@integrity-labs/agt-cli 0.28.993 → 0.28.994

package/dist/{chunk-ACCF4BLS.js → chunk-3OI4ZHJZ.js}

@@ -38,6 +38,9 @@ import {
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
+import {
+  __require
+} from "./chunk-DGUM43GV.js";
 
 // src/lib/persistent-session.ts
 import { spawn as spawn2, execSync as execSync2, execFileSync as execFileSync3 } from "child_process";
@@ -2926,6 +2929,106 @@ function describeError(err) {
   return code ? `${code}: ${msg}` : msg;
 }
 
+// src/lib/claude-json-health.ts
+var MIN_PLAUSIBLE_CLAUDE_JSON_BYTES = 1024;
+function hasOrphanedMount(mountinfo, path) {
+  if (!mountinfo) return false;
+  for (const line2 of mountinfo.split("\n")) {
+    if (!line2.includes("//deleted")) continue;
+    const fields = line2.split(" ");
+    const root = fields[3];
+    const mountPoint = fields[4];
+    if (mountPoint !== path) continue;
+    if (root === `${path}//deleted`) return true;
+  }
+  return false;
+}
+function assessClaudeConfig(probe) {
+  const { raw, nlink, mountinfo, path, readFailure } = probe;
+  if (raw === null) {
+    if (readFailure === "unreadable") {
+      return {
+        verdict: "unreadable",
+        detail: `${path} EXISTS but could not be read (permissions, or it is not a regular file). This is not a sign-in problem and re-authenticating will not fix it.`,
+        blocksSpawn: true
+      };
+    }
+    return {
+      verdict: "missing",
+      detail: `${path} does not exist - Claude Code will show the login picker`,
+      blocksSpawn: true
+    };
+  }
+  if (raw.length === 0) {
+    return { verdict: "empty", detail: `${path} is zero bytes`, blocksSpawn: true };
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return {
+        verdict: "unparseable",
+        detail: `${path} parsed but is not a JSON object`,
+        blocksSpawn: true
+      };
+    }
+  } catch {
+    return {
+      verdict: "unparseable",
+      detail: `${path} is not valid JSON (parse error) at ${raw.length} bytes`,
+      blocksSpawn: true
+    };
+  }
+  if (raw.length < MIN_PLAUSIBLE_CLAUDE_JSON_BYTES) {
+    return {
+      verdict: "truncated",
+      detail: `${path} parses but is only ${raw.length} bytes, below the ${MIN_PLAUSIBLE_CLAUDE_JSON_BYTES}-byte floor - a partial write, not a real config`,
+      blocksSpawn: true
+    };
+  }
+  if (nlink === 0 || hasOrphanedMount(mountinfo, path)) {
+    return {
+      verdict: "orphaned",
+      detail: `${path} is bind-mounted from an UNLINKED inode (nlink=${nlink ?? "unknown"}) - the host replaced this file after the container started. Config writes here are invisible to the host and host-side updates, including re-auth, are invisible here. Recycle the container; do not treat this as an auth failure.`,
+      // Deliberately NOT blocking: by the time this is observable the container
+      // is already running, and refusing to spawn is the wrong lever. The fix
+      // is a recycle, and the point of the verdict is that somebody is told.
+      blocksSpawn: false
+    };
+  }
+  return { verdict: "ok", detail: `${path} is valid (${raw.length} bytes)`, blocksSpawn: false };
+}
+function describeClaudeConfigForLog(homeDir) {
+  try {
+    const { readFileSync: readFileSync8, statSync: statSync2 } = __require("fs");
+    const path = `${homeDir.replace(/\/+$/, "")}/.claude.json`;
+    let raw = null;
+    let readFailure;
+    try {
+      raw = readFileSync8(path, "utf8");
+    } catch (err) {
+      raw = null;
+      readFailure = err?.code === "ENOENT" ? "missing" : "unreadable";
+    }
+    let nlink = null;
+    try {
+      nlink = statSync2(path).nlink;
+    } catch {
+      nlink = null;
+    }
+    let mountinfo = null;
+    try {
+      mountinfo = readFileSync8("/proc/self/mountinfo", "utf8");
+    } catch {
+      mountinfo = null;
+    }
+    const out = assessClaudeConfig({ raw, nlink, mountinfo, path, readFailure });
+    if (out.verdict === "ok") return null;
+    return `${out.verdict}: ${out.detail}`;
+  } catch {
+    return null;
+  }
+}
+
 // src/lib/session-blocked-prompt.ts
 import { execFile } from "child_process";
 var BLOCKED_PROMPT_VERDICT_TTL_MS = 15e3;
@@ -4980,7 +5083,12 @@ async function acceptDialogs(tmuxSession, codeName, log2, primaryModel = null, s
       if (isLoginPickerVisible(screen)) {
         noteSessionBlockedOnPrompt(codeName, "login-picker", "spawn-dialogs");
         if (!loginPickerReported) {
-          log2(`[persistent-session] CLAUDE LOGIN REQUIRED for '${codeName}' \u2014 agent cannot start until ~/.claude.json is provisioned. Pair via the Hosts page or run 'claude /login' on the host.`);
+          const health = describeClaudeConfigForLog(homedir5());
+          if (health) {
+            log2(`[persistent-session] CLAUDE LOGIN REQUIRED for '${codeName}' \u2014 ${health}`);
+          } else {
+            log2(`[persistent-session] CLAUDE LOGIN REQUIRED for '${codeName}' \u2014 agent cannot start until ~/.claude.json is provisioned. Pair via the Hosts page or run 'claude /login' on the host.`);
+          }
           loginPickerReported = true;
         }
         loginPickerIterations++;
@@ -5642,4 +5750,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-ACCF4BLS.js.map
+//# sourceMappingURL=chunk-3OI4ZHJZ.js.map