@integrity-labs/agt-cli 0.28.324 → 0.28.326

package/dist/mcp/direct-chat-channel.js

@@ -14693,6 +14693,7 @@ function createKanbanCardActiveClient(args) {
   const agentId = args.agentId;
   const apiKey = args.agtApiKey;
   const cache = /* @__PURE__ */ new Map();
+  const threadCache = /* @__PURE__ */ new Map();
   let cachedToken = null;
   let cachedTokenExpiresAt = 0;
   async function getToken() {
@@ -14737,6 +14738,26 @@ function createKanbanCardActiveClient(args) {
     const data = await resp.json();
     return data.active === true;
   }
+  async function queryThreadOnce(sourceIntegration, channel) {
+    const token = await getToken();
+    const qs = new URLSearchParams({ agent_id: agentId, source_integration: sourceIntegration, channel });
+    return fetchImpl(`${base}/host/kanban/active-source-thread?${qs.toString()}`, {
+      method: "GET",
+      headers: { Authorization: `Bearer ${token}` },
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS2)
+    });
+  }
+  async function queryThread(sourceIntegration, channel) {
+    let resp = await queryThreadOnce(sourceIntegration, channel);
+    if (resp.status === 401) {
+      cachedToken = null;
+      cachedTokenExpiresAt = 0;
+      resp = await queryThreadOnce(sourceIntegration, channel);
+    }
+    if (!resp.ok) return void 0;
+    const data = await resp.json();
+    return data.thread_ts ?? void 0;
+  }
   return {
     async isCardActive(sourceIntegration, sourceExternalId) {
       const key = `${sourceIntegration}:${sourceExternalId}`;
@@ -14751,6 +14772,20 @@ function createKanbanCardActiveClient(args) {
         log(`kanban-card-active: query threw key=${key}: ${err.message}`);
         return false;
       }
+    },
+    async getActiveCardSourceThread(sourceIntegration, channel) {
+      const key = `thread:${sourceIntegration}:${channel}`;
+      const t = now();
+      const hit = threadCache.get(key);
+      if (hit && t < hit.expiresAt) return hit.threadTs;
+      try {
+        const threadTs = await queryThread(sourceIntegration, channel);
+        threadCache.set(key, { threadTs, expiresAt: t + (threadTs ? positiveTtlMs : negativeTtlMs) });
+        return threadTs;
+      } catch (err) {
+        log(`kanban-card-active: thread query threw key=${key}: ${err.message}`);
+        return void 0;
+      }
     }
   };
 }

package/dist/mcp/slack-channel.js

@@ -14549,6 +14549,11 @@ function decideModeForward(evt, policy) {
   const label = extractAugmentedSlackLabel(evt);
   if (!label)
     return { forward: false, reason: "sender_policy" };
+  if (policy.registeredAgentSlackUserIds !== void 0) {
+    if (typeof evt.user !== "string" || !policy.registeredAgentSlackUserIds.has(evt.user)) {
+      return { forward: false, reason: "sender_policy" };
+    }
+  }
   if (policy.mode === "team_agents_only" || policy.mode === "manager_only" || policy.mode === "team_only") {
     if (!policy.teamId || label.teamId !== policy.teamId) {
       return { forward: false, reason: "sender_policy" };
@@ -16279,6 +16284,7 @@ function createKanbanCardActiveClient(args) {
   const agentId = args.agentId;
   const apiKey = args.agtApiKey;
   const cache = /* @__PURE__ */ new Map();
+  const threadCache = /* @__PURE__ */ new Map();
   let cachedToken = null;
   let cachedTokenExpiresAt = 0;
   async function getToken() {
@@ -16323,6 +16329,26 @@ function createKanbanCardActiveClient(args) {
     const data = await resp.json();
     return data.active === true;
   }
+  async function queryThreadOnce(sourceIntegration, channel) {
+    const token = await getToken();
+    const qs = new URLSearchParams({ agent_id: agentId, source_integration: sourceIntegration, channel });
+    return fetchImpl(`${base}/host/kanban/active-source-thread?${qs.toString()}`, {
+      method: "GET",
+      headers: { Authorization: `Bearer ${token}` },
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+    });
+  }
+  async function queryThread(sourceIntegration, channel) {
+    let resp = await queryThreadOnce(sourceIntegration, channel);
+    if (resp.status === 401) {
+      cachedToken = null;
+      cachedTokenExpiresAt = 0;
+      resp = await queryThreadOnce(sourceIntegration, channel);
+    }
+    if (!resp.ok) return void 0;
+    const data = await resp.json();
+    return data.thread_ts ?? void 0;
+  }
   return {
     async isCardActive(sourceIntegration, sourceExternalId) {
       const key2 = `${sourceIntegration}:${sourceExternalId}`;
@@ -16337,6 +16363,20 @@ function createKanbanCardActiveClient(args) {
         log(`kanban-card-active: query threw key=${key2}: ${err.message}`);
         return false;
       }
+    },
+    async getActiveCardSourceThread(sourceIntegration, channel) {
+      const key2 = `thread:${sourceIntegration}:${channel}`;
+      const t = now();
+      const hit = threadCache.get(key2);
+      if (hit && t < hit.expiresAt) return hit.threadTs;
+      try {
+        const threadTs = await queryThread(sourceIntegration, channel);
+        threadCache.set(key2, { threadTs, expiresAt: t + (threadTs ? positiveTtlMs : negativeTtlMs) });
+        return threadTs;
+      } catch (err) {
+        log(`kanban-card-active: thread query threw key=${key2}: ${err.message}`);
+        return void 0;
+      }
     }
   };
 }
@@ -16344,7 +16384,9 @@ function createKanbanCardActiveClient(args) {
 // src/slack-reply-threading.ts
 function resolveReplyThreadTs(input) {
   if (input.threadTs) return input.threadTs;
-  return input.messageTs || void 0;
+  if (input.messageTs) return input.messageTs;
+  if (input.threadTs === null) return void 0;
+  return input.activeCardThreadTs || void 0;
 }
 
 // src/restart-confirm.ts
@@ -17726,7 +17768,8 @@ function parsePeersEnv(raw, gateRaw) {
     return [];
   const gateMap = /* @__PURE__ */ new Map();
   let gateConfigInvalid = false;
-  if (gateRaw && gateRaw.trim().length > 0) {
+  const gatePresent = !!(gateRaw && gateRaw.trim().length > 0);
+  if (gatePresent) {
     try {
       const gateParsed = JSON.parse(gateRaw);
       if (!gateParsed || typeof gateParsed !== "object" || Array.isArray(gateParsed)) {
@@ -17769,6 +17812,8 @@ function parsePeersEnv(raw, gateRaw) {
         peer.gate_path = null;
       } else if (gateMap.has(e.bot_user_id)) {
         peer.gate_path = gateMap.get(e.bot_user_id) ?? null;
+      } else if (gatePresent) {
+        peer.gate_path = null;
       }
       out.push(peer);
     }
@@ -18343,13 +18388,21 @@ var SLACK_SENDER_POLICY = (() => {
     );
   }
   const internalOnlyFields = internalOnly ? { internalOnly: true, homeTeamId } : {};
-  if (raw === "all") return { mode: "all", ...internalOnlyFields };
-  if (raw === "agents_only") return { mode: "agents_only", ...internalOnlyFields };
+  const slackPeersRaw = process.env.SLACK_PEERS;
+  const registryFields = slackPeersRaw && slackPeersRaw.trim().length > 0 ? {
+    registeredAgentSlackUserIds: new Set(
+      parsePeersEnv(slackPeersRaw, process.env.SLACK_PEERS_GATE).map(
+        (p) => p.bot_user_id
+      )
+    )
+  } : {};
+  if (raw === "all") return { mode: "all", ...internalOnlyFields, ...registryFields };
+  if (raw === "agents_only") return { mode: "agents_only", ...internalOnlyFields, ...registryFields };
   if (raw === "team_agents_only") {
     if (!AGT_TEAM_ID) {
       throw new Error("SLACK_SENDER_POLICY=team_agents_only requires AGT_TEAM_ID");
     }
-    return { mode: "team_agents_only", teamId: AGT_TEAM_ID, ...internalOnlyFields };
+    return { mode: "team_agents_only", teamId: AGT_TEAM_ID, ...internalOnlyFields, ...registryFields };
   }
   if (raw === "team_only") {
     if (!AGT_TEAM_ID) {
@@ -18361,7 +18414,8 @@ var SLACK_SENDER_POLICY = (() => {
       mode: "team_only",
       teamId: AGT_TEAM_ID,
       teamPrincipalSlackUserIds,
-      ...internalOnlyFields
+      ...internalOnlyFields,
+      ...registryFields
     };
   }
   if (raw === "manager_only") {
@@ -18374,7 +18428,7 @@ var SLACK_SENDER_POLICY = (() => {
         "SLACK_SENDER_POLICY=manager_only requires SLACK_SENDER_POLICY_PRINCIPAL_ID. Set agent.reports_to_person with a slack_user_id in contact_preferences and re-run /host/refresh."
       );
     }
-    return { mode: "manager_only", teamId: AGT_TEAM_ID, principalSlackUserId, ...internalOnlyFields };
+    return { mode: "manager_only", teamId: AGT_TEAM_ID, principalSlackUserId, ...internalOnlyFields, ...registryFields };
   }
   throw new Error(`Invalid SLACK_SENDER_POLICY=${JSON.stringify(process.env.SLACK_SENDER_POLICY)}`);
 })();
@@ -21145,10 +21199,12 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
       };
     }
     const bindingFeedback = bindingMode === "warn" ? binding.agentFeedback : void 0;
+    const activeCardThreadTs = !scheduledDest && !enforceBound && !channelGuard.corrected && !thread_ts && !message_ts && kanbanCardActiveClient && typeof channel === "string" && channel ? await kanbanCardActiveClient.getActiveCardSourceThread("slack", channel) : void 0;
     const effectiveThreadTs = scheduledDest ? scheduledDest.thread_ts : enforceBound ? binding.threadTs : channelGuard.corrected ? channelGuard.threadTs : resolveReplyThreadTs({
       channel,
       threadTs: thread_ts,
-      messageTs: message_ts
+      messageTs: message_ts,
+      activeCardThreadTs
     });
     if (effectiveChannel) {
       recordReplyTargetClassification(
@@ -21826,10 +21882,12 @@ async function handleSendStructured(args) {
   if (typeof text !== "string" || !text) {
     return errResult("text is required (used as fallback for push notifications and unfurls)");
   }
+  const activeCardThreadTs = !thread_ts && !message_ts && kanbanCardActiveClient ? await kanbanCardActiveClient.getActiveCardSourceThread("slack", channel) : void 0;
   const effectiveThreadTs = resolveReplyThreadTs({
     channel,
     threadTs: thread_ts,
-    messageTs: message_ts
+    messageTs: message_ts,
+    activeCardThreadTs
   });
   recordReplyTargetClassification(
     SLACK_AGENT_DIR,

package/dist/mcp/teams-channel.js

@@ -14796,7 +14796,13 @@ function decideTeamsActivityForward(input) {
   }
   if (allowedTeamIds.size > 0) {
     const teamId = activity.channelData?.team?.id;
-    if (teamId && !allowedTeamIds.has(teamId)) {
+    const convType = activity.conversation?.conversationType;
+    const isDirect = convType === "personal" || convType === "groupChat";
+    if (isDirect) {
+      if (teamId && !allowedTeamIds.has(teamId)) {
+        return { forward: false, reason: "team_not_allowed" };
+      }
+    } else if (!teamId || !allowedTeamIds.has(teamId)) {
       return { forward: false, reason: "team_not_allowed" };
     }
   }

package/dist/mcp/telegram-channel.js

@@ -14922,7 +14922,8 @@ function parsePeersEnv(raw, gateRaw) {
     return [];
   const gateMap = /* @__PURE__ */ new Map();
   let gateConfigInvalid = false;
-  if (gateRaw && gateRaw.trim().length > 0) {
+  const gatePresent = !!(gateRaw && gateRaw.trim().length > 0);
+  if (gatePresent) {
     try {
       const gateParsed = JSON.parse(gateRaw);
       if (!gateParsed || typeof gateParsed !== "object" || Array.isArray(gateParsed)) {
@@ -14963,6 +14964,8 @@ function parsePeersEnv(raw, gateRaw) {
         const key2 = String(e.bot_id);
         if (gateMap.has(key2)) {
           peer.gate_path = gateMap.get(key2) ?? null;
+        } else if (gatePresent) {
+          peer.gate_path = null;
         }
       }
       out.push(peer);
@@ -17106,6 +17109,7 @@ function createKanbanCardActiveClient(args) {
   const agentId = args.agentId;
   const apiKey = args.agtApiKey;
   const cache = /* @__PURE__ */ new Map();
+  const threadCache = /* @__PURE__ */ new Map();
   let cachedToken = null;
   let cachedTokenExpiresAt = 0;
   async function getToken() {
@@ -17150,6 +17154,26 @@ function createKanbanCardActiveClient(args) {
     const data = await resp.json();
     return data.active === true;
   }
+  async function queryThreadOnce(sourceIntegration, channel) {
+    const token = await getToken();
+    const qs = new URLSearchParams({ agent_id: agentId, source_integration: sourceIntegration, channel });
+    return fetchImpl(`${base}/host/kanban/active-source-thread?${qs.toString()}`, {
+      method: "GET",
+      headers: { Authorization: `Bearer ${token}` },
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS6)
+    });
+  }
+  async function queryThread(sourceIntegration, channel) {
+    let resp = await queryThreadOnce(sourceIntegration, channel);
+    if (resp.status === 401) {
+      cachedToken = null;
+      cachedTokenExpiresAt = 0;
+      resp = await queryThreadOnce(sourceIntegration, channel);
+    }
+    if (!resp.ok) return void 0;
+    const data = await resp.json();
+    return data.thread_ts ?? void 0;
+  }
   return {
     async isCardActive(sourceIntegration, sourceExternalId) {
       const key2 = `${sourceIntegration}:${sourceExternalId}`;
@@ -17164,6 +17188,20 @@ function createKanbanCardActiveClient(args) {
         log(`kanban-card-active: query threw key=${key2}: ${err.message}`);
         return false;
       }
+    },
+    async getActiveCardSourceThread(sourceIntegration, channel) {
+      const key2 = `thread:${sourceIntegration}:${channel}`;
+      const t = now();
+      const hit = threadCache.get(key2);
+      if (hit && t < hit.expiresAt) return hit.threadTs;
+      try {
+        const threadTs = await queryThread(sourceIntegration, channel);
+        threadCache.set(key2, { threadTs, expiresAt: t + (threadTs ? positiveTtlMs : negativeTtlMs) });
+        return threadTs;
+      } catch (err) {
+        log(`kanban-card-active: thread query threw key=${key2}: ${err.message}`);
+        return void 0;
+      }
     }
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.324",
+  "version": "0.28.326",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {