reapOrphanChannelMcps
@@ -1347,23 +1351,29 @@ function isQuarantineFile(value) {
 // src/lib/claude-md-size.ts
 import { readFileSync as readFileSync5 } from "fs";
 import { join as join5 } from "path";
-function measureClaudeMd(configDir, codeName, ceiling = CLAUDE_MD_CONTEXT_ALARM_CHARS) {
+function measureClaudeMd(configDir, codeName, ceiling = CLAUDE_MD_CONTEXT_ALARM_CHARS, graftHeadroomChars = CLAUDE_MD_MANAGER_APPEND_HEADROOM_CHARS) {
   let chars;
   let bytes;
+  let text;
   try {
     const buf = readFileSync5(join5(configDir, codeName, "project", "CLAUDE.md"));
-    chars = buf.toString("utf8").length;
+    text = buf.toString("utf8");
+    chars = text.length;
     bytes = buf.length;
   } catch {
     return null;
   }
   const skillDescriptionChars = measureCoreKnowledgeDescription(configDir, codeName);
   const residentChars = chars + skillDescriptionChars;
+  const graftChars = measureManagedGraft(text, readProvisionClaudeMd(configDir, codeName));
   return {
     chars,
     bytes,
     skillDescriptionChars,
     residentChars,
+    graftChars,
+    graftHeadroom: graftHeadroomChars,
+    graftOverHeadroom: graftChars > graftHeadroomChars,
     ceiling,
     overCeiling: residentChars > ceiling
   };
@@ -1390,7 +1400,40 @@ function measureCoreKnowledgeDescription(configDir, codeName) {
   }
   return 0;
 }
+function measureManagedGraft(text, generated) {
+  const blocks = [
+    // The skills index is unconditionally the manager's: `refreshSkillsIndexInClaudeMd`
+    // is its only writer, and the deploy step strips it before comparing and
+    // re-grafts it precisely BECAUSE the generator never produces it.
+    [SKILLS_INDEX_SECTION_START, SKILLS_INDEX_SECTION_END, false],
+    // The integrations section has TWO possible authors, and this is the trap.
+    // `generateClaudeMd` emits it — sentinels and all — into the generated body
+    // when `renderIntegrationsSection` is on, and the manager writes it
+    // otherwise. Counting it blindly would bill generated content to the
+    // manager and could manufacture a breach out of a body CI already measured.
+    // So it counts only when the GENERATED artifact does not contain it.
+    [INTEGRATIONS_SECTION_START, INTEGRATIONS_SECTION_END, true]
+  ];
+  let total = 0;
+  for (const [start, end, checkGenerated] of blocks) {
+    const from = text.indexOf(start);
+    if (from === -1) continue;
+    const to = text.indexOf(end, from + start.length);
+    if (to === -1) continue;
+    if (checkGenerated && (generated === null || generated.includes(start))) continue;
+    total += to + end.length - from;
+  }
+  return total;
+}
+function readProvisionClaudeMd(configDir, codeName) {
+  try {
+    return readFileSync5(join5(configDir, codeName, "provision", "CLAUDE.md"), "utf8");
+  } catch {
+    return null;
+  }
+}
 var lastOverCeiling = /* @__PURE__ */ new Map();
+var lastGraftOverHeadroom = /* @__PURE__ */ new Map();
 function logClaudeMdCeilingTransition(codeName, report, log2) {
   if (!report) return null;
   const previous = lastOverCeiling.get(codeName);
@@ -1404,6 +1447,19 @@ function logClaudeMdCeilingTransition(codeName, report, log2) {
   log2(line);
   return line;
 }
+function logClaudeMdGraftTransition(codeName, report, log2) {
+  if (!report) return null;
+  const previous = lastGraftOverHeadroom.get(codeName);
+  if (previous === void 0 && !report.graftOverHeadroom) {
+    lastGraftOverHeadroom.set(codeName, false);
+    return null;
+  }
+  if (previous === report.graftOverHeadroom) return null;
+  lastGraftOverHeadroom.set(codeName, report.graftOverHeadroom);
+  const line = report.graftOverHeadroom ? `[claude-md] '${codeName}' manager-appended blocks are ${report.graftChars} chars, OVER the ${report.graftHeadroom} the generator reserved by ${report.graftChars - report.graftHeadroom}. The generated body is sized on the assumption that the append fits in that reservation, so the deployed file is larger than CI can see. The append is DB-driven and per-agent (skills index, integrations section) \u2014 shrink it by installing fewer skills or turning the skills index off, not by raising the reservation (ENG-10904)` : `[claude-md] '${codeName}' manager-appended blocks back within the reserved ${report.graftHeadroom} chars (${report.graftChars})`;
+  log2(line);
+  return line;
+}
 
 // ../../packages/core/dist/integrations/forwarded-tools-report.js
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync3 } from "fs";
@@ -5680,6 +5736,7 @@ ${trimmedOverrides}
 }
 
 // src/lib/integration-skill-layout.ts
+var UMBRELLA_DESCRIPTION_MAX_CHARS = Math.round(CLAUDE_MD_BUDGET_CHARS * 0.01);
 function extractDescription(content) {
   const match = content.match(/^---\s*([\s\S]*?)---/);
   if (!match) return null;
@@ -5737,7 +5794,7 @@ function buildIntegrationBundle(skills) {
