@integrity-labs/agt-cli 0.28.899 → 0.28.900

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-FZBIHBDG.js";
+} from "../chunk-YG55GK7W.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.899" : "dev";
+var cliVersion = true ? "0.28.900" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.899" : "dev";
+var cliVersion2 = true ? "0.28.900" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-FZBIHBDG.js → chunk-YG55GK7W.js}

@@ -6841,7 +6841,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.899" : "dev";
+var agtCliVersion = true ? "0.28.900" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11451,4 +11451,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-FZBIHBDG.js.map
+//# sourceMappingURL=chunk-YG55GK7W.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-FZBIHBDG.js";
+} from "../chunk-YG55GK7W.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -13721,7 +13721,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.899" : "dev";
+var agtCliVersion = true ? "0.28.900" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/augmented-admin.js

@@ -21353,7 +21353,16 @@ var searchAgentsSchema = strictObject({
   q: external_exports.string().max(128).optional().describe("Case-insensitive substring match on code_name or display_name."),
   status: external_exports.string().max(32).optional().describe("Filter by agent status (draft | active | paused | revoked)."),
   environment: external_exports.string().max(32).optional().describe("Filter by environment (dev | stage | prod)."),
-  limit: limitSchema
+  limit: limitSchema,
+  // ENG-10152: these schemas are STRICT, so an unexposed field is REJECTED
+  // rather than ignored. ENG-10379 hit exactly that on `debug_list_alerts` — the
+  // API accepted a cursor for months and the schema never offered one, so the
+  // paging existed and could not be driven. Adding the field here at the same
+  // time as the endpoint is the whole point; shipping the API half alone would
+  // rebuild that defect inside its own fix.
+  cursor: external_exports.string().min(1).regex(/\S/, "cursor must not be blank").max(512).optional().describe(
+    "Opaque keyset cursor from a previous response's `next_cursor`. Pass it to fetch the next page and repeat until `next_cursor` is null, which walks the whole roster in order. Ordering is `updated_at` DESC (agents never updated sort last), so the rows a truncated page drops are the LEAST recently updated \u2014 which is precisely where a long-paused agent ends up. A malformed cursor is rejected with 400, never silently served as page one."
+  )
 });
 var searchOrgsSchema = strictObject({
   q: external_exports.string().max(128).optional().describe("Case-insensitive substring match on organization name or slug."),
@@ -21629,7 +21638,7 @@ var client = new AdminDebugClient({
 var server = new McpServer({ name: "augmented-admin-mcp", version: package_default.version });
 server.registerTool(
   "debug_search_agents",
-  { description: "Search managed end-user agents across authorized orgs for troubleshooting. Returns a diagnostic projection per agent (code_name, status, environment, risk_tier, org, heartbeat verdict) \u2014 never credentials or transcripts. Authorized = IL-owned + fully-managed orgs (standing) plus any self-managed org you hold an active grant for (see debug_request_access). Filter with { q, status, environment, limit }.", inputSchema: searchAgentsSchema },
+  { description: 'Search managed end-user agents across authorized orgs for troubleshooting. Returns a diagnostic projection per agent (code_name, status, environment, risk_tier, org, heartbeat verdict) \u2014 never credentials or transcripts \u2014 plus { count, total, truncated, next_cursor }. Authorized = IL-owned + fully-managed orgs (standing) plus any self-managed org you hold an active grant for (see debug_request_access). Filter with { q, status, environment, limit, cursor }. **ENG-10152 \u2014 READ THIS BEFORE CONCLUDING AN AGENT DOES NOT EXIST.** This tool used to cap at 100 rows and say nothing about it, so a short page was indistinguishable from a complete one: that hid 2 of 8 paused agents, one a PROD/HIGH-risk customer agent down 8.5 days, simply because it sat past row 100. `total` is now the match count BEFORE the cap, so `truncated: true` means you are NOT seeing everything and any statement of the form "no agent is in state X" is unsupported until you have paged. ORDERING IS `updated_at` DESC, agents never updated sorting last \u2014 so the rows a truncated page drops are the LEAST RECENTLY UPDATED, which is exactly where a long-paused or abandoned agent ends up. That is the opposite of where you would look for one. To reach them, pass `cursor` set to this response\'s `next_cursor` and repeat until `next_cursor` comes back null; that walks the whole roster in order and is the supported alternative to partitioning on `environment` and hoping the union is complete. Narrow with `status`/`environment` when you already know what you are hunting.', inputSchema: searchAgentsSchema },
   async (args) => {
     try {
       const result = await client.searchAgents(args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.899",
+  "version": "0.28.900",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {