@integrity-labs/agt-cli 0.28.763 → 0.28.764

package/dist/{claude-pair-runtime-5CKIB2IM.js → claude-pair-runtime-U6WDTNK3.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-VS44QKVB.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-3OBDKYWF.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-5CKIB2IM.js.map
+//# sourceMappingURL=claude-pair-runtime-U6WDTNK3.js.map

package/dist/lib/manager-worker.js

@@ -58,7 +58,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-HVOHM3PB.js";
+} from "../chunk-SMY25FCN.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -82,6 +82,7 @@ import {
   getOpencodeTurnHealth,
   getProjectDir,
   getSessionState,
+  hardBoundedCapture,
   hashFile,
   injectMessage,
   injectMessageWithStatus,
@@ -119,7 +120,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-EU6RSU5V.js";
+} from "../chunk-LVBINNTQ.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -208,7 +209,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-L4KDOGHB.js";
+} from "../chunk-23KTLVYX.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -8970,7 +8971,6 @@ function stopPaneOccupancySampler() {
 }
 
 // src/lib/pid-pressure-sampler.ts
-import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync16, readFileSync as readFileSync28 } from "fs";
 var SAMPLE_INTERVAL_MS2 = 3e4;
 function warnFraction() {
@@ -9023,15 +9023,10 @@ function resolveCgroupDirReal(codeName, deps = {}) {
   return null;
 }
 function inspectContainerId(codeName) {
-  try {
-    return execFileSync2("docker", ["inspect", "-f", "{{.Id}}", `agt-${codeName}`], {
-      encoding: "utf-8",
-      timeout: 5e3,
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-  } catch {
-    return null;
-  }
+  const out = hardBoundedCapture("docker", ["inspect", "-f", "{{.Id}}", `agt-${codeName}`], {
+    timeoutMs: 5e3
+  });
+  return out === null ? null : out.trim();
 }
 function countDefunct(cgroupDir, readText) {
   const procs = readText(`${cgroupDir}/cgroup.procs`);
@@ -12813,7 +12808,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-CNSUJALX.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-ULIAXSCT.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13473,10 +13468,10 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.763" : "dev";
-function resolveBrewPath(execFileSync3) {
+var agtCliVersion = true ? "0.28.764" : "dev";
+function resolveBrewPath(execFileSync2) {
   try {
-    const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
+    const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
     if (out) return out;
   } catch {
   }
@@ -13490,7 +13485,7 @@ function resolveBrewPath(execFileSync3) {
   }
   return null;
 }
-function claudeBinaryInstalled(execFileSync3) {
+function claudeBinaryInstalled(execFileSync2) {
   const canonical = [
     "/home/linuxbrew/.linuxbrew/bin/claude",
     "/opt/homebrew/bin/claude",
@@ -13498,7 +13493,7 @@ function claudeBinaryInstalled(execFileSync3) {
   ];
   if (canonical.some((path) => existsSync19(path))) return true;
   try {
-    execFileSync3("which", ["claude"], { timeout: 5e3 });
+    execFileSync2("which", ["claude"], { timeout: 5e3 });
     return true;
   } catch {
     return false;
@@ -13532,9 +13527,9 @@ async function ensureToolkitCli(toolkitSlug) {
   }
   const { binary, installer, package: pkg, script } = integration.cli_tool;
   const resolvedInstaller = installer ?? "manual";
-  const { execFileSync: execFileSync3, execSync } = await import("child_process");
+  const { execFileSync: execFileSync2, execSync } = await import("child_process");
   try {
-    execFileSync3("which", [binary], { timeout: 5e3, stdio: "pipe" });
+    execFileSync2("which", [binary], { timeout: 5e3, stdio: "pipe" });
     toolkitCliEnsured.add(toolkitSlug);
     toolkitCliRetryAfter.delete(toolkitSlug);
     toolkitCliFailureCount.delete(toolkitSlug);
@@ -13555,14 +13550,14 @@ async function ensureToolkitCli(toolkitSlug) {
         return;
       }
       log(`[toolkit-install] ${toolkitSlug}: installing via npm (${pkg})\u2026`);
-      execFileSync3("npm", ["install", "-g", pkg], { timeout: 18e4, stdio: "pipe" });
+      execFileSync2("npm", ["install", "-g", pkg], { timeout: 18e4, stdio: "pipe" });
     } else if (resolvedInstaller === "brew") {
       if (!pkg) {
         log(`[toolkit-install] ${toolkitSlug}: installer=brew but no package declared`);
         toolkitCliEnsured.add(toolkitSlug);
         return;
       }
-      const brewPath = resolveBrewPath(execFileSync3);
+      const brewPath = resolveBrewPath(execFileSync2);
       if (!brewPath) {
         log(`[toolkit-install] ${toolkitSlug}: installer=brew but Homebrew not available \u2014 install manually: brew install ${pkg}`);
         toolkitCliEnsured.add(toolkitSlug);
@@ -13572,9 +13567,9 @@ async function ensureToolkitCli(toolkitSlug) {
       const isRoot = typeof process.getuid === "function" && process.getuid() === 0;
       log(`[toolkit-install] ${toolkitSlug}: installing via brew (${pkg})\u2026`);
       if (isRoot) {
-        execFileSync3("sudo", ["-u", "ec2-user", "-H", brewPath, "install", pkg], { timeout: 18e4, stdio: "pipe", cwd: "/tmp" });
+        execFileSync2("sudo", ["-u", "ec2-user", "-H", brewPath, "install", pkg], { timeout: 18e4, stdio: "pipe", cwd: "/tmp" });
       } else {
-        execFileSync3(brewPath, ["install", pkg], { timeout: 18e4, stdio: "pipe" });
+        execFileSync2(brewPath, ["install", pkg], { timeout: 18e4, stdio: "pipe" });
       }
     } else if (resolvedInstaller === "script") {
       if (!script) {
@@ -13596,7 +13591,7 @@ async function ensureToolkitCli(toolkitSlug) {
     process.env.PATH = `${brewBinDir}:${process.env.PATH ?? ""}`;
   }
   try {
-    execFileSync3("which", [binary], { timeout: 5e3, stdio: "pipe" });
+    execFileSync2("which", [binary], { timeout: 5e3, stdio: "pipe" });
     log(`[toolkit-install] ${toolkitSlug}: installed \u2014 ${binary} now on PATH`);
     toolkitCliEnsured.add(toolkitSlug);
     toolkitCliRetryAfter.delete(toolkitSlug);
@@ -13644,16 +13639,16 @@ async function ensureIsolationImage(imageUri) {
   }
   isolationImageInFlight.add(imageUri);
   try {
-    const { execFileSync: execFileSync3 } = await import("child_process");
+    const { execFileSync: execFileSync2 } = await import("child_process");
     try {
-      execFileSync3("which", ["docker"], { timeout: 5e3, stdio: "pipe" });
+      execFileSync2("which", ["docker"], { timeout: 5e3, stdio: "pipe" });
     } catch {
       recordIsolationImageFailure(imageUri, `'docker' not found on host - required to pull the isolation image (install it, then the manager retries)`);
       return;
     }
     const hasAws = (() => {
       try {
-        execFileSync3("which", ["aws"], { timeout: 5e3, stdio: "pipe" });
+        execFileSync2("which", ["aws"], { timeout: 5e3, stdio: "pipe" });
         return true;
       } catch {
         return false;
@@ -13662,11 +13657,11 @@ async function ensureIsolationImage(imageUri) {
     if (isPublic) {
       if (hasAws) {
         try {
-          const password = execFileSync3("aws", ["ecr-public", "get-login-password", "--region", "us-east-1"], {
+          const password = execFileSync2("aws", ["ecr-public", "get-login-password", "--region", "us-east-1"], {
             timeout: 3e4,
             stdio: ["ignore", "pipe", "pipe"]
           }).toString().trim();
-          execFileSync3("docker", ["login", "--username", "AWS", "--password-stdin", "public.ecr.aws"], {
+          execFileSync2("docker", ["login", "--username", "AWS", "--password-stdin", "public.ecr.aws"], {
             input: password,
             timeout: 3e4,
             stdio: ["pipe", "pipe", "pipe"]
@@ -13681,11 +13676,11 @@ async function ensureIsolationImage(imageUri) {
         return;
       }
       try {
-        const password = execFileSync3("aws", ["ecr", "get-login-password", "--region", privRegion], {
+        const password = execFileSync2("aws", ["ecr", "get-login-password", "--region", privRegion], {
           timeout: 3e4,
           stdio: ["ignore", "pipe", "pipe"]
         }).toString().trim();
-        execFileSync3("docker", ["login", "--username", "AWS", "--password-stdin", registry], {
+        execFileSync2("docker", ["login", "--username", "AWS", "--password-stdin", registry], {
           input: password,
           timeout: 3e4,
           stdio: ["pipe", "pipe", "pipe"]
@@ -13836,11 +13831,11 @@ function ensureClaudeManagedSettings(path = claudeManagedSettingsPath()) {
 }
 var OPENCODE_NPM_VERSION = "1.18.3";
 async function ensureOpencodeBinary() {
-  const { execFileSync: execFileSync3 } = await import("child_process");
+  const { execFileSync: execFileSync2 } = await import("child_process");
   const bin = process.env["AGT_OPENCODE_BIN"]?.trim() || "opencode";
   const probe = () => {
     try {
-      execFileSync3(bin, ["--version"], { stdio: "ignore", timeout: 1e4 });
+      execFileSync2(bin, ["--version"], { stdio: "ignore", timeout: 1e4 });
       return true;
     } catch {
       return false;
@@ -13861,7 +13856,7 @@ async function ensureOpencodeBinary() {
     return false;
   }
   try {
-    const prefix = execFileSync3("npm", ["prefix", "-g"], { encoding: "utf-8", timeout: 1e4 }).trim();
+    const prefix = execFileSync2("npm", ["prefix", "-g"], { encoding: "utf-8", timeout: 1e4 }).trim();
     if (prefix) {
       const npmBin = join41(prefix, "bin");
       const current = (process.env.PATH ?? "").split(pathDelimiter);
@@ -13893,8 +13888,8 @@ async function ensureFrameworkBinary(frameworkId) {
   }
   frameworkBinaryChecked.add(frameworkId);
   lastManagedSettingsStatus = ensureClaudeManagedSettings();
-  const { execFileSync: execFileSync3 } = await import("child_process");
-  const brewPath = resolveBrewPath(execFileSync3);
+  const { execFileSync: execFileSync2 } = await import("child_process");
+  const brewPath = resolveBrewPath(execFileSync2);
   if (!brewPath) {
     log("Homebrew not found (no `brew` on PATH, no /home/linuxbrew/.linuxbrew/bin/brew). Cannot auto-install Claude Code. Install manually: https://claude.ai/download");
     return;
@@ -13907,7 +13902,7 @@ async function ensureFrameworkBinary(frameworkId) {
     }
     return runAsync(brewPath, args, opts);
   };
-  const claudeExists = claudeBinaryInstalled(execFileSync3);
+  const claudeExists = claudeBinaryInstalled(execFileSync2);
   if (!claudeExists) {
     log(`Claude Code binary not found \u2014 installing via Homebrew${isRoot ? " (as ec2-user via sudo)" : ""}...`);
     try {
@@ -13942,13 +13937,13 @@ async function maybeUpgradeClaudeCode() {
   }
   claudeCodeUpgradeInFlight = true;
   stampClaudeCodeUpgradeMarker();
-  const { execFileSync: execFileSync3 } = await import("child_process");
-  const brewPath = resolveBrewPath(execFileSync3);
+  const { execFileSync: execFileSync2 } = await import("child_process");
+  const brewPath = resolveBrewPath(execFileSync2);
   if (!brewPath) {
     claudeCodeUpgradeInFlight = false;
     return;
   }
-  if (!claudeBinaryInstalled(execFileSync3)) {
+  if (!claudeBinaryInstalled(execFileSync2)) {
     claudeCodeUpgradeInFlight = false;
     return;
   }
@@ -14055,8 +14050,8 @@ async function checkAndUpdateCli(opts) {
   }
 }
 async function checkAndUpdateCliViaBrew(force = false) {
-  const { execFileSync: execFileSync3 } = await import("child_process");
-  const brewPath = resolveBrewPath(execFileSync3);
+  const { execFileSync: execFileSync2 } = await import("child_process");
+  const brewPath = resolveBrewPath(execFileSync2);
   if (!brewPath) return "noop";
   {
     const brewPinRaw = resolveAgtCliPinRaw();
@@ -14083,13 +14078,13 @@ async function checkAndUpdateCliViaBrew(force = false) {
   }
   let metadataFresh = true;
   try {
-    execFileSync3(brewPath, ["update", "--quiet"], { timeout: 6e4, stdio: "pipe" });
+    execFileSync2(brewPath, ["update", "--quiet"], { timeout: 6e4, stdio: "pipe" });
   } catch (err) {
     metadataFresh = false;
     log(`[self-update] brew update failed (continuing with stale cache): ${err.message}`);
   }
   try {
-    const outdated = execFileSync3(brewPath, ["outdated", "--json=v2"], {
+    const outdated = execFileSync2(brewPath, ["outdated", "--json=v2"], {
       timeout: 3e4,
       encoding: "utf-8"
     });
@@ -14122,7 +14117,7 @@ async function checkAndUpdateCliViaBrew(force = false) {
       }
       log(`[self-update] agt CLI update available: ${installed} \u2192 ${latest}. Upgrading via brew${force ? " (forced \u2014 Update CLI now)" : ""}...`);
       try {
-        execFileSync3(brewPath, ["upgrade", "integrity-labs/tap/agt"], {
+        execFileSync2(brewPath, ["upgrade", "integrity-labs/tap/agt"], {
           timeout: 12e4,
           stdio: "pipe"
         });
@@ -14299,7 +14294,7 @@ async function fetchUrgentDistTagVersion() {
   }
 }
 async function installAgtCliViaNpm(version, reasonLabel) {
-  const { execFileSync: execFileSync3 } = await import("child_process");
+  const { execFileSync: execFileSync2 } = await import("child_process");
   const isRoot = typeof process.getuid === "function" && process.getuid() === 0;
   const cmd = isRoot ? "npm" : "sudo";
   const installArgs = [
@@ -14310,14 +14305,14 @@ async function installAgtCliViaNpm(version, reasonLabel) {
   ];
   const args = isRoot ? installArgs : ["-n", "npm", ...installArgs];
   try {
-    execFileSync3(cmd, args, { timeout: 18e4, stdio: "pipe" });
+    execFileSync2(cmd, args, { timeout: 18e4, stdio: "pipe" });
   } catch (err) {
     log(`[self-update] npm upgrade failed: ${err.message}`);
     return "failed";
   }
   let smokeOk = false;
   try {
-    const out = execFileSync3("agt", ["--version"], { timeout: 15e3, stdio: "pipe" }).toString();
+    const out = execFileSync2("agt", ["--version"], { timeout: 15e3, stdio: "pipe" }).toString();
     smokeOk = isAgtVersionSmokeOk(out, version);
     if (!smokeOk) {
       log(
@@ -14382,8 +14377,8 @@ function effectiveRuntimeAuthenticated() {
 async function maybeProbeClaudeRuntimeAuth() {
   if (runtimeAuthProbeInFlight) return;
   if (Date.now() - lastRuntimeAuthProbeAt < RUNTIME_AUTH_PROBE_INTERVAL_MS) return;
-  const { execFileSync: execFileSync3 } = await import("child_process");
-  if (!claudeBinaryInstalled(execFileSync3)) return;
+  const { execFileSync: execFileSync2 } = await import("child_process");
+  if (!claudeBinaryInstalled(execFileSync2)) return;
   runtimeAuthProbeInFlight = true;
   lastRuntimeAuthProbeAt = Date.now();
   try {
@@ -14492,8 +14487,8 @@ async function runHostUsageCommand() {
   }
 }
 async function maybePollHostUsageFromCycle() {
-  const { execFileSync: execFileSync3 } = await import("child_process");
-  if (!claudeBinaryInstalled(execFileSync3)) return;
+  const { execFileSync: execFileSync2 } = await import("child_process");
+  if (!claudeBinaryInstalled(execFileSync2)) return;
   await maybePollHostUsage({
     api,
     runUsageCommand: runHostUsageCommand,
@@ -15014,7 +15009,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-VS44QKVB.js");
+      const { collectDiagnostics } = await import("../persistent-session-3OBDKYWF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15155,7 +15150,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-VS44QKVB.js");
+      const { collectDiagnostics } = await import("../persistent-session-3OBDKYWF.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15324,7 +15319,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-CNSUJALX.js");
+      } = await import("../responsiveness-probe-ULIAXSCT.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15434,7 +15429,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-CNSUJALX.js");
+        } = await import("../responsiveness-probe-ULIAXSCT.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15590,7 +15585,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-3AK3MDNT.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-67XFJWMA.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -19568,7 +19563,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-VS44QKVB.js");
+        const { collectDiagnostics } = await import("../persistent-session-3OBDKYWF.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19614,7 +19609,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-VS44QKVB.js");
+      const { collectDiagnostics } = await import("../persistent-session-3OBDKYWF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20250,7 +20245,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-5CKIB2IM.js");
+  } = await import("../claude-pair-runtime-U6WDTNK3.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));