@integrity-labs/agt-cli 0.28.476 → 0.28.477

package/dist/{chunk-IGXBEU55.js → chunk-INPROLVI.js}

@@ -30,7 +30,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-Q6RVMDAC.js";
+} from "./chunk-6GMNDBOU.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -4932,7 +4932,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.476" : "dev";
+var agtCliVersion = true ? "0.28.477" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -7661,4 +7661,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-IGXBEU55.js.map
+//# sourceMappingURL=chunk-INPROLVI.js.map

package/dist/{claude-pair-runtime-DYLJU6EV.js → claude-pair-runtime-S7CBJ5ML.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-QITF76DO.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-3DFUJUF2.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-DYLJU6EV.js.map
+//# sourceMappingURL=claude-pair-runtime-S7CBJ5ML.js.map

package/dist/lib/manager-worker.js

@@ -44,7 +44,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-IGXBEU55.js";
+} from "../chunk-INPROLVI.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -162,7 +162,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-Q6RVMDAC.js";
+} from "../chunk-6GMNDBOU.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -10057,7 +10057,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.476" : "dev";
+var agtCliVersion = true ? "0.28.477" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11220,7 +11220,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-QITF76DO.js");
+      const { collectDiagnostics } = await import("../persistent-session-3DFUJUF2.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11327,7 +11327,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-QITF76DO.js");
+      const { collectDiagnostics } = await import("../persistent-session-3DFUJUF2.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11441,7 +11441,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-BEA4J6IL.js");
+      } = await import("../responsiveness-probe-QBKBBHYD.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11505,7 +11505,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-BEA4J6IL.js");
+        } = await import("../responsiveness-probe-QBKBBHYD.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -14981,7 +14981,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-QITF76DO.js");
+        const { collectDiagnostics } = await import("../persistent-session-3DFUJUF2.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15031,7 +15031,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-QITF76DO.js");
+      const { collectDiagnostics } = await import("../persistent-session-3DFUJUF2.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15489,7 +15489,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-DYLJU6EV.js");
+  } = await import("../claude-pair-runtime-S7CBJ5ML.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -35287,6 +35287,18 @@ var FLAG_REGISTRY = [
     // the sidebar renders inside the active-org cookie's scope, which is exactly
     // the org whose brand should be shown.
     public: true
+  },
+  {
+    key: "agent-recruit",
+    description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`. The write is human-gated either way, but an
+    // unbounded ask is still an unbounded demand on an owner's attention, so the
+    // fail-closed direction on a flag-DB fault is "an agent cannot ask".
+    defaultValue: false,
+    // Turning this on lets agents originate proposals that create customer
+    // infrastructure once approved — same posture as augmented-support-writes.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/index.js

@@ -21357,6 +21357,64 @@ function describeFeatureRequestResult(resp) {
   };
 }
 
+// src/recruit-agent.ts
+function describeRecruitAgentResult(resp) {
+  switch (resp.status) {
+    case "proposed": {
+      const name = resp.code_name ? `"${resp.code_name}"` : "the new agent";
+      return {
+        text: `Nothing has been created yet. Your request for ${name} was sent to an organization owner for approval` + (resp.expires_at ? ` and expires at ${resp.expires_at}` : "") + `.
+
+` + (resp.request_id ? `Check on it with check_approval using request_id "${resp.request_id}".
+
+` : "") + `Do NOT send this request again \u2014 a duplicate just puts a second card in front of the same person. Tell whoever asked that it is waiting on an owner's approval.`,
+        isError: false
+      };
+    }
+    case "feature_disabled":
+      return {
+        text: `${resp.message ?? "Recruiting teammates is not enabled for this organization."} This is a setting, not a fault \u2014 do not retry. Tell your operator what you need and why.`,
+        isError: true
+      };
+    case "agent_limit_reached":
+      return {
+        text: `${resp.message ?? "Your organization's plan agent limit has been reached."} Retrying will not help: someone has to free a slot or upgrade the plan first.`,
+        isError: true
+      };
+    case "name_reserved":
+      return {
+        text: `${resp.message ?? "That display name is reserved."} Pick a different display_name and try once more.`,
+        isError: true
+      };
+    case "no_approver":
+      return {
+        text: `${resp.message ?? "No approval channel is configured for your organization."} Nothing was sent to anyone. Do not retry until an operator has set this up.`,
+        isError: true
+      };
+    case "delivery_failed":
+      return {
+        text: `${resp.message ?? "The approval card could not be delivered."} The request was not left waiting \u2014 it has been closed, so a fresh attempt is needed once the messaging setup is fixed.`,
+        isError: true
+      };
+    case "rate_limited": {
+      const mins = resp.retry_after_seconds ? Math.ceil(resp.retry_after_seconds / 60) : null;
+      return {
+        text: (
+          // Relay the server's own wording like every other branch does; it can
+          // carry a specific quota detail the generic sentence would drop.
+          `${resp.message ?? "Too many pending recruit proposals"}${mins ? ` Try again in about ${mins} minutes.` : ""} This limit exists to protect the person who has to read these \u2014 do not work around it.`
+        ),
+        isError: true
+      };
+    }
+    default:
+      return {
+        text: `Could not request a new teammate${resp.message ? `: ${resp.message}` : ""}. Nothing was created and nobody was asked. Fix what the message describes, or tell your operator \u2014 don't keep retrying.`,
+        isError: true
+      };
+  }
+}
+
 // src/request-reconnect.ts
 function describeReconnectRequestResult(resp) {
   switch (resp.status) {
@@ -22541,6 +22599,62 @@ server.tool(
     return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
   }
 );
+server.tool(
+  "recruit_agent",
+  "Propose a NEW teammate agent for your organization when the work in front of you genuinely needs a different agent \u2014 a distinct role, a separate remit, or capacity you cannot cover yourself. This does NOT create anything: it sends a request to an organization owner, who approves or denies it. Use it sparingly and only when you can say concretely what the new agent is for; do not use it to duplicate yourself, to get around a tool you are missing (use request_feature), or because a single task is large. After calling this, stop and report that it is awaiting approval \u2014 poll with check_approval if you need the outcome.",
+  {
+    code_name: external_exports.string().min(1).max(64).regex(/^[a-z0-9]+(-[a-z0-9]+)*$/, "code_name must be kebab-case").describe(
+      'kebab-case identifier for the proposed agent (lowercase, hyphen-separated), e.g. "invoice-helper". If the name is already taken in your team a numeric suffix is added automatically.'
+    ),
+    display_name: external_exports.string().min(1).max(120).describe('Human-facing name for the proposed agent, e.g. "Invoice Helper".'),
+    description: external_exports.string().min(20).max(2e3).describe(
+      "What this teammate is FOR: its remit, the work it would take on, and why that work needs a separate agent. A human reads this to decide \u2014 be specific and honest. Vague descriptions get denied."
+    ),
+    role: external_exports.string().max(200).optional().describe('Optional short role label for the proposed agent, e.g. "Accounts receivable".'),
+    reason: external_exports.string().max(1e3).optional().describe(
+      "Optional context for the approver: what prompted this now (a spike in volume, a user request, a gap you keep hitting). Shown as context only \u2014 the decision is made on the description above."
+    ),
+    host_id: external_exports.string().uuid().optional().describe(
+      "Optional host (UUID) to place the new agent on. Omit unless you have a specific reason \u2014 it defaults to your own host."
+    )
+  },
+  async (params) => {
+    if (!AGT_AGENT_CODE_NAME) {
+      return {
+        content: [{ type: "text", text: "Error: AGT_AGENT_CODE_NAME not configured." }],
+        isError: true
+      };
+    }
+    let resp;
+    try {
+      resp = await apiPost("/host/recruit-agent", {
+        agent_code_name: AGT_AGENT_CODE_NAME,
+        code_name: params.code_name,
+        display_name: params.display_name,
+        description: params.description,
+        ...params.role ? { role: params.role } : {},
+        ...params.reason ? { reason: params.reason } : {},
+        ...params.host_id ? { host_id: params.host_id } : {}
+      });
+    } catch (err) {
+      process.stderr.write(
+        `recruit_agent: POST /host/recruit-agent failed: ${err instanceof Error ? err.message : String(err)}
+`
+      );
+      return {
+        content: [
+          {
+            type: "text",
+            text: "Could not reach the recruiting service. It is not known whether the request was filed \u2014 do not send it again; tell your operator to check the logs."
+          }
+        ],
+        isError: true
+      };
+    }
+    const { text, isError } = describeRecruitAgentResult(resp);
+    return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
+  }
+);
 server.tool(
   "request_reconnect",
   'Ask for one of YOUR OWN integrations to be reconnected when its tools fail with authentication/authorization errors (expired or revoked credentials, "needs re-auth", 401/403 from the provider). This notifies your human manager with a reconnect link \u2014 you cannot re-auth an integration yourself. Use it once per failing integration instead of retrying the failing tool; do NOT use it for tools you never had, for transient errors (timeouts, rate limits), or to request new integrations (use request_feature for that).',
@@ -23916,6 +24030,10 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   // ENG-7495: agent-requested integration reconnect (always registered). No
   // API tool shares this name; listed here to keep the lockstep guard green.
   "request_reconnect",
+  // ENG-8159: propose a new teammate (always registered — the gate is the
+  // server-side org-scoped agent-recruit flag, see the registration comment).
+  // No API tool shares this name; listed here to keep the lockstep guard green.
+  "recruit_agent",
   // ENG-6686: self-service identity edit (always registered). Listed here to
   // keep the lockstep guard green; no API tool shares this name.
   "update_identity",

package/dist/mcp/origami.js

@@ -41234,6 +41234,18 @@ var FLAG_REGISTRY = [
     // the sidebar renders inside the active-org cookie's scope, which is exactly
     // the org whose brand should be shown.
     public: true
+  },
+  {
+    key: "agent-recruit",
+    description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`. The write is human-gated either way, but an
+    // unbounded ask is still an unbounded demand on an owner's attention, so the
+    // fail-closed direction on a flag-DB fault is "an agent cannot ask".
+    defaultValue: false,
+    // Turning this on lets agents originate proposals that create customer
+    // infrastructure once approved — same posture as augmented-support-writes.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/slack-channel.js

@@ -35512,6 +35512,18 @@ var FLAG_REGISTRY = [
     // the sidebar renders inside the active-org cookie's scope, which is exactly
     // the org whose brand should be shown.
     public: true
+  },
+  {
+    key: "agent-recruit",
+    description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`. The write is human-gated either way, but an
+    // unbounded ask is still an unbounded demand on an owner's attention, so the
+    // fail-closed direction on a flag-DB fault is "an agent cannot ask".
+    defaultValue: false,
+    // Turning this on lets agents originate proposals that create customer
+    // infrastructure once approved — same posture as augmented-support-writes.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/telegram-channel.js

@@ -35838,6 +35838,18 @@ var FLAG_REGISTRY = [
     // the sidebar renders inside the active-org cookie's scope, which is exactly
     // the org whose brand should be shown.
     public: true
+  },
+  {
+    key: "agent-recruit",
+    description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`. The write is human-gated either way, but an
+    // unbounded ask is still an unbounded demand on an owner's attention, so the
+    // fail-closed direction on a flag-DB fault is "an agent cannot ask".
+    defaultValue: false,
+    // Turning this on lets agents originate proposals that create customer
+    // infrastructure once approved — same posture as augmented-support-writes.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/{persistent-session-QITF76DO.js → persistent-session-3DFUJUF2.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-Q6RVMDAC.js";
+} from "./chunk-6GMNDBOU.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-QITF76DO.js.map
+//# sourceMappingURL=persistent-session-3DFUJUF2.js.map

package/dist/{responsiveness-probe-BEA4J6IL.js → responsiveness-probe-QBKBBHYD.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-Q6RVMDAC.js";
+} from "./chunk-6GMNDBOU.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -596,4 +596,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-BEA4J6IL.js.map
+//# sourceMappingURL=responsiveness-probe-QBKBBHYD.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.476",
+  "version": "0.28.477",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {