@integrity-labs/agt-cli 0.28.470 → 0.28.472

package/dist/{claude-pair-runtime-63X4ERBM.js → claude-pair-runtime-62G3PXXX.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-UYMZ2MEI.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-Y77TKSL6.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-63X4ERBM.js.map
+//# sourceMappingURL=claude-pair-runtime-62G3PXXX.js.map

package/dist/lib/manager-worker.js

@@ -44,7 +44,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-BFCHF4XF.js";
+} from "../chunk-KCU4ZTE4.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -166,7 +166,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-GPSEUO2D.js";
+} from "../chunk-YR6ESOCM.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -10038,7 +10038,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.470" : "dev";
+var agtCliVersion = true ? "0.28.472" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11199,7 +11199,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-UYMZ2MEI.js");
+      const { collectDiagnostics } = await import("../persistent-session-Y77TKSL6.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11306,7 +11306,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-UYMZ2MEI.js");
+      const { collectDiagnostics } = await import("../persistent-session-Y77TKSL6.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11420,7 +11420,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-WXHKKJ7N.js");
+      } = await import("../responsiveness-probe-KIPMD2UJ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11484,7 +11484,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-WXHKKJ7N.js");
+        } = await import("../responsiveness-probe-KIPMD2UJ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -14952,7 +14952,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-UYMZ2MEI.js");
+        const { collectDiagnostics } = await import("../persistent-session-Y77TKSL6.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15002,7 +15002,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-UYMZ2MEI.js");
+      const { collectDiagnostics } = await import("../persistent-session-Y77TKSL6.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15460,7 +15460,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-63X4ERBM.js");
+  } = await import("../claude-pair-runtime-62G3PXXX.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/index.js

@@ -21104,6 +21104,15 @@ function renderKanbanList(items) {
 var HUMAN_ASSIGNED_SECTION_HEADING = "Assigned to a person (not yours to action)";
 var HUMAN_ASSIGNED_SECTION_NOTE = "_These belong to a person, not to you. You cannot move, note or complete them \u2014 every kanban write is refused. If the work is finished (or was never really theirs), use `kanban_recall` to pull the card back onto your board, then close it as normal._";
 
+// src/kanban-person-waiting-kind.ts
+function isPersonWaitingKindMcp(kind) {
+  if (kind === void 0 || kind === null || kind === "") return true;
+  return kind === "human" || kind === "approval" || kind === "pr-review" || kind === "pr-merged";
+}
+function personWaitingKindRejection(kind) {
+  return `Error: waiting_on_person cannot be used with waiting_kind="${kind ?? "unset"}". A "${kind}" wait is parked on a system or is unclassified, so there is no one to notify. Name a person on a "human" decision, or on a "pr-review"/"pr-merged" wait (the reviewer or whoever has to tap merge), or drop waiting_on_person.`;
+}
+
 // src/kanban-write-outcome.ts
 function describeKanbanWriteFailure(failure, label) {
   if (!failure) return null;
@@ -21944,7 +21953,7 @@ server.tool(
         'Optional, best with waiting_kind="human": 2-5 short answer options to offer the person as one-click buttons (e.g. ["Ship it", "Hold", "Needs changes"]). Keep them short. They can still add a free-text comment alongside a choice. Omit for an open-ended human wait (they just get a comment box).'
       ),
       waiting_on_person: external_exports.string().optional().describe(
-        `Only with waiting_kind="human": the Slack user id of the ONE person whose decision you are parked on (e.g. "U0123ABCD" - the same id you would pass to deliver_to). This puts the card in that person's "Awaiting you" queue and notifies them, so your ask does not sit unseen. It does NOT reassign the card - you still own driving it to done and you resume as soon as they answer. Set it whenever you know who has to act; omit only if genuinely nobody specific does.`
+        `The Slack user id of the ONE person who has to act before you can continue (e.g. "U0123ABCD" - the same id you would pass to deliver_to). This puts the card in that person's "Awaiting you" queue and notifies them, so your ask does not sit unseen. It does NOT reassign the card - you still own driving it to done and you resume as soon as they answer. Valid on "human", "approval", "pr-review" and "pr-merged" waits (ENG-8291: a PR waiting on a review or a merge tap IS waiting on a person, and naming them is the whole point). NOT valid on "external" or "other", which are parked on a system or unclassified - there is nobody to notify. Set it whenever you know who has to act; omit only if genuinely nobody specific does.`
       )
     } : {}
   },
@@ -21979,14 +21988,9 @@ server.tool(
         isError: true
       };
     }
-    if (p.waiting_on_person && p.waiting_kind !== "human") {
+    if (p.waiting_on_person && !isPersonWaitingKindMcp(p.waiting_kind)) {
       return {
-        content: [
-          {
-            type: "text",
-            text: `Error: waiting_on_person is only valid with waiting_kind="human" (got "${p.waiting_kind ?? "unset"}"). Use waiting_kind="human" when one specific person must decide; for a PR use "pr-review"/"pr-merged" with waiting_repo + waiting_pr, and for a non-human blocker use "external"/"other" with waiting_on.`
-          }
-        ],
+        content: [{ type: "text", text: personWaitingKindRejection(p.waiting_kind) }],
         isError: true
       };
     }

package/dist/mcp/remote-oauth-proxy.js

@@ -39,14 +39,27 @@ function parsePreEnableToolsets(raw) {
   }
   return out;
 }
+var ACTIVATION_TOOL = "enable_toolset";
 function buildEnableToolsetRequest(toolset) {
   return JSON.stringify({
     jsonrpc: "2.0",
     id: `agt-preenable-${toolset}`,
     method: "tools/call",
-    params: { name: "enable_toolset", arguments: { name: toolset } }
+    params: { name: ACTIVATION_TOOL, arguments: { name: toolset } }
   });
 }
+function stripActivationTool(tools) {
+  return tools.filter((t) => toolName(t) !== ACTIVATION_TOOL);
+}
+function isManagedActivationCall(method, params) {
+  if (method !== "tools/call") return false;
+  const name = params && typeof params === "object" && typeof params.name === "string" ? params.name : "";
+  return name === ACTIVATION_TOOL;
+}
+function activationRefusalMessage(label2, managed) {
+  const groups = managed.length > 0 ? managed.join(", ") : "none";
+  return `${label2}: toolset activation is managed by this connection, not by the agent. This connection manages these toolsets, and their tools are already in this session's tool list: ${groups}. Calling ${ACTIVATION_TOOL} cannot add a callable tool \u2014 the tool list is fixed for the session, so anything it reported as "newly available" would still answer "No such tool available". Call the tool you need directly; if it is not in your tool list, it is not enabled for this integration.`;
+}
 function buildToolsListRequest() {
   return JSON.stringify({ jsonrpc: "2.0", id: "agt-union-list", method: "tools/list", params: {} });
 }
@@ -250,6 +263,10 @@ function ensureUnionManifest(token) {
   return unionOnce;
 }
 async function forward(line, id, isNotification, method, params) {
+  if (preEnableToolsets.length > 0 && isManagedActivationCall(method, params)) {
+    logErr(`refused agent-issued ${ACTIVATION_TOOL} (activation is proxy-managed)`);
+    return isNotification ? [] : [jsonRpcError(id, -32601, activationRefusalMessage(label, preEnableToolsets))];
+  }
   const token = readCurrentToken(tokenFile, tokenVar);
   if (!token) {
     logErr(`no token in ${tokenFile} (var ${tokenVar})`);
@@ -259,6 +276,7 @@ async function forward(line, id, isNotification, method, params) {
     await ensureUnionManifest(token);
     let tools = [...unionToolByName.values()];
     if (toolAllowlist.size > 0) tools = tools.filter((t) => toolAllowlist.has(toolName(t)));
+    tools = stripActivationTool(tools);
     return [JSON.stringify({ jsonrpc: "2.0", id: id ?? null, result: { tools } })];
   }
   if (method === "tools/call" && preEnableToolsets.length > 0) {
@@ -384,12 +402,16 @@ if (invokedDirectly) {
   void main();
 }
 export {
+  ACTIVATION_TOOL,
+  activationRefusalMessage,
   buildEnableToolsetRequest,
   buildForwardHeaders,
   buildToolsListRequest,
   extractJsonRpcMessages,
   extractToolsArray,
   filterToolsListMessage,
+  forward,
+  isManagedActivationCall,
   isToolCallBlocked,
   main,
   parseEnableToolsetResponse,
@@ -397,5 +419,6 @@ export {
   parsePreEnableToolsets,
   parseToolAllowlist,
   readCurrentToken,
+  stripActivationTool,
   toolName
 };

package/dist/{persistent-session-UYMZ2MEI.js → persistent-session-Y77TKSL6.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-GPSEUO2D.js";
+} from "./chunk-YR6ESOCM.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-UYMZ2MEI.js.map
+//# sourceMappingURL=persistent-session-Y77TKSL6.js.map

package/dist/{responsiveness-probe-WXHKKJ7N.js → responsiveness-probe-KIPMD2UJ.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-GPSEUO2D.js";
+} from "./chunk-YR6ESOCM.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -596,4 +596,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-WXHKKJ7N.js.map
+//# sourceMappingURL=responsiveness-probe-KIPMD2UJ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.470",
+  "version": "0.28.472",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {