@integrity-labs/agt-cli 0.28.1171 → 0.28.1173

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-TJ4MVWNH.js";
+} from "../chunk-W34QK2EY.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
@@ -5513,7 +5513,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1171" : "dev";
+var cliVersion = true ? "0.28.1173" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6773,7 +6773,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1171" : "dev";
+var cliVersion2 = true ? "0.28.1173" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-TJ4MVWNH.js → chunk-W34QK2EY.js}

@@ -8078,7 +8078,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1171" : "dev";
+var agtCliVersion = true ? "0.28.1173" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -13235,4 +13235,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-TJ4MVWNH.js.map
+//# sourceMappingURL=chunk-W34QK2EY.js.map

package/dist/lib/manager-worker.js

@@ -77,7 +77,7 @@ import {
   setConfigHash,
   shellGuard,
   tripClass
-} from "../chunk-TJ4MVWNH.js";
+} from "../chunk-W34QK2EY.js";
 import {
   CLAUDE_CODE_SECURITY_FLOOR,
   SELF_UPDATE_TIMEOUTS,
@@ -15928,7 +15928,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1171" : "dev";
+var agtCliVersion = true ? "0.28.1173" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/direct-chat-channel.js

@@ -47473,6 +47473,9 @@ function classifyUndeliverableCause(i) {
   return null;
 }
 var UNDELIVERABLE_NOTICE_THROTTLE_MS = 5 * 60 * 1e3;
+function markerOwesNoReply(m) {
+  return m.discretionary === true || m.ingress_only === true;
+}
 function shouldPostUndeliverableNotice(lastNoticeAtMs, nowMs, throttleMs = UNDELIVERABLE_NOTICE_THROTTLE_MS) {
   return lastNoticeAtMs == null || nowMs - lastNoticeAtMs >= throttleMs;
 }
@@ -47644,7 +47647,7 @@ function oldestPendingMarkerAgeMs(dir, now = Date.now(), opts) {
     let receivedAt;
     try {
       const raw = JSON.parse(readFileSync9(join10(dir, name), "utf-8"));
-      if (raw.discretionary === true) continue;
+      if (markerOwesNoReply(raw)) continue;
       if (!opts?.includeSeen && typeof raw.seen_at === "string" && raw.seen_at) continue;
       receivedAt = raw.received_at;
     } catch {
@@ -54079,6 +54082,7 @@ var MAINTENANCE_GATED_TOOLS = /* @__PURE__ */ new Set([
   // ADR-0025 approval tools, registered by `approval-tools.ts` against the same
   // server object, so the wrapper in index.ts covers them too.
   "cancel_approval",
+  "approval_annotate",
   // Status / identity.
   "status_standup",
   "status_update",

package/dist/mcp/index.js

@@ -47352,6 +47352,7 @@ var MAINTENANCE_GATED_TOOLS = /* @__PURE__ */ new Set([
   // ADR-0025 approval tools, registered by `approval-tools.ts` against the same
   // server object, so the wrapper in index.ts covers them too.
   "cancel_approval",
+  "approval_annotate",
   // Status / identity.
   "status_standup",
   "status_update",
@@ -48694,6 +48695,22 @@ function describeKanbanLink(requestedCardId, resp) {
   }
   return ` Card ${requestedCardId} was NOT linked to this approval (${why}), so the card is not waiting on it and answering the card will not decide it. Leave the request as is (the approver can still decide it from the Approvals page) and do not park the card as a human Approve/Deny wait.`;
 }
+var APPROVAL_ANNOTATE_EVIDENCE_MAX = 1e3;
+function describeAnnotation(resp) {
+  const head = `Recorded your recommendation (${resp.recommendation}) on request ${resp.request_id}. This is not a decision; the person still decides.`;
+  switch (resp.card.outcome) {
+    case "card_updated":
+      return `${head} It now shows on their approval card.`;
+    case "follow_up_posted":
+      return `${head} It was posted as a follow-up beside their card. It also shows on the Approvals page.`;
+    case "unchanged":
+      return `${head} It is identical to your last one, which already reached their card, so nothing was re-sent.`;
+    case "no_card":
+      return `${head} No chat card was delivered for this request, so it shows on the Approvals page only.`;
+    default:
+      return `${head} It could NOT be added to their chat card (${resp.card.reason ?? "unknown"}), so it shows on the Approvals page only. Do not say they have seen it.`;
+  }
+}
 function statusToOutcome(status) {
   switch (status) {
     case "active":
@@ -48803,6 +48820,31 @@ function registerApprovalTools(server2, deps) {
       }
     }
   );
+  server2.tool(
+    "approval_annotate",
+    "Attach your recommendation and what you checked to an approval request from an agent that reports to you, directly or further down your reports-to chain. The person deciding sees it on their approval card, labelled as an agent recommendation. It is NOT a decision: it cannot approve, deny or change the request, and the human still decides. Use it after you have verified the facts yourself, never by repeating the requester's own words. Calling it again replaces your earlier recommendation. Only works while the request is pending.",
+    {
+      request_id: external_exports.string().min(1).describe("The request id from the notice telling you about your report's approval."),
+      recommendation: external_exports.enum(["approve", "deny", "unsure"]).describe("What you recommend the person decides."),
+      evidence: external_exports.string().min(1).max(APPROVAL_ANNOTATE_EVIDENCE_MAX).describe('What you checked and found, e.g. "tree clean, no stash, all commits on origin". Shown as one line of quoted text, attributed to you.')
+    },
+    async (params) => {
+      try {
+        const resp = await apiPost2(`/approvals/${encodeURIComponent(params.request_id)}/annotate`, {
+          agent_id: agentId,
+          recommendation: params.recommendation,
+          evidence: params.evidence
+        });
+        return { content: [{ type: "text", text: describeAnnotation(resp) }] };
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+          content: [{ type: "text", text: `Could not attach the recommendation to ${params.request_id}: ${msg}` }],
+          isError: true
+        };
+      }
+    }
+  );
   server2.tool(
     "cancel_approval",
     "Withdraw an approval request you no longer need (only works while it is still pending). The Manager stops being asked. Use when the underlying need went away.",
@@ -52424,6 +52466,8 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   "request_approval",
   "check_approval",
   "cancel_approval",
+  // ENG-11573: a managing agent's recommendation on a report's approval.
+  "approval_annotate",
   "kanban_list",
   "kanban_search",
   "kanban_get",

package/dist/mcp/slack-channel.js

@@ -31065,6 +31065,7 @@ var MAINTENANCE_GATED_TOOLS = /* @__PURE__ */ new Set([
   // ADR-0025 approval tools, registered by `approval-tools.ts` against the same
   // server object, so the wrapper in index.ts covers them too.
   "cancel_approval",
+  "approval_annotate",
   // Status / identity.
   "status_standup",
   "status_update",
@@ -41280,6 +41281,12 @@ var UNDELIVERABLE_NOTICE_THROTTLE_MS = 5 * 60 * 1e3;
 function undeliverableNoticeEligible(shouldEngage) {
   return shouldEngage;
 }
+function decideInboundReplyOwed(i) {
+  return i.shouldEngage && !i.ingressOnlyThread;
+}
+function markerOwesNoReply(m) {
+  return m.discretionary === true || m.ingress_only === true;
+}
 function shouldPostUndeliverableNotice(lastNoticeAtMs, nowMs, throttleMs = UNDELIVERABLE_NOTICE_THROTTLE_MS) {
   return lastNoticeAtMs == null || nowMs - lastNoticeAtMs >= throttleMs;
 }
@@ -41646,7 +41653,7 @@ function oldestPendingMarkerAgeMs(dir, now = Date.now(), opts) {
     let receivedAt;
     try {
       const raw = JSON.parse(readFileSync3(join3(dir, name), "utf-8"));
-      if (raw.discretionary === true) continue;
+      if (markerOwesNoReply(raw)) continue;
       if (!opts?.includeSeen && typeof raw.seen_at === "string" && raw.seen_at) continue;
       receivedAt = raw.received_at;
     } catch {
@@ -43596,7 +43603,7 @@ function countOwedSlackRepliesForThread(dir, channel, threadTs) {
     try {
       const m = JSON.parse(readFileSync5(fullPath, "utf-8"));
       if (!m || typeof m !== "object") return;
-      if (m.discretionary === true || m.undeliverable === true) return;
+      if (m.discretionary === true || m.undeliverable === true || m.ingress_only === true) return;
       owed += 1;
     } catch {
     }
@@ -43607,6 +43614,21 @@ function markSeenAllSlackPendingMarkersForThread(dir, channel, threadTs, markSee
   const prefix = `${sanitizeMarkerSegment(channel)}__${sanitizeMarkerSegment(threadTs)}__`;
   return applyToMatchingMarkers(dir, prefix, ".json", markSeen);
 }
+function clearIngressOnlySlackPendingMarkersForThread(dir, channel, threadTs, clear = defaultClearMarkerFile) {
+  const cleared = [];
+  markSeenAllSlackPendingMarkersForThread(dir, channel, threadTs, (fullPath) => {
+    let marker;
+    try {
+      marker = JSON.parse(readFileSync5(fullPath, "utf-8"));
+    } catch {
+      return;
+    }
+    if (typeof marker !== "object" || marker === null || marker.ingress_only !== true) return;
+    clear(fullPath);
+    if (typeof marker.message_ts === "string") cleared.push(marker.message_ts);
+  });
+  return cleared;
+}
 function clearSlackPendingMarkerByMessageTs(dir, channel, messageTs, clear = defaultClearMarkerFile) {
   const channelPrefix = `${sanitizeMarkerSegment(channel)}__`;
   const messageSuffix = `__${sanitizeMarkerSegment(messageTs)}.json`;
@@ -47915,7 +47937,7 @@ function sweepSlackStaleMarkers(thresholdMs) {
       thresholdMs,
       hardCeilingMs: STALE_MARKER_MS,
       discretionaryThresholdMs: DISCRETIONARY_MARKER_MS,
-      discretionary: marker.discretionary,
+      discretionary: markerOwesNoReply(marker),
       hasPayload: Boolean(marker.payload),
       replayCount: marker.replay_count ?? 0,
       replayEnabled
@@ -47923,7 +47945,7 @@ function sweepSlackStaleMarkers(thresholdMs) {
     const structurallyBroken = !channel || !thread_ts || !message_ts;
     const timeStale = isPendingMarkerStale(received_at, now, effectiveThresholdMs);
     if (structurallyBroken || timeStale) {
-      if (!marker.discretionary) {
+      if (!markerOwesNoReply(marker)) {
         if (structurallyBroken || !isMarkerGenuinelyAged(received_at, now, effectiveThresholdMs)) {
           recordChannelDeflection(SLACK_AGENT_DIR, "slack", "marker_corrupt");
         } else if (marker.payload) {
@@ -48006,7 +48028,7 @@ function findSlackProgressTarget() {
         continue;
       }
       if (!m.channel || !m.thread_ts) continue;
-      if (m.discretionary === true || m.undeliverable === true) continue;
+      if (markerOwesNoReply(m) || m.undeliverable === true) continue;
       const ms = Date.parse(m.received_at ?? "");
       if (!Number.isFinite(ms)) continue;
       if (ms < bestMs) {
@@ -48156,7 +48178,7 @@ function listPendingSlackConversations() {
         );
         if (typeof marker.channel !== "string" || !marker.channel) continue;
         if (typeof marker.thread_ts !== "string" || !marker.thread_ts) continue;
-        if (marker.discretionary === true) continue;
+        if (markerOwesNoReply(marker)) continue;
         if (typeof marker.seen_at === "string" && marker.seen_at) continue;
         const isThreadReply = typeof marker.message_ts === "string" && marker.message_ts !== marker.thread_ts;
         const key2 = isThreadReply ? `${marker.channel}:${marker.thread_ts}` : marker.channel;
@@ -51315,7 +51337,8 @@ async function replayPendingSlackMarkers() {
       // ENG-6366: auto-followed un-mentioned thread inbound the agent may
       // legitimately silently skip — never re-deliver it (it never clears,
       // so it would otherwise re-push MAX_MARKER_REPLAYS times under replay).
-      discretionary: marker.discretionary,
+      // ENG-11709: the same for a marker in a third-party-bot thread.
+      discretionary: markerOwesNoReply(marker),
       // ENG-7736: bound the pane-fresh defer (clamped under the orphan
       // window) so a perpetually-fresh pane (respawn churn) can't hold off
       // replay until the orphan sweep GCs the marker - the Sherlock loss.
@@ -51774,6 +51797,16 @@ async function connectSocketMode() {
         }
       } else if (access.kind !== "drop" && (!isBot || peerClassification?.kind === "peer-ingress")) {
         ingressOnlyThreads.clear(evt.channel, ingressThreadTs);
+        if (evt.channel && ingressThreadTs) {
+          for (const clearedTs of clearIngressOnlySlackPendingMarkersForThread(
+            SLACK_PENDING_INBOUND_DIR,
+            evt.channel,
+            ingressThreadTs,
+            clearSlackMarkerFileWithHeal
+          )) {
+            slackInboundRegistry.markCleared(evt.channel, clearedTs);
+          }
+        }
       }
       if (access.kind === "drop") {
         const channelHash = createHash3("sha256").update(evt.channel ?? "").digest("hex").slice(0, 8);
@@ -52044,6 +52077,10 @@ async function connectSocketMode() {
         botPostedInThread,
         addressesAnotherAgent
       });
+      const replyOwed = decideInboundReplyOwed({
+        shouldEngage,
+        ingressOnlyThread: ingressOnlyThreads.isIngressOnly(channel, threadTs)
+      });
       const ackProbe = process.env.TMUX && AGENT_CODE_NAME ? probeAgentSessionCached(AGENT_CODE_NAME) : { tmux: "unknown", claude: "unknown" };
       let paneLogFreshAgeMs = null;
       if (SLACK_AGENT_DIR) {
@@ -52083,13 +52120,13 @@ async function connectSocketMode() {
           body: JSON.stringify({ channel, timestamp: ts, name: reactionName })
         }).catch(() => {
         });
-        if (ackDecision === "undeliverable" && channel && undeliverableNoticeEligible(shouldEngage)) {
+        if (ackDecision === "undeliverable" && channel && undeliverableNoticeEligible(replyOwed)) {
           postUndeliverableNotice(channel, threadTs, isThreadReply, cause);
         }
       }
       if (channel && ts && armMarker) {
-        trackPendingMessage(channel, threadTs, ts, ackDecision === "undeliverable", !shouldEngage);
-        if (ackDecision === "ack" && shouldEngage) {
+        trackPendingMessage(channel, threadTs, ts, ackDecision === "undeliverable", !replyOwed);
+        if (ackDecision === "ack" && replyOwed) {
           scheduleBusyAck(
             channel,
             threadTs,
@@ -52168,7 +52205,7 @@ async function connectSocketMode() {
           // fork) - an auto-followed, un-addressed thread message (discretionary,
           // !shouldEngage) owes no reply. Additive only; no consumer gates on
           // these yet (Slice 2).
-          ...conversationalLaneMeta(shouldEngage),
+          ...conversationalLaneMeta(replyOwed),
           // ENG-7919: surface the effective auto-follow state (already cleared when
           // the bot was @-mentioned) so the agent sees auto_followed="true" only
           // when the message genuinely requires discretionary engagement judgment.
@@ -52199,7 +52236,7 @@ async function connectSocketMode() {
       };
       recordLaneClassification(SLACK_AGENT_DIR, "slack", {
         lane: "conversational",
-        expectsReply: shouldEngage
+        expectsReply: replyOwed
       });
       if (channel && ts && armMarker) {
         attachSlackReplayPayload(channel, threadTs, ts, replayPayload);
@@ -52250,7 +52287,7 @@ async function connectSocketMode() {
           sinceMs: dispatchedAtMs
         });
       }
-      if (shouldEngage) seedSlackProgressHeartbeat();
+      if (replyOwed) seedSlackProgressHeartbeat();
       if (channel) {
         conversationIngestClient?.ingest({
           channel: "slack",

package/dist/mcp/telegram-channel.js

@@ -31282,6 +31282,7 @@ var MAINTENANCE_GATED_TOOLS = /* @__PURE__ */ new Set([
   // ADR-0025 approval tools, registered by `approval-tools.ts` against the same
   // server object, so the wrapper in index.ts covers them too.
   "cancel_approval",
+  "approval_annotate",
   // Status / identity.
   "status_standup",
   "status_update",
@@ -44212,6 +44213,9 @@ function decideRecoveryHeal(i) {
   return i.wasUndeliverable && i.hasTarget ? "heal" : "none";
 }
 var UNDELIVERABLE_NOTICE_THROTTLE_MS = 5 * 60 * 1e3;
+function markerOwesNoReply(m) {
+  return m.discretionary === true || m.ingress_only === true;
+}
 function shouldPostUndeliverableNotice(lastNoticeAtMs, nowMs, throttleMs = UNDELIVERABLE_NOTICE_THROTTLE_MS) {
   return lastNoticeAtMs == null || nowMs - lastNoticeAtMs >= throttleMs;
 }
@@ -44553,7 +44557,7 @@ function oldestPendingMarkerAgeMs(dir, now = Date.now(), opts) {
     let receivedAt;
     try {
       const raw = JSON.parse(readFileSync14(join17(dir, name), "utf-8"));
-      if (raw.discretionary === true) continue;
+      if (markerOwesNoReply(raw)) continue;
       if (!opts?.includeSeen && typeof raw.seen_at === "string" && raw.seen_at) continue;
       receivedAt = raw.received_at;
     } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1171",
+  "version": "0.28.1173",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {