@integrity-labs/agt-cli 0.28.1168 → 0.28.1170

package/dist/{chunk-Y4DBRVXD.js → chunk-6UXQEE6G.js}

@@ -16,11 +16,11 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-AJTF72A2.js";
+} from "./chunk-EK6JVOBH.js";
 import {
   readDailySessionPin,
   sessionTranscriptDir
-} from "./chunk-AV4KD3HE.js";
+} from "./chunk-DJNCIWVG.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -90,7 +90,7 @@ import {
   scanConfigForLiteralSecrets,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-7IAJXJ7C.js";
+} from "./chunk-47P33SZF.js";
 import {
   claudeJsonPathFor,
   effectiveClaudeJsonPath,
@@ -8078,7 +8078,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1168" : "dev";
+var agtCliVersion = true ? "0.28.1170" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -13235,4 +13235,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-Y4DBRVXD.js.map
+//# sourceMappingURL=chunk-6UXQEE6G.js.map

package/dist/{chunk-AV4KD3HE.js → chunk-DJNCIWVG.js}

@@ -1,6 +1,6 @@
 import {
   encodeClaudeProjectPath
-} from "./chunk-7IAJXJ7C.js";
+} from "./chunk-47P33SZF.js";
 
 // src/lib/daily-session.ts
 import { randomUUID } from "crypto";
@@ -235,4 +235,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-AV4KD3HE.js.map
+//# sourceMappingURL=chunk-DJNCIWVG.js.map

package/dist/{chunk-AJTF72A2.js → chunk-EK6JVOBH.js}

@@ -4,7 +4,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-AV4KD3HE.js";
+} from "./chunk-DJNCIWVG.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -47,7 +47,7 @@ import {
   remoteMcpConnectionEnvInfix,
   remoteMcpConnectionLabel,
   remoteMcpConnectionScopedEnvVar
-} from "./chunk-7IAJXJ7C.js";
+} from "./chunk-47P33SZF.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   archiveLegacyClaudeJson,
@@ -6130,4 +6130,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-AJTF72A2.js.map
+//# sourceMappingURL=chunk-EK6JVOBH.js.map

package/dist/{chunk-IV2UENRG.js → chunk-JB23A42P.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-XWVM4KPK.js";
 import {
   FORCED_UPDATE_HARD_DEADLINE_MS
-} from "./chunk-7IAJXJ7C.js";
+} from "./chunk-47P33SZF.js";
 import {
   effectiveClaudeJsonPath
 } from "./chunk-EL5MWGGH.js";
@@ -722,4 +722,4 @@ export {
   probeClaudeInstalls,
   maybeUpdateClaudeCode
 };
-//# sourceMappingURL=chunk-IV2UENRG.js.map
+//# sourceMappingURL=chunk-JB23A42P.js.map

package/dist/{claude-code-updater-WD4NNWY5.js → claude-code-updater-PQYMHNQT.js}

@@ -13,9 +13,9 @@ import {
   probeClaudeInstalls,
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
-} from "./chunk-IV2UENRG.js";
+} from "./chunk-JB23A42P.js";
 import "./chunk-XWVM4KPK.js";
-import "./chunk-7IAJXJ7C.js";
+import "./chunk-47P33SZF.js";
 import "./chunk-EL5MWGGH.js";
 import "./chunk-DGUM43GV.js";
 export {
@@ -34,4 +34,4 @@ export {
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
 };
-//# sourceMappingURL=claude-code-updater-WD4NNWY5.js.map
+//# sourceMappingURL=claude-code-updater-PQYMHNQT.js.map

package/dist/{claude-pair-runtime-JWXVVSSG.js → claude-pair-runtime-RKDNAYEU.js}

@@ -8,7 +8,7 @@ import {
 import {
   redactPaneFrame,
   sanitizeTerminalFrame
-} from "./chunk-7IAJXJ7C.js";
+} from "./chunk-47P33SZF.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -321,7 +321,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-LKJVSRHX.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-2365YL7P.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -836,4 +836,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-JWXVVSSG.js.map
+//# sourceMappingURL=claude-pair-runtime-RKDNAYEU.js.map

package/dist/lib/manager-worker.js

@@ -77,7 +77,7 @@ import {
   setConfigHash,
   shellGuard,
   tripClass
-} from "../chunk-Y4DBRVXD.js";
+} from "../chunk-6UXQEE6G.js";
 import {
   CLAUDE_CODE_SECURITY_FLOOR,
   SELF_UPDATE_TIMEOUTS,
@@ -91,7 +91,7 @@ import {
   runSafeCleanup,
   tightestDiskStat,
   withPackageCacheLock
-} from "../chunk-IV2UENRG.js";
+} from "../chunk-JB23A42P.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -178,7 +178,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-AJTF72A2.js";
+} from "../chunk-EK6JVOBH.js";
 import {
   isAgentIdle,
   isStaleForToday,
@@ -187,7 +187,7 @@ import {
   sessionTranscriptDir,
   subagentActivityAgeSeconds,
   transcriptActivityAgeSeconds
-} from "../chunk-AV4KD3HE.js";
+} from "../chunk-DJNCIWVG.js";
 import {
   classifyUnanswerablePane,
   focusedConfirmDialogBlock,
@@ -305,7 +305,7 @@ import {
   serializeAccountEnforcementMarker,
   stabiliseResetInstant,
   sumTranscriptUsageInWindow
-} from "../chunk-7IAJXJ7C.js";
+} from "../chunk-47P33SZF.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -15082,7 +15082,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-ZEK2TD5E.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-7HARR32R.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -15878,7 +15878,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1168" : "dev";
+var agtCliVersion = true ? "0.28.1170" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -17678,7 +17678,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-LKJVSRHX.js");
+      const { collectDiagnostics } = await import("../persistent-session-2365YL7P.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -17821,7 +17821,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-LKJVSRHX.js");
+      const { collectDiagnostics } = await import("../persistent-session-2365YL7P.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -18025,7 +18025,7 @@ async function pollCycleInner() {
       setConfigHash(hbResp?.config_hash ?? null);
       try {
         const desiredClaudeCodeVersion = hbResp?.desired_claude_code_version?.trim();
-        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-WD4NNWY5.js");
+        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-PQYMHNQT.js");
         const securityFloor = currentSecurityFloor();
         claudeUpdaterInFlight = true;
         if (desiredClaudeCodeVersion && (claudePairLoop.busy || claudePairingInProgress())) {
@@ -18060,7 +18060,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-ZEK2TD5E.js");
+      } = await import("../responsiveness-probe-7HARR32R.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -18177,7 +18177,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-ZEK2TD5E.js");
+        } = await import("../responsiveness-probe-7HARR32R.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -18463,7 +18463,7 @@ async function pollCycleInner() {
                 }
               }
             );
-            const { parkPendingInbound } = await import("../responsiveness-probe-ZEK2TD5E.js");
+            const { parkPendingInbound } = await import("../responsiveness-probe-7HARR32R.js");
             const { parked, deadLettered } = parkPendingInbound(codeName, new Date(fatalNowMs));
             paneFatalStreak.delete(codeName);
             paneFatalRestarts.set(codeName, [...history, fatalNowMs]);
@@ -18494,7 +18494,7 @@ async function pollCycleInner() {
         TRANSCRIPT_MOUNT_ESCALATION_REFRESH_MS,
         bindSourceEscalations
       } = await import("../transcript-mount-health-OHE6IVJV.js");
-      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-LKJVSRHX.js");
+      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-2365YL7P.js");
       const mountConfig = resolveTranscriptMountConfig();
       const liveAgents = agentState.persistentSessionAgents;
       for (const tracked of [
@@ -18659,7 +18659,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-TSARKC55.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-2JJLKURE.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -23329,7 +23329,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-ZEK2TD5E.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-7HARR32R.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -23372,7 +23372,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-LKJVSRHX.js");
+        const { collectDiagnostics } = await import("../persistent-session-2365YL7P.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -23423,7 +23423,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-LKJVSRHX.js");
+      const { collectDiagnostics } = await import("../persistent-session-2365YL7P.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -24117,7 +24117,7 @@ async function processClaudePairSessions(agents) {
     snapshotPairConfig,
     // ENG-11659: result -> report body + the manager.log line that records it.
     planPairStartReport
-  } = await import("../claude-pair-runtime-JWXVVSSG.js");
+  } = await import("../claude-pair-runtime-RKDNAYEU.js");
   const { resetClaudeSignin, describeSigninResetForLog, describeSigninResetFailure } = await import("../claude-signin-reset-EF3UO5IK.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);

package/dist/mcp/direct-chat-channel.js

@@ -41953,6 +41953,9 @@ var INTEGRATION_REGISTRY = [
   {
     id: "custom",
     name: "Custom Integration",
+    // ENG-11767: no toolkit_definitions row, so agents were offering a Connect
+    // card that can only fail.
+    no_connect_path: true,
     category: "custom",
     description: "Connect to any service via API key or webhook",
     supported_auth_types: ["api_key", "webhook", "none"],
@@ -42506,6 +42509,10 @@ var NOTICE_KIND_AUDIENCE = {
   // Second-person instructions to the agent ("Tell the user...", "do not
   // republish"); the user learns the outcome from the agent, not this row.
   canvas_public_approval_resolved: "agent",
+  // ENG-11580: integration.budget.raise approved / denied / approved-but-not-
+  // applied. Addressed to the agent that asked, in that request's session; the
+  // person learns the outcome from the agent (or from the card they tapped).
+  integration_budget_raise_resolved: "agent",
   // A routine fired; the agent picks the work up.
   routine_firing_result: "agent",
   // Live-advisor wake: "Call `live_read` with escalation_id …" — a literal tool
@@ -54000,6 +54007,8 @@ var MAINTENANCE_GATED_TOOLS = /* @__PURE__ */ new Set([
   "onboarding_record_manager_contact",
   "request_batch_approval",
   "request_integration_access",
+  // ENG-11580: files an integration.budget.raise approval row and card.
+  "request_budget_raise",
   "skill_contribute_fragment",
   "skill_create",
   "skill_delete",

package/dist/mcp/index.js

@@ -27980,6 +27980,9 @@ var INTEGRATION_REGISTRY = [
   {
     id: "custom",
     name: "Custom Integration",
+    // ENG-11767: no toolkit_definitions row, so agents were offering a Connect
+    // card that can only fail.
+    no_connect_path: true,
     category: "custom",
     description: "Connect to any service via API key or webhook",
     supported_auth_types: ["api_key", "webhook", "none"],
@@ -28370,6 +28373,10 @@ var NOTICE_KIND_AUDIENCE = {
   // Second-person instructions to the agent ("Tell the user...", "do not
   // republish"); the user learns the outcome from the agent, not this row.
   canvas_public_approval_resolved: "agent",
+  // ENG-11580: integration.budget.raise approved / denied / approved-but-not-
+  // applied. Addressed to the agent that asked, in that request's session; the
+  // person learns the outcome from the agent (or from the card they tapped).
+  integration_budget_raise_resolved: "agent",
   // A routine fired; the agent picks the work up.
   routine_firing_result: "agent",
   // Live-advisor wake: "Call `live_read` with escalation_id …" — a literal tool
@@ -47273,6 +47280,8 @@ var MAINTENANCE_GATED_TOOLS = /* @__PURE__ */ new Set([
   "onboarding_record_manager_contact",
   "request_batch_approval",
   "request_integration_access",
+  // ENG-11580: files an integration.budget.raise approval row and card.
+  "request_budget_raise",
   "skill_contribute_fragment",
   "skill_create",
   "skill_delete",

package/dist/mcp/origami.js

@@ -42110,6 +42110,9 @@ var INTEGRATION_REGISTRY = [
   {
     id: "custom",
     name: "Custom Integration",
+    // ENG-11767: no toolkit_definitions row, so agents were offering a Connect
+    // card that can only fail.
+    no_connect_path: true,
     category: "custom",
     description: "Connect to any service via API key or webhook",
     supported_auth_types: ["api_key", "webhook", "none"],
@@ -42500,6 +42503,10 @@ var NOTICE_KIND_AUDIENCE = {
   // Second-person instructions to the agent ("Tell the user...", "do not
   // republish"); the user learns the outcome from the agent, not this row.
   canvas_public_approval_resolved: "agent",
+  // ENG-11580: integration.budget.raise approved / denied / approved-but-not-
+  // applied. Addressed to the agent that asked, in that request's session; the
+  // person learns the outcome from the agent (or from the card they tapped).
+  integration_budget_raise_resolved: "agent",
   // A routine fired; the agent picks the work up.
   routine_firing_result: "agent",
   // Live-advisor wake: "Call `live_read` with escalation_id …" — a literal tool

package/dist/mcp/slack-channel.js

@@ -30993,6 +30993,8 @@ var MAINTENANCE_GATED_TOOLS = /* @__PURE__ */ new Set([
   "onboarding_record_manager_contact",
   "request_batch_approval",
   "request_integration_access",
+  // ENG-11580: files an integration.budget.raise approval row and card.
+  "request_budget_raise",
   "skill_contribute_fragment",
   "skill_create",
   "skill_delete",
@@ -36515,6 +36517,9 @@ var INTEGRATION_REGISTRY = [
   {
     id: "custom",
     name: "Custom Integration",
+    // ENG-11767: no toolkit_definitions row, so agents were offering a Connect
+    // card that can only fail.
+    no_connect_path: true,
     category: "custom",
     description: "Connect to any service via API key or webhook",
     supported_auth_types: ["api_key", "webhook", "none"],
@@ -36914,6 +36919,10 @@ var NOTICE_KIND_AUDIENCE = {
   // Second-person instructions to the agent ("Tell the user...", "do not
   // republish"); the user learns the outcome from the agent, not this row.
   canvas_public_approval_resolved: "agent",
+  // ENG-11580: integration.budget.raise approved / denied / approved-but-not-
+  // applied. Addressed to the agent that asked, in that request's session; the
+  // person learns the outcome from the agent (or from the card they tapped).
+  integration_budget_raise_resolved: "agent",
   // A routine fired; the agent picks the work up.
   routine_firing_result: "agent",
   // Live-advisor wake: "Call `live_read` with escalation_id …" — a literal tool

package/dist/mcp/telegram-channel.js

@@ -31210,6 +31210,8 @@ var MAINTENANCE_GATED_TOOLS = /* @__PURE__ */ new Set([
   "onboarding_record_manager_contact",
   "request_batch_approval",
   "request_integration_access",
+  // ENG-11580: files an integration.budget.raise approval row and card.
+  "request_budget_raise",
   "skill_contribute_fragment",
   "skill_create",
   "skill_delete",
@@ -36732,6 +36734,9 @@ var INTEGRATION_REGISTRY = [
   {
     id: "custom",
     name: "Custom Integration",
+    // ENG-11767: no toolkit_definitions row, so agents were offering a Connect
+    // card that can only fail.
+    no_connect_path: true,
     category: "custom",
     description: "Connect to any service via API key or webhook",
     supported_auth_types: ["api_key", "webhook", "none"],
@@ -37125,6 +37130,10 @@ var NOTICE_KIND_AUDIENCE = {
   // Second-person instructions to the agent ("Tell the user...", "do not
   // republish"); the user learns the outcome from the agent, not this row.
   canvas_public_approval_resolved: "agent",
+  // ENG-11580: integration.budget.raise approved / denied / approved-but-not-
+  // applied. Addressed to the agent that asked, in that request's session; the
+  // person learns the outcome from the agent (or from the card they tapped).
+  integration_budget_raise_resolved: "agent",
   // A routine fired; the agent picks the work up.
   routine_firing_result: "agent",
   // Live-advisor wake: "Call `live_read` with escalation_id …" — a literal tool