@integrity-labs/agt-cli 0.28.771 → 0.28.773

package/dist/{claude-pair-runtime-Z7JFVKIY.js → claude-pair-runtime-5ULX4UVC.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-NUVUR3PB.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-E4AHQHRA.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-Z7JFVKIY.js.map
+//# sourceMappingURL=claude-pair-runtime-5ULX4UVC.js.map

package/dist/lib/manager-worker.js

@@ -58,7 +58,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-BOYUCA64.js";
+} from "../chunk-UVA7VXG4.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -120,7 +120,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-R6XGVTQS.js";
+} from "../chunk-UL2W5NY6.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -209,7 +209,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-UPSDSMNC.js";
+} from "../chunk-75UAJFJJ.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -12870,7 +12870,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-J3D7MRIU.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-EN6IOLBG.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13530,7 +13530,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.771" : "dev";
+var agtCliVersion = true ? "0.28.773" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15074,7 +15074,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-NUVUR3PB.js");
+      const { collectDiagnostics } = await import("../persistent-session-E4AHQHRA.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15215,7 +15215,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-NUVUR3PB.js");
+      const { collectDiagnostics } = await import("../persistent-session-E4AHQHRA.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15384,7 +15384,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-J3D7MRIU.js");
+      } = await import("../responsiveness-probe-EN6IOLBG.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15494,7 +15494,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-J3D7MRIU.js");
+        } = await import("../responsiveness-probe-EN6IOLBG.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15650,7 +15650,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-GKZNZKWI.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-LNYMXEHY.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -19690,7 +19690,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-NUVUR3PB.js");
+        const { collectDiagnostics } = await import("../persistent-session-E4AHQHRA.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19736,7 +19736,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-NUVUR3PB.js");
+      const { collectDiagnostics } = await import("../persistent-session-E4AHQHRA.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20372,7 +20372,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-Z7JFVKIY.js");
+  } = await import("../claude-pair-runtime-5ULX4UVC.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/index.js

@@ -46523,6 +46523,54 @@ server.tool(
     return { content: [{ type: "text", text: lines.join("\n") }] };
   }
 );
+server.tool(
+  "rule_list",
+  "List the standing rules currently in force for you \u2014 the short instructions your people have asked you to follow on EVERY turn, rendered into your instructions verbatim. Use this before adding a rule (so you know whether you are at the limit and what you would be replacing), and whenever someone asks what rules you are operating under. Rules are not task-specific and are not skills: a skill loads only when its description matches the task, a rule applies always.",
+  {},
+  async () => {
+    const data = await apiGet(`/host/agent-rules?agent_id=${encodeURIComponent(AGT_AGENT_ID ?? "")}`);
+    if (!data.ok) {
+      return { content: [{ type: "text", text: "Could not read your standing rules." }], isError: true };
+    }
+    if (!data.rules.length) {
+      return {
+        content: [
+          { type: "text", text: `No standing rules yet. You can hold up to ${data.max}, each up to ${data.max_chars} characters.` }
+        ]
+      };
+    }
+    const lines = data.rules.map((r) => `- ${r.text}  (id: ${r.id})`).join("\n");
+    return {
+      content: [
+        { type: "text", text: `${data.rules.length} of ${data.max} standing rules in force:
+${lines}` }
+      ]
+    };
+  }
+);
+server.tool(
+  "rule_add",
+  'Turn a repeated instruction into a STANDING RULE that applies on every turn. Use when someone asks for the same thing more than once, or phrases it as a standing instruction ("always...", "every time...", "from now on..."). Propose it in plain language first and get a yes \u2014 never create one silently, and never make the person learn the word "skill" or "rule" to get it. Keep it SHORT: a rule is resident in your instructions on every single request, so if it needs more than a sentence it is really a skill (skill_create), which costs nothing until the task comes up. If you are already at the limit, pass replace_id with the id of the rule this one supersedes (rule_list shows the ids) \u2014 and tell the person what you dropped, in the same message. There is deliberately no way to remove a rule without adding one in its place: a rule that quietly stops applying is worse than one that was never made, because nobody notices.',
+  {
+    text: external_exports.string().describe("The rule, in the person's own words where possible. One sentence. It applies on every turn, so write it as a standing instruction rather than a task."),
+    replace_id: external_exports.string().optional().describe("The id of an existing rule this one replaces (from rule_list). Required once you are at the limit. The person MUST be told which rule was dropped, in the same reply.")
+  },
+  async (params) => {
+    const data = await apiPost("/host/agent-rules", {
+      agent_id: AGT_AGENT_ID,
+      text: params.text,
+      ...params.replace_id ? { replace_id: params.replace_id } : {}
+    });
+    if (!data.ok) {
+      return {
+        content: [{ type: "text", text: data.message ?? "Could not save that rule." }],
+        isError: true
+      };
+    }
+    const said = data.evicted ? `Added the rule. To make room I dropped: "${data.evicted.text}". Tell the person BOTH of these, not just the addition.` : `Added the rule: "${data.rule?.text}".`;
+    return { content: [{ type: "text", text: said }] };
+  }
+);
 server.tool(
   "knowledge_add",
   'Save a new durable fact or learning to the knowledge base. Use when the user explicitly asks you to save/remember something, or when you discover information that will be useful on future runs (e.g. a tenant id, an API key name, a company policy). Do NOT use for tasks (use kanban_add) or trivial one-off answers. Defaults to TEAM scope; pass scope:"org" only when the user asks for organization/company-wide knowledge (visible to every team in the org). Returns the new entry id so you can target it with knowledge_update / knowledge_delete.',
@@ -47037,6 +47085,11 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   "kanban_reopen",
   // ENG-9375: the READ path over a teammate's board (counts only).
   "kanban_peek",
+  // ENG-9789: per-agent standing rules. No rule_remove by design — see the
+  // registration below; an agent may only displace a rule by naming it while
+  // adding another.
+  "rule_list",
+  "rule_add",
   // ENG-6953: agent + people directory lookup (always registered locally).
   "directory_lookup",
   "status_standup",

package/dist/mcp/xero.js

@@ -116864,6 +116864,15 @@ async function listXeroAgedPayablesByContact(contactId, reportDate, invoicesFrom
   }
 }
 
+// src/helpers/unreconciled-blind-spot.ts
+var UNRECONCILED_BLIND_SPOT_NOTE = "INCOMPLETE BY DESIGN \u2014 read before quoting any figure from this result.\nXero's Accounting API exposes LEDGER records. Bank STATEMENT LINES that have never been matched into the ledger are not exposed at all, and neither are any notes left on them. Money can therefore be in the bank account and absent from this data.\nSo any receivables, payables, cashflow or aged-debtors figure derived from this may be INCOMPLETE OR INACCURATE, and THE SIZE AND DIRECTION OF THE ERROR CANNOT BE DETERMINED FROM THIS RESPONSE \u2014 an unmatched line might be a customer receipt, a supplier payment or a bank fee, and nothing here says which, or how many there are. An invoice can read AUTHORISED and fully unpaid while the customer's payment is already sitting in the bank account.\nWhen reporting a figure from this data, say that unmatched bank activity is not included and that you cannot see it. Do not describe a customer as overdue, and do not request or draft a payment chase, on this evidence alone: check the Xero bank reconciliation screen, or ask a human to. (CS-1638)";
+function unreconciledBlindSpotBlock() {
+  return { type: "text", text: UNRECONCILED_BLIND_SPOT_NOTE };
+}
+function withUnreconciledBlindSpotNote(result) {
+  return { ...result, content: [...result.content, unreconciledBlindSpotBlock()] };
+}
+
 // src/tools/list/list-aged-payables-by-contact.tool.ts
 var ListAgedPayablesByContact = CreateXeroTool(
   "list-aged-payables-by-contact",
@@ -116889,7 +116898,7 @@ var ListAgedPayablesByContact = CreateXeroTool(
     }
     const agedPayablesReport = response.result;
     const filter2 = formatAgedReportFilter(invoicesFromDate, invoicesToDate);
-    return {
+    return withUnreconciledBlindSpotNote({
       content: [
         {
           type: "text",
@@ -116908,7 +116917,7 @@ var ListAgedPayablesByContact = CreateXeroTool(
           text: JSON.stringify(agedPayablesReport.rows, null, 2)
         }
       ]
-    };
+    });
   }
 );
 var list_aged_payables_by_contact_tool_default = ListAgedPayablesByContact;
@@ -116980,7 +116989,7 @@ var ListAgedReceivablesByContact = CreateXeroTool(
     }
     const agedReceivablesReport = response.result;
     const filter2 = formatAgedReportFilter(invoicesFromDate, invoicesToDate);
-    return {
+    return withUnreconciledBlindSpotNote({
       content: [
         {
           type: "text",
@@ -116999,7 +117008,7 @@ var ListAgedReceivablesByContact = CreateXeroTool(
           text: JSON.stringify(agedReceivablesReport.rows, null, 2)
         }
       ]
-    };
+    });
   }
 );
 var list_aged_receivables_by_contact_tool_default = ListAgedReceivablesByContact;
@@ -117060,7 +117069,14 @@ var formatLineItem = (lineItem) => {
 // src/tools/list/list-bank-transactions.tool.ts
 var ListBankTransactionsTool = CreateXeroTool(
   "list-bank-transactions",
-  `List all bank transactions in Xero.
+  `List Xero BankTransaction LEDGER records (spend-money / receive-money), each
+  flagged Reconciled or Unreconciled.
+  This is NOT the bank account, and the distinction is the point. Xero's
+  Accounting API exposes BankTransaction records only. Bank STATEMENT LINES that
+  have never been matched into the ledger are not exposed at all, so money can be
+  in the bank account and absent from this list entirely. A balance, receivables
+  or cashflow figure derived from this may be incomplete, and nothing here reveals
+  by how much. (CS-1638)
   Ask the user if they want to see bank transactions for a specific bank account,
   or to see all bank transactions before running.
   Ask the user if they want the next page of quotes after running this tool if
@@ -117084,7 +117100,7 @@ var ListBankTransactionsTool = CreateXeroTool(
       };
     }
     const bankTransactions = response.result;
-    return {
+    return withUnreconciledBlindSpotNote({
       content: [
         {
           type: "text",
@@ -117110,7 +117126,7 @@ var ListBankTransactionsTool = CreateXeroTool(
           ].filter(Boolean).join("\n")
         })) || []
       ]
-    };
+    });
   }
 );
 var list_bank_transactions_tool_default = ListBankTransactionsTool;
@@ -117367,7 +117383,7 @@ async function listXeroInvoices(page = 1, contactIds, invoiceNumbers) {
 // src/tools/list/list-invoices.tool.ts
 var ListInvoicesTool = CreateXeroTool(
   "list-invoices",
-  "List invoices in Xero. This includes Draft, Submitted, and Paid invoices.   Ask the user if they want to see invoices for a specific contact,   invoice number, or to see all invoices before running.   Ask the user if they want the next page of invoices after running this tool   if 10 invoices are returned.   If they want the next page, call this tool again with the next page number   and the contact or invoice number if one was provided in the previous call.",
+  `List invoices in Xero. This includes Draft, Submitted, and Paid invoices.   CS-1638: an invoice reads AUTHORISED and fully unpaid until the customer's   payment is RECONCILED, so "unpaid" here means "not yet matched in Xero",   not "the money has not arrived". Do not chase on this evidence alone.   Ask the user if they want to see invoices for a specific contact,   invoice number, or to see all invoices before running.   Ask the user if they want the next page of invoices after running this tool   if 10 invoices are returned.   If they want the next page, call this tool again with the next page number   and the contact or invoice number if one was provided in the previous call.`,
   {
     page: external_exports.number(),
     contactIds: external_exports.array(external_exports.string()).optional(),
@@ -117387,7 +117403,7 @@ var ListInvoicesTool = CreateXeroTool(
     }
     const invoices = response.result;
     const returnLineItems = (invoiceNumbers?.length ?? 0) > 0;
-    return {
+    return withUnreconciledBlindSpotNote({
       content: [
         {
           type: "text",
@@ -117422,7 +117438,7 @@ var ListInvoicesTool = CreateXeroTool(
           ].filter(Boolean).join("\n")
         })) || []
       ]
-    };
+    });
   }
 );
 var list_invoices_tool_default = ListInvoicesTool;

package/dist/{persistent-session-NUVUR3PB.js → persistent-session-E4AHQHRA.js}

@@ -49,8 +49,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-R6XGVTQS.js";
-import "./chunk-UPSDSMNC.js";
+} from "./chunk-UL2W5NY6.js";
+import "./chunk-75UAJFJJ.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -104,4 +104,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-NUVUR3PB.js.map
+//# sourceMappingURL=persistent-session-E4AHQHRA.js.map

package/dist/{responsiveness-probe-J3D7MRIU.js → responsiveness-probe-EN6IOLBG.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-R6XGVTQS.js";
-import "./chunk-UPSDSMNC.js";
+} from "./chunk-UL2W5NY6.js";
+import "./chunk-75UAJFJJ.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -745,4 +745,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-J3D7MRIU.js.map
+//# sourceMappingURL=responsiveness-probe-EN6IOLBG.js.map

package/dist/{session-auth-dead-GKZNZKWI.js → session-auth-dead-LNYMXEHY.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-UPSDSMNC.js";
+} from "./chunk-75UAJFJJ.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-GKZNZKWI.js.map
+//# sourceMappingURL=session-auth-dead-LNYMXEHY.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.771",
+  "version": "0.28.773",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {