@integrity-labs/agt-cli 0.28.1014 → 0.28.1015

package/dist/{claude-pair-runtime-4F73QFXF.js → claude-pair-runtime-GSPFYCG4.js}

@@ -266,7 +266,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-IEGA6OSO.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-YP2UTQGA.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -734,4 +734,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-4F73QFXF.js.map
+//# sourceMappingURL=claude-pair-runtime-GSPFYCG4.js.map

package/dist/lib/manager-worker.js

@@ -55,6 +55,7 @@ import {
   provisionStopHook,
   readEnvNumber,
   readHostArchiveAddress,
+  reapLegacyTokenFile,
   reapMissingMcpSessions,
   reapStaleMcpChildren,
   reaperRestartBreakerReason,
@@ -64,7 +65,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-7QXIJNLA.js";
+} from "../chunk-GHHDFHKE.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -145,7 +146,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-QBQLG2PY.js";
+} from "../chunk-MHDNKKEO.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -218,6 +219,7 @@ import {
   isOnboardingArea,
   isParseError,
   isResolveError,
+  isRespawnExemptEnvVar,
   isSelfCompletion,
   isStaleForToday,
   isSystemInjectedContent,
@@ -248,7 +250,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-MLCGPEN6.js";
+} from "../chunk-RJ3SI5JG.js";
 import "../chunk-DHWNVVX4.js";
 import {
   reapOrphanChannelMcps
@@ -13174,6 +13176,16 @@ var dependencyRecoveryLedger = new DependencyRecoveryLedger();
 var unstableLatchUnreported = /* @__PURE__ */ new Set();
 var unstableLatchReportInFlight = /* @__PURE__ */ new Set();
 var killPausedCodeNames = /* @__PURE__ */ new Set();
+var tokenReapWarnedCodeNames = /* @__PURE__ */ new Set();
+function reapLegacyTokenFileEdgeWarned(codeName, log2, seen = tokenReapWarnedCodeNames) {
+  const removed = reapLegacyTokenFile(codeName, (message) => {
+    if (seen.has(codeName)) return;
+    seen.add(codeName);
+    log2(message);
+  });
+  if (removed) seen.delete(codeName);
+  return removed;
+}
 var notRunningCodeNames = /* @__PURE__ */ new Set();
 var BACK_ONLINE_GREETING_GUIDANCE = " When you reconnect, if you tell anyone you are back, start that message with a \u{1F44B} wave emoji and do not use a \u{1F7E2} green-light emoji.";
 function maybeAutoResume(agent) {
@@ -13642,7 +13654,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-KWFVG5EI.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-YTFWHUTQ.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -14385,7 +14397,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1014" : "dev";
+var agtCliVersion = true ? "0.28.1015" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -16020,7 +16032,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-IEGA6OSO.js");
+      const { collectDiagnostics } = await import("../persistent-session-YP2UTQGA.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -16162,7 +16174,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-IEGA6OSO.js");
+      const { collectDiagnostics } = await import("../persistent-session-YP2UTQGA.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -16338,7 +16350,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-KWFVG5EI.js");
+      } = await import("../responsiveness-probe-YTFWHUTQ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -16455,7 +16467,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-KWFVG5EI.js");
+        } = await import("../responsiveness-probe-YTFWHUTQ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -16611,7 +16623,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-P6KOHDYJ.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-TX4YQUTJ.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -17371,6 +17383,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   let agentDir = join42(adapter.getAgentDir(agent.code_name), "provision");
   if (agent.status === "draft" || agent.status === "paused") {
     forgetChannelSyncState(agent.agent_id);
+    reapLegacyTokenFileEdgeWarned(agent.code_name, log);
     if (previousKnownStatus !== agent.status) {
       log(`Agent '${agent.code_name}' is ${agent.status}, skipping provisioning`);
     }
