@integrity-labs/agt-cli 0.28.398 → 0.28.400

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-QQ4ZC5K3.js";
+} from "../chunk-MZ7EU4V7.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.398" : "dev";
+var cliVersion = true ? "0.28.400" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.398" : "dev";
+var cliVersion2 = true ? "0.28.400" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-QQ4ZC5K3.js → chunk-MZ7EU4V7.js}

@@ -2683,7 +2683,7 @@ function provisionStopHook(codeName) {
     "# classify a miss without guessing. A missing TAG_SOURCE here explains the",
     "# 'marker present but never recovered' mystery (no <channel> tag correlated).",
     "REPLY_IN_LAST=no",
-    `if echo "$TOOL_NAMES" | grep -qE '(^|__)(slack|telegram|teams)[._](reply|send_message)$'; then REPLY_IN_LAST=yes; fi`,
+    `if echo "$TOOL_NAMES" | grep -qE '(^|__)(slack|telegram|teams)[._](reply|send_message)$|(^|__)direct_chat[._](reply|consume)$'; then REPLY_IN_LAST=yes; fi`,
     'log_ghost "stop source=${TAG_SOURCE:-none} pending(tg=$TG_PENDING sl=$SL_PENDING ms=$MS_PENDING dc=$DC_PENDING) text_len=${#TEXT} reply_tool_in_final_turn=$REPLY_IN_LAST"',
     'extract_attr() { echo "$1" | grep -oE "$2=\\"[^\\"]+\\"" | head -1 | sed -E "s/$2=\\"(.*)\\"/\\\\1/"; }',
     "# Atomic write helper: jq \u2192 tmp file in same dir, then rename. The",
@@ -2990,18 +2990,30 @@ function provisionStopHook(codeName) {
     "  done",
     '  if [ -z "$marker_path" ]; then log_ghost "direct-chat skip=no_pending_marker session=$(safe_id "$session_id")"; return; fi',
     '  local marker_name; marker_name="$(basename "$marker_path")"',
-    "  # Already recovered once and awaiting delivery confirmation \u21D2 do not re-send.",
-    '  if [ -f "${DC_RECOVERY_LEDGER_DIR}/${marker_name}" ]; then log_ghost "direct-chat skip=recovery_in_flight session=$(safe_id "$session_id")"; return; fi',
     "  # Persist the per-marker cap BEFORE the side effect (same fail-safe as",
     "  # block-turn-end): if the ledger dir/file write fails we could re-recover every",
     "  # Stop, so degrade to a logged skip and write no payload.",
     '  if ! mkdir -p "$DC_RECOVERY_LEDGER_DIR" 2>/dev/null; then log_ghost "direct-chat skip=recovery_ledger_unwritable session=$(safe_id "$session_id")"; return; fi',
-    '  if ! : > "${DC_RECOVERY_LEDGER_DIR}/${marker_name}" 2>/dev/null; then log_ghost "direct-chat skip=recovery_ledger_unwritable session=$(safe_id "$session_id")"; return; fi',
+    "  # ENG-7944 (CodeRabbit): atomic acquire - noclobber create fails if the entry",
+    "  # already exists (recovery in flight) OR the write faults; the follow-up [ -f ]",
+    '  # disambiguates. Closes the "[ -f ] then : >" TOCTOU where two concurrent Stops',
+    "  # both observe no entry and both enqueue a duplicate payload (matches the",
+    "  # telegram/slack recovery paths).",
+    '  if ! ( set -o noclobber; : > "${DC_RECOVERY_LEDGER_DIR}/${marker_name}" ) 2>/dev/null; then',
+    '    if [ -f "${DC_RECOVERY_LEDGER_DIR}/${marker_name}" ]; then log_ghost "direct-chat skip=recovery_in_flight session=$(safe_id "$session_id")"; else log_ghost "direct-chat skip=recovery_ledger_unwritable session=$(safe_id "$session_id")"; fi',
+    "    return",
+    "  fi",
     "  local TS",
     "  TS=$(date -u +%Y%m%dT%H%M%S%N)",
-    '  atomic_write_payload "$DC_RECOVERY_OUTBOX_DIR" "${TS}.json" \\',
+    '  if ! atomic_write_payload "$DC_RECOVERY_OUTBOX_DIR" "${TS}.json" \\',
     `    '{session_id:$s, text:$t, marker_name:$mn, source:"ghost-reply-recovery"}' \\`,
-    '    --arg s "$session_id" --arg t "$TEXT" --arg mn "$marker_name"',
+    '    --arg s "$session_id" --arg t "$TEXT" --arg mn "$marker_name"; then',
+    "    # ENG-7944 (CodeRabbit): the write faulted after the ledger was acquired -",
+    "    # drop the ledger entry so replay + the next Stop are not suppressed until GC.",
+    '    rm -f "${DC_RECOVERY_LEDGER_DIR}/${marker_name}" 2>/dev/null || true',
+    '    log_ghost "direct-chat skip=recovery_payload_write_failed session=$(safe_id "$session_id")"',
+    "    return",
+    "  fi",
     '  log_ghost "direct-chat RECOVERED session=$(safe_id "$session_id") text_len=${#TEXT}"',
     "}",
     '# ENG-6467 / ADR-0024 Slice 2.5 \u2014 block-turn-end (the D1 "composed-but-unsent"',
@@ -3034,11 +3046,10 @@ function provisionStopHook(codeName) {
     "# ENG-7814 (ENG-6722 slice E): always-on direct-chat recovery. When ON, an owed",
     "# and unanswered direct-chat inbound that block-turn-end did NOT handle gets its",
     "# last assistant text written to a direct-chat-recovery-outbox that the direct-chat",
-    "# MCP re-sends via /host/direct-chat/reply. Registry flag direct-chat-recovery; the",
-    "# env var is the operator/host override the bash reads directly. OFF (default) keeps",
-    "# today's behavior (direct-chat gets block-turn-end only, no recovery).",
-    "DC_RECOVERY_ON=0",
-    'case "${AGT_DIRECT_CHAT_RECOVERY_ENABLED:-}" in true|1|TRUE|True) DC_RECOVERY_ON=1;; esac',
+    "# MCP re-sends via /host/direct-chat/reply. ENG-7944: recovery is now always-on",
+    "# (matching Slack/Telegram/Teams). The kill-switch is the MCP consumer flag",
+    "# (direct-chat-recovery / AGT_DIRECT_CHAT_RECOVERY_ENABLED), which can be set",
+    "# to false to disable delivery without a deploy. DC_RECOVERY_ON removed.",
     'DC_RECOVERY_OUTBOX_DIR="${AGENT_DIR}/direct-chat-recovery-outbox"',
     "# Per-marker recovery ledger: caps ONE in-flight recovery per inbound (so a marker",
     "# left pending for confirm-before-clear is not re-recovered every Stop). The MCP",
@@ -3284,29 +3295,27 @@ function provisionStopHook(codeName) {
     '    DC_REPLIED=no; if replied_this_conv_directchat "$SESSION_ID"; then DC_REPLIED=yes; fi',
     `    if emit_block_if_obligated "$DC_REPLIED" "$DC_CAND" 'direct_chat.reply'; then exit 0; fi`,
     '    if [ "$DC_REPLIED" = "no" ]; then',
-    '      if [ "$DC_RECOVERY_ON" = "1" ]; then',
-    '        recover_directchat_for "$SESSION_ID" "$HEX_SESSION"',
-    "      else",
-    '        log_ghost "direct-chat skip=no_recovery_path session=$(safe_id "$SESSION_ID") (block-turn-end off/capped; direct-chat-recovery off)"',
-    "      fi",
+    "      # ENG-7944: call unconditionally \u2014 mirrors the always-on Slack/Telegram/Teams",
+    "      # recovery paths. The MCP consumer (processDirectChatRecoveryOutboxFile) still",
+    "      # gates on the direct-chat-recovery feature flag before delivering, so the hook",
+    "      # just writes the outbox payload and lets the consumer decide. DC_RECOVERY_ON",
+    "      # is no longer needed here.",
+    '      recover_directchat_for "$SESSION_ID" "$HEX_SESSION"',
     "    fi",
     "  fi",
     'elif [ -z "$TAG_SOURCE" ]; then',
     "  # ENG-6467: TAG_SOURCE=none fallback (AC1). Guarded on an EMPTY source, not",
-    "  # a catch-all else: a parsed-but-unsupported source (e.g. direct-chat, which",
-    "  # has its own durable replay) must NOT fall through here, or its trailing",
-    "  # text could be misdelivered to a pending slack/telegram/teams marker.",
-    "  # The last <channel> tag could not be parsed (a malformed/partial preamble,",
-    "  # or any residual extraction miss) yet a reply is owed. When EXACTLY ONE",
-    "  # channel marker is pending",
-    "  # agent-wide AND the final turn produced text with NO reply tool call,",
-    "  # there is a single unambiguous candidate, so recover it. Cross-thread",
-    "  # mis-correlation (the koda risk) is impossible with one candidate, and the",
-    "  # recover_*_for recency guard still suppresses if the agent moved on. The",
-    "  # marker key is read from the marker contents (real channel markers carry",
-    "  # channel/thread_ts | chat_id/message_id | conversation_id/service_url); a",
-    "  # contentless {} marker yields empty keys and recover_*_for returns early.",
-    "  TOTAL_PENDING=$(( TG_PENDING + SL_PENDING + MS_PENDING ))",
+    "  # a catch-all else: a parsed-but-unsupported source must NOT fall through here",
+    "  # or its trailing text could be misdelivered to a pending marker on the wrong",
+    "  # channel. The last <channel> tag could not be parsed (a malformed/partial",
+    "  # preamble, or any residual extraction miss) yet a reply is owed. When EXACTLY",
+    "  # ONE channel marker is pending agent-wide AND the final turn produced text",
+    "  # with NO reply tool call, there is a single unambiguous candidate, so recover",
+    "  # it. Cross-thread mis-correlation is impossible with one candidate, and the",
+    "  # recover_*_for recency guard still suppresses if the agent moved on.",
+    "  # ENG-7944: DC_PENDING is now included so a lone direct-chat pending marker",
+    "  # with an unparsed tag can also be recovered via the single-candidate path.",
+    "  TOTAL_PENDING=$(( TG_PENDING + SL_PENDING + MS_PENDING + DC_PENDING ))",
     '  if [ "$TOTAL_PENDING" = "1" ] && [ "$REPLY_IN_LAST" = "no" ]; then',
     "    shopt -s nullglob",
     '    if [ "$SL_PENDING" = "1" ]; then',
@@ -3331,6 +3340,14 @@ function provisionStopHook(codeName) {
     '        log_ghost "fallback=tag_source_none channel=msteams marker=$(basename "$f")"',
     '        recover_teams_for "$FB_CONV" "$FB_RID" "$FB_SVC"',
     "      done",
+    '    elif [ "$DC_PENDING" = "1" ]; then',
+    "      # ENG-7944: single-candidate direct-chat recovery for unparsed TAG_SOURCE.",
+    '      for f in "$DC_MARKER_DIR"/*.json; do',
+    `        FB_SID=$(jq -r '.session_id // empty' "$f" 2>/dev/null || true)`,
+    '        FB_HSID=$(printf %s "$FB_SID" | od -An -tx1 | tr -d " \\n")',
+    '        log_ghost "fallback=tag_source_none channel=direct-chat marker=$(basename "$f")"',
+    '        recover_directchat_for "$FB_SID" "$FB_HSID"',
+    "      done",
     "    fi",
     "  else",
     '    log_ghost "skip=tag_source_none pending_total=$TOTAL_PENDING reply_in_last=$REPLY_IN_LAST"',
@@ -6196,7 +6213,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.398" : "dev";
+var agtCliVersion = true ? "0.28.400" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8662,4 +8679,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-QQ4ZC5K3.js.map
+//# sourceMappingURL=chunk-MZ7EU4V7.js.map