@integrity-labs/agt-cli 0.28.1088 → 0.28.1089

package/dist/mcp/index.js

@@ -18867,7 +18867,7 @@ var require_filters = __commonJS({
       return r.copySafeness(str, res);
     }
     _exports.indent = indent;
-    function join7(arr, del, attr) {
+    function join10(arr, del, attr) {
       del = del || "";
       if (attr) {
         arr = lib.map(arr, function(v) {
@@ -18876,7 +18876,7 @@ var require_filters = __commonJS({
       }
       return arr.join(del);
     }
-    _exports.join = join7;
+    _exports.join = join10;
     function last(arr) {
       return arr[arr.length - 1];
     }
@@ -20042,9 +20042,9 @@ var require_handler = __commonJS({
         if (this.fsw.closed) {
           return;
         }
-        const dirname3 = sysPath.dirname(file);
+        const dirname5 = sysPath.dirname(file);
         const basename2 = sysPath.basename(file);
-        const parent = this.fsw._getWatchedDir(dirname3);
+        const parent = this.fsw._getWatchedDir(dirname5);
         let prevStats = stats;
         if (parent.has(basename2))
           return;
@@ -20071,7 +20071,7 @@ var require_handler = __commonJS({
                 prevStats = newStats2;
               }
             } catch (error2) {
-              this.fsw._remove(dirname3, basename2);
+              this.fsw._remove(dirname5, basename2);
             }
           } else if (parent.has(basename2)) {
             const at = newStats.atimeMs;
@@ -35540,8 +35540,8 @@ function renderKnowledgeBody(content) {
 }
 
 // src/index.ts
-import { homedir as homedir3 } from "os";
-import { basename, isAbsolute as isAbsolute2, join as join6, resolve as pathResolve, sep as sep2 } from "path";
+import { homedir as homedir4 } from "os";
+import { basename, isAbsolute as isAbsolute2, join as join9, resolve as pathResolve, sep as sep2 } from "path";
 
 // src/host-file-path.ts
 var SKILL_BODY_PATH_MAX_BYTES = 512 * 1024;
@@ -35779,6 +35779,133 @@ async function makeArtefactWorkDir(prefix, env2) {
   return mkdtemp(join2(scratch, prefix));
 }
 
+// src/turn-context.ts
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync3 } from "fs";
+import { homedir } from "os";
+import { dirname as dirname3, join as join5 } from "path";
+
+// src/turn-initiator-marker.ts
+import { writeFileSync, readFileSync, mkdirSync, renameSync } from "fs";
+import { dirname as dirname2, join as join3 } from "path";
+var TURN_INITIATOR_MAX_AGE_MS = 5 * 60 * 1e3;
+var TURN_INITIATOR_LEDGER_FILENAME = ".turn-initiator-ledger.json";
+
+// src/scheduled-turn-marker.ts
+import { readFileSync as readFileSync2, unlinkSync } from "fs";
+import { join as join4 } from "path";
+var SCHEDULED_TURN_MARKER_FILENAME2 = ".current-scheduled-turn.json";
+var SCHEDULED_TURN_MAX_AGE_MS = 15 * 60 * 1e3;
+function validateScheduledTurnMarker(raw, now, maxAgeMs = SCHEDULED_TURN_MAX_AGE_MS) {
+  if (!raw || typeof raw !== "object") return null;
+  const m = raw;
+  if (typeof m.ts !== "number" || !Number.isFinite(m.ts)) return null;
+  if (now - m.ts > maxAgeMs || now - m.ts < 0) return null;
+  const out = { ts: m.ts };
+  if (typeof m.task_id === "string" && m.task_id.length > 0) out.task_id = m.task_id;
+  const t = m.target;
+  if (t && typeof t === "object") {
+    const tc = t;
+    if (typeof tc.channel_id === "string" && tc.channel_id.length > 0) {
+      out.target = {
+        channel_id: tc.channel_id,
+        ...typeof tc.thread_ts === "string" && tc.thread_ts.length > 0 ? { thread_ts: tc.thread_ts } : {}
+      };
+    }
+  }
+  return out;
+}
+
+// src/turn-context.ts
+var TURN_INITIATOR_MARKER_FILENAME = ".current-turn-initiator.json";
+function asSender(raw, now, maxAgeMs) {
+  if (!raw || typeof raw !== "object") return null;
+  const e = raw;
+  if (typeof e["channel"] !== "string" || !e["channel"]) return null;
+  if (typeof e["sender_id"] !== "string" || !e["sender_id"]) return null;
+  const ts = e["ts"];
+  if (typeof ts !== "number" || !Number.isFinite(ts) || now - ts < 0 || now - ts > maxAgeMs) return null;
+  const kind = e["chat_kind"] === "direct" || e["chat_kind"] === "group" ? e["chat_kind"] : "unknown";
+  const chatId = typeof e["chat_id"] === "string" && e["chat_id"] ? e["chat_id"] : void 0;
+  const threadRef = typeof e["channel_ref"] === "string" && e["channel_ref"] ? e["channel_ref"] : void 0;
+  return {
+    channel: e["channel"],
+    sender_id: e["sender_id"],
+    chat_kind: kind,
+    ...chatId ? { chat_id: chatId } : {},
+    ...threadRef ? { thread_ref: threadRef } : {},
+    ts
+  };
+}
+function readJson(file) {
+  try {
+    return JSON.parse(readFileSync3(file, "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function freshUnattributed(ledger, now, maxAgeMs) {
+  if (!ledger || !Array.isArray(ledger.entries)) return false;
+  return ledger.entries.some((e) => {
+    const r = e;
+    return r?.unattributed === true && typeof r.ts === "number" && Number.isFinite(r.ts) && now - r.ts >= 0 && now - r.ts <= maxAgeMs;
+  });
+}
+function freshSenders(markerFile, ledger, now, maxAgeMs) {
+  if (ledger && ledger.v === 1 && Array.isArray(ledger.entries)) {
+    const fresh = ledger.entries.map((e) => asSender(e, now, maxAgeMs)).filter((s) => s !== null);
+    if (fresh.length > 0) return fresh;
+  }
+  const single = asSender(readJson(markerFile), now, maxAgeMs);
+  return single ? [single] : [];
+}
+function resolveTurnInitiatorFile(env2 = process.env, home = homedir()) {
+  const injected = env2["AGT_TURN_INITIATOR_FILE"]?.trim();
+  if (injected) return injected;
+  const dir = resolveAgentDirAlias({
+    codeName: env2["AGT_AGENT_CODE_NAME"],
+    agentId: env2["AGT_AGENT_ID"],
+    turnInitiatorFile: null,
+    homeDir: home
+  });
+  return dir ? join5(dir, TURN_INITIATOR_MARKER_FILENAME) : null;
+}
+function readTurnContext(opts = {}) {
+  try {
+    return readTurnContextUnguarded(opts);
+  } catch {
+    return { v: 1, kind: "unavailable" };
+  }
+}
+function readTurnContextUnguarded(opts) {
+  const markerFile = opts.markerFile === void 0 ? (opts.resolveFile ?? (() => resolveTurnInitiatorFile()))() : opts.markerFile;
+  if (!markerFile) return { v: 1, kind: "unavailable" };
+  const now = opts.now ?? Date.now();
+  const maxAgeMs = opts.maxAgeMs ?? TURN_INITIATOR_MAX_AGE_MS;
+  const ledger = readJson(join5(dirname3(markerFile), TURN_INITIATOR_LEDGER_FILENAME));
+  const senders = freshSenders(markerFile, ledger, now, maxAgeMs);
+  const scheduled = validateScheduledTurnMarker(
+    readJson(join5(dirname3(markerFile), SCHEDULED_TURN_MARKER_FILENAME2)),
+    now
+  );
+  if (senders.length === 0) return { v: 1, kind: "none" };
+  if (scheduled || freshUnattributed(ledger, now, maxAgeMs)) return { v: 1, kind: "ambiguous" };
+  const latest = [...senders].sort((a, b) => b.ts - a.ts)[0];
+  const same = senders.every(
+    (s) => s.channel === latest.channel && s.sender_id === latest.sender_id && s.chat_kind === latest.chat_kind && s.chat_id === latest.chat_id
+  );
+  if (!same) return { v: 1, kind: "ambiguous" };
+  return {
+    v: 1,
+    kind: "turn",
+    channel: latest.channel,
+    sender_id: latest.sender_id,
+    chat_kind: latest.chat_kind,
+    ...latest.chat_id ? { chat_id: latest.chat_id } : {},
+    // The newest thread: the one the person is replying in now.
+    ...latest.thread_ref ? { thread_ref: latest.thread_ref } : {}
+  };
+}
+
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v4/core/core.js
 var NEVER2 = Object.freeze({
   status: "aborted"
@@ -46674,12 +46801,12 @@ function selectIntegrationsToRefresh(input) {
 }
 
 // src/self-restart.ts
-import { existsSync as existsSync2, mkdirSync, renameSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join as join3 } from "path";
+import { existsSync as existsSync2, mkdirSync as mkdirSync3, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join6 } from "path";
 import { randomUUID } from "crypto";
 function restartFlagsDir() {
-  return join3(homedir(), ".augmented", "restart-flags");
+  return join6(homedir2(), ".augmented", "restart-flags");
 }
 function isSelfRestartEnabled(env2) {
   const raw = (env2.AGT_AGENT_SELF_RESTART_ENABLED ?? "").trim().toLowerCase();
@@ -46690,37 +46817,37 @@ function buildAgentRestartFlag(codeName, reason, nowMs) {
 }
 function writeAgentRestartFlag(codeName, reason, nowMs) {
   const dir = restartFlagsDir();
-  if (!existsSync2(dir)) mkdirSync(dir, { recursive: true });
-  const path = join3(dir, `${codeName}.flag`);
+  if (!existsSync2(dir)) mkdirSync3(dir, { recursive: true });
+  const path = join6(dir, `${codeName}.flag`);
   const flag = buildAgentRestartFlag(codeName, reason, nowMs);
   const tmpPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
-  writeFileSync(tmpPath, JSON.stringify(flag) + "\n", "utf8");
-  renameSync(tmpPath, path);
+  writeFileSync2(tmpPath, JSON.stringify(flag) + "\n", "utf8");
+  renameSync2(tmpPath, path);
   return path;
 }
 
 // src/self-restart-confirm.ts
-import { existsSync as existsSync4, readdirSync, readFileSync as readFileSync2 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
+import { existsSync as existsSync4, readdirSync, readFileSync as readFileSync5 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join7 } from "path";
 
 // src/restart-confirm.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname2 } from "path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync4, renameSync as renameSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname4 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 var RESTART_CONFIRM_MAX_AGE_MS = 10 * 60 * 1e3;
 function writeRestartConfirmMarker(filePath, marker) {
-  const dir = dirname2(filePath);
-  if (!existsSync3(dir)) mkdirSync2(dir, { recursive: true, mode: 448 });
+  const dir = dirname4(filePath);
+  if (!existsSync3(dir)) mkdirSync4(dir, { recursive: true, mode: 448 });
   const tmpPath = `${filePath}.${process.pid}.${randomUUID2()}.tmp`;
-  writeFileSync2(tmpPath, JSON.stringify(marker) + "\n", { encoding: "utf8", mode: 384 });
-  renameSync2(tmpPath, filePath);
+  writeFileSync3(tmpPath, JSON.stringify(marker) + "\n", { encoding: "utf8", mode: 384 });
+  renameSync3(tmpPath, filePath);
 }
 
 // src/self-restart-confirm.ts
 var SELF_RESTART_PENDING_FRESHNESS_MS = 5 * 60 * 1e3;
 function selfRestartAgentDir(codeName) {
-  return join4(homedir2(), ".augmented", codeName);
+  return join7(homedir3(), ".augmented", codeName);
 }
 function selectFreshestPending(candidates, nowMs, maxAgeMs) {
   let best = null;
@@ -46744,7 +46871,7 @@ function readMarkerDir(dir, toCandidate) {
   for (const entry of entries) {
     if (!entry.endsWith(".json") || entry.endsWith(".tmp")) continue;
     try {
-      const parsed = JSON.parse(readFileSync2(join4(dir, entry), "utf8"));
+      const parsed = JSON.parse(readFileSync5(join7(dir, entry), "utf8"));
       if (!parsed || typeof parsed !== "object") continue;
       const candidate = toCandidate(parsed);
       if (candidate) out.push(candidate);
@@ -46754,7 +46881,7 @@ function readMarkerDir(dir, toCandidate) {
   return out;
 }
 function readPendingCandidates(agentDir) {
-  const slack = readMarkerDir(join4(agentDir, "slack-pending-inbound"), (p2) => {
+  const slack = readMarkerDir(join7(agentDir, "slack-pending-inbound"), (p2) => {
     const channel = p2["channel"];
     if (typeof channel !== "string" || channel.length === 0) return null;
     const threadTs = p2["thread_ts"];
@@ -46762,7 +46889,7 @@ function readPendingCandidates(agentDir) {
     if (typeof threadTs === "string" && threadTs.length > 0) reply["thread_ts"] = threadTs;
     return { source: "slack", receivedAtMs: Date.parse(String(p2["received_at"])), reply };
   });
-  const telegram = readMarkerDir(join4(agentDir, "telegram-pending-inbound"), (p2) => {
+  const telegram = readMarkerDir(join7(agentDir, "telegram-pending-inbound"), (p2) => {
     const chatId = p2["chat_id"];
     if (chatId == null || typeof chatId !== "string" && typeof chatId !== "number") return null;
     const reply = { chat_id: chatId };
@@ -46783,21 +46910,21 @@ function captureSelfRestartConfirm(opts) {
     // human, so buildBackOnlineText degrades to the generic copy.
     reply: best.reply
   };
-  const file = best.source === "slack" ? join4(opts.agentDir, "slack-restart-confirm.json") : join4(opts.agentDir, "telegram-restart-confirm.json");
+  const file = best.source === "slack" ? join7(opts.agentDir, "slack-restart-confirm.json") : join7(opts.agentDir, "telegram-restart-confirm.json");
   writeRestartConfirmMarker(file, marker);
   return best.source;
 }
 
 // ../core/dist/integrations/forwarded-tools-report.js
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join5 } from "path";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { join as join8 } from "path";
 var FORWARDED_TOOLS_REPORT_FILENAME = "forwarded-tools.json";
 function forwardedToolsReportPath(agentDir) {
-  return join5(agentDir, FORWARDED_TOOLS_REPORT_FILENAME);
+  return join8(agentDir, FORWARDED_TOOLS_REPORT_FILENAME);
 }
 function writeForwardedToolsReport(agentDir, report) {
   try {
-    writeFileSync3(forwardedToolsReportPath(agentDir), JSON.stringify(report), "utf-8");
+    writeFileSync4(forwardedToolsReportPath(agentDir), JSON.stringify(report), "utf-8");
     return true;
   } catch {
     return false;
@@ -50676,9 +50803,9 @@ async function forwardToolCall(toolName, args) {
       // root to its canonical form so both sides of the comparison are real
       // paths. Falls back to the unresolved join if the dir is missing, which
       // then simply refuses (there is nothing to read anyway).
-      agentDir: canonicalAgentDir(join6(homedir3(), ".augmented", AGT_AGENT_CODE_NAME)),
+      agentDir: canonicalAgentDir(join9(homedir4(), ".augmented", AGT_AGENT_CODE_NAME)),
       // agent-dir-allow: immediately realpath-resolved to the ADR-0049 agent_id-keyed dir before use as a containment root
-      path: { isAbsolute: isAbsolute2, resolve: pathResolve, join: join6, sep: sep2 },
+      path: { isAbsolute: isAbsolute2, resolve: pathResolve, join: join9, sep: sep2 },
       // O_NOFOLLOW is the whole point of opening by flags: the path is already
       // symlink-resolved, so a symlink at the final component means it was
       // swapped after the check, and this turns that into an ELOOP.
@@ -50737,7 +50864,12 @@ async function forwardToolCall(toolName, args) {
       agent_id: AGT_AGENT_ID,
       name: toolName,
       arguments: outgoing,
-      run_id: AGT_RUN_ID ?? null
+      run_id: AGT_RUN_ID ?? null,
+      // ENG-11348: who sent this turn, read from the host markers here, never
+      // from the model's arguments. Ninja Lists caps the agent by that
+      // person's access and refuses anything that is not one sender in a
+      // one-to-one conversation; other tools ignore it.
+      turn_context: readTurnContext()
     },
     false,
     FORWARD_TOOL_CALL_TIMEOUT_MS,
@@ -51093,7 +51225,7 @@ async function saveArtefactSourceToFile(artefactId) {
     codeName: AGT_AGENT_CODE_NAME,
     turnInitiatorFile: process.env.AGT_TURN_INITIATOR_FILE,
     agentId: AGT_AGENT_ID,
-    homeDir: homedir3()
+    homeDir: homedir4()
   });
   const readOnce = async () => {
     const before = await fetchArtefactRevision(artefactId);
@@ -51108,7 +51240,7 @@ async function saveArtefactSourceToFile(artefactId) {
   };
   let result = await readOnce();
   if (result.revisionState !== "stable") result = await readOnce();
-  const filePath = join6(dir, safeDownloadName(`${artefactId}.html`, `${artefactId}.html`));
+  const filePath = join9(dir, safeDownloadName(`${artefactId}.html`, `${artefactId}.html`));
   await writeFile(filePath, result.html, "utf8");
   return {
     path: filePath,
@@ -51188,7 +51320,7 @@ async function exportArtefactToFile(dir, artefactId, format, item) {
     return { kind: "pending", jobId: outcome.jobId, retryAfterMs: outcome.retryAfterMs };
   }
   const fallback = `${artefactId}${item !== void 0 ? `-item-${item + 1}` : ""}.${format}`;
-  const filePath = join6(dir, safeDownloadName(outcome.body.filename, fallback));
+  const filePath = join9(dir, safeDownloadName(outcome.body.filename, fallback));
   const buf = Buffer.from(outcome.body.base64, "base64");
   await writeFile(filePath, buf);
   return {
@@ -51215,7 +51347,7 @@ async function downloadArtefactText(params) {
     codeName: AGT_AGENT_CODE_NAME,
     turnInitiatorFile: process.env.AGT_TURN_INITIATOR_FILE,
     agentId: AGT_AGENT_ID,
-    homeDir: homedir3()
+    homeDir: homedir4()
   });
   let items;
   let truncatedFrom = null;