@integrity-labs/agt-cli 0.27.8 → 0.27.9

package/dist/lib/manager-worker.js

@@ -15,7 +15,7 @@ import {
   provisionOrientHook,
   provisionStopHook,
   requireHost
-} from "../chunk-IB655E5U.js";
+} from "../chunk-AQVJKJBD.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -3166,7 +3166,7 @@ var cachedFrameworkVersion = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.27.8" : "dev";
+var agtCliVersion = true ? "0.27.9" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/direct-chat-channel.js

@@ -14368,6 +14368,50 @@ function isMode(value) {
   return value === "thinking" || value === "working" || value === "waiting";
 }
 
+// src/impersonation.ts
+var ENV_VAR = "AGT_ACT_AS_AGENT_ID";
+var OVERRIDE_ENV_VAR = "ENABLE_IMPERSONATION_CHANNELS";
+function isImpersonating() {
+  return impersonatedAgentId() !== null;
+}
+function impersonatedAgentId() {
+  const raw = process.env[ENV_VAR];
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function channelsEnabledOverride() {
+  const raw = process.env[OVERRIDE_ENV_VAR];
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim().toLowerCase();
+  return trimmed === "1" || trimmed === "true" || trimmed === "yes" || trimmed === "on";
+}
+var IMPERSONATION_REFUSAL_CODE = "CHANNEL.IMPERSONATION_DISABLED";
+var IMPERSONATION_REFUSAL_MESSAGE = "Posting as an agent under impersonation is disabled in v0 \u2014 quit impersonation with `agt impersonate exit` to send as yourself.";
+function buildImpersonationRefusal(toolName) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          error: {
+            code: IMPERSONATION_REFUSAL_CODE,
+            message: IMPERSONATION_REFUSAL_MESSAGE,
+            tool: toolName
+          }
+        })
+      }
+    ],
+    isError: true
+  };
+}
+
+// src/channel-egress-tools.ts
+var DIRECT_CHAT_EGRESS_TOOLS = /* @__PURE__ */ new Set([
+  "direct_chat.reply",
+  "channel_request_input"
+]);
+
 // src/mcp-spawn-lock.ts
 import {
   existsSync,
@@ -14597,6 +14641,9 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
 }));
 mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
   const { name, arguments: args } = req.params;
+  if (isImpersonating() && !channelsEnabledOverride() && DIRECT_CHAT_EGRESS_TOOLS.has(name)) {
+    return buildImpersonationRefusal(name);
+  }
   const progressResult = await progressRegistry.handle(name, args ?? {});
   if (progressResult !== void 0) return progressResult;
   if (name === "channel_request_input") {

package/dist/mcp/slack-channel.js

@@ -14813,6 +14813,53 @@ function isMode(value) {
   return value === "thinking" || value === "working" || value === "waiting";
 }
 
+// src/impersonation.ts
+var ENV_VAR = "AGT_ACT_AS_AGENT_ID";
+var OVERRIDE_ENV_VAR = "ENABLE_IMPERSONATION_CHANNELS";
+function isImpersonating() {
+  return impersonatedAgentId() !== null;
+}
+function impersonatedAgentId() {
+  const raw = process.env[ENV_VAR];
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function channelsEnabledOverride() {
+  const raw = process.env[OVERRIDE_ENV_VAR];
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim().toLowerCase();
+  return trimmed === "1" || trimmed === "true" || trimmed === "yes" || trimmed === "on";
+}
+var IMPERSONATION_REFUSAL_CODE = "CHANNEL.IMPERSONATION_DISABLED";
+var IMPERSONATION_REFUSAL_MESSAGE = "Posting as an agent under impersonation is disabled in v0 \u2014 quit impersonation with `agt impersonate exit` to send as yourself.";
+function buildImpersonationRefusal(toolName) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          error: {
+            code: IMPERSONATION_REFUSAL_CODE,
+            message: IMPERSONATION_REFUSAL_MESSAGE,
+            tool: toolName
+          }
+        })
+      }
+    ],
+    isError: true
+  };
+}
+
+// src/channel-egress-tools.ts
+var SLACK_EGRESS_TOOLS = /* @__PURE__ */ new Set([
+  "slack.reply",
+  "slack.react",
+  "slack.send_structured",
+  "slack.ask_user",
+  "slack.upload_file"
+]);
+
 // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.27.1_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 import process2 from "process";
 
@@ -16909,6 +16956,9 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
 }));
 mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
   const { name, arguments: args } = req.params;
+  if (isImpersonating() && !channelsEnabledOverride() && SLACK_EGRESS_TOOLS.has(name)) {
+    return buildImpersonationRefusal(name);
+  }
   const progressResult = await progressRegistry.handle(name, args ?? {});
   if (progressResult !== void 0) return progressResult;
   if (name === "slack.reply") {

package/dist/mcp/telegram-channel.js

@@ -15810,6 +15810,52 @@ function createTelegramProgressFlush(opts) {
   };
 }
 
+// src/impersonation.ts
+var ENV_VAR = "AGT_ACT_AS_AGENT_ID";
+var OVERRIDE_ENV_VAR = "ENABLE_IMPERSONATION_CHANNELS";
+function isImpersonating() {
+  return impersonatedAgentId() !== null;
+}
+function impersonatedAgentId() {
+  const raw = process.env[ENV_VAR];
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function channelsEnabledOverride() {
+  const raw = process.env[OVERRIDE_ENV_VAR];
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim().toLowerCase();
+  return trimmed === "1" || trimmed === "true" || trimmed === "yes" || trimmed === "on";
+}
+var IMPERSONATION_REFUSAL_CODE = "CHANNEL.IMPERSONATION_DISABLED";
+var IMPERSONATION_REFUSAL_MESSAGE = "Posting as an agent under impersonation is disabled in v0 \u2014 quit impersonation with `agt impersonate exit` to send as yourself.";
+function buildImpersonationRefusal(toolName) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          error: {
+            code: IMPERSONATION_REFUSAL_CODE,
+            message: IMPERSONATION_REFUSAL_MESSAGE,
+            tool: toolName
+          }
+        })
+      }
+    ],
+    isError: true
+  };
+}
+
+// src/channel-egress-tools.ts
+var TELEGRAM_EGRESS_TOOLS = /* @__PURE__ */ new Set([
+  "telegram.reply",
+  "telegram.send_message",
+  "telegram.react",
+  "channel_request_input"
+]);
+
 // src/mcp-spawn-lock.ts
 import {
   existsSync,
@@ -16676,6 +16722,9 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
 }));
 mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
   const { name, arguments: args } = req.params;
+  if (isImpersonating() && !channelsEnabledOverride() && TELEGRAM_EGRESS_TOOLS.has(name)) {
+    return buildImpersonationRefusal(name);
+  }
   const progressResult = await progressRegistry.handle(name, args ?? {});
   if (progressResult !== void 0) return progressResult;
   if (name === "channel_request_input") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.27.8",
+  "version": "0.27.9",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {