@integrity-labs/agt-cli 0.28.1198 → 0.28.1200

package/dist/mcp/augmented-admin.js

@@ -21881,7 +21881,7 @@ server.registerTool(
 );
 server.registerTool(
   "debug_search_orgs",
-  { description: `List the ORGANIZATIONS you're authorized to read \u2014 the org-level entry point for triage and access decisions, so you don't have to infer orgs off agent/host rows or probe one org's tier with debug_request_access. Returns a projection per org: { organization_id, organization_slug, display_name, is_internal, management_mode (fully_managed | self_managed), standing_reason (internal | fully_managed | granted \u2014 WHY you can read it), has_active_grant (do you hold a live grant right now), host_count, agent_count, active_agent_count, open_alert_count, created_at }. Use it to (1) decide access in one read \u2014 see a self_managed org and its grant state before deciding to debug_request_access; (2) triage the fleet \u2014 "which orgs have open alerts" (open_alert_count includes stuck-restart alerts) without walking agents; (3) disambiguate a slug \u2192 id \u2192 tier without needing an agent/host to exist. Authorized = IL-owned (is_internal) + fully-managed orgs (standing) plus any self-managed org you hold an active grant for. Filter with { q (slug/name substring), management_mode, is_internal, limit }. Projection only \u2014 no secrets, no transcripts; org-walled in SQL and audited as a cross-org access.`, inputSchema: searchOrgsSchema },
+  { description: `List the ORGANIZATIONS you're authorized to read \u2014 the org-level entry point for triage and access decisions, so you don't have to infer orgs off agent/host rows or probe one org's tier with debug_request_access. Returns a projection per org: { organization_id, organization_slug, display_name, is_internal, management_mode (fully_managed | self_managed), standing_reason (internal | fully_managed | granted \u2014 WHY you can read it), has_active_grant (do you hold a live grant right now), host_count, agent_count, active_agent_count, open_alert_count, created_at, plan_key, subscription_status, byo_credentials }. plan_key is the plan the product enforces now, not the one purchased: past_due or incomplete reads starter, so read it with subscription_status (trialing | active | past_due | incomplete | canceled, or null if the org never subscribed). byo_credentials is whether that plan lets the org use its own credential for premium integrations. If the plan read fails, all three are null, so a null byo_credentials means unknown, not no. No billing amounts. Use it to (1) decide access in one read \u2014 see a self_managed org and its grant state before deciding to debug_request_access; (2) triage the fleet \u2014 "which orgs have open alerts" (open_alert_count includes stuck-restart alerts) without walking agents; (3) disambiguate a slug \u2192 id \u2192 tier without needing an agent/host to exist. Authorized = IL-owned (is_internal) + fully-managed orgs (standing) plus any self-managed org you hold an active grant for. Filter with { q (slug/name substring), management_mode, is_internal, limit }. Projection only \u2014 no secrets, no transcripts; org-walled in SQL and audited as a cross-org access.`, inputSchema: searchOrgsSchema },
   async (args) => {
     try {
       const result = await client.searchOrgs(args);

package/dist/{persistent-session-YKPIDETF.js → persistent-session-SJ25HFBM.js}

@@ -68,12 +68,12 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-YZSECLT4.js";
-import "./chunk-LBQSZVUX.js";
+} from "./chunk-M5XKZVBC.js";
+import "./chunk-KKQRAJQV.js";
 import "./chunk-HYQ7VOC3.js";
 import "./chunk-6HBXEJHO.js";
 import "./chunk-XWVM4KPK.js";
-import "./chunk-I2ZT7SV2.js";
+import "./chunk-WCN2OJQT.js";
 import "./chunk-AIUIMEUS.js";
 import "./chunk-DGUM43GV.js";
 export {
@@ -147,4 +147,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-YKPIDETF.js.map
+//# sourceMappingURL=persistent-session-SJ25HFBM.js.map

package/dist/{responsiveness-probe-VU7CUC7P.js → responsiveness-probe-TB2T2Q4L.js}

@@ -1,11 +1,11 @@
 import {
   paneLogPath
-} from "./chunk-YZSECLT4.js";
-import "./chunk-LBQSZVUX.js";
+} from "./chunk-M5XKZVBC.js";
+import "./chunk-KKQRAJQV.js";
 import "./chunk-HYQ7VOC3.js";
 import "./chunk-6HBXEJHO.js";
 import "./chunk-XWVM4KPK.js";
-import "./chunk-I2ZT7SV2.js";
+import "./chunk-WCN2OJQT.js";
 import "./chunk-AIUIMEUS.js";
 import "./chunk-DGUM43GV.js";
 
@@ -804,4 +804,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-VU7CUC7P.js.map
+//# sourceMappingURL=responsiveness-probe-TB2T2Q4L.js.map

package/dist/{session-auth-dead-SXJSD34M.js → session-auth-dead-2XSQ6BRX.js}

@@ -1,7 +1,7 @@
 import {
   sessionTranscriptDir
-} from "./chunk-LBQSZVUX.js";
-import "./chunk-I2ZT7SV2.js";
+} from "./chunk-KKQRAJQV.js";
+import "./chunk-WCN2OJQT.js";
 import "./chunk-DGUM43GV.js";
 
 // src/lib/session-auth-dead.ts
@@ -205,4 +205,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-SXJSD34M.js.map
+//# sourceMappingURL=session-auth-dead-2XSQ6BRX.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1198",
+  "version": "0.28.1200",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {