@integrity-labs/agt-cli 0.27.23 → 0.27.25

package/dist/bin/agt.js

@@ -27,7 +27,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-RM4XYPLD.js";
+} from "../chunk-GI73VOGA.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -4643,7 +4643,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.23" : "dev";
+var cliVersion = true ? "0.27.25" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5175,7 +5175,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.23" : "dev";
+var cliVersion2 = true ? "0.27.25" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {

package/dist/{chunk-RM4XYPLD.js → chunk-GI73VOGA.js}

@@ -4855,6 +4855,7 @@ ${sections}`
     const senderPolicyTeamId = options?.senderPolicy?.mode === "team_agents_only" || options?.senderPolicy?.mode === "manager_only" ? options.senderPolicy.team_id : void 0;
     const slackPrincipalId = options?.senderPolicy?.mode === "manager_only" ? options.senderPolicy.principal?.slack_user_id : void 0;
     const teamsPrincipalId = options?.senderPolicy?.mode === "manager_only" ? options.senderPolicy.principal?.teams_aad_object_id : void 0;
+    const senderPolicyInternalOnly = options?.senderPolicy?.internal_only === true;
     const senderPolicyEnv = senderPolicyTeamId ? { AGT_TEAM_ID: senderPolicyTeamId } : {};
     const agentDir = getAgentDir(codeName);
     mkdirSync4(agentDir, { recursive: true });
@@ -5019,7 +5020,18 @@ ${sections}`
               // people.contact_preferences.slack_user_id. Omitted when the
               // principal has no Slack ID; MCP filter fails closed on the
               // missing env var by dropping all human inbound.
-              ...slackPrincipalId ? { SLACK_SENDER_POLICY_PRINCIPAL_ID: slackPrincipalId } : {}
+              ...slackPrincipalId ? { SLACK_SENDER_POLICY_PRINCIPAL_ID: slackPrincipalId } : {},
+              // ENG-5843: org-boundary gate. SLACK_INTERNAL_ONLY signals the
+              // filter to check sender's workspace against SLACK_HOME_TEAM_ID
+              // (sourced from the bot install's team_id, populated by
+              // auth.test at install / first-run). Omitted unless explicitly
+              // enabled — the consumer's env-absent default is "no gate".
+              // When INTERNAL_ONLY is true but home team_id can't be
+              // resolved (config['team_id'] not set on the install), the
+              // MCP boot guard fails closed at startup rather than admitting
+              // every sender as "internal".
+              ...senderPolicyInternalOnly ? { SLACK_INTERNAL_ONLY: "true" } : {},
+              ...senderPolicyInternalOnly && typeof config["team_id"] === "string" && config["team_id"].length > 0 ? { SLACK_HOME_TEAM_ID: config["team_id"] } : {}
             }
           };
           const provisionMcpPath = join4(agentDir, "provision", ".mcp.json");
@@ -5204,7 +5216,15 @@ ${sections}`
         // ENG-5842: principal ID for manager_only — Teams AAD object id from
         // people.contact_preferences.teams_aad_object_id. Same fail-closed
         // contract as the Slack branch above.
-        ...teamsPrincipalId ? { MSTEAMS_SENDER_POLICY_PRINCIPAL_ID: teamsPrincipalId } : {}
+        ...teamsPrincipalId ? { MSTEAMS_SENDER_POLICY_PRINCIPAL_ID: teamsPrincipalId } : {},
+        // ENG-5843: org-boundary gate. MSTEAMS_INTERNAL_ONLY + MSTEAMS_HOME_TENANT_ID
+        // mirror the Slack pair. Source is the same tenantId the existing
+        // MSTEAMS_TENANT_ID env var already carries — defaulting to "common"
+        // would be wrong here (it'd admit any tenant), so we skip the
+        // SLACK_HOME_TEAM_ID-equivalent emission when the install hasn't
+        // pinned a real tenant. MCP boot guard fails closed.
+        ...senderPolicyInternalOnly ? { MSTEAMS_INTERNAL_ONLY: "true" } : {},
+        ...senderPolicyInternalOnly && tenantId !== "common" ? { MSTEAMS_HOME_TENANT_ID: tenantId } : {}
       };
       if (isPersistent && existsSync5(localTeamsChannel)) {
         mcpServers["msteams"] = {
@@ -6925,4 +6945,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-RM4XYPLD.js.map
+//# sourceMappingURL=chunk-GI73VOGA.js.map