@integrity-labs/agt-cli 0.28.1189 → 0.28.1190

package/dist/{claude-code-updater-CQ2SWFEJ.js → claude-code-updater-IU23JJZI.js}

@@ -13,9 +13,9 @@ import {
   probeClaudeInstalls,
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
-} from "./chunk-BG7IPLTE.js";
+} from "./chunk-55M26Q4M.js";
 import "./chunk-XWVM4KPK.js";
-import "./chunk-M5QY6SXB.js";
+import "./chunk-7GZKHF45.js";
 import "./chunk-AIUIMEUS.js";
 import "./chunk-DGUM43GV.js";
 export {
@@ -34,4 +34,4 @@ export {
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
 };
-//# sourceMappingURL=claude-code-updater-CQ2SWFEJ.js.map
+//# sourceMappingURL=claude-code-updater-IU23JJZI.js.map

package/dist/{claude-pair-runtime-N54HX4ZR.js → claude-pair-runtime-GMXVV5AJ.js}

@@ -8,7 +8,7 @@ import {
 import {
   redactPaneFrame,
   sanitizeTerminalFrame
-} from "./chunk-M5QY6SXB.js";
+} from "./chunk-7GZKHF45.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -321,7 +321,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-NL7N3MA4.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-7PBVDLFI.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -836,4 +836,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-N54HX4ZR.js.map
+//# sourceMappingURL=claude-pair-runtime-GMXVV5AJ.js.map

package/dist/lib/manager-worker.js

@@ -74,6 +74,7 @@ import {
   reapStaleMcpChildren,
   reaperRestartBreakerReason,
   reconstructQuarantinedMcpServerEntry,
+  redactKnownValues,
   requireHost,
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
@@ -82,7 +83,7 @@ import {
   tripClass,
   writeEtcEnvironment,
   writeProfileDScript
-} from "../chunk-6C22ELAZ.js";
+} from "../chunk-NVLV6XHL.js";
 import {
   CLAUDE_CODE_SECURITY_FLOOR,
   SELF_UPDATE_TIMEOUTS,
@@ -96,7 +97,7 @@ import {
   runSafeCleanup,
   tightestDiskStat,
   withPackageCacheLock
-} from "../chunk-BG7IPLTE.js";
+} from "../chunk-55M26Q4M.js";
 import {
   rewriteSupervisorApiKey,
   supervisorChannelsRefusing
@@ -189,7 +190,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-CJ3KE25W.js";
+} from "../chunk-EFTLDAKN.js";
 import {
   isAgentIdle,
   isStaleForToday,
@@ -199,7 +200,7 @@ import {
   sessionTranscriptDir,
   subagentActivityAgeSeconds,
   transcriptActivityAgeSeconds
-} from "../chunk-GYY5LC6U.js";
+} from "../chunk-KV6ZNGTG.js";
 import {
   classifyUnanswerablePane,
   focusedConfirmDialogBlock,
@@ -325,7 +326,7 @@ import {
   stabiliseResetInstant,
   sumTranscriptUsageInWindow,
   summarizeTranscriptActivity
-} from "../chunk-M5QY6SXB.js";
+} from "../chunk-7GZKHF45.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -2939,7 +2940,13 @@ async function runConnectivityProbes(integrations, options = {}) {
       integration_id: integ.id,
       scope: integ.scope,
       status: outcome.status,
-      ...outcome.message ? { message: outcome.message } : {},
+      // ENG-11374: this message is stored and shown on operator reads, and every probe
+      // kind passes through here, so its secrets are removed here.
+      ...outcome.message ? {
+        message: redactKnownValues(outcome.message, [process.env, options.probeEnv, integ.credentials]),
+        // Tells the API it may store this message: see `message_redacted` below.
+        message_redacted: true
+      } : {},
       // ENG-8226: report WHAT the probe did, not just what it concluded. The
       // API persists this to `last_connectivity_evidence` so an `ok` is
       // self-describing and a green verdict can be justified rather than
@@ -15481,7 +15488,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-BMLAPOIY.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-RSH4EMQP.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -15953,7 +15960,7 @@ async function runAgentConnectivityProbes(agent, integrations, projectDir) {
         remote_mcp: i.remote_mcp ?? null
       };
     }),
-    { probeDeps, intervalMs: intervalSec * 1e3 }
+    { probeDeps, probeEnv, intervalMs: intervalSec * 1e3 }
   );
   if (result.reports.length > 0) {
     await api.post("/host/integration-connectivity", {
@@ -16278,7 +16285,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1189" : "dev";
+var agtCliVersion = true ? "0.28.1190" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -18182,7 +18189,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-NL7N3MA4.js");
+      const { collectDiagnostics } = await import("../persistent-session-7PBVDLFI.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor)
@@ -18325,7 +18332,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-NL7N3MA4.js");
+      const { collectDiagnostics } = await import("../persistent-session-7PBVDLFI.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor) : void 0;
       let tailscaleHostname;
@@ -18580,7 +18587,7 @@ async function pollCycleInner() {
       }
       try {
         const desiredClaudeCodeVersion = hbResp?.desired_claude_code_version?.trim();
-        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-CQ2SWFEJ.js");
+        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-IU23JJZI.js");
         const securityFloor = currentSecurityFloor();
         claudeUpdaterInFlight = true;
         if (desiredClaudeCodeVersion && (claudePairLoop.busy || claudePairingInProgress())) {
@@ -18615,7 +18622,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-BMLAPOIY.js");
+      } = await import("../responsiveness-probe-RSH4EMQP.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -18732,7 +18739,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-BMLAPOIY.js");
+        } = await import("../responsiveness-probe-RSH4EMQP.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -19018,7 +19025,7 @@ async function pollCycleInner() {
                 }
               }
             );
-            const { parkPendingInbound } = await import("../responsiveness-probe-BMLAPOIY.js");
+            const { parkPendingInbound } = await import("../responsiveness-probe-RSH4EMQP.js");
             const { parked, deadLettered } = parkPendingInbound(codeName, new Date(fatalNowMs));
             paneFatalStreak.delete(codeName);
             paneFatalRestarts.set(codeName, [...history, fatalNowMs]);
@@ -19049,7 +19056,7 @@ async function pollCycleInner() {
         TRANSCRIPT_MOUNT_ESCALATION_REFRESH_MS,
         bindSourceEscalations
       } = await import("../transcript-mount-health-OHE6IVJV.js");
-      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-NL7N3MA4.js");
+      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-7PBVDLFI.js");
       const mountConfig = resolveTranscriptMountConfig();
       const liveAgents = agentState.persistentSessionAgents;
       for (const tracked of [
@@ -19214,7 +19221,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-PTHDHHK4.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-M2YABEQU.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -23916,7 +23923,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-BMLAPOIY.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-RSH4EMQP.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -23959,7 +23966,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-NL7N3MA4.js");
+        const { collectDiagnostics } = await import("../persistent-session-7PBVDLFI.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor)
@@ -24010,7 +24017,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-NL7N3MA4.js");
+      const { collectDiagnostics } = await import("../persistent-session-7PBVDLFI.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor)
@@ -24712,7 +24719,7 @@ async function processClaudePairSessions(agents) {
     snapshotPairConfig,
     // ENG-11659: result -> report body + the manager.log line that records it.
     planPairStartReport
-  } = await import("../claude-pair-runtime-N54HX4ZR.js");
+  } = await import("../claude-pair-runtime-GMXVV5AJ.js");
   const { resetClaudeSignin, describeSigninResetForLog, describeSigninResetFailure } = await import("../claude-signin-reset-6IJMMVYG.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);