@integrity-labs/agt-cli 0.28.594 → 0.28.595

package/dist/{claude-pair-runtime-CGVDKWFC.js → claude-pair-runtime-5WB2FMIX.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-YRCF7AAC.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-BGMQQYW2.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-CGVDKWFC.js.map
+//# sourceMappingURL=claude-pair-runtime-5WB2FMIX.js.map

package/dist/lib/manager-worker.js

@@ -53,7 +53,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-U7DHWGAZ.js";
+} from "../chunk-RC6V6QN2.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -61,12 +61,60 @@ import {
   markTaskFired,
   syncTasksToScheduler
 } from "../chunk-3HLECXMI.js";
+import {
+  ChildProcessError,
+  agentRuntimeKey,
+  buildEgressAllowlist,
+  checkChannelInputs,
+  creditWatchdogGiveUpCount,
+  egressMode,
+  execFilePromiseLong,
+  getLastFailureContext,
+  getOpencodeActivityAgeSeconds,
+  getOpencodeSessionState,
+  getOpencodeTurnHealth,
+  getProjectDir,
+  getSessionState,
+  hashFile,
+  injectMessage,
+  injectMessageWithStatus,
+  injectOpencodeMessage,
+  isOpencodeSessionHealthy,
+  isSessionHealthy,
+  isolationMode,
+  log,
+  mergeOpencodeConfigArtifact,
+  paneLogPath,
+  parseEnvIntegrations,
+  prepareForRespawn,
+  readChannelServerEnv,
+  readDirectChatSessionState,
+  readOpencodePaneLogTail,
+  readPaneLogTail,
+  readProvisionedOpencodeModel,
+  reloadEgressSidecar,
+  resetRestartCount,
+  resolveClaudeBinary,
+  restartEgressSidecar,
+  rotatePaneLogForDayRollover,
+  rotateSessionForWedge,
+  sha256,
+  sharedBusyBuckets,
+  startOpencodeSession,
+  startPersistentSession,
+  stopAllSessionsAndWait,
+  stopOpencodeSession,
+  stopPersistentSession,
+  takeWatchdogGiveUpCount,
+  takeZombieDetection,
+  toOpencodeModel,
+  writeEgressAllowlist
+} from "../chunk-6NVRWZ5W.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
   CLAUDE_MD_MAX_CHARS,
   CONVERSATION_FAILURE_CATEGORIES,
-  ChildProcessError,
   DEFAULT_FRAMEWORK,
   DEFAULT_NEIGHBOURHOOD_MS,
   FLAGS_SCHEMA_VERSION,
@@ -82,24 +130,18 @@ import {
   SUPPRESS_SENTINEL,
   StreamEncoder,
   UNKNOWN_RATE_LIMIT,
-  agentRuntimeKey,
   appendDmFooter,
   attributeTranscriptUsageByRun,
-  buildEgressAllowlist,
   buildFailureCategoryPromptLines,
   buildScheduledTaskContextBlocks,
-  checkChannelInputs,
   classifyActor,
   classifyCursorAdvance,
   classifyOutput,
   classifyTranscriptRateLimit,
   coerceOnboardingState,
-  creditWatchdogGiveUpCount,
   cursorAdvanceCounterKey,
   describeOnboardingChannel,
-  egressMode,
   estimateActiveTasksTokens,
-  execFilePromiseLong,
   extractFrontmatter,
   extractQualifyingTurns,
   findRunMarker,
@@ -109,16 +151,6 @@ import {
   formatRunMarker,
   getFramework,
   getIntegration,
-  getLastFailureContext,
-  getOpencodeActivityAgeSeconds,
-  getOpencodeSessionState,
-  getOpencodeTurnHealth,
-  getProjectDir,
-  getSessionState,
-  hashFile,
-  injectMessage,
-  injectMessageWithStatus,
-  injectOpencodeMessage,
   isAgentIdle,
   isAgentTimezoneOverrideExpired,
   isBareAck,
@@ -129,62 +161,32 @@ import {
   isEmptyTotals,
   isForcedUpdatePastDeadline,
   isOnboardingArea,
-  isOpencodeSessionHealthy,
   isParseError,
   isResolveError,
   isSelfCompletion,
-  isSessionHealthy,
   isStaleForToday,
   isSystemInjectedContent,
   isUnsetTimezone,
   isVacuousDeliverReason,
-  isolationMode,
   laneTagFragment,
-  log,
-  mergeOpencodeConfigArtifact,
   minutesSinceLocalMidnight,
-  paneLogPath,
   parseDeliverAssertion,
   parseDeliveryTarget,
-  parseEnvIntegrations,
   parseTranscriptUsage,
   parseUsageBanner,
   peekCurrentSession,
   pickNewerClassification,
-  prepareForRespawn,
-  readChannelServerEnv,
-  readDirectChatSessionState,
-  readOpencodePaneLogTail,
-  readPaneLogTail,
-  readProvisionedOpencodeModel,
-  reloadEgressSidecar,
   remoteMcpServerKey,
-  resetRestartCount,
   resolveAgentTimezone,
   resolveAvatarEnvUrl,
   resolveChannels,
