@integrity-labs/agt-cli 0.28.346 → 0.28.348

package/dist/mcp/augmented-admin.js

@@ -21331,8 +21331,8 @@ var tailLogsSchema = external_exports.object({
   agent_id: external_exports.string().min(1).max(64).describe(
     "UUID of the agent whose host log to tail. Fails closed (uniform not-found) if you are not authorized for its org."
   ),
-  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "manager-state"]).optional().describe(
-    `Which host log to read (default manager). manager = manager.log (lifecycle / respawn / wedge lines); pane = pane.log (the tmux pane \u2014 the agent's visible I/O, what it was "actually doing"); slack-stderr / telegram-stderr = that channel MCP's stderr (crash diagnosis); manager-state = manager-state.json (current per-agent state snapshot).`
+  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "direct-chat-stderr", "manager-state"]).optional().describe(
+    `Which host log to read (default manager). manager = manager.log (lifecycle / respawn / wedge lines); pane = pane.log (the tmux pane \u2014 the agent's visible I/O, what it was "actually doing"); slack-stderr / telegram-stderr / direct-chat-stderr = that channel MCP's stderr (crash diagnosis, e.g. attachment-download 400s); manager-state = manager-state.json (current per-agent state snapshot).`
   ),
   lines: external_exports.number().int().min(1).max(2e3).optional().describe(
     "Trailing lines to return (default 200, max 2000). Output is also byte-capped (~20 KB, newest kept) to stay within SSM limits \u2014 `truncated` flags when it clipped."
@@ -21342,7 +21342,7 @@ var queryLogsSchema = external_exports.object({
   agent_id: external_exports.string().min(1).max(64).describe(
     "UUID of the agent whose host log to query. Fails closed (uniform not-found) if you are not authorized for its org."
   ),
-  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "manager-state"]).optional().describe(
+  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "direct-chat-stderr", "manager-state"]).optional().describe(
     "Which host log to read (default manager). Same allowlist as debug_tail_logs. Time filtering only applies to `manager` (its lines carry an ISO8601 prefix); the others return their byte-capped tail unfiltered (`time_filtered:false`)."
   ),
   since: external_exports.string().min(1).max(40).optional().describe(
@@ -21667,7 +21667,7 @@ server.tool(
 );
 server.tool(
   "debug_tail_logs",
-  "Live-tail an agent's HOST logs over SSM to ground-truth \"what was it actually doing?\" \u2014 the host-reaching read, used after debug_get_agent points at a sick agent. Resolves the agent's current host and returns the trailing lines of ONE allowlisted operational log: { agent_id, code_name, host, log, content (the tail), log_present, lines_requested, truncated, ssm_status }. Logs: `manager` (manager.log \u2014 respawn/wedge/lifecycle), `pane` (pane.log \u2014 the tmux pane, the agent's visible I/O, e.g. a stuck AskUserQuestion), `slack-stderr`/`telegram-stderr` (a channel MCP's crash output), `manager-state` (manager-state.json). Fails closed for an unauthorized org. Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, lines? } (lines default 200, max 2000; output ~20 KB-capped, newest kept). Every call is audited as a cross-org host access.",
+  "Live-tail an agent's HOST logs over SSM to ground-truth \"what was it actually doing?\" \u2014 the host-reaching read, used after debug_get_agent points at a sick agent. Resolves the agent's current host and returns the trailing lines of ONE allowlisted operational log: { agent_id, code_name, host, log, content (the tail), log_present, lines_requested, truncated, ssm_status }. Logs: `manager` (manager.log \u2014 respawn/wedge/lifecycle), `pane` (pane.log \u2014 the tmux pane, the agent's visible I/O, e.g. a stuck AskUserQuestion), `slack-stderr`/`telegram-stderr`/`direct-chat-stderr` (a channel MCP's crash output, e.g. attachment-download 400s), `manager-state` (manager-state.json). Fails closed for an unauthorized org. Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, lines? } (lines default 200, max 2000; output ~20 KB-capped, newest kept). Every call is audited as a cross-org host access.",
   tailLogsSchema.shape,
   async (args) => {
     try {
@@ -21680,7 +21680,7 @@ server.tool(
 );
 server.tool(
   "debug_query_logs",
-  'Read an agent\'s HOST logs OVER A TIME WINDOW, spanning rotated files \u2014 the historical counterpart to debug_tail_logs. Where tail only shows the live tail of the current file (minutes, and gone once it rotates), this reads the active log AND its logrotate siblings (manager.log.1, manager.log.2.gz, \u2026 14 kept) and filters lines to [since, until]. This is the read path for "did it restart at 4pm YESTERDAY?" \u2014 use it when the answer is older than the live tail or spans a rotation. Returns { agent_id, code_name, host, log, since, until, time_filtered, content, log_present, lines_requested, truncated, ssm_status }. Time filtering applies to `manager` (its lines carry an ISO8601 prefix); `pane`/`slack-stderr`/`telegram-stderr`/`manager-state` return their byte-capped tail unfiltered (time_filtered:false). Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, since?, until?, lines? } (since/until ISO8601 UTC e.g. 2026-06-14T16:00:00Z, default unbounded; lines default 1000, max 5000; output ~20 KB-capped, newest kept \u2014 narrow the window if truncated). Fails closed for an unauthorized org; every call is audited as a cross-org host access.',
+  'Read an agent\'s HOST logs OVER A TIME WINDOW, spanning rotated files \u2014 the historical counterpart to debug_tail_logs. Where tail only shows the live tail of the current file (minutes, and gone once it rotates), this reads the active log AND its logrotate siblings (manager.log.1, manager.log.2.gz, \u2026 14 kept) and filters lines to [since, until]. This is the read path for "did it restart at 4pm YESTERDAY?" \u2014 use it when the answer is older than the live tail or spans a rotation. Returns { agent_id, code_name, host, log, since, until, time_filtered, content, log_present, lines_requested, truncated, ssm_status }. Time filtering applies to `manager` (its lines carry an ISO8601 prefix); `pane`/`slack-stderr`/`telegram-stderr`/`direct-chat-stderr`/`manager-state` return their byte-capped tail unfiltered (time_filtered:false). Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, since?, until?, lines? } (since/until ISO8601 UTC e.g. 2026-06-14T16:00:00Z, default unbounded; lines default 1000, max 5000; output ~20 KB-capped, newest kept \u2014 narrow the window if truncated). Fails closed for an unauthorized org; every call is audited as a cross-org host access.',
   queryLogsSchema.shape,
   async (args) => {
     try {

package/dist/mcp/direct-chat-channel.js

@@ -30251,7 +30251,8 @@ import {
   readdirSync as readdirSync4,
   existsSync as existsSync6,
   renameSync as renameSync5,
-  unlinkSync as unlinkSync3
+  unlinkSync as unlinkSync3,
+  createWriteStream
 } from "fs";
 
 // src/direct-chat-inbound-attachments.ts
@@ -30329,6 +30330,9 @@ function buildAttachmentMeta(items) {
   if (firstImage?.path) meta.image_path = firstImage.path;
   return meta;
 }
+function redactPresignSignature(url) {
+  return url.replace(/([?&]X-Amz-Signature=)[^&]+/gi, "$1<redacted>").replace(/([?&]X-Amz-Security-Token=)[^&]+/gi, "$1<redacted>");
+}
 async function downloadInboundAttachment(att, dir, deps) {
   const base = {
     filename: att.filename,
@@ -30341,7 +30345,18 @@ async function downloadInboundAttachment(att, dir, deps) {
   }
   try {
     const res = await deps.fetchUrl(att.download_url);
-    if (!res.ok) return { ...base, error: `download HTTP ${res.status}` };
+    if (!res.ok) {
+      let s3Body = "";
+      try {
+        const raw = await res.bytes();
+        s3Body = new TextDecoder().decode(raw.slice(0, 600)).replace(/\s+/g, " ").trim();
+      } catch {
+      }
+      deps.warn(
+        `direct-chat inbound download HTTP ${res.status} for ${att.filename} url=${redactPresignSignature(att.download_url)} s3Body=${s3Body}`
+      );
+      return { ...base, error: `download HTTP ${res.status}` };
+    }
     if (res.contentLength != null && res.contentLength > MAX_INBOUND_ATTACHMENT_BYTES) {
       return { ...base, error: "exceeds the 10 MB inbound limit" };
     }
@@ -33045,8 +33060,8 @@ var INTEGRATION_REGISTRY = [
       pricing: "usage",
       note: "Billed per Deck task run, plus per compute-minute.",
       meters: [
-        { event_type: "run_task", unit: "run" },
-        { event_type: "run_minutes", unit: "minute" }
+        { event_type: "run_task", unit: "run", label: "Base run fee" },
+        { event_type: "run_minutes", unit: "minute", label: "Compute time" }
       ]
     }
   },
@@ -34987,6 +35002,31 @@ var INBOUND_ATTACHMENTS_DIR = resolveInboundAttachmentsDir({
   homeDir: homedir3()
 });
 var AGT_AGENT_CODE_NAME = process.env.AGT_AGENT_CODE_NAME;
+var directChatStderrLogStream = null;
+if (AGT_AGENT_CODE_NAME) {
+  try {
+    const logDir = join10(homedir3(), ".augmented", AGT_AGENT_CODE_NAME);
+    mkdirSync5(logDir, { recursive: true });
+    directChatStderrLogStream = createWriteStream(
+      join10(logDir, "direct-chat-channel-stderr.log"),
+      { flags: "a", mode: 384 }
+    );
+    directChatStderrLogStream.on("error", () => {
+      directChatStderrLogStream = null;
+    });
+    const origWrite = process.stderr.write.bind(process.stderr);
+    process.stderr.write = (chunk, ...rest) => {
+      try {
+        const buf = typeof chunk === "string" ? chunk : String(chunk);
+        const ts = (/* @__PURE__ */ new Date()).toISOString();
+        directChatStderrLogStream?.write(`[${ts}] ${buf}${buf.endsWith("\n") ? "" : "\n"}`);
+      } catch {
+      }
+      return origWrite(chunk, ...rest);
+    };
+  } catch {
+  }
+}
 var PROGRESS_HEARTBEAT_PATH = AGT_AGENT_CODE_NAME ? join10(homedir3(), ".augmented", AGT_AGENT_CODE_NAME, "channel-progress-heartbeat.json") : null;
 var DIRECT_CHAT_PENDING_INBOUND_DIR = AGT_AGENT_CODE_NAME ? join10(homedir3(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-pending-inbound") : null;
 var DIRECT_CHAT_DELIVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join10(homedir3(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-inbound-delivery-ledger") : null;

package/dist/mcp/origami.js

@@ -38859,8 +38859,8 @@ var INTEGRATION_REGISTRY = [
       pricing: "usage",
       note: "Billed per Deck task run, plus per compute-minute.",
       meters: [
-        { event_type: "run_task", unit: "run" },
-        { event_type: "run_minutes", unit: "minute" }
+        { event_type: "run_task", unit: "run", label: "Base run fee" },
+        { event_type: "run_minutes", unit: "minute", label: "Compute time" }
       ]
     }
   },

package/dist/mcp/slack-channel.js

@@ -32742,8 +32742,8 @@ var INTEGRATION_REGISTRY = [
       pricing: "usage",
       note: "Billed per Deck task run, plus per compute-minute.",
       meters: [
-        { event_type: "run_task", unit: "run" },
-        { event_type: "run_minutes", unit: "minute" }
+        { event_type: "run_task", unit: "run", label: "Base run fee" },
+        { event_type: "run_minutes", unit: "minute", label: "Compute time" }
       ]
     }
   },
@@ -37345,6 +37345,9 @@ function buildSlackMcpInstructions(opts) {
   ].join(" ");
 }
 
+// src/slack-react-taxonomy.ts
+var SLACK_REACT_TOOL_DESCRIPTION = "Add an emoji reaction to a Slack message. Use sparingly \u2014 prefer a text reply. Reaction taxonomy: \u2705 = action completed successfully. \u{1F4DD} (:memo:) and \u26A0\uFE0F (:warning:) are blessed for explicit multi-state STATUS pipelines only \u2014 e.g. marking a run/parent \u2705 done / \u{1F4DD} waiting / \u26A0\uFE0F failed for at-a-glance status. That exception is narrow: never use a reaction to tell a user that YOUR reply failed \u2014 NEVER react to signal failure of your own work; on failure call slack.reply with one sentence explaining what went wrong instead (no stack traces, no secrets). \u{1F440} (eyes) is already auto-applied on inbound; do not duplicate. \u23F3 (:hourglass_flowing_sand:) is reserved for the system to mark an inbound that arrived while the agent couldn't reply \u2014 never add \u23F3 or \u274C yourself. (A \u{1F512} you may see on a thread is the server's reply-throttle marker, not a coerced reaction \u2014 slack.react passes your emoji straight through to Slack and never rewrites it to \u{1F512}.)";
+
 // src/slack-reply-binding-telemetry.ts
 import { readFileSync as readFileSync13, writeFileSync as writeFileSync10 } from "fs";
 import { join as join13 } from "path";
@@ -40919,13 +40922,13 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
     },
     {
       name: "slack.react",
-      description: "Add an emoji reaction to a Slack message. Use sparingly \u2014 prefer a text reply. Reaction taxonomy: \u2705 = action completed successfully. NEVER react to signal failure of your work \u2014 users can't tell why it failed from a reaction. On failure, call slack.reply with one sentence explaining what went wrong instead. \u{1F440} (eyes) is already auto-applied on inbound; do not duplicate. \u23F3 (:hourglass_flowing_sand:) is reserved for the system to mark an inbound that arrived while the agent couldn't reply \u2014 never add \u23F3 or \u274C yourself.",
+      description: SLACK_REACT_TOOL_DESCRIPTION,
       inputSchema: {
         type: "object",
         properties: {
           channel: { type: "string", description: "Slack channel ID" },
           timestamp: { type: "string", description: "Message timestamp to react to" },
-          emoji: { type: "string", description: 'Emoji name without colons (e.g. "white_check_mark"). Do NOT use "x" or any other failure emoji \u2014 send a slack.reply explaining the failure instead.' }
+          emoji: { type: "string", description: 'Emoji name without colons (e.g. "white_check_mark", "memo", "warning"). Do NOT use "x" (\u274C) or "hourglass_flowing_sand" (\u23F3) \u2014 those are system-only. To signal that your own reply failed, send a slack.reply explaining it rather than a reaction. See the tool description for the full taxonomy.' }
         },
         required: ["channel", "timestamp", "emoji"]
       }

package/dist/mcp/telegram-channel.js

@@ -33092,8 +33092,8 @@ var INTEGRATION_REGISTRY = [
       pricing: "usage",
       note: "Billed per Deck task run, plus per compute-minute.",
       meters: [
-        { event_type: "run_task", unit: "run" },
-        { event_type: "run_minutes", unit: "minute" }
+        { event_type: "run_task", unit: "run", label: "Base run fee" },
+        { event_type: "run_minutes", unit: "minute", label: "Compute time" }
       ]
     }
   },

package/dist/{persistent-session-2UIVPYXX.js → persistent-session-G22EFMQM.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-NUL7IYDV.js";
+} from "./chunk-ZGY4ADGS.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-2UIVPYXX.js.map
+//# sourceMappingURL=persistent-session-G22EFMQM.js.map

package/dist/{responsiveness-probe-CPMALCAG.js → responsiveness-probe-HXZFFAGD.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-NUL7IYDV.js";
+} from "./chunk-ZGY4ADGS.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -437,4 +437,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-CPMALCAG.js.map
+//# sourceMappingURL=responsiveness-probe-HXZFFAGD.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.346",
+  "version": "0.28.348",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {