@integrity-labs/agt-cli 0.28.483 → 0.28.485

package/dist/mcp/telegram-channel.js

@@ -30126,13 +30126,13 @@ var StdioServerTransport = class {
 import https from "https";
 import { createHash as createHash3, randomUUID as randomUUID3 } from "crypto";
 import {
-  closeSync,
+  closeSync as closeSync2,
   createWriteStream,
   existsSync as existsSync9,
   ftruncateSync,
   mkdirSync as mkdirSync9,
-  openSync,
-  readFileSync as readFileSync16,
+  openSync as openSync2,
+  readFileSync as readFileSync14,
   readdirSync as readdirSync6,
   realpathSync,
   renameSync as renameSync7,
@@ -33756,18 +33756,27 @@ var INTEGRATION_REGISTRY = [
     id: "firecrawl",
     name: "Firecrawl",
     category: "knowledge",
-    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Augmented Team manages Firecrawl access for you - there is no key to enter.",
+    description: "Web data for agents: scrape, map, crawl and search any website for clean structured data, plus scheduled change-detection monitors whose updates arrive in the agent's direct-chat. Connect via the platform-managed account, or bring your own Firecrawl API key.",
     // ENG-7217: Firecrawl migrates from a customer-API-key stdio MCP
     // (`npx firecrawl-mcp`, FIRECRAWL_API_KEY) to a PREMIUM, platform-managed
     // integration on the Deck / ElevenLabs model (ADR-0031, epic ENG-6920):
     // Augmented holds ONE Firecrawl account key (`FIRECRAWL_ACCOUNT_KEY`) that
-    // every customer agent's web-data calls bill back to, so the key is a single
-    // platform-held secret, NOT a per-agent credential. Auth type is therefore
-    // `none` - customers never enter a key. The agent-facing tools are brokered
-    // server-side (firecrawl-broker.ts, reusing the official @mendable/firecrawl-js
-    // SDK) rather than via the stdio MCP, so usage can be metered at the one
-    // control-plane chokepoint and gated on a per-org opt-in + monthly USD cap.
-    supported_auth_types: ["none"],
+    // every customer agent's web-data calls bill back to. The agent-facing tools
+    // are brokered server-side (firecrawl-broker.ts, reusing the official
+    // @mendable/firecrawl-js SDK) rather than via the stdio MCP, so managed usage
+    // is metered at the one control-plane chokepoint and gated on a per-org opt-in
+    // + monthly USD cap.
+    //
+    // ENG-8304 / ADR-0055 (Phase 1b — Firecrawl is the BYO exemplar): `api_key` is
+    // now also offered so a customer can bring their OWN Firecrawl key. A BYO
+    // install (`credential_source='byo'`) authenticates with the customer's key
+    // (stored encrypted on the install) and is NOT metered — its upstream cost is
+    // on the customer's own Firecrawl bill. BYO is gated on the plan-tier
+    // `byo_credentials` entitlement; managed stays the platform-key, billed path.
+    // `api_key` is the BYO option; the connect UI offers it via the toolkit's
+    // `auth_types` seed (Firecrawl surfaces through the premium list, not the
+    // native `installable` picker — that descriptor is for non-premium natives).
+    supported_auth_types: ["none", "api_key"],
     capabilities: [
       { id: "firecrawl:scrape", name: "Scrape Pages", description: "Fetch a single URL as clean markdown / structured data (firecrawl_scrape).", access: "write" },
       { id: "firecrawl:search", name: "Web Search", description: "Search the web and return ranked results, optionally scraped (firecrawl_search).", access: "write" },
@@ -37553,11 +37562,77 @@ function emitToolCallMarkupRedactionTelemetry(channel) {
 }
 
 // src/rate-limit-watch.ts
-import { readFileSync as readFileSync10, readdirSync, statSync } from "fs";
+import { closeSync, fstatSync, openSync, readSync, readdirSync, statSync } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join8 } from "path";
 var DEFAULT_WATCH_MS = 5e3;
 var DEFAULT_POLL_MS = 400;
+var INITIAL_TAIL_BYTES = 256 * 1024;
+var TAIL_WIDEN_FACTOR = 8;
+var TAIL_SKEW_TOLERANCE_MS = 5 * 6e4;
+function readClassifiableTail(path, sinceMs, opts) {
+  let want = Math.max(1, opts?.initialBytes ?? INITIAL_TAIL_BYTES);
+  for (; ; ) {
+    const slice = readTailSlice(path, want);
+    if (slice === null) return "";
+    if (slice.fromStart) return slice.text;
+    const oldest = oldestTimestampMs(slice.text);
+    if (oldest !== null && oldest < sinceMs - TAIL_SKEW_TOLERANCE_MS) return slice.text;
+    want *= TAIL_WIDEN_FACTOR;
+  }
+}
+function readTailSlice(path, bytes) {
+  let fd;
+  try {
+    fd = openSync(path, "r");
+  } catch {
+    return null;
+  }
+  try {
+    const size = fstatSync(fd).size;
+    const start = size > bytes ? size - bytes : 0;
+    const len = size - start;
+    if (len <= 0) return { text: "", fromStart: true };
+    const buf = Buffer.allocUnsafe(len);
+    let read = 0;
+    while (read < len) {
+      const n = readSync(fd, buf, read, len - read, start + read);
+      if (n <= 0) break;
+      read += n;
+    }
+    if (read < len) return null;
+    let text = buf.subarray(0, read).toString("utf-8");
+    if (start > 0) {
+      const nl = text.indexOf("\n");
+      text = nl === -1 ? "" : text.slice(nl + 1);
+    }
+    return { text, fromStart: start === 0 };
+  } catch {
+    return null;
+  } finally {
+    closeSync(fd);
+  }
+}
+function oldestTimestampMs(text) {
+  let idx = 0;
+  while (idx < text.length) {
+    const nl = text.indexOf("\n", idx);
+    const line = (nl === -1 ? text.slice(idx) : text.slice(idx, nl)).trim();
+    if (line) {
+      try {
+        const ts = JSON.parse(line).timestamp;
+        if (typeof ts === "string") {
+          const ms = new Date(ts).getTime();
+          if (Number.isFinite(ms)) return ms;
+        }
+      } catch {
+      }
+    }
+    if (nl === -1) break;
+    idx = nl + 1;
+  }
+  return null;
+}
 function agentTranscriptDir(opts) {
   const cwd = opts?.cwd ?? process.cwd();
   const home = opts?.home ?? homedir4();
@@ -37581,12 +37656,10 @@ function classifyTranscriptSince(opts) {
     } catch {
       continue;
     }
-    let content;
-    try {
-      content = readFileSync10(path, "utf-8");
-    } catch {
-      continue;
-    }
+    const content = readClassifiableTail(path, opts.sinceMs, {
+      ...opts.initialTailBytes != null ? { initialBytes: opts.initialTailBytes } : {}
+    });
+    if (!content) continue;
     newest = pickNewerClassification(
       newest,
       classifyTranscriptRateLimit(content, opts.sinceMs, opts.nowMs, new Date(opts.nowMs))
@@ -37622,7 +37695,7 @@ async function watchForRateLimitRefusal(opts) {
 }
 
 // src/turn-failure-watch.ts
-import { readFileSync as readFileSync11, readdirSync as readdirSync2, statSync as statSync2 } from "fs";
+import { readdirSync as readdirSync2, statSync as statSync2 } from "fs";
 import { join as join9 } from "path";
 function turnFailureNoticeEnabled(env2) {
   return resolveHostBooleanFlag({
@@ -37666,12 +37739,8 @@ function classifyTurnFailureSince(opts) {
     if (cached2 && cached2.fingerprint === fingerprint) {
       scan = cached2.scan;
     } else {
-      let content;
-      try {
-        content = readFileSync11(path, "utf-8");
-      } catch {
-        continue;
-      }
+      const content = readClassifiableTail(path, opts.sinceMs);
+      if (!content) continue;
       const analysis = analyzeTranscriptTurnFailure(content, opts.sinceMs, opts.nowMs);
       scan = {
         result: analysis.result,
@@ -38048,11 +38117,11 @@ function emitTransientApiErrorTelemetry(channel, match, original) {
 }
 
 // src/telegram-pending-inbound-cleanup.ts
-import { readdirSync as readdirSync3, readFileSync as readFileSync12, statSync as statSync3 } from "fs";
+import { readdirSync as readdirSync3, readFileSync as readFileSync10, statSync as statSync3 } from "fs";
 import { join as join11 } from "path";
 function markerArrivalMs(fullPath) {
   try {
-    const received = JSON.parse(readFileSync12(fullPath, "utf-8")).received_at;
+    const received = JSON.parse(readFileSync10(fullPath, "utf-8")).received_at;
     const parsed = received ? Date.parse(received) : Number.NaN;
     if (Number.isFinite(parsed)) return parsed;
   } catch {
@@ -38114,7 +38183,7 @@ function removeRecoveryLedgerEntry(ledgerDir, markerName, unlink = (p2) => {
 }
 
 // src/inbound-delivery-ledger.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync7, readdirSync as readdirSync4, readFileSync as readFileSync13, renameSync as renameSync5, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync7, readdirSync as readdirSync4, readFileSync as readFileSync11, renameSync as renameSync5, writeFileSync as writeFileSync8 } from "fs";
 import { join as join13 } from "path";
 function safeInboundId(inboundId) {
   return inboundId.replace(/[^A-Za-z0-9_-]/g, "_");
@@ -38124,7 +38193,7 @@ var defaultDeps = {
   writeFile: (path, data) => writeFileSync8(path, data, "utf8"),
   rename: (from, to) => renameSync5(from, to),
   readdir: (dir) => readdirSync4(dir),
-  readFile: (path) => readFileSync13(path, "utf8"),
+  readFile: (path) => readFileSync11(path, "utf8"),
   exists: (path) => existsSync7(path)
 };
 function writeInboundDeliveryLedgerEntry(dir, record2, deps = defaultDeps) {
@@ -38338,7 +38407,7 @@ function createKanbanCardActiveClient(args) {
 import {
   existsSync as existsSync8,
   mkdirSync as mkdirSync8,
-  readFileSync as readFileSync14,
+  readFileSync as readFileSync12,
   renameSync as renameSync6,
   statSync as statSync4,
   unlinkSync as unlinkSync7,
@@ -38435,7 +38504,7 @@ function defaultLockMtimeMs(path) {
 function readLockHolder(path) {
   if (!existsSync8(path)) return null;
   try {
-    const raw = readFileSync14(path, "utf8");
+    const raw = readFileSync12(path, "utf8");
     const parsed = JSON.parse(raw);
     const pid = typeof parsed.pid === "number" ? parsed.pid : Number(parsed.pid);
     if (!Number.isFinite(pid) || pid <= 0) return null;
@@ -38447,7 +38516,7 @@ function readLockHolder(path) {
 }
 
 // src/ack-reaction.ts
-import { readdirSync as readdirSync5, readFileSync as readFileSync15, writeFileSync as writeFileSync10 } from "fs";
+import { readdirSync as readdirSync5, readFileSync as readFileSync13, writeFileSync as writeFileSync10 } from "fs";
 import { join as join15 } from "path";
 var REPLY_WEDGED_THRESHOLD_MS = 5 * 60 * 1e3;
 var ACK_STARTUP_GRACE_MS = 6e4;
@@ -38521,7 +38590,7 @@ var GIVE_UP_SIGNAL_MAX_AGE_MS = 30 * 60 * 1e3;
 function readGiveUpSignal(path, now = Date.now()) {
   if (!path) return null;
   try {
-    const raw = JSON.parse(readFileSync15(path, "utf8"));
+    const raw = JSON.parse(readFileSync13(path, "utf8"));
     if (typeof raw.gave_up_at !== "string") return null;
     const t = Date.parse(raw.gave_up_at);
     if (!Number.isFinite(t) || t > now) return null;
@@ -38562,7 +38631,7 @@ function oldestPendingMarkerAgeMs(dir, now = Date.now(), opts) {
     if (!name.endsWith(".json")) continue;
     let receivedAt;
     try {
-      const raw = JSON.parse(readFileSync15(join15(dir, name), "utf-8"));
+      const raw = JSON.parse(readFileSync13(join15(dir, name), "utf-8"));
       if (raw.discretionary === true) continue;
       if (!opts?.includeSeen && typeof raw.seen_at === "string" && raw.seen_at) continue;
       receivedAt = raw.received_at;
@@ -38646,7 +38715,7 @@ function recordChannelDeflection(agentDir, channel, cause) {
   const path = deflectionCounterPath(agentDir, channel);
   let counts = {};
   try {
-    const parsed = JSON.parse(readFileSync15(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync13(path, "utf-8"));
     if (parsed && typeof parsed === "object") counts = parsed;
   } catch {
   }
@@ -38834,7 +38903,7 @@ var PEER_PRESENCE_STATE_FILE = TELEGRAM_AGENT_DIR ? join16(TELEGRAM_AGENT_DIR, "
 function readPeerPresenceState() {
   if (!PEER_PRESENCE_STATE_FILE) return null;
   try {
-    const parsed = JSON.parse(readFileSync16(PEER_PRESENCE_STATE_FILE, "utf-8"));
+    const parsed = JSON.parse(readFileSync14(PEER_PRESENCE_STATE_FILE, "utf-8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
     return parsed;
   } catch {
@@ -40220,7 +40289,7 @@ function writePendingInboundMarker(chatId, messageId, chatType, undeliverable =
 function rewriteTelegramMarkerInPlace(path, marker) {
   let fd;
   try {
-    fd = openSync(path, "r+");
+    fd = openSync2(path, "r+");
     const buf = Buffer.from(JSON.stringify(marker));
     ftruncateSync(fd, 0);
     writeSync(fd, buf, 0, buf.length, 0);
@@ -40228,7 +40297,7 @@ function rewriteTelegramMarkerInPlace(path, marker) {
   } finally {
     if (fd !== void 0) {
       try {
-        closeSync(fd);
+        closeSync2(fd);
       } catch {
       }
     }
@@ -40237,7 +40306,7 @@ function rewriteTelegramMarkerInPlace(path, marker) {
 function clearTelegramMarkerFileWithHeal(fullPath) {
   let marker = null;
   try {
-    marker = JSON.parse(readFileSync16(fullPath, "utf-8"));
+    marker = JSON.parse(readFileSync14(fullPath, "utf-8"));
   } catch {
   }
   if (marker && decideRecoveryHeal({
@@ -40260,7 +40329,7 @@ function markTelegramMarkerPromisedInPlace(fullPath) {
 function markTelegramMarkerEngagedInPlace(fullPath, opts) {
   let marker;
   try {
-    marker = JSON.parse(readFileSync16(fullPath, "utf-8"));
+    marker = JSON.parse(readFileSync14(fullPath, "utf-8"));
   } catch {
     return false;
   }
@@ -40275,7 +40344,7 @@ function markTelegramMarkerEngagedInPlace(fullPath, opts) {
   rewriteTelegramMarkerInPlace(fullPath, marker);
   if (!opts.promise) return false;
   try {
-    const readBack = JSON.parse(readFileSync16(fullPath, "utf-8"));
+    const readBack = JSON.parse(readFileSync14(fullPath, "utf-8"));
     return typeof readBack.promised_at === "string" && readBack.promised_at.length > 0;
   } catch {
     return false;
@@ -40284,7 +40353,7 @@ function markTelegramMarkerEngagedInPlace(fullPath, opts) {
 function markTelegramMarkerSeenWithHeal(fullPath) {
   let marker = null;
   try {
-    marker = JSON.parse(readFileSync16(fullPath, "utf-8"));
+    marker = JSON.parse(readFileSync14(fullPath, "utf-8"));
   } catch {
     return;
   }
@@ -40299,7 +40368,7 @@ function markTelegramMarkerSeenWithHeal(fullPath) {
 function markTelegramMarkerPromisedWithHeal(fullPath) {
   let marker = null;
   try {
-    marker = JSON.parse(readFileSync16(fullPath, "utf-8"));
+    marker = JSON.parse(readFileSync14(fullPath, "utf-8"));
   } catch {
     return;
   }
@@ -40317,7 +40386,7 @@ function readPendingInboundMarker(chatId, messageId) {
   const path = pendingInboundPath(chatId, messageId);
   if (!path || !existsSync9(path)) return null;
   try {
-    return JSON.parse(readFileSync16(path, "utf-8"));
+    return JSON.parse(readFileSync14(path, "utf-8"));
   } catch {
     return null;
   }
@@ -40340,7 +40409,7 @@ async function processRecoveryOutboxFile(filename) {
   const fullPath = join16(RECOVERY_OUTBOX_DIR, filename);
   let payload;
   try {
-    const raw = readFileSync16(fullPath, "utf-8");
+    const raw = readFileSync14(fullPath, "utf-8");
     payload = JSON.parse(raw);
   } catch (err) {
     process.stderr.write(
@@ -40545,7 +40614,7 @@ async function processNoticeOutboxFile(filename) {
     }
     let payload;
     try {
-      const parsed = JSON.parse(readFileSync16(fullPath, "utf-8"));
+      const parsed = JSON.parse(readFileSync14(fullPath, "utf-8"));
       if (!parsed || typeof parsed !== "object") throw new Error("not an object");
       payload = parsed;
     } catch {
@@ -40659,7 +40728,7 @@ function sweepTelegramStaleMarkers(thresholdMs) {
     const fullPath = join16(PENDING_INBOUND_DIR, filename);
     let marker;
     try {
-      marker = JSON.parse(readFileSync16(fullPath, "utf-8"));
+      marker = JSON.parse(readFileSync14(fullPath, "utf-8"));
     } catch (err) {
       process.stderr.write(
         `telegram-channel(${AGENT_CODE_NAME}): stale-marker parse failed for ${redactId(filename)}: ${err.message}
@@ -40718,7 +40787,7 @@ var telegramProgressTickRunning = false;
 function readTelegramProgressHeartbeat() {
   if (!TELEGRAM_PROGRESS_HEARTBEAT_PATH || !existsSync9(TELEGRAM_PROGRESS_HEARTBEAT_PATH)) return null;
   try {
-    return parseProgressHeartbeat(readFileSync16(TELEGRAM_PROGRESS_HEARTBEAT_PATH, "utf-8"));
+    return parseProgressHeartbeat(readFileSync14(TELEGRAM_PROGRESS_HEARTBEAT_PATH, "utf-8"));
   } catch {
     return null;
   }
@@ -40745,7 +40814,7 @@ function findTelegramProgressTarget() {
       if (!name.endsWith(".json")) continue;
       let m;
       try {
-        m = JSON.parse(readFileSync16(join16(PENDING_INBOUND_DIR, name), "utf-8"));
+        m = JSON.parse(readFileSync14(join16(PENDING_INBOUND_DIR, name), "utf-8"));
       } catch {
         continue;
       }
@@ -40876,7 +40945,7 @@ function listPendingInboundChatIds() {
       if (!name.endsWith(".json")) continue;
       try {
         const marker = JSON.parse(
-          readFileSync16(join16(PENDING_INBOUND_DIR, name), "utf8")
+          readFileSync14(join16(PENDING_INBOUND_DIR, name), "utf8")
         );
         if (typeof marker.seen_at === "string" && marker.seen_at) continue;
         if (typeof marker.chat_id === "string" && marker.chat_id) chats.add(marker.chat_id);
@@ -41369,7 +41438,7 @@ mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
           isError: true
         };
       }
-      bytes = readFileSync16(realPath);
+      bytes = readFileSync14(realPath);
     } catch (err) {
       return { content: [{ type: "text", text: `Failed to read file: ${err.message}` }], isError: true };
     }
@@ -41949,7 +42018,7 @@ async function replayPendingTelegramMarkers() {
     const fullPath = join16(PENDING_INBOUND_DIR, name);
     let marker;
     try {
-      marker = JSON.parse(readFileSync16(fullPath, "utf-8"));
+      marker = JSON.parse(readFileSync14(fullPath, "utf-8"));
     } catch {
       continue;
     }

package/dist/{persistent-session-IBMUPQZ2.js → persistent-session-CEGPLUHO.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-DNC5JGOV.js";
+} from "./chunk-SRR5XVWJ.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-IBMUPQZ2.js.map
+//# sourceMappingURL=persistent-session-CEGPLUHO.js.map

package/dist/{responsiveness-probe-QBLQIMZR.js → responsiveness-probe-RBLOTOHD.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-DNC5JGOV.js";
+} from "./chunk-SRR5XVWJ.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -596,4 +596,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-QBLQIMZR.js.map
+//# sourceMappingURL=responsiveness-probe-RBLOTOHD.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.483",
+  "version": "0.28.485",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {