@integrity-labs/agt-cli 0.27.130 → 0.27.132

package/dist/bin/agt.js

@@ -28,7 +28,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-H4QCCP2M.js";
+} from "../chunk-DAOANYK4.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -54,7 +54,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-XCV5NU45.js";
+} from "../chunk-TRGX4NVZ.js";
 
 // src/bin/agt.ts
 import { join as join20 } from "path";
@@ -4934,7 +4934,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.130" : "dev";
+var cliVersion = true ? "0.27.132" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5857,7 +5857,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.130" : "dev";
+var cliVersion2 = true ? "0.27.132" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-H4QCCP2M.js → chunk-DAOANYK4.js}

@@ -9,7 +9,7 @@ import {
   parseDeliveryTarget,
   registerFramework,
   wrapScheduledTaskPrompt
-} from "./chunk-XCV5NU45.js";
+} from "./chunk-TRGX4NVZ.js";
 
 // ../../packages/core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
@@ -387,6 +387,24 @@ var INTEGRATION_REGISTRY = [
       }
     }
   },
+  {
+    // ENG-6195: admin-only debugging surface for Integrity Labs STAFF agents.
+    // Provisions the @integrity-labs/augmented-admin-mcp stdio broker, which
+    // reads end-user agent diagnostics cross-org via /admin/debug/*. `beta` so
+    // it is visible/enable-able only by admin-email-domain users; the API
+    // double-gates every call on the caller's owning org `is_internal = true`.
+    // auth `none` — no end-user OAuth; the host JWT (org_id claim) is the
+    // credential. NOT a customer integration; do not promote to `published`.
+    id: "augmented-admin",
+    name: "Augmented Admin Debug",
+    category: "infrastructure",
+    description: "Integrity Labs staff-only: cross-org agent/host/integration/alert diagnostics for troubleshooting managed agents.",
+    supported_auth_types: ["none"],
+    beta: true,
+    capabilities: [
+      { id: "augmented-admin:read-diagnostics", name: "Read Diagnostics", description: "Cross-org read of agent, host, integration, and alert diagnostics (projection only \u2014 never credentials or transcripts).", access: "read" }
+    ]
+  },
   {
     id: "custom",
     name: "Custom Integration",
@@ -5121,6 +5139,21 @@ function buildMcpJson(input) {
       }
     };
   }
+  const hasAdminDebug = input.integrations?.some((i) => i.definition_id === "augmented-admin") ?? false;
+  if (hasAdminDebug) {
+    mcpServers["augmented-admin"] = {
+      command: "npx",
+      args: ["-y", "@integrity-labs/augmented-admin-mcp@latest"],
+      env: {
+        AGT_HOST: "${AGT_HOST}",
+        AGT_AGENT_ID: input.agent.agent_id,
+        AGT_RUN_ID: "${AGT_RUN_ID}",
+        AGT_API_KEY: "${AGT_API_KEY}",
+        PATH: process.env["PATH"] ?? "",
+        HOME: process.env["HOME"] ?? ""
+      }
+    };
+  }
   return { mcpServers };
 }
 function parseIntervalMinutes(scheduleEvery) {
@@ -6105,6 +6138,21 @@ ${sections}`
         });
       }
     }
+    const hasAdminDebug = integrations.some((i) => i.definition_id === "augmented-admin");
+    if (hasAdminDebug) {
+      this.writeMcpServer(codeName, "augmented-admin", {
+        command: "npx",
+        args: ["-y", "@integrity-labs/augmented-admin-mcp@latest"],
+        env: {
+          AGT_HOST: "${AGT_HOST}",
+          AGT_AGENT_ID: resolveBrokerAgentId(codeName) ?? agentId ?? "",
+          AGT_RUN_ID: "${AGT_RUN_ID}",
+          AGT_API_KEY: "${AGT_API_KEY}",
+          PATH: process.env["PATH"] ?? "",
+          HOME: process.env["HOME"] ?? ""
+        }
+      });
+    }
     if (this.removeMcpServer) {
       const nativeMcpKeys = INTEGRATION_REGISTRY.filter((d) => d.nativeMcp !== void 0).map((d) => d.nativeMcp.key ?? d.id);
       const integrationDerivedKeys = /* @__PURE__ */ new Set([
@@ -6112,6 +6160,7 @@ ${sections}`
         "postiz",
         "cloud-broker",
         "xero-broker",
+        "augmented-admin",
         ...nativeMcpKeys,
         ...Object.entries(OAUTH_PROVIDERS).filter(([, provider]) => Boolean(provider.mcpUrl)).map(([id]) => id)
       ]);
@@ -6124,6 +6173,8 @@ ${sections}`
         expectedKeys.add("cloud-broker");
       if (hasXeroBroker)
         expectedKeys.add("xero-broker");
+      if (hasAdminDebug)
+        expectedKeys.add("augmented-admin");
       for (const integration of integrations) {
         const def = INTEGRATION_REGISTRY.find((d) => d.id === integration.definition_id);
         if (def?.nativeMcp) {
@@ -7674,4 +7725,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-H4QCCP2M.js.map
+//# sourceMappingURL=chunk-DAOANYK4.js.map