@integrity-labs/agt-cli 0.28.336 → 0.28.338

package/dist/{claude-pair-runtime-T7EFAWS5.js → claude-pair-runtime-XPWI2M2Z.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-ENQXJNBJ.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-G7WNWWJZ.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-T7EFAWS5.js.map
+//# sourceMappingURL=claude-pair-runtime-XPWI2M2Z.js.map

package/dist/lib/manager-worker.js

@@ -14,6 +14,7 @@ import {
   classifyEnvIntegrationsDiff,
   clearPresenceReaperState,
   clearPresenceReaperStateForKeys,
+  decidePin,
   defaultFlagsCachePath,
   deriveMcpServerKey,
   diffEnvIntegrations,
@@ -29,6 +30,7 @@ import {
   getHostId,
   givenUpMcpServerKeys,
   liveProxyExtraHeaderVars,
+  pinAllowsUrgent,
   provision,
   provisionAutoKanbanProgressHook,
   provisionChannelProgressHook,
@@ -43,7 +45,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-VIYSMPXD.js";
+} from "../chunk-S2JJ532Q.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -132,7 +134,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-J2WYEOBH.js";
+} from "../chunk-O4V3TMUI.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -8386,7 +8388,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.336" : "dev";
+var agtCliVersion = true ? "0.28.338" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -8686,6 +8688,8 @@ function selfUpdateAppliedMarkerPath() {
   return join21(homedir11(), ".augmented", ".last-self-update-applied");
 }
 var selfUpdateUpToDateLogged = false;
+var selfUpdatePinnedLogged = false;
+var selfUpdatePinInvalidLogged = false;
 var restartAfterUpgrade = false;
 var pendingUpgradeVersion = null;
 var selfUpdateInFlight = false;
@@ -8733,6 +8737,25 @@ async function checkAndUpdateCliViaBrew(force = false) {
   const { execFileSync: execFileSync2 } = await import("child_process");
   const brewPath = resolveBrewPath(execFileSync2);
   if (!brewPath) return "noop";
+  {
+    const brewPin = decidePin({ installed: agtCliVersion, pinRaw: process.env.AGT_CLI_PIN_VERSION });
+    if (brewPin.kind === "satisfied") {
+      if (!selfUpdatePinnedLogged) {
+        log(`[self-update] agt CLI pinned to ${brewPin.version} (AGT_CLI_PIN_VERSION); already satisfied on this brew install.`);
+        selfUpdatePinnedLogged = true;
+      }
+      return "noop";
+    }
+    if (brewPin.kind === "install") {
+      if (!selfUpdatePinnedLogged) {
+        log(
+          `[self-update] agt CLI is pinned to ${brewPin.version} (AGT_CLI_PIN_VERSION) but this is a Homebrew install (currently ${agtCliVersion}); brew can't install an exact version, so the pin CANNOT be satisfied here. Not upgrading. Switch to the npm-global install (or hold the formula) to pin exactly.`
+        );
+        selfUpdatePinnedLogged = true;
+      }
+      return "noop";
+    }
+  }
   let metadataFresh = true;
   try {
     execFileSync2(brewPath, ["update", "--quiet"], { timeout: 6e4, stdio: "pipe" });
@@ -8800,6 +8823,44 @@ async function checkAndUpdateCliViaBrew(force = false) {
 async function checkAndUpdateCliViaNpm(force = false) {
   if (agtCliVersion === "dev") return "noop";
   const channel = process.env.AGT_CLI_RELEASE_CHANNEL || "latest";
+  const pinRaw = process.env.AGT_CLI_PIN_VERSION;
+  const pinDecision = decidePin({ installed: agtCliVersion, pinRaw });
+  if (pinDecision.kind === "invalid") {
+    if (!selfUpdatePinInvalidLogged) {
+      log(
+        `[self-update] AGT_CLI_PIN_VERSION="${pinDecision.raw}" is not a valid version; ignoring the pin and tracking channel=${channel} as usual.`
+      );
+      selfUpdatePinInvalidLogged = true;
+    }
+  } else if (pinDecision.kind !== "unpinned") {
+    if (pinAllowsUrgent(process.env.AGT_CLI_PIN_ALLOW_URGENT)) {
+      const urgentTarget2 = await fetchUrgentDistTagVersion();
+      if (urgentTarget2 && urgentTarget2 === agtCliVersion) {
+        return "noop";
+      }
+      if (isUrgentUpgrade({
+        urgentTarget: urgentTarget2,
+        installed: agtCliVersion,
+        isNewer: (installed, candidate) => candidate !== installed && !isOlderSemverTuple(installed, candidate)
+      })) {
+        log(
+          `[self-update] URGENT agt CLI hotfix ${agtCliVersion} \u2192 ${urgentTarget2} overrides pin=${pinDecision.version} (AGT_CLI_PIN_ALLOW_URGENT). Upgrading via npm...`
+        );
+        return await installAgtCliViaNpm(urgentTarget2, "urgent(pin-allow-urgent)");
+      }
+    }
+    if (pinDecision.kind === "satisfied") {
+      if (!selfUpdatePinnedLogged) {
+        log(`[self-update] agt CLI pinned to ${pinDecision.version} (AGT_CLI_PIN_VERSION); up to date.`);
+        selfUpdatePinnedLogged = true;
+      }
+      return "noop";
+    }
+    log(
+      `[self-update] agt CLI pinned to ${pinDecision.version} (AGT_CLI_PIN_VERSION); installing exact version (${agtCliVersion} \u2192 ${pinDecision.version})...`
+    );
+    return await installAgtCliViaNpm(pinDecision.version, `pin=${pinDecision.version}`);
+  }
   let latest;
   try {
     const res = await fetch(
@@ -9282,7 +9343,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-ENQXJNBJ.js");
+      const { collectDiagnostics } = await import("../persistent-session-G7WNWWJZ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -9381,7 +9442,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-ENQXJNBJ.js");
+      const { collectDiagnostics } = await import("../persistent-session-G7WNWWJZ.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -9530,7 +9591,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-46XFHCPY.js");
+      } = await import("../responsiveness-probe-X735BG2Q.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -9562,7 +9623,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-46XFHCPY.js");
+        } = await import("../responsiveness-probe-X735BG2Q.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -12660,7 +12721,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-ENQXJNBJ.js");
+        const { collectDiagnostics } = await import("../persistent-session-G7WNWWJZ.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -12710,7 +12771,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-ENQXJNBJ.js");
+      const { collectDiagnostics } = await import("../persistent-session-G7WNWWJZ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -13208,7 +13269,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-T7EFAWS5.js");
+  } = await import("../claude-pair-runtime-XPWI2M2Z.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));