@integrity-labs/agt-cli 0.28.671 → 0.28.673

package/dist/{claude-pair-runtime-ANNQRKO4.js → claude-pair-runtime-UZ2JB2KY.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-LTFB4M53.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-PYAJ4VJW.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-ANNQRKO4.js.map
+//# sourceMappingURL=claude-pair-runtime-UZ2JB2KY.js.map

package/dist/lib/manager-worker.js

@@ -1,6 +1,5 @@
 import {
   ApiError,
-  CHANNEL_SECRET_ENV_KEYS,
   FIRST_CONNECT_WINDOW_MS,
   HostFlagStore,
   RestartBreaker,
@@ -55,7 +54,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-ZU2BHLUS.js";
+} from "../chunk-RSERKOS7.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -64,10 +63,12 @@ import {
   syncTasksToScheduler
 } from "../chunk-3HLECXMI.js";
 import {
+  CHANNEL_SECRET_ENV_KEYS,
   ChildProcessError,
   agentRuntimeKey,
   buildEgressAllowlist,
   checkChannelInputs,
+  collectChannelSpawnSecrets,
   creditWatchdogGiveUpCount,
   egressMode,
   execFilePromiseLong,
@@ -111,7 +112,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-57XP5OG6.js";
+} from "../chunk-YAVWYI5S.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -192,7 +193,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-DWFN5PMF.js";
+} from "../chunk-YOID6KOQ.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -4996,7 +4997,12 @@ function computeChannelConfigHash(input) {
       sessionMode: input.sessionMode ?? null,
       // ENG-7435: value-blind on the team_principals id SETS so a reorder of
       // the same principals can't oscillate this hash into a false rewrite.
-      senderPolicy: normalizeSenderPolicyForHash(input.senderPolicy)
+      senderPolicy: normalizeSenderPolicyForHash(input.senderPolicy),
+      // ENG-9350: a `spawn-inject-channel-secrets` flip must invalidate the
+      // cache so writeChannelCredentials re-runs (evict on enable / restore on
+      // disable). Absent folds to 'file', so pre-ENG-9350 callers and the
+      // file-delivery default keep a stable digest relative to each other.
+      channelSecretDelivery: input.channelSecretDelivery ?? "file"
     })
   ).digest("hex");
 }
@@ -11611,7 +11617,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-P2S3UMRE.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-5I2LIVCA.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -11818,7 +11824,7 @@ function runPendingForcedUpdate() {
     }
     return false;
   }
-  if (selfUpdateInFlight) {
+  if (selfUpdateLatchVerdict(selfUpdateInFlightSince, Date.now()) === "held") {
     log(
       `[self-update] "Update CLI now" requested at ${requestedUpdateAt} \u2014 deferring: a self-update is already in flight. Retrying next poll.`
     );
@@ -12155,6 +12161,9 @@ function checkMcpConfigDriftAndScheduleRestart(codeName, projectDir) {
     }
   }
 }
+function shouldInjectChannelSecrets(agentId) {
+  return hostFlagStore().getBooleanForAgent("spawn-inject-channel-secrets", agentId);
+}
 function projectChannelSecretHash(projectDir) {
   try {
     const entries = parseEnvIntegrations(
@@ -12165,8 +12174,8 @@ function projectChannelSecretHash(projectDir) {
     return null;
   }
 }
-function checkChannelSecretDriftAndScheduleRestart(codeName, projectDir) {
-  const currentHash = projectChannelSecretHash(projectDir);
+function checkChannelSecretDriftAndScheduleRestart(codeName, projectDir, spawnEnvSecrets) {
+  const currentHash = spawnEnvSecrets !== void 0 ? channelSecretValueHash(spawnEnvSecrets, CHANNEL_SECRET_ENV_KEYS) : projectChannelSecretHash(projectDir);
   const action = decideMcpDriftAction(currentHash, runningChannelSecretHashes.get(codeName));
   switch (action.kind) {
     case "no-config":
@@ -12256,7 +12265,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.671" : "dev";
+var agtCliVersion = true ? "0.28.673" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -12771,14 +12780,35 @@ var selfUpdatePinInvalidLogged = false;
 var restartAfterUpgrade = false;
 var pendingUpgradeVersion = null;
 var selfUpdateInFlight = false;
+var selfUpdateInFlightSince = null;
+var SELF_UPDATE_LATCH_MAX_HOLD_MS = 20 * 6e4;
+function selfUpdateLatchVerdict(heldSince, now, maxHoldMs = SELF_UPDATE_LATCH_MAX_HOLD_MS) {
+  if (heldSince === null) return "free";
+  const heldMs = now - heldSince;
+  return heldMs >= maxHoldMs ? "expired" : "held";
+}
 var upgradeRestartInitiated = false;
 var cachedUpdateRequestedAt = null;
 var forcedUpdateDeferStreak = 0;
 var forcedUpdateRelaxAnnounced = false;
 async function checkAndUpdateCli(opts) {
   const force = opts?.force ?? false;
-  if (selfUpdateInFlight) return "failed";
+  const verdict = selfUpdateLatchVerdict(selfUpdateInFlightSince, Date.now());
+  if (verdict === "held") {
+    const heldSec = Math.round((Date.now() - (selfUpdateInFlightSince ?? Date.now())) / 1e3);
+    log(
+      `[self-update] deferring: a self-update has been in flight for ${heldSec}s. Retrying next poll; the latch breaks at ${Math.round(SELF_UPDATE_LATCH_MAX_HOLD_MS / 6e4)}m.`
+    );
+    return "failed";
+  }
+  if (verdict === "expired") {
+    const heldMin = Math.round((Date.now() - (selfUpdateInFlightSince ?? Date.now())) / 6e4);
+    console.warn(
+      `[manager-worker] [self-update] WEDGE: the in-flight latch has been held for ${heldMin}m, past the ${Math.round(SELF_UPDATE_LATCH_MAX_HOLD_MS / 6e4)}m bound. Breaking it and proceeding \u2014 the previous updater never settled (ENG-8624).`
+    );
+  }
   selfUpdateInFlight = true;
+  selfUpdateInFlightSince = Date.now();
   try {
     const cliPath = process.argv[1] ?? "";
     const isDevMode = cliPath.includes("/src/") || cliPath.includes("tsx");
@@ -12813,6 +12843,7 @@ async function checkAndUpdateCli(opts) {
     return outcome;
   } finally {
     selfUpdateInFlight = false;
+    selfUpdateInFlightSince = null;
   }
 }
 async function checkAndUpdateCliViaBrew(force = false) {
@@ -13620,7 +13651,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-LTFB4M53.js");
+      const { collectDiagnostics } = await import("../persistent-session-PYAJ4VJW.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -13736,7 +13767,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-LTFB4M53.js");
+      const { collectDiagnostics } = await import("../persistent-session-PYAJ4VJW.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor) : void 0;
       let tailscaleHostname;
@@ -13888,7 +13919,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-P2S3UMRE.js");
+      } = await import("../responsiveness-probe-5I2LIVCA.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -13998,7 +14029,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-P2S3UMRE.js");
+        } = await import("../responsiveness-probe-5I2LIVCA.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -14154,7 +14185,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-YHSQBOB4.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-NUX643UJ.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -15301,7 +15332,12 @@ async function processAgent(agent, agentStates, managedToolkits) {
             team: slackTeamPeerUserIds !== void 0 ? { ...teamSettingsForHash, slack_team_peer_user_ids: slackTeamPeerUserIds } : teamSettingsForHash,
             peers: peersForHash,
             sessionMode: sessionModeForHash,
-            senderPolicy: senderPolicyForHash
+            senderPolicy: senderPolicyForHash,
+            // ENG-9350: fold the delivery mode in so a `spawn-inject-channel-
+            // secrets` flip invalidates the cache and re-runs the writer (evict
+            // on enable / restore on disable). Same per-agent value the writer
+            // call below passes as channelSecretDelivery.
+            channelSecretDelivery: shouldInjectChannelSecrets(agent.agent_id) ? "spawn-env" : "file"
           });
           const cacheKey = `${agent.agent_id}:${channelId}`;
           let onDiskPresent = true;
@@ -15353,7 +15389,14 @@ async function processAgent(agent, agentStates, managedToolkits) {
                 slackTeamPeerUserIds,
                 agentTimezone,
                 senderPolicy: senderPolicyForCall,
-                agentAvatarUrl
+                agentAvatarUrl,
+                // ENG-9350 (epic ENG-9347): in spawn-env mode the writer null-
+                // deletes the channel token from `.env.integrations` (evicting any
+                // stale copy) and leaves the `.mcp.json` `${VAR}` template — the
+                // manager injects the value at spawn via `tmux -e` instead. The
+                // `.mcp.json` server entry is still written, so the landed check
+                // below (which reads `.mcp.json`, not the file) is unaffected.
+                channelSecretDelivery: shouldInjectChannelSecrets(agent.agent_id) ? "spawn-env" : "file"
               }
             );
             const landed = frameworkAdapter.hasChannelCredentials?.(agent.code_name, channelId) ?? true;
@@ -16506,7 +16549,11 @@ async function processAgent(agent, agentStates, managedToolkits) {
       }
       if (channelConfigConvergedThisTick) {
         try {
-          checkChannelSecretDriftAndScheduleRestart(agent.code_name, getProjectDir(agent.code_name));
+          checkChannelSecretDriftAndScheduleRestart(
+            agent.code_name,
+            getProjectDir(agent.code_name),
+            shouldInjectChannelSecrets(agent.agent_id) ? collectChannelSpawnSecrets(refreshData.channel_configs) : void 0
+          );
         } catch (err) {
           log(`[hot-reload] channel-secret drift check failed for '${agent.code_name}': ${err.message}`);
         }
@@ -17533,6 +17580,13 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash17("sha256")
       // ADR-0042 pt3b (ENG-7607 / ENG-8992): this agent's own org-scoped key
       // (null when unarmed). The spawn env carries it as this agent's AGT_API_KEY.
       perAgentApiKey,
+      // ENG-9350 (epic ENG-9347): when `spawn-inject-channel-secrets` is ON for
+      // this agent, deliver its channel bot tokens through the spawn env (`tmux
+      // -e`) instead of the on-disk `.env.integrations` file (which the writer
+      // above evicted). Undefined ⇒ file-sourced delivery, unchanged. Derived
+      // from the same channel_configs the writer used, via the shared core helper
+      // so the KEYS/VALUES can't diverge from what would have been persisted.
+      channelSpawnSecrets: shouldInjectChannelSecrets(agent.agent_id) ? collectChannelSpawnSecrets(channelConfigs) : void 0,
       log
     });
     agentState.persistentSessionAgents.add(codeName);
@@ -17891,7 +17945,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-LTFB4M53.js");
+        const { collectDiagnostics } = await import("../persistent-session-PYAJ4VJW.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -17942,7 +17996,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-LTFB4M53.js");
+      const { collectDiagnostics } = await import("../persistent-session-PYAJ4VJW.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -18573,7 +18627,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-ANNQRKO4.js");
+  } = await import("../claude-pair-runtime-UZ2JB2KY.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -19755,6 +19809,7 @@ export {
   REALTIME_REBIND_IN_FLIGHT_GRACE_MS,
   REALTIME_REBIND_MAX_BACKOFF_MS,
   REALTIME_REBIND_STUCK_AFTER_MS,
+  SELF_UPDATE_LATCH_MAX_HOLD_MS,
   UntrustworthyToolkitResponseError,
   applyMemoryTombstones,
   applyRestartAcks,
@@ -19798,6 +19853,7 @@ export {
   restartReasonBindsNewMcp,
   retiredMemoryDir,
   sameChannelSet,
+  selfUpdateLatchVerdict,
   shouldLogChannelSyncFailure,
   shouldReapOnRetag,
   shouldReportRestartToAudit,