@integrity-labs/agt-cli 0.28.245 → 0.28.246

package/dist/{claude-pair-runtime-OURKHXEW.js → claude-pair-runtime-HHEVB5WF.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-X427LHOW.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-7BQ2OE2R.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-OURKHXEW.js.map
+//# sourceMappingURL=claude-pair-runtime-HHEVB5WF.js.map

package/dist/lib/manager-worker.js

@@ -37,7 +37,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-NMSN674U.js";
+} from "../chunk-KN77CF2P.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -122,7 +122,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-ZS2T67OF.js";
+} from "../chunk-NFO3GOL3.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -6509,7 +6509,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.245" : "dev";
+var agtCliVersion = true ? "0.28.246" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -7359,7 +7359,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-X427LHOW.js");
+      const { collectDiagnostics } = await import("../persistent-session-7BQ2OE2R.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -7457,7 +7457,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-X427LHOW.js");
+      const { collectDiagnostics } = await import("../persistent-session-7BQ2OE2R.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -7605,7 +7605,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-CFF27A7B.js");
+      } = await import("../responsiveness-probe-MUY7HOGQ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -7637,7 +7637,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-CFF27A7B.js");
+        } = await import("../responsiveness-probe-MUY7HOGQ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -10452,7 +10452,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-X427LHOW.js");
+        const { collectDiagnostics } = await import("../persistent-session-7BQ2OE2R.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -10502,7 +10502,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-X427LHOW.js");
+      const { collectDiagnostics } = await import("../persistent-session-7BQ2OE2R.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -10893,7 +10893,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-OURKHXEW.js");
+  } = await import("../claude-pair-runtime-HHEVB5WF.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/origami.js

@@ -39832,6 +39832,18 @@ var FLAG_REGISTRY = [
     defaultValue: false,
     public: true
   },
+  {
+    key: "agent-offers",
+    description: "Agent Routines and the Offers surface (ADR-0041 D4a/D8, ENG-7417): the capability-discovery surface where an agent earns the right to propose a Routine (an Offer) from observed repetition, elicitation, or its template. off = the surface is fully dark (no candidate intake, no Offer creation, no delivery). shadow = the observer runs and would-be Offers are written with a shadow marker, visible to platform admins only, never delivered - the D4a calibration mode that must hit the precision bar on real transcripts before any org goes live. on = the full surface for the org. Evaluated API-side only (the observed feeder additionally requires the memory-extraction flag, whose pipeline it rides), so no host materialisation seam is needed. Flipping off kills candidate intake and Offer delivery but NOT already accepted Routines - their runtimes are ordinary scheduled tasks / kanban templates the user consented to; disabling those is an explicit per-routine revoke (D5b). Ships dark; per-org rollout from the admin Feature Flags page.",
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "on"],
+    // Declared safe value is `off` (fully dark). Fail-safe direction: a flag-DB
+    // read error must never start accumulating routine candidates or delivering
+    // proactive Offers on its own. Shadow is a deliberate per-org calibration
+    // step, not the absent-flag fallback. No envVar - net-new API-side control
+    // with no pre-flags env gate to migrate (ADR-0022 / check-new-env-gates.sh).
+    defaultValue: "off"
+  },
   {
     key: "channel-quarantine-mode",
     description: "Optional-channel quarantine (ENG-5932): off = disabled, shadow = log matches only, enforce = quarantine.",

package/dist/mcp/slack-channel.js

@@ -16946,7 +16946,7 @@ function describeLivePending(registry2, now) {
   }).join("; ");
 }
 function resolveReplyBinding(input) {
-  const { mode, args, registry: registry2 } = input;
+  const { mode, args, registry: registry2, knownThread } = input;
   const now = input.now ?? Date.now();
   const modelChannel = args.channel;
   const modelThread = args.thread_ts;
@@ -16969,7 +16969,7 @@ function resolveReplyBinding(input) {
         unknownInboundId: true
       };
     }
-    return classifyByCoords(mode, args, registry2, now, true);
+    return classifyByCoords(mode, args, registry2, now, true, knownThread);
   }
   if (args.proactive === true) {
     return {
@@ -16979,9 +16979,9 @@ function resolveReplyBinding(input) {
       unknownInboundId: false
     };
   }
-  return classifyByCoords(mode, args, registry2, now, false);
+  return classifyByCoords(mode, args, registry2, now, false, knownThread);
 }
-function classifyByCoords(mode, args, registry2, now, unknownInboundId) {
+function classifyByCoords(mode, args, registry2, now, unknownInboundId, knownThread) {
   const modelChannel = args.channel;
   const modelThread = args.thread_ts;
   const matched = matchByCoords(registry2, modelChannel, args.message_ts, modelThread);
@@ -17001,6 +17001,15 @@ function classifyByCoords(mode, args, registry2, now, unknownInboundId) {
       unknownInboundId
     };
   }
+  const participatesInThread = !!modelChannel && (!!modelThread && knownThread?.(modelChannel, modelThread) || !!args.message_ts && knownThread?.(modelChannel, args.message_ts)) === true;
+  if (participatesInThread) {
+    return {
+      channel: modelChannel,
+      threadTs: modelThread,
+      classification: "known_thread",
+      unknownInboundId
+    };
+  }
   const decision = {
     channel: modelChannel,
     threadTs: modelThread,
@@ -20469,7 +20478,16 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
     const binding = resolveReplyBinding({
       mode: bindingMode,
       args: { inbound_id, channel, thread_ts, message_ts, proactive },
-      registry: slackInboundRegistry
+      registry: slackInboundRegistry,
+      // ENG-7409: the persisted bot_posted thread-participation signal (survives
+      // restart via loadThreadStore). A reply into a thread the agent has posted
+      // in is a legitimate follow-up, so it must not be flagged unknown_target
+      // even when no live inbound marker survives - this is what stops warn from
+      // nagging (and enforce from blocking) ordinary in-thread conversation.
+      knownThread: (c, t) => {
+        const k = buildThreadKey(c, t);
+        return !!k && !!trackedThreads.get(k)?.bot_posted;
+      }
     });
     recordReplyBindingClassification(SLACK_AGENT_DIR, "slack", {
       classification: binding.classification,

package/dist/{persistent-session-X427LHOW.js → persistent-session-7BQ2OE2R.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-ZS2T67OF.js";
+} from "./chunk-NFO3GOL3.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-X427LHOW.js.map
+//# sourceMappingURL=persistent-session-7BQ2OE2R.js.map

package/dist/{responsiveness-probe-CFF27A7B.js → responsiveness-probe-MUY7HOGQ.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-ZS2T67OF.js";
+} from "./chunk-NFO3GOL3.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -418,4 +418,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-CFF27A7B.js.map
+//# sourceMappingURL=responsiveness-probe-MUY7HOGQ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.245",
+  "version": "0.28.246",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {