@integrity-labs/agt-cli 0.27.11 → 0.27.12

package/dist/bin/agt.js

@@ -27,7 +27,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-KJE777CX.js";
+} from "../chunk-DFXRKR76.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -53,7 +53,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-YSBGIXJG.js";
+} from "../chunk-TOMBC7IE.js";
 
 // src/bin/agt.ts
 import { join as join15 } from "path";
@@ -4630,7 +4630,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.11" : "dev";
+var cliVersion = true ? "0.27.12" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5162,7 +5162,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.11" : "dev";
+var cliVersion2 = true ? "0.27.12" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {

package/dist/{chunk-GN4XPQWJ.js → chunk-7JFYAP7Y.js}

@@ -1,7 +1,7 @@
 import {
   claudeModelAlias,
   isClaudeFastMode
-} from "./chunk-YSBGIXJG.js";
+} from "./chunk-TOMBC7IE.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -1116,4 +1116,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-GN4XPQWJ.js.map
+//# sourceMappingURL=chunk-7JFYAP7Y.js.map

package/dist/{chunk-KJE777CX.js → chunk-DFXRKR76.js}

@@ -9,7 +9,65 @@ import {
   parseDeliveryTarget,
   registerFramework,
   wrapScheduledTaskPrompt
-} from "./chunk-YSBGIXJG.js";
+} from "./chunk-TOMBC7IE.js";
+
+// ../../packages/core/dist/provisioning/provisioner.js
+import { createHash } from "crypto";
+function sha256(content) {
+  return createHash("sha256").update(content, "utf8").digest("hex");
+}
+function provision(input, frameworkId = "openclaw") {
+  const adapter = getFramework(frameworkId);
+  const artifacts = adapter.buildArtifacts(input);
+  const charterHash = sha256(input.charterContent);
+  const toolsHash = sha256(input.toolsContent);
+  const teamDir = `.augmented/${input.agent.code_name}`;
+  return {
+    teamDir,
+    artifacts,
+    charterHash,
+    toolsHash
+  };
+}
+
+// ../../packages/core/dist/provisioning/hook-env.js
+function augmentedHookPath(currentPath) {
+  const extras = [
+    "/home/linuxbrew/.linuxbrew/bin",
+    "/opt/homebrew/bin",
+    "/usr/local/bin",
+    "/usr/bin",
+    "/bin"
+  ];
+  const seen = /* @__PURE__ */ new Set();
+  const parts = [];
+  const push = (p) => {
+    if (!p || seen.has(p))
+      return;
+    seen.add(p);
+    parts.push(p);
+  };
+  for (const p of (currentPath ?? "").split(":"))
+    push(p);
+  for (const p of extras)
+    push(p);
+  return parts.join(":");
+}
+function extractCommandNotFound(stderr) {
+  if (!stderr)
+    return null;
+  const SAFE_CMD = /^[A-Za-z][A-Za-z0-9._-]{0,63}$/;
+  for (const line of stderr.split(/\r?\n/)) {
+    const m = line.match(/^(?:bash|sh): (?:line \d+: )?([^:\s]+): command not found$/);
+    if (m?.[1]) {
+      const rawCmd = m[1].trim();
+      const cmd = rawCmd.split("/").pop() ?? rawCmd;
+      if (SAFE_CMD.test(cmd))
+        return cmd;
+    }
+  }
+  return null;
+}
 
 // ../../packages/core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
@@ -174,7 +232,15 @@ var INTEGRATION_REGISTRY = [
       { id: "qmd:search", name: "Search Memory", description: "Semantic + keyword search over indexed memory files", access: "read" },
       { id: "qmd:get", name: "Get Memory", description: "Read memory files by path and line range", access: "read" }
     ],
-    beta: true
+    beta: true,
+    // ENG-5815: migrated from buildMcpJson's hardcoded if-block. qmd is
+    // the simplest of the four pre-data-driven entries — no env, no
+    // conditional logic, just `qmd mcp`. The byte-identical render is
+    // pinned by claudecode-qmd-data-driven.test.ts.
+    nativeMcp: {
+      command: "qmd",
+      args: ["mcp"]
+    }
   },
   {
     id: "v0",
@@ -310,6 +376,35 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://www.coderabbit.ai/cli"
   },
+  {
+    id: "aws",
+    name: "AWS",
+    category: "infrastructure",
+    description: "Amazon Web Services \u2014 query AWS APIs (EC2, S3, IAM, Lambda, etc.) via AWS Labs' official AWS API MCP server",
+    supported_auth_types: ["api_key", "managed", "none"],
+    capabilities: [
+      { id: "aws:read", name: "Read AWS Resources", description: "List and describe AWS resources across services (EC2, S3, IAM, Lambda, \u2026)", access: "read" },
+      { id: "aws:write", name: "Write AWS Resources", description: "Create and update AWS resources. Pair with an aws-no-destructive-ops guardrail.", access: "write" }
+    ],
+    docs_url: "https://github.com/awslabs/mcp/tree/main/src/aws-api-mcp-server",
+    beta: true,
+    // ENG-5815: first integration shipped purely via the data-driven
+    // path — buildMcpJson never grew an `aws` if-block. The AWS Labs
+    // AWS API MCP server runs through uvx (Python tooling), which the
+    // host bootstrap installs alongside python3. Credentials are
+    // resolved via the standard AWS_* env / shared credentials file
+    // chain on the host; the spec doesn't override them.
+    nativeMcp: {
+      command: "uvx",
+      args: ["awslabs.aws-api-mcp-server@latest"],
+      env: {
+        AWS_REGION: "{{empty_if_no_env.AWS_REGION}}",
+        AWS_PROFILE: "{{empty_if_no_env.AWS_PROFILE}}",
+        PATH: "{{process_env.PATH}}",
+        HOME: "{{process_env.HOME}}"
+      }
+    }
+  },
   {
     id: "custom",
     name: "Custom Integration",
@@ -326,45 +421,6 @@ function getIntegration(id) {
   return integrationMap.get(id);
 }
 
-// ../../packages/core/dist/provisioning/hook-env.js
-function augmentedHookPath(currentPath) {
-  const extras = [
-    "/home/linuxbrew/.linuxbrew/bin",
-    "/opt/homebrew/bin",
-    "/usr/local/bin",
-    "/usr/bin",
-    "/bin"
-  ];
-  const seen = /* @__PURE__ */ new Set();
-  const parts = [];
-  const push = (p) => {
-    if (!p || seen.has(p))
-      return;
-    seen.add(p);
-    parts.push(p);
-  };
-  for (const p of (currentPath ?? "").split(":"))
-    push(p);
-  for (const p of extras)
-    push(p);
-  return parts.join(":");
-}
-function extractCommandNotFound(stderr) {
-  if (!stderr)
-    return null;
-  const SAFE_CMD = /^[A-Za-z][A-Za-z0-9._-]{0,63}$/;
-  for (const line of stderr.split(/\r?\n/)) {
-    const m = line.match(/^(?:bash|sh): (?:line \d+: )?([^:\s]+): command not found$/);
-    if (m?.[1]) {
-      const rawCmd = m[1].trim();
-      const cmd = rawCmd.split("/").pop() ?? rawCmd;
-      if (SAFE_CMD.test(cmd))
-        return cmd;
-    }
-  }
-  return null;
-}
-
 // ../../packages/core/dist/provisioning/frameworks/openclaw/index.js
 import { execFile, spawn } from "child_process";
 import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync2, unlinkSync as unlinkSync2, chmodSync as chmodSync2, renameSync as renameSync2, symlinkSync } from "fs";
@@ -3515,6 +3571,66 @@ function buildRemoteMcpEntry(definitionId) {
   };
 }
 
+// ../../packages/core/dist/provisioning/native-mcp.js
+function buildNativeMcpEntry(spec, ctx) {
+  const resolvedCommand = resolveTemplate(spec.command, ctx);
+  if (resolvedCommand.omit) {
+    throw new Error("NativeMcpSpec: empty_if_no_env is only valid in env values (not in `command`)");
+  }
+  const command = resolvedCommand.value;
+  const args = spec.args.map((a, i) => {
+    const resolved = resolveTemplate(a, ctx);
+    if (resolved.omit) {
+      throw new Error(`NativeMcpSpec: empty_if_no_env is only valid in env values (not in args[${i}])`);
+    }
+    return resolved.value;
+  });
+  if (spec.env === void 0) {
+    return { command, args };
+  }
+  const env = {};
+  for (const [k, raw] of Object.entries(spec.env)) {
+    const { value, omit } = resolveTemplate(raw, ctx);
+    if (omit)
+      continue;
+    env[k] = value;
+  }
+  return { command, args, env };
+}
+function resolveTemplate(input, ctx) {
+  const TOKEN = /\{\{([^}]+)\}\}/g;
+  const hasEmptyIfNoEnv = /\{\{\s*empty_if_no_env\./.test(input);
+  const isWholeValueEmptyIfNoEnv = /^\{\{\s*empty_if_no_env\.[^}]+\}\}$/.test(input);
+  if (hasEmptyIfNoEnv && !isWholeValueEmptyIfNoEnv) {
+    throw new Error(`NativeMcpSpec: empty_if_no_env must be the sole content of the value, never mixed with literal text or other tokens (value: ${JSON.stringify(input)})`);
+  }
+  let omit = false;
+  const value = input.replace(TOKEN, (whole, expr) => {
+    const trimmed = expr.trim();
+    if (trimmed === "agent_id")
+      return ctx.agentId;
+    if (trimmed === "agent_code_name")
+      return ctx.agentCodeName;
+    if (trimmed === "integration_id")
+      return ctx.integration?.id ?? "";
+    if (trimmed.startsWith("process_env.")) {
+      const name = trimmed.slice("process_env.".length);
+      return process.env[name] ?? "";
+    }
+    if (trimmed.startsWith("empty_if_no_env.")) {
+      const name = trimmed.slice("empty_if_no_env.".length);
+      const v = process.env[name] ?? "";
+      if (v.length === 0) {
+        omit = true;
+        return "";
+      }
+      return v;
+    }
+    return whole;
+  });
+  return { value, omit };
+}
+
 // ../../packages/core/dist/provisioning/frameworks/claudecode/index.js
 var VALID_CODE_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var SECRET_FILE_MODE = 384;
@@ -4426,12 +4542,16 @@ function buildMcpJson(input) {
       HOME: process.env["HOME"] ?? ""
     }
   };
-  const hasQmd = input.integrations?.some((i) => i.definition_id === "qmd");
-  if (hasQmd) {
-    mcpServers["qmd"] = {
-      command: "qmd",
-      args: ["mcp"]
-    };
+  for (const integration of input.integrations ?? []) {
+    const def = INTEGRATION_REGISTRY.find((d) => d.id === integration.definition_id);
+    if (!def?.nativeMcp)
+      continue;
+    const key = def.nativeMcp.key ?? integration.definition_id;
+    mcpServers[key] = buildNativeMcpEntry(def.nativeMcp, {
+      agentId: input.agent.agent_id,
+      agentCodeName: input.agent.code_name,
+      integration
+    });
   }
   const xeroIntegration = input.integrations?.find((i) => i.definition_id === "xero");
   if (xeroIntegration) {
@@ -5215,9 +5335,16 @@ ${sections}`
       chmodSync4(envPath, SECRET_FILE_MODE);
     }
     writeXurlStoreForIntegrations(decryptedIntegrations);
-    const hasQmd = integrations.some((i) => i.definition_id === "qmd");
-    if (hasQmd) {
-      this.writeMcpServer(codeName, "qmd", { command: "qmd", args: ["mcp"] });
+    for (const integration of decryptedIntegrations) {
+      const def = INTEGRATION_REGISTRY.find((d) => d.id === integration.definition_id);
+      if (!def?.nativeMcp)
+        continue;
+      const key = def.nativeMcp.key ?? integration.definition_id;
+      this.writeMcpServer(codeName, key, buildNativeMcpEntry(def.nativeMcp, {
+        agentId: agentId ?? "",
+        agentCodeName: codeName,
+        integration
+      }));
     }
     const xeroIntegration = integrations.find((i) => i.definition_id === "xero");
     if (xeroIntegration) {
@@ -5276,16 +5403,15 @@ ${sections}`
       }
     }
     if (this.removeMcpServer) {
+      const nativeMcpKeys = INTEGRATION_REGISTRY.filter((d) => d.nativeMcp !== void 0).map((d) => d.nativeMcp.key ?? d.id);
       const integrationDerivedKeys = /* @__PURE__ */ new Set([
-        "qmd",
         "xero",
         "postiz",
         "cloud-broker",
+        ...nativeMcpKeys,
         ...Object.entries(OAUTH_PROVIDERS).filter(([, provider]) => Boolean(provider.mcpUrl)).map(([id]) => id)
       ]);
       const expectedKeys = /* @__PURE__ */ new Set();
-      if (hasQmd)
-        expectedKeys.add("qmd");
       if (xeroIntegration)
         expectedKeys.add("xero");
       if (postizIntegration)
@@ -5293,6 +5419,10 @@ ${sections}`
       if (hasCloudBroker)
         expectedKeys.add("cloud-broker");
       for (const integration of integrations) {
+        const def = INTEGRATION_REGISTRY.find((d) => d.id === integration.definition_id);
+        if (def?.nativeMcp) {
+          expectedKeys.add(def.nativeMcp.key ?? integration.definition_id);
+        }
         if (buildRemoteMcpEntry(integration.definition_id)) {
           expectedKeys.add(integration.definition_id);
         }
@@ -5872,22 +6002,6 @@ var ManagedAgentsAdapter = {
 };
 registerFramework(ManagedAgentsAdapter);
 
-// src/lib/globals.ts
-import chalk from "chalk";
-var _jsonMode = false;
-function setJsonMode(enabled) {
-  _jsonMode = enabled;
-  if (enabled) {
-    chalk.level = 0;
-  }
-}
-function isJsonMode() {
-  return _jsonMode;
-}
-function jsonOutput(data) {
-  console.log(JSON.stringify(data, null, 2));
-}
-
 // src/lib/config.ts
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync6, mkdirSync as mkdirSync5, existsSync as existsSync6 } from "fs";
 import { join as join6 } from "path";
@@ -6136,23 +6250,20 @@ async function getHostId() {
   return hostId;
 }
 
-// ../../packages/core/dist/provisioning/provisioner.js
-import { createHash } from "crypto";
-function sha256(content) {
-  return createHash("sha256").update(content, "utf8").digest("hex");
+// src/lib/globals.ts
+import chalk from "chalk";
+var _jsonMode = false;
+function setJsonMode(enabled) {
+  _jsonMode = enabled;
+  if (enabled) {
+    chalk.level = 0;
+  }
 }
-function provision(input, frameworkId = "openclaw") {
-  const adapter = getFramework(frameworkId);
-  const artifacts = adapter.buildArtifacts(input);
-  const charterHash = sha256(input.charterContent);
-  const toolsHash = sha256(input.toolsContent);
-  const teamDir = `.augmented/${input.agent.code_name}`;
-  return {
-    teamDir,
-    artifacts,
-    charterHash,
-    toolsHash
-  };
+function isJsonMode() {
+  return _jsonMode;
+}
+function jsonOutput(data) {
+  console.log(JSON.stringify(data, null, 2));
 }
 
 // src/commands/manager.ts
@@ -6768,17 +6879,15 @@ async function managerUninstallSystemUnitCommand() {
 }
 
 export {
-  getIntegration,
+  provision,
   extractCommandNotFound,
+  getIntegration,
   INTEGRATIONS_SECTION_START,
   INTEGRATIONS_SECTION_END,
   estimateActiveTasksTokens,
   provisionStopHook,
   provisionIsolationHook,
   provisionOrientHook,
-  setJsonMode,
-  isJsonMode,
-  jsonOutput,
   getApiKey,
   getActiveTeam,
   setActiveTeam,
@@ -6789,14 +6898,16 @@ export {
   ApiError,
   api,
   getHostId,
+  getManagerPaths,
+  startWatchdog,
   success,
   error,
   warn,
   info,
   table,
-  provision,
-  getManagerPaths,
-  startWatchdog,
+  setJsonMode,
+  isJsonMode,
+  jsonOutput,
   managerStartCommand,
   SUPERVISOR_RESTART_EXIT_CODE,
   managerStopCommand,
@@ -6806,4 +6917,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-KJE777CX.js.map
+//# sourceMappingURL=chunk-DFXRKR76.js.map