@integrity-labs/agt-cli 0.28.331 → 0.28.332

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-4Y3UPOR2.js";
+} from "../chunk-YNHMQ4CW.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4827,7 +4827,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.331" : "dev";
+var cliVersion = true ? "0.28.332" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5931,7 +5931,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.331" : "dev";
+var cliVersion2 = true ? "0.28.332" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-4Y3UPOR2.js → chunk-YNHMQ4CW.js}

@@ -2772,9 +2772,19 @@ function provisionStopHook(codeName) {
     "  # it moved on and TEXT is not a reliably-correlated ghost of THIS inbound \u2014",
     "  # recovering it would post mis-correlated text. Stay silent: a silent gap the",
     "  # operator re-pings beats wrong content that poisons trust.",
-    "  local replied_other",
-    `  replied_other=$(jq -s --arg cid "$chat_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("telegram[._](reply|send_message)$")) and (((.input.chat_id // "")|tostring) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
-    '  if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
+    "  # ENG-7806 (fm1): delivery-ledger read replaces the transcript scan (conv_key",
+    "  # = chat_id, Telegram's conversation grain). no_ledger falls back to the scan.",
+    '  local _tg_m="${TG_MARKER_DIR}/$(safe_id "$chat_id")__$(safe_id "$msg_id").json" _tg_iid="" _tg_recv=""',
+    `  if [ -f "$_tg_m" ]; then _tg_iid=$(jq -r '.inbound_id // ""' "$_tg_m" 2>/dev/null || echo ""); _tg_recv=$(jq -r '.received_at // ""' "$_tg_m" 2>/dev/null || echo ""); fi`,
+    '  case "$(delivery_ledger_verdict "$_tg_iid" "$chat_id" "$_tg_recv")" in',
+    '    self) log_ghost "telegram skip=already_delivered chat=$(safe_id "$chat_id")"; return ;;',
+    '    moved_on) log_ghost "telegram skip=moved_on_after_tag_ledger chat=$(safe_id "$chat_id")"; return ;;',
+    "    no_ledger)",
+    "      local replied_other",
+    `      replied_other=$(jq -s --arg cid "$chat_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("telegram[._](reply|send_message)$")) and (((.input.chat_id // "")|tostring) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
+    '      if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
+    "      ;;",
+    "  esac",
     "  local marker_name",
     '  marker_name="$(safe_id "$chat_id")__$(safe_id "$msg_id").json"',
     '  local marker_path="${TG_MARKER_DIR}/${marker_name}"',
@@ -2827,19 +2837,33 @@ function provisionStopHook(codeName) {
     "  # kickoff's, not the DM's). Replies BEFORE this inbound no longer suppress,",
     "  # so answering an older thread then this one recovers correctly. Silence on",
     "  # a genuine move-on still beats posting mis-correlated text.",
-    "  local replied_other",
-    `  replied_other=$(jq -s --arg th "$thread_ts" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("slack[._]reply$")) and (((.input.thread_ts // .input.message_ts // "")) as $t | ($t != $th and $t != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
-    '  if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then log_ghost "slack skip=moved_on_after_tag thread=$(safe_id "$thread_ts")"; return; fi',
-    "  # Find any marker for this channel+thread (in busy threads multiple",
-    "  # message_ts entries can be pending \u2014 recover the oldest, that's the",
-    "  # one closest to firing the timeout).",
+    "  # ENG-7806 (fm1): read the inbound-delivery ledger instead of scraping the",
+    "  # transcript. Find the target marker for its inbound_id + received_at, then ask",
+    '  # the ledger "already delivered / moved on to another conversation?" - a',
+    "  # byte-exact record, not coordinate/recency inference. no_ledger (a pre-C",
+    "  # session with no ledger data) falls back to the old transcript scan below.",
+    "  # CodeRabbit: select the SAME marker recovery will process (oldest for this",
+    "  # channel+thread) ONCE, so the self-check reads the exact inbound being recovered,",
+    "  # never a sibling message in a busy thread. Reused by the CS-1444 guard + recovery below.",
     '  local prefix="$(safe_id "$channel")__$(safe_id "$thread_ts")__"',
     '  local marker_path=""',
     "  shopt -s nullglob",
-    '  for f in "$SL_MARKER_DIR"/${prefix}*.json; do',
-    '    if [ -z "$marker_path" ]; then marker_path="$f"; fi',
-    "  done",
+    '  for f in "$SL_MARKER_DIR"/${prefix}*.json; do if [ -z "$marker_path" ]; then marker_path="$f"; fi; done',
     '  if [ -z "$marker_path" ]; then log_ghost "slack skip=no_pending_marker channel=$(safe_id "$channel") thread=$(safe_id "$thread_ts")"; return; fi',
+    '  local _sl_iid="" _sl_recv=""',
+    `  _sl_iid=$(jq -r '.inbound_id // ""' "$marker_path" 2>/dev/null || echo ""); _sl_recv=$(jq -r '.received_at // ""' "$marker_path" 2>/dev/null || echo "")`,
+    '  case "$(delivery_ledger_verdict "$_sl_iid" "$thread_ts" "$_sl_recv")" in',
+    '    self) log_ghost "slack skip=already_delivered thread=$(safe_id "$thread_ts")"; return ;;',
+    '    moved_on) log_ghost "slack skip=moved_on_after_tag_ledger thread=$(safe_id "$thread_ts")"; return ;;',
+    "    no_ledger)",
+    "      local replied_other",
+    `      replied_other=$(jq -s --arg th "$thread_ts" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("slack[._]reply$")) and (((.input.thread_ts // .input.message_ts // "")) as $t | ($t != $th and $t != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
+    '      if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then log_ghost "slack skip=moved_on_after_tag thread=$(safe_id "$thread_ts")"; return; fi',
+    "      ;;",
+    "  esac",
+    "  # marker_path (the oldest for this channel+thread, closest to firing the timeout)",
+    "  # was selected above and reused here - one selection shared by the ledger read,",
+    "  # the CS-1444 guard, and recovery.",
     "  # CS-1444: precedence guard against cross-thread mis-delivery. The last",
     "  # <channel> tag can point at a DISCRETIONARY (auto-followed, un-mentioned)",
     "  # inbound the agent never owed a reply to (ENG-6319). If the trailing text",
@@ -2919,23 +2943,31 @@ function provisionStopHook(codeName) {
     "  # teams.replied to a DIFFERENT conversation_id AFTER this inbound tag, TEXT is",
     "  # not a reliably-correlated ghost of THIS inbound \u2014 stay silent rather than post",
     "  # mis-correlated text (silence the operator re-pings beats wrong content).",
-    "  local replied_other",
-    `  replied_other=$(jq -s --arg cid "$conversation_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("teams[._]reply$")) and (((.input.conversation_id // "")) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
-    '  if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
-    "  # teams-channel.ts encodes the marker filename as",
-    "  #   hex(conversation_id)[..64]--hex(activity_id)[..64].json",
-    "  # We don't have the original activity_id here, only the",
-    "  # reply_to_id from the channel tag (which IS the original",
-    "  # activity_id the agent saw). Try a prefix match against the",
-    "  # marker dir.",
+    "  # ENG-7806 (fm1): delivery-ledger read replaces the transcript scan (conv_key",
+    "  # = conversation_id). no_ledger falls back to the scan. The teams marker file",
+    "  # is hex(conversation_id)[..64]--... so locate it the same way to read its id.",
+    "  # CodeRabbit: select the SAME marker recovery will process ONCE (hex(conversation_id)",
+    "  # prefix; the activity_id is not available here), so the self-check reads the exact",
+    "  # inbound being recovered. Reused by the recovery block below.",
     "  local hex_conv",
     '  hex_conv=$(printf %s "$conversation_id" | od -An -tx1 | tr -d " \\n" | cut -c1-64)',
     '  local marker_path=""',
     "  shopt -s nullglob",
-    '  for f in "$MS_MARKER_DIR"/${hex_conv}*.json; do',
-    '    if [ -z "$marker_path" ]; then marker_path="$f"; fi',
-    "  done",
+    '  for f in "$MS_MARKER_DIR"/${hex_conv}*.json; do if [ -z "$marker_path" ]; then marker_path="$f"; fi; done',
     '  if [ -z "$marker_path" ]; then log_ghost "teams skip=no_pending_marker conv=$(safe_id "$conversation_id")"; return; fi',
+    '  local _ms_iid="" _ms_recv=""',
+    `  _ms_iid=$(jq -r '.inbound_id // ""' "$marker_path" 2>/dev/null || echo ""); _ms_recv=$(jq -r '.received_at // ""' "$marker_path" 2>/dev/null || echo "")`,
+    '  case "$(delivery_ledger_verdict "$_ms_iid" "$conversation_id" "$_ms_recv")" in',
+    '    self) log_ghost "teams skip=already_delivered conv=$(safe_id "$conversation_id")"; return ;;',
+    '    moved_on) log_ghost "teams skip=moved_on_after_tag_ledger conv=$(safe_id "$conversation_id")"; return ;;',
+    "    no_ledger)",
+    "      local replied_other",
+    `      replied_other=$(jq -s --arg cid "$conversation_id" 'def ctext: (.message.content // .content // []) | if type=="string" then . elif type=="array" then (map(select(type=="object" and .type=="text")|.text)|join(" ")) else "" end; . as $all | ([ range(0; ($all|length)) | select((($all[.]|ctext)|test("<channel ")) and (($all[.]|(.type // .role // "")) != "assistant")) ] | last) as $idx | [ $all[(($idx // -1)+1):][] | select((.type // .role)=="assistant") | (.message.content // .content // []) | (if type=="array" then . else [] end) | .[] | select((.type=="tool_use") and ((.name|tostring)|test("teams[._]reply$")) and (((.input.conversation_id // "")) as $c | ($c != $cid and $c != ""))) ] | length' "$RECENT_FILE" 2>/dev/null || true)`,
+    '      if [ "${replied_other:-0}" -gt 0 ] 2>/dev/null; then return; fi',
+    "      ;;",
+    "  esac",
+    "  # marker_path (hex(conversation_id) prefix match, the marker the agent saw whose",
+    "  # activity_id we lack) was selected above and is reused here.",
     '  local marker_name; marker_name="$(basename "$marker_path")"',
     "  # ENG-7805 (fm2): confirm-before-clear. Cap re-fire with a per-marker ledger and",
     "  # LEAVE the marker for the consumer to clear on confirmed send (ledger-first fail-safe).",
@@ -3047,6 +3079,67 @@ function provisionStopHook(codeName) {
     'for _rl in "$SL_RECOVERY_LEDGER_DIR" "$TG_RECOVERY_LEDGER_DIR" "$MS_RECOVERY_LEDGER_DIR"; do',
     '  if [ -d "$_rl" ]; then find "$_rl" -type f -mtime +1 -delete 2>/dev/null || true; fi',
     "done",
+    "# ENG-7806 (ENG-6722 slice C): the inbound-delivery ledger - a durable, POSITIVE",
+    '# record ("inbound X was confirmed-delivered at time T") the channel MCPs write on',
+    "# each confirmed reply, keyed by inbound_id. The recover_*_for path reads it instead",
+    "# of scraping the transcript for the replied_other/moved-on decision (fm1). Disjoint",
+    "# from the recovery-ledgers above (those are marker-filename-keyed, negative/in-flight).",
+    "# GC at 1 day like the others (a delivery record only needs to outlive the pending",
+    "# marker + a restart within the recovery window; the MCP never needs it after the",
+    "# marker is gone).",
+    'DELIVERY_LEDGER_DIR="${AGENT_DIR}/.agt-inbound-delivery-ledger"',
+    'if [ -d "$DELIVERY_LEDGER_DIR" ]; then find "$DELIVERY_LEDGER_DIR" -type f -mtime +1 -delete 2>/dev/null || true; fi',
+    "# ENG-7806 telemetry: count each ledger verdict into a counter file the manager",
+    "# already reads+resets (the *-reply-binding-classifications.json suffix), so it",
+    "# reaches CloudWatch as Classification dims with no new pipeline. Best-effort +",
+    "# fully silent (no stdout) - delivery_ledger_verdict runs in $(...), so a stray",
+    "# byte would corrupt the captured verdict.",
+    'LEDGER_METRIC_FILE="${AGENT_DIR}/ghost-ledger-reply-binding-classifications.json"',
+    "bump_ledger_metric() {",
+    '  local key="$1" tmp="${LEDGER_METRIC_FILE}.$$.tmp"',
+    '  if [ -f "$LEDGER_METRIC_FILE" ]; then',
+    `    jq --arg k "$key" '.[$k] = ((.[$k] // 0) + 1)' "$LEDGER_METRIC_FILE" > "$tmp" 2>/dev/null && mv -f "$tmp" "$LEDGER_METRIC_FILE" 2>/dev/null || rm -f "$tmp" 2>/dev/null || true`,
+    "  else",
+    `    jq -n --arg k "$key" '{($k): 1}' > "$tmp" 2>/dev/null && mv -f "$tmp" "$LEDGER_METRIC_FILE" 2>/dev/null || rm -f "$tmp" 2>/dev/null || true`,
+    "  fi",
+    "}",
+    "# Deterministic replacement for the recover_*_for replied_other transcript scan.",
+    "# Echoes exactly one verdict for (inbound_id, conv_key, received_at):",
+    "#   self      - a delivery record for THIS inbound_id exists (already answered)",
+    "#   moved_on  - a record for a DIFFERENT conv_key was delivered AFTER this inbound",
+    "#               arrived (the agent answered elsewhere; trailing text is ambiguous)",
+    "#   clear     - the ledger has data but neither of the above (safe to recover)",
+    "#   no_ledger - the ledger is empty/absent (pre-C session) -> caller falls back to",
+    "#               the transcript scan, so the rollout is safe.",
+    "# ISO-8601 Z timestamps sort lexicographically == chronologically, so a string",
+    "# compare is a correct time compare here (all delivered_at/received_at are UTC Z).",
+    "delivery_ledger_verdict() {",
+    '  local iid="$1" convk="$2" recv="$3"',
+    '  if [ ! -d "$DELIVERY_LEDGER_DIR" ]; then bump_ledger_metric delivery_ledger_fallback; echo "no_ledger"; return; fi',
+    "  shopt -s nullglob",
+    '  local _dl_files=("$DELIVERY_LEDGER_DIR"/*.json)',
+    '  if [ "${#_dl_files[@]}" = "0" ]; then bump_ledger_metric delivery_ledger_fallback; echo "no_ledger"; return; fi',
+    "  # Self-check first (needs only inbound_id): a delivery record for THIS inbound_id",
+    "  # means it was already answered, so suppress even if the marker somehow lacks a",
+    "  # received_at.",
+    '  if [ -n "$iid" ] && [ -f "${DELIVERY_LEDGER_DIR}/$(safe_id "$iid").json" ]; then bump_ledger_metric delivery_ledger_self; echo "self"; return; fi',
+    "  # ENG-7806 (CodeRabbit): after the self-check, without THIS marker's own inbound_id",
+    "  # AND received_at we cannot make a trustworthy moved-on decision for it (a pre-C",
+    "  # marker that predates the ledger, or a torn read). Fall back to the transcript",
+    "  # scan rather than defaulting to clear - otherwise, once ANY ledger file exists, an",
+    "  # id-less marker would bypass the rollout fallback and recover text the old scan",
+    "  # would suppress.",
+    '  if [ -z "$iid" ] || [ -z "$recv" ]; then bump_ledger_metric delivery_ledger_fallback; echo "no_ledger"; return; fi',
+    "  local _dl_f _dl_ck _dl_da",
+    '  for _dl_f in "${_dl_files[@]}"; do',
+    `    _dl_ck=$(jq -r '.conv_key // ""' "$_dl_f" 2>/dev/null || echo "")`,
+    `    _dl_da=$(jq -r '.delivered_at // ""' "$_dl_f" 2>/dev/null || echo "")`,
+    '    if [ -n "$_dl_ck" ] && [ "$_dl_ck" != "$convk" ] && [ -n "$_dl_da" ] && [ -n "$recv" ] && [[ "$_dl_da" > "$recv" ]]; then',
+    '      bump_ledger_metric delivery_ledger_moved_on; echo "moved_on"; return',
+    "    fi",
+    "  done",
+    '  bump_ledger_metric delivery_ledger_clear; echo "clear"',
+    "}",
     "# Returns 0 (after printing the block JSON to stdout) when it blocked; 1 otherwise.",
     '#   $1 = "yes"/"no" \u2014 did the agent reply to THIS conversation in the final turn?',
     "#        (ENG-6727: per-conversation, computed by the caller via replied_this_conv_*)",
@@ -6863,7 +6956,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.331" : "dev";
+var agtCliVersion = true ? "0.28.332" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9260,4 +9353,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-4Y3UPOR2.js.map
+//# sourceMappingURL=chunk-YNHMQ4CW.js.map