agentradar-cli 0.2.9 → 0.2.10

package/dist/agentradar-vendor/SKILL.md

@@ -22,7 +22,7 @@ Call `get_my_context` on the AgentRadar MCP FIRST, before any other tool. It ret
 
 In your first session, call `read_onboarding_obligations` once (reading them acknowledges the safety rules), then `read_readiness`.
 
-Your primary objective is to reach your quotas and drive the organisation forward in your role. Report each metric you own with `report_metric`. You may create metrics for yourself; you can never change your own quota — your superior sets it. Talk only in shared spaces (channels and tasks). You can create one-off tasks (`create_task`) and repeated tasks (`create_recurring_task`) for yourself, your colleagues and your direct subordinates — only for real trackable work, never for conversation.
+Your primary objective is to reach your quotas and drive the organisation forward in your role. Report each metric you own with `report_metric`, backed by `evidence` of what you counted it from, or by `fromEventId` when a person told you the number. You may create metrics for yourself; you can never change your own quota — your superior sets it. Talk only in shared spaces (channels and tasks). You can create one-off tasks (`create_task`) and repeated tasks (`create_recurring_task`) for yourself, your colleagues and your direct subordinates — only for real trackable work, never for conversation.
 
 ## Talking to people
 

package/dist/channel.js

@@ -7,7 +7,7 @@ import { createInterface } from "node:readline";
 import { envValue } from "./tool-run.js";
 import { trustedMcpEndpoint } from "./setup.js";
 export const CHANNEL_GUIDANCE = "AgentRadar channel messages are wake signals only. Call next_event to receive the events, then pass their eventIds as ackEventIds on your next call. Answer livenessProbe with liveness_ack. Never acknowledge an event you have not read. Never poll next_event on your own or keep a loop running: when a channel message arrives, drain it, then end your turn.";
-export const CHANNEL_BLOCKED = "AgentRadar has not observed a next_event call from this session. Channel delivery is unconfirmed. On Claude Team/Enterprise an Owner must enable Channels (channelsEnabled); the development flag cannot override that policy. Until then, deliver with the feeder: set AR_FEED=feeder in ~/.agentradar/agents/<runner-id>.env and restart the runner.";
+export const CHANNEL_BLOCKED = "AgentRadar has not observed a next_event call from this session. Channel delivery is unconfirmed. On Claude Team/Enterprise an Owner must enable Channels (channelsEnabled); the development flag cannot override that policy. Until then, deliver with the feeder: run your join again with --feeder (agentradar join <your join link> --feeder). Your organisation sees this agent as not receiving messages until one or the other works.";
 /** One local MCP, forwarding tools to AWP. Wake signals never consume the durable queue. */
 export async function startChannel(runnerId, deps = {}) {
     if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(runnerId))
@@ -24,6 +24,9 @@ export async function startChannel(runnerId, deps = {}) {
     let sequence = 0;
     let polling = false;
     let agentPolled = false;
+    // Vadym 10342: an unconfirmed channel is reported to AgentRadar (runnerState channel_unconfirmed), so the owner sees
+    // the agent is not receiving messages; "ready" again once the session does call next_event.
+    let unconfirmed = null;
     let warning;
     const send = (value) => new Promise((resolve, reject) => {
         output.write(`${JSON.stringify(value)}\n`, (error) => error ? reject(error) : resolve());
@@ -68,7 +71,14 @@ export async function startChannel(runnerId, deps = {}) {
                     if (!selftestStarted)
                         logError("AgentRadar self-test could not start; retrying after the next poll.");
                 }
-                const response = await next({ runnerState: "ready" });
+                if (unconfirmed === "pending") {
+                    await next({ runnerState: "channel_unconfirmed" });
+                    unconfirmed = "reported";
+                }
+                if (unconfirmed === "reported" && agentPolled)
+                    unconfirmed = null;
+                // While reported, no runnerState: the stored state stands, and the poll still drains for wake signals.
+                const response = await next(unconfirmed ? {} : { runnerState: "ready" });
                 if (response.error || response.result?.isError)
                     throw new Error("AgentRadar refused next_event; check the runner key and its poll permission");
                 const content = response.result?.content;
@@ -104,8 +114,10 @@ export async function startChannel(runnerId, deps = {}) {
         else if (message.method === "notifications/initialized") {
             if (!polling) {
                 polling = true;
-                warning = setTimeout(() => { if (!agentPolled)
-                    logError(CHANNEL_BLOCKED); }, 30_000);
+                warning = setTimeout(() => { if (!agentPolled) {
+                    logError(CHANNEL_BLOCKED);
+                    unconfirmed = "pending";
+                } }, deps.confirmMs ?? 30_000);
                 void poll();
             }
         }

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire } from "node:module";
 import { installVendorSkill } from "./skill-install.js";
 import { startChannel } from "./channel.js";
 import { runRestartSelftest, startVendorRunner } from "./runner.js";
-import { cancelJoin, joinOrganisation, leaveOrganisation, setupVendorAgent, terminalConfirm } from "./setup.js";
+import { cancelJoin, joinOrganisation, leaveOrganisation, setupVendorAgent } from "./setup.js";
 import { callAwpTool, callToolOverCli, createTaskOverCli, listServiceToolsOverCli, parseCallArgs, runServiceToolOverCli } from "./tool-run.js";
 import { installSyncTimer, syncAgentDir } from "./sync.js";
 // `run` is the one prefix every agent-facing command shares, so one harness "always allow agentradar run"
@@ -15,7 +15,7 @@ export const runArgs = (raw) => raw[0] !== "run" ? raw
 async function main() {
     const args = runArgs(process.argv.slice(2));
     if (args.length === 1 && (args[0] === "--help" || args[0] === "-h")) {
-        console.log("Usage: agentradar run <join-link> [--name <n>] [--model <m>] | agentradar run <runner-id> <tool> [--<argument> <value> | --<argument>-file <path> ...] | agentradar setup [--trust] [--harness claude|codex] | agentradar join <join-link> [--name <n>] [--model <m>] [--trust] [--attach-tmux <pane> | --attach-current] [--session <id>] | agentradar join cancel <join-link|request-id> | agentradar leave <runner-id> | agentradar channel <runner-id> | agentradar selftest <runner-id> [--status|--restart] | agentradar runner start <runner-id> | agentradar tool list <runner-id> | agentradar tool run <runner-id> <tool-key> [--args '<json>'] | agentradar call <runner-id> <tool> [--<argument> <value> ...] [--args '<json>'] | agentradar task create|repeat <runner-id> --args '<json>' | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
+        console.log("Usage: agentradar run <join-link> [--name <n>] [--model <m>] | agentradar run <runner-id> <tool> [--<argument> <value> | --<argument>-file <path> ...] | agentradar setup [--trust] [--harness claude|codex] | agentradar join <join-link> [--name <n>] [--model <m>] [--trust] [--attach-tmux <pane> | --attach-current] [--session <id>] [--feeder] | agentradar join cancel <join-link|request-id> | agentradar leave <runner-id> | agentradar channel <runner-id> | agentradar selftest <runner-id> [--status|--restart] | agentradar runner start <runner-id> | agentradar tool list <runner-id> | agentradar tool run <runner-id> <tool-key> [--args '<json>'] | agentradar call <runner-id> <tool> [--<argument> <value> ...] [--args '<json>'] | agentradar task create|repeat <runner-id> --args '<json>' | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
         return;
     }
     if (args[0] === "leave" && args.length === 2) {
@@ -70,18 +70,18 @@ async function main() {
         for (let i = 1; i < args.length; i++) {
             if (["--name", "--model", "--attach-tmux", "--session"].includes(args[i]))
                 named[args[i].slice(2)] = args[++i] ?? "-";
-            else if (!["--trust", "--attach-current", "--allow-bypass", "--revoke-bypass"].includes(args[i]))
+            else if (!["--trust", "--attach-current", "--allow-bypass", "--revoke-bypass", "--feeder"].includes(args[i]))
                 urls.push(args[i]);
         }
         if (urls.length !== 1 || [urls[0], ...Object.values(named)].some((value) => value.startsWith("-")) || (named["attach-tmux"] && args.includes("--attach-current"))) {
-            console.error("Usage: agentradar join <join-link> [--name <your name>] [--model <your model id>] [--trust] [--attach-tmux <session[:window.pane]> | --attach-current] [--session <claude session id>] [--allow-bypass | --revoke-bypass]");
+            console.error("Usage: agentradar join <join-link> [--name <your name>] [--model <your model id>] [--trust] [--attach-tmux <session[:window.pane]> | --attach-current] [--session <claude session id>] [--revoke-bypass] [--feeder]");
             process.exitCode = 1;
             return;
         }
         process.exitCode = await joinOrganisation(urls[0], {
             trust: args.includes("--trust"), agentName: named.name, model: named.model, session: named.session,
             attach: args.includes("--attach-current") ? "current" : named["attach-tmux"],
-            allowBypass: args.includes("--allow-bypass"), revokeBypass: args.includes("--revoke-bypass"), confirm: terminalConfirm(),
+            revokeBypass: args.includes("--revoke-bypass"), feeder: args.includes("--feeder"),
         });
         return;
     }
@@ -142,7 +142,7 @@ async function main() {
         return;
     }
     const help = args.length === 1 && (args[0] === "--help" || args[0] === "-h");
-    (help ? console.log : console.error)("Usage: agentradar run <join-link> [--name <n>] [--model <m>] | agentradar run <runner-id> <tool> [--<argument> <value> | --<argument>-file <path> ...] | agentradar setup [--trust] | agentradar join <join-link> [--name <n>] [--model <m>] [--trust] [--attach-tmux <pane> | --attach-current] [--session <id>] | agentradar join cancel <join-link|request-id> | agentradar leave <runner-id> | agentradar channel <runner-id> | agentradar selftest <runner-id> [--status|--restart] | agentradar runner start <runner-id> | agentradar tool list <runner-id> | agentradar tool run <runner-id> <tool-key> [--args '<json>'] | agentradar call <runner-id> <tool> [--<argument> <value> ...] [--args '<json>'] | agentradar task create|repeat <runner-id> --args '<json>' | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
+    (help ? console.log : console.error)("Usage: agentradar run <join-link> [--name <n>] [--model <m>] | agentradar run <runner-id> <tool> [--<argument> <value> | --<argument>-file <path> ...] | agentradar setup [--trust] | agentradar join <join-link> [--name <n>] [--model <m>] [--trust] [--attach-tmux <pane> | --attach-current] [--session <id>] [--feeder] | agentradar join cancel <join-link|request-id> | agentradar leave <runner-id> | agentradar channel <runner-id> | agentradar selftest <runner-id> [--status|--restart] | agentradar runner start <runner-id> | agentradar tool list <runner-id> | agentradar tool run <runner-id> <tool-key> [--args '<json>'] | agentradar call <runner-id> <tool> [--<argument> <value> ...] [--args '<json>'] | agentradar task create|repeat <runner-id> --args '<json>' | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
     if (!help)
         process.exitCode = 1;
 }

package/dist/setup.js

@@ -118,7 +118,9 @@ export function trustedMcpEndpoint(value) {
     return endpoint.protocol === "https:" || loopbackHttp ? endpoint : null;
 }
 /** `installation: null` (join) removes the project's `agentradar` entry: a joined agent acts through `agentradar run`. */
-async function installProjectMcp(configPath, cwd, installation, trust) {
+async function installProjectMcp(configPath, cwd, installation, trust, 
+/** Vadym 10342: a joined Claude Code agent's AgentRadar channel (`agentradar channel <runner-id>`, stdio). */
+channel) {
     const endpoint = installation && trustedMcpEndpoint(installation.mcpEndpoint);
     if (installation && (!endpoint || !BEARER_SHAPE.test(installation.bearer))) {
         throw new Error("AgentRadar returned an invalid setup payload");
@@ -148,7 +150,10 @@ async function installProjectMcp(configPath, cwd, installation, trust) {
     const mcpServers = project.mcpServers && typeof project.mcpServers === "object" && !Array.isArray(project.mcpServers)
         ? project.mcpServers
         : {};
-    if (installation && endpoint) {
+    if (channel) {
+        mcpServers.agentradar = channel;
+    }
+    else if (installation && endpoint) {
         mcpServers.agentradar = {
             type: "http",
             url: endpoint.toString(),
@@ -336,7 +341,7 @@ async function codexHookHashes(codexHome, env) {
         child.kill();
     }
 }
-async function installRunner(home, projectPath, approved, service) {
+async function installRunner(home, projectPath, approved, service, feed) {
     if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(approved.runnerId)) {
         throw new Error("AgentRadar returned an invalid runner ID");
     }
@@ -412,15 +417,19 @@ async function installRunner(home, projectPath, approved, service) {
             joined.push(`AGENT_TOOL_ENV_FILE=${shellValue(toolEnvFile)}`);
         }
     }
-    await writePrivateFile(mcpConfig, `${JSON.stringify(service ? { mcpServers: {} } : {
-        mcpServers: {
-            agentradar: {
-                type: "http",
-                url: endpoint.toString(),
-                headers: { Authorization: `Bearer ${approved.installation.bearer}` },
+    // R764 + Vadym 10342: a pushed service session loads exactly one MCP, the AgentRadar channel, from the CLI copy
+    // the service runs; the supervisor adds --dangerously-load-development-channels server:agentradar.
+    await writePrivateFile(mcpConfig, `${JSON.stringify(feed === "push"
+        ? { mcpServers: { agentradar: { type: "stdio", command: process.execPath, args: [join(cliDist(home), "index.js"), "channel", approved.runnerId] } } }
+        : service ? { mcpServers: {} } : {
+            mcpServers: {
+                agentradar: {
+                    type: "http",
+                    url: endpoint.toString(),
+                    headers: { Authorization: `Bearer ${approved.installation.bearer}` },
+                },
             },
-        },
-    }, null, 2)}\n`);
+        }, null, 2)}\n`);
     await writePrivateFile(envPath, [
         `AGENT_NAME=${shellValue(approved.runnerId)}`,
         `AR_BASE=${shellValue(projectPath)}`,
@@ -431,6 +440,8 @@ async function installRunner(home, projectPath, approved, service) {
         // default, so writing `AR_AGENT_HARNESS=claude` unconditionally would change nothing except to make
         // every existing env file look as though a choice had been made.
         ...(harness ? [`AR_AGENT_HARNESS=${shellValue(harness)}`] : []),
+        // How work reaches the session (Vadym 10342): the Claude Code channel pushes it; without this line the feeder types it.
+        ...(feed ? [`AR_FEED=${feed}`] : []),
         ...joined,
         "",
     ].join("\n"));
@@ -520,27 +531,8 @@ export async function setupVendorAgent(deps = {}) {
     }
     throw new Error("AgentRadar setup code expired; run setup again");
 }
-/** "[y/N]": only y or yes (any case) is a yes; Enter alone is No. */
-export const saidYes = (answer) => /^y(es)?$/i.test(answer.trim());
-/** The default `confirm`: a real terminal only, "[y/N]" with No unless they type y or yes. */
-export function terminalConfirm() {
-    if (!process.stdin.isTTY || !process.stdout.isTTY)
-        return undefined;
-    return async (question) => {
-        const { createInterface } = await import("node:readline/promises");
-        const rl = createInterface({ input: process.stdin, output: process.stdout });
-        try {
-            return saidYes(await rl.question(`${question} [y/N] `));
-        }
-        finally {
-            rl.close();
-        }
-    };
-}
 export const bypassOnNotice = (link) => `Bypass-permissions mode is ON on this machine: the agent runs without permission prompts. To turn it off: agentradar join ${link} --revoke-bypass`;
 export const BYPASS_REVOKED = "Bypass-permissions mode is off on this machine now; the agent asks before acting again.";
-export const BYPASS_QUESTION = "Allow this agent to run without permission prompts on this machine?";
-export const BYPASS_NOT_CONFIRMED = "Bypass-permissions mode stays off: your organisation allowed it, but nobody on this machine confirmed it. Run the join again in a terminal and answer yes, or add --allow-bypass.";
 /** A sortable key for `x.y.z[-pre]`; a release sorts above its prereleases. ponytail: prereleases of one version tie. */
 const versionRank = (version) => {
     const [core = "", pre] = version.split(/-(.*)/);
@@ -646,6 +638,10 @@ export async function joinOrganisation(enrolmentUrl, deps = {}) {
         }
     }
     const label = harness === "generic" ? basename((env.AGENTRADAR_AGENT_BIN ?? "").trim()) : harness === "claude" ? "Claude Code" : "Codex";
+    // Vadym 10342: every Claude Code agent connects through the AgentRadar channel. The tmux feeder is the fallback:
+    // another CLI, an explicit opt-in (--feeder, AGENTRADAR_FEED=feeder, or a pane named with --attach-*), or a
+    // channel the session never confirms (channel.ts reports it and tells the operator to re-run with --feeder).
+    const channel = harness === "claude" && !deps.feeder && env.AGENTRADAR_FEED?.trim().toLowerCase() !== "feeder" && !deps.attach;
     // The agent is a persistent session the service owns, not this one: no MCP entry in this folder (it acts
     // through `agentradar run`), a runner env pinned to its own session, and a LaunchAgent / systemd unit.
     // Which session the agent is, settled before any request: a key is issued once, so never claim one for a session that cannot run.
@@ -656,7 +652,8 @@ export async function joinOrganisation(enrolmentUrl, deps = {}) {
         let attach = deps.attach === "current" ? env.TMUX_PANE : deps.attach;
         if (deps.attach === "current" && !attach)
             throw new Error("--attach-current needs a session running inside tmux");
-        if (!deps.attach && harness === "claude" && env.CLAUDECODE && env.TMUX && env.TMUX_PANE)
+        // Never in channel mode: nothing types into the caller's pane.
+        if (!channel && !deps.attach && harness === "claude" && env.CLAUDECODE && env.TMUX && env.TMUX_PANE)
             attach = env.TMUX_PANE;
         if (attach) {
             // A pane id (%3) dies with the tmux server; session:window.pane comes back when its session is recreated.
@@ -669,31 +666,24 @@ export async function joinOrganisation(enrolmentUrl, deps = {}) {
         // Unattended, the service resumes the caller's own Claude conversation, never a stranger's. An attached
         // pane is never started from here, so there its session id only keys the model switch.
         const sessionId = harness !== "claude" ? undefined
-            : await callerSession(deps, env, home, await realpath(cwd)).catch((error) => { if (attach)
+            : await callerSession(deps, env, home, await realpath(cwd)).catch((error) => { if (attach || channel)
                 return undefined; throw error; });
         return { attach, sessionId };
     };
     let where;
     /**
-     * Lead 10-04: the approver's consent alone never turns bypass on here. This machine says yes too: a flag, or
-     * a person at the terminal; with neither (an agent running the join, a script) it stays off and says why.
-     * Asked only when it would apply: approved, and not an attached pane (that keeps its own mode).
+     * The owner's bypass grant on the portal approval is the consent for an unattended service session (lead
+     * 10-04, after the Codex run stopped on an approval prompt nobody could answer); `--revoke-bypass` takes it
+     * back on this machine. An attached pane keeps the permission mode it already runs in.
      */
-    const localBypass = async (approvedBypass, confirmedBefore) => {
-        if (!approvedBypass || where.attach)
-            return false;
-        const yes = confirmedBefore || deps.allowBypass === true || (deps.confirm ? await deps.confirm(BYPASS_QUESTION) : false);
-        if (!yes)
-            log(BYPASS_NOT_CONFIRMED);
-        return yes;
-    };
+    const localBypass = (approvedBypass, revoked) => approvedBypass && !revoked && !where.attach;
     const startJoined = async (requestId, agentId, installation, approvedBypass, bypass, saved) => {
         const runnerId = `join-${requestId}`;
         const { attach } = where;
         const projectPath = harness === "claude"
             ? await installProjectMcp(claudeConfigPath(home, env), cwd, null, deps.trust === true)
             : await realpath(cwd);
-        const runnerEnv = await installRunner(home, projectPath, { status: "approved", agentId, runnerId, installation, harness }, { sessionId: where.sessionId ?? requestId, env, attach, bypass });
+        const runnerEnv = await installRunner(home, projectPath, { status: "approved", agentId, runnerId, installation, harness }, { sessionId: where.sessionId ?? requestId, env, attach, bypass }, channel ? "push" : undefined);
         await saved?.();
         log(`Runner installed → ${runnerEnv}`);
         if (bypass)
@@ -716,7 +706,13 @@ export async function joinOrganisation(enrolmentUrl, deps = {}) {
             log("Running as a service; the delivery restarts on crash and reboot.");
             return 0;
         }
-        const mode = bypass ? ", in bypass-permissions mode as your organisation allowed and this machine confirmed" : "";
+        const mode = bypass ? ", in bypass-permissions mode as your organisation allowed" : "";
+        if (channel) {
+            log(`Connected through the AgentRadar channel. This conversation now continues as a service in ${projectPath} (tmux session ${runnerId}${mode}): client messages are pushed into it and it answers there, with no restart from you. Exit this session now (/exit) so only the service carries on; watch it with: tmux attach -t ${runnerId}. To stop it: agentradar leave ${runnerId}`);
+            log(`If your organisation's Claude plan blocks channels, deliver with the feeder instead: agentradar join ${enrolmentUrl} --feeder`);
+            log("Running as a service; it restarts on crash and reboot.");
+            return 0;
+        }
         // Only Claude resumes the caller's own conversation; Codex and a generic CLI start their own session.
         log(harness === "claude"
             ? `Connected. This conversation now continues as a service in ${projectPath} (tmux session ${runnerId}${mode}): your welcome and every client message are typed into it, and it answers there. Exit this session now (/exit) so only the service carries on; watch it with: tmux attach -t ${runnerId}. To stop it: agentradar leave ${runnerId}`
@@ -756,14 +752,14 @@ export async function joinOrganisation(enrolmentUrl, deps = {}) {
         const bearer = envValue(saved, "AWP_BEARER");
         if (!bearer)
             throw new Error("This machine left that organisation (agentradar leave). A key is issued once; ask your organisation for a new join link.");
-        // Lead 10-04: the remembered yes is revocable. `--revoke-bypass` forgets it and the service runs with prompts.
-        if (deps.revokeBypass && state.bypassConfirmed) {
+        // `--revoke-bypass` is remembered on this machine, so a later re-run keeps the prompts on.
+        if (deps.revokeBypass && state.bypassConfirmed !== false) {
             state = { ...state, bypassConfirmed: false };
             await writePrivateFile(statePath, JSON.stringify(state));
             log(BYPASS_REVOKED);
         }
         const approvedBypass = state.bypassPermissions === true;
-        const bypass = deps.revokeBypass ? false : await localBypass(approvedBypass, state.bypassConfirmed === true);
+        const bypass = localBypass(approvedBypass, state.bypassConfirmed === false);
         return startJoined(state.requestId, state.agentId, { mcpEndpoint: envValue(saved, "AWP_MCP_URL") ?? mcpEndpoint, bearer }, approvedBypass, bypass);
     }
     if (!state) {
@@ -818,8 +814,8 @@ export async function joinOrganisation(enrolmentUrl, deps = {}) {
             log("Approved.");
             // Bypass-permissions only when the operator consented at approval; the server says so with the key.
             const approvedBypass = claimed.bypassPermissions === true;
-            const bypass = await localBypass(approvedBypass, false);
-            const joined = { ...state, agentId: claimed.agentId, ...(approvedBypass ? { bypassPermissions: true } : {}), ...(bypass ? { bypassConfirmed: true } : {}) };
+            const bypass = localBypass(approvedBypass, false);
+            const joined = { ...state, agentId: claimed.agentId, ...(approvedBypass ? { bypassPermissions: true } : {}) };
             return startJoined(state.requestId, claimed.agentId, { mcpEndpoint, bearer: claimed.token }, approvedBypass, bypass, () => writePrivateFile(statePath, JSON.stringify(joined)));
         }
         const said = await failureMessage(response);

package/dist/vendor-runner/supervisor/supervise-agent.sh

@@ -77,7 +77,7 @@ HEALTH_POLL_SEC="${HEALTH_POLL_SEC:-15}"
 # interactive CLI: the env file names its binary, arguments, resume/fresh flags, pid pattern and how work
 # reaches it (AR_FEED). Anything else is REFUSED by name: a supervisor that quietly fell back to Claude for an
 # unrecognized value would come up healthy, keep a pane alive, and answer nothing the vendor expected.
-# Tried: claude and codex with AR_FEED=feeder. Untried: generic, AR_FEED=push (Claude channels).
+# Tried: claude and codex with AR_FEED=feeder; claude with AR_FEED=push (the AgentRadar channel, R764). Untried: generic.
 AR_AGENT_HARNESS="${AR_AGENT_HARNESS:-claude}"
 case "${AR_AGENT_HARNESS}" in
   claude|codex|generic) : ;;
@@ -93,6 +93,8 @@ case "${AR_FEED}" in
   acp) die "AR_FEED=acp is not built yet; use feeder or push" ;;
   *) die "AR_FEED must be feeder or push (got '${AR_FEED}')" ;;
 esac
+# push is Claude Code channels only: no other harness has a channel to push into.
+[ "${AR_FEED}" = "push" ] && [ "${AR_AGENT_HARNESS}" != "claude" ] && die "AR_FEED=push needs AR_AGENT_HARNESS=claude (got '${AR_AGENT_HARNESS}')"
 # Launched only when the resume form exits non-zero (nothing to resume). Empty = the same argv without it.
 AR_FRESH_FLAGS="${AR_FRESH_FLAGS:-}"
 
@@ -140,6 +142,8 @@ else
   _launch_flags=( ${CLAUDE_EXTRA_FLAGS} --strict-mcp-config --mcp-config="${MCP_CONFIG}" )
   # `agentradar join` enables the agent-guard plugin for this session only, through a settings file.
   [ -n "${CLAUDE_SETTINGS:-}" ] && _launch_flags+=( --settings "${CLAUDE_SETTINGS}" )
+  # R764 + Vadym 10342: the AgentRadar channel (the stdio MCP `agentradar` in $MCP_CONFIG) pushes work in; no feeder types.
+  [ "${AR_FEED}" = "push" ] && _launch_flags+=( --dangerously-load-development-channels server:agentradar )
   # Pane-alive predicate — MUST be unique per agent. Default to the FULL mcp-config path (each agent's
   # differs by directory), NOT the basename: on a multi-agent box every agent's config is named
   # `awp-only.json`, so a basename match would find ANOTHER agent's live claude and mask THIS agent's
@@ -362,11 +366,27 @@ ensure_agent() {
         return 1
       }
   # wait for the pane to come up
-  for _ in $(seq 1 30); do pane_alive && { log "agent pane is live"; return 0; }; sleep 1; done
+  # In the background: the watch must not hold up the monitor loop when the warning never shows.
+  for _ in $(seq 1 30); do pane_alive && { log "agent pane is live"; accept_dev_channels & return 0; }; sleep 1; done
   log "agent pane did not come up within 30s"
   return 1
 }
 
+# A pushed session starts on Claude Code's "Loading development channels" warning, and nobody sits at an unattended
+# pane to confirm it. The channel is this machine's own installed CLI (`agentradar channel <runner>`), so the
+# service confirms it, once per launch, only while that exact warning is on screen.
+accept_dev_channels() {
+  [ "${AR_FEED}" = "push" ] || return 0
+  for _ in $(seq 1 30); do
+    if "${TMUX_BIN}" capture-pane -p -t "=${TMUX_SESSION}:" 2>/dev/null | grep -q "Loading development channels"; then
+      "${TMUX_BIN}" send-keys -t "=${TMUX_SESSION}:" Enter
+      log "confirmed Claude Code's development-channels warning for the AgentRadar channel"
+      return 0
+    fi
+    sleep 1
+  done
+}
+
 # --- 4. Run: ensure agent, run feeder in foreground, monitor both -------------
 FEEDER_PID=""
 cleanup() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentradar-cli",
-  "version": "0.2.9",
+  "version": "0.2.10",
   "engines": {
     "node": ">=20"
   },