@integrity-labs/agt-cli 0.28.652 → 0.28.653

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-6PR2K3XB.js";
+} from "../chunk-CXZEIJRN.js";
 import {
   readDirectChatSessionState
 } from "../chunk-E26EKDFP.js";
@@ -4909,7 +4909,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.652" : "dev";
+var cliVersion = true ? "0.28.653" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6089,7 +6089,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.652" : "dev";
+var cliVersion2 = true ? "0.28.653" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-6PR2K3XB.js → chunk-CXZEIJRN.js}

@@ -6073,7 +6073,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.652" : "dev";
+var agtCliVersion = true ? "0.28.653" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9815,4 +9815,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-6PR2K3XB.js.map
+//# sourceMappingURL=chunk-CXZEIJRN.js.map

package/dist/lib/manager-worker.js

@@ -55,7 +55,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-6PR2K3XB.js";
+} from "../chunk-CXZEIJRN.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -12252,7 +12252,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.652" : "dev";
+var agtCliVersion = true ? "0.28.653" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/index.js

@@ -22397,10 +22397,32 @@ ${first.duplicate_hint}` : added;
 import { homedir as homedir3, tmpdir } from "os";
 import { basename, isAbsolute, join as join3, resolve as pathResolve, sep } from "path";
 
-// src/skill-body-path.ts
-var SKILL_BODY_PATH_TOOLS = /* @__PURE__ */ new Set(["skill_create", "skill_update"]);
+// src/host-file-path.ts
 var SKILL_BODY_PATH_MAX_BYTES = 512 * 1024;
-function allowedSkillBodyRoots(agentDir, path) {
+var AGT_LIVE_CONTENT_PATH_MAX_BYTES = 2 * 1024 * 1024;
+var HOST_FILE_PATH_TOOLS = /* @__PURE__ */ new Map([
+  [
+    "skill_create",
+    { pathArg: "body_path", targetArg: "body", maxBytes: SKILL_BODY_PATH_MAX_BYTES, label: "a skill body" }
+  ],
+  [
+    "skill_update",
+    { pathArg: "body_path", targetArg: "body", maxBytes: SKILL_BODY_PATH_MAX_BYTES, label: "a skill body" }
+  ],
+  [
+    "agt_live_publish",
+    {
+      pathArg: "content_path",
+      targetArg: "content",
+      maxBytes: AGT_LIVE_CONTENT_PATH_MAX_BYTES,
+      label: "a published page"
+    }
+  ]
+]);
+function hostFilePathArg(toolName) {
+  return HOST_FILE_PATH_TOOLS.get(toolName)?.pathArg;
+}
+function allowedHostFileRoots(agentDir, path) {
   return [path.join(agentDir, "project"), path.join(agentDir, "scratch")];
 }
 function assertNoSymlinkComponents(target, roots, path, fs) {
@@ -22425,48 +22447,49 @@ function isContained(candidate, root, sep2) {
   const rootWithSep = root.endsWith(sep2) ? root : root + sep2;
   return candidate.startsWith(rootWithSep);
 }
-function resolveSkillBodyPath(toolName, args, opts) {
-  if (!SKILL_BODY_PATH_TOOLS.has(toolName)) return { ok: true, args };
-  const raw = args["body_path"];
+function resolveHostFilePath(toolName, args, opts) {
+  const spec = HOST_FILE_PATH_TOOLS.get(toolName);
+  if (!spec) return { ok: true, args };
+  const raw = args[spec.pathArg];
   if (raw === void 0 || raw === null) return { ok: true, args };
   if (typeof raw !== "string" || raw.trim() === "") {
-    return { ok: false, error: "body_path must be a non-empty string." };
+    return { ok: false, error: `${spec.pathArg} must be a non-empty string.` };
   }
-  if (typeof args["body"] === "string") {
+  if (typeof args[spec.targetArg] === "string") {
     return {
       ok: false,
-      error: "Pass either body or body_path, not both \u2014 they are two ways to say the same thing and I will not guess which one you meant."
+      error: `Pass either ${spec.targetArg} or ${spec.pathArg}, not both \u2014 they are two ways to say the same thing and I will not guess which one you meant.`
     };
   }
   const { agentDir, path, fs } = opts;
-  const maxBytes = opts.maxBytes ?? SKILL_BODY_PATH_MAX_BYTES;
-  const roots = allowedSkillBodyRoots(agentDir, path);
+  const maxBytes = opts.maxBytes ?? spec.maxBytes;
+  const roots = allowedHostFileRoots(agentDir, path);
   const absolute = path.isAbsolute(raw) ? path.resolve(raw) : path.resolve(path.join(agentDir, "project"), raw);
   if (!roots.some((r) => isContained(absolute, r, path.sep))) {
     return {
       ok: false,
-      error: `body_path must be inside your own project or scratch directory. Got '${raw}'. Allowed: ${roots.join(", ")}`
+      error: `${spec.pathArg} must be inside your own project or scratch directory. Got '${raw}'. Allowed: ${roots.join(", ")}`
     };
   }
   let real;
   try {
     real = fs.realpathSync(absolute);
   } catch {
-    return { ok: false, error: `body_path does not exist or is unreadable: '${raw}'` };
+    return { ok: false, error: `${spec.pathArg} does not exist or is unreadable: '${raw}'` };
   }
   if (!roots.some((r) => isContained(real, r, path.sep))) {
     return {
       ok: false,
-      error: `body_path resolves outside your own directories (symlink?). '${raw}' \u2192 '${real}'. Allowed: ${roots.join(", ")}`
+      error: `${spec.pathArg} resolves outside your own directories (symlink?). '${raw}' \u2192 '${real}'. Allowed: ${roots.join(", ")}`
     };
   }
   const walkError = assertNoSymlinkComponents(real, roots, path, fs);
-  if (walkError) return { ok: false, error: `body_path: ${walkError}` };
+  if (walkError) return { ok: false, error: `${spec.pathArg}: ${walkError}` };
   let vetted = null;
   try {
     vetted = fs.lstatSync(real);
   } catch {
-    return { ok: false, error: `body_path vanished before it could be read: '${raw}'` };
+    return { ok: false, error: `${spec.pathArg} vanished before it could be read: '${raw}'` };
   }
   let fd;
   try {
@@ -22475,7 +22498,7 @@ function resolveSkillBodyPath(toolName, args, opts) {
     const msg = err.message;
     return {
       ok: false,
-      error: `body_path could not be opened (it may have been replaced mid-check): '${raw}' \u2014 ${msg}`
+      error: `${spec.pathArg} could not be opened (it may have been replaced mid-check): '${raw}' \u2014 ${msg}`
     };
   }
   try {
@@ -22483,37 +22506,37 @@ function resolveSkillBodyPath(toolName, args, opts) {
     try {
       stat = fs.fstatSync(fd);
     } catch {
-      return { ok: false, error: `body_path could not be inspected: '${raw}'` };
+      return { ok: false, error: `${spec.pathArg} could not be inspected: '${raw}'` };
     }
     if (!stat.isFile()) {
-      return { ok: false, error: `body_path is not a regular file: '${raw}'` };
+      return { ok: false, error: `${spec.pathArg} is not a regular file: '${raw}'` };
     }
     if (stat.ino !== void 0 && vetted.ino !== void 0) {
       if (stat.ino !== vetted.ino || stat.dev !== vetted.dev) {
         return {
           ok: false,
-          error: `body_path changed identity between the check and the open (it was replaced): '${raw}'`
+          error: `${spec.pathArg} changed identity between the check and the open (it was replaced): '${raw}'`
         };
       }
     }
     if (stat.size > maxBytes) {
       return {
         ok: false,
-        error: `body_path is ${stat.size} bytes, over the ${maxBytes}-byte limit for a skill body.`
+        error: `${spec.pathArg} is ${stat.size} bytes, over the ${maxBytes}-byte limit for ${spec.label}.`
       };
     }
     let bytes;
     try {
       bytes = fs.readFdSync(fd, maxBytes);
     } catch (err) {
-      return { ok: false, error: `body_path could not be read: ${err.message}` };
+      return { ok: false, error: `${spec.pathArg} could not be read: ${err.message}` };
     }
     if (bytes.byteLength > maxBytes) {
-      return { ok: false, error: `body_path grew past the ${maxBytes}-byte limit while being read.` };
+      return { ok: false, error: `${spec.pathArg} grew past the ${maxBytes}-byte limit while being read.` };
     }
-    const body = fs.decodeUtf8(bytes);
-    const next = { ...args, body };
-    delete next["body_path"];
+    const value = fs.decodeUtf8(bytes);
+    const next = { ...args, [spec.targetArg]: value };
+    delete next[spec.pathArg];
     return { ok: true, args: next };
   } finally {
     try {
@@ -45938,11 +45961,12 @@ async function forwardToolCall(toolName, args) {
     throw new Error("Cannot forward tool call: AGT_AGENT_ID is not set");
   }
   let outgoing = args;
-  if (SKILL_BODY_PATH_TOOLS.has(toolName) && args["body_path"] !== void 0) {
+  const pathArg = hostFilePathArg(toolName);
+  if (pathArg && args[pathArg] !== void 0) {
     if (!AGT_AGENT_CODE_NAME) {
-      throw new Error("Cannot resolve body_path: AGT_AGENT_CODE_NAME is not set");
+      throw new Error(`Cannot resolve ${pathArg}: AGT_AGENT_CODE_NAME is not set`);
     }
-    const resolved = resolveSkillBodyPath(toolName, args, {
+    const resolved = resolveHostFilePath(toolName, args, {
       // ADR-0049 / ENG-7891: the per-agent host dir is agent_id-keyed and the
       // codename path is only a compatibility SYMLINK. That is not a style
       // point here, it is a correctness one: the containment check below
@@ -45968,7 +45992,7 @@ async function forwardToolCall(toolName, args) {
         // so an oversize file is detected rather than buffered whole.
         lstatSync,
         // Raw bytes, decoded only after the byte-length check — see
-        // readFdSync's docblock in skill-body-path.ts.
+        // readFdSync's docblock in host-file-path.ts.
         readFdSync: (fd, maxBytes) => {
           const buf = Buffer.alloc(maxBytes + 1);
           let read = 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.652",
+  "version": "0.28.653",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {