@integrity-labs/agt-cli 0.28.889 → 0.28.891

package/dist/{chunk-OMRYKBFE.js → chunk-SXYTFXPO.js}

@@ -4,6 +4,7 @@ import {
   PLATFORM_STORAGE_RULE,
   SECRET_PATTERNS,
   claudeModelAlias,
+  encodeClaudeProjectPath,
   getOrCreateDailySession,
   isClaudeFastMode,
   isDefaultRemoteMcpConnection,
@@ -18,7 +19,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-7LIBFSX6.js";
+} from "./chunk-BH5RFBUM.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -3892,6 +3893,121 @@ function restartEgressSidecar(codeName) {
     return false;
   }
 }
+var TRANSCRIPT_MASK_DIR_PREFIX = ".agent-";
+var CLAUDE_PER_AGENT_DIRS = [
+  // Present on a live host, 2026-09-11.
+  "file-history",
+  // edit snapshots (122 MB on one host)
+  "session-env",
+  "shell-snapshots",
+  "sessions",
+  // PID-keyed; every container's claude is the same PID, so sharing also collides
+  "debug",
+  "paste-cache",
+  "todos",
+  // Created on demand by Claude Code 2.1.267; each holds session-derived content.
+  "tasks",
+  // task lists, keyed by session
+  "uploads",
+  // files staged into a session
+  "plans",
+  // plan-mode documents
+  "teams",
+  // agent-team mailboxes
+  "jobs",
+  // background job state
+  "shares",
+  // session share bundles
+  "usage-data",
+  // per-session facets and metadata
+  "feedback",
+  // feedback drafts
+  "feedback-bundles",
+  // feedback zips, which can carry the transcript
+  "dump-prompts",
+  // full request dumps, keyed by session
+  "api-dumps",
+  "image-cache",
+  // pasted images, keyed by session
+  "file-transfers",
+  // peer file-transfer attachments
+  "downloads",
+  "scratch",
+  // per-session scratch namespace
+  "traces",
+  "startup-perf",
+  // per-session profiling reports
+  "bridge-spawn"
+];
+var CLAUDE_NULLED_FILES = ["history.jsonl"];
+var CLAUDE_HOST_WIDE = [
+  // Account and auth: one login per host, refreshed in place.
+  ".credentials.json",
+  ".claude.json",
+  ".claude.json.backup",
+  "hfi-auth.json",
+  ".session_ingress_token",
+  // Settings, policy and consent that apply to the whole host.
+  "settings.json",
+  "plugins",
+  "policy-limits.json",
+  "policy-limits.json.signature.json",
+  "policy-limits.json.signature-iat.json",
+  "remote-settings.json",
+  "remote-settings.json.signature.json",
+  "remote-settings.json.signature-iat.json",
+  "remote-settings-helper-consent",
+  "remote-settings-consent.json",
+  // 2.1.268: account-keyed consent records for remote managed settings
+  "state",
+  // host-level consent records
+  "local-settings",
+  "project-settings",
+  "backups",
+  // .claude.json backups, the same content as .claude.json
+  // Install, caches and host services with no session content.
+  "local",
+  // host Claude Code install; read host-side by claude-code-updater.ts
+  "ccr",
+  // CA bundle
+  "cache",
+  "statsig",
+  "mcp-discovery-cache",
+  "mcp-skill-archives",
+  "mcp-needs-auth-cache.json",
+  "gh-pr-status-cache.json",
+  "stats-cache.json",
+  "telemetry",
+  "logs",
+  "ide",
+  "chrome",
+  "systemd",
+  "daemon",
+  "computer-use.lock",
+  "server.lock",
+  // Per-session FILES: a file bind breaks rename-over writes and nulling them
+  // would break the feature. None exists on the fleet hosts checked.
+  "active-time.json",
+  "server-sessions.json",
+  "loop.md",
+  // only ever read-denied by the sandbox; not written by /loop
+  "antproto.json",
+  // No writer found in 2.1.267. Left shared rather than guessed: storage-v2 may
+  // back account state, and a wrong per-agent guess there would break auth.
+  "storage-v2",
+  "remote",
+  ".cc-writes"
+];
+function claudeStateDirFor(homeDir, agentId) {
+  return join7(homeDir, ".augmented", agentId, ".claude-state");
+}
+function ensureClaudeStateLayout(args) {
+  const stateDir = claudeStateDirFor(args.homeDir, args.agentId);
+  for (const dir of CLAUDE_PER_AGENT_DIRS) mkdirSync6(join7(stateDir, dir), { recursive: true });
+  const projects = join7(args.homeDir, ".claude", "projects");
+  mkdirSync6(join7(projects, `${TRANSCRIPT_MASK_DIR_PREFIX}${args.agentId}`), { recursive: true });
+  mkdirSync6(join7(projects, encodeClaudeProjectPath(args.projectDir)), { recursive: true });
+}
 function buildDockerRunCommand(args) {
   const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, passModelPolicyGateway, passModelPolicyModel, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting, forwardNotifyDispatch, forwardTurnFailureNotice, forwardChannelSecrets } = args;
   const q = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
@@ -3900,12 +4016,23 @@ function buildDockerRunCommand(args) {
   const mcpDir = join7(homeDir, ".augmented", "_mcp");
   const claudeHome = join7(homeDir, ".claude");
   const claudeJson = join7(homeDir, ".claude.json");
+  const claudeProjects = join7(claudeHome, "projects");
+  const transcriptMask = join7(claudeProjects, `${TRANSCRIPT_MASK_DIR_PREFIX}${agentId}`);
+  const ownTranscripts = join7(claudeProjects, encodeClaudeProjectPath(projectDir));
   const mounts = [
     `-v ${q(`${agentDir2}:${agentDir2}`)}`,
     `-v ${q(`${agentIdDir}:${agentIdDir}`)}`,
     `-v ${q(`${mcpDir}:${mcpDir}:ro`)}`,
     `-v ${q(`${claudeHome}:${claudeHome}`)}`,
-    `-v ${q(`${claudeJson}:${claudeJson}`)}`
+    `-v ${q(`${transcriptMask}:${claudeProjects}`)}`,
+    `-v ${q(`${ownTranscripts}:${ownTranscripts}`)}`,
+    `-v ${q(`${claudeJson}:${claudeJson}`)}`,
+    // ENG-8854: the rest of the per-session state, from the agent's own id-keyed tree.
+    ...CLAUDE_PER_AGENT_DIRS.map(
+      (name) => `-v ${q(`${join7(claudeStateDirFor(homeDir, agentId), name)}:${join7(claudeHome, name)}`)}`
+    ),
+    // ENG-8854: history.jsonl cannot take a per-agent file bind (see CLAUDE_NULLED_FILES).
+    ...CLAUDE_NULLED_FILES.map((name) => `-v ${q(`/dev/null:${join7(claudeHome, name)}`)}`)
   ];
   const image = process.env.AGT_ISOLATION_IMAGE || "agt-runtime:latest";
   const memory = process.env.AGT_ISOLATION_MEMORY || "2g";
@@ -4670,6 +4797,9 @@ function spawnSession(config, session) {
       egress = { allowlistHostPath };
       log2(`[persistent-session] egress allowlist for '${codeName}': ${allowlist.length} domains (deny-by-default)`);
     }
+    if (effectiveMode === "docker") {
+      ensureClaudeStateLayout({ homeDir: sessionHomeDir, agentId: config.agentId, projectDir });
+    }
     const claudeCmd = effectiveMode === "docker" ? buildDockerRunCommand({
       codeName,
       agentId: config.agentId,
@@ -5549,6 +5679,12 @@ export {
   writeEgressAllowlist,
   reloadEgressSidecar,
   restartEgressSidecar,
+  TRANSCRIPT_MASK_DIR_PREFIX,
+  CLAUDE_PER_AGENT_DIRS,
+  CLAUDE_NULLED_FILES,
+  CLAUDE_HOST_WIDE,
+  claudeStateDirFor,
+  ensureClaudeStateLayout,
   buildDockerRunCommand,
   writePersistentClaudeWrapper,
   PANE_AGENT_ID_PROBE_TIMEOUT_MS,
@@ -5594,4 +5730,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-OMRYKBFE.js.map
+//# sourceMappingURL=chunk-SXYTFXPO.js.map