@integrity-labs/agt-cli 0.28.356 → 0.28.358

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -20,7 +20,7 @@ import {
20
20
  resolveConnectivityProbe,
21
21
  worseConnectivityOutcome,
22
22
  wrapScheduledTaskPrompt
23
- } from "./chunk-LDIKBFDR.js";
23
+ } from "./chunk-HTBXOXPI.js";
24
24
  import {
25
25
  parsePsRows
26
26
  } from "./chunk-XWVM4KPK.js";
@@ -5267,6 +5267,13 @@ ${sections}`
5267
5267
  // every sender as "internal".
5268
5268
  ...senderPolicyInternalOnly ? { SLACK_INTERNAL_ONLY: "true" } : {},
5269
5269
  ...senderPolicyInternalOnly && typeof config["team_id"] === "string" && config["team_id"].length > 0 ? { SLACK_HOME_TEAM_ID: config["team_id"] } : {},
5270
+ // ENG-7919: inject the bot's own Slack user ID so it is available at
5271
+ // MCP startup before auth.test resolves. Populated by the slack-bot-user-id
5272
+ // client on first startup and stored in agent_channel_configs.config.bot_user_id.
5273
+ // On first provision bot_user_id is absent; the MCP resolves it via auth.test
5274
+ // as before and falls back gracefully. On all subsequent provisions this env
5275
+ // var eliminates the ~10 s null window that caused self-mention misses.
5276
+ ...typeof config["bot_user_id"] === "string" && config["bot_user_id"].length > 0 ? { SLACK_OWN_BOT_USER_ID: config["bot_user_id"] } : {},
5270
5277
  // ENG-6035: per-agent diagnostic/restart allowlist. Gates
5271
5278
  // /investigate-<code-name> (fail-closed: command disabled when
5272
5279
  // unset) and /restart-<code-name> (open when unset). An explicit
@@ -6301,9 +6308,9 @@ function parseOpencodeModelRef(opencodeModel) {
6301
6308
  return { providerID: opencodeModel.slice(0, slash), id: opencodeModel.slice(slash + 1) };
6302
6309
  }
6303
6310
  function buildOpencodePermission(tools) {
6304
- const denyByDefault = tools?.global_controls?.default_network_policy !== "allow";
6311
+ const denyNetwork = tools?.global_controls?.default_network_policy !== "allow";
6305
6312
  const bash = {
6306
- "*": denyByDefault ? "ask" : "allow",
6313
+ "*": "allow",
6307
6314
  "cat *.env*": "deny",
6308
6315
  "cat *.pem": "deny",
6309
6316
  "cat *.key": "deny",
@@ -6317,7 +6324,7 @@ function buildOpencodePermission(tools) {
6317
6324
  // Agents edit their own workspace freely; cross-dir isolation is enforced
6318
6325
  // by the manager spawning each agent in its own project dir.
6319
6326
  edit: "allow",
6320
- webfetch: denyByDefault ? "ask" : "allow",
6327
+ webfetch: denyNetwork ? "deny" : "allow",
6321
6328
  bash
6322
6329
  };
6323
6330
  }
@@ -7146,7 +7153,7 @@ function requireHost() {
7146
7153
  }
7147
7154
 
7148
7155
  // src/lib/api-client.ts
7149
- var agtCliVersion = true ? "0.28.356" : "dev";
7156
+ var agtCliVersion = true ? "0.28.358" : "dev";
7150
7157
  var lastConfigHash = null;
7151
7158
  function setConfigHash(hash) {
7152
7159
  lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9597,4 +9604,4 @@ export {
9597
9604
  managerInstallSystemUnitCommand,
9598
9605
  managerUninstallSystemUnitCommand
9599
9606
  };
9600
- //# sourceMappingURL=chunk-3OVI7DRG.js.map
9607
+ //# sourceMappingURL=chunk-OUHANHOH.js.map