@integrity-labs/agt-cli 0.28.541 → 0.28.543

package/dist/{chunk-JQNSKZIC.js → chunk-VGOV5SSL.js}

@@ -42,7 +42,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-F63RM2RQ.js";
+} from "./chunk-QDCKLUU7.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5549,7 +5549,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.541" : "dev";
+var agtCliVersion = true ? "0.28.543" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8861,4 +8861,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-JQNSKZIC.js.map
+//# sourceMappingURL=chunk-VGOV5SSL.js.map

package/dist/{claude-pair-runtime-2UU67Q2T.js → claude-pair-runtime-34ZO2AFF.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-7GPDXRPK.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-MH5URKMO.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-2UU67Q2T.js.map
+//# sourceMappingURL=claude-pair-runtime-34ZO2AFF.js.map

package/dist/lib/manager-worker.js

@@ -53,7 +53,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-JQNSKZIC.js";
+} from "../chunk-VGOV5SSL.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -181,7 +181,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-F63RM2RQ.js";
+} from "../chunk-QDCKLUU7.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -4557,6 +4557,14 @@ function foldRuntimeAuthVerdict(input) {
 function heartbeatRuntimeAuthReport(probeVerdict) {
   return probeVerdict ?? void 0;
 }
+function heartbeatRuntimeAuthFields(probeVerdict) {
+  const reported = heartbeatRuntimeAuthReport(probeVerdict);
+  if (reported === void 0) return {};
+  return {
+    agent_runtime_authenticated: reported,
+    agent_runtime_auth_observed: true
+  };
+}
 
 // src/lib/manager/kanban/parsers.ts
 import { existsSync as existsSync8, readFileSync as readFileSync15 } from "fs";
@@ -10429,7 +10437,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.541" : "dev";
+var agtCliVersion = true ? "0.28.543" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11733,7 +11741,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-7GPDXRPK.js");
+      const { collectDiagnostics } = await import("../persistent-session-MH5URKMO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11841,7 +11849,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-7GPDXRPK.js");
+      const { collectDiagnostics } = await import("../persistent-session-MH5URKMO.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11890,8 +11898,11 @@ async function pollCycle() {
         // ENG-8623: the probe's verdict, or the field is OMITTED. The column is
         // named for a runtime observation and the API now stamps a freshness
         // timestamp beside it, so a file-derived value here would manufacture an
-        // observation nobody made. See `heartbeatRuntimeAuthReport`.
-        agent_runtime_authenticated: heartbeatRuntimeAuthReport(runtimeAuthProbeVerdict),
+        // observation nobody made. Spread as ONE unit: the boolean and its
+        // provenance marker must never diverge, so they are produced together
+        // rather than as two fields a future edit could separate. See
+        // `heartbeatRuntimeAuthFields`.
+        ...heartbeatRuntimeAuthFields(runtimeAuthProbeVerdict),
         agent_diagnostics: agentDiagnostics,
         hostname: tailscaleHostname,
         os_username: osUsername,
@@ -11961,7 +11972,7 @@ async function pollCycle() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-P52CE6K7.js");
+      } = await import("../responsiveness-probe-NVP34464.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -12052,7 +12063,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-P52CE6K7.js");
+        } = await import("../responsiveness-probe-NVP34464.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15582,7 +15593,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-7GPDXRPK.js");
+        const { collectDiagnostics } = await import("../persistent-session-MH5URKMO.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15632,7 +15643,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-7GPDXRPK.js");
+      const { collectDiagnostics } = await import("../persistent-session-MH5URKMO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -16156,7 +16167,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-2UU67Q2T.js");
+  } = await import("../claude-pair-runtime-34ZO2AFF.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));