@integrity-labs/agt-cli 0.28.1118 → 0.28.1120

package/dist/{chunk-PT2HBINO.js → chunk-MTBIR6TN.js}

@@ -24,7 +24,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-XIMMVBIH.js";
+} from "./chunk-J7GZNCX2.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -6113,4 +6113,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-PT2HBINO.js.map
+//# sourceMappingURL=chunk-MTBIR6TN.js.map

package/dist/{chunk-X4VF6E5N.js → chunk-VWXOXCGU.js}

@@ -16,7 +16,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-PT2HBINO.js";
+} from "./chunk-MTBIR6TN.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -79,7 +79,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-XIMMVBIH.js";
+} from "./chunk-J7GZNCX2.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -7518,7 +7518,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1118" : "dev";
+var agtCliVersion = true ? "0.28.1120" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -12664,4 +12664,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-X4VF6E5N.js.map
+//# sourceMappingURL=chunk-VWXOXCGU.js.map

package/dist/{claude-pair-runtime-R2BGQCXS.js → claude-pair-runtime-DKS7V6MT.js}

@@ -266,7 +266,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-HSBVLK46.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-JSLQLE6F.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -734,4 +734,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-R2BGQCXS.js.map
+//# sourceMappingURL=claude-pair-runtime-DKS7V6MT.js.map

package/dist/lib/manager-worker.js

@@ -68,7 +68,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-X4VF6E5N.js";
+} from "../chunk-VWXOXCGU.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -155,7 +155,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-PT2HBINO.js";
+} from "../chunk-MTBIR6TN.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -265,7 +265,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-XIMMVBIH.js";
+} from "../chunk-J7GZNCX2.js";
 import {
   classifyUnanswerablePane,
   paneRemedy
@@ -394,6 +394,46 @@ function isTelegramPolicyRestrictive(env) {
   return telegramPolicyEnvBasis(env).length > 0;
 }
 
+// src/lib/toolkit-cli-slugs.ts
+function collectToolkitCliSlugs(bundleToolkits, heldDefinitionIds, hasCliTool) {
+  const out = /* @__PURE__ */ new Set();
+  for (const { toolkits } of bundleToolkits) {
+    for (const t of toolkits) {
+      if (typeof t === "string" && t.length > 0) out.add(t);
+    }
+  }
+  for (const id of heldDefinitionIds) {
+    if (typeof id === "string" && id.length > 0 && hasCliTool(id)) out.add(id);
+  }
+  return [...out];
+}
+async function installToolkitClis(opts) {
+  if (opts.framework !== "claude-code") return { awaited: [], background: [] };
+  const heldIds = opts.heldIntegrations.map((i) => {
+    const id = i?.definition_id;
+    return typeof id === "string" ? id : "";
+  });
+  const awaited = collectToolkitCliSlugs(opts.bundleToolkits, [], () => false);
+  const bundleSet = new Set(awaited);
+  const background = collectToolkitCliSlugs([], heldIds, opts.hasCliTool).filter((s) => !bundleSet.has(s));
+  for (const slug of awaited) {
+    await opts.ensure(slug);
+  }
+  for (const slug of background) {
+    void Promise.resolve().then(() => opts.ensure(slug)).catch((err) => opts.onBackgroundError?.(slug, err));
+  }
+  return { awaited, background };
+}
+function singleFlight(inFlight, key, fn) {
+  const existing = inFlight.get(key);
+  if (existing) return existing;
+  const run = Promise.resolve().then(fn).finally(() => {
+    if (inFlight.get(key) === run) inFlight.delete(key);
+  });
+  inFlight.set(key, run);
+  return run;
+}
+
 // src/lib/single-flight.ts
 function createSingleFlight(task, opts = {}) {
   let running2 = false;
@@ -14143,7 +14183,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-KGN6IQLH.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-2C7X7RIM.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -14901,7 +14941,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1118" : "dev";
+var agtCliVersion = true ? "0.28.1120" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14935,6 +14975,7 @@ function claudeBinaryInstalled(execFileSync3) {
 var toolkitCliEnsured = /* @__PURE__ */ new Set();
 var toolkitCliRetryAfter = /* @__PURE__ */ new Map();
 var toolkitCliFailureCount = /* @__PURE__ */ new Map();
+var toolkitCliInFlight = /* @__PURE__ */ new Map();
 var TOOLKIT_INSTALL_RETRY_MS = 5 * 6e4;
 var TOOLKIT_INSTALL_MAX_FAILURES = 3;
 function recordToolkitFailure(toolkitSlug, reason) {
@@ -14951,8 +14992,13 @@ function recordToolkitFailure(toolkitSlug, reason) {
 }
 async function ensureToolkitCli(toolkitSlug) {
   if (toolkitCliEnsured.has(toolkitSlug)) return;
+  const running2 = toolkitCliInFlight.get(toolkitSlug);
+  if (running2) return running2;
   const retryAfter = toolkitCliRetryAfter.get(toolkitSlug) ?? 0;
   if (retryAfter > Date.now()) return;
+  return singleFlight(toolkitCliInFlight, toolkitSlug, () => ensureToolkitCliInner(toolkitSlug));
+}
+async function ensureToolkitCliInner(toolkitSlug) {
   const integration = getIntegration(toolkitSlug);
   if (!integration?.cli_tool) {
     toolkitCliEnsured.add(toolkitSlug);
@@ -14960,7 +15006,10 @@ async function ensureToolkitCli(toolkitSlug) {
   }
   const { binary, installer, package: pkg, script } = integration.cli_tool;
   const resolvedInstaller = installer ?? "manual";
-  const { execFileSync: execFileSync3, execSync } = await import("child_process");
+  const { execFileSync: execFileSync3, execFile: execFile2, exec } = await import("child_process");
+  const { promisify: promisify3 } = await import("util");
+  const execFileAsync3 = promisify3(execFile2);
+  const execAsync = promisify3(exec);
   try {
     execFileSync3("which", [binary], { timeout: 5e3, stdio: "pipe" });
     toolkitCliEnsured.add(toolkitSlug);
@@ -14983,7 +15032,7 @@ async function ensureToolkitCli(toolkitSlug) {
         return;
       }
       log(`[toolkit-install] ${toolkitSlug}: installing via npm (${pkg})\u2026`);
-      execFileSync3("npm", ["install", "-g", pkg], { timeout: 18e4, stdio: "pipe" });
+      await execFileAsync3("npm", ["install", "-g", pkg], { timeout: 18e4 });
     } else if (resolvedInstaller === "brew") {
       if (!pkg) {
         log(`[toolkit-install] ${toolkitSlug}: installer=brew but no package declared`);
@@ -15000,9 +15049,9 @@ async function ensureToolkitCli(toolkitSlug) {
       const isRoot = typeof process.getuid === "function" && process.getuid() === 0;
       log(`[toolkit-install] ${toolkitSlug}: installing via brew (${pkg})\u2026`);
       if (isRoot) {
-        execFileSync3("sudo", ["-u", "ec2-user", "-H", brewPath, "install", pkg], { timeout: 18e4, stdio: "pipe", cwd: "/tmp" });
+        await execFileAsync3("sudo", ["-u", "ec2-user", "-H", brewPath, "install", pkg], { timeout: 18e4, cwd: "/tmp" });
       } else {
-        execFileSync3(brewPath, ["install", pkg], { timeout: 18e4, stdio: "pipe" });
+        await execFileAsync3(brewPath, ["install", pkg], { timeout: 18e4 });
       }
     } else if (resolvedInstaller === "script") {
       if (!script) {
@@ -15011,7 +15060,7 @@ async function ensureToolkitCli(toolkitSlug) {
         return;
       }
       log(`[toolkit-install] ${toolkitSlug}: running declared install script\u2026`);
-      execSync(script, { timeout: 18e4, stdio: "pipe" });
+      await execAsync(script, { timeout: 18e4 });
     }
   } catch (err) {
     const e = err;
@@ -16518,7 +16567,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-HSBVLK46.js");
+      const { collectDiagnostics } = await import("../persistent-session-JSLQLE6F.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -16660,7 +16709,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-HSBVLK46.js");
+      const { collectDiagnostics } = await import("../persistent-session-JSLQLE6F.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -16868,7 +16917,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-KGN6IQLH.js");
+      } = await import("../responsiveness-probe-2C7X7RIM.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -16985,7 +17034,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-KGN6IQLH.js");
+        } = await import("../responsiveness-probe-2C7X7RIM.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -17271,7 +17320,7 @@ async function pollCycleInner() {
                 }
               }
             );
-            const { parkPendingInbound } = await import("../responsiveness-probe-KGN6IQLH.js");
+            const { parkPendingInbound } = await import("../responsiveness-probe-2C7X7RIM.js");
             const { parked, deadLettered } = parkPendingInbound(codeName, new Date(fatalNowMs));
             paneFatalStreak.delete(codeName);
             paneFatalRestarts.set(codeName, [...history, fatalNowMs]);
@@ -17302,7 +17351,7 @@ async function pollCycleInner() {
         TRANSCRIPT_MOUNT_ESCALATION_REFRESH_MS,
         bindSourceEscalations
       } = await import("../transcript-mount-health-OHE6IVJV.js");
-      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-HSBVLK46.js");
+      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-JSLQLE6F.js");
       const mountConfig = resolveTranscriptMountConfig();
       const liveAgents = agentState.persistentSessionAgents;
       for (const tracked of [
@@ -17467,7 +17516,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-P44BJ3W6.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-QYQXJNZP.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -20255,15 +20304,14 @@ async function processAgent(agent, agentStates, managedToolkits) {
       }
       const agentFwForToolkits = agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK;
       const toolkitsList = refreshAny.integration_toolkits ?? refreshAny.plugin_toolkits ?? [];
-      if (agentFwForToolkits === "claude-code" && toolkitsList.length) {
-        const toolkitUnion = /* @__PURE__ */ new Set();
-        for (const { toolkits } of toolkitsList) {
-          for (const t of toolkits) toolkitUnion.add(t);
-        }
-        for (const toolkitSlug of toolkitUnion) {
-          await ensureToolkitCli(toolkitSlug);
-        }
-      }
+      await installToolkitClis({
+        framework: agentFwForToolkits,
+        bundleToolkits: toolkitsList,
+        heldIntegrations: lastIntegrationsPayload.get(agent.agent_id) ?? [],
+        hasCliTool: (id) => Boolean(getIntegration(id)?.cli_tool),
+        ensure: ensureToolkitCli,
+        onBackgroundError: (slug, err) => log(`[toolkit-install] ${slug}: background install threw: ${err?.message ?? String(err)}`)
+      });
       const desiredRuntimeImage = refreshAny.desired_runtime_image;
       if (desiredRuntimeImage && isolationMode(agent.code_name) !== "none") {
         void ensureIsolationImage(desiredRuntimeImage).catch((err) => {
@@ -22055,7 +22103,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-KGN6IQLH.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-2C7X7RIM.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -22098,7 +22146,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-HSBVLK46.js");
+        const { collectDiagnostics } = await import("../persistent-session-JSLQLE6F.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -22149,7 +22197,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-HSBVLK46.js");
+      const { collectDiagnostics } = await import("../persistent-session-JSLQLE6F.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -22822,7 +22870,7 @@ async function processClaudePairSessions(agents) {
     // cannot take it for itself — by the time it runs, the write it is looking
     // for may already have happened.
     snapshotPairConfig
-  } = await import("../claude-pair-runtime-R2BGQCXS.js");
+  } = await import("../claude-pair-runtime-DKS7V6MT.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));