@integrity-labs/agt-cli 0.27.36 → 0.27.38

package/dist/bin/agt.js

@@ -27,7 +27,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-LASXZZS6.js";
+} from "../chunk-NX5MXIFQ.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -56,8 +56,8 @@ import {
 } from "../chunk-GVM2KJOA.js";
 
 // src/bin/agt.ts
-import { join as join15 } from "path";
-import { homedir as homedir6 } from "os";
+import { join as join17 } from "path";
+import { homedir as homedir7 } from "os";
 import { Command } from "commander";
 
 // src/commands/whoami.ts
@@ -551,11 +551,11 @@ async function lintCommand(path) {
       process.exitCode = 1;
       return;
     }
-    const { readdirSync: readdirSync3, statSync: statSync2 } = await import("fs");
-    const entries = readdirSync3(augmentedDir);
+    const { readdirSync: readdirSync4, statSync: statSync3 } = await import("fs");
+    const entries = readdirSync4(augmentedDir);
     for (const entry of entries) {
       const entryPath = join2(augmentedDir, entry);
-      if (statSync2(entryPath).isDirectory()) {
+      if (statSync3(entryPath).isDirectory()) {
         dirs.push({ name: entry, dir: entryPath });
       }
     }
@@ -4658,7 +4658,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.36" : "dev";
+var cliVersion = true ? "0.27.38" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4889,6 +4889,147 @@ async function checkForUpdateOnStartup() {
   }
 }
 
+// src/commands/audit-subagents.ts
+import { homedir as homedir6 } from "os";
+import { join as join16 } from "path";
+
+// src/lib/subagent-mcp-audit.ts
+import { readdirSync as readdirSync3, readFileSync as readFileSync9, statSync as statSync2 } from "fs";
+import { join as join15 } from "path";
+function parseFrontmatter(content) {
+  const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+  if (!match) return null;
+  const out = {};
+  const lines = match[1].split(/\r?\n/);
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    const m = line.match(/^(name|tools|background):\s*(.*)$/);
+    if (!m) continue;
+    const [, key, rawValue] = m;
+    const trimmed = rawValue.trim();
+    if (key === "tools" && trimmed === "") {
+      const items = [];
+      let j = i + 1;
+      while (j < lines.length) {
+        const nextRaw = lines[j];
+        const itemMatch = nextRaw.match(/^(\s+)-\s*(.+?)\s*$/);
+        if (!itemMatch) break;
+        items.push(itemMatch[2].replace(/^['"](.*)['"]$/, "$1"));
+        j++;
+      }
+      if (items.length > 0) {
+        out.tools = items.join(", ");
+        i = j - 1;
+        continue;
+      }
+    }
+    out[key] = trimmed;
+  }
+  return out;
+}
+function toolsExcludeMcp(tools) {
+  if (tools.length === 0) return false;
+  if (/\bmcp__/.test(tools)) return false;
+  if (/\*/.test(tools)) return false;
+  if (/\bAll tools\b/i.test(tools)) return false;
+  return true;
+}
+function findSubagentFiles(dir, depth = 0) {
+  if (depth > 6) return [];
+  let entries;
+  try {
+    entries = readdirSync3(dir);
+  } catch {
+    return [];
+  }
+  const out = [];
+  const isAgentsDir = dir.endsWith("/agents") || dir.endsWith("\\agents");
+  for (const entry of entries) {
+    const full = join15(dir, entry);
+    let s;
+    try {
+      s = statSync2(full);
+    } catch {
+      continue;
+    }
+    if (s.isDirectory()) {
+      out.push(...findSubagentFiles(full, depth + 1));
+    } else if (s.isFile() && isAgentsDir && entry.endsWith(".md")) {
+      out.push(full);
+    }
+  }
+  return out;
+}
+function auditSubagentMcpBindings(rootDirs) {
+  const findings = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const root of rootDirs) {
+    for (const file of findSubagentFiles(root)) {
+      if (seen.has(file)) continue;
+      seen.add(file);
+      let content;
+      try {
+        content = readFileSync9(file, "utf-8");
+      } catch {
+        continue;
+      }
+      const fm = parseFrontmatter(content);
+      if (!fm || typeof fm.tools !== "string") continue;
+      if (!toolsExcludeMcp(fm.tools)) continue;
+      findings.push({
+        file,
+        name: fm.name ?? "<unknown>",
+        tools: fm.tools,
+        reason: "restrictive-tools-no-mcp"
+      });
+    }
+  }
+  return findings;
+}
+function formatFinding(f) {
+  return `[manager-worker] [subagent-mcp-audit] file=${f.file} name=${f.name} reason=${f.reason} tools=${JSON.stringify(f.tools)}`;
+}
+
+// src/commands/audit-subagents.ts
+function defaultRoots() {
+  const home = homedir6();
+  return [
+    join16(home, ".claude", "agents"),
+    join16(home, ".claude", "plugins"),
+    join16(process.cwd(), ".claude", "agents")
+  ];
+}
+async function auditSubagentsCommand(options = {}) {
+  const roots = defaultRoots();
+  const findings = auditSubagentMcpBindings(roots);
+  if (options.json) {
+    process.stdout.write(`${JSON.stringify({ findings, roots }, null, 2)}
+`);
+  } else if (findings.length === 0) {
+    process.stdout.write("No restrictive sub-agents found \u2014 every sub-agent under the scanned roots either inherits the parent toolset or explicitly includes mcp__* wildcards.\n");
+  } else {
+    process.stdout.write(`Found ${findings.length} sub-agent${findings.length === 1 ? "" : "s"} whose tools allowlist excludes mcp__*:
+
+`);
+    for (const f of findings) {
+      process.stdout.write(`  \u2022 ${f.name}  (${f.file})
+`);
+      process.stdout.write(`    tools: ${f.tools}
+`);
+    }
+    process.stdout.write(
+      "\nThese sub-agents will return \"No such tool available.\" for every mcp__* call when dispatched from a managed agent. If the parent needs to do MCP-tool work, dispatch the Augmented plugin's `augmented-worker` sub-agent instead \u2014 it omits `tools:` so it inherits the parent's full toolset including every MCP server. See ENG-5897.\n"
+    );
+    for (const f of findings) {
+      process.stderr.write(`${formatFinding(f)}
+`);
+    }
+  }
+  if (options.strict && findings.length > 0) {
+    process.exit(2);
+  }
+}
+
 // src/commands/integration.ts
 import chalk19 from "chalk";
 import ora17 from "ora";
@@ -5190,7 +5331,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.36" : "dev";
+var cliVersion2 = true ? "0.27.38" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {
@@ -5272,16 +5413,16 @@ host.command("pair <host-name>").description("Start an SSM port-forward + shell
   })
 );
 var manager = program.command("manager").description("Host config sync daemon \u2014 keeps local agent files in sync with API");
-manager.command("start").description("Start the manager daemon (polls API for config changes and detects local drift)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).option("--supervise", "Wrap the manager in a respawn-on-clean-exit loop so auto-upgrades can restart it transparently (ENG-4488)", false).action(managerStartCommand);
-manager.command("stop").description("Stop the running manager daemon").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).action(managerStopCommand);
-manager.command("status").description("Show the current manager daemon status and discovered agents").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).action(managerStatusCommand);
-manager.command("watch").description("Live TUI dashboard \u2014 per-agent boxes, drill-in, log tail. Read-only (ENG-4555).").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).option("--no-tui", "Skip the TUI and stream the manager log to stdout instead (CI / scripts)").action(managerWatchCommand);
-manager.command("install").description("Install OS-level supervisor (launchd LaunchAgent on macOS) so the manager auto-restarts after crash, reboot, or self-update (ENG-4593)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join15(homedir6(), ".augmented")).action(managerInstallCommand);
+manager.command("start").description("Start the manager daemon (polls API for config changes and detects local drift)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join17(homedir7(), ".augmented")).option("--supervise", "Wrap the manager in a respawn-on-clean-exit loop so auto-upgrades can restart it transparently (ENG-4488)", false).action(managerStartCommand);
+manager.command("stop").description("Stop the running manager daemon").option("--config-dir <dir>", "Config directory for agent files", join17(homedir7(), ".augmented")).action(managerStopCommand);
+manager.command("status").description("Show the current manager daemon status and discovered agents").option("--config-dir <dir>", "Config directory for agent files", join17(homedir7(), ".augmented")).action(managerStatusCommand);
+manager.command("watch").description("Live TUI dashboard \u2014 per-agent boxes, drill-in, log tail. Read-only (ENG-4555).").option("--config-dir <dir>", "Config directory for agent files", join17(homedir7(), ".augmented")).option("--no-tui", "Skip the TUI and stream the manager log to stdout instead (CI / scripts)").action(managerWatchCommand);
+manager.command("install").description("Install OS-level supervisor (launchd LaunchAgent on macOS) so the manager auto-restarts after crash, reboot, or self-update (ENG-4593)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files", join17(homedir7(), ".augmented")).action(managerInstallCommand);
 manager.command("uninstall").description("Remove the OS-level supervisor (launchctl unload + delete plist on macOS). Idempotent.").action(managerUninstallCommand);
 manager.command("install-system-unit").description("Install a system-level systemd unit (Linux, root) so the manager auto-starts on every boot. For headless EC2 hosts \u2014 survives reboot without `loginctl enable-linger`. (ENG-4706)").option("--interval <seconds>", "Poll interval in seconds (min 5)", "10").option("--config-dir <dir>", "Config directory for agent files (defaults to /root/.augmented or /home/<user>/.augmented)").option("--user <name>", "Unix user the manager runs as", "root").action(managerInstallSystemUnitCommand);
 manager.command("uninstall-system-unit").description("Remove the system-level systemd unit (Linux, root). Idempotent. (ENG-4706)").action(managerUninstallSystemUnitCommand);
 var agent = program.command("agent").description("Inspect and manage agents");
-agent.command("show <code-name>").description("Display an agent's provisioned OpenClaw configuration").option("--config-dir <dir>", "Config directory", join15(homedir6(), ".augmented")).option("--all-channels", "Show all channels (including disabled)").action(agentShowCommand);
+agent.command("show <code-name>").description("Display an agent's provisioned OpenClaw configuration").option("--config-dir <dir>", "Config directory", join17(homedir7(), ".augmented")).option("--all-channels", "Show all channels (including disabled)").action(agentShowCommand);
 var kanban = program.command("kanban").description("Manage agent kanban boards");
 kanban.command("list").description("List kanban board items for an agent").requiredOption("--agent <code-name>", "Agent code name").action(kanbanListCommand);
 kanban.command("add <title>").description("Add a new item to an agent kanban board").requiredOption("--agent <code-name>", "Agent code name").option("--priority <1|2|3>", "Priority: 1=high, 2=medium, 3=low", "2").option("--status <status>", "Initial status: backlog | todo | in_progress", "todo").option("--description <text>", "Item description").option("--estimate <minutes>", "Estimated time in minutes").option("--deliverable <text>", "Expected output/deliverable").action(kanbanAddCommand);
@@ -5309,6 +5450,8 @@ integration.command("approve <request-id>").description("Approve a scope request
 integration.command("deny <request-id>").description("Deny a scope request").option("--reason <text>", "Denial reason").action(integrationDenyCommand);
 integration.command("enrol").description("Enrol an integration with an API key or webhook secret (no OAuth flow)").requiredOption("--def <code-name>", "Integration definition code_name (e.g. resend, xero)").requiredOption("--scope <org|team|agent>", "Install scope").option("--api-key <value>", "API key (sets auth_type=api_key)").option("--access-token <value>", "Bearer access token (sets auth_type=oauth2)").option("--webhook-secret <value>", "Webhook signing secret (sets auth_type=webhook)").option("--display-name <name>", "Override display name (defaults to the definition\u2019s display_name)").option("--agent <code-name>", "Agent code name (required for agent scope)").action(integrationEnrolCommand);
 program.command("update").description("Check for and install CLI updates").option("--force", "Update even if manager or agent sessions are running").action(updateCommand);
+var audit = program.command("audit").description("Operator audits \u2014 sub-agent MCP bindings, etc.");
+audit.command("subagents").description("Find sub-agents whose tools allowlist would block mcp__* calls on dispatch (ENG-5897)").option("--strict", "Exit with code 2 if any findings (suitable for CI gating)").option("--json", "Emit findings as JSON to stdout").action(auditSubagentsCommand);
 var skipUpdateCheck = process.argv.includes("--skip-update-check") || process.argv.includes("--json") || process.argv[2] === "update";
 if (!skipUpdateCheck) {
   checkForUpdateOnStartup().catch(() => {