@integrity-labs/agt-cli 0.28.504 → 0.28.506

package/dist/{claude-pair-runtime-E3KMHKQQ.js → claude-pair-runtime-7CZWWZJ2.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-AB4SAH5B.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-RAXQFDPB.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-E3KMHKQQ.js.map
+//# sourceMappingURL=claude-pair-runtime-7CZWWZJ2.js.map

package/dist/lib/manager-worker.js

@@ -27,6 +27,7 @@ import {
   getCachedClaudeAuthMode,
   getHostId,
   givenUpMcpServerKeys,
+  isIntegrationBucketedReason,
   isProvisioningReloadReason,
   isTransientAuthFailure,
   liveProxyExtraHeaderVars,
@@ -52,7 +53,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-GXEXHVNW.js";
+} from "../chunk-43UIRCO7.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -172,7 +173,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-HEUDF73X.js";
+} from "../chunk-SMHHGXI5.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -8977,7 +8978,7 @@ function recordRestartForBreaker(codeName, reason) {
     return;
   }
   let integrationKey;
-  if (isProvisioningReloadReason(reason)) {
+  if (isIntegrationBucketedReason(reason)) {
     const attribution = agentState.provisioningAttribution.get(codeName);
     if (attribution && Date.now() - attribution.at <= RESTART_BREAKER_PROVISIONING_WINDOW_MS) {
       integrationKey = attribution.key;
@@ -9259,7 +9260,12 @@ function restartReasonBindsNewMcp(breakerReason) {
   // above always described it, but the path passed no breakerReason so it never
   // hit this predicate. Including it arms the ENG-6174 respawn verification for
   // the ONE real respawn of an integration add.
-  breakerReason === "integration-change" || // ENG-7541: a 'credential-rotation' respawn IS the env-only re-mint path
+  breakerReason === "integration-change" || // ENG-8388: the operator-attributed variant is the SAME reload with a
+  // different breaker tally - it binds a changed MCP set identically. Omitting
+  // it here would mean attributing a reload to a human silently disabled the
+  // respawn verification for it, i.e. the fix would break the thing it was
+  // meant to leave alone.
+  breakerReason === "operator-integration-change" || // ENG-7541: a 'credential-rotation' respawn IS the env-only re-mint path
   // (ENG-7510), just tagged with a non-tripping breaker class. Once its stop
   // fires it must behave IDENTICALLY to 'hot-reload-mcp' — come back
   // immediately so the agent picks up the fresh credential, and arm the
@@ -9272,11 +9278,16 @@ function restartReasonBindsNewMcp(breakerReason) {
   // that the stop is ungated.
   breakerReason === "credential-rotation";
 }
-function dashboardRestartBreakerReason(restartReason) {
-  return restartReason === "integration-change" ? "integration-change" : void 0;
+function dashboardRestartBreakerReason(restartReason, restartActor) {
+  if (restartReason !== "integration-change") return void 0;
+  return restartActor === "user" ? "operator-integration-change" : "integration-change";
 }
 function shouldReportRestartToAudit(breakerReason) {
-  return !!breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag" && breakerReason !== "integration-change";
+  return !!breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag" && breakerReason !== "integration-change" && // ENG-8388: the operator-attributed variant is the SAME dashboard reload,
+  // audited server-side at the same API route. Without this line, attributing
+  // a reload to a human would start double-logging it - a fix whose only
+  // visible effect is duplicated audit rows.
+  breakerReason !== "operator-integration-change";
 }
 function reportRestartEvent(codeName, breakerReason, auditDetail) {
   if (!shouldReportRestartToAudit(breakerReason)) return;
@@ -10001,7 +10012,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.504" : "dev";
+var agtCliVersion = true ? "0.28.506" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11208,7 +11219,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-AB4SAH5B.js");
+      const { collectDiagnostics } = await import("../persistent-session-RAXQFDPB.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11315,7 +11326,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-AB4SAH5B.js");
+      const { collectDiagnostics } = await import("../persistent-session-RAXQFDPB.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11430,7 +11441,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-O4SCSCKC.js");
+      } = await import("../responsiveness-probe-PBWABVLJ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11494,7 +11505,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-O4SCSCKC.js");
+        } = await import("../responsiveness-probe-PBWABVLJ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -11726,7 +11737,7 @@ async function pollCycle() {
             es(`tmux kill-session -t agt-${agent.code_name} 2>/dev/null`, { stdio: "ignore" });
           } catch {
           }
-          const breakerReason = dashboardRestartBreakerReason(restartReason);
+          const breakerReason = dashboardRestartBreakerReason(restartReason, agent.restart_actor);
           stopPersistentSessionAndForgetMcpBaseline(agent.code_name, breakerReason);
           if (breakerReason && restartReasonBindsNewMcp(breakerReason)) {
             noteRestartRequested(agent.code_name, requested);
@@ -14986,7 +14997,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-AB4SAH5B.js");
+        const { collectDiagnostics } = await import("../persistent-session-RAXQFDPB.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15036,7 +15047,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-AB4SAH5B.js");
+      const { collectDiagnostics } = await import("../persistent-session-RAXQFDPB.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15554,7 +15565,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-E3KMHKQQ.js");
+  } = await import("../claude-pair-runtime-7CZWWZJ2.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));