@integrity-labs/agt-cli 0.28.505 → 0.28.507

package/dist/{claude-pair-runtime-R56JCRXJ.js → claude-pair-runtime-37TIOIJQ.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-JOWL7FDY.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-OMAAP4OU.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-R56JCRXJ.js.map
+//# sourceMappingURL=claude-pair-runtime-37TIOIJQ.js.map

package/dist/lib/manager-worker.js

@@ -27,6 +27,7 @@ import {
   getCachedClaudeAuthMode,
   getHostId,
   givenUpMcpServerKeys,
+  isIntegrationBucketedReason,
   isProvisioningReloadReason,
   isTransientAuthFailure,
   liveProxyExtraHeaderVars,
@@ -52,7 +53,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-3SKLJE7C.js";
+} from "../chunk-75NQ7UBH.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -172,7 +173,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-3BRI7LJZ.js";
+} from "../chunk-4PRR22KH.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -1046,10 +1047,17 @@ function orphanedRemoteMcpKeys(mcpServers, expectedIntegrationKeys) {
 // src/lib/auto-resume.ts
 var DEFAULT_QUIET_MS = 18e5;
 var DEFAULT_BACKOFF_RESET_MS = 864e5;
-function readAutoResumeConfig(env = process.env) {
+var AUTO_RESUME_FLAG_KEY = "auto-resume-enabled";
+function readAutoResumeEnvOverride(env = process.env) {
   const raw = (env["AGT_AUTO_RESUME_ENABLED"] ?? "").trim().toLowerCase();
+  if (raw === "") return void 0;
+  if (raw === "1" || raw === "true" || raw === "yes" || raw === "on") return true;
+  if (raw === "0" || raw === "false" || raw === "no" || raw === "off") return false;
+  return void 0;
+}
+function readAutoResumeConfig(opts = {}) {
   return {
-    enabled: raw === "1" || raw === "true" || raw === "yes" || raw === "on",
+    enabled: readAutoResumeEnvOverride(opts.env ?? process.env) ?? opts.flagEnabled ?? false,
     quietMs: readEnvNumber("AGT_AUTO_RESUME_QUIET_MS", DEFAULT_QUIET_MS),
     backoffResetMs: readEnvNumber("AGT_AUTO_RESUME_BACKOFF_RESET_MS", DEFAULT_BACKOFF_RESET_MS)
   };
@@ -8977,7 +8985,7 @@ function recordRestartForBreaker(codeName, reason) {
     return;
   }
   let integrationKey;
-  if (isProvisioningReloadReason(reason)) {
+  if (isIntegrationBucketedReason(reason)) {
     const attribution = agentState.provisioningAttribution.get(codeName);
     if (attribution && Date.now() - attribution.at <= RESTART_BREAKER_PROVISIONING_WINDOW_MS) {
       integrationKey = attribution.key;
@@ -9091,8 +9099,22 @@ function maybeAutoResume(agent) {
   if (trip && autoResumeStandDowns.has(`${codeName}:${trip.trippedAt}`)) return;
   const decision = decideAutoResume({
     trip,
+    // Rebase note: `main` replaced the raw `autoResumeMarkers.get(codeName)` read
+    // with the `getAutoResumeMarker(codeName)` accessor while this branch was
+    // open. Both sides of the conflict are independent - that change is about
+    // WHERE the marker comes from, this branch's is about how the CONFIG is
+    // resolved - so both are kept.
     marker: getAutoResumeMarker(codeName),
-    config: readAutoResumeConfig(),
+    // ENG-8395: gate resolved PER AGENT. getBooleanForAgent applies
+    // env override (AGT_AUTO_RESUME_ENABLED) → this agent's heartbeat override →
+    // host-wide flag → compiled default false. That per-agent layer is the point
+    // of the ticket: the env var's grain is the whole host, so arming one agent
+    // on a 14-agent host was impossible before. readAutoResumeConfig re-applies
+    // the env layer on top (same precedence, idempotent) so the env override
+    // still wins even for a caller that passes no flag value.
+    config: readAutoResumeConfig({
+      flagEnabled: hostFlagStore().getBooleanForAgent(AUTO_RESUME_FLAG_KEY, agent.agent_id)
+    }),
     now: Date.now()
   });
   if (decision.action === "skip") {
@@ -9259,7 +9281,12 @@ function restartReasonBindsNewMcp(breakerReason) {
   // above always described it, but the path passed no breakerReason so it never
   // hit this predicate. Including it arms the ENG-6174 respawn verification for
   // the ONE real respawn of an integration add.
-  breakerReason === "integration-change" || // ENG-7541: a 'credential-rotation' respawn IS the env-only re-mint path
+  breakerReason === "integration-change" || // ENG-8388: the operator-attributed variant is the SAME reload with a
+  // different breaker tally - it binds a changed MCP set identically. Omitting
+  // it here would mean attributing a reload to a human silently disabled the
+  // respawn verification for it, i.e. the fix would break the thing it was
+  // meant to leave alone.
+  breakerReason === "operator-integration-change" || // ENG-7541: a 'credential-rotation' respawn IS the env-only re-mint path
   // (ENG-7510), just tagged with a non-tripping breaker class. Once its stop
   // fires it must behave IDENTICALLY to 'hot-reload-mcp' — come back
   // immediately so the agent picks up the fresh credential, and arm the
@@ -9272,11 +9299,16 @@ function restartReasonBindsNewMcp(breakerReason) {
   // that the stop is ungated.
   breakerReason === "credential-rotation";
 }
-function dashboardRestartBreakerReason(restartReason) {
-  return restartReason === "integration-change" ? "integration-change" : void 0;
+function dashboardRestartBreakerReason(restartReason, restartActor) {
+  if (restartReason !== "integration-change") return void 0;
+  return restartActor === "user" ? "operator-integration-change" : "integration-change";
 }
 function shouldReportRestartToAudit(breakerReason) {
-  return !!breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag" && breakerReason !== "integration-change";
+  return !!breakerReason && breakerReason !== "agent-requested" && breakerReason !== "channel-restart-flag" && breakerReason !== "integration-change" && // ENG-8388: the operator-attributed variant is the SAME dashboard reload,
+  // audited server-side at the same API route. Without this line, attributing
+  // a reload to a human would start double-logging it - a fix whose only
+  // visible effect is duplicated audit rows.
+  breakerReason !== "operator-integration-change";
 }
 function reportRestartEvent(codeName, breakerReason, auditDetail) {
   if (!shouldReportRestartToAudit(breakerReason)) return;
@@ -10001,7 +10033,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.505" : "dev";
+var agtCliVersion = true ? "0.28.507" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11208,7 +11240,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-JOWL7FDY.js");
+      const { collectDiagnostics } = await import("../persistent-session-OMAAP4OU.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11315,7 +11347,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-JOWL7FDY.js");
+      const { collectDiagnostics } = await import("../persistent-session-OMAAP4OU.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11430,7 +11462,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-FBU2VB32.js");
+      } = await import("../responsiveness-probe-NRH2AQW6.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11494,7 +11526,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-FBU2VB32.js");
+        } = await import("../responsiveness-probe-NRH2AQW6.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -11726,7 +11758,7 @@ async function pollCycle() {
             es(`tmux kill-session -t agt-${agent.code_name} 2>/dev/null`, { stdio: "ignore" });
           } catch {
           }
-          const breakerReason = dashboardRestartBreakerReason(restartReason);
+          const breakerReason = dashboardRestartBreakerReason(restartReason, agent.restart_actor);
           stopPersistentSessionAndForgetMcpBaseline(agent.code_name, breakerReason);
           if (breakerReason && restartReasonBindsNewMcp(breakerReason)) {
             noteRestartRequested(agent.code_name, requested);
@@ -14986,7 +15018,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-JOWL7FDY.js");
+        const { collectDiagnostics } = await import("../persistent-session-OMAAP4OU.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15036,7 +15068,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-JOWL7FDY.js");
+      const { collectDiagnostics } = await import("../persistent-session-OMAAP4OU.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15554,7 +15586,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-R56JCRXJ.js");
+  } = await import("../claude-pair-runtime-37TIOIJQ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));