@integrity-labs/agt-cli 0.28.328 → 0.28.329

package/dist/{claude-pair-runtime-LTZRJHKO.js → claude-pair-runtime-T7EFAWS5.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-5IV24YKT.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-ENQXJNBJ.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-LTZRJHKO.js.map
+//# sourceMappingURL=claude-pair-runtime-T7EFAWS5.js.map

package/dist/lib/manager-worker.js

@@ -43,7 +43,7 @@ import {
   requireHost,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-XRO2EOEM.js";
+} from "../chunk-AOSBSVNB.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -132,7 +132,7 @@ import {
   takeZombieDetection,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-GAWNDPGM.js";
+} from "../chunk-J2WYEOBH.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -8386,7 +8386,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.328" : "dev";
+var agtCliVersion = true ? "0.28.329" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -9282,7 +9282,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-5IV24YKT.js");
+      const { collectDiagnostics } = await import("../persistent-session-ENQXJNBJ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames)
@@ -9381,7 +9381,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-5IV24YKT.js");
+      const { collectDiagnostics } = await import("../persistent-session-ENQXJNBJ.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames) : void 0;
       let tailscaleHostname;
@@ -9530,7 +9530,7 @@ async function pollCycle() {
       const {
         collectResponsivenessProbes,
         getResponsivenessIntervalMs
-      } = await import("../responsiveness-probe-TTGD44MW.js");
+      } = await import("../responsiveness-probe-OJJESVVX.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -9562,7 +9562,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-TTGD44MW.js");
+        } = await import("../responsiveness-probe-OJJESVVX.js");
         const { getProjectDir: wedgeProjectDir } = await import("../claude-scheduler-FATCLHDM.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -12660,7 +12660,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-5IV24YKT.js");
+        const { collectDiagnostics } = await import("../persistent-session-ENQXJNBJ.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName])
@@ -12710,7 +12710,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-5IV24YKT.js");
+      const { collectDiagnostics } = await import("../persistent-session-ENQXJNBJ.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName])
@@ -13208,7 +13208,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-LTZRJHKO.js");
+  } = await import("../claude-pair-runtime-T7EFAWS5.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -14316,6 +14316,68 @@ function clearDirectChatPendingMarkersForSession(dir, sessionId, op = defaultCle
   return cleared;
 }
 
+// src/direct-chat-recovery-outbox.ts
+async function consumeDirectChatRecoveryFile(fullPath, filename, deps) {
+  if (filename.endsWith(".tmp") || filename.endsWith(".poison")) return "skipped";
+  let payload;
+  try {
+    payload = JSON.parse(deps.readFile(fullPath));
+  } catch (err) {
+    deps.log(`recovery outbox parse failed (${filename}): ${err.message}`);
+    try {
+      deps.renameFile(fullPath, `${fullPath}.parse-error.poison`);
+    } catch {
+    }
+    return "poison";
+  }
+  if (!payload || !payload.session_id || !payload.text) {
+    deps.log(`recovery outbox malformed (${filename}): missing session_id or text`);
+    if (payload && payload.marker_name) {
+      try {
+        deps.removeLedgerEntry(payload.marker_name);
+      } catch {
+      }
+    }
+    try {
+      deps.renameFile(fullPath, `${fullPath}.malformed.poison`);
+    } catch {
+    }
+    return "poison";
+  }
+  const content = deps.sanitize(payload.text);
+  const messageIds = deps.peekClaims(payload.session_id);
+  let result;
+  try {
+    result = await deps.deliver({
+      sessionId: payload.session_id,
+      content,
+      messageIds
+    });
+  } catch (err) {
+    result = { ok: false, error: err.message };
+  }
+  if (result.ok && !result.error) {
+    deps.clearClaims(payload.session_id, messageIds);
+    deps.clearMarkers(payload.session_id);
+    if (payload.marker_name) deps.removeLedgerEntry(payload.marker_name);
+    try {
+      deps.unlinkFile(fullPath);
+    } catch {
+    }
+    deps.log(`ghost-reply recovery sent (session=${payload.session_id})`);
+    return "delivered";
+  }
+  if (payload.marker_name) deps.removeLedgerEntry(payload.marker_name);
+  try {
+    deps.unlinkFile(fullPath);
+  } catch {
+  }
+  deps.log(
+    `ghost-reply recovery send failed (session=${payload.session_id}): ${result.error ?? "unknown"} - re-armed for retry`
+  );
+  return "failed";
+}
+
 // src/direct-chat-poll-guard.ts
 function evaluatePollGuard(state, nowMs, stuckMs) {
   if (!state.inFlight) return { run: true, stuck: false };
@@ -14414,6 +14476,7 @@ import {
   mkdirSync as mkdirSync4,
   writeFileSync as writeFileSync4,
   readFileSync as readFileSync5,
+  readdirSync as readdirSync2,
   existsSync as existsSync5,
   renameSync as renameSync4,
   unlinkSync as unlinkSync3
@@ -14897,6 +14960,8 @@ var INBOUND_ATTACHMENTS_DIR = resolveInboundAttachmentsDir({
 var AGT_AGENT_CODE_NAME = process.env.AGT_AGENT_CODE_NAME;
 var PROGRESS_HEARTBEAT_PATH = AGT_AGENT_CODE_NAME ? join7(homedir2(), ".augmented", AGT_AGENT_CODE_NAME, "channel-progress-heartbeat.json") : null;
 var DIRECT_CHAT_PENDING_INBOUND_DIR = AGT_AGENT_CODE_NAME ? join7(homedir2(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-pending-inbound") : null;
+var DIRECT_CHAT_RECOVERY_OUTBOX_DIR = AGT_AGENT_CODE_NAME ? join7(homedir2(), ".augmented", AGT_AGENT_CODE_NAME, "direct-chat-recovery-outbox") : null;
+var DIRECT_CHAT_RECOVERY_LEDGER_DIR = AGT_AGENT_CODE_NAME ? join7(homedir2(), ".augmented", AGT_AGENT_CODE_NAME, ".agt-direct-chat-recovery-ledger") : null;
 var progressReceivedAt = /* @__PURE__ */ new Map();
 var directChatProgressState = { tracked: null };
 var directChatProgressTickRunning = false;
@@ -15566,6 +15631,106 @@ if (PROGRESS_HEARTBEAT_PATH) {
   }, PROGRESS_TICK_MS);
   progressTickTimer.unref?.();
 }
+function sanitizeRecoveryText(text) {
+  const preamble = stripRepostPreambleWithMeta(text);
+  if (preamble.stripped) emitPreambleStripTelemetry("direct_chat", preamble.shape);
+  const guarded = redactToolCallMarkup(preamble.text);
+  if (guarded.redacted) emitToolCallMarkupRedactionTelemetry("direct_chat");
+  const apiErr = rewriteTransientApiError(guarded.text);
+  if (apiErr.rewritten) emitTransientApiErrorTelemetry("direct_chat", apiErr.match, apiErr.original);
+  return apiErr.text;
+}
+function directChatRecoveryDeps() {
+  return {
+    readFile: (p) => readFileSync5(p, "utf-8"),
+    renameFile: (from, to) => renameSync4(from, to),
+    unlinkFile: (p) => {
+      if (existsSync5(p)) unlinkSync3(p);
+    },
+    sanitize: sanitizeRecoveryText,
+    peekClaims: (sessionId) => claimTracker.peek(sessionId),
+    clearClaims: (sessionId, ids) => claimTracker.clear(sessionId, ids),
+    clearMarkers: (sessionId) => clearDirectChatPendingMarkersForSession(DIRECT_CHAT_PENDING_INBOUND_DIR, sessionId),
+    removeLedgerEntry: (markerName) => {
+      if (!DIRECT_CHAT_RECOVERY_LEDGER_DIR) return;
+      if (markerName.includes("/") || markerName.includes("\\") || markerName.includes("..")) return;
+      try {
+        const p = join7(DIRECT_CHAT_RECOVERY_LEDGER_DIR, markerName);
+        if (existsSync5(p)) unlinkSync3(p);
+      } catch {
+      }
+    },
+    deliver: async ({ sessionId, content, messageIds }) => {
+      try {
+        const res = await apiPost("/host/direct-chat/reply", {
+          agent_id: AGT_AGENT_ID,
+          session_id: sessionId,
+          content,
+          message_ids: messageIds
+        });
+        const data = await res.json().catch(() => ({}));
+        if (!res.ok || data.error) return { ok: false, error: data.error ?? `HTTP ${res.status}` };
+        return { ok: true };
+      } catch (err) {
+        return { ok: false, error: err.message };
+      }
+    },
+    log: (line) => process.stderr.write(`direct-chat-channel(${AGT_AGENT_CODE_NAME}): ${line}
+`)
+  };
+}
+var directChatRecoveryInFlight = /* @__PURE__ */ new Set();
+async function processDirectChatRecoveryOutboxFile(filename) {
+  if (!DIRECT_CHAT_RECOVERY_OUTBOX_DIR) return;
+  if (directChatRecoveryInFlight.has(filename)) return;
+  const enabled = resolveHostBooleanFlag({
+    key: "direct-chat-recovery",
+    envVar: "AGT_DIRECT_CHAT_RECOVERY_ENABLED",
+    defaultValue: false
+  });
+  if (!enabled) return;
+  directChatRecoveryInFlight.add(filename);
+  try {
+    const fullPath = join7(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, filename);
+    await consumeDirectChatRecoveryFile(fullPath, filename, directChatRecoveryDeps());
+  } catch (err) {
+    process.stderr.write(
+      `direct-chat-channel(${AGT_AGENT_CODE_NAME}): recovery consume failed (${filename}): ${err.message}
+`
+    );
+  } finally {
+    directChatRecoveryInFlight.delete(filename);
+  }
+}
+var directChatRecoveryWatcher = null;
+if (DIRECT_CHAT_RECOVERY_OUTBOX_DIR) {
+  try {
+    mkdirSync4(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, { recursive: true, mode: 448 });
+  } catch {
+  }
+  try {
+    for (const f of readdirSync2(DIRECT_CHAT_RECOVERY_OUTBOX_DIR)) {
+      if (f.endsWith(".json")) void processDirectChatRecoveryOutboxFile(f);
+    }
+  } catch {
+  }
+  try {
+    directChatRecoveryWatcher = watch(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, (_event, filename) => {
+      if (!filename) return;
+      const name = filename.toString();
+      if (!name.endsWith(".json")) return;
+      if (existsSync5(join7(DIRECT_CHAT_RECOVERY_OUTBOX_DIR, name))) {
+        void processDirectChatRecoveryOutboxFile(name);
+      }
+    });
+    directChatRecoveryWatcher.unref?.();
+  } catch (err) {
+    process.stderr.write(
+      `direct-chat-channel(${AGT_AGENT_CODE_NAME}): recovery watcher failed (${err.message})
+`
+    );
+  }
+}
 var isShuttingDown = false;
 function shutdown(reason) {
   if (isShuttingDown) return;

package/dist/mcp/origami.js

@@ -40108,6 +40108,16 @@ var FLAG_REGISTRY = [
     // canary is a high-blast-radius change worth an explicit confirm.
     sensitive: true
   },
+  {
+    key: "direct-chat-recovery",
+    description: "Always-on direct-chat ghost-reply recovery (ENG-7814, ENG-6722 slice E). direct-chat has no recovery-outbox by default: block-turn-end (channel-block-turn-end) only makes the MODEL re-send and is dark/canary, so a direct-chat turn answered as plain text with no direct_chat.reply is lost. When ON, the ghost-reply Stop hook, for an owed and unanswered direct-chat inbound where block-turn-end did not fire, writes the last assistant text to a direct-chat-recovery-outbox that the direct-chat MCP consumes and POSTs to /host/direct-chat/reply for the session, re-sending the reply the agent produced but never delivered. session_id is unambiguous (one session per marker), so there is no cross-thread mis-correlation risk (why direct-chat can safely re-send where Slack needs the ENG-7806 ledger). Confirm-before-clear: the pending marker is cleared only after the POST confirms; a per-marker recovery ledger caps one in-flight recovery per inbound and re-arms on failure. Independent of channel-block-turn-end (either can be on). The env var AGT_DIRECT_CHAT_RECOVERY_ENABLED is the operator/host override the bash hook reads directly (materialized by the manager) and the MCP resolves via the flags cache. Boolean gate; ships dark, flip per host/org to canary before fleet rollout.",
+    flagType: "boolean",
+    defaultValue: false,
+    envVar: "AGT_DIRECT_CHAT_RECOVERY_ENABLED",
+    // Re-sends a reply on the agent behalf (a customer-visible send); flipping it
+    // beyond a canary is a blast-radius change worth an explicit confirm.
+    sensitive: true
+  },
   {
     key: "ghost-reply-intent-classifier",
     description: `Intentional-non-reply suppression on the ghost-reply RECOVERY path (ENG-7096, ENG-7478). The recovery-outbox consumer in the channel MCP only ever fires for turns where the agent ended with text but did NOT call the matching reply tool for that conversation - a set that includes DELIBERATE non-replies and internal third-person self-status narration ("Filed CS-1443... standing by"). A cheap model (the conversation-eval backend, AGT_CONV_EVAL_*) classifies the recovered text as a real message for the user (deliver) or internal not-replying / self-status narration (suppress), keyed on grammatical person, biased to DELIVER and fail-open (a classifier outage degrades to today's behaviour, never a dropped real reply). off = classifier never runs, every recovered reply is posted exactly as today (ships dark, == the old boolean-false). shadow = classify + log the would-suppress verdict for operator adjudication but STILL DELIVER (measure the suppression rate before acting). enforce = actually suppress on a clean high-confidence suppress verdict. The channel server reads this live from the heartbeat flags-cache (or the env override); enforce is a deliberate, audited per-org flip after a shadow soak.`,

package/dist/{persistent-session-5IV24YKT.js → persistent-session-ENQXJNBJ.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-GAWNDPGM.js";
+} from "./chunk-J2WYEOBH.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-5IV24YKT.js.map
+//# sourceMappingURL=persistent-session-ENQXJNBJ.js.map

package/dist/{responsiveness-probe-TTGD44MW.js → responsiveness-probe-OJJESVVX.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-GAWNDPGM.js";
+} from "./chunk-J2WYEOBH.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -427,4 +427,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-TTGD44MW.js.map
+//# sourceMappingURL=responsiveness-probe-OJJESVVX.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.328",
+  "version": "0.28.329",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {