@integrity-labs/agt-cli 0.28.330 → 0.28.332

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-CDRVXSQ3.js";
+} from "../chunk-YNHMQ4CW.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4827,7 +4827,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.330" : "dev";
+var cliVersion = true ? "0.28.332" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5931,7 +5931,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.330" : "dev";
+var cliVersion2 = true ? "0.28.332" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-CDRVXSQ3.js → chunk-YNHMQ4CW.js}

@@ -2712,9 +2712,13 @@ function provisionStopHook(codeName) {
     "# observed mid-write.",
     "atomic_write_payload() {",
     '  local out_dir="$1" final="$2" jq_expr="$3"; shift 3',
-    '  mkdir -p "$out_dir"',
+    '  if ! mkdir -p "$out_dir" 2>/dev/null; then return 1; fi',
     '  local tmp="$out_dir/.${final##*/}.tmp"',
-    '  jq -n "$jq_expr" "$@" > "$tmp"',
+    "  # ENG-7805 (CodeRabbit): fail (non-zero) on a jq/write fault instead of",
+    "  # mv-ing a half-written tmp - the script has no set -e, so an unguarded jq",
+    "  # error would otherwise ship an empty payload AND let callers believe the",
+    "  # write succeeded (leaving a recovery-ledger entry orphaned until GC).",
+    '  if ! jq -n "$jq_expr" "$@" > "$tmp" 2>/dev/null; then rm -f "$tmp" 2>/dev/null || true; return 1; fi',
     '  chmod 600 "$tmp" 2>/dev/null || true',
     '  mv -f "$tmp" "$out_dir/$final"',
     "}",
@@ -2768,19 +2772,47 @@ function provisionStopHook(codeName) {
     "  # it moved on and TEXT is not a reliably-correlated ghost of THIS inbound \u2014",
     "  # recovering it would post mis-correlated text. Stay silent: a silent gap the",
     "  # operator re-pings beats wrong content that poisons trust.",
-    "  local replied_other",
-    `  replied_other=$(jq -s --arg cid "$chat_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("telegram[._](reply|send_message)$")) and (((.input.chat_id // "")|tostring) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
-    '  if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
+    "  # ENG-7806 (fm1): delivery-ledger read replaces the transcript scan (conv_key",
+    "  # = chat_id, Telegram's conversation grain). no_ledger falls back to the scan.",
+    '  local _tg_m="${TG_MARKER_DIR}/$(safe_id "$chat_id")__$(safe_id "$msg_id").json" _tg_iid="" _tg_recv=""',
+    `  if [ -f "$_tg_m" ]; then _tg_iid=$(jq -r '.inbound_id // ""' "$_tg_m" 2>/dev/null || echo ""); _tg_recv=$(jq -r '.received_at // ""' "$_tg_m" 2>/dev/null || echo ""); fi`,
+    '  case "$(delivery_ledger_verdict "$_tg_iid" "$chat_id" "$_tg_recv")" in',
+    '    self) log_ghost "telegram skip=already_delivered chat=$(safe_id "$chat_id")"; return ;;',
+    '    moved_on) log_ghost "telegram skip=moved_on_after_tag_ledger chat=$(safe_id "$chat_id")"; return ;;',
+    "    no_ledger)",
+    "      local replied_other",
+    `      replied_other=$(jq -s --arg cid "$chat_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("telegram[._](reply|send_message)$")) and (((.input.chat_id // "")|tostring) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
+    '      if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
+    "      ;;",
+    "  esac",
     "  local marker_name",
     '  marker_name="$(safe_id "$chat_id")__$(safe_id "$msg_id").json"',
     '  local marker_path="${TG_MARKER_DIR}/${marker_name}"',
     '  if [ ! -f "$marker_path" ]; then log_ghost "telegram skip=no_pending_marker chat=$(safe_id "$chat_id")"; return; fi',
+    "  # ENG-7805 (fm2): confirm-before-clear. Cap re-fire with a per-marker ledger and",
+    "  # LEAVE the marker for the consumer to clear on confirmed send. Ledger-first",
+    "  # fail-safe (same as recover_directchat_for / block-turn-end): if the ledger",
+    "  # write fails, log a skip and write no payload rather than re-fire every Stop.",
+    '  if ! mkdir -p "$TG_RECOVERY_LEDGER_DIR" 2>/dev/null; then log_ghost "telegram skip=recovery_ledger_unwritable chat=$(safe_id "$chat_id")"; return; fi',
+    "  # ENG-7805 (CodeRabbit): atomic acquire - noclobber create fails if the entry",
+    "  # already exists (recovery in flight) OR the write faults; the follow-up [ -f ]",
+    '  # disambiguates. Closes the "[ -f ] then : >" TOCTOU where two concurrent Stops',
+    "  # both observe no entry and both enqueue a duplicate payload.",
+    '  if ! ( set -o noclobber; : > "${TG_RECOVERY_LEDGER_DIR}/${marker_name}" ) 2>/dev/null; then',
+    '    if [ -f "${TG_RECOVERY_LEDGER_DIR}/${marker_name}" ]; then log_ghost "telegram skip=recovery_in_flight chat=$(safe_id "$chat_id")"; else log_ghost "telegram skip=recovery_ledger_unwritable chat=$(safe_id "$chat_id")"; fi',
+    "    return",
+    "  fi",
     "  local TS",
     "  TS=$(date -u +%Y%m%dT%H%M%S%N)",
-    '  atomic_write_payload "${AGENT_DIR}/telegram-recovery-outbox" "${TS}.json" \\',
-    `    '{chat_id:$c, message_id:$m, text:$t, source:"ghost-reply-recovery"}' \\`,
-    '    --arg c "$chat_id" --arg m "$msg_id" --arg t "$TEXT"',
-    '  rm -f "$marker_path" 2>/dev/null || true',
+    '  if ! atomic_write_payload "${AGENT_DIR}/telegram-recovery-outbox" "${TS}.json" \\',
+    `    '{chat_id:$c, message_id:$m, text:$t, marker_name:$mn, source:"ghost-reply-recovery"}' \\`,
+    '    --arg c "$chat_id" --arg m "$msg_id" --arg t "$TEXT" --arg mn "$marker_name"; then',
+    "    # ENG-7805 (CodeRabbit): the write faulted after the ledger was acquired -",
+    "    # drop the ledger entry so replay + the next Stop are not suppressed until GC.",
+    '    rm -f "${TG_RECOVERY_LEDGER_DIR}/${marker_name}" 2>/dev/null || true',
+    '    log_ghost "telegram skip=recovery_payload_write_failed chat=$(safe_id "$chat_id")"',
+    "    return",
+    "  fi",
     '  log_ghost "telegram RECOVERED chat=$(safe_id "$chat_id") msg=$(safe_id "$msg_id") text_len=${#TEXT}"',
     "}",
     "recover_slack_for() {",
@@ -2805,19 +2837,33 @@ function provisionStopHook(codeName) {
     "  # kickoff's, not the DM's). Replies BEFORE this inbound no longer suppress,",
     "  # so answering an older thread then this one recovers correctly. Silence on",
     "  # a genuine move-on still beats posting mis-correlated text.",
-    "  local replied_other",
-    `  replied_other=$(jq -s --arg th "$thread_ts" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("slack[._]reply$")) and (((.input.thread_ts // .input.message_ts // "")) as $t | ($t != $th and $t != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
-    '  if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then log_ghost "slack skip=moved_on_after_tag thread=$(safe_id "$thread_ts")"; return; fi',
-    "  # Find any marker for this channel+thread (in busy threads multiple",
-    "  # message_ts entries can be pending \u2014 recover the oldest, that's the",
-    "  # one closest to firing the timeout).",
+    "  # ENG-7806 (fm1): read the inbound-delivery ledger instead of scraping the",
+    "  # transcript. Find the target marker for its inbound_id + received_at, then ask",
+    '  # the ledger "already delivered / moved on to another conversation?" - a',
+    "  # byte-exact record, not coordinate/recency inference. no_ledger (a pre-C",
+    "  # session with no ledger data) falls back to the old transcript scan below.",
+    "  # CodeRabbit: select the SAME marker recovery will process (oldest for this",
+    "  # channel+thread) ONCE, so the self-check reads the exact inbound being recovered,",
+    "  # never a sibling message in a busy thread. Reused by the CS-1444 guard + recovery below.",
     '  local prefix="$(safe_id "$channel")__$(safe_id "$thread_ts")__"',
     '  local marker_path=""',
     "  shopt -s nullglob",
-    '  for f in "$SL_MARKER_DIR"/${prefix}*.json; do',
-    '    if [ -z "$marker_path" ]; then marker_path="$f"; fi',
-    "  done",
+    '  for f in "$SL_MARKER_DIR"/${prefix}*.json; do if [ -z "$marker_path" ]; then marker_path="$f"; fi; done',
     '  if [ -z "$marker_path" ]; then log_ghost "slack skip=no_pending_marker channel=$(safe_id "$channel") thread=$(safe_id "$thread_ts")"; return; fi',
+    '  local _sl_iid="" _sl_recv=""',
+    `  _sl_iid=$(jq -r '.inbound_id // ""' "$marker_path" 2>/dev/null || echo ""); _sl_recv=$(jq -r '.received_at // ""' "$marker_path" 2>/dev/null || echo "")`,
+    '  case "$(delivery_ledger_verdict "$_sl_iid" "$thread_ts" "$_sl_recv")" in',
+    '    self) log_ghost "slack skip=already_delivered thread=$(safe_id "$thread_ts")"; return ;;',
+    '    moved_on) log_ghost "slack skip=moved_on_after_tag_ledger thread=$(safe_id "$thread_ts")"; return ;;',
+    "    no_ledger)",
+    "      local replied_other",
+    `      replied_other=$(jq -s --arg th "$thread_ts" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("slack[._]reply$")) and (((.input.thread_ts // .input.message_ts // "")) as $t | ($t != $th and $t != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
+    '      if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then log_ghost "slack skip=moved_on_after_tag thread=$(safe_id "$thread_ts")"; return; fi',
+    "      ;;",
+    "  esac",
+    "  # marker_path (the oldest for this channel+thread, closest to firing the timeout)",
+    "  # was selected above and reused here - one selection shared by the ledger read,",
+    "  # the CS-1444 guard, and recovery.",
     "  # CS-1444: precedence guard against cross-thread mis-delivery. The last",
     "  # <channel> tag can point at a DISCRETIONARY (auto-followed, un-mentioned)",
     "  # inbound the agent never owed a reply to (ENG-6319). If the trailing text",
@@ -2861,13 +2907,29 @@ function provisionStopHook(codeName) {
     "      return",
     "    fi",
     "  fi",
+    '  local marker_name; marker_name="$(basename "$marker_path")"',
+    "  # ENG-7805 (fm2): confirm-before-clear. Cap re-fire with a per-marker ledger and",
+    "  # LEAVE the marker for the consumer to clear on confirmed send (ledger-first fail-safe).",
+    '  if ! mkdir -p "$SL_RECOVERY_LEDGER_DIR" 2>/dev/null; then log_ghost "slack skip=recovery_ledger_unwritable channel=$(safe_id "$channel") thread=$(safe_id "$thread_ts")"; return; fi',
+    "  # ENG-7805 (CodeRabbit): atomic acquire - noclobber create fails if the entry",
+    "  # already exists (recovery in flight) OR the write faults; the follow-up [ -f ]",
+    '  # disambiguates. Closes the "[ -f ] then : >" TOCTOU between concurrent Stops.',
+    '  if ! ( set -o noclobber; : > "${SL_RECOVERY_LEDGER_DIR}/${marker_name}" ) 2>/dev/null; then',
+    '    if [ -f "${SL_RECOVERY_LEDGER_DIR}/${marker_name}" ]; then log_ghost "slack skip=recovery_in_flight channel=$(safe_id "$channel") thread=$(safe_id "$thread_ts")"; else log_ghost "slack skip=recovery_ledger_unwritable channel=$(safe_id "$channel") thread=$(safe_id "$thread_ts")"; fi',
+    "    return",
+    "  fi",
     "  local TS",
     "  TS=$(date -u +%Y%m%dT%H%M%S%N)",
-    '  atomic_write_payload "${AGENT_DIR}/slack-recovery-outbox" "${TS}.json" \\',
-    `    '{channel:$c, thread_ts:$th, text:$t, source:"ghost-reply-recovery"}' \\`,
-    '    --arg c "$channel" --arg th "$thread_ts" --arg t "$TEXT"',
-    '  rm -f "$marker_path" 2>/dev/null || true',
-    '  log_ghost "slack RECOVERED channel=$(safe_id "$channel") thread=$(safe_id "$thread_ts") marker=$(basename "$marker_path") text_len=${#TEXT}"',
+    '  if ! atomic_write_payload "${AGENT_DIR}/slack-recovery-outbox" "${TS}.json" \\',
+    `    '{channel:$c, thread_ts:$th, text:$t, marker_name:$mn, source:"ghost-reply-recovery"}' \\`,
+    '    --arg c "$channel" --arg th "$thread_ts" --arg t "$TEXT" --arg mn "$marker_name"; then',
+    "    # ENG-7805 (CodeRabbit): write faulted after the ledger was acquired - drop",
+    "    # the ledger entry so replay + the next Stop are not suppressed until GC.",
+    '    rm -f "${SL_RECOVERY_LEDGER_DIR}/${marker_name}" 2>/dev/null || true',
+    '    log_ghost "slack skip=recovery_payload_write_failed channel=$(safe_id "$channel") thread=$(safe_id "$thread_ts")"',
+    "    return",
+    "  fi",
+    '  log_ghost "slack RECOVERED channel=$(safe_id "$channel") thread=$(safe_id "$thread_ts") marker=${marker_name} text_len=${#TEXT}"',
     "}",
     "recover_teams_for() {",
     '  local conversation_id="$1" reply_to_id="$2" service_url="$3"',
@@ -2881,29 +2943,53 @@ function provisionStopHook(codeName) {
     "  # teams.replied to a DIFFERENT conversation_id AFTER this inbound tag, TEXT is",
     "  # not a reliably-correlated ghost of THIS inbound \u2014 stay silent rather than post",
     "  # mis-correlated text (silence the operator re-pings beats wrong content).",
-    "  local replied_other",
-    `  replied_other=$(jq -s --arg cid "$conversation_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("teams[._]reply$")) and (((.input.conversation_id // "")) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
-    '  if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
-    "  # teams-channel.ts encodes the marker filename as",
-    "  #   hex(conversation_id)[..64]--hex(activity_id)[..64].json",
-    "  # We don't have the original activity_id here, only the",
-    "  # reply_to_id from the channel tag (which IS the original",
-    "  # activity_id the agent saw). Try a prefix match against the",
-    "  # marker dir.",
+    "  # ENG-7806 (fm1): delivery-ledger read replaces the transcript scan (conv_key",
+    "  # = conversation_id). no_ledger falls back to the scan. The teams marker file",
+    "  # is hex(conversation_id)[..64]--... so locate it the same way to read its id.",
+    "  # CodeRabbit: select the SAME marker recovery will process ONCE (hex(conversation_id)",
+    "  # prefix; the activity_id is not available here), so the self-check reads the exact",
+    "  # inbound being recovered. Reused by the recovery block below.",
     "  local hex_conv",
     '  hex_conv=$(printf %s "$conversation_id" | od -An -tx1 | tr -d " \\n" | cut -c1-64)',
     '  local marker_path=""',
     "  shopt -s nullglob",
-    '  for f in "$MS_MARKER_DIR"/${hex_conv}*.json; do',
-    '    if [ -z "$marker_path" ]; then marker_path="$f"; fi',
-    "  done",
+    '  for f in "$MS_MARKER_DIR"/${hex_conv}*.json; do if [ -z "$marker_path" ]; then marker_path="$f"; fi; done',
     '  if [ -z "$marker_path" ]; then log_ghost "teams skip=no_pending_marker conv=$(safe_id "$conversation_id")"; return; fi',
+    '  local _ms_iid="" _ms_recv=""',
+    `  _ms_iid=$(jq -r '.inbound_id // ""' "$marker_path" 2>/dev/null || echo ""); _ms_recv=$(jq -r '.received_at // ""' "$marker_path" 2>/dev/null || echo "")`,
+    '  case "$(delivery_ledger_verdict "$_ms_iid" "$conversation_id" "$_ms_recv")" in',
+    '    self) log_ghost "teams skip=already_delivered conv=$(safe_id "$conversation_id")"; return ;;',
+    '    moved_on) log_ghost "teams skip=moved_on_after_tag_ledger conv=$(safe_id "$conversation_id")"; return ;;',
+    "    no_ledger)",
+    "      local replied_other",
+    `      replied_other=$(jq -s --arg cid "$conversation_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("teams[._]reply$")) and (((.input.conversation_id // "")) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
+    '      if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
+    "      ;;",
+    "  esac",
+    "  # marker_path (hex(conversation_id) prefix match, the marker the agent saw whose",
+    "  # activity_id we lack) was selected above and is reused here.",
+    '  local marker_name; marker_name="$(basename "$marker_path")"',
+    "  # ENG-7805 (fm2): confirm-before-clear. Cap re-fire with a per-marker ledger and",
+    "  # LEAVE the marker for the consumer to clear on confirmed send (ledger-first fail-safe).",
+    '  if ! mkdir -p "$MS_RECOVERY_LEDGER_DIR" 2>/dev/null; then log_ghost "teams skip=recovery_ledger_unwritable conv=$(safe_id "$conversation_id")"; return; fi',
+    "  # ENG-7805 (CodeRabbit): atomic acquire - noclobber create fails if the entry",
+    "  # already exists (recovery in flight) OR the write faults; the follow-up [ -f ]",
+    '  # disambiguates. Closes the "[ -f ] then : >" TOCTOU between concurrent Stops.',
+    '  if ! ( set -o noclobber; : > "${MS_RECOVERY_LEDGER_DIR}/${marker_name}" ) 2>/dev/null; then',
+    '    if [ -f "${MS_RECOVERY_LEDGER_DIR}/${marker_name}" ]; then log_ghost "teams skip=recovery_in_flight conv=$(safe_id "$conversation_id")"; else log_ghost "teams skip=recovery_ledger_unwritable conv=$(safe_id "$conversation_id")"; fi',
+    "    return",
+    "  fi",
     "  local TS",
     "  TS=$(date -u +%Y%m%dT%H%M%S%N)",
-    '  atomic_write_payload "${AGENT_DIR}/msteams-recovery-outbox" "${TS}.json" \\',
-    `    '{conversation_id:$c, reply_to_id:$r, service_url:$s, text:$t, source:"ghost-reply-recovery"}' \\`,
-    '    --arg c "$conversation_id" --arg r "$reply_to_id" --arg s "$service_url" --arg t "$TEXT"',
-    '  rm -f "$marker_path" 2>/dev/null || true',
+    '  if ! atomic_write_payload "${AGENT_DIR}/msteams-recovery-outbox" "${TS}.json" \\',
+    `    '{conversation_id:$c, reply_to_id:$r, service_url:$s, text:$t, marker_name:$mn, source:"ghost-reply-recovery"}' \\`,
+    '    --arg c "$conversation_id" --arg r "$reply_to_id" --arg s "$service_url" --arg t "$TEXT" --arg mn "$marker_name"; then',
+    "    # ENG-7805 (CodeRabbit): write faulted after the ledger was acquired - drop",
+    "    # the ledger entry so replay + the next Stop are not suppressed until GC.",
+    '    rm -f "${MS_RECOVERY_LEDGER_DIR}/${marker_name}" 2>/dev/null || true',
+    '    log_ghost "teams skip=recovery_payload_write_failed conv=$(safe_id "$conversation_id")"',
+    "    return",
+    "  fi",
     '  log_ghost "teams RECOVERED conv=$(safe_id "$conversation_id") text_len=${#TEXT}"',
     "}",
     "# ENG-7814 (ENG-6722 slice E): always-on direct-chat recovery. Re-send the last",
@@ -2981,6 +3067,79 @@ function provisionStopHook(codeName) {
     "# entries here as a backstop, same as the block ledger.",
     'DC_RECOVERY_LEDGER_DIR="${AGENT_DIR}/.agt-direct-chat-recovery-ledger"',
     'if [ -d "$DC_RECOVERY_LEDGER_DIR" ]; then find "$DC_RECOVERY_LEDGER_DIR" -type f -mtime +1 -delete 2>/dev/null || true; fi',
+    "# ENG-7805 (ENG-6722 slice B): per-marker recovery ledgers for slack/telegram/teams.",
+    "# recover_*_for now LEAVES the pending marker in place (confirm-before-clear, fm2)",
+    "# and writes a ledger entry here to cap ONE in-flight recovery per inbound; the",
+    "# channel MCP consumer clears the marker on confirmed send and removes the ledger",
+    "# entry when the recovery resolves (delivered / suppressed / poisoned = re-arm).",
+    "# GC stale entries (>1 day) as a backstop, same as the block + direct-chat ledgers.",
+    'SL_RECOVERY_LEDGER_DIR="${AGENT_DIR}/.agt-slack-recovery-ledger"',
+    'TG_RECOVERY_LEDGER_DIR="${AGENT_DIR}/.agt-telegram-recovery-ledger"',
+    'MS_RECOVERY_LEDGER_DIR="${AGENT_DIR}/.agt-msteams-recovery-ledger"',
+    'for _rl in "$SL_RECOVERY_LEDGER_DIR" "$TG_RECOVERY_LEDGER_DIR" "$MS_RECOVERY_LEDGER_DIR"; do',
+    '  if [ -d "$_rl" ]; then find "$_rl" -type f -mtime +1 -delete 2>/dev/null || true; fi',
+    "done",
+    "# ENG-7806 (ENG-6722 slice C): the inbound-delivery ledger - a durable, POSITIVE",
+    '# record ("inbound X was confirmed-delivered at time T") the channel MCPs write on',
+    "# each confirmed reply, keyed by inbound_id. The recover_*_for path reads it instead",
+    "# of scraping the transcript for the replied_other/moved-on decision (fm1). Disjoint",
+    "# from the recovery-ledgers above (those are marker-filename-keyed, negative/in-flight).",
+    "# GC at 1 day like the others (a delivery record only needs to outlive the pending",
+    "# marker + a restart within the recovery window; the MCP never needs it after the",
+    "# marker is gone).",
+    'DELIVERY_LEDGER_DIR="${AGENT_DIR}/.agt-inbound-delivery-ledger"',
+    'if [ -d "$DELIVERY_LEDGER_DIR" ]; then find "$DELIVERY_LEDGER_DIR" -type f -mtime +1 -delete 2>/dev/null || true; fi',
+    "# ENG-7806 telemetry: count each ledger verdict into a counter file the manager",
+    "# already reads+resets (the *-reply-binding-classifications.json suffix), so it",
+    "# reaches CloudWatch as Classification dims with no new pipeline. Best-effort +",
+    "# fully silent (no stdout) - delivery_ledger_verdict runs in $(...), so a stray",
+    "# byte would corrupt the captured verdict.",
+    'LEDGER_METRIC_FILE="${AGENT_DIR}/ghost-ledger-reply-binding-classifications.json"',
+    "bump_ledger_metric() {",
+    '  local key="$1" tmp="${LEDGER_METRIC_FILE}.$$.tmp"',
+    '  if [ -f "$LEDGER_METRIC_FILE" ]; then',
+    `    jq --arg k "$key" '.[$k] = ((.[$k] // 0) + 1)' "$LEDGER_METRIC_FILE" > "$tmp" 2>/dev/null && mv -f "$tmp" "$LEDGER_METRIC_FILE" 2>/dev/null || rm -f "$tmp" 2>/dev/null || true`,
+    "  else",
+    `    jq -n --arg k "$key" '{($k): 1}' > "$tmp" 2>/dev/null && mv -f "$tmp" "$LEDGER_METRIC_FILE" 2>/dev/null || rm -f "$tmp" 2>/dev/null || true`,
+    "  fi",
+    "}",
+    "# Deterministic replacement for the recover_*_for replied_other transcript scan.",
+    "# Echoes exactly one verdict for (inbound_id, conv_key, received_at):",
+    "#   self      - a delivery record for THIS inbound_id exists (already answered)",
+    "#   moved_on  - a record for a DIFFERENT conv_key was delivered AFTER this inbound",
+    "#               arrived (the agent answered elsewhere; trailing text is ambiguous)",
+    "#   clear     - the ledger has data but neither of the above (safe to recover)",
+    "#   no_ledger - the ledger is empty/absent (pre-C session) -> caller falls back to",
+    "#               the transcript scan, so the rollout is safe.",
+    "# ISO-8601 Z timestamps sort lexicographically == chronologically, so a string",
+    "# compare is a correct time compare here (all delivered_at/received_at are UTC Z).",
+    "delivery_ledger_verdict() {",
+    '  local iid="$1" convk="$2" recv="$3"',
+    '  if [ ! -d "$DELIVERY_LEDGER_DIR" ]; then bump_ledger_metric delivery_ledger_fallback; echo "no_ledger"; return; fi',
+    "  shopt -s nullglob",
+    '  local _dl_files=("$DELIVERY_LEDGER_DIR"/*.json)',
+    '  if [ "${#_dl_files[@]}" = "0" ]; then bump_ledger_metric delivery_ledger_fallback; echo "no_ledger"; return; fi',
+    "  # Self-check first (needs only inbound_id): a delivery record for THIS inbound_id",
+    "  # means it was already answered, so suppress even if the marker somehow lacks a",
+    "  # received_at.",
+    '  if [ -n "$iid" ] && [ -f "${DELIVERY_LEDGER_DIR}/$(safe_id "$iid").json" ]; then bump_ledger_metric delivery_ledger_self; echo "self"; return; fi',
+    "  # ENG-7806 (CodeRabbit): after the self-check, without THIS marker's own inbound_id",
+    "  # AND received_at we cannot make a trustworthy moved-on decision for it (a pre-C",
+    "  # marker that predates the ledger, or a torn read). Fall back to the transcript",
+    "  # scan rather than defaulting to clear - otherwise, once ANY ledger file exists, an",
+    "  # id-less marker would bypass the rollout fallback and recover text the old scan",
+    "  # would suppress.",
+    '  if [ -z "$iid" ] || [ -z "$recv" ]; then bump_ledger_metric delivery_ledger_fallback; echo "no_ledger"; return; fi',
+    "  local _dl_f _dl_ck _dl_da",
+    '  for _dl_f in "${_dl_files[@]}"; do',
+    `    _dl_ck=$(jq -r '.conv_key // ""' "$_dl_f" 2>/dev/null || echo "")`,
+    `    _dl_da=$(jq -r '.delivered_at // ""' "$_dl_f" 2>/dev/null || echo "")`,
+    '    if [ -n "$_dl_ck" ] && [ "$_dl_ck" != "$convk" ] && [ -n "$_dl_da" ] && [ -n "$recv" ] && [[ "$_dl_da" > "$recv" ]]; then',
+    '      bump_ledger_metric delivery_ledger_moved_on; echo "moved_on"; return',
+    "    fi",
+    "  done",
+    '  bump_ledger_metric delivery_ledger_clear; echo "clear"',
+    "}",
     "# Returns 0 (after printing the block JSON to stdout) when it blocked; 1 otherwise.",
     '#   $1 = "yes"/"no" \u2014 did the agent reply to THIS conversation in the final turn?',
     "#        (ENG-6727: per-conversation, computed by the caller via replied_this_conv_*)",
@@ -6797,7 +6956,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.330" : "dev";
+var agtCliVersion = true ? "0.28.332" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9194,4 +9353,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-CDRVXSQ3.js.map
+//# sourceMappingURL=chunk-YNHMQ4CW.js.map