@integrity-labs/agt-cli 0.27.39 → 0.27.40

package/dist/bin/agt.js

@@ -27,7 +27,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-EZMAP5WM.js";
+} from "../chunk-YYUWW6CQ.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -4662,7 +4662,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.39" : "dev";
+var cliVersion = true ? "0.27.40" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5335,7 +5335,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.39" : "dev";
+var cliVersion2 = true ? "0.27.40" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {

package/dist/{chunk-EZMAP5WM.js → chunk-YYUWW6CQ.js}

@@ -3751,6 +3751,7 @@ function syncMcpToProject(codeName) {
   } catch {
   }
   renderChannelMessageHandlerForAgent(codeName);
+  renderAugmentedWorkerForAgent(codeName);
 }
 var INTEGRATIONS_SUMMARY_FILE = "integrations-summary.json";
 function integrationsSummaryPath(codeName) {
@@ -4519,6 +4520,81 @@ Your job:
 Do NOT post intermediate progress updates unless the work spans 5+ minutes \u2014 keep noise low. The parent already sent a single-line acknowledgement before dispatching you.
 ${integrationsBlock}`;
 }
+function buildAugmentedWorkerAgent(args) {
+  const mcpServerKeys = args?.mcpServerKeys ?? [];
+  const integrations = args?.integrations ?? [];
+  const mcpWildcards = Array.from(new Set(mcpServerKeys.map((k) => `mcp__${sanitizeMcpName(k)}__*`)));
+  const tools = [
+    "Bash",
+    "Read",
+    "Write",
+    "Edit",
+    "Grep",
+    "Glob",
+    "Skill",
+    "Agent",
+    ...mcpWildcards
+  ].join(", ");
+  const integrationsBlock = integrations.length === 0 ? "" : `
+## Integrations available
+
+You inherit the parent agent's environment, including credentials for the integrations below. Env vars follow the convention \`<DEFINITION_ID>_ACCESS_TOKEN\` for OAuth and \`<DEFINITION_ID>_API_KEY\` for API-key integrations (e.g. \`GITHUB_ACCESS_TOKEN\`, \`POSTIZ_API_KEY\`). Where a CLI is listed, prefer it over raw curl \u2014 the CLI handles auth automatically.
+
+${integrations.map((i) => {
+    const cli = i.cliBinary ? ` \u2014 use the \`${i.cliBinary}\` CLI` : "";
+    const desc = i.description ? `. ${i.description}` : "";
+    return `- **${i.name}**${cli}${desc}`;
+  }).join("\n")}
+
+If a capability seems missing, **check first** \u2014 run the CLI, list tools (\`mcp__augmented__list_tools\` or equivalent), or confirm the relevant env var is set **without printing its value** (e.g. \`[ -n "$POSTIZ_API_KEY" ] && echo present || echo absent\`, never \`echo $POSTIZ_API_KEY\`). Do not claim a capability is absent without verifying \u2014 the parent's environment is yours.
+`;
+  return `---
+name: augmented-worker
+description: General-purpose background worker for multi-step tool tasks the parent doesn't want to inline (data pulls, multi-API workflows, CRM enrichments, research that needs MCP tools). Has explicit access to every \`mcp__*\` server the parent has wired. Use this \u2014 not \`general-purpose\` and not the read-only researcher/reviewer subagents from other plugins \u2014 whenever the work requires calling MCP tools (e.g. \`mcp__granola__*\`, \`mcp__composio_attio__*\`, \`mcp__slack-channel__*\`, \`mcp__augmented__*\`). Many community subagents declare restrictive \`tools:\` allowlists that exclude MCP tools, so dispatching to them will silently produce "No such tool available." failures and force unsafe fallback paths (reading raw secrets from \`.mcp.json\`, bypassing the Credential Access Control guardrail).
+background: true
+tools: ${tools}
+---
+
+You are dispatched by the parent agent to do a multi-step task in the background while the parent's listener turn stays free.
+
+## What you can do
+
+Your \`tools:\` allowlist (above) names every MCP server the parent has connected \u2014 Granola, Composio toolkits, Slack/Telegram/Direct-Chat channel tools, the platform \`mcp__augmented__*\` bridge, native integrations (Xero / Postiz / qmd / AWS), etc. \u2014 plus the built-ins (\`Bash\`, \`Read\`, \`Write\`, \`Edit\`, \`Grep\`, \`Glob\`, \`Skill\`, \`Agent\`). All environment variables the parent has are yours: OAuth access tokens (\`GITHUB_ACCESS_TOKEN\`), API keys (\`POSTIZ_API_KEY\`), native-CLI binaries (\`gh\`, \`aws\`, \`xero\`).
+
+## Hard rules \u2014 Credential Access Control
+
+1. **Never** read raw secrets out of \`.mcp.json\`, \`~/.augmented/*/provision/.mcp.json\`, or any agent config file. Those files contain bot tokens, API keys, and OAuth credentials. The Credential Access Control guardrail (\`block_read: true\` on secrets) treats reads of those values as a violation regardless of intent.
+2. **Never** post Slack messages via raw \`chat.postMessage\` + a bot token lifted from config. Use the channel MCP's reply tool (\`mcp__slack-channel__slack_reply\`, \`mcp__telegram-channel__telegram_reply\`, \`mcp__direct-chat__direct_chat_reply\`, etc.) so the call goes through the audited path.
+3. If an \`mcp__*\` tool you expect to be available returns "No such tool available.", **stop and surface the gap to the parent** in your summary rather than working around it. A missing MCP binding is a platform bug worth fixing \u2014 it's the exact failure shape this sub-agent was added to prevent (see ENG-5897 / ENG-5905).
+4. When verifying a capability is wired, confirm the relevant env var exists **without printing its value** \u2014 use \`[ -n "$POSTIZ_API_KEY" ] && echo present || echo absent\`, never \`echo $POSTIZ_API_KEY\`. The Credential Access Control guardrail covers tool-call output as well as file reads.
+
+## What to return
+
+Hand the parent a tight summary of what you did, what you found, and any follow-ups it should know about. Do not echo intermediate tool transcripts \u2014 keep the parent's context window clean. If you produced an artifact (a file, a draft, a record ID), name it and where it lives.
+${integrationsBlock}`;
+}
+function renderAugmentedWorkerForAgent(codeName) {
+  const agentDir = getAgentDir(codeName);
+  const projectDir = getProjectDir(codeName);
+  const provisionMcpPath = join4(agentDir, "provision", ".mcp.json");
+  let mcpServerKeys;
+  try {
+    const config = JSON.parse(readFileSync5(provisionMcpPath, "utf-8"));
+    mcpServerKeys = Object.keys(config.mcpServers ?? {});
+  } catch {
+    return;
+  }
+  const integrations = readIntegrationsSummaryForAgent(codeName);
+  const content = buildAugmentedWorkerAgent({ mcpServerKeys, integrations });
+  for (const baseDir of [agentDir, projectDir]) {
+    const target = join4(baseDir, ".claude", "agents", "augmented-worker.md");
+    try {
+      mkdirSync4(dirname4(target), { recursive: true });
+      writeFileSync5(target, content);
+    } catch {
+    }
+  }
+}
 function buildPostizMcpEntry(integration) {
   const rawBaseUrl = integration.config["base_url"];
   const postizBaseUrl = typeof rawBaseUrl === "string" ? rawBaseUrl.trim() : "";
@@ -4773,6 +4849,18 @@ var claudeCodeAdapter = {
           integrations: integrationSummaries
         })
       },
+      // ENG-5905: project-scope augmented-worker sub-agent — sibling of
+      // channel-message-handler, same dynamic render shape, used by the
+      // parent for general multi-step background work that doesn't
+      // require a channel reply. Closes the gap ENG-5897 left open
+      // (the plugin-scope static file never reached the runtime).
+      {
+        relativePath: ".claude/agents/augmented-worker.md",
+        content: buildAugmentedWorkerAgent({
+          mcpServerKeys: initialMcpServerKeys,
+          integrations: integrationSummaries
+        })
+      },
       {
         relativePath: `provision/${INTEGRATIONS_SUMMARY_FILE}`,
         content: JSON.stringify(integrationSummaries, null, 2)
@@ -5552,6 +5640,7 @@ ${sections}`
     } catch {
     }
     renderChannelMessageHandlerForAgent(codeName);
+    renderAugmentedWorkerForAgent(codeName);
   },
   writeMcpServer(codeName, serverId, config) {
     const agentDir = getAgentDir(codeName);
@@ -7031,4 +7120,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-EZMAP5WM.js.map
+//# sourceMappingURL=chunk-YYUWW6CQ.js.map