@integrity-labs/agt-cli 0.28.620 → 0.28.621

package/dist/{chunk-5ZJFTTGB.js → chunk-MSQXSVA5.js}

@@ -7,7 +7,7 @@ import {
   expandTemplateVars,
   isolationMode,
   parseEnvIntegrations
-} from "./chunk-RXC3MTSN.js";
+} from "./chunk-QSPSXG4K.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -48,7 +48,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-P6KFZVKA.js";
+} from "./chunk-EDH4GZIW.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6065,7 +6065,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.620" : "dev";
+var agtCliVersion = true ? "0.28.621" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9558,4 +9558,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-5ZJFTTGB.js.map
+//# sourceMappingURL=chunk-MSQXSVA5.js.map

package/dist/{chunk-RXC3MTSN.js → chunk-QSPSXG4K.js}

@@ -16,7 +16,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-P6KFZVKA.js";
+} from "./chunk-EDH4GZIW.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -4352,4 +4352,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-RXC3MTSN.js.map
+//# sourceMappingURL=chunk-QSPSXG4K.js.map

package/dist/{claude-pair-runtime-3356FFTC.js → claude-pair-runtime-63GQ5AOP.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-AGPLISL3.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-IFZS5AXT.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-3356FFTC.js.map
+//# sourceMappingURL=claude-pair-runtime-63GQ5AOP.js.map

package/dist/lib/manager-worker.js

@@ -54,7 +54,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-5ZJFTTGB.js";
+} from "../chunk-MSQXSVA5.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -110,7 +110,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-RXC3MTSN.js";
+} from "../chunk-QSPSXG4K.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -187,7 +187,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-P6KFZVKA.js";
+} from "../chunk-EDH4GZIW.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -11394,7 +11394,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-ITYPPSHM.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-76U4MR6U.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname9(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -12033,7 +12033,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.620" : "dev";
+var agtCliVersion = true ? "0.28.621" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -13340,7 +13340,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-AGPLISL3.js");
+      const { collectDiagnostics } = await import("../persistent-session-IFZS5AXT.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -13456,7 +13456,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-AGPLISL3.js");
+      const { collectDiagnostics } = await import("../persistent-session-IFZS5AXT.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor) : void 0;
       let tailscaleHostname;
@@ -13579,7 +13579,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-ITYPPSHM.js");
+      } = await import("../responsiveness-probe-76U4MR6U.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -13685,7 +13685,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-ITYPPSHM.js");
+        } = await import("../responsiveness-probe-76U4MR6U.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -13841,7 +13841,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-Y6ABNWNM.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-RLQK5ZQV.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -17368,7 +17368,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-AGPLISL3.js");
+        const { collectDiagnostics } = await import("../persistent-session-IFZS5AXT.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -17419,7 +17419,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-AGPLISL3.js");
+      const { collectDiagnostics } = await import("../persistent-session-IFZS5AXT.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -18015,7 +18015,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-3356FFTC.js");
+  } = await import("../claude-pair-runtime-63GQ5AOP.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -33939,7 +33939,12 @@ var AGENT_DIRECTED_NOTICE_KINDS = [
   // instructing the agent what not to do ("do not re-raise it yourself"). The
   // human needs none of it: they are the person who tapped the button, and the
   // card swapped under their finger to say so.
-  "offer_result"
+  "offer_result",
+  // ENG-9051. The "you are blocking another agent" notice. Its content opens
+  // with a `[blocking]` machine tag and is second-person instruction to the
+  // agent ("Do whatever you owe them, then tell them"). The customer has no
+  // part in it - this is one agent telling another it has stopped.
+  "waiting_on_agent"
 ];
 var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
 
@@ -34582,7 +34587,8 @@ var WAITING_KINDS = [
   "human",
   "external",
   "other",
-  "approval"
+  "approval",
+  "agent"
 ];
 var WAITING_KIND_SET = new Set(WAITING_KINDS);
 
@@ -35022,18 +35028,18 @@ var FLAG_REGISTRY = [
     // modal would report every recently-seen host as honoring the flip — the
     // dangerous direction, because it reads as "armed" when it is not.
     //
-    // PLACEHOLDER, deliberately above every published version (npm latest was
-    // 0.28.612 when this landed). The reader ships in whatever the auto-publish
-    // patch-bump produces AFTER this merges, which is not knowable here. Per the
-    // same reasoning recorded on the `agt-bin` flag: `since` is ADVISORY, read
-    // only by `computeFlagReach`; it changes what an operator is TOLD, it does
-    // not gate a flip. So an over-high placeholder is safe (reach under-reports,
-    // nobody flips), and a GUESSED number is not.
+    // Resolved from the PUBLISHED artifacts, not from the merge timestamp: the
+    // tarballs for 0.28.617 and 0.28.618 were unpacked and searched for the
+    // `-e AGT_API_KEY=` push in `spawnSession`. 0.28.617 does not contain it;
+    // 0.28.618 does, along with the flag key, `dedicatedEnabled` and the
+    // `skipped-per-agent-key-mint-failed` decision — so the whole reader
+    // shipped together and core was not stale in that bundle.
     //
-    // BEFORE FLIPPING THIS ANYWHERE: replace with the exact first published
-    // agt-cli version whose `spawnSession` carries the `-e AGT_API_KEY=` push.
-    // The rollout runbook gates on it.
-    since: "0.29.0"
+    // Bisected rather than inferred because the CLI auto-publishes on merge and
+    // several unrelated versions landed within minutes either side; picking the
+    // version whose timestamp merely looked closest would have been a guess
+    // wearing a precise number, which is the failure this field invites.
+    since: "0.28.618"
   },
   {
     key: "agent-hours-billing-enabled",

package/dist/mcp/index.js

@@ -21317,6 +21317,9 @@ function kanbanPriorityLabel(priority) {
 function isHumanAssigned(item) {
   return item.assignee_type !== void 0 && item.assignee_type !== "agent";
 }
+function isBlockedOnMe(item) {
+  return typeof item.blocked_agent_label === "string" && item.blocked_agent_label.length > 0;
+}
 function groupKanbanByStatus(items) {
   const groups = {};
   for (const item of items) {
@@ -21366,8 +21369,10 @@ function renderKanbanItemLine(item, nowMs) {
 }
 function renderKanbanList(items, nowMs = Date.now()) {
   if (!items.length) return "Board is empty.";
-  const humanAssigned = items.filter(isHumanAssigned);
-  const mine = items.filter((i) => !isHumanAssigned(i));
+  const blockedOnMe = items.filter(isBlockedOnMe);
+  const rest = items.filter((i) => !isBlockedOnMe(i));
+  const humanAssigned = rest.filter(isHumanAssigned);
+  const mine = rest.filter((i) => !isHumanAssigned(i));
   const grouped = groupKanbanByStatus(mine);
   const lines = [];
   const known = new Set(KANBAN_LIST_DISPLAY_ORDER);
@@ -21380,6 +21385,14 @@ function renderKanbanList(items, nowMs = Date.now()) {
 ## ${kanbanStatusLabel(status)} (${group.length})`);
     for (const item of group) lines.push(renderKanbanItemLine(item, nowMs));
   }
+  if (blockedOnMe.length) {
+    lines.push(`
+## ${BLOCKED_ON_ME_SECTION_HEADING} (${blockedOnMe.length})`);
+    lines.push(BLOCKED_ON_ME_SECTION_NOTE);
+    for (const item of blockedOnMe) {
+      lines.push(`${renderKanbanItemLine(item, nowMs)} [blocking ${item.blocked_agent_label}]`);
+    }
+  }
   if (humanAssigned.length) {
     lines.push(`
 ## ${HUMAN_ASSIGNED_SECTION_HEADING} (${humanAssigned.length})`);
@@ -21391,6 +21404,8 @@ function renderKanbanList(items, nowMs = Date.now()) {
   }
   return lines.join("\n");
 }
+var BLOCKED_ON_ME_SECTION_HEADING = "You are blocking these (another agent has stopped)";
+var BLOCKED_ON_ME_SECTION_NOTE = "_Another agent has PARKED its own work until you act. These are not your cards and not pullable work \u2014 you cannot move, note or complete them, and they do not count toward your in-progress load. Do the thing named, then tell the agent so it can resume; it un-parks its own card._";
 var HUMAN_ASSIGNED_SECTION_HEADING = "Assigned to a person (not yours to action)";
 var HUMAN_ASSIGNED_SECTION_NOTE = "_These belong to a person, not to you. You cannot move, note or complete them \u2014 every kanban write is refused. If the work is finished (or was never really theirs), use `kanban_recall` to pull the card back onto your board, then close it as normal._";
 
@@ -21399,8 +21414,15 @@ function isPersonWaitingKindMcp(kind) {
   if (kind === void 0 || kind === null || kind === "") return true;
   return kind === "human" || kind === "approval" || kind === "pr-review" || kind === "pr-merged";
 }
+function isAgentWaitingKindMcp(kind) {
+  if (kind === void 0 || kind === null || kind === "") return true;
+  return kind === "agent";
+}
+function agentWaitingKindRejection(kind) {
+  return `Error: waiting_on_agent cannot be used with waiting_kind="${kind ?? "unset"}". Use waiting_kind="agent" when a teammate agent is what is blocking you, or drop waiting_on_agent.`;
+}
 function personWaitingKindRejection(kind) {
-  return `Error: waiting_on_person cannot be used with waiting_kind="${kind ?? "unset"}". A "${kind}" wait is parked on a system or is unclassified, so there is no one to notify. Name a person on a "human" decision, or on a "pr-review"/"pr-merged" wait (the reviewer or whoever has to tap merge), or drop waiting_on_person.`;
+  return `Error: waiting_on_person cannot be used with waiting_kind="${kind ?? "unset"}". A "${kind}" wait is parked on a system or is unclassified, so there is no one to notify. Name a person on a "human" decision, or on a "pr-review"/"pr-merged" wait (the reviewer or whoever has to tap merge), or drop waiting_on_person. If a teammate AGENT is what is blocking you, use waiting_kind="agent" with waiting_on_agent.`;
 }
 
 // src/kanban-artefact-kinds.ts
@@ -22370,7 +22392,7 @@ if (AGT_AGENT_ID) {
 }
 server.tool(
   "kanban_list",
-  'List kanban board items for this agent. Returns active items plus only the most recently completed work (last 24h). This is a NARROW, recency-windowed view \u2014 older done cards are NOT here (only done cards are windowed; failed and active cards always show). Before telling anyone you have "no record" of past work, use kanban_search, which covers your full history.',
+  'List kanban board items for this agent. Returns active items plus only the most recently completed work (last 24h). This is a NARROW, recency-windowed view \u2014 older done cards are NOT here (only done cards are windowed; failed and active cards always show). Before telling anyone you have "no record" of past work, use kanban_search, which covers your full history. The board also lists cards belonging to OTHER agents that are parked on you (a teammate has stopped until you act) in their own section \u2014 those are not yours to move and do not count toward your in-progress load; do the thing named and tell them.',
   {},
   async () => {
     const data = await apiPost("/host/my-kanban", {
@@ -22476,8 +22498,8 @@ server.tool(
   }
 );
 var kanbanMoveStatuses = AGT_KANBAN_WAITING_ENABLED ? ["backlog", "todo", "in_progress", "waiting", "done", "failed"] : ["backlog", "todo", "in_progress", "done", "failed"];
-var kanbanMoveDescription = AGT_KANBAN_WAITING_ENABLED ? `Move a kanban item to a different status column. Use status="failed" for a task attempted but not completable. Use status="waiting" when you have COMPLETED your part and cannot proceed until one specific external action happens (a person approves/answers/decides, or a dependency like a PR merge or deploy completes). status="waiting" REQUIRES waiting_kind - classify the wait as "pr-review", "pr-merged", "human", "external", or "other" (the catch-all when none fit). For a PR wait ("pr-review"/"pr-merged") set waiting_repo ("owner/repo") and waiting_pr (the number) INSTEAD of waiting_on - the card then links straight to the PR and can auto-resume when it lands. For "human"/"external"/"other" set waiting_on to a one-line ask ("Answer my 5 scoping questions") AND put the full context the person needs to decide - the actual questions, options, links - in waiting_details, so they can answer from the card without opening a ticket. For "human" ALSO set waiting_on_person to that person's person_id (uuid, from directory_lookup \u2014 preferred) or their Slack user id, so the card lands in their "Awaiting you" queue and they are notified instead of your ask sitting unseen. Do NOT use waiting to offload hard work, and do NOT confuse it with a failure. (matches the hosted kanban_move enum).` : 'Move a kanban item to a different status column. Use status="failed" to mark a task that was attempted but could not complete (matches the hosted kanban_move enum).';
-var kanbanMoveStatusDescribe = AGT_KANBAN_WAITING_ENABLED ? 'Target status. "waiting" parks the card until one external action happens; it REQUIRES waiting_kind - use "pr-review"/"pr-merged" with waiting_repo + waiting_pr, or "human"/"external"/"other" with a concrete waiting_on. "failed" closes the row as a failed attempt; there is no "cancelled" status, close no-longer-needed work via kanban_done with an explanatory result.' : 'Target status. "failed" closes the row as a failed attempt; there is no "cancelled" status, close no-longer-needed work via kanban_done with an explanatory result.';
+var kanbanMoveDescription = AGT_KANBAN_WAITING_ENABLED ? `Move a kanban item to a different status column. Use status="failed" for a task attempted but not completable. Use status="waiting" when you have COMPLETED your part and cannot proceed until one specific external action happens (a person approves/answers/decides, or a dependency like a PR merge or deploy completes). status="waiting" REQUIRES waiting_kind - classify the wait as "pr-review", "pr-merged", "human", "agent", "external", or "other" (the catch-all when none fit). For a PR wait ("pr-review"/"pr-merged") set waiting_repo ("owner/repo") and waiting_pr (the number) INSTEAD of waiting_on - the card then links straight to the PR and can auto-resume when it lands. For "human"/"external"/"other" set waiting_on to a one-line ask ("Answer my 5 scoping questions") AND put the full context the person needs to decide - the actual questions, options, links - in waiting_details, so they can answer from the card without opening a ticket. For "human" ALSO set waiting_on_person to that person's person_id (uuid, from directory_lookup \u2014 preferred) or their Slack user id, so the card lands in their "Awaiting you" queue and they are notified instead of your ask sitting unseen. When a teammate AGENT is what is blocking you, use waiting_kind="agent" with waiting_on_agent (its code_name) - that notifies the agent and shows the card on its board as something it is holding up. Do NOT use waiting to offload hard work, and do NOT confuse it with a failure. (matches the hosted kanban_move enum).` : 'Move a kanban item to a different status column. Use status="failed" to mark a task that was attempted but could not complete (matches the hosted kanban_move enum).';
+var kanbanMoveStatusDescribe = AGT_KANBAN_WAITING_ENABLED ? 'Target status. "waiting" parks the card until one external action happens; it REQUIRES waiting_kind - use "pr-review"/"pr-merged" with waiting_repo + waiting_pr, "agent" with waiting_on_agent (a teammate agent is blocking you), or "human"/"external"/"other" with a concrete waiting_on. "failed" closes the row as a failed attempt; there is no "cancelled" status, close no-longer-needed work via kanban_done with an explanatory result.' : 'Target status. "failed" closes the row as a failed attempt; there is no "cancelled" status, close no-longer-needed work via kanban_done with an explanatory result.';
 server.tool(
   "kanban_move",
   kanbanMoveDescription,
@@ -22493,8 +22515,8 @@ server.tool(
       waiting_details: external_exports.string().optional().describe(
         `Only with status="waiting" on a "human"/"external"/"other" wait: the FULL context the person needs to make the decision, inline - the actual questions, the options, the specifics, any links. Put everything here so they can answer from the card alone; NEVER just point at a ticket ("see ENG-1234"). waiting_on stays the one-line headline; this is the body. Shown in full in the card's Respond panel; the card preview and chat notifications may show a truncated preview (kept within their limits).`
       ),
-      waiting_kind: external_exports.enum(["pr-review", "pr-merged", "human", "external", "other"]).optional().describe(
-        'REQUIRED with status="waiting": classify what you are waiting on. "pr-review" = a pull request awaiting review, "pr-merged" = a reviewed PR awaiting merge (both require waiting_repo + waiting_pr and let the card link to the PR and auto-resume). "human" = a specific person must decide/answer, "external" = a non-PR system/process must complete (a deploy, CI, a third party); for those two put a one-line ask in waiting_on and the full decision context in waiting_details. "other" = none of the above / unsure - the generic catch-all, same waiting_on + waiting_details. Always pick the most specific kind that fits; fall back to "other" rather than leaving it unset.'
+      waiting_kind: external_exports.enum(["pr-review", "pr-merged", "human", "external", "other", "agent"]).optional().describe(
+        'REQUIRED with status="waiting": classify what you are waiting on. "pr-review" = a pull request awaiting review, "pr-merged" = a reviewed PR awaiting merge (both require waiting_repo + waiting_pr and let the card link to the PR and auto-resume). "human" = a specific person must decide/answer, "external" = a non-PR system/process must complete (a deploy, CI, a third party); for those two put a one-line ask in waiting_on and the full decision context in waiting_details. "agent" = another AGENT has to act before you can continue - set waiting_on_agent to its code_name, which notifies it and puts the card on its board as something it is holding up. "other" = none of the above / unsure - the generic catch-all, same waiting_on + waiting_details. Always pick the most specific kind that fits; fall back to "other" rather than leaving it unset - but note "other" and "external" mean THERE IS NOBODY TO NOTIFY, so never use them when a person ("human") or a teammate agent ("agent") is what is actually blocking you.'
       ),
       waiting_repo: external_exports.string().optional().describe(
         'Only with a pr-* waiting_kind: the "owner/repo" the pull request lives in (e.g. "Integrity-Labs/augmented").'
@@ -22503,6 +22525,9 @@ server.tool(
       waiting_choices: external_exports.array(external_exports.string()).optional().describe(
         'Optional, best with waiting_kind="human": 2-5 short answer options to offer the person as one-click buttons (e.g. ["Ship it", "Hold", "Needs changes"]). Keep them short. They can still add a free-text comment alongside a choice. Omit for an open-ended human wait (they just get a comment box).'
       ),
+      waiting_on_agent: external_exports.string().optional().describe(
+        'ENG-9051. The code_name (or uuid) of the teammate AGENT that has to act before you can continue - the same identifier kanban_assign takes as target_agent. Requires waiting_kind="agent". This notifies that agent and puts the card on its board as something it is holding up, so the blocker reaches it instead of sitting on a field. It does NOT reassign the card - you still own driving it to done and you resume as soon as they unblock you. Use this rather than "other"/"external" (which mean nobody to notify) or "human" (which takes a Slack user id and would notify the wrong entity).'
+      ),
       waiting_on_person: external_exports.string().optional().describe(
         `Who has to act before you can continue - the ONE person. Two accepted forms: a person_id (uuid) as emitted by directory_lookup, which is PREFERRED because it is the id the directory actually gives you and it resolves for people with no linked Slack account; or a Slack user id (e.g. "U0123ABCD" - the same id you would pass to deliver_to). This puts the card in that person's "Awaiting you" queue and notifies them, so your ask does not sit unseen. It does NOT reassign the card - you still own driving it to done and you resume as soon as they answer. Valid on "human", "approval", "pr-review" and "pr-merged" waits (ENG-8291: a PR waiting on a review or a merge tap IS waiting on a person, and naming them is the whole point). Note "approval" is absent from the waiting_kind enum above deliberately and that is NOT an inconsistency: the approval broker sets that kind server-side, so you never pass it - but a card the server already parked that way still accepts this field, and rejecting the pair the server itself produces was the ENG-8291 bug. NOT valid on "external" or "other", which are parked on a system or unclassified - there is nobody to notify. Set it whenever you know who has to act; omit only if genuinely nobody specific does.`
       )
@@ -22521,7 +22546,7 @@ server.tool(
         content: [
           {
             type: "text",
-            text: 'Error: status="waiting" requires waiting_kind - one of "pr-review", "pr-merged", "human", "external", or "other". Pick the most specific that fits; use "other" if none do.'
+            text: 'Error: status="waiting" requires waiting_kind - one of "pr-review", "pr-merged", "human", "external", "agent", or "other". Pick the most specific that fits. Use "agent" when a teammate agent is blocking you and "human" when a person is; "other" and "external" mean there is nobody to notify, so reach for them only when that is actually true.'
           }
         ],
         isError: true
@@ -22545,6 +22570,23 @@ server.tool(
         isError: true
       };
     }
+    if (p.waiting_on_agent && !isAgentWaitingKindMcp(p.waiting_kind)) {
+      return {
+        content: [{ type: "text", text: agentWaitingKindRejection(p.waiting_kind) }],
+        isError: true
+      };
+    }
+    if (p.waiting_kind === "agent" && !p.waiting_on_agent) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: 'Error: waiting_kind="agent" requires waiting_on_agent - the code_name of the teammate agent that has to act. Without it the card is parked on nobody and the blocker is never told.'
+          }
+        ],
+        isError: true
+      };
+    }
     let waitingContext;
     if (isPrKind) {
       waitingContext = { repo: p.waiting_repo, pr_number: p.waiting_pr };
@@ -22565,7 +22607,8 @@ server.tool(
           waiting_on: isPrKind ? void 0 : p.waiting_on,
           waiting_kind: p.waiting_kind,
           waiting_context: waitingContext,
-          waiting_on_person: p.waiting_on_person
+          waiting_on_person: p.waiting_on_person,
+          waiting_on_agent: p.waiting_on_agent
         }
       ]
     });

package/dist/mcp/origami.js

@@ -40273,7 +40273,12 @@ var AGENT_DIRECTED_NOTICE_KINDS = [
   // instructing the agent what not to do ("do not re-raise it yourself"). The
   // human needs none of it: they are the person who tapped the button, and the
   // card swapped under their finger to say so.
-  "offer_result"
+  "offer_result",
+  // ENG-9051. The "you are blocking another agent" notice. Its content opens
+  // with a `[blocking]` machine tag and is second-person instruction to the
+  // agent ("Do whatever you owe them, then tell them"). The customer has no
+  // part in it - this is one agent telling another it has stopped.
+  "waiting_on_agent"
 ];
 var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
 
@@ -40446,7 +40451,8 @@ var WAITING_KINDS = [
   "human",
   "external",
   "other",
-  "approval"
+  "approval",
+  "agent"
 ];
 var WAITING_KIND_SET = new Set(WAITING_KINDS);
 
@@ -40886,18 +40892,18 @@ var FLAG_REGISTRY = [
     // modal would report every recently-seen host as honoring the flip — the
     // dangerous direction, because it reads as "armed" when it is not.
     //
-    // PLACEHOLDER, deliberately above every published version (npm latest was
-    // 0.28.612 when this landed). The reader ships in whatever the auto-publish
-    // patch-bump produces AFTER this merges, which is not knowable here. Per the
-    // same reasoning recorded on the `agt-bin` flag: `since` is ADVISORY, read
-    // only by `computeFlagReach`; it changes what an operator is TOLD, it does
-    // not gate a flip. So an over-high placeholder is safe (reach under-reports,
-    // nobody flips), and a GUESSED number is not.
+    // Resolved from the PUBLISHED artifacts, not from the merge timestamp: the
+    // tarballs for 0.28.617 and 0.28.618 were unpacked and searched for the
+    // `-e AGT_API_KEY=` push in `spawnSession`. 0.28.617 does not contain it;
+    // 0.28.618 does, along with the flag key, `dedicatedEnabled` and the
+    // `skipped-per-agent-key-mint-failed` decision — so the whole reader
+    // shipped together and core was not stale in that bundle.
     //
-    // BEFORE FLIPPING THIS ANYWHERE: replace with the exact first published
-    // agt-cli version whose `spawnSession` carries the `-e AGT_API_KEY=` push.
-    // The rollout runbook gates on it.
-    since: "0.29.0"
+    // Bisected rather than inferred because the CLI auto-publishes on merge and
+    // several unrelated versions landed within minutes either side; picking the
+    // version whose timestamp merely looked closest would have been a guess
+    // wearing a precise number, which is the failure this field invites.
+    since: "0.28.618"
   },
   {
     key: "agent-hours-billing-enabled",

package/dist/mcp/slack-channel.js

@@ -34333,7 +34333,12 @@ var AGENT_DIRECTED_NOTICE_KINDS = [
   // instructing the agent what not to do ("do not re-raise it yourself"). The
   // human needs none of it: they are the person who tapped the button, and the
   // card swapped under their finger to say so.
-  "offer_result"
+  "offer_result",
+  // ENG-9051. The "you are blocking another agent" notice. Its content opens
+  // with a `[blocking]` machine tag and is second-person instruction to the
+  // agent ("Do whatever you owe them, then tell them"). The customer has no
+  // part in it - this is one agent telling another it has stopped.
+  "waiting_on_agent"
 ];
 var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
 
@@ -34920,7 +34925,8 @@ var WAITING_KINDS = [
   "human",
   "external",
   "other",
-  "approval"
+  "approval",
+  "agent"
 ];
 var WAITING_KIND_SET = new Set(WAITING_KINDS);
 
@@ -35363,18 +35369,18 @@ var FLAG_REGISTRY = [
     // modal would report every recently-seen host as honoring the flip — the
     // dangerous direction, because it reads as "armed" when it is not.
     //
-    // PLACEHOLDER, deliberately above every published version (npm latest was
-    // 0.28.612 when this landed). The reader ships in whatever the auto-publish
-    // patch-bump produces AFTER this merges, which is not knowable here. Per the
-    // same reasoning recorded on the `agt-bin` flag: `since` is ADVISORY, read
-    // only by `computeFlagReach`; it changes what an operator is TOLD, it does
-    // not gate a flip. So an over-high placeholder is safe (reach under-reports,
-    // nobody flips), and a GUESSED number is not.
+    // Resolved from the PUBLISHED artifacts, not from the merge timestamp: the
+    // tarballs for 0.28.617 and 0.28.618 were unpacked and searched for the
+    // `-e AGT_API_KEY=` push in `spawnSession`. 0.28.617 does not contain it;
+    // 0.28.618 does, along with the flag key, `dedicatedEnabled` and the
+    // `skipped-per-agent-key-mint-failed` decision — so the whole reader
+    // shipped together and core was not stale in that bundle.
     //
-    // BEFORE FLIPPING THIS ANYWHERE: replace with the exact first published
-    // agt-cli version whose `spawnSession` carries the `-e AGT_API_KEY=` push.
-    // The rollout runbook gates on it.
-    since: "0.29.0"
+    // Bisected rather than inferred because the CLI auto-publishes on merge and
+    // several unrelated versions landed within minutes either side; picking the
+    // version whose timestamp merely looked closest would have been a guess
+    // wearing a precise number, which is the failure this field invites.
+    since: "0.28.618"
   },
   {
     key: "agent-hours-billing-enabled",

package/dist/mcp/telegram-channel.js

@@ -34483,7 +34483,12 @@ var AGENT_DIRECTED_NOTICE_KINDS = [
   // instructing the agent what not to do ("do not re-raise it yourself"). The
   // human needs none of it: they are the person who tapped the button, and the
   // card swapped under their finger to say so.
-  "offer_result"
+  "offer_result",
+  // ENG-9051. The "you are blocking another agent" notice. Its content opens
+  // with a `[blocking]` machine tag and is second-person instruction to the
+  // agent ("Do whatever you owe them, then tell them"). The customer has no
+  // part in it - this is one agent telling another it has stopped.
+  "waiting_on_agent"
 ];
 var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
 
@@ -35070,7 +35075,8 @@ var WAITING_KINDS = [
   "human",
   "external",
   "other",
-  "approval"
+  "approval",
+  "agent"
 ];
 var WAITING_KIND_SET = new Set(WAITING_KINDS);
 
@@ -35513,18 +35519,18 @@ var FLAG_REGISTRY = [
     // modal would report every recently-seen host as honoring the flip — the
     // dangerous direction, because it reads as "armed" when it is not.
     //
-    // PLACEHOLDER, deliberately above every published version (npm latest was
-    // 0.28.612 when this landed). The reader ships in whatever the auto-publish
-    // patch-bump produces AFTER this merges, which is not knowable here. Per the
-    // same reasoning recorded on the `agt-bin` flag: `since` is ADVISORY, read
-    // only by `computeFlagReach`; it changes what an operator is TOLD, it does
-    // not gate a flip. So an over-high placeholder is safe (reach under-reports,
-    // nobody flips), and a GUESSED number is not.
+    // Resolved from the PUBLISHED artifacts, not from the merge timestamp: the
+    // tarballs for 0.28.617 and 0.28.618 were unpacked and searched for the
+    // `-e AGT_API_KEY=` push in `spawnSession`. 0.28.617 does not contain it;
+    // 0.28.618 does, along with the flag key, `dedicatedEnabled` and the
+    // `skipped-per-agent-key-mint-failed` decision — so the whole reader
+    // shipped together and core was not stale in that bundle.
     //
-    // BEFORE FLIPPING THIS ANYWHERE: replace with the exact first published
-    // agt-cli version whose `spawnSession` carries the `-e AGT_API_KEY=` push.
-    // The rollout runbook gates on it.
-    since: "0.29.0"
+    // Bisected rather than inferred because the CLI auto-publishes on merge and
+    // several unrelated versions landed within minutes either side; picking the
+    // version whose timestamp merely looked closest would have been a guess
+    // wearing a precise number, which is the failure this field invites.
+    since: "0.28.618"
   },
   {
     key: "agent-hours-billing-enabled",

package/dist/{persistent-session-AGPLISL3.js → persistent-session-IFZS5AXT.js}

@@ -43,8 +43,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-RXC3MTSN.js";
-import "./chunk-P6KFZVKA.js";
+} from "./chunk-QSPSXG4K.js";
+import "./chunk-EDH4GZIW.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -92,4 +92,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-AGPLISL3.js.map
+//# sourceMappingURL=persistent-session-IFZS5AXT.js.map

package/dist/{responsiveness-probe-ITYPPSHM.js → responsiveness-probe-76U4MR6U.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-RXC3MTSN.js";
-import "./chunk-P6KFZVKA.js";
+} from "./chunk-QSPSXG4K.js";
+import "./chunk-EDH4GZIW.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -710,4 +710,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-ITYPPSHM.js.map
+//# sourceMappingURL=responsiveness-probe-76U4MR6U.js.map

package/dist/{session-auth-dead-Y6ABNWNM.js → session-auth-dead-RLQK5ZQV.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-P6KFZVKA.js";
+} from "./chunk-EDH4GZIW.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-Y6ABNWNM.js.map
+//# sourceMappingURL=session-auth-dead-RLQK5ZQV.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.620",
+  "version": "0.28.621",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {