@integrity-labs/agt-cli 0.28.323 → 0.28.325

package/dist/{claude-pair-runtime-JSOSBAH3.js → claude-pair-runtime-BOFTEAQC.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-5FKI4NCL.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-BICDYHOC.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-JSOSBAH3.js.map
+//# sourceMappingURL=claude-pair-runtime-BOFTEAQC.js.map

package/dist/lib/manager-worker.js

@@ -43,7 +43,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-MLXFGOLB.js";
+} from "../chunk-BATSDQD7.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -132,7 +132,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-JTQ6RYGM.js";
+} from "../chunk-BSTFCC62.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -4641,6 +4641,9 @@ async function maybeSendTelegramFollowUpHint(agentCodeName, botToken, chatId) {
 }
 
 // src/lib/manager/delivery/state.ts
+function toPreferredChannel(raw) {
+  return raw === "slack" || raw === "telegram" ? raw : null;
+}
 var agentInfoForDelivery = /* @__PURE__ */ new Map();
 function cacheAgentDeliveryMetadata(codeName, refreshData) {
   const agentRow = refreshData["agent"] ?? {};
@@ -4672,7 +4675,8 @@ function cacheAgentDeliveryMetadata(codeName, refreshData) {
       person_id: reportsToPersonId,
       display_name: agentRow["reports_to_name"] ?? "Reports-To",
       slack_user_id: agentRow["reports_to_slack_user_id"] ?? null,
-      telegram_chat_id: agentRow["reports_to_telegram_chat_id"] ?? null
+      telegram_chat_id: agentRow["reports_to_telegram_chat_id"] ?? null,
+      preferred_channel: toPreferredChannel(agentRow["reports_to_approval_notify_channel"])
     });
   }
   const people = refreshData["people"] ?? [];
@@ -4684,7 +4688,8 @@ function cacheAgentDeliveryMetadata(codeName, refreshData) {
       person_id: personId,
       display_name: p["display_name"] ?? "person",
       slack_user_id: contactPrefs["slack_user_id"] ?? null,
-      telegram_chat_id: contactPrefs["telegram_chat_id"] ?? null
+      telegram_chat_id: contactPrefs["telegram_chat_id"] ?? null,
+      preferred_channel: toPreferredChannel(contactPrefs["approval_notify_channel"])
     });
   }
   agentInfoForDelivery.set(codeName, {
@@ -5984,6 +5989,11 @@ function decideModeForward(evt, policy) {
   const label = extractAugmentedSlackLabel(evt);
   if (!label)
     return { forward: false, reason: "sender_policy" };
+  if (policy.registeredAgentSlackUserIds !== void 0) {
+    if (typeof evt.user !== "string" || !policy.registeredAgentSlackUserIds.has(evt.user)) {
+      return { forward: false, reason: "sender_policy" };
+    }
+  }
   if (policy.mode === "team_agents_only" || policy.mode === "manager_only" || policy.mode === "team_only") {
     if (!policy.teamId || label.teamId !== policy.teamId) {
       return { forward: false, reason: "sender_policy" };
@@ -6074,7 +6084,8 @@ function parsePeersEnv(raw, gateRaw) {
     return [];
   const gateMap = /* @__PURE__ */ new Map();
   let gateConfigInvalid = false;
-  if (gateRaw && gateRaw.trim().length > 0) {
+  const gatePresent = !!(gateRaw && gateRaw.trim().length > 0);
+  if (gatePresent) {
     try {
       const gateParsed = JSON.parse(gateRaw);
       if (!gateParsed || typeof gateParsed !== "object" || Array.isArray(gateParsed)) {
@@ -6117,6 +6128,8 @@ function parsePeersEnv(raw, gateRaw) {
         peer.gate_path = null;
       } else if (gateMap.has(e.bot_user_id)) {
         peer.gate_path = gateMap.get(e.bot_user_id) ?? null;
+      } else if (gatePresent) {
+        peer.gate_path = null;
       }
       out.push(peer);
     }
@@ -6247,23 +6260,27 @@ function buildSlackSenderPolicyFromEnv(env, ctx) {
     throw new Error("SLACK_INTERNAL_ONLY=true requires SLACK_HOME_TEAM_ID. The bot install must have a known team_id (run auth.test against the workspace and persist the result).");
   }
   const internalOnlyFields = internalOnly ? { internalOnly: true, homeTeamId } : {};
+  const slackPeersRaw = env["SLACK_PEERS"];
+  const registryFields = slackPeersRaw && slackPeersRaw.trim().length > 0 ? {
+    registeredAgentSlackUserIds: new Set(parsePeersEnv(slackPeersRaw, env["SLACK_PEERS_GATE"]).map((p) => p.bot_user_id))
+  } : {};
   const teamId = ctx.agentTeamId;
   if (raw === "all")
-    return { mode: "all", ...internalOnlyFields };
+    return { mode: "all", ...internalOnlyFields, ...registryFields };
   if (raw === "agents_only")
-    return { mode: "agents_only", ...internalOnlyFields };
+    return { mode: "agents_only", ...internalOnlyFields, ...registryFields };
   if (raw === "team_agents_only") {
     if (!teamId) {
       throw new Error("SLACK_SENDER_POLICY=team_agents_only requires AGT_TEAM_ID");
     }
-    return { mode: "team_agents_only", teamId, ...internalOnlyFields };
+    return { mode: "team_agents_only", teamId, ...internalOnlyFields, ...registryFields };
   }
   if (raw === "team_only") {
     if (!teamId) {
       throw new Error("SLACK_SENDER_POLICY=team_only requires AGT_TEAM_ID");
     }
     const teamPrincipalSlackUserIds = (env["SLACK_SENDER_POLICY_TEAM_PRINCIPAL_IDS"] ?? "").split(",").map((s) => s.trim()).filter((s) => s.length > 0);
-    return { mode: "team_only", teamId, teamPrincipalSlackUserIds, ...internalOnlyFields };
+    return { mode: "team_only", teamId, teamPrincipalSlackUserIds, ...internalOnlyFields, ...registryFields };
   }
   if (raw === "manager_only") {
     const principalSlackUserId = env["SLACK_SENDER_POLICY_PRINCIPAL_ID"];
@@ -6273,7 +6290,7 @@ function buildSlackSenderPolicyFromEnv(env, ctx) {
     if (!principalSlackUserId) {
       throw new Error("SLACK_SENDER_POLICY=manager_only requires SLACK_SENDER_POLICY_PRINCIPAL_ID. Set agent.reports_to_person with a slack_user_id in contact_preferences and re-run /host/refresh.");
     }
-    return { mode: "manager_only", teamId, principalSlackUserId, ...internalOnlyFields };
+    return { mode: "manager_only", teamId, principalSlackUserId, ...internalOnlyFields, ...registryFields };
   }
   throw new Error(`Invalid SLACK_SENDER_POLICY=${JSON.stringify(env["SLACK_SENDER_POLICY"])}`);
 }
@@ -8357,7 +8374,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.323" : "dev";
+var agtCliVersion = true ? "0.28.325" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -9253,7 +9270,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-5FKI4NCL.js");
+      const { collectDiagnostics } = await import("../persistent-session-BICDYHOC.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -9352,7 +9369,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-5FKI4NCL.js");
+      const { collectDiagnostics } = await import("../persistent-session-BICDYHOC.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -9501,7 +9518,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-R42UJ5ZR.js");
+      } = await import("../responsiveness-probe-FEAFPNUF.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -9533,7 +9550,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-R42UJ5ZR.js");
+        } = await import("../responsiveness-probe-FEAFPNUF.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -12631,7 +12648,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-5FKI4NCL.js");
+        const { collectDiagnostics } = await import("../persistent-session-BICDYHOC.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -12681,7 +12698,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-5FKI4NCL.js");
+      const { collectDiagnostics } = await import("../persistent-session-BICDYHOC.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -13179,7 +13196,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-JSOSBAH3.js");
+  } = await import("../claude-pair-runtime-BOFTEAQC.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));