@integrity-labs/agt-cli 0.28.264 → 0.28.265

package/dist/{chunk-MQ5S642N.js → chunk-PDE3XSVC.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-E45AAMBQ.js";
+} from "./chunk-MWKR6B3T.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5876,7 +5876,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.264" : "dev";
+var agtCliVersion = true ? "0.28.265" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8146,4 +8146,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-MQ5S642N.js.map
+//# sourceMappingURL=chunk-PDE3XSVC.js.map

package/dist/{claude-pair-runtime-X5NJYZSK.js → claude-pair-runtime-YZ2PGUW3.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-OP4TXILO.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-K5RJ4BVF.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-X5NJYZSK.js.map
+//# sourceMappingURL=claude-pair-runtime-YZ2PGUW3.js.map

package/dist/lib/manager-worker.js

@@ -37,7 +37,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-MQ5S642N.js";
+} from "../chunk-PDE3XSVC.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -122,7 +122,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-E45AAMBQ.js";
+} from "../chunk-MWKR6B3T.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -6699,7 +6699,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.264" : "dev";
+var agtCliVersion = true ? "0.28.265" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7549,7 +7549,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-OP4TXILO.js");
+      const { collectDiagnostics } = await import("../persistent-session-K5RJ4BVF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7647,7 +7647,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-OP4TXILO.js");
+      const { collectDiagnostics } = await import("../persistent-session-K5RJ4BVF.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7795,7 +7795,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-K2RGVZCR.js");
+      } = await import("../responsiveness-probe-2PHY7QKJ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7827,7 +7827,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-K2RGVZCR.js");
+        } = await import("../responsiveness-probe-2PHY7QKJ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -10671,7 +10671,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-OP4TXILO.js");
+        const { collectDiagnostics } = await import("../persistent-session-K5RJ4BVF.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -10721,7 +10721,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-OP4TXILO.js");
+      const { collectDiagnostics } = await import("../persistent-session-K5RJ4BVF.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -11112,7 +11112,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-X5NJYZSK.js");
+  } = await import("../claude-pair-runtime-YZ2PGUW3.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/index.js

@@ -21202,6 +21202,37 @@ function describeFeatureRequestResult(resp) {
   };
 }
 
+// src/request-reconnect.ts
+function describeReconnectRequestResult(resp) {
+  switch (resp.status) {
+    case "notified":
+      return {
+        text: "Reconnect request sent \u2014 your manager has been notified with a reconnect link. Stop retrying the failing tool; it should start working again once the integration is reconnected.",
+        isError: false
+      };
+    case "coalesced":
+      return {
+        text: "A reconnect request for this integration was already sent recently, so no new notification went out. Stop retrying the failing tool and wait for the reconnect.",
+        isError: false
+      };
+    case "healthy":
+      return {
+        text: "The platform shows this integration as connected, so no reconnect request was sent. If the tool is still failing, tell your operator exactly what error you saw instead of retrying.",
+        isError: false
+      };
+    case "not_reconnectable":
+      return {
+        text: "This integration has no reconnect path (it is not an OAuth/managed connection), so a reconnect request would not help. Tell your operator what failed so they can fix its configuration.",
+        isError: false
+      };
+    default:
+      return {
+        text: `Could not send the reconnect request${resp.message ? `: ${resp.message}` : ""}. Tell your operator which integration is failing and don't keep retrying.`,
+        isError: true
+      };
+  }
+}
+
 // src/form-request.ts
 function describeFormRequestResult(resp) {
   if (resp.ok && resp.status === "pending" && resp.request_id) {
@@ -22236,6 +22267,46 @@ server.tool(
     return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
   }
 );
+server.tool(
+  "request_reconnect",
+  'Ask for one of YOUR OWN integrations to be reconnected when its tools fail with authentication/authorization errors (expired or revoked credentials, "needs re-auth", 401/403 from the provider). This notifies your human manager with a reconnect link \u2014 you cannot re-auth an integration yourself. Use it once per failing integration instead of retrying the failing tool; do NOT use it for tools you never had, for transient errors (timeouts, rate limits), or to request new integrations (use request_feature for that).',
+  {
+    integration: external_exports.string().min(1).max(120).describe(
+      `The integration's id as it appears in your toolkit (e.g. "gmail", "xero", "github") \u2014 the service whose tools are failing with auth errors.`
+    ),
+    reason: external_exports.string().min(1).max(500).describe(
+      'Short factual description of what failed \u2014 the tool you called and the auth error you saw (e.g. "gmail search returned 401 invalid_grant"). Shown to the human who reconnects it.'
+    )
+  },
+  async (params) => {
+    if (!AGT_AGENT_CODE_NAME) {
+      return {
+        content: [{ type: "text", text: "Error: AGT_AGENT_CODE_NAME not configured." }],
+        isError: true
+      };
+    }
+    let resp;
+    try {
+      resp = await apiPost("/host/request-reconnect", {
+        agent_code_name: AGT_AGENT_CODE_NAME,
+        integration: params.integration,
+        reason: params.reason
+      });
+    } catch (err) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Could not reach the reconnect-request service (${err instanceof Error ? err.message : String(err)}). Tell your operator which integration is failing.`
+          }
+        ],
+        isError: true
+      };
+    }
+    const { text, isError } = describeReconnectRequestResult(resp);
+    return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
+  }
+);
 server.tool(
   "update_identity",
   "Update your OWN identity: your role, personality, description, and/or display name. Provide only the fields you want to change; omitted fields are left unchanged, and passing an empty string clears a field (display_name cannot be emptied). Your code_name never changes. Changes are saved immediately and take effect within a few minutes, on your next configuration refresh, when your guidance is regenerated. Use this to refine how you present yourself or how you behave, not for one-off tasks. Avoid changing your identity frequently.",
@@ -23506,6 +23577,9 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   // this name, so the forwarding-skip is a no-op; listed here to keep the
   // lockstep guard green.
   "request_feature",
+  // ENG-7495: agent-requested integration reconnect (always registered). No
+  // API tool shares this name; listed here to keep the lockstep guard green.
+  "request_reconnect",
   // ENG-6686: self-service identity edit (always registered). Listed here to
   // keep the lockstep guard green; no API tool shares this name.
   "update_identity",

package/dist/mcp/origami.js

@@ -39779,6 +39779,13 @@ var FLAG_REGISTRY = [
     defaultValue: false,
     envVar: "AGT_MANAGER_FAILURE_NOTIFY_ENABLED"
   },
+  {
+    key: "agent-request-reconnect",
+    description: "Agent-facing `request_reconnect` MCP tool (ENG-7495). When ON, POST /host/request-reconnect accepts an agent's report that one of its integrations is failing auth, validates it against the shared needsReconnect predicate, and notifies the agent's human manager with a reconnect deep link (preferred channel; falls back to the team alert channel, then owner/admin email). OFF returns a soft \"not enabled\" result to the agent. Boolean gate; ships dark.",
+    flagType: "boolean",
+    defaultValue: false,
+    envVar: "AGT_AGENT_REQUEST_RECONNECT_ENABLED"
+  },
   {
     key: "model-api-error-reporting",
     description: "Manager reports model-API failures (529 overloaded, 429 rate-limit, 5xx, timeouts) from spawned-agent output and its own eval/memory backend calls to the AGT API, which persists them and opens a threshold alert for early warning of provider incidents (ENG-7363). Boolean gate; ships dark. Materialized to the host flags-cache.",

package/dist/{persistent-session-OP4TXILO.js → persistent-session-K5RJ4BVF.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-E45AAMBQ.js";
+} from "./chunk-MWKR6B3T.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-OP4TXILO.js.map
+//# sourceMappingURL=persistent-session-K5RJ4BVF.js.map

package/dist/{responsiveness-probe-K2RGVZCR.js → responsiveness-probe-2PHY7QKJ.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-E45AAMBQ.js";
+} from "./chunk-MWKR6B3T.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -418,4 +418,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-K2RGVZCR.js.map
+//# sourceMappingURL=responsiveness-probe-2PHY7QKJ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.264",
+  "version": "0.28.265",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {