@integrity-labs/agt-cli 0.27.8 → 0.27.10

package/dist/mcp/direct-chat-channel.js

@@ -14368,6 +14368,50 @@ function isMode(value) {
   return value === "thinking" || value === "working" || value === "waiting";
 }
 
+// src/impersonation.ts
+var ENV_VAR = "AGT_ACT_AS_AGENT_ID";
+var OVERRIDE_ENV_VAR = "ENABLE_IMPERSONATION_CHANNELS";
+function isImpersonating() {
+  return impersonatedAgentId() !== null;
+}
+function impersonatedAgentId() {
+  const raw = process.env[ENV_VAR];
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function channelsEnabledOverride() {
+  const raw = process.env[OVERRIDE_ENV_VAR];
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim().toLowerCase();
+  return trimmed === "1" || trimmed === "true" || trimmed === "yes" || trimmed === "on";
+}
+var IMPERSONATION_REFUSAL_CODE = "CHANNEL.IMPERSONATION_DISABLED";
+var IMPERSONATION_REFUSAL_MESSAGE = "Posting as an agent under impersonation is disabled in v0 \u2014 quit impersonation with `agt impersonate exit` to send as yourself.";
+function buildImpersonationRefusal(toolName) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          error: {
+            code: IMPERSONATION_REFUSAL_CODE,
+            message: IMPERSONATION_REFUSAL_MESSAGE,
+            tool: toolName
+          }
+        })
+      }
+    ],
+    isError: true
+  };
+}
+
+// src/channel-egress-tools.ts
+var DIRECT_CHAT_EGRESS_TOOLS = /* @__PURE__ */ new Set([
+  "direct_chat.reply",
+  "channel_request_input"
+]);
+
 // src/mcp-spawn-lock.ts
 import {
   existsSync,
@@ -14597,6 +14641,9 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
 }));
 mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
   const { name, arguments: args } = req.params;
+  if (isImpersonating() && !channelsEnabledOverride() && DIRECT_CHAT_EGRESS_TOOLS.has(name)) {
+    return buildImpersonationRefusal(name);
+  }
   const progressResult = await progressRegistry.handle(name, args ?? {});
   if (progressResult !== void 0) return progressResult;
   if (name === "channel_request_input") {

package/dist/mcp/index.js

@@ -21165,7 +21165,7 @@ var server = new McpServer({
   version: "0.1.0"
 });
 server.tool(
-  "kanban.list",
+  "kanban_list",
   "List kanban board items for this agent. Returns active items and recently completed items (last 7 days).",
   {},
   async () => {
@@ -21194,7 +21194,7 @@ server.tool(
   }
 );
 server.tool(
-  "kanban.add",
+  "kanban_add",
   "Add a new item to the kanban board.",
   {
     title: external_exports.string().describe("Item title (max 200 chars)"),
@@ -21235,7 +21235,7 @@ server.tool(
   }
 );
 server.tool(
-  "kanban.move",
+  "kanban_move",
   "Move a kanban item to a different status column.",
   {
     id: external_exports.string().optional().describe("Item UUID (preferred)"),
@@ -21273,7 +21273,7 @@ server.tool(
   }
 );
 server.tool(
-  "kanban.update",
+  "kanban_update",
   "Update notes or result on a kanban item without changing its status.",
   {
     id: external_exports.string().optional().describe("Item UUID (preferred)"),
@@ -21324,7 +21324,7 @@ server.tool(
   }
 );
 server.tool(
-  "kanban.progress",
+  "kanban_progress",
   "Report what you're doing RIGHT NOW on a kanban item. Overwrites a single live status line (the Step row on the Slack progress card the requester is watching) \u2014 not a log. Call it at the start of each phase of a long task (ideally ~every minute) so the requester can watch the work move. Each call also renews the task heartbeat. Pass an empty step to clear it.",
   {
     id: external_exports.string().optional().describe("Item UUID (preferred)"),
@@ -21362,7 +21362,7 @@ server.tool(
   }
 );
 server.tool(
-  "kanban.done",
+  "kanban_done",
   "Mark a kanban item as done with an optional result.",
   {
     id: external_exports.string().optional().describe("Item UUID (preferred)"),
@@ -21401,7 +21401,7 @@ server.tool(
   }
 );
 server.tool(
-  "status.standup",
+  "status_standup",
   "Submit a daily standup update with yesterday, today, and blockers.",
   {
     yesterday: external_exports.string().describe("What was accomplished yesterday/last session"),
@@ -21434,7 +21434,7 @@ server.tool(
   }
 );
 server.tool(
-  "status.update",
+  "status_update",
   "Report current task progress or status update.",
   {
     current_tasks: external_exports.string().describe("Summary of what you are currently working on")
@@ -21461,7 +21461,7 @@ server.tool(
   }
 );
 server.tool(
-  "drift.report",
+  "drift_report",
   "Report configuration drift detected in local agent files (CHARTER.md, TOOLS.md, etc.). Compares local file hashes against API-side versions and reports any differences.",
   {
     drifted_files: external_exports.array(external_exports.string()).describe('List of filenames that have drifted from provisioned state (e.g. ["CHARTER.md", "TOOLS.md"])'),
@@ -21484,7 +21484,7 @@ server.tool(
   }
 );
 server.tool(
-  "token.refresh",
+  "token_refresh",
   "Get a working OAuth access token for an integration. Returns the current cached token when it is still valid (the server-side cron rotates tokens every ~15 minutes) and forces a refresh only when the cached token is expiring or missing. Pass `integration_id` to force-refresh a specific integration after a 401/TokenExpired from the provider.",
   {
     integration_id: external_exports.string().optional().describe("Specific integration UUID to force-refresh (use after a 401 from the provider). If omitted, returns current tokens for all OAuth integrations, refreshing any that are within ~10 minutes of expiry.")
@@ -21578,7 +21578,7 @@ async function runAcpxCommand(args, cwd) {
   });
 }
 server.tool(
-  "acpx.prompt",
+  "acpx_prompt",
   "Send a prompt to a coding agent (claude, codex, openclaw) via ACP. Uses persistent sessions scoped to the working directory.",
   {
     agent: external_exports.enum(["claude", "codex", "openclaw"]).describe("Coding agent to use"),
@@ -21603,7 +21603,7 @@ server.tool(
   }
 );
 server.tool(
-  "acpx.exec",
+  "acpx_exec",
   "Run a one-shot task on a coding agent. Does not reuse sessions \u2014 fire and forget.",
   {
     agent: external_exports.enum(["claude", "codex", "openclaw"]).describe("Coding agent to use"),
@@ -21622,7 +21622,7 @@ server.tool(
   }
 );
 server.tool(
-  "acpx.spawn",
+  "acpx_spawn",
   "Ensure an ACP session exists for a coding agent. Creates one if needed, reuses existing.",
   {
     agent: external_exports.enum(["claude", "codex", "openclaw"]).describe("Coding agent to use"),
@@ -21642,7 +21642,7 @@ server.tool(
   }
 );
 server.tool(
-  "acpx.cancel",
+  "acpx_cancel",
   "Send a cooperative cancel to the running ACP session. Does not destroy state.",
   {
     agent: external_exports.enum(["claude", "codex", "openclaw"]).describe("Coding agent to cancel"),
@@ -21662,7 +21662,7 @@ server.tool(
   }
 );
 server.tool(
-  "acpx.status",
+  "acpx_status",
   "Check the status of the current ACP session (running, idle, dead).",
   {
     agent: external_exports.enum(["claude", "codex", "openclaw"]).describe("Coding agent to check"),
@@ -21676,7 +21676,7 @@ server.tool(
   }
 );
 server.tool(
-  "acpx.close",
+  "acpx_close",
   "Soft-close an ACP session. Terminates the process but preserves history.",
   {
     agent: external_exports.enum(["claude", "codex", "openclaw"]).describe("Coding agent session to close"),
@@ -21696,7 +21696,7 @@ server.tool(
   }
 );
 server.tool(
-  "schedule.list",
+  "schedule_list",
   "List your scheduled tasks (cron jobs, reminders, recurring work).",
   {},
   async () => {
@@ -21716,7 +21716,7 @@ server.tool(
   }
 );
 server.tool(
-  "schedule.create",
+  "schedule_create",
   "Create a new scheduled task. Supports cron expressions, intervals (every), and one-time reminders (at).",
   {
     name: external_exports.string().describe('Display name for the task (e.g. "Daily standup", "Check emails")'),
@@ -21752,10 +21752,10 @@ server.tool(
   }
 );
 server.tool(
-  "schedule.delete",
+  "schedule_delete",
   "Delete a scheduled task by ID.",
   {
-    task_id: external_exports.string().describe("The task ID to delete (from schedule.list)")
+    task_id: external_exports.string().describe("The task ID to delete (from schedule_list)")
   },
   async (params) => {
     await apiPost("/host/schedules/delete", {
@@ -21768,12 +21768,12 @@ server.tool(
   }
 );
 server.tool(
-  "schedule.update",
+  "schedule_update",
   // Lead with user phrasings the agent should match against, then explain
   // the two modes. Order matters for tool selection.
   'Update an existing scheduled task. USE THIS TOOL when the user says: "change the schedule for X", "run the daily report at 10am instead of 9am", "pause the standup schedule", "move the weekly digest to Mondays", "make this report more concise", "add a section about X to the daily summary", "tell the Y schedule to also cover Z", "post these to the Customer Success channel from now on". Two modes: (1) DIRECT FIELD UPDATES \u2014 set cron_expression/interval/timezone/delivery_channel/delivery_to/enabled/name/prompt to change those values directly. (2) LLM DESCRIPTION REWRITE \u2014 pass description_feedback to have the platform rewrite the task prompt based on natural-language feedback (e.g. "make this more concise" or "add a section about the team backlog"). Default for LLM rewrites is preview-then-apply: call once to get the proposed rewrite, show the diff to the user, call again with auto_apply=true on confirmation. Direct field updates apply immediately. The two modes are mutually exclusive \u2014 one request is EITHER a field update OR a description rewrite.\n\nIMPORTANT \u2014 `delivery_to` requires a Slack channel ID (e.g. `C0123ABC456`), NOT a human channel name. If the user references a channel by its name ("the Customer Success channel"), call `mcp__slack__slack.list_channels` first with `query: "customer success"` to get the matching `id`, then pass that id as `delivery_to` here. Do not guess channel ids.',
   {
-    task_id: external_exports.string().describe("The task ID to update (from schedule.list)"),
+    task_id: external_exports.string().describe("The task ID to update (from schedule_list)"),
     // Direct-field mode
     name: external_exports.string().optional().describe("New task display name"),
     schedule_kind: external_exports.enum(["cron", "every", "at"]).optional().describe(
@@ -21796,7 +21796,7 @@ server.tool(
       'Where results are delivered (e.g. "slack", "telegram", "email")'
     ),
     delivery_to: DeliveryTargetSchema.optional().describe(
-      "Structured delivery target (see schedule.create description for shape). Pass null-equivalent by omitting the field; pass a new structured target to change routing."
+      "Structured delivery target (see schedule_create description for shape). Pass null-equivalent by omitting the field; pass a new structured target to change routing."
     ),
     enabled: external_exports.boolean().optional().describe(
       "Set to false to pause the schedule without deleting it"
@@ -21833,7 +21833,7 @@ server.tool(
       if (!data.applied) {
         lines.push("");
         lines.push("---");
-        lines.push("Show this diff to the user. If they confirm, call `schedule.update` again with the same `task_id` and `description_feedback` plus `auto_apply: true` to commit the change.");
+        lines.push("Show this diff to the user. If they confirm, call `schedule_update` again with the same `task_id` and `description_feedback` plus `auto_apply: true` to commit the change.");
       }
       return { content: [{ type: "text", text: lines.join("\n") }] };
     }
@@ -21846,8 +21846,8 @@ server.tool(
   }
 );
 server.tool(
-  "knowledge.list",
-  "List team knowledge entries (ids, titles, source types). Use before knowledge.add to check if a fact is already saved, or before knowledge.update/delete to find the target id. Returns metadata only \u2014 fetch the full content via the webapp if you need to read an entry back.",
+  "knowledge_list",
+  "List team knowledge entries (ids, titles, source types). Use before knowledge_add to check if a fact is already saved, or before knowledge_update/delete to find the target id. Returns metadata only \u2014 fetch the full content via the webapp if you need to read an entry back.",
   {},
   async () => {
     const data = await apiPost("/host/my-knowledge", {
@@ -21864,8 +21864,8 @@ server.tool(
   }
 );
 server.tool(
-  "knowledge.add",
-  "Save a new durable fact or learning to the team knowledge base. Use when the user explicitly asks you to save/remember something, or when you discover information that will be useful on future runs (e.g. a tenant id, an API key name, a company policy). Do NOT use for tasks (use kanban.add) or trivial one-off answers. Returns the new entry id so you can target it with knowledge.update / knowledge.delete.",
+  "knowledge_add",
+  "Save a new durable fact or learning to the team knowledge base. Use when the user explicitly asks you to save/remember something, or when you discover information that will be useful on future runs (e.g. a tenant id, an API key name, a company policy). Do NOT use for tasks (use kanban_add) or trivial one-off answers. Returns the new entry id so you can target it with knowledge_update / knowledge_delete.",
   {
     title: external_exports.string().describe("Short title summarising the entry (max 200 chars)"),
     content: external_exports.string().describe("The knowledge content \u2014 the actual fact, learning, or reference material"),
@@ -21903,10 +21903,10 @@ server.tool(
   }
 );
 server.tool(
-  "knowledge.update",
-  "Edit an existing knowledge entry by id. Use to correct a saved fact or refine its wording. Only the fields you pass are changed; others are left alone. Call knowledge.list first if you need to find the target id.",
+  "knowledge_update",
+  "Edit an existing knowledge entry by id. Use to correct a saved fact or refine its wording. Only the fields you pass are changed; others are left alone. Call knowledge_list first if you need to find the target id.",
   {
-    id: external_exports.string().describe("Knowledge entry id (uuid) \u2014 from knowledge.list or knowledge.add"),
+    id: external_exports.string().describe("Knowledge entry id (uuid) \u2014 from knowledge_list or knowledge_add"),
     title: external_exports.string().optional().describe("New title (max 200 chars). Regenerates the slug."),
     content: external_exports.string().optional().describe("Replacement content for the entry"),
     is_active: external_exports.boolean().optional().describe("Set false to soft-disable without deleting")
@@ -21914,7 +21914,7 @@ server.tool(
   async (params) => {
     if (params.title === void 0 && params.content === void 0 && params.is_active === void 0) {
       return {
-        content: [{ type: "text", text: "Error: knowledge.update needs at least one of title, content, or is_active." }],
+        content: [{ type: "text", text: "Error: knowledge_update needs at least one of title, content, or is_active." }],
         isError: true
       };
     }
@@ -21940,8 +21940,8 @@ server.tool(
   }
 );
 server.tool(
-  "knowledge.delete",
-  "Remove a knowledge entry permanently. Prefer knowledge.update with is_active=false for temporary hides; use delete only when the fact was wrong or no longer applies.",
+  "knowledge_delete",
+  "Remove a knowledge entry permanently. Prefer knowledge_update with is_active=false for temporary hides; use delete only when the fact was wrong or no longer applies.",
   {
     id: external_exports.string().describe("Knowledge entry id (uuid) to delete")
   },
@@ -21961,8 +21961,8 @@ server.tool(
   }
 );
 server.tool(
-  "plugin.list",
-  `List the plugins currently installed on this agent, with their current typed context values and a preview of any freeform overrides. Use this when the user asks "what plugins do I have?", "show me the plugins", "what is the Coding plugin configured with?", or before calling plugin.improve to see what fields exist and what they're set to.`,
+  "plugin_list",
+  `List the plugins currently installed on this agent, with their current typed context values and a preview of any freeform overrides. Use this when the user asks "what plugins do I have?", "show me the plugins", "what is the Coding plugin configured with?", or before calling plugin_improve to see what fields exist and what they're set to.`,
   {},
   async () => {
     const data = await apiPost("/host/list-plugins", {
@@ -21994,12 +21994,12 @@ server.tool(
       }
       lines.push("");
     }
-    lines.push("To update any plugin's behavior, use the `plugin.improve` tool with the user's feedback.");
+    lines.push("To update any plugin's behavior, use the `plugin_improve` tool with the user's feedback.");
     return { content: [{ type: "text", text: lines.join("\n") }] };
   }
 );
 server.tool(
-  "plugin.improve",
+  "plugin_improve",
   // Description leads with the user phrasings the agent should match against,
   // then explains the safety rule. Order matters — Claude\'s tool selection
   // weights the first line of a description heavily.
@@ -22055,7 +22055,7 @@ server.tool(
     if (!data.applied) {
       lines.push("");
       lines.push("---");
-      lines.push("Show this diff to the user. If they confirm, call `plugin.improve` again with `auto_apply: true` and the same arguments to apply.");
+      lines.push("Show this diff to the user. If they confirm, call `plugin_improve` again with `auto_apply: true` and the same arguments to apply.");
     } else {
       lines.push("");
       lines.push("Update applied. The manager will re-render the plugin's SKILL.md files on the next refresh cycle.");
@@ -22073,7 +22073,7 @@ var WidgetDefSchema = external_exports.object({
   refresh_cron: external_exports.string().optional().describe('Optional per-widget cron override (e.g. "0 6 * * *" for 6am daily).')
 });
 server.tool(
-  "dashboards.list",
+  "dashboards_list",
   'List dashboards visible to your team. Use to answer "what dashboards exist", "show me the dashboards I built", or before authoring a new one to avoid duplicating an existing slug.',
   {
     status: external_exports.enum(["draft", "active", "archived"]).optional().describe("Filter by status. Defaults to 'active'.")
@@ -22095,8 +22095,8 @@ ${lines.join("\n")}` }] };
   }
 );
 server.tool(
-  "dashboards.show",
-  "Get full metadata for one dashboard by slug \u2014 title, description, scope, status, widget list, last refresh per widget. Use when investigating a specific dashboard or before editing it via dashboards.upsert.",
+  "dashboards_show",
+  "Get full metadata for one dashboard by slug \u2014 title, description, scope, status, widget list, last refresh per widget. Use when investigating a specific dashboard or before editing it via dashboards_upsert.",
   {
     slug: external_exports.string().describe("Dashboard slug, e.g. 'finance-overview'.")
   },
@@ -22128,7 +22128,7 @@ URL: ${url}` : "",
   }
 );
 server.tool(
-  "dashboards.upsert",
+  "dashboards_upsert",
   // The description leads with the user phrasings the agent should match
   // against AND the explicit forbidden alternatives. Tool selection weights
   // the first sentence heavily, so we burn it on the right behavior.
@@ -22168,8 +22168,8 @@ URL: ${url}
   }
 );
 server.tool(
-  "dashboards.request_refresh",
-  "Mark widgets on a dashboard as needing refresh. Use this when authoring a new dashboard (to populate the first snapshot) or when you want widgets to update on the next dashboards.pending_refreshes call. Pass widget_id to flag just one widget; omit to flag every widget.",
+  "dashboards_request_refresh",
+  "Mark widgets on a dashboard as needing refresh. Use this when authoring a new dashboard (to populate the first snapshot) or when you want widgets to update on the next dashboards_pending_refreshes call. Pass widget_id to flag just one widget; omit to flag every widget.",
   {
     slug: external_exports.string(),
     widget_id: external_exports.string().optional().describe("Optional. Omit to flag all widgets on the dashboard."),
@@ -22189,8 +22189,8 @@ server.tool(
   }
 );
 server.tool(
-  "dashboards.pending_refreshes",
-  "Return widgets that need refresh \u2014 by default ONLY those flagged pending (user clicked \u21BB in the iframe, or someone called request_refresh). Pass slug=<dashboard slug> to instead get every widget on that dashboard so you can proactively refresh after authoring or when the user asks 'update the X dashboard'. Pass include_all=true with no slug to get every flagged-or-not widget across all your dashboards. Each entry: {slug, widget_id, kind, prompt, schema, requested_at}. Loop over them, read the prompt, gather data with your other tools, match the schema, and call dashboards.persist_widget for each.",
+  "dashboards_pending_refreshes",
+  "Return widgets that need refresh \u2014 by default ONLY those flagged pending (user clicked \u21BB in the iframe, or someone called request_refresh). Pass slug=<dashboard slug> to instead get every widget on that dashboard so you can proactively refresh after authoring or when the user asks 'update the X dashboard'. Pass include_all=true with no slug to get every flagged-or-not widget across all your dashboards. Each entry: {slug, widget_id, kind, prompt, schema, requested_at}. Loop over them, read the prompt, gather data with your other tools, match the schema, and call dashboards_persist_widget for each.",
   {
     slug: external_exports.string().optional().describe("Restrict to one dashboard by slug. When set, returns every widget on that dashboard \u2014 flagged or not \u2014 so you can refresh the whole thing without calling request_refresh first."),
     include_all: external_exports.boolean().optional().describe("When true (and no slug), returns every widget on every dashboard you own \u2014 flagged or not. Use sparingly; one refresh = one LLM call.")
@@ -22209,7 +22209,7 @@ server.tool(
   }
 );
 server.tool(
-  "dashboards.persist_widget",
+  "dashboards_persist_widget",
   "Persist refreshed data for one widget. The platform validates `data` against the widget's stored JSON Schema server-side \u2014 invalid output is rejected. Call this once per widget after gathering data with your tools.",
   {
     slug: external_exports.string(),
@@ -22282,28 +22282,28 @@ async function forwardToolCall(toolName, args) {
 async function registerForwardedApiTools() {
   const apiTools = await discoverApiTools();
   const localToolNames = /* @__PURE__ */ new Set([
-    "kanban.list",
-    "kanban.add",
-    "kanban.move",
-    "kanban.update",
-    "kanban.progress",
-    "kanban.done",
-    "status.standup",
-    "status.update",
-    "drift.report",
-    "token.refresh",
-    "acpx.prompt",
-    "acpx.exec",
-    "acpx.spawn",
-    "acpx.cancel",
-    "knowledge.list",
-    "knowledge.search",
-    "knowledge.read",
-    "knowledge.add",
-    "knowledge.update",
-    "knowledge.delete",
-    "plugin.list",
-    "plugin.improve"
+    "kanban_list",
+    "kanban_add",
+    "kanban_move",
+    "kanban_update",
+    "kanban_progress",
+    "kanban_done",
+    "status_standup",
+    "status_update",
+    "drift_report",
+    "token_refresh",
+    "acpx_prompt",
+    "acpx_exec",
+    "acpx_spawn",
+    "acpx_cancel",
+    "knowledge_list",
+    "knowledge_search",
+    "knowledge_read",
+    "knowledge_add",
+    "knowledge_update",
+    "knowledge_delete",
+    "plugin_list",
+    "plugin_improve"
   ]);
   let registered = 0;
   let skipped = 0;
@@ -22335,7 +22335,7 @@ async function registerForwardedApiTools() {
   return { registered, skipped };
 }
 server.tool(
-  "projects.list",
+  "projects_list",
   "List artefacts (websites, slide decks, mockups) this agent has previously published. Call this BEFORE re-publishing to find and modify existing work instead of creating duplicates.",
   {
     publisher: external_exports.string().optional().describe('Filter by publisher (e.g. "here-now")'),
@@ -22361,10 +22361,10 @@ server.tool(
   }
 );
 server.tool(
-  "projects.get",
-  "Fetch metadata for a single published project. Returns the project record without the source HTML \u2014 call projects.get_source_chunk to retrieve the HTML in chunks when you need to modify it.",
+  "projects_get",
+  "Fetch metadata for a single published project. Returns the project record without the source HTML \u2014 call projects_get_source_chunk to retrieve the HTML in chunks when you need to modify it.",
   {
-    project_id: external_exports.string().uuid().describe("The project id returned by projects.list")
+    project_id: external_exports.string().uuid().describe("The project id returned by projects_list")
   },
   async (params) => {
     const data = await apiPost(`/host/published-project/${encodeURIComponent(params.project_id)}`, {
@@ -22379,16 +22379,16 @@ server.tool(
       `Published: ${p.published_at}`,
       p.expires_at ? `Expires: ${p.expires_at}` : null,
       `Last modified: ${p.last_modified_at}`,
-      p.has_source_html ? `Source HTML: ${p.source_html_length} bytes (call projects.get_source_chunk to fetch)` : "(source HTML not preserved for this project)"
+      p.has_source_html ? `Source HTML: ${p.source_html_length} bytes (call projects_get_source_chunk to fetch)` : "(source HTML not preserved for this project)"
     ].filter((s) => s !== null).join("\n");
     return { content: [{ type: "text", text: header }] };
   }
 );
 server.tool(
-  "projects.get_source_chunk",
-  "Fetch a chunk of source HTML for a published project. Use this to assemble the HTML for modification when projects.get reports a non-zero source_html_length.",
+  "projects_get_source_chunk",
+  "Fetch a chunk of source HTML for a published project. Use this to assemble the HTML for modification when projects_get reports a non-zero source_html_length.",
   {
-    project_id: external_exports.string().uuid().describe("The project id returned by projects.list"),
+    project_id: external_exports.string().uuid().describe("The project id returned by projects_list"),
     offset: external_exports.number().int().min(0).describe("Byte offset into the source HTML to start from"),
     limit: external_exports.number().int().min(1).max(65536).optional().describe("Max bytes to return (default 32KB, max 64KB)")
   },

package/dist/mcp/slack-channel.js

@@ -14813,6 +14813,53 @@ function isMode(value) {
   return value === "thinking" || value === "working" || value === "waiting";
 }
 
+// src/impersonation.ts
+var ENV_VAR = "AGT_ACT_AS_AGENT_ID";
+var OVERRIDE_ENV_VAR = "ENABLE_IMPERSONATION_CHANNELS";
+function isImpersonating() {
+  return impersonatedAgentId() !== null;
+}
+function impersonatedAgentId() {
+  const raw = process.env[ENV_VAR];
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function channelsEnabledOverride() {
+  const raw = process.env[OVERRIDE_ENV_VAR];
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim().toLowerCase();
+  return trimmed === "1" || trimmed === "true" || trimmed === "yes" || trimmed === "on";
+}
+var IMPERSONATION_REFUSAL_CODE = "CHANNEL.IMPERSONATION_DISABLED";
+var IMPERSONATION_REFUSAL_MESSAGE = "Posting as an agent under impersonation is disabled in v0 \u2014 quit impersonation with `agt impersonate exit` to send as yourself.";
+function buildImpersonationRefusal(toolName) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          error: {
+            code: IMPERSONATION_REFUSAL_CODE,
+            message: IMPERSONATION_REFUSAL_MESSAGE,
+            tool: toolName
+          }
+        })
+      }
+    ],
+    isError: true
+  };
+}
+
+// src/channel-egress-tools.ts
+var SLACK_EGRESS_TOOLS = /* @__PURE__ */ new Set([
+  "slack.reply",
+  "slack.react",
+  "slack.send_structured",
+  "slack.ask_user",
+  "slack.upload_file"
+]);
+
 // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.27.1_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 import process2 from "process";
 
@@ -16909,6 +16956,9 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
 }));
 mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
   const { name, arguments: args } = req.params;
+  if (isImpersonating() && !channelsEnabledOverride() && SLACK_EGRESS_TOOLS.has(name)) {
+    return buildImpersonationRefusal(name);
+  }
   const progressResult = await progressRegistry.handle(name, args ?? {});
   if (progressResult !== void 0) return progressResult;
   if (name === "slack.reply") {

package/dist/mcp/telegram-channel.js

@@ -15810,6 +15810,52 @@ function createTelegramProgressFlush(opts) {
   };
 }
 
+// src/impersonation.ts
+var ENV_VAR = "AGT_ACT_AS_AGENT_ID";
+var OVERRIDE_ENV_VAR = "ENABLE_IMPERSONATION_CHANNELS";
+function isImpersonating() {
+  return impersonatedAgentId() !== null;
+}
+function impersonatedAgentId() {
+  const raw = process.env[ENV_VAR];
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function channelsEnabledOverride() {
+  const raw = process.env[OVERRIDE_ENV_VAR];
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim().toLowerCase();
+  return trimmed === "1" || trimmed === "true" || trimmed === "yes" || trimmed === "on";
+}
+var IMPERSONATION_REFUSAL_CODE = "CHANNEL.IMPERSONATION_DISABLED";
+var IMPERSONATION_REFUSAL_MESSAGE = "Posting as an agent under impersonation is disabled in v0 \u2014 quit impersonation with `agt impersonate exit` to send as yourself.";
+function buildImpersonationRefusal(toolName) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          error: {
+            code: IMPERSONATION_REFUSAL_CODE,
+            message: IMPERSONATION_REFUSAL_MESSAGE,
+            tool: toolName
+          }
+        })
+      }
+    ],
+    isError: true
+  };
+}
+
+// src/channel-egress-tools.ts
+var TELEGRAM_EGRESS_TOOLS = /* @__PURE__ */ new Set([
+  "telegram.reply",
+  "telegram.send_message",
+  "telegram.react",
+  "channel_request_input"
+]);
+
 // src/mcp-spawn-lock.ts
 import {
   existsSync,
@@ -16519,7 +16565,7 @@ var mcp = new Server(
       "CRITICAL: every response to a Telegram <channel> tag MUST go through telegram.reply with the chat_id from the tag. Text in your session WITHOUT a telegram.reply call never reaches the user.",
       'Messages from Telegram arrive as <channel source="telegram" chat_id="..." user="..." user_name="..." message_id="...">. Pass reply_to_message_id from the tag so the response lands as a quote-reply in busy chats.',
       "Inbound attachments: <channel> `files` is a JSON-serialised array \u2014 JSON.parse it. If an entry has `path`, the image is already downloaded \u2014 Read it directly, do NOT call telegram.download_attachment. Use that tool only for entries with `file_id` but NO `path` (PDF, docx, voice, audio, video, animations): pass file_id + chat_id verbatim, then Read the returned path. Single-image messages also get a top-level `image_path`. Caption arrives as channel content. Don't surface internal file-handling errors that don't affect the answer.",
-      'For work >30s follow CLAUDE.md kanban flow: kanban.add \u2192 reply "On it \u2014 tracking here: <kanban URL>" \u2192 move to in_progress \u2192 do the work \u2192 reply with the result. Simple lookups skip kanban but still reply.',
+      'For work >30s follow CLAUDE.md kanban flow: kanban_add \u2192 reply "On it \u2014 tracking here: <kanban URL>" \u2192 move to in_progress \u2192 do the work \u2192 reply with the result. Simple lookups skip kanban but still reply.',
       "Address users by user_name; user is the numeric Telegram ID. Resolve ambiguous times against your own Timezone from CLAUDE.md \u2014 do not ask.",
       "Reaction taxonomy (use telegram.react sparingly \u2014 prefer telegram.reply): \u{1F440} = ack (already auto-added on inbound, do not duplicate); \u{1F44D} or \u{1F389} = success. NEVER react to signal failure. On failure, telegram.reply with one sentence explaining what went wrong. Free-tier emoji: \u{1F44D} \u{1F44E} \u2764 \u{1F525} \u{1F389} \u{1F914} \u{1F92F} \u{1F64F} \u{1F44C} \u{1F440} \u{1F4AF} \u270D \u{1FAE1} \u{1F192} \u{1F973} \u{1F494}."
     ].join(" ")
@@ -16676,6 +16722,9 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
 }));
 mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
   const { name, arguments: args } = req.params;
+  if (isImpersonating() && !channelsEnabledOverride() && TELEGRAM_EGRESS_TOOLS.has(name)) {
+    return buildImpersonationRefusal(name);
+  }
   const progressResult = await progressRegistry.handle(name, args ?? {});
   if (progressResult !== void 0) return progressResult;
   if (name === "channel_request_input") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.27.8",
+  "version": "0.27.10",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {