@integrity-labs/agt-cli 0.28.799 → 0.28.801

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-BPAGPPAN.js";
+} from "../chunk-ZI2MCNK2.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-M3IVSY6S.js";
+} from "../chunk-H37X4QPC.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-XEPLW5LY.js";
+} from "../chunk-MJ3YHZSR.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.799" : "dev";
+var cliVersion = true ? "0.28.801" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.799" : "dev";
+var cliVersion2 = true ? "0.28.801" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-M3IVSY6S.js → chunk-H37X4QPC.js}

@@ -18,7 +18,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-XEPLW5LY.js";
+} from "./chunk-MJ3YHZSR.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -3342,18 +3342,27 @@ function parseModelPolicy(raw) {
     if (!parsed) return null;
     bindings.push(parsed);
   }
+  const activeRoleRaw = raw["active_role"];
+  let activeRole = "primary";
+  if (activeRoleRaw !== void 0 && activeRoleRaw !== null) {
+    if (typeof activeRoleRaw !== "string" || !ROLES.includes(activeRoleRaw)) return null;
+    activeRole = activeRoleRaw;
+  }
+  if (!bindings.some((b) => b.role === activeRole)) return null;
   return {
     policyId,
     name,
     revision,
     resolvedFrom,
+    activeRole,
     bindings,
     models: parseModelPolicyModels(raw["models"])
   };
 }
 function modelPolicyAuthComponent(policy) {
   if (!policy) return null;
-  return `${policy.policyId}@${policy.revision}`;
+  const base = `${policy.policyId}@${policy.revision}`;
+  return policy.activeRole === "primary" ? base : `${base}/${policy.activeRole}`;
 }
 function modelPolicyEgressDomains(policy) {
   if (!policy) return [];
@@ -3383,9 +3392,9 @@ function resolveBindingCredential(binding, availableGatewayToken) {
     }
   }
 }
-function primaryBinding(policy) {
+function activeBinding(policy) {
   if (!policy) return null;
-  return policy.bindings.find((b) => b.role === "primary") ?? null;
+  return policy.bindings.find((b) => b.role === policy.activeRole) ?? null;
 }
 function sourceSetsAnthropicApiKey(source) {
   switch (source) {
@@ -3420,8 +3429,9 @@ function modelEnvForRole(policy, role) {
 }
 function resolveModelPolicySpawnEnv(input) {
   const { policy, openRouterMode, gatewayToken, codeName } = input;
-  const primary = primaryBinding(policy);
-  if (!policy || !primary) return { env: {}, modelEnv: {}, notice: null };
+  const active = activeBinding(policy);
+  if (!policy || !active) return { env: {}, modelEnv: {}, notice: null };
+  const roleNote = policy.activeRole === "primary" ? "" : ` role=${policy.activeRole} (FAILOVER)`;
   if (openRouterMode) {
     return {
       env: {},
@@ -3433,9 +3443,9 @@ function resolveModelPolicySpawnEnv(input) {
       notice: `[model-policy] '${codeName}' has policy '${policy.name}' but is in OpenRouter mode \u2014 OpenRouter wins, policy not applied (ENG-9483: unifying the two actuators is a separate migration)`
     };
   }
-  const modelEnv = modelEnvForRole(policy, primary.role);
+  const modelEnv = modelEnvForRole(policy, active.role);
   const modelNote = Object.keys(modelEnv).length > 0 ? ` models=${Object.entries(modelEnv).map(([k, v]) => `${k}=${v}`).join(" ")}` : "";
-  const resolution = resolveBindingCredential(primary, gatewayToken);
+  const resolution = resolveBindingCredential(active, gatewayToken);
   switch (resolution.kind) {
     case "gateway":
       return {
@@ -3444,7 +3454,7 @@ function resolveModelPolicySpawnEnv(input) {
           ANTHROPIC_AUTH_TOKEN: resolution.authToken
         },
         modelEnv,
-        notice: `[model-policy] '${codeName}' inference via gateway ${resolution.baseUrl} (policy '${policy.name}' rev ${policy.revision}, from ${policy.resolvedFrom})${modelNote}`
+        notice: `[model-policy] '${codeName}' inference via gateway ${resolution.baseUrl} (policy '${policy.name}' rev ${policy.revision}, from ${policy.resolvedFrom})${roleNote}${modelNote}`
       };
     case "blocked":
       return {
@@ -3455,16 +3465,33 @@ function resolveModelPolicySpawnEnv(input) {
         // somewhere else — a policy half-applied, which is the one outcome this
         // file has no branch for.
         modelEnv: {},
-        notice: `[model-policy] '${codeName}' policy '${policy.name}' NOT applied \u2014 reason=${resolution.reason}; keeping existing auth (transport=${primary.transport}, credential_source=${primary.credentialSource})`
+        notice: `[model-policy] '${codeName}' policy '${policy.name}' NOT applied \u2014 reason=${resolution.reason}; keeping existing auth (transport=${active.transport}, credential_source=${active.credentialSource})${roleNote}`
       };
     case "host-default":
       return {
         env: {},
         modelEnv,
-        notice: modelNote ? `[model-policy] '${codeName}' model from policy '${policy.name}' rev ${policy.revision} (from ${policy.resolvedFrom});${modelNote}` : null
+        notice: modelNote || roleNote ? `[model-policy] '${codeName}' model from policy '${policy.name}' rev ${policy.revision} (from ${policy.resolvedFrom})${roleNote};${modelNote || " no slot maps to an env var"}` : null
       };
   }
 }
+function failoverRestartNotice(input) {
+  const entry = input.components.find((c) => c.component === "model_policy");
+  if (!entry) return null;
+  const fromRole = roleFromAuthComponent(entry.from);
+  const toRole = roleFromAuthComponent(entry.to);
+  if (fromRole === toRole) return null;
+  const model = input.policy ? modelEnvForRole(input.policy, toRole).ANTHROPIC_MODEL : void 0;
+  const onto = model ? `${toRole} model provider (${model})` : `${toRole} model provider`;
+  const direction = toRole === "primary" ? `Your manager is switching you back to your ${onto}.` : `Your manager is switching you to your ${onto} \u2014 this policy has failed over.`;
+  return `${direction} Claude Code applies the provider and model at launch, so your session will restart shortly to make the switch.`;
+}
+function roleFromAuthComponent(value) {
+  const at = value.lastIndexOf("/");
+  if (at === -1) return "primary";
+  const role = value.slice(at + 1);
+  return ROLES.includes(role) ? role : "primary";
+}
 
 // src/lib/persistent-session.ts
 var OPENROUTER_ANTHROPIC_BASE_URL = "https://openrouter.ai/api";
@@ -5115,6 +5142,7 @@ export {
   parseModelPolicy,
   modelPolicyAuthComponent,
   modelPolicyEgressDomains,
+  failoverRestartNotice,
   resolveOAuthCredAction,
   resolveClaudeBinary,
   isolationMode,
@@ -5166,4 +5194,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-M3IVSY6S.js.map
+//# sourceMappingURL=chunk-H37X4QPC.js.map