@integrity-labs/agt-cli 0.28.484 → 0.28.486

package/dist/{chunk-I63LLKQJ.js → chunk-XP53UXQR.js}

@@ -30,7 +30,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-DNC5JGOV.js";
+} from "./chunk-SRR5XVWJ.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -4938,7 +4938,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.484" : "dev";
+var agtCliVersion = true ? "0.28.486" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -7667,4 +7667,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-I63LLKQJ.js.map
+//# sourceMappingURL=chunk-XP53UXQR.js.map

package/dist/{claude-pair-runtime-2XPTEGQR.js → claude-pair-runtime-STSHUESG.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-IBMUPQZ2.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-CEGPLUHO.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-2XPTEGQR.js.map
+//# sourceMappingURL=claude-pair-runtime-STSHUESG.js.map

package/dist/lib/manager-worker.js

@@ -44,7 +44,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-I63LLKQJ.js";
+} from "../chunk-XP53UXQR.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -162,7 +162,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-DNC5JGOV.js";
+} from "../chunk-SRR5XVWJ.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -9355,7 +9355,23 @@ function restartReasonBindsNewMcp(breakerReason) {
 function dashboardRestartBreakerReason(restartReason) {
   return restartReason === "integration-change" ? "integration-change" : void 0;
 }
-function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-reload-mcp", beforeStop) {
+function shouldReportRestartToAudit(breakerReason) {
+  return !!breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag" && breakerReason !== "integration-change";
+}
+function reportRestartEvent(codeName, breakerReason, auditDetail) {
+  if (!shouldReportRestartToAudit(breakerReason)) return;
+  const restartAgentId = agentState.codeNameToAgentId.get(codeName);
+  if (!restartAgentId) return;
+  void api.post("/host/restart-event", {
+    agent_id: restartAgentId,
+    source: breakerReason,
+    // ENG-8293: fall back to the source string (the pre-ENG-8293 shape)
+    // only when the caller supplied nothing better.
+    reason: auditDetail?.reason ?? breakerReason,
+    ...auditDetail?.detail ? { detail: auditDetail.detail } : {}
+  }).catch((err) => log(`[restart-event] report failed for '${codeName}': ${err.message}`));
+}
+function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-reload-mcp", beforeStop, auditDetail) {
   const existing = pendingSessionRestarts.get(codeName);
   if (existing) {
     const keepExistingWindowExempt = isWindowExemptRestartReason(existing.breakerReason) && !isWindowExemptRestartReason(breakerReason);
@@ -9379,7 +9395,17 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
         );
         deferLogThrottle.set(codeName, Date.now());
       }
-      scheduleSessionRestart(codeName, RESTART_DEFER_RECHECK_MS, reason, breakerReason, beforeStop);
+      scheduleSessionRestart(
+        codeName,
+        RESTART_DEFER_RECHECK_MS,
+        reason,
+        breakerReason,
+        beforeStop,
+        // Carry the audit detail across the re-arm: a restart held for the
+        // maintenance window must still be able to say what changed when it
+        // finally fires.
+        auditDetail
+      );
       return;
     }
     deferLogThrottle.delete(codeName);
@@ -9422,6 +9448,7 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
     sessionLaunchManagedStructure.delete(codeName);
     recordRestartForBreaker(codeName, breakerReason);
     log(`[hot-reload] Session stopped for '${codeName}' \u2014 will respawn with ${reason}`);
+    reportRestartEvent(codeName, breakerReason, { reason, detail: auditDetail });
     const bindsNewMcp = restartReasonBindsNewMcp(breakerReason);
     if (bindsNewMcp) {
       const prior = pendingRestartVerifications.get(codeName);
@@ -9435,7 +9462,7 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
     }
   }, delayMs);
   timer2.unref?.();
-  pendingSessionRestarts.set(codeName, { timer: timer2, reason, breakerReason, beforeStop });
+  pendingSessionRestarts.set(codeName, { timer: timer2, reason, breakerReason, beforeStop, auditDetail });
 }
 function cancelPendingSessionRestart(codeName) {
   pendingRestartVerifications.delete(codeName);
@@ -9861,19 +9888,7 @@ function stopPersistentSessionAndForgetMcpBaseline(codeName, breakerReason, gate
   if (breakerReason) {
     recordRestartForBreaker(codeName, breakerReason);
   }
-  if (breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag" && breakerReason !== "integration-change") {
-    const restartAgentId = agentState.codeNameToAgentId.get(codeName);
-    if (restartAgentId) {
-      void api.post("/host/restart-event", {
-        agent_id: restartAgentId,
-        source: breakerReason,
-        // ENG-8293: fall back to the source string (the pre-ENG-8293 shape)
-        // only when the caller supplied nothing better.
-        reason: auditDetail?.reason ?? breakerReason,
-        ...auditDetail?.detail ? { detail: auditDetail.detail } : {}
-      }).catch((err) => log(`[restart-event] report failed for '${codeName}': ${err.message}`));
-    }
-  }
+  reportRestartEvent(codeName, breakerReason, auditDetail);
 }
 var agentRuntimeTeardownDeps = {
   stopOpencodeServe: (codeName, teardownLog) => stopOpencodeSession(codeName, teardownLog),
@@ -10064,7 +10079,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.484" : "dev";
+var agtCliVersion = true ? "0.28.486" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11227,7 +11242,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
+      const { collectDiagnostics } = await import("../persistent-session-CEGPLUHO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11334,7 +11349,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
+      const { collectDiagnostics } = await import("../persistent-session-CEGPLUHO.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11448,7 +11463,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-QBLQIMZR.js");
+      } = await import("../responsiveness-probe-RBLOTOHD.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11512,7 +11527,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-QBLQIMZR.js");
+        } = await import("../responsiveness-probe-RBLOTOHD.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -13283,7 +13298,13 @@ async function processAgent(agent, agentStates) {
                 agent.code_name,
                 0,
                 `env-only integration change (${respawnVars.join(", ")})`,
-                envRespawnReason
+                envRespawnReason,
+                void 0,
+                // Structured "what changed" for the audit row. Var NAMES only —
+                // never values — and carried as string values under neutral
+                // keys, because the audit scrubber redacts by key name and
+                // would blank a key like `github_access_token` (ENG-8293).
+                { env_only_change: { vars: respawnVars, kind: envRespawnReason } }
               );
               log(
                 `[hot-reload] Scheduled respawn for '${agent.code_name}' to apply env-only integration change (no MCP child to reap): ${respawnVars.join(", ")} [reason=${envRespawnReason}] (ENG-7510/ENG-7541)`
@@ -14988,7 +15009,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
+        const { collectDiagnostics } = await import("../persistent-session-CEGPLUHO.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15038,7 +15059,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
+      const { collectDiagnostics } = await import("../persistent-session-CEGPLUHO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15496,7 +15517,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-2XPTEGQR.js");
+  } = await import("../claude-pair-runtime-STSHUESG.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));
@@ -16436,6 +16457,7 @@ export {
   reorderRestartedFirst,
   resolveManagedMcpServerId,
   restartReasonBindsNewMcp,
+  shouldReportRestartToAudit,
   shouldSkipRevokedCleanup,
   shouldUpdateOnLatest,
   stampClaudeCodeUpgradeMarker,