@integrity-labs/agt-cli 0.28.268 → 0.28.269

package/dist/{claude-pair-runtime-CXIVEO6R.js → claude-pair-runtime-CXM2IH7U.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-FGGXFAJH.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-ZQDTWV3D.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-CXIVEO6R.js.map
+//# sourceMappingURL=claude-pair-runtime-CXM2IH7U.js.map

package/dist/lib/manager-worker.js

@@ -38,7 +38,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-PA3PWATY.js";
+} from "../chunk-ZH3CEX2A.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -123,7 +123,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-GBVZDTCB.js";
+} from "../chunk-JW6CWBNF.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -6700,7 +6700,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.268" : "dev";
+var agtCliVersion = true ? "0.28.269" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7550,7 +7550,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-FGGXFAJH.js");
+      const { collectDiagnostics } = await import("../persistent-session-ZQDTWV3D.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7648,7 +7648,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-FGGXFAJH.js");
+      const { collectDiagnostics } = await import("../persistent-session-ZQDTWV3D.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7796,7 +7796,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-2734PYS6.js");
+      } = await import("../responsiveness-probe-74SDDDGN.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7828,7 +7828,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-2734PYS6.js");
+        } = await import("../responsiveness-probe-74SDDDGN.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -10686,7 +10686,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-FGGXFAJH.js");
+        const { collectDiagnostics } = await import("../persistent-session-ZQDTWV3D.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -10736,7 +10736,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-FGGXFAJH.js");
+      const { collectDiagnostics } = await import("../persistent-session-ZQDTWV3D.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -11127,7 +11127,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-CXIVEO6R.js");
+  } = await import("../claude-pair-runtime-CXM2IH7U.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/remote-oauth-proxy.js

@@ -11,16 +11,38 @@ var URL_ENV = "AGT_REMOTE_MCP_URL";
 var TOKEN_FILE_ENV = "AGT_REMOTE_MCP_TOKEN_FILE";
 var TOKEN_VAR_ENV = "AGT_REMOTE_MCP_TOKEN_VAR";
 var ALLOWLIST_ENV = "AGT_REMOTE_MCP_TOOL_ALLOWLIST";
+var PREENABLE_ENV = "AGT_REMOTE_MCP_PREENABLE_TOOLSETS";
 var REMOTE_FETCH_TIMEOUT_MS = 3e4;
 var remoteUrl = process.env[URL_ENV] ?? "";
 var tokenFile = process.env[TOKEN_FILE_ENV] ?? "";
 var tokenVar = process.env[TOKEN_VAR_ENV] ?? "";
 var label = process.env["AGT_REMOTE_MCP_LABEL"] || tokenVar || "remote-oauth";
 var toolAllowlist = parseToolAllowlist(process.env[ALLOWLIST_ENV] ?? "");
+var preEnableToolsets = parsePreEnableToolsets(process.env[PREENABLE_ENV] ?? "");
 function logErr(msg) {
   process.stderr.write(`[remote-oauth-proxy:${label}] ${msg}
 `);
 }
+function parsePreEnableToolsets(raw) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const part of (raw || "").split(",")) {
+    const name = part.trim();
+    if (name && !seen.has(name)) {
+      seen.add(name);
+      out.push(name);
+    }
+  }
+  return out;
+}
+function buildEnableToolsetRequest(toolset) {
+  return JSON.stringify({
+    jsonrpc: "2.0",
+    id: `agt-preenable-${toolset}`,
+    method: "tools/call",
+    params: { name: "enable_toolset", arguments: { name: toolset } }
+  });
+}
 function parseToolAllowlist(raw) {
   const out = /* @__PURE__ */ new Set();
   for (const part of (raw || "").split(",")) {
@@ -104,12 +126,54 @@ function extractJsonRpcMessages(contentType, body) {
   }
   return out;
 }
+var preEnabledOnce = null;
+function ensurePreEnabled(token) {
+  if (preEnabledOnce) return preEnabledOnce;
+  preEnabledOnce = Promise.allSettled(
+    preEnableToolsets.map(async (name) => {
+      const res = await fetch(remoteUrl, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Accept: "application/json, text/event-stream",
+          Authorization: `Bearer ${token}`
+        },
+        body: buildEnableToolsetRequest(name),
+        signal: AbortSignal.timeout(REMOTE_FETCH_TIMEOUT_MS)
+      });
+      const body = await res.text().catch(() => "");
+      if (!res.ok) {
+        throw new Error(`HTTP ${res.status}${body ? ` (${body.slice(0, 200).replace(/\s+/g, " ").trim()})` : ""}`);
+      }
+      let rpcError;
+      try {
+        rpcError = JSON.parse(body)?.error?.message;
+      } catch {
+      }
+      if (rpcError) throw new Error(rpcError);
+      return name;
+    })
+  ).then((results) => {
+    results.forEach((r, i) => {
+      const name = preEnableToolsets[i];
+      if (r.status === "fulfilled") {
+        logErr(`pre-enabled toolset "${name}"`);
+      } else {
+        logErr(`pre-enable toolset "${name}" failed: ${r.reason.message}`);
+      }
+    });
+  });
+  return preEnabledOnce;
+}
 async function forward(line, id, isNotification, method) {
   const token = readCurrentToken(tokenFile, tokenVar);
   if (!token) {
     logErr(`no token in ${tokenFile} (var ${tokenVar})`);
     return isNotification ? [] : [jsonRpcError(id, -32e3, `${label}: no current access token available (reconnect the integration)`)];
   }
+  if (method === "tools/list" && preEnableToolsets.length > 0) {
+    await ensurePreEnabled(token);
+  }
   let res;
   try {
     res = await fetch(remoteUrl, {
@@ -224,10 +288,12 @@ if (invokedDirectly) {
   void main();
 }
 export {
+  buildEnableToolsetRequest,
   extractJsonRpcMessages,
   filterToolsListMessage,
   isToolCallBlocked,
   main,
+  parsePreEnableToolsets,
   parseToolAllowlist,
   readCurrentToken
 };

package/dist/{persistent-session-FGGXFAJH.js → persistent-session-ZQDTWV3D.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-GBVZDTCB.js";
+} from "./chunk-JW6CWBNF.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-FGGXFAJH.js.map
+//# sourceMappingURL=persistent-session-ZQDTWV3D.js.map

package/dist/{responsiveness-probe-2734PYS6.js → responsiveness-probe-74SDDDGN.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-GBVZDTCB.js";
+} from "./chunk-JW6CWBNF.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -418,4 +418,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-2734PYS6.js.map
+//# sourceMappingURL=responsiveness-probe-74SDDDGN.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.268",
+  "version": "0.28.269",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {