@integrity-labs/agt-cli 0.28.257 → 0.28.259

package/dist/{chunk-FKVH7UZA.js → chunk-VPDUKN7W.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-L2GVB37X.js";
+} from "./chunk-22BZ2WQM.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5832,7 +5832,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.257" : "dev";
+var agtCliVersion = true ? "0.28.259" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8102,4 +8102,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-FKVH7UZA.js.map
+//# sourceMappingURL=chunk-VPDUKN7W.js.map

package/dist/{claude-pair-runtime-HM6XZJWB.js → claude-pair-runtime-7ZP2OZ5T.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-W4K5XKD7.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-XHJIV3VJ.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-HM6XZJWB.js.map
+//# sourceMappingURL=claude-pair-runtime-7ZP2OZ5T.js.map

package/dist/lib/manager-worker.js

@@ -37,7 +37,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-FKVH7UZA.js";
+} from "../chunk-VPDUKN7W.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -122,7 +122,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-L2GVB37X.js";
+} from "../chunk-22BZ2WQM.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -6669,7 +6669,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.257" : "dev";
+var agtCliVersion = true ? "0.28.259" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7519,7 +7519,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-W4K5XKD7.js");
+      const { collectDiagnostics } = await import("../persistent-session-XHJIV3VJ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7617,7 +7617,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-W4K5XKD7.js");
+      const { collectDiagnostics } = await import("../persistent-session-XHJIV3VJ.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7765,7 +7765,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-Y4FBRFRW.js");
+      } = await import("../responsiveness-probe-JMPLO34I.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7797,7 +7797,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-Y4FBRFRW.js");
+        } = await import("../responsiveness-probe-JMPLO34I.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -10623,7 +10623,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-W4K5XKD7.js");
+        const { collectDiagnostics } = await import("../persistent-session-XHJIV3VJ.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -10673,7 +10673,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-W4K5XKD7.js");
+      const { collectDiagnostics } = await import("../persistent-session-XHJIV3VJ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -11064,7 +11064,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-HM6XZJWB.js");
+  } = await import("../claude-pair-runtime-7ZP2OZ5T.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -13880,7 +13880,7 @@ function createInboundContextClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
     });
@@ -14699,7 +14699,7 @@ function createKanbanCardActiveClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS2)
     });
@@ -14929,7 +14929,7 @@ async function getAuthToken() {
   const res = await fetchWithTimeout(`${AGT_HOST}/host/exchange`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+    // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
     // AGT_AGENT_ID undefined => JSON drops it => host-wide (backward compatible).
     body: JSON.stringify({ host_key: AGT_API_KEY, agent_id: AGT_AGENT_ID })
   }, HTTP_TIMEOUT_MS);

package/dist/mcp/index.js

@@ -21989,7 +21989,10 @@ server.tool(
     status: external_exports.enum(["backlog", "todo", "in_progress"]).optional().describe(
       "Which column the card lands in on the recipient's board (default: todo). Use 'backlog' to stage it as not-yet-actionable work the teammate will pull later, 'todo' for ready-to-work, 'in_progress' if they should start immediately."
     ),
-    deliverable: external_exports.string().optional().describe("Expected output/deliverable from the target")
+    deliverable: external_exports.string().optional().describe("Expected output/deliverable from the target"),
+    deliver_to: external_exports.string().trim().regex(/^[UW][A-Z0-9]{6,}$/, "deliver_to must be a Slack user id (e.g. U01234567)").optional().describe(
+      "Optional: a Slack user id (e.g. U01234567) to DM the completion notice to directly when the target finishes, in ADDITION to the notice landing on your board. Use this to deliver the result straight to the person who wanted it (e.g. the requester's Slack id from the originating message) instead of hand-forwarding it yourself. Must be a Slack user id, not a @handle or display name."
+    )
   },
   async (params) => {
     try {
@@ -22007,7 +22010,9 @@ server.tool(
         // ENG-6967: only send status when set, so the route applies its default
         // ('todo') and the same-team handoff path stays byte-for-byte unchanged.
         ...params.status !== void 0 ? { status: params.status } : {},
-        deliverable: params.deliverable
+        deliverable: params.deliverable,
+        // CS-1438: only sent when set; the route treats absence as board-ack-only.
+        ...params.deliver_to !== void 0 ? { deliver_to: params.deliver_to } : {}
       });
       const where = data.cross_team ? ` on team ${data.target_team ?? params.target_team}` : "";
       return {

package/dist/mcp/origami.js

@@ -39740,6 +39740,19 @@ var FLAG_REGISTRY = [
     defaultValue: false,
     public: true
   },
+  {
+    key: "onboarding-auto-deploy",
+    description: `Auto-deploy the first agent during onboarding (ENG-7378): the agent edit page's Deploy & Test tab fires the existing deploy (draft -> active) automatically once the agent's host is fully deployed (active + manager heartbeating, not provisioning) AND Claude-authenticated (claude_auth_status=valid), replacing the manual "Deploy Agent" click in the recruit funnel. Only draft, non-system_support agents; a failed or timed-out attempt falls back to the manual button (no auto-retry loop).`,
+    flagType: "boolean",
+    // PUBLIC (ADR-0022 §2): a browser-read UI-behaviour gate (mirrors
+    // direct-chat-drawer). Declared safe value is `false`: auto-deploy flips an
+    // agent's status by itself, so a flag-read error must never switch it on.
+    // Ships dark; enable per-org (or fleet-wide) from the admin Feature Flags
+    // page. When off, the recruit funnel keeps the manual Deploy button. No
+    // envVar: a browser-only gate has no host-side override.
+    defaultValue: false,
+    public: true
+  },
   {
     key: "manager-failure-notify",
     description: "Route terminal integration-failure notifications to the agent's human manager (reports_to \u2192 preferred channel) instead of only the agent's own direct-chat (ENG-6334). Boolean gate; ships dark.",

package/dist/mcp/slack-channel.js

@@ -6819,7 +6819,7 @@ async function getAuthToken(cfg) {
   const res = await fetch(`${cfg.apiHost}/host/exchange`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    // ENG-7436 (ADR-0041 P1): scope the exchange to this agent so the API can
+    // ENG-7436 (ADR-0042 P1): scope the exchange to this agent so the API can
     // enforce the per-agent org gate and bind the token to one agent. This is a
     // per-agent in-container caller (RuntimeConfig.agentId), so it is the
     // natural place to send agent_id; the host-level manager exchange stays
@@ -16071,7 +16071,7 @@ function createKanbanCardActiveClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
     });
@@ -17526,7 +17526,7 @@ function createConversationIngestClient(args) {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       // ENG-7438: scope the exchange to this agent so the API can apply the
-      // per-agent org gate (ADR-0041 P1). Self-scoped caller.
+      // per-agent org gate (ADR-0042 P1). Self-scoped caller.
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS3)
     });
@@ -17599,7 +17599,7 @@ function createInboundContextClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS4)
     });
@@ -17670,7 +17670,7 @@ function createSlackBotUserIdClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS5)
     });

package/dist/mcp/teams-channel.js

@@ -14441,7 +14441,7 @@ function startMsteamsInboundPuller(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
     });
@@ -14578,7 +14578,7 @@ function createInboundContextClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS2)
     });

package/dist/mcp/telegram-channel.js

@@ -6819,7 +6819,7 @@ async function getAuthToken(cfg) {
   const res = await fetch(`${cfg.apiHost}/host/exchange`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    // ENG-7436 (ADR-0041 P1): scope the exchange to this agent so the API can
+    // ENG-7436 (ADR-0042 P1): scope the exchange to this agent so the API can
     // enforce the per-agent org gate and bind the token to one agent. This is a
     // per-agent in-container caller (RuntimeConfig.agentId), so it is the
     // natural place to send agent_id; the host-level manager exchange stays
@@ -15619,7 +15619,7 @@ function createDiagnosticEventClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS2)
     });
@@ -16244,7 +16244,7 @@ function createObservedChatClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS3)
     });
@@ -16327,7 +16327,7 @@ function createConversationIngestClient(args) {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       // ENG-7438: scope the exchange to this agent so the API can apply the
-      // per-agent org gate (ADR-0041 P1). Self-scoped caller.
+      // per-agent org gate (ADR-0042 P1). Self-scoped caller.
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS4)
     });
@@ -16400,7 +16400,7 @@ function createInboundContextClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS5)
     });
@@ -16952,7 +16952,7 @@ function createKanbanCardActiveClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0041 P1).
+      // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS6)
     });

package/dist/{persistent-session-W4K5XKD7.js → persistent-session-XHJIV3VJ.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-L2GVB37X.js";
+} from "./chunk-22BZ2WQM.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-W4K5XKD7.js.map
+//# sourceMappingURL=persistent-session-XHJIV3VJ.js.map

package/dist/{responsiveness-probe-Y4FBRFRW.js → responsiveness-probe-JMPLO34I.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-L2GVB37X.js";
+} from "./chunk-22BZ2WQM.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -418,4 +418,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-Y4FBRFRW.js.map
+//# sourceMappingURL=responsiveness-probe-JMPLO34I.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.257",
+  "version": "0.28.259",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {