@integrity-labs/agt-cli 0.28.434 → 0.28.436

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-CDF3NQLR.js";
+} from "../chunk-DT6YHTVR.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-TTEKDLQ7.js";
+} from "../chunk-IRFNOPFU.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.434" : "dev";
+var cliVersion = true ? "0.28.436" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.434" : "dev";
+var cliVersion2 = true ? "0.28.436" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-CDF3NQLR.js → chunk-DT6YHTVR.js}

@@ -29,7 +29,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-TTEKDLQ7.js";
+} from "./chunk-IRFNOPFU.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -4901,7 +4901,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.434" : "dev";
+var agtCliVersion = true ? "0.28.436" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -7402,4 +7402,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-CDF3NQLR.js.map
+//# sourceMappingURL=chunk-DT6YHTVR.js.map

package/dist/{chunk-TTEKDLQ7.js → chunk-IRFNOPFU.js}

@@ -4,9 +4,9 @@ import {
 
 // src/lib/persistent-session.ts
 import { spawn as spawn2, execSync as execSync2, execFileSync as execFileSync3 } from "child_process";
-import { join as join5, dirname as dirname3 } from "path";
-import { homedir as homedir5, platform, userInfo as userInfo2 } from "os";
-import { existsSync as existsSync6, readFileSync as readFileSync7, readdirSync as readdirSync3, writeFileSync as writeFileSync5, appendFileSync as appendFileSync2, mkdirSync as mkdirSync5, chmodSync as chmodSync3, copyFileSync, rmSync as rmSync3 } from "fs";
+import { join as join6, dirname as dirname3 } from "path";
+import { homedir as homedir6, platform, userInfo as userInfo2 } from "os";
+import { existsSync as existsSync6, readFileSync as readFileSync7, readdirSync as readdirSync3, writeFileSync as writeFileSync6, appendFileSync as appendFileSync2, mkdirSync as mkdirSync6, chmodSync as chmodSync3, copyFileSync, rmSync as rmSync4 } from "fs";
 
 // src/lib/mcp-sanitize.ts
 import { readFileSync, writeFileSync } from "fs";
@@ -6918,16 +6918,27 @@ var INTEGRATION_REGISTRY = [
     // Premium (billable). The upstream pay-per-event cost is per-Actor and
     // VARIABLE (each Actor's creator sets its own event prices), unlike X-Search's
     // fixed per-post price. So we meter the ACTUAL cost charged to us for each
-    // run, as a pass-through: `units` = the run's `usageTotalUsd` in whole US
-    // cents (the physical unit `usd_cent`), and the rate card prices each cent at
-    // a managed markup (1.5x USD). This keeps margin safe across cheap and
-    // expensive scrapes alike. `event_type` must match what the broker writes to
+    // run, as a pass-through: `units` = the run's `usageTotalUsd` in US dollars
+    // (the physical unit `usd`), and the rate card prices each of those dollars at
+    // a managed markup (1.5x). This keeps margin safe across cheap and expensive
+    // scrapes alike. `event_type` must match what the broker writes to
     // integration_usage_events. Until the rate row is seeded a run prices at 0
     // (budget gate inert) - the rate-card migration ships in the same PR.
+    //
+    // The unit is US DOLLARS, not cents. Metering in cents priced the meter at
+    // A$0.0225/unit, which rendered to the customer as "Actor Run (per usd_cent):
+    // A$0.02" - jargon, and rounded 11% below the real rate because the shared
+    // formatter only widens past 2dp below A$0.01. Per-dollar gives a whole-cent
+    // price and a line a customer can reason about; the money billed is identical.
     premium: {
       pricing: "usage",
-      note: "Billed per result on the upstream pay-per-event cost of each scrape, at a managed markup.",
-      meters: [{ event_type: "actor_run", unit: "usd_cent" }]
+      note: "Billed on the upstream pay-per-event cost of each scrape, at a managed markup. A 50-post TikTok scrape costs about A$0.19.",
+      meters: [{
+        event_type: "actor_run",
+        unit: "usd",
+        label: "Scraping usage",
+        unit_label: "US$1 of scraping cost"
+      }]
     }
   },
   {
@@ -6950,10 +6961,17 @@ var INTEGRATION_REGISTRY = [
     ],
     docs_url: "https://docs.apify.com/api/v2",
     beta: true,
+    // Same cost pass-through metering as Social Scraping - see the note there for
+    // why the unit is US dollars rather than cents.
     premium: {
       pricing: "usage",
-      note: "Billed per place returned on the upstream pay-per-event cost of each search, at a managed markup.",
-      meters: [{ event_type: "actor_run", unit: "usd_cent" }]
+      note: "Billed on the upstream pay-per-event cost of each search, at a managed markup. A 20-place search costs about A$0.07.",
+      meters: [{
+        event_type: "actor_run",
+        unit: "usd",
+        label: "Search usage",
+        unit_label: "US$1 of search cost"
+      }]
     }
   },
   {
@@ -11817,8 +11835,8 @@ function stopTranscriptRefresher(codeName) {
     transcriptTimers.delete(codeName);
   }
 }
-function readProvisionedOpencodeModel(agentDir2) {
-  return readOpencodeModelString(join3(agentDir2, "provision", "opencode.json"));
+function readProvisionedOpencodeModel(agentDir3) {
+  return readOpencodeModelString(join3(agentDir3, "provision", "opencode.json"));
 }
 function readOpencodeModelString(configPath2) {
   try {
@@ -12756,13 +12774,39 @@ function creditWatchdogGiveUpCount(codeName, count) {
   giveUpCounts.set(codeName, (giveUpCounts.get(codeName) ?? 0) + count);
 }
 
+// src/lib/usage-limit-marker-file.ts
+import { mkdirSync as mkdirSync5, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join5 } from "path";
+function agentDir2(codeName) {
+  return join5(homedir5(), ".augmented", codeName);
+}
+function usageLimitMarkerPath(codeName) {
+  return join5(agentDir2(codeName), USAGE_LIMIT_MARKER_FILENAME);
+}
+function writeUsageLimitMarker(codeName, limitedUntil, log2) {
+  try {
+    mkdirSync5(agentDir2(codeName), { recursive: true });
+    writeFileSync5(usageLimitMarkerPath(codeName), serializeUsageLimitMarker(limitedUntil), "utf-8");
+  } catch (err) {
+    log2(`[usage-banner] usage-limit marker sync failed for '${codeName}': ${err.message}`);
+  }
+}
+function clearUsageLimitMarker(codeName, log2) {
+  try {
+    rmSync3(usageLimitMarkerPath(codeName), { force: true });
+  } catch (err) {
+    log2(`[usage-banner] usage-limit marker clear failed for '${codeName}': ${err.message}`);
+  }
+}
+
 // src/lib/persistent-session.ts
 var OPENROUTER_ANTHROPIC_BASE_URL = "https://openrouter.ai/api";
 function syncClaudeCredsToRoot() {
   if (platform() !== "linux") return true;
   if (typeof process.getuid !== "function" || process.getuid() !== 0) return true;
   for (const filename of [".credentials.json", "credentials.json"]) {
-    if (existsSync6(join5("/root/.claude", filename))) return true;
+    if (existsSync6(join6("/root/.claude", filename))) return true;
   }
   let sourcePath = null;
   try {
@@ -12770,7 +12814,7 @@ function syncClaudeCredsToRoot() {
     outer: for (const entry of entries) {
       if (!entry.isDirectory()) continue;
       for (const filename of [".credentials.json", "credentials.json"]) {
-        const candidate = join5("/home", entry.name, ".claude", filename);
+        const candidate = join6("/home", entry.name, ".claude", filename);
         if (existsSync6(candidate)) {
           sourcePath = candidate;
           break outer;
@@ -12782,9 +12826,9 @@ function syncClaudeCredsToRoot() {
   if (!sourcePath) return false;
   const targetDir = "/root/.claude";
   const sourceFilename = sourcePath.endsWith("credentials.json") && !sourcePath.endsWith(".credentials.json") ? "credentials.json" : ".credentials.json";
-  const targetPath = join5(targetDir, sourceFilename);
+  const targetPath = join6(targetDir, sourceFilename);
   try {
-    if (!existsSync6(targetDir)) mkdirSync5(targetDir, { recursive: true, mode: 448 });
+    if (!existsSync6(targetDir)) mkdirSync6(targetDir, { recursive: true, mode: 448 });
     copyFileSync(sourcePath, targetPath);
     chmodSync3(targetPath, 384);
     return true;
@@ -12861,13 +12905,13 @@ function buildEgressAllowlist(toolsFrontmatter) {
   return [...domains].sort();
 }
 function egressAllowlistHostPath(codeName, homeDir) {
-  const home = homeDir ?? (process.env.HOME?.trim() || homedir5());
-  return join5(home, ".augmented", "_egress", `${codeName}.txt`);
+  const home = homeDir ?? (process.env.HOME?.trim() || homedir6());
+  return join6(home, ".augmented", "_egress", `${codeName}.txt`);
 }
 function writeEgressAllowlist(codeName, domains, homeDir) {
   const p2 = egressAllowlistHostPath(codeName, homeDir);
-  mkdirSync5(dirname3(p2), { recursive: true });
-  writeFileSync5(p2, domains.join("\n") + "\n", { mode: 420 });
+  mkdirSync6(dirname3(p2), { recursive: true });
+  writeFileSync6(p2, domains.join("\n") + "\n", { mode: 420 });
   return p2;
 }
 var EGRESS_DOCKER_TIMEOUT_MS = 1e4;
@@ -12903,13 +12947,13 @@ function restartEgressSidecar(codeName) {
 function buildDockerRunCommand(args) {
   const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting, forwardNotifyDispatch } = args;
   const q = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
-  const agentDir2 = join5(homeDir, ".augmented", codeName);
-  const agentIdDir = join5(homeDir, ".augmented", agentId);
-  const mcpDir = join5(homeDir, ".augmented", "_mcp");
-  const claudeHome = join5(homeDir, ".claude");
-  const claudeJson = join5(homeDir, ".claude.json");
+  const agentDir3 = join6(homeDir, ".augmented", codeName);
+  const agentIdDir = join6(homeDir, ".augmented", agentId);
+  const mcpDir = join6(homeDir, ".augmented", "_mcp");
+  const claudeHome = join6(homeDir, ".claude");
+  const claudeJson = join6(homeDir, ".claude.json");
   const mounts = [
-    `-v ${q(`${agentDir2}:${agentDir2}`)}`,
+    `-v ${q(`${agentDir3}:${agentDir3}`)}`,
     `-v ${q(`${agentIdDir}:${agentIdDir}`)}`,
     `-v ${q(`${mcpDir}:${mcpDir}:ro`)}`,
     `-v ${q(`${claudeHome}:${claudeHome}`)}`,
@@ -12920,7 +12964,7 @@ function buildDockerRunCommand(args) {
   const cpus = process.env.AGT_ISOLATION_CPUS || "1.0";
   const pids = process.env.AGT_ISOLATION_PIDS || "512";
   const envArgs = [`-e ${q(`HOME=${homeDir}`)}`];
-  envArgs.push(`-e ${q(`npm_config_cache=${join5(agentDir2, ".npm-cache")}`)}`);
+  envArgs.push(`-e ${q(`npm_config_cache=${join6(agentDir3, ".npm-cache")}`)}`);
   if (passApiKey) envArgs.push("-e ANTHROPIC_API_KEY");
   if (passOpenRouter) {
     envArgs.push("-e ANTHROPIC_BASE_URL");
@@ -12987,8 +13031,8 @@ function buildDockerRunCommand(args) {
 }
 function writePersistentClaudeWrapper(args) {
   const { projectDir, claudeBin, initPrompt, claudeArgsJoined } = args;
-  const envIntegrationsPath = join5(projectDir, ".env.integrations");
-  const wrapperPath = join5(projectDir, ".claude", "persistent-claude.sh");
+  const envIntegrationsPath = join6(projectDir, ".env.integrations");
+  const wrapperPath = join6(projectDir, ".claude", "persistent-claude.sh");
   const wrapperLines = [
     "#!/usr/bin/env bash",
     "set -e",
@@ -13007,8 +13051,8 @@ function writePersistentClaudeWrapper(args) {
   wrapperLines.push(
     `exec ${JSON.stringify(claudeBin)} ${initPromptArg}${claudeArgsJoined}`
   );
-  mkdirSync5(join5(projectDir, ".claude"), { recursive: true });
-  writeFileSync5(wrapperPath, wrapperLines.join("\n") + "\n", { mode: 448 });
+  mkdirSync6(join6(projectDir, ".claude"), { recursive: true });
+  writeFileSync6(wrapperPath, wrapperLines.join("\n") + "\n", { mode: 448 });
   chmodSync3(wrapperPath, 448);
   return wrapperPath;
 }
@@ -13023,15 +13067,15 @@ function collectMcpServerNames(mcpConfigPath) {
   }
 }
 var sessions2 = /* @__PURE__ */ new Map();
-var PANE_LOG_DIR = join5(homedir5(), ".augmented");
+var PANE_LOG_DIR = join6(homedir6(), ".augmented");
 var PANE_TAIL_LINES = 20;
 function paneLogPath(codeName) {
-  return join5(PANE_LOG_DIR, codeName, "pane.log");
+  return join6(PANE_LOG_DIR, codeName, "pane.log");
 }
 function setupPaneLog2(tmuxSession, codeName, log2) {
   const logPath = paneLogPath(codeName);
   try {
-    mkdirSync5(dirname3(logPath), { recursive: true });
+    mkdirSync6(dirname3(logPath), { recursive: true });
     appendFileSync2(
       logPath,
       `
@@ -13122,7 +13166,7 @@ function resolveSessionSpawnDecision(args) {
   };
 }
 function directChatSessionStatePath(agentId) {
-  return join5(homedir5(), ".augmented", agentId, "direct-chat-session.json");
+  return join6(homedir6(), ".augmented", agentId, "direct-chat-session.json");
 }
 function readDirectChatSessionState(agentId) {
   try {
@@ -13137,8 +13181,8 @@ function readDirectChatSessionState(agentId) {
 }
 function writeDirectChatSessionState(agentId, state) {
   const p2 = directChatSessionStatePath(agentId);
-  mkdirSync5(dirname3(p2), { recursive: true });
-  writeFileSync5(p2, JSON.stringify(state));
+  mkdirSync6(dirname3(p2), { recursive: true });
+  writeFileSync6(p2, JSON.stringify(state));
 }
 function startPersistentSession(config) {
   const existing = sessions2.get(config.codeName);
@@ -13194,12 +13238,12 @@ function spawnSession(config, session) {
         log2(`[persistent-session] No Claude Code credentials found under /root/.claude or /home/*. Pair via browser from the host page, or run 'claude /login' on the host.`);
       }
     } else {
-      const claudeDir = join5(homedir5(), ".claude");
+      const claudeDir = join6(homedir6(), ".claude");
       for (const filename of [".credentials.json", "credentials.json"]) {
-        const p2 = join5(claudeDir, filename);
+        const p2 = join6(claudeDir, filename);
         if (existsSync6(p2)) {
           try {
-            rmSync3(p2, { force: true });
+            rmSync4(p2, { force: true });
             log2(`[persistent-session] Removed ${p2} (api_key mode active \u2014 preventing OAuth fallback)`);
           } catch {
           }
@@ -13291,7 +13335,7 @@ function spawnSession(config, session) {
     if (config.notifyDispatchMode && config.notifyDispatchMode !== "off" && !process.env["AGT_NOTIFY_DISPATCH"]) {
       tmuxSessionEnvArgs.push("-e", `AGT_NOTIFY_DISPATCH=${config.notifyDispatchMode}`);
     }
-    const sessionHomeDir = process.env.HOME?.trim() || homedir5();
+    const sessionHomeDir = process.env.HOME?.trim() || homedir6();
     let egress;
     if (egressMode(codeName) === "allowlist") {
       const allowlist = config.egressAllowlist ?? buildEgressAllowlist(null);
@@ -13330,7 +13374,7 @@ function spawnSession(config, session) {
       // Treat empty-string as missing too — `HOME=""` makes ~ resolve
       // to cwd, which is the same broken outcome as no HOME, just
       // better hidden.
-      HOME: process.env.HOME?.trim() || homedir5(),
+      HOME: process.env.HOME?.trim() || homedir6(),
       USER: process.env.USER?.trim() || userInfo2().username
     };
     if (config.runId) {
@@ -13354,7 +13398,7 @@ function spawnSession(config, session) {
     } : { ...tmuxEnv, ...apiKeyEnv, ...openRouterEnv };
     for (const f of probeMcpEnvSubstitution({
       mcpConfigPath,
-      envIntegrationsPath: join5(projectDir, ".env.integrations"),
+      envIntegrationsPath: join6(projectDir, ".env.integrations"),
       baseEnv: probeBaseEnv
     })) {
       log2(`[persistent-session] ${formatMissingVar(f)} agent=${codeName}`);
@@ -13383,6 +13427,7 @@ function spawnSession(config, session) {
       }
       log2(`[persistent-session] tmux session '${tmuxSession}' created for '${codeName}'`);
       setupPaneLog2(tmuxSession, codeName, log2);
+      clearUsageLimitMarker(codeName, log2);
       session.currentSessionId = sessionId;
       acceptDialogs(tmuxSession, codeName, log2, config.primaryModel ?? null, sessionId).catch(() => {
       });
@@ -13912,7 +13957,7 @@ async function stopAllSessionsAndWait(log2, opts) {
   await new Promise((resolve) => setTimeout(resolve, Math.min(opts.timeoutMs, 2e3)));
 }
 function getProjectDir(codeName) {
-  return join5(homedir5(), ".augmented", codeName, "project");
+  return join6(homedir6(), ".augmented", codeName, "project");
 }
 
 export {
@@ -13999,8 +14044,6 @@ export {
   sumTranscriptUsageInWindow,
   isEmptyTotals,
   attributeTranscriptUsageByRun,
-  USAGE_LIMIT_MARKER_FILENAME,
-  serializeUsageLimitMarker,
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   serializeAccountEnforcementMarker,
   KANBAN_CHECK_COMMAND,
@@ -14043,6 +14086,8 @@ export {
   checkChannelInputs,
   takeWatchdogGiveUpCount,
   creditWatchdogGiveUpCount,
+  writeUsageLimitMarker,
+  clearUsageLimitMarker,
   resolveOAuthCredAction,
   resolveClaudeBinary,
   isolationMode,
@@ -14081,4 +14126,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-TTEKDLQ7.js.map
+//# sourceMappingURL=chunk-IRFNOPFU.js.map