-  resolveClaudeBinary,
   resolveDmTarget,
-  restartEgressSidecar,
-  rotatePaneLogForDayRollover,
-  rotateSessionForWedge,
   serializeAccountEnforcementMarker,
   sessionTranscriptDir,
-  sha256,
-  sharedBusyBuckets,
-  startOpencodeSession,
-  startPersistentSession,
-  stopAllSessionsAndWait,
-  stopOpencodeSession,
-  stopPersistentSession,
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
-  takeWatchdogGiveUpCount,
-  takeZombieDetection,
-  toOpencodeModel,
-  transcriptActivityAgeSeconds,
-  writeEgressAllowlist
-} from "../chunk-74UJCPIS.js";
+  transcriptActivityAgeSeconds
+} from "../chunk-3PNRUCHD.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -11825,7 +11827,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.594" : "dev";
+var agtCliVersion = true ? "0.28.595" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -13132,7 +13134,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-YRCF7AAC.js");
+      const { collectDiagnostics } = await import("../persistent-session-BGMQQYW2.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -13240,7 +13242,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-YRCF7AAC.js");
+      const { collectDiagnostics } = await import("../persistent-session-BGMQQYW2.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor) : void 0;
       let tailscaleHostname;
@@ -13363,7 +13365,7 @@ async function pollCycle() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-MFWXIRTJ.js");
+      } = await import("../responsiveness-probe-VAGPO5FZ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -13454,7 +13456,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-MFWXIRTJ.js");
+        } = await import("../responsiveness-probe-VAGPO5FZ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -13610,12 +13612,24 @@ async function pollCycle() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-CWFGB472.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
       for (const codeName of agentState.persistentSessionAgents) {
         const agentId = agentState.codeNameToAgentId.get(codeName);
         if (!agentId) continue;
+        try {
+          const authVerdict = probeSessionAuth({ projectDir: getProjectDir(codeName) });
+          if (authVerdict.state !== "ok" && lastSessionAuthDetail.get(codeName) !== authVerdict.detail) {
+            log(
+              `[session-auth] agent=${codeName} ${authVerdict.detail}${authVerdict.worst?.toolName ? ` tool=${authVerdict.worst.toolName}` : ""} \u2014 ${authVerdict.worst?.remedy ?? ""}`
+            );
+          }
+          lastSessionAuthDetail.set(codeName, authVerdict.detail);
+        } catch (err) {
+          log(`[session-auth] probe failed for ${codeName}: ${err.message}`);
+        }
         const tail = readPaneLogTail(codeName, 40);
         if (!tail) continue;
         if (modelApiErrorReportingOn) {
@@ -16299,6 +16313,7 @@ Retried to the limit after repeated stalls \u2014 needs a look.`).catch(() => {
 }
 var lastMcpFailedBannerCount = /* @__PURE__ */ new Map();
 var lastModelApiErrorSig = /* @__PURE__ */ new Map();
+var lastSessionAuthDetail = /* @__PURE__ */ new Map();
 var DAY_ROLLOVER_FORCE_GRACE_MIN = 30;
 var persistentSessionStuckTracker = new PersistentSessionStuckTracker();
 var claudeAuthTupleBySession = /* @__PURE__ */ new Map();
@@ -17025,7 +17040,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-YRCF7AAC.js");
+        const { collectDiagnostics } = await import("../persistent-session-BGMQQYW2.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -17076,7 +17091,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-YRCF7AAC.js");
+      const { collectDiagnostics } = await import("../persistent-session-BGMQQYW2.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -17654,7 +17669,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-CGVDKWFC.js");
+  } = await import("../claude-pair-runtime-5WB2FMIX.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));