@integrity-labs/agt-cli 0.28.62 → 0.28.64

package/dist/mcp/augmented-admin.js

@@ -21107,6 +21107,10 @@ var AdminDebugClient = class _AdminDebugClient {
   tailLogs(args) {
     return this.get("/admin/debug/tail-logs", _AdminDebugClient.cleanQuery(args));
   }
+  /** Time-windowed read of ONE allowlisted host log across rotated files (ENG-6515). */
+  queryLogs(args) {
+    return this.get("/admin/debug/query-logs", _AdminDebugClient.cleanQuery(args));
+  }
   probeIntegration(args) {
     return this.get("/admin/debug/probe-integration", _AdminDebugClient.cleanQuery(args));
   }
@@ -21279,6 +21283,23 @@ var tailLogsSchema = external_exports.object({
     "Trailing lines to return (default 200, max 2000). Output is also byte-capped (~20 KB, newest kept) to stay within SSM limits \u2014 `truncated` flags when it clipped."
   )
 });
+var queryLogsSchema = external_exports.object({
+  agent_id: external_exports.string().min(1).max(64).describe(
+    "UUID of the agent whose host log to query. Fails closed (uniform not-found) if you are not authorized for its org."
+  ),
+  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "manager-state"]).optional().describe(
+    "Which host log to read (default manager). Same allowlist as debug_tail_logs. Time filtering only applies to `manager` (its lines carry an ISO8601 prefix); the others return their byte-capped tail unfiltered (`time_filtered:false`)."
+  ),
+  since: external_exports.string().min(1).max(40).optional().describe(
+    "Lower bound (ISO8601 UTC, e.g. `2026-06-14T16:00:00Z`). Omit for unbounded. Only meaningful for `manager`."
+  ),
+  until: external_exports.string().min(1).max(40).optional().describe(
+    "Upper bound (ISO8601 UTC, e.g. `2026-06-14T18:00:00Z`). Omit for unbounded (up to now). Only meaningful for `manager`."
+  ),
+  lines: external_exports.number().int().min(1).max(5e3).optional().describe(
+    "Max lines to return (default 1000, max 5000; newest kept). Output is also byte-capped (~20 KB, newest kept) to stay within SSM limits \u2014 `truncated` flags when it clipped. Narrow the window if truncated."
+  )
+});
 var probeIntegrationSchema = external_exports.object({
   agent_id: external_exports.string().min(1).max(64).describe(
     "UUID of the agent whose integration to probe. Fails closed (uniform not-found) if you are not authorized for its org."
@@ -21525,6 +21546,19 @@ server.tool(
     }
   }
 );
+server.tool(
+  "debug_query_logs",
+  'Read an agent\'s HOST logs OVER A TIME WINDOW, spanning rotated files \u2014 the historical counterpart to debug_tail_logs. Where tail only shows the live tail of the current file (minutes, and gone once it rotates), this reads the active log AND its logrotate siblings (manager.log.1, manager.log.2.gz, \u2026 14 kept) and filters lines to [since, until]. This is the read path for "did it restart at 4pm YESTERDAY?" \u2014 use it when the answer is older than the live tail or spans a rotation. Returns { agent_id, code_name, host, log, since, until, time_filtered, content, log_present, lines_requested, truncated, ssm_status }. Time filtering applies to `manager` (its lines carry an ISO8601 prefix); `pane`/`slack-stderr`/`telegram-stderr`/`manager-state` return their byte-capped tail unfiltered (time_filtered:false). Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, since?, until?, lines? } (since/until ISO8601 UTC e.g. 2026-06-14T16:00:00Z, default unbounded; lines default 1000, max 5000; output ~20 KB-capped, newest kept \u2014 narrow the window if truncated). Fails closed for an unauthorized org; every call is audited as a cross-org host access.',
+  queryLogsSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.queryLogs(args);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "debug_probe_integration",
   "Force a FRESH host-side connectivity probe for ONE of an agent's integrations and return the LIVE verdict \u2014 use when a user reports an integration \"isn't working\" but the console shows it connected, or to confirm a fix landed. Unlike the cached status the dashboard shows, this SSH-less SSM-invokes the agent's host to run the probe against its actual wired `.mcp.json` + credentials, so it can't disagree with reality. Returns { agent_id, code_name, slug, host, verdict, message, probed_at, ssm_status }. `verdict` is the live result: `ok` | `degraded` | `transient_error` (retryable) | `down` | `not_probeable` (no probe wired for this kind) \u2014 or a central degrade: `unreachable` (agent has no host), `not_installed` (integration not on this agent), `host_cli_too_old` (the host predates the probe \u2014 update its agt-cli), `probe_error`. Pass { agent_id, slug } where slug is the integration's definition code_name (e.g. `gmail`, `slack`, `here-now`). Fails closed for an unauthorized org; every call is audited as a cross-org host access.",

package/dist/{persistent-session-5PEPYSMG.js → persistent-session-WJBIN6WM.js}

@@ -25,8 +25,8 @@ import {
   takeZombieDetection,
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
-} from "./chunk-AKOF4VV5.js";
-import "./chunk-7F2K3RRD.js";
+} from "./chunk-4P7HUXWI.js";
+import "./chunk-XKAJW4EX.js";
 import "./chunk-XWVM4KPK.js";
 export {
   SEND_KEYS_ENTER_DELAY_MS,
@@ -56,4 +56,4 @@ export {
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-5PEPYSMG.js.map
+//# sourceMappingURL=persistent-session-WJBIN6WM.js.map

package/dist/{responsiveness-probe-HG23JDG2.js → responsiveness-probe-XVWLBSSH.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-AKOF4VV5.js";
-import "./chunk-7F2K3RRD.js";
+} from "./chunk-4P7HUXWI.js";
+import "./chunk-XKAJW4EX.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -250,4 +250,4 @@ export {
   parkPendingInbound,
   readAndResetChannelDeflections
 };
-//# sourceMappingURL=responsiveness-probe-HG23JDG2.js.map
+//# sourceMappingURL=responsiveness-probe-XVWLBSSH.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.62",
+  "version": "0.28.64",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {