@integrity-labs/agt-cli 0.28.81 → 0.28.82

package/dist/bin/agt.js

@@ -37,7 +37,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-DA3DAU5V.js";
+} from "../chunk-WSRT4VSX.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -4777,7 +4777,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.81" : "dev";
+var cliVersion = true ? "0.28.82" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5791,7 +5791,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.81" : "dev";
+var cliVersion2 = true ? "0.28.82" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-DA3DAU5V.js → chunk-WSRT4VSX.js}

@@ -7516,7 +7516,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.81" : "dev";
+var agtCliVersion = true ? "0.28.82" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8813,4 +8813,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-DA3DAU5V.js.map
+//# sourceMappingURL=chunk-WSRT4VSX.js.map

package/dist/lib/manager-worker.js

@@ -28,7 +28,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-DA3DAU5V.js";
+} from "../chunk-WSRT4VSX.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -6803,7 +6803,7 @@ var cachedMaintenanceWindow = null;
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.81" : "dev";
+var agtCliVersion = true ? "0.28.82" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/slack-channel.js

@@ -18073,15 +18073,6 @@ async function postEphemeralViaResponseUrl(responseUrl, text, logTag) {
 }
 async function forwardOnboardingSlashCommand(opts) {
   const { verb, path, userId, responseUrl, codeName } = opts;
-  const allowed = getEffectiveAllowedUsers();
-  if (allowed.size > 0 && (!userId || !allowed.has(userId))) {
-    await postEphemeralViaResponseUrl(
-      responseUrl,
-      `\u{1F6AB} \`${verb}\` denied \u2014 your Slack user is not in the allowlist for \`${codeName}\`.`,
-      codeName
-    );
-    return;
-  }
   if (!AGT_HOST || !AGT_API_KEY || !AGT_AGENT_ID) {
     await postEphemeralViaResponseUrl(
       responseUrl,
@@ -18097,9 +18088,12 @@ async function forwardOnboardingSlashCommand(opts) {
       apiKey: AGT_API_KEY,
       agentId: AGT_AGENT_ID
     };
-    const res = await apiCall2(cfg, "POST", `/host${path}`, { agent_id: AGT_AGENT_ID });
+    const res = await apiCall2(cfg, "POST", `/host${path}`, {
+      agent_id: AGT_AGENT_ID,
+      initiator: { channel: "slack", user_id: userId }
+    });
     const data = await res.json();
-    const text = data.ok ? `\u{1F504} ${data.message ?? "Onboarding updated."}` : `:x: \`${verb}\` failed${data.error ? `: ${data.error}` : "."}`;
+    const text = data.ok ? `\u{1F504} ${data.message ?? "Onboarding updated."}` : data.message ?? `:x: \`${verb}\` failed${data.error ? `: ${data.error}` : "."}`;
     await postEphemeralViaResponseUrl(responseUrl, text, codeName);
   } catch (err) {
     process.stderr.write(

package/dist/mcp/telegram-channel.js

@@ -17190,7 +17190,8 @@ async function handleOnboardingCommand(opts) {
       agentId: AGT_AGENT_ID
     };
     const res = await apiCall2(cfg, "POST", `/host/onboarding/${opts.mode}`, {
-      agent_id: AGT_AGENT_ID
+      agent_id: AGT_AGENT_ID,
+      initiator: { channel: "telegram", user_id: opts.senderId }
     });
     const data = await res.json();
     process.stderr.write(
@@ -17198,7 +17199,7 @@ async function handleOnboardingCommand(opts) {
 `
     );
     await reply(
-      data.ok ? `\u{1F504} ${data.message ?? "Onboarding updated."}` : `\u274C ${verb} failed${data.error ? `: ${data.error}` : "."}`
+      data.ok ? `\u{1F504} ${data.message ?? "Onboarding updated."}` : data.message ?? `\u274C ${verb} failed${data.error ? `: ${data.error}` : "."}`
     );
   } catch (err) {
     process.stderr.write(
@@ -19210,7 +19211,10 @@ async function pollLoop() {
             await handleOnboardingCommand({
               chatId,
               messageId: String(msg.message_id),
-              mode: access.command === "onboard" ? "reset" : "resume"
+              mode: access.command === "onboard" ? "reset" : "resume",
+              // ENG-6578: the manager gate compares the SENDER's user-id (not the
+              // chat id — they differ in groups) to the resolved manager principal.
+              senderId: msg.from?.id != null ? String(msg.from.id) : void 0
             });
           }
           continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.81",
+  "version": "0.28.82",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {