@integrity-labs/agt-cli 0.28.44 → 0.28.46

package/dist/mcp/augmented-admin.js

@@ -21182,6 +21182,19 @@ var AdminDebugClient = class _AdminDebugClient {
       run_id: this.runId
     });
   }
+  /** Request a HITL-gated, allowlisted diagnostic SSM run (ENG-6442). */
+  requestSsmRun(args) {
+    if (!this.agentId) {
+      throw makeError(400, "AdminDebugClient.requestSsmRun requires agentId (set AGT_AGENT_ID)");
+    }
+    return this.post("/admin/debug/actions/ssm-run", {
+      target_agent_id: args.target_agent_id,
+      command_key: args.command,
+      reason: args.reason,
+      agent_id: this.agentId,
+      run_id: this.runId
+    });
+  }
   /** Poll a remedial action's HITL decision. */
   getActionStatus(requestId) {
     return this.get(`/admin/debug/actions/${encodeURIComponent(requestId)}`);
@@ -21259,7 +21272,14 @@ var requestConfigUpdateSchema = external_exports.object({
   reason: external_exports.string().min(1).max(2e3).describe("Why this change is needed \u2014 shown verbatim to the human approver. Be specific.")
 });
 var checkActionStatusSchema = external_exports.object({
-  request_id: external_exports.string().min(1).max(64).describe("The action request_id returned by request_action or request_config_update.")
+  request_id: external_exports.string().min(1).max(64).describe("The action request_id returned by request_action, request_config_update, or request_ssm_run.")
+});
+var requestSsmRunSchema = external_exports.object({
+  target_agent_id: external_exports.string().min(1).max(64).describe("UUID of the customer agent whose host to run the diagnostic on."),
+  command: external_exports.enum(["host_health", "manager_status", "manager_journal", "process_list", "agent_dir"]).describe(
+    "The allowlisted, READ-ONLY diagnostic to run (closed set \u2014 no free-form shell). host_health = uptime + df -h + free -m (is the box wedged / out of disk / out of memory?); manager_status = systemctl status agt-manager.service (is the manager daemon up?); manager_journal = journalctl -u agt-manager.service -n 200 (recent systemd-captured manager output); process_list = ps (pid/ppid/user/etime/rss/comm, no argv/env) filtered to claude + agt-manager; agent_dir = ls -la ~/.augmented/<code_name>/ (file NAMES only \u2014 stuck markers, state files; never contents). For file CONTENTS use debug_tail_logs (it covers manager.log/pane.log/channel-stderr/manager-state.json)."
+  ),
+  reason: external_exports.string().min(1).max(2e3).describe("Why this diagnostic is needed \u2014 shown verbatim to the human approver. Be specific.")
 });
 var queryAuditLogSchema = external_exports.object({
   agent_id: external_exports.string().min(1).max(64).optional().describe(
@@ -21498,9 +21518,26 @@ server.tool(
     }
   }
 );
+server.tool(
+  "request_ssm_run",
+  "Request a HITL-gated, ALLOWLISTED read-only DIAGNOSTIC command on a customer agent's host over SSM \u2014 the escape hatch for host/process/service facts the typed read tools (debug_get_agent, debug_tail_logs, debug_host_versions) don't cover. A HUMAN must approve the EXACT command in Slack before it runs, and only if writes are armed (shadow mode runs the approval but executes nothing). This is NOT a shell: `command` is a CLOSED enum \u2014 host_health (uptime/df/free), manager_status (systemctl status agt-manager), manager_journal (journalctl -n 200), process_list (ps comm-only, no argv/env), agent_dir (ls -la ~/.augmented/<code_name>/, names only). No free-form commands, no file-content reads (use debug_tail_logs for log contents). Async: returns { request_id, status, write_mode, command_key, resolved_command, notification_status }; after approval, poll check_action_status to read the command OUTPUT in result_payload. Pass { target_agent_id, command, reason }.",
+  requestSsmRunSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.requestSsmRun({
+        target_agent_id: args.target_agent_id,
+        command: args.command,
+        reason: args.reason
+      });
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "check_action_status",
-  "Poll the decision on a remedial action you requested (the approval result is also pushed to you via direct-chat). Returns { status, result_payload, denial_reason, resolved_at }. Pass { request_id }.",
+  "Poll the decision on a remedial action you requested (the approval result is also pushed to you via direct-chat). Returns { status, result_payload, denial_reason, resolved_at } \u2014 for an approved request_ssm_run, result_payload carries the command output. Pass { request_id }.",
   checkActionStatusSchema.shape,
   async (args) => {
     try {

package/dist/mcp/slack-channel.js

@@ -14547,6 +14547,13 @@ function channelBusyAckThresholdMs() {
   const raw = parseInt(process.env.AGT_CHANNEL_BUSY_ACK_THRESHOLD_MS ?? "", 10);
   return Number.isFinite(raw) && raw > 0 ? raw : BUSY_ACK_THRESHOLD_MS;
 }
+function channelSkipReactionEnabled() {
+  return resolveHostBooleanFlag({
+    key: "channel-skip-reaction",
+    envVar: "AGT_CHANNEL_SKIP_REACTION_ENABLED",
+    defaultValue: false
+  });
+}
 function decideBusyAck(i) {
   if (!i.hasTarget) return false;
   if (!i.stillPending) return false;
@@ -16607,6 +16614,8 @@ var BLOCK_KIT_ASK_USER_ENABLED = process.env.SLACK_BLOCK_KIT_ASK_USER_ENABLED ==
 var BLOCK_KIT_DISABLED = process.env.SLACK_BLOCK_KIT_DISABLED === "true";
 var ALLOWED_USERS = parseAllowedUsersCsv(process.env.SLACK_ALLOWED_USERS);
 var THREAD_AUTO_FOLLOW = process.env.SLACK_THREAD_AUTO_FOLLOW ?? "off";
+var SLACK_SKIP_REACTION = (process.env.SLACK_SKIP_REACTION ?? "").trim();
+var SLACK_ACK_REACTION = (process.env.SLACK_ACK_REACTION ?? "").trim() || "eyes";
 var CHANNEL_RESPONSE_MODE = parseResponseMode(process.env.SLACK_CHANNEL_RESPONSE_MODE);
 var SLACK_PEER_DISABLED_MODE = (() => {
   const raw = (process.env.PEER_DISABLED ?? "").trim().toLowerCase();
@@ -16773,7 +16782,7 @@ function healSlackUndeliverable(channel, messageTs) {
     fetch("https://slack.com/api/reactions.add", {
       method: "POST",
       headers,
-      body: JSON.stringify({ channel, timestamp: messageTs, name: "eyes" })
+      body: JSON.stringify({ channel, timestamp: messageTs, name: SLACK_ACK_REACTION })
     }).catch(() => {
     });
   });
@@ -18145,6 +18154,7 @@ void resolveBotUserIdOrThrow().then((id) => {
   );
   if (authFailed) slackBotUserIdClient?.reportAuthHealth(false);
 });
+var SKIP_REACTION_ON = channelSkipReactionEnabled() && SLACK_SKIP_REACTION.length > 0;
 var mcp = new Server(
   { name: "slack", version: "0.1.0" },
   {
@@ -18163,8 +18173,8 @@ var mcp = new Server(
       "Inbound attachments: <channel> `files` is a JSON-serialised array \u2014 JSON.parse it. If an entry has `path`, the image is already downloaded \u2014 Read it directly, do NOT call slack.download_attachment. Use that tool only for entries with `file_id` but NO `path` (PDF, docx, csv): pass file_id + channel verbatim, then Read the returned path. Single-image messages also get a top-level `image_path`. Don't surface internal file-handling errors that don't affect the answer.",
       "Address users by user_name, never by raw user ID. In multi-participant threads the CURRENT speaker is the one on the latest <channel> tag.",
       'Mentioned in a channel \u2192 respond in that thread. DM \u2192 respond directly. auto_followed="true" \u2192 only reply if useful, OR if your own bot user is @-mentioned (counts even in auto_followed).',
-      "Reaction taxonomy (use slack.react sparingly \u2014 prefer a reply): \u{1F440} = ack (already auto-added on inbound, do not duplicate); \u2705 = success. NEVER react to signal failure of YOUR work \u2014 users can't tell why something failed from an emoji. On failure, slack.reply with one sentence explaining what went wrong (no stack traces, no secrets). (The \u23F3 you may see on an inbound is applied by the system, not you \u2014 it marks a message that arrived while the agent couldn't reply; never add \u23F3 or \u274C yourself.)",
-      `When a thread message is NOT addressed to you (different @-mention, side conversation, auto_followed catch-up): SILENTLY SKIP \u2014 no reaction, no reply, no "this wasn't for me" message.`,
+      `Reaction taxonomy (use slack.react sparingly \u2014 prefer a reply): :${SLACK_ACK_REACTION}: = ack (already auto-added on inbound, do not duplicate); \u2705 = success.` + (SKIP_REACTION_ON ? ` "${SLACK_SKIP_REACTION}" = seen but not replying (see below).` : "") + " NEVER react to signal failure of YOUR work \u2014 users can't tell why something failed from an emoji. On failure, slack.reply with one sentence explaining what went wrong (no stack traces, no secrets). (The \u23F3 you may see on an inbound is applied by the system, not you \u2014 it marks a message that arrived while the agent couldn't reply; never add \u23F3 or \u274C yourself.)",
+      SKIP_REACTION_ON ? `When you read a DM or thread message and decide NOT to reply (different @-mention, side conversation, auto_followed catch-up, or simply nothing useful to add): call slack.react with emoji "${SLACK_SKIP_REACTION}" so the sender knows you saw it \u2014 never post a "this wasn't for me" message. Top-level channel messages (not a DM, not a thread reply) you may still skip silently.` : `When a thread message is NOT addressed to you (different @-mention, side conversation, auto_followed catch-up): SILENTLY SKIP \u2014 no reaction, no reply, no "this wasn't for me" message.`,
       "To deliver a file: save under your project dir, call slack.upload_file with path + channel + thread_ts."
     ].join(" ")
   }
@@ -19777,7 +19787,7 @@ async function connectSocketMode() {
         );
       }
       if (ackDecision !== "none") {
-        const reactionName = ackDecision === "undeliverable" ? SLACK_UNDELIVERABLE_REACTION : "eyes";
+        const reactionName = ackDecision === "undeliverable" ? SLACK_UNDELIVERABLE_REACTION : SLACK_ACK_REACTION;
         fetch("https://slack.com/api/reactions.add", {
           method: "POST",
           headers: {

package/dist/mcp/telegram-channel.js

@@ -16198,6 +16198,13 @@ function channelBusyAckThresholdMs() {
   const raw = parseInt(process.env.AGT_CHANNEL_BUSY_ACK_THRESHOLD_MS ?? "", 10);
   return Number.isFinite(raw) && raw > 0 ? raw : BUSY_ACK_THRESHOLD_MS;
 }
+function channelSkipReactionEnabled() {
+  return resolveHostBooleanFlag({
+    key: "channel-skip-reaction",
+    envVar: "AGT_CHANNEL_SKIP_REACTION_ENABLED",
+    defaultValue: false
+  });
+}
 function decideBusyAck(i) {
   if (!i.hasTarget) return false;
   if (!i.stillPending) return false;
@@ -16506,7 +16513,8 @@ function telegramApiCall(method, body, timeoutMs) {
     req.end();
   });
 }
-var ACK_EMOJI = "\u{1F440}";
+var ACK_EMOJI = (process.env.TELEGRAM_ACK_REACTION ?? "").trim() || "\u{1F440}";
+var TELEGRAM_SKIP_REACTION = (process.env.TELEGRAM_SKIP_REACTION ?? "").trim();
 async function setMessageReaction(chatId, messageId, emoji2) {
   try {
     const resp = await telegramApiCall(
@@ -17698,6 +17706,7 @@ function noteThreadActivity(chatId, cutoffMs = Number.POSITIVE_INFINITY) {
   if (!chatId) return;
   clearPendingMessage(chatId, cutoffMs);
 }
+var SKIP_REACTION_ON = channelSkipReactionEnabled() && TELEGRAM_SKIP_REACTION.length > 0;
 var mcp = new Server(
   { name: "telegram", version: "0.1.0" },
   {
@@ -17716,8 +17725,9 @@ var mcp = new Server(
       "Inbound attachments: <channel> `files` is a JSON-serialised array \u2014 JSON.parse it. If an entry has `path`, the image is already downloaded \u2014 Read it directly, do NOT call telegram.download_attachment. Use that tool only for entries with `file_id` but NO `path` (PDF, docx, voice, audio, video, animations): pass file_id + chat_id verbatim, then Read the returned path. Single-image messages also get a top-level `image_path`. Caption arrives as channel content. Don't surface internal file-handling errors that don't affect the answer.",
       'For work >30s follow CLAUDE.md kanban flow: kanban_add \u2192 reply "On it \u2014 tracking here: <kanban URL>" \u2192 move to in_progress \u2192 do the work \u2192 reply with the result. Simple lookups skip kanban but still reply.',
       "Address users by user_name; user is the numeric Telegram ID. Resolve ambiguous times against your own Timezone from CLAUDE.md \u2014 do not ask.",
-      `Reaction taxonomy (use telegram.react sparingly \u2014 prefer telegram.reply): \u{1F440} = ack (already auto-added on inbound, do not duplicate); \u{1F44D} or \u{1F389} = success. NEVER react to signal failure of YOUR work. On failure, telegram.reply with one sentence explaining what went wrong. Free-tier emoji: \u{1F44D} \u{1F44E} \u2764 \u{1F525} \u{1F389} \u{1F914} \u{1F92F} \u{1F64F} \u{1F44C} \u{1F440} \u{1F4AF} \u270D \u{1FAE1} \u{1F192} \u{1F973} \u{1F494}. (If a message arrived while you were offline you may see a system-posted "can't respond right now" notice \u2014 that's the runtime, not you; don't repeat or apologise for it.)`
-    ].join(" ")
+      "Reaction taxonomy (use telegram.react sparingly \u2014 prefer telegram.reply): \u{1F440} = ack (already auto-added on inbound, do not duplicate); \u{1F44D} or \u{1F389} = success." + (SKIP_REACTION_ON ? ` ${TELEGRAM_SKIP_REACTION} = seen but not replying (see below).` : "") + ` NEVER react to signal failure of YOUR work. On failure, telegram.reply with one sentence explaining what went wrong. Free-tier emoji: \u{1F44D} \u{1F44E} \u2764 \u{1F525} \u{1F389} \u{1F914} \u{1F92F} \u{1F64F} \u{1F44C} \u{1F440} \u{1F4AF} \u270D \u{1FAE1} \u{1F192} \u{1F973} \u{1F494}. (If a message arrived while you were offline you may see a system-posted "can't respond right now" notice \u2014 that's the runtime, not you; don't repeat or apologise for it.)`,
+      SKIP_REACTION_ON ? `When you read a message you decide NOT to reply to (nothing useful to add): call telegram.react with emoji "${TELEGRAM_SKIP_REACTION}" so the sender knows you saw it \u2014 never post a "this wasn't for me" message.` : ""
+    ].filter(Boolean).join(" ")
   }
 );
 mcp.setRequestHandler(ListToolsRequestSchema, async () => ({

package/dist/{persistent-session-PNY26VBX.js → persistent-session-Q73X7PPM.js}

@@ -25,8 +25,8 @@ import {
   takeZombieDetection,
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
-} from "./chunk-2BRF2FDJ.js";
-import "./chunk-SJUD2BWU.js";
+} from "./chunk-UVE6VSU3.js";
+import "./chunk-ONG7KSRP.js";
 import "./chunk-XWVM4KPK.js";
 export {
   SEND_KEYS_ENTER_DELAY_MS,
@@ -56,4 +56,4 @@ export {
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-PNY26VBX.js.map
+//# sourceMappingURL=persistent-session-Q73X7PPM.js.map

package/dist/{responsiveness-probe-4YMZ6LXO.js → responsiveness-probe-R7WZXP2Y.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-2BRF2FDJ.js";
-import "./chunk-SJUD2BWU.js";
+} from "./chunk-UVE6VSU3.js";
+import "./chunk-ONG7KSRP.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -250,4 +250,4 @@ export {
   parkPendingInbound,
   readAndResetChannelDeflections
 };
-//# sourceMappingURL=responsiveness-probe-4YMZ6LXO.js.map
+//# sourceMappingURL=responsiveness-probe-R7WZXP2Y.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.44",
+  "version": "0.28.46",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {