@integrity-labs/agt-cli 0.28.1056 → 0.28.1058

package/dist/{claude-pair-runtime-TSRRFBNJ.js → claude-pair-runtime-SHXYOS5I.js}

@@ -266,7 +266,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-WSJVCGEO.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-JKAO4GT7.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -734,4 +734,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-TSRRFBNJ.js.map
+//# sourceMappingURL=claude-pair-runtime-SHXYOS5I.js.map

package/dist/lib/manager-worker.js

@@ -67,7 +67,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-M5P24M2Z.js";
+} from "../chunk-F3J3YAY3.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -154,7 +154,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-A7HDJW23.js";
+} from "../chunk-GSCJBZLQ.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -263,7 +263,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-P544KDE3.js";
+} from "../chunk-RWO2YG5B.js";
 import {
   classifyUnanswerablePane,
   paneRemedy
@@ -2799,6 +2799,17 @@ function heartbeatAccountEmailField(rawMode, detected) {
   if (!mayReportAccountEmail(rawMode)) return void 0;
   return detected ?? void 0;
 }
+function accountFileUnreadableTransition(prevKey, observation) {
+  const key = observation.email === null && observation.why === "unreadable" ? observation.codes.join(",") : null;
+  if (key === prevKey) return { key, line: null };
+  if (key !== null) {
+    return {
+      key,
+      line: `[account-email] a Claude account file exists but cannot be read (${key}); claude_account_email will not be reported, so the stored label may be stale (ENG-10796)`
+    };
+  }
+  return { key, line: "[account-email] Claude account file readable again (ENG-10796)" };
+}
 
 // src/lib/manager/auth-resolve-decision.ts
 function decideAuthResolveFailureAction(args) {
@@ -3430,12 +3441,25 @@ async function claudeConfigCandidatePaths() {
 function hashAccount(accountUuid, organizationUuid) {
   return createHash6("sha256").update(`claude-account:${accountUuid}:${organizationUuid ?? ""}`).digest("hex").slice(0, 12);
 }
-async function detectClaudeAccountFingerprint(paths) {
-  const candidates = paths ?? await claudeConfigCandidatePaths();
-  for (const path of candidates) {
+var ABSENT_CODES = /* @__PURE__ */ new Set(["ENOENT", "ENOTDIR"]);
+function errnoCode(err) {
+  const code = err?.code;
+  return typeof code === "string" && code.length > 0 ? code : "UNKNOWN";
+}
+async function resolveClaudeAccount(paths) {
+  const unreadable = [];
+  for (const path of paths) {
+    let raw;
+    try {
+      raw = await readFile3(path, "utf-8");
+    } catch (err) {
+      const code = errnoCode(err);
+      if (!ABSENT_CODES.has(code)) unreadable.push(code);
+      continue;
+    }
     let parsed;
     try {
-      parsed = JSON.parse(await readFile3(path, "utf-8"));
+      parsed = JSON.parse(raw);
     } catch {
       continue;
     }
@@ -3444,46 +3468,45 @@ async function detectClaudeAccountFingerprint(paths) {
     if (typeof account !== "object" || account === null) continue;
     const accountUuid = account.accountUuid;
     if (typeof accountUuid !== "string" || accountUuid.trim().length === 0) continue;
-    const organizationUuid = account.organizationUuid;
-    return hashAccount(
-      accountUuid.trim(),
-      typeof organizationUuid === "string" && organizationUuid.trim().length > 0 ? organizationUuid.trim() : null
-    );
+    return {
+      status: "found",
+      account
+    };
   }
-  return null;
+  return unreadable.length > 0 ? { status: "unreadable", codes: [...new Set(unreadable)].sort() } : { status: "not-found" };
+}
+async function detectClaudeAccountFingerprint(paths) {
+  const resolution = await resolveClaudeAccount(paths ?? await claudeConfigCandidatePaths());
+  if (resolution.status !== "found") return null;
+  const { account } = resolution;
+  const organizationUuid = account["organizationUuid"];
+  return hashAccount(
+    account.accountUuid.trim(),
+    typeof organizationUuid === "string" && organizationUuid.trim().length > 0 ? organizationUuid.trim() : null
+  );
 }
 var lastKnownFingerprint = null;
 var lastDetectAtMs = 0;
 var lastEmailResult = null;
 var lastEmailDetectAtMs = 0;
 var DETECT_TTL_MS = 6e4;
-async function detectClaudeAccountEmail(paths) {
-  const candidates = paths ?? await claudeConfigCandidatePaths();
-  for (const path of candidates) {
-    let parsed;
-    try {
-      parsed = JSON.parse(await readFile3(path, "utf-8"));
-    } catch {
-      continue;
-    }
-    if (typeof parsed !== "object" || parsed === null) continue;
-    const account = parsed.oauthAccount;
-    if (typeof account !== "object" || account === null) continue;
-    const accountUuid = account.accountUuid;
-    if (typeof accountUuid !== "string" || accountUuid.trim().length === 0) continue;
-    const email = account.emailAddress;
-    if (typeof email !== "string") return null;
-    const trimmed = email.trim().toLowerCase();
-    if (trimmed.length === 0) return null;
-    return trimmed;
-  }
-  return null;
-}
-async function getClaudeAccountEmail(paths, nowMs = Date.now()) {
-  if (!paths && nowMs - lastEmailDetectAtMs < DETECT_TTL_MS) {
+async function detectClaudeAccountEmailObservation(paths) {
+  const resolution = await resolveClaudeAccount(paths ?? await claudeConfigCandidatePaths());
+  if (resolution.status === "unreadable") {
+    return { email: null, why: "unreadable", codes: resolution.codes };
+  }
+  if (resolution.status === "not-found") return { email: null, why: "not-found" };
+  const email = resolution.account["emailAddress"];
+  if (typeof email !== "string") return { email: null, why: "no-address" };
+  const trimmed = email.trim().toLowerCase();
+  if (trimmed.length === 0) return { email: null, why: "no-address" };
+  return { email: trimmed };
+}
+async function getClaudeAccountEmailObservation(paths, nowMs = Date.now()) {
+  if (!paths && lastEmailResult !== null && nowMs - lastEmailDetectAtMs < DETECT_TTL_MS) {
     return lastEmailResult;
   }
-  const detected = await detectClaudeAccountEmail(paths);
+  const detected = await detectClaudeAccountEmailObservation(paths);
   if (!paths) {
     lastEmailDetectAtMs = nowMs;
     lastEmailResult = detected;
@@ -13218,6 +13241,7 @@ function stopRealtimeChat() {
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+var accountFileUnreadableKey = null;
 function applyRestartAcks(args) {
   const { agentStates, priorAgents, restartAcks } = args;
   if (agentStates.length === 0) return false;
@@ -14099,7 +14123,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-7MQI6SUF.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-5BYHCZJS.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -14847,7 +14871,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1056" : "dev";
+var agtCliVersion = true ? "0.28.1058" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -16482,7 +16506,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-WSJVCGEO.js");
+      const { collectDiagnostics } = await import("../persistent-session-JKAO4GT7.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -16624,7 +16648,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-WSJVCGEO.js");
+      const { collectDiagnostics } = await import("../persistent-session-JKAO4GT7.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -16661,7 +16685,11 @@ async function pollCycleInner() {
       const claudeAuthModeRaw = getCachedClaudeAuthModeRaw();
       if (mayReportAccountEmail(claudeAuthModeRaw)) {
         try {
-          claudeAccountEmail = await getClaudeAccountEmail();
+          const observation = await getClaudeAccountEmailObservation();
+          claudeAccountEmail = observation.email;
+          const transition = accountFileUnreadableTransition(accountFileUnreadableKey, observation);
+          accountFileUnreadableKey = transition.key;
+          if (transition.line) log(transition.line);
         } catch {
           claudeAccountEmail = null;
         }
@@ -16828,7 +16856,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-7MQI6SUF.js");
+      } = await import("../responsiveness-probe-5BYHCZJS.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -16945,7 +16973,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-7MQI6SUF.js");
+        } = await import("../responsiveness-probe-5BYHCZJS.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -17101,7 +17129,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-NFVTUFPI.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-E6V22R4W.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -21666,7 +21694,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-7MQI6SUF.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-5BYHCZJS.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -21709,7 +21737,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-WSJVCGEO.js");
+        const { collectDiagnostics } = await import("../persistent-session-JKAO4GT7.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -21760,7 +21788,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-WSJVCGEO.js");
+      const { collectDiagnostics } = await import("../persistent-session-JKAO4GT7.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -22432,7 +22460,7 @@ async function processClaudePairSessions(agents) {
     // cannot take it for itself — by the time it runs, the write it is looking
     // for may already have happened.
     snapshotPairConfig
-  } = await import("../claude-pair-runtime-TSRRFBNJ.js");
+  } = await import("../claude-pair-runtime-SHXYOS5I.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));