@integrity-labs/agt-cli 0.28.495 → 0.28.496

package/dist/{claude-pair-runtime-LCQYCW67.js → claude-pair-runtime-C2O3QBAT.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-TSPVNVQL.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-O7YXPCRX.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-LCQYCW67.js.map
+//# sourceMappingURL=claude-pair-runtime-C2O3QBAT.js.map

package/dist/lib/manager-worker.js

@@ -45,7 +45,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-CAHE6QSE.js";
+} from "../chunk-DZSS6TA3.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -166,7 +166,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-4SQZDAWG.js";
+} from "../chunk-JWR5FP7S.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -10246,7 +10246,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.495" : "dev";
+var agtCliVersion = true ? "0.28.496" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11409,7 +11409,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-TSPVNVQL.js");
+      const { collectDiagnostics } = await import("../persistent-session-O7YXPCRX.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11516,7 +11516,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-TSPVNVQL.js");
+      const { collectDiagnostics } = await import("../persistent-session-O7YXPCRX.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11631,7 +11631,7 @@ async function pollCycle() {
         collectResponsivenessProbes,
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-3LWQKHV2.js");
+      } = await import("../responsiveness-probe-Z4L2CZNA.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -11695,7 +11695,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-3LWQKHV2.js");
+        } = await import("../responsiveness-probe-Z4L2CZNA.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15184,7 +15184,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-TSPVNVQL.js");
+        const { collectDiagnostics } = await import("../persistent-session-O7YXPCRX.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15234,7 +15234,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-TSPVNVQL.js");
+      const { collectDiagnostics } = await import("../persistent-session-O7YXPCRX.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15722,7 +15722,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-LCQYCW67.js");
+  } = await import("../claude-pair-runtime-C2O3QBAT.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -32373,6 +32373,23 @@ var ASSET_TYPES = {
 var DEFAULT_CHUNK_BUDGET_BYTES = 180 * 1024;
 var textEncoder = new TextEncoder();
 
+// ../core/dist/integrations/remote-mcp-proxy-env.js
+var REMOTE_MCP_PROXY_ENV = {
+  url: "AGT_REMOTE_MCP_URL",
+  tokenFile: "AGT_REMOTE_MCP_TOKEN_FILE",
+  tokenVar: "AGT_REMOTE_MCP_TOKEN_VAR",
+  label: "AGT_REMOTE_MCP_LABEL",
+  authHeader: "AGT_REMOTE_MCP_AUTH_HEADER",
+  extraHeaders: "AGT_REMOTE_MCP_EXTRA_HEADERS",
+  toolAllowlist: "AGT_REMOTE_MCP_TOOL_ALLOWLIST",
+  preEnableToolsets: "AGT_REMOTE_MCP_PREENABLE_TOOLSETS"
+};
+var REMOTE_MCP_AUTH_ENV_KEYS = [
+  REMOTE_MCP_PROXY_ENV.tokenVar,
+  REMOTE_MCP_PROXY_ENV.authHeader,
+  REMOTE_MCP_PROXY_ENV.extraHeaders
+];
+
 // ../core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
   {

package/dist/mcp/origami.js

@@ -38700,6 +38700,23 @@ var ASSET_TYPES = {
 var DEFAULT_CHUNK_BUDGET_BYTES = 180 * 1024;
 var textEncoder = new TextEncoder();
 
+// ../core/dist/integrations/remote-mcp-proxy-env.js
+var REMOTE_MCP_PROXY_ENV = {
+  url: "AGT_REMOTE_MCP_URL",
+  tokenFile: "AGT_REMOTE_MCP_TOKEN_FILE",
+  tokenVar: "AGT_REMOTE_MCP_TOKEN_VAR",
+  label: "AGT_REMOTE_MCP_LABEL",
+  authHeader: "AGT_REMOTE_MCP_AUTH_HEADER",
+  extraHeaders: "AGT_REMOTE_MCP_EXTRA_HEADERS",
+  toolAllowlist: "AGT_REMOTE_MCP_TOOL_ALLOWLIST",
+  preEnableToolsets: "AGT_REMOTE_MCP_PREENABLE_TOOLSETS"
+};
+var REMOTE_MCP_AUTH_ENV_KEYS = [
+  REMOTE_MCP_PROXY_ENV.tokenVar,
+  REMOTE_MCP_PROXY_ENV.authHeader,
+  REMOTE_MCP_PROXY_ENV.extraHeaders
+];
+
 // ../core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
   {

package/dist/mcp/remote-oauth-proxy.js

@@ -7,22 +7,74 @@ import { createInterface } from "readline";
 import { readFileSync } from "fs";
 import { fileURLToPath } from "url";
 import { resolve as resolvePath } from "path";
-var URL_ENV = "AGT_REMOTE_MCP_URL";
-var TOKEN_FILE_ENV = "AGT_REMOTE_MCP_TOKEN_FILE";
-var TOKEN_VAR_ENV = "AGT_REMOTE_MCP_TOKEN_VAR";
-var ALLOWLIST_ENV = "AGT_REMOTE_MCP_TOOL_ALLOWLIST";
-var PREENABLE_ENV = "AGT_REMOTE_MCP_PREENABLE_TOOLSETS";
-var AUTH_HEADER_ENV = "AGT_REMOTE_MCP_AUTH_HEADER";
-var EXTRA_HEADERS_ENV = "AGT_REMOTE_MCP_EXTRA_HEADERS";
+
+// ../core/dist/integrations/remote-mcp-proxy-env.js
+var REMOTE_MCP_PROXY_ENV = {
+  url: "AGT_REMOTE_MCP_URL",
+  tokenFile: "AGT_REMOTE_MCP_TOKEN_FILE",
+  tokenVar: "AGT_REMOTE_MCP_TOKEN_VAR",
+  label: "AGT_REMOTE_MCP_LABEL",
+  authHeader: "AGT_REMOTE_MCP_AUTH_HEADER",
+  extraHeaders: "AGT_REMOTE_MCP_EXTRA_HEADERS",
+  toolAllowlist: "AGT_REMOTE_MCP_TOOL_ALLOWLIST",
+  preEnableToolsets: "AGT_REMOTE_MCP_PREENABLE_TOOLSETS"
+};
+var REMOTE_MCP_AUTH_ENV_KEYS = [
+  REMOTE_MCP_PROXY_ENV.tokenVar,
+  REMOTE_MCP_PROXY_ENV.authHeader,
+  REMOTE_MCP_PROXY_ENV.extraHeaders
+];
+function parseExtraHeaders(raw) {
+  const out = [];
+  for (const part of (raw || "").split(",")) {
+    const trimmed = part.trim();
+    if (!trimmed)
+      continue;
+    const colon = trimmed.indexOf(":");
+    if (colon <= 0)
+      continue;
+    const header = trimmed.slice(0, colon).trim();
+    const varName = trimmed.slice(colon + 1).trim();
+    if (header && varName)
+      out.push({ header, varName });
+  }
+  return out;
+}
+function readRemoteMcpAuthConfig(env) {
+  return {
+    authHeader: (env?.[REMOTE_MCP_PROXY_ENV.authHeader] ?? "").trim(),
+    extras: parseExtraHeaders(env?.[REMOTE_MCP_PROXY_ENV.extraHeaders] ?? "")
+  };
+}
+function buildForwardHeaders(token, authHeader, extras, readVar) {
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: "application/json, text/event-stream"
+  };
+  if (authHeader)
+    headers[authHeader] = token;
+  else
+    headers["Authorization"] = `Bearer ${token}`;
+  for (const { header, varName } of extras) {
+    headers[header] = readVar(varName) ?? "";
+  }
+  return headers;
+}
+
+// src/remote-oauth-proxy.ts
+var URL_ENV = REMOTE_MCP_PROXY_ENV.url;
+var TOKEN_FILE_ENV = REMOTE_MCP_PROXY_ENV.tokenFile;
+var TOKEN_VAR_ENV = REMOTE_MCP_PROXY_ENV.tokenVar;
+var ALLOWLIST_ENV = REMOTE_MCP_PROXY_ENV.toolAllowlist;
+var PREENABLE_ENV = REMOTE_MCP_PROXY_ENV.preEnableToolsets;
 var REMOTE_FETCH_TIMEOUT_MS = 3e4;
 var remoteUrl = process.env[URL_ENV] ?? "";
 var tokenFile = process.env[TOKEN_FILE_ENV] ?? "";
 var tokenVar = process.env[TOKEN_VAR_ENV] ?? "";
-var label = process.env["AGT_REMOTE_MCP_LABEL"] || tokenVar || "remote-oauth";
+var label = process.env[REMOTE_MCP_PROXY_ENV.label] || tokenVar || "remote-oauth";
 var toolAllowlist = parseToolAllowlist(process.env[ALLOWLIST_ENV] ?? "");
 var preEnableToolsets = parsePreEnableToolsets(process.env[PREENABLE_ENV] ?? "");
-var authHeaderName = (process.env[AUTH_HEADER_ENV] ?? "").trim();
-var extraHeaderSpecs = parseExtraHeaders(process.env[EXTRA_HEADERS_ENV] ?? "");
+var { authHeader: authHeaderName, extras: extraHeaderSpecs } = readRemoteMcpAuthConfig(process.env);
 function logErr(msg) {
   process.stderr.write(`[remote-oauth-proxy:${label}] ${msg}
 `);
@@ -108,19 +160,6 @@ function parseToolAllowlist(raw) {
   }
   return out;
 }
-function parseExtraHeaders(raw) {
-  const out = [];
-  for (const part of (raw || "").split(",")) {
-    const trimmed = part.trim();
-    if (!trimmed) continue;
-    const colon = trimmed.indexOf(":");
-    if (colon <= 0) continue;
-    const header = trimmed.slice(0, colon).trim();
-    const varName = trimmed.slice(colon + 1).trim();
-    if (header && varName) out.push({ header, varName });
-  }
-  return out;
-}
 function filterToolsListMessage(message, allow) {
   if (allow.size === 0) return { message, total: 0, kept: 0, advertised: [] };
   let obj;
@@ -196,18 +235,6 @@ function extractJsonRpcMessages(contentType, body) {
   }
   return out;
 }
-function buildForwardHeaders(token, authHeader, extras, readVar) {
-  const headers = {
-    "Content-Type": "application/json",
-    Accept: "application/json, text/event-stream"
-  };
-  if (authHeader) headers[authHeader] = token;
-  else headers["Authorization"] = `Bearer ${token}`;
-  for (const { header, varName } of extras) {
-    headers[header] = readVar(varName) ?? "";
-  }
-  return headers;
-}
 function readTokenVar(varName) {
   return readCurrentToken(tokenFile, varName);
 }

package/dist/mcp/slack-channel.js

@@ -32595,6 +32595,23 @@ var ASSET_TYPES = {
 var DEFAULT_CHUNK_BUDGET_BYTES = 180 * 1024;
 var textEncoder = new TextEncoder();
 
+// ../core/dist/integrations/remote-mcp-proxy-env.js
+var REMOTE_MCP_PROXY_ENV = {
+  url: "AGT_REMOTE_MCP_URL",
+  tokenFile: "AGT_REMOTE_MCP_TOKEN_FILE",
+  tokenVar: "AGT_REMOTE_MCP_TOKEN_VAR",
+  label: "AGT_REMOTE_MCP_LABEL",
+  authHeader: "AGT_REMOTE_MCP_AUTH_HEADER",
+  extraHeaders: "AGT_REMOTE_MCP_EXTRA_HEADERS",
+  toolAllowlist: "AGT_REMOTE_MCP_TOOL_ALLOWLIST",
+  preEnableToolsets: "AGT_REMOTE_MCP_PREENABLE_TOOLSETS"
+};
+var REMOTE_MCP_AUTH_ENV_KEYS = [
+  REMOTE_MCP_PROXY_ENV.tokenVar,
+  REMOTE_MCP_PROXY_ENV.authHeader,
+  REMOTE_MCP_PROXY_ENV.extraHeaders
+];
+
 // ../core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
   {

package/dist/mcp/telegram-channel.js

@@ -32921,6 +32921,23 @@ var ASSET_TYPES = {
 var DEFAULT_CHUNK_BUDGET_BYTES = 180 * 1024;
 var textEncoder = new TextEncoder();
 
+// ../core/dist/integrations/remote-mcp-proxy-env.js
+var REMOTE_MCP_PROXY_ENV = {
+  url: "AGT_REMOTE_MCP_URL",
+  tokenFile: "AGT_REMOTE_MCP_TOKEN_FILE",
+  tokenVar: "AGT_REMOTE_MCP_TOKEN_VAR",
+  label: "AGT_REMOTE_MCP_LABEL",
+  authHeader: "AGT_REMOTE_MCP_AUTH_HEADER",
+  extraHeaders: "AGT_REMOTE_MCP_EXTRA_HEADERS",
+  toolAllowlist: "AGT_REMOTE_MCP_TOOL_ALLOWLIST",
+  preEnableToolsets: "AGT_REMOTE_MCP_PREENABLE_TOOLSETS"
+};
+var REMOTE_MCP_AUTH_ENV_KEYS = [
+  REMOTE_MCP_PROXY_ENV.tokenVar,
+  REMOTE_MCP_PROXY_ENV.authHeader,
+  REMOTE_MCP_PROXY_ENV.extraHeaders
+];
+
 // ../core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
   {

package/dist/{persistent-session-TSPVNVQL.js → persistent-session-O7YXPCRX.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-4SQZDAWG.js";
+} from "./chunk-JWR5FP7S.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-TSPVNVQL.js.map
+//# sourceMappingURL=persistent-session-O7YXPCRX.js.map

package/dist/{responsiveness-probe-3LWQKHV2.js → responsiveness-probe-Z4L2CZNA.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-4SQZDAWG.js";
+} from "./chunk-JWR5FP7S.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -658,4 +658,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-3LWQKHV2.js.map
+//# sourceMappingURL=responsiveness-probe-Z4L2CZNA.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.495",
+  "version": "0.28.496",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {