@integrity-labs/agt-cli 0.28.1163 → 0.28.1165

package/dist/bin/agt.js

@@ -40,17 +40,17 @@ import {
   success,
   table,
   warn
-} from "../chunk-DPMVTSFO.js";
+} from "../chunk-MBNPMML4.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-QRFACFSH.js";
+} from "../chunk-FGPPJKJ5.js";
 import {
   markDailySessionSpawn,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-CXEP3UC7.js";
+} from "../chunk-ZDHCIJL6.js";
 import "../chunk-B6UYVEMD.js";
 import "../chunk-OAWK4OBN.js";
 import "../chunk-XWVM4KPK.js";
@@ -84,7 +84,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-D55RMQTG.js";
+} from "../chunk-TNPLCJIG.js";
 import "../chunk-EL5MWGGH.js";
 import "../chunk-DGUM43GV.js";
 
@@ -5513,7 +5513,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1163" : "dev";
+var cliVersion = true ? "0.28.1165" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6773,7 +6773,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1163" : "dev";
+var cliVersion2 = true ? "0.28.1165" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-QRFACFSH.js → chunk-FGPPJKJ5.js}

@@ -4,7 +4,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-CXEP3UC7.js";
+} from "./chunk-ZDHCIJL6.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -47,7 +47,7 @@ import {
   remoteMcpConnectionEnvInfix,
   remoteMcpConnectionLabel,
   remoteMcpConnectionScopedEnvVar
-} from "./chunk-D55RMQTG.js";
+} from "./chunk-TNPLCJIG.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   archiveLegacyClaudeJson,
@@ -6130,4 +6130,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-QRFACFSH.js.map
+//# sourceMappingURL=chunk-FGPPJKJ5.js.map

package/dist/{chunk-DPMVTSFO.js → chunk-MBNPMML4.js}

@@ -16,11 +16,11 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-QRFACFSH.js";
+} from "./chunk-FGPPJKJ5.js";
 import {
   readDailySessionPin,
   sessionTranscriptDir
-} from "./chunk-CXEP3UC7.js";
+} from "./chunk-ZDHCIJL6.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -90,7 +90,7 @@ import {
   scanConfigForLiteralSecrets,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-D55RMQTG.js";
+} from "./chunk-TNPLCJIG.js";
 import {
   claudeJsonPathFor,
   effectiveClaudeJsonPath,
@@ -8078,7 +8078,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1163" : "dev";
+var agtCliVersion = true ? "0.28.1165" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -13235,4 +13235,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-DPMVTSFO.js.map
+//# sourceMappingURL=chunk-MBNPMML4.js.map

package/dist/{chunk-3DISC7BU.js → chunk-T7NKHOJF.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-XWVM4KPK.js";
 import {
   FORCED_UPDATE_HARD_DEADLINE_MS
-} from "./chunk-D55RMQTG.js";
+} from "./chunk-TNPLCJIG.js";
 import {
   effectiveClaudeJsonPath
 } from "./chunk-EL5MWGGH.js";
@@ -714,4 +714,4 @@ export {
   probeClaudeInstalls,
   maybeUpdateClaudeCode
 };
-//# sourceMappingURL=chunk-3DISC7BU.js.map
+//# sourceMappingURL=chunk-T7NKHOJF.js.map

package/dist/{chunk-D55RMQTG.js → chunk-TNPLCJIG.js}

@@ -7829,7 +7829,7 @@ var FLAG_REGISTRY = [
   },
   {
     key: "ninja-lists",
-    description: 'Ninja Lists (ADR-0120): small tables agents and people fill and review together. Gates the "Lists" nav item, the /lists pages AND the /ninja-lists API, per org. Unlike its siblings `projects-menu` / `ninjafy-notes-menu`, this is the whole feature\'s gate, not only its menu entry: the surface is unlaunched, so an org with the flag off gets 404 from the API rather than a hidden link to a working one.',
+    description: 'Apps, formerly Ninja Lists (ADR-0120): small tables agents and people fill and review together. Gates the "Apps" nav item, the /apps pages AND the /ninja-lists API, per org. Unlike its siblings `projects-menu` / `ninjafy-notes-menu`, this is the whole feature\'s gate, not only its menu entry: the surface is unlaunched, so an org with the flag off gets 404 from the API rather than a hidden link to a working one.',
     flagType: "boolean",
     // PUBLIC (ADR-0022 §2): the nav shells read it via usePublicBooleanFlag and
     // the pages via getPublicBooleanFlagServer, so it is serialized to the
@@ -16735,6 +16735,183 @@ var videoRenderTriggerAdapter = {
 };
 registerTriggerSource(videoRenderTriggerAdapter);
 
+// ../../packages/core/dist/triggers/adapters/webhook.js
+var WEBHOOK_TRIGGER_PROVIDER = "webhook";
+var WEBHOOK_MAX_BODY_BYTES = 1280 * 1024;
+var WEBHOOK_PROMPT_MAX_CHARS = 8e3;
+var WEBHOOK_RAW_MAX_CHARS = 64 * 1024;
+var WEBHOOK_INSTRUCTION_MAX_CHARS = 2e3;
+var WEBHOOK_NAME_MAX_CHARS = 80;
+var WEBHOOK_DEFAULT_RATE_CAP = 60;
+var WEBHOOK_MAX_RATE_CAP = 1e3;
+var WEBHOOK_PRESETS = {
+  // https://docs.aws.amazon.com/eventbridge/latest/ref/overiew-event-structure.html
+  eventbridge: {
+    dedupPath: "id",
+    eventTypePaths: ["source", "detail-type"],
+    payloadPath: "detail",
+    timePath: "time"
+  },
+  // Raw-body hash dedup, whole body as payload. Set dedup_path when the
+  // sender has a stable id, or two identical bodies collapse into one.
+  generic: {}
+};
+var PATH_RE = /^[A-Za-z0-9_$-]+(\.[A-Za-z0-9_$-]+){0,9}$/;
+function readPath(value, path) {
+  let cur = value;
+  for (const key of path.split(".")) {
+    if (cur === null || typeof cur !== "object" || Array.isArray(cur))
+      return void 0;
+    if (!Object.prototype.hasOwnProperty.call(cur, key))
+      return void 0;
+    cur = cur[key];
+  }
+  return cur;
+}
+function scalarString(v) {
+  if (typeof v === "string")
+    return v.length > 0 ? v : null;
+  if (typeof v === "number" && Number.isFinite(v))
+    return String(v);
+  return null;
+}
+function truncate(text, max) {
+  if (text.length <= max)
+    return text;
+  return `${text.slice(0, max)}
+... [truncated ${text.length - max} more characters]`;
+}
+function resolvePreset(config) {
+  const name = config["preset"];
+  const base = typeof name === "string" && name in WEBHOOK_PRESETS ? WEBHOOK_PRESETS[name] : WEBHOOK_PRESETS.generic;
+  const dedup = config["dedup_path"];
+  const type = config["event_type_path"];
+  const payload = config["payload_path"];
+  return {
+    ...base,
+    ...typeof dedup === "string" && dedup ? { dedupPath: dedup } : {},
+    ...typeof type === "string" && type ? { eventTypePaths: [type] } : {},
+    ...typeof payload === "string" && payload ? { payloadPath: payload } : {}
+  };
+}
+function validateWebhookConfig(input) {
+  const out = {};
+  const name = input["name"];
+  if (name !== void 0) {
+    if (typeof name !== "string")
+      return { ok: false, error: "name must be a string" };
+    const trimmed = name.trim();
+    if (trimmed.length > WEBHOOK_NAME_MAX_CHARS) {
+      return { ok: false, error: `name must be at most ${WEBHOOK_NAME_MAX_CHARS} characters` };
+    }
+    if (trimmed)
+      out["name"] = trimmed;
+  }
+  const instruction = input["instruction"];
+  if (typeof instruction !== "string" || !instruction.trim()) {
+    return {
+      ok: false,
+      error: "instruction is required: tell the agent what to do when an event arrives"
+    };
+  }
+  if (instruction.trim().length > WEBHOOK_INSTRUCTION_MAX_CHARS) {
+    return {
+      ok: false,
+      error: `instruction must be at most ${WEBHOOK_INSTRUCTION_MAX_CHARS} characters`
+    };
+  }
+  out["instruction"] = instruction.trim();
+  const preset = input["preset"] ?? "generic";
+  if (typeof preset !== "string" || !(preset in WEBHOOK_PRESETS)) {
+    return {
+      ok: false,
+      error: `preset must be one of: ${Object.keys(WEBHOOK_PRESETS).join(", ")}`
+    };
+  }
+  out["preset"] = preset;
+  for (const key of ["dedup_path", "event_type_path", "payload_path"]) {
+    const v = input[key];
+    if (v === void 0 || v === null || v === "")
+      continue;
+    if (typeof v !== "string" || !PATH_RE.test(v)) {
+      return { ok: false, error: `${key} must be a dot path like "detail.id"` };
+    }
+    out[key] = v;
+  }
+  const cap = input["max_events_per_hour"];
+  if (cap !== void 0 && cap !== null) {
+    if (typeof cap !== "number" || !Number.isInteger(cap) || cap < 1 || cap > WEBHOOK_MAX_RATE_CAP) {
+      return {
+        ok: false,
+        error: `max_events_per_hour must be an integer from 1 to ${WEBHOOK_MAX_RATE_CAP}`
+      };
+    }
+    out["max_events_per_hour"] = cap;
+  } else {
+    out["max_events_per_hour"] = WEBHOOK_DEFAULT_RATE_CAP;
+  }
+  return { ok: true, config: out };
+}
+function webhookRateCap(trigger) {
+  const cap = trigger.config["max_events_per_hour"];
+  if (typeof cap === "number" && Number.isInteger(cap) && cap >= 1) {
+    return Math.min(cap, WEBHOOK_MAX_RATE_CAP);
+  }
+  return WEBHOOK_DEFAULT_RATE_CAP;
+}
+function buildWebhookEvent(req, config, now = /* @__PURE__ */ new Date()) {
+  const preset = resolvePreset(config);
+  const body = req.body;
+  const raw = req.rawBody ?? JSON.stringify(body ?? null);
+  const idValue = preset.dedupPath ? scalarString(readPath(body, preset.dedupPath)) : null;
+  const dedupKey = idValue ? `wh:id:${stableHash(idValue)}` : `wh:raw:${stableHash(raw)}`;
+  const typeParts = (preset.eventTypePaths ?? []).map((p2) => scalarString(readPath(body, p2))).filter((v) => v !== null).map((v) => v.slice(0, 200));
+  const eventType = typeParts.length > 0 ? typeParts.join(" / ") : "webhook event";
+  const timeValue = preset.timePath ? scalarString(readPath(body, preset.timePath)) : null;
+  const timeMs = timeValue ? Date.parse(timeValue) : NaN;
+  const occurredAt = Number.isFinite(timeMs) ? new Date(timeMs).toISOString() : now.toISOString();
+  let payload = body;
+  if (preset.payloadPath) {
+    const sub = readPath(body, preset.payloadPath);
+    if (sub !== void 0)
+      payload = sub;
+  }
+  const rendered = typeof payload === "string" ? payload : JSON.stringify(payload, null, 2) ?? "null";
+  const lines = [`Event: ${eventType}`];
+  if (idValue)
+    lines.push(`Event id: ${idValue.slice(0, 200)}`);
+  lines.push("", truncate(rendered, WEBHOOK_PROMPT_MAX_CHARS));
+  return {
+    provider: WEBHOOK_TRIGGER_PROVIDER,
+    occurredAt,
+    dedupKey,
+    sourceTrust: "untrusted",
+    title: eventType,
+    body: lines.join("\n"),
+    // Keep the ledger row bounded: the full body when small, else a marker
+    // with the head of it. Never headers (the bearer token rides there).
+    raw: raw.length <= WEBHOOK_RAW_MAX_CHARS ? body : { truncated: true, bytes: raw.length, head: raw.slice(0, WEBHOOK_RAW_MAX_CHARS) },
+    meaningful: true
+  };
+}
+var webhookTriggerAdapter = {
+  provider: WEBHOOK_TRIGGER_PROVIDER,
+  kind: "webhook",
+  webhookAuth: "bearer",
+  webhookEvents: [],
+  multiInstance: true,
+  maxBodyBytes: WEBHOOK_MAX_BODY_BYTES,
+  validateConfig: validateWebhookConfig,
+  rateCapPerHour: (trigger) => webhookRateCap(trigger),
+  // Webhook-kind triggers are minted only on POST /agents/:id/triggers
+  // (agent.edit); /host/triggers refuses non-poll providers.
+  operatorInstruction: true,
+  ingest(req, trigger) {
+    return [buildWebhookEvent(req, trigger.config)];
+  }
+};
+registerTriggerSource(webhookTriggerAdapter);
+
 // ../../packages/core/dist/restart/breaker-thresholds.js
 var RESTART_BREAKER_PROVISIONING_MAX = 5;
 var RESTART_BREAKER_PROVISIONING_WINDOW_MS = 18e5;
@@ -16942,4 +17119,4 @@ export {
   forcedUpdatePendingForMs,
   isForcedUpdatePastDeadline
 };
-//# sourceMappingURL=chunk-D55RMQTG.js.map
+//# sourceMappingURL=chunk-TNPLCJIG.js.map