@integrity-labs/agt-cli 0.28.979 → 0.28.981

package/dist/{chunk-4K6ZLKIZ.js → chunk-AT643QAO.js}

@@ -6967,7 +6967,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.979" : "dev";
+var agtCliVersion = true ? "0.28.981" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11709,4 +11709,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-4K6ZLKIZ.js.map
+//# sourceMappingURL=chunk-AT643QAO.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-4K6ZLKIZ.js";
+} from "../chunk-AT643QAO.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -13955,7 +13955,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.979" : "dev";
+var agtCliVersion = true ? "0.28.981" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/index.js

@@ -46674,6 +46674,21 @@ function describeAssignHumanResult(resp, email2) {
     isError: false
   };
 }
+function extractApiErrorMessage(thrownMessage) {
+  const sep3 = thrownMessage.indexOf(": ");
+  if (sep3 === -1) return null;
+  const body = thrownMessage.slice(sep3 + 2).trim();
+  if (body.length === 0) return null;
+  try {
+    const parsed = JSON.parse(body);
+    if (parsed && typeof parsed === "object") {
+      const err = parsed.error;
+      if (typeof err === "string" && err.trim().length > 0) return err.trim();
+    }
+  } catch {
+  }
+  return null;
+}
 
 // src/artefact-source.ts
 var SOURCE_READBACK_MAX_CHUNKS = 128;
@@ -46816,7 +46831,12 @@ ${mgr}` : head;
   });
   const peopleLines = people.map((p2) => {
     const idClause = p2.person_id ? ` [person_id: ${p2.person_id}]` : "";
-    return `  \u2022 ${p2.name ?? p2.email} <${p2.email}>${slackTag(p2.slack_user_id)}${idClause} \u2192 assign_kanban_to_human assignee_email="${p2.email}"`;
+    const head = `  \u2022 ${p2.name ?? p2.email} <${p2.email}>${slackTag(p2.slack_user_id)}${idClause}`;
+    if (p2.assignable === false) {
+      const via = p2.person_id ? `kanban_move waiting_on_person="${p2.person_id}"` : "kanban_move waiting_on_person (person_id unavailable on this entry)";
+      return `${head} \u2192 CONTACT ONLY (no platform account, so they cannot be given a card): ${via}`;
+    }
+    return `${head} \u2192 assign_kanban_to_human assignee_email="${p2.email}"`;
   });
   const sections = [];
   if (agents.length > 0) {
@@ -47832,8 +47852,10 @@ server.tool(
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       let text;
-      if (/returned 404/.test(msg)) {
-        text = `Could not assign: no teammate found for "${params.assignee_email}" in your team's organization. Check the email address.`;
+      if (/returned 422/.test(msg)) {
+        text = `Could not assign: ${extractApiErrorMessage(msg) ?? msg}`;
+      } else if (/returned 404/.test(msg)) {
+        text = `Could not assign: no teammate found for "${params.assignee_email}" in your team's organization. Check the email address \u2014 or, if you took it from directory_lookup, re-read that entry: it marks who can be assigned and who can only be contacted.`;
       } else if (/returned 409/.test(msg)) {
         text = `Could not assign: "${params.assignee_email}" matches more than one person. Use a unique email address.`;
       } else {

package/dist/mcp/teams-channel.js

@@ -15227,6 +15227,59 @@ function teamsInboundId(conversationId, activityId) {
   return hashInboundId(`${conversationId}|${activityId}`);
 }
 
+// src/impersonation.ts
+var ENV_VAR = "AGT_ACT_AS_AGENT_ID";
+var OVERRIDE_ENV_VAR = "ENABLE_IMPERSONATION_CHANNELS";
+function isImpersonating() {
+  return impersonatedAgentId() !== null;
+}
+function impersonatedAgentId() {
+  const raw = process.env[ENV_VAR];
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function channelsEnabledOverride() {
+  const raw = process.env[OVERRIDE_ENV_VAR];
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim().toLowerCase();
+  return trimmed === "1" || trimmed === "true" || trimmed === "yes" || trimmed === "on";
+}
+var IMPERSONATION_REFUSAL_CODE = "CHANNEL.IMPERSONATION_DISABLED";
+var IMPERSONATION_REFUSAL_MESSAGE = "Posting as an agent under impersonation is disabled in v0 \u2014 quit impersonation with `agt impersonate exit` to send as yourself.";
+function buildImpersonationRefusal(toolName) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          error: {
+            code: IMPERSONATION_REFUSAL_CODE,
+            message: IMPERSONATION_REFUSAL_MESSAGE,
+            tool: toolName
+          }
+        })
+      }
+    ],
+    isError: true
+  };
+}
+function shouldRefuseImpersonatedEgress(toolName, egressTools) {
+  if (!isImpersonating()) return null;
+  if (channelsEnabledOverride()) return null;
+  if (!egressTools.has(toolName)) return null;
+  return buildImpersonationRefusal(toolName);
+}
+
+// src/channel-egress-tools.ts
+var TEAMS_EGRESS_TOOLS = /* @__PURE__ */ new Set([
+  "teams.reply",
+  "teams.react",
+  "teams.send_structured",
+  "teams.ask_user",
+  "teams.upload_file"
+]);
+
 // src/teams-channel.ts
 var APP_ID = process.env.MSTEAMS_APP_ID ?? null;
 var CLIENT_SECRET = process.env.MSTEAMS_CLIENT_SECRET ?? null;
@@ -15907,6 +15960,13 @@ mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
 mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
   const { name, arguments: args } = req.params;
   const a = args ?? {};
+  const impersonationRefusal = shouldRefuseImpersonatedEgress(
+    name,
+    TEAMS_EGRESS_TOOLS
+  );
+  if (impersonationRefusal) {
+    return { ...impersonationRefusal };
+  }
   if (name === "teams.reply") return handleReply(a);
   if (name === "teams.react") return handleReact(a);
   if (name === "teams.read_thread") return handleReadThread(a);

package/dist/mcp/whatsapp-channel.js

@@ -155882,6 +155882,56 @@ async function startBaileysSession(opts) {
   };
 }
 
+// src/impersonation.ts
+var ENV_VAR = "AGT_ACT_AS_AGENT_ID";
+var OVERRIDE_ENV_VAR = "ENABLE_IMPERSONATION_CHANNELS";
+function isImpersonating() {
+  return impersonatedAgentId() !== null;
+}
+function impersonatedAgentId() {
+  const raw = process.env[ENV_VAR];
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function channelsEnabledOverride() {
+  const raw = process.env[OVERRIDE_ENV_VAR];
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim().toLowerCase();
+  return trimmed === "1" || trimmed === "true" || trimmed === "yes" || trimmed === "on";
+}
+var IMPERSONATION_REFUSAL_CODE = "CHANNEL.IMPERSONATION_DISABLED";
+var IMPERSONATION_REFUSAL_MESSAGE = "Posting as an agent under impersonation is disabled in v0 \u2014 quit impersonation with `agt impersonate exit` to send as yourself.";
+function buildImpersonationRefusal(toolName) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          error: {
+            code: IMPERSONATION_REFUSAL_CODE,
+            message: IMPERSONATION_REFUSAL_MESSAGE,
+            tool: toolName
+          }
+        })
+      }
+    ],
+    isError: true
+  };
+}
+function shouldRefuseImpersonatedEgress(toolName, egressTools) {
+  if (!isImpersonating()) return null;
+  if (channelsEnabledOverride()) return null;
+  if (!egressTools.has(toolName)) return null;
+  return buildImpersonationRefusal(toolName);
+}
+
+// src/channel-egress-tools.ts
+var WHATSAPP_EGRESS_TOOLS = /* @__PURE__ */ new Set([
+  "whatsapp.reply",
+  "whatsapp.send_template"
+]);
+
 // src/whatsapp-channel.ts
 var CODE_NAME = process.env["AGT_AGENT_CODE_NAME"] ?? "";
 var PENDING_INBOUND_DIR = CODE_NAME ? join4(homedir(), ".augmented", CODE_NAME, "whatsapp-pending-inbound") : null;
@@ -156091,13 +156141,30 @@ var sendTemplateTool = {
 };
 mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
   // Templates are a Cloud-API (kapso) concept — not exposed in baileys mode.
-  tools: IS_BAILEYS ? [replyTool] : [replyTool, sendTemplateTool]
+  //
+  // ENG-10753 — written as one array with a conditional tail rather than
+  // `IS_BAILEYS ? [replyTool] : [replyTool, sendTemplateTool]`, which is the
+  // same registration and was not readable. The egress test enumerates each
+  // server's tools from this AST to assert every one is classified as egress
+  // or read-only; the ternary form made that walk THROW, and a server whose
+  // registration cannot be read is a server the classification test cannot
+  // cover — which is how this file came to have no impersonation gate while
+  // three of its siblings did. Keep both branches enumerable: a tool behind a
+  // provider flag is still a tool, and still needs gating.
+  tools: [replyTool, ...IS_BAILEYS ? [] : [sendTemplateTool]]
 }));
 var errResult = (text) => ({ content: [{ type: "text", text }], isError: true });
 var stringArg = (a, k) => typeof a[k] === "string" && a[k].length > 0 ? a[k] : null;
 mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
   const { name, arguments: args } = req.params;
   const a = args ?? {};
+  const impersonationRefusal = shouldRefuseImpersonatedEgress(
+    name,
+    WHATSAPP_EGRESS_TOOLS
+  );
+  if (impersonationRefusal) {
+    return { ...impersonationRefusal };
+  }
   if (name === "whatsapp.reply") return handleReply(a);
   if (name === "whatsapp.send_template") return handleSendTemplate(a);
   return errResult(`Unknown tool: ${name}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.979",
+  "version": "0.28.981",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {