@integrity-labs/agt-cli 0.28.98 → 0.28.100

package/dist/{chunk-TRKWWYRN.js → chunk-5DYG42FL.js}

@@ -1060,6 +1060,16 @@ var FLAG_REGISTRY = [
     // gate is off rather than rendering a button that 403s.
     public: true
   },
+  {
+    key: "admin-send-keys",
+    description: "Interactive send-keys rescue on the live terminal (ENG-6611): POST /admin/agents/:id/send-keys runs a buttons-only, allowlisted tmux send-keys (Enter, Ctrl-C, Esc, arrows, single-char answer + Enter) over SSM to rescue a wedged agent. It is a customer-host WRITE, so it ships dark and the route ALSO hard-gates the target to an is_internal (IL-owned) org regardless of this flag - customer agents are a separate later decision. Gate evaluated server-side at the send endpoint, independent of Diagnostics-tab visibility (the ENG-6639 firewall). No free-text (that is ENG-6643).",
+    flagType: "boolean",
+    defaultValue: false,
+    // Capability change on customer infrastructure; flipping it is worth an explicit confirm.
+    sensitive: true,
+    // Exposed to the browser so the live modal can show/hide the quick-action row.
+    public: true
+  },
   {
     key: "channel-replay",
     description: "Durable channel-inbound replay (ENG-5969): re-push an uncleared pending-inbound marker when the session is alive so a dropped fire-once notification is recovered (bounded by MAX_MARKER_REPLAYS). Boolean gate; ships dark \u2014 per-host canary (agt-aws-1) before any fleet flip (ENG-6354). It actively re-delivers inbound, so it stays inert until flipped on per host/org.",
@@ -3603,7 +3613,13 @@ var HTTP_PROBE_PROVIDERS = /* @__PURE__ */ new Set([
   "linear",
   "google-workspace",
   "xero",
-  "v0"
+  "v0",
+  // ENG-6642: Buffer is a direct-API GraphQL integration (api_key → Bearer),
+  // not a CLI tool. Route it to the read-only org-details HTTP probe so health
+  // reflects real API reachability, not a `buffer` binary on PATH. This wins
+  // over its toolkit source_type, so the probe is honest regardless of how the
+  // toolkit row is classified.
+  "buffer"
   // ENG-6100: GitHub is deliberately NOT here. This set drives the ASYNC
   // connectivity monitor's routing, where github (source_type='native')
   // stays host-side (cli_command — `gh`, the credential the agent actually
@@ -4295,10 +4311,37 @@ async function probeBearerJson(url, creds, fetchImpl, interpret, extraHeaders) {
     return networkOutcome(err);
   }
 }
+async function probeBuffer(creds, fetchImpl) {
+  const key = creds.api_key ?? creds.access_token;
+  if (!key)
+    return { status: "down", message: "No Buffer credential present" };
+  try {
+    const res = await timedFetch2(fetchImpl, "https://api.buffer.com", {
+      method: "POST",
+      headers: { "Content-Type": "application/json", Authorization: `Bearer ${key}` },
+      body: JSON.stringify({ query: "{ account { organizations { id name } } }" })
+    });
+    if (!res.ok) {
+      const message = res.status === 401 ? "Buffer API key expired or revoked \u2014 reconnect required" : `Buffer API returned ${res.status}`;
+      return { status: statusForHttp(res.status), message };
+    }
+    const body = await res.json();
+    if (body.errors?.length)
+      return { status: "down", message: body.errors[0]?.message ?? "Unknown Buffer error" };
+    const orgs = body.data?.account?.organizations ?? [];
+    if (!orgs.length)
+      return { status: "down", message: "No Buffer organizations on this account" };
+    return { status: "ok", message: `Connected to ${orgs[0]?.name ?? "Buffer"}` };
+  } catch (err) {
+    return networkOutcome(err);
+  }
+}
 async function probeHttpProvider(definitionId, credentials, fetchImpl = fetch) {
   switch (definitionId) {
     case "linear":
       return probeLinear(credentials, fetchImpl);
+    case "buffer":
+      return probeBuffer(credentials, fetchImpl);
     case "google-workspace":
       return probeBearerJson("https://www.googleapis.com/oauth2/v2/userinfo", credentials, fetchImpl, (body) => {
         const info = body;
@@ -5663,4 +5706,4 @@ export {
   parseEnvIntegrations,
   probeMcpEnvSubstitution
 };
-//# sourceMappingURL=chunk-TRKWWYRN.js.map
+//# sourceMappingURL=chunk-5DYG42FL.js.map