@integrity-labs/agt-cli 0.28.476 → 0.28.478

package/dist/mcp/direct-chat-channel.js

@@ -33505,6 +33505,10 @@ var INSTALLABLE_NATIVE_INTEGRATION_IDS = INSTALLABLE_NATIVE_INTEGRATIONS.map((i)
 var MB2 = 1024 * 1024;
 var DIRECT_CHAT_UPLOAD_MAX_BYTES = 10 * MB2;
 
+// ../core/dist/direct-chat/notice-display.js
+var AGENT_DIRECTED_NOTICE_KINDS = ["scheduled_task_nudge", "kanban_check"];
+var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
+
 // ../core/dist/onboarding/state-machine.js
 var AREA_ORDER = [
   "framing",
@@ -35287,6 +35291,18 @@ var FLAG_REGISTRY = [
     // the sidebar renders inside the active-org cookie's scope, which is exactly
     // the org whose brand should be shown.
     public: true
+  },
+  {
+    key: "agent-recruit",
+    description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`. The write is human-gated either way, but an
+    // unbounded ask is still an unbounded demand on an owner's attention, so the
+    // fail-closed direction on a flag-DB fault is "an agent cannot ask".
+    defaultValue: false,
+    // Turning this on lets agents originate proposals that create customer
+    // infrastructure once approved — same posture as augmented-support-writes.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/index.js

@@ -21357,6 +21357,64 @@ function describeFeatureRequestResult(resp) {
   };
 }
 
+// src/recruit-agent.ts
+function describeRecruitAgentResult(resp) {
+  switch (resp.status) {
+    case "proposed": {
+      const name = resp.code_name ? `"${resp.code_name}"` : "the new agent";
+      return {
+        text: `Nothing has been created yet. Your request for ${name} was sent to an organization owner for approval` + (resp.expires_at ? ` and expires at ${resp.expires_at}` : "") + `.
+
+` + (resp.request_id ? `Check on it with check_approval using request_id "${resp.request_id}".
+
+` : "") + `Do NOT send this request again \u2014 a duplicate just puts a second card in front of the same person. Tell whoever asked that it is waiting on an owner's approval.`,
+        isError: false
+      };
+    }
+    case "feature_disabled":
+      return {
+        text: `${resp.message ?? "Recruiting teammates is not enabled for this organization."} This is a setting, not a fault \u2014 do not retry. Tell your operator what you need and why.`,
+        isError: true
+      };
+    case "agent_limit_reached":
+      return {
+        text: `${resp.message ?? "Your organization's plan agent limit has been reached."} Retrying will not help: someone has to free a slot or upgrade the plan first.`,
+        isError: true
+      };
+    case "name_reserved":
+      return {
+        text: `${resp.message ?? "That display name is reserved."} Pick a different display_name and try once more.`,
+        isError: true
+      };
+    case "no_approver":
+      return {
+        text: `${resp.message ?? "No approval channel is configured for your organization."} Nothing was sent to anyone. Do not retry until an operator has set this up.`,
+        isError: true
+      };
+    case "delivery_failed":
+      return {
+        text: `${resp.message ?? "The approval card could not be delivered."} The request was not left waiting \u2014 it has been closed, so a fresh attempt is needed once the messaging setup is fixed.`,
+        isError: true
+      };
+    case "rate_limited": {
+      const mins = resp.retry_after_seconds ? Math.ceil(resp.retry_after_seconds / 60) : null;
+      return {
+        text: (
+          // Relay the server's own wording like every other branch does; it can
+          // carry a specific quota detail the generic sentence would drop.
+          `${resp.message ?? "Too many pending recruit proposals"}${mins ? ` Try again in about ${mins} minutes.` : ""} This limit exists to protect the person who has to read these \u2014 do not work around it.`
+        ),
+        isError: true
+      };
+    }
+    default:
+      return {
+        text: `Could not request a new teammate${resp.message ? `: ${resp.message}` : ""}. Nothing was created and nobody was asked. Fix what the message describes, or tell your operator \u2014 don't keep retrying.`,
+        isError: true
+      };
+  }
+}
+
 // src/request-reconnect.ts
 function describeReconnectRequestResult(resp) {
   switch (resp.status) {
@@ -22541,6 +22599,62 @@ server.tool(
     return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
   }
 );
+server.tool(
+  "recruit_agent",
+  "Propose a NEW teammate agent for your organization when the work in front of you genuinely needs a different agent \u2014 a distinct role, a separate remit, or capacity you cannot cover yourself. This does NOT create anything: it sends a request to an organization owner, who approves or denies it. Use it sparingly and only when you can say concretely what the new agent is for; do not use it to duplicate yourself, to get around a tool you are missing (use request_feature), or because a single task is large. After calling this, stop and report that it is awaiting approval \u2014 poll with check_approval if you need the outcome.",
+  {
+    code_name: external_exports.string().min(1).max(64).regex(/^[a-z0-9]+(-[a-z0-9]+)*$/, "code_name must be kebab-case").describe(
+      'kebab-case identifier for the proposed agent (lowercase, hyphen-separated), e.g. "invoice-helper". If the name is already taken in your team a numeric suffix is added automatically.'
+    ),
+    display_name: external_exports.string().min(1).max(120).describe('Human-facing name for the proposed agent, e.g. "Invoice Helper".'),
+    description: external_exports.string().min(20).max(2e3).describe(
+      "What this teammate is FOR: its remit, the work it would take on, and why that work needs a separate agent. A human reads this to decide \u2014 be specific and honest. Vague descriptions get denied."
+    ),
+    role: external_exports.string().max(200).optional().describe('Optional short role label for the proposed agent, e.g. "Accounts receivable".'),
+    reason: external_exports.string().max(1e3).optional().describe(
+      "Optional context for the approver: what prompted this now (a spike in volume, a user request, a gap you keep hitting). Shown as context only \u2014 the decision is made on the description above."
+    ),
+    host_id: external_exports.string().uuid().optional().describe(
+      "Optional host (UUID) to place the new agent on. Omit unless you have a specific reason \u2014 it defaults to your own host."
+    )
+  },
+  async (params) => {
+    if (!AGT_AGENT_CODE_NAME) {
+      return {
+        content: [{ type: "text", text: "Error: AGT_AGENT_CODE_NAME not configured." }],
+        isError: true
+      };
+    }
+    let resp;
+    try {
+      resp = await apiPost("/host/recruit-agent", {
+        agent_code_name: AGT_AGENT_CODE_NAME,
+        code_name: params.code_name,
+        display_name: params.display_name,
+        description: params.description,
+        ...params.role ? { role: params.role } : {},
+        ...params.reason ? { reason: params.reason } : {},
+        ...params.host_id ? { host_id: params.host_id } : {}
+      });
+    } catch (err) {
+      process.stderr.write(
+        `recruit_agent: POST /host/recruit-agent failed: ${err instanceof Error ? err.message : String(err)}
+`
+      );
+      return {
+        content: [
+          {
+            type: "text",
+            text: "Could not reach the recruiting service. It is not known whether the request was filed \u2014 do not send it again; tell your operator to check the logs."
+          }
+        ],
+        isError: true
+      };
+    }
+    const { text, isError } = describeRecruitAgentResult(resp);
+    return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
+  }
+);
 server.tool(
   "request_reconnect",
   'Ask for one of YOUR OWN integrations to be reconnected when its tools fail with authentication/authorization errors (expired or revoked credentials, "needs re-auth", 401/403 from the provider). This notifies your human manager with a reconnect link \u2014 you cannot re-auth an integration yourself. Use it once per failing integration instead of retrying the failing tool; do NOT use it for tools you never had, for transient errors (timeouts, rate limits), or to request new integrations (use request_feature for that).',
@@ -23916,6 +24030,10 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   // ENG-7495: agent-requested integration reconnect (always registered). No
   // API tool shares this name; listed here to keep the lockstep guard green.
   "request_reconnect",
+  // ENG-8159: propose a new teammate (always registered — the gate is the
+  // server-side org-scoped agent-recruit flag, see the registration comment).
+  // No API tool shares this name; listed here to keep the lockstep guard green.
+  "recruit_agent",
   // ENG-6686: self-service identity edit (always registered). Listed here to
   // keep the lockstep guard green; no API tool shares this name.
   "update_identity",

package/dist/mcp/origami.js

@@ -39832,6 +39832,10 @@ var INSTALLABLE_NATIVE_INTEGRATION_IDS = INSTALLABLE_NATIVE_INTEGRATIONS.map((i)
 var MB2 = 1024 * 1024;
 var DIRECT_CHAT_UPLOAD_MAX_BYTES = 10 * MB2;
 
+// ../core/dist/direct-chat/notice-display.js
+var AGENT_DIRECTED_NOTICE_KINDS = ["scheduled_task_nudge", "kanban_check"];
+var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
+
 // ../core/dist/onboarding/state-machine.js
 var AREA_ORDER = [
   "framing",
@@ -41234,6 +41238,18 @@ var FLAG_REGISTRY = [
     // the sidebar renders inside the active-org cookie's scope, which is exactly
     // the org whose brand should be shown.
     public: true
+  },
+  {
+    key: "agent-recruit",
+    description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`. The write is human-gated either way, but an
+    // unbounded ask is still an unbounded demand on an owner's attention, so the
+    // fail-closed direction on a flag-DB fault is "an agent cannot ask".
+    defaultValue: false,
+    // Turning this on lets agents originate proposals that create customer
+    // infrastructure once approved — same posture as augmented-support-writes.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/slack-channel.js

@@ -33727,6 +33727,10 @@ var INSTALLABLE_NATIVE_INTEGRATION_IDS = INSTALLABLE_NATIVE_INTEGRATIONS.map((i)
 var MB2 = 1024 * 1024;
 var DIRECT_CHAT_UPLOAD_MAX_BYTES = 10 * MB2;
 
+// ../core/dist/direct-chat/notice-display.js
+var AGENT_DIRECTED_NOTICE_KINDS = ["scheduled_task_nudge", "kanban_check"];
+var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
+
 // ../core/dist/onboarding/state-machine.js
 var AREA_ORDER = [
   "framing",
@@ -35512,6 +35516,18 @@ var FLAG_REGISTRY = [
     // the sidebar renders inside the active-org cookie's scope, which is exactly
     // the org whose brand should be shown.
     public: true
+  },
+  {
+    key: "agent-recruit",
+    description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`. The write is human-gated either way, but an
+    // unbounded ask is still an unbounded demand on an owner's attention, so the
+    // fail-closed direction on a flag-DB fault is "an agent cannot ask".
+    defaultValue: false,
+    // Turning this on lets agents originate proposals that create customer
+    // infrastructure once approved — same posture as augmented-support-writes.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/telegram-channel.js

@@ -34053,6 +34053,10 @@ var INSTALLABLE_NATIVE_INTEGRATION_IDS = INSTALLABLE_NATIVE_INTEGRATIONS.map((i)
 var MB2 = 1024 * 1024;
 var DIRECT_CHAT_UPLOAD_MAX_BYTES = 10 * MB2;
 
+// ../core/dist/direct-chat/notice-display.js
+var AGENT_DIRECTED_NOTICE_KINDS = ["scheduled_task_nudge", "kanban_check"];
+var AGENT_DIRECTED_KIND_SET = new Set(AGENT_DIRECTED_NOTICE_KINDS);
+
 // ../core/dist/onboarding/state-machine.js
 var AREA_ORDER = [
   "framing",
@@ -35838,6 +35842,18 @@ var FLAG_REGISTRY = [
     // the sidebar renders inside the active-org cookie's scope, which is exactly
     // the org whose brand should be shown.
     public: true
+  },
+  {
+    key: "agent-recruit",
+    description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`. The write is human-gated either way, but an
+    // unbounded ask is still an unbounded demand on an owner's attention, so the
+    // fail-closed direction on a flag-DB fault is "an agent cannot ask".
+    defaultValue: false,
+    // Turning this on lets agents originate proposals that create customer
+    // infrastructure once approved — same posture as augmented-support-writes.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/{persistent-session-QITF76DO.js → persistent-session-FQKD2RA6.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-Q6RVMDAC.js";
+} from "./chunk-WANZSIX6.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-QITF76DO.js.map
+//# sourceMappingURL=persistent-session-FQKD2RA6.js.map

package/dist/{responsiveness-probe-BEA4J6IL.js → responsiveness-probe-JQUE3XQG.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-Q6RVMDAC.js";
+} from "./chunk-WANZSIX6.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -596,4 +596,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-BEA4J6IL.js.map
+//# sourceMappingURL=responsiveness-probe-JQUE3XQG.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.476",
+  "version": "0.28.478",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {