@integrity-labs/agt-cli 0.28.1123 → 0.28.1125

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-E2RGZJA2.js";
+} from "../chunk-JHKH2EYM.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-IXCMKMDT.js";
+} from "../chunk-C5YNHEST.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-J7GZNCX2.js";
+} from "../chunk-JI2D2TA2.js";
 import "../chunk-OCMJ5E6J.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1123" : "dev";
+var cliVersion = true ? "0.28.1125" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1123" : "dev";
+var cliVersion2 = true ? "0.28.1125" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-IXCMKMDT.js → chunk-C5YNHEST.js}

@@ -24,7 +24,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-J7GZNCX2.js";
+} from "./chunk-JI2D2TA2.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -6114,4 +6114,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-IXCMKMDT.js.map
+//# sourceMappingURL=chunk-C5YNHEST.js.map

package/dist/chunk-JEC3BUC6.js

@@ -0,0 +1,29 @@
+// src/lib/claude-host-args.ts
+var HOST_CLAUDE_RETENTION_SETTINGS = JSON.stringify({ cleanupPeriodDays: 3650 });
+function hostClaudeOneShotArgs(emptyMcpConfigPath) {
+  return [
+    // No project config, no MCP, no tools: these exercise the model or auth only.
+    "--mcp-config",
+    emptyMcpConfigPath,
+    "--strict-mcp-config",
+    "--permission-mode",
+    "auto",
+    "--allowedTools",
+    "",
+    // ENG-11277: never age anything out of the shared ~/.claude from here.
+    "--settings",
+    HOST_CLAUDE_RETENTION_SETTINGS
+  ];
+}
+function posixSingleQuote(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function hostClaudePairCommand(claudeBin) {
+  return `${posixSingleQuote(claudeBin)} --settings ${posixSingleQuote(HOST_CLAUDE_RETENTION_SETTINGS)}`;
+}
+
+export {
+  hostClaudeOneShotArgs,
+  hostClaudePairCommand
+};
+//# sourceMappingURL=chunk-JEC3BUC6.js.map

package/dist/chunk-JEC3BUC6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/claude-host-args.ts"],"sourcesContent":["/**\n * ENG-11277 — the arguments every manager-run, host-side `claude -p` one-shot\n * shares (conversation eval, the runtime auth probe, the host usage poll).\n *\n * These run on the HOST against the shared `~/.claude`. On Pedders v8\n * (2026-10-02) Claude Code's retention sweep removed live transcript bind\n * sources (`.last-cleanup` 04:24:12Z, mask dir gone, the container's projects\n * dir at nlink 0) and three agents failed every transcript write and\n * compaction; see transcript-mount-health.ts.\n *\n * `-p` one-shots DO run that sweep: measured 5 Oct on 2.1.285 (Koda, ENG-11279),\n * a print-mode run removed old and empty project trees from its config dir. The\n * `--settings` flag below loads flag-level settings, which outrank user settings\n * (user < project < local < flag < policy), and a 3650-day `cleanupPeriodDays`\n * (Claude Code's own suggestion for long retention; 0 is rejected by its schema)\n * means the sweep ages nothing out. It does NOT stop the empty-dir rmdirs, which\n * have no age check, so it is defence in depth, not the guard.\n *\n * The guard is the sentinel kept in every bind source\n * (ensureTranscriptBindSources in persistent-session.ts) plus the manager's mount\n * probe. ENG-11279 additionally runs two of the three one-shots in a PRIVATE\n * config dir on api_key hosts (applyClaudeAuthToEnv's `isolateApiKeyConfigDir`),\n * so they are not sweepers of the shared tree at all:\n *   - conversation eval and the host usage poll: isolated on api_key hosts.\n *     Subscription hosts stay on the shared dir - a second copy of the OAuth\n *     credential could refresh and rotate the refresh token out from under every\n *     other session; isolating those is an open decision on the ticket.\n *   - the runtime auth probe: DELIBERATELY on the shared dir in every mode. It\n *     exists to prove the host's real credential round-trips (ENG-8623); in a\n *     private dir it would report a host with a dead shared credential as healthy.\n */\nexport const HOST_CLAUDE_RETENTION_SETTINGS = JSON.stringify({ cleanupPeriodDays: 3650 });\n\n/** The isolation + retention tail shared by every manager host-side `claude -p`. */\nexport function hostClaudeOneShotArgs(emptyMcpConfigPath: string): string[] {\n  return [\n    // No project config, no MCP, no tools: these exercise the model or auth only.\n    '--mcp-config', emptyMcpConfigPath,\n    '--strict-mcp-config',\n    '--permission-mode', 'auto',\n    '--allowedTools', '',\n    // ENG-11277: never age anything out of the shared ~/.claude from here.\n    '--settings', HOST_CLAUDE_RETENTION_SETTINGS,\n  ];\n}\n\n/** POSIX single-quote one argument: `'` -> `'\\''`. */\nfunction posixSingleQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n\n/**\n * ENG-11279 (4): the pair/login runtime's `claude` command, with the same\n * retention flag as the one-shots, for parity.\n *\n * NOT load-bearing: the pair runtime must write the SHARED config dir (it is the\n * login), so it cannot be isolated, and the flag does not stop the empty-dir\n * rmdirs. It only stops this process ageing transcripts out at the 30-day default.\n *\n * A single shell-command STRING, quoted here, because that is what tmux\n * `new-session` is given (it runs one argument through `sh -c`; splitting it into\n * several argv entries changes that to a direct exec on some tmux versions, which\n * is a behaviour change this ticket has no business making).\n */\nexport function hostClaudePairCommand(claudeBin: string): string {\n  return `${posixSingleQuote(claudeBin)} --settings ${posixSingleQuote(HOST_CLAUDE_RETENTION_SETTINGS)}`;\n}\n"],"mappings":";AA+BO,IAAM,iCAAiC,KAAK,UAAU,EAAE,mBAAmB,KAAK,CAAC;AAGjF,SAAS,sBAAsB,oBAAsC;AAC1E,SAAO;AAAA;AAAA,IAEL;AAAA,IAAgB;AAAA,IAChB;AAAA,IACA;AAAA,IAAqB;AAAA,IACrB;AAAA,IAAkB;AAAA;AAAA,IAElB;AAAA,IAAc;AAAA,EAChB;AACF;AAGA,SAAS,iBAAiB,OAAuB;AAC/C,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;AAeO,SAAS,sBAAsB,WAA2B;AAC/D,SAAO,GAAG,iBAAiB,SAAS,CAAC,eAAe,iBAAiB,8BAA8B,CAAC;AACtG;","names":[]}

package/dist/{chunk-E2RGZJA2.js → chunk-JHKH2EYM.js}

@@ -16,7 +16,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-IXCMKMDT.js";
+} from "./chunk-C5YNHEST.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -79,7 +79,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-J7GZNCX2.js";
+} from "./chunk-JI2D2TA2.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -7518,7 +7518,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1123" : "dev";
+var agtCliVersion = true ? "0.28.1125" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -12664,4 +12664,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-E2RGZJA2.js.map
+//# sourceMappingURL=chunk-JHKH2EYM.js.map

package/dist/{chunk-J7GZNCX2.js → chunk-JI2D2TA2.js}

@@ -5935,6 +5935,12 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "broker-read-jobs",
+    description: `Slow broker READ tools finish in a background job (ENG-11476, ADR-0129). When on for an org, an opted-in read tool (Pronto Xi first) that misses an 18s grace window answers "still running, call again with the same arguments" and finishes in the broker-read-job worker instead of timing out. Off = today's synchronous call, so false is the safe value. Evaluated in the API per org, team and agent.`,
+    flagType: "boolean",
+    defaultValue: false
+  },
   {
     key: "id-keyed-layout-migration",
     description: "Dark migration engine (ENG-7891 / ADR-0049 slice 3): convert an EXISTING legacy codename-keyed agent host dir to the agent_id-keyed layout (real ~/.augmented/{agent_id} dir + codename compatibility symlink) at the next pre-spawn tick, moving the Claude transcript store so the agent keeps its history. Resolved PER-AGENT (getBooleanForAgent) so a one-way-door migration can be armed one agent at a time. Ships dark; NOT armed until a test-host rehearsal passes (the last ENG-7891 acceptance gate). Crash recovery + the per-agent preconditions (session-down, WhatsApp-writer quiesce, id-aware hook regen by the spawn funnel) are always-on and flag-independent; this flag only gates INITIATING a fresh conversion. Deliberately no host-wide env override - arming is per-agent to avoid flipping every legacy agent on a host at once.",
@@ -16830,4 +16836,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-J7GZNCX2.js.map
+//# sourceMappingURL=chunk-JI2D2TA2.js.map