@integrity-labs/agt-cli 0.28.635 → 0.28.636

package/dist/mcp/augmented-admin.js

@@ -21612,7 +21612,7 @@ server.registerTool(
 );
 server.registerTool(
   "debug_get_agent_integrations",
-  { description: 'Resolve ONE agent\'s EFFECTIVE integration set \u2014 the focused read for "does this agent have integration X, and where is it installed from?" (ENG-8271). Same resolution as `debug_get_agent`\'s `effective_integrations`, without the host/alerts payload.\n\nReturns { agent_id, code_name, team_id, organization_id, effective_integrations: { effective_count, by_scope, inherited_definition_ids, excluded_control_plane_only, shadowed_by_more_specific, duplicate_merge_keys, scopes_queried, scopes_skipped, integrations[] } } - the same `effective_integrations` object `debug_get_agent` returns, so one shape covers both tools. Each entry: { definition_id, display_name, connection_key, scope ("agent" | "team" | "org"), source_id, status, status_message, auth_type, last_connectivity_check_at, last_connectivity_status, consecutive_connectivity_failures, wired_verdict, last_session_tool_bind_at }. Never credentials.\n\nPrefer this over reading `agent_integrations`: TEAM/ORG-scope installs are invisible to a per-agent read, so absence there is not evidence. `effective_count` reconciles against the manager\'s `Integrations provisioned for \'<code_name>\' (N)` or the tool-bind probe\'s `due=N`; docs/runbooks/admin-debug-dogfood.md lists the benign divergences to rule out before treating a mismatch as a bug. `wired_verdict` is the host\'s last session-tool-bind result (bound | missing | unreachable | unknown), the closest available answer to "is it in the agent\'s .mcp.json right now?"; `null` means never probed, which is NOT "not wired".\n\nFails closed (uniform not-found) for an unauthorized/unknown agent; a failed scope query returns an error rather than a smaller count. Audited as a cross-org access. Pass { agent_id }.', inputSchema: getAgentIntegrationsSchema },
+  { description: 'Resolve ONE agent\'s EFFECTIVE integration set \u2014 the focused read for "does this agent have integration X, and where is it installed from?" (ENG-8271). Same resolution as `debug_get_agent`\'s `effective_integrations`, without the host/alerts payload.\n\nReturns { agent_id, code_name, team_id, organization_id, effective_integrations: { effective_count, by_scope, inherited_definition_ids, excluded_control_plane_only, shadowed_by_more_specific, duplicate_merge_keys, scopes_queried, scopes_skipped, integrations[] } } - the same `effective_integrations` object `debug_get_agent` returns, so one shape covers both tools. Each entry: { definition_id, display_name, connection_key, scope ("agent" | "team" | "org"), source_id, status, status_message, auth_type, last_connectivity_check_at, last_connectivity_status, consecutive_connectivity_failures, wired_verdict, last_session_tool_bind_at }. Never credentials.\n\nPrefer this over reading `agent_integrations`: TEAM/ORG-scope installs are invisible to a per-agent read, so absence there is not evidence. `effective_count` reconciles against the manager\'s `Integrations provisioned for \'<code_name>\' (N)` or the tool-bind probe\'s `due=N`; docs/runbooks/admin-debug-dogfood.md lists the benign divergences to rule out before treating a mismatch as a bug. `wired_verdict` is the host\'s last session-tool-bind result (bound | missing | unreachable | unknown | not_applicable), the closest available answer to "is it in the agent\'s .mcp.json right now?". ENG-9114: `not_applicable` means the integration has NO .mcp.json server at all - CLI-delivered (github/gh, aws-cli, gcloud) or a builtin served through the platform\'s own MCP server - so "bound" is not a question about it and it is NOT broken. `null` means never probed, which is still NOT "not wired"; once a probe has run against a row, expect one of the five values rather than null.\n\nFails closed (uniform not-found) for an unauthorized/unknown agent; a failed scope query returns an error rather than a smaller count. Audited as a cross-org access. Pass { agent_id }.', inputSchema: getAgentIntegrationsSchema },
   async (args) => {
     try {
       const result = await client.getAgentIntegrations(args.agent_id);

package/dist/{persistent-session-ORYBOIBQ.js → persistent-session-7UX2BZMT.js}

@@ -43,8 +43,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-GNTCOXZG.js";
-import "./chunk-FKG7DIE2.js";
+} from "./chunk-4HVSMJFM.js";
+import "./chunk-O4ADFO57.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -92,4 +92,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-ORYBOIBQ.js.map
+//# sourceMappingURL=persistent-session-7UX2BZMT.js.map

package/dist/{responsiveness-probe-WYCKY2BJ.js → responsiveness-probe-BQCFTEK5.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-GNTCOXZG.js";
-import "./chunk-FKG7DIE2.js";
+} from "./chunk-4HVSMJFM.js";
+import "./chunk-O4ADFO57.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -712,4 +712,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-WYCKY2BJ.js.map
+//# sourceMappingURL=responsiveness-probe-BQCFTEK5.js.map

package/dist/{session-auth-dead-NASGEQCA.js → session-auth-dead-TV2M6AFN.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-FKG7DIE2.js";
+} from "./chunk-O4ADFO57.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-NASGEQCA.js.map
+//# sourceMappingURL=session-auth-dead-TV2M6AFN.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.635",
+  "version": "0.28.636",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {