@integrity-labs/agt-cli 0.28.734 → 0.28.736

package/dist/bin/agt.js

@@ -41,12 +41,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-RLOZVCRY.js";
+} from "../chunk-F5UORP7D.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-5CF4DRXA.js";
+} from "../chunk-6J6G4HOG.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.734" : "dev";
+var cliVersion = true ? "0.28.736" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6654,7 +6654,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.734" : "dev";
+var cliVersion2 = true ? "0.28.736" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-5CF4DRXA.js → chunk-6J6G4HOG.js}

@@ -3357,6 +3357,48 @@ function isolationMode(codeName) {
   if (allow.length > 0 && (!codeName || !allow.includes(codeName))) return "none";
   return "docker";
 }
+var dockerReadinessCache = null;
+var isolationDegradationLogged = false;
+function probeDockerRuntime(image) {
+  try {
+    execFileSync3("docker", ["info"], { stdio: "ignore", timeout: 15e3 });
+  } catch (err) {
+    const code = err?.code;
+    return {
+      ok: false,
+      reason: code === "ENOENT" ? "docker-not-installed" : "docker-daemon-unavailable"
+    };
+  }
+  try {
+    execFileSync3("docker", ["image", "inspect", image], { stdio: "ignore", timeout: 15e3 });
+  } catch {
+    return { ok: false, reason: `image-missing:${image}` };
+  }
+  return { ok: true };
+}
+function dockerRuntimeReadiness() {
+  if (dockerReadinessCache) return dockerReadinessCache;
+  dockerReadinessCache = probeDockerRuntime(
+    process.env.AGT_ISOLATION_IMAGE || "agt-runtime:latest"
+  );
+  return dockerReadinessCache;
+}
+function resetDockerRuntimeReadinessForTests(pinned = null) {
+  dockerReadinessCache = pinned;
+  isolationDegradationLogged = false;
+}
+function effectiveIsolationMode(codeName, log2) {
+  if (isolationMode(codeName) !== "docker") return "none";
+  const readiness = dockerRuntimeReadiness();
+  if (readiness.ok) return "docker";
+  if (!isolationDegradationLogged) {
+    isolationDegradationLogged = true;
+    (log2 ?? ((m) => console.warn(m)))(
+      `[isolation] AGT_ISOLATION=docker but the Docker runtime is unusable (reason=${readiness.reason}) - agents on this host are spawning UNISOLATED. Install Docker and the agt-runtime image, then restart the manager.`
+    );
+  }
+  return "none";
+}
 var EGRESS_BASELINE_DOMAINS = [
   ".anthropic.com",
   // claude API
@@ -4015,14 +4057,15 @@ function spawnSession(config, session) {
       tmuxSessionEnvArgs.push("-e", `${key}=${value}`);
     }
     const sessionHomeDir = process.env.HOME?.trim() || homedir5();
+    const effectiveMode = effectiveIsolationMode(codeName, log2);
     let egress;
-    if (egressMode(codeName) === "allowlist") {
+    if (effectiveMode === "docker" && egressMode(codeName) === "allowlist") {
       const allowlist = config.egressAllowlist ?? buildEgressAllowlist(null);
       const allowlistHostPath = writeEgressAllowlist(codeName, allowlist, sessionHomeDir);
       egress = { allowlistHostPath };
       log2(`[persistent-session] egress allowlist for '${codeName}': ${allowlist.length} domains (deny-by-default)`);
     }
-    const claudeCmd = isolationMode(codeName) === "docker" ? buildDockerRunCommand({
+    const claudeCmd = effectiveMode === "docker" ? buildDockerRunCommand({
       codeName,
       agentId: config.agentId,
       wrapperPath,
@@ -4084,7 +4127,7 @@ function spawnSession(config, session) {
       ...config.openRouter.smallFastModel ? { ANTHROPIC_SMALL_FAST_MODEL: config.openRouter.smallFastModel } : {}
     } : {};
     const channelSecretEnv = config.channelSpawnSecrets ?? {};
-    const probeBaseEnv = isolationMode(codeName) === "docker" ? {
+    const probeBaseEnv = effectiveMode === "docker" ? {
       HOME: tmuxEnv["HOME"],
       ...apiKeyEnv,
       ...openRouterEnv,
@@ -4105,7 +4148,7 @@ function spawnSession(config, session) {
     const missingSpawnEnv = findMissingSpawnEnv(probeBaseEnv);
     for (const key of missingSpawnEnv) {
       log2(
-        `[persistent-session] MISSING SPAWN ENV ${key} agent=${codeName} isolation=${isolationMode(codeName)} \u2014 programs reading process.env.${key} will fail (e.g. the agt-bin/gh GitHub credential shim hard-exits without AGT_AGENT_ID, taking every git fetch/push with it)`
+        `[persistent-session] MISSING SPAWN ENV ${key} agent=${codeName} isolation=${effectiveMode} \u2014 programs reading process.env.${key} will fail (e.g. the agt-bin/gh GitHub credential shim hard-exits without AGT_AGENT_ID, taking every git fetch/push with it)`
       );
     }
     try {
@@ -4160,7 +4203,7 @@ function spawnSession(config, session) {
           });
           if (mismatch) {
             log2(
-              `[persistent-session] PANE AGENT ID MISMATCH agent=${codeName} isolation=${isolationMode(codeName)} \u2014 ${mismatch}`
+              `[persistent-session] PANE AGENT ID MISMATCH agent=${codeName} isolation=${effectiveMode} \u2014 ${mismatch}`
             );
             session.status = "crashed";
             session.startedAt = Date.now();
@@ -4540,7 +4583,7 @@ var zombieProbeCache = /* @__PURE__ */ new Map();
 var pendingZombieDetections = /* @__PURE__ */ new Map();
 function isClaudeProcessAliveInTmux(tmuxSession) {
   const codeName = tmuxSession.replace(/^agt-/, "");
-  if (isolationMode(codeName) === "docker") {
+  if (effectiveIsolationMode(codeName) === "docker") {
     try {
       const out = execFileSync3("docker", ["exec", `agt-${codeName}`, "pgrep", "-f", "claude"], {
         encoding: "utf-8",
@@ -4664,7 +4707,7 @@ function collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, sp
         screenCapture: null,
         launchArgs: null,
         channelStatus: null,
-        isolated: isolationMode(codeName) === "docker",
+        isolated: effectiveIsolationMode(codeName) === "docker",
         quarantinedChannels,
         // ENG-7188: undefined when the accessor is absent = NO SIGNAL. Both
         // return paths carry it; a field on only one is the divergence class
@@ -4756,7 +4799,7 @@ function collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, sp
       // limit size
       launchArgs,
       channelStatus,
-      isolated: isolationMode(codeName) === "docker",
+      isolated: effectiveIsolationMode(codeName) === "docker",
       quarantinedChannels,
       // ENG-7188: undefined when the accessor is absent = NO SIGNAL. Both
       // return paths carry it; a field on only one is the divergence class
@@ -4838,6 +4881,9 @@ export {
   resolveOAuthCredAction,
   resolveClaudeBinary,
   isolationMode,
+  dockerRuntimeReadiness,
+  resetDockerRuntimeReadinessForTests,
+  effectiveIsolationMode,
   EGRESS_BASELINE_DOMAINS,
   egressMode,
   buildEgressAllowlist,
@@ -4883,4 +4929,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-5CF4DRXA.js.map
+//# sourceMappingURL=chunk-6J6G4HOG.js.map