@integrity-labs/agt-cli 0.28.46 → 0.28.47

package/dist/bin/agt.js

@@ -37,7 +37,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-34NTBWVL.js";
+} from "../chunk-FON5YIFK.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -4777,7 +4777,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.46" : "dev";
+var cliVersion = true ? "0.28.47" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5787,7 +5787,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.46" : "dev";
+var cliVersion2 = true ? "0.28.47" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-34NTBWVL.js → chunk-FON5YIFK.js}

@@ -7280,7 +7280,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.46" : "dev";
+var agtCliVersion = true ? "0.28.47" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8561,4 +8561,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-34NTBWVL.js.map
+//# sourceMappingURL=chunk-FON5YIFK.js.map

package/dist/lib/manager-worker.js

@@ -27,7 +27,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-34NTBWVL.js";
+} from "../chunk-FON5YIFK.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -6630,7 +6630,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.46" : "dev";
+var agtCliVersion = true ? "0.28.47" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/augmented-admin.js

@@ -21106,6 +21106,10 @@ var AdminDebugClient = class _AdminDebugClient {
   probeIntegration(args) {
     return this.get("/admin/debug/probe-integration", _AdminDebugClient.cleanQuery(args));
   }
+  /** List an agent's dead-lettered / quarantined inbound (ENG-6443, read). */
+  inspectDeadLetters(args) {
+    return this.get("/admin/debug/dead-letters", _AdminDebugClient.cleanQuery(args));
+  }
   queryAuditLog(args) {
     return this.get("/admin/debug/audit-log", _AdminDebugClient.cleanQuery(args));
   }
@@ -21195,6 +21199,21 @@ var AdminDebugClient = class _AdminDebugClient {
       run_id: this.runId
     });
   }
+  /** Request a HITL-gated dead-letter replay (re-inject one parked inbound) (ENG-6443). */
+  requestReplayDeadLetter(args) {
+    if (!this.agentId) {
+      throw makeError(400, "AdminDebugClient.requestReplayDeadLetter requires agentId (set AGT_AGENT_ID)");
+    }
+    return this.post("/admin/debug/actions/replay-dead-letter", {
+      target_agent_id: args.target_agent_id,
+      channel: args.channel,
+      store: args.store,
+      marker_name: args.marker_name,
+      reason: args.reason,
+      agent_id: this.agentId,
+      run_id: this.runId
+    });
+  }
   /** Poll a remedial action's HITL decision. */
   getActionStatus(requestId) {
     return this.get(`/admin/debug/actions/${encodeURIComponent(requestId)}`);
@@ -21245,6 +21264,21 @@ var probeIntegrationSchema = external_exports.object({
     "The integration slug (its definition code_name, e.g. `gmail`, `slack`, `here-now`) to probe on that agent."
   )
 });
+var inspectDeadLettersSchema = external_exports.object({
+  agent_id: external_exports.string().min(1).max(64).describe(
+    "UUID of the agent whose dead-lettered inbound to list. Fails closed (uniform not-found) if you are not authorized for its org."
+  )
+});
+var replayDeadLetterSchema = external_exports.object({
+  target_agent_id: external_exports.string().min(1).max(64).describe("UUID of the customer agent whose dead letter to replay."),
+  channel: external_exports.enum(["slack", "telegram"]).describe("Which inbound channel the dead letter belongs to (from the inspect result)."),
+  store: external_exports.string().min(1).max(128).regex(
+    /^(stale|cleared:pending-inbound-cleared-[A-Za-z0-9._-]+)$/,
+    'store must be "stale" or "cleared:pending-inbound-cleared-<stamp>" (copy from the inspect result)'
+  ).describe("The dead-letter store the marker is in \u2014 copy the `store` value verbatim from debug_inspect_dead_letters."),
+  marker_name: external_exports.string().trim().min(1).max(256).describe("The exact `marker_name` from the inspect result identifying which parked message to re-inject."),
+  reason: external_exports.string().min(1).max(2e3).describe("Why this message should be re-injected \u2014 shown verbatim to the human approver. Be specific.")
+});
 var listAlertsSchema = external_exports.object({
   severity: external_exports.string().max(16).optional().describe("Filter by severity (critical | warning | info)."),
   open: external_exports.boolean().optional().describe("When true, only currently-open (unclosed) alerts."),
@@ -21455,6 +21489,19 @@ server.tool(
     }
   }
 );
+server.tool(
+  "debug_inspect_dead_letters",
+  "List an agent's DEAD-LETTERED / quarantined inbound \u2014 customer messages that were parked on the host instead of delivered (so the agent never saw them), rather than silently lost. Use when a user says \"the agent never replied\" but nothing shows in the normal flow, or to audit what fell into the dead-letter path. Resolves the agent's current host and reads two on-disk stores over SSM: `stale` (markers moved aside on a wedge-respawn because the agent couldn't receive) and `cleared:<stamp>` (markers the clear_pending_inbound remedial action moved aside). Returns { agent_id, code_name, host, markers[], total, ssm_status } where each marker is { index, store, channel (slack|telegram), marker_name, received_at, undeliverable, discretionary, replay_count, conversation, message_ref } \u2014 routing metadata only, NEVER the message body. To re-inject one, pass its exact { channel, store, marker_name } to debug_replay_dead_letter. Fails closed for an unauthorized org; every call is audited as a cross-org host access. Pass { agent_id }.",
+  inspectDeadLettersSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.inspectDeadLetters(args);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "debug_query_audit_log",
   'Read recent audit events to troubleshoot why/when agents bounced \u2014 primarily restart events. Defaults to the "agent.restart" action: each event returns { created_at, source, reason, actor_kind, agent_id, code_name }, where `source` is the restart trigger (agent-self-request, channel-command, maintenance-window, stale-mcp, hot-reload-mcp, mcp-presence-reaper, day-rollover, auth-tuple-change, \u2026) and `reason` is the free-text rationale when one was given (e.g. the agent\'s own words for a request_restart). Two modes: (1) pass { agent_id } to scope to ONE agent (fails closed if you\'re not authorized for its org) \u2014 use when a specific agent went quiet. (2) OMIT agent_id for a CROSS-AGENT sweep across every org you\'re authorized for (optionally narrow with { org_id }) \u2014 use to spot fleet-wide restart storms or compare agents. Filter the action with `action` (pass "all" to drop the action filter and read every event type), and bound with { since_hours?, limit? }. Cross-agent results are org-walled in SQL; unauthorized orgs are invisible.',
@@ -21535,9 +21582,28 @@ server.tool(
     }
   }
 );
+server.tool(
+  "debug_replay_dead_letter",
+  "Request a HITL-gated REPLAY of ONE dead-lettered inbound \u2014 re-inject a customer message that was parked on the host (listed by debug_inspect_dead_letters) back into the agent's live inbound so it is reprocessed. This is the inverse of clear_pending_inbound: use it to recover a message a wedged agent missed. A HUMAN must approve in Slack before anything happens, and only if writes are armed (shadow mode runs the approval but executes nothing). The marker is matched on the host by the exact (channel, store, marker_name) you pass \u2014 copy them verbatim from the inspect result \u2014 so a stale or wrong selector safely no-ops (`replayed:false, reason:not_found`) rather than moving the wrong message. Async: returns { request_id, status, write_mode, notification_status }; after approval, poll check_action_status (result_payload carries { replayed, moved_to }). Pass { target_agent_id, channel, store, marker_name, reason }.",
+  replayDeadLetterSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.requestReplayDeadLetter({
+        target_agent_id: args.target_agent_id,
+        channel: args.channel,
+        store: args.store,
+        marker_name: args.marker_name,
+        reason: args.reason
+      });
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "check_action_status",
-  "Poll the decision on a remedial action you requested (the approval result is also pushed to you via direct-chat). Returns { status, result_payload, denial_reason, resolved_at } \u2014 for an approved request_ssm_run, result_payload carries the command output. Pass { request_id }.",
+  "Poll the decision on a remedial action you requested (the approval result is also pushed to you via direct-chat). Returns { status, result_payload, denial_reason, resolved_at } \u2014 for an approved request_ssm_run, result_payload carries the command output; for debug_replay_dead_letter, result_payload carries { replayed, moved_to }. Pass { request_id }.",
   checkActionStatusSchema.shape,
   async (args) => {
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.46",
+  "version": "0.28.47",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {