@integrity-labs/agt-cli 0.28.318 → 0.28.320

package/dist/mcp/direct-chat-channel.js

@@ -14768,7 +14768,7 @@ function isMaintenanceModeActive(opts) {
   });
 }
 
-// src/sender-policy-decline.ts
+// ../core/dist/channels/governance/sender-policy-decline.js
 function decideDeclineReply(input) {
   const last = input.cache.get(input.key);
   if (last !== void 0) {

package/dist/mcp/origami.js

@@ -38801,7 +38801,12 @@ var INTEGRATION_REGISTRY = [
       },
       // ENG-5857 mints the real session id; default empty so the header
       // resolves cleanly (no profile bound → ephemeral session) until then.
-      envDefaults: { ANCHOR_BROWSER_SESSION_ID: "" }
+      envDefaults: { ANCHOR_BROWSER_SESSION_ID: "" },
+      // ENG-7748: route through the stdio remote-MCP proxy so the api-key and
+      // the minted anchor-session-id headers are read LIVE per request. A
+      // re-minted session id then takes effect with no agent respawn (a direct-
+      // HTTP header would be frozen at spawn).
+      liveHeaderRefresh: true
     }
   },
   {

package/dist/mcp/remote-oauth-proxy.js

@@ -12,6 +12,8 @@ var TOKEN_FILE_ENV = "AGT_REMOTE_MCP_TOKEN_FILE";
 var TOKEN_VAR_ENV = "AGT_REMOTE_MCP_TOKEN_VAR";
 var ALLOWLIST_ENV = "AGT_REMOTE_MCP_TOOL_ALLOWLIST";
 var PREENABLE_ENV = "AGT_REMOTE_MCP_PREENABLE_TOOLSETS";
+var AUTH_HEADER_ENV = "AGT_REMOTE_MCP_AUTH_HEADER";
+var EXTRA_HEADERS_ENV = "AGT_REMOTE_MCP_EXTRA_HEADERS";
 var REMOTE_FETCH_TIMEOUT_MS = 3e4;
 var remoteUrl = process.env[URL_ENV] ?? "";
 var tokenFile = process.env[TOKEN_FILE_ENV] ?? "";
@@ -19,6 +21,8 @@ var tokenVar = process.env[TOKEN_VAR_ENV] ?? "";
 var label = process.env["AGT_REMOTE_MCP_LABEL"] || tokenVar || "remote-oauth";
 var toolAllowlist = parseToolAllowlist(process.env[ALLOWLIST_ENV] ?? "");
 var preEnableToolsets = parsePreEnableToolsets(process.env[PREENABLE_ENV] ?? "");
+var authHeaderName = (process.env[AUTH_HEADER_ENV] ?? "").trim();
+var extraHeaderSpecs = parseExtraHeaders(process.env[EXTRA_HEADERS_ENV] ?? "");
 function logErr(msg) {
   process.stderr.write(`[remote-oauth-proxy:${label}] ${msg}
 `);
@@ -91,6 +95,19 @@ function parseToolAllowlist(raw) {
   }
   return out;
 }
+function parseExtraHeaders(raw) {
+  const out = [];
+  for (const part of (raw || "").split(",")) {
+    const trimmed = part.trim();
+    if (!trimmed) continue;
+    const colon = trimmed.indexOf(":");
+    if (colon <= 0) continue;
+    const header = trimmed.slice(0, colon).trim();
+    const varName = trimmed.slice(colon + 1).trim();
+    if (header && varName) out.push({ header, varName });
+  }
+  return out;
+}
 function filterToolsListMessage(message, allow) {
   if (allow.size === 0) return { message, total: 0, kept: 0, advertised: [] };
   let obj;
@@ -166,14 +183,25 @@ function extractJsonRpcMessages(contentType, body) {
   }
   return out;
 }
+function buildForwardHeaders(token, authHeader, extras, readVar) {
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: "application/json, text/event-stream"
+  };
+  if (authHeader) headers[authHeader] = token;
+  else headers["Authorization"] = `Bearer ${token}`;
+  for (const { header, varName } of extras) {
+    headers[header] = readVar(varName) ?? "";
+  }
+  return headers;
+}
+function readTokenVar(varName) {
+  return readCurrentToken(tokenFile, varName);
+}
 async function postRpc(token, body) {
   const res = await fetch(remoteUrl, {
     method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Accept: "application/json, text/event-stream",
-      Authorization: `Bearer ${token}`
-    },
+    headers: buildForwardHeaders(token, authHeaderName, extraHeaderSpecs, readTokenVar),
     body,
     signal: AbortSignal.timeout(REMOTE_FETCH_TIMEOUT_MS)
   });
@@ -250,11 +278,7 @@ async function forward(line, id, isNotification, method, params) {
   try {
     res = await fetch(remoteUrl, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Accept: "application/json, text/event-stream",
-        Authorization: `Bearer ${token}`
-      },
+      headers: buildForwardHeaders(token, authHeaderName, extraHeaderSpecs, readTokenVar),
       body: line,
       signal: AbortSignal.timeout(REMOTE_FETCH_TIMEOUT_MS)
     });
@@ -361,6 +385,7 @@ if (invokedDirectly) {
 }
 export {
   buildEnableToolsetRequest,
+  buildForwardHeaders,
   buildToolsListRequest,
   extractJsonRpcMessages,
   extractToolsArray,
@@ -368,6 +393,7 @@ export {
   isToolCallBlocked,
   main,
   parseEnableToolsetResponse,
+  parseExtraHeaders,
   parsePreEnableToolsets,
   parseToolAllowlist,
   readCurrentToken,

package/dist/mcp/slack-channel.js

@@ -14233,7 +14233,7 @@ var Server = class extends Protocol {
   }
 };
 
-// src/slack-rich-text.ts
+// ../core/dist/channels/slack-rich-text.js
 var MAX_DEPTH = 12;
 function isRecord(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
@@ -14262,14 +14262,16 @@ function renderEmoji(el) {
   return name ? `:${name}:` : "";
 }
 function renderLeaf(el) {
-  if (!isRecord(el)) return "";
+  if (!isRecord(el))
+    return "";
   switch (asString(el.type)) {
     case "text":
       return asString(el.text);
     case "link": {
       const label = asString(el.text);
       const url = asString(el.url);
-      if (label && url && label !== url) return `${label} (${url})`;
+      if (label && url && label !== url)
+        return `${label} (${url})`;
       return label || url;
     }
     case "emoji":
@@ -14285,7 +14287,8 @@ function renderLeaf(el) {
     case "date":
       return asString(el.fallback) || asString(el.timestamp);
     default:
-      if (Array.isArray(el.elements)) return renderInline(el.elements);
+      if (Array.isArray(el.elements))
+        return renderInline(el.elements);
       return asString(el.text);
   }
 }
@@ -14293,20 +14296,27 @@ function renderInline(elements) {
   return elements.map(renderLeaf).join("");
 }
 function deepText(node, depth) {
-  if (depth > MAX_DEPTH) return "";
-  if (typeof node === "string") return node;
-  if (Array.isArray(node)) return node.map((n) => deepText(n, depth + 1)).join("");
-  if (!isRecord(node)) return "";
+  if (depth > MAX_DEPTH)
+    return "";
+  if (typeof node === "string")
+    return node;
+  if (Array.isArray(node))
+    return node.map((n) => deepText(n, depth + 1)).join("");
+  if (!isRecord(node))
+    return "";
   const type = asString(node.type);
   if (type && type !== "rich_text" && !type.startsWith("rich_text_") && !type.includes("table")) {
     return renderLeaf(node);
   }
-  if (Array.isArray(node.elements)) return node.elements.map((n) => deepText(n, depth + 1)).join("");
-  if (Array.isArray(node.rows)) return node.rows.map((n) => deepText(n, depth + 1)).join(" ");
+  if (Array.isArray(node.elements))
+    return node.elements.map((n) => deepText(n, depth + 1)).join("");
+  if (Array.isArray(node.rows))
+    return node.rows.map((n) => deepText(n, depth + 1)).join(" ");
   return asString(node.text);
 }
 function renderCell(cell) {
-  if (!isRecord(cell)) return deepText(cell, 0).replace(/\s*\n\s*/g, " ").trim();
+  if (!isRecord(cell))
+    return deepText(cell, 0).replace(/\s*\n\s*/g, " ").trim();
   const inner = Array.isArray(cell.elements) ? renderSection(cell, 0) : deepText(cell, 0);
   return inner.replace(/\s*\n\s*/g, " ").trim();
 }
@@ -14314,9 +14324,11 @@ function renderTable(el) {
   const rawRows = asArray(el.elements).length ? asArray(el.elements) : asArray(el.rows);
   const rows = [];
   for (const row of rawRows) {
-    if (!isRecord(row) && !Array.isArray(row)) continue;
+    if (!isRecord(row) && !Array.isArray(row))
+      continue;
     const rawCells = Array.isArray(row) ? row : asArray(row.elements).length ? asArray(row.elements) : asArray(row.cells);
-    if (rawCells.length === 0) continue;
+    if (rawCells.length === 0)
+      continue;
     rows.push(rawCells.map(renderCell));
   }
   if (rows.length === 0) {
@@ -14326,7 +14338,8 @@ function renderTable(el) {
   const colCount = rows.reduce((max, r) => Math.max(max, r.length), 0);
   const pad = (r) => {
     const cells = r.slice();
-    while (cells.length < colCount) cells.push("");
+    while (cells.length < colCount)
+      cells.push("");
     return cells.map((c) => c.replace(/\|/g, "\\|"));
   };
   const lines = [];
@@ -14334,13 +14347,16 @@ function renderTable(el) {
   const body = rows.slice(1);
   lines.push(`| ${pad(header).join(" | ")} |`);
   lines.push(`| ${Array.from({ length: colCount }, () => "---").join(" | ")} |`);
-  for (const r of body) lines.push(`| ${pad(r).join(" | ")} |`);
+  for (const r of body)
+    lines.push(`| ${pad(r).join(" | ")} |`);
   return lines.join("\n");
 }
 function renderSection(section, depth) {
-  if (depth > MAX_DEPTH || !isRecord(section)) return "";
+  if (depth > MAX_DEPTH || !isRecord(section))
+    return "";
   const type = asString(section.type);
-  if (isTableElement(section)) return renderTable(section);
+  if (isTableElement(section))
+    return renderTable(section);
   switch (type) {
     case "rich_text_section":
       return renderInline(asArray(section.elements));
@@ -14364,7 +14380,8 @@ ${code}
       return items.join("\n");
     }
     default:
-      if (Array.isArray(section.elements)) return renderInline(asArray(section.elements));
+      if (Array.isArray(section.elements))
+        return renderInline(asArray(section.elements));
       return deepText(section, depth + 1);
   }
 }
@@ -14373,18 +14390,23 @@ function renderSlackBlocks(blocks) {
   const out = [];
   try {
     for (const block of asArray(blocks)) {
-      if (!isRecord(block)) continue;
+      if (!isRecord(block))
+        continue;
       if (isTableElement(block)) {
         hadTable = true;
         const rendered = renderTable(block);
-        if (rendered.trim().length > 0) out.push(rendered);
+        if (rendered.trim().length > 0)
+          out.push(rendered);
         continue;
       }
-      if (asString(block.type) !== "rich_text") continue;
+      if (asString(block.type) !== "rich_text")
+        continue;
       for (const section of asArray(block.elements)) {
-        if (isTableElement(section)) hadTable = true;
+        if (isTableElement(section))
+          hadTable = true;
         const rendered = renderSection(section, 0);
-        if (rendered.trim().length > 0) out.push(rendered);
+        if (rendered.trim().length > 0)
+          out.push(rendered);
       }
     }
   } catch {
@@ -14394,28 +14416,33 @@ function renderSlackBlocks(blocks) {
 }
 function mergeInboundText(text, blocks) {
   const { text: rendered, hadTable } = renderSlackBlocks(blocks);
-  if (!hadTable) return { content: text, recoveredTable: false };
+  if (!hadTable)
+    return { content: text, recoveredTable: false };
   const content = rendered.length > 0 ? rendered : text;
   return { content, recoveredTable: rendered.length > 0 && content !== text };
 }
 
-// src/slack-forwarded.ts
+// ../core/dist/channels/governance/slack-forwarded.js
 function asTrimmed(v) {
   return typeof v === "string" ? v.trim() : "";
 }
 function extractForwardedContent(attachments) {
-  if (!Array.isArray(attachments)) return { text: "", files: [] };
+  if (!Array.isArray(attachments))
+    return { text: "", files: [] };
   const parts = [];
   const files = [];
   for (const raw of attachments) {
-    if (!raw || typeof raw !== "object") continue;
+    if (!raw || typeof raw !== "object")
+      continue;
     const att = raw;
     const textBody = asTrimmed(att.text);
     let body = textBody || asTrimmed(att.fallback);
     const blockSources = [];
-    if (Array.isArray(att.blocks)) blockSources.push(att.blocks);
+    if (Array.isArray(att.blocks))
+      blockSources.push(att.blocks);
     if (Array.isArray(att.message_blocks)) {
-      for (const mb of att.message_blocks) blockSources.push(mb?.message?.blocks);
+      for (const mb of att.message_blocks)
+        blockSources.push(mb?.message?.blocks);
     }
     for (const source of blockSources) {
       const rendered = renderSlackBlocks(source);
@@ -14429,12 +14456,18 @@ function extractForwardedContent(attachments) {
     const link = asTrimmed(att.title_link) || asTrimmed(att.from_url);
     const imageUrl = asTrimmed(att.image_url) || asTrimmed(att.thumb_url);
     const lines = [];
-    if (body) lines.push(body);
-    if (title && title !== body) lines.push(title);
-    if (link) lines.push(link);
-    if (imageUrl) lines.push(`[image] ${imageUrl}`);
-    if (lines.length) parts.push(lines.join("\n"));
-    if (Array.isArray(att.files)) files.push(...att.files);
+    if (body)
+      lines.push(body);
+    if (title && title !== body)
+      lines.push(title);
+    if (link)
+      lines.push(link);
+    if (imageUrl)
+      lines.push(`[image] ${imageUrl}`);
+    if (lines.length)
+      parts.push(lines.join("\n"));
+    if (Array.isArray(att.files))
+      files.push(...att.files);
   }
   return { text: parts.join("\n\n"), files };
 }
@@ -14443,7 +14476,7 @@ function hasForwardedContent(attachments) {
   return text.length > 0 || files.length > 0;
 }
 
-// src/slack-inbound-filter.ts
+// ../core/dist/channels/governance/slack-inbound-filter.js
 var ALLOWED_MESSAGE_SUBTYPES = /* @__PURE__ */ new Set([
   void 0,
   "file_share",
@@ -14469,9 +14502,12 @@ function decideSlackMessageForward(evt) {
   return { forward: true };
 }
 function isAppMentionEcho(evt, botUserId2) {
-  if (evt.type !== "message") return false;
-  if (!botUserId2) return false;
-  if (evt.channel?.startsWith("D")) return false;
+  if (evt.type !== "message")
+    return false;
+  if (!botUserId2)
+    return false;
+  if (evt.channel?.startsWith("D"))
+    return false;
   return typeof evt.text === "string" && evt.text.includes(`<@${botUserId2}>`);
 }
 function decideSlackEngagement(input) {
@@ -14485,18 +14521,21 @@ function decideSlackAckReaction(input) {
   return Boolean(input.channel && input.ts);
 }
 function isRestartSenderAllowed(allowedUsers, userId) {
-  if (allowedUsers.size === 0) return true;
+  if (allowedUsers.size === 0)
+    return true;
   return userId != null && allowedUsers.has(userId);
 }
 function extractAugmentedSlackLabel(evt) {
-  if (evt.metadata?.event_type !== "augmented_agent_message") return null;
+  if (evt.metadata?.event_type !== "augmented_agent_message")
+    return null;
   return {
     teamId: evt.metadata.event_payload?.["augmented_team_id"],
     agentId: evt.metadata.event_payload?.["augmented_agent_id"]
   };
 }
 function decideModeForward(evt, policy) {
-  if (policy.mode === "all") return { forward: true };
+  if (policy.mode === "all")
+    return { forward: true };
   if (policy.mode === "manager_only") {
     if (policy.principalSlackUserId && evt.user === policy.principalSlackUserId) {
       return { forward: true };
@@ -14508,7 +14547,8 @@ function decideModeForward(evt, policy) {
     }
   }
   const label = extractAugmentedSlackLabel(evt);
-  if (!label) return { forward: false, reason: "sender_policy" };
+  if (!label)
+    return { forward: false, reason: "sender_policy" };
   if (policy.mode === "team_agents_only" || policy.mode === "manager_only" || policy.mode === "team_only") {
     if (!policy.teamId || label.teamId !== policy.teamId) {
       return { forward: false, reason: "sender_policy" };
@@ -14518,13 +14558,15 @@ function decideModeForward(evt, policy) {
 }
 function decideSenderPolicyForward(evt, policy) {
   if (policy.internalOnly) {
-    if (!policy.homeTeamId) return { forward: false, reason: "sender_policy" };
-    if (evt.team !== policy.homeTeamId) return { forward: false, reason: "sender_policy" };
+    if (!policy.homeTeamId)
+      return { forward: false, reason: "sender_policy" };
+    if (evt.team !== policy.homeTeamId)
+      return { forward: false, reason: "sender_policy" };
   }
   return decideModeForward(evt, policy);
 }
 
-// src/sender-policy-decline.ts
+// ../core/dist/channels/governance/sender-policy-decline.js
 function classifySlackPolicyBlock(evt, policy) {
   if (policy.internalOnly && (!policy.homeTeamId || evt.team !== policy.homeTeamId)) {
     return "internal_only";
@@ -14572,13 +14614,15 @@ function declineCacheKey(channelId, senderId, reason) {
 }
 function readDeclineCooldownMs(envVarName, defaultSeconds = 1800) {
   const raw = process.env[envVarName];
-  if (!raw) return defaultSeconds * 1e3;
+  if (!raw)
+    return defaultSeconds * 1e3;
   const parsed = Number(raw);
-  if (!Number.isFinite(parsed) || parsed < 0) return defaultSeconds * 1e3;
+  if (!Number.isFinite(parsed) || parsed < 0)
+    return defaultSeconds * 1e3;
   return parsed * 1e3;
 }
 
-// src/inbound-access.ts
+// ../core/dist/channels/governance/inbound-access.js
 function decideInboundAccess(input) {
   if (!input.content.forward) {
     return { kind: "drop", reason: `content:${input.content.reason}` };
@@ -17609,10 +17653,11 @@ function buildDmUserInfo(usersInfoRes) {
   return out;
 }
 
-// src/slack-peer-classifier.ts
+// ../core/dist/channels/governance/slack-peer-classifier.js
 var CODE_NAME_RE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
 function classifyPeerMessage(msg, cfg, self) {
-  if (!msg.bot_id) return { kind: "human" };
+  if (!msg.bot_id)
+    return { kind: "human" };
   if (self.bot_user_id !== null && msg.user === self.bot_user_id) {
     return { kind: "self" };
   }
@@ -17669,14 +17714,16 @@ function classifyAddressing(msg, ourBotUserId) {
   return { addressed: false, viaReplyOnly: false };
 }
 function parsePeersEnv(raw, gateRaw) {
-  if (!raw || raw.trim().length === 0) return [];
+  if (!raw || raw.trim().length === 0)
+    return [];
   let parsed;
   try {
     parsed = JSON.parse(raw);
   } catch {
     return [];
   }
-  if (!Array.isArray(parsed)) return [];
+  if (!Array.isArray(parsed))
+    return [];
   const gateMap = /* @__PURE__ */ new Map();
   let gateConfigInvalid = false;
   if (gateRaw && gateRaw.trim().length > 0) {
@@ -17706,9 +17753,7 @@ function parsePeersEnv(raw, gateRaw) {
       gateConfigInvalid = true;
     }
     if (gateConfigInvalid) {
-      console.error(
-        "[slack-peer-classifier] SLACK_PEERS_GATE is present but malformed; failing closed (every peer drops as cross_team_grant_missing)"
-      );
+      console.error("[slack-peer-classifier] SLACK_PEERS_GATE is present but malformed; failing closed (every peer drops as cross_team_grant_missing)");
     }
   }
   const out = [];
@@ -17731,11 +17776,13 @@ function parsePeersEnv(raw, gateRaw) {
   return out;
 }
 function parsePeerGroupIdsEnv(raw) {
-  if (!raw) return [];
+  if (!raw)
+    return [];
   return raw.split(",").map((s) => s.trim()).filter(Boolean);
 }
 function parsePeerAgentModeEnv(raw) {
-  if (raw === "listen" || raw === "respond") return raw;
+  if (raw === "listen" || raw === "respond")
+    return raw;
   return "off";
 }
 

package/dist/mcp/teams-channel.js

@@ -14766,14 +14766,17 @@ function buildChannelInfoResult(input) {
   };
 }
 
-// src/teams-inbound-filter.ts
+// ../core/dist/channels/governance/teams-inbound-filter.js
 function mentionsBot(text, activity, botObjectId) {
-  if (!botObjectId) return text.includes("<at>");
+  if (!botObjectId)
+    return text.includes("<at>");
   const mentionEntities = activity.entities?.filter((e) => e.type === "mention") ?? [];
   for (const e of mentionEntities) {
-    if (e.mentioned?.id === botObjectId) return true;
+    if (e.mentioned?.id === botObjectId)
+      return true;
   }
-  if (mentionEntities.length === 0 && text.includes("<at>")) return true;
+  if (mentionEntities.length === 0 && text.includes("<at>"))
+    return true;
   return false;
 }
 function decideTeamsActivityForward(input) {
@@ -14813,11 +14816,13 @@ function decideTeamsActivityForward(input) {
 }
 function extractAugmentedTeamsLabel(activity) {
   const entity = activity.entities?.find((e) => e.type === "augmented/agent");
-  if (!entity) return null;
+  if (!entity)
+    return null;
   return { teamId: entity.teamId, agentId: entity.agentId };
 }
 function decideModeForwardTeams(activity, policy) {
-  if (policy.mode === "all") return { forward: true };
+  if (policy.mode === "all")
+    return { forward: true };
   if (policy.mode === "manager_only") {
     if (policy.principalAadObjectId && activity.from?.aadObjectId === policy.principalAadObjectId) {
       return { forward: true };
@@ -14830,7 +14835,8 @@ function decideModeForwardTeams(activity, policy) {
     }
   }
   const label = extractAugmentedTeamsLabel(activity);
-  if (!label) return { forward: false, reason: "sender_policy" };
+  if (!label)
+    return { forward: false, reason: "sender_policy" };
   if (policy.mode === "team_agents_only" || policy.mode === "manager_only" || policy.mode === "team_only") {
     if (!policy.teamId || label.teamId !== policy.teamId) {
       return { forward: false, reason: "sender_policy" };
@@ -14840,7 +14846,8 @@ function decideModeForwardTeams(activity, policy) {
 }
 function decideSenderPolicyForwardTeams(activity, policy) {
   if (policy.internalOnly) {
-    if (!policy.homeTenantId) return { forward: false, reason: "sender_policy" };
+    if (!policy.homeTenantId)
+      return { forward: false, reason: "sender_policy" };
     const senderTenant = activity.channelData?.tenant?.id ?? activity.conversation?.tenantId;
     if (senderTenant !== policy.homeTenantId) {
       return { forward: false, reason: "sender_policy" };
@@ -14849,7 +14856,7 @@ function decideSenderPolicyForwardTeams(activity, policy) {
   return decideModeForwardTeams(activity, policy);
 }
 
-// src/sender-policy-decline.ts
+// ../core/dist/channels/governance/sender-policy-decline.js
 function classifyTeamsPolicyBlock(activity, policy) {
   const senderTenantId = activity.channelData?.tenant?.id ?? activity.conversation?.tenantId;
   if (policy.internalOnly && (!policy.homeTenantId || policy.homeTenantId === "common" || senderTenantId !== policy.homeTenantId)) {
@@ -14898,13 +14905,15 @@ function declineCacheKey(channelId, senderId, reason) {
 }
 function readDeclineCooldownMs(envVarName, defaultSeconds = 1800) {
   const raw = process.env[envVarName];
-  if (!raw) return defaultSeconds * 1e3;
+  if (!raw)
+    return defaultSeconds * 1e3;
   const parsed = Number(raw);
-  if (!Number.isFinite(parsed) || parsed < 0) return defaultSeconds * 1e3;
+  if (!Number.isFinite(parsed) || parsed < 0)
+    return defaultSeconds * 1e3;
   return parsed * 1e3;
 }
 
-// src/inbound-access.ts
+// ../core/dist/channels/governance/inbound-access.js
 function decideInboundAccess(input) {
   if (!input.content.forward) {
     return { kind: "drop", reason: `content:${input.content.reason}` };

package/dist/mcp/telegram-channel.js

@@ -14836,9 +14836,10 @@ function configFromEnv(env = process.env) {
   };
 }
 
-// src/telegram-peer-classifier.ts
+// ../core/dist/channels/governance/telegram-peer-classifier.js
 function classifyPeerMessage(msg, cfg, self) {
-  if (!msg.from?.is_bot) return { kind: "human" };
+  if (!msg.from?.is_bot)
+    return { kind: "human" };
   if (self.bot_id !== null && msg.from.id === self.bot_id) {
     return { kind: "self" };
   }
@@ -14901,20 +14902,24 @@ function classifyAddressing(msg, ourBotId, ourBotUsername) {
     }
   }
   const viaReply = msg.reply_to_message?.from?.id === ourBotId;
-  if (viaMentionOrCommand) return { addressed: true, viaReplyOnly: false };
-  if (viaReply) return { addressed: true, viaReplyOnly: true };
+  if (viaMentionOrCommand)
+    return { addressed: true, viaReplyOnly: false };
+  if (viaReply)
+    return { addressed: true, viaReplyOnly: true };
   return { addressed: false, viaReplyOnly: false };
 }
 var CODE_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 function parsePeersEnv(raw, gateRaw) {
-  if (!raw || raw.trim().length === 0) return [];
+  if (!raw || raw.trim().length === 0)
+    return [];
   let parsed;
   try {
     parsed = JSON.parse(raw);
   } catch {
     return [];
   }
-  if (!Array.isArray(parsed)) return [];
+  if (!Array.isArray(parsed))
+    return [];
   const gateMap = /* @__PURE__ */ new Map();
   let gateConfigInvalid = false;
   if (gateRaw && gateRaw.trim().length > 0) {
@@ -14944,9 +14949,7 @@ function parsePeersEnv(raw, gateRaw) {
       gateConfigInvalid = true;
     }
     if (gateConfigInvalid) {
-      console.error(
-        "[telegram-peer-classifier] TELEGRAM_PEERS_GATE is present but malformed; failing closed (every peer drops as cross_team_grant_missing)"
-      );
+      console.error("[telegram-peer-classifier] TELEGRAM_PEERS_GATE is present but malformed; failing closed (every peer drops as cross_team_grant_missing)");
     }
   }
   const out = [];
@@ -14968,15 +14971,17 @@ function parsePeersEnv(raw, gateRaw) {
   return out;
 }
 function parsePeerGroupIdsEnv(raw) {
-  if (!raw) return [];
+  if (!raw)
+    return [];
   return raw.split(",").map((s) => s.trim()).filter(Boolean);
 }
 function parsePeerAgentModeEnv(raw) {
-  if (raw === "listen" || raw === "respond") return raw;
+  if (raw === "listen" || raw === "respond")
+    return raw;
   return "off";
 }
 
-// src/sender-policy-decline.ts
+// ../core/dist/channels/governance/sender-policy-decline.js
 function politeDeclineCopy(reason) {
   switch (reason) {
     case "internal_only":
@@ -15003,7 +15008,7 @@ function decideDeclineReply(input) {
   return { reply: true };
 }
 
-// src/inbound-access.ts
+// ../core/dist/channels/governance/inbound-access.js
 function decideInboundAccess(input) {
   if (!input.content.forward) {
     return { kind: "drop", reason: `content:${input.content.reason}` };

package/dist/{persistent-session-VSSEZTY7.js → persistent-session-ZQSAZIVM.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-4DHYHNCV.js";
+} from "./chunk-NAS4DZNG.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-VSSEZTY7.js.map
+//# sourceMappingURL=persistent-session-ZQSAZIVM.js.map