@integrity-labs/agt-cli 0.28.805 → 0.28.806

package/dist/{claude-pair-runtime-WS3IVDDE.js → claude-pair-runtime-YEW7Y5N2.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-PV4GPHG3.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-GPVAPK4S.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-WS3IVDDE.js.map
+//# sourceMappingURL=claude-pair-runtime-YEW7Y5N2.js.map

package/dist/lib/manager-worker.js

@@ -58,7 +58,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-YNSVQMSD.js";
+} from "../chunk-7TIQODEK.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -123,7 +123,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-DHOVIXR5.js";
+} from "../chunk-TWZFTSGP.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -215,7 +215,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-2FL6V4E5.js";
+} from "../chunk-RMBASAMS.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -12918,7 +12918,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-X3AW5TGA.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-7FEKDJZW.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13578,7 +13578,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.805" : "dev";
+var agtCliVersion = true ? "0.28.806" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15125,7 +15125,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-PV4GPHG3.js");
+      const { collectDiagnostics } = await import("../persistent-session-GPVAPK4S.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15266,7 +15266,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-PV4GPHG3.js");
+      const { collectDiagnostics } = await import("../persistent-session-GPVAPK4S.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15435,7 +15435,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-X3AW5TGA.js");
+      } = await import("../responsiveness-probe-7FEKDJZW.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15552,7 +15552,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-X3AW5TGA.js");
+        } = await import("../responsiveness-probe-7FEKDJZW.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15708,7 +15708,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-W6K5VEU7.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-ZBMVGQYW.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -18453,6 +18453,47 @@ async function processAgent(agent, agentStates, managedToolkits) {
           // gated restart. A routine tool-MCP-only reaper restart (xero,
           // composio_*, unrecognised keys) keeps the original 'mcp-presence-
           // reaper' gate reason and still waits for the window as before.
+          // ENG-9932: let the reaper see the pane before it spends a restart.
+          //
+          // Read lazily — the reaper calls this ONLY once it has already decided
+          // to restart, so a healthy agent never pays for a capture. Same
+          // invocation shape as the channel-input-watchdog's capturePane above,
+          // including the 2s bound and the catch: an unreadable pane returns null
+          // and the reaper falls straight through to the restart it would have
+          // done anyway. Failing open matters more here than anywhere else in
+          // this call — a capture that failed CLOSED would silently suspend MCP
+          // recovery for every agent on the host.
+          readPane: (codeName) => {
+            try {
+              return syncExecFile("tmux", ["capture-pane", "-t", `agt-${codeName}`, "-p"], {
+                stdio: ["ignore", "pipe", "ignore"],
+                timeout: 2e3
+              }).toString();
+            } catch {
+              return null;
+            }
+          },
+          // ENG-9932: the held restart has to REACH someone. Routed through the
+          // same `/host/reaper-event` path onGiveUp/onQuarantine already use, so
+          // this adds no new alerting channel — it opens a critical
+          // `reaper_action` alert, deduped per (agent, reaper), which the
+          // reaper-alert-sweeper closes once the agent stops reporting blocked.
+          //
+          // This is the signal whose absence cost two hours on 2026-09-03: the
+          // reaper is the only component that knows a restart is futile, so it is
+          // the only one that can say so.
+          onPaneBlocked: (codeName, ctx) => {
+            void reportReaperEvent(
+              agent.agent_id,
+              "mcp-presence-reaper",
+              "blocked",
+              `session blocked on an interactive prompt (${ctx.kind}); declared MCP(s) [${ctx.activeKeys.join(", ")}] were never spawned, not killed \u2014 a restart re-presents the same prompt. Needs a human: tmux attach -t agt-${codeName}` + // Fingerprint, never pane text. This string is persisted on the
+              // alert row, so it leaves the host; the pane can hold the
+              // customer message the agent was mid-turn on. Same policy the
+              // channel-input-watchdog follows for this very block.
+              (ctx.paneHash ? ` (modal fp=${ctx.paneHash} len=${ctx.paneLength})` : "")
+            );
+          },
           stopSession: (codeName, ctx) => stopPersistentSessionAndForgetMcpBaseline(
             codeName,
             reaperRestartBreakerReason(ctx.activeKeys),
@@ -19827,7 +19868,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-PV4GPHG3.js");
+        const { collectDiagnostics } = await import("../persistent-session-GPVAPK4S.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19873,7 +19914,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-PV4GPHG3.js");
+      const { collectDiagnostics } = await import("../persistent-session-GPVAPK4S.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20509,7 +20550,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-WS3IVDDE.js");
+  } = await import("../claude-pair-runtime-YEW7Y5N2.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));