     }
   }
   const integrationName = slugToTitle(integrationSlug);
-  const umbrellaDescription = entries.map((e) => e.description ?? `Use for ${e.skillName}.`).join(" ");
+  const umbrellaDescription = buildUmbrellaDescription(integrationName, entries);
   const scopeList = entries.map((e) => {
     const label = e.skillName || slugToTitle(e.scopeSlug);
     const desc = e.description ? ` \u2014 ${e.description}` : "";
@@ -5775,6 +5832,24 @@ function buildIntegrationBundle(skills) {
     scopePaths: entries.map((e) => e.scopePath)
   };
 }
+function buildUmbrellaDescription(integrationName, entries) {
+  const labels = entries.map((e) => e.skillName?.trim() || slugToTitle(e.scopeSlug));
+  const prefix = `Use for ${integrationName}.`;
+  const suffix = "Read the matching file under scopes/ for tool names and usage.";
+  const compose = (count) => {
+    const omitted = labels.length - count;
+    const listed = labels.slice(0, count).join("; ");
+    const scopes = omitted > 0 ? `${listed}; +${omitted} more` : listed;
+    return `${prefix} Scopes: ${scopes}. ${suffix}`;
+  };
+  let shown = labels.length;
+  while (shown > 1 && compose(shown).length > UMBRELLA_DESCRIPTION_MAX_CHARS) {
+    shown -= 1;
+  }
+  const line = compose(shown);
+  if (line.length <= UMBRELLA_DESCRIPTION_MAX_CHARS) return line;
+  return `${line.slice(0, Math.max(0, UMBRELLA_DESCRIPTION_MAX_CHARS - 1))}\u2026`;
+}
 function slugToTitle(slug) {
   return slug.split(/[-_]/).filter(Boolean).map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ");
 }
@@ -13567,7 +13642,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-RSVGRS63.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-KWFVG5EI.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -14310,7 +14385,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1012" : "dev";
+var agtCliVersion = true ? "0.28.1014" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15747,6 +15822,7 @@ function claudeMdSizeFor(codeName) {
   if (!config?.configDir) return null;
   const report = measureClaudeMd(config.configDir, codeName);
   logClaudeMdCeilingTransition(codeName, report, log);
+  logClaudeMdGraftTransition(codeName, report, log);
   return report;
 }
 function forwardedToolsFor(codeName) {
@@ -15811,8 +15887,8 @@ function send(msg) {
     log(`Error: ${msg.message}`);
   }
 }
-var SKILLS_INDEX_START = "<!-- AGT:SKILLS_INDEX_START -->";
-var SKILLS_INDEX_END = "<!-- AGT:SKILLS_INDEX_END -->";
+var SKILLS_INDEX_START = SKILLS_INDEX_SECTION_START;
+var SKILLS_INDEX_END = SKILLS_INDEX_SECTION_END;
 function sanitizeSkillsIndexText(value) {
   return value.replaceAll(SKILLS_INDEX_START, "").replaceAll(SKILLS_INDEX_END, "").replace(/<!--[\s\S]*?-->/g, "").replace(/\r?\n+/g, " ").trim();
 }
@@ -15944,7 +16020,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-KPASTJIV.js");
+      const { collectDiagnostics } = await import("../persistent-session-IEGA6OSO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -16086,7 +16162,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-KPASTJIV.js");
+      const { collectDiagnostics } = await import("../persistent-session-IEGA6OSO.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -16262,7 +16338,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-RSVGRS63.js");
+      } = await import("../responsiveness-probe-KWFVG5EI.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -16379,7 +16455,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-RSVGRS63.js");
+        } = await import("../responsiveness-probe-KWFVG5EI.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -16535,7 +16611,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-YV2X4AGF.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-P6KOHDYJ.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -20915,7 +20991,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-RSVGRS63.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-KWFVG5EI.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -20958,7 +21034,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-KPASTJIV.js");
+        const { collectDiagnostics } = await import("../persistent-session-IEGA6OSO.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -21009,7 +21085,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-KPASTJIV.js");
+      const { collectDiagnostics } = await import("../persistent-session-IEGA6OSO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -21680,7 +21756,7 @@ async function processClaudePairSessions(agents) {
     // cannot take it for itself — by the time it runs, the write it is looking
     // for may already have happened.
     snapshotPairConfig
-  } = await import("../claude-pair-runtime-NPXBXUSE.js");
+  } = await import("../claude-pair-runtime-4F73QFXF.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));