@integrity-labs/agt-cli 0.28.747 → 0.28.749

package/dist/{chunk-OYASDDR4.js → chunk-WTBSFYTA.js}

@@ -13,7 +13,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-R35LZDRH.js";
+} from "./chunk-3LQYVRKX.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -62,7 +62,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-62TAD4HO.js";
+} from "./chunk-DFOBTAPL.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6430,7 +6430,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.747" : "dev";
+var agtCliVersion = true ? "0.28.749" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10476,4 +10476,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-OYASDDR4.js.map
+//# sourceMappingURL=chunk-WTBSFYTA.js.map

package/dist/{claude-pair-runtime-REZ462KO.js → claude-pair-runtime-QOHDIQBD.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-V6L4Y2P5.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-VX5THUBN.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-REZ462KO.js.map
+//# sourceMappingURL=claude-pair-runtime-QOHDIQBD.js.map

package/dist/lib/manager-worker.js

@@ -57,7 +57,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-OYASDDR4.js";
+} from "../chunk-WTBSFYTA.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -118,7 +118,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-R35LZDRH.js";
+} from "../chunk-3LQYVRKX.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -126,6 +126,7 @@ import {
   CONVERSATION_FAILURE_CATEGORIES,
   DEFAULT_FRAMEWORK,
   DEFAULT_NEIGHBOURHOOD_MS,
+  EXTRACTOR_IDENTIFIER_RULE,
   FLAGS_SCHEMA_VERSION,
   FLAG_REGISTRY,
   FORCED_UPDATE_HARD_DEADLINE_MS,
@@ -156,6 +157,7 @@ import {
   extractFrontmatter,
   extractQualifyingTurns,
   extractToolCallEvents,
+  findIdentifierUrls,
   findRunMarker,
   forcedUpdatePendingForMs,
   formatActorId,
@@ -163,6 +165,7 @@ import {
   formatRunMarker,
   getFramework,
   getIntegration,
+  identifierMemoryName,
   isAgentIdle,
   isAgentTimezoneOverrideExpired,
   isBareAck,
@@ -197,13 +200,14 @@ import {
   resolveAvatarEnvUrl,
   resolveChannels,
   resolveDmTarget,
+  scrubPreservingIdentifiers,
   serializeAccountEnforcementMarker,
   sessionTranscriptDir,
   stabiliseResetInstant,
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-62TAD4HO.js";
+} from "../chunk-DFOBTAPL.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -3921,14 +3925,14 @@ var SECRET_PATTERNS = [
   /\b[\w.+-]+@[\w-]+\.[\w.-]+\b/g
 ];
 function scrubSensitive(text) {
-  let out = text;
-  for (const re of SECRET_PATTERNS) out = out.replace(re, "[redacted]");
-  return out;
+  return scrubPreservingIdentifiers(text, SECRET_PATTERNS);
 }
 var state5 = /* @__PURE__ */ new Map();
 function buildExtractionPrompt(channel, transcript) {
   return `You are extracting durable, reusable memories from one completed ${channel} conversation between an AI agent and an end-user. A good memory is a stable preference, fact, correction, or recurring work context that will help the agent in FUTURE conversations \u2014 not a one-off task detail or pleasantry.
 
+${EXTRACTOR_IDENTIFIER_RULE} The "no secrets" rule below still wins: if the identifier itself carries a credential (a token, password or signing parameter), leave it out.
+
 Conversation transcript:
 """
 ${transcript}
@@ -3936,7 +3940,7 @@ ${transcript}
 
 Extract 0-5 candidate memories. For each:
 - name: short descriptive title (max 50 chars)
-- content: the memory itself, self-contained (max 200 chars). Do NOT include secrets or sensitive personal data.
+- content: the memory itself, self-contained (max 200 chars \u2014 or up to 500 when it carries an identifier that must be copied exactly). Do NOT include secrets or sensitive personal data.
 - type: "user" (a person's stable preference), "feedback" (a correction to how the agent should work), "project" (durable work context), or "reference" (a pointer to an external resource)
 - confidence: 0.0-1.0 \u2014 how sure you are this is worth remembering long-term
 - rationale: why this should persist (max 100 chars)
@@ -3975,6 +3979,70 @@ function parseCandidates(raw) {
   }
   return out;
 }
+var FORCED_IDENTIFIER_CONFIDENCE = 0.9;
+var MAX_FORCED_IDENTIFIERS = 3;
+var MAX_FORCED_CONTENT = 500;
+function detectMissedIdentifiers(turns, candidates) {
+  const userTurns = turns.filter((t) => t.role === "user");
+  if (userTurns.length === 0) return [];
+  const already = candidates.map((c) => c.content).join("\n");
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const turn of userTurns) {
+    for (const url of findIdentifierUrls(turn.text)) {
+      if (seen.has(url)) continue;
+      seen.add(url);
+      if (already.includes(url)) continue;
+      const context = turn.text.replace(url, " ").replace(/\s+/g, " ").trim().slice(0, 140);
+      const content = url.length >= MAX_FORCED_CONTENT ? url : `${url}${context ? ` \u2014 shared by the user: ${context}` : ""}`.slice(
+        0,
+        MAX_FORCED_CONTENT
+      );
+      out.push({
+        name: identifierMemoryName(url),
+        content,
+        type: "reference",
+        confidence: FORCED_IDENTIFIER_CONFIDENCE,
+        rationale: "Identifier supplied by the user; unrecoverable after a restart."
+      });
+      if (out.length >= MAX_FORCED_IDENTIFIERS) return out;
+    }
+  }
+  return out;
+}
+async function salvageIdentifiers(args) {
+  const forced = detectMissedIdentifiers(args.turns, []);
+  if (forced.length === 0) return 0;
+  const scrubbed = forced.map((c) => ({
+    ...c,
+    content: scrubSensitive(c.content),
+    rationale: scrubSensitive(c.rationale)
+  }));
+  try {
+    const res = await args.api.post(
+      "/host/memories/identifiers",
+      {
+        agent_id: args.agentId,
+        conversation_id: args.conversationId,
+        candidates: scrubbed
+      }
+    );
+    if (!res?.ok) return 0;
+    return res.promoted ?? 0;
+  } catch {
+    return 0;
+  }
+}
+async function salvageOnce(st, conversationId, fn) {
+  if (st.salvaged.has(conversationId)) return 0;
+  st.salvaged.add(conversationId);
+  return fn();
+}
+function pruneSalvaged(st, stillPending) {
+  for (const id of st.salvaged) {
+    if (!stillPending.has(id)) st.salvaged.delete(id);
+  }
+}
 async function maybeExtractMemories(args) {
   const { api: api2, backend, codeName, agentId, log: log2 } = args;
   const now = args.now ?? /* @__PURE__ */ new Date();
@@ -3983,7 +4051,8 @@ async function maybeExtractMemories(args) {
   if (existing && nowMs - existing.lastCheckedAt < MIN_CHECK_INTERVAL_MS5) {
     return;
   }
-  state5.set(codeName, { lastCheckedAt: nowMs });
+  const st = { lastCheckedAt: nowMs, salvaged: existing?.salvaged ?? /* @__PURE__ */ new Set() };
+  state5.set(codeName, st);
   let pending2;
   try {
     const resp = await api2.get(
@@ -3994,6 +4063,7 @@ async function maybeExtractMemories(args) {
     log2(`[memory-extract] ${codeName}: pending fetch failed: ${err.message}`);
     return;
   }
+  pruneSalvaged(st, new Set(pending2.map((p) => p.conversation_id)));
   if (pending2.length === 0) return;
   const dir = args.transcriptDir ?? sessionTranscriptDir(getProjectDir(codeName));
   const allTurns = readRecentTurns(dir, nowMs);
@@ -4003,6 +4073,7 @@ async function maybeExtractMemories(args) {
     }
     return;
   }
+  let salvaged = 0;
   for (const conv of pending2) {
     const windowStart = Date.parse(conv.started_at) - WINDOW_PAD_MS2;
     const windowEnd = Date.parse(conv.last_message_at) + WINDOW_PAD_MS2;
@@ -4023,13 +4094,25 @@ async function maybeExtractMemories(args) {
     } catch (err) {
       log2(`[memory-extract] ${codeName}: extraction failed: ${err.message}`);
       args.onModelCallError?.(err);
+      salvaged += await salvageOnce(
+        st,
+        conv.conversation_id,
+        () => salvageIdentifiers({ api: api2, agentId, conversationId: conv.conversation_id, turns, log: log2, codeName })
+      );
       continue;
     }
     if (candidates === null) {
       log2(`[memory-extract] ${codeName}: unparseable output for ${conv.conversation_id.slice(0, 8)} \u2014 will retry`);
+      salvaged += await salvageOnce(
+        st,
+        conv.conversation_id,
+        () => salvageIdentifiers({ api: api2, agentId, conversationId: conv.conversation_id, turns, log: log2, codeName })
+      );
       continue;
     }
-    const scrubbed = candidates.map((c) => ({
+    const forced = detectMissedIdentifiers(turns, candidates);
+    const merged = [...forced, ...candidates];
+    const scrubbed = merged.map((c) => ({
       ...c,
       content: scrubSensitive(c.content),
       rationale: scrubSensitive(c.rationale)
@@ -4044,7 +4127,7 @@ async function maybeExtractMemories(args) {
         }
       );
       log2(
-        `[memory-extract] ${codeName}: ${conv.conversation_id.slice(0, 8)} \u2192 ${candidates.length} candidate(s), ${res?.promoted ?? 0} promoted`
+        `[memory-extract] ${codeName}: ${conv.conversation_id.slice(0, 8)} \u2192 ${candidates.length} candidate(s), ${forced.length} identifier(s) recovered, ${res?.promoted ?? 0} promoted`
       );
     } catch (err) {
       log2(`[memory-extract] ${codeName}: report failed: ${err.message}`);
@@ -4061,6 +4144,9 @@ async function maybeExtractMemories(args) {
       onModelCallError: args.onModelCallError
     });
   }
+  if (salvaged > 0) {
+    log2(`[memory-extract] ${codeName}: identifiers_salvaged=${salvaged} (model call failed)`);
+  }
 }
 async function reportSkip2(api2, agentId, conversationId, log2, codeName) {
   try {
@@ -12631,7 +12717,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-RDF5NWRH.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-PMH4Z3MU.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13284,7 +13370,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.747" : "dev";
+var agtCliVersion = true ? "0.28.749" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14825,7 +14911,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-V6L4Y2P5.js");
+      const { collectDiagnostics } = await import("../persistent-session-VX5THUBN.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -14966,7 +15052,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-V6L4Y2P5.js");
+      const { collectDiagnostics } = await import("../persistent-session-VX5THUBN.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15135,7 +15221,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-RDF5NWRH.js");
+      } = await import("../responsiveness-probe-PMH4Z3MU.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15245,7 +15331,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-RDF5NWRH.js");
+        } = await import("../responsiveness-probe-PMH4Z3MU.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15401,7 +15487,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-KOCHZPYI.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-3FTENJFF.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -19365,7 +19451,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-V6L4Y2P5.js");
+        const { collectDiagnostics } = await import("../persistent-session-VX5THUBN.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19411,7 +19497,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-V6L4Y2P5.js");
+      const { collectDiagnostics } = await import("../persistent-session-VX5THUBN.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20047,7 +20133,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-REZ462KO.js");
+  } = await import("../claude-pair-runtime-QOHDIQBD.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));