@integrity-labs/agt-cli 0.28.21 → 0.28.23

package/dist/mcp/augmented-admin.js

@@ -21097,6 +21097,9 @@ var AdminDebugClient = class _AdminDebugClient {
   listAlerts(args) {
     return this.get("/admin/debug/alerts", _AdminDebugClient.cleanQuery(args));
   }
+  queryAuditLog(args) {
+    return this.get("/admin/debug/audit-log", _AdminDebugClient.cleanQuery(args));
+  }
   // ─────────────────── request-scoped customer grant (ENG-6279) ───────────────────
   /**
    * Open scoped READ access to a SELF-MANAGED customer org so the read tools can
@@ -21199,6 +21202,12 @@ var requestActionSchema = external_exports.object({
 var checkActionStatusSchema = external_exports.object({
   request_id: external_exports.string().min(1).max(64).describe("The action request_id returned by request_action.")
 });
+var queryAuditLogSchema = external_exports.object({
+  agent_id: external_exports.string().min(1).max(64).describe("UUID of the agent whose audit events to read (required \u2014 the read is scoped to this agent's org)."),
+  action: external_exports.string().max(64).optional().describe('Audit action to filter by. Defaults to "agent.restart" (restart events). e.g. "agent.restart".'),
+  since_hours: external_exports.number().int().min(1).max(720).optional().describe("Only events newer than this many hours. Omit for no time bound."),
+  limit: limitSchema
+});
 
 // package.json
 var package_default = {
@@ -21321,6 +21330,19 @@ server.tool(
     }
   }
 );
+server.tool(
+  "debug_query_audit_log",
+  'Read recent audit events for ONE agent \u2014 primarily restart events \u2014 to troubleshoot why/when it bounced. Defaults to the "agent.restart" action: each event returns { created_at, source, reason, actor_kind }, where `source` is the restart trigger (agent-self-request, channel-command, maintenance-window, stale-mcp, hot-reload-mcp, mcp-presence-reaper, day-rollover, auth-tuple-change, \u2026) and `reason` is the free-text rationale when one was given (e.g. the agent\'s own words for a request_restart). Use it when an agent went quiet or restarted unexpectedly and you want the recent restart history with reasons. Pass { agent_id, action?, since_hours?, limit? }; agent_id is required and the read is scoped to that agent\'s org (fails closed if you\'re not authorized for it). To read non-restart events pass a different `action` (e.g. "agent.auto_resumed").',
+  queryAuditLogSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.queryAuditLog(args);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "debug_request_access",
   "Open scoped READ access to a SELF-MANAGED customer org so the read tools (debug_search_agents / debug_get_agent / debug_search_hosts / debug_list_alerts) can reach it. Use this when a read returns nothing for an org you have a legitimate support reason to troubleshoot. It mints a short-TTL, logged, customer-revocable read grant \u2014 the customer sees the access in their Support-access console and can revoke it, and it auto-expires; it does NOT grant any write/remedial capability. For an already-authorized org (Integrity-Labs-internal or fully-managed) this returns { already_authorized: true } instead of minting a redundant grant \u2014 just use the read tools. Pass { target_org_id, reason }; the reason is recorded verbatim on the customer-visible access log, so be specific.",

package/dist/{persistent-session-5BEMWOTM.js → persistent-session-34CY65FC.js}

@@ -25,8 +25,8 @@ import {
   takeZombieDetection,
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
-} from "./chunk-BKO5PJZ7.js";
-import "./chunk-3HZSMDEW.js";
+} from "./chunk-IHPN6AX7.js";
+import "./chunk-SN2G4B2Z.js";
 import "./chunk-XWVM4KPK.js";
 export {
   SEND_KEYS_ENTER_DELAY_MS,
@@ -56,4 +56,4 @@ export {
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-5BEMWOTM.js.map
+//# sourceMappingURL=persistent-session-34CY65FC.js.map

package/dist/{responsiveness-probe-JP4HLFYU.js → responsiveness-probe-KKWPOZSX.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-BKO5PJZ7.js";
-import "./chunk-3HZSMDEW.js";
+} from "./chunk-IHPN6AX7.js";
+import "./chunk-SN2G4B2Z.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -250,4 +250,4 @@ export {
   parkPendingInbound,
   readAndResetChannelDeflections
 };
-//# sourceMappingURL=responsiveness-probe-JP4HLFYU.js.map
+//# sourceMappingURL=responsiveness-probe-KKWPOZSX.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.21",
+  "version": "0.28.23",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {