@integrity-labs/agt-cli 0.28.724 → 0.28.726

package/dist/{claude-pair-runtime-XWPOUQMP.js → claude-pair-runtime-42GBPDC7.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-CEC5KESY.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-LP7JOGZ5.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-XWPOUQMP.js.map
+//# sourceMappingURL=claude-pair-runtime-42GBPDC7.js.map

package/dist/lib/manager-worker.js

@@ -57,7 +57,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-KOAHMMPZ.js";
+} from "../chunk-Z3N7J2MG.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -90,8 +90,11 @@ import {
   isolationMode,
   log,
   mergeOpencodeConfigArtifact,
+  modelPolicyAuthComponent,
+  modelPolicyEgressDomains,
   paneLogPath,
   parseEnvIntegrations,
+  parseModelPolicy,
   prepareForRespawn,
   readChannelServerEnv,
   readDirectChatSessionState,
@@ -115,7 +118,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-ATJU3SDV.js";
+} from "../chunk-ZCTFF4PA.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -2880,21 +2883,29 @@ var COMPONENT_ORDER = [
   "auth_mode",
   "anthropic_api_key_fingerprint",
   "claude_account_fingerprint",
-  "openrouter_fingerprint"
+  "openrouter_fingerprint",
+  // ENG-9483 slice 2: `<policyId>@<revision>` from modelPolicyAuthComponent.
+  // Non-secret: a uuid the operator chose plus an integer they can see in the UI.
+  "model_policy"
 ];
+var POLICY_TUPLE_SEPARATOR = "|policy=";
 function parseAuthTuple(tuple) {
-  const raw = typeof tuple === "string" ? tuple : "";
+  const full = typeof tuple === "string" ? tuple : "";
+  const sepAt = full.lastIndexOf(POLICY_TUPLE_SEPARATOR);
+  const raw = sepAt === -1 ? full : full.slice(0, sepAt);
+  const policy = sepAt === -1 ? null : full.slice(sepAt + POLICY_TUPLE_SEPARATOR.length) || ABSENT2;
+  const withPolicy = (r) => policy === null ? r : { ...r, model_policy: policy };
   if (raw.startsWith("openrouter:")) {
-    return {
+    return withPolicy({
       auth_mode: "openrouter",
       openrouter_fingerprint: raw.slice("openrouter:".length) || ABSENT2
-    };
+    });
   }
   const parts = raw.split(":");
   if (parts.length < 2) {
-    return { auth_mode: raw || ABSENT2 };
+    return withPolicy({ auth_mode: raw || ABSENT2 });
   }
-  return {
+  return withPolicy({
     auth_mode: parts[0] || ABSENT2,
     anthropic_api_key_fingerprint: parts[1] || ABSENT2,
     // Omitted from the string when there is no signed-in account fingerprint
@@ -2902,7 +2913,19 @@ function parseAuthTuple(tuple) {
     // Recorded as the ABSENT sentinel so "account appeared" / "account
     // disappeared" is itself visible as a change.
     claude_account_fingerprint: parts[2] || ABSENT2
-  };
+  });
+}
+function buildAuthTuple(input) {
+  const {
+    openRouterCredential,
+    claudeAuthMode,
+    anthropicApiKeyFingerprint,
+    claudeAccountFingerprint,
+    modelPolicyComponent
+  } = input;
+  const suffix = modelPolicyComponent ? `${POLICY_TUPLE_SEPARATOR}${modelPolicyComponent}` : "";
+  if (openRouterCredential) return `openrouter:${openRouterCredential}${suffix}`;
+  return `${claudeAuthMode}:${anthropicApiKeyFingerprint ?? ABSENT2}${claudeAccountFingerprint ? `:${claudeAccountFingerprint}` : ""}${suffix}`;
 }
 function diffAuthTuples(recorded, current) {
   const before = parseAuthTuple(recorded);
@@ -5138,6 +5161,16 @@ function slugToTitle(slug) {
 function escapeYamlDouble(value) {
   return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
 }
+function resolveIntegrationSkillLane(payload) {
+  if (payload.integration_skills_manifest !== void 0 && payload.integration_skills === void 0) {
+    return null;
+  }
+  return payload.integration_skills ?? payload.plugin_skills ?? [];
+}
+function planIntegrationSkillSweep(discovered, currentIds, desiredResolved) {
+  if (!desiredResolved) return [];
+  return [...discovered].filter((entry) => !currentIds.has(entry));
+}
 function groupSkillsByIntegration(skills) {
   const map = /* @__PURE__ */ new Map();
   for (const s of skills) {
@@ -5365,19 +5398,14 @@ function sweepSkillCache(cacheDir, now = Date.now()) {
   } catch {
   }
 }
-async function resolveSkillsFromManifest(args) {
-  const { globals, shared, cacheDir, fetchContents, log: log2 } = args;
+async function collectBodies(hashes, cacheDir, fetchContents, lane, log2) {
   const bodies = /* @__PURE__ */ new Map();
   const missing = [];
-  for (const entry of [...globals, ...shared]) {
-    if (!entry.hash) {
-      log2?.(`[skills] manifest entry '${entry.code_name}' has no hash \u2014 skipping skill sync`);
-      return null;
-    }
-    if (bodies.has(entry.hash) || missing.includes(entry.hash)) continue;
-    const cached = readCachedSkill(cacheDir, entry.hash);
-    if (cached !== null) bodies.set(entry.hash, cached);
-    else missing.push(entry.hash);
+  for (const hash of hashes) {
+    if (bodies.has(hash) || missing.includes(hash)) continue;
+    const cached = readCachedSkill(cacheDir, hash);
+    if (cached !== null) bodies.set(hash, cached);
+    else missing.push(hash);
   }
   for (let i = 0; i < missing.length; i += SKILL_FETCH_CHUNK) {
     const chunk2 = missing.slice(i, i + SKILL_FETCH_CHUNK);
@@ -5385,19 +5413,32 @@ async function resolveSkillsFromManifest(args) {
       for (const { hash, content } of await fetchContents(chunk2)) {
         const written = writeCachedSkill(cacheDir, hash, content);
         if (written === "mismatch") {
-          log2?.(`[skills] hash mismatch for ${hash} \u2014 skipping skill sync this poll`);
+          log2?.(`[${lane}] hash mismatch for ${hash} \u2014 skipping skill sync this poll`);
           continue;
         }
         if (written === "write-failed") {
-          log2?.(`[skills] cache write failed for ${hash} \u2014 serving it uncached this poll`);
+          log2?.(`[${lane}] cache write failed for ${hash} \u2014 serving it uncached this poll`);
         }
         bodies.set(hash, content);
       }
     } catch (err) {
-      log2?.(`[skills] fetch failed for ${chunk2.length} entries: ${err.message}`);
+      log2?.(`[${lane}] fetch failed for ${chunk2.length} entries: ${err.message}`);
     }
   }
   sweepSkillCache(cacheDir);
+  return bodies;
+}
+async function resolveSkillsFromManifest(args) {
+  const { globals, shared, cacheDir, fetchContents, log: log2 } = args;
+  const hashes = [];
+  for (const entry of [...globals, ...shared]) {
+    if (!entry.hash) {
+      log2?.(`[skills] manifest entry '${entry.code_name}' has no hash \u2014 skipping skill sync`);
+      return null;
+    }
+    hashes.push(entry.hash);
+  }
+  const bodies = await collectBodies(hashes, cacheDir, fetchContents, "skills", log2);
   const resolve2 = (entries) => {
     const out = [];
     for (const e of entries) {
@@ -5420,6 +5461,47 @@ async function resolveSkillsFromManifest(args) {
   }
   return { globals: resolvedGlobals, shared: resolvedShared };
 }
+async function resolveIntegrationSkillsFromManifest(args) {
+  const { manifest, cacheDir, fetchContents, log: log2 } = args;
+  const hashes = [];
+  for (const entry of manifest) {
+    if (entry.hash) {
+      hashes.push(entry.hash);
+      continue;
+    }
+    if (typeof entry.content !== "string") {
+      log2?.(
+        `[integration-skills] manifest entry '${entry.plugin_slug}/${entry.skill_id}' has neither hash nor content \u2014 skipping integration skill sync`
+      );
+      return null;
+    }
+  }
+  const bodies = await collectBodies(
+    hashes,
+    cacheDir,
+    fetchContents,
+    "integration-skills",
+    log2
+  );
+  const out = [];
+  for (const e of manifest) {
+    const content = e.hash ? bodies.get(e.hash) : e.content;
+    if (content === void 0) {
+      log2?.(
+        "[integration-skills] one or more bodies unresolved \u2014 leaving on-disk integration skills untouched this poll"
+      );
+      return null;
+    }
+    out.push({
+      plugin_slug: e.plugin_slug,
+      ...e.integration_slug !== void 0 ? { integration_slug: e.integration_slug } : {},
+      skill_id: e.skill_id,
+      skill_name: e.skill_name,
+      content
+    });
+  }
+  return out;
+}
 
 // src/lib/channel-hash-cache.ts
 import { existsSync as existsSync8, readFileSync as readFileSync19, writeFileSync as writeFileSync10 } from "fs";
@@ -12184,7 +12266,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-J3VB4U4W.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-TTHNHBBS.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -12832,7 +12914,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.724" : "dev";
+var agtCliVersion = true ? "0.28.726" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14359,7 +14441,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-CEC5KESY.js");
+      const { collectDiagnostics } = await import("../persistent-session-LP7JOGZ5.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -14477,7 +14559,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-CEC5KESY.js");
+      const { collectDiagnostics } = await import("../persistent-session-LP7JOGZ5.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -14646,7 +14728,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-J3VB4U4W.js");
+      } = await import("../responsiveness-probe-TTHNHBBS.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -14756,7 +14838,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-J3VB4U4W.js");
+        } = await import("../responsiveness-probe-TTHNHBBS.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15677,7 +15759,13 @@ async function processAgent(agent, agentStates, managedToolkits) {
       // ENG-9585: the same for the two root-skill lanes. A separate flag
       // because the two shipped in different CLI versions — an API that
       // understands one and not the other must still be able to answer.
-      skills_manifest: true
+      skills_manifest: true,
+      // ENG-9585: and the integration lane, a third flag for the same reason
+      // one level sharper. A manager that sent `skills_manifest` but could not
+      // decode THIS manifest would read the lane as empty and sweep every
+      // integration skill folder off disk, so the flag has to name the exact
+      // capability rather than the family.
+      integration_skills_manifest: true
     });
     if (refreshData.knowledge_manifest) {
       const resolved = await resolveKnowledgeFromManifest({
@@ -15714,6 +15802,23 @@ async function processAgent(agent, agentStates, managedToolkits) {
         refreshData.shared_skills = resolvedSkills.shared;
       }
     }
+    if (refreshData.integration_skills_manifest) {
+      const resolvedIntegrationSkills = await resolveIntegrationSkillsFromManifest({
+        manifest: refreshData.integration_skills_manifest,
+        cacheDir: join40(config.configDir, "_skills"),
+        fetchContents: async (hashes) => {
+          const res = await api.post(
+            "/host/skills/contents",
+            { agent_id: agent.agent_id, hashes }
+          );
+          return res.contents ?? [];
+        },
+        log
+      });
+      if (resolvedIntegrationSkills) {
+        refreshData.integration_skills = resolvedIntegrationSkills;
+      }
+    }
   } catch (err) {
     log(`Refresh failed for '${agent.code_name}': ${err.message}`);
     const existing = state8.agents.find((a) => a.agentId === agent.agent_id);
@@ -16988,9 +17093,10 @@ async function processAgent(agent, agentStates, managedToolkits) {
         agent_id: agent.agent_id,
         knowledge_manifest: true,
         // Only `scheduled_tasks` is read here, so ask for the manifest shape on
-        // both lanes — nothing in this branch consumes a skill body, and the
+        // every lane — nothing in this branch consumes a skill body, and the
         // skill lanes are the largest part of the payload being discarded.
-        skills_manifest: true
+        skills_manifest: true,
+        integration_skills_manifest: true
       });
       tasks = freshData.scheduled_tasks ?? tasks;
     }
@@ -17023,9 +17129,17 @@ async function processAgent(agent, agentStates, managedToolkits) {
         if (!slug) continue;
         contextBySlug.set(slug, { values: ctx.values ?? {}, overrides: (ctx.overrides ?? "").trim() });
       }
-      const integrationGroups = groupSkillsByIntegration(
-        refreshAny.integration_skills ?? refreshAny.plugin_skills ?? []
-      );
+      const integrationSkillsInput = resolveIntegrationSkillLane({
+        integration_skills: refreshAny.integration_skills,
+        plugin_skills: refreshAny.plugin_skills,
+        integration_skills_manifest: refreshAny.integration_skills_manifest
+      });
+      if (integrationSkillsInput === null) {
+        log(
+          `Integration skill manifest unresolved for '${agent.code_name}' \u2014 leaving integration skill folders untouched this poll`
+        );
+      }
+      const integrationGroups = groupSkillsByIntegration(integrationSkillsInput ?? []);
       for (const [integrationSlug, scopes] of integrationGroups) {
         try {
           const integrationSkillId = `integration-${integrationSlug}`.replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
@@ -17104,10 +17218,12 @@ async function processAgent(agent, agentStates, managedToolkits) {
           });
           log(`Removed ${reason} '${entry}' for '${agent.code_name}' (framework=${frameworkId2})`);
         };
-        for (const entry of discoveredEntries) {
-          if (!currentIntegrationSkillIds.has(entry)) {
-            removeSkillFolder(entry, "orphaned skill folder");
-          }
+        for (const entry of planIntegrationSkillSweep(
+          discoveredEntries,
+          currentIntegrationSkillIds,
+          integrationSkillsInput !== null
+        )) {
+          removeSkillFolder(entry, "orphaned skill folder");
         }
       } catch (err) {
         log(`Integration skill cleanup failed for '${agent.code_name}': ${err.message}`);
@@ -17907,9 +18023,10 @@ var persistentSessionStuckTracker = new PersistentSessionStuckTracker();
 var claudeAuthTupleBySession = /* @__PURE__ */ new Map();
 var opencodeCredentialFingerprintBySession = /* @__PURE__ */ new Map();
 var egressAllowlistBySession = /* @__PURE__ */ new Map();
-function deriveEgressAllowlist(toolsRaw) {
+function deriveEgressAllowlist(toolsRaw, policy) {
   return buildEgressAllowlist(
-    toolsRaw ? extractFrontmatter(toolsRaw).frontmatter : null
+    toolsRaw ? extractFrontmatter(toolsRaw).frontmatter : null,
+    modelPolicyEgressDomains(policy)
   );
 }
 var egressAllowlistEqual = (a, b) => a.length === b.length && a.every((d, i) => d === b[i]);
@@ -18052,6 +18169,9 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
     smallFastModel: openRouterRaw.small_fast_model ?? null,
     fingerprint: openRouterRaw.fingerprint ?? null
   } : null;
+  const modelPolicy = parseModelPolicy(
+    refreshData.model_policy
+  );
   let claudeAuthMode;
   let anthropicApiKey;
   let anthropicApiKeyFingerprint;
@@ -18153,7 +18273,13 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
   let dayRolloverForced = false;
   const claudeAccountFingerprint = !openRouterForAgent && claudeAuthMode === "subscription" ? await getClaudeAccountFingerprint() : null;
   noteClaudeAccountChange(codeName, claudeAccountFingerprint, log);
-  const currentAuthTuple = openRouterForAgent ? `openrouter:${openRouterForAgent.fingerprint ?? openRouterForAgent.model}` : `${claudeAuthMode}:${anthropicApiKeyFingerprint ?? "none"}${claudeAccountFingerprint ? `:${claudeAccountFingerprint}` : ""}`;
+  const currentAuthTuple = buildAuthTuple({
+    openRouterCredential: openRouterForAgent ? openRouterForAgent.fingerprint ?? openRouterForAgent.model : null,
+    claudeAuthMode,
+    anthropicApiKeyFingerprint,
+    claudeAccountFingerprint,
+    modelPolicyComponent: modelPolicyAuthComponent(modelPolicy)
+  });
   const recordedAuthTuple = claudeAuthTupleBySession.get(codeName);
   if (recordedAuthTuple && recordedAuthTuple !== currentAuthTuple && isSessionHealthy(codeName)) {
     const authTupleDiff = diffAuthTuples(recordedAuthTuple, currentAuthTuple);
@@ -18320,7 +18446,8 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash19("sha256")
     trackSessionRun(codeName, sessionRunResult.run_id);
     const spawnPrimaryModel = resolveModelChain(refreshData).primary ?? refreshData.agent?.["primary_model"] ?? null;
     const egressAllowlist = deriveEgressAllowlist(
-      refreshData.tools?.raw_content
+      refreshData.tools?.raw_content,
+      modelPolicy
     );
     egressAllowlistBySession.set(codeName, egressAllowlist);
     let perAgentApiKey = null;
@@ -18373,6 +18500,17 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash19("sha256")
         model: openRouterForAgent.model,
         smallFastModel: openRouterForAgent.smallFastModel
       } : null,
+      // ENG-9483 slice 2 (ADR-0074). The SHAPE reaches the launcher; the
+      // credential does not. `modelPolicyGatewayToken` is deliberately absent
+      // (⇒ null) rather than wired to some plausible existing secret: slice 1's
+      // resolver never selects `model_policy_bindings.credential`, and ENG-9481's
+      // stored-key-vs-pass-through answer decides whether the credential is a
+      // `gateway_token` (needing ANTHROPIC_CUSTOM_HEADERS, an at-rest secret this
+      // tree does not have) or a plain `api_key` (which does not). Until then a
+      // gateway binding resolves to `blocked` and the agent keeps its existing
+      // auth — see resolveBindingCredential, the one function that changes when
+      // that question is answered.
+      modelPolicy,
       runId: sessionRunResult.run_id,
       agentTimezone,
       // ENG-6476: materialize the host-side reply-routing flags into the agent
@@ -18427,7 +18565,8 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash19("sha256")
   resetRestartCount(codeName);
   if (egressMode(codeName) === "allowlist") {
     const allowlist = deriveEgressAllowlist(
-      refreshData.tools?.raw_content
+      refreshData.tools?.raw_content,
+      modelPolicy
     );
     const prev = egressAllowlistBySession.get(codeName);
     if (!prev || !egressAllowlistEqual(prev, allowlist)) {
@@ -18770,7 +18909,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-CEC5KESY.js");
+        const { collectDiagnostics } = await import("../persistent-session-LP7JOGZ5.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -18821,7 +18960,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-CEC5KESY.js");
+      const { collectDiagnostics } = await import("../persistent-session-LP7JOGZ5.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19453,7 +19592,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-XWPOUQMP.js");
+  } = await import("../claude-pair-runtime-42GBPDC7.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));