@integrity-labs/agt-cli 0.28.1030 → 0.28.1031

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-TBCJ5NNP.js";
+} from "../chunk-HQSQLPHD.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-4KNUH4DQ.js";
+} from "../chunk-XD5GMJGJ.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-VUC5XNUP.js";
+} from "../chunk-TFFXAGBJ.js";
 import "../chunk-TQDIIS3X.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1030" : "dev";
+var cliVersion = true ? "0.28.1031" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1030" : "dev";
+var cliVersion2 = true ? "0.28.1031" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-TBCJ5NNP.js → chunk-HQSQLPHD.js}

@@ -15,7 +15,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-4KNUH4DQ.js";
+} from "./chunk-XD5GMJGJ.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -77,7 +77,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-VUC5XNUP.js";
+} from "./chunk-TFFXAGBJ.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -4901,6 +4901,7 @@ function buildSettingsJson(input) {
   settings["permissions"] = { deny: SECRETS_DENY_PERMISSIONS };
   return settings;
 }
+var SUBAGENT_CREDENTIAL_CONVENTION = "You inherit the parent agent's environment, including credentials for the integrations below. Most follow the convention `<DEFINITION_ID>_ACCESS_TOKEN` for OAuth and `<DEFINITION_ID>_API_KEY` for API-key integrations \u2014 so GitHub's OAuth token, WHEN it is delivered that way, is `GITHUB_ACCESS_TOKEN`, and Postiz's key is `POSTIZ_API_KEY`. **Some integrations deliberately have no env var at all.** Their credential is never written to this host: the integration's own MCP server fetches a fresh one on every call. For those, the MCP tools ARE the credential \u2014 a missing env var means \"use the tools\", NOT \"not connected\". Never report an integration as unavailable because you could not find a token for it, and never try to reconstruct one. Where a CLI is listed, prefer it over raw curl \u2014 the CLI handles auth automatically.";
 function buildChannelMessageHandlerAgent(args) {
   const mcpServerKeys = args?.mcpServerKeys ?? [];
   const integrations = args?.integrations ?? [];
@@ -4909,7 +4910,7 @@ function buildChannelMessageHandlerAgent(args) {
   const integrationsBlock = integrations.length === 0 ? "" : `
 ## Integrations available
 
-You inherit the parent agent's environment, including credentials for the integrations below. Env vars follow the convention \`<DEFINITION_ID>_ACCESS_TOKEN\` for OAuth and \`<DEFINITION_ID>_API_KEY\` for API-key integrations (e.g. \`GITHUB_ACCESS_TOKEN\`, \`POSTIZ_API_KEY\`). Where a CLI is listed, prefer it over raw curl \u2014 the CLI handles auth automatically.
+${SUBAGENT_CREDENTIAL_CONVENTION}
 
 ${integrations.map((i) => {
     const cli = i.cliBinary ? ` \u2014 use the \`${i.cliBinary}\` CLI` : "";
@@ -4952,7 +4953,7 @@ function buildAugmentedWorkerAgent(args) {
   const integrationsBlock = integrations.length === 0 ? "" : `
 ## Integrations available
 
-You inherit the parent agent's environment, including credentials for the integrations below. Env vars follow the convention \`<DEFINITION_ID>_ACCESS_TOKEN\` for OAuth and \`<DEFINITION_ID>_API_KEY\` for API-key integrations (e.g. \`GITHUB_ACCESS_TOKEN\`, \`POSTIZ_API_KEY\`). Where a CLI is listed, prefer it over raw curl \u2014 the CLI handles auth automatically.
+${SUBAGENT_CREDENTIAL_CONVENTION}
 
 ${integrations.map((i) => {
     const cli = i.cliBinary ? ` \u2014 use the \`${i.cliBinary}\` CLI` : "";
@@ -4973,7 +4974,7 @@ You are dispatched by the parent agent to do a multi-step task in the background
 
 ## What you can do
 
-Your \`tools:\` allowlist (above) names every MCP server the parent has connected \u2014 Granola, Composio toolkits, Slack/Telegram/Direct-Chat channel tools, the platform \`mcp__augmented__*\` bridge, native integrations (Xero / Postiz / qmd / AWS), etc. \u2014 plus the built-ins (\`Bash\`, \`Read\`, \`Write\`, \`Edit\`, \`Grep\`, \`Glob\`, \`Skill\`, \`Agent\`, \`ToolSearch\`, \`WebSearch\`, \`WebFetch\`). All environment variables the parent has are yours: OAuth access tokens (\`GITHUB_ACCESS_TOKEN\`), API keys (\`POSTIZ_API_KEY\`), native-CLI binaries (\`gh\`, \`aws\`, \`xero\`).
+Your \`tools:\` allowlist (above) names every MCP server the parent has connected \u2014 Granola, Composio toolkits, Slack/Telegram/Direct-Chat channel tools, the platform \`mcp__augmented__*\` bridge, native integrations (Xero / Postiz / qmd / AWS), etc. \u2014 plus the built-ins (\`Bash\`, \`Read\`, \`Write\`, \`Edit\`, \`Grep\`, \`Glob\`, \`Skill\`, \`Agent\`, \`ToolSearch\`, \`WebSearch\`, \`WebFetch\`). The environment variables the parent has are yours: OAuth access tokens, API keys (\`POSTIZ_API_KEY\`), native-CLI binaries (\`gh\`, \`aws\`, \`xero\`). Some integrations deliberately expose NO env var \u2014 their MCP server holds the credential and fetches a fresh one per call \u2014 so treat a missing token as "use the MCP tools", never as "not connected".
 
 ## Hard rules \u2014 Credential Access Control
 
@@ -7142,7 +7143,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1030" : "dev";
+var agtCliVersion = true ? "0.28.1031" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -12099,4 +12100,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-TBCJ5NNP.js.map
+//# sourceMappingURL=chunk-HQSQLPHD.js.map