@integrity-labs/agt-cli 0.28.981 → 0.28.983

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-AT643QAO.js";
+} from "../chunk-62VGEG77.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-KTFN2AIB.js";
+} from "../chunk-2JWJZSMK.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-VF5BT7BP.js";
+} from "../chunk-3GL4ZO25.js";
 import "../chunk-DHWNVVX4.js";
 import "../chunk-XWVM4KPK.js";
 
@@ -5472,7 +5472,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.981" : "dev";
+var cliVersion = true ? "0.28.983" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6732,7 +6732,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.981" : "dev";
+var cliVersion2 = true ? "0.28.983" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-KTFN2AIB.js → chunk-2JWJZSMK.js}

@@ -20,7 +20,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-VF5BT7BP.js";
+} from "./chunk-3GL4ZO25.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -5575,4 +5575,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-KTFN2AIB.js.map
+//# sourceMappingURL=chunk-2JWJZSMK.js.map

package/dist/{chunk-VF5BT7BP.js → chunk-3GL4ZO25.js}

@@ -15200,4 +15200,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-VF5BT7BP.js.map
+//# sourceMappingURL=chunk-3GL4ZO25.js.map

package/dist/{chunk-AT643QAO.js → chunk-62VGEG77.js}

@@ -14,7 +14,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-KTFN2AIB.js";
+} from "./chunk-2JWJZSMK.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -74,7 +74,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-VF5BT7BP.js";
+} from "./chunk-3GL4ZO25.js";
 import {
   classifyUnanswerablePane,
   summarizeUnanswerablePane
@@ -6967,7 +6967,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.981" : "dev";
+var agtCliVersion = true ? "0.28.983" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11709,4 +11709,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-AT643QAO.js.map
+//# sourceMappingURL=chunk-62VGEG77.js.map

package/dist/{claude-pair-runtime-5JPASWRO.js → claude-pair-runtime-Q4MJOZ2J.js}

@@ -258,7 +258,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-26W47NVS.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-YKEY6ACQ.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -580,4 +580,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-5JPASWRO.js.map
+//# sourceMappingURL=claude-pair-runtime-Q4MJOZ2J.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-AT643QAO.js";
+} from "../chunk-62VGEG77.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -140,7 +140,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-KTFN2AIB.js";
+} from "../chunk-2JWJZSMK.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -238,7 +238,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-VF5BT7BP.js";
+} from "../chunk-3GL4ZO25.js";
 import "../chunk-DHWNVVX4.js";
 import {
   reapOrphanChannelMcps
@@ -6461,6 +6461,16 @@ import { join as join30 } from "path";
 function claudeDeviceStatePath(env = process.env) {
   return join30(env.HOME?.trim() || homedir13(), ".claude.json");
 }
+function probeClaudeDeviceStatePresence(path = claudeDeviceStatePath()) {
+  try {
+    return statSync9(path).isFile() ? { present: true } : { present: false, reason: "not-a-file" };
+  } catch (err) {
+    return {
+      present: false,
+      reason: err?.code === "ENOENT" ? "missing" : "unreadable"
+    };
+  }
+}
 function checkClaudeDeviceState(path = claudeDeviceStatePath()) {
   try {
     if (!statSync9(path).isFile()) return { usable: false, reason: "not-a-file" };
@@ -6489,10 +6499,18 @@ function checkClaudeDeviceState(path = claudeDeviceStatePath()) {
   return { usable: true };
 }
 var DeviceStateRotationGate = class {
-  constructor(check = () => checkClaudeDeviceState()) {
+  constructor(check = () => checkClaudeDeviceState(), probe = () => probeClaudeDeviceStatePresence()) {
     this.check = check;
+    this.probe = probe;
   }
   held = /* @__PURE__ */ new Map();
+  /**
+   * ENG-10730: when the CHEAP probe first saw the file gone with nothing held.
+   * Separate from `held`, which records when each agent's rotation was stopped -
+   * in this state no rotation has been stopped at all. Cleared whenever the file
+   * is seen present again, so a later episode gets its own clock.
+   */
+  unusableSinceMs = null;
   /**
    * Ask before tearing `codeName`'s session down for a planned rotation.
    * Returns `ready: true` when the respawn can start; otherwise the rotation must
@@ -6510,22 +6528,62 @@ var DeviceStateRotationGate = class {
     return { ready: false, reason: verdict.reason, firstHold };
   }
   /**
-   * The value for the heartbeat. Re-checks the file while anything is held, so
-   * the alert closes on the next heartbeat after the operator pairs the host,
-   * not only when some agent's rollover next asks. Reads nothing when nothing is
-   * held, so a healthy host pays no file read per heartbeat.
+   * The value for the heartbeat.
+   *
+   * ENG-10730. This used to open with `if (this.held.size === 0) return null;` -
+   * it returned the affirmative all-clear WITHOUT LOOKING, and the docblock
+   * defended that as "a healthy host pays no file read per heartbeat". The
+   * saving was real and so was the hole: a host whose `~/.claude.json` had been
+   * unlinked, and which had not happened to attempt a rotation since, reported
+   * `null` every 30 seconds while already doomed. Nothing asked until some
+   * agent's rollover did, which on ENG-10724 was the maintenance window - i.e.
+   * the moment the agents were lost. The host was discovered one whole host at a
+   * time, at whatever hour its window fell.
+   *
+   * So the heartbeat now always looks, and pays for it with ONE `statSync` -
+   * `probeClaudeDeviceStatePresence`, no read, no parse. The original perf
+   * objection is answered rather than overridden: what was rejected in PR #6250
+   * was a multi-MB synchronous `JSON.parse` on every healthy host's event loop,
+   * and that is still not happening here.
+   *
+   * THE TWO PATHS ARE NOT SYMMETRIC, AND THAT IS DELIBERATE.
+   * - Something held: the FULL check, exactly as before. A hold must only clear
+   *   on a genuinely usable file, so a present-but-corrupt one cannot read as a
+   *   recovery and release a rotation onto a host that still cannot respawn.
+   * - Nothing held: the CHEAP probe. It can only report that the file has GONE,
+   *   never that one is well - so it can raise this warning and it can clear
+   *   this warning, but it is never allowed to clear a hold.
+   *
+   * `deferred_agents: []` with a reason is therefore a THIRD state, distinct
+   * from both `null` and a hold: the file is unusable and nothing has been
+   * stopped yet. The API must not describe that as a hold - see
+   * `summariseDeviceStateBlock`, which separates the two so the alert does not
+   * claim the manager is holding work it is not.
    */
-  heartbeatField() {
-    if (this.held.size === 0) return null;
-    const verdict = this.check();
-    if (verdict.usable) {
-      this.held.clear();
+  heartbeatField(nowMs = Date.now()) {
+    if (this.held.size > 0) {
+      const verdict = this.check();
+      if (verdict.usable) {
+        this.held.clear();
+        this.unusableSinceMs = null;
+        return null;
+      }
+      return {
+        reason: verdict.reason,
+        deferred_agents: [...this.held.keys()].sort(),
+        blocked_since: new Date(Math.min(...this.held.values())).toISOString()
+      };
+    }
+    const presence = this.probe();
+    if (presence.present) {
+      this.unusableSinceMs = null;
       return null;
     }
+    if (this.unusableSinceMs === null) this.unusableSinceMs = nowMs;
     return {
-      reason: verdict.reason,
-      deferred_agents: [...this.held.keys()].sort(),
-      blocked_since: new Date(Math.min(...this.held.values())).toISOString()
+      reason: presence.reason,
+      deferred_agents: [],
+      blocked_since: new Date(this.unusableSinceMs).toISOString()
     };
   }
   /** For tests and logs. */
@@ -13212,7 +13270,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-KMHYGGYP.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-2T6AKR7I.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13955,7 +14013,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.981" : "dev";
+var agtCliVersion = true ? "0.28.983" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15561,7 +15619,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-26W47NVS.js");
+      const { collectDiagnostics } = await import("../persistent-session-YKEY6ACQ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15703,7 +15761,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-26W47NVS.js");
+      const { collectDiagnostics } = await import("../persistent-session-YKEY6ACQ.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15879,7 +15937,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-KMHYGGYP.js");
+      } = await import("../responsiveness-probe-2T6AKR7I.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15996,7 +16054,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-KMHYGGYP.js");
+        } = await import("../responsiveness-probe-2T6AKR7I.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -16152,7 +16210,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-CRG2ESD2.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-S2XOP5EO.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -20428,7 +20486,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-KMHYGGYP.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-2T6AKR7I.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -20471,7 +20529,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-26W47NVS.js");
+        const { collectDiagnostics } = await import("../persistent-session-YKEY6ACQ.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20522,7 +20580,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-26W47NVS.js");
+      const { collectDiagnostics } = await import("../persistent-session-YKEY6ACQ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -21164,7 +21222,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-5JPASWRO.js");
+  } = await import("../claude-pair-runtime-Q4MJOZ2J.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));