@integrity-labs/agt-cli 0.28.324 → 0.28.325

package/dist/mcp/slack-channel.js

@@ -14549,6 +14549,11 @@ function decideModeForward(evt, policy) {
   const label = extractAugmentedSlackLabel(evt);
   if (!label)
     return { forward: false, reason: "sender_policy" };
+  if (policy.registeredAgentSlackUserIds !== void 0) {
+    if (typeof evt.user !== "string" || !policy.registeredAgentSlackUserIds.has(evt.user)) {
+      return { forward: false, reason: "sender_policy" };
+    }
+  }
   if (policy.mode === "team_agents_only" || policy.mode === "manager_only" || policy.mode === "team_only") {
     if (!policy.teamId || label.teamId !== policy.teamId) {
       return { forward: false, reason: "sender_policy" };
@@ -17726,7 +17731,8 @@ function parsePeersEnv(raw, gateRaw) {
     return [];
   const gateMap = /* @__PURE__ */ new Map();
   let gateConfigInvalid = false;
-  if (gateRaw && gateRaw.trim().length > 0) {
+  const gatePresent = !!(gateRaw && gateRaw.trim().length > 0);
+  if (gatePresent) {
     try {
       const gateParsed = JSON.parse(gateRaw);
       if (!gateParsed || typeof gateParsed !== "object" || Array.isArray(gateParsed)) {
@@ -17769,6 +17775,8 @@ function parsePeersEnv(raw, gateRaw) {
         peer.gate_path = null;
       } else if (gateMap.has(e.bot_user_id)) {
         peer.gate_path = gateMap.get(e.bot_user_id) ?? null;
+      } else if (gatePresent) {
+        peer.gate_path = null;
       }
       out.push(peer);
     }
@@ -18343,13 +18351,21 @@ var SLACK_SENDER_POLICY = (() => {
     );
   }
   const internalOnlyFields = internalOnly ? { internalOnly: true, homeTeamId } : {};
-  if (raw === "all") return { mode: "all", ...internalOnlyFields };
-  if (raw === "agents_only") return { mode: "agents_only", ...internalOnlyFields };
+  const slackPeersRaw = process.env.SLACK_PEERS;
+  const registryFields = slackPeersRaw && slackPeersRaw.trim().length > 0 ? {
+    registeredAgentSlackUserIds: new Set(
+      parsePeersEnv(slackPeersRaw, process.env.SLACK_PEERS_GATE).map(
+        (p) => p.bot_user_id
+      )
+    )
+  } : {};
+  if (raw === "all") return { mode: "all", ...internalOnlyFields, ...registryFields };
+  if (raw === "agents_only") return { mode: "agents_only", ...internalOnlyFields, ...registryFields };
   if (raw === "team_agents_only") {
     if (!AGT_TEAM_ID) {
       throw new Error("SLACK_SENDER_POLICY=team_agents_only requires AGT_TEAM_ID");
     }
-    return { mode: "team_agents_only", teamId: AGT_TEAM_ID, ...internalOnlyFields };
+    return { mode: "team_agents_only", teamId: AGT_TEAM_ID, ...internalOnlyFields, ...registryFields };
   }
   if (raw === "team_only") {
     if (!AGT_TEAM_ID) {
@@ -18361,7 +18377,8 @@ var SLACK_SENDER_POLICY = (() => {
       mode: "team_only",
       teamId: AGT_TEAM_ID,
       teamPrincipalSlackUserIds,
-      ...internalOnlyFields
+      ...internalOnlyFields,
+      ...registryFields
     };
   }
   if (raw === "manager_only") {
@@ -18374,7 +18391,7 @@ var SLACK_SENDER_POLICY = (() => {
         "SLACK_SENDER_POLICY=manager_only requires SLACK_SENDER_POLICY_PRINCIPAL_ID. Set agent.reports_to_person with a slack_user_id in contact_preferences and re-run /host/refresh."
       );
     }
-    return { mode: "manager_only", teamId: AGT_TEAM_ID, principalSlackUserId, ...internalOnlyFields };
+    return { mode: "manager_only", teamId: AGT_TEAM_ID, principalSlackUserId, ...internalOnlyFields, ...registryFields };
   }
   throw new Error(`Invalid SLACK_SENDER_POLICY=${JSON.stringify(process.env.SLACK_SENDER_POLICY)}`);
 })();

package/dist/mcp/teams-channel.js

@@ -14796,7 +14796,13 @@ function decideTeamsActivityForward(input) {
   }
   if (allowedTeamIds.size > 0) {
     const teamId = activity.channelData?.team?.id;
-    if (teamId && !allowedTeamIds.has(teamId)) {
+    const convType = activity.conversation?.conversationType;
+    const isDirect = convType === "personal" || convType === "groupChat";
+    if (isDirect) {
+      if (teamId && !allowedTeamIds.has(teamId)) {
+        return { forward: false, reason: "team_not_allowed" };
+      }
+    } else if (!teamId || !allowedTeamIds.has(teamId)) {
       return { forward: false, reason: "team_not_allowed" };
     }
   }

package/dist/mcp/telegram-channel.js

@@ -14922,7 +14922,8 @@ function parsePeersEnv(raw, gateRaw) {
     return [];
   const gateMap = /* @__PURE__ */ new Map();
   let gateConfigInvalid = false;
-  if (gateRaw && gateRaw.trim().length > 0) {
+  const gatePresent = !!(gateRaw && gateRaw.trim().length > 0);
+  if (gatePresent) {
     try {
       const gateParsed = JSON.parse(gateRaw);
       if (!gateParsed || typeof gateParsed !== "object" || Array.isArray(gateParsed)) {
@@ -14963,6 +14964,8 @@ function parsePeersEnv(raw, gateRaw) {
         const key2 = String(e.bot_id);
         if (gateMap.has(key2)) {
           peer.gate_path = gateMap.get(key2) ?? null;
+        } else if (gatePresent) {
+          peer.gate_path = null;
         }
       }
       out.push(peer);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.324",
+  "version": "0.28.325",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {