@integrity-labs/agt-cli 0.28.347 → 0.28.348

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-CD3HY46A.js";
+} from "../chunk-3ME4JXUG.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.347" : "dev";
+var cliVersion = true ? "0.28.348" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.347" : "dev";
+var cliVersion2 = true ? "0.28.348" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-CD3HY46A.js → chunk-3ME4JXUG.js}

@@ -7107,7 +7107,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.347" : "dev";
+var agtCliVersion = true ? "0.28.348" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9556,4 +9556,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-CD3HY46A.js.map
+//# sourceMappingURL=chunk-3ME4JXUG.js.map

package/dist/lib/manager-worker.js

@@ -46,7 +46,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-CD3HY46A.js";
+} from "../chunk-3ME4JXUG.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -9303,7 +9303,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.347" : "dev";
+var agtCliVersion = true ? "0.28.348" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/augmented-admin.js

@@ -21331,8 +21331,8 @@ var tailLogsSchema = external_exports.object({
   agent_id: external_exports.string().min(1).max(64).describe(
     "UUID of the agent whose host log to tail. Fails closed (uniform not-found) if you are not authorized for its org."
   ),
-  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "manager-state"]).optional().describe(
-    `Which host log to read (default manager). manager = manager.log (lifecycle / respawn / wedge lines); pane = pane.log (the tmux pane \u2014 the agent's visible I/O, what it was "actually doing"); slack-stderr / telegram-stderr = that channel MCP's stderr (crash diagnosis); manager-state = manager-state.json (current per-agent state snapshot).`
+  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "direct-chat-stderr", "manager-state"]).optional().describe(
+    `Which host log to read (default manager). manager = manager.log (lifecycle / respawn / wedge lines); pane = pane.log (the tmux pane \u2014 the agent's visible I/O, what it was "actually doing"); slack-stderr / telegram-stderr / direct-chat-stderr = that channel MCP's stderr (crash diagnosis, e.g. attachment-download 400s); manager-state = manager-state.json (current per-agent state snapshot).`
   ),
   lines: external_exports.number().int().min(1).max(2e3).optional().describe(
     "Trailing lines to return (default 200, max 2000). Output is also byte-capped (~20 KB, newest kept) to stay within SSM limits \u2014 `truncated` flags when it clipped."
@@ -21342,7 +21342,7 @@ var queryLogsSchema = external_exports.object({
   agent_id: external_exports.string().min(1).max(64).describe(
     "UUID of the agent whose host log to query. Fails closed (uniform not-found) if you are not authorized for its org."
   ),
-  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "manager-state"]).optional().describe(
+  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "direct-chat-stderr", "manager-state"]).optional().describe(
     "Which host log to read (default manager). Same allowlist as debug_tail_logs. Time filtering only applies to `manager` (its lines carry an ISO8601 prefix); the others return their byte-capped tail unfiltered (`time_filtered:false`)."
   ),
   since: external_exports.string().min(1).max(40).optional().describe(
@@ -21667,7 +21667,7 @@ server.tool(
 );
 server.tool(
   "debug_tail_logs",
-  "Live-tail an agent's HOST logs over SSM to ground-truth \"what was it actually doing?\" \u2014 the host-reaching read, used after debug_get_agent points at a sick agent. Resolves the agent's current host and returns the trailing lines of ONE allowlisted operational log: { agent_id, code_name, host, log, content (the tail), log_present, lines_requested, truncated, ssm_status }. Logs: `manager` (manager.log \u2014 respawn/wedge/lifecycle), `pane` (pane.log \u2014 the tmux pane, the agent's visible I/O, e.g. a stuck AskUserQuestion), `slack-stderr`/`telegram-stderr` (a channel MCP's crash output), `manager-state` (manager-state.json). Fails closed for an unauthorized org. Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, lines? } (lines default 200, max 2000; output ~20 KB-capped, newest kept). Every call is audited as a cross-org host access.",
+  "Live-tail an agent's HOST logs over SSM to ground-truth \"what was it actually doing?\" \u2014 the host-reaching read, used after debug_get_agent points at a sick agent. Resolves the agent's current host and returns the trailing lines of ONE allowlisted operational log: { agent_id, code_name, host, log, content (the tail), log_present, lines_requested, truncated, ssm_status }. Logs: `manager` (manager.log \u2014 respawn/wedge/lifecycle), `pane` (pane.log \u2014 the tmux pane, the agent's visible I/O, e.g. a stuck AskUserQuestion), `slack-stderr`/`telegram-stderr`/`direct-chat-stderr` (a channel MCP's crash output, e.g. attachment-download 400s), `manager-state` (manager-state.json). Fails closed for an unauthorized org. Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, lines? } (lines default 200, max 2000; output ~20 KB-capped, newest kept). Every call is audited as a cross-org host access.",
   tailLogsSchema.shape,
   async (args) => {
     try {
@@ -21680,7 +21680,7 @@ server.tool(
 );
 server.tool(
   "debug_query_logs",
-  'Read an agent\'s HOST logs OVER A TIME WINDOW, spanning rotated files \u2014 the historical counterpart to debug_tail_logs. Where tail only shows the live tail of the current file (minutes, and gone once it rotates), this reads the active log AND its logrotate siblings (manager.log.1, manager.log.2.gz, \u2026 14 kept) and filters lines to [since, until]. This is the read path for "did it restart at 4pm YESTERDAY?" \u2014 use it when the answer is older than the live tail or spans a rotation. Returns { agent_id, code_name, host, log, since, until, time_filtered, content, log_present, lines_requested, truncated, ssm_status }. Time filtering applies to `manager` (its lines carry an ISO8601 prefix); `pane`/`slack-stderr`/`telegram-stderr`/`manager-state` return their byte-capped tail unfiltered (time_filtered:false). Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, since?, until?, lines? } (since/until ISO8601 UTC e.g. 2026-06-14T16:00:00Z, default unbounded; lines default 1000, max 5000; output ~20 KB-capped, newest kept \u2014 narrow the window if truncated). Fails closed for an unauthorized org; every call is audited as a cross-org host access.',
+  'Read an agent\'s HOST logs OVER A TIME WINDOW, spanning rotated files \u2014 the historical counterpart to debug_tail_logs. Where tail only shows the live tail of the current file (minutes, and gone once it rotates), this reads the active log AND its logrotate siblings (manager.log.1, manager.log.2.gz, \u2026 14 kept) and filters lines to [since, until]. This is the read path for "did it restart at 4pm YESTERDAY?" \u2014 use it when the answer is older than the live tail or spans a rotation. Returns { agent_id, code_name, host, log, since, until, time_filtered, content, log_present, lines_requested, truncated, ssm_status }. Time filtering applies to `manager` (its lines carry an ISO8601 prefix); `pane`/`slack-stderr`/`telegram-stderr`/`direct-chat-stderr`/`manager-state` return their byte-capped tail unfiltered (time_filtered:false). Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, since?, until?, lines? } (since/until ISO8601 UTC e.g. 2026-06-14T16:00:00Z, default unbounded; lines default 1000, max 5000; output ~20 KB-capped, newest kept \u2014 narrow the window if truncated). Fails closed for an unauthorized org; every call is audited as a cross-org host access.',
   queryLogsSchema.shape,
   async (args) => {
     try {

package/dist/mcp/direct-chat-channel.js

@@ -30251,7 +30251,8 @@ import {
   readdirSync as readdirSync4,
   existsSync as existsSync6,
   renameSync as renameSync5,
-  unlinkSync as unlinkSync3
+  unlinkSync as unlinkSync3,
+  createWriteStream
 } from "fs";
 
 // src/direct-chat-inbound-attachments.ts
@@ -30329,6 +30330,9 @@ function buildAttachmentMeta(items) {
   if (firstImage?.path) meta.image_path = firstImage.path;
   return meta;
 }
+function redactPresignSignature(url) {
+  return url.replace(/([?&]X-Amz-Signature=)[^&]+/gi, "$1<redacted>").replace(/([?&]X-Amz-Security-Token=)[^&]+/gi, "$1<redacted>");
+}
 async function downloadInboundAttachment(att, dir, deps) {
   const base = {
     filename: att.filename,
@@ -30341,7 +30345,18 @@ async function downloadInboundAttachment(att, dir, deps) {
   }
   try {
     const res = await deps.fetchUrl(att.download_url);
-    if (!res.ok) return { ...base, error: `download HTTP ${res.status}` };
+    if (!res.ok) {
+      let s3Body = "";
+      try {
+        const raw = await res.bytes();
+        s3Body = new TextDecoder().decode(raw.slice(0, 600)).replace(/\s+/g, " ").trim();
+      } catch {
+      }
+      deps.warn(
+        `direct-chat inbound download HTTP ${res.status} for ${att.filename} url=${redactPresignSignature(att.download_url)} s3Body=${s3Body}`
+      );
+      return { ...base, error: `download HTTP ${res.status}` };
+    }
     if (res.contentLength != null && res.contentLength > MAX_INBOUND_ATTACHMENT_BYTES) {
       return { ...base, error: "exceeds the 10 MB inbound limit" };
     }
@@ -34987,6 +35002,31 @@ var INBOUND_ATTACHMENTS_DIR = resolveInboundAttachmentsDir({
   homeDir: homedir3()
 });
 var AGT_AGENT_CODE_NAME = process.env.AGT_AGENT_CODE_NAME;
+var directChatStderrLogStream = null;
+if (AGT_AGENT_CODE_NAME) {
+  try {
+    const logDir = join10(homedir3(), ".augmented", AGT_AGENT_CODE_NAME);
+    mkdirSync5(logDir, { recursive: true });
+    directChatStderrLogStream = createWriteStream(
+      join10(logDir, "direct-chat-channel-stderr.log"),
+      { flags: "a", mode: 384 }
+    );
+    directChatStderrLogStream.on("error", () => {
+      directChatStderrLogStream = null;
+    });
+    const origWrite = process.stderr.write.bind(process.stderr);
+    process.stderr.write = (chunk, ...rest) => {
+      try {
+        const buf = typeof chunk === "string" ? chunk : String(chunk);
+        const ts = (/* @__PURE__ */ new Date()).toISOString();
+        directChatStderrLogStream?.write(`[${ts}] ${buf}${buf.endsWith("\n") ? "" : "\n"}`);
+      } catch {
+      }
+      return origWrite(chunk, ...rest);
+    };
+  } catch {
+  }
+}
 var PROGRESS_HEARTBEAT_PATH = AGT_AGENT_CODE_NAME ? join10(homedir3(), ".augmented", AGT_AGENT_CODE_NAME, "channel-progress-heartbeat.json") : null;
 var DIRECT_CHAT_PENDING_INBOUND_DIR = AGT_AGENT_CODE_NAME ? join10(homedir3(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-pending-inbound") : null;
 var DIRECT_CHAT_DELIVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join10(homedir3(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-inbound-delivery-ledger") : null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.347",
+  "version": "0.28.348",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {