@integrity-labs/agt-cli 0.28.841 → 0.28.842

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-43P6SG7L.js";
+} from "../chunk-F4WQSKKU.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-CFLYGZOF.js";
+} from "../chunk-KOVJCGBN.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.841" : "dev";
+var cliVersion = true ? "0.28.842" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.841" : "dev";
+var cliVersion2 = true ? "0.28.842" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-43P6SG7L.js → chunk-F4WQSKKU.js}

@@ -16,7 +16,7 @@ import {
   parseEnvIntegrations,
   shellQuote,
   summarizeUnanswerablePane
-} from "./chunk-CFLYGZOF.js";
+} from "./chunk-KOVJCGBN.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -6566,7 +6566,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.841" : "dev";
+var agtCliVersion = true ? "0.28.842" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10924,4 +10924,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-43P6SG7L.js.map
+//# sourceMappingURL=chunk-F4WQSKKU.js.map

package/dist/{chunk-CFLYGZOF.js → chunk-KOVJCGBN.js}

@@ -4228,6 +4228,90 @@ function startPersistentSession(config) {
   spawnSession(config, session);
   return session;
 }
+var TMUX_BOOTSTRAP_HOLD_CMD = "sleep 60";
+var TMUX_BOOTSTRAP_SESSION_PREFIX = "augmented-tmuxsrv-";
+function tmuxBootstrapSessionName(seed) {
+  const unique = seed ?? `${process.pid}-${Date.now()}-${randomUUID().slice(0, 8)}`;
+  return `${TMUX_BOOTSTRAP_SESSION_PREFIX}${unique}`;
+}
+function buildTmuxSpawnPlan(args) {
+  const bootstrapSession = args.bootstrapSession ?? tmuxBootstrapSessionName();
+  return {
+    bootstrap: { argv: ["new-session", "-d", "-s", bootstrapSession, TMUX_BOOTSTRAP_HOLD_CMD] },
+    session: {
+      argv: [
+        "new-session",
+        "-d",
+        "-s",
+        args.tmuxSession,
+        "-c",
+        args.projectDir,
+        ...args.sessionEnvArgs,
+        args.claudeCmd
+      ]
+    },
+    cleanup: { argv: ["kill-session", "-t", bootstrapSession] }
+  };
+}
+function runTmuxSpawnPlan(opts) {
+  const spawnFn = opts.spawnImpl ?? spawn2;
+  const prefix = opts.tmuxArgsPrefix ?? [];
+  const stepTimeoutMs = opts.stepTimeoutMs ?? 1e4;
+  const quiet = { ...opts.spawnOptions, stdio: "ignore" };
+  let cleanedUp = false;
+  const runCleanup = () => {
+    if (cleanedUp || !opts.plan.cleanup) return;
+    cleanedUp = true;
+    try {
+      const child = spawnFn("tmux", [...prefix, ...opts.plan.cleanup.argv], quiet);
+      child.on("error", () => {
+      });
+    } catch {
+    }
+  };
+  const spawnRealSession = () => {
+    let child;
+    try {
+      child = spawnFn("tmux", [...prefix, ...opts.plan.session.argv], opts.spawnOptions);
+    } catch (err) {
+      runCleanup();
+      opts.onSpawnFailed(`session spawn threw: ${err.message}`);
+      return;
+    }
+    child.once("close", runCleanup);
+    child.once("error", runCleanup);
+    opts.onSessionSpawned(child);
+  };
+  if (!opts.plan.bootstrap) {
+    spawnRealSession();
+    return;
+  }
+  let settled = false;
+  let deadline;
+  const settle = (failure) => {
+    if (settled) return;
+    settled = true;
+    if (deadline) clearTimeout(deadline);
+    if (failure === null) spawnRealSession();
+    else opts.onSpawnFailed(failure);
+  };
+  let boot;
+  try {
+    boot = spawnFn("tmux", [...prefix, ...opts.plan.bootstrap.argv], quiet);
+  } catch (err) {
+    settle(`spawn threw: ${err.message}`);
+    return;
+  }
+  boot.on("error", (err) => settle(`tmux could not be started: ${err.message}`));
+  boot.on("close", (code) => settle(code === 0 ? null : `bootstrap tmux exited ${code}`));
+  deadline = setTimeout(() => {
+    settle(`bootstrap tmux did not exit within ${stepTimeoutMs}ms`);
+    try {
+      boot.kill("SIGKILL");
+    } catch {
+    }
+  }, stepTimeoutMs);
+}
 function spawnSession(config, session) {
   const { codeName, projectDir, mcpConfigPath, claudeMdPath, channels, devChannels, apiHost, log: log2 } = config;
   const claudeAuthMode = config.claudeAuthMode ?? "subscription";
@@ -4546,21 +4630,13 @@ function spawnSession(config, session) {
       }
     } catch {
     }
-    const child = spawn2("tmux", [
-      "new-session",
-      "-d",
-      "-s",
+    const spawnPlan = buildTmuxSpawnPlan({
       tmuxSession,
-      "-c",
       projectDir,
-      ...tmuxSessionEnvArgs,
+      sessionEnvArgs: tmuxSessionEnvArgs,
       claudeCmd
-    ], {
-      cwd: projectDir,
-      stdio: ["ignore", "pipe", "pipe"],
-      env: tmuxEnv
     });
-    child.on("close", (code) => {
+    const onTmuxSessionClose = (code) => {
       if (code !== 0) {
         log2(`[persistent-session] Failed to create tmux session for '${codeName}' (exit ${code})`);
         session.status = "crashed";
@@ -4632,15 +4708,39 @@ function spawnSession(config, session) {
       session.currentSessionId = sessionId;
       acceptDialogs(tmuxSession, codeName, log2, config.primaryModel ?? null, sessionId).catch(() => {
       });
-    });
-    child.on("error", (err) => {
+    };
+    const onTmuxSessionError = (err) => {
       log2(`[persistent-session] Failed to start tmux for '${codeName}': ${err.message}`);
       session.status = "crashed";
       session.startedAt = Date.now();
       session.restartCount++;
+    };
+    let spawnFailed = false;
+    runTmuxSpawnPlan({
+      plan: spawnPlan,
+      spawnOptions: {
+        cwd: projectDir,
+        stdio: ["ignore", "pipe", "pipe"],
+        env: tmuxEnv
+      },
+      onSessionSpawned: (child) => {
+        child.on("close", onTmuxSessionClose);
+        child.on("error", onTmuxSessionError);
+      },
+      onSpawnFailed: (reason) => {
+        spawnFailed = true;
+        log2(
+          `[persistent-session] tmux bootstrap failed for '${codeName}': ${reason} \u2014 refusing to spawn rather than put this session's -e secrets on the tmux server argv for its lifetime (ENG-10092)`
+        );
+        session.status = "crashed";
+        session.startedAt = Date.now();
+        session.restartCount++;
+      }
     });
-    session.startedAt = Date.now();
-    session.status = "running";
+    if (!spawnFailed) {
+      session.startedAt = Date.now();
+      session.status = "running";
+    }
   } catch (err) {
     log2(`[persistent-session] Failed to start session for '${codeName}': ${err.message}`);
     session.status = "crashed";
@@ -5310,6 +5410,11 @@ export {
   writeDirectChatSessionState,
   spawnBackoffMs,
   startPersistentSession,
+  TMUX_BOOTSTRAP_HOLD_CMD,
+  TMUX_BOOTSTRAP_SESSION_PREFIX,
+  tmuxBootstrapSessionName,
+  buildTmuxSpawnPlan,
+  runTmuxSpawnPlan,
   SEND_KEYS_ENTER_DELAY_MS,
   sendToAgent,
   isAgentPromptReady,
@@ -5326,4 +5431,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-CFLYGZOF.js.map
+//# sourceMappingURL=chunk-KOVJCGBN.js.map