@integrity-labs/agt-cli 0.28.49 → 0.28.51

package/dist/{claude-pair-runtime-SAJMKK2M.js → claude-pair-runtime-XU7GFFQH.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-HL2ANGTL.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-YSE6OUM6.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-SAJMKK2M.js.map
+//# sourceMappingURL=claude-pair-runtime-XU7GFFQH.js.map

package/dist/lib/manager-worker.js

@@ -27,7 +27,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-UVKKX46F.js";
+} from "../chunk-CCDBWDBW.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -65,7 +65,7 @@ import {
   takeWatchdogGiveUpCount,
   takeZombieDetection,
   transcriptActivityAgeSeconds
-} from "../chunk-NCP6GVXS.js";
+} from "../chunk-QK4EU3TC.js";
 import {
   FLAGS_SCHEMA_VERSION,
   FLAG_REGISTRY,
@@ -96,7 +96,7 @@ import {
   resolveDmTarget,
   sumTranscriptUsageInWindow,
   wrapScheduledTaskPrompt
-} from "../chunk-MJKGJXKV.js";
+} from "../chunk-WBZFCFU6.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -6630,7 +6630,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.49" : "dev";
+var agtCliVersion = true ? "0.28.51" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7738,7 +7738,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-HL2ANGTL.js");
+      const { collectDiagnostics } = await import("../persistent-session-YSE6OUM6.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7839,7 +7839,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-KSY4M6NR.js");
+      } = await import("../responsiveness-probe-4BU75QQV.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7871,7 +7871,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-KSY4M6NR.js");
+        } = await import("../responsiveness-probe-4BU75QQV.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -11275,7 +11275,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-SAJMKK2M.js");
+  } = await import("../claude-pair-runtime-XU7GFFQH.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/augmented-admin.js

@@ -21113,6 +21113,10 @@ var AdminDebugClient = class _AdminDebugClient {
   queryAuditLog(args) {
     return this.get("/admin/debug/audit-log", _AdminDebugClient.cleanQuery(args));
   }
+  /** List stuck / pending restart requests cross-org (ENG-6444, read). */
+  inspectRestartRequests(args) {
+    return this.get("/admin/debug/restart-requests", _AdminDebugClient.cleanQuery(args));
+  }
   // ─────────────────── request-scoped customer grant (ENG-6279) ───────────────────
   /**
    * Open scoped READ access to a SELF-MANAGED customer org so the read tools can
@@ -21214,6 +21218,18 @@ var AdminDebugClient = class _AdminDebugClient {
       run_id: this.runId
     });
   }
+  /** Request a HITL-gated clear of a stuck restart request (ENG-6444). */
+  requestClearRestartRequest(args) {
+    if (!this.agentId) {
+      throw makeError(400, "AdminDebugClient.requestClearRestartRequest requires agentId (set AGT_AGENT_ID)");
+    }
+    return this.post("/admin/debug/actions/clear-restart-request", {
+      target_agent_id: args.target_agent_id,
+      reason: args.reason,
+      agent_id: this.agentId,
+      run_id: this.runId
+    });
+  }
   /** Poll a remedial action's HITL decision. */
   getActionStatus(requestId) {
     return this.get(`/admin/debug/actions/${encodeURIComponent(requestId)}`);
@@ -21279,6 +21295,16 @@ var replayDeadLetterSchema = external_exports.object({
   marker_name: external_exports.string().trim().min(1).max(256).describe("The exact `marker_name` from the inspect result identifying which parked message to re-inject."),
   reason: external_exports.string().min(1).max(2e3).describe("Why this message should be re-injected \u2014 shown verbatim to the human approver. Be specific.")
 });
+var inspectRestartRequestsSchema = external_exports.object({
+  agent_id: external_exports.string().min(1).max(64).optional().describe(
+    "Optional: narrow to ONE agent's restart request. Omit for a fleet-wide list across every authorized org. Fails closed (empty) for orgs you are not authorized for."
+  ),
+  limit: limitSchema
+});
+var clearRestartRequestSchema = external_exports.object({
+  target_agent_id: external_exports.string().min(1).max(64).describe("UUID of the customer agent whose stuck restart request to clear (from the inspect result)."),
+  reason: external_exports.string().min(1).max(2e3).describe("Why this stuck restart request should be cleared \u2014 shown verbatim to the human approver. Be specific.")
+});
 var listAlertsSchema = external_exports.object({
   severity: external_exports.string().max(16).optional().describe("Filter by severity (critical | warning | info)."),
   open: external_exports.boolean().optional().describe("When true, only currently-open (unclosed) alerts."),
@@ -21502,6 +21528,35 @@ server.tool(
     }
   }
 );
+server.tool(
+  "debug_inspect_restart_requests",
+  'List STUCK / pending agent restart requests across authorized orgs \u2014 the agent_restart_stuck class. A restart request is "stuck" when the manager never acked it (e.g. one sat open on an agent for ~27 days). Use this when an agent went quiet and you suspect a restart that never landed, or to audit the fleet for unacked restarts. Returns { requests[], count } where each request is { agent_id, code_name, organization_id, host, restart_requested_at, stuck_seconds, is_stuck, incident, alert } \u2014 `is_stuck` flags age past the alert threshold (15 min); `incident`/`alert` carry the open ledger row + paged alert when the cron has escalated it. Routing metadata only, never message content. To cancel one, pass its agent_id to request_clear_restart_request. Pass { agent_id? (narrow to one), limit? }; fleet-wide when agent_id is omitted. Org-walled in SQL; every call is audited as a cross-org access.',
+  inspectRestartRequestsSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.inspectRestartRequests(args);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
+server.tool(
+  "request_clear_restart_request",
+  "Request a HITL-gated CLEAR of a STUCK restart request \u2014 cancel a restart the manager never acked (listed by debug_inspect_restart_requests) and resolve its agent_restart_stuck alert. Use it to clear a restart signal wedged open for hours/days/weeks. This is NOT a restart and NOT a host action: it nulls the agent's `restart_requested_at` signal in the central DB and closes the alert/incident; the agent keeps running as-is, no in-flight work is destroyed. Reversible \u2014 request a fresh restart afterwards if one is still needed. A HUMAN must approve in Slack before anything happens, and only if writes are armed for this stage (shadow mode runs the approval but executes nothing). Async: returns { request_id, status, write_mode, notification_status }; after approval, poll check_action_status (result_payload carries { cleared_bindings, alert_closed }). Pass { target_agent_id, reason }.",
+  clearRestartRequestSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.requestClearRestartRequest({
+        target_agent_id: args.target_agent_id,
+        reason: args.reason
+      });
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "debug_query_audit_log",
   'Read recent audit events to troubleshoot why/when agents bounced \u2014 primarily restart events. Defaults to the "agent.restart" action: each event returns { created_at, source, reason, actor_kind, agent_id, code_name }, where `source` is the restart trigger (agent-self-request, channel-command, maintenance-window, stale-mcp, hot-reload-mcp, mcp-presence-reaper, day-rollover, auth-tuple-change, \u2026) and `reason` is the free-text rationale when one was given (e.g. the agent\'s own words for a request_restart). Two modes: (1) pass { agent_id } to scope to ONE agent (fails closed if you\'re not authorized for its org) \u2014 use when a specific agent went quiet. (2) OMIT agent_id for a CROSS-AGENT sweep across every org you\'re authorized for (optionally narrow with { org_id }) \u2014 use to spot fleet-wide restart storms or compare agents. Filter the action with `action` (pass "all" to drop the action filter and read every event type), and bound with { since_hours?, limit? }. Cross-agent results are org-walled in SQL; unauthorized orgs are invisible.',

package/dist/{persistent-session-HL2ANGTL.js → persistent-session-YSE6OUM6.js}

@@ -25,8 +25,8 @@ import {
   takeZombieDetection,
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
-} from "./chunk-NCP6GVXS.js";
-import "./chunk-MJKGJXKV.js";
+} from "./chunk-QK4EU3TC.js";
+import "./chunk-WBZFCFU6.js";
 import "./chunk-XWVM4KPK.js";
 export {
   SEND_KEYS_ENTER_DELAY_MS,
@@ -56,4 +56,4 @@ export {
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-HL2ANGTL.js.map
+//# sourceMappingURL=persistent-session-YSE6OUM6.js.map

package/dist/{responsiveness-probe-KSY4M6NR.js → responsiveness-probe-4BU75QQV.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-NCP6GVXS.js";
-import "./chunk-MJKGJXKV.js";
+} from "./chunk-QK4EU3TC.js";
+import "./chunk-WBZFCFU6.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -250,4 +250,4 @@ export {
   parkPendingInbound,
   readAndResetChannelDeflections
 };
-//# sourceMappingURL=responsiveness-probe-KSY4M6NR.js.map
+//# sourceMappingURL=responsiveness-probe-4BU75QQV.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.49",
+  "version": "0.28.51",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {