@integrity-labs/agt-cli 0.28.263 → 0.28.265

package/dist/mcp/index.js

@@ -21202,6 +21202,37 @@ function describeFeatureRequestResult(resp) {
   };
 }
 
+// src/request-reconnect.ts
+function describeReconnectRequestResult(resp) {
+  switch (resp.status) {
+    case "notified":
+      return {
+        text: "Reconnect request sent \u2014 your manager has been notified with a reconnect link. Stop retrying the failing tool; it should start working again once the integration is reconnected.",
+        isError: false
+      };
+    case "coalesced":
+      return {
+        text: "A reconnect request for this integration was already sent recently, so no new notification went out. Stop retrying the failing tool and wait for the reconnect.",
+        isError: false
+      };
+    case "healthy":
+      return {
+        text: "The platform shows this integration as connected, so no reconnect request was sent. If the tool is still failing, tell your operator exactly what error you saw instead of retrying.",
+        isError: false
+      };
+    case "not_reconnectable":
+      return {
+        text: "This integration has no reconnect path (it is not an OAuth/managed connection), so a reconnect request would not help. Tell your operator what failed so they can fix its configuration.",
+        isError: false
+      };
+    default:
+      return {
+        text: `Could not send the reconnect request${resp.message ? `: ${resp.message}` : ""}. Tell your operator which integration is failing and don't keep retrying.`,
+        isError: true
+      };
+  }
+}
+
 // src/form-request.ts
 function describeFormRequestResult(resp) {
   if (resp.ok && resp.status === "pending" && resp.request_id) {
@@ -22236,6 +22267,46 @@ server.tool(
     return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
   }
 );
+server.tool(
+  "request_reconnect",
+  'Ask for one of YOUR OWN integrations to be reconnected when its tools fail with authentication/authorization errors (expired or revoked credentials, "needs re-auth", 401/403 from the provider). This notifies your human manager with a reconnect link \u2014 you cannot re-auth an integration yourself. Use it once per failing integration instead of retrying the failing tool; do NOT use it for tools you never had, for transient errors (timeouts, rate limits), or to request new integrations (use request_feature for that).',
+  {
+    integration: external_exports.string().min(1).max(120).describe(
+      `The integration's id as it appears in your toolkit (e.g. "gmail", "xero", "github") \u2014 the service whose tools are failing with auth errors.`
+    ),
+    reason: external_exports.string().min(1).max(500).describe(
+      'Short factual description of what failed \u2014 the tool you called and the auth error you saw (e.g. "gmail search returned 401 invalid_grant"). Shown to the human who reconnects it.'
+    )
+  },
+  async (params) => {
+    if (!AGT_AGENT_CODE_NAME) {
+      return {
+        content: [{ type: "text", text: "Error: AGT_AGENT_CODE_NAME not configured." }],
+        isError: true
+      };
+    }
+    let resp;
+    try {
+      resp = await apiPost("/host/request-reconnect", {
+        agent_code_name: AGT_AGENT_CODE_NAME,
+        integration: params.integration,
+        reason: params.reason
+      });
+    } catch (err) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Could not reach the reconnect-request service (${err instanceof Error ? err.message : String(err)}). Tell your operator which integration is failing.`
+          }
+        ],
+        isError: true
+      };
+    }
+    const { text, isError } = describeReconnectRequestResult(resp);
+    return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
+  }
+);
 server.tool(
   "update_identity",
   "Update your OWN identity: your role, personality, description, and/or display name. Provide only the fields you want to change; omitted fields are left unchanged, and passing an empty string clears a field (display_name cannot be emptied). Your code_name never changes. Changes are saved immediately and take effect within a few minutes, on your next configuration refresh, when your guidance is regenerated. Use this to refine how you present yourself or how you behave, not for one-off tasks. Avoid changing your identity frequently.",
@@ -23506,6 +23577,9 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   // this name, so the forwarding-skip is a no-op; listed here to keep the
   // lockstep guard green.
   "request_feature",
+  // ENG-7495: agent-requested integration reconnect (always registered). No
+  // API tool shares this name; listed here to keep the lockstep guard green.
+  "request_reconnect",
   // ENG-6686: self-service identity edit (always registered). Listed here to
   // keep the lockstep guard green; no API tool shares this name.
   "update_identity",

package/dist/mcp/origami.js

@@ -39779,6 +39779,13 @@ var FLAG_REGISTRY = [
     defaultValue: false,
     envVar: "AGT_MANAGER_FAILURE_NOTIFY_ENABLED"
   },
+  {
+    key: "agent-request-reconnect",
+    description: "Agent-facing `request_reconnect` MCP tool (ENG-7495). When ON, POST /host/request-reconnect accepts an agent's report that one of its integrations is failing auth, validates it against the shared needsReconnect predicate, and notifies the agent's human manager with a reconnect deep link (preferred channel; falls back to the team alert channel, then owner/admin email). OFF returns a soft \"not enabled\" result to the agent. Boolean gate; ships dark.",
+    flagType: "boolean",
+    defaultValue: false,
+    envVar: "AGT_AGENT_REQUEST_RECONNECT_ENABLED"
+  },
   {
     key: "model-api-error-reporting",
     description: "Manager reports model-API failures (529 overloaded, 429 rate-limit, 5xx, timeouts) from spawned-agent output and its own eval/memory backend calls to the AGT API, which persists them and opens a threshold alert for early warning of provider incidents (ENG-7363). Boolean gate; ships dark. Materialized to the host flags-cache.",

package/dist/{persistent-session-OP4TXILO.js → persistent-session-K5RJ4BVF.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-E45AAMBQ.js";
+} from "./chunk-MWKR6B3T.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-OP4TXILO.js.map
+//# sourceMappingURL=persistent-session-K5RJ4BVF.js.map

package/dist/{responsiveness-probe-K2RGVZCR.js → responsiveness-probe-2PHY7QKJ.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-E45AAMBQ.js";
+} from "./chunk-MWKR6B3T.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -418,4 +418,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-K2RGVZCR.js.map
+//# sourceMappingURL=responsiveness-probe-2PHY7QKJ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.263",
+  "version": "0.28.265",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {