@integrity-labs/agt-cli 0.28.886 → 0.28.888

package/dist/{chunk-2E7GOSID.js → chunk-P2EMIE25.js}

@@ -16,7 +16,7 @@ import {
   parseEnvIntegrations,
   shellQuote,
   summarizeUnanswerablePane
-} from "./chunk-FP5M5OVX.js";
+} from "./chunk-OMRYKBFE.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -6841,7 +6841,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.886" : "dev";
+var agtCliVersion = true ? "0.28.888" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11451,4 +11451,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-2E7GOSID.js.map
+//# sourceMappingURL=chunk-P2EMIE25.js.map

package/dist/{claude-pair-runtime-BQGZXRPV.js → claude-pair-runtime-5UINWQ52.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-SG4HA35I.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-RFQKA2H5.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-BQGZXRPV.js.map
+//# sourceMappingURL=claude-pair-runtime-5UINWQ52.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-2E7GOSID.js";
+} from "../chunk-P2EMIE25.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -72,9 +72,11 @@ import {
   syncTasksToScheduler
 } from "../chunk-3HLECXMI.js";
 import {
+  BLOCKED_ON_PROMPT_DECISION,
   CHANNEL_SECRET_ENV_KEYS,
   ChildProcessError,
   agentRuntimeKey,
+  applyBlockedPromptVerdict,
   buildEgressAllowlist,
   checkChannelInputs,
   collectChannelSpawnSecrets,
@@ -94,6 +96,7 @@ import {
   injectMessage,
   injectMessageWithStatus,
   injectOpencodeMessage,
+  isConfirmedRespawn,
   isOpencodeSessionHealthy,
   isSessionHealthy,
   isolationMode,
@@ -101,6 +104,7 @@ import {
   mergeOpencodeConfigArtifact,
   modelPolicyAuthComponent,
   modelPolicyEgressDomains,
+  noteSessionBlockedOnPrompt,
   paneLogPath,
   parseEnvIntegrations,
   parseModelPolicy,
@@ -117,8 +121,11 @@ import {
   restartEgressSidecar,
   rotatePaneLogForDayRollover,
   rotateSessionForWedge,
+  sessionBlockedOnPrompt,
+  sessionHealthyAndUnblocked,
   sha256,
   sharedBusyBuckets,
+  shouldLogBlockedPrompt,
   startOpencodeSession,
   startPersistentSession,
   stopAllSessionsAndWait,
@@ -129,7 +136,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-FP5M5OVX.js";
+} from "../chunk-OMRYKBFE.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -12935,7 +12942,7 @@ var firstConnectUnsettledByAgent = /* @__PURE__ */ new Map();
 function verifyPendingRestarts(now) {
   if (pendingRestartVerifications.size === 0) return;
   for (const [codeName, pending2] of pendingRestartVerifications) {
-    const healthy = isSessionHealthy(codeName);
+    const healthy = sessionHealthyAndUnblocked(codeName, isSessionHealthy);
     const session = getSessionState(codeName);
     const startedAt = session?.startedAt ?? null;
     const respawnId = session?.currentSessionId ?? null;
@@ -12979,7 +12986,7 @@ function verifyPendingRestarts(now) {
           finishRestartTiming(codeName, "failed", `${outcome.attempt} verify attempts`, log, now);
           if (bindRemediationEnabled() && spawnWasRefusedWithNoSession(codeName)) {
             log(
-              `[bind-remediation] '${codeName}' NOT remediating \u2014 the last spawn was refused and no session is running (e.g. the host cannot authenticate to Claude). A re-respawn cannot bind tools when nothing can start, so this would loop without the breaker ever seeing it (ENG-8581). Fix the host, not the session.`
+              `[bind-remediation] '${codeName}' NOT remediating \u2014 the last spawn was refused and no session is running, or the session is blocked on a prompt it cannot answer (e.g. the host cannot authenticate to Claude, ENG-10335). A re-respawn cannot bind tools when nothing can start, so this would loop without the breaker ever seeing it (ENG-8581). Fix the host, not the session.`
             );
           }
           if (shouldRemediateUnverifiedRestart(outcome, {
@@ -13016,7 +13023,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-3OEZ6D3O.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-65AHLKWV.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13684,7 +13691,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.886" : "dev";
+var agtCliVersion = true ? "0.28.888" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15274,7 +15281,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-SG4HA35I.js");
+      const { collectDiagnostics } = await import("../persistent-session-RFQKA2H5.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15416,7 +15423,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-SG4HA35I.js");
+      const { collectDiagnostics } = await import("../persistent-session-RFQKA2H5.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15585,7 +15592,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-3OEZ6D3O.js");
+      } = await import("../responsiveness-probe-65AHLKWV.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15702,7 +15709,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-3OEZ6D3O.js");
+        } = await import("../responsiveness-probe-65AHLKWV.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -18687,6 +18694,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
           // reaper is the only component that knows a restart is futile, so it is
           // the only one that can say so.
           onPaneBlocked: (codeName, ctx) => {
+            noteSessionBlockedOnPrompt(codeName, ctx.kind, "mcp-presence-reaper");
             void reportReaperEvent(
               agent.agent_id,
               "mcp-presence-reaper",
@@ -19253,7 +19261,12 @@ async function ensureOpencodeRuntime(agent, refreshData, agentTimezone) {
     detail: `opencode serve on 127.0.0.1:${session.port ?? "?"}`
   };
 }
-async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
+async function ensurePersistentSession(...args) {
+  const result = await ensurePersistentSessionUnchecked(...args);
+  const blocked = result.sessionHealthyAfter ? sessionBlockedOnPrompt(args[0].code_name) : null;
+  return applyBlockedPromptVerdict(result, blocked);
+}
+async function ensurePersistentSessionUnchecked(agent, tasks, boardItems, refreshData) {
   const codeName = agent.code_name;
   if ((agentFrameworkCache.get(codeName) ?? DEFAULT_FRAMEWORK) === "claude-code" && !isSessionHealthy(codeName)) {
     maybeMigrateAgentToIdKeyedLayout(agent, {
@@ -19841,7 +19854,19 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash20("sha256")
         `[persistent-session] Deferring ${ready.length} ready task(s) for '${codeName}' \u2014 minting a fresh session after an idle day-rollover; schedule NOT advanced, task fires on the fresh session next tick [ENG-8461]`
       );
     }
-    for (const task of deferReadyForUsageCap || deferReadyForRollover ? [] : ready) {
+    let deferReadyForBlockedPrompt = false;
+    if (!deferReadyForUsageCap && !deferReadyForRollover && ready.length > 0) {
+      const blockedKind = sessionBlockedOnPrompt(codeName);
+      if (blockedKind) {
+        deferReadyForBlockedPrompt = true;
+        if (shouldLogBlockedPrompt(codeName, "scheduled-firing")) {
+          log(
+            `[persistent-session] Deferring ${ready.length} ready task(s) for '${codeName}' \u2014 session is blocked on an interactive prompt (${blockedKind}) and cannot run a tool call; schedule NOT advanced, will fire once the prompt is answered (further deferrals this episode are not logged) [ENG-10335]`
+          );
+        }
+      }
+    }
+    for (const task of deferReadyForUsageCap || deferReadyForRollover || deferReadyForBlockedPrompt ? [] : ready) {
       if (KANBAN_WORK_TEMPLATES.has(task.templateId)) {
         const updated = markTaskFired(codeName, task.taskId, "ok");
         claudeSchedulerStates.set(codeName, updated);
@@ -20103,7 +20128,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-3OEZ6D3O.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-65AHLKWV.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -20134,14 +20159,19 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       refreshData
     );
     recordSpawnOutcome(codeName, result);
-    if (result.decision !== "spawn" || !result.sessionHealthyAfter) {
+    if (!isConfirmedRespawn(result)) {
       log(`[restart-lane] respawn not confirmed for '${codeName}' (decision=${result.decision}) - leaving for slow poll`);
       return;
     }
+    if (result.decision === BLOCKED_ON_PROMPT_DECISION) {
+      log(
+        `[restart-lane] '${codeName}' respawned but is blocked on an interactive prompt - acking, not retrying: a respawn re-presents the same prompt; published unhealthy [ENG-10335]`
+      );
+    }
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-SG4HA35I.js");
+        const { collectDiagnostics } = await import("../persistent-session-RFQKA2H5.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20179,15 +20209,20 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
       refreshData
     );
     recordSpawnOutcome(codeName, result);
-    if (result.decision !== "spawn" || !result.sessionHealthyAfter) {
+    if (!isConfirmedRespawn(result)) {
       log(
         `[fast-mcp-respawn] respawn not confirmed for '${codeName}' (decision=${result.decision}) - leaving for slow poll`
       );
       return;
     }
+    if (result.decision === BLOCKED_ON_PROMPT_DECISION) {
+      log(
+        `[fast-mcp-respawn] '${codeName}' respawned but is blocked on an interactive prompt - not retrying, a respawn re-presents the same prompt; published unhealthy [ENG-10335]`
+      );
+    }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-SG4HA35I.js");
+      const { collectDiagnostics } = await import("../persistent-session-RFQKA2H5.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20583,7 +20618,13 @@ async function processDirectChatMessage(agent, msg) {
     );
     return;
   }
-  if (isSessionHealthy(agent.codeName)) {
+  const blockedOnPrompt = sessionBlockedOnPrompt(agent.codeName);
+  if (blockedOnPrompt && shouldLogBlockedPrompt(agent.codeName, "direct-chat")) {
+    log(
+      `[direct-chat] Not delivering to '${agent.codeName}' (msg=${msg.id}) \u2014 session is blocked on an interactive prompt (${blockedOnPrompt}), so nothing in-session can pull it; leaving pending for durable replay once the prompt is answered (further messages this episode are not logged) [ENG-10335]`
+    );
+  }
+  if (!blockedOnPrompt && isSessionHealthy(agent.codeName)) {
     const useDoorbell = hostFlagStore().getBoolean("direct-chat-doorbell") || isolationMode(agent.codeName) === "docker";
     if (useDoorbell) {
       try {
@@ -20823,7 +20864,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-BQGZXRPV.js");
+  } = await import("../claude-pair-runtime-5UINWQ52.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));