@integrity-labs/agt-cli 0.28.485 → 0.28.486

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-QFQTGSXQ.js";
+} from "../chunk-XP53UXQR.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.485" : "dev";
+var cliVersion = true ? "0.28.486" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.485" : "dev";
+var cliVersion2 = true ? "0.28.486" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-QFQTGSXQ.js → chunk-XP53UXQR.js}

@@ -4938,7 +4938,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.485" : "dev";
+var agtCliVersion = true ? "0.28.486" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -7667,4 +7667,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-QFQTGSXQ.js.map
+//# sourceMappingURL=chunk-XP53UXQR.js.map

package/dist/lib/manager-worker.js

@@ -44,7 +44,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-QFQTGSXQ.js";
+} from "../chunk-XP53UXQR.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -9355,7 +9355,23 @@ function restartReasonBindsNewMcp(breakerReason) {
 function dashboardRestartBreakerReason(restartReason) {
   return restartReason === "integration-change" ? "integration-change" : void 0;
 }
-function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-reload-mcp", beforeStop) {
+function shouldReportRestartToAudit(breakerReason) {
+  return !!breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag" && breakerReason !== "integration-change";
+}
+function reportRestartEvent(codeName, breakerReason, auditDetail) {
+  if (!shouldReportRestartToAudit(breakerReason)) return;
+  const restartAgentId = agentState.codeNameToAgentId.get(codeName);
+  if (!restartAgentId) return;
+  void api.post("/host/restart-event", {
+    agent_id: restartAgentId,
+    source: breakerReason,
+    // ENG-8293: fall back to the source string (the pre-ENG-8293 shape)
+    // only when the caller supplied nothing better.
+    reason: auditDetail?.reason ?? breakerReason,
+    ...auditDetail?.detail ? { detail: auditDetail.detail } : {}
+  }).catch((err) => log(`[restart-event] report failed for '${codeName}': ${err.message}`));
+}
+function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-reload-mcp", beforeStop, auditDetail) {
   const existing = pendingSessionRestarts.get(codeName);
   if (existing) {
     const keepExistingWindowExempt = isWindowExemptRestartReason(existing.breakerReason) && !isWindowExemptRestartReason(breakerReason);
@@ -9379,7 +9395,17 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
         );
         deferLogThrottle.set(codeName, Date.now());
       }
-      scheduleSessionRestart(codeName, RESTART_DEFER_RECHECK_MS, reason, breakerReason, beforeStop);
+      scheduleSessionRestart(
+        codeName,
+        RESTART_DEFER_RECHECK_MS,
+        reason,
+        breakerReason,
+        beforeStop,
+        // Carry the audit detail across the re-arm: a restart held for the
+        // maintenance window must still be able to say what changed when it
+        // finally fires.
+        auditDetail
+      );
       return;
     }
     deferLogThrottle.delete(codeName);
@@ -9422,6 +9448,7 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
     sessionLaunchManagedStructure.delete(codeName);
     recordRestartForBreaker(codeName, breakerReason);
     log(`[hot-reload] Session stopped for '${codeName}' \u2014 will respawn with ${reason}`);
+    reportRestartEvent(codeName, breakerReason, { reason, detail: auditDetail });
     const bindsNewMcp = restartReasonBindsNewMcp(breakerReason);
     if (bindsNewMcp) {
       const prior = pendingRestartVerifications.get(codeName);
@@ -9435,7 +9462,7 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
     }
   }, delayMs);
   timer2.unref?.();
-  pendingSessionRestarts.set(codeName, { timer: timer2, reason, breakerReason, beforeStop });
+  pendingSessionRestarts.set(codeName, { timer: timer2, reason, breakerReason, beforeStop, auditDetail });
 }
 function cancelPendingSessionRestart(codeName) {
   pendingRestartVerifications.delete(codeName);
@@ -9861,19 +9888,7 @@ function stopPersistentSessionAndForgetMcpBaseline(codeName, breakerReason, gate
   if (breakerReason) {
     recordRestartForBreaker(codeName, breakerReason);
   }
-  if (breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag" && breakerReason !== "integration-change") {
-    const restartAgentId = agentState.codeNameToAgentId.get(codeName);
-    if (restartAgentId) {
-      void api.post("/host/restart-event", {
-        agent_id: restartAgentId,
-        source: breakerReason,
-        // ENG-8293: fall back to the source string (the pre-ENG-8293 shape)
-        // only when the caller supplied nothing better.
-        reason: auditDetail?.reason ?? breakerReason,
-        ...auditDetail?.detail ? { detail: auditDetail.detail } : {}
-      }).catch((err) => log(`[restart-event] report failed for '${codeName}': ${err.message}`));
-    }
-  }
+  reportRestartEvent(codeName, breakerReason, auditDetail);
 }
 var agentRuntimeTeardownDeps = {
   stopOpencodeServe: (codeName, teardownLog) => stopOpencodeSession(codeName, teardownLog),
@@ -10064,7 +10079,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.485" : "dev";
+var agtCliVersion = true ? "0.28.486" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -13283,7 +13298,13 @@ async function processAgent(agent, agentStates) {
                 agent.code_name,
                 0,
                 `env-only integration change (${respawnVars.join(", ")})`,
-                envRespawnReason
+                envRespawnReason,
+                void 0,
+                // Structured "what changed" for the audit row. Var NAMES only —
+                // never values — and carried as string values under neutral
+                // keys, because the audit scrubber redacts by key name and
+                // would blank a key like `github_access_token` (ENG-8293).
+                { env_only_change: { vars: respawnVars, kind: envRespawnReason } }
               );
               log(
                 `[hot-reload] Scheduled respawn for '${agent.code_name}' to apply env-only integration change (no MCP child to reap): ${respawnVars.join(", ")} [reason=${envRespawnReason}] (ENG-7510/ENG-7541)`
@@ -16436,6 +16457,7 @@ export {
   reorderRestartedFirst,
   resolveManagedMcpServerId,
   restartReasonBindsNewMcp,
+  shouldReportRestartToAudit,
   shouldSkipRevokedCleanup,
   shouldUpdateOnLatest,
   stampClaudeCodeUpgradeMarker,