@integrity-labs/agt-cli 0.28.47 → 0.28.49

package/dist/{chunk-UVE6VSU3.js → chunk-NCP6GVXS.js}

@@ -3,7 +3,7 @@ import {
   formatMissingVar,
   isClaudeFastMode,
   probeMcpEnvSubstitution
-} from "./chunk-ONG7KSRP.js";
+} from "./chunk-MJKGJXKV.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -1395,4 +1395,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-UVE6VSU3.js.map
+//# sourceMappingURL=chunk-NCP6GVXS.js.map

package/dist/{chunk-FON5YIFK.js → chunk-UVKKX46F.js}

@@ -22,7 +22,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-ONG7KSRP.js";
+} from "./chunk-MJKGJXKV.js";
 
 // ../../packages/core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
@@ -4633,21 +4633,96 @@ function provisionStopHook(codeName) {
     '    --arg c "$conversation_id" --arg r "$reply_to_id" --arg s "$service_url" --arg t "$TEXT"',
     '  rm -f "$marker_path" 2>/dev/null || true',
     "}",
+    '# ENG-6467 / ADR-0024 Slice 2.5 \u2014 block-turn-end (the D1 "composed-but-unsent"',
+    "# fix), gated dark behind AGT_CHANNEL_BLOCK_TURN_END_ENABLED (registry flag",
+    "# channel-block-turn-end; the env var is the operator/canary override the bash",
+    "# hook reads directly). When ON: if the agent owes a reply to the last-tagged",
+    "# inbound (a pending marker that is NOT discretionary and NOT undeliverable) and",
+    '# did NOT call the matching reply tool this turn, return {"decision":"block"} so',
+    "# the MODEL sends the reply itself \u2014 right thread, right content, NO recovery",
+    "# mis-correlation (the D2/koda failure the recover_* paths guard against).",
+    "# Capped to one block per inbound via a per-marker ledger; stop_hook_active is",
+    "# an ADDITIONAL belt suppressor, never the sole cap (it is unverified across the",
+    "# fleet's --resume sessions). After one block we fall through to the existing",
+    "# recovery-outbox. OFF (default / unset) \u21D2 exactly today's behavior.",
+    "BLOCK_TURN_END_ON=0",
+    'case "${AGT_CHANNEL_BLOCK_TURN_END_ENABLED:-}" in true|1|TRUE|True) BLOCK_TURN_END_ON=1;; esac',
+    `STOP_ACTIVE=$(echo "$INPUT" | jq -r '.stop_hook_active // false' 2>/dev/null || echo false)`,
+    'BLOCK_LEDGER_DIR="${AGENT_DIR}/.agt-block-turn-end-ledger"',
+    "# GC stale ledger entries (>1 day) so the per-marker cap dir cannot grow unbounded.",
+    'if [ -d "$BLOCK_LEDGER_DIR" ]; then find "$BLOCK_LEDGER_DIR" -type f -mtime +1 -delete 2>/dev/null || true; fi',
+    "# Returns 0 (after printing the block JSON to stdout) when it blocked; 1 otherwise.",
+    "#   $1 = reply-tool name regex (same shape the recover_* same-turn guards use)",
+    "#   $2 = newline-separated candidate marker paths for the tagged conversation",
+    "#   $3 = reply-tool hint shown to the model in the block reason",
+    "emit_block_if_obligated() {",
+    '  local reply_re="$1" candidates="$2" tool_hint="$3"',
+    '  if [ "$BLOCK_TURN_END_ON" != "1" ]; then return 1; fi',
+    "  # Belt: never block during a continuation Claude Code already flagged.",
+    '  if [ "$STOP_ACTIVE" = "true" ]; then return 1; fi',
+    "  # Already replied to THIS conversation this turn \u21D2 nothing owed.",
+    '  if echo "$TOOL_NAMES" | grep -qE "$reply_re"; then return 1; fi',
+    '  local m d u obligated=""',
+    "  while IFS= read -r m; do",
+    '    if [ -z "$m" ] || [ ! -f "$m" ]; then continue; fi',
+    "    # Fail-safe: a parse error defaults to 'true' (treat as discretionary /",
+    "    # undeliverable \u21D2 NOT owed \u21D2 do not block) so a partial/corrupt marker can",
+    "    # never manufacture a spurious block (the ENG-6288 swallowed-jq-error class).",
+    `    d=$(jq -r '.discretionary // false' "$m" 2>/dev/null || echo true)`,
+    `    u=$(jq -r '.undeliverable // false' "$m" 2>/dev/null || echo true)`,
+    '    if [ "$d" != "true" ] && [ "$u" != "true" ]; then obligated="$m"; break; fi',
+    "  done <<MARKERS",
+    "$candidates",
+    "MARKERS",
+    '  if [ -z "$obligated" ]; then return 1; fi',
+    '  local led_name; led_name="$(basename "$obligated")"',
+    "  # Only block when the per-marker cap can be PERSISTED. If the ledger dir or",
+    '  # file write fails we cannot record "blocked once", so blocking would risk a',
+    "  # re-block loop on the next Stop \u2014 degrade to recovery instead (CodeRabbit).",
+    '  if ! mkdir -p "$BLOCK_LEDGER_DIR" 2>/dev/null; then echo "agt-ghost-reply-hook: block-turn-end degraded (ledger dir create failed) \u2014 falling through to recovery" >&2; return 1; fi',
+    '  local led="${BLOCK_LEDGER_DIR}/${led_name}"',
+    "  # Per-marker cap: block at most once per inbound. Second Stop with the same",
+    "  # marker still pending \u21D2 the model ignored the block \u21D2 fall through to recovery.",
+    '  if [ -f "$led" ]; then echo "agt-ghost-reply-hook: block-turn-end degraded (already blocked ${led_name}) \u2014 falling through to recovery" >&2; return 1; fi',
+    '  if ! : > "$led" 2>/dev/null; then echo "agt-ghost-reply-hook: block-turn-end degraded (ledger write failed ${led_name}) \u2014 falling through to recovery" >&2; return 1; fi',
+    '  echo "agt-ghost-reply-hook: block-turn-end FIRED marker=${led_name} tool=$tool_hint" >&2',
+    '  local reason="You composed a reply but did not send it. The person is still waiting and will see only silence. Call ${tool_hint} now for the message you were answering: send your answer, or a brief status update if you are still working. Do not just summarize what you intended to say; actually send it via the tool."',
+    `  jq -cn --arg r "$reason" '{decision:"block", reason:$r}'`,
+    "  return 0",
+    "}",
     "# Strict correlation: only recover if the last channel tag in the",
     "# transcript points at a channel/key that has an exact-match pending",
-    "# marker. No tag found \u2192 skip; let timeout handle it.",
+    "# marker. No tag found \u2192 skip; let timeout handle it. Block-turn-end (when",
+    "# armed) runs FIRST per source; if it blocks we exit before recovery so the",
+    "# two mechanisms never both fire on one Stop.",
     'if [ "$TAG_SOURCE" = "telegram" ]; then',
     '  CHAT_ID=$(extract_attr "$CHANNEL_TAG" "chat_id")',
     '  MSG_ID=$(extract_attr "$CHANNEL_TAG" "message_id")',
+    '  if [ -n "$CHAT_ID" ] && [ -n "$MSG_ID" ]; then',
+    '    TG_CAND="${TG_MARKER_DIR}/$(safe_id "$CHAT_ID")__$(safe_id "$MSG_ID").json"',
+    `    if emit_block_if_obligated '(^|__)telegram[._](reply|send_message)$' "$TG_CAND" 'telegram.reply'; then exit 0; fi`,
+    "  fi",
     '  recover_telegram_for "$CHAT_ID" "$MSG_ID"',
     'elif [ "$TAG_SOURCE" = "slack" ]; then',
     '  CHANNEL=$(extract_attr "$CHANNEL_TAG" "channel")',
     '  THREAD_TS=$(extract_attr "$CHANNEL_TAG" "thread_ts")',
+    '  if [ -n "$CHANNEL" ]; then',
+    '    SL_PREFIX="${SL_MARKER_DIR}/$(safe_id "$CHANNEL")__$(safe_id "$THREAD_TS")__"',
+    "    shopt -s nullglob",
+    `    SL_CAND=$(printf '%s\\n' "$SL_PREFIX"*.json)`,
+    `    if emit_block_if_obligated '(^|__)slack[._]reply$' "$SL_CAND" 'slack.reply'; then exit 0; fi`,
+    "  fi",
     '  recover_slack_for "$CHANNEL" "$THREAD_TS"',
     'elif [ "$TAG_SOURCE" = "msteams" ]; then',
     '  CONVERSATION_ID=$(extract_attr "$CHANNEL_TAG" "conversation_id")',
     '  REPLY_TO_ID=$(extract_attr "$CHANNEL_TAG" "reply_to_id")',
     '  SERVICE_URL=$(extract_attr "$CHANNEL_TAG" "service_url")',
+    '  if [ -n "$CONVERSATION_ID" ]; then',
+    '    HEX_CONV=$(printf %s "$CONVERSATION_ID" | od -An -tx1 | tr -d " \\n" | cut -c1-64)',
+    "    shopt -s nullglob",
+    "    MS_CAND=$(printf '%s\\n' \"${MS_MARKER_DIR}/${HEX_CONV}\"*.json)",
+    `    if emit_block_if_obligated '(^|__)teams[._]reply$' "$MS_CAND" 'teams.reply'; then exit 0; fi`,
+    "  fi",
     '  recover_teams_for "$CONVERSATION_ID" "$REPLY_TO_ID" "$SERVICE_URL"',
     "fi",
     "exit 0"
@@ -7280,7 +7355,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.47" : "dev";
+var agtCliVersion = true ? "0.28.49" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8561,4 +8636,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-FON5YIFK.js.map
+//# sourceMappingURL=chunk-UVKKX46F.js.map