@integrity-labs/agt-cli 0.28.437 → 0.28.438

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-7C3W6FP7.js";
+} from "../chunk-WNSFE56R.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -4830,7 +4830,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.437" : "dev";
+var cliVersion = true ? "0.28.438" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6002,7 +6002,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.437" : "dev";
+var cliVersion2 = true ? "0.28.438" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-7C3W6FP7.js → chunk-WNSFE56R.js}

@@ -4901,7 +4901,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.437" : "dev";
+var agtCliVersion = true ? "0.28.438" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -7402,4 +7402,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-7C3W6FP7.js.map
+//# sourceMappingURL=chunk-WNSFE56R.js.map

package/dist/lib/manager-worker.js

@@ -42,7 +42,7 @@ import {
   resolveEffectivePinRaw,
   safeWriteJsonAtomic,
   setConfigHash
-} from "../chunk-7C3W6FP7.js";
+} from "../chunk-WNSFE56R.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -9667,7 +9667,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.437" : "dev";
+var agtCliVersion = true ? "0.28.438" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/direct-chat-channel.js

@@ -35505,6 +35505,21 @@ function readUsageLimitUntil(opts) {
 import { readFileSync as readFileSync10 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join11 } from "path";
+
+// ../core/dist/channels/governance/sender-policy-decline.js
+function decideDeclineReply(input) {
+  const last = input.cache.get(input.key);
+  if (last !== void 0) {
+    const elapsed = input.now - last;
+    if (elapsed < input.cooldownMs) {
+      return { reply: false, remainingMs: input.cooldownMs - elapsed };
+    }
+  }
+  input.cache.set(input.key, input.now);
+  return { reply: true };
+}
+
+// src/account-enforcement-notice.ts
 function accountEnforcementMarkerPath(codeName) {
   if (!codeName) return null;
   return join11(homedir3(), ".augmented", codeName, ACCOUNT_ENFORCEMENT_MARKER_FILENAME);
@@ -35520,18 +35535,16 @@ function readAccountEnforcementLevel(opts) {
   }
   return parseAccountEnforcementMarker(raw)?.level ?? null;
 }
-
-// ../core/dist/channels/governance/sender-policy-decline.js
-function decideDeclineReply(input) {
-  const last = input.cache.get(input.key);
-  if (last !== void 0) {
-    const elapsed = input.now - last;
-    if (elapsed < input.cooldownMs) {
-      return { reply: false, remainingMs: input.cooldownMs - elapsed };
-    }
+function shouldSendAccountWarn(opts) {
+  if (readAccountEnforcementLevel({ codeName: opts.codeName, filePath: opts.filePath }) !== "warn") {
+    return false;
   }
-  input.cache.set(input.key, input.now);
-  return { reply: true };
+  return decideDeclineReply({
+    cache: opts.cache,
+    key: opts.key,
+    cooldownMs: opts.cooldownMs,
+    now: opts.now ?? Date.now()
+  }).reply;
 }
 
 // src/direct-chat-channel.ts
@@ -35543,6 +35556,12 @@ var DIRECT_CHAT_MAINTENANCE_COOLDOWN_MS = (() => {
 })();
 var DIRECT_CHAT_USAGE_LIMIT_CACHE = /* @__PURE__ */ new Map();
 var DIRECT_CHAT_ACCOUNT_MUTE_CACHE = /* @__PURE__ */ new Map();
+var DIRECT_CHAT_ACCOUNT_WARN_CACHE = /* @__PURE__ */ new Map();
+var DIRECT_CHAT_ACCOUNT_WARN_COOLDOWN_MS = (() => {
+  const raw = process.env["DIRECT_CHAT_ACCOUNT_WARN_COOLDOWN_SEC"];
+  const n = raw ? Number(raw) : NaN;
+  return Number.isFinite(n) && n >= 0 ? n * 1e3 : 24 * 60 * 60 * 1e3;
+})();
 var AGT_HOST = process.env.AGT_HOST;
 var AGT_API_KEY = process.env.AGT_API_KEY;
 var AGT_AGENT_ID = process.env.AGT_AGENT_ID;
@@ -35769,6 +35788,38 @@ async function apiPost(path, body) {
   }
   return res;
 }
+async function maybeSendDirectChatAccountWarn(sessionId) {
+  try {
+    if (!shouldSendAccountWarn({
+      codeName: AGT_AGENT_CODE_NAME ?? null,
+      cache: DIRECT_CHAT_ACCOUNT_WARN_CACHE,
+      key: `${sessionId}|account_warn`,
+      cooldownMs: DIRECT_CHAT_ACCOUNT_WARN_COOLDOWN_MS
+    })) {
+      return;
+    }
+    const res = await apiPost("/host/direct-chat/reply", {
+      agent_id: AGT_AGENT_ID,
+      session_id: sessionId,
+      content: buildAccountIssueReplyText(),
+      message_ids: []
+    });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok || data.error) {
+      DIRECT_CHAT_ACCOUNT_WARN_CACHE.delete(`${sessionId}|account_warn`);
+      process.stderr.write(
+        `direct-chat-channel: account-warn follow-up failed: ${data.error ?? `HTTP ${res.status}`}
+`
+      );
+    }
+  } catch (err) {
+    DIRECT_CHAT_ACCOUNT_WARN_CACHE.delete(`${sessionId}|account_warn`);
+    process.stderr.write(
+      `direct-chat-channel: account-warn follow-up error: ${err.message}
+`
+    );
+  }
+}
 var inboundAttachmentDeps = {
   fetchUrl: async (url) => {
     const res = await fetchWithTimeout(url, { method: "GET" }, HTTP_TIMEOUT_MS);
@@ -35980,6 +36031,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
             }
           }
         }
+        await maybeSendDirectChatAccountWarn(session_id);
         return { content: [{ type: "text", text: "sent" }] };
       } catch (err) {
         return {
@@ -36005,6 +36057,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
       claimTracker.clear(session_id, message_ids);
       clearDirectChatPendingMarkersForSession(DIRECT_CHAT_PENDING_INBOUND_DIR, session_id);
       recordDirectChatDelivery(session_id, message_ids);
+      await maybeSendDirectChatAccountWarn(session_id);
       return { content: [{ type: "text", text: "sent" }] };
     } catch (err) {
       return {

package/dist/mcp/slack-channel.js

@@ -35089,6 +35089,17 @@ function readAccountEnforcementLevel(opts) {
   }
   return parseAccountEnforcementMarker(raw)?.level ?? null;
 }
+function shouldSendAccountWarn(opts) {
+  if (readAccountEnforcementLevel({ codeName: opts.codeName, filePath: opts.filePath }) !== "warn") {
+    return false;
+  }
+  return decideDeclineReply({
+    cache: opts.cache,
+    key: opts.key,
+    cooldownMs: opts.cooldownMs,
+    now: opts.now ?? Date.now()
+  }).reply;
+}
 
 // src/watch-command.ts
 var WATCH_DEFAULT_DURATION_MS = 2 * 60 * 60 * 1e3;
@@ -39171,6 +39182,57 @@ async function maybeSendAccountMuteNotice(args) {
     clearTimeout(timeoutId);
   }
 }
+var SLACK_ACCOUNT_WARN_NOTICE_CACHE = /* @__PURE__ */ new Map();
+var SLACK_ACCOUNT_WARN_COOLDOWN_MS = (() => {
+  const raw = process.env["SLACK_ACCOUNT_WARN_COOLDOWN_SEC"];
+  const n = raw ? Number(raw) : NaN;
+  return Number.isFinite(n) && n >= 0 ? n * 1e3 : 24 * 60 * 60 * 1e3;
+})();
+async function maybeSendSlackAccountWarn(args) {
+  if (!BOT_TOKEN || !args.channel) return;
+  const key2 = `${args.channel}|${args.threadTs ?? "root"}|account_warn`;
+  if (!shouldSendAccountWarn({
+    codeName: AGENT_CODE_NAME,
+    cache: SLACK_ACCOUNT_WARN_NOTICE_CACHE,
+    key: key2,
+    cooldownMs: SLACK_ACCOUNT_WARN_COOLDOWN_MS
+  })) {
+    return;
+  }
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), 1e4);
+  try {
+    const res = await fetch("https://slack.com/api/chat.postMessage", {
+      method: "POST",
+      signal: controller.signal,
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${BOT_TOKEN}`
+      },
+      body: JSON.stringify({
+        channel: args.channel,
+        text: buildAccountIssueReplyText(),
+        ...args.threadTs ? { thread_ts: args.threadTs } : {}
+      })
+    });
+    const data = await res.json();
+    if (!data.ok) {
+      SLACK_ACCOUNT_WARN_NOTICE_CACHE.delete(key2);
+      process.stderr.write(
+        `slack-channel(${AGENT_CODE_NAME}): account-warn follow-up post failed: ${data.error ?? "unknown"}
+`
+      );
+    }
+  } catch (err) {
+    SLACK_ACCOUNT_WARN_NOTICE_CACHE.delete(key2);
+    process.stderr.write(
+      `slack-channel(${AGENT_CODE_NAME}): account-warn follow-up error: ${err.message}
+`
+    );
+  } finally {
+    clearTimeout(timeoutId);
+  }
+}
 var BLOCK_KIT_DISABLED = process.env.SLACK_BLOCK_KIT_DISABLED === "true";
 var ALLOWED_USERS = parseAllowedUsersCsv(process.env.SLACK_ALLOWED_USERS);
 var PING_ALLOWED_USERS = parseAllowedUsersCsv(process.env.SLACK_PING_ALLOWED_USERS);
@@ -42126,6 +42188,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
       });
       if (redirectNote) base += `. ${redirectNote}`;
       const sentTs = typeof data.ts === "string" ? data.ts : void 0;
+      await maybeSendSlackAccountWarn({ channel: effectiveChannel, threadTs: effectiveThreadTs });
       return {
         content: [{ type: "text", text: sentTs ? `${base} (ts=${sentTs})` : base }]
       };

package/dist/mcp/telegram-channel.js

@@ -35391,6 +35391,17 @@ function readAccountEnforcementLevel(opts) {
   }
   return parseAccountEnforcementMarker(raw)?.level ?? null;
 }
+function shouldSendAccountWarn(opts) {
+  if (readAccountEnforcementLevel({ codeName: opts.codeName, filePath: opts.filePath }) !== "warn") {
+    return false;
+  }
+  return decideDeclineReply({
+    cache: opts.cache,
+    key: opts.key,
+    cooldownMs: opts.cooldownMs,
+    now: opts.now ?? Date.now()
+  }).reply;
+}
 
 // src/turn-initiator-marker.ts
 import { writeFileSync as writeFileSync4, readFileSync as readFileSync6, mkdirSync as mkdirSync4, renameSync as renameSync3 } from "fs";
@@ -38301,6 +38312,39 @@ async function maybeSendTelegramAccountMuteNotice(args) {
     );
   }
 }
+var TELEGRAM_ACCOUNT_WARN_NOTICE_CACHE = /* @__PURE__ */ new Map();
+var TELEGRAM_ACCOUNT_WARN_COOLDOWN_MS = (() => {
+  const raw = process.env["TELEGRAM_ACCOUNT_WARN_COOLDOWN_SEC"];
+  const n = raw ? Number(raw) : NaN;
+  return Number.isFinite(n) && n >= 0 ? n * 1e3 : 24 * 60 * 60 * 1e3;
+})();
+async function maybeSendTelegramAccountWarn(args) {
+  const key2 = `${args.chatId}|account_warn`;
+  if (!shouldSendAccountWarn({
+    codeName: AGENT_CODE_NAME,
+    cache: TELEGRAM_ACCOUNT_WARN_NOTICE_CACHE,
+    key: key2,
+    cooldownMs: TELEGRAM_ACCOUNT_WARN_COOLDOWN_MS
+  })) {
+    return;
+  }
+  try {
+    const resp = await telegramApiCall("sendMessage", { chat_id: args.chatId, text: buildAccountIssueReplyText() }, 1e4);
+    if (!resp.ok) {
+      TELEGRAM_ACCOUNT_WARN_NOTICE_CACHE.delete(key2);
+      process.stderr.write(
+        `telegram-channel(${AGENT_CODE_NAME}): account-warn follow-up rejected (chat=${redactId(String(args.chatId))}): ${resp.description ?? "unknown"}
+`
+      );
+    }
+  } catch (err) {
+    TELEGRAM_ACCOUNT_WARN_NOTICE_CACHE.delete(key2);
+    process.stderr.write(
+      `telegram-channel(${AGENT_CODE_NAME}): account-warn follow-up failed: ${err.message}
+`
+    );
+  }
+}
 var ACK_EMOJI = (process.env.TELEGRAM_ACK_REACTION ?? "").trim() || "\u{1F440}";
 var TELEGRAM_SKIP_REACTION = (process.env.TELEGRAM_SKIP_REACTION ?? "").trim();
 async function setMessageReaction(chatId, messageId, emoji2) {
@@ -40512,6 +40556,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
           delivered_at: (/* @__PURE__ */ new Date()).toISOString()
         });
       }
+      await maybeSendTelegramAccountWarn({ chatId: chat_id });
       return { content: [{ type: "text", text: "sent" }] };
     } catch (err) {
       return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.437",
+  "version": "0.28.438",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {