@integrity-labs/agt-cli 0.28.1053 → 0.28.1055

package/dist/{claude-pair-runtime-KMPRE2ZJ.js → claude-pair-runtime-TSRRFBNJ.js}

@@ -266,7 +266,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-5RX4P7GP.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-WSJVCGEO.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -734,4 +734,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-KMPRE2ZJ.js.map
+//# sourceMappingURL=claude-pair-runtime-TSRRFBNJ.js.map

package/dist/lib/manager-worker.js

@@ -34,6 +34,7 @@ import {
   gatherSessionToolBindProbe,
   getApiKey,
   getCachedClaudeAuthMode,
+  getCachedClaudeAuthModeRaw,
   getHostId,
   givenUpMcpServerKeys,
   isIntegrationBucketedReason,
@@ -66,7 +67,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-Z45XEW4H.js";
+} from "../chunk-TBHLHBXJ.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -153,7 +154,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-4ZH75WMF.js";
+} from "../chunk-A7HDJW23.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -262,7 +263,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-MQ4COFCI.js";
+} from "../chunk-P544KDE3.js";
 import {
   classifyUnanswerablePane,
   paneRemedy
@@ -2019,6 +2020,7 @@ async function runConnectivityProbes(integrations, options = {}) {
       sourceType: integ.source_type ?? null,
       authType: integ.auth_type ?? null,
       credentials: integ.credentials ?? {},
+      config: integ.config ?? void 0,
       cliBinary: integ.cli_binary,
       mcpServerKey: integ.mcp_server_key,
       connectivityTest: integ.connectivity_test ?? null,
@@ -2789,6 +2791,15 @@ function maybeMigrateAgentToIdKeyedLayout(agent, deps) {
   }
 }
 
+// src/lib/heartbeat-account-email.ts
+function mayReportAccountEmail(rawMode) {
+  return rawMode === "subscription";
+}
+function heartbeatAccountEmailField(rawMode, detected) {
+  if (!mayReportAccountEmail(rawMode)) return void 0;
+  return detected ?? void 0;
+}
+
 // src/lib/manager/auth-resolve-decision.ts
 function decideAuthResolveFailureAction(args) {
   const transient = isTransientAuthFailure(args.error);
@@ -3443,7 +3454,42 @@ async function detectClaudeAccountFingerprint(paths) {
 }
 var lastKnownFingerprint = null;
 var lastDetectAtMs = 0;
+var lastEmailResult = null;
+var lastEmailDetectAtMs = 0;
 var DETECT_TTL_MS = 6e4;
+async function detectClaudeAccountEmail(paths) {
+  const candidates = paths ?? await claudeConfigCandidatePaths();
+  for (const path of candidates) {
+    let parsed;
+    try {
+      parsed = JSON.parse(await readFile3(path, "utf-8"));
+    } catch {
+      continue;
+    }
+    if (typeof parsed !== "object" || parsed === null) continue;
+    const account = parsed.oauthAccount;
+    if (typeof account !== "object" || account === null) continue;
+    const accountUuid = account.accountUuid;
+    if (typeof accountUuid !== "string" || accountUuid.trim().length === 0) continue;
+    const email = account.emailAddress;
+    if (typeof email !== "string") return null;
+    const trimmed = email.trim().toLowerCase();
+    if (trimmed.length === 0) return null;
+    return trimmed;
+  }
+  return null;
+}
+async function getClaudeAccountEmail(paths, nowMs = Date.now()) {
+  if (!paths && nowMs - lastEmailDetectAtMs < DETECT_TTL_MS) {
+    return lastEmailResult;
+  }
+  const detected = await detectClaudeAccountEmail(paths);
+  if (!paths) {
+    lastEmailDetectAtMs = nowMs;
+    lastEmailResult = detected;
+  }
+  return detected;
+}
 async function getClaudeAccountFingerprint(paths, nowMs = Date.now()) {
   if (!paths && lastKnownFingerprint !== null && nowMs - lastDetectAtMs < DETECT_TTL_MS) {
     return lastKnownFingerprint;
@@ -14053,7 +14099,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-C75AUK6I.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-7MQI6SUF.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -14432,6 +14478,8 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
         auth_type: i.auth_type,
         source_type: sourceType,
         credentials: i.credentials,
+        // CS-1863: a per-install host (Storrito) is built from the install config.
+        config: i.config ?? null,
         last_connectivity_check_at: i.last_connectivity_check_at ?? null,
         // ENG-5665 / ENG-6396: for any integration whose probe is an MCP
         // `tools/list` against the agent's wired server (managed/Composio,
@@ -14799,7 +14847,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1053" : "dev";
+var agtCliVersion = true ? "0.28.1055" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -16434,7 +16482,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-5RX4P7GP.js");
+      const { collectDiagnostics } = await import("../persistent-session-WSJVCGEO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -16576,7 +16624,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-5RX4P7GP.js");
+      const { collectDiagnostics } = await import("../persistent-session-WSJVCGEO.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -16609,6 +16657,15 @@ async function pollCycleInner() {
         const errId = createHash20("sha256").update(errText).digest("hex").slice(0, 12);
         log(`Claude auth detection failed (error_id=${errId})`);
       }
+      let claudeAccountEmail = null;
+      const claudeAuthModeRaw = getCachedClaudeAuthModeRaw();
+      if (mayReportAccountEmail(claudeAuthModeRaw)) {
+        try {
+          claudeAccountEmail = await getClaudeAccountEmail();
+        } catch {
+          claudeAccountEmail = null;
+        }
+      }
       const hostHasClaudeCode = state9.agents.some(
         (a) => agentFrameworkCache.get(a.codeName) === "claude-code"
       );
@@ -16634,6 +16691,16 @@ async function pollCycleInner() {
         hostname: tailscaleHostname,
         os_username: osUsername,
         claude_auth: claudeAuth ?? void 0,
+        // OMITTED rather than sent as null when it cannot be read. The API
+        // treats absence as "no observation" and leaves the stored label
+        // alone; sending null would let a transient unreadable config WIPE a
+        // good address, which is worse than the staleness this fixes. Same
+        // sticky reasoning as the account fingerprint.
+        // Built by the pure helper so the OMIT-rather-than-null shape is tested
+        // rather than asserted. `undefined` is dropped by JSON.stringify, and the
+        // route reads an omitted field as no observation and leaves the stored
+        // label alone; a null would be a value it had to interpret.
+        claude_account_email: heartbeatAccountEmailField(claudeAuthModeRaw, claudeAccountEmail),
         // ENG-5614: inbound-loop liveness. The actual phoenix socket state
         // behind the direct-chat Realtime subscription. When this is false
         // but the manager keeps heartbeating, inbound is being served by the
@@ -16761,7 +16828,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-C75AUK6I.js");
+      } = await import("../responsiveness-probe-7MQI6SUF.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -16878,7 +16945,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-C75AUK6I.js");
+        } = await import("../responsiveness-probe-7MQI6SUF.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -17034,7 +17101,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-VFRUHVTF.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-NFVTUFPI.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -21599,7 +21666,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-C75AUK6I.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-7MQI6SUF.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -21642,7 +21709,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-5RX4P7GP.js");
+        const { collectDiagnostics } = await import("../persistent-session-WSJVCGEO.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -21693,7 +21760,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-5RX4P7GP.js");
+      const { collectDiagnostics } = await import("../persistent-session-WSJVCGEO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -22365,7 +22432,7 @@ async function processClaudePairSessions(agents) {
     // cannot take it for itself — by the time it runs, the write it is looking
     // for may already have happened.
     snapshotPairConfig
-  } = await import("../claude-pair-runtime-KMPRE2ZJ.js");
+  } = await import("../claude-pair-runtime-TSRRFBNJ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));