@integrity-labs/agt-cli 0.28.254 → 0.28.255

package/dist/{chunk-GKHDPXML.js → chunk-O5JHX7FG.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-UMXGONVE.js";
+} from "./chunk-GFX74FGP.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5832,7 +5832,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.254" : "dev";
+var agtCliVersion = true ? "0.28.255" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8102,4 +8102,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-GKHDPXML.js.map
+//# sourceMappingURL=chunk-O5JHX7FG.js.map

package/dist/{claude-pair-runtime-S6LYZUEC.js → claude-pair-runtime-EE3MXQHY.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-CHYTU6HG.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-EKXNGE5B.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-S6LYZUEC.js.map
+//# sourceMappingURL=claude-pair-runtime-EE3MXQHY.js.map

package/dist/lib/manager-worker.js

@@ -37,7 +37,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-GKHDPXML.js";
+} from "../chunk-O5JHX7FG.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -122,7 +122,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-UMXGONVE.js";
+} from "../chunk-GFX74FGP.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -6669,7 +6669,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.254" : "dev";
+var agtCliVersion = true ? "0.28.255" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7519,7 +7519,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-CHYTU6HG.js");
+      const { collectDiagnostics } = await import("../persistent-session-EKXNGE5B.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7617,7 +7617,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-CHYTU6HG.js");
+      const { collectDiagnostics } = await import("../persistent-session-EKXNGE5B.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7765,7 +7765,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-D74I4CS6.js");
+      } = await import("../responsiveness-probe-DE6TIHJZ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7797,7 +7797,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-D74I4CS6.js");
+        } = await import("../responsiveness-probe-DE6TIHJZ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -10623,7 +10623,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-CHYTU6HG.js");
+        const { collectDiagnostics } = await import("../persistent-session-EKXNGE5B.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -10673,7 +10673,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-CHYTU6HG.js");
+      const { collectDiagnostics } = await import("../persistent-session-EKXNGE5B.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -11064,7 +11064,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-S6LYZUEC.js");
+  } = await import("../claude-pair-runtime-EE3MXQHY.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/index.js

@@ -22746,6 +22746,42 @@ server.tool(
     };
   }
 );
+server.tool(
+  "submit_routine_output",
+  "Submit a gated routine's drafted output for human approval. Use ONLY when your routine prompt says the routine is in its approval phase - the platform delivers the draft after sign-off; do not deliver it yourself.",
+  {
+    routine_id: external_exports.string().describe("The routine id from your routine prompt"),
+    content: external_exports.string().describe("The drafted output, exactly as it should be delivered"),
+    summary: external_exports.string().optional().describe("One-line summary shown on the approval card")
+  },
+  async ({ routine_id, content, summary }) => {
+    let data;
+    try {
+      data = await apiPost("/host/routines/submit-output", {
+        agent_id: AGT_AGENT_ID,
+        routine_id,
+        content,
+        ...summary ? { summary } : {}
+      });
+    } catch (err) {
+      return {
+        content: [{ type: "text", text: `Could not submit: ${err.message}` }]
+      };
+    }
+    if (!data.ok) {
+      return { content: [{ type: "text", text: `Could not submit: ${data.error ?? data.message ?? "unknown error"}` }] };
+    }
+    if (data.gated === false) {
+      return { content: [{ type: "text", text: data.message ?? "This routine is not approval-gated - deliver the output yourself." }] };
+    }
+    return {
+      content: [{
+        type: "text",
+        text: data.duplicate ? `Already submitted (request ${data.request_id}); the approval is still pending. Do not deliver the output yourself.` : `Submitted for approval (request ${data.request_id}). The platform will deliver it once approved - do NOT deliver it yourself, and do not wait around; continue other work.`
+      }]
+    };
+  }
+);
 server.tool(
   "schedule_list",
   "List your scheduled tasks (cron jobs, reminders, recurring work).",
@@ -23385,6 +23421,7 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   "schedule_create",
   "schedule_delete",
   "schedule_update",
+  "submit_routine_output",
   "knowledge_list",
   "knowledge_add",
   "knowledge_update",

package/dist/mcp/origami.js

@@ -39048,6 +39048,49 @@ var INTEGRATION_REGISTRY = [
       ]
     }
   },
+  {
+    // ENG-7439: X Search is a PREMIUM, platform-managed integration on the
+    // Deck / Firecrawl / ElevenLabs model (ADR-0031, epic ENG-6920): Augmented
+    // holds ONE X (Twitter) developer app whose OAuth2 app-only bearer
+    // (X_APP_BEARER_TOKEN) every customer agent's search bills back to, so the
+    // key is a single platform-held secret, NOT a per-agent credential. Auth
+    // type is `none` - customers never enter a key. The one read tool runs on
+    // the Direct-HTTP broker lane (integration-broker-agent-tools.ts, seed
+    // metadata.tools); usage is metered at that chokepoint per resource
+    // RETURNED, mirroring X's own read pricing.
+    //
+    // No `installable` here on purpose: x-search is a Direct-HTTP SEED
+    // integration (integration-definitions.json), so the seed catalog already
+    // makes it picker-visible. This registry entry exists ONLY to carry the
+    // `premium` descriptor that `isPremiumDefinition` reads - which arms the
+    // per-org opt-in gate, the priced acknowledgement modal, and the admin
+    // pricing tab. See docs/adr/0034-x-search-platform-held-credential.md.
+    id: "x-search",
+    name: "X Search",
+    category: "social",
+    description: "Read-only X (Twitter) search: recent public posts by keyword, hashtag, author, or any X search operator - for sentiment sweeps, topic monitoring, and trend research. Augmented Team manages X access for you - there is no key to enter.",
+    supported_auth_types: ["none"],
+    capabilities: [
+      { id: "x-search:read", name: "Search Posts", description: "Search recent public X posts (last ~7 days) via x_search_recent.", access: "read" }
+    ],
+    docs_url: "https://docs.x.com/x-api/posts/recent-search",
+    beta: true,
+    // ENG-7439: premium (billable). X bills us PER RESOURCE returned in a read
+    // response ($0.005/post, $0.010/user via the app-only bearer), so the
+    // integration is usage-priced and metered per resource at the broker
+    // chokepoint. `meters` declares WHAT is metered + the physical unit; the
+    // priced rate card (integration_rate_cards) holds the per-unit amount. Each
+    // event_type must match what the broker writes to integration_usage_events.
+    // Until a rate row is seeded an event prices at 0 (budget gate inert).
+    premium: {
+      pricing: "usage",
+      note: "Billed per resource returned - each post and each unique author in a search result, mirroring X API read pricing.",
+      meters: [
+        { event_type: "post_read", unit: "post" },
+        { event_type: "user_read", unit: "user" }
+      ]
+    }
+  },
   {
     // Seed-catalog toolkit (composed by the ultimate-app-coder bundle). Registered
     // here only so the manager's ensureToolkitCli installs the binary via the

package/dist/{persistent-session-CHYTU6HG.js → persistent-session-EKXNGE5B.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-UMXGONVE.js";
+} from "./chunk-GFX74FGP.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-CHYTU6HG.js.map
+//# sourceMappingURL=persistent-session-EKXNGE5B.js.map

package/dist/{responsiveness-probe-D74I4CS6.js → responsiveness-probe-DE6TIHJZ.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-UMXGONVE.js";
+} from "./chunk-GFX74FGP.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -418,4 +418,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-D74I4CS6.js.map
+//# sourceMappingURL=responsiveness-probe-DE6TIHJZ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.254",
+  "version": "0.28.255",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {