@integrity-labs/agt-cli 0.28.1014 → 0.28.1016

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-7QXIJNLA.js";
+} from "../chunk-DFKQZGM7.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-QBQLG2PY.js";
+} from "../chunk-YPS4AUHN.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-MLCGPEN6.js";
+} from "../chunk-B7XGAC54.js";
 import "../chunk-DHWNVVX4.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1014" : "dev";
+var cliVersion = true ? "0.28.1016" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1014" : "dev";
+var cliVersion2 = true ? "0.28.1016" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-MLCGPEN6.js → chunk-B7XGAC54.js}

@@ -3395,6 +3395,42 @@ var INSTALLABLE_NATIVE_INTEGRATIONS = INTEGRATION_REGISTRY.filter((d) => d.insta
 }));
 var INSTALLABLE_NATIVE_INTEGRATION_IDS = INSTALLABLE_NATIVE_INTEGRATIONS.map((i) => i.id);
 
+// ../../packages/core/dist/integrations/remote-mcp-connection.js
+var DEFAULT_REMOTE_MCP_CONNECTION_KEY = "default";
+function isDefaultRemoteMcpConnection(connectionKey) {
+  return !connectionKey || connectionKey === DEFAULT_REMOTE_MCP_CONNECTION_KEY;
+}
+function sanitizeBase(definitionId) {
+  return definitionId.replace(/[^a-z0-9]/gi, "_").toLowerCase();
+}
+function remoteMcpServerKey(definitionId, connectionKey) {
+  if (isDefaultRemoteMcpConnection(connectionKey))
+    return definitionId;
+  return `${sanitizeBase(definitionId)}-${connectionKey}`;
+}
+function remoteMcpConnectionEnvInfix(connectionKey) {
+  if (isDefaultRemoteMcpConnection(connectionKey))
+    return "";
+  return `__${connectionKey.replace(/-/g, "_").toUpperCase()}`;
+}
+function remoteMcpEnvPrefix(definitionId, connectionKey) {
+  const idPart = definitionId.toUpperCase().replace(/[^A-Z0-9]/g, "_");
+  return `${idPart}${remoteMcpConnectionEnvInfix(connectionKey)}`;
+}
+function remoteMcpConnectionScopedEnvVar(definitionId, varName, connectionKey) {
+  if (isDefaultRemoteMcpConnection(connectionKey))
+    return varName;
+  const idPart = definitionId.toUpperCase().replace(/[^A-Z0-9]/g, "_");
+  if (!varName.startsWith(`${idPart}_`))
+    return varName;
+  return `${idPart}${remoteMcpConnectionEnvInfix(connectionKey)}_${varName.slice(idPart.length + 1)}`;
+}
+function remoteMcpConnectionLabel(definitionId, connectionKey) {
+  if (isDefaultRemoteMcpConnection(connectionKey))
+    return definitionId;
+  return `${definitionId} (${connectionKey})`;
+}
+
 // ../../packages/core/dist/provisioning/control-plane-config-keys.js
 var CONTROL_PLANE_ONLY_CONFIG_KEYS = /* @__PURE__ */ new Set([
   "managed_state_token",
@@ -3417,9 +3453,26 @@ function isControlPlaneOnlyEnvVar(name) {
   }
   return CONTROL_PLANE_CONFIG_KEY_SUFFIXES.some((suffix) => normalized.endsWith(suffix));
 }
+var RESPAWN_EXEMPT_CONFIG_TAILS = [{ definitionId: "github", tails: ["APP_ID", "INSTALLATION_ID", "APP_SLUG"] }];
+function matchesDefinitionScopedTail(upper, prefix, tail) {
+  const suffix = `_${tail}`;
+  if (!upper.endsWith(suffix))
+    return false;
+  const head = upper.slice(0, upper.length - suffix.length);
+  if (head === prefix)
+    return true;
+  return head.startsWith(`${prefix}__`) && head.length > prefix.length + 2;
+}
+function isRespawnExemptEnvVar(name) {
+  const upper = name.toUpperCase();
+  return RESPAWN_EXEMPT_CONFIG_TAILS.some(({ definitionId, tails }) => {
+    const prefix = remoteMcpEnvPrefix(definitionId, null);
+    return tails.some((tail) => matchesDefinitionScopedTail(upper, prefix, tail));
+  });
+}
 
 // ../../packages/core/dist/types/channel.js
-var SENDER_POLICY_ENFORCED_CHANNELS = ["slack", "msteams"];
+var SENDER_POLICY_ENFORCED_CHANNELS = ["slack", "msteams", "telegram"];
 function senderPolicyIsEnforcedOn(channelId) {
   return SENDER_POLICY_ENFORCED_CHANNELS.includes(channelId);
 }
@@ -4332,6 +4385,9 @@ var AZURE_PROVISIONING_SCOPES = [
 function teamOnlyReason(allowlist) {
   return allowlist && allowlist.length > 0 ? "mode_team_only" : "mode_team_only_no_principals";
 }
+function managerOnlyReason(principalId) {
+  return principalId ? "mode_manager_only" : "mode_manager_only_no_principals";
+}
 function classifySlackPolicyBlock(evt, policy) {
   if (policy.internalOnly && (!policy.homeTeamId || evt.team !== policy.homeTeamId)) {
     return "internal_only";
@@ -4349,6 +4405,20 @@ function classifySlackPolicyBlock(evt, policy) {
       return "internal_only";
   }
 }
+function classifyTelegramPolicyBlock(policy) {
+  switch (policy.mode) {
+    case "manager_only":
+      return managerOnlyReason(policy.principalTelegramUserId);
+    case "team_only":
+      return teamOnlyReason(policy.teamPrincipalTelegramUserIds);
+    case "team_agents_only":
+      return "mode_team_agents_only";
+    case "agents_only":
+      return "mode_agents_only";
+    case "all":
+      throw new Error("classifyTelegramPolicyBlock called with mode 'all', which never blocks. The caller must have a forward:false verdict from decideSenderPolicyForwardTelegram before classifying.");
+  }
+}
 function politeDeclineCopy(reason) {
   switch (reason) {
     case "internal_only":
@@ -12833,42 +12903,6 @@ function buildForwardHeaders(token, authHeader, extras, readVar) {
   return headers;
 }
 
-// ../../packages/core/dist/integrations/remote-mcp-connection.js
-var DEFAULT_REMOTE_MCP_CONNECTION_KEY = "default";
-function isDefaultRemoteMcpConnection(connectionKey) {
-  return !connectionKey || connectionKey === DEFAULT_REMOTE_MCP_CONNECTION_KEY;
-}
-function sanitizeBase(definitionId) {
-  return definitionId.replace(/[^a-z0-9]/gi, "_").toLowerCase();
-}
-function remoteMcpServerKey(definitionId, connectionKey) {
-  if (isDefaultRemoteMcpConnection(connectionKey))
-    return definitionId;
-  return `${sanitizeBase(definitionId)}-${connectionKey}`;
-}
-function remoteMcpConnectionEnvInfix(connectionKey) {
-  if (isDefaultRemoteMcpConnection(connectionKey))
-    return "";
-  return `__${connectionKey.replace(/-/g, "_").toUpperCase()}`;
-}
-function remoteMcpEnvPrefix(definitionId, connectionKey) {
-  const idPart = definitionId.toUpperCase().replace(/[^A-Z0-9]/g, "_");
-  return `${idPart}${remoteMcpConnectionEnvInfix(connectionKey)}`;
-}
-function remoteMcpConnectionScopedEnvVar(definitionId, varName, connectionKey) {
-  if (isDefaultRemoteMcpConnection(connectionKey))
-    return varName;
-  const idPart = definitionId.toUpperCase().replace(/[^A-Z0-9]/g, "_");
-  if (!varName.startsWith(`${idPart}_`))
-    return varName;
-  return `${idPart}${remoteMcpConnectionEnvInfix(connectionKey)}_${varName.slice(idPart.length + 1)}`;
-}
-function remoteMcpConnectionLabel(definitionId, connectionKey) {
-  if (isDefaultRemoteMcpConnection(connectionKey))
-    return definitionId;
-  return `${definitionId} (${connectionKey})`;
-}
-
 // ../../packages/core/dist/integrations/slack-socket-state.js
 var SLACK_SOCKET_STATE_FILENAME = "slack-socket-state.json";
 var SLACK_SOCKET_STATE_MAX_AGE_MS = 18e4;
@@ -15310,6 +15344,7 @@ export {
   buildForwardHeaders,
   isControlPlaneOnlyConfigKey,
   isControlPlaneOnlyEnvVar,
+  isRespawnExemptEnvVar,
   senderPolicyIsEnforcedOn,
   claudeModelAlias,
   isClaudeFastMode,
@@ -15329,6 +15364,7 @@ export {
   SlackApiError,
   createSlackApp,
   classifySlackPolicyBlock,
+  classifyTelegramPolicyBlock,
   decideInboundAccess,
   extractFrontmatter,
   generateCharterMd,
@@ -15443,4 +15479,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-MLCGPEN6.js.map
+//# sourceMappingURL=chunk-B7XGAC54.js.map