@integrity-labs/agt-cli 0.26.2-eng5706.1 → 0.27.0

package/dist/mcp/telegram-channel.js

@@ -14296,18 +14296,18 @@ import https from "https";
 import { createHash, randomUUID as randomUUID2 } from "crypto";
 import {
   createWriteStream,
-  existsSync,
-  mkdirSync as mkdirSync2,
-  readFileSync,
+  existsSync as existsSync2,
+  mkdirSync as mkdirSync3,
+  readFileSync as readFileSync2,
   readdirSync,
-  renameSync as renameSync2,
+  renameSync as renameSync3,
   statSync,
-  unlinkSync as unlinkSync2,
+  unlinkSync as unlinkSync3,
   watch,
-  writeFileSync as writeFileSync2
+  writeFileSync as writeFileSync3
 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 
 // src/channel-attachments.ts
 import { homedir } from "os";
@@ -15317,6 +15317,75 @@ function createConversationIngestClient(args) {
   };
 }
 
+// src/inbound-context-client.ts
+var REQUEST_TIMEOUT_MS4 = 1e4;
+function createInboundContextClient(args) {
+  if (!args.agtHost || !args.agtApiKey || !args.agentId) return null;
+  const fetchImpl = args.fetchImpl ?? fetch;
+  const log = args.log ?? (() => {
+  });
+  const base = args.agtHost.replace(/\/+$/, "");
+  const agentId = args.agentId;
+  const apiKey = args.agtApiKey;
+  let cachedToken = null;
+  let cachedTokenExpiresAt = 0;
+  async function getToken() {
+    if (cachedToken && Date.now() < cachedTokenExpiresAt) return cachedToken;
+    const resp = await fetchImpl(`${base}/host/exchange`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ host_key: apiKey }),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS4)
+    });
+    if (!resp.ok) {
+      const body = await resp.text().catch(() => "");
+      throw new Error(`/host/exchange failed (${resp.status}): ${body.slice(0, 200)}`);
+    }
+    const data = await resp.json();
+    cachedToken = data.token;
+    cachedTokenExpiresAt = data.expires_at ? new Date(data.expires_at).getTime() - 12e4 : Date.now() + 55 * 6e4;
+    return cachedToken;
+  }
+  async function postOnce(body) {
+    const token = await getToken();
+    return fetchImpl(`${base}/host/inbound-context`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS4)
+    });
+  }
+  async function emit(args2) {
+    const body = {
+      agent_id: agentId,
+      source_integration: args2.sourceIntegration,
+      source_external_id: args2.sourceExternalId,
+      ...args2.sourceUrl ? { source_url: args2.sourceUrl } : {}
+    };
+    try {
+      let resp = await postOnce(body);
+      if (resp.status === 401) {
+        cachedToken = null;
+        cachedTokenExpiresAt = 0;
+        resp = await postOnce(body);
+      }
+      if (!resp.ok) {
+        const text = await resp.text().catch(() => "");
+        log(
+          `inbound-context: POST failed (${resp.status}) integration=${args2.sourceIntegration}: ${text.slice(0, 200)}`
+        );
+      }
+    } catch (err) {
+      log(`inbound-context: emit threw integration=${args2.sourceIntegration}: ${err.message}`);
+    }
+  }
+  return {
+    recordInbound(args2) {
+      void emit(args2);
+    }
+  };
+}
+
 // src/progress-tools.ts
 import { randomUUID } from "crypto";
 
@@ -15741,12 +15810,82 @@ function createTelegramProgressFlush(opts) {
   };
 }
 
+// src/mcp-spawn-lock.ts
+import {
+  existsSync,
+  mkdirSync as mkdirSync2,
+  readFileSync,
+  renameSync as renameSync2,
+  unlinkSync as unlinkSync2,
+  writeFileSync as writeFileSync2
+} from "fs";
+import { join as join2 } from "path";
+function defaultIsPidAlive(pid) {
+  if (!Number.isFinite(pid) || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    const code = err.code;
+    if (code === "ESRCH") return false;
+    return true;
+  }
+}
+function acquireMcpSpawnLock(args) {
+  const { agentDir, basename, options = {} } = args;
+  if (!agentDir) return { kind: "no-agent-dir" };
+  const isPidAlive = options.isPidAlive ?? defaultIsPidAlive;
+  const selfPid = options.selfPid ?? process.pid;
+  const now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+  const path = join2(agentDir, basename);
+  const existing = readLockHolder(path);
+  if (existing) {
+    if (existing.pid === selfPid) {
+      return { kind: "acquired", path };
+    }
+    if (isPidAlive(existing.pid)) {
+      return { kind: "blocked", path, holder: existing };
+    }
+  }
+  mkdirSync2(agentDir, { recursive: true, mode: 448 });
+  const tmpPath = `${path}.${selfPid}.tmp`;
+  const payload = { pid: selfPid, started_at: now() };
+  writeFileSync2(tmpPath, JSON.stringify(payload), { mode: 384 });
+  renameSync2(tmpPath, path);
+  return { kind: "acquired", path };
+}
+function releaseMcpSpawnLock(lockPath, opts = {}) {
+  if (!lockPath) return;
+  const selfPid = opts.selfPid ?? process.pid;
+  const existing = readLockHolder(lockPath);
+  if (!existing) return;
+  if (existing.pid !== selfPid) return;
+  try {
+    unlinkSync2(lockPath);
+  } catch {
+  }
+}
+function readLockHolder(path) {
+  if (!existsSync(path)) return null;
+  try {
+    const raw = readFileSync(path, "utf8");
+    const parsed = JSON.parse(raw);
+    const pid = typeof parsed.pid === "number" ? parsed.pid : Number(parsed.pid);
+    if (!Number.isFinite(pid) || pid <= 0) return null;
+    const startedAt = typeof parsed.started_at === "string" ? parsed.started_at : "";
+    return { pid, started_at: startedAt };
+  } catch {
+    return null;
+  }
+}
+
 // src/telegram-channel.ts
 function redactId(id) {
   return createHash("sha256").update(String(id)).digest("hex").slice(0, 8);
 }
 var BOT_TOKEN = process.env.TELEGRAM_BOT_TOKEN;
 var AGENT_CODE_NAME = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
+var TELEGRAM_AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join3(homedir2(), ".augmented", AGENT_CODE_NAME) : null;
 var AGT_HOST = process.env.AGT_HOST ?? null;
 var AGT_API_KEY = process.env.AGT_API_KEY ?? null;
 var AGT_AGENT_ID = process.env.AGT_AGENT_ID ?? null;
@@ -15802,6 +15941,13 @@ var conversationIngestClient = createConversationIngestClient({
   log: (line) => process.stderr.write(`telegram-channel(${AGENT_CODE_NAME}): ${line}
 `)
 });
+var inboundContextClient = createInboundContextClient({
+  agtHost: AGT_HOST,
+  agtApiKey: AGT_API_KEY,
+  agentId: process.env.AGT_AGENT_ID ?? null,
+  log: (line) => process.stderr.write(`telegram-channel(${AGENT_CODE_NAME}): ${line}
+`)
+});
 var peerRateApiClient = createDefaultPeerRateApiClient({
   agtHost: AGT_HOST,
   agtApiKey: AGT_API_KEY,
@@ -15823,9 +15969,9 @@ if (!BOT_TOKEN) {
 var stderrLogStream = null;
 if (AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown") {
   try {
-    const logDir = join2(homedir2(), ".augmented", AGENT_CODE_NAME);
-    mkdirSync2(logDir, { recursive: true });
-    stderrLogStream = createWriteStream(join2(logDir, "telegram-channel-stderr.log"), {
+    const logDir = join3(homedir2(), ".augmented", AGENT_CODE_NAME);
+    mkdirSync3(logDir, { recursive: true });
+    stderrLogStream = createWriteStream(join3(logDir, "telegram-channel-stderr.log"), {
       flags: "a",
       mode: 384
     });
@@ -15906,7 +16052,7 @@ async function setMessageReaction(chatId, messageId, emoji2) {
     );
   }
 }
-var RESTART_FLAGS_DIR = join2(homedir2(), ".augmented", "restart-flags");
+var RESTART_FLAGS_DIR = join3(homedir2(), ".augmented", "restart-flags");
 function buildTelegramHelpMessage(codeName) {
   return [
     `\u{1F916} *Available commands for \`${codeName}\`*`,
@@ -15943,10 +16089,10 @@ async function handleHelpCommand(opts) {
 }
 async function handleRestartCommand(opts) {
   try {
-    if (!existsSync(RESTART_FLAGS_DIR)) {
-      mkdirSync2(RESTART_FLAGS_DIR, { recursive: true });
+    if (!existsSync2(RESTART_FLAGS_DIR)) {
+      mkdirSync3(RESTART_FLAGS_DIR, { recursive: true });
     }
-    const flagPath = join2(RESTART_FLAGS_DIR, `${AGENT_CODE_NAME}.flag`);
+    const flagPath = join3(RESTART_FLAGS_DIR, `${AGENT_CODE_NAME}.flag`);
     const flag = {
       codeName: AGENT_CODE_NAME,
       source: "telegram",
@@ -15954,8 +16100,8 @@ async function handleRestartCommand(opts) {
       reply: { chat_id: opts.chatId, message_id: opts.messageId }
     };
     const tmpPath = `${flagPath}.${process.pid}.${randomUUID2()}.tmp`;
-    writeFileSync2(tmpPath, JSON.stringify(flag) + "\n", "utf8");
-    renameSync2(tmpPath, flagPath);
+    writeFileSync3(tmpPath, JSON.stringify(flag) + "\n", "utf8");
+    renameSync3(tmpPath, flagPath);
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): /restart queued from chat ${redactId(opts.chatId)}
 `
@@ -16062,16 +16208,16 @@ async function classifyRestartCommand(text) {
   if (!ours) return "verification_failed";
   return target === ours ? "act" : "ignore";
 }
-var AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join2(homedir2(), ".augmented", AGENT_CODE_NAME) : null;
-var PENDING_INBOUND_DIR = AGENT_DIR ? join2(AGENT_DIR, "telegram-pending-inbound") : null;
-var RECOVERY_OUTBOX_DIR = AGENT_DIR ? join2(AGENT_DIR, "telegram-recovery-outbox") : null;
+var AGENT_DIR = AGENT_CODE_NAME && AGENT_CODE_NAME !== "unknown" ? join3(homedir2(), ".augmented", AGENT_CODE_NAME) : null;
+var PENDING_INBOUND_DIR = AGENT_DIR ? join3(AGENT_DIR, "telegram-pending-inbound") : null;
+var RECOVERY_OUTBOX_DIR = AGENT_DIR ? join3(AGENT_DIR, "telegram-recovery-outbox") : null;
 function safeMarkerName(chatId, messageId) {
   const safe = (s) => s.replace(/[^A-Za-z0-9_-]/g, "_");
   return `${safe(chatId)}__${safe(messageId)}.json`;
 }
 function pendingInboundPath(chatId, messageId) {
   if (!PENDING_INBOUND_DIR) return null;
-  return join2(PENDING_INBOUND_DIR, safeMarkerName(chatId, messageId));
+  return join3(PENDING_INBOUND_DIR, safeMarkerName(chatId, messageId));
 }
 function writePendingInboundMarker(chatId, messageId, chatType) {
   const path = pendingInboundPath(chatId, messageId);
@@ -16083,8 +16229,8 @@ function writePendingInboundMarker(chatId, messageId, chatType) {
     received_at: (/* @__PURE__ */ new Date()).toISOString()
   };
   try {
-    mkdirSync2(PENDING_INBOUND_DIR, { recursive: true, mode: 448 });
-    writeFileSync2(path, JSON.stringify(marker), { mode: 384 });
+    mkdirSync3(PENDING_INBOUND_DIR, { recursive: true, mode: 448 });
+    writeFileSync3(path, JSON.stringify(marker), { mode: 384 });
   } catch (err) {
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): pending-inbound marker write failed: ${err.message}
@@ -16096,7 +16242,7 @@ function clearPendingInboundMarker(chatId, messageId) {
   const path = pendingInboundPath(chatId, messageId);
   if (!path) return;
   try {
-    if (existsSync(path)) unlinkSync2(path);
+    if (existsSync2(path)) unlinkSync3(path);
   } catch {
   }
 }
@@ -16115,10 +16261,10 @@ function nextRetryName(filename) {
 async function processRecoveryOutboxFile(filename) {
   if (!RECOVERY_OUTBOX_DIR) return;
   if (filename.endsWith(".poison.json") || filename.endsWith(".tmp")) return;
-  const fullPath = join2(RECOVERY_OUTBOX_DIR, filename);
+  const fullPath = join3(RECOVERY_OUTBOX_DIR, filename);
   let payload;
   try {
-    const raw = readFileSync(fullPath, "utf-8");
+    const raw = readFileSync2(fullPath, "utf-8");
     payload = JSON.parse(raw);
   } catch (err) {
     process.stderr.write(
@@ -16126,7 +16272,7 @@ async function processRecoveryOutboxFile(filename) {
 `
     );
     try {
-      renameSync2(fullPath, `${fullPath}.parse-error.poison`);
+      renameSync3(fullPath, `${fullPath}.parse-error.poison`);
     } catch {
     }
     return;
@@ -16137,7 +16283,7 @@ async function processRecoveryOutboxFile(filename) {
 `
     );
     try {
-      renameSync2(fullPath, `${fullPath}.malformed.poison`);
+      renameSync3(fullPath, `${fullPath}.malformed.poison`);
     } catch {
     }
     return;
@@ -16173,7 +16319,7 @@ async function processRecoveryOutboxFile(filename) {
   }
   if (sendSucceeded) {
     try {
-      unlinkSync2(fullPath);
+      unlinkSync3(fullPath);
     } catch {
     }
     return;
@@ -16181,7 +16327,7 @@ async function processRecoveryOutboxFile(filename) {
   const next = nextRetryName(filename);
   if (next) {
     try {
-      renameSync2(fullPath, join2(RECOVERY_OUTBOX_DIR, next.next));
+      renameSync3(fullPath, join3(RECOVERY_OUTBOX_DIR, next.next));
       if (next.attempt >= MAX_RECOVERY_ATTEMPTS) {
         process.stderr.write(
           `telegram-channel(${AGENT_CODE_NAME}): ghost-reply recovery exhausted retries \u2014 moved to ${next.next}
@@ -16221,7 +16367,7 @@ function scanRecoveryRetries() {
     if (!f.includes(".retry-") || f.endsWith(".poison.json")) continue;
     let mtimeMs;
     try {
-      mtimeMs = statSync(join2(RECOVERY_OUTBOX_DIR, f)).mtimeMs;
+      mtimeMs = statSync(join3(RECOVERY_OUTBOX_DIR, f)).mtimeMs;
     } catch {
       continue;
     }
@@ -16233,7 +16379,7 @@ function scanRecoveryRetries() {
 function startRecoveryOutboxWatcher() {
   if (!RECOVERY_OUTBOX_DIR) return;
   try {
-    mkdirSync2(RECOVERY_OUTBOX_DIR, { recursive: true, mode: 448 });
+    mkdirSync3(RECOVERY_OUTBOX_DIR, { recursive: true, mode: 448 });
   } catch (err) {
     process.stderr.write(
       `telegram-channel(${AGENT_CODE_NAME}): recovery outbox mkdir failed: ${err.message}
@@ -16251,7 +16397,7 @@ function startRecoveryOutboxWatcher() {
     const watcher = watch(RECOVERY_OUTBOX_DIR, (event, filename) => {
       if (event !== "rename" || !filename) return;
       if (!isFirstAttemptOutboxFile(filename)) return;
-      if (existsSync(join2(RECOVERY_OUTBOX_DIR, filename))) {
+      if (existsSync2(join3(RECOVERY_OUTBOX_DIR, filename))) {
         void processRecoveryOutboxFile(filename);
       }
     });
@@ -16272,7 +16418,7 @@ function trackPendingMessage(chatId, messageId, chatType) {
 }
 function sweepTelegramStaleMarkersOnBoot() {
   if (!PENDING_INBOUND_DIR) return;
-  if (!existsSync(PENDING_INBOUND_DIR)) return;
+  if (!existsSync2(PENDING_INBOUND_DIR)) return;
   let filenames;
   try {
     filenames = readdirSync(PENDING_INBOUND_DIR);
@@ -16288,17 +16434,17 @@ function sweepTelegramStaleMarkersOnBoot() {
   for (const filename of filenames) {
     if (!filename.endsWith(".json")) continue;
     if (filename.endsWith(".tmp")) continue;
-    const fullPath = join2(PENDING_INBOUND_DIR, filename);
+    const fullPath = join3(PENDING_INBOUND_DIR, filename);
     let marker;
     try {
-      marker = JSON.parse(readFileSync(fullPath, "utf-8"));
+      marker = JSON.parse(readFileSync2(fullPath, "utf-8"));
     } catch (err) {
       process.stderr.write(
         `telegram-channel(${AGENT_CODE_NAME}): stale-marker parse failed for ${redactId(filename)}: ${err.message}
 `
       );
       try {
-        unlinkSync2(fullPath);
+        unlinkSync3(fullPath);
       } catch {
       }
       cleared++;
@@ -16307,7 +16453,7 @@ function sweepTelegramStaleMarkersOnBoot() {
     const { chat_id, message_id, received_at } = marker;
     if (!chat_id || !message_id || !received_at) {
       try {
-        unlinkSync2(fullPath);
+        unlinkSync3(fullPath);
       } catch {
       }
       cleared++;
@@ -16316,7 +16462,7 @@ function sweepTelegramStaleMarkersOnBoot() {
     const receivedAtMs = Date.parse(received_at);
     if (!Number.isFinite(receivedAtMs) || receivedAtMs > now || now - receivedAtMs > STALE_MARKER_MS) {
       try {
-        unlinkSync2(fullPath);
+        unlinkSync3(fullPath);
       } catch {
       }
       cleared++;
@@ -16335,7 +16481,7 @@ function clearPendingMessage(chatId, messageId) {
     clearPendingInboundMarker(chatId, messageId);
     return;
   }
-  if (!PENDING_INBOUND_DIR || !existsSync(PENDING_INBOUND_DIR)) return;
+  if (!PENDING_INBOUND_DIR || !existsSync2(PENDING_INBOUND_DIR)) return;
   const safeChatId = chatId.replace(/[^A-Za-z0-9_-]/g, "_");
   const prefix = `${safeChatId}__`;
   let filenames;
@@ -16348,7 +16494,7 @@ function clearPendingMessage(chatId, messageId) {
     if (!filename.startsWith(prefix)) continue;
     if (!filename.endsWith(".json")) continue;
     try {
-      unlinkSync2(join2(PENDING_INBOUND_DIR, filename));
+      unlinkSync3(join3(PENDING_INBOUND_DIR, filename));
     } catch {
     }
   }
@@ -17035,6 +17181,7 @@ var telegramHttp = {
 };
 var nextOffset = 0;
 var isShuttingDown = false;
+var acquiredLockPath = null;
 async function pollLoop() {
   while (!isShuttingDown) {
     try {
@@ -17286,6 +17433,12 @@ async function pollLoop() {
           is_bot: isFromBot,
           is_peer_agent: !!peerAgentMeta
         });
+        if (!isFromBot && !peerAgentMeta) {
+          inboundContextClient?.recordInbound({
+            sourceIntegration: "telegram",
+            sourceExternalId: String(chatId)
+          });
+        }
       }
     } catch (err) {
       if (isShuttingDown) return;
@@ -17307,6 +17460,10 @@ function shutdown(reason) {
     `telegram-channel(${AGENT_CODE_NAME}): ${reason} \u2014 exiting
 `
   );
+  try {
+    releaseMcpSpawnLock(acquiredLockPath);
+  } catch {
+  }
   setTimeout(() => process.exit(0), 500).unref();
 }
 process.stdin.on("close", () => shutdown("stdin closed"));
@@ -17314,6 +17471,21 @@ process.stdin.on("end", () => shutdown("stdin ended"));
 process.on("SIGTERM", () => shutdown("SIGTERM"));
 process.on("SIGINT", () => shutdown("SIGINT"));
 process.on("SIGHUP", () => shutdown("SIGHUP"));
+{
+  const lockResult = acquireMcpSpawnLock({
+    agentDir: TELEGRAM_AGENT_DIR,
+    basename: "telegram-channel.lock"
+  });
+  if (lockResult.kind === "blocked") {
+    process.stderr.write(
+      `telegram-channel(${AGENT_CODE_NAME}): another instance pid=${lockResult.holder.pid} already running (since ${lockResult.holder.started_at}), exiting
+`
+    );
+    process.exit(0);
+  } else if (lockResult.kind === "acquired") {
+    acquiredLockPath = lockResult.path;
+  }
+}
 process.stderr.write(
   `telegram-channel(${AGENT_CODE_NAME}): started, long-polling getUpdates
 `

package/dist/{persistent-session-K4X76LLB.js → persistent-session-SE3E72ET.js}

@@ -20,8 +20,8 @@ import {
   stopPersistentSession,
   takeZombieDetection,
   writePersistentClaudeWrapper
-} from "./chunk-QSDDP7JN.js";
-import "./chunk-U3HCB23E.js";
+} from "./chunk-LJZK5RL3.js";
+import "./chunk-BKLEFKUZ.js";
 import "./chunk-XWVM4KPK.js";
 export {
   _internals,
@@ -46,4 +46,4 @@ export {
   takeZombieDetection,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-K4X76LLB.js.map
+//# sourceMappingURL=persistent-session-SE3E72ET.js.map

package/dist/{responsiveness-probe-QBV43SJ7.js → responsiveness-probe-MTMEIXEL.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-QSDDP7JN.js";
-import "./chunk-U3HCB23E.js";
+} from "./chunk-LJZK5RL3.js";
+import "./chunk-BKLEFKUZ.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -30,4 +30,4 @@ export {
   collectResponsivenessProbes,
   getResponsivenessIntervalMs
 };
-//# sourceMappingURL=responsiveness-probe-QBV43SJ7.js.map
+//# sourceMappingURL=responsiveness-probe-MTMEIXEL.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.26.2-eng5706.1",
+  "version": "0.27.0",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {