@integrity-labs/agt-cli 0.28.131 → 0.28.133

package/dist/bin/agt.js

@@ -37,7 +37,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-N5N3CA6W.js";
+} from "../chunk-L3WP7Y5L.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -4777,7 +4777,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.131" : "dev";
+var cliVersion = true ? "0.28.133" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5791,7 +5791,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.131" : "dev";
+var cliVersion2 = true ? "0.28.133" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-N5N3CA6W.js → chunk-L3WP7Y5L.js}

@@ -4577,7 +4577,23 @@ function provisionStopHook(codeName) {
     'SL_PENDING=$(pending_markers_count "$SL_MARKER_DIR")',
     'MS_PENDING=$(pending_markers_count "$MS_MARKER_DIR")',
     'if [ "$TG_PENDING" = "0" ] && [ "$SL_PENDING" = "0" ] && [ "$MS_PENDING" = "0" ]; then exit 0; fi',
-    `LAST_ASSISTANT=$(tail -200 "$TRANSCRIPT_PATH" | jq -cs '[.[] | select(.type == "assistant" or .role == "assistant")] | last // empty' 2>/dev/null || true)`,
+    "# ENG-6727 (failure mode 3 \u2014 hook slowness): read the transcript tail ONCE",
+    "# into a temp file and reuse it for every jq pass below (last-assistant text,",
+    "# channel-tag scan, and the per-source recency check). The old hook re-ran",
+    '# `tail -400 "$TRANSCRIPT_PATH" | jq` three to four times per Stop; on a long',
+    "# session that repeated seek-to-end + pipe over a multi-MB transcript could",
+    "# exceed Claude Code's stop-hook timeout, so the safety net was killed mid-run",
+    '# (vera: "running stop hooks\u2026 0/2 \xB7 3m 15s"). One bounded read, many cheap',
+    "# passes over the small tail, removes that failure mode.",
+    'RECENT_FILE="$(mktemp "${TMPDIR:-/tmp}/agt-ghost-recent.XXXXXX" 2>/dev/null || true)"',
+    'if [ -z "$RECENT_FILE" ]; then RECENT_FILE="${AGENT_DIR}/.ghost-recent.$$"; : > "$RECENT_FILE" 2>/dev/null || true; fi',
+    "# Transcript text can contain user/secret content \u2014 keep the snapshot",
+    "# owner-only (mktemp is already 0600; this covers the umask-dependent",
+    "# fallback path), matching atomic_write_payload's posture.",
+    'chmod 600 "$RECENT_FILE" 2>/dev/null || true',
+    `trap 'rm -f "$RECENT_FILE" 2>/dev/null || true' EXIT`,
+    'tail -400 "$TRANSCRIPT_PATH" > "$RECENT_FILE" 2>/dev/null || true',
+    `LAST_ASSISTANT=$(jq -cs '[.[] | select(.type == "assistant" or .role == "assistant")] | last // empty' "$RECENT_FILE" 2>/dev/null || true)`,
     'if [ -z "$LAST_ASSISTANT" ] || [ "$LAST_ASSISTANT" = "null" ]; then exit 0; fi',
     "# Assistant content is array-shaped today; normalize anyway so a shape",
     "# change can never resurrect the swallowed-jq-error no-op (ENG-6288).",
@@ -4608,7 +4624,13 @@ function provisionStopHook(codeName) {
     "# thread_context can truncate the match early, but every scalar attr we read",
     "# (source/channel/thread_ts/message_ts/chat_id/conversation_id) precedes",
     "# thread_context, so the truncated tag still carries them.",
-    `CHANNEL_TAG=$(tail -400 "$TRANSCRIPT_PATH" | jq -r '${jqNormalizeContent} | map(select(type == "object" and .type == "text") | .text | gsub("[\\n\\r]+"; " ")) | join(" ")' 2>/dev/null | grep -oE '<channel [^>]+>' | tail -1 || true)`,
+    "# ENG-6727: skip assistant-authored records when scanning for the inbound",
+    "# <channel> tag. If the agent quotes/summarizes a <channel ...> tag in its",
+    "# own final text, that assistant tag could otherwise become CHANNEL_TAG and",
+    "# correlate recovery/block against the wrong conversation. Exclude assistant",
+    "# turns (not an allowlist of user/notification, which could miss a real",
+    "# notification record shape).",
+    `CHANNEL_TAG=$(jq -r 'select((.type // "") != "assistant" and (.role // "") != "assistant") | ${jqNormalizeContent} | map(select(type == "object" and .type == "text") | .text | gsub("[\\n\\r]+"; " ")) | join(" ")' "$RECENT_FILE" 2>/dev/null | grep -oE '<channel [^>]+>' | tail -1 || true)`,
     'TAG_SOURCE=""',
     `if [ -n "$CHANNEL_TAG" ]; then TAG_SOURCE=$(echo "$CHANNEL_TAG" | grep -oE 'source="[^"]+"' | head -1 | sed 's/source="\\(.*\\)"/\\1/' || true); fi`,
     "# ENG-6567: one context line per Stop that reached here (non-empty assistant",
@@ -4635,22 +4657,45 @@ function provisionStopHook(codeName) {
     "# Sanitize an ID the same way the channel servers do (safeMarkerName /",
     "# safeSlackMarkerName): replace anything outside [A-Za-z0-9_-] with `_`.",
     `safe_id() { echo -n "$1" | sed -E 's|[^A-Za-z0-9_-]|_|g'; }`,
+    '# ENG-6727 (failure mode 1 \u2014 over-suppression): per-conversation "did the',
+    '# agent reply to THIS conversation in the final turn?" checks. The old',
+    "# same-turn guards grepped TOOL_NAMES for ANY reply tool, so a multi-thread",
+    "# agent that replied to thread B suppressed the owed reply/block for thread A",
+    "# (the chronic sherlock symptom). These scope the check to the conversation",
+    "# keyed by the inbound tag, comparing the reply tool's input against it.",
+    '# Output "yes"/"no" (never a jq nonzero exit) to stay clear of the ERR trap.',
+    "replied_this_conv_slack() {",
+    '  local channel="$1" thread_ts="$2" hit',
+    `  hit=$(printf '%s' "$LAST_ASSISTANT" | jq -r --arg ch "$channel" --arg th "$thread_ts" '(.message.content // .content // []) | (if type=="array" then . else [] end) | (if any(.[]; (type=="object") and (.type=="tool_use") and ((.name|tostring)|test("(^|__)slack[._]reply$")) and ((.input.channel // "") as $c | (.input.thread_ts // "") as $t | (.input.message_ts // "") as $m | (($th != "" and ($t==$th or $m==$th)) or ($th=="" and $c!="" and $c==$ch)))) then "yes" else "no" end)' 2>/dev/null || echo no)`,
+    '  [ "$hit" = "yes" ]',
+    "}",
+    "replied_this_conv_telegram() {",
+    '  local chat_id="$1" hit',
+    `  hit=$(printf '%s' "$LAST_ASSISTANT" | jq -r --arg cid "$chat_id" '(.message.content // .content // []) | (if type=="array" then . else [] end) | (if any(.[]; (type=="object") and (.type=="tool_use") and ((.name|tostring)|test("(^|__)telegram[._](reply|send_message)$")) and (((.input.chat_id // "")|tostring)==$cid)) then "yes" else "no" end)' 2>/dev/null || echo no)`,
+    '  [ "$hit" = "yes" ]',
+    "}",
+    "replied_this_conv_teams() {",
+    '  local conversation_id="$1" hit',
+    `  hit=$(printf '%s' "$LAST_ASSISTANT" | jq -r --arg cid "$conversation_id" '(.message.content // .content // []) | (if type=="array" then . else [] end) | (if any(.[]; (type=="object") and (.type=="tool_use") and ((.name|tostring)|test("(^|__)teams[._]reply$")) and (((.input.conversation_id // "")|tostring)==$cid)) then "yes" else "no" end)' 2>/dev/null || echo no)`,
+    '  [ "$hit" = "yes" ]',
+    "}",
     "recover_telegram_for() {",
     '  local chat_id="$1" msg_id="$2"',
     '  if [ -z "$chat_id" ] || [ -z "$msg_id" ]; then return; fi',
-    "  # If the agent DID call telegram.reply this turn, no recovery needed.",
-    "  # ENG-6405: match the namespaced transcript form (mcp__telegram__telegram_reply)",
-    "  # as ENG-6387 did for Slack \u2014 the bare `^telegram\\.reply$` never matched a real",
-    "  # transcript, so this same-turn guard was dead (masked only by the MCP-side",
-    "  # marker clear). The `(^|__)` + `[._]` form catches both shapes.",
-    `  if echo "$TOOL_NAMES" | grep -qE '(^|__)telegram[._](reply|send_message)$'; then return; fi`,
-    "  # ENG-6405 \u2014 correlation + fail-silent parity with Slack (ENG-6387). If the",
-    "  # agent has telegram.replied/sent to a DIFFERENT chat_id anywhere in the recent",
-    "  # window, it is conversing elsewhere and TEXT is not a reliably-correlated ghost",
-    "  # of THIS inbound \u2014 recovering it would post mis-correlated text. Stay silent: a",
-    "  # silent gap the operator re-pings beats wrong content that poisons trust.",
+    "  # ENG-6727 (mode 1): scoped same-turn guard. Suppress only if the agent",
+    "  # replied to THIS chat in the final turn (a final reply clears the marker",
+    "  # anyway; this catches the interim-ack case where the marker is downgraded",
+    "  # to seen, not deleted). A reply to a DIFFERENT chat no longer suppresses \u2014",
+    "  # marker existence + the recency guard below decide that. Was a global grep",
+    "  # over TOOL_NAMES that dropped owed replies on multi-chat agents.",
+    '  if replied_this_conv_telegram "$chat_id"; then log_ghost "telegram skip=replied_this_turn chat=$(safe_id "$chat_id")"; return; fi',
+    "  # ENG-6405 / ENG-6467 \u2014 recency-aware koda suppression (KEPT). If the agent",
+    "  # has telegram.replied/sent to a DIFFERENT chat_id AFTER this inbound tag,",
+    "  # it moved on and TEXT is not a reliably-correlated ghost of THIS inbound \u2014",
+    "  # recovering it would post mis-correlated text. Stay silent: a silent gap the",
+    "  # operator re-pings beats wrong content that poisons trust.",
     "  local replied_other",
-    `  replied_other=$(tail -400 "$TRANSCRIPT_PATH" 2>/dev/null | jq -s --arg cid "$chat_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select(($all[.]|ctext)|test("<channel ")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("telegram[._](reply|send_message)$")) and (((.input.chat_id // "")) as $c | ($c != $cid and $c != ""))) ] | length' 2>/dev/null || true)`,
+    `  replied_other=$(jq -s --arg cid "$chat_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("telegram[._](reply|send_message)$")) and (((.input.chat_id // "")|tostring) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
     '  if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
     "  local marker_name",
     '  marker_name="$(safe_id "$chat_id")__$(safe_id "$msg_id").json"',
@@ -4667,14 +4712,15 @@ function provisionStopHook(codeName) {
     "recover_slack_for() {",
     '  local channel="$1" thread_ts="$2"',
     '  if [ -z "$channel" ]; then return; fi',
-    "  # If the agent DID call slack.reply this turn, no recovery needed.",
-    "  # ENG-6387: match the namespaced transcript form mcp__slack__slack_reply",
-    "  # (Claude Code rewrites the registered `slack.reply` tool name to",
-    "  # `mcp__slack__slack_reply`). The bare `^slack\\.reply$` never matched a",
-    "  # real transcript, so this same-turn guard was dead in prod and only",
-    "  # masked by the MCP-side marker clear.",
-    `  if echo "$TOOL_NAMES" | grep -qE '(^|__)slack[._]reply$'; then log_ghost "slack skip=replied_this_turn thread=$(safe_id "$thread_ts")"; return; fi`,
-    "  # ENG-6387 plus ENG-6467: recency-aware correlation + fail-silent. A reply and",
+    "  # ENG-6727 (mode 1): scoped same-turn guard. Suppress only if the agent",
+    "  # replied to THIS thread/channel in the final turn (a final reply clears the",
+    "  # marker anyway; this catches the interim-ack case where the marker is",
+    "  # downgraded to seen, not deleted). A reply to a DIFFERENT thread no longer",
+    "  # suppresses here \u2014 marker existence + the recency guard below decide that.",
+    "  # Was a global grep over TOOL_NAMES (any slack.reply), which dropped owed",
+    "  # replies on multi-thread agents (the chronic sherlock symptom).",
+    '  if replied_this_conv_slack "$channel" "$thread_ts"; then log_ghost "slack skip=replied_this_turn thread=$(safe_id "$thread_ts")"; return; fi',
+    "  # ENG-6387 plus ENG-6467: recency-aware correlation + fail-silent (KEPT). A reply and",
     "  # trailing narration can straddle turns, so a single-turn check is not",
     "  # enough. ENG-6387 bailed on a reply to ANY other thread ANYWHERE in the",
     "  # window; a multi-thread agent (sherlock) satisfies that on nearly every",
@@ -4686,7 +4732,7 @@ function provisionStopHook(codeName) {
     "  # so answering an older thread then this one recovers correctly. Silence on",
     "  # a genuine move-on still beats posting mis-correlated text.",
     "  local replied_other",
-    `  replied_other=$(tail -400 "$TRANSCRIPT_PATH" 2>/dev/null | jq -s --arg th "$thread_ts" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select(($all[.]|ctext)|test("<channel ")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("slack[._]reply$")) and (((.input.thread_ts // .input.message_ts // "")) as $t | ($t != $th and $t != ""))) ] | length' 2>/dev/null || true)`,
+    `  replied_other=$(jq -s --arg th "$thread_ts" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("slack[._]reply$")) and (((.input.thread_ts // .input.message_ts // "")) as $t | ($t != $th and $t != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
     '  if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then log_ghost "slack skip=moved_on_after_tag thread=$(safe_id "$thread_ts")"; return; fi',
     "  # Find any marker for this channel+thread (in busy threads multiple",
     "  # message_ts entries can be pending \u2014 recover the oldest, that's the",
@@ -4709,17 +4755,17 @@ function provisionStopHook(codeName) {
     "recover_teams_for() {",
     '  local conversation_id="$1" reply_to_id="$2" service_url="$3"',
     '  if [ -z "$conversation_id" ] || [ -z "$service_url" ]; then return; fi',
-    "  # If the agent DID call teams.reply this turn, no recovery needed.",
-    "  # ENG-6405: namespaced transcript form (mcp__teams__teams_reply); the bare",
-    "  # `^teams\\.reply$` was dead (masked by the MCP-side marker clear), same bug",
-    "  # ENG-6387 fixed for Slack.",
-    `  if echo "$TOOL_NAMES" | grep -qE '(^|__)teams[._]reply$'; then return; fi`,
-    "  # ENG-6405 \u2014 correlation + fail-silent parity. If the agent has teams.replied",
-    "  # to a DIFFERENT conversation_id in the recent window, TEXT is not a reliably-",
-    "  # correlated ghost of THIS inbound \u2014 stay silent rather than post mis-correlated",
-    "  # text (silence the operator re-pings beats wrong content that poisons trust).",
+    "  # ENG-6727 (mode 1): scoped same-turn guard. Suppress only if the agent",
+    "  # replied to THIS conversation in the final turn. A reply to a DIFFERENT",
+    "  # conversation no longer suppresses \u2014 marker existence + the recency guard",
+    "  # below decide that. Was a global grep over TOOL_NAMES.",
+    '  if replied_this_conv_teams "$conversation_id"; then log_ghost "teams skip=replied_this_turn conv=$(safe_id "$conversation_id")"; return; fi',
+    "  # ENG-6405 / ENG-6467 \u2014 recency-aware koda suppression (KEPT). If the agent has",
+    "  # teams.replied to a DIFFERENT conversation_id AFTER this inbound tag, TEXT is",
+    "  # not a reliably-correlated ghost of THIS inbound \u2014 stay silent rather than post",
+    "  # mis-correlated text (silence the operator re-pings beats wrong content).",
     "  local replied_other",
-    `  replied_other=$(tail -400 "$TRANSCRIPT_PATH" 2>/dev/null | jq -s --arg cid "$conversation_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select(($all[.]|ctext)|test("<channel ")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("teams[._]reply$")) and (((.input.conversation_id // "")) as $c | ($c != $cid and $c != ""))) ] | length' 2>/dev/null || true)`,
+    `  replied_other=$(jq -s --arg cid "$conversation_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("teams[._]reply$")) and (((.input.conversation_id // "")) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
     '  if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
     "  # teams-channel.ts encodes the marker filename as",
     "  #   hex(conversation_id)[..64]--hex(activity_id)[..64].json",
@@ -4762,16 +4808,21 @@ function provisionStopHook(codeName) {
     "# GC stale ledger entries (>1 day) so the per-marker cap dir cannot grow unbounded.",
     'if [ -d "$BLOCK_LEDGER_DIR" ]; then find "$BLOCK_LEDGER_DIR" -type f -mtime +1 -delete 2>/dev/null || true; fi',
     "# Returns 0 (after printing the block JSON to stdout) when it blocked; 1 otherwise.",
-    "#   $1 = reply-tool name regex (same shape the recover_* same-turn guards use)",
+    '#   $1 = "yes"/"no" \u2014 did the agent reply to THIS conversation in the final turn?',
+    "#        (ENG-6727: per-conversation, computed by the caller via replied_this_conv_*)",
     "#   $2 = newline-separated candidate marker paths for the tagged conversation",
     "#   $3 = reply-tool hint shown to the model in the block reason",
     "emit_block_if_obligated() {",
-    '  local reply_re="$1" candidates="$2" tool_hint="$3"',
+    '  local replied_this_conv="$1" candidates="$2" tool_hint="$3"',
     '  if [ "$BLOCK_TURN_END_ON" != "1" ]; then return 1; fi',
     "  # Belt: never block during a continuation Claude Code already flagged.",
     '  if [ "$STOP_ACTIVE" = "true" ]; then return 1; fi',
-    "  # Already replied to THIS conversation this turn \u21D2 nothing owed.",
-    '  if echo "$TOOL_NAMES" | grep -qE "$reply_re"; then return 1; fi',
+    "  # ENG-6727 (mode 1): already replied to THIS conversation this turn \u21D2 nothing",
+    "  # owed. Was a global grep over TOOL_NAMES for ANY reply tool, so a reply to",
+    "  # thread B let an owed block for thread A fall through to recovery, which the",
+    "  # recency guard then suppressed \u2192 silent loss (the sherlock symptom, since",
+    "  # sherlock runs with block-turn-end ON). Now scoped to the tagged conversation.",
+    '  if [ "$replied_this_conv" = "yes" ]; then return 1; fi',
     '  local m d u obligated=""',
     "  while IFS= read -r m; do",
     '    if [ -z "$m" ] || [ ! -f "$m" ]; then continue; fi',
@@ -4810,7 +4861,8 @@ function provisionStopHook(codeName) {
     '  MSG_ID=$(extract_attr "$CHANNEL_TAG" "message_id")',
     '  if [ -n "$CHAT_ID" ] && [ -n "$MSG_ID" ]; then',
     '    TG_CAND="${TG_MARKER_DIR}/$(safe_id "$CHAT_ID")__$(safe_id "$MSG_ID").json"',
-    `    if emit_block_if_obligated '(^|__)telegram[._](reply|send_message)$' "$TG_CAND" 'telegram.reply'; then exit 0; fi`,
+    '    TG_REPLIED=no; if replied_this_conv_telegram "$CHAT_ID"; then TG_REPLIED=yes; fi',
+    `    if emit_block_if_obligated "$TG_REPLIED" "$TG_CAND" 'telegram.reply'; then exit 0; fi`,
     "  fi",
     '  recover_telegram_for "$CHAT_ID" "$MSG_ID"',
     'elif [ "$TAG_SOURCE" = "slack" ]; then',
@@ -4820,7 +4872,8 @@ function provisionStopHook(codeName) {
     '    SL_PREFIX="${SL_MARKER_DIR}/$(safe_id "$CHANNEL")__$(safe_id "$THREAD_TS")__"',
     "    shopt -s nullglob",
     `    SL_CAND=$(printf '%s\\n' "$SL_PREFIX"*.json)`,
-    `    if emit_block_if_obligated '(^|__)slack[._]reply$' "$SL_CAND" 'slack.reply'; then exit 0; fi`,
+    '    SL_REPLIED=no; if replied_this_conv_slack "$CHANNEL" "$THREAD_TS"; then SL_REPLIED=yes; fi',
+    `    if emit_block_if_obligated "$SL_REPLIED" "$SL_CAND" 'slack.reply'; then exit 0; fi`,
     "  fi",
     '  recover_slack_for "$CHANNEL" "$THREAD_TS"',
     'elif [ "$TAG_SOURCE" = "msteams" ]; then',
@@ -4831,7 +4884,8 @@ function provisionStopHook(codeName) {
     '    HEX_CONV=$(printf %s "$CONVERSATION_ID" | od -An -tx1 | tr -d " \\n" | cut -c1-64)',
     "    shopt -s nullglob",
     "    MS_CAND=$(printf '%s\\n' \"${MS_MARKER_DIR}/${HEX_CONV}\"*.json)",
-    `    if emit_block_if_obligated '(^|__)teams[._]reply$' "$MS_CAND" 'teams.reply'; then exit 0; fi`,
+    '    MS_REPLIED=no; if replied_this_conv_teams "$CONVERSATION_ID"; then MS_REPLIED=yes; fi',
+    `    if emit_block_if_obligated "$MS_REPLIED" "$MS_CAND" 'teams.reply'; then exit 0; fi`,
     "  fi",
     '  recover_teams_for "$CONVERSATION_ID" "$REPLY_TO_ID" "$SERVICE_URL"',
     'elif [ -z "$TAG_SOURCE" ]; then',
@@ -7692,7 +7746,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.131" : "dev";
+var agtCliVersion = true ? "0.28.133" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8989,4 +9043,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-N5N3CA6W.js.map
+//# sourceMappingURL=chunk-L3WP7Y5L.js.map