@integrity-labs/agt-cli 0.28.161 → 0.28.163

package/dist/{chunk-2D5COEAS.js → chunk-OW6ERQHP.js}

@@ -3,7 +3,7 @@ import {
   formatMissingVar,
   isClaudeFastMode,
   probeMcpEnvSubstitution
-} from "./chunk-CQZDKD2U.js";
+} from "./chunk-MTKFDGXO.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -1588,4 +1588,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-2D5COEAS.js.map
+//# sourceMappingURL=chunk-OW6ERQHP.js.map

package/dist/{claude-pair-runtime-VHRJFJDJ.js → claude-pair-runtime-WEKLV5X5.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-3AC6FSX6.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-3ACIT7F5.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-VHRJFJDJ.js.map
+//# sourceMappingURL=claude-pair-runtime-WEKLV5X5.js.map

package/dist/lib/manager-worker.js

@@ -28,7 +28,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-TNTG4DNQ.js";
+} from "../chunk-BEUGTZ7Z.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -70,7 +70,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-2D5COEAS.js";
+} from "../chunk-OW6ERQHP.js";
 import {
   CONVERSATION_FAILURE_CATEGORIES,
   DEFAULT_FRAMEWORK,
@@ -111,7 +111,7 @@ import {
   resolveChannels,
   resolveDmTarget,
   sumTranscriptUsageInWindow
-} from "../chunk-CQZDKD2U.js";
+} from "../chunk-MTKFDGXO.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -6878,7 +6878,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.161" : "dev";
+var agtCliVersion = true ? "0.28.163" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -8011,7 +8011,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-3AC6FSX6.js");
+      const { collectDiagnostics } = await import("../persistent-session-3ACIT7F5.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -8159,7 +8159,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-ZXB5REIY.js");
+      } = await import("../responsiveness-probe-5OCWCS3M.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -8191,7 +8191,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-ZXB5REIY.js");
+        } = await import("../responsiveness-probe-5OCWCS3M.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -11692,7 +11692,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-VHRJFJDJ.js");
+  } = await import("../claude-pair-runtime-WEKLV5X5.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/remote-oauth-proxy.js

@@ -10,15 +10,48 @@ import { resolve as resolvePath } from "path";
 var URL_ENV = "AGT_REMOTE_MCP_URL";
 var TOKEN_FILE_ENV = "AGT_REMOTE_MCP_TOKEN_FILE";
 var TOKEN_VAR_ENV = "AGT_REMOTE_MCP_TOKEN_VAR";
+var ALLOWLIST_ENV = "AGT_REMOTE_MCP_TOOL_ALLOWLIST";
 var REMOTE_FETCH_TIMEOUT_MS = 3e4;
 var remoteUrl = process.env[URL_ENV] ?? "";
 var tokenFile = process.env[TOKEN_FILE_ENV] ?? "";
 var tokenVar = process.env[TOKEN_VAR_ENV] ?? "";
 var label = process.env["AGT_REMOTE_MCP_LABEL"] || tokenVar || "remote-oauth";
+var toolAllowlist = parseToolAllowlist(process.env[ALLOWLIST_ENV] ?? "");
 function logErr(msg) {
   process.stderr.write(`[remote-oauth-proxy:${label}] ${msg}
 `);
 }
+function parseToolAllowlist(raw) {
+  const out = /* @__PURE__ */ new Set();
+  for (const part of (raw || "").split(",")) {
+    const name = part.trim();
+    if (name) out.add(name);
+  }
+  return out;
+}
+function filterToolsListMessage(message, allow) {
+  if (allow.size === 0) return { message, total: 0, kept: 0, advertised: [] };
+  let obj;
+  try {
+    obj = JSON.parse(message);
+  } catch {
+    return { message, total: 0, kept: 0, advertised: [] };
+  }
+  const result = obj?.result;
+  const tools = result?.tools;
+  if (!Array.isArray(tools)) return { message, total: 0, kept: 0, advertised: [] };
+  const nameOf = (t) => t && typeof t === "object" && typeof t.name === "string" ? t.name : "";
+  const advertised = tools.map(nameOf).filter((n) => n.length > 0);
+  const filtered = tools.filter((t) => allow.has(nameOf(t)));
+  result.tools = filtered;
+  return { message: JSON.stringify(obj), total: tools.length, kept: filtered.length, advertised };
+}
+function isToolCallBlocked(method, params, allow) {
+  if (allow.size === 0 || method !== "tools/call") return { blocked: false, name: "" };
+  const name = params && typeof params === "object" && typeof params.name === "string" ? params.name : "";
+  if (name && !allow.has(name)) return { blocked: true, name };
+  return { blocked: false, name };
+}
 function readCurrentToken(file, varName) {
   let raw;
   try {
@@ -71,7 +104,7 @@ function extractJsonRpcMessages(contentType, body) {
   }
   return out;
 }
-async function forward(line, id, isNotification) {
+async function forward(line, id, isNotification, method) {
   const token = readCurrentToken(tokenFile, tokenVar);
   if (!token) {
     logErr(`no token in ${tokenFile} (var ${tokenVar})`);
@@ -102,7 +135,24 @@ async function forward(line, id, isNotification) {
   }
   if (isNotification) return [];
   const messages = extractJsonRpcMessages(ct, body);
-  if (messages.length > 0) return messages;
+  if (messages.length > 0) {
+    if (method === "tools/list" && toolAllowlist.size > 0) {
+      return messages.map((m) => {
+        const r = filterToolsListMessage(m, toolAllowlist);
+        if (r.total !== r.kept) {
+          logErr(`tools/list filtered ${r.total} -> ${r.kept} (allowlist ${toolAllowlist.size})`);
+        }
+        if (r.advertised.length > 0) {
+          const missing = [...toolAllowlist].filter((n) => !r.advertised.includes(n));
+          if (missing.length > 0) {
+            logErr(`allowlisted tools not advertised by server: ${missing.join(", ")}`);
+          }
+        }
+        return r.message;
+      });
+    }
+    return messages;
+  }
   const detail = body.slice(0, 300).replace(/\s+/g, " ").trim();
   return [jsonRpcError(id, -32002, `${label}: MCP server returned HTTP ${res.status}${detail ? ` (${detail})` : ""}`)];
 }
@@ -139,7 +189,19 @@ async function main() {
     }
     const isNotification = !("id" in parsed);
     const id = parsed.id;
-    const task = forward(text, id, isNotification).then(writeReplies).catch((err) => {
+    if (!isNotification) {
+      const block = isToolCallBlocked(parsed.method, parsed.params, toolAllowlist);
+      if (block.blocked) {
+        logErr(`blocked tools/call to non-allowlisted tool "${block.name}"`);
+        const task2 = writeReplies([
+          jsonRpcError(id, -32601, `${label}: tool "${block.name}" is not enabled for this integration`)
+        ]).catch((err) => logErr(`handler error: ${err.message}`));
+        inflight.add(task2);
+        void task2.finally(() => inflight.delete(task2));
+        return;
+      }
+    }
+    const task = forward(text, id, isNotification, parsed.method).then(writeReplies).catch((err) => {
       logErr(`handler error: ${err.message}`);
     });
     inflight.add(task);
@@ -163,6 +225,9 @@ if (invokedDirectly) {
 }
 export {
   extractJsonRpcMessages,
+  filterToolsListMessage,
+  isToolCallBlocked,
   main,
+  parseToolAllowlist,
   readCurrentToken
 };

package/dist/mcp/slack-channel.js

@@ -16359,10 +16359,16 @@ function parseAllowedUsersCsv(raw) {
   );
 }
 function extractAllowedUsersFromMcpJson(jsonText) {
+  return extractSlackEnvAllowlistFromMcpJson(jsonText, "SLACK_ALLOWED_USERS");
+}
+function extractPingAllowedUsersFromMcpJson(jsonText) {
+  return extractSlackEnvAllowlistFromMcpJson(jsonText, "SLACK_PING_ALLOWED_USERS");
+}
+function extractSlackEnvAllowlistFromMcpJson(jsonText, envKey) {
   const parsed = JSON.parse(jsonText);
   const slackServer = parsed.mcpServers?.["slack"];
   if (!slackServer) return null;
-  return parseAllowedUsersCsv(slackServer.env?.["SLACK_ALLOWED_USERS"]);
+  return parseAllowedUsersCsv(slackServer.env?.[envKey]);
 }
 
 // src/slack-response-mode.ts
@@ -17178,6 +17184,7 @@ async function maybeSendMaintenanceNotice(args) {
 }
 var BLOCK_KIT_DISABLED = process.env.SLACK_BLOCK_KIT_DISABLED === "true";
 var ALLOWED_USERS = parseAllowedUsersCsv(process.env.SLACK_ALLOWED_USERS);
+var PING_ALLOWED_USERS = parseAllowedUsersCsv(process.env.SLACK_PING_ALLOWED_USERS);
 var THREAD_AUTO_FOLLOW = process.env.SLACK_THREAD_AUTO_FOLLOW ?? "off";
 var SLACK_SKIP_REACTION = (process.env.SLACK_SKIP_REACTION ?? "").trim();
 var SLACK_ACK_REACTION = (process.env.SLACK_ACK_REACTION ?? "").trim() || "eyes";
@@ -17255,6 +17262,27 @@ function readLiveAllowedUsers() {
 function getEffectiveAllowedUsers() {
   return readLiveAllowedUsers() ?? ALLOWED_USERS;
 }
+var livePingAllowedUsersCache = null;
+function readLivePingAllowedUsers() {
+  if (!SLACK_MCP_CONFIG_PATH) return null;
+  try {
+    const mtimeMs = statSync2(SLACK_MCP_CONFIG_PATH).mtimeMs;
+    if (livePingAllowedUsersCache && livePingAllowedUsersCache.mtimeMs === mtimeMs) {
+      return livePingAllowedUsersCache.value;
+    }
+    const value = extractPingAllowedUsersFromMcpJson(
+      readFileSync10(SLACK_MCP_CONFIG_PATH, "utf-8")
+    );
+    if (value === null) return null;
+    livePingAllowedUsersCache = { mtimeMs, value };
+    return value;
+  } catch {
+    return null;
+  }
+}
+function getEffectivePingAllowedUsers() {
+  return readLivePingAllowedUsers() ?? PING_ALLOWED_USERS;
+}
 var SLACK_PENDING_INBOUND_DIR = SLACK_AGENT_DIR ? join8(SLACK_AGENT_DIR, "slack-pending-inbound") : null;
 var SLACK_RECOVERY_OUTBOX_DIR = SLACK_AGENT_DIR ? join8(SLACK_AGENT_DIR, "slack-recovery-outbox") : null;
 var SLACK_RESTART_CONFIRM_FILE = SLACK_AGENT_DIR ? join8(SLACK_AGENT_DIR, "slack-restart-confirm.json") : null;
@@ -18282,6 +18310,7 @@ function buildSlackHelpMessage(codeName) {
     `\u2022 \`${agentSlashCommand("/onboard")}\` \u2014 re-run this agent's onboarding: re-interview, existing config kept (allowlisted users)`,
     `\u2022 \`${agentSlashCommand("/resume-onboarding")}\` \u2014 resume this agent's onboarding where it left off (allowlisted users)`,
     `\u2022 \`${agentSlashCommand("/status")}\` \u2014 this agent's model, session origin, uptime + connectivity`,
+    `\u2022 \`${agentSlashCommand("/ping")}\` - confirm this agent's channel is connected: posts a visible pong (team + manager only)`,
     "\u2022 `/watch <google-doc-url> [duration]` (type it in chat) \u2014 watch a Google Doc for comments that mention me (default 2h, max 7d; auto-pauses when the window ends). In a shared channel, address me as `/watch-<my-name>`.",
     "\u2022 `/kill` \u2014 silence all agents in this thread for 6h (use as a thread reply)",
     "\u2022 `/unkill` \u2014 clear a kill (use as a thread reply)",
@@ -18780,6 +18809,46 @@ async function handleSlashCommandEnvelope(payload) {
     }
     return;
   }
+  if (matchesAgentCommand(command, "/ping")) {
+    if (!payload.channel_id) {
+      await postEphemeralViaResponseUrl(
+        responseUrl,
+        `:warning: \`/ping\` needs a channel context - invoke it in a channel or DM where \`${codeName}\` is present.`,
+        codeName
+      );
+      return;
+    }
+    const pingAllowed = getEffectivePingAllowedUsers();
+    if (pingAllowed.size === 0 || !payload.user_id || !pingAllowed.has(payload.user_id)) {
+      process.stderr.write(
+        `slack-channel(${codeName}): /ping denied - user not in SLACK_PING_ALLOWED_USERS
+`
+      );
+      await postEphemeralViaResponseUrl(
+        responseUrl,
+        `\u{1F6AB} \`/ping\` is limited to \`${codeName}\`'s team and the person it reports to. If that's you, link your Slack in your Augmented Team contact preferences and wait for the next refresh.`,
+        codeName
+      );
+      return;
+    }
+    const connected = currentWs != null && !isShuttingDown;
+    const dot = connected ? "\u{1F7E2}" : "\u{1F534}";
+    const state = connected ? "online" : "offline";
+    const pong = `${dot} pong - \`${codeName}\` is ${state} (manager \u2022 ${(/* @__PURE__ */ new Date()).toISOString()}). Last activity: ${formatLastActivity()}.`;
+    const sent = await postSlackMessage({
+      channel: payload.channel_id,
+      text: pong,
+      ...payload.thread_ts ? { thread_ts: payload.thread_ts } : {}
+    });
+    if (!sent.ok) {
+      await postEphemeralViaResponseUrl(
+        responseUrl,
+        `\u274C \`/ping\` could not post to this channel: ${sent.error ?? "unknown error"}. The channel may not be connected.`,
+        codeName
+      );
+    }
+    return;
+  }
 }
 async function handleHelpCommand(opts) {
   const codeName = AGENT_CODE_NAME ?? "unknown";

package/dist/mcp/telegram-channel.js

@@ -16924,6 +16924,9 @@ var ALLOWED_CHATS = new Set(
 var DIAGNOSTIC_CHAT_IDS = new Set(
   (process.env.TELEGRAM_DIAGNOSTIC_CHAT_IDS ?? "").split(",").map((s) => s.trim()).filter(Boolean)
 );
+var PING_ALLOWED_CHAT_IDS = new Set(
+  (process.env.TELEGRAM_PING_ALLOWED_CHAT_IDS ?? "").split(",").map((s) => s.trim()).filter(Boolean)
+);
 var PEER_CLASSIFIER_CONFIG = {
   peer_agent_mode: parsePeerAgentModeEnv(process.env.TELEGRAM_PEER_AGENT_MODE),
   peer_group_ids: parsePeerGroupIdsEnv(process.env.TELEGRAM_PEER_GROUP_IDS),
@@ -17354,6 +17357,7 @@ function buildTelegramHelpMessage(codeName) {
     `_Type these in any chat where the bot is present (intercepted by the agent):_`,
     `\u2022 /help \u2014 show this help`,
     `\u2022 /status \u2014 this agent's model, session origin, uptime + connectivity`,
+    `\u2022 /ping-${codeName} - confirm this agent's channel is connected: posts a visible pong (team members and the agent's reports-to person)`,
     `\u2022 /watch <google-doc-url> [duration] \u2014 watch a Google Doc for comments that mention me (default 2h, max 7d; auto-pauses when the window ends)`,
     `\u2022 /restart \u2014 restart this agent`,
     `\u2022 /onboard \u2014 re-run this agent's onboarding: re-interview, existing config kept`,
@@ -17915,6 +17919,24 @@ var STATUS_SYNTAX_RE = /^\/status(?:@([A-Za-z0-9_]{1,64}))?(?:\s|$)/;
 function isStatusSyntax(text) {
   return STATUS_SYNTAX_RE.test(text);
 }
+var PING_SYNTAX_RE = /^\/ping(?:-([a-z0-9-]+))?(?:@([A-Za-z0-9_]{1,64}))?(?:\s|$)/i;
+function isPingSyntax(text) {
+  return PING_SYNTAX_RE.test(text);
+}
+async function classifyPingCommand(text) {
+  const m = PING_SYNTAX_RE.exec(text);
+  if (!m) return "ignore";
+  const codeSuffix = m[1];
+  const botSuffix = m[2];
+  if (codeSuffix && codeSuffix.toLowerCase() !== AGENT_CODE_NAME.toLowerCase()) {
+    return "ignore";
+  }
+  if (botSuffix) {
+    const ours = (await resolveBotIdentity()).bot_username;
+    if (ours && botSuffix.toLowerCase() !== ours.toLowerCase()) return "ignore";
+  }
+  return "act";
+}
 var WATCH_SYNTAX_RE = /^\/watch(?:@([A-Za-z0-9_]{1,64}))?(?:\s|$)/;
 function isWatchSyntax(text) {
   return WATCH_SYNTAX_RE.test(text);
@@ -19447,7 +19469,7 @@ async function pollLoop() {
         const trimmedContent = content.trim();
         const isFromBot = !!msg.from?.is_bot;
         const nowMs = Date.now();
-        const telegramCommand = isHelpSyntax(trimmedContent) ? "help" : isStatusSyntax(trimmedContent) ? "status" : isWatchSyntax(trimmedContent) ? "watch" : (
+        const telegramCommand = isHelpSyntax(trimmedContent) ? "help" : isStatusSyntax(trimmedContent) ? "status" : isPingSyntax(trimmedContent) ? "ping" : isWatchSyntax(trimmedContent) ? "watch" : (
           // ENG-6511: check /resume-onboarding before /onboard for clarity
           // (the prefixes are disjoint, so order is not load-bearing).
           isResumeOnboardingSyntax(trimmedContent) ? "resume-onboarding" : isOnboardSyntax(trimmedContent) ? "onboard" : isRestartSyntax(trimmedContent) ? "restart" : isInvestigateSyntax(trimmedContent) ? "investigate" : void 0
@@ -19623,6 +19645,46 @@ async function pollLoop() {
             } catch (err) {
               process.stderr.write(
                 `telegram-channel(${AGENT_CODE_NAME}): /investigate verification-failed ack send failed: ${redactAugmentedPaths(err.message)}
+`
+              );
+            }
+          }
+          continue;
+        }
+        if (access.kind === "command" && access.command === "ping") {
+          const disposition = await classifyPingCommand(trimmedContent);
+          if (disposition === "act") {
+            const senderId = msg.from?.id != null ? String(msg.from.id) : null;
+            const authorized = PING_ALLOWED_CHAT_IDS.size > 0 && senderId != null && PING_ALLOWED_CHAT_IDS.has(senderId);
+            try {
+              if (!authorized) {
+                process.stderr.write(
+                  `telegram-channel(${AGENT_CODE_NAME}): /ping denied - sender not in TELEGRAM_PING_ALLOWED_CHAT_IDS
+`
+                );
+                await telegramApiCall(
+                  "sendMessage",
+                  {
+                    chat_id: chatId,
+                    text: `\u{1F6AB} /ping is limited to ${AGENT_CODE_NAME}'s team and the person it reports to. If that's you, link your Telegram in your Augmented Team contact preferences and wait for the next refresh.`,
+                    reply_to_message_id: Number(msg.message_id)
+                  },
+                  1e4
+                );
+              } else {
+                await telegramApiCall(
+                  "sendMessage",
+                  {
+                    chat_id: chatId,
+                    text: `\u{1F7E2} pong - ${AGENT_CODE_NAME} is online (manager \u2022 ${(/* @__PURE__ */ new Date()).toISOString()}).`,
+                    reply_to_message_id: Number(msg.message_id)
+                  },
+                  1e4
+                );
+              }
+            } catch (err) {
+              process.stderr.write(
+                `telegram-channel(${AGENT_CODE_NAME}): /ping reply send failed: ${redactAugmentedPaths(err.message)}
 `
               );
             }

package/dist/{persistent-session-3AC6FSX6.js → persistent-session-3ACIT7F5.js}

@@ -34,8 +34,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-2D5COEAS.js";
-import "./chunk-CQZDKD2U.js";
+} from "./chunk-OW6ERQHP.js";
+import "./chunk-MTKFDGXO.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -74,4 +74,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-3AC6FSX6.js.map
+//# sourceMappingURL=persistent-session-3ACIT7F5.js.map

package/dist/{responsiveness-probe-ZXB5REIY.js → responsiveness-probe-5OCWCS3M.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-2D5COEAS.js";
-import "./chunk-CQZDKD2U.js";
+} from "./chunk-OW6ERQHP.js";
+import "./chunk-MTKFDGXO.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -304,4 +304,4 @@ export {
   readAndResetChannelDeflections,
   readAndResetChannelLaneClassifications
 };
-//# sourceMappingURL=responsiveness-probe-ZXB5REIY.js.map
+//# sourceMappingURL=responsiveness-probe-5OCWCS3M.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.161",
+  "version": "0.28.163",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {