@integrity-labs/agt-cli 0.28.320 → 0.28.321

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-CJSATK6B.js";
+} from "../chunk-52RHLSXN.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4827,7 +4827,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.320" : "dev";
+var cliVersion = true ? "0.28.321" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5931,7 +5931,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.320" : "dev";
+var cliVersion2 = true ? "0.28.321" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-CJSATK6B.js → chunk-52RHLSXN.js}

@@ -6705,7 +6705,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.320" : "dev";
+var agtCliVersion = true ? "0.28.321" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9102,4 +9102,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-CJSATK6B.js.map
+//# sourceMappingURL=chunk-52RHLSXN.js.map

package/dist/lib/manager-worker.js

@@ -43,7 +43,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-CJSATK6B.js";
+} from "../chunk-52RHLSXN.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -518,6 +518,9 @@ function extractMsTeamsBehaviourSubset(config2) {
     adaptive_cards_ask_user_enabled: adaptiveCardsEnabled && config2?.["adaptive_cards_ask_user_enabled"] === true
   };
 }
+function isMsTeamsBehaviourRestrictive(_subset) {
+  return false;
+}
 
 // src/lib/slack-behaviour-restart.ts
 function extractSlackBehaviourSubset(config2) {
@@ -534,6 +537,9 @@ function extractSlackBehaviourSubset(config2) {
     allowed_users: Array.isArray(rawAllowed) ? rawAllowed.filter((v) => typeof v === "string" && v.trim().length > 0).map((v) => v.trim()) : []
   };
 }
+function isSlackBehaviourRestrictive(subset) {
+  return subset.allowed_users.length > 0;
+}
 
 // src/lib/onboarding-drive.ts
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync2 } from "fs";
@@ -3315,6 +3321,14 @@ import { existsSync as existsSync4, readFileSync as readFileSync11 } from "fs";
 import { join as join11 } from "path";
 var BASELINE_FILENAME = "sender-policy-baseline.json";
 var SENDER_POLICY_BASELINE_VERSION = 1;
+var BASELINE_CONCERNS = ["senderPolicy", "slackBehaviour", "msteamsBehaviour"];
+function createDeliveryBaselineMaps() {
+  return {
+    senderPolicy: /* @__PURE__ */ new Map(),
+    slackBehaviour: /* @__PURE__ */ new Map(),
+    msteamsBehaviour: /* @__PURE__ */ new Map()
+  };
+}
 function getSenderPolicyBaselineFile(configDir) {
   return join11(configDir, BASELINE_FILENAME);
 }
@@ -3343,27 +3357,31 @@ function loadSenderPolicyBaseline(target, configDir, log2) {
     );
     return;
   }
-  const entries = obj.senderPolicy;
-  if (!entries || typeof entries !== "object" || Array.isArray(entries)) return;
-  for (const [agentId, hash] of Object.entries(entries)) {
-    if (typeof hash === "string" && hash.length > 0) target.set(agentId, hash);
+  for (const concern of BASELINE_CONCERNS) {
+    const entries = obj[concern];
+    if (!entries || typeof entries !== "object" || Array.isArray(entries)) continue;
+    for (const [agentId, hash] of Object.entries(entries)) {
+      if (typeof hash === "string" && hash.length > 0) target[concern].set(agentId, hash);
+    }
   }
 }
 function saveSenderPolicyBaseline(source, configDir, log2) {
   const path = getSenderPolicyBaselineFile(configDir);
-  const senderPolicy = {};
-  for (const [agentId, hash] of source) senderPolicy[agentId] = hash;
-  const payload = JSON.stringify(
-    { version: SENDER_POLICY_BASELINE_VERSION, senderPolicy },
-    null,
-    2
-  );
+  const payloadObj = { version: SENDER_POLICY_BASELINE_VERSION };
+  for (const concern of BASELINE_CONCERNS) {
+    const entries = {};
+    for (const [agentId, hash] of source[concern]) entries[agentId] = hash;
+    payloadObj[concern] = entries;
+  }
+  const payload = JSON.stringify(payloadObj, null, 2);
   try {
     atomicWriteFileSync(path, payload);
+    return true;
   } catch (err) {
     log2?.(
       `[sender-policy] failed to persist ${BASELINE_FILENAME} (non-fatal): ${err.message}`
     );
+    return false;
   }
 }
 
@@ -7746,10 +7764,21 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
     {
       const baselineAgentId = agentState.codeNameToAgentId.get(codeName);
       if (baselineAgentId) {
-        persistSenderPolicyBaselineEntry(
+        persistDeliveryBaselineEntry(
+          "senderPolicy",
           baselineAgentId,
           agentState.knownSenderPolicyHashes.get(baselineAgentId)
         );
+        persistDeliveryBaselineEntry(
+          "slackBehaviour",
+          baselineAgentId,
+          agentState.knownSlackBehaviourHashes.get(baselineAgentId)
+        );
+        persistDeliveryBaselineEntry(
+          "msteamsBehaviour",
+          baselineAgentId,
+          agentState.knownMsTeamsBehaviourHashes.get(baselineAgentId)
+        );
       }
     }
     runningMcpHashes.delete(codeName);
@@ -8272,7 +8301,7 @@ function clearAgentCaches(agentId, codeName) {
   mcpFlapDampener.forget(codeName);
   deferLogThrottle.delete(codeName);
   if (channelCacheMutated) saveChannelHashCache2();
-  removeSenderPolicyBaselineEntry(agentId);
+  removeDeliveryBaselineEntries(agentId);
 }
 var cachedFrameworkVersion = null;
 var cachedMaintenanceWindow = null;
@@ -8280,7 +8309,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.320" : "dev";
+var agtCliVersion = true ? "0.28.321" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -8988,22 +9017,46 @@ function loadChannelHashCache2() {
 function saveChannelHashCache2() {
   saveChannelHashCache(agentState.knownChannelConfigHashes, channelHashCacheDir());
 }
-var persistedSenderPolicyBaseline = /* @__PURE__ */ new Map();
+var persistedDeliveryBaseline = createDeliveryBaselineMaps();
 function loadSenderPolicyBaseline2() {
-  loadSenderPolicyBaseline(persistedSenderPolicyBaseline, channelHashCacheDir(), log);
-  for (const [agentId, hash] of persistedSenderPolicyBaseline) {
+  loadSenderPolicyBaseline(persistedDeliveryBaseline, channelHashCacheDir(), log);
+  for (const [agentId, hash] of persistedDeliveryBaseline.senderPolicy) {
     agentState.knownSenderPolicyHashes.set(agentId, hash);
   }
+  for (const [agentId, hash] of persistedDeliveryBaseline.slackBehaviour) {
+    agentState.knownSlackBehaviourHashes.set(agentId, hash);
+  }
+  for (const [agentId, hash] of persistedDeliveryBaseline.msteamsBehaviour) {
+    agentState.knownMsTeamsBehaviourHashes.set(agentId, hash);
+  }
+}
+var deliveryBaselineDirty = false;
+function saveDeliveryBaseline() {
+  deliveryBaselineDirty = !saveSenderPolicyBaseline(
+    persistedDeliveryBaseline,
+    channelHashCacheDir(),
+    log
+  );
+}
+function flushDeliveryBaselineIfDirty() {
+  if (deliveryBaselineDirty) saveDeliveryBaseline();
 }
-function persistSenderPolicyBaselineEntry(agentId, hash) {
+function persistDeliveryBaselineEntry(concern, agentId, hash) {
   if (hash === void 0) return;
-  if (persistedSenderPolicyBaseline.get(agentId) === hash) return;
-  persistedSenderPolicyBaseline.set(agentId, hash);
-  saveSenderPolicyBaseline(persistedSenderPolicyBaseline, channelHashCacheDir(), log);
+  if (persistedDeliveryBaseline[concern].get(agentId) === hash && !deliveryBaselineDirty) return;
+  persistedDeliveryBaseline[concern].set(agentId, hash);
+  saveDeliveryBaseline();
+}
+function removeDeliveryBaselineEntry(concern, agentId) {
+  if (!persistedDeliveryBaseline[concern].delete(agentId) && !deliveryBaselineDirty) return;
+  saveDeliveryBaseline();
 }
-function removeSenderPolicyBaselineEntry(agentId) {
-  if (!persistedSenderPolicyBaseline.delete(agentId)) return;
-  saveSenderPolicyBaseline(persistedSenderPolicyBaseline, channelHashCacheDir(), log);
+function removeDeliveryBaselineEntries(agentId) {
+  let mutated = false;
+  for (const map of Object.values(persistedDeliveryBaseline)) {
+    if (map.delete(agentId)) mutated = true;
+  }
+  if (mutated || deliveryBaselineDirty) saveDeliveryBaseline();
 }
 var _channelQuarantineStore = null;
 function channelQuarantineStore() {
@@ -9165,6 +9218,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
 async function pollCycle() {
   if (!config) return;
   if (restartAfterUpgrade) return;
+  flushDeliveryBaselineIfDirty();
   try {
     await processRestartFlags({
       log,
@@ -10670,14 +10724,14 @@ async function processAgent(agent, agentStates) {
     agentState.knownSenderPolicyHashes.set(agent.agent_id, senderPolicyHash);
     const hasLiveSenderPolicyConsumer = hasSenderPolicyChannel && spSessionHealthy && spSessionMode === "persistent" && spFramework === "claude-code";
     if (!hasLiveSenderPolicyConsumer) {
-      persistSenderPolicyBaselineEntry(agent.agent_id, senderPolicyHash);
+      persistDeliveryBaselineEntry("senderPolicy", agent.agent_id, senderPolicyHash);
     } else if (senderPolicyDecision.firstPoll && !senderPolicyRestrictive) {
-      if (persistedSenderPolicyBaseline.get(agent.agent_id) !== senderPolicyHash) {
+      if (persistedDeliveryBaseline.senderPolicy.get(agent.agent_id) !== senderPolicyHash) {
         log(
           `[sender-policy] baseline established without restart for '${agent.code_name}' (policy is non-restrictive); a policy loosened while the baseline was unknown requires an agent restart to take effect (ENG-7771)`
         );
       }
-      persistSenderPolicyBaselineEntry(agent.agent_id, senderPolicyHash);
+      persistDeliveryBaselineEntry("senderPolicy", agent.agent_id, senderPolicyHash);
     }
     let msteamsBehaviourRestartScheduled = false;
     if (currentChannelIds.has("msteams")) {
@@ -10687,18 +10741,14 @@ async function processAgent(agent, agentStates) {
       );
       const behaviourHash = createHash12("sha256").update(canonicalJson(behaviourSubset)).digest("hex");
       const prevBehaviourHash = agentState.knownMsTeamsBehaviourHashes.get(agent.agent_id);
+      const msteamsBehaviourRestrictive = isMsTeamsBehaviourRestrictive(behaviourSubset);
       const behaviourDecision = decideSenderPolicyRestart({
         previousHash: prevBehaviourHash,
-        // ENG-7771 scoped the persisted-baseline + first-poll fail-safe to
-        // sender_policy only; the behaviour baselines keep the legacy
-        // "first poll never restarts" semantics until the follow-up that
-        // migrates them onto the sidecar (their maps share the same
-        // wipe-on-manager-restart pathology).
-        currentPolicyRestrictive: false,
+        currentPolicyRestrictive: msteamsBehaviourRestrictive,
         currentHash: behaviourHash,
-        sessionMode: refreshData.agent.session_mode,
-        framework: agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK,
-        sessionHealthy: isSessionHealthy(agent.code_name),
+        sessionMode: spSessionMode,
+        framework: spFramework,
+        sessionHealthy: spSessionHealthy,
         // A channel-set or sender-policy restart scheduled this tick will
         // respawn the MCP children with the freshly-written env for free.
         channelSetRestartAlreadyScheduled: channelSetRestartScheduled || senderPolicyDecision.restart
@@ -10730,8 +10780,15 @@ async function processAgent(agent, agentStates) {
         msteamsBehaviourRestartScheduled = true;
       }
       agentState.knownMsTeamsBehaviourHashes.set(agent.agent_id, behaviourHash);
+      const hasLiveMsTeamsBehaviourConsumer = spSessionHealthy && spSessionMode === "persistent" && spFramework === "claude-code";
+      if (!hasLiveMsTeamsBehaviourConsumer) {
+        persistDeliveryBaselineEntry("msteamsBehaviour", agent.agent_id, behaviourHash);
+      } else if (behaviourDecision.firstPoll && !msteamsBehaviourRestrictive) {
+        persistDeliveryBaselineEntry("msteamsBehaviour", agent.agent_id, behaviourHash);
+      }
     } else {
       agentState.knownMsTeamsBehaviourHashes.delete(agent.agent_id);
+      removeDeliveryBaselineEntry("msteamsBehaviour", agent.agent_id);
     }
     if (currentChannelIds.has("slack")) {
       const slackEntry = refreshData.channel_configs?.["slack"];
@@ -10740,25 +10797,25 @@ async function processAgent(agent, agentStates) {
       );
       const slackBehaviourHash = createHash12("sha256").update(canonicalJson(slackBehaviourSubset)).digest("hex");
       const prevSlackBehaviourHash = agentState.knownSlackBehaviourHashes.get(agent.agent_id);
+      const slackBehaviourRestrictive = isSlackBehaviourRestrictive(slackBehaviourSubset);
       const slackBehaviourDecision = decideSenderPolicyRestart({
         previousHash: prevSlackBehaviourHash,
-        // See the msteams call above — behaviour baselines are out of
-        // ENG-7771's scope; legacy first-poll semantics until the follow-up.
-        currentPolicyRestrictive: false,
+        currentPolicyRestrictive: slackBehaviourRestrictive,
         currentHash: slackBehaviourHash,
-        sessionMode: refreshData.agent.session_mode,
-        framework: agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK,
-        sessionHealthy: isSessionHealthy(agent.code_name),
+        sessionMode: spSessionMode,
+        framework: spFramework,
+        sessionHealthy: spSessionHealthy,
         // A channel-set, sender-policy, or msteams-behaviour restart
         // scheduled this tick respawns the MCP children with the
         // freshly-written env for free.
         channelSetRestartAlreadyScheduled: channelSetRestartScheduled || senderPolicyDecision.restart || msteamsBehaviourRestartScheduled
       });
       if (slackBehaviourDecision.restart) {
+        const isSlackVerifyRestart = slackBehaviourDecision.firstPoll;
         log(
-          `[hot-reload] slack behaviour settings changed for '${agent.code_name}' (${prevSlackBehaviourHash?.slice(0, 8) ?? "first"} \u2192 ${slackBehaviourHash.slice(0, 8)}) \u2014 restarting session`
+          isSlackVerifyRestart ? `[hot-reload] slack behaviour delivery baseline unknown for '${agent.code_name}' with a restrictive allowed_users list (\u2192 ${slackBehaviourHash.slice(0, 8)}) \u2014 restarting session to guarantee enforcement (fail closed, ENG-7779)` : `[hot-reload] slack behaviour settings changed for '${agent.code_name}' (${prevSlackBehaviourHash?.slice(0, 8) ?? "first"} \u2192 ${slackBehaviourHash.slice(0, 8)}) \u2014 restarting session`
         );
-        const slackBehaviourNotice = "Your Slack channel behaviour settings were updated. Restarting session shortly so the slack-channel MCP picks up the new configuration.";
+        const slackBehaviourNotice = isSlackVerifyRestart ? "Your manager was updated and needs to restart your session to make sure your configured Slack access controls are enforced by the channel MCP server." : "Your Slack channel behaviour settings were updated. Restarting session shortly so the slack-channel MCP picks up the new configuration.";
         const slackBehaviourDelivered = await injectMessage(
           agent.code_name,
           "system",
@@ -10775,13 +10832,20 @@ async function processAgent(agent, agentStates) {
         scheduleSessionRestart(
           agent.code_name,
           slackBehaviourDelay,
-          "slack behaviour change",
+          isSlackVerifyRestart ? "slack behaviour verify (unknown baseline)" : "slack behaviour change",
           "channel-behaviour-change"
         );
       }
       agentState.knownSlackBehaviourHashes.set(agent.agent_id, slackBehaviourHash);
+      const hasLiveSlackBehaviourConsumer = spSessionHealthy && spSessionMode === "persistent" && spFramework === "claude-code";
+      if (!hasLiveSlackBehaviourConsumer) {
+        persistDeliveryBaselineEntry("slackBehaviour", agent.agent_id, slackBehaviourHash);
+      } else if (slackBehaviourDecision.firstPoll && !slackBehaviourRestrictive) {
+        persistDeliveryBaselineEntry("slackBehaviour", agent.agent_id, slackBehaviourHash);
+      }
     } else {
       agentState.knownSlackBehaviourHashes.delete(agent.agent_id);
+      removeDeliveryBaselineEntry("slackBehaviour", agent.agent_id);
     }
   }
   const agentSessionMode = refreshData.agent.session_mode;