@integrity-labs/agt-cli 0.28.171 → 0.28.172

package/dist/{claude-pair-runtime-37H4BVQC.js → claude-pair-runtime-XIVBNVSR.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-DUKYMEOQ.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-4HC7YFSU.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-37H4BVQC.js.map
+//# sourceMappingURL=claude-pair-runtime-XIVBNVSR.js.map

package/dist/lib/manager-worker.js

@@ -28,7 +28,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-CPB4L4TB.js";
+} from "../chunk-XGTHOGKA.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -70,7 +70,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-XJIHUCCF.js";
+} from "../chunk-N25WAF7G.js";
 import {
   CONVERSATION_FAILURE_CATEGORIES,
   DEFAULT_FRAMEWORK,
@@ -111,7 +111,7 @@ import {
   resolveChannels,
   resolveDmTarget,
   sumTranscriptUsageInWindow
-} from "../chunk-76XB2I4P.js";
+} from "../chunk-OMC7BHRP.js";
 import {
   parsePsRows,
   reapOrphanChannelMcps
@@ -6590,7 +6590,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.171" : "dev";
+var agtCliVersion = true ? "0.28.172" : "dev";
 function resolveBrewPath(execFileSync4) {
   try {
     const out = execFileSync4("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7483,7 +7483,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-DUKYMEOQ.js");
+      const { collectDiagnostics } = await import("../persistent-session-4HC7YFSU.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7631,7 +7631,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-G5VMYV73.js");
+      } = await import("../responsiveness-probe-W4PCY6HC.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7663,7 +7663,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-G5VMYV73.js");
+        } = await import("../responsiveness-probe-W4PCY6HC.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -10638,7 +10638,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-37H4BVQC.js");
+  } = await import("../claude-pair-runtime-XIVBNVSR.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -14035,6 +14035,43 @@ function emitPreambleStripTelemetry(channel, shape) {
   }
 }
 
+// src/redact-tool-call-markup.ts
+var SAFE_FALLBACK = "Sorry \u2014 I hit a problem completing that action and couldn't finish my reply. Could you try again, or rephrase?";
+var TOOLCALL_TAG = /<\s*\/?\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var BLOCK_PATTERNS = [
+  /<\s*(?:antml:)?function_calls\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?function_calls\s*>/gi,
+  /<\s*(?:antml:)?invoke\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?invoke\s*>/gi,
+  /<\s*(?:antml:)?parameter\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?parameter\s*>/gi
+];
+var DANGLING_OPEN = /<\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var ORPHAN_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\s*>/gi;
+var DANGLING_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\b[^>]*$/i;
+function redactToolCallMarkup(text) {
+  if (!text || !TOOLCALL_TAG.test(text)) return { text, redacted: false };
+  let out = text;
+  for (const re of BLOCK_PATTERNS) out = out.replace(re, "");
+  const openIdx = out.search(DANGLING_OPEN);
+  if (openIdx !== -1) out = out.slice(0, openIdx);
+  out = out.replace(ORPHAN_CLOSE, "");
+  out = out.replace(DANGLING_CLOSE, "");
+  out = out.replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+  if (out === "") out = SAFE_FALLBACK;
+  return { text: out, redacted: true };
+}
+function emitToolCallMarkupRedactionTelemetry(channel) {
+  const agentCode = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
+  try {
+    process.stderr.write(
+      `agt.egress.tool_call_markup_redacted ${JSON.stringify({
+        channel,
+        agent_code: agentCode
+      })}
+`
+    );
+  } catch {
+  }
+}
+
 // src/transient-api-error.ts
 var CODE_KIND = {
   "429": "rate_limit",
@@ -14576,7 +14613,9 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
     const { session_id, content: rawContent } = args;
     const sanitizedReply = stripRepostPreambleWithMeta(rawContent);
     if (sanitizedReply.stripped) emitPreambleStripTelemetry("direct_chat", sanitizedReply.shape);
-    const apiErr = rewriteTransientApiError(sanitizedReply.text);
+    const sanitizedReplyGuarded = redactToolCallMarkup(sanitizedReply.text);
+    if (sanitizedReplyGuarded.redacted) emitToolCallMarkupRedactionTelemetry("direct_chat");
+    const apiErr = rewriteTransientApiError(sanitizedReplyGuarded.text);
     if (apiErr.rewritten) emitTransientApiErrorTelemetry("direct_chat", apiErr.match, apiErr.original);
     const content = apiErr.text;
     const message_ids = claimTracker.peek(session_id);

package/dist/mcp/slack-channel.js

@@ -15662,6 +15662,43 @@ function emitPreambleStripTelemetry(channel, shape) {
   }
 }
 
+// src/redact-tool-call-markup.ts
+var SAFE_FALLBACK = "Sorry \u2014 I hit a problem completing that action and couldn't finish my reply. Could you try again, or rephrase?";
+var TOOLCALL_TAG = /<\s*\/?\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var BLOCK_PATTERNS = [
+  /<\s*(?:antml:)?function_calls\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?function_calls\s*>/gi,
+  /<\s*(?:antml:)?invoke\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?invoke\s*>/gi,
+  /<\s*(?:antml:)?parameter\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?parameter\s*>/gi
+];
+var DANGLING_OPEN = /<\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var ORPHAN_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\s*>/gi;
+var DANGLING_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\b[^>]*$/i;
+function redactToolCallMarkup(text) {
+  if (!text || !TOOLCALL_TAG.test(text)) return { text, redacted: false };
+  let out = text;
+  for (const re of BLOCK_PATTERNS) out = out.replace(re, "");
+  const openIdx = out.search(DANGLING_OPEN);
+  if (openIdx !== -1) out = out.slice(0, openIdx);
+  out = out.replace(ORPHAN_CLOSE, "");
+  out = out.replace(DANGLING_CLOSE, "");
+  out = out.replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+  if (out === "") out = SAFE_FALLBACK;
+  return { text: out, redacted: true };
+}
+function emitToolCallMarkupRedactionTelemetry(channel) {
+  const agentCode = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
+  try {
+    process.stderr.write(
+      `agt.egress.tool_call_markup_redacted ${JSON.stringify({
+        channel,
+        agent_code: agentCode
+      })}
+`
+    );
+  } catch {
+  }
+}
+
 // src/transient-api-error.ts
 var CODE_KIND = {
   "429": "rate_limit",
@@ -17788,7 +17825,9 @@ async function processSlackRecoveryOutboxFile(filename) {
   }
   const recovered = stripRepostPreambleWithMeta(payload.text);
   if (recovered.stripped) emitPreambleStripTelemetry("slack", recovered.shape);
-  const apiErr = rewriteTransientApiError(recovered.text);
+  const recoveredGuarded = redactToolCallMarkup(recovered.text);
+  if (recoveredGuarded.redacted) emitToolCallMarkupRedactionTelemetry("slack");
+  const apiErr = rewriteTransientApiError(recoveredGuarded.text);
   if (apiErr.rewritten) emitTransientApiErrorTelemetry("slack", apiErr.match, apiErr.original);
   const text = apiErr.text;
   let sendSucceeded = false;
@@ -19739,7 +19778,9 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
     };
     const sanitized = stripRepostPreambleWithMeta(text);
     if (sanitized.stripped) emitPreambleStripTelemetry("slack", sanitized.shape);
-    const apiErr = rewriteTransientApiError(sanitized.text);
+    const sanitizedGuarded = redactToolCallMarkup(sanitized.text);
+    if (sanitizedGuarded.redacted) emitToolCallMarkupRedactionTelemetry("slack");
+    const apiErr = rewriteTransientApiError(sanitizedGuarded.text);
     if (apiErr.rewritten) emitTransientApiErrorTelemetry("slack", apiErr.match, apiErr.original);
     try {
       const res = await fetch("https://slack.com/api/chat.postMessage", {

package/dist/mcp/teams-channel.js

@@ -14094,6 +14094,43 @@ function emitPreambleStripTelemetry(channel, shape) {
   }
 }
 
+// src/redact-tool-call-markup.ts
+var SAFE_FALLBACK = "Sorry \u2014 I hit a problem completing that action and couldn't finish my reply. Could you try again, or rephrase?";
+var TOOLCALL_TAG = /<\s*\/?\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var BLOCK_PATTERNS = [
+  /<\s*(?:antml:)?function_calls\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?function_calls\s*>/gi,
+  /<\s*(?:antml:)?invoke\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?invoke\s*>/gi,
+  /<\s*(?:antml:)?parameter\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?parameter\s*>/gi
+];
+var DANGLING_OPEN = /<\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var ORPHAN_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\s*>/gi;
+var DANGLING_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\b[^>]*$/i;
+function redactToolCallMarkup(text) {
+  if (!text || !TOOLCALL_TAG.test(text)) return { text, redacted: false };
+  let out = text;
+  for (const re of BLOCK_PATTERNS) out = out.replace(re, "");
+  const openIdx = out.search(DANGLING_OPEN);
+  if (openIdx !== -1) out = out.slice(0, openIdx);
+  out = out.replace(ORPHAN_CLOSE, "");
+  out = out.replace(DANGLING_CLOSE, "");
+  out = out.replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+  if (out === "") out = SAFE_FALLBACK;
+  return { text: out, redacted: true };
+}
+function emitToolCallMarkupRedactionTelemetry(channel) {
+  const agentCode = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
+  try {
+    process.stderr.write(
+      `agt.egress.tool_call_markup_redacted ${JSON.stringify({
+        channel,
+        agent_code: agentCode
+      })}
+`
+    );
+  } catch {
+  }
+}
+
 // src/transient-api-error.ts
 var CODE_KIND = {
   "429": "rate_limit",
@@ -15513,7 +15550,9 @@ async function handleReply(args) {
   }
   const sanitized = stripRepostPreambleWithMeta(text);
   if (sanitized.stripped) emitPreambleStripTelemetry("teams", sanitized.shape);
-  const apiErr = rewriteTransientApiError(sanitized.text);
+  const sanitizedGuarded = redactToolCallMarkup(sanitized.text);
+  if (sanitizedGuarded.redacted) emitToolCallMarkupRedactionTelemetry("teams");
+  const apiErr = rewriteTransientApiError(sanitizedGuarded.text);
   if (apiErr.rewritten) emitTransientApiErrorTelemetry("teams", apiErr.match, apiErr.original);
   try {
     const result = await sendActivity(serviceUrl, conversationId, {
@@ -16076,7 +16115,9 @@ async function processRecoveryFile(filename) {
   }
   const recovered = stripRepostPreambleWithMeta(payload.text);
   if (recovered.stripped) emitPreambleStripTelemetry("teams", recovered.shape);
-  const apiErr = rewriteTransientApiError(recovered.text);
+  const recoveredGuarded = redactToolCallMarkup(recovered.text);
+  if (recoveredGuarded.redacted) emitToolCallMarkupRedactionTelemetry("teams");
+  const apiErr = rewriteTransientApiError(recoveredGuarded.text);
   if (apiErr.rewritten) emitTransientApiErrorTelemetry("teams", apiErr.match, apiErr.original);
   try {
     await sendActivity(payload.service_url, payload.conversation_id, {

package/dist/mcp/telegram-channel.js

@@ -16533,6 +16533,43 @@ function emitPreambleStripTelemetry(channel, shape) {
   }
 }
 
+// src/redact-tool-call-markup.ts
+var SAFE_FALLBACK = "Sorry \u2014 I hit a problem completing that action and couldn't finish my reply. Could you try again, or rephrase?";
+var TOOLCALL_TAG = /<\s*\/?\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var BLOCK_PATTERNS = [
+  /<\s*(?:antml:)?function_calls\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?function_calls\s*>/gi,
+  /<\s*(?:antml:)?invoke\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?invoke\s*>/gi,
+  /<\s*(?:antml:)?parameter\b[^>]*>[\s\S]*?<\/\s*(?:antml:)?parameter\s*>/gi
+];
+var DANGLING_OPEN = /<\s*(?:antml:)?(?:function_calls|invoke|parameter)\b/i;
+var ORPHAN_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\s*>/gi;
+var DANGLING_CLOSE = /<\s*\/\s*(?:antml:)?(?:function_calls|invoke|parameter)\b[^>]*$/i;
+function redactToolCallMarkup(text) {
+  if (!text || !TOOLCALL_TAG.test(text)) return { text, redacted: false };
+  let out = text;
+  for (const re of BLOCK_PATTERNS) out = out.replace(re, "");
+  const openIdx = out.search(DANGLING_OPEN);
+  if (openIdx !== -1) out = out.slice(0, openIdx);
+  out = out.replace(ORPHAN_CLOSE, "");
+  out = out.replace(DANGLING_CLOSE, "");
+  out = out.replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+  if (out === "") out = SAFE_FALLBACK;
+  return { text: out, redacted: true };
+}
+function emitToolCallMarkupRedactionTelemetry(channel) {
+  const agentCode = process.env.AGT_AGENT_CODE_NAME ?? "unknown";
+  try {
+    process.stderr.write(
+      `agt.egress.tool_call_markup_redacted ${JSON.stringify({
+        channel,
+        agent_code: agentCode
+      })}
+`
+    );
+  } catch {
+  }
+}
+
 // src/transient-api-error.ts
 var CODE_KIND = {
   "429": "rate_limit",
@@ -18396,7 +18433,9 @@ async function processRecoveryOutboxFile(filename) {
   }
   const recovered = stripRepostPreambleWithMeta(payload.text);
   if (recovered.stripped) emitPreambleStripTelemetry("telegram", recovered.shape);
-  const apiErr = rewriteTransientApiError(recovered.text);
+  const recoveredGuarded = redactToolCallMarkup(recovered.text);
+  if (recoveredGuarded.redacted) emitToolCallMarkupRedactionTelemetry("telegram");
+  const apiErr = rewriteTransientApiError(recoveredGuarded.text);
   if (apiErr.rewritten) emitTransientApiErrorTelemetry("telegram", apiErr.match, apiErr.original);
   const text = apiErr.text;
   const body = {
@@ -19096,7 +19135,9 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
     }
     const tgSanitized = stripRepostPreambleWithMeta(text);
     if (tgSanitized.stripped) emitPreambleStripTelemetry("telegram", tgSanitized.shape);
-    const tgApiErr = rewriteTransientApiError(tgSanitized.text);
+    const tgSanitizedGuarded = redactToolCallMarkup(tgSanitized.text);
+    if (tgSanitizedGuarded.redacted) emitToolCallMarkupRedactionTelemetry("telegram");
+    const tgApiErr = rewriteTransientApiError(tgSanitizedGuarded.text);
     if (tgApiErr.rewritten) emitTransientApiErrorTelemetry("telegram", tgApiErr.match, tgApiErr.original);
     const isPrivateChat = !chat_id.startsWith("-");
     const tgThrottleCfg = isPrivateChat ? relaxedThrottleConfig(configFromEnv()) : configFromEnv();

package/dist/{persistent-session-DUKYMEOQ.js → persistent-session-4HC7YFSU.js}

@@ -34,8 +34,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-XJIHUCCF.js";
-import "./chunk-76XB2I4P.js";
+} from "./chunk-N25WAF7G.js";
+import "./chunk-OMC7BHRP.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -74,4 +74,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-DUKYMEOQ.js.map
+//# sourceMappingURL=persistent-session-4HC7YFSU.js.map

package/dist/{responsiveness-probe-G5VMYV73.js → responsiveness-probe-W4PCY6HC.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-XJIHUCCF.js";
-import "./chunk-76XB2I4P.js";
+} from "./chunk-N25WAF7G.js";
+import "./chunk-OMC7BHRP.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -304,4 +304,4 @@ export {
   readAndResetChannelDeflections,
   readAndResetChannelLaneClassifications
 };
-//# sourceMappingURL=responsiveness-probe-G5VMYV73.js.map
+//# sourceMappingURL=responsiveness-probe-W4PCY6HC.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.171",
+  "version": "0.28.172",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {