@integrity-labs/agt-cli 0.28.527 → 0.28.529

package/dist/{chunk-Z4P4VEDU.js → chunk-Q4XGKOHZ.js}

@@ -3151,10 +3151,28 @@ later tick:
 - **\`kanban_update\` with notes** if blocked but maybe unblockable later; leave it
   \`in_progress\` and pick up other work.
 
-**Empty board:** if \`todo\` + \`in_progress\` are empty but \`backlog\` has items, don't
-self-assign \u2014 ask your manager once which to pick up, then stand down (don't
-re-escalate every tick). If \`backlog\` is empty too, say "All clear, no pending work"
-once and stand down.
+**Empty \`todo\` but a non-empty \`backlog\`: PULL, don't ask.** (CS-1549) Move the
+highest-priority backlog item to \`in_progress\` and work it. Asking your manager
+which one to pick is the old rule and it was wrong: it made the backlog drain
+only as fast as a human remembered to push work.
+
+Escalate INSTEAD of pulling only when the top item is genuinely ambiguous \u2014 you
+cannot tell what "done" would look like \u2014 and then ask one specific question and
+pull the NEXT item meanwhile. "I wasn't sure" is not a reason to end a turn idle.
+
+**\`waiting\` is not working.** Cards parked on a PR review or a human are not your
+work in progress; they are someone else's. A board reading "0 in progress, 5
+waiting, 8 backlog" means you are IDLE, not busy. Judge your load by
+\`in_progress\` alone, and keep it at one.
+
+**\`needs_attention\` is NOT pullable.** The reaper parks stalled cards there
+for a human. Pulling one just re-stalls it, so it is not available work \u2014 and
+the turn-end check excludes it for the same reason.
+
+**Genuinely nothing to do** \u2014 \`todo\`, \`in_progress\` and \`backlog\` all empty, or
+every remaining item deliberately parked \u2014 say "All clear, no pending work" once
+and stand down. Say which it is; "all clear" while eight items sit in the backlog
+is the failure this rule exists to stop.
 
 `;
 }
@@ -5526,6 +5544,12 @@ var HTTP_PROBE_PROVIDERS = /* @__PURE__ */ new Set([
   // includes 'github') — a narrower, honest "the token we stored is valid"
   // check. Unifying the monitor onto the central probe is sub-issue C's call.
 ]);
+var BUNDLED_STDIO_PROBE_TOOLKITS = {
+  "augmented-help-kb": {
+    tool: "search_knowledge_base",
+    args: { query: "connectivity probe", limit: 1 }
+  }
+};
 var CLI_PROBE_ARGS = {
   gcloud: ["version"],
   // ENG-6206: `gh --version` only proves the binary exists, not that it's
@@ -5582,6 +5606,21 @@ function resolveConnectivityProbe(input) {
       httpProvider: definitionId
     };
   }
+  const bundledStdio = BUNDLED_STDIO_PROBE_TOOLKITS[definitionId];
+  if (bundledStdio) {
+    const override = mcpOverrideFrom(input.connectivityTest);
+    const probeTool = override.probeTool ?? bundledStdio.tool;
+    const probeArgs = override.probeTool ? override.probeArgs : bundledStdio.args;
+    return {
+      kind: "mcp_stdio",
+      sourceType: "mcp_server",
+      readOnly: true,
+      label: `${definitionId}: local-stdio MCP handshake + ${probeTool}`,
+      centralReachable: false,
+      probeTool,
+      ...probeArgs ? { probeArgs } : {}
+    };
+  }
   if (getOAuthProvider(definitionId)?.mcpUrl) {
     return {
       kind: "mcp_tools_list",
@@ -5994,6 +6033,22 @@ var SITE_RESOLUTION_ERROR_PATTERNS = [
   "name resolution",
   "name not resolved"
 ];
+var SCOPE_DEFICIT_ERROR_PATTERNS = [
+  "insufficient_scope",
+  "insufficient scope",
+  "insufficient permission",
+  "missing scope",
+  "required scope",
+  "requires the scope",
+  "requires the following scope",
+  "scope is required",
+  "access scope",
+  "oauth scope",
+  // Shopify custom-app specifics.
+  "read_content",
+  "write_content",
+  "sales channel is not enabled"
+];
 function isReadonlyToolDescriptor(t) {
   if (!t?.name)
     return false;
@@ -6044,9 +6099,17 @@ function isSiteResolutionError(message) {
   const m = message.toLowerCase();
   return SITE_RESOLUTION_ERROR_PATTERNS.some((p2) => m.includes(p2));
 }
+function isScopeDeficitError(message) {
+  const m = message.toLowerCase();
+  if (SCOPE_DEFICIT_ERROR_PATTERNS.some((p2) => m.includes(p2)))
+    return true;
+  return m.includes("scope") && ["doesn't have", "does not have", "not have the", "not granted", "lacks the", "not authorized for"].some((p2) => m.includes(p2));
+}
 function classifyToolCallFailure(text) {
   if (isAccountResolutionError(text))
     return "account";
+  if (isScopeDeficitError(text))
+    return "scope";
   if (isUpstreamAuthError(text))
     return "auth";
   if (isSiteResolutionError(text))
@@ -6172,6 +6235,13 @@ async function probeComposioMcpToolCall(config, fetchImpl = fetch) {
           details: baseDetails
         };
       }
+      if (kind === "scope") {
+        return {
+          status: "degraded",
+          message: `Live tool call '${toolName}' was refused for a missing permission \u2014 the connection is valid, but its app/token isn't granted the scope this tool needs. Grant the required scope in the provider app and re-authorise (this is NOT a reconnect): ${snippet}`,
+          details: { ...baseDetails, reason: "scope_deficit" }
+        };
+      }
       if (kind === "auth") {
         return {
           status: "down",
@@ -7371,6 +7441,45 @@ var INTEGRATION_REGISTRY = [
       { id: "augmented-support:propose-writes", name: "Propose Self-Remediation", description: "Propose creating an agent in your own org; executed only after a human approves a server-rendered diff.", access: "write" }
     ]
   },
+  {
+    // ENG-8332: the Augmented Team HELP knowledge base, split out of
+    // `augmented-support` so an agent can be given the docs WITHOUT also being
+    // given a ticket-filing button, an agent-proposal button, and org-wide read
+    // of agents, hosts, integrations, alerts, flags and the audit log. That
+    // bundling was why "just give everyone augmented-support" was the wrong
+    // answer, and the cost was agents answering platform questions from
+    // inference instead of documentation (the CS-1529/CS-1530 case).
+    //
+    // Provisions the @integrity-labs/augmented-help-kb-mcp stdio broker, a
+    // read-only client over /host/kb - the single enumerated carve-out from the
+    // ADR-0032 org-lock invariant (ENG-7119). KB content is platform-curated
+    // and org-neutral, so this grants NO view of any org's state; the client
+    // has no POST transport at all, so writes are structurally impossible
+    // rather than merely unregistered.
+    //
+    // auth `none` - no end-user OAuth, the host JWT is the credential. `beta`
+    // while distribution widens. NOT in the Add Integration picker (no
+    // `installable`): granted deliberately, like its two siblings.
+    //
+    // NAMING (ENG-7281): this is the "help knowledge base" - shared, published,
+    // org-neutral PRODUCT help. It is NOT the org knowledge store that
+    // `knowledge_search` / `context_search` read. Keep the two distinct in every
+    // surface that names them.
+    id: "augmented-help-kb",
+    name: "Augmented Help KB",
+    category: "knowledge",
+    description: "The Augmented Team help knowledge base: search and read the shared, published product documentation (how-tos, common fixes, FAQs). Identical for every organization and org-neutral by design - it grants no view of your org's own state, and cannot file tickets or propose changes. Distinct from your organization's own knowledge store.",
+    supported_auth_types: ["none"],
+    beta: true,
+    capabilities: [
+      {
+        id: "augmented-help-kb:read",
+        name: "Read Help Docs",
+        description: "Search and read published Augmented Team help articles (org-neutral product documentation). Read-only; no ticket filing, no agent proposals, no org-state reads.",
+        access: "read"
+      }
+    ]
+  },
   {
     id: "firecrawl",
     name: "Firecrawl",
@@ -9303,13 +9412,104 @@ function encodeClaudeProjectPath(projectDir) {
   return "-" + projectDir.replace(/^\//, "").replace(/[/.]/g, "-");
 }
 
+// ../../packages/core/dist/claude-code-usage/occupancy-qualification.js
+var DEFAULT_MIN_OUTPUT_TOKENS = 25;
+var DEFAULT_NEIGHBOURHOOD_MS = 12e4;
+var BUCKET_MS = 6e4;
+function isSyntheticOrErrorRecord(record, msg) {
+  if (msg.model === "<synthetic>")
+    return true;
+  if (record.isApiErrorMessage === true)
+    return true;
+  if (typeof record.error === "string" && record.error)
+    return true;
+  if (typeof record.apiErrorStatus === "number")
+    return true;
+  return false;
+}
+function resolveFloor(value) {
+  if (typeof value !== "number" || !Number.isFinite(value) || value < 0) {
+    return DEFAULT_MIN_OUTPUT_TOKENS;
+  }
+  return value;
+}
+function nonNegInt2(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.floor(value) : 0;
+}
+function extractQualifyingTurns(jsonl, options = {}) {
+  const floor = resolveFloor(options.minOutputTokens);
+  const startMs = options.startMs ?? Number.NEGATIVE_INFINITY;
+  const endMs = options.endMs ?? Number.POSITIVE_INFINITY;
+  const byId = /* @__PURE__ */ new Map();
+  let syntheticCounter = 0;
+  for (const line2 of jsonl.split("\n")) {
+    const trimmed = line2.trim();
+    if (!trimmed)
+      continue;
+    let obj;
+    try {
+      obj = JSON.parse(trimmed);
+    } catch {
+      continue;
+    }
+    if (typeof obj !== "object" || obj === null)
+      continue;
+    const record = obj;
+    if (record.type !== "assistant")
+      continue;
+    const message = record.message;
+    if (typeof message !== "object" || message === null)
+      continue;
+    const msg = message;
+    if (isSyntheticOrErrorRecord(record, msg))
+      continue;
+    const usage = msg.usage;
+    if (typeof usage !== "object" || usage === null)
+      continue;
+    const ts = record.timestamp;
+    if (typeof ts !== "string" || !ts)
+      continue;
+    const tsMs = new Date(ts).getTime();
+    if (!Number.isFinite(tsMs))
+      continue;
+    const id = typeof msg.id === "string" && msg.id ? msg.id : `__noid_${syntheticCounter++}`;
+    byId.set(id, {
+      tsMs,
+      outputTokens: nonNegInt2(usage.output_tokens)
+    });
+  }
+  const out = [];
+  for (const entry of byId.values()) {
+    if (entry.outputTokens < floor)
+      continue;
+    if (entry.tsMs < startMs || entry.tsMs > endMs)
+      continue;
+    out.push(entry.tsMs);
+  }
+  out.sort((a, b) => a - b);
+  return out;
+}
+function isBucketQualified(bucketStartMs2, turnTimes, neighbourhoodMs = DEFAULT_NEIGHBOURHOOD_MS) {
+  const from = bucketStartMs2 - neighbourhoodMs;
+  const to = bucketStartMs2 + BUCKET_MS + neighbourhoodMs;
+  for (const t of turnTimes) {
+    if (t > to)
+      return false;
+    if (t >= from)
+      return true;
+  }
+  return false;
+}
+
 // ../../packages/core/dist/account-enforcement/marker.js
 var ACCOUNT_ENFORCEMENT_MARKER_FILENAME = "account-enforcement.json";
 var ACCOUNT_ENFORCEMENT_MARKER_VERSION = 1;
-function serializeAccountEnforcementMarker(level) {
+function serializeAccountEnforcementMarker(level, text) {
+  const trimmed = typeof text === "string" ? text.trim() : "";
   const marker = {
     version: ACCOUNT_ENFORCEMENT_MARKER_VERSION,
-    level
+    level,
+    ...trimmed ? { text: trimmed } : {}
   };
   return JSON.stringify(marker);
 }
@@ -10477,6 +10677,32 @@ var FLAG_REGISTRY = [
     // Best-effort reach estimate only; not part of the schema fingerprint.
     since: "0.28.504"
   },
+  {
+    key: "utilization-occupancy-qualifier",
+    description: "Utilization busy-minutes gate (ENG-8465): shadow = report every measured bucket exactly as before while COUNTING how many a transcript qualifier would drop; enforce = drop measured buckets that have no qualifying assistant turn (>= 25 output tokens, non-synthetic) within \xB1120s. The qualifier is the merged @augmented/core primitive (extractQualifyingTurns / isBucketQualified); the host reads a bounded transcript tail incl. <sessionId>/subagents/ at drain time and FAILS OPEN (credits ungated) when a transcript cannot be read. Read host-side via hostFlagStore (getString) in the manager; consumer ships in this PR's agt-cli auto-publish bump. Both modes emit the OccupancyQualificationClassifications shadow metric (qualified positive-control + unqualified_dropped signal + unreadable), so per-agent impact is measured before the flip.",
+    flagType: "enum",
+    allowedValues: ["shadow", "enforce"],
+    // Declared safe value is `shadow`: it reproduces pre-flag billing exactly, so
+    // rollout changes no agent's minutes while the shadow metric accrues the
+    // enforce-flip evidence. `enforce` lowers a billing-adjacent number, so it is a
+    // deliberate, audited flip — never a flag-DB-read-error default.
+    defaultValue: "shadow",
+    // Operator per-host override (ADR-0022 highest precedence). No _ENABLED/_DISABLED/
+    // _MODE suffix, and read via hostFlagStore not a raw process.env gate, so not a
+    // new env gate under ENG-6252. Never pinned in sst.config.ts (ENG-8303).
+    envVar: "AGT_UTILIZATION_OCCUPANCY_QUALIFIER",
+    // enforce lowers a billing-adjacent number, so flipping/weakening it is guarded
+    // like the other enforcement-mode flags.
+    sensitive: true,
+    // Reach threshold (ENG-8465): the host reader (occupancyQualifierMode in
+    // manager-worker.ts) lands in this PR's agt-cli auto-publish patch bump, which
+    // is the first published version to contain it (through 0.28.528 does not). An
+    // UNSET `since` makes classifyHostReach report `honors` (full coverage), which
+    // would greenlight an `enforce` flip while older hosts silently stay `shadow`.
+    // Best-effort estimate (like docker-hygiene's), in the safe direction — a
+    // not-yet-published version reports 0% honor until hosts update. (CodeRabbit)
+    since: "0.28.529"
+  },
   {
     key: "composio-hitl-mode",
     description: "Composio managed-toolkits HITL gate (ENG-6027): off = kill switch, shadow = resolve + audit the tier decision but never block, enforce = block write_high_risk+ calls and route them to Human Approval (an Approve/Deny card). Since ENG-7828 enforce ALWAYS routes to a Human Approval card by default; set hitl-approval-routing=off to make enforce a hard block with no approval instead. Per-org rollout from the admin Feature Flags page; ENG-7672 migrated this off the fleet-wide COMPOSIO_HITL_MODE env var.",
@@ -10883,6 +11109,15 @@ var FLAG_REGISTRY = [
     // runbook gates on it. Leaving the placeholder in place is safe (nothing
     // flips); shipping a guessed number is not.
     since: "0.29.0"
+  },
+  {
+    key: "help-kb-auto-grant",
+    description: "Auto-grant the `augmented-help-kb` integration at ORG scope when an organization is provisioned (ENG-8542), so every agent in that org gets product-doc search without a per-agent operator action. One organization_integrations row reaches every agent in the org: POST /host/agent-integrations merges org -> team -> agent and buildMcpJson's predicate reads that merged set with no scope filter. ON: the two org-provisioning call sites write the row (status=active, created_by=the org owner). OFF (default): they write nothing - byte-for-byte today's behaviour. STAGED ROLLOUT IS THE POINT. ENG-8332 argues against widening distribution of the help KB until two things close, because distributing a corpus with wrong articles \"converts one agent's wrong answer into everyone's\": (1) a live 200 from GET /host/kb/search as the anon role has still never been observed - ENG-7260 was closed on remediation evidence, not on a live call, and the deploy seed log is SERVICE-ROLE evidence that says nothing about the anon grant; (2) the `site-structure` article is unverified against the current IA. Turning this on for ONE org and watching that org's help-kb connectivity-probe verdicts (ENG-8332 added a real mcp_stdio probe that calls search_knowledge_base) is the cheap positive control for (1) - an ENG-7260-class 500 then reports as `down` per agent instead of as silence. Widen only after it comes back healthy. REVOKING IS DELETING THE ROW, not flipping this off: the flag gates GRANTING, so an already-granted org keeps its row when the flag goes off. Evaluated API-side only, per org, inside grantHelpKbToOrg; no host-side envVar and deliberately no sst.config.ts entry (a literal default there would pin it - ENG-8303).",
+    flagType: "boolean",
+    // Declared safe value is `false` = grant nothing. A flag-store outage must
+    // never auto-attach an integration nobody asked for, and both ENG-8332
+    // prerequisites above are still open.
+    defaultValue: false
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -12702,13 +12937,13 @@ var TurnOutcomeTracker = class {
 };
 
 // src/lib/busy-bucket-ledger.ts
-var BUCKET_MS = 6e4;
+var BUCKET_MS2 = 6e4;
 var MAX_ACCRUAL_SPAN_MS = 10 * 6e4;
 var MAX_RETAINED_BUCKETS = 240;
 var BILL_WHOLE_MINUTES = true;
 var MIN_BILLABLE_MS = 100;
 function bucketStartMs(atMs) {
-  return Math.floor(atMs / BUCKET_MS) * BUCKET_MS;
+  return Math.floor(atMs / BUCKET_MS2) * BUCKET_MS2;
 }
 var BusyBucketLedger = class {
   state = /* @__PURE__ */ new Map();
@@ -12730,11 +12965,11 @@ var BusyBucketLedger = class {
     if (toMs <= fromMs) return;
     const start = Math.max(fromMs, toMs - MAX_ACCRUAL_SPAN_MS);
     const led = this.entry(codeName);
-    for (let b = bucketStartMs(start); b < toMs; b += BUCKET_MS) {
-      const overlap = Math.min(toMs, b + BUCKET_MS) - Math.max(start, b);
+    for (let b = bucketStartMs(start); b < toMs; b += BUCKET_MS2) {
+      const overlap = Math.min(toMs, b + BUCKET_MS2) - Math.max(start, b);
       if (overlap <= 0) continue;
       const prev = led.buckets.get(b) ?? 0;
-      led.buckets.set(b, Math.min(BUCKET_MS, prev + overlap));
+      led.buckets.set(b, Math.min(BUCKET_MS2, prev + overlap));
     }
     this.evict(led);
   }
@@ -12802,7 +13037,7 @@ var BusyBucketLedger = class {
       if (!Number.isFinite(at)) continue;
       const key = bucketStartMs(at);
       const prev = led.buckets.get(key) ?? 0;
-      led.buckets.set(key, Math.min(BUCKET_MS, prev + b.seconds * 1e3));
+      led.buckets.set(key, Math.min(BUCKET_MS2, prev + b.seconds * 1e3));
     }
     this.evict(led);
   }
@@ -15302,6 +15537,9 @@ export {
   UNKNOWN_RATE_LIMIT,
   pickNewerClassification,
   classifyTranscriptRateLimit,
+  DEFAULT_NEIGHBOURHOOD_MS,
+  extractQualifyingTurns,
+  isBucketQualified,
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   serializeAccountEnforcementMarker,
   KANBAN_CHECK_COMMAND,
@@ -15393,4 +15631,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-Z4P4VEDU.js.map
+//# sourceMappingURL=chunk-Q4XGKOHZ.js.map