@integrity-labs/agt-cli 0.28.506 → 0.28.508

package/dist/{claude-pair-runtime-7CZWWZJ2.js → claude-pair-runtime-YQ7V5TS6.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-RAXQFDPB.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-VX37ESOS.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-7CZWWZJ2.js.map
+//# sourceMappingURL=claude-pair-runtime-YQ7V5TS6.js.map

package/dist/lib/manager-worker.js

@@ -53,7 +53,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-43UIRCO7.js";
+} from "../chunk-GK3TSZ4S.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -173,7 +173,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-SMHHGXI5.js";
+} from "../chunk-LNPJI2AE.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -328,7 +328,12 @@ function withResolvedRemoteMcp(integration) {
   return {
     ...integration,
     remoteMcp: integration.remote_mcp ?? void 0,
-    stdioMcp: integration.stdio_mcp === true ? true : void 0
+    stdioMcp: integration.stdio_mcp === true ? true : void 0,
+    // ENG-8344: same seam, same reason. Only the exact string 'broker' opts a
+    // row into use-time credential delivery — anything else (including a value
+    // a newer API might add later) reads as today's env delivery, so an
+    // unrecognised value can never strip an agent's `git`/`gh` credentials.
+    credentialDelivery: integration.credential_delivery === "broker" ? "broker" : void 0
   };
 }
 
@@ -1047,10 +1052,17 @@ function orphanedRemoteMcpKeys(mcpServers, expectedIntegrationKeys) {
 // src/lib/auto-resume.ts
 var DEFAULT_QUIET_MS = 18e5;
 var DEFAULT_BACKOFF_RESET_MS = 864e5;
-function readAutoResumeConfig(env = process.env) {
+var AUTO_RESUME_FLAG_KEY = "auto-resume-enabled";
+function readAutoResumeEnvOverride(env = process.env) {
   const raw = (env["AGT_AUTO_RESUME_ENABLED"] ?? "").trim().toLowerCase();
+  if (raw === "") return void 0;
+  if (raw === "1" || raw === "true" || raw === "yes" || raw === "on") return true;
+  if (raw === "0" || raw === "false" || raw === "no" || raw === "off") return false;
+  return void 0;
+}
+function readAutoResumeConfig(opts = {}) {
   return {
-    enabled: raw === "1" || raw === "true" || raw === "yes" || raw === "on",
+    enabled: readAutoResumeEnvOverride(opts.env ?? process.env) ?? opts.flagEnabled ?? false,
     quietMs: readEnvNumber("AGT_AUTO_RESUME_QUIET_MS", DEFAULT_QUIET_MS),
     backoffResetMs: readEnvNumber("AGT_AUTO_RESUME_BACKOFF_RESET_MS", DEFAULT_BACKOFF_RESET_MS)
   };
@@ -9092,8 +9104,22 @@ function maybeAutoResume(agent) {
   if (trip && autoResumeStandDowns.has(`${codeName}:${trip.trippedAt}`)) return;
   const decision = decideAutoResume({
     trip,
+    // Rebase note: `main` replaced the raw `autoResumeMarkers.get(codeName)` read
+    // with the `getAutoResumeMarker(codeName)` accessor while this branch was
+    // open. Both sides of the conflict are independent - that change is about
+    // WHERE the marker comes from, this branch's is about how the CONFIG is
+    // resolved - so both are kept.
     marker: getAutoResumeMarker(codeName),
-    config: readAutoResumeConfig(),
+    // ENG-8395: gate resolved PER AGENT. getBooleanForAgent applies
+    // env override (AGT_AUTO_RESUME_ENABLED) → this agent's heartbeat override →
+    // host-wide flag → compiled default false. That per-agent layer is the point
+    // of the ticket: the env var's grain is the whole host, so arming one agent
+    // on a 14-agent host was impossible before. readAutoResumeConfig re-applies
+    // the env layer on top (same precedence, idempotent) so the env override
+    // still wins even for a caller that passes no flag value.
+    config: readAutoResumeConfig({
+      flagEnabled: hostFlagStore().getBooleanForAgent(AUTO_RESUME_FLAG_KEY, agent.agent_id)
+    }),
     now: Date.now()
   });
   if (decision.action === "skip") {
@@ -10012,7 +10038,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.506" : "dev";
+var agtCliVersion = true ? "0.28.508" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11219,7 +11245,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-RAXQFDPB.js");
+      const { collectDiagnostics } = await import("../persistent-session-VX37ESOS.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11326,7 +11352,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-RAXQFDPB.js");
+      const { collectDiagnostics } = await import("../persistent-session-VX37ESOS.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11441,7 +11467,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-PBWABVLJ.js");
+      } = await import("../responsiveness-probe-5MEW5XNI.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11505,7 +11531,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-PBWABVLJ.js");
+        } = await import("../responsiveness-probe-5MEW5XNI.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -14997,7 +15023,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-RAXQFDPB.js");
+        const { collectDiagnostics } = await import("../persistent-session-VX37ESOS.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15047,7 +15073,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-RAXQFDPB.js");
+      const { collectDiagnostics } = await import("../persistent-session-VX37ESOS.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15565,7 +15591,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-7CZWWZJ2.js");
+  } = await import("../claude-pair-runtime-YQ7V5TS6.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));