@integrity-labs/agt-cli 0.27.144 → 0.27.145

package/dist/mcp/telegram-channel.js

@@ -14813,6 +14813,61 @@ function parsePeerAgentModeEnv(raw) {
   return "off";
 }
 
+// src/sender-policy-decline.ts
+function politeDeclineCopy(reason) {
+  switch (reason) {
+    case "internal_only":
+      return "Sorry, I can only respond to people inside our organisation. This conversation appears to be from outside.";
+    case "mode_manager_only":
+      return "Sorry, I only respond to my manager in this channel.";
+    case "mode_team_only":
+      return "Sorry, this agent only replies to its team members.";
+    case "mode_team_agents_only":
+      return "Sorry, I only respond to agents on my team in this channel.";
+    case "mode_agents_only":
+      return "Sorry, I only respond to other agents in this channel.";
+  }
+}
+
+// src/inbound-access.ts
+function decideInboundAccess(input) {
+  if (!input.content.forward) {
+    return { kind: "drop", reason: `content:${input.content.reason}` };
+  }
+  if (input.isSelf) {
+    return { kind: "drop", reason: "self" };
+  }
+  if (input.orgBoundary && !input.orgBoundary.forward) {
+    return { kind: "drop", reason: "org_boundary" };
+  }
+  if (input.senderPolicy && !input.senderPolicy.forward) {
+    const reason = input.senderPolicy.reason;
+    const declineWorthy = input.sameOrg && reason !== "internal_only";
+    return {
+      kind: "drop",
+      reason: `sender_policy:${reason}`,
+      decline: declineWorthy ? politeDeclineCopy(reason) : void 0
+    };
+  }
+  if (input.command && !input.isBot) {
+    return {
+      kind: "command",
+      command: input.command.command,
+      authorized: input.command.authorized
+    };
+  }
+  if (input.isBot) {
+    const peer = input.peer;
+    if (!peer || peer.kind === "self") {
+      return { kind: "drop", reason: peer?.kind === "self" ? "self" : "peer:unclassified" };
+    }
+    if (peer.kind === "drop") {
+      return { kind: "drop", reason: `peer:${peer.reason ?? "unspecified"}` };
+    }
+  }
+  return { kind: "admit" };
+}
+
 // src/telegram-peer-rate-limiter.ts
 var SECOND_MS = 1e3;
 var MINUTE_MS = 60 * SECOND_MS;
@@ -18108,14 +18163,68 @@ async function pollLoop() {
         const content = typeof msg.text === "string" && msg.text.length > 0 ? msg.text : typeof msg.caption === "string" && msg.caption.length > 0 ? msg.caption : "";
         if (content.length === 0 && classifiedAttachments.length === 0) continue;
         const chatId = String(msg.chat.id);
-        if (ALLOWED_CHATS.size > 0 && !ALLOWED_CHATS.has(chatId)) continue;
+        const trimmedContent = content.trim();
+        const isFromBot = !!msg.from?.is_bot;
+        const nowMs = Date.now();
+        const telegramCommand = isHelpSyntax(trimmedContent) ? "help" : isStatusSyntax(trimmedContent) ? "status" : isRestartSyntax(trimmedContent) ? "restart" : isInvestigateSyntax(trimmedContent) ? "investigate" : void 0;
+        let classification;
+        let peerLeaf;
+        if (isFromBot) {
+          if (PEER_DISABLED_GLOBAL) {
+            peerLeaf = { kind: "drop", reason: "peer_disabled_global" };
+          } else {
+            const classifierMsg = {
+              message_id: msg.message_id,
+              text: msg.text,
+              caption: msg.caption,
+              from: msg.from ? { id: msg.from.id, username: msg.from.username, is_bot: msg.from.is_bot } : void 0,
+              chat: { id: msg.chat.id, type: msg.chat.type },
+              reply_to_message: msg.reply_to_message ? {
+                message_id: msg.reply_to_message.message_id,
+                from: msg.reply_to_message.from ? { id: msg.reply_to_message.from.id, is_bot: msg.reply_to_message.from.is_bot } : void 0
+              } : void 0,
+              entities: msg.entities,
+              caption_entities: msg.caption_entities
+            };
+            const self = await resolveBotIdentity();
+            classification = classifyPeerMessage(classifierMsg, PEER_CLASSIFIER_CONFIG, self);
+            peerLeaf = {
+              kind: classification.kind,
+              reason: classification.kind === "drop" ? classification.reason : void 0
+            };
+          }
+        }
+        const access = decideInboundAccess({
+          content: { forward: true },
+          // empty content already filtered above
+          // CodeRabbit: derive self from the peer classification so an echo of
+          // our own outbound is dropped at the self step — BEFORE command
+          // routing — instead of slipping through as a command. (Slack catches
+          // self at evt.user===botUserId and Teams inside its activity filter;
+          // Telegram's only self signal is the peer classifier.)
+          isSelf: peerLeaf?.kind === "self",
+          isBot: isFromBot,
+          peer: peerLeaf,
+          // TELEGRAM_ALLOWED_CHATS is Telegram's org-boundary axis (the drift
+          // the consolidation names). An unlisted chat is external ⇒ silent.
+          orgBoundary: ALLOWED_CHATS.size > 0 && !ALLOWED_CHATS.has(chatId) ? { forward: false } : { forward: true },
+          command: telegramCommand ? { command: telegramCommand, authorized: true } : void 0,
+          // No sender-policy mode system on Telegram, so no same-org decline.
+          sameOrg: false
+        });
+        if (access.kind === "drop" && (access.reason === "org_boundary" || access.reason.startsWith("content:"))) {
+          process.stderr.write(
+            `telegram-channel(${AGENT_CODE_NAME}): inbound drop reason=${access.reason} chat=${redactId(chatId)}
+`
+          );
+          continue;
+        }
         observedChatClient?.observe({
           chat_id: chatId,
           chat_title: msg.chat.title ?? msg.chat.username ?? msg.chat.first_name ?? null,
           chat_type: msg.chat.type ?? null
         });
-        const trimmedContent = content.trim();
-        if (isHelpSyntax(trimmedContent)) {
+        if (access.kind === "command" && access.command === "help") {
           const disposition = await classifyRestartCommand(trimmedContent.replace(/^\/help/, "/restart"));
           if (disposition === "act") {
             await handleHelpCommand({
@@ -18125,7 +18234,7 @@ async function pollLoop() {
           }
           continue;
         }
-        if (isStatusSyntax(trimmedContent)) {
+        if (access.kind === "command" && access.command === "status") {
           const disposition = await classifyRestartCommand(
             trimmedContent.replace(/^\/status/, "/restart")
           );
@@ -18137,7 +18246,7 @@ async function pollLoop() {
           }
           continue;
         }
-        if (isRestartSyntax(trimmedContent)) {
+        if (access.kind === "command" && access.command === "restart") {
           const disposition = await classifyRestartCommand(trimmedContent);
           if (disposition === "act") {
             await handleRestartCommand({
@@ -18166,7 +18275,7 @@ async function pollLoop() {
           }
           continue;
         }
-        if (isInvestigateSyntax(trimmedContent)) {
+        if (access.kind === "command" && access.command === "investigate") {
           const disposition = await classifyInvestigateCommand(trimmedContent);
           if (disposition === "act") {
             await handleInvestigateCommand({
@@ -18197,8 +18306,6 @@ async function pollLoop() {
         }
         const userId = msg.from?.id != null ? String(msg.from.id) : "unknown";
         const userName = msg.from?.username || [msg.from?.first_name, msg.from?.last_name].filter(Boolean).join(" ").trim() || userId;
-        const isFromBot = !!msg.from?.is_bot;
-        const nowMs = Date.now();
         if (chatId && !isFromBot) {
           resetThread(chatId, "");
         }
@@ -18207,38 +18314,14 @@ async function pollLoop() {
           peerRateLimiter.recordInboundHuman(chatId, nowMs);
         }
         let peerAgentMeta = null;
-        if (isFromBot) {
-          if (PEER_DISABLED_GLOBAL) {
+        if (access.kind === "drop") {
+          if (access.reason !== "self") {
+            const peerReason = access.reason.startsWith("peer:") ? access.reason.slice("peer:".length) : access.reason;
             process.stderr.write(
-              `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=peer_disabled_global chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
+              `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=${peerReason} chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
 `
             );
-            continue;
-          }
-          const classifierMsg = {
-            message_id: msg.message_id,
-            text: msg.text,
-            caption: msg.caption,
-            from: msg.from ? { id: msg.from.id, username: msg.from.username, is_bot: msg.from.is_bot } : void 0,
-            chat: { id: msg.chat.id, type: msg.chat.type },
-            reply_to_message: msg.reply_to_message ? {
-              message_id: msg.reply_to_message.message_id,
-              from: msg.reply_to_message.from ? { id: msg.reply_to_message.from.id, is_bot: msg.reply_to_message.from.is_bot } : void 0
-            } : void 0,
-            entities: msg.entities,
-            caption_entities: msg.caption_entities
-          };
-          const self = await resolveBotIdentity();
-          const classification = classifyPeerMessage(classifierMsg, PEER_CLASSIFIER_CONFIG, self);
-          if (classification.kind === "self") {
-            continue;
-          }
-          if (classification.kind === "drop") {
-            process.stderr.write(
-              `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=${classification.reason} chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
-`
-            );
-            if (classification.reason === "cross_team_grant_missing") {
+            if (classification?.kind === "drop" && classification.reason === "cross_team_grant_missing") {
               crossTeamPeerAuditClient?.emit({
                 event_type: "telegram.peer.drop.cross_team_grant_missing",
                 peer_agent_id: null,
@@ -18248,52 +18331,52 @@ async function pollLoop() {
                 message_id: String(msg.message_id)
               });
             }
-            continue;
           }
-          if (classification.kind === "peer-ingress") {
-            const limit = await peerRateLimiter.recordInboundPeer(
-              chatId,
-              classification.peer.bot_id,
-              nowMs
-            );
-            if (limit.decision !== "ok") {
-              process.stderr.write(
-                `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=${limit.decision} chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
+          continue;
+        }
+        if (isFromBot && classification?.kind === "peer-ingress") {
+          const limit = await peerRateLimiter.recordInboundPeer(
+            chatId,
+            classification.peer.bot_id,
+            nowMs
+          );
+          if (limit.decision !== "ok") {
+            process.stderr.write(
+              `telegram-channel(${AGENT_CODE_NAME}): peer_drop reason=${limit.decision} chat=${redactId(chatId)} from=${redactId(String(msg.from?.id ?? "unknown"))}
 `
-              );
-              continue;
-            }
-            if (limit.dailyBudgetWarn && !dailyBudgetWarned) {
-              dailyBudgetWarned = true;
-              process.stderr.write(
-                `telegram-channel(${AGENT_CODE_NAME}): peer_warn reason=daily_budget_80pct
+            );
+            continue;
+          }
+          if (limit.dailyBudgetWarn && !dailyBudgetWarned) {
+            dailyBudgetWarned = true;
+            process.stderr.write(
+              `telegram-channel(${AGENT_CODE_NAME}): peer_warn reason=daily_budget_80pct
 `
-              );
-            }
-            peerAgentMeta = {
-              code_name: classification.peer.code_name,
-              agent_id: classification.peer.agent_id
-            };
-            const gate = classification.peer.gate_path;
-            if (gate && gate !== "same_team" && gate !== "intra_org_unrestricted" && gate.startsWith("grant:")) {
-              crossTeamPeerAuditClient?.emit({
-                event_type: "telegram.peer.ingress.cross_team",
-                peer_agent_id: classification.peer.agent_id || null,
-                gate_path: gate,
-                grant_id: gate.slice("grant:".length),
-                chat_id: String(chatId),
-                message_id: String(msg.message_id)
-              });
-            } else if (gate === "intra_org_unrestricted") {
-              crossTeamPeerAuditClient?.emit({
-                event_type: "telegram.peer.ingress.cross_team",
-                peer_agent_id: classification.peer.agent_id || null,
-                gate_path: gate,
-                grant_id: null,
-                chat_id: String(chatId),
-                message_id: String(msg.message_id)
-              });
-            }
+            );
+          }
+          peerAgentMeta = {
+            code_name: classification.peer.code_name,
+            agent_id: classification.peer.agent_id
+          };
+          const gate = classification.peer.gate_path;
+          if (gate && gate !== "same_team" && gate !== "intra_org_unrestricted" && gate.startsWith("grant:")) {
+            crossTeamPeerAuditClient?.emit({
+              event_type: "telegram.peer.ingress.cross_team",
+              peer_agent_id: classification.peer.agent_id || null,
+              gate_path: gate,
+              grant_id: gate.slice("grant:".length),
+              chat_id: String(chatId),
+              message_id: String(msg.message_id)
+            });
+          } else if (gate === "intra_org_unrestricted") {
+            crossTeamPeerAuditClient?.emit({
+              event_type: "telegram.peer.ingress.cross_team",
+              peer_agent_id: classification.peer.agent_id || null,
+              gate_path: gate,
+              grant_id: null,
+              chat_id: String(chatId),
+              message_id: String(msg.message_id)
+            });
           }
         }
         const messageId = String(msg.message_id);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.27.144",
+  "version": "0.27.145",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {
@@ -23,7 +23,7 @@
   },
   "scripts": {
     "build": "tsup && npm run build:mcp-assets && npm run build:cli-assets",
-    "build:mcp-assets": "mkdir -p dist/mcp && cp ../../packages/mcp/dist/index.js dist/mcp/index.js && cp ../../packages/mcp/dist/slack-channel.js dist/mcp/slack-channel.js && cp ../../packages/mcp/dist/direct-chat-channel.js dist/mcp/direct-chat-channel.js && cp ../../packages/mcp/dist/telegram-channel.js dist/mcp/telegram-channel.js && cp ../../packages/mcp/dist/teams-channel.js dist/mcp/teams-channel.js",
+    "build:mcp-assets": "mkdir -p dist/mcp && cp ../../packages/mcp/dist/index.js dist/mcp/index.js && cp ../../packages/mcp/dist/slack-channel.js dist/mcp/slack-channel.js && cp ../../packages/mcp/dist/direct-chat-channel.js dist/mcp/direct-chat-channel.js && cp ../../packages/mcp/dist/telegram-channel.js dist/mcp/telegram-channel.js && cp ../../packages/mcp/dist/teams-channel.js dist/mcp/teams-channel.js && cp ../../packages/augmented-admin-mcp/dist/index.js dist/mcp/augmented-admin.js",
     "build:cli-assets": "mkdir -p dist/assets && cp assets/impersonate-statusline.sh dist/assets/impersonate-statusline.sh && chmod +x dist/assets/impersonate-statusline.sh",
     "dev": "tsx watch src/bin/agt.ts",
     "test": "vitest run",
@@ -52,6 +52,7 @@
   "devDependencies": {
     "@augmented/core": "workspace:*",
     "@integrity-labs/augmented-mcp": "workspace:*",
+    "@integrity-labs/augmented-admin-mcp": "workspace:*",
     "@types/node": "22.19.11",
     "@types/react": "19.2.14",
     "@types/ws": "8.18.1",