@integrity-labs/agt-cli 0.28.45 → 0.28.47

package/dist/mcp/augmented-admin.js

@@ -21106,6 +21106,10 @@ var AdminDebugClient = class _AdminDebugClient {
   probeIntegration(args) {
     return this.get("/admin/debug/probe-integration", _AdminDebugClient.cleanQuery(args));
   }
+  /** List an agent's dead-lettered / quarantined inbound (ENG-6443, read). */
+  inspectDeadLetters(args) {
+    return this.get("/admin/debug/dead-letters", _AdminDebugClient.cleanQuery(args));
+  }
   queryAuditLog(args) {
     return this.get("/admin/debug/audit-log", _AdminDebugClient.cleanQuery(args));
   }
@@ -21195,6 +21199,21 @@ var AdminDebugClient = class _AdminDebugClient {
       run_id: this.runId
     });
   }
+  /** Request a HITL-gated dead-letter replay (re-inject one parked inbound) (ENG-6443). */
+  requestReplayDeadLetter(args) {
+    if (!this.agentId) {
+      throw makeError(400, "AdminDebugClient.requestReplayDeadLetter requires agentId (set AGT_AGENT_ID)");
+    }
+    return this.post("/admin/debug/actions/replay-dead-letter", {
+      target_agent_id: args.target_agent_id,
+      channel: args.channel,
+      store: args.store,
+      marker_name: args.marker_name,
+      reason: args.reason,
+      agent_id: this.agentId,
+      run_id: this.runId
+    });
+  }
   /** Poll a remedial action's HITL decision. */
   getActionStatus(requestId) {
     return this.get(`/admin/debug/actions/${encodeURIComponent(requestId)}`);
@@ -21245,6 +21264,21 @@ var probeIntegrationSchema = external_exports.object({
     "The integration slug (its definition code_name, e.g. `gmail`, `slack`, `here-now`) to probe on that agent."
   )
 });
+var inspectDeadLettersSchema = external_exports.object({
+  agent_id: external_exports.string().min(1).max(64).describe(
+    "UUID of the agent whose dead-lettered inbound to list. Fails closed (uniform not-found) if you are not authorized for its org."
+  )
+});
+var replayDeadLetterSchema = external_exports.object({
+  target_agent_id: external_exports.string().min(1).max(64).describe("UUID of the customer agent whose dead letter to replay."),
+  channel: external_exports.enum(["slack", "telegram"]).describe("Which inbound channel the dead letter belongs to (from the inspect result)."),
+  store: external_exports.string().min(1).max(128).regex(
+    /^(stale|cleared:pending-inbound-cleared-[A-Za-z0-9._-]+)$/,
+    'store must be "stale" or "cleared:pending-inbound-cleared-<stamp>" (copy from the inspect result)'
+  ).describe("The dead-letter store the marker is in \u2014 copy the `store` value verbatim from debug_inspect_dead_letters."),
+  marker_name: external_exports.string().trim().min(1).max(256).describe("The exact `marker_name` from the inspect result identifying which parked message to re-inject."),
+  reason: external_exports.string().min(1).max(2e3).describe("Why this message should be re-injected \u2014 shown verbatim to the human approver. Be specific.")
+});
 var listAlertsSchema = external_exports.object({
   severity: external_exports.string().max(16).optional().describe("Filter by severity (critical | warning | info)."),
   open: external_exports.boolean().optional().describe("When true, only currently-open (unclosed) alerts."),
@@ -21455,6 +21489,19 @@ server.tool(
     }
   }
 );
+server.tool(
+  "debug_inspect_dead_letters",
+  "List an agent's DEAD-LETTERED / quarantined inbound \u2014 customer messages that were parked on the host instead of delivered (so the agent never saw them), rather than silently lost. Use when a user says \"the agent never replied\" but nothing shows in the normal flow, or to audit what fell into the dead-letter path. Resolves the agent's current host and reads two on-disk stores over SSM: `stale` (markers moved aside on a wedge-respawn because the agent couldn't receive) and `cleared:<stamp>` (markers the clear_pending_inbound remedial action moved aside). Returns { agent_id, code_name, host, markers[], total, ssm_status } where each marker is { index, store, channel (slack|telegram), marker_name, received_at, undeliverable, discretionary, replay_count, conversation, message_ref } \u2014 routing metadata only, NEVER the message body. To re-inject one, pass its exact { channel, store, marker_name } to debug_replay_dead_letter. Fails closed for an unauthorized org; every call is audited as a cross-org host access. Pass { agent_id }.",
+  inspectDeadLettersSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.inspectDeadLetters(args);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "debug_query_audit_log",
   'Read recent audit events to troubleshoot why/when agents bounced \u2014 primarily restart events. Defaults to the "agent.restart" action: each event returns { created_at, source, reason, actor_kind, agent_id, code_name }, where `source` is the restart trigger (agent-self-request, channel-command, maintenance-window, stale-mcp, hot-reload-mcp, mcp-presence-reaper, day-rollover, auth-tuple-change, \u2026) and `reason` is the free-text rationale when one was given (e.g. the agent\'s own words for a request_restart). Two modes: (1) pass { agent_id } to scope to ONE agent (fails closed if you\'re not authorized for its org) \u2014 use when a specific agent went quiet. (2) OMIT agent_id for a CROSS-AGENT sweep across every org you\'re authorized for (optionally narrow with { org_id }) \u2014 use to spot fleet-wide restart storms or compare agents. Filter the action with `action` (pass "all" to drop the action filter and read every event type), and bound with { since_hours?, limit? }. Cross-agent results are org-walled in SQL; unauthorized orgs are invisible.',
@@ -21535,9 +21582,28 @@ server.tool(
     }
   }
 );
+server.tool(
+  "debug_replay_dead_letter",
+  "Request a HITL-gated REPLAY of ONE dead-lettered inbound \u2014 re-inject a customer message that was parked on the host (listed by debug_inspect_dead_letters) back into the agent's live inbound so it is reprocessed. This is the inverse of clear_pending_inbound: use it to recover a message a wedged agent missed. A HUMAN must approve in Slack before anything happens, and only if writes are armed (shadow mode runs the approval but executes nothing). The marker is matched on the host by the exact (channel, store, marker_name) you pass \u2014 copy them verbatim from the inspect result \u2014 so a stale or wrong selector safely no-ops (`replayed:false, reason:not_found`) rather than moving the wrong message. Async: returns { request_id, status, write_mode, notification_status }; after approval, poll check_action_status (result_payload carries { replayed, moved_to }). Pass { target_agent_id, channel, store, marker_name, reason }.",
+  replayDeadLetterSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.requestReplayDeadLetter({
+        target_agent_id: args.target_agent_id,
+        channel: args.channel,
+        store: args.store,
+        marker_name: args.marker_name,
+        reason: args.reason
+      });
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "check_action_status",
-  "Poll the decision on a remedial action you requested (the approval result is also pushed to you via direct-chat). Returns { status, result_payload, denial_reason, resolved_at } \u2014 for an approved request_ssm_run, result_payload carries the command output. Pass { request_id }.",
+  "Poll the decision on a remedial action you requested (the approval result is also pushed to you via direct-chat). Returns { status, result_payload, denial_reason, resolved_at } \u2014 for an approved request_ssm_run, result_payload carries the command output; for debug_replay_dead_letter, result_payload carries { replayed, moved_to }. Pass { request_id }.",
   checkActionStatusSchema.shape,
   async (args) => {
     try {

package/dist/mcp/slack-channel.js

@@ -14547,6 +14547,13 @@ function channelBusyAckThresholdMs() {
   const raw = parseInt(process.env.AGT_CHANNEL_BUSY_ACK_THRESHOLD_MS ?? "", 10);
   return Number.isFinite(raw) && raw > 0 ? raw : BUSY_ACK_THRESHOLD_MS;
 }
+function channelSkipReactionEnabled() {
+  return resolveHostBooleanFlag({
+    key: "channel-skip-reaction",
+    envVar: "AGT_CHANNEL_SKIP_REACTION_ENABLED",
+    defaultValue: false
+  });
+}
 function decideBusyAck(i) {
   if (!i.hasTarget) return false;
   if (!i.stillPending) return false;
@@ -16607,6 +16614,8 @@ var BLOCK_KIT_ASK_USER_ENABLED = process.env.SLACK_BLOCK_KIT_ASK_USER_ENABLED ==
 var BLOCK_KIT_DISABLED = process.env.SLACK_BLOCK_KIT_DISABLED === "true";
 var ALLOWED_USERS = parseAllowedUsersCsv(process.env.SLACK_ALLOWED_USERS);
 var THREAD_AUTO_FOLLOW = process.env.SLACK_THREAD_AUTO_FOLLOW ?? "off";
+var SLACK_SKIP_REACTION = (process.env.SLACK_SKIP_REACTION ?? "").trim();
+var SLACK_ACK_REACTION = (process.env.SLACK_ACK_REACTION ?? "").trim() || "eyes";
 var CHANNEL_RESPONSE_MODE = parseResponseMode(process.env.SLACK_CHANNEL_RESPONSE_MODE);
 var SLACK_PEER_DISABLED_MODE = (() => {
   const raw = (process.env.PEER_DISABLED ?? "").trim().toLowerCase();
@@ -16773,7 +16782,7 @@ function healSlackUndeliverable(channel, messageTs) {
     fetch("https://slack.com/api/reactions.add", {
       method: "POST",
       headers,
-      body: JSON.stringify({ channel, timestamp: messageTs, name: "eyes" })
+      body: JSON.stringify({ channel, timestamp: messageTs, name: SLACK_ACK_REACTION })
     }).catch(() => {
     });
   });
@@ -18145,6 +18154,7 @@ void resolveBotUserIdOrThrow().then((id) => {
   );
   if (authFailed) slackBotUserIdClient?.reportAuthHealth(false);
 });
+var SKIP_REACTION_ON = channelSkipReactionEnabled() && SLACK_SKIP_REACTION.length > 0;
 var mcp = new Server(
   { name: "slack", version: "0.1.0" },
   {
@@ -18163,8 +18173,8 @@ var mcp = new Server(
       "Inbound attachments: <channel> `files` is a JSON-serialised array \u2014 JSON.parse it. If an entry has `path`, the image is already downloaded \u2014 Read it directly, do NOT call slack.download_attachment. Use that tool only for entries with `file_id` but NO `path` (PDF, docx, csv): pass file_id + channel verbatim, then Read the returned path. Single-image messages also get a top-level `image_path`. Don't surface internal file-handling errors that don't affect the answer.",
       "Address users by user_name, never by raw user ID. In multi-participant threads the CURRENT speaker is the one on the latest <channel> tag.",
       'Mentioned in a channel \u2192 respond in that thread. DM \u2192 respond directly. auto_followed="true" \u2192 only reply if useful, OR if your own bot user is @-mentioned (counts even in auto_followed).',
-      "Reaction taxonomy (use slack.react sparingly \u2014 prefer a reply): \u{1F440} = ack (already auto-added on inbound, do not duplicate); \u2705 = success. NEVER react to signal failure of YOUR work \u2014 users can't tell why something failed from an emoji. On failure, slack.reply with one sentence explaining what went wrong (no stack traces, no secrets). (The \u23F3 you may see on an inbound is applied by the system, not you \u2014 it marks a message that arrived while the agent couldn't reply; never add \u23F3 or \u274C yourself.)",
-      `When a thread message is NOT addressed to you (different @-mention, side conversation, auto_followed catch-up): SILENTLY SKIP \u2014 no reaction, no reply, no "this wasn't for me" message.`,
+      `Reaction taxonomy (use slack.react sparingly \u2014 prefer a reply): :${SLACK_ACK_REACTION}: = ack (already auto-added on inbound, do not duplicate); \u2705 = success.` + (SKIP_REACTION_ON ? ` "${SLACK_SKIP_REACTION}" = seen but not replying (see below).` : "") + " NEVER react to signal failure of YOUR work \u2014 users can't tell why something failed from an emoji. On failure, slack.reply with one sentence explaining what went wrong (no stack traces, no secrets). (The \u23F3 you may see on an inbound is applied by the system, not you \u2014 it marks a message that arrived while the agent couldn't reply; never add \u23F3 or \u274C yourself.)",
+      SKIP_REACTION_ON ? `When you read a DM or thread message and decide NOT to reply (different @-mention, side conversation, auto_followed catch-up, or simply nothing useful to add): call slack.react with emoji "${SLACK_SKIP_REACTION}" so the sender knows you saw it \u2014 never post a "this wasn't for me" message. Top-level channel messages (not a DM, not a thread reply) you may still skip silently.` : `When a thread message is NOT addressed to you (different @-mention, side conversation, auto_followed catch-up): SILENTLY SKIP \u2014 no reaction, no reply, no "this wasn't for me" message.`,
       "To deliver a file: save under your project dir, call slack.upload_file with path + channel + thread_ts."
     ].join(" ")
   }
@@ -19777,7 +19787,7 @@ async function connectSocketMode() {
         );
       }
       if (ackDecision !== "none") {
-        const reactionName = ackDecision === "undeliverable" ? SLACK_UNDELIVERABLE_REACTION : "eyes";
+        const reactionName = ackDecision === "undeliverable" ? SLACK_UNDELIVERABLE_REACTION : SLACK_ACK_REACTION;
         fetch("https://slack.com/api/reactions.add", {
           method: "POST",
           headers: {

package/dist/mcp/telegram-channel.js

@@ -16198,6 +16198,13 @@ function channelBusyAckThresholdMs() {
   const raw = parseInt(process.env.AGT_CHANNEL_BUSY_ACK_THRESHOLD_MS ?? "", 10);
   return Number.isFinite(raw) && raw > 0 ? raw : BUSY_ACK_THRESHOLD_MS;
 }
+function channelSkipReactionEnabled() {
+  return resolveHostBooleanFlag({
+    key: "channel-skip-reaction",
+    envVar: "AGT_CHANNEL_SKIP_REACTION_ENABLED",
+    defaultValue: false
+  });
+}
 function decideBusyAck(i) {
   if (!i.hasTarget) return false;
   if (!i.stillPending) return false;
@@ -16506,7 +16513,8 @@ function telegramApiCall(method, body, timeoutMs) {
     req.end();
   });
 }
-var ACK_EMOJI = "\u{1F440}";
+var ACK_EMOJI = (process.env.TELEGRAM_ACK_REACTION ?? "").trim() || "\u{1F440}";
+var TELEGRAM_SKIP_REACTION = (process.env.TELEGRAM_SKIP_REACTION ?? "").trim();
 async function setMessageReaction(chatId, messageId, emoji2) {
   try {
     const resp = await telegramApiCall(
@@ -17698,6 +17706,7 @@ function noteThreadActivity(chatId, cutoffMs = Number.POSITIVE_INFINITY) {
   if (!chatId) return;
   clearPendingMessage(chatId, cutoffMs);
 }
+var SKIP_REACTION_ON = channelSkipReactionEnabled() && TELEGRAM_SKIP_REACTION.length > 0;
 var mcp = new Server(
   { name: "telegram", version: "0.1.0" },
   {
@@ -17716,8 +17725,9 @@ var mcp = new Server(
       "Inbound attachments: <channel> `files` is a JSON-serialised array \u2014 JSON.parse it. If an entry has `path`, the image is already downloaded \u2014 Read it directly, do NOT call telegram.download_attachment. Use that tool only for entries with `file_id` but NO `path` (PDF, docx, voice, audio, video, animations): pass file_id + chat_id verbatim, then Read the returned path. Single-image messages also get a top-level `image_path`. Caption arrives as channel content. Don't surface internal file-handling errors that don't affect the answer.",
       'For work >30s follow CLAUDE.md kanban flow: kanban_add \u2192 reply "On it \u2014 tracking here: <kanban URL>" \u2192 move to in_progress \u2192 do the work \u2192 reply with the result. Simple lookups skip kanban but still reply.',
       "Address users by user_name; user is the numeric Telegram ID. Resolve ambiguous times against your own Timezone from CLAUDE.md \u2014 do not ask.",
-      `Reaction taxonomy (use telegram.react sparingly \u2014 prefer telegram.reply): \u{1F440} = ack (already auto-added on inbound, do not duplicate); \u{1F44D} or \u{1F389} = success. NEVER react to signal failure of YOUR work. On failure, telegram.reply with one sentence explaining what went wrong. Free-tier emoji: \u{1F44D} \u{1F44E} \u2764 \u{1F525} \u{1F389} \u{1F914} \u{1F92F} \u{1F64F} \u{1F44C} \u{1F440} \u{1F4AF} \u270D \u{1FAE1} \u{1F192} \u{1F973} \u{1F494}. (If a message arrived while you were offline you may see a system-posted "can't respond right now" notice \u2014 that's the runtime, not you; don't repeat or apologise for it.)`
-    ].join(" ")
+      "Reaction taxonomy (use telegram.react sparingly \u2014 prefer telegram.reply): \u{1F440} = ack (already auto-added on inbound, do not duplicate); \u{1F44D} or \u{1F389} = success." + (SKIP_REACTION_ON ? ` ${TELEGRAM_SKIP_REACTION} = seen but not replying (see below).` : "") + ` NEVER react to signal failure of YOUR work. On failure, telegram.reply with one sentence explaining what went wrong. Free-tier emoji: \u{1F44D} \u{1F44E} \u2764 \u{1F525} \u{1F389} \u{1F914} \u{1F92F} \u{1F64F} \u{1F44C} \u{1F440} \u{1F4AF} \u270D \u{1FAE1} \u{1F192} \u{1F973} \u{1F494}. (If a message arrived while you were offline you may see a system-posted "can't respond right now" notice \u2014 that's the runtime, not you; don't repeat or apologise for it.)`,
+      SKIP_REACTION_ON ? `When you read a message you decide NOT to reply to (nothing useful to add): call telegram.react with emoji "${TELEGRAM_SKIP_REACTION}" so the sender knows you saw it \u2014 never post a "this wasn't for me" message.` : ""
+    ].filter(Boolean).join(" ")
   }
 );
 mcp.setRequestHandler(ListToolsRequestSchema, async () => ({

package/dist/{persistent-session-PNY26VBX.js → persistent-session-Q73X7PPM.js}

@@ -25,8 +25,8 @@ import {
   takeZombieDetection,
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
-} from "./chunk-2BRF2FDJ.js";
-import "./chunk-SJUD2BWU.js";
+} from "./chunk-UVE6VSU3.js";
+import "./chunk-ONG7KSRP.js";
 import "./chunk-XWVM4KPK.js";
 export {
   SEND_KEYS_ENTER_DELAY_MS,
@@ -56,4 +56,4 @@ export {
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-PNY26VBX.js.map
+//# sourceMappingURL=persistent-session-Q73X7PPM.js.map

package/dist/{responsiveness-probe-4YMZ6LXO.js → responsiveness-probe-R7WZXP2Y.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-2BRF2FDJ.js";
-import "./chunk-SJUD2BWU.js";
+} from "./chunk-UVE6VSU3.js";
+import "./chunk-ONG7KSRP.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -250,4 +250,4 @@ export {
   parkPendingInbound,
   readAndResetChannelDeflections
 };
-//# sourceMappingURL=responsiveness-probe-4YMZ6LXO.js.map
+//# sourceMappingURL=responsiveness-probe-R7WZXP2Y.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.45",
+  "version": "0.28.47",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {