@integrity-labs/agt-cli 0.27.23 → 0.27.25

package/dist/mcp/slack-channel.js

@@ -14237,7 +14237,7 @@ function extractAugmentedSlackLabel(evt) {
     agentId: evt.metadata.event_payload?.["augmented_agent_id"]
   };
 }
-function decideSenderPolicyForward(evt, policy) {
+function decideModeForward(evt, policy) {
   if (policy.mode === "all") return { forward: true };
   if (policy.mode === "manager_only") {
     if (policy.principalSlackUserId && evt.user === policy.principalSlackUserId) {
@@ -14253,6 +14253,13 @@ function decideSenderPolicyForward(evt, policy) {
   }
   return { forward: true };
 }
+function decideSenderPolicyForward(evt, policy) {
+  if (policy.internalOnly) {
+    if (!policy.homeTeamId) return { forward: false, reason: "sender_policy" };
+    if (evt.team !== policy.homeTeamId) return { forward: false, reason: "sender_policy" };
+  }
+  return decideModeForward(evt, policy);
+}
 
 // src/ack-reaction.ts
 import { readdirSync, readFileSync } from "fs";
@@ -15520,13 +15527,21 @@ var AGT_AGENT_ID = process.env.AGT_AGENT_ID ?? null;
 var AGT_TEAM_ID = process.env.AGT_TEAM_ID ?? null;
 var SLACK_SENDER_POLICY = (() => {
   const raw = (process.env.SLACK_SENDER_POLICY ?? "all").trim().toLowerCase();
-  if (raw === "all") return { mode: "all" };
-  if (raw === "agents_only") return { mode: "agents_only" };
+  const internalOnly = process.env.SLACK_INTERNAL_ONLY === "true";
+  const homeTeamId = process.env.SLACK_HOME_TEAM_ID;
+  if (internalOnly && !homeTeamId) {
+    throw new Error(
+      "SLACK_INTERNAL_ONLY=true requires SLACK_HOME_TEAM_ID. The bot install must have a known team_id (run auth.test against the workspace and persist the result)."
+    );
+  }
+  const internalOnlyFields = internalOnly ? { internalOnly: true, homeTeamId } : {};
+  if (raw === "all") return { mode: "all", ...internalOnlyFields };
+  if (raw === "agents_only") return { mode: "agents_only", ...internalOnlyFields };
   if (raw === "team_agents_only") {
     if (!AGT_TEAM_ID) {
       throw new Error("SLACK_SENDER_POLICY=team_agents_only requires AGT_TEAM_ID");
     }
-    return { mode: "team_agents_only", teamId: AGT_TEAM_ID };
+    return { mode: "team_agents_only", teamId: AGT_TEAM_ID, ...internalOnlyFields };
   }
   if (raw === "manager_only") {
     const principalSlackUserId = process.env.SLACK_SENDER_POLICY_PRINCIPAL_ID;
@@ -15538,7 +15553,7 @@ var SLACK_SENDER_POLICY = (() => {
         "SLACK_SENDER_POLICY=manager_only requires SLACK_SENDER_POLICY_PRINCIPAL_ID. Set agent.reports_to_person with a slack_user_id in contact_preferences and re-run /host/refresh."
       );
     }
-    return { mode: "manager_only", teamId: AGT_TEAM_ID, principalSlackUserId };
+    return { mode: "manager_only", teamId: AGT_TEAM_ID, principalSlackUserId, ...internalOnlyFields };
   }
   throw new Error(`Invalid SLACK_SENDER_POLICY=${JSON.stringify(process.env.SLACK_SENDER_POLICY)}`);
 })();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.27.23",
+  "version": "0.27.25",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {