@integrity-labs/agt-cli 0.28.34 → 0.28.35

package/dist/{chunk-HTRILMXV.js → chunk-OOM6UIVP.js}

@@ -1,7 +1,7 @@
 import {
   claudeModelAlias,
   isClaudeFastMode
-} from "./chunk-R5CP4WAO.js";
+} from "./chunk-DVAHAZQN.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -1487,4 +1487,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-HTRILMXV.js.map
+//# sourceMappingURL=chunk-OOM6UIVP.js.map

package/dist/{claude-pair-runtime-LP4W56RT.js → claude-pair-runtime-DLP427EB.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-RNALQ7JD.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-CSRLAED4.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-LP4W56RT.js.map
+//# sourceMappingURL=claude-pair-runtime-DLP427EB.js.map

package/dist/lib/manager-worker.js

@@ -23,7 +23,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-DLCUI4J5.js";
+} from "../chunk-5G4VLVFN.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -65,7 +65,7 @@ import {
   takeWatchdogGiveUpCount,
   takeZombieDetection,
   transcriptActivityAgeSeconds
-} from "../chunk-HTRILMXV.js";
+} from "../chunk-OOM6UIVP.js";
 import {
   FLAGS_SCHEMA_VERSION,
   FLAG_REGISTRY,
@@ -99,7 +99,7 @@ import {
   sumTranscriptUsageInWindow,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "../chunk-R5CP4WAO.js";
+} from "../chunk-DVAHAZQN.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -6199,7 +6199,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.34" : "dev";
+var agtCliVersion = true ? "0.28.35" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7327,7 +7327,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-RNALQ7JD.js");
+      const { collectDiagnostics } = await import("../persistent-session-CSRLAED4.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7428,7 +7428,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-DRP2PPVE.js");
+      } = await import("../responsiveness-probe-43ON4QKC.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7460,7 +7460,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-DRP2PPVE.js");
+        } = await import("../responsiveness-probe-43ON4QKC.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -11432,7 +11432,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-LP4W56RT.js");
+  } = await import("../claude-pair-runtime-DLP427EB.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/augmented-admin.js

@@ -21159,6 +21159,20 @@ var AdminDebugClient = class _AdminDebugClient {
       run_id: this.runId
     });
   }
+  /** Request a HITL-gated agent-config update (ENG-6425). */
+  requestConfigUpdate(args) {
+    if (!this.agentId) {
+      throw makeError(400, "AdminDebugClient.requestConfigUpdate requires agentId (set AGT_AGENT_ID)");
+    }
+    return this.post("/admin/debug/actions/update-config", {
+      target_agent_id: args.target_agent_id,
+      field: args.field,
+      new_value: args.new_value,
+      reason: args.reason,
+      agent_id: this.agentId,
+      run_id: this.runId
+    });
+  }
   /** Poll a remedial action's HITL decision. */
   getActionStatus(requestId) {
     return this.get(`/admin/debug/actions/${encodeURIComponent(requestId)}`);
@@ -21199,8 +21213,16 @@ var requestActionSchema = external_exports.object({
   target_agent_id: external_exports.string().min(1).max(64).describe("UUID of the customer agent to act on."),
   reason: external_exports.string().min(1).max(2e3).describe("Why this action is needed \u2014 shown verbatim to the human approver. Be specific.")
 });
+var requestConfigUpdateSchema = external_exports.object({
+  target_agent_id: external_exports.string().min(1).max(64).describe("UUID of the customer agent whose config to change."),
+  field: external_exports.enum(["primary_model", "secondary_model", "tertiary_model"]).describe("The agent-config field to change. Only the model tiers are settable."),
+  new_value: external_exports.string().min(1).max(128).describe(
+    "The new model value. For Claude Code (subscription) agents use a family alias (fable/opus/opus[fast]/sonnet/haiku); for routed agents (OpenClaw/NemoClaw) use a full stored model id (e.g. openrouter/anthropic/claude-opus-4-6). The value is validated against the target agent \u2014 an invalid value is rejected before any approval is requested."
+  ),
+  reason: external_exports.string().min(1).max(2e3).describe("Why this change is needed \u2014 shown verbatim to the human approver. Be specific.")
+});
 var checkActionStatusSchema = external_exports.object({
-  request_id: external_exports.string().min(1).max(64).describe("The action request_id returned by request_action.")
+  request_id: external_exports.string().min(1).max(64).describe("The action request_id returned by request_action or request_config_update.")
 });
 var queryAuditLogSchema = external_exports.object({
   agent_id: external_exports.string().min(1).max(64).describe("UUID of the agent whose audit events to read (required \u2014 the read is scoped to this agent's org)."),
@@ -21375,6 +21397,24 @@ server.tool(
     }
   }
 );
+server.tool(
+  "request_config_update",
+  "Request a HITL-gated change to a customer agent's model config (primary/secondary/tertiary_model). A HUMAN must approve in Slack before anything happens, and only if writes are armed for this stage (shadow mode runs the approval but executes nothing). The change is reversible and applies at the agent's NEXT session launch after /host/refresh \u2014 it does not restart the agent. The new value is validated against the agent before approval is requested: Claude Code (subscription) agents take a family alias (fable/opus/opus[fast]/sonnet/haiku); routed agents take a full stored model id (e.g. openrouter/anthropic/claude-opus-4-6). Use this to fix a misconfigured model (e.g. an agent wedged on a model its auth can't access). Returns { request_id, status, write_mode, notification_status }. Pass { target_agent_id, field, new_value, reason }.",
+  requestConfigUpdateSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.requestConfigUpdate({
+        target_agent_id: args.target_agent_id,
+        field: args.field,
+        new_value: args.new_value,
+        reason: args.reason
+      });
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "check_action_status",
   "Poll the decision on a remedial action you requested (the approval result is also pushed to you via direct-chat). Returns { status, result_payload, denial_reason, resolved_at }. Pass { request_id }.",

package/dist/{persistent-session-RNALQ7JD.js → persistent-session-CSRLAED4.js}

@@ -25,8 +25,8 @@ import {
   takeZombieDetection,
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
-} from "./chunk-HTRILMXV.js";
-import "./chunk-R5CP4WAO.js";
+} from "./chunk-OOM6UIVP.js";
+import "./chunk-DVAHAZQN.js";
 import "./chunk-XWVM4KPK.js";
 export {
   SEND_KEYS_ENTER_DELAY_MS,
@@ -56,4 +56,4 @@ export {
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-RNALQ7JD.js.map
+//# sourceMappingURL=persistent-session-CSRLAED4.js.map

package/dist/{responsiveness-probe-DRP2PPVE.js → responsiveness-probe-43ON4QKC.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-HTRILMXV.js";
-import "./chunk-R5CP4WAO.js";
+} from "./chunk-OOM6UIVP.js";
+import "./chunk-DVAHAZQN.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -250,4 +250,4 @@ export {
   parkPendingInbound,
   readAndResetChannelDeflections
 };
-//# sourceMappingURL=responsiveness-probe-DRP2PPVE.js.map
+//# sourceMappingURL=responsiveness-probe-43ON4QKC.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.34",
+  "version": "0.28.35",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {