@integrity-labs/agt-cli 0.28.859 → 0.28.861

package/dist/{claude-pair-runtime-SC2TO4SG.js → claude-pair-runtime-6FJOWTEX.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-6ZJR4HYE.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-6DET4JLF.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-SC2TO4SG.js.map
+//# sourceMappingURL=claude-pair-runtime-6FJOWTEX.js.map

package/dist/lib/manager-worker.js

@@ -1,9 +1,11 @@
 import {
   ApiError,
+  COMPUTER_USE_MCP_KEY,
   FIRST_CONNECT_WINDOW_MS,
   HostFlagStore,
   RestartBreaker,
   SUPERVISOR_RESTART_EXIT_CODE,
+  TunnelWatcher,
   api,
   atomicWriteFileSync,
   buildConnectivityProbeDeps,
@@ -11,6 +13,7 @@ import {
   classifyEnvIntegrationsDiff,
   clearPresenceReaperState,
   clearPresenceReaperStateForKeys,
+  computerUseReaperView,
   decidePin,
   defaultFlagsCachePath,
   deriveMcpServerKey,
@@ -60,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-JTDX6A6V.js";
+} from "../chunk-IQROQ3XJ.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -126,7 +129,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-R2NHRLD7.js";
+} from "../chunk-G23CONQJ.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -221,7 +224,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-FJ372WWE.js";
+} from "../chunk-USHD2L3F.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -12270,6 +12273,7 @@ function hasRevokedResiduals(state9) {
 }
 var pendingSessionRestarts = /* @__PURE__ */ new Map();
 var lastRestartWasExternal = /* @__PURE__ */ new Map();
+var computerUseTunnels = new TunnelWatcher();
 var pendingRestartVerifications = /* @__PURE__ */ new Map();
 var agentCreatedAtMs = /* @__PURE__ */ new Map();
 function noteAgentCreatedAt(codeName, createdAt) {
@@ -13001,7 +13005,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-UIYBJC7G.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-ZNKOWUIE.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13669,7 +13673,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.859" : "dev";
+var agtCliVersion = true ? "0.28.861" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15259,7 +15263,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-6ZJR4HYE.js");
+      const { collectDiagnostics } = await import("../persistent-session-6DET4JLF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15401,7 +15405,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-6ZJR4HYE.js");
+      const { collectDiagnostics } = await import("../persistent-session-6DET4JLF.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15570,7 +15574,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-UIYBJC7G.js");
+      } = await import("../responsiveness-probe-ZNKOWUIE.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15687,7 +15691,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-UIYBJC7G.js");
+        } = await import("../responsiveness-probe-ZNKOWUIE.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15843,7 +15847,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-S6QREVV3.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-XU7VC6HM.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -18575,15 +18579,30 @@ async function processAgent(agent, agentStates, managedToolkits) {
           mcpJsonParsed = JSON.parse(readFileSync32(mcpPath, "utf-8"));
         } catch {
         }
+        const computerUseIsolated = isolationMode(agent.code_name) === "docker";
+        const computerUseVerdict = computerUseTunnels.observe(
+          agent.code_name,
+          mcpJsonParsed?.mcpServers?.[COMPUTER_USE_MCP_KEY]?.args,
+          computerUseIsolated,
+          {
+            log,
+            onRecovered: (codeName) => {
+              clearPresenceReaperStateForKeys(codeName, /* @__PURE__ */ new Set([COMPUTER_USE_MCP_KEY]));
+              log(
+                `[computer-use-tunnel] '${codeName}': tunnel reachable again \u2014 cleared presence-reaper state for '${COMPUTER_USE_MCP_KEY}' so it gets a fresh restart budget (ENG-10134)`
+              );
+            }
+          }
+        );
         reapMissingMcpSessions({
           log,
           codeName: agent.code_name,
-          mcpJson: mcpJsonParsed,
+          mcpJson: computerUseReaperView(mcpJsonParsed, computerUseVerdict),
           sessionStartedAt: sess?.startedAt ?? null,
           // ENG-6660: under Docker the MCP children live in the agent's container
           // PID namespace - probe inside it (docker exec ps) instead of the host,
           // or every declared MCP looks "missing" -> restart loop -> flapping.
-          isolated: isolationMode(agent.code_name) === "docker",
+          isolated: computerUseIsolated,
           // ENG-6486: a restart is already scheduled/deferred for this agent (e.g.
           // a freshly-added channel awaiting its convergence restart, deferred by
           // the maintenance window). The pending restart will spawn the declared-
@@ -20073,7 +20092,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-UIYBJC7G.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-ZNKOWUIE.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -20111,7 +20130,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-6ZJR4HYE.js");
+        const { collectDiagnostics } = await import("../persistent-session-6DET4JLF.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20157,7 +20176,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-6ZJR4HYE.js");
+      const { collectDiagnostics } = await import("../persistent-session-6DET4JLF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20793,7 +20812,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-SC2TO4SG.js");
+  } = await import("../claude-pair-runtime-6FJOWTEX.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));