@integrity-labs/agt-cli 0.28.997 → 0.28.999

package/dist/{chunk-FZZ257OT.js → chunk-GMSDTOIJ.js}

@@ -15,7 +15,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-3OI4ZHJZ.js";
+} from "./chunk-IFKADCYL.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -75,7 +75,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-IM5LTTRM.js";
+} from "./chunk-GADDU3OI.js";
 import {
   classifyUnanswerablePane,
   summarizeUnanswerablePane
@@ -6974,7 +6974,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.997" : "dev";
+var agtCliVersion = true ? "0.28.999" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11725,4 +11725,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-FZZ257OT.js.map
+//# sourceMappingURL=chunk-GMSDTOIJ.js.map

package/dist/{chunk-3OI4ZHJZ.js → chunk-IFKADCYL.js}

@@ -12,6 +12,7 @@ import {
   isClaudeFastMode,
   isDefaultRemoteMcpConnection,
   isDeprecatedFramework,
+  isUnsetTimezone,
   markDailySessionSpawn,
   mcpWildcardsForServers,
   modelSlotsForFramework,
@@ -22,7 +23,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-IM5LTTRM.js";
+} from "./chunk-GADDU3OI.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -3743,6 +3744,10 @@ function syncClaudeCredsToRoot() {
     return false;
   }
 }
+function resolveSessionTz(agentTimezone, hostZone = Intl.DateTimeFormat().resolvedOptions().timeZone) {
+  if (!isUnsetTimezone(agentTimezone)) return agentTimezone.trim();
+  return hostZone.trim() || "UTC";
+}
 function resolveOAuthCredAction(claudeAuthMode, openRouterMode, policy, policyApplied) {
   if (policy && policyApplied) return policyPutsAnthropicApiKeyInEnv(policy) ? "purge" : "sync";
   if (openRouterMode) return "sync";
@@ -4016,7 +4021,7 @@ function ensureClaudeStateLayout(args) {
   mkdirSync6(join7(projects, encodeClaudeProjectPath(args.projectDir)), { recursive: true });
 }
 function buildDockerRunCommand(args) {
-  const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, passModelPolicyGateway, passModelPolicyModel, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting, forwardNotifyDispatch, forwardTurnFailureNotice, forwardChannelSecrets, agentClass } = args;
+  const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, passModelPolicyGateway, passModelPolicyModel, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting, forwardNotifyDispatch, forwardTimezone, forwardTurnFailureNotice, forwardChannelSecrets, agentClass } = args;
   const q = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
   const agentDir2 = join7(homeDir, ".augmented", codeName);
   const agentIdDir = join7(homeDir, ".augmented", agentId);
@@ -4077,6 +4082,7 @@ function buildDockerRunCommand(args) {
   if (forwardBlockTurnEndAllMarkers) envArgs.push("-e AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED");
   if (forwardKanbanWaiting) envArgs.push("-e AGT_KANBAN_WAITING_ENABLED");
   if (forwardNotifyDispatch) envArgs.push("-e AGT_NOTIFY_DISPATCH");
+  if (forwardTimezone) envArgs.push("-e TZ");
   if (forwardTurnFailureNotice) envArgs.push("-e AGT_WEDGE_TRANSIENT_NOTICE_ENABLED");
   for (const name of forwardChannelSecrets ?? []) {
     envArgs.push(`-e ${name}`);
@@ -4759,6 +4765,7 @@ function spawnSession(config, session) {
       "-e",
       `${CLAUDE_CODE_TMPDIR_ENV}=${agentTmpDirFor(dirname5(config.projectDir))}`
     );
+    tmuxSessionEnvArgs.push("-e", `TZ=${resolveSessionTz(config.agentTimezone)}`);
     if (config.perAgentApiKey) {
       tmuxSessionEnvArgs.push("-e", `AGT_API_KEY=${config.perAgentApiKey}`);
     }
@@ -4831,6 +4838,24 @@ function spawnSession(config, session) {
       // silent fallback to the host's auth rather than a visible failure.
       passModelPolicyGateway: policyEnvActive,
       passModelPolicyModel: policyModelActive,
+      // CS-1746: the container's clock must match the pane's, and this is
+      // UNCONDITIONAL because the pane's now is too.
+      //
+      // This read `!isUnsetTimezone(config.agentTimezone)` until CodeRabbit
+      // caught it on #6319, and it was stale by one commit of my own doing.
+      // When the tmux push was conditional the predicates matched; once I
+      // made the session always state a zone (`TZ=UTC` for a zone-less
+      // agent), this gate became the surviving half of the very asymmetry
+      // the other half was added to remove. A zone-less docker agent got
+      // `TZ=UTC` on its session and NO `-e TZ` into its container, so the
+      // container fell through to the IMAGE's timezone - which a custom
+      // isolation image is free to set to something other than UTC.
+      //
+      // Always forwarding is also simply correct now: there is no longer a
+      // spawn that leaves `TZ` unset, so there is nothing for a conditional
+      // to select. The helper keeps its own `if (forwardTimezone)` — that
+      // is the helper's contract, not this call site's decision.
+      forwardTimezone: true,
       egress,
       // ENG-6476: forward the reply-routing flag env if it will be present in the
       // session env (operator-set OR materialized from the flag above).
@@ -5685,6 +5710,7 @@ export {
   modelPolicyEgressDomains,
   failoverRestartNotice,
   policyResolvedModel,
+  resolveSessionTz,
   resolveOAuthCredAction,
   resolveClaudeBinary,
   isolationMode,
@@ -5750,4 +5776,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-3OI4ZHJZ.js.map
+//# sourceMappingURL=chunk-IFKADCYL.js.map