@integrity-labs/agt-cli 0.28.170 → 0.28.172

package/dist/mcp/direct-chat-channel.js

@@ -14035,6 +14035,43 @@ function emitPreambleStripTelemetry(channel, shape) {
   }
 }
 
+// src/redact-tool-call-markup.ts
+var SAFE_FALLBACK = "Sorry \u2014 I hit a problem completing that action and couldn't finish my reply. Could you try again, or rephrase?";
+var TOOLCALL_TAG = /<\s*\/?\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var BLOCK_PATTERNS = [
+  /<\s*(?:antml:)?function_calls\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?function_calls\s*>/gi,
+  /<\s*(?:antml:)?invoke\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?invoke\s*>/gi,
+  /<\s*(?:antml:)?parameter\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?parameter\s*>/gi
+];
+var DANGLING_OPEN = /<\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var ORPHAN_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\s*>/gi;
+var DANGLING_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\b[^>]*$/i;
+function redactToolCallMarkup(text) {
+  if (!text || !TOOLCALL_TAG.test(text)) return { text, redacted: false };
+  let out = text;
+  for (const re of BLOCK_PATTERNS) out = out.replace(re, "");
+  const openIdx = out.search(DANGLING_OPEN);
+  if (openIdx !== -1) out = out.slice(0, openIdx);
+  out = out.replace(ORPHAN_CLOSE, "");
+  out = out.replace(DANGLING_CLOSE, "");
+  out = out.replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+  if (out === "") out = SAFE_FALLBACK;
+  return { text: out, redacted: true };
+}
+function emitToolCallMarkupRedactionTelemetry(channel) {
+  const agentCode = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
+  try {
+    process.stderr.write(
+      `agt.egress.tool_call_markup_redacted ${JSON.stringify({
+        channel,
+        agent_code: agentCode
+      })}
+`
+    );
+  } catch {
+  }
+}
+
 // src/transient-api-error.ts
 var CODE_KIND = {
   "429": "rate_limit",
@@ -14576,7 +14613,9 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
     const { session_id, content: rawContent } = args;
     const sanitizedReply = stripRepostPreambleWithMeta(rawContent);
     if (sanitizedReply.stripped) emitPreambleStripTelemetry("direct_chat", sanitizedReply.shape);
-    const apiErr = rewriteTransientApiError(sanitizedReply.text);
+    const sanitizedReplyGuarded = redactToolCallMarkup(sanitizedReply.text);
+    if (sanitizedReplyGuarded.redacted) emitToolCallMarkupRedactionTelemetry("direct_chat");
+    const apiErr = rewriteTransientApiError(sanitizedReplyGuarded.text);
     if (apiErr.rewritten) emitTransientApiErrorTelemetry("direct_chat", apiErr.match, apiErr.original);
     const content = apiErr.text;
     const message_ids = claimTracker.peek(session_id);

package/dist/mcp/slack-channel.js

@@ -15662,6 +15662,43 @@ function emitPreambleStripTelemetry(channel, shape) {
   }
 }
 
+// src/redact-tool-call-markup.ts
+var SAFE_FALLBACK = "Sorry \u2014 I hit a problem completing that action and couldn't finish my reply. Could you try again, or rephrase?";
+var TOOLCALL_TAG = /<\s*\/?\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var BLOCK_PATTERNS = [
+  /<\s*(?:antml:)?function_calls\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?function_calls\s*>/gi,
+  /<\s*(?:antml:)?invoke\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?invoke\s*>/gi,
+  /<\s*(?:antml:)?parameter\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?parameter\s*>/gi
+];
+var DANGLING_OPEN = /<\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var ORPHAN_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\s*>/gi;
+var DANGLING_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\b[^>]*$/i;
+function redactToolCallMarkup(text) {
+  if (!text || !TOOLCALL_TAG.test(text)) return { text, redacted: false };
+  let out = text;
+  for (const re of BLOCK_PATTERNS) out = out.replace(re, "");
+  const openIdx = out.search(DANGLING_OPEN);
+  if (openIdx !== -1) out = out.slice(0, openIdx);
+  out = out.replace(ORPHAN_CLOSE, "");
+  out = out.replace(DANGLING_CLOSE, "");
+  out = out.replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+  if (out === "") out = SAFE_FALLBACK;
+  return { text: out, redacted: true };
+}
+function emitToolCallMarkupRedactionTelemetry(channel) {
+  const agentCode = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
+  try {
+    process.stderr.write(
+      `agt.egress.tool_call_markup_redacted ${JSON.stringify({
+        channel,
+        agent_code: agentCode
+      })}
+`
+    );
+  } catch {
+  }
+}
+
 // src/transient-api-error.ts
 var CODE_KIND = {
   "429": "rate_limit",
@@ -17788,7 +17825,9 @@ async function processSlackRecoveryOutboxFile(filename) {
   }
   const recovered = stripRepostPreambleWithMeta(payload.text);
   if (recovered.stripped) emitPreambleStripTelemetry("slack", recovered.shape);
-  const apiErr = rewriteTransientApiError(recovered.text);
+  const recoveredGuarded = redactToolCallMarkup(recovered.text);
+  if (recoveredGuarded.redacted) emitToolCallMarkupRedactionTelemetry("slack");
+  const apiErr = rewriteTransientApiError(recoveredGuarded.text);
   if (apiErr.rewritten) emitTransientApiErrorTelemetry("slack", apiErr.match, apiErr.original);
   const text = apiErr.text;
   let sendSucceeded = false;
@@ -19739,7 +19778,9 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
     };
     const sanitized = stripRepostPreambleWithMeta(text);
     if (sanitized.stripped) emitPreambleStripTelemetry("slack", sanitized.shape);
-    const apiErr = rewriteTransientApiError(sanitized.text);
+    const sanitizedGuarded = redactToolCallMarkup(sanitized.text);
+    if (sanitizedGuarded.redacted) emitToolCallMarkupRedactionTelemetry("slack");
+    const apiErr = rewriteTransientApiError(sanitizedGuarded.text);
     if (apiErr.rewritten) emitTransientApiErrorTelemetry("slack", apiErr.match, apiErr.original);
     try {
       const res = await fetch("https://slack.com/api/chat.postMessage", {

package/dist/mcp/teams-channel.js

@@ -14094,6 +14094,43 @@ function emitPreambleStripTelemetry(channel, shape) {
   }
 }
 
+// src/redact-tool-call-markup.ts
+var SAFE_FALLBACK = "Sorry \u2014 I hit a problem completing that action and couldn't finish my reply. Could you try again, or rephrase?";
+var TOOLCALL_TAG = /<\s*\/?\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var BLOCK_PATTERNS = [
+  /<\s*(?:antml:)?function_calls\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?function_calls\s*>/gi,
+  /<\s*(?:antml:)?invoke\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?invoke\s*>/gi,
+  /<\s*(?:antml:)?parameter\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?parameter\s*>/gi
+];
+var DANGLING_OPEN = /<\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var ORPHAN_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\s*>/gi;
+var DANGLING_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\b[^>]*$/i;
+function redactToolCallMarkup(text) {
+  if (!text || !TOOLCALL_TAG.test(text)) return { text, redacted: false };
+  let out = text;
+  for (const re of BLOCK_PATTERNS) out = out.replace(re, "");
+  const openIdx = out.search(DANGLING_OPEN);
+  if (openIdx !== -1) out = out.slice(0, openIdx);
+  out = out.replace(ORPHAN_CLOSE, "");
+  out = out.replace(DANGLING_CLOSE, "");
+  out = out.replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+  if (out === "") out = SAFE_FALLBACK;
+  return { text: out, redacted: true };
+}
+function emitToolCallMarkupRedactionTelemetry(channel) {
+  const agentCode = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
+  try {
+    process.stderr.write(
+      `agt.egress.tool_call_markup_redacted ${JSON.stringify({
+        channel,
+        agent_code: agentCode
+      })}
+`
+    );
+  } catch {
+  }
+}
+
 // src/transient-api-error.ts
 var CODE_KIND = {
   "429": "rate_limit",
@@ -15513,7 +15550,9 @@ async function handleReply(args) {
   }
   const sanitized = stripRepostPreambleWithMeta(text);
   if (sanitized.stripped) emitPreambleStripTelemetry("teams", sanitized.shape);
-  const apiErr = rewriteTransientApiError(sanitized.text);
+  const sanitizedGuarded = redactToolCallMarkup(sanitized.text);
+  if (sanitizedGuarded.redacted) emitToolCallMarkupRedactionTelemetry("teams");
+  const apiErr = rewriteTransientApiError(sanitizedGuarded.text);
   if (apiErr.rewritten) emitTransientApiErrorTelemetry("teams", apiErr.match, apiErr.original);
   try {
     const result = await sendActivity(serviceUrl, conversationId, {
@@ -16076,7 +16115,9 @@ async function processRecoveryFile(filename) {
   }
   const recovered = stripRepostPreambleWithMeta(payload.text);
   if (recovered.stripped) emitPreambleStripTelemetry("teams", recovered.shape);
-  const apiErr = rewriteTransientApiError(recovered.text);
+  const recoveredGuarded = redactToolCallMarkup(recovered.text);
+  if (recoveredGuarded.redacted) emitToolCallMarkupRedactionTelemetry("teams");
+  const apiErr = rewriteTransientApiError(recoveredGuarded.text);
   if (apiErr.rewritten) emitTransientApiErrorTelemetry("teams", apiErr.match, apiErr.original);
   try {
     await sendActivity(payload.service_url, payload.conversation_id, {

package/dist/mcp/telegram-channel.js

@@ -16533,6 +16533,43 @@ function emitPreambleStripTelemetry(channel, shape) {
   }
 }
 
+// src/redact-tool-call-markup.ts
+var SAFE_FALLBACK = "Sorry \u2014 I hit a problem completing that action and couldn't finish my reply. Could you try again, or rephrase?";
+var TOOLCALL_TAG = /<\s*\/?\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var BLOCK_PATTERNS = [
+  /<\s*(?:antml:)?function_calls\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?function_calls\s*>/gi,
+  /<\s*(?:antml:)?invoke\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?invoke\s*>/gi,
+  /<\s*(?:antml:)?parameter\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?parameter\s*>/gi
+];
+var DANGLING_OPEN = /<\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var ORPHAN_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\s*>/gi;
+var DANGLING_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\b[^>]*$/i;
+function redactToolCallMarkup(text) {
+  if (!text || !TOOLCALL_TAG.test(text)) return { text, redacted: false };
+  let out = text;
+  for (const re of BLOCK_PATTERNS) out = out.replace(re, "");
+  const openIdx = out.search(DANGLING_OPEN);
+  if (openIdx !== -1) out = out.slice(0, openIdx);
+  out = out.replace(ORPHAN_CLOSE, "");
+  out = out.replace(DANGLING_CLOSE, "");
+  out = out.replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+  if (out === "") out = SAFE_FALLBACK;
+  return { text: out, redacted: true };
+}
+function emitToolCallMarkupRedactionTelemetry(channel) {
+  const agentCode = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
+  try {
+    process.stderr.write(
+      `agt.egress.tool_call_markup_redacted ${JSON.stringify({
+        channel,
+        agent_code: agentCode
+      })}
+`
+    );
+  } catch {
+  }
+}
+
 // src/transient-api-error.ts
 var CODE_KIND = {
   "429": "rate_limit",
@@ -18396,7 +18433,9 @@ async function processRecoveryOutboxFile(filename) {
   }
   const recovered = stripRepostPreambleWithMeta(payload.text);
   if (recovered.stripped) emitPreambleStripTelemetry("telegram", recovered.shape);
-  const apiErr = rewriteTransientApiError(recovered.text);
+  const recoveredGuarded = redactToolCallMarkup(recovered.text);
+  if (recoveredGuarded.redacted) emitToolCallMarkupRedactionTelemetry("telegram");
+  const apiErr = rewriteTransientApiError(recoveredGuarded.text);
   if (apiErr.rewritten) emitTransientApiErrorTelemetry("telegram", apiErr.match, apiErr.original);
   const text = apiErr.text;
   const body = {
@@ -19096,7 +19135,9 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
     }
     const tgSanitized = stripRepostPreambleWithMeta(text);
     if (tgSanitized.stripped) emitPreambleStripTelemetry("telegram", tgSanitized.shape);
-    const tgApiErr = rewriteTransientApiError(tgSanitized.text);
+    const tgSanitizedGuarded = redactToolCallMarkup(tgSanitized.text);
+    if (tgSanitizedGuarded.redacted) emitToolCallMarkupRedactionTelemetry("telegram");
+    const tgApiErr = rewriteTransientApiError(tgSanitizedGuarded.text);
     if (tgApiErr.rewritten) emitTransientApiErrorTelemetry("telegram", tgApiErr.match, tgApiErr.original);
     const isPrivateChat = !chat_id.startsWith("-");
     const tgThrottleCfg = isPrivateChat ? relaxedThrottleConfig(configFromEnv()) : configFromEnv();

package/dist/{persistent-session-2QNOLKCT.js → persistent-session-4HC7YFSU.js}

@@ -34,8 +34,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-25T4GQTU.js";
-import "./chunk-VZP5CIVP.js";
+} from "./chunk-N25WAF7G.js";
+import "./chunk-OMC7BHRP.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -74,4 +74,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-2QNOLKCT.js.map
+//# sourceMappingURL=persistent-session-4HC7YFSU.js.map

package/dist/{responsiveness-probe-4JPUYWPB.js → responsiveness-probe-W4PCY6HC.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-25T4GQTU.js";
-import "./chunk-VZP5CIVP.js";
+} from "./chunk-N25WAF7G.js";
+import "./chunk-OMC7BHRP.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -304,4 +304,4 @@ export {
   readAndResetChannelDeflections,
   readAndResetChannelLaneClassifications
 };
-//# sourceMappingURL=responsiveness-probe-4JPUYWPB.js.map
+//# sourceMappingURL=responsiveness-probe-W4PCY6HC.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.170",
+  "version": "0.28.172",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {