@integrity-labs/agt-cli 0.28.362 → 0.28.363

package/dist/{claude-pair-runtime-LKXINT7K.js → claude-pair-runtime-BRYGVIXA.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-7VMIE4G4.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-7ZSQWMJS.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-LKXINT7K.js.map
+//# sourceMappingURL=claude-pair-runtime-BRYGVIXA.js.map

package/dist/lib/manager-worker.js

@@ -43,7 +43,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-B2SWCMJ7.js";
+} from "../chunk-ERJ5XR42.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -146,7 +146,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-3D7IBJYZ.js";
+} from "../chunk-JRML25UU.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -9071,7 +9071,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.362" : "dev";
+var agtCliVersion = true ? "0.28.363" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -10090,7 +10090,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-7VMIE4G4.js");
+      const { collectDiagnostics } = await import("../persistent-session-7ZSQWMJS.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -10189,7 +10189,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-7VMIE4G4.js");
+      const { collectDiagnostics } = await import("../persistent-session-7ZSQWMJS.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -10344,7 +10344,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-XJ7DQX4M.js");
+      } = await import("../responsiveness-probe-UTKN3UYC.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -10376,7 +10376,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-XJ7DQX4M.js");
+        } = await import("../responsiveness-probe-UTKN3UYC.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-HYOOQV4A.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -13531,7 +13531,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-7VMIE4G4.js");
+        const { collectDiagnostics } = await import("../persistent-session-7ZSQWMJS.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -13581,7 +13581,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-7VMIE4G4.js");
+      const { collectDiagnostics } = await import("../persistent-session-7ZSQWMJS.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -14079,7 +14079,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-LKXINT7K.js");
+  } = await import("../claude-pair-runtime-BRYGVIXA.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -33070,6 +33070,48 @@ var INTEGRATION_REGISTRY = [
       ]
     }
   },
+  {
+    id: "browserbase",
+    name: "Browserbase",
+    category: "workspace-productivity",
+    description: "A hosted browser your agents drive to operate real websites, behind residential proxies and staying signed in via a per-agent encrypted login profile. An operator logs an agent into a site once through a secure live view; every later session reuses that authenticated profile - no credential to enter and the agent never handles the login. A lower-level, self-driven alternative to Deck Browser: Augmented Team manages the Browserbase account for you and gives each agent its own isolated login profile.",
+    // Browserbase is REST-only (base https://api.browserbase.com/v1, `X-BB-API-Key`
+    // header - NOT Bearer) and ships NO MCP server, so the agent-facing tools are
+    // brokered server-side (browserbase-broker.ts). It is a PREMIUM integration on
+    // the Deck model (ENG-7947): Augmented owns ONE Browserbase account that every
+    // customer agent's sessions bill back to, so the account key is a single
+    // platform-held secret (`BROWSERBASE_ACCOUNT_KEY`), NOT a per-agent credential.
+    // Auth type is `none` - customers never enter a key. Per-agent isolation is a
+    // per-agent Context (persistent, per-context-encrypted auth store) provisioned
+    // via POST /:id/provision-browserbase; the id lands in
+    // `agent_integrations.config.browserbase_context_id`. Browserbase exposes no
+    // key-minting admin API, so isolation is on Contexts, not per-agent keys.
+    // Unlike Deck (an autonomous task runner), Browserbase is raw browser
+    // infrastructure: the broker mints a session and returns a session-scoped
+    // connect url the agent drives itself; proxies require a Browserbase paid plan.
+    supported_auth_types: ["none"],
+    capabilities: [
+      { id: "browserbase:provision", name: "Provision Agent Access", description: "Provision a per-agent Browserbase Context (persistent login profile) under the account key", access: "admin" },
+      { id: "browserbase:run", name: "Run Browser Sessions", description: "Open and release proxied browser sessions bound to the agent Context (open_session, release_session)", access: "write" },
+      { id: "browserbase:observe", name: "Observe Sessions", description: "Read session status and proxy usage (get_session)", access: "read" }
+    ],
+    docs_url: "https://docs.browserbase.com/",
+    beta: true,
+    // ENG-7947: PREMIUM, usage-priced. Every session bills back to Augmented's
+    // single account key as proxy data + session time, so it is gated on a per-org
+    // opt-in and metered. `meters` declares the billable operations; the priced
+    // rate card (integration_rate_cards) holds the amounts. Each event_type must
+    // match what browserbase-broker writes to integration_usage_events at release
+    // (proxy_mb, session_minute).
+    premium: {
+      pricing: "usage",
+      note: "Billed per proxy megabyte and per session-minute.",
+      meters: [
+        { event_type: "proxy_mb", unit: "MB", label: "Proxy data" },
+        { event_type: "session_minute", unit: "minute", label: "Session time" }
+      ]
+    }
+  },
   {
     id: "elevenlabs",
     name: "ElevenLabs",

package/dist/mcp/origami.js

@@ -38869,6 +38869,48 @@ var INTEGRATION_REGISTRY = [
       ]
     }
   },
+  {
+    id: "browserbase",
+    name: "Browserbase",
+    category: "workspace-productivity",
+    description: "A hosted browser your agents drive to operate real websites, behind residential proxies and staying signed in via a per-agent encrypted login profile. An operator logs an agent into a site once through a secure live view; every later session reuses that authenticated profile - no credential to enter and the agent never handles the login. A lower-level, self-driven alternative to Deck Browser: Augmented Team manages the Browserbase account for you and gives each agent its own isolated login profile.",
+    // Browserbase is REST-only (base https://api.browserbase.com/v1, `X-BB-API-Key`
+    // header - NOT Bearer) and ships NO MCP server, so the agent-facing tools are
+    // brokered server-side (browserbase-broker.ts). It is a PREMIUM integration on
+    // the Deck model (ENG-7947): Augmented owns ONE Browserbase account that every
+    // customer agent's sessions bill back to, so the account key is a single
+    // platform-held secret (`BROWSERBASE_ACCOUNT_KEY`), NOT a per-agent credential.
+    // Auth type is `none` - customers never enter a key. Per-agent isolation is a
+    // per-agent Context (persistent, per-context-encrypted auth store) provisioned
+    // via POST /:id/provision-browserbase; the id lands in
+    // `agent_integrations.config.browserbase_context_id`. Browserbase exposes no
+    // key-minting admin API, so isolation is on Contexts, not per-agent keys.
+    // Unlike Deck (an autonomous task runner), Browserbase is raw browser
+    // infrastructure: the broker mints a session and returns a session-scoped
+    // connect url the agent drives itself; proxies require a Browserbase paid plan.
+    supported_auth_types: ["none"],
+    capabilities: [
+      { id: "browserbase:provision", name: "Provision Agent Access", description: "Provision a per-agent Browserbase Context (persistent login profile) under the account key", access: "admin" },
+      { id: "browserbase:run", name: "Run Browser Sessions", description: "Open and release proxied browser sessions bound to the agent Context (open_session, release_session)", access: "write" },
+      { id: "browserbase:observe", name: "Observe Sessions", description: "Read session status and proxy usage (get_session)", access: "read" }
+    ],
+    docs_url: "https://docs.browserbase.com/",
+    beta: true,
+    // ENG-7947: PREMIUM, usage-priced. Every session bills back to Augmented's
+    // single account key as proxy data + session time, so it is gated on a per-org
+    // opt-in and metered. `meters` declares the billable operations; the priced
+    // rate card (integration_rate_cards) holds the amounts. Each event_type must
+    // match what browserbase-broker writes to integration_usage_events at release
+    // (proxy_mb, session_minute).
+    premium: {
+      pricing: "usage",
+      note: "Billed per proxy megabyte and per session-minute.",
+      meters: [
+        { event_type: "proxy_mb", unit: "MB", label: "Proxy data" },
+        { event_type: "session_minute", unit: "minute", label: "Session time" }
+      ]
+    }
+  },
   {
     id: "elevenlabs",
     name: "ElevenLabs",

package/dist/mcp/slack-channel.js

@@ -32752,6 +32752,48 @@ var INTEGRATION_REGISTRY = [
       ]
     }
   },
+  {
+    id: "browserbase",
+    name: "Browserbase",
+    category: "workspace-productivity",
+    description: "A hosted browser your agents drive to operate real websites, behind residential proxies and staying signed in via a per-agent encrypted login profile. An operator logs an agent into a site once through a secure live view; every later session reuses that authenticated profile - no credential to enter and the agent never handles the login. A lower-level, self-driven alternative to Deck Browser: Augmented Team manages the Browserbase account for you and gives each agent its own isolated login profile.",
+    // Browserbase is REST-only (base https://api.browserbase.com/v1, `X-BB-API-Key`
+    // header - NOT Bearer) and ships NO MCP server, so the agent-facing tools are
+    // brokered server-side (browserbase-broker.ts). It is a PREMIUM integration on
+    // the Deck model (ENG-7947): Augmented owns ONE Browserbase account that every
+    // customer agent's sessions bill back to, so the account key is a single
+    // platform-held secret (`BROWSERBASE_ACCOUNT_KEY`), NOT a per-agent credential.
+    // Auth type is `none` - customers never enter a key. Per-agent isolation is a
+    // per-agent Context (persistent, per-context-encrypted auth store) provisioned
+    // via POST /:id/provision-browserbase; the id lands in
+    // `agent_integrations.config.browserbase_context_id`. Browserbase exposes no
+    // key-minting admin API, so isolation is on Contexts, not per-agent keys.
+    // Unlike Deck (an autonomous task runner), Browserbase is raw browser
+    // infrastructure: the broker mints a session and returns a session-scoped
+    // connect url the agent drives itself; proxies require a Browserbase paid plan.
+    supported_auth_types: ["none"],
+    capabilities: [
+      { id: "browserbase:provision", name: "Provision Agent Access", description: "Provision a per-agent Browserbase Context (persistent login profile) under the account key", access: "admin" },
+      { id: "browserbase:run", name: "Run Browser Sessions", description: "Open and release proxied browser sessions bound to the agent Context (open_session, release_session)", access: "write" },
+      { id: "browserbase:observe", name: "Observe Sessions", description: "Read session status and proxy usage (get_session)", access: "read" }
+    ],
+    docs_url: "https://docs.browserbase.com/",
+    beta: true,
+    // ENG-7947: PREMIUM, usage-priced. Every session bills back to Augmented's
+    // single account key as proxy data + session time, so it is gated on a per-org
+    // opt-in and metered. `meters` declares the billable operations; the priced
+    // rate card (integration_rate_cards) holds the amounts. Each event_type must
+    // match what browserbase-broker writes to integration_usage_events at release
+    // (proxy_mb, session_minute).
+    premium: {
+      pricing: "usage",
+      note: "Billed per proxy megabyte and per session-minute.",
+      meters: [
+        { event_type: "proxy_mb", unit: "MB", label: "Proxy data" },
+        { event_type: "session_minute", unit: "minute", label: "Session time" }
+      ]
+    }
+  },
   {
     id: "elevenlabs",
     name: "ElevenLabs",

package/dist/mcp/telegram-channel.js

@@ -33102,6 +33102,48 @@ var INTEGRATION_REGISTRY = [
       ]
     }
   },
+  {
+    id: "browserbase",
+    name: "Browserbase",
+    category: "workspace-productivity",
+    description: "A hosted browser your agents drive to operate real websites, behind residential proxies and staying signed in via a per-agent encrypted login profile. An operator logs an agent into a site once through a secure live view; every later session reuses that authenticated profile - no credential to enter and the agent never handles the login. A lower-level, self-driven alternative to Deck Browser: Augmented Team manages the Browserbase account for you and gives each agent its own isolated login profile.",
+    // Browserbase is REST-only (base https://api.browserbase.com/v1, `X-BB-API-Key`
+    // header - NOT Bearer) and ships NO MCP server, so the agent-facing tools are
+    // brokered server-side (browserbase-broker.ts). It is a PREMIUM integration on
+    // the Deck model (ENG-7947): Augmented owns ONE Browserbase account that every
+    // customer agent's sessions bill back to, so the account key is a single
+    // platform-held secret (`BROWSERBASE_ACCOUNT_KEY`), NOT a per-agent credential.
+    // Auth type is `none` - customers never enter a key. Per-agent isolation is a
+    // per-agent Context (persistent, per-context-encrypted auth store) provisioned
+    // via POST /:id/provision-browserbase; the id lands in
+    // `agent_integrations.config.browserbase_context_id`. Browserbase exposes no
+    // key-minting admin API, so isolation is on Contexts, not per-agent keys.
+    // Unlike Deck (an autonomous task runner), Browserbase is raw browser
+    // infrastructure: the broker mints a session and returns a session-scoped
+    // connect url the agent drives itself; proxies require a Browserbase paid plan.
+    supported_auth_types: ["none"],
+    capabilities: [
+      { id: "browserbase:provision", name: "Provision Agent Access", description: "Provision a per-agent Browserbase Context (persistent login profile) under the account key", access: "admin" },
+      { id: "browserbase:run", name: "Run Browser Sessions", description: "Open and release proxied browser sessions bound to the agent Context (open_session, release_session)", access: "write" },
+      { id: "browserbase:observe", name: "Observe Sessions", description: "Read session status and proxy usage (get_session)", access: "read" }
+    ],
+    docs_url: "https://docs.browserbase.com/",
+    beta: true,
+    // ENG-7947: PREMIUM, usage-priced. Every session bills back to Augmented's
+    // single account key as proxy data + session time, so it is gated on a per-org
+    // opt-in and metered. `meters` declares the billable operations; the priced
+    // rate card (integration_rate_cards) holds the amounts. Each event_type must
+    // match what browserbase-broker writes to integration_usage_events at release
+    // (proxy_mb, session_minute).
+    premium: {
+      pricing: "usage",
+      note: "Billed per proxy megabyte and per session-minute.",
+      meters: [
+        { event_type: "proxy_mb", unit: "MB", label: "Proxy data" },
+        { event_type: "session_minute", unit: "minute", label: "Session time" }
+      ]
+    }
+  },
   {
     id: "elevenlabs",
     name: "ElevenLabs",

package/dist/{persistent-session-7VMIE4G4.js → persistent-session-7ZSQWMJS.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-3D7IBJYZ.js";
+} from "./chunk-JRML25UU.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-7VMIE4G4.js.map
+//# sourceMappingURL=persistent-session-7ZSQWMJS.js.map

package/dist/{responsiveness-probe-XJ7DQX4M.js → responsiveness-probe-UTKN3UYC.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-3D7IBJYZ.js";
+} from "./chunk-JRML25UU.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -437,4 +437,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-XJ7DQX4M.js.map
+//# sourceMappingURL=responsiveness-probe-UTKN3UYC.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.362",
+  "version": "0.28.363",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {