@integrity-labs/agt-cli 0.28.526 → 0.28.528

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-ONTG4Z5K.js";
+} from "../chunk-7N55RDMG.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-Z4P4VEDU.js";
+} from "../chunk-PR3QSOLI.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4834,7 +4834,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.526" : "dev";
+var cliVersion = true ? "0.28.528" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6006,7 +6006,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.526" : "dev";
+var cliVersion2 = true ? "0.28.528" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-ONTG4Z5K.js → chunk-7N55RDMG.js}

@@ -42,7 +42,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-Z4P4VEDU.js";
+} from "./chunk-PR3QSOLI.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -2313,6 +2313,7 @@ function provisionStopHook(codeName) {
     "exit 0"
   ].join("\n") + "\n";
   writeFileSync3(ghostHookPath, ghostHookScript, { mode: 493 });
+  const backlogHookPath = provisionBacklogPullHook(codeName);
   const settingsPath = join2(claudeDir, "settings.local.json");
   let settings = {};
   try {
@@ -2324,7 +2325,8 @@ function provisionStopHook(codeName) {
     {
       hooks: [
         { type: "command", command: hookScriptPath },
-        { type: "command", command: ghostHookPath }
+        { type: "command", command: ghostHookPath },
+        { type: "command", command: backlogHookPath }
       ]
     }
   ];
@@ -2417,6 +2419,138 @@ function provisionIsolationHook(codeName, agentId) {
   settings["hooks"] = hooks;
   writeFileSync3(settingsPath, JSON.stringify(settings, null, 2));
 }
+function provisionBacklogPullHook(codeName) {
+  const projectDir = getProjectDir(codeName);
+  const claudeDir = join2(projectDir, ".claude");
+  mkdirSync2(claudeDir, { recursive: true });
+  const hookScriptPath = join2(claudeDir, "agt-backlog-pull-hook.sh");
+  const hookScript = `#!/usr/bin/env bash
+# Auto-generated by Augmented (CS-1549) \u2014 Stop hook: don't end a turn idle
+# beside a non-empty backlog. Fail-open on every path; blocks at most once per
+# distinct backlog item so it can never wedge a session.
+set -uo pipefail
+trap 'exit 0' ERR
+
+INPUT="$(cat 2>/dev/null || true)"
+[ -n "$INPUT" ] || INPUT="\${CLAUDE_HOOK_INPUT:-}"
+[ -n "$INPUT" ] || exit 0
+command -v jq >/dev/null 2>&1 || exit 0
+command -v curl >/dev/null 2>&1 || exit 0
+
+# Never re-block a turn that Claude Code is already replaying because a hook
+# blocked it. Without this two Stop hooks can ping-pong.
+STOP_ACTIVE="$(printf '%s' "$INPUT" | jq -r '.stop_hook_active // false' 2>/dev/null || echo false)"
+# ENG-4660 form. \`[ test ] && exit 0\` is safe here only because this script omits
+# \`set -e\` and the list is not last; adding either re-creates the silent non-zero
+# hook exit. Use the explicit form both other Stop hooks were converted to.
+if [ "$STOP_ACTIVE" = "true" ]; then exit 0; fi
+
+# CodeRabbit on #4134, and the finding that most undermines this hook:
+# stop_hook_active alone is NOT enough. On the FIRST Stop event Claude Code runs
+# all three commands in the same hook group, with stop_hook_active=false for
+# every one of them. So if ghost-reply blocks, this hook still runs, still burns
+# its one-shot ledger entry, and its reason is never the one shown - the backlog
+# nudge is consumed unseen, and that item can never nudge again.
+#
+# Standing down whenever a channel reply is OWED fixes it, and matches the
+# ordering documented at the Stop registration: an unanswered person beats an
+# unpulled card. Cheap - a directory test, and it runs before either curl.
+CWD_IN="$(printf '%s' "$INPUT" | jq -r '.cwd // empty' 2>/dev/null || true)"
+if [ -n "$CWD_IN" ]; then
+  OWED_BASE="$(dirname "$CWD_IN")"
+  for d in telegram-pending-inbound slack-pending-inbound direct-chat-pending-inbound msteams-pending-inbound/.markers; do
+    if [ -d "$OWED_BASE/$d" ] && [ -n "$(ls -A "$OWED_BASE/$d" 2>/dev/null || true)" ]; then
+      echo "agt-backlog-pull-hook: standing down, a channel reply is owed" >&2
+      exit 0
+    fi
+  done
+fi
+
+# Identity. AGT_AGENT_ID is NOT exported into the parent claude's env (see
+# ENG-4823), so .mcp.json is the reliable source \u2014 the manager writes it
+# literally into every augmented MCP server's env block.
+PROJECT_DIR="\${CLAUDE_PROJECT_DIR:-$PWD}"
+AGENT_ID="\${AGT_AGENT_ID:-}"
+if [ -z "$AGENT_ID" ] && [ -f "$PROJECT_DIR/.mcp.json" ]; then
+  AGENT_ID="$(jq -r '[.mcpServers[]?.env?.AGT_AGENT_ID // empty] | map(select(. != "")) | .[0] // empty' "$PROJECT_DIR/.mcp.json" 2>/dev/null || true)"
+fi
+HOST="\${AGT_HOST:-}"
+KEY="\${AGT_API_KEY:-}"
+[ -n "$AGENT_ID" ] && [ -n "$HOST" ] && [ -n "$KEY" ] || exit 0
+
+JWT="$(curl -sf --connect-timeout 2 --max-time 5 -X POST "\${HOST}/host/exchange" -H 'Content-Type: application/json' -d "$(jq -n --arg k "$KEY" '{api_key:$k}')" 2>/dev/null | jq -r '.token // empty' 2>/dev/null || true)"
+[ -n "$JWT" ] || exit 0
+
+BOARD="$(curl -sf --connect-timeout 2 --max-time 5 -X POST "\${HOST}/host/my-kanban" -H 'Content-Type: application/json' -H "Authorization: Bearer $JWT" -d "$(jq -n --arg a "$AGENT_ID" '{agent_id:$a}')" 2>/dev/null || true)"
+[ -n "$BOARD" ] || exit 0
+
+# The counts that matter. \`waiting\` is deliberately NOT counted as work: a card
+# parked on a PR review or a human is someone else's work in progress, and
+# treating it as load is the exact loophole CS-1549 names. \`needs_attention\` is
+# excluded from the pullable set because the reaper parks stalled cards there
+# for a human \u2014 pulling one would just re-stall it.
+COUNTS="$(printf '%s' "$BOARD" | jq -c '
+  (.items // []) as $i
+  | {
+      in_progress: ([$i[] | select(.status == "in_progress")] | length),
+      todo:        ([$i[] | select(.status == "todo")] | length),
+      pullable:    [$i[] | select(.status == "backlog")]
+    }
+  | {in_progress, todo, n: ($i | length), top: (.pullable | first), count: (.pullable | length)}
+' 2>/dev/null || true)"
+[ -n "$COUNTS" ] || exit 0
+
+IN_PROGRESS="$(printf '%s' "$COUNTS" | jq -r '.in_progress // 0')"
+TODO="$(printf '%s' "$COUNTS" | jq -r '.todo // 0')"
+BACKLOG_N="$(printf '%s' "$COUNTS" | jq -r '.count // 0')"
+TOP_ID="$(printf '%s' "$COUNTS" | jq -r '.top.id // empty')"
+TOP_TITLE="$(printf '%s' "$COUNTS" | jq -r '.top.title // empty')"
+
+# Only fire when the agent is genuinely idle beside pullable work.
+[ "$IN_PROGRESS" = "0" ] || exit 0
+[ "$TODO" = "0" ] || exit 0
+[ "$BACKLOG_N" -gt 0 ] 2>/dev/null || exit 0
+[ -n "$TOP_ID" ] || exit 0
+
+# Ledger: at most one block per distinct top-of-backlog item. If the agent
+# declines and states a reason, the turn ends and this item never blocks again \u2014
+# a NEW top item re-arms it. This is the override: it needs no approval rail,
+# and the stated reason lands in the transcript where it is reviewable.
+LEDGER_DIR="\${HOME:-/tmp}/.augmented/.backlog-pull/\${AGENT_ID}"
+mkdir -p "$LEDGER_DIR" 2>/dev/null || exit 0
+SAFE_ID="$(printf '%s' "$TOP_ID" | tr -c 'A-Za-z0-9_.-' '_')"
+LEDGER="$LEDGER_DIR/$SAFE_ID"
+# ATOMIC acquire (CodeRabbit on #4134). A [ -e ] test then a : > write is a TOCTOU:
+# two concurrent Stop events can both observe no entry and both block. noclobber
+# makes create-if-absent one atomic operation - what every other ledger in this
+# file already uses. A failure means either "already claimed" or "unwritable";
+# both must NOT block, so either way exit 0.
+if ! ( set -o noclobber; : > "$LEDGER" ) 2>/dev/null; then exit 0; fi
+
+# Bound the ledger: one file per backlog item forever grows without limit on a
+# long-lived agent. Keep the newest 200. A pruned entry can at worst re-nudge
+# about an item that is still genuinely unpulled - the safe direction.
+LEDGER_N="$(ls -1 "$LEDGER_DIR" 2>/dev/null | wc -l | tr -d ' ')"
+if [ "\${LEDGER_N:-0}" -gt 200 ] 2>/dev/null; then
+  ls -1t "$LEDGER_DIR" 2>/dev/null | tail -n +201 | while IFS= read -r stale; do
+    rm -f "$LEDGER_DIR/$stale" 2>/dev/null || true
+  done
+fi
+
+echo "agt-backlog-pull-hook: FIRED backlog=\${BACKLOG_N} top=\${TOP_ID}" >&2
+
+REASON="You are ending this turn with nothing in progress and nothing in todo, while \${BACKLOG_N} item(s) sit in your backlog. That is idle, not busy \u2014 cards in \\\`waiting\\\` are parked on someone else, so they are not your work in progress.
+
+Pull the top item now: kanban_move(\\"\${TOP_ID}\\", \\"in_progress\\") \u2014 \\"\${TOP_TITLE}\\" \u2014 and start it.
+
+If you genuinely should not pull it, say so in one line and why (it is deliberately parked, it is ambiguous and you have asked a specific question, or you are mid-flight on long-running external work). Then end the turn \u2014 this will not ask you again about this item."
+
+jq -cn --arg r "$REASON" '{decision:"block", reason:$r}'
+exit 0
+`;
+  writeFileSync3(hookScriptPath, hookScript, { mode: 493 });
+  return hookScriptPath;
+}
 function provisionAutoKanbanProgressHook(codeName) {
   const projectDir = getProjectDir(codeName);
   const claudeDir = join2(projectDir, ".claude");
@@ -5317,7 +5451,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.526" : "dev";
+var agtCliVersion = true ? "0.28.528" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8629,4 +8763,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-ONTG4Z5K.js.map
+//# sourceMappingURL=chunk-7N55RDMG.js.map