@integrity-labs/agt-cli 0.28.258 → 0.28.260

package/dist/{chunk-2AWMBQJD.js → chunk-PZJRZPJF.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-L2GVB37X.js";
+} from "./chunk-22BZ2WQM.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5832,7 +5832,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.258" : "dev";
+var agtCliVersion = true ? "0.28.260" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8102,4 +8102,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-2AWMBQJD.js.map
+//# sourceMappingURL=chunk-PZJRZPJF.js.map

package/dist/{claude-pair-runtime-HM6XZJWB.js → claude-pair-runtime-7ZP2OZ5T.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-W4K5XKD7.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-XHJIV3VJ.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-HM6XZJWB.js.map
+//# sourceMappingURL=claude-pair-runtime-7ZP2OZ5T.js.map

package/dist/lib/manager-worker.js

@@ -37,7 +37,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-2AWMBQJD.js";
+} from "../chunk-PZJRZPJF.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -122,7 +122,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-L2GVB37X.js";
+} from "../chunk-22BZ2WQM.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -6669,7 +6669,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.258" : "dev";
+var agtCliVersion = true ? "0.28.260" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7519,7 +7519,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-W4K5XKD7.js");
+      const { collectDiagnostics } = await import("../persistent-session-XHJIV3VJ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7617,7 +7617,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-W4K5XKD7.js");
+      const { collectDiagnostics } = await import("../persistent-session-XHJIV3VJ.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7765,7 +7765,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-Y4FBRFRW.js");
+      } = await import("../responsiveness-probe-JMPLO34I.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7797,7 +7797,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-Y4FBRFRW.js");
+        } = await import("../responsiveness-probe-JMPLO34I.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -10623,7 +10623,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-W4K5XKD7.js");
+        const { collectDiagnostics } = await import("../persistent-session-XHJIV3VJ.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -10673,7 +10673,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-W4K5XKD7.js");
+      const { collectDiagnostics } = await import("../persistent-session-XHJIV3VJ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -11064,7 +11064,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-HM6XZJWB.js");
+  } = await import("../claude-pair-runtime-7ZP2OZ5T.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/index.js

@@ -21506,7 +21506,14 @@ async function refreshToken() {
   const res = await fetch(`${AGT_HOST}/host/exchange`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ host_key: AGT_API_KEY })
+    // ENG-7449 (ADR-0042 P1): scope the main agent token to its own agent. The
+    // general-purpose token verifies AS self (`body.agent_id = AGT_AGENT_ID`) on
+    // every host route; cross-agent tools (kanban_assign / move) carry the peer
+    // as `target_agent` and are gated by the cross-team peer-consent model, NOT
+    // this token's host binding — so self-scope bounds the token without
+    // breaking cross-agent delegation. `agent_id` drops out if AGT_AGENT_ID is
+    // unset (claim-less, unchanged).
+    body: JSON.stringify({ host_key: AGT_API_KEY, agent_id: AGT_AGENT_ID })
   });
   if (!res.ok) {
     const text = await res.text().catch(() => res.statusText);
@@ -21989,7 +21996,10 @@ server.tool(
     status: external_exports.enum(["backlog", "todo", "in_progress"]).optional().describe(
       "Which column the card lands in on the recipient's board (default: todo). Use 'backlog' to stage it as not-yet-actionable work the teammate will pull later, 'todo' for ready-to-work, 'in_progress' if they should start immediately."
     ),
-    deliverable: external_exports.string().optional().describe("Expected output/deliverable from the target")
+    deliverable: external_exports.string().optional().describe("Expected output/deliverable from the target"),
+    deliver_to: external_exports.string().trim().regex(/^[UW][A-Z0-9]{6,}$/, "deliver_to must be a Slack user id (e.g. U01234567)").optional().describe(
+      "Optional: a Slack user id (e.g. U01234567) to DM the completion notice to directly when the target finishes, in ADDITION to the notice landing on your board. Use this to deliver the result straight to the person who wanted it (e.g. the requester's Slack id from the originating message) instead of hand-forwarding it yourself. Must be a Slack user id, not a @handle or display name."
+    )
   },
   async (params) => {
     try {
@@ -22007,7 +22017,9 @@ server.tool(
         // ENG-6967: only send status when set, so the route applies its default
         // ('todo') and the same-team handoff path stays byte-for-byte unchanged.
         ...params.status !== void 0 ? { status: params.status } : {},
-        deliverable: params.deliverable
+        deliverable: params.deliverable,
+        // CS-1438: only sent when set; the route treats absence as board-ack-only.
+        ...params.deliver_to !== void 0 ? { deliver_to: params.deliver_to } : {}
       });
       const where = data.cross_team ? ` on team ${data.target_team ?? params.target_team}` : "";
       return {

package/dist/mcp/origami.js

@@ -39740,6 +39740,19 @@ var FLAG_REGISTRY = [
     defaultValue: false,
     public: true
   },
+  {
+    key: "onboarding-auto-deploy",
+    description: `Auto-deploy the first agent during onboarding (ENG-7378): the agent edit page's Deploy & Test tab fires the existing deploy (draft -> active) automatically once the agent's host is fully deployed (active + manager heartbeating, not provisioning) AND Claude-authenticated (claude_auth_status=valid), replacing the manual "Deploy Agent" click in the recruit funnel. Only draft, non-system_support agents; a failed or timed-out attempt falls back to the manual button (no auto-retry loop).`,
+    flagType: "boolean",
+    // PUBLIC (ADR-0022 §2): a browser-read UI-behaviour gate (mirrors
+    // direct-chat-drawer). Declared safe value is `false`: auto-deploy flips an
+    // agent's status by itself, so a flag-read error must never switch it on.
+    // Ships dark; enable per-org (or fleet-wide) from the admin Feature Flags
+    // page. When off, the recruit funnel keeps the manual Deploy button. No
+    // envVar: a browser-only gate has no host-side override.
+    defaultValue: false,
+    public: true
+  },
   {
     key: "manager-failure-notify",
     description: "Route terminal integration-failure notifications to the agent's human manager (reports_to \u2192 preferred channel) instead of only the agent's own direct-chat (ENG-6334). Boolean gate; ships dark.",

package/dist/mcp/slack-channel.js

@@ -17459,7 +17459,11 @@ function createCrossTeamPeerAuditClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ host_key: apiKey }),
+      // ENG-7449 (ADR-0042 P1): scope the exchanged token to this agent. This
+      // client acts strictly AS self (every event is posted with
+      // `agent_id: agentId`); the foreign `peer_agent_id` is audit DATA, never
+      // the auth subject, so a self-scoped token is correct and complete.
+      body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS2)
     });
     if (!resp.ok) {

package/dist/mcp/telegram-channel.js

@@ -15480,7 +15480,10 @@ function createDefaultPeerRateApiClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ host_key: args.agtApiKey })
+      // ENG-7449 (ADR-0042 P1): scope the token to this agent. Every rate event
+      // is recorded/queried with `agent_id: args.agentId` (self); `peer_bot_id`
+      // is a Telegram bot id, not an agent, so self-scope is correct.
+      body: JSON.stringify({ host_key: args.agtApiKey, agent_id: args.agentId })
     });
     if (!resp.ok) {
       const body = await resp.text().catch(() => "");
@@ -15553,7 +15556,11 @@ function createCrossTeamPeerAuditClient(args) {
     const resp = await fetchImpl(`${base}/host/exchange`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ host_key: apiKey }),
+      // ENG-7449 (ADR-0042 P1): scope the exchanged token to this agent. This
+      // client acts strictly AS self (every event is posted with
+      // `agent_id: agentId`); the foreign `peer_agent_id` is audit DATA, never
+      // the auth subject, so a self-scoped token is correct and complete.
+      body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
       signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
     });
     if (!resp.ok) {

package/dist/{persistent-session-W4K5XKD7.js → persistent-session-XHJIV3VJ.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-L2GVB37X.js";
+} from "./chunk-22BZ2WQM.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-W4K5XKD7.js.map
+//# sourceMappingURL=persistent-session-XHJIV3VJ.js.map

package/dist/{responsiveness-probe-Y4FBRFRW.js → responsiveness-probe-JMPLO34I.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-L2GVB37X.js";
+} from "./chunk-22BZ2WQM.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -418,4 +418,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-Y4FBRFRW.js.map
+//# sourceMappingURL=responsiveness-probe-JMPLO34I.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.258",
+  "version": "0.28.260",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {