@integrity-labs/agt-cli 0.28.264 → 0.28.266

package/dist/{claude-pair-runtime-X5NJYZSK.js → claude-pair-runtime-CXIVEO6R.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-OP4TXILO.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-FGGXFAJH.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-X5NJYZSK.js.map
+//# sourceMappingURL=claude-pair-runtime-CXIVEO6R.js.map

package/dist/lib/manager-worker.js

@@ -37,7 +37,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-MQ5S642N.js";
+} from "../chunk-Z5YUBTSG.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -122,7 +122,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-E45AAMBQ.js";
+} from "../chunk-GBVZDTCB.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -6699,7 +6699,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.264" : "dev";
+var agtCliVersion = true ? "0.28.266" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7549,7 +7549,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-OP4TXILO.js");
+      const { collectDiagnostics } = await import("../persistent-session-FGGXFAJH.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7647,7 +7647,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-OP4TXILO.js");
+      const { collectDiagnostics } = await import("../persistent-session-FGGXFAJH.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7795,7 +7795,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-K2RGVZCR.js");
+      } = await import("../responsiveness-probe-2734PYS6.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7827,7 +7827,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-K2RGVZCR.js");
+        } = await import("../responsiveness-probe-2734PYS6.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -10671,7 +10671,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-OP4TXILO.js");
+        const { collectDiagnostics } = await import("../persistent-session-FGGXFAJH.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -10721,7 +10721,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-OP4TXILO.js");
+      const { collectDiagnostics } = await import("../persistent-session-FGGXFAJH.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -11112,7 +11112,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-X5NJYZSK.js");
+  } = await import("../claude-pair-runtime-CXIVEO6R.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/index.js

@@ -21202,6 +21202,37 @@ function describeFeatureRequestResult(resp) {
   };
 }
 
+// src/request-reconnect.ts
+function describeReconnectRequestResult(resp) {
+  switch (resp.status) {
+    case "notified":
+      return {
+        text: "Reconnect request sent \u2014 your manager has been notified with a reconnect link. Stop retrying the failing tool; it should start working again once the integration is reconnected.",
+        isError: false
+      };
+    case "coalesced":
+      return {
+        text: "A reconnect request for this integration was already sent recently, so no new notification went out. Stop retrying the failing tool and wait for the reconnect.",
+        isError: false
+      };
+    case "healthy":
+      return {
+        text: "The platform shows this integration as connected, so no reconnect request was sent. If the tool is still failing, tell your operator exactly what error you saw instead of retrying.",
+        isError: false
+      };
+    case "not_reconnectable":
+      return {
+        text: "This integration has no reconnect path (it is not an OAuth/managed connection), so a reconnect request would not help. Tell your operator what failed so they can fix its configuration.",
+        isError: false
+      };
+    default:
+      return {
+        text: `Could not send the reconnect request${resp.message ? `: ${resp.message}` : ""}. Tell your operator which integration is failing and don't keep retrying.`,
+        isError: true
+      };
+  }
+}
+
 // src/form-request.ts
 function describeFormRequestResult(resp) {
   if (resp.ok && resp.status === "pending" && resp.request_id) {
@@ -22236,6 +22267,46 @@ server.tool(
     return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
   }
 );
+server.tool(
+  "request_reconnect",
+  'Ask for one of YOUR OWN integrations to be reconnected when its tools fail with authentication/authorization errors (expired or revoked credentials, "needs re-auth", 401/403 from the provider). This notifies your human manager with a reconnect link \u2014 you cannot re-auth an integration yourself. Use it once per failing integration instead of retrying the failing tool; do NOT use it for tools you never had, for transient errors (timeouts, rate limits), or to request new integrations (use request_feature for that).',
+  {
+    integration: external_exports.string().min(1).max(120).describe(
+      `The integration's id as it appears in your toolkit (e.g. "gmail", "xero", "github") \u2014 the service whose tools are failing with auth errors.`
+    ),
+    reason: external_exports.string().min(1).max(500).describe(
+      'Short factual description of what failed \u2014 the tool you called and the auth error you saw (e.g. "gmail search returned 401 invalid_grant"). Shown to the human who reconnects it.'
+    )
+  },
+  async (params) => {
+    if (!AGT_AGENT_CODE_NAME) {
+      return {
+        content: [{ type: "text", text: "Error: AGT_AGENT_CODE_NAME not configured." }],
+        isError: true
+      };
+    }
+    let resp;
+    try {
+      resp = await apiPost("/host/request-reconnect", {
+        agent_code_name: AGT_AGENT_CODE_NAME,
+        integration: params.integration,
+        reason: params.reason
+      });
+    } catch (err) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Could not reach the reconnect-request service (${err instanceof Error ? err.message : String(err)}). Tell your operator which integration is failing.`
+          }
+        ],
+        isError: true
+      };
+    }
+    const { text, isError } = describeReconnectRequestResult(resp);
+    return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
+  }
+);
 server.tool(
   "update_identity",
   "Update your OWN identity: your role, personality, description, and/or display name. Provide only the fields you want to change; omitted fields are left unchanged, and passing an empty string clears a field (display_name cannot be emptied). Your code_name never changes. Changes are saved immediately and take effect within a few minutes, on your next configuration refresh, when your guidance is regenerated. Use this to refine how you present yourself or how you behave, not for one-off tasks. Avoid changing your identity frequently.",
@@ -23506,6 +23577,9 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   // this name, so the forwarding-skip is a no-op; listed here to keep the
   // lockstep guard green.
   "request_feature",
+  // ENG-7495: agent-requested integration reconnect (always registered). No
+  // API tool shares this name; listed here to keep the lockstep guard green.
+  "request_reconnect",
   // ENG-6686: self-service identity edit (always registered). Listed here to
   // keep the lockstep guard green; no API tool shares this name.
   "update_identity",

package/dist/mcp/origami.js

@@ -38735,6 +38735,40 @@ var INTEGRATION_REGISTRY = [
       ]
     }
   },
+  {
+    id: "image-gen",
+    name: "Image Generation",
+    category: "media",
+    description: "AI image generation for Augmented Live pages. An agent authoring a page passes a text prompt (agt_live.generate_image) and gets back a generated raster image, stored on the page asset CDN so there is no image to source or host. Augmented Team manages the model access for you - there is no key to enter. Generation runs through the Vercel AI Gateway (OpenAI gpt-image-2 today). It is a PREMIUM, usage-billed capability, separate from Augmented Live text and audio: gated on a per-org opt-in and a monthly USD budget, and metered per generated image.",
+    // No vendor key to enter: Augmented owns the shared Vercel AI Gateway virtual
+    // key (AI_GATEWAY_API_KEY) that fronts the image providers, so auth is `none`
+    // (customers never enter a key), same as ElevenLabs.
+    supported_auth_types: ["none"],
+    capabilities: [
+      { id: "image-gen:generate", name: "Generate Image", description: "Generate a raster image from a text prompt for an Augmented Live page (agt_live.generate_image)", access: "write" }
+    ],
+    docs_url: "https://platform.openai.com/docs/guides/images",
+    beta: true,
+    // ENG-7472: premium (billable). Image gen bills back to Augmented's shared
+    // Vercel AI Gateway key and is usage-priced per generated image, so it is gated
+    // on a per-org opt-in (isOrgEntitledToPremium) + a per-org monthly USD budget,
+    // and metered on integration_usage_events. This budget is PER-ORG, distinct
+    // from the gateway key's own global per-key cap. Pricing lives in
+    // integration_rate_cards; this only declares the priced model(s).
+    //
+    // event_type is per MODEL VERSION (not a flat `image`), because model versions
+    // price differently (e.g. gpt-image-2 vs a future gpt-image-3 or a Gemini image
+    // model). Only a model we actually run AND have seeded a rate card for is
+    // declared here; the handler fails CLOSED when the deployed model maps to an
+    // undeclared meter, so a version bump without a rate card refuses rather than
+    // silently disabling the budget. Adding a model = declare its meter here + seed
+    // its rate card + add a normalizer entry in augmented-live-image-gen.ts.
+    premium: {
+      pricing: "usage",
+      note: "Billed per generated image; the rate depends on the model/version used.",
+      meters: [{ event_type: "gpt_image_2", unit: "image" }]
+    }
+  },
   {
     id: "postiz",
     name: "Postiz",
@@ -39779,6 +39813,13 @@ var FLAG_REGISTRY = [
     defaultValue: false,
     envVar: "AGT_MANAGER_FAILURE_NOTIFY_ENABLED"
   },
+  {
+    key: "agent-request-reconnect",
+    description: "Agent-facing `request_reconnect` MCP tool (ENG-7495). When ON, POST /host/request-reconnect accepts an agent's report that one of its integrations is failing auth, validates it against the shared needsReconnect predicate, and notifies the agent's human manager with a reconnect deep link (preferred channel; falls back to the team alert channel, then owner/admin email). OFF returns a soft \"not enabled\" result to the agent. Boolean gate; ships dark.",
+    flagType: "boolean",
+    defaultValue: false,
+    envVar: "AGT_AGENT_REQUEST_RECONNECT_ENABLED"
+  },
   {
     key: "model-api-error-reporting",
     description: "Manager reports model-API failures (529 overloaded, 429 rate-limit, 5xx, timeouts) from spawned-agent output and its own eval/memory backend calls to the AGT API, which persists them and opens a threshold alert for early warning of provider incidents (ENG-7363). Boolean gate; ships dark. Materialized to the host flags-cache.",

package/dist/{persistent-session-OP4TXILO.js → persistent-session-FGGXFAJH.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-E45AAMBQ.js";
+} from "./chunk-GBVZDTCB.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-OP4TXILO.js.map
+//# sourceMappingURL=persistent-session-FGGXFAJH.js.map

package/dist/{responsiveness-probe-K2RGVZCR.js → responsiveness-probe-2734PYS6.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-E45AAMBQ.js";
+} from "./chunk-GBVZDTCB.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -418,4 +418,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-K2RGVZCR.js.map
+//# sourceMappingURL=responsiveness-probe-2734PYS6.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.264",
+  "version": "0.28.266",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {