@integrity-labs/agt-cli 0.15.7 → 0.15.9

package/dist/bin/agt.js

@@ -46,7 +46,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-WIW5FIRY.js";
+} from "../chunk-C6UBNLUC.js";
 
 // src/bin/agt.ts
 import { join as join10 } from "path";
@@ -3730,7 +3730,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync5, realpathSync } from "fs";
 import chalk17 from "chalk";
 import ora15 from "ora";
-var cliVersion = true ? "0.15.7" : "dev";
+var cliVersion = true ? "0.15.9" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4179,7 +4179,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.15.7" : "dev";
+var cliVersion2 = true ? "0.15.9" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {

package/dist/{chunk-WIW5FIRY.js → chunk-C6UBNLUC.js}

@@ -3117,6 +3117,120 @@ function provisionStopHook(codeName) {
     "exit 0"
   ].join("\n") + "\n";
   writeFileSync4(hookScriptPath, hookScript, { mode: 493 });
+  const ghostHookPath = join4(claudeDir, "agt-ghost-reply-hook.sh");
+  const ghostHookScript = [
+    "#!/bin/bash",
+    "# Auto-generated by Augmented (ENG-4569) \u2014 detects ghost replies and",
+    "# drops recovery files in the channel outbox dirs. Runs on every Stop.",
+    "set -euo pipefail",
+    "INPUT=$(cat)",
+    `TRANSCRIPT_PATH=$(echo "$INPUT" | jq -r '.transcript_path // empty')`,
+    '[ -z "$TRANSCRIPT_PATH" ] || [ ! -f "$TRANSCRIPT_PATH" ] && exit 0',
+    `CWD=$(echo "$INPUT" | jq -r '.cwd // empty')`,
+    `CODE_NAME=$(echo "$CWD" | sed -nE 's|.*/\\.augmented/([^/]+)/project/?$|\\1|p')`,
+    '[ -z "$CODE_NAME" ] && exit 0',
+    'AGENT_DIR="$(dirname "$CWD")"',
+    'TG_MARKER_DIR="${AGENT_DIR}/telegram-pending-inbound"',
+    'SL_MARKER_DIR="${AGENT_DIR}/slack-pending-inbound"',
+    "# CodeRabbit ENG-4569 round-3: latest-marker correlation could leak chat",
+    "# A's composed reply into chat B if B arrived later. Now correlate by",
+    "# scanning the transcript for the LAST channel-source <channel ...> tag",
+    "# in user/notification turns and routing recovery to the EXACT marker",
+    "# whose chat_id+message_id (Telegram) / channel+thread_ts (Slack) match.",
+    "# If the tag isn't found, skip recovery \u2014 the timeout will catch it.",
+    "pending_markers_count() {",
+    '  local dir="$1"',
+    '  [ ! -d "$dir" ] && echo 0 && return',
+    "  shopt -s nullglob",
+    '  local files=("$dir"/*.json)',
+    '  echo "${#files[@]}"',
+    "}",
+    'TG_PENDING=$(pending_markers_count "$TG_MARKER_DIR")',
+    'SL_PENDING=$(pending_markers_count "$SL_MARKER_DIR")',
+    '[ "$TG_PENDING" = "0" ] && [ "$SL_PENDING" = "0" ] && exit 0',
+    `LAST_ASSISTANT=$(tail -200 "$TRANSCRIPT_PATH" | jq -cs '[.[] | select(.type == "assistant" or .role == "assistant")] | last // empty' 2>/dev/null)`,
+    '[ -z "$LAST_ASSISTANT" ] || [ "$LAST_ASSISTANT" = "null" ] && exit 0',
+    `TEXT=$(echo "$LAST_ASSISTANT" | jq -r '(.message.content // .content // []) | map(select(.type == "text") | .text) | join("\\n\\n")' 2>/dev/null)`,
+    "# Strip whitespace and bail only on truly-empty (vs the previous <4-char",
+    '# threshold that dropped legit short replies like "ok", "yes", emoji).',
+    '[ -z "${TEXT//[[:space:]]/}" ] && exit 0',
+    `TOOL_NAMES=$(echo "$LAST_ASSISTANT" | jq -r '(.message.content // .content // []) | map(select(.type == "tool_use") | .name) | .[]' 2>/dev/null || true)`,
+    "# Find the LAST <channel ...> tag in user/notification turns. Channel",
+    "# notifications are forwarded into the session as text containing this",
+    "# tag (slack-channel.ts:1247 / telegram-channel.ts:776 emit content +",
+    "# meta which Claude Code wraps in a <channel ...> preamble). Searching",
+    "# the raw text gives us the exact pending conversation key.",
+    `CHANNEL_TAG=$(tail -400 "$TRANSCRIPT_PATH" | jq -r '(.message.content // .content // []) | map(select(.type == "text") | .text) | join(" ")' 2>/dev/null | grep -oE '<channel [^>]+>' | tail -1)`,
+    'TAG_SOURCE=""',
+    `[ -n "$CHANNEL_TAG" ] && TAG_SOURCE=$(echo "$CHANNEL_TAG" | grep -oE 'source="[^"]+"' | head -1 | sed 's/source="\\(.*\\)"/\\1/')`,
+    'extract_attr() { echo "$1" | grep -oE "$2=\\"[^\\"]+\\"" | head -1 | sed -E "s/$2=\\"(.*)\\"/\\\\1/"; }',
+    "# Atomic write helper: jq \u2192 tmp file in same dir, then rename. The",
+    "# channel-side fs.watch only fires on rename, so the file is never",
+    "# observed mid-write.",
+    "atomic_write_payload() {",
+    '  local out_dir="$1" final="$2" jq_expr="$3"; shift 3',
+    '  mkdir -p "$out_dir"',
+    '  local tmp="$out_dir/.${final##*/}.tmp"',
+    '  jq -n "$jq_expr" "$@" > "$tmp"',
+    '  chmod 600 "$tmp" 2>/dev/null || true',
+    '  mv -f "$tmp" "$out_dir/$final"',
+    "}",
+    "# Sanitize an ID the same way the channel servers do (safeMarkerName /",
+    "# safeSlackMarkerName): replace anything outside [A-Za-z0-9_-] with `_`.",
+    `safe_id() { echo -n "$1" | sed -E 's|[^A-Za-z0-9_-]|_|g'; }`,
+    "recover_telegram_for() {",
+    '  local chat_id="$1" msg_id="$2"',
+    '  [ -z "$chat_id" ] || [ -z "$msg_id" ] && return',
+    "  # If the agent DID call telegram.reply this turn, no recovery needed.",
+    `  echo "$TOOL_NAMES" | grep -qE '^(telegram\\.reply|telegram\\.send_message)$' && return`,
+    "  local marker_name",
+    '  marker_name="$(safe_id "$chat_id")__$(safe_id "$msg_id").json"',
+    '  local marker_path="${TG_MARKER_DIR}/${marker_name}"',
+    '  [ ! -f "$marker_path" ] && return',
+    "  local TS",
+    "  TS=$(date -u +%Y%m%dT%H%M%S%N)",
+    '  atomic_write_payload "${AGENT_DIR}/telegram-recovery-outbox" "${TS}.json" \\',
+    `    '{chat_id:$c, message_id:$m, text:$t, source:"ghost-reply-recovery"}' \\`,
+    '    --arg c "$chat_id" --arg m "$msg_id" --arg t "$TEXT"',
+    '  rm -f "$marker_path" 2>/dev/null || true',
+    "}",
+    "recover_slack_for() {",
+    '  local channel="$1" thread_ts="$2"',
+    '  [ -z "$channel" ] && return',
+    "  # If the agent DID call slack.reply this turn, no recovery needed.",
+    `  echo "$TOOL_NAMES" | grep -qE '^slack\\.reply$' && return`,
+    "  # Find any marker for this channel+thread (in busy threads multiple",
+    "  # message_ts entries can be pending \u2014 recover the oldest, that's the",
+    "  # one closest to firing the timeout).",
+    '  local prefix="$(safe_id "$channel")__$(safe_id "$thread_ts")__"',
+    '  local marker_path=""',
+    "  shopt -s nullglob",
+    '  for f in "$SL_MARKER_DIR"/${prefix}*.json; do',
+    '    [ -z "$marker_path" ] && marker_path="$f"',
+    "  done",
+    '  [ -z "$marker_path" ] && return',
+    "  local TS",
+    "  TS=$(date -u +%Y%m%dT%H%M%S%N)",
+    '  atomic_write_payload "${AGENT_DIR}/slack-recovery-outbox" "${TS}.json" \\',
+    `    '{channel:$c, thread_ts:$th, text:$t, source:"ghost-reply-recovery"}' \\`,
+    '    --arg c "$channel" --arg th "$thread_ts" --arg t "$TEXT"',
+    '  rm -f "$marker_path" 2>/dev/null || true',
+    "}",
+    "# Strict correlation: only recover if the last channel tag in the",
+    "# transcript points at a channel/key that has an exact-match pending",
+    "# marker. No tag found \u2192 skip; let timeout handle it.",
+    'if [ "$TAG_SOURCE" = "telegram" ]; then',
+    '  CHAT_ID=$(extract_attr "$CHANNEL_TAG" "chat_id")',
+    '  MSG_ID=$(extract_attr "$CHANNEL_TAG" "message_id")',
+    '  recover_telegram_for "$CHAT_ID" "$MSG_ID"',
+    'elif [ "$TAG_SOURCE" = "slack" ]; then',
+    '  CHANNEL=$(extract_attr "$CHANNEL_TAG" "channel")',
+    '  THREAD_TS=$(extract_attr "$CHANNEL_TAG" "thread_ts")',
+    '  recover_slack_for "$CHANNEL" "$THREAD_TS"',
+    "fi",
+    "exit 0"
+  ].join("\n") + "\n";
+  writeFileSync4(ghostHookPath, ghostHookScript, { mode: 493 });
   const settingsPath = join4(claudeDir, "settings.local.json");
   let settings = {};
   try {
@@ -3127,10 +3241,8 @@ function provisionStopHook(codeName) {
   hooks["Stop"] = [
     {
       hooks: [
-        {
-          type: "command",
-          command: hookScriptPath
-        }
+        { type: "command", command: hookScriptPath },
+        { type: "command", command: ghostHookPath }
       ]
     }
   ];
@@ -3280,6 +3392,13 @@ function buildMcpJson(input) {
       AGT_API_KEY: process.env["AGT_API_KEY"] ?? "",
       AGT_AGENT_ID: input.agent.agent_id,
       AGT_AGENT_CODE_NAME: input.agent.code_name,
+      // ENG-4561: Claude Code substitutes `${VAR}` in .mcp.json env values
+      // at MCP-launch time using the spawn environment, not at file-write
+      // time. Manager-worker exports AGT_RUN_ID per Claude spawn so the
+      // bridge can stamp run_id onto inserted rows (kanban, knowledge).
+      // If AGT_RUN_ID isn't set in the environment, Claude leaves the
+      // literal `${AGT_RUN_ID}` — the bridge filters that case out.
+      AGT_RUN_ID: "${AGT_RUN_ID}",
       // Console origin so the MCP bridge can build absolute URLs (e.g.
       // dashboard links) in tool replies. Falls back to NEXT_PUBLIC_APP_URL
       // / AGT_CONSOLE_URL — same chain consoleUrl uses for kanban links.
@@ -7115,4 +7234,4 @@ export {
   managerStopCommand,
   managerStatusCommand
 };
-//# sourceMappingURL=chunk-WIW5FIRY.js.map
+//# sourceMappingURL=chunk-C6UBNLUC.js.map