@integrity-labs/agt-cli 0.28.826 → 0.28.828

package/dist/{claude-pair-runtime-SWB525DM.js → claude-pair-runtime-UTDZXJKO.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-BOHUJCZL.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-6YTEDS3H.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-SWB525DM.js.map
+//# sourceMappingURL=claude-pair-runtime-UTDZXJKO.js.map

package/dist/lib/manager-worker.js

@@ -14,6 +14,7 @@ import {
   decidePin,
   defaultFlagsCachePath,
   deriveMcpServerKey,
+  describeChannelWriteFailure,
   describeStartupCompletion,
   diffEnvIntegrations,
   drainTranscriptFlushDeps,
@@ -59,7 +60,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-JO7QTVLM.js";
+} from "../chunk-FBJFYF3F.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -100,6 +101,7 @@ import {
   paneLogPath,
   parseEnvIntegrations,
   parseModelPolicy,
+  policyResolvedModel,
   prepareForRespawn,
   readChannelServerEnv,
   readDirectChatSessionState,
@@ -124,7 +126,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-Q3JUZZDB.js";
+} from "../chunk-6HTCP6D5.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -12926,7 +12928,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-5DYKPYPP.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-TIEZW3XP.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13594,7 +13596,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.826" : "dev";
+var agtCliVersion = true ? "0.28.828" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15184,7 +15186,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-BOHUJCZL.js");
+      const { collectDiagnostics } = await import("../persistent-session-6YTEDS3H.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15239,6 +15241,7 @@ async function pollCycleInner() {
         stopPersistentSessionAndForgetMcpBaseline(codeName, breakerReason);
         agentState.persistentSessionAgents.delete(codeName);
         claudeAuthTupleBySession.delete(codeName);
+        modelPolicyModelBySession.delete(codeName);
       },
       getTelegramTokens: (codeName) => {
         const t = agentChannelTokens.get(codeName);
@@ -15325,7 +15328,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-BOHUJCZL.js");
+      const { collectDiagnostics } = await import("../persistent-session-6YTEDS3H.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15494,7 +15497,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-5DYKPYPP.js");
+      } = await import("../responsiveness-probe-TIEZW3XP.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15611,7 +15614,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-5DYKPYPP.js");
+        } = await import("../responsiveness-probe-TIEZW3XP.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -17071,7 +17074,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
                 );
               }
             }
-            frameworkAdapter.writeChannelCredentials(
+            const writeOutcome = frameworkAdapter.writeChannelCredentials(
               agent.code_name,
               channelId,
               entry.config,
@@ -17099,12 +17102,16 @@ async function processAgent(agent, agentStates, managedToolkits) {
             const landed = frameworkAdapter.hasChannelCredentials?.(agent.code_name, channelId) ?? true;
             if (!landed) {
               channelConfigConverged = false;
-              channelConfigFailureReason = `credentials for ${channelId} reported a clean write but did not land on disk (reason=${reason}) \u2014 likely a missing credential field, or the guarded .mcp.json write was rejected by the secret lint / config validator`;
+              channelConfigFailureReason = describeChannelWriteFailure(
+                writeOutcome,
+                channelId,
+                reason
+              );
               const attempts = (channelWriteFailureCounts.get(cacheKey) ?? 0) + 1;
               channelWriteFailureCounts.set(cacheKey, attempts);
               if (attempts === 1 || attempts % CHANNEL_WRITE_FAILURE_ESCALATE_EVERY === 0) {
                 log(
-                  `ERROR: channel credentials for '${agent.code_name}/${channelId}' did NOT land on disk after a write that reported no error (reason=${reason}, attempt ${attempts}). The write was silently skipped \u2014 likely a missing credential field, or the guarded .mcp.json write was rejected by the secret lint / config validator (its reason is printed once per fingerprint on stderr). The channel will stay unusable until this is resolved; not re-logging every cycle.`
+                  `ERROR: channel credentials for '${agent.code_name}/${channelId}' did NOT land on disk (attempt ${attempts}). ${channelConfigFailureReason} The channel will stay unusable until this is resolved; not re-logging every cycle.`
                 );
               }
             } else {
@@ -19054,6 +19061,7 @@ var DAY_ROLLOVER_INBOUND_GRACE_SEC = 60;
 var DAY_ROLLOVER_INBOUND_DEFER_MAX_MIN = 10;
 var persistentSessionStuckTracker = new PersistentSessionStuckTracker();
 var claudeAuthTupleBySession = /* @__PURE__ */ new Map();
+var modelPolicyModelBySession = /* @__PURE__ */ new Map();
 var opencodeCredentialFingerprintBySession = /* @__PURE__ */ new Map();
 var egressAllowlistBySession = /* @__PURE__ */ new Map();
 function deriveEgressAllowlist(toolsRaw, policy) {
@@ -19264,6 +19272,7 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
       });
       agentState.persistentSessionAgents.delete(codeName);
       claudeAuthTupleBySession.delete(codeName);
+      modelPolicyModelBySession.delete(codeName);
     }
     return {
       decision: "skipped-auth-resolve-failed",
@@ -19315,28 +19324,49 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
     claudeAccountFingerprint,
     modelPolicyComponent: modelPolicyAuthComponent(modelPolicy)
   });
+  const currentPolicyModel = policyResolvedModel({
+    policy: modelPolicy,
+    openRouterMode: Boolean(openRouterForAgent),
+    // The same null the launcher config carries — see `modelPolicyGatewayToken`
+    // at the spawn call site below, where its absence is deliberate until
+    // ENG-9481 decides what a gateway credential is. Both sites must move
+    // together: a token here and not there (or the reverse) resolves a gateway
+    // binding `blocked` for one and honoured for the other, and the recorded
+    // baseline would then describe an agent that does not exist.
+    gatewayToken: null,
+    codeName
+  });
   const recordedAuthTuple = claudeAuthTupleBySession.get(codeName);
+  const recordedPolicyModel = modelPolicyModelBySession.get(codeName);
   if (recordedAuthTuple && recordedAuthTuple !== currentAuthTuple && isSessionHealthy(codeName)) {
     const authTupleDiff = diffAuthTuples(recordedAuthTuple, currentAuthTuple);
     log(
       `[persistent-session] Auth config changed for '${codeName}' (${recordedAuthTuple} \u2192 ${currentAuthTuple}) \u2014 ${authTupleDiff.summary} \u2014 restarting session`
     );
-    const failoverNotice = failoverRestartNotice({
+    const policyNotice = failoverRestartNotice({
       components: authTupleDiff.components,
-      policy: modelPolicy
+      policy: modelPolicy,
+      previousModel: recordedPolicyModel,
+      currentModel: currentPolicyModel
     });
-    if (failoverNotice && isSessionHealthy(codeName)) {
+    if (policyNotice && isSessionHealthy(codeName)) {
       const status = await injectMessageWithStatus(
         codeName,
         "system",
-        failoverNotice + BACK_ONLINE_GREETING_GUIDANCE,
-        { task_name: "model-policy-failover" },
+        policyNotice.text + BACK_ONLINE_GREETING_GUIDANCE,
+        // ENG-10113: the label follows the DECISION, not the call site. One
+        // function now produces two events, and filing a model change under
+        // `model-policy-failover` would put a wrong word in a record an operator
+        // later reads back as evidence of a failover that never happened.
+        { task_name: `model-policy-${policyNotice.reason}` },
         log
       ).catch(() => ({ delivered: false, fallbackUsed: false }));
       if (status.fallbackUsed) {
         await new Promise((r) => setTimeout(r, 3e3));
       } else {
-        log(`[model-policy] Failover notice not delivered to '${codeName}' \u2014 restarting anyway`);
+        log(
+          `[model-policy] ${policyNotice.reason} notice not delivered to '${codeName}' \u2014 restarting anyway`
+        );
       }
     }
     stopPersistentSessionAndForgetMcpBaseline(codeName, "auth-tuple-change", void 0, void 0, {
@@ -19607,6 +19637,8 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash20("sha256")
     });
     agentState.persistentSessionAgents.add(codeName);
     claudeAuthTupleBySession.set(codeName, currentAuthTuple);
+    if (currentPolicyModel) modelPolicyModelBySession.set(codeName, currentPolicyModel);
+    else modelPolicyModelBySession.delete(codeName);
     seedSessionLaunchBaselines(codeName, projectDir);
     return {
       decision: "spawn",
@@ -19646,6 +19678,8 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash20("sha256")
   }
   if (!claudeAuthTupleBySession.has(codeName)) {
     claudeAuthTupleBySession.set(codeName, currentAuthTuple);
+    if (currentPolicyModel) modelPolicyModelBySession.set(codeName, currentPolicyModel);
+    else modelPolicyModelBySession.delete(codeName);
   }
   const stableTasksHash = createHash20("sha256").update(JSON.stringify(tasks)).digest("hex").slice(0, 16);
   const prevHash = agentState.knownTasksHashes.get(agent.agent_id);
@@ -19969,7 +20003,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-BOHUJCZL.js");
+        const { collectDiagnostics } = await import("../persistent-session-6YTEDS3H.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20015,7 +20049,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-BOHUJCZL.js");
+      const { collectDiagnostics } = await import("../persistent-session-6YTEDS3H.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20651,7 +20685,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-SWB525DM.js");
+  } = await import("../claude-pair-runtime-UTDZXJKO.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));