@@ -18618,9 +18631,6 @@ async function processAgent(agent, agentStates, managedToolkits) {
           if (rotated) {
             log(`OAuth token refreshed for '${agent.code_name}/${integration.definition_id}'`);
           }
-          if (frameworkAdapter.writeTokenFile) {
-            frameworkAdapter.writeTokenFile(agent.code_name, integrations);
-          }
         }
       } catch (err) {
         log(`OAuth token refresh failed for '${agent.code_name}/${integration.definition_id}': ${err.message}`);
@@ -18769,7 +18779,8 @@ async function processAgent(agent, agentStates, managedToolkits) {
       if (prevIntHash !== EMPTY_INTEGRATIONS_HASH) {
         try {
           frameworkAdapter.writeIntegrations(agent.code_name, [], agent.agent_id, {
-            renderClaudeMdSection: renderIntegrationsSection
+            renderClaudeMdSection: renderIntegrationsSection,
+            log
           });
           agentState.knownIntegrationHashes.set(agent.agent_id, EMPTY_INTEGRATIONS_HASH);
           log(`[ENG-8035] Pruned integration-derived MCP entries for '${agent.code_name}' (integrations.length=0)`);
@@ -18793,7 +18804,8 @@ async function processAgent(agent, agentStates, managedToolkits) {
         }
         if (frameworkAdapter.writeIntegrations) {
           frameworkAdapter.writeIntegrations(agent.code_name, integrations, agent.agent_id, {
-            renderClaudeMdSection: renderIntegrationsSection
+            renderClaudeMdSection: renderIntegrationsSection,
+            log
           });
         }
         log(`Integrations provisioned for '${agent.code_name}' (${integrations.length} integration(s))`);
@@ -18828,7 +18840,11 @@ async function processAgent(agent, agentStates, managedToolkits) {
               ...liveProxyExtraHeaderVars(mcpJsonForReap),
               ...liveProxyTokenVars(mcpJsonForReap)
             ]);
-            const respawnVars = envOnlyRespawnVars(changedVars, mcpJsonForReap, CHANNEL_SECRET_ENV_KEYS).filter((v) => !liveProxyVars.has(v) && !isControlPlaneOnlyEnvVar(v));
+            const respawnVars = envOnlyRespawnVars(changedVars, mcpJsonForReap, CHANNEL_SECRET_ENV_KEYS).filter(
+              (v) => !liveProxyVars.has(v) && !isControlPlaneOnlyEnvVar(v) && // ENG-10939: consumerless identity vars whose one-time
+              // appearance must not interrupt a live turn.
+              !isRespawnExemptEnvVar(v)
+            );
             const envDiff = classifyEnvIntegrationsDiff(preWriteEnv, postWriteEnv);
             const rotatedOnlyVars = new Set(envDiff.rotated);
             const envRespawnReason = respawnVars.length > 0 && respawnVars.every((v) => rotatedOnlyVars.has(v)) ? "credential-rotation" : "hot-reload-mcp";
@@ -20991,7 +21007,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-KWFVG5EI.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-YTFWHUTQ.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -21034,7 +21050,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-IEGA6OSO.js");
+        const { collectDiagnostics } = await import("../persistent-session-YP2UTQGA.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -21085,7 +21101,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-IEGA6OSO.js");
+      const { collectDiagnostics } = await import("../persistent-session-YP2UTQGA.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -21756,7 +21772,7 @@ async function processClaudePairSessions(agents) {
     // cannot take it for itself — by the time it runs, the write it is looking
     // for may already have happened.
     snapshotPairConfig
-  } = await import("../claude-pair-runtime-4F73QFXF.js");
+  } = await import("../claude-pair-runtime-GSPFYCG4.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -22442,6 +22458,7 @@ ${mem.content}
   }
 }
 async function cleanupAgentFiles(codeName, agentDir) {
+  reapLegacyTokenFile(codeName, log);
   if (existsSync19(agentDir)) {
     try {
       rmSync8(agentDir, { recursive: true, force: true });
@@ -23189,6 +23206,7 @@ export {
   pruneRealtimeRebindState,
   realtimeRebindBackoffMs,
   realtimeRebindDue,
+  reapLegacyTokenFileEdgeWarned,
   recordChannelSyncFailure,
   recordRealtimeRebindFailure,
   refreshSkillsIndexInClaudeMd,