@integrity-labs/agt-cli 0.12.6 → 0.12.8

package/dist/lib/manager-worker.js

@@ -17,7 +17,7 @@ import {
   resolveChannels,
   resolveDmTarget,
   wrapScheduledTaskPrompt
-} from "../chunk-35KA6J3P.js";
+} from "../chunk-ZFTZDO5E.js";
 import {
   findTaskByTemplate,
   getProjectDir,
@@ -40,7 +40,7 @@ import {
 
 // src/lib/manager-worker.ts
 import { createHash } from "crypto";
-import { readFileSync, writeFileSync, mkdirSync, existsSync, rmSync, readdirSync, statSync, unlinkSync, copyFileSync } from "fs";
+import { readFileSync, writeFileSync, appendFileSync, mkdirSync, chmodSync, existsSync, rmSync, readdirSync, statSync, unlinkSync, copyFileSync } from "fs";
 import https from "https";
 import { join as join2, dirname } from "path";
 import { homedir as homedir2 } from "os";
@@ -1119,10 +1119,36 @@ function send(msg) {
     log(`Error: ${msg.message}`);
   }
 }
+var managerLogPath = null;
+function redactForDiskLog(value) {
+  try {
+    return value.replace(/\b(Bearer\s+)[A-Za-z0-9._-]+\b/gi, "$1[REDACTED]").replace(/\bxox[baprs]-[A-Za-z0-9-]+\b/g, "[REDACTED-SLACK]").replace(/\btlk_[A-Za-z0-9._-]+\b/g, "[REDACTED-HOST]").replace(/\bsk-ant-[A-Za-z0-9_-]+\b/g, "[REDACTED-ANTHROPIC]").replace(/\b\d{8,12}:[A-Za-z0-9_-]{30,}\b/g, "[REDACTED-TELEGRAM]").replace(
+      /\b([A-Z0-9_]*(?:TOKEN|SECRET|API[_-]?KEY|PASSWORD)[A-Z0-9_]*)=(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\s\r\n]+)/gi,
+      "$1=[REDACTED]"
+    );
+  } catch {
+    return "[REDACTED]";
+  }
+}
 function log(msg) {
   const ts = (/* @__PURE__ */ new Date()).toISOString();
-  process.stderr.write(`[manager-worker ${ts}] ${msg}
+  const safeMsg = redactForDiskLog(msg);
+  process.stderr.write(`[manager-worker ${ts}] ${safeMsg}
 `);
+  try {
+    if (!managerLogPath) {
+      managerLogPath = join2(homedir2(), ".augmented", "manager.log");
+      mkdirSync(dirname(managerLogPath), { recursive: true });
+      if (!existsSync(managerLogPath)) {
+        appendFileSync(managerLogPath, "", { mode: 384 });
+      } else {
+        chmodSync(managerLogPath, 384);
+      }
+    }
+    appendFileSync(managerLogPath, `[manager-worker ${ts}] ${safeMsg}
+`);
+  } catch {
+  }
 }
 function sha256(content) {
   return createHash("sha256").update(content, "utf8").digest("hex");
@@ -1966,9 +1992,20 @@ async function processAgent(agent, agentStates) {
           activeChannels.get(channelId).add(agent.code_name);
           const configHash = createHash("sha256").update(JSON.stringify(entry.config)).digest("hex");
           const cacheKey = `${agent.agent_id}:${channelId}`;
-          if (knownChannelConfigHashes.get(cacheKey) === configHash) {
+          let onDiskPresent = true;
+          try {
+            onDiskPresent = frameworkAdapter.hasChannelCredentials?.(agent.code_name, channelId) ?? true;
+          } catch (err) {
+            log(`hasChannelCredentials failed for '${agent.code_name}/${channelId}': ${err.message} \u2014 forcing credential rewrite`);
+            onDiskPresent = false;
+          }
+          if (knownChannelConfigHashes.get(cacheKey) === configHash && onDiskPresent) {
             continue;
           }
+          if (!onDiskPresent && knownChannelConfigHashes.has(cacheKey)) {
+            log(`Cached hash for '${agent.code_name}/${channelId}' but on-disk entry missing \u2014 re-writing credentials`);
+            knownChannelConfigHashes.delete(cacheKey);
+          }
           try {
             const sessionMode2 = refreshData.agent.session_mode;
             frameworkAdapter.writeChannelCredentials(agent.code_name, channelId, entry.config, { sessionMode: sessionMode2 });
@@ -3002,14 +3039,18 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
   const channels = [];
   const devChannels = [];
   if (channelConfigs) {
-    if ("telegram" in channelConfigs) {
-      channels.push("plugin:telegram@claude-plugins-official");
+    const isChannelEnabled = (id) => {
+      const entry = channelConfigs[id];
+      return !!entry?.config && (entry.status === "active" || entry.status === "pending");
+    };
+    if (isChannelEnabled("slack")) {
+      devChannels.push("server:slack");
     }
-    if ("discord" in channelConfigs) {
-      channels.push("plugin:discord@claude-plugins-official");
+    if (isChannelEnabled("telegram")) {
+      devChannels.push("server:telegram");
     }
-    if ("slack" in channelConfigs) {
-      devChannels.push("server:slack");
+    if (isChannelEnabled("discord")) {
+      channels.push("plugin:discord@claude-plugins-official");
     }
   }
   devChannels.push("server:direct-chat");
@@ -4724,7 +4765,7 @@ function deployMcpAssets() {
     log("[manager] MCP assets not found in CLI package \u2014 skipping deployment");
     return;
   }
-  for (const file of ["index.js", "slack-channel.js", "direct-chat-channel.js"]) {
+  for (const file of ["index.js", "slack-channel.js", "direct-chat-channel.js", "telegram-channel.js"]) {
     const src = join2(mcpSourceDir, file);
     const dst = join2(targetDir, file);
     if (!existsSync(src)) continue;