@integrity-labs/agt-cli 0.28.475 → 0.28.477

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-Q53LFQVD.js";
+} from "../chunk-INPROLVI.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-LGBI4P2P.js";
+} from "../chunk-6GMNDBOU.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.475" : "dev";
+var cliVersion = true ? "0.28.477" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.475" : "dev";
+var cliVersion2 = true ? "0.28.477" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-LGBI4P2P.js → chunk-6GMNDBOU.js}

@@ -6552,6 +6552,34 @@ var INTEGRATION_REGISTRY = [
     docs_url: "https://higgsfield.ai/mcp",
     beta: true
   },
+  {
+    id: "vercel",
+    name: "Vercel",
+    category: "infrastructure",
+    description: "Check on Vercel app deployments \u2014 status, build/runtime logs \u2014 and search Vercel documentation. Remote streamable-HTTP MCP at https://mcp.vercel.com.",
+    // Same OAuth pattern as Granola/Higgsfield: Claude Code brokers the
+    // browser sign-in at runtime; nothing for the manager API to provision.
+    supported_auth_types: ["none"],
+    capabilities: [
+      { id: "vercel:read-deployments", name: "Read Deployments", description: "List teams/projects, check deployment status, and read build/runtime logs.", access: "read" },
+      { id: "vercel:search-docs", name: "Search Documentation", description: "Search Vercel platform documentation.", access: "read" }
+    ],
+    docs_url: "https://vercel.com/docs/agent-resources/vercel-mcp",
+    // Beta until the headless OAuth flow (and Vercel's OAuth-client allowlist,
+    // which is vendor-side and outside our control) is verified end-to-end.
+    beta: true,
+    // No `auth`/`headers` — host-brokered OAuth (Claude Code authenticates
+    // directly with Vercel; nothing for us to inject). Declaring this here
+    // (rather than a hardcoded buildMcpJson/writeIntegrations branch, the
+    // pre-ENG-8035 Higgsfield-era pattern) lets the generic remote-MCP loop
+    // render the `.mcp.json` entry AND enrolls 'vercel' in the
+    // `registryRemoteMcpKeys` prune universe automatically, so an uninstall
+    // actually removes the entry instead of leaving it stale.
+    remoteMcp: {
+      type: "http",
+      url: "https://mcp.vercel.com"
+    }
+  },
   {
     id: "qmd",
     name: "QMD Memory Search",
@@ -10008,6 +10036,18 @@ var FLAG_REGISTRY = [
     // the sidebar renders inside the active-org cookie's scope, which is exactly
     // the org whose brand should be shown.
     public: true
+  },
+  {
+    key: "agent-recruit",
+    description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`. The write is human-gated either way, but an
+    // unbounded ask is still an unbounded demand on an owner's attention, so the
+    // fail-closed direction on a flag-DB fault is "an agent cannot ask".
+    defaultValue: false,
+    // Turning this on lets agents originate proposals that create customer
+    // infrastructure once approved — same posture as augmented-support-writes.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -14416,4 +14456,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-LGBI4P2P.js.map
+//# sourceMappingURL=chunk-6GMNDBOU.js.map