@integrity-labs/agt-cli 0.28.481 → 0.28.482

package/dist/{claude-pair-runtime-7CI63PCV.js → claude-pair-runtime-2XPTEGQR.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-Q4YE53I5.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-IBMUPQZ2.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-7CI63PCV.js.map
+//# sourceMappingURL=claude-pair-runtime-2XPTEGQR.js.map

package/dist/lib/manager-worker.js

@@ -44,7 +44,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-YYNUZWK7.js";
+} from "../chunk-B6AXXPYQ.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -162,7 +162,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-4XLEJP7G.js";
+} from "../chunk-DNC5JGOV.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -10064,7 +10064,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.481" : "dev";
+var agtCliVersion = true ? "0.28.482" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11227,7 +11227,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-Q4YE53I5.js");
+      const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11334,7 +11334,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-Q4YE53I5.js");
+      const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11448,7 +11448,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-MOFFFCOY.js");
+      } = await import("../responsiveness-probe-QBLQIMZR.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11512,7 +11512,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-MOFFFCOY.js");
+        } = await import("../responsiveness-probe-QBLQIMZR.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -14988,7 +14988,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-Q4YE53I5.js");
+        const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15038,7 +15038,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-Q4YE53I5.js");
+      const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15496,7 +15496,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-7CI63PCV.js");
+  } = await import("../claude-pair-runtime-2XPTEGQR.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/index.js

@@ -21415,6 +21415,78 @@ function describeRecruitAgentResult(resp) {
   }
 }
 
+// src/agent-roles.ts
+function renderRole(r) {
+  const id = r.id ?? "(unknown)";
+  const title = r.title ?? id;
+  const tier = r.suggested_risk_tier ? ` \xB7 risk ${r.suggested_risk_tier}` : "";
+  const custom3 = r.source === "custom" ? " \xB7 custom to your org" : "";
+  const lines = [`- role_id: ${id} \u2014 ${title}${tier}${custom3}`];
+  if (r.summary && r.summary !== title) lines.push(`  ${r.summary}`);
+  const tasks = (r.default_tasks ?? []).filter((t) => t && t.name);
+  if (tasks.length > 0) {
+    const shown = tasks.slice(0, 4).map((t) => `${t.name}${t.cadence ? ` (${t.cadence})` : ""}`);
+    const more = tasks.length > shown.length ? `, +${tasks.length - shown.length} more` : "";
+    lines.push(`  comes with ${tasks.length} scheduled task(s): ${shown.join("; ")}${more}`);
+  }
+  if (r.bundled_skill_count && r.bundled_skill_count > 0) {
+    lines.push(`  comes with ${r.bundled_skill_count} bundled skill(s)`);
+  }
+  if (r.suggested_integrations && r.suggested_integrations.length > 0) {
+    lines.push(`  typically needs: ${r.suggested_integrations.join(", ")}`);
+  }
+  return lines.join("\n");
+}
+function describeListAgentRolesResult(resp) {
+  if (resp.status === "feature_disabled") {
+    return {
+      text: `${resp.message ?? "Recruiting teammates is not enabled for this organization."} This is a setting, not a fault \u2014 do not retry.`,
+      isError: true
+    };
+  }
+  if (resp.status !== "ok" || !Array.isArray(resp.roles)) {
+    return {
+      text: `Could not load the role catalog${resp.message ? `: ${resp.message}` : ""}. Do not invent a role in its place \u2014 a role label that is not in the catalog will not provision the role's scheduled tasks or skills. Try again shortly, or tell your operator.`,
+      isError: true
+    };
+  }
+  if (resp.roles.length === 0) {
+    return {
+      text: "The role catalog came back empty, which is unexpected. Do not substitute a made-up role \u2014 tell your operator.",
+      isError: true
+    };
+  }
+  const labels = /* @__PURE__ */ new Map();
+  for (const c of resp.categories ?? []) {
+    if (c?.id) labels.set(c.id, c.label ?? c.id);
+  }
+  const byCategory = /* @__PURE__ */ new Map();
+  for (const r of resp.roles) {
+    const key = r.category ?? "other";
+    const bucket = byCategory.get(key);
+    if (bucket) bucket.push(r);
+    else byCategory.set(key, [r]);
+  }
+  const ordered = [
+    ...[...labels.keys()].filter((k) => byCategory.has(k)),
+    ...[...byCategory.keys()].filter((k) => !labels.has(k))
+  ];
+  const sections = ordered.map((key) => {
+    const heading = labels.get(key) ?? key;
+    const body = (byCategory.get(key) ?? []).map(renderRole).join("\n");
+    return `${heading}:
+${body}`;
+  });
+  return {
+    text: `${resp.roles.length} role(s) available to your organization.
+
+${sections.join("\n\n")}
+
+Pass the exact role_id to recruit_agent as \`role_id\`. Choosing a catalog role is strongly preferred over a free-text role: it seeds the new agent's description and risk tier, and its scheduled tasks and bundled skills are provisioned automatically. A made-up role label gets none of that. Only use a custom role when nothing here fits the remit you agreed with the person you are interviewing.`,
+    isError: false
+  };
+}
+
 // src/request-reconnect.ts
 function describeReconnectRequestResult(resp) {
   switch (resp.status) {
@@ -22599,9 +22671,44 @@ server.tool(
     return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
   }
 );
+server.tool(
+  "list_agent_roles",
+  "List the predefined agent roles available to your organization. Call this BEFORE recruit_agent, and go through the results with the person who asked, so the new teammate is created from a curated role rather than a label you invented. Each role carries a vetted description, a risk tier, scheduled tasks and bundled skills that are provisioned automatically when the role is used \u2014 a made-up role label gets none of that. Pass the chosen role_id to recruit_agent.",
+  {},
+  async () => {
+    if (!AGT_AGENT_CODE_NAME) {
+      return {
+        content: [{ type: "text", text: "Error: AGT_AGENT_CODE_NAME not configured." }],
+        isError: true
+      };
+    }
+    let resp;
+    try {
+      resp = await apiGet(
+        `/host/agent-roles?agent_code_name=${encodeURIComponent(AGT_AGENT_CODE_NAME)}`
+      );
+    } catch (err) {
+      process.stderr.write(
+        `list_agent_roles: GET /host/agent-roles failed: ${err instanceof Error ? err.message : String(err)}
+`
+      );
+      return {
+        content: [
+          {
+            type: "text",
+            text: "Could not reach the role catalog. Do not substitute a made-up role \u2014 a label that is not in the catalog provisions no tasks and no skills. Try again shortly."
+          }
+        ],
+        isError: true
+      };
+    }
+    const { text, isError } = describeListAgentRolesResult(resp);
+    return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
+  }
+);
 server.tool(
   "recruit_agent",
-  "Propose a NEW teammate agent for your organization when the work in front of you genuinely needs a different agent \u2014 a distinct role, a separate remit, or capacity you cannot cover yourself. This does NOT create anything: it sends a request to an organization owner, who approves or denies it. Use it sparingly and only when you can say concretely what the new agent is for; do not use it to duplicate yourself, to get around a tool you are missing (use request_feature), or because a single task is large. After calling this, stop and report that it is awaiting approval \u2014 poll with check_approval if you need the outcome.",
+  "Propose a NEW teammate agent for your organization when the work in front of you genuinely needs a different agent \u2014 a distinct role, a separate remit, or capacity you cannot cover yourself. This does NOT create anything: it sends a request to an organization owner, who approves or denies it. INTERVIEW THE PERSON WHO ASKED BEFORE CALLING THIS. You need their answers, not your own assumptions, for: what the agent is responsible for, what it must NOT do, how they will judge whether it is working, and who it reports to (use directory_lookup to get that id). Call list_agent_roles first and agree a role with them \u2014 a catalog role brings a vetted description, scheduled tasks and skills that a made-up role label does not. If you cannot get those answers, ask for them; do not fill them in yourself. Use this sparingly: do not duplicate yourself, do not use it to get around a tool you are missing (use request_feature), and do not use it because a single task is large. After calling this, stop and report that it is awaiting approval \u2014 poll with check_approval if you need the outcome.",
   {
     code_name: external_exports.string().min(1).max(64).regex(/^[a-z0-9]+(-[a-z0-9]+)*$/, "code_name must be kebab-case").describe(
       'kebab-case identifier for the proposed agent (lowercase, hyphen-separated), e.g. "invoice-helper". If the name is already taken in your team a numeric suffix is added automatically.'
@@ -22610,7 +22717,25 @@ server.tool(
     description: external_exports.string().min(20).max(2e3).describe(
       "What this teammate is FOR: its remit, the work it would take on, and why that work needs a separate agent. A human reads this to decide \u2014 be specific and honest. Vague descriptions get denied."
     ),
-    role: external_exports.string().max(200).optional().describe('Optional short role label for the proposed agent, e.g. "Accounts receivable".'),
+    role_id: external_exports.string().max(120).optional().describe(
+      "Preferred. The id of a role from list_agent_roles, agreed with the person you interviewed. Using one seeds the new agent's description and risk tier from the catalog and provisions that role's scheduled tasks and bundled skills on approval. A free-text role gets none of that."
+    ),
+    role: external_exports.string().max(200).optional().describe(
+      'Only when no catalog role fits: a short free-text role label, e.g. "Accounts receivable". Ignored when role_id is supplied.'
+    ),
+    responsibilities: external_exports.array(external_exports.string().min(3).max(300)).min(1).max(8).describe(
+      "What this teammate will be responsible for, in the words of the person who asked for it. Ask them \u2014 do not write this yourself. One short bullet each."
+    ),
+    boundaries: external_exports.array(external_exports.string().min(3).max(300)).min(1).max(8).describe(
+      "What this teammate must NOT do \u2014 the limits of its remit, agreed explicitly with the person you interviewed. This is the field approvers rely on most, so ask the question directly rather than inferring the answer."
+    ),
+    success_criteria: external_exports.array(external_exports.string().min(3).max(300)).min(1).max(8).describe(
+      "How the person will judge whether this teammate is working. Ask them for concrete, checkable statements."
+    ),
+    reports_to: external_exports.string().uuid().describe(
+      "Who this teammate answers to: the uuid of an existing agent or person in your organization. Ask the requester, then use directory_lookup to resolve the id \u2014 do not guess it."
+    ),
+    reports_to_type: external_exports.enum(["agent", "person"]).describe("Whether reports_to is another 'agent' or a 'person' (a human in your organization)."),
     reason: external_exports.string().max(1e3).optional().describe(
       "Optional context for the approver: what prompted this now (a spike in volume, a user request, a gap you keep hitting). Shown as context only \u2014 the decision is made on the description above."
     ),
@@ -22632,6 +22757,16 @@ server.tool(
         code_name: params.code_name,
         display_name: params.display_name,
         description: params.description,
+        // ENG-8306: the interviewed remit. Sent unconditionally — the API
+        // REJECTS a proposal missing any of these, which is what makes the
+        // interview mandatory rather than advisory (the server cannot observe
+        // that the conversation happened, only that its output is present).
+        responsibilities: params.responsibilities,
+        boundaries: params.boundaries,
+        success_criteria: params.success_criteria,
+        reports_to: params.reports_to,
+        reports_to_type: params.reports_to_type,
+        ...params.role_id ? { role_id: params.role_id } : {},
         ...params.role ? { role: params.role } : {},
         ...params.reason ? { reason: params.reason } : {},
         ...params.host_id ? { host_id: params.host_id } : {}
@@ -24034,6 +24169,10 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   // server-side org-scoped agent-recruit flag, see the registration comment).
   // No API tool shares this name; listed here to keep the lockstep guard green.
   "recruit_agent",
+  // ENG-8306: enumerate the org's role catalog so a recruit can pick a curated
+  // role instead of inventing a free-text label. Always registered for the same
+  // reason as recruit_agent — the gate is server-side.
+  "list_agent_roles",
   // ENG-6686: self-service identity edit (always registered). Listed here to
   // keep the lockstep guard green; no API tool shares this name.
   "update_identity",

package/dist/{persistent-session-Q4YE53I5.js → persistent-session-IBMUPQZ2.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-4XLEJP7G.js";
+} from "./chunk-DNC5JGOV.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-Q4YE53I5.js.map
+//# sourceMappingURL=persistent-session-IBMUPQZ2.js.map

package/dist/{responsiveness-probe-MOFFFCOY.js → responsiveness-probe-QBLQIMZR.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-4XLEJP7G.js";
+} from "./chunk-DNC5JGOV.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -596,4 +596,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-MOFFFCOY.js.map
+//# sourceMappingURL=responsiveness-probe-QBLQIMZR.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.481",
+  "version": "0.28.482",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {