@integrity-labs/agt-cli 0.28.990 → 0.28.991

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-P7B5IRH5.js";
+} from "../chunk-RQ3I7GMD.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-6KYXH6ZZ.js";
+} from "../chunk-DN3KNGP4.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-TGCA3LTI.js";
+} from "../chunk-C72SNMP6.js";
 import "../chunk-DHWNVVX4.js";
 import "../chunk-XWVM4KPK.js";
 
@@ -5472,7 +5472,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.990" : "dev";
+var cliVersion = true ? "0.28.991" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6732,7 +6732,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.990" : "dev";
+var cliVersion2 = true ? "0.28.991" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-TGCA3LTI.js → chunk-C72SNMP6.js}

@@ -9560,6 +9560,11 @@ var ajv2 = new Ajv20202({ allErrors: true, strict: false });
 addFormats2(ajv2);
 var compiledMetaSchema = ajv2.compile(context_meta_schema_default);
 
+// ../../packages/core/dist/integrations/hitl-resolver.js
+function isAutoTier(tier) {
+  return tier === "read" || tier === "write";
+}
+
 // ../../packages/core/dist/integrations/tool-tier-heuristic.js
 var READ_VERBS = "GET|LIST|FIND|FETCH|RETRIEVE|SEARCH|QUERY|DESCRIBE|INSPECT|SCAN|SHOW|VIEW|READ|EXPORT|DOWNLOAD";
 var NO_READ_VERB_ACTION = `(?!(?:^|.*[_-])(${READ_VERBS})[_-])`;
@@ -12614,7 +12619,21 @@ var REMOTE_MCP_PROXY_ENV = {
   // success. Deliberately NOT in REMOTE_MCP_AUTH_ENV_KEYS: it shapes which calls
   // we forward, not what an outbound request looks like, so the probe (which
   // never issues a tools/call) has nothing to reconstruct from it.
-  argRejects: "AGT_REMOTE_MCP_ARG_REJECTS"
+  argRejects: "AGT_REMOTE_MCP_ARG_REJECTS",
+  // ENG-10614: the per-tool HITL floor table, as JSON `{ "<tool>": "<tier>" }`.
+  //
+  // WHY THIS EXISTS AT ALL. A hosted API-key remote MCP is called by Claude Code
+  // straight at the vendor, so none of the three brokered HITL gates
+  // (`enforceComposioHitlGate`, `hitlGateForBrokerCall`, the CLI lane) is in the
+  // path, and `tool_definitions.min_hitl_tier` was read by nothing on this lane
+  // — measured: zero hits for that column under `packages/core/src/provisioning`,
+  // `packages/mcp/src` or `apps/cli/src`. The catalog said `delete_item` needed
+  // approval and the call went straight out.
+  //
+  // Deliberately NOT in REMOTE_MCP_AUTH_ENV_KEYS, for the same reason as
+  // `argRejects`: it shapes WHICH calls we forward, not what an outbound request
+  // looks like, so the connectivity probe has nothing to reconstruct from it.
+  toolTiers: "AGT_REMOTE_MCP_TOOL_TIERS"
 };
 var REMOTE_MCP_AUTH_ENV_KEYS = [
   REMOTE_MCP_PROXY_ENV.tokenVar,
@@ -15120,6 +15139,11 @@ export {
   remoteMcpEnvPrefix,
   remoteMcpConnectionScopedEnvVar,
   remoteMcpConnectionLabel,
+  HITL_TIER_ORDER,
+  isAutoTier,
+  REMOTE_MCP_PROXY_ENV,
+  readRemoteMcpAuthConfig,
+  buildForwardHeaders,
   isControlPlaneOnlyConfigKey,
   isControlPlaneOnlyEnvVar,
   senderPolicyIsEnforcedOn,
@@ -15163,9 +15187,6 @@ export {
   PROBE_TOOLKIT_PATH_DIRS,
   PROBE_HOME_RELATIVE_PATH_SEGMENTS,
   PROBE_SYSTEM_PATH_FLOOR,
-  REMOTE_MCP_PROXY_ENV,
-  readRemoteMcpAuthConfig,
-  buildForwardHeaders,
   SLACK_SOCKET_STATE_FILENAME,
   parseSlackSocketState,
   isSlackInboundTransportDown,
@@ -15258,4 +15279,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-TGCA3LTI.js.map
+//# sourceMappingURL=chunk-C72SNMP6.js.map