@integrity-labs/agt-cli 0.23.1 → 0.24.0

package/dist/{chunk-Q4QD3TAC.js → chunk-WZTRMJM4.js}

@@ -8,7 +8,7 @@ import {
   parseDeliveryTarget,
   registerFramework,
   wrapScheduledTaskPrompt
-} from "./chunk-2TOCO5D2.js";
+} from "./chunk-HSIESZMZ.js";
 
 // ../../packages/core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
@@ -2284,158 +2284,6 @@ function extractAllowedDomains(input) {
 }
 registerFramework(nemoClawAdapter);
 
-// ../../packages/core/dist/provisioning/frameworks/claudecode/index.js
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync5, chmodSync as chmodSync4, readdirSync, rmSync, copyFileSync } from "fs";
-import { join as join4, relative, dirname as dirname4 } from "path";
-import { homedir as homedir3 } from "os";
-import { execFile as execFile3 } from "child_process";
-
-// ../../packages/core/dist/provisioning/mcp-config-guards.js
-import { existsSync as existsSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3 } from "fs";
-var REQUIRED_ENV_RULES_BY_SERVER = {
-  "cloud-broker": [
-    { key: "AGT_HOST", mustBeConcrete: false },
-    { key: "AGT_API_KEY", mustBeConcrete: false },
-    // ENG-4744: this is the bug shape — writer used to omit this
-    // entirely, or render it as a literal `${AGT_AGENT_ID}` instead
-    // of the agent's real UUID. The broker has no way to substitute
-    // it post-spawn, so a placeholder here = silently broken agent.
-    { key: "AGT_AGENT_ID", mustBeConcrete: true }
-  ]
-};
-var PLACEHOLDER_RE = /\$\{[^}]+\}/;
-function validateRenderedMcpConfig(config) {
-  const errors = [];
-  if (typeof config !== "object" || config === null || Array.isArray(config)) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "config root must be a non-null object"
-        }
-      ]
-    };
-  }
-  const root = config;
-  if (root.mcpServers === void 0) {
-    return { ok: true };
-  }
-  if (typeof root.mcpServers !== "object" || root.mcpServers === null) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "mcpServers must be an object"
-        }
-      ]
-    };
-  }
-  if (Array.isArray(root.mcpServers)) {
-    return {
-      ok: false,
-      errors: [
-        {
-          kind: "invalid_json_shape",
-          server: "*",
-          message: "mcpServers must be an object"
-        }
-      ]
-    };
-  }
-  for (const [serverKey, raw] of Object.entries(root.mcpServers)) {
-    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
-      errors.push({
-        kind: "invalid_json_shape",
-        server: serverKey,
-        message: `entry must be an object`
-      });
-      continue;
-    }
-    const entry = raw;
-    const entryRecord = entry;
-    if (typeof entryRecord["url"] === "string") {
-      const type = entryRecord["type"];
-      if (type !== "http" && type !== "sse") {
-        errors.push({
-          kind: "remote_mcp_missing_type",
-          server: serverKey,
-          message: `url-based entry must include \`type: "http"\` or \`type: "sse"\` (Claude Code MCP schema requires it)`
-        });
-      }
-    }
-    const rules = REQUIRED_ENV_RULES_BY_SERVER[serverKey];
-    if (rules) {
-      const env = entry.env ?? {};
-      for (const rule of rules) {
-        const value = env[rule.key];
-        if (typeof value !== "string" || value.length === 0) {
-          errors.push({
-            kind: "missing_required_env",
-            server: serverKey,
-            message: `missing required env key: ${rule.key}`
-          });
-          continue;
-        }
-        if (rule.mustBeConcrete && PLACEHOLDER_RE.test(value)) {
-          errors.push({
-            kind: "unexpanded_placeholder",
-            server: serverKey,
-            message: `env.${rule.key} contains an unexpanded \${...} placeholder; expected a concrete value`
-          });
-        }
-      }
-    }
-  }
-  return errors.length === 0 ? { ok: true } : { ok: false, errors };
-}
-function formatValidationErrors(errors) {
-  return errors.map((e) => `${e.server}:${e.kind}=${e.message}`).join("; ");
-}
-function safeWriteJsonAtomic(path, content, opts = {}) {
-  const keepBackup = opts.keepBackup !== false;
-  const rename = opts.renamer ?? renameSync3;
-  const tmpPath = `${path}.new`;
-  const bakPath = `${path}.bak`;
-  let movedOriginalToBackup = false;
-  try {
-    writeFileSync4(tmpPath, content);
-  } catch (err) {
-    throw err;
-  }
-  try {
-    if (keepBackup && existsSync4(path)) {
-      rename(path, bakPath);
-      movedOriginalToBackup = true;
-    }
-    rename(tmpPath, path);
-  } catch (err) {
-    try {
-      if (existsSync4(tmpPath))
-        unlinkSync3(tmpPath);
-    } catch {
-    }
-    if (movedOriginalToBackup && !existsSync4(path) && existsSync4(bakPath)) {
-      try {
-        renameSync3(bakPath, path);
-      } catch {
-      }
-    }
-    throw err;
-  }
-}
-function safeWriteMcpJson(path, config) {
-  const validation = validateRenderedMcpConfig(config);
-  if (!validation.ok) {
-    return { written: false, errors: validation.errors };
-  }
-  safeWriteJsonAtomic(path, JSON.stringify(config, null, 2));
-  return { written: true, errors: [] };
-}
-
 // ../../packages/core/dist/provisioning/frameworks/claudecode/identity.js
 function buildMemorySection(hasQmd) {
   const recall = hasQmd ? `### Recall
@@ -2625,6 +2473,46 @@ later tick:
 
 `;
 }
+var ACTIVE_TASKS_MAX_CHARS = 800;
+var ACTIVE_TASKS_TRUNCATION_SUFFIX = "\u2026 (truncated)\n\n";
+function sanitizePromptText(value) {
+  return value.replace(/[-]+/g, " ").replace(/\s+/g, " ").trim();
+}
+function buildActiveTasksSection(activeTasks) {
+  if (!activeTasks || activeTasks.length === 0)
+    return "";
+  const lines = [
+    `## Active tasks (${activeTasks.length})`,
+    "",
+    `You have ${activeTasks.length} kanban task(s) still open from previous`,
+    `sessions. If an incoming conversation maps to one of them, keep it in`,
+    `mind; close it with \`kanban_done\` and reply to the originating thread`,
+    `before stopping.`,
+    ""
+  ];
+  for (const t of activeTasks) {
+    const status = sanitizePromptText(t.status);
+    const id = sanitizePromptText(t.id);
+    const title = sanitizePromptText(t.title);
+    const sourceParts = [];
+    if (t.source_channel && t.source_thread_id) {
+      sourceParts.push(`${sanitizePromptText(t.source_channel)} thread ${sanitizePromptText(t.source_thread_id)}`);
+    }
+    if (t.source_url)
+      sourceParts.push(sanitizePromptText(t.source_url));
+    const source = sourceParts.length > 0 ? ` \u2014 ${sourceParts.join(" \u2022 ")}` : "";
+    lines.push(`- [${status}] ${id}: "${title}"${source}`);
+  }
+  let rendered = lines.join("\n") + "\n\n";
+  if (rendered.length > ACTIVE_TASKS_MAX_CHARS) {
+    rendered = rendered.slice(0, ACTIVE_TASKS_MAX_CHARS - ACTIVE_TASKS_TRUNCATION_SUFFIX.length) + ACTIVE_TASKS_TRUNCATION_SUFFIX;
+  }
+  return rendered;
+}
+function estimateActiveTasksTokens(activeTasks) {
+  const rendered = buildActiveTasksSection(activeTasks);
+  return Math.ceil(rendered.length / 4);
+}
 function buildSkillAuthoringSection() {
   return `## Skill authoring
 
@@ -2975,7 +2863,7 @@ function buildGuardrailsSection(guardrails) {
   return blocks.join("\n") + "\n";
 }
 function generateClaudeMd(input) {
-  const { frontmatter, role, description, resolvedChannels, team, organization, hasQmd, integrations, knowledge, timezone, reportsTo, personalitySeed, teamMembers, people, peerGates, guardrails } = input;
+  const { frontmatter, role, description, resolvedChannels, team, organization, hasQmd, integrations, knowledge, timezone, reportsTo, personalitySeed, teamMembers, people, peerGates, guardrails, activeTasks } = input;
   const consoleUrl = input.consoleUrl ?? "https://app.augmented.team";
   const channelList = resolvedChannels?.length ? resolvedChannels.join(", ") : "none";
   const roleDisplay = role ?? "Agent";
@@ -2992,6 +2880,7 @@ function generateClaudeMd(input) {
   const peopleSection = buildPeopleSection(people);
   const multiAgentSection = buildMultiAgentSection(frontmatter, peerGates);
   const guardrailsSection = buildGuardrailsSection(guardrails);
+  const activeTasksSection = buildActiveTasksSection(activeTasks);
   return `# ${frontmatter.display_name}
 
 You are **${frontmatter.display_name}**, **${roleDisplay}**${// ENG-5009: render org context alongside team so introductions are
@@ -3047,7 +2936,7 @@ If the work turns out to be unexpectedly slow after you started inline,
 finish the current sub-step, then dispatch the rest. Don't apologise for
 mid-task switching \u2014 operators care about responsiveness, not consistency.
 ${buildProgressHeartbeatSection(resolvedChannels)}
-${personalitySection}## Identity
+${activeTasksSection}${personalitySection}## Identity
 
 - Code Name: ${frontmatter.code_name}
 - Owner: ${frontmatter.owner.name}
@@ -3352,6 +3241,158 @@ The marginal cost of completeness is near zero. Do the whole thing.
 ${frontmatter.environment === "prod" ? "- Production environment: exercise extra caution with all operations.\n" : ""}`;
 }
 
+// ../../packages/core/dist/provisioning/frameworks/claudecode/index.js
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync5, chmodSync as chmodSync4, readdirSync, rmSync, copyFileSync } from "fs";
+import { join as join4, relative, dirname as dirname4 } from "path";
+import { homedir as homedir3 } from "os";
+import { execFile as execFile3 } from "child_process";
+
+// ../../packages/core/dist/provisioning/mcp-config-guards.js
+import { existsSync as existsSync4, readFileSync as readFileSync4, renameSync as renameSync3, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3 } from "fs";
+var REQUIRED_ENV_RULES_BY_SERVER = {
+  "cloud-broker": [
+    { key: "AGT_HOST", mustBeConcrete: false },
+    { key: "AGT_API_KEY", mustBeConcrete: false },
+    // ENG-4744: this is the bug shape — writer used to omit this
+    // entirely, or render it as a literal `${AGT_AGENT_ID}` instead
+    // of the agent's real UUID. The broker has no way to substitute
+    // it post-spawn, so a placeholder here = silently broken agent.
+    { key: "AGT_AGENT_ID", mustBeConcrete: true }
+  ]
+};
+var PLACEHOLDER_RE = /\$\{[^}]+\}/;
+function validateRenderedMcpConfig(config) {
+  const errors = [];
+  if (typeof config !== "object" || config === null || Array.isArray(config)) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "config root must be a non-null object"
+        }
+      ]
+    };
+  }
+  const root = config;
+  if (root.mcpServers === void 0) {
+    return { ok: true };
+  }
+  if (typeof root.mcpServers !== "object" || root.mcpServers === null) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "mcpServers must be an object"
+        }
+      ]
+    };
+  }
+  if (Array.isArray(root.mcpServers)) {
+    return {
+      ok: false,
+      errors: [
+        {
+          kind: "invalid_json_shape",
+          server: "*",
+          message: "mcpServers must be an object"
+        }
+      ]
+    };
+  }
+  for (const [serverKey, raw] of Object.entries(root.mcpServers)) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+      errors.push({
+        kind: "invalid_json_shape",
+        server: serverKey,
+        message: `entry must be an object`
+      });
+      continue;
+    }
+    const entry = raw;
+    const entryRecord = entry;
+    if (typeof entryRecord["url"] === "string") {
+      const type = entryRecord["type"];
+      if (type !== "http" && type !== "sse") {
+        errors.push({
+          kind: "remote_mcp_missing_type",
+          server: serverKey,
+          message: `url-based entry must include \`type: "http"\` or \`type: "sse"\` (Claude Code MCP schema requires it)`
+        });
+      }
+    }
+    const rules = REQUIRED_ENV_RULES_BY_SERVER[serverKey];
+    if (rules) {
+      const env = entry.env ?? {};
+      for (const rule of rules) {
+        const value = env[rule.key];
+        if (typeof value !== "string" || value.length === 0) {
+          errors.push({
+            kind: "missing_required_env",
+            server: serverKey,
+            message: `missing required env key: ${rule.key}`
+          });
+          continue;
+        }
+        if (rule.mustBeConcrete && PLACEHOLDER_RE.test(value)) {
+          errors.push({
+            kind: "unexpanded_placeholder",
+            server: serverKey,
+            message: `env.${rule.key} contains an unexpanded \${...} placeholder; expected a concrete value`
+          });
+        }
+      }
+    }
+  }
+  return errors.length === 0 ? { ok: true } : { ok: false, errors };
+}
+function formatValidationErrors(errors) {
+  return errors.map((e) => `${e.server}:${e.kind}=${e.message}`).join("; ");
+}
+function safeWriteJsonAtomic(path, content, opts = {}) {
+  const keepBackup = opts.keepBackup !== false;
+  const rename = opts.renamer ?? renameSync3;
+  const tmpPath = `${path}.new`;
+  const bakPath = `${path}.bak`;
+  let movedOriginalToBackup = false;
+  try {
+    writeFileSync4(tmpPath, content);
+  } catch (err) {
+    throw err;
+  }
+  try {
+    if (keepBackup && existsSync4(path)) {
+      rename(path, bakPath);
+      movedOriginalToBackup = true;
+    }
+    rename(tmpPath, path);
+  } catch (err) {
+    try {
+      if (existsSync4(tmpPath))
+        unlinkSync3(tmpPath);
+    } catch {
+    }
+    if (movedOriginalToBackup && !existsSync4(path) && existsSync4(bakPath)) {
+      try {
+        renameSync3(bakPath, path);
+      } catch {
+      }
+    }
+    throw err;
+  }
+}
+function safeWriteMcpJson(path, config) {
+  const validation = validateRenderedMcpConfig(config);
+  if (!validation.ok) {
+    return { written: false, errors: validation.errors };
+  }
+  safeWriteJsonAtomic(path, JSON.stringify(config, null, 2));
+  return { written: true, errors: [] };
+}
+
 // ../../packages/core/dist/integrations/oauth-providers.js
 var OAUTH_PROVIDERS = {
   "google-workspace": {
@@ -4518,7 +4559,11 @@ var claudeCodeAdapter = {
       // Effective guardrails (org → team → agent), pre-joined with
       // definitions server-side. Renders into the Guardrails section
       // right after Governance. Omit / empty array → section skipped.
-      guardrails: input.guardrails
+      guardrails: input.guardrails,
+      // ENG-5380: active kanban tasks (todo/in_progress) the manager
+      // chose to inject. `undefined` when the feature flag is off; the
+      // identity generator short-circuits the section in that case.
+      activeTasks: input.activeTasks
     };
     const mcpJson = buildMcpJson(input);
     const initialMcpServerKeys = Object.keys(mcpJson.mcpServers ?? {});
@@ -6523,7 +6568,7 @@ async function managerInstallCommand(opts = {}) {
   };
   const apiKey = getApiKey();
   if (apiKey) env.AGT_API_KEY = apiKey;
-  for (const k of ["AGT_TEAM", "PATH", "CLAUDE_PATH"]) {
+  for (const k of ["AGT_TEAM", "AGT_CLI_RELEASE_CHANNEL", "PATH", "CLAUDE_PATH"]) {
     const v = process.env[k];
     if (v != null) env[k] = v;
   }
@@ -6597,7 +6642,7 @@ async function managerInstallSystemUnitCommand(opts = {}) {
   };
   const apiKey = getApiKey();
   if (apiKey) env.AGT_API_KEY = apiKey;
-  for (const k of ["AGT_TEAM", "PATH", "CLAUDE_PATH"]) {
+  for (const k of ["AGT_TEAM", "AGT_CLI_RELEASE_CHANNEL", "PATH", "CLAUDE_PATH"]) {
     const v = process.env[k];
     if (v != null) env[k] = v;
   }
@@ -6639,6 +6684,7 @@ async function managerUninstallSystemUnitCommand() {
 export {
   getIntegration,
   extractCommandNotFound,
+  estimateActiveTasksTokens,
   provisionStopHook,
   provisionIsolationHook,
   provisionOrientHook,
@@ -6671,4 +6717,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-Q4QD3TAC.js.map
+//# sourceMappingURL=chunk-WZTRMJM4.js.map