@integrity-labs/agt-cli 0.28.574 → 0.28.576

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-PKBAJMBG.js";
+} from "../chunk-P2LAQMRN.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4853,7 +4853,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.574" : "dev";
+var cliVersion = true ? "0.28.576" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6031,7 +6031,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.574" : "dev";
+var cliVersion2 = true ? "0.28.576" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-PKBAJMBG.js → chunk-P2LAQMRN.js}

@@ -5646,7 +5646,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.574" : "dev";
+var agtCliVersion = true ? "0.28.576" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9015,4 +9015,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-PKBAJMBG.js.map
+//# sourceMappingURL=chunk-P2LAQMRN.js.map

package/dist/lib/manager-worker.js

@@ -53,7 +53,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-PKBAJMBG.js";
+} from "../chunk-P2LAQMRN.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -11596,7 +11596,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.574" : "dev";
+var agtCliVersion = true ? "0.28.576" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/index.js

@@ -21045,6 +21045,112 @@ function jsonSchemaPropertyToZod(prop) {
   return external_exports.unknown();
 }
 
+// src/mutation-commit-state.ts
+var API_GATEWAY_INTEGRATION_TIMEOUT_MS = 29e3;
+var GATEWAY_TIMEOUT_MARGIN_MS = 3e3;
+var FORWARD_TOOL_CALL_TIMEOUT_MS = API_GATEWAY_INTEGRATION_TIMEOUT_MS - GATEWAY_TIMEOUT_MARGIN_MS;
+function isGatewayShapedBody(body) {
+  if (!body) return false;
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return false;
+  }
+  if (typeof parsed !== "object" || parsed === null) return false;
+  const obj = parsed;
+  return typeof obj["message"] === "string" && !("error" in obj);
+}
+function classifyMutationCommitState(input) {
+  const { status, body, aborted: aborted2 } = input;
+  if (aborted2) return "indeterminate";
+  if (status === null) return "indeterminate";
+  if (status >= 200 && status < 300) return "committed";
+  if (isGatewayShapedBody(body)) return "indeterminate";
+  if (status === 401 || status === 403) return "not_committed";
+  if (status >= 400 && status < 500) {
+    return isOurErrorEnvelope(body) ? "not_committed" : "indeterminate";
+  }
+  return "indeterminate";
+}
+function isOurErrorEnvelope(body) {
+  if (!body) return false;
+  try {
+    const parsed = JSON.parse(body);
+    if (typeof parsed !== "object" || parsed === null) return false;
+    return typeof parsed["error"] === "string";
+  } catch {
+    return false;
+  }
+}
+var READONLY_VERB_TOKENS = ["LIST", "GET", "FIND", "SEARCH", "FETCH", "COUNT", "RETRIEVE"];
+var MUTATING_VERB_TOKENS = [
+  "CREATE",
+  "ADD",
+  "UPDATE",
+  "PATCH",
+  "SET",
+  "EDIT",
+  "WRITE",
+  "PUT",
+  "POST",
+  "DELETE",
+  "REMOVE",
+  "CLEAR",
+  "ARCHIVE",
+  "PURGE",
+  "DROP",
+  "SEND",
+  "REPLY",
+  "PUBLISH",
+  "UPLOAD",
+  "EMAIL",
+  "NOTIFY",
+  "INVITE",
+  "MOVE",
+  "ASSIGN",
+  "REASSIGN",
+  "MARK",
+  "CLOSE",
+  "OPEN",
+  "START",
+  "STOP",
+  "CANCEL",
+  "APPROVE",
+  "REJECT",
+  "MERGE",
+  "RESTART",
+  "RECALL",
+  "PROPOSE"
+];
+function mayMutate(toolName) {
+  if (!toolName) return true;
+  const tokens = toolName.toUpperCase().split(/[^A-Z0-9]+/).filter(Boolean);
+  if (tokens.length === 0) return true;
+  if (tokens.some((t) => MUTATING_VERB_TOKENS.includes(t))) return true;
+  const verbCandidates = [tokens[0], tokens[1]].filter((t) => Boolean(t));
+  return !verbCandidates.some((t) => READONLY_VERB_TOKENS.includes(t));
+}
+function describeToolCallFailure(params) {
+  const { path, toolName, readOnly, state, status, body, aborted: aborted2, timeoutMs } = params;
+  const what = aborted2 ? `API ${path} did not respond within ${timeoutMs}ms` : `API ${path} returned ${status}`;
+  const detail = body ? `: ${truncate(body, 400)}` : "";
+  if (state === "not_committed") {
+    return `${what}${detail} \u2014 the request was rejected before it took effect, so nothing changed. Safe to retry once the cause is fixed.`;
+  }
+  if (state === "committed") {
+    return `${what}${detail} \u2014 the server ACCEPTED this operation (it responded successfully); only the reply could not be read. The effect has landed, so do NOT retry \u2014 re-read the state if you need the result.`;
+  }
+  const tool = toolName ? `'${toolName}'` : "this call";
+  if (!readOnly && mayMutate(toolName)) {
+    return `${what}${detail} \u2014 INDETERMINATE: the server may have completed this operation before the failure. ${tool} is not a read-only tool, so retrying it could duplicate the effect (a second write, a second send). Re-read the relevant state to establish what actually happened BEFORE retrying. An error from this bridge is not evidence the operation did not occur.`;
+  }
+  return `${what}${detail} \u2014 INDETERMINATE: the server may have completed this operation before the failure. ${tool} is read-only, so retrying is safe.`;
+}
+function truncate(text, max) {
+  return text.length > max ? `${text.slice(0, max)}\u2026` : text;
+}
+
 // src/kanban-list-render.ts
 var KANBAN_LIST_DISPLAY_ORDER = [
   "in_progress",
@@ -21980,7 +22086,7 @@ async function getToken() {
   }
   return AGT_TOKEN;
 }
-async function apiPost(path, body, retried = false, timeoutMs = 15e3) {
+async function apiPost(path, body, retried = false, timeoutMs = 15e3, toolName, readOnly = false) {
   const token = await getToken();
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), timeoutMs);
@@ -21997,7 +22103,7 @@ async function apiPost(path, body, retried = false, timeoutMs = 15e3) {
     if (res.status === 401 && AGT_API_KEY && !AGT_AGENT_SESSION_TOKEN && !retried) {
       clearTimeout(timeout);
       tokenExpiresAt = 0;
-      return apiPost(path, body, true, timeoutMs);
+      return apiPost(path, body, true, timeoutMs, toolName, readOnly);
     }
     if (!res.ok) {
       const text = await res.text().catch(() => res.statusText);
@@ -22006,12 +22112,55 @@ async function apiPost(path, body, retried = false, timeoutMs = 15e3) {
           `API ${path} returned 401: agent-session rejected (expired or revoked). Re-run \`agt impersonate connect\` to mint a fresh session. (${text})`
         );
       }
-      throw new Error(`API ${path} returned ${res.status}: ${text}`);
+      throw new Error(
+        describeToolCallFailure({
+          path,
+          toolName,
+          readOnly,
+          state: classifyMutationCommitState({ status: res.status, body: text }),
+          status: res.status,
+          body: text
+        })
+      );
+    }
+    try {
+      return await res.json();
+    } catch {
+      throw new Error(
+        describeToolCallFailure({
+          path,
+          toolName,
+          state: "committed",
+          status: res.status,
+          body: "response body was not valid JSON"
+        })
+      );
     }
-    return await res.json();
   } catch (err) {
     if (err instanceof DOMException && err.name === "AbortError") {
-      throw new Error(`API ${path} timed out after ${timeoutMs}ms`);
+      throw new Error(
+        describeToolCallFailure({
+          path,
+          toolName,
+          readOnly,
+          state: "indeterminate",
+          status: null,
+          aborted: true,
+          timeoutMs
+        })
+      );
+    }
+    if (err instanceof Error && !/^API /.test(err.message)) {
+      throw new Error(
+        describeToolCallFailure({
+          path,
+          toolName,
+          readOnly,
+          state: classifyMutationCommitState({ status: null }),
+          status: null,
+          body: err.message
+        })
+      );
     }
     throw err;
   } finally {
@@ -24196,7 +24345,6 @@ async function discoverApiTools() {
     return [];
   }
 }
-var FORWARD_TOOL_CALL_TIMEOUT_MS = 35e3;
 async function forwardToolCall(toolName, args) {
   if (!AGT_AGENT_ID) {
     throw new Error("Cannot forward tool call: AGT_AGENT_ID is not set");
@@ -24210,7 +24358,8 @@ async function forwardToolCall(toolName, args) {
       run_id: AGT_RUN_ID ?? null
     },
     false,
-    FORWARD_TOOL_CALL_TIMEOUT_MS
+    FORWARD_TOOL_CALL_TIMEOUT_MS,
+    toolName
   );
 }
 var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.574",
+  "version": "0.28.576",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {