@integrity-labs/agt-cli 0.28.824 → 0.28.826

package/dist/{chunk-2DT4VGWU.js → chunk-Q3JUZZDB.js}

@@ -18,7 +18,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-PVPLNARY.js";
+} from "./chunk-GJY3KZG6.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -5312,4 +5312,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-2DT4VGWU.js.map
+//# sourceMappingURL=chunk-Q3JUZZDB.js.map

package/dist/claude-code-brew-result-3A4E7GTC.js

@@ -0,0 +1,19 @@
+// src/lib/claude-code-brew-result.ts
+var NOT_INSTALLED_RE = /is not installed/i;
+function caskPresenceFromListResult(r) {
+  if (r.code === 0) return "present";
+  return NOT_INSTALLED_RE.test(`${r.stdout}
+${r.stderr}`) ? "absent" : "unknown";
+}
+function classifyBrewUpgradeResult(r) {
+  const combined = `${r.stdout}
+${r.stderr}`;
+  const noWorkNeeded = combined.includes("already installed") || combined.includes("up-to-date") || combined.includes("not upgraded");
+  if (r.code === 0) return noWorkNeeded ? "already-current" : "upgraded";
+  return noWorkNeeded ? "already-current" : "failed";
+}
+export {
+  caskPresenceFromListResult,
+  classifyBrewUpgradeResult
+};
+//# sourceMappingURL=claude-code-brew-result-3A4E7GTC.js.map

package/dist/claude-code-brew-result-3A4E7GTC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/claude-code-brew-result.ts"],"sourcesContent":["// ENG-10039: how to read the result of the LEGACY `brew --cask claude-code`\n// path, extracted so it can be tested without importing manager-worker.\n//\n// Same reason `claude-code-upgrade-throttle.ts` was split out under ENG-6418:\n// manager-worker is a 13k-line import graph, evaluating it inside a test's\n// budget flakes under parallel load, so the load-bearing judgement lives here\n// and manager-worker calls it.\n//\n// WHAT WENT WRONG, and it is why this is a module rather than two inline\n// conditionals. On every host provisioned since Claude Code moved to\n// `npm install -g @anthropic-ai/claude-code` (host-bootstrap.ts), there is no\n// Homebrew cask. The manager ran `brew upgrade --cask claude-code` anyway,\n// because its only precondition was \"is there a `claude` on PATH\" — and there\n// is one, at `/usr/bin/claude`, put there by npm. So the upgrade failed with\n// `Error: Cask 'claude-code' is not installed.` every day, on 7 of 10 hosts\n// measured, oldest at least 9 days (the full retained-log window on agt-aws-1:\n// 9 attempts, 9 failures, zero successes).\n//\n// It was invisible because it is only a log line: no alert kind covers it.\n\n/**\n * What `brew list --cask claude-code` actually told us.\n *\n * THREE STATES, NOT TWO, and the third is the one that matters (CodeRabbit on\n * #5616). `runAsync` RESOLVES with a non-zero exit code rather than rejecting,\n * and Homebrew uses non-zero exits for operational errors too — a network\n * failure, a lock, a broken tap. Mapping every non-zero code to `absent` would\n * read a transient brew error as \"this host has no cask\", skip the upgrade, and\n * because the throttle marker is stamped BEFORE the probe, suppress any retry\n * for ~24h. On a genuine cask host that is a silent missed upgrade, which is\n * the same invisible-skip shape this whole ticket exists to remove.\n *\n * So `absent` is claimed ONLY on brew's specific not-installed message.\n * Everything else non-zero is `unknown`: skip this cycle, say so, try again on\n * the next in-window poll.\n */\nexport type CaskPresence = 'present' | 'absent' | 'unknown';\n\n/**\n * Brew's wording for a cask that is not installed, e.g.\n *   Error: Cask 'claude-code' is not installed.\n * Matched loosely on the stable half of the sentence rather than the whole\n * line, because the cask name is interpolated and brew has moved the\n * surrounding punctuation before.\n */\nconst NOT_INSTALLED_RE = /is not installed/i;\n\nexport function caskPresenceFromListResult(r: {\n  code: number;\n  stdout: string;\n  stderr: string;\n}): CaskPresence {\n  if (r.code === 0) return 'present';\n  return NOT_INSTALLED_RE.test(`${r.stdout}\\n${r.stderr}`) ? 'absent' : 'unknown';\n}\n\nexport type BrewUpgradeVerdict = 'upgraded' | 'already-current' | 'failed';\n\n/**\n * Classify a `brew upgrade --cask claude-code` run.\n *\n * THE NON-ZERO-BUT-FINE CASE IS REAL, not defensive padding: brew exits\n * non-zero while printing `already installed` / `up-to-date` / `not upgraded`\n * for a cask that needs no work. Treating that as a failure would have made\n * this monitor cry wolf on exactly the hosts where nothing is wrong, and a\n * version check that cries wolf gets muted — after which it is worth less than\n * nothing, because everyone now believes the case is covered.\n *\n * Both streams are searched because brew is inconsistent about which one\n * carries the notice, and the auto-update banner interleaves them.\n */\nexport function classifyBrewUpgradeResult(r: {\n  code: number;\n  stdout: string;\n  stderr: string;\n}): BrewUpgradeVerdict {\n  const combined = `${r.stdout}\\n${r.stderr}`;\n  const noWorkNeeded =\n    combined.includes('already installed') ||\n    combined.includes('up-to-date') ||\n    combined.includes('not upgraded');\n\n  if (r.code === 0) return noWorkNeeded ? 'already-current' : 'upgraded';\n  return noWorkNeeded ? 'already-current' : 'failed';\n}\n"],"mappings":";AA6CA,IAAM,mBAAmB;AAElB,SAAS,2BAA2B,GAI1B;AACf,MAAI,EAAE,SAAS,EAAG,QAAO;AACzB,SAAO,iBAAiB,KAAK,GAAG,EAAE,MAAM;AAAA,EAAK,EAAE,MAAM,EAAE,IAAI,WAAW;AACxE;AAiBO,SAAS,0BAA0B,GAInB;AACrB,QAAM,WAAW,GAAG,EAAE,MAAM;AAAA,EAAK,EAAE,MAAM;AACzC,QAAM,eACJ,SAAS,SAAS,mBAAmB,KACrC,SAAS,SAAS,YAAY,KAC9B,SAAS,SAAS,cAAc;AAElC,MAAI,EAAE,SAAS,EAAG,QAAO,eAAe,oBAAoB;AAC5D,SAAO,eAAe,oBAAoB;AAC5C;","names":[]}

package/dist/{claude-pair-runtime-5QM5OTAZ.js → claude-pair-runtime-SWB525DM.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-2Y4O3COI.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-BOHUJCZL.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-5QM5OTAZ.js.map
+//# sourceMappingURL=claude-pair-runtime-SWB525DM.js.map

package/dist/lib/manager-worker.js

@@ -59,7 +59,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-LPCKIZS4.js";
+} from "../chunk-JO7QTVLM.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -124,7 +124,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-2DT4VGWU.js";
+} from "../chunk-Q3JUZZDB.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -154,6 +154,7 @@ import {
   buildFailureCategoryPromptLines,
   buildHostUsageReading,
   buildScheduledTaskContextBlocks,
+  buildSlackThirdPartyBotsEnvValue,
   classifyActor,
   classifyCursorAdvance,
   classifyOutput,
@@ -195,6 +196,8 @@ import {
   isVacuousDeliverReason,
   laneTagFragment,
   minutesSinceLocalMidnight,
+  normaliseSlackPeerAgentMode,
+  normaliseSlackPeerGroupIds,
   pairToolCallBrackets,
   parseDeliverAssertion,
   parseDeliveryTarget,
@@ -216,7 +219,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-PVPLNARY.js";
+} from "../chunk-GJY3KZG6.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -837,7 +840,11 @@ function extractSlackBehaviourSubset(config2) {
     skip_reaction: (config2?.["skip_reaction"] ?? "").trim(),
     // Mirror the adapter's defensive filter exactly — a malformed entry the
     // adapter would drop must not count as an env change.
-    allowed_users: Array.isArray(rawAllowed) ? rawAllowed.filter((v) => typeof v === "string" && v.trim().length > 0).map((v) => v.trim()) : []
+    allowed_users: Array.isArray(rawAllowed) ? rawAllowed.filter((v) => typeof v === "string" && v.trim().length > 0).map((v) => v.trim()) : [],
+    // ENG-10028: the adapter's own functions, not a copy of them.
+    peer_agent_mode: normaliseSlackPeerAgentMode(config2?.["peer_agent_mode"]),
+    peer_group_ids: normaliseSlackPeerGroupIds(config2?.["peer_group_ids"]),
+    third_party_bots: buildSlackThirdPartyBotsEnvValue(config2?.["third_party_bots"]) ?? ""
   };
 }
 function isSlackBehaviourRestrictive(subset) {
@@ -12919,7 +12926,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-OGFPDMFN.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-5DYKPYPP.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13587,7 +13594,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.824" : "dev";
+var agtCliVersion = true ? "0.28.826" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14073,20 +14080,43 @@ async function maybeUpgradeClaudeCode() {
     }
     return runAsync(brewPath, args, opts);
   };
+  let proceedToUpgrade = false;
+  let brewResult;
+  try {
+    brewResult = await import("../claude-code-brew-result-3A4E7GTC.js");
+    const caskProbe = await runBrew(["list", "--cask", "claude-code"], { timeout: 6e4 });
+    const presence = brewResult.caskPresenceFromListResult(caskProbe);
+    proceedToUpgrade = presence === "present";
+    if (presence === "absent") {
+      log(
+        "Claude Code is not installed as a Homebrew cask on this host, so the legacy brew upgrade path has nothing to upgrade \u2014 skipping it (ENG-10039). This is not an error. Where Claude Code was installed via npm, claude-code-updater (ENG-5672) keeps it current."
+      );
+    } else if (presence === "unknown") {
+      log(
+        `Claude Code cask probe inconclusive (exit ${caskProbe.code}), skipping this cycle (ENG-10039): ${(caskProbe.stderr || caskProbe.stdout).trim().slice(0, 200)}`
+      );
+    }
+  } catch (err) {
+    log(
+      `Claude Code cask probe failed, skipping this cycle (ENG-10039): ${err instanceof Error ? err.message : String(err)}`
+    );
+  } finally {
+    if (!proceedToUpgrade) claudeCodeUpgradeInFlight = false;
+  }
+  if (!proceedToUpgrade || !brewResult) return;
+  const { classifyBrewUpgradeResult } = brewResult;
   log(`Checking for Claude Code updates in background${isRoot ? " (as ec2-user via sudo)" : ""}...`);
   runBrew(["upgrade", "--cask", "claude-code"], { timeout: 12e4 }).then((r) => {
-    const combined = `${r.stdout}
-${r.stderr}`;
-    if (r.code === 0) {
-      if (combined.includes("already installed") || combined.includes("up-to-date")) {
+    switch (classifyBrewUpgradeResult(r)) {
+      case "already-current":
         log("Claude Code is already up to date");
-      } else {
+        break;
+      case "upgraded":
         log("Claude Code upgraded successfully (will apply on next session start)");
-      }
-    } else if (combined.includes("already installed") || combined.includes("up-to-date") || combined.includes("not upgraded")) {
-      log("Claude Code is already up to date");
-    } else {
-      log(`Claude Code upgrade failed (exit ${r.code}): ${r.stderr.trim() || r.stdout.trim()}`);
+        break;
+      case "failed":
+        log(`Claude Code upgrade failed (exit ${r.code}): ${r.stderr.trim() || r.stdout.trim()}`);
+        break;
     }
   }).catch((err) => log(`Claude Code upgrade failed: ${err.message}`)).finally(() => {
     claudeCodeUpgradeInFlight = false;
@@ -15154,7 +15184,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-2Y4O3COI.js");
+      const { collectDiagnostics } = await import("../persistent-session-BOHUJCZL.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15295,7 +15325,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-2Y4O3COI.js");
+      const { collectDiagnostics } = await import("../persistent-session-BOHUJCZL.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15464,7 +15494,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-OGFPDMFN.js");
+      } = await import("../responsiveness-probe-5DYKPYPP.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15581,7 +15611,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-OGFPDMFN.js");
+        } = await import("../responsiveness-probe-5DYKPYPP.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15737,7 +15767,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-UDG6GY3U.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-LFNU6AUU.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -19939,7 +19969,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-2Y4O3COI.js");
+        const { collectDiagnostics } = await import("../persistent-session-BOHUJCZL.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19985,7 +20015,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-2Y4O3COI.js");
+      const { collectDiagnostics } = await import("../persistent-session-BOHUJCZL.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20621,7 +20651,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-5QM5OTAZ.js");
+  } = await import("../claude-pair-runtime-SWB525DM.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));