@integrity-labs/agt-cli 0.28.1118 → 0.28.1120

package/dist/mcp/direct-chat-channel.js

@@ -35417,6 +35417,45 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://github.com/RevylAI/greenlight"
   },
+  {
+    // ENG-9333. Seed-catalog toolkit (`toolkit_definitions.aws-cli`, composed by
+    // the `aws` bundle). Registered here ONLY so the manager's ensureToolkitCli
+    // can install the binary - same shape as `greenlight` above, and not a
+    // customer-installable native (no `installable`).
+    //
+    // Why it has to exist. ensureToolkitCli installs from this registry's
+    // `cli_tool` and nothing else, and before this entry there was none for
+    // `aws-cli`, so `getIntegration('aws-cli')?.cli_tool` was undefined and the
+    // toolkit was marked permanently "ensured" WITHOUT a log line. The only other
+    // install path was the `aws` bundle's `scripts.on_install`, which fires only
+    // for agents holding that bundle - none of the 8 agents holding `aws-cli` on
+    // 2026-10-12 did. Every one of them was told by list_integrations that `aws`
+    // was "used via its CLI binary on PATH", and none had it.
+    //
+    // Installer: AL2023 (the whole agent fleet) ships AWS CLI v2 as the
+    // `awscli-2` rpm, so dnf is the primary path and needs no `unzip` (absent on
+    // older hosts despite BASELINE_DNF_PACKAGES) and no PATH change (the rpm
+    // installs to /usr/bin). Off-fleet fallbacks: on apt hosts, AWS's official v2
+    // installer (Ubuntu's `awscli` package is v1 on 22.04 - CodeRabbit on #6942),
+    // then brew (`awscli` is v2). Exits non-zero when nothing applies, so the manager records the
+    // failure and retries with backoff instead of masking it.
+    id: "aws-cli",
+    name: "AWS CLI",
+    category: "infrastructure",
+    description: "Official AWS CLI v2 - manage S3, IAM, Lambda, EC2, CloudWatch and the rest of AWS from a single binary. Pair with the cloud-broker toolkit for ephemeral, scoped credentials.",
+    supported_auth_types: ["oauth2", "managed"],
+    capabilities: [
+      { id: "aws-cli:run", name: "Run AWS CLI", description: "Invoke the aws binary with broker-minted credentials", access: "read" }
+    ],
+    cli_tool: {
+      package: "awscli-2",
+      binary: "aws",
+      env_key: "",
+      installer: "script",
+      script: `if command -v dnf >/dev/null 2>&1; then dnf install -y awscli-2; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip curl && t=$(mktemp -d) && trap 'rm -rf "$t"' EXIT && curl -fsSL "https://awscli.amazonaws.com/awscli-exe-linux-$(uname -m).zip" -o "$t/awscliv2.zip" && unzip -q "$t/awscliv2.zip" -d "$t" && "$t/aws/install" --update; elif command -v brew >/dev/null 2>&1; then brew install awscli; else echo "aws: no supported installer (need dnf, apt-get, or brew)" >&2; exit 1; fi`
+    },
+    docs_url: "https://docs.aws.amazon.com/cli/latest/userguide/"
+  },
   {
     // Seed-catalog toolkit (composed by the ultimate-app-coder bundle). Registered
     // here only for the cli_tool install path; not a customer-installable native.

package/dist/mcp/index.js

@@ -27902,6 +27902,45 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://github.com/RevylAI/greenlight"
   },
+  {
+    // ENG-9333. Seed-catalog toolkit (`toolkit_definitions.aws-cli`, composed by
+    // the `aws` bundle). Registered here ONLY so the manager's ensureToolkitCli
+    // can install the binary - same shape as `greenlight` above, and not a
+    // customer-installable native (no `installable`).
+    //
+    // Why it has to exist. ensureToolkitCli installs from this registry's
+    // `cli_tool` and nothing else, and before this entry there was none for
+    // `aws-cli`, so `getIntegration('aws-cli')?.cli_tool` was undefined and the
+    // toolkit was marked permanently "ensured" WITHOUT a log line. The only other
+    // install path was the `aws` bundle's `scripts.on_install`, which fires only
+    // for agents holding that bundle - none of the 8 agents holding `aws-cli` on
+    // 2026-10-12 did. Every one of them was told by list_integrations that `aws`
+    // was "used via its CLI binary on PATH", and none had it.
+    //
+    // Installer: AL2023 (the whole agent fleet) ships AWS CLI v2 as the
+    // `awscli-2` rpm, so dnf is the primary path and needs no `unzip` (absent on
+    // older hosts despite BASELINE_DNF_PACKAGES) and no PATH change (the rpm
+    // installs to /usr/bin). Off-fleet fallbacks: on apt hosts, AWS's official v2
+    // installer (Ubuntu's `awscli` package is v1 on 22.04 - CodeRabbit on #6942),
+    // then brew (`awscli` is v2). Exits non-zero when nothing applies, so the manager records the
+    // failure and retries with backoff instead of masking it.
+    id: "aws-cli",
+    name: "AWS CLI",
+    category: "infrastructure",
+    description: "Official AWS CLI v2 - manage S3, IAM, Lambda, EC2, CloudWatch and the rest of AWS from a single binary. Pair with the cloud-broker toolkit for ephemeral, scoped credentials.",
+    supported_auth_types: ["oauth2", "managed"],
+    capabilities: [
+      { id: "aws-cli:run", name: "Run AWS CLI", description: "Invoke the aws binary with broker-minted credentials", access: "read" }
+    ],
+    cli_tool: {
+      package: "awscli-2",
+      binary: "aws",
+      env_key: "",
+      installer: "script",
+      script: `if command -v dnf >/dev/null 2>&1; then dnf install -y awscli-2; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip curl && t=$(mktemp -d) && trap 'rm -rf "$t"' EXIT && curl -fsSL "https://awscli.amazonaws.com/awscli-exe-linux-$(uname -m).zip" -o "$t/awscliv2.zip" && unzip -q "$t/awscliv2.zip" -d "$t" && "$t/aws/install" --update; elif command -v brew >/dev/null 2>&1; then brew install awscli; else echo "aws: no supported installer (need dnf, apt-get, or brew)" >&2; exit 1; fi`
+    },
+    docs_url: "https://docs.aws.amazon.com/cli/latest/userguide/"
+  },
   {
     // Seed-catalog toolkit (composed by the ultimate-app-coder bundle). Registered
     // here only for the cli_tool install path; not a customer-installable native.

package/dist/mcp/origami.js

@@ -42051,6 +42051,45 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://github.com/RevylAI/greenlight"
   },
+  {
+    // ENG-9333. Seed-catalog toolkit (`toolkit_definitions.aws-cli`, composed by
+    // the `aws` bundle). Registered here ONLY so the manager's ensureToolkitCli
+    // can install the binary - same shape as `greenlight` above, and not a
+    // customer-installable native (no `installable`).
+    //
+    // Why it has to exist. ensureToolkitCli installs from this registry's
+    // `cli_tool` and nothing else, and before this entry there was none for
+    // `aws-cli`, so `getIntegration('aws-cli')?.cli_tool` was undefined and the
+    // toolkit was marked permanently "ensured" WITHOUT a log line. The only other
+    // install path was the `aws` bundle's `scripts.on_install`, which fires only
+    // for agents holding that bundle - none of the 8 agents holding `aws-cli` on
+    // 2026-10-12 did. Every one of them was told by list_integrations that `aws`
+    // was "used via its CLI binary on PATH", and none had it.
+    //
+    // Installer: AL2023 (the whole agent fleet) ships AWS CLI v2 as the
+    // `awscli-2` rpm, so dnf is the primary path and needs no `unzip` (absent on
+    // older hosts despite BASELINE_DNF_PACKAGES) and no PATH change (the rpm
+    // installs to /usr/bin). Off-fleet fallbacks: on apt hosts, AWS's official v2
+    // installer (Ubuntu's `awscli` package is v1 on 22.04 - CodeRabbit on #6942),
+    // then brew (`awscli` is v2). Exits non-zero when nothing applies, so the manager records the
+    // failure and retries with backoff instead of masking it.
+    id: "aws-cli",
+    name: "AWS CLI",
+    category: "infrastructure",
+    description: "Official AWS CLI v2 - manage S3, IAM, Lambda, EC2, CloudWatch and the rest of AWS from a single binary. Pair with the cloud-broker toolkit for ephemeral, scoped credentials.",
+    supported_auth_types: ["oauth2", "managed"],
+    capabilities: [
+      { id: "aws-cli:run", name: "Run AWS CLI", description: "Invoke the aws binary with broker-minted credentials", access: "read" }
+    ],
+    cli_tool: {
+      package: "awscli-2",
+      binary: "aws",
+      env_key: "",
+      installer: "script",
+      script: `if command -v dnf >/dev/null 2>&1; then dnf install -y awscli-2; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip curl && t=$(mktemp -d) && trap 'rm -rf "$t"' EXIT && curl -fsSL "https://awscli.amazonaws.com/awscli-exe-linux-$(uname -m).zip" -o "$t/awscliv2.zip" && unzip -q "$t/awscliv2.zip" -d "$t" && "$t/aws/install" --update; elif command -v brew >/dev/null 2>&1; then brew install awscli; else echo "aws: no supported installer (need dnf, apt-get, or brew)" >&2; exit 1; fi`
+    },
+    docs_url: "https://docs.aws.amazon.com/cli/latest/userguide/"
+  },
   {
     // Seed-catalog toolkit (composed by the ultimate-app-coder bundle). Registered
     // here only for the cli_tool install path; not a customer-installable native.

package/dist/mcp/slack-channel.js

@@ -36444,6 +36444,45 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://github.com/RevylAI/greenlight"
   },
+  {
+    // ENG-9333. Seed-catalog toolkit (`toolkit_definitions.aws-cli`, composed by
+    // the `aws` bundle). Registered here ONLY so the manager's ensureToolkitCli
+    // can install the binary - same shape as `greenlight` above, and not a
+    // customer-installable native (no `installable`).
+    //
+    // Why it has to exist. ensureToolkitCli installs from this registry's
+    // `cli_tool` and nothing else, and before this entry there was none for
+    // `aws-cli`, so `getIntegration('aws-cli')?.cli_tool` was undefined and the
+    // toolkit was marked permanently "ensured" WITHOUT a log line. The only other
+    // install path was the `aws` bundle's `scripts.on_install`, which fires only
+    // for agents holding that bundle - none of the 8 agents holding `aws-cli` on
+    // 2026-10-12 did. Every one of them was told by list_integrations that `aws`
+    // was "used via its CLI binary on PATH", and none had it.
+    //
+    // Installer: AL2023 (the whole agent fleet) ships AWS CLI v2 as the
+    // `awscli-2` rpm, so dnf is the primary path and needs no `unzip` (absent on
+    // older hosts despite BASELINE_DNF_PACKAGES) and no PATH change (the rpm
+    // installs to /usr/bin). Off-fleet fallbacks: on apt hosts, AWS's official v2
+    // installer (Ubuntu's `awscli` package is v1 on 22.04 - CodeRabbit on #6942),
+    // then brew (`awscli` is v2). Exits non-zero when nothing applies, so the manager records the
+    // failure and retries with backoff instead of masking it.
+    id: "aws-cli",
+    name: "AWS CLI",
+    category: "infrastructure",
+    description: "Official AWS CLI v2 - manage S3, IAM, Lambda, EC2, CloudWatch and the rest of AWS from a single binary. Pair with the cloud-broker toolkit for ephemeral, scoped credentials.",
+    supported_auth_types: ["oauth2", "managed"],
+    capabilities: [
+      { id: "aws-cli:run", name: "Run AWS CLI", description: "Invoke the aws binary with broker-minted credentials", access: "read" }
+    ],
+    cli_tool: {
+      package: "awscli-2",
+      binary: "aws",
+      env_key: "",
+      installer: "script",
+      script: `if command -v dnf >/dev/null 2>&1; then dnf install -y awscli-2; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip curl && t=$(mktemp -d) && trap 'rm -rf "$t"' EXIT && curl -fsSL "https://awscli.amazonaws.com/awscli-exe-linux-$(uname -m).zip" -o "$t/awscliv2.zip" && unzip -q "$t/awscliv2.zip" -d "$t" && "$t/aws/install" --update; elif command -v brew >/dev/null 2>&1; then brew install awscli; else echo "aws: no supported installer (need dnf, apt-get, or brew)" >&2; exit 1; fi`
+    },
+    docs_url: "https://docs.aws.amazon.com/cli/latest/userguide/"
+  },
   {
     // Seed-catalog toolkit (composed by the ultimate-app-coder bundle). Registered
     // here only for the cli_tool install path; not a customer-installable native.

package/dist/mcp/telegram-channel.js

@@ -36630,6 +36630,45 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://github.com/RevylAI/greenlight"
   },
+  {
+    // ENG-9333. Seed-catalog toolkit (`toolkit_definitions.aws-cli`, composed by
+    // the `aws` bundle). Registered here ONLY so the manager's ensureToolkitCli
+    // can install the binary - same shape as `greenlight` above, and not a
+    // customer-installable native (no `installable`).
+    //
+    // Why it has to exist. ensureToolkitCli installs from this registry's
+    // `cli_tool` and nothing else, and before this entry there was none for
+    // `aws-cli`, so `getIntegration('aws-cli')?.cli_tool` was undefined and the
+    // toolkit was marked permanently "ensured" WITHOUT a log line. The only other
+    // install path was the `aws` bundle's `scripts.on_install`, which fires only
+    // for agents holding that bundle - none of the 8 agents holding `aws-cli` on
+    // 2026-10-12 did. Every one of them was told by list_integrations that `aws`
+    // was "used via its CLI binary on PATH", and none had it.
+    //
+    // Installer: AL2023 (the whole agent fleet) ships AWS CLI v2 as the
+    // `awscli-2` rpm, so dnf is the primary path and needs no `unzip` (absent on
+    // older hosts despite BASELINE_DNF_PACKAGES) and no PATH change (the rpm
+    // installs to /usr/bin). Off-fleet fallbacks: on apt hosts, AWS's official v2
+    // installer (Ubuntu's `awscli` package is v1 on 22.04 - CodeRabbit on #6942),
+    // then brew (`awscli` is v2). Exits non-zero when nothing applies, so the manager records the
+    // failure and retries with backoff instead of masking it.
+    id: "aws-cli",
+    name: "AWS CLI",
+    category: "infrastructure",
+    description: "Official AWS CLI v2 - manage S3, IAM, Lambda, EC2, CloudWatch and the rest of AWS from a single binary. Pair with the cloud-broker toolkit for ephemeral, scoped credentials.",
+    supported_auth_types: ["oauth2", "managed"],
+    capabilities: [
+      { id: "aws-cli:run", name: "Run AWS CLI", description: "Invoke the aws binary with broker-minted credentials", access: "read" }
+    ],
+    cli_tool: {
+      package: "awscli-2",
+      binary: "aws",
+      env_key: "",
+      installer: "script",
+      script: `if command -v dnf >/dev/null 2>&1; then dnf install -y awscli-2; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip curl && t=$(mktemp -d) && trap 'rm -rf "$t"' EXIT && curl -fsSL "https://awscli.amazonaws.com/awscli-exe-linux-$(uname -m).zip" -o "$t/awscliv2.zip" && unzip -q "$t/awscliv2.zip" -d "$t" && "$t/aws/install" --update; elif command -v brew >/dev/null 2>&1; then brew install awscli; else echo "aws: no supported installer (need dnf, apt-get, or brew)" >&2; exit 1; fi`
+    },
+    docs_url: "https://docs.aws.amazon.com/cli/latest/userguide/"
+  },
   {
     // Seed-catalog toolkit (composed by the ultimate-app-coder bundle). Registered
     // here only for the cli_tool install path; not a customer-installable native.

package/dist/{persistent-session-HSBVLK46.js → persistent-session-JSLQLE6F.js}

@@ -68,8 +68,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-PT2HBINO.js";
-import "./chunk-XIMMVBIH.js";
+} from "./chunk-MTBIR6TN.js";
+import "./chunk-J7GZNCX2.js";
 import "./chunk-OCMJ5E6J.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -145,4 +145,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-HSBVLK46.js.map
+//# sourceMappingURL=persistent-session-JSLQLE6F.js.map

package/dist/{responsiveness-probe-KGN6IQLH.js → responsiveness-probe-2C7X7RIM.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-PT2HBINO.js";
-import "./chunk-XIMMVBIH.js";
+} from "./chunk-MTBIR6TN.js";
+import "./chunk-J7GZNCX2.js";
 import "./chunk-OCMJ5E6J.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -802,4 +802,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-KGN6IQLH.js.map
+//# sourceMappingURL=responsiveness-probe-2C7X7RIM.js.map

package/dist/{session-auth-dead-P44BJ3W6.js → session-auth-dead-QYQXJNZP.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-XIMMVBIH.js";
+} from "./chunk-J7GZNCX2.js";
 import "./chunk-DGUM43GV.js";
 
 // src/lib/session-auth-dead.ts
@@ -204,4 +204,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-P44BJ3W6.js.map
+//# sourceMappingURL=session-auth-dead-QYQXJNZP.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1118",
+  "version": "0.28.1120",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {