@integrity-labs/agt-cli 0.28.63 → 0.28.65

package/dist/{claude-pair-runtime-QSRMTD7I.js → claude-pair-runtime-SPP3CUBA.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-5PEPYSMG.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-WJBIN6WM.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-QSRMTD7I.js.map
+//# sourceMappingURL=claude-pair-runtime-SPP3CUBA.js.map

package/dist/lib/manager-worker.js

@@ -27,7 +27,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-5H3EMCNV.js";
+} from "../chunk-PZ3TJOW4.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -65,7 +65,7 @@ import {
   takeWatchdogGiveUpCount,
   takeZombieDetection,
   transcriptActivityAgeSeconds
-} from "../chunk-AKOF4VV5.js";
+} from "../chunk-4P7HUXWI.js";
 import {
   FLAGS_SCHEMA_VERSION,
   FLAG_REGISTRY,
@@ -96,7 +96,7 @@ import {
   resolveDmTarget,
   sumTranscriptUsageInWindow,
   wrapScheduledTaskPrompt
-} from "../chunk-7F2K3RRD.js";
+} from "../chunk-XKAJW4EX.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -6734,7 +6734,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.63" : "dev";
+var agtCliVersion = true ? "0.28.65" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7842,7 +7842,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-5PEPYSMG.js");
+      const { collectDiagnostics } = await import("../persistent-session-WJBIN6WM.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7943,7 +7943,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-HG23JDG2.js");
+      } = await import("../responsiveness-probe-XVWLBSSH.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7975,7 +7975,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-HG23JDG2.js");
+        } = await import("../responsiveness-probe-XVWLBSSH.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -11409,7 +11409,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-QSRMTD7I.js");
+  } = await import("../claude-pair-runtime-SPP3CUBA.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/augmented-admin.js

@@ -21107,6 +21107,10 @@ var AdminDebugClient = class _AdminDebugClient {
   tailLogs(args) {
     return this.get("/admin/debug/tail-logs", _AdminDebugClient.cleanQuery(args));
   }
+  /** Time-windowed read of ONE allowlisted host log across rotated files (ENG-6515). */
+  queryLogs(args) {
+    return this.get("/admin/debug/query-logs", _AdminDebugClient.cleanQuery(args));
+  }
   probeIntegration(args) {
     return this.get("/admin/debug/probe-integration", _AdminDebugClient.cleanQuery(args));
   }
@@ -21279,6 +21283,23 @@ var tailLogsSchema = external_exports.object({
     "Trailing lines to return (default 200, max 2000). Output is also byte-capped (~20 KB, newest kept) to stay within SSM limits \u2014 `truncated` flags when it clipped."
   )
 });
+var queryLogsSchema = external_exports.object({
+  agent_id: external_exports.string().min(1).max(64).describe(
+    "UUID of the agent whose host log to query. Fails closed (uniform not-found) if you are not authorized for its org."
+  ),
+  log: external_exports.enum(["manager", "pane", "slack-stderr", "telegram-stderr", "manager-state"]).optional().describe(
+    "Which host log to read (default manager). Same allowlist as debug_tail_logs. Time filtering only applies to `manager` (its lines carry an ISO8601 prefix); the others return their byte-capped tail unfiltered (`time_filtered:false`)."
+  ),
+  since: external_exports.string().min(1).max(40).optional().describe(
+    "Lower bound (ISO8601 UTC, e.g. `2026-06-14T16:00:00Z`). Omit for unbounded. Only meaningful for `manager`."
+  ),
+  until: external_exports.string().min(1).max(40).optional().describe(
+    "Upper bound (ISO8601 UTC, e.g. `2026-06-14T18:00:00Z`). Omit for unbounded (up to now). Only meaningful for `manager`."
+  ),
+  lines: external_exports.number().int().min(1).max(5e3).optional().describe(
+    "Max lines to return (default 1000, max 5000; newest kept). Output is also byte-capped (~20 KB, newest kept) to stay within SSM limits \u2014 `truncated` flags when it clipped. Narrow the window if truncated."
+  )
+});
 var probeIntegrationSchema = external_exports.object({
   agent_id: external_exports.string().min(1).max(64).describe(
     "UUID of the agent whose integration to probe. Fails closed (uniform not-found) if you are not authorized for its org."
@@ -21525,6 +21546,19 @@ server.tool(
     }
   }
 );
+server.tool(
+  "debug_query_logs",
+  'Read an agent\'s HOST logs OVER A TIME WINDOW, spanning rotated files \u2014 the historical counterpart to debug_tail_logs. Where tail only shows the live tail of the current file (minutes, and gone once it rotates), this reads the active log AND its logrotate siblings (manager.log.1, manager.log.2.gz, \u2026 14 kept) and filters lines to [since, until]. This is the read path for "did it restart at 4pm YESTERDAY?" \u2014 use it when the answer is older than the live tail or spans a rotation. Returns { agent_id, code_name, host, log, since, until, time_filtered, content, log_present, lines_requested, truncated, ssm_status }. Time filtering applies to `manager` (its lines carry an ISO8601 prefix); `pane`/`slack-stderr`/`telegram-stderr`/`manager-state` return their byte-capped tail unfiltered (time_filtered:false). Only operational logs are reachable \u2014 secret files (.mcp.json, .env.integrations) are NOT. Pass { agent_id, log?, since?, until?, lines? } (since/until ISO8601 UTC e.g. 2026-06-14T16:00:00Z, default unbounded; lines default 1000, max 5000; output ~20 KB-capped, newest kept \u2014 narrow the window if truncated). Fails closed for an unauthorized org; every call is audited as a cross-org host access.',
+  queryLogsSchema.shape,
+  async (args) => {
+    try {
+      const result = await client.queryLogs(args);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (err) {
+      return { content: [{ type: "text", text: formatError2(err) }], isError: true };
+    }
+  }
+);
 server.tool(
   "debug_probe_integration",
   "Force a FRESH host-side connectivity probe for ONE of an agent's integrations and return the LIVE verdict \u2014 use when a user reports an integration \"isn't working\" but the console shows it connected, or to confirm a fix landed. Unlike the cached status the dashboard shows, this SSH-less SSM-invokes the agent's host to run the probe against its actual wired `.mcp.json` + credentials, so it can't disagree with reality. Returns { agent_id, code_name, slug, host, verdict, message, probed_at, ssm_status }. `verdict` is the live result: `ok` | `degraded` | `transient_error` (retryable) | `down` | `not_probeable` (no probe wired for this kind) \u2014 or a central degrade: `unreachable` (agent has no host), `not_installed` (integration not on this agent), `host_cli_too_old` (the host predates the probe \u2014 update its agt-cli), `probe_error`. Pass { agent_id, slug } where slug is the integration's definition code_name (e.g. `gmail`, `slack`, `here-now`). Fails closed for an unauthorized org; every call is audited as a cross-org host access.",

package/dist/mcp/index.js

@@ -21078,6 +21078,129 @@ function writeAgentRestartFlag(codeName, reason, nowMs) {
   return path;
 }
 
+// src/approval-tools.ts
+function statusToOutcome(status) {
+  switch (status) {
+    case "active":
+    case "auto_approve":
+      return "approved";
+    case "denied":
+    case "hard_deny":
+      return "denied";
+    case "expired":
+      return "timed_out";
+    case "cancelled":
+    case "revoked":
+      return "cancelled";
+    case "pending":
+      return "pending";
+    default:
+      return "error";
+  }
+}
+function render(result) {
+  const lines = [result.note ?? "", JSON.stringify({
+    request_id: result.request_id,
+    outcome: result.outcome,
+    ...result.reason ? { reason: result.reason } : {},
+    ...result.result_payload != null ? { result_payload: result.result_payload } : {},
+    ...result.expires_at ? { expires_at: result.expires_at } : {}
+  })].filter(Boolean);
+  return { content: [{ type: "text", text: lines.join("\n") }] };
+}
+function registerApprovalTools(server2, deps) {
+  const { agentId, apiPost: apiPost2, apiGet: apiGet2 } = deps;
+  server2.tool(
+    "request_approval",
+    "Ask a human (your Manager) to approve an action before you take it, then END YOUR TURN \u2014 this does NOT block your session. You get back a request_id; later call check_approval(request_id) to see the verdict (it survives a restart \u2014 re-attach by the same id). NOTIFY-ONLY: on approval the platform does nothing \u2014 YOU perform the action. Use for actions outside your standing authority where a person must sign off.",
+    {
+      summary: external_exports.string().min(1).max(280).describe('One line describing the action you want approved (shown to the approver). E.g. "Send the Q3 report to the external auditor".'),
+      reason: external_exports.string().min(1).max(280).describe("Why you need it / context for the approver. Keep it specific."),
+      idempotency_key: external_exports.string().min(1).max(200).describe("A stable exactly-once key YOU choose for this ask (e.g. a task id + action). Retrying with the same key + same details re-attaches to the same request instead of filing a duplicate."),
+      detail: external_exports.record(external_exports.unknown()).optional().describe("Optional structured context for the approver (display + audit only; never executed)."),
+      ttl_seconds: external_exports.number().int().optional().describe("How long the request stays open before it times out (default 3600; clamped to [60, 86400]).")
+    },
+    async (params) => {
+      try {
+        const resp = await apiPost2("/approvals", {
+          agent_id: agentId,
+          summary: params.summary,
+          reason: params.reason,
+          idempotency_key: params.idempotency_key,
+          detail: params.detail,
+          ttl_seconds: params.ttl_seconds
+        });
+        const outcome = resp.outcome ?? statusToOutcome(resp.status);
+        const note = resp.duplicate ? `An open request for this idempotency_key already exists \u2014 re-attached to it (request_id ${resp.request_id}). Poll it with check_approval.` : resp.notification_status === "failed" ? `Approval filed (request_id ${resp.request_id}) but the Manager notification failed (${resp.notification_failure_reason ?? "unknown"}) \u2014 tell your operator. Poll with check_approval.` : `Approval requested (request_id ${resp.request_id}). Your Manager was notified. End your turn; poll with check_approval later.`;
+        return render({ request_id: resp.request_id, outcome, expires_at: resp.expires_at ?? null, note });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Could not file the approval request: ${msg}
+` + JSON.stringify({ request_id: "", outcome: "error", reason: msg })
+            }
+          ],
+          isError: true
+        };
+      }
+    }
+  );
+  server2.tool(
+    "check_approval",
+    "Check the verdict on an approval you requested earlier (by request_id from request_approval). Returns one of: approved | denied | timed_out | cancelled | pending | error. While 'pending', do nothing and check again later. Safe to call after a restart \u2014 the request is durable and you re-attach by id.",
+    {
+      request_id: external_exports.string().min(1).describe("The request_id returned by request_approval.")
+    },
+    async (params) => {
+      try {
+        const resp = await apiGet2(
+          `/approvals/${encodeURIComponent(params.request_id)}?agent_id=${encodeURIComponent(agentId)}`
+        );
+        return render({
+          request_id: resp.request_id,
+          outcome: resp.outcome,
+          reason: resp.reason,
+          result_payload: resp.result_payload,
+          expires_at: resp.expires_at
+        });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+          content: [{ type: "text", text: `Could not check approval ${params.request_id}: ${msg}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server2.tool(
+    "cancel_approval",
+    "Withdraw an approval request you no longer need (only works while it is still pending). The Manager stops being asked. Use when the underlying need went away.",
+    {
+      request_id: external_exports.string().min(1).describe("The request_id to withdraw."),
+      reason: external_exports.string().max(280).optional().describe("Optional short note on why you are withdrawing.")
+    },
+    async (params) => {
+      try {
+        const resp = await apiPost2(
+          `/approvals/${encodeURIComponent(params.request_id)}/cancel`,
+          { agent_id: agentId, reason: params.reason ?? "" }
+        );
+        const note = resp.outcome === "cancelled" ? `Withdrew approval request ${resp.request_id}.` : `Could not withdraw \u2014 the request is already ${resp.status}.`;
+        return render({ request_id: resp.request_id, outcome: resp.outcome, note });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+          content: [{ type: "text", text: `Could not cancel approval ${params.request_id}: ${msg}` }],
+          isError: true
+        };
+      }
+    }
+  );
+}
+
 // src/index.ts
 import { spawn } from "child_process";
 var DeliveryTargetSchema = external_exports.union([
@@ -21198,10 +21321,47 @@ async function apiPost(path, body, retried = false, timeoutMs = 15e3) {
     clearTimeout(timeout);
   }
 }
+async function apiGet(path, retried = false, timeoutMs = 15e3) {
+  const token = await getToken();
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const res = await fetch(`${AGT_HOST}${path}`, {
+      method: "GET",
+      headers: { Authorization: `Bearer ${token}` },
+      signal: controller.signal
+    });
+    if (res.status === 401 && AGT_API_KEY && !AGT_AGENT_SESSION_TOKEN && !retried) {
+      clearTimeout(timeout);
+      tokenExpiresAt = 0;
+      return apiGet(path, true, timeoutMs);
+    }
+    if (!res.ok) {
+      const text = await res.text().catch(() => res.statusText);
+      if (res.status === 401 && AGT_AGENT_SESSION_TOKEN) {
+        throw new Error(
+          `API ${path} returned 401: agent-session rejected (expired or revoked). Re-run \`agt impersonate connect\` to mint a fresh session. (${text})`
+        );
+      }
+      throw new Error(`API ${path} returned ${res.status}: ${text}`);
+    }
+    return await res.json();
+  } catch (err) {
+    if (err instanceof DOMException && err.name === "AbortError") {
+      throw new Error(`API ${path} timed out after ${timeoutMs}ms`);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 var server = new McpServer({
   name: "augmented",
   version: "0.1.0"
 });
+if (AGT_AGENT_ID) {
+  registerApprovalTools(server, { agentId: AGT_AGENT_ID, apiPost, apiGet });
+}
 server.tool(
   "kanban_list",
   'List kanban board items for this agent. Returns active items plus only the most recently completed work (last 24h). This is a NARROW, recency-windowed view \u2014 older done cards are NOT here (only done cards are windowed; failed and active cards always show). Before telling anyone you have "no record" of past work, use kanban_search, which covers your full history.',
@@ -22387,6 +22547,10 @@ async function forwardToolCall(toolName, args) {
   );
 }
 var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
+  // ENG-6452: generic agent-approval seam (always registered locally).
+  "request_approval",
+  "check_approval",
+  "cancel_approval",
   "kanban_list",
   "kanban_search",
   "kanban_add",

package/dist/{persistent-session-5PEPYSMG.js → persistent-session-WJBIN6WM.js}

@@ -25,8 +25,8 @@ import {
   takeZombieDetection,
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
-} from "./chunk-AKOF4VV5.js";
-import "./chunk-7F2K3RRD.js";
+} from "./chunk-4P7HUXWI.js";
+import "./chunk-XKAJW4EX.js";
 import "./chunk-XWVM4KPK.js";
 export {
   SEND_KEYS_ENTER_DELAY_MS,
@@ -56,4 +56,4 @@ export {
   writeDirectChatSessionState,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-5PEPYSMG.js.map
+//# sourceMappingURL=persistent-session-WJBIN6WM.js.map

package/dist/{responsiveness-probe-HG23JDG2.js → responsiveness-probe-XVWLBSSH.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-AKOF4VV5.js";
-import "./chunk-7F2K3RRD.js";
+} from "./chunk-4P7HUXWI.js";
+import "./chunk-XKAJW4EX.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -250,4 +250,4 @@ export {
   parkPendingInbound,
   readAndResetChannelDeflections
 };
-//# sourceMappingURL=responsiveness-probe-HG23JDG2.js.map
+//# sourceMappingURL=responsiveness-probe-XVWLBSSH.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.63",
+  "version": "0.28.65",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {