@integrity-labs/agt-cli 0.28.321 → 0.28.322

package/dist/{claude-pair-runtime-DO6OWWGD.js → claude-pair-runtime-ZL2U2NZJ.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-ZQSAZIVM.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-L6S6HABH.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-DO6OWWGD.js.map
+//# sourceMappingURL=claude-pair-runtime-ZL2U2NZJ.js.map

package/dist/lib/manager-worker.js

@@ -43,7 +43,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-52RHLSXN.js";
+} from "../chunk-FG7ELAP4.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -132,7 +132,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-NAS4DZNG.js";
+} from "../chunk-LJT3U3GQ.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -8309,7 +8309,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.321" : "dev";
+var agtCliVersion = true ? "0.28.322" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -9205,7 +9205,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-ZQSAZIVM.js");
+      const { collectDiagnostics } = await import("../persistent-session-L6S6HABH.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -9304,7 +9304,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-ZQSAZIVM.js");
+      const { collectDiagnostics } = await import("../persistent-session-L6S6HABH.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -9453,7 +9453,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-NARLJJGH.js");
+      } = await import("../responsiveness-probe-X2WATO46.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -9485,7 +9485,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-NARLJJGH.js");
+        } = await import("../responsiveness-probe-X2WATO46.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -12581,7 +12581,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-ZQSAZIVM.js");
+        const { collectDiagnostics } = await import("../persistent-session-L6S6HABH.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -12631,7 +12631,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-ZQSAZIVM.js");
+      const { collectDiagnostics } = await import("../persistent-session-L6S6HABH.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -13099,7 +13099,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-DO6OWWGD.js");
+  } = await import("../claude-pair-runtime-ZL2U2NZJ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/origami.js

@@ -37623,6 +37623,11 @@ var DEFAULT_SCOPES = [
   "reactions:read",
   "reactions:write",
   "users:read",
+  // ENG-7791: needed so users.info returns the sender's email, the join key that
+  // links an inbound Slack sender to their organization_people record (inbound
+  // identity reconcile). Existing installs without it degrade gracefully - the
+  // reconcile no-ops until the bot is re-authorised with the wider scope set.
+  "users:read.email",
   "users.profile:write"
 ];
 var SLACK_SCOPE_PRESETS = {

package/dist/mcp/slack-channel.js

@@ -18031,8 +18031,76 @@ function createInboundContextClient(args) {
   };
 }
 
-// src/slack-bot-user-id-client.ts
+// src/reconcile-identity-client.ts
 var REQUEST_TIMEOUT_MS5 = 1e4;
+function createReconcileIdentityClient(args) {
+  if (!args.agtHost || !args.agtApiKey || !args.agentId) return null;
+  const fetchImpl = args.fetchImpl ?? fetch;
+  const log = args.log ?? (() => {
+  });
+  const base = args.agtHost.replace(/\/+$/, "");
+  const agentId = args.agentId;
+  const apiKey = args.agtApiKey;
+  let cachedToken = null;
+  let cachedTokenExpiresAt = 0;
+  async function getToken() {
+    if (cachedToken && Date.now() < cachedTokenExpiresAt) return cachedToken;
+    const resp = await fetchImpl(`${base}/host/exchange`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      // Scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
+      body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS5)
+    });
+    if (!resp.ok) {
+      const body = await resp.text().catch(() => "");
+      throw new Error(`/host/exchange failed (${resp.status}): ${body.slice(0, 200)}`);
+    }
+    const data = await resp.json();
+    cachedToken = data.token;
+    cachedTokenExpiresAt = data.expires_at ? new Date(data.expires_at).getTime() - 12e4 : Date.now() + 55 * 6e4;
+    return cachedToken;
+  }
+  async function postOnce(body) {
+    const token = await getToken();
+    return fetchImpl(`${base}/host/reconcile-sender-identity`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS5)
+    });
+  }
+  async function emit(args2) {
+    const body = {
+      agent_id: agentId,
+      platform: args2.platform,
+      sender_id: args2.senderId,
+      email: args2.email
+    };
+    try {
+      let resp = await postOnce(body);
+      if (resp.status === 401) {
+        cachedToken = null;
+        cachedTokenExpiresAt = 0;
+        resp = await postOnce(body);
+      }
+      if (!resp.ok) {
+        const text = await resp.text().catch(() => "");
+        log(`reconcile-identity: POST failed (${resp.status}) platform=${args2.platform}: ${text.slice(0, 200)}`);
+      }
+    } catch (err) {
+      log(`reconcile-identity: emit threw platform=${args2.platform}: ${err.message}`);
+    }
+  }
+  return {
+    reconcile(args2) {
+      void emit(args2);
+    }
+  };
+}
+
+// src/slack-bot-user-id-client.ts
+var REQUEST_TIMEOUT_MS6 = 1e4;
 function createSlackBotUserIdClient(args) {
   if (!args.agtHost || !args.agtApiKey || !args.agentId) return null;
   const fetchImpl = args.fetchImpl ?? fetch;
@@ -18051,7 +18119,7 @@ function createSlackBotUserIdClient(args) {
       headers: { "Content-Type": "application/json" },
       // ENG-7438: scope the exchange to this agent (per-agent org gate, ADR-0042 P1).
       body: JSON.stringify({ host_key: apiKey, agent_id: agentId }),
-      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS5)
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS6)
     });
     if (!resp.ok) {
       const body = await resp.text().catch(() => "");
@@ -18068,7 +18136,7 @@ function createSlackBotUserIdClient(args) {
       method: "POST",
       headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
       body: JSON.stringify({ agent_id: agentId, bot_user_id: botUserId2 }),
-      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS5)
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS6)
     });
   }
   async function emitAsync(botUserId2) {
@@ -18100,7 +18168,7 @@ function createSlackBotUserIdClient(args) {
         method: "POST",
         headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
         body: JSON.stringify({ agent_id: agentId, channel_id: "slack", healthy }),
-        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS5)
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS6)
       });
     };
     try {
@@ -18454,6 +18522,13 @@ var inboundContextClient = createInboundContextClient({
   log: (line) => process.stderr.write(`slack-channel: ${line}
 `)
 });
+var reconcileIdentityClient = createReconcileIdentityClient({
+  agtHost: AGT_HOST,
+  agtApiKey: AGT_API_KEY,
+  agentId: AGT_AGENT_ID,
+  log: (line) => process.stderr.write(`slack-channel: ${line}
+`)
+});
 var kanbanCardActiveClient = createKanbanCardActiveClient({
   agtHost: AGT_HOST,
   agtApiKey: AGT_API_KEY,
@@ -22249,10 +22324,11 @@ var slackReplayTimer = setInterval(() => {
   });
 }, SLACK_REPLAY_SCAN_INTERVAL_MS);
 slackReplayTimer.unref?.();
-var userNameCache = /* @__PURE__ */ new Map();
-async function resolveUserName(userId) {
-  if (!userId || userId === "unknown") return userId ?? "unknown";
-  const cached2 = userNameCache.get(userId);
+var userProfileCache = /* @__PURE__ */ new Map();
+var reconciledSlackSenders = /* @__PURE__ */ new Set();
+async function resolveUserProfile(userId) {
+  if (!userId || userId === "unknown") return null;
+  const cached2 = userProfileCache.get(userId);
   if (cached2 !== void 0) return cached2;
   try {
     const res = await fetch(
@@ -22260,14 +22336,30 @@ async function resolveUserName(userId) {
       { headers: { Authorization: `Bearer ${BOT_TOKEN}` } }
     );
     const data = await res.json();
-    const name = data.user?.profile?.display_name || data.user?.profile?.real_name || userId;
-    userNameCache.set(userId, name);
-    return name;
+    if (!data.ok) return null;
+    const profile = {
+      name: data.user?.profile?.display_name || data.user?.profile?.real_name || userId,
+      email: data.user?.profile?.email?.trim() || null,
+      isStranger: data.user?.is_stranger === true
+    };
+    userProfileCache.set(userId, profile);
+    return profile;
   } catch {
-    userNameCache.set(userId, userId);
-    return userId;
+    return null;
   }
 }
+async function resolveUserName(userId) {
+  if (!userId || userId === "unknown") return userId ?? "unknown";
+  const profile = await resolveUserProfile(userId);
+  return profile?.name ?? userId;
+}
+async function resolveUserEmail(userId) {
+  if (!userId || userId === "unknown") return null;
+  const profile = await resolveUserProfile(userId);
+  if (!profile) return null;
+  if (profile.isStranger) return null;
+  return profile.email;
+}
 var currentWs = null;
 var isShuttingDown = false;
 var acquiredLockPath = null;
@@ -22703,6 +22795,17 @@ async function connectSocketMode() {
       if (channel && !isFromBot && evt.user !== botUserId) {
         resetThread(channel, threadTs);
       }
+      if (reconcileIdentityClient && !isFromBot && evt.user && !reconciledSlackSenders.has(evt.user)) {
+        const senderId = evt.user;
+        reconciledSlackSenders.add(senderId);
+        void resolveUserEmail(senderId).then((email2) => {
+          if (email2) {
+            reconcileIdentityClient.reconcile({ platform: "slack", senderId, email: email2 });
+          } else {
+            reconciledSlackSenders.delete(senderId);
+          }
+        });
+      }
       const isAutoFollowed = !isDirectMessage && evt.type === "message" && isThreadReply && !!threadKey && trackedThreads.has(threadKey);
       const shouldEngage = decideSlackEngagement({
         type: evt.type ?? "message",

package/dist/{persistent-session-ZQSAZIVM.js → persistent-session-L6S6HABH.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-NAS4DZNG.js";
+} from "./chunk-LJT3U3GQ.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-ZQSAZIVM.js.map
+//# sourceMappingURL=persistent-session-L6S6HABH.js.map

package/dist/{responsiveness-probe-NARLJJGH.js → responsiveness-probe-X2WATO46.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-NAS4DZNG.js";
+} from "./chunk-LJT3U3GQ.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -427,4 +427,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-NARLJJGH.js.map
+//# sourceMappingURL=responsiveness-probe-X2WATO46.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.321",
+  "version": "0.28.322",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {