@integrity-labs/agt-cli 0.28.1185 → 0.28.1186

package/dist/{claude-code-updater-JYVD3MJJ.js → claude-code-updater-F2Q5CM6R.js}

@@ -13,9 +13,9 @@ import {
   probeClaudeInstalls,
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
-} from "./chunk-5L2UZW22.js";
+} from "./chunk-B7EHZTCU.js";
 import "./chunk-XWVM4KPK.js";
-import "./chunk-B57YZ2QD.js";
+import "./chunk-TKFPMB6F.js";
 import "./chunk-AIUIMEUS.js";
 import "./chunk-DGUM43GV.js";
 export {
@@ -34,4 +34,4 @@ export {
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
 };
-//# sourceMappingURL=claude-code-updater-JYVD3MJJ.js.map
+//# sourceMappingURL=claude-code-updater-F2Q5CM6R.js.map

package/dist/{claude-pair-runtime-IJAQHR2V.js → claude-pair-runtime-AAK4N5Z6.js}

@@ -8,7 +8,7 @@ import {
 import {
   redactPaneFrame,
   sanitizeTerminalFrame
-} from "./chunk-B57YZ2QD.js";
+} from "./chunk-TKFPMB6F.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -321,7 +321,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-C7632TPG.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-KW4SEBXV.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -836,4 +836,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-IJAQHR2V.js.map
+//# sourceMappingURL=claude-pair-runtime-AAK4N5Z6.js.map

package/dist/lib/manager-worker.js

@@ -82,7 +82,7 @@ import {
   tripClass,
   writeEtcEnvironment,
   writeProfileDScript
-} from "../chunk-H6GFABQZ.js";
+} from "../chunk-JCTPPI2Q.js";
 import {
   CLAUDE_CODE_SECURITY_FLOOR,
   SELF_UPDATE_TIMEOUTS,
@@ -96,7 +96,7 @@ import {
   runSafeCleanup,
   tightestDiskStat,
   withPackageCacheLock
-} from "../chunk-5L2UZW22.js";
+} from "../chunk-B7EHZTCU.js";
 import {
   rewriteSupervisorApiKey,
   supervisorChannelsRefusing
@@ -165,6 +165,7 @@ import {
   resetRestartCount,
   resolveClaudeBinary,
   resolveContainerMemory,
+  resolveModelPolicySpawnEnv,
   resolveWebFetchBaseline,
   restartEgressSidecar,
   rotatePaneLogForDayRollover,
@@ -188,7 +189,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-2DWMFJEV.js";
+} from "../chunk-KKK3S2RS.js";
 import {
   isAgentIdle,
   isStaleForToday,
@@ -198,7 +199,7 @@ import {
   sessionTranscriptDir,
   subagentActivityAgeSeconds,
   transcriptActivityAgeSeconds
-} from "../chunk-TGHAQABK.js";
+} from "../chunk-2HMIFOZU.js";
 import {
   classifyUnanswerablePane,
   focusedConfirmDialogBlock,
@@ -220,6 +221,7 @@ import {
   CLAUDE_MD_CONTEXT_ALARM_CHARS,
   CLAUDE_MD_MANAGER_APPEND_HEADROOM_CHARS,
   CONVERSATION_FAILURE_CATEGORIES,
+  DEFAULT_CLAUDE_HOST_MODEL,
   DEFAULT_FRAMEWORK,
   DEFAULT_NEIGHBOURHOOD_MS,
   EXTRACTOR_IDENTIFIER_RULE,
@@ -261,6 +263,8 @@ import {
   classifySlackPolicyBlock,
   classifyTelegramPolicyBlock,
   classifyTranscriptRateLimit,
+  claudeHostModelFromCandidate,
+  claudeModelOption,
   coerceOnboardingState,
   cursorAdvanceCounterKey,
   decideInboundAccess,
@@ -321,7 +325,7 @@ import {
   stabiliseResetInstant,
   sumTranscriptUsageInWindow,
   summarizeTranscriptActivity
-} from "../chunk-B57YZ2QD.js";
+} from "../chunk-TKFPMB6F.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -2769,13 +2773,33 @@ function parseResumeHealthResponse(raw) {
 }
 
 // src/lib/model-change-respawn.ts
+function shouldHoldModelChange(input) {
+  return input.framework === "claude-code" && input.hostAuthMode === null && Boolean(input.previousModel);
+}
+function heldSpawnModel(input) {
+  return shouldHoldModelChange(input) ? input.previousModel : null;
+}
+function noteModelHold(held, agentId, codeName, holding) {
+  if (!holding) {
+    held.delete(agentId);
+    return null;
+  }
+  if (held.has(agentId)) return null;
+  held.add(agentId);
+  return `[model] holding model changes for '${codeName}': host_auth_mode unavailable, keeping the model this session is on`;
+}
 function shouldRespawnForModelChange(input) {
   const { previousModel, primaryModel, framework, sessionHealthy } = input;
   if (framework !== "claude-code" && framework !== "opencode") return false;
   if (!sessionHealthy) return false;
   if (!previousModel) return false;
   if (!primaryModel) return false;
-  return previousModel !== primaryModel;
+  if (previousModel === primaryModel) return false;
+  if (input.launchesWithClaudeModelFlag) return launchChanges(previousModel, primaryModel);
+  return true;
+}
+function launchChanges(previousModel, primaryModel) {
+  return claudeModelOption(previousModel) !== claudeModelOption(primaryModel);
 }
 function decideOpencodeModelRestart(input) {
   const { previousModel, primaryModel, provisionedModel, onDiskModel, sessionHealthy } = input;
@@ -8698,6 +8722,8 @@ var agentState = {
   writtenHashes: /* @__PURE__ */ new Map(),
   knownSecretsHashes: /* @__PURE__ */ new Map(),
   knownModels: /* @__PURE__ */ new Map(),
+  /** ENG-7546: agents with a logged model-change hold, so it logs once per hold. */
+  modelHoldsLogged: /* @__PURE__ */ new Set(),
   knownTasksHashes: /* @__PURE__ */ new Map(),
   knownIntegrationHashes: /* @__PURE__ */ new Map(),
   /**
@@ -8824,6 +8850,7 @@ function clearAgentState(agentId, codeName) {
   agentState.writtenHashes.delete(agentId);
   agentState.knownSecretsHashes.delete(agentId);
   agentState.knownModels.delete(agentId);
+  agentState.modelHoldsLogged.delete(agentId);
   agentState.knownTasksHashes.delete(agentId);
   agentState.knownIntegrationHashes.delete(agentId);
   agentState.knownCapabilitySurfaceHashes.delete(agentId);
@@ -9014,24 +9041,44 @@ function clearRestartTiming(codeName) {
 }
 
 // src/lib/manager/model.ts
+var DIRECT_CLAUDE_AUTH_MODES = /* @__PURE__ */ new Set(["subscription", "api_key"]);
+function launchesWithClaudeModelFlag(refreshData) {
+  const agent = refreshData.agent;
+  if (agent?.["framework"] !== "claude-code") return false;
+  if (!DIRECT_CLAUDE_AUTH_MODES.has(refreshData.host_auth_mode)) return false;
+  const { modelEnv } = resolveModelPolicySpawnEnv({
+    policy: parseModelPolicy(refreshData.model_policy),
+    openRouterMode: false,
+    gatewayToken: null,
+    codeName: String(agent["code_name"] ?? "")
+  });
+  return Object.keys(modelEnv).length === 0;
+}
 function resolveModelChain(refreshData) {
   const agent = refreshData.agent;
   const modelDefaults = refreshData.model_defaults;
   const platform4 = modelDefaults?.platform ?? {};
   const org = modelDefaults?.org ?? {};
+  const directClaudeHost = launchesWithClaudeModelFlag(refreshData);
+  function eligible(candidate) {
+    if (!candidate || !directClaudeHost) return candidate;
+    return claudeHostModelFromCandidate(candidate) ?? void 0;
+  }
   function resolve2(tier) {
     const agentField = `${tier}_model`;
     const platformField = `default_${tier}_model`;
-    const agentVal = agent?.[agentField];
+    const agentVal = eligible(agent?.[agentField]);
     if (agentVal) return agentVal;
-    const orgVal = org?.[platformField];
+    const orgVal = eligible(org?.[platformField]);
     if (orgVal) return orgVal;
-    const platformVal = platform4?.[platformField];
+    const platformVal = eligible(platform4?.[platformField]);
     if (platformVal) return platformVal;
     return void 0;
   }
   return {
-    primary: resolve2("primary"),
+    // Always set on a direct-Claude host: every caller falls back to the raw
+    // agent.primary_model when this is empty, which could be the openrouter id.
+    primary: resolve2("primary") ?? (directClaudeHost ? DEFAULT_CLAUDE_HOST_MODEL : void 0),
     secondary: resolve2("secondary"),
     tertiary: resolve2("tertiary")
   };
@@ -15434,7 +15481,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-NFT3GSDL.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-34V4HLOQ.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -16231,7 +16278,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1185" : "dev";
+var agtCliVersion = true ? "0.28.1186" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -18135,7 +18182,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-C7632TPG.js");
+      const { collectDiagnostics } = await import("../persistent-session-KW4SEBXV.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor)
@@ -18278,7 +18325,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-C7632TPG.js");
+      const { collectDiagnostics } = await import("../persistent-session-KW4SEBXV.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor) : void 0;
       let tailscaleHostname;
@@ -18533,7 +18580,7 @@ async function pollCycleInner() {
       }
       try {
         const desiredClaudeCodeVersion = hbResp?.desired_claude_code_version?.trim();
-        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-JYVD3MJJ.js");
+        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-F2Q5CM6R.js");
         const securityFloor = currentSecurityFloor();
         claudeUpdaterInFlight = true;
         if (desiredClaudeCodeVersion && (claudePairLoop.busy || claudePairingInProgress())) {
@@ -18568,7 +18615,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-NFT3GSDL.js");
+      } = await import("../responsiveness-probe-34V4HLOQ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -18685,7 +18732,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-NFT3GSDL.js");
+        } = await import("../responsiveness-probe-34V4HLOQ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -18971,7 +19018,7 @@ async function pollCycleInner() {
                 }
               }
             );
-            const { parkPendingInbound } = await import("../responsiveness-probe-NFT3GSDL.js");
+            const { parkPendingInbound } = await import("../responsiveness-probe-34V4HLOQ.js");
             const { parked, deadLettered } = parkPendingInbound(codeName, new Date(fatalNowMs));
             paneFatalStreak.delete(codeName);
             paneFatalRestarts.set(codeName, [...history, fatalNowMs]);
@@ -19002,7 +19049,7 @@ async function pollCycleInner() {
         TRANSCRIPT_MOUNT_ESCALATION_REFRESH_MS,
         bindSourceEscalations
       } = await import("../transcript-mount-health-OHE6IVJV.js");
-      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-C7632TPG.js");
+      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-KW4SEBXV.js");
       const mountConfig = resolveTranscriptMountConfig();
       const liveAgents = agentState.persistentSessionAgents;
       for (const tracked of [
@@ -19167,7 +19214,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-BTGGL4MA.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-AGNAALKZ.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -20528,7 +20575,15 @@ async function processAgent(agent, agentStates, managedToolkits) {
   }
   const resolvedForModel = resolveModelChain(refreshData);
   const primaryModel = resolvedForModel.primary ?? refreshData.agent.primary_model;
-  if (primaryModel && frameworkAdapter.updateAgentModel) {
+  const holdModelChange = shouldHoldModelChange({
+    hostAuthMode: refreshData.host_auth_mode,
+    previousModel: agentState.knownModels.get(agent.agent_id),
+    framework: frameworkId
+  });
+  const modelHoldLine = noteModelHold(agentState.modelHoldsLogged, agent.agent_id, agent.code_name, holdModelChange);
+  if (modelHoldLine) log(modelHoldLine);
+  if (holdModelChange) {
+  } else if (primaryModel && frameworkAdapter.updateAgentModel) {
     const previousModel = agentState.knownModels.get(agent.agent_id);
     if (previousModel !== primaryModel) {
       try {
@@ -20547,7 +20602,8 @@ async function processAgent(agent, agentStates, managedToolkits) {
         previousModel,
         primaryModel,
         framework: frameworkId,
-        sessionHealthy: isSessionHealthy(agent.code_name)
+        sessionHealthy: isSessionHealthy(agent.code_name),
+        launchesWithClaudeModelFlag: launchesWithClaudeModelFlag(refreshData)
       })) {
         const restartNotice = `Your model was changed to ${primaryModel}. Claude Code applies the model at launch, so your manager will restart your session shortly to switch.`;
         const delivered = await injectMessage(
@@ -23351,7 +23407,11 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash20("sha256")
       metadata: { type: "persistent_session_boot" }
     });
     trackSessionRun(codeName, sessionRunResult.run_id);
-    const spawnPrimaryModel = resolveModelChain(refreshData).primary ?? refreshData.agent?.["primary_model"] ?? null;
+    const spawnPrimaryModel = heldSpawnModel({
+      hostAuthMode: refreshData.host_auth_mode,
+      previousModel: agentState.knownModels.get(agent.agent_id),
+      framework: "claude-code"
+    }) ?? resolveModelChain(refreshData).primary ?? refreshData.agent?.["primary_model"] ?? null;
     const spawnToolsRaw = refreshData.tools?.raw_content;
     const egressAllowlist = deriveEgressAllowlist(spawnToolsRaw, modelPolicy);
     const spawnDenyWebFetch = denyWebFetchForToolsContent(spawnToolsRaw);
@@ -23856,7 +23916,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-NFT3GSDL.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-34V4HLOQ.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -23899,7 +23959,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-C7632TPG.js");
+        const { collectDiagnostics } = await import("../persistent-session-KW4SEBXV.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor)
@@ -23950,7 +24010,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-C7632TPG.js");
+      const { collectDiagnostics } = await import("../persistent-session-KW4SEBXV.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor)
@@ -24652,7 +24712,7 @@ async function processClaudePairSessions(agents) {
     snapshotPairConfig,
     // ENG-11659: result -> report body + the manager.log line that records it.
     planPairStartReport
-  } = await import("../claude-pair-runtime-IJAQHR2V.js");
+  } = await import("../claude-pair-runtime-AAK4N5Z6.js");
   const { resetClaudeSignin, describeSigninResetForLog, describeSigninResetFailure } = await import("../claude-signin-reset-6IJMMVYG.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);