@integrity-labs/agt-cli 0.28.484 → 0.28.485

package/dist/{claude-pair-runtime-2XPTEGQR.js → claude-pair-runtime-STSHUESG.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-IBMUPQZ2.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-CEGPLUHO.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-2XPTEGQR.js.map
+//# sourceMappingURL=claude-pair-runtime-STSHUESG.js.map

package/dist/lib/manager-worker.js

@@ -44,7 +44,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-I63LLKQJ.js";
+} from "../chunk-QFQTGSXQ.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -162,7 +162,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-DNC5JGOV.js";
+} from "../chunk-SRR5XVWJ.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -10064,7 +10064,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.484" : "dev";
+var agtCliVersion = true ? "0.28.485" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11227,7 +11227,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
+      const { collectDiagnostics } = await import("../persistent-session-CEGPLUHO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11334,7 +11334,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
+      const { collectDiagnostics } = await import("../persistent-session-CEGPLUHO.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11448,7 +11448,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-QBLQIMZR.js");
+      } = await import("../responsiveness-probe-RBLOTOHD.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11512,7 +11512,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-QBLQIMZR.js");
+        } = await import("../responsiveness-probe-RBLOTOHD.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -14988,7 +14988,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
+        const { collectDiagnostics } = await import("../persistent-session-CEGPLUHO.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15038,7 +15038,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-IBMUPQZ2.js");
+      const { collectDiagnostics } = await import("../persistent-session-CEGPLUHO.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15496,7 +15496,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-2XPTEGQR.js");
+  } = await import("../claude-pair-runtime-STSHUESG.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -33208,18 +33208,27 @@ var INTEGRATION_REGISTRY = [
     id: "firecrawl",
     name: "Firecrawl",
     category: "knowledge",
-    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Augmented Team manages Firecrawl access for you - there is no key to enter.",
+    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Connect via the platform-managed account, or bring your own Firecrawl API key.",
     // ENG-7217: Firecrawl migrates from a customer-API-key stdio MCP
     // (`npx firecrawl-mcp`, FIRECRAWL_API_KEY) to a PREMIUM, platform-managed
     // integration on the Deck / ElevenLabs model (ADR-0031, epic ENG-6920):
     // Augmented holds ONE Firecrawl account key (`FIRECRAWL_ACCOUNT_KEY`) that
-    // every customer agent's web-data calls bill back to, so the key is a single
-    // platform-held secret, NOT a per-agent credential. Auth type is therefore
-    // `none` - customers never enter a key. The agent-facing tools are brokered
-    // server-side (firecrawl-broker.ts, reusing the official @mendable/firecrawl-js
-    // SDK) rather than via the stdio MCP, so usage can be metered at the one
-    // control-plane chokepoint and gated on a per-org opt-in + monthly USD cap.
-    supported_auth_types: ["none"],
+    // every customer agent's web-data calls bill back to. The agent-facing tools
+    // are brokered server-side (firecrawl-broker.ts, reusing the official
+    // @mendable/firecrawl-js SDK) rather than via the stdio MCP, so managed usage
+    // is metered at the one control-plane chokepoint and gated on a per-org opt-in
+    // + monthly USD cap.
+    //
+    // ENG-8304 / ADR-0055 (Phase 1b — Firecrawl is the BYO exemplar): `api_key` is
+    // now also offered so a customer can bring their OWN Firecrawl key. A BYO
+    // install (`credential_source='byo'`) authenticates with the customer's key
+    // (stored encrypted on the install) and is NOT metered — its upstream cost is
+    // on the customer's own Firecrawl bill. BYO is gated on the plan-tier
+    // `byo_credentials` entitlement; managed stays the platform-key, billed path.
+    // `api_key` is the BYO option; the connect UI offers it via the toolkit's
+    // `auth_types` seed (Firecrawl surfaces through the premium list, not the
+    // native `installable` picker — that descriptor is for non-premium natives).
+    supported_auth_types: ["none", "api_key"],
     capabilities: [
       { id: "firecrawl:scrape", name: "Scrape Pages", description: "Fetch a single URL as clean markdown / structured data (firecrawl_scrape).", access: "write" },
       { id: "firecrawl:search", name: "Web Search", description: "Search the web and return ranked results, optionally scraped (firecrawl_search).", access: "write" },

package/dist/mcp/origami.js

@@ -39535,18 +39535,27 @@ var INTEGRATION_REGISTRY = [
     id: "firecrawl",
     name: "Firecrawl",
     category: "knowledge",
-    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Augmented Team manages Firecrawl access for you - there is no key to enter.",
+    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Connect via the platform-managed account, or bring your own Firecrawl API key.",
     // ENG-7217: Firecrawl migrates from a customer-API-key stdio MCP
     // (`npx firecrawl-mcp`, FIRECRAWL_API_KEY) to a PREMIUM, platform-managed
     // integration on the Deck / ElevenLabs model (ADR-0031, epic ENG-6920):
     // Augmented holds ONE Firecrawl account key (`FIRECRAWL_ACCOUNT_KEY`) that
-    // every customer agent's web-data calls bill back to, so the key is a single
-    // platform-held secret, NOT a per-agent credential. Auth type is therefore
-    // `none` - customers never enter a key. The agent-facing tools are brokered
-    // server-side (firecrawl-broker.ts, reusing the official @mendable/firecrawl-js
-    // SDK) rather than via the stdio MCP, so usage can be metered at the one
-    // control-plane chokepoint and gated on a per-org opt-in + monthly USD cap.
-    supported_auth_types: ["none"],
+    // every customer agent's web-data calls bill back to. The agent-facing tools
+    // are brokered server-side (firecrawl-broker.ts, reusing the official
+    // @mendable/firecrawl-js SDK) rather than via the stdio MCP, so managed usage
+    // is metered at the one control-plane chokepoint and gated on a per-org opt-in
+    // + monthly USD cap.
+    //
+    // ENG-8304 / ADR-0055 (Phase 1b — Firecrawl is the BYO exemplar): `api_key` is
+    // now also offered so a customer can bring their OWN Firecrawl key. A BYO
+    // install (`credential_source='byo'`) authenticates with the customer's key
+    // (stored encrypted on the install) and is NOT metered — its upstream cost is
+    // on the customer's own Firecrawl bill. BYO is gated on the plan-tier
+    // `byo_credentials` entitlement; managed stays the platform-key, billed path.
+    // `api_key` is the BYO option; the connect UI offers it via the toolkit's
+    // `auth_types` seed (Firecrawl surfaces through the premium list, not the
+    // native `installable` picker — that descriptor is for non-premium natives).
+    supported_auth_types: ["none", "api_key"],
     capabilities: [
       { id: "firecrawl:scrape", name: "Scrape Pages", description: "Fetch a single URL as clean markdown / structured data (firecrawl_scrape).", access: "write" },
       { id: "firecrawl:search", name: "Web Search", description: "Search the web and return ranked results, optionally scraped (firecrawl_search).", access: "write" },

package/dist/mcp/slack-channel.js

@@ -33430,18 +33430,27 @@ var INTEGRATION_REGISTRY = [
     id: "firecrawl",
     name: "Firecrawl",
     category: "knowledge",
-    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Augmented Team manages Firecrawl access for you - there is no key to enter.",
+    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Connect via the platform-managed account, or bring your own Firecrawl API key.",
     // ENG-7217: Firecrawl migrates from a customer-API-key stdio MCP
     // (`npx firecrawl-mcp`, FIRECRAWL_API_KEY) to a PREMIUM, platform-managed
     // integration on the Deck / ElevenLabs model (ADR-0031, epic ENG-6920):
     // Augmented holds ONE Firecrawl account key (`FIRECRAWL_ACCOUNT_KEY`) that
-    // every customer agent's web-data calls bill back to, so the key is a single
-    // platform-held secret, NOT a per-agent credential. Auth type is therefore
-    // `none` - customers never enter a key. The agent-facing tools are brokered
-    // server-side (firecrawl-broker.ts, reusing the official @mendable/firecrawl-js
-    // SDK) rather than via the stdio MCP, so usage can be metered at the one
-    // control-plane chokepoint and gated on a per-org opt-in + monthly USD cap.
-    supported_auth_types: ["none"],
+    // every customer agent's web-data calls bill back to. The agent-facing tools
+    // are brokered server-side (firecrawl-broker.ts, reusing the official
+    // @mendable/firecrawl-js SDK) rather than via the stdio MCP, so managed usage
+    // is metered at the one control-plane chokepoint and gated on a per-org opt-in
+    // + monthly USD cap.
+    //
+    // ENG-8304 / ADR-0055 (Phase 1b — Firecrawl is the BYO exemplar): `api_key` is
+    // now also offered so a customer can bring their OWN Firecrawl key. A BYO
+    // install (`credential_source='byo'`) authenticates with the customer's key
+    // (stored encrypted on the install) and is NOT metered — its upstream cost is
+    // on the customer's own Firecrawl bill. BYO is gated on the plan-tier
+    // `byo_credentials` entitlement; managed stays the platform-key, billed path.
+    // `api_key` is the BYO option; the connect UI offers it via the toolkit's
+    // `auth_types` seed (Firecrawl surfaces through the premium list, not the
+    // native `installable` picker — that descriptor is for non-premium natives).
+    supported_auth_types: ["none", "api_key"],
     capabilities: [
       { id: "firecrawl:scrape", name: "Scrape Pages", description: "Fetch a single URL as clean markdown / structured data (firecrawl_scrape).", access: "write" },
       { id: "firecrawl:search", name: "Web Search", description: "Search the web and return ranked results, optionally scraped (firecrawl_search).", access: "write" },

package/dist/mcp/telegram-channel.js

@@ -33756,18 +33756,27 @@ var INTEGRATION_REGISTRY = [
     id: "firecrawl",
     name: "Firecrawl",
     category: "knowledge",
-    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Augmented Team manages Firecrawl access for you - there is no key to enter.",
+    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Connect via the platform-managed account, or bring your own Firecrawl API key.",
     // ENG-7217: Firecrawl migrates from a customer-API-key stdio MCP
     // (`npx firecrawl-mcp`, FIRECRAWL_API_KEY) to a PREMIUM, platform-managed
     // integration on the Deck / ElevenLabs model (ADR-0031, epic ENG-6920):
     // Augmented holds ONE Firecrawl account key (`FIRECRAWL_ACCOUNT_KEY`) that
-    // every customer agent's web-data calls bill back to, so the key is a single
-    // platform-held secret, NOT a per-agent credential. Auth type is therefore
-    // `none` - customers never enter a key. The agent-facing tools are brokered
-    // server-side (firecrawl-broker.ts, reusing the official @mendable/firecrawl-js
-    // SDK) rather than via the stdio MCP, so usage can be metered at the one
-    // control-plane chokepoint and gated on a per-org opt-in + monthly USD cap.
-    supported_auth_types: ["none"],
+    // every customer agent's web-data calls bill back to. The agent-facing tools
+    // are brokered server-side (firecrawl-broker.ts, reusing the official
+    // @mendable/firecrawl-js SDK) rather than via the stdio MCP, so managed usage
+    // is metered at the one control-plane chokepoint and gated on a per-org opt-in
+    // + monthly USD cap.
+    //
+    // ENG-8304 / ADR-0055 (Phase 1b — Firecrawl is the BYO exemplar): `api_key` is
+    // now also offered so a customer can bring their OWN Firecrawl key. A BYO
+    // install (`credential_source='byo'`) authenticates with the customer's key
+    // (stored encrypted on the install) and is NOT metered — its upstream cost is
+    // on the customer's own Firecrawl bill. BYO is gated on the plan-tier
+    // `byo_credentials` entitlement; managed stays the platform-key, billed path.
+    // `api_key` is the BYO option; the connect UI offers it via the toolkit's
+    // `auth_types` seed (Firecrawl surfaces through the premium list, not the
+    // native `installable` picker — that descriptor is for non-premium natives).
+    supported_auth_types: ["none", "api_key"],
     capabilities: [
       { id: "firecrawl:scrape", name: "Scrape Pages", description: "Fetch a single URL as clean markdown / structured data (firecrawl_scrape).", access: "write" },
       { id: "firecrawl:search", name: "Web Search", description: "Search the web and return ranked results, optionally scraped (firecrawl_search).", access: "write" },

package/dist/{persistent-session-IBMUPQZ2.js → persistent-session-CEGPLUHO.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-DNC5JGOV.js";
+} from "./chunk-SRR5XVWJ.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-IBMUPQZ2.js.map
+//# sourceMappingURL=persistent-session-CEGPLUHO.js.map

package/dist/{responsiveness-probe-QBLQIMZR.js → responsiveness-probe-RBLOTOHD.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-DNC5JGOV.js";
+} from "./chunk-SRR5XVWJ.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -596,4 +596,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-QBLQIMZR.js.map
+//# sourceMappingURL=responsiveness-probe-RBLOTOHD.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.484",
+  "version": "0.28.485",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {