@integrity-labs/agt-cli 0.28.545 → 0.28.547

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-6CHFBMJM.js";
+} from "../chunk-SYHPBJK7.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-QPSEQLSI.js";
+} from "../chunk-ST4PZ6RF.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4834,7 +4834,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.545" : "dev";
+var cliVersion = true ? "0.28.547" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6006,7 +6006,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.545" : "dev";
+var cliVersion2 = true ? "0.28.547" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-QPSEQLSI.js → chunk-ST4PZ6RF.js}

@@ -15694,4 +15694,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-QPSEQLSI.js.map
+//# sourceMappingURL=chunk-ST4PZ6RF.js.map

package/dist/{chunk-6CHFBMJM.js → chunk-SYHPBJK7.js}

@@ -42,7 +42,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-QPSEQLSI.js";
+} from "./chunk-ST4PZ6RF.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5549,7 +5549,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.545" : "dev";
+var agtCliVersion = true ? "0.28.547" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8861,4 +8861,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-6CHFBMJM.js.map
+//# sourceMappingURL=chunk-SYHPBJK7.js.map

package/dist/{claude-pair-runtime-R3R5OWDM.js → claude-pair-runtime-TZKJGXZU.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-FM5746XM.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-KVONGDAL.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-R3R5OWDM.js.map
+//# sourceMappingURL=claude-pair-runtime-TZKJGXZU.js.map

package/dist/lib/manager-worker.js

@@ -53,7 +53,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-6CHFBMJM.js";
+} from "../chunk-SYHPBJK7.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -181,7 +181,7 @@ import {
   toOpencodeModel,
   transcriptActivityAgeSeconds,
   writeEgressAllowlist
-} from "../chunk-QPSEQLSI.js";
+} from "../chunk-ST4PZ6RF.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -10455,7 +10455,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.545" : "dev";
+var agtCliVersion = true ? "0.28.547" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -11759,7 +11759,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-FM5746XM.js");
+      const { collectDiagnostics } = await import("../persistent-session-KVONGDAL.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor)
@@ -11867,7 +11867,7 @@ async function pollCycle() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-FM5746XM.js");
+      const { collectDiagnostics } = await import("../persistent-session-KVONGDAL.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor) : void 0;
       let tailscaleHostname;
@@ -11990,7 +11990,7 @@ async function pollCycle() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-WZMDBY3T.js");
+      } = await import("../responsiveness-probe-OUHRYJYH.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -12081,7 +12081,7 @@ async function pollCycle() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-WZMDBY3T.js");
+        } = await import("../responsiveness-probe-OUHRYJYH.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15611,7 +15611,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-FM5746XM.js");
+        const { collectDiagnostics } = await import("../persistent-session-KVONGDAL.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -15661,7 +15661,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-FM5746XM.js");
+      const { collectDiagnostics } = await import("../persistent-session-KVONGDAL.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor)
@@ -16185,7 +16185,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-R3R5OWDM.js");
+  } = await import("../claude-pair-runtime-TZKJGXZU.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/augmented-admin.js

@@ -1094,11 +1094,11 @@ var require_util = __commonJS({
       return false;
     }
     exports.schemaHasRules = schemaHasRules;
-    function schemaHasRulesButRef(schema, RULES) {
+    function schemaHasRulesButRef(schema, RULES2) {
       if (typeof schema == "boolean")
         return !schema;
       for (const key in schema)
-        if (key !== "$ref" && RULES.all[key])
+        if (key !== "$ref" && RULES2.all[key])
           return true;
       return false;
     }
@@ -2492,17 +2492,17 @@ var require_validate = __commonJS({
     }
     function schemaKeywords(it, types, typeErrors, errsCount) {
       const { gen, schema, data, allErrors, opts, self } = it;
-      const { RULES } = self;
-      if (schema.$ref && (opts.ignoreKeywordsWithRef || !(0, util_1.schemaHasRulesButRef)(schema, RULES))) {
-        gen.block(() => keywordCode(it, "$ref", RULES.all.$ref.definition));
+      const { RULES: RULES2 } = self;
+      if (schema.$ref && (opts.ignoreKeywordsWithRef || !(0, util_1.schemaHasRulesButRef)(schema, RULES2))) {
+        gen.block(() => keywordCode(it, "$ref", RULES2.all.$ref.definition));
         return;
       }
       if (!opts.jtd)
         checkStrictTypes(it, types);
       gen.block(() => {
-        for (const group of RULES.rules)
+        for (const group of RULES2.rules)
           groupKeywords(group);
-        groupKeywords(RULES.post);
+        groupKeywords(RULES2.post);
       });
       function groupKeywords(group) {
         if (!(0, applicability_1.shouldUseGroup)(schema, group))
@@ -4204,10 +4204,10 @@ var require_core = __commonJS({
       }
       // Remove keyword
       removeKeyword(keyword) {
-        const { RULES } = this;
-        delete RULES.keywords[keyword];
-        delete RULES.all[keyword];
-        for (const group of RULES.rules) {
+        const { RULES: RULES2 } = this;
+        delete RULES2.keywords[keyword];
+        delete RULES2.all[keyword];
+        for (const group of RULES2.rules) {
           const i = group.rules.findIndex((rule) => rule.keyword === keyword);
           if (i >= 0)
             group.rules.splice(i, 1);
@@ -4375,9 +4375,9 @@ var require_core = __commonJS({
     }
     var KEYWORD_NAME = /^[a-z_$][a-z0-9_$:-]*$/i;
     function checkKeyword(keyword, def) {
-      const { RULES } = this;
+      const { RULES: RULES2 } = this;
       (0, util_1.eachItem)(keyword, (kwd) => {
-        if (RULES.keywords[kwd])
+        if (RULES2.keywords[kwd])
           throw new Error(`Keyword ${kwd} is already defined`);
         if (!KEYWORD_NAME.test(kwd))
           throw new Error(`Keyword ${kwd} has invalid name`);
@@ -4393,13 +4393,13 @@ var require_core = __commonJS({
       const post = definition === null || definition === void 0 ? void 0 : definition.post;
       if (dataType && post)
         throw new Error('keyword with "post" flag cannot have "type"');
-      const { RULES } = this;
-      let ruleGroup = post ? RULES.post : RULES.rules.find(({ type: t }) => t === dataType);
+      const { RULES: RULES2 } = this;
+      let ruleGroup = post ? RULES2.post : RULES2.rules.find(({ type: t }) => t === dataType);
       if (!ruleGroup) {
         ruleGroup = { type: dataType, rules: [] };
-        RULES.rules.push(ruleGroup);
+        RULES2.rules.push(ruleGroup);
       }
-      RULES.keywords[keyword] = true;
+      RULES2.keywords[keyword] = true;
       if (!definition)
         return;
       const rule = {
@@ -4414,7 +4414,7 @@ var require_core = __commonJS({
         addBeforeRule.call(this, ruleGroup, rule, definition.before);
       else
         ruleGroup.rules.push(rule);
-      RULES.all[keyword] = rule;
+      RULES2.all[keyword] = rule;
       (_a = definition.implements) === null || _a === void 0 ? void 0 : _a.forEach((kwd) => this.addKeyword(kwd));
     }
     function addBeforeRule(ruleGroup, rule, before) {
@@ -20985,7 +20985,63 @@ var StdioServerTransport = class {
   }
 };
 
+// src/redact.ts
+var REDACTED = "[redacted]";
+var MAX_RELAYED_MESSAGE_CHARS = 600;
+function truncationMarker(dropped) {
+  return `\u2026 [truncated, ${dropped} chars]`;
+}
+function truncateWithMarker(text, max) {
+  if (text.length <= max) return text;
+  let keep = max;
+  for (let i = 0; i < 8; i++) {
+    const candidate = Math.max(0, max - truncationMarker(text.length - keep).length);
+    if (candidate === keep) break;
+    keep = candidate;
+  }
+  return text.slice(0, keep) + truncationMarker(text.length - keep);
+}
+var RULES = [
+  // Authorization headers, with or without a scheme.
+  { name: "authorization-header", pattern: /\b(authorization\s*[:=]\s*)(?:bearer\s+|basic\s+)?\S+/gi, replace: `$1${REDACTED}` },
+  { name: "bearer", pattern: /\bbearer\s+[A-Za-z0-9._~+/-]{8,}=*/gi, replace: `Bearer ${REDACTED}` },
+  // Cookies.
+  { name: "cookie-header", pattern: /\b(set-cookie|cookie)\s*[:=]\s*\S+/gi, replace: `$1: ${REDACTED}` },
+  // JWTs — three base64url segments. Caught before generic blobs.
+  { name: "jwt", pattern: /\beyJ[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}/g, replace: REDACTED },
+  // Platform + vendor key prefixes. `tlk_` is ours (host API keys).
+  { name: "prefixed-key", pattern: /\b(?:tlk|sk|pk|rk|gho|ghp|ghu|ghs|ghr|github_pat|xoxb|xoxp|xoxa|xapp|lin_api|shpat|shpss)[_-][A-Za-z0-9_-]{8,}/gi, replace: REDACTED },
+  // AWS access key ids.
+  { name: "aws-access-key-id", pattern: /\b(?:AKIA|ASIA|ABIA|ACCA)[0-9A-Z]{12,}\b/g, replace: REDACTED },
+  // Presigned-URL signature params and their friends.
+  { name: "signature-param", pattern: /\b(X-Amz-Signature|X-Amz-Security-Token|X-Amz-Credential|Signature|sig)=[^&\s"']+/gi, replace: `$1=${REDACTED}` },
+  // Generic secret-bearing key=value / key: value pairs.
+  { name: "secret-kv", pattern: /\b(password|passwd|pwd|secret|token|api[-_]?key|access[-_]?key|private[-_]?key|client[-_]?secret|refresh[-_]?token|session[-_]?token|credential)s?\s*[:=]\s*(?:"[^"]*"|'[^']*'|\S+)/gi, replace: `$1=${REDACTED}` },
+  // PEM blocks.
+  { name: "pem", pattern: /-----BEGIN[^-]{0,64}-----[\s\S]*?-----END[^-]{0,64}-----/g, replace: REDACTED }
+];
+function redactSensitive(message) {
+  let out = message;
+  for (const rule of RULES) {
+    out = out.replace(rule.pattern, rule.replace);
+  }
+  out = out.replace(/\s+/g, " ").trim();
+  return truncateWithMarker(out, MAX_RELAYED_MESSAGE_CHARS);
+}
+
 // src/broker-client.ts
+var REDACTED_ONLY = REDACTED;
+function serverMessageFrom(payload) {
+  if (!payload || typeof payload !== "object") return null;
+  for (const key of ["error", "reason"]) {
+    const v = payload[key];
+    if (typeof v === "string" && v.trim() !== "") {
+      const safe = redactSensitive(v);
+      return safe.trim() === "" || safe.trim() === REDACTED_ONLY ? null : safe;
+    }
+  }
+  return null;
+}
 function makeError(status, message, detail) {
   const err = new Error(message);
   err.status = status;
@@ -21070,7 +21126,7 @@ var AdminDebugClient = class _AdminDebugClient {
       parseFailed = true;
     }
     if (!res.ok) {
-      const message = payload && typeof payload === "object" && "error" in payload && typeof payload.error === "string" ? payload.error : `admin-debug request failed: ${res.status}`;
+      const message = serverMessageFrom(payload) ?? `admin-debug request failed: ${res.status}`;
       throw makeError(res.status, message, payload);
     }
     if (parseFailed) {
@@ -21195,7 +21251,7 @@ var AdminDebugClient = class _AdminDebugClient {
       parseFailed = true;
     }
     if (!res.ok) {
-      const message = payload && typeof payload === "object" && "error" in payload && typeof payload.error === "string" ? payload.error : `admin-debug request failed: ${res.status}`;
+      const message = serverMessageFrom(payload) ?? `admin-debug request failed: ${res.status}`;
       throw makeError(res.status, message, payload);
     }
     if (parseFailed) {

package/dist/mcp/slack-channel.js

@@ -22868,6 +22868,411 @@ var init_slack_block_kit_runtime = __esm({
   }
 });
 
+// src/slack-message-text.ts
+function asRecord(v) {
+  return typeof v === "object" && v !== null ? v : void 0;
+}
+function asArray(v) {
+  return Array.isArray(v) ? v : [];
+}
+function textNode(v) {
+  if (typeof v === "string") return v.trim();
+  const rec = asRecord(v);
+  if (!rec) return "";
+  const t = rec["text"];
+  return typeof t === "string" ? t.trim() : "";
+}
+var RICH_TEXT_MAX_DEPTH = 64;
+function richTextToString(node, depth = 0) {
+  if (depth >= RICH_TEXT_MAX_DEPTH) return "[nested rich text truncated]";
+  const rec = asRecord(node);
+  if (!rec) return "";
+  const parts = [];
+  const t = rec["text"];
+  if (typeof t === "string") parts.push(t);
+  const url = rec["url"];
+  if (typeof url === "string" && !t) parts.push(url);
+  const userId = rec["user_id"];
+  if (typeof userId === "string") parts.push(`<@${userId}>`);
+  const channelId = rec["channel_id"];
+  if (typeof channelId === "string") parts.push(`<#${channelId}>`);
+  const type = typeof rec["type"] === "string" ? rec["type"] : "";
+  const children = asArray(rec["elements"]).map((c) => richTextToString(c, depth + 1)).filter(Boolean);
+  if (children.length > 0) {
+    if (type === "rich_text_table") parts.push(children.join("\n"));
+    else if (type === "rich_text_table_row") parts.push(children.join(" | "));
+    else if (type === "rich_text_list") {
+      parts.push(children.map((c) => `- ${c}`).join("\n"));
+    } else if (type === "rich_text_quote" || type === "rich_text_preformatted") {
+      parts.push(children.join("\n"));
+    } else parts.push(children.join(""));
+  }
+  return parts.join("").trim();
+}
+function blockToString(block) {
+  const b = asRecord(block);
+  if (!b) return "";
+  const type = typeof b["type"] === "string" ? b["type"] : "";
+  if (type === "divider") return "";
+  const lines = [];
+  const main = textNode(b["text"]);
+  if (main) lines.push(main);
+  for (const f of asArray(b["fields"])) {
+    const s = textNode(f);
+    if (s) lines.push(s);
+  }
+  for (const el of asArray(b["elements"])) {
+    const e = asRecord(el);
+    if (!e) continue;
+    if (e["type"] === "rich_text_section" || Array.isArray(e["elements"])) {
+      const rich = richTextToString(e);
+      if (rich) lines.push(rich);
+      continue;
+    }
+    const s = textNode(e["text"]) || textNode(e);
+    if (s) lines.push(s);
+  }
+  if (type === "image") {
+    const alt = b["alt_text"];
+    if (typeof alt === "string" && alt.trim()) lines.push(`[image: ${alt.trim()}]`);
+  }
+  return lines.join("\n").trim();
+}
+function attachmentToString(att) {
+  const a = asRecord(att);
+  if (!a) return "";
+  const lines = [];
+  for (const key2 of ["pretext", "title", "text"]) {
+    const v = a[key2];
+    if (typeof v === "string" && v.trim()) lines.push(v.trim());
+  }
+  for (const f of asArray(a["fields"])) {
+    const fr = asRecord(f);
+    if (!fr) continue;
+    const title = typeof fr["title"] === "string" ? fr["title"].trim() : "";
+    const value = typeof fr["value"] === "string" ? fr["value"].trim() : "";
+    if (title && value) lines.push(`${title}: ${value}`);
+    else if (title || value) lines.push(title || value);
+  }
+  for (const b of asArray(a["blocks"])) {
+    const s = blockToString(b);
+    if (s) lines.push(s);
+  }
+  if (lines.length === 0) {
+    const fb = a["fallback"];
+    if (typeof fb === "string" && fb.trim()) lines.push(fb.trim());
+  }
+  return lines.join("\n").trim();
+}
+var SLACK_MESSAGE_TEXT_MAX_CHARS = 4e3;
+function truncateMessageText(s, maxChars = SLACK_MESSAGE_TEXT_MAX_CHARS) {
+  if (s.length <= maxChars) return s;
+  const SHORT_MARKER = "\u2026";
+  if (maxChars <= SHORT_MARKER.length) return SHORT_MARKER.slice(0, maxChars);
+  const omittedFrom = (n) => `
+[\u2026 truncated, ${s.length - n} more characters]`;
+  let keep = Math.max(0, maxChars - omittedFrom(maxChars).length);
+  keep = Math.max(0, maxChars - omittedFrom(keep).length);
+  if (keep <= 0) return s.slice(0, maxChars - SHORT_MARKER.length) + SHORT_MARKER;
+  return s.slice(0, keep) + omittedFrom(keep);
+}
+function describeEmptyMessage(msg) {
+  const blocks = asArray(msg.blocks);
+  const attachments = asArray(msg.attachments);
+  if (blocks.length === 0 && attachments.length === 0) return "";
+  const types = blocks.map((b) => {
+    const r = asRecord(b);
+    return r && typeof r["type"] === "string" ? r["type"] : "unknown";
+  }).filter(Boolean);
+  const unique = [...new Set(types)];
+  const parts = [];
+  if (blocks.length > 0) {
+    parts.push(`${blocks.length} block${blocks.length === 1 ? "" : "s"}`);
+    if (unique.length > 0) parts.push(`of type ${unique.join(", ")}`);
+  }
+  if (attachments.length > 0) {
+    parts.push(`${attachments.length} attachment${attachments.length === 1 ? "" : "s"}`);
+  }
+  return `[no readable text content - ${parts.join(" ")}]`;
+}
+function slackMessageBody(msg) {
+  if (!msg) return "";
+  const top = typeof msg.text === "string" ? msg.text.trim() : "";
+  const blockText = asArray(msg.blocks).map(blockToString).filter(Boolean).join("\n");
+  const attachmentText = asArray(msg.attachments).map(attachmentToString).filter(Boolean).join("\n");
+  const rich = [blockText, attachmentText].filter(Boolean).join("\n");
+  if (!rich) return top;
+  if (!top) return rich;
+  if (rich.startsWith(top)) return rich;
+  return `${top}
+${rich}`;
+}
+
+// ../core/dist/channels/slack-rich-text.js
+var MAX_DEPTH = 12;
+function isRecord(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function asString(v) {
+  return typeof v === "string" ? v : "";
+}
+function asArray2(v) {
+  return Array.isArray(v) ? v : [];
+}
+function isTableElement(el) {
+  return isRecord(el) && asString(el.type).includes("table");
+}
+function renderEmoji(el) {
+  const unicode = asString(el.unicode);
+  if (unicode) {
+    try {
+      const cps = unicode.split("-").map((h) => parseInt(h, 16));
+      if (cps.every((n) => Number.isFinite(n) && n >= 0 && n <= 1114111)) {
+        return String.fromCodePoint(...cps);
+      }
+    } catch {
+    }
+  }
+  const name = asString(el.name);
+  return name ? `:${name}:` : "";
+}
+function renderLeaf(el) {
+  if (!isRecord(el))
+    return "";
+  switch (asString(el.type)) {
+    case "text":
+      return asString(el.text);
+    case "link": {
+      const label = asString(el.text);
+      const url = asString(el.url);
+      if (label && url && label !== url)
+        return `${label} (${url})`;
+      return label || url;
+    }
+    case "emoji":
+      return renderEmoji(el);
+    case "user":
+      return `<@${asString(el.user_id)}>`;
+    case "usergroup":
+      return `<!subteam^${asString(el.usergroup_id)}>`;
+    case "channel":
+      return `<#${asString(el.channel_id)}>`;
+    case "broadcast":
+      return `@${asString(el.range) || "channel"}`;
+    case "date":
+      return asString(el.fallback) || asString(el.timestamp);
+    default:
+      if (Array.isArray(el.elements))
+        return renderInline(el.elements);
+      return asString(el.text);
+  }
+}
+function renderInline(elements) {
+  return elements.map(renderLeaf).join("");
+}
+function deepText(node, depth) {
+  if (depth > MAX_DEPTH)
+    return "";
+  if (typeof node === "string")
+    return node;
+  if (Array.isArray(node))
+    return node.map((n) => deepText(n, depth + 1)).join("");
+  if (!isRecord(node))
+    return "";
+  const type = asString(node.type);
+  if (type && type !== "rich_text" && !type.startsWith("rich_text_") && !type.includes("table")) {
+    return renderLeaf(node);
+  }
+  if (Array.isArray(node.elements))
+    return node.elements.map((n) => deepText(n, depth + 1)).join("");
+  if (Array.isArray(node.rows))
+    return node.rows.map((n) => deepText(n, depth + 1)).join(" ");
+  return asString(node.text);
+}
+function renderCell(cell) {
+  if (!isRecord(cell))
+    return deepText(cell, 0).replace(/\s*\n\s*/g, " ").trim();
+  const inner = Array.isArray(cell.elements) ? renderSection(cell, 0) : deepText(cell, 0);
+  return inner.replace(/\s*\n\s*/g, " ").trim();
+}
+function renderTable(el) {
+  const rawRows = asArray2(el.elements).length ? asArray2(el.elements) : asArray2(el.rows);
+  const rows = [];
+  for (const row of rawRows) {
+    if (!isRecord(row) && !Array.isArray(row))
+      continue;
+    const rawCells = Array.isArray(row) ? row : asArray2(row.elements).length ? asArray2(row.elements) : asArray2(row.cells);
+    if (rawCells.length === 0)
+      continue;
+    rows.push(rawCells.map(renderCell));
+  }
+  if (rows.length === 0) {
+    const fallback = deepText(el, 0).replace(/[ \t]+\n/g, "\n").trim();
+    return fallback;
+  }
+  const colCount = rows.reduce((max, r) => Math.max(max, r.length), 0);
+  const pad = (r) => {
+    const cells = r.slice();
+    while (cells.length < colCount)
+      cells.push("");
+    return cells.map((c) => c.replace(/\|/g, "\\|"));
+  };
+  const lines = [];
+  const header = rows[0] ?? [];
+  const body = rows.slice(1);
+  lines.push(`| ${pad(header).join(" | ")} |`);
+  lines.push(`| ${Array.from({ length: colCount }, () => "---").join(" | ")} |`);
+  for (const r of body)
+    lines.push(`| ${pad(r).join(" | ")} |`);
+  return lines.join("\n");
+}
+function renderSection(section, depth) {
+  if (depth > MAX_DEPTH || !isRecord(section))
+    return "";
+  const type = asString(section.type);
+  if (isTableElement(section))
+    return renderTable(section);
+  switch (type) {
+    case "rich_text_section":
+      return renderInline(asArray2(section.elements));
+    case "rich_text_preformatted": {
+      const code = renderInline(asArray2(section.elements));
+      return code ? `\`\`\`
+${code}
+\`\`\`` : "";
+    }
+    case "rich_text_quote": {
+      const quoted = renderInline(asArray2(section.elements));
+      return quoted ? quoted.split("\n").map((l) => `> ${l}`).join("\n") : "";
+    }
+    case "rich_text_list": {
+      const ordered = asString(section.style) === "ordered";
+      const items = asArray2(section.elements).map((item, i) => {
+        const body = renderSection(item, depth + 1) || renderInline(asArray2(item?.elements));
+        const marker = ordered ? `${i + 1}.` : "-";
+        return `${marker} ${body}`.trimEnd();
+      });
+      return items.join("\n");
+    }
+    default:
+      if (Array.isArray(section.elements))
+        return renderInline(asArray2(section.elements));
+      return deepText(section, depth + 1);
+  }
+}
+function renderSlackBlocks(blocks) {
+  let hadTable = false;
+  const out = [];
+  try {
+    for (const block of asArray2(blocks)) {
+      if (!isRecord(block))
+        continue;
+      if (isTableElement(block)) {
+        hadTable = true;
+        const rendered = renderTable(block);
+        if (rendered.trim().length > 0)
+          out.push(rendered);
+        continue;
+      }
+      if (asString(block.type) !== "rich_text")
+        continue;
+      for (const section of asArray2(block.elements)) {
+        if (isTableElement(section))
+          hadTable = true;
+        const rendered = renderSection(section, 0);
+        if (rendered.trim().length > 0)
+          out.push(rendered);
+      }
+    }
+  } catch {
+  }
+  const text = out.join("\n\n").replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
+  return { text, hadTable };
+}
+function mergeInboundText(text, blocks) {
+  const { text: rendered, hadTable } = renderSlackBlocks(blocks);
+  if (!hadTable)
+    return { content: text, recoveredTable: false };
+  const content = rendered.length > 0 ? rendered : text;
+  return { content, recoveredTable: rendered.length > 0 && content !== text };
+}
+
+// ../core/dist/channels/governance/slack-forwarded.js
+function asTrimmed(v) {
+  return typeof v === "string" ? v.trim() : "";
+}
+function extractForwardedContent(attachments) {
+  if (!Array.isArray(attachments))
+    return { text: "", files: [] };
+  const parts = [];
+  const files = [];
+  for (const raw of attachments) {
+    if (!raw || typeof raw !== "object")
+      continue;
+    const att = raw;
+    const textBody = asTrimmed(att.text);
+    let body = textBody || asTrimmed(att.fallback);
+    const blockSources = [];
+    if (Array.isArray(att.blocks))
+      blockSources.push(att.blocks);
+    if (Array.isArray(att.message_blocks)) {
+      for (const mb of att.message_blocks)
+        blockSources.push(mb?.message?.blocks);
+    }
+    for (const source of blockSources) {
+      const rendered = renderSlackBlocks(source);
+      const renderedText = rendered.text.trim();
+      if (renderedText && (!textBody || rendered.hadTable)) {
+        body = renderedText;
+        break;
+      }
+    }
+    const title = asTrimmed(att.title);
+    const link = asTrimmed(att.title_link) || asTrimmed(att.from_url);
+    const imageUrl = asTrimmed(att.image_url) || asTrimmed(att.thumb_url);
+    const lines = [];
+    if (body)
+      lines.push(body);
+    if (title && title !== body)
+      lines.push(title);
+    if (link)
+      lines.push(link);
+    if (imageUrl)
+      lines.push(`[image] ${imageUrl}`);
+    if (lines.length)
+      parts.push(lines.join("\n"));
+    if (Array.isArray(att.files))
+      files.push(...att.files);
+  }
+  return { text: parts.join("\n\n"), files };
+}
+function hasForwardedContent(attachments) {
+  const { text, files } = extractForwardedContent(attachments);
+  return text.length > 0 || files.length > 0;
+}
+
+// src/slack-inbound-text.ts
+function composeInboundText(evt, maxChars = SLACK_MESSAGE_TEXT_MAX_CHARS) {
+  if (!evt) return { content: "", gateText: "", recoveredTable: false, recoveredForwarded: false, files: [] };
+  const gateText = slackMessageBody({ text: evt.text, blocks: evt.blocks });
+  const { content: merged, recoveredTable } = mergeInboundText(gateText, evt.blocks);
+  const forwarded = extractForwardedContent(evt.attachments);
+  let content = merged;
+  if (forwarded.text) {
+    content = merged.trim().length > 0 ? `${merged}
+
+${forwarded.text}` : forwarded.text;
+  }
+  if (!content.trim()) content = describeEmptyMessage(evt);
+  return {
+    content: truncateMessageText(content, maxChars),
+    gateText,
+    recoveredTable,
+    recoveredForwarded: forwarded.text.length > 0,
+    files: forwarded.files
+  };
+}
+
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v4/core/core.js
 var NEVER = Object.freeze({
   status: "aborted"
@@ -29839,249 +30244,6 @@ var Server = class extends Protocol {
   }
 };
 
-// ../core/dist/channels/slack-rich-text.js
-var MAX_DEPTH = 12;
-function isRecord(v) {
-  return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-function asString(v) {
-  return typeof v === "string" ? v : "";
-}
-function asArray(v) {
-  return Array.isArray(v) ? v : [];
-}
-function isTableElement(el) {
-  return isRecord(el) && asString(el.type).includes("table");
-}
-function renderEmoji(el) {
-  const unicode = asString(el.unicode);
-  if (unicode) {
-    try {
-      const cps = unicode.split("-").map((h) => parseInt(h, 16));
-      if (cps.every((n) => Number.isFinite(n) && n >= 0 && n <= 1114111)) {
-        return String.fromCodePoint(...cps);
-      }
-    } catch {
-    }
-  }
-  const name = asString(el.name);
-  return name ? `:${name}:` : "";
-}
-function renderLeaf(el) {
-  if (!isRecord(el))
-    return "";
-  switch (asString(el.type)) {
-    case "text":
-      return asString(el.text);
-    case "link": {
-      const label = asString(el.text);
-      const url = asString(el.url);
-      if (label && url && label !== url)
-        return `${label} (${url})`;
-      return label || url;
-    }
-    case "emoji":
-      return renderEmoji(el);
-    case "user":
-      return `<@${asString(el.user_id)}>`;
-    case "usergroup":
-      return `<!subteam^${asString(el.usergroup_id)}>`;
-    case "channel":
-      return `<#${asString(el.channel_id)}>`;
-    case "broadcast":
-      return `@${asString(el.range) || "channel"}`;
-    case "date":
-      return asString(el.fallback) || asString(el.timestamp);
-    default:
-      if (Array.isArray(el.elements))
-        return renderInline(el.elements);
-      return asString(el.text);
-  }
-}
-function renderInline(elements) {
-  return elements.map(renderLeaf).join("");
-}
-function deepText(node, depth) {
-  if (depth > MAX_DEPTH)
-    return "";
-  if (typeof node === "string")
-    return node;
-  if (Array.isArray(node))
-    return node.map((n) => deepText(n, depth + 1)).join("");
-  if (!isRecord(node))
-    return "";
-  const type = asString(node.type);
-  if (type && type !== "rich_text" && !type.startsWith("rich_text_") && !type.includes("table")) {
-    return renderLeaf(node);
-  }
-  if (Array.isArray(node.elements))
-    return node.elements.map((n) => deepText(n, depth + 1)).join("");
-  if (Array.isArray(node.rows))
-    return node.rows.map((n) => deepText(n, depth + 1)).join(" ");
-  return asString(node.text);
-}
-function renderCell(cell) {
-  if (!isRecord(cell))
-    return deepText(cell, 0).replace(/\s*\n\s*/g, " ").trim();
-  const inner = Array.isArray(cell.elements) ? renderSection(cell, 0) : deepText(cell, 0);
-  return inner.replace(/\s*\n\s*/g, " ").trim();
-}
-function renderTable(el) {
-  const rawRows = asArray(el.elements).length ? asArray(el.elements) : asArray(el.rows);
-  const rows = [];
-  for (const row of rawRows) {
-    if (!isRecord(row) && !Array.isArray(row))
-      continue;
-    const rawCells = Array.isArray(row) ? row : asArray(row.elements).length ? asArray(row.elements) : asArray(row.cells);
-    if (rawCells.length === 0)
-      continue;
-    rows.push(rawCells.map(renderCell));
-  }
-  if (rows.length === 0) {
-    const fallback = deepText(el, 0).replace(/[ \t]+\n/g, "\n").trim();
-    return fallback;
-  }
-  const colCount = rows.reduce((max, r) => Math.max(max, r.length), 0);
-  const pad = (r) => {
-    const cells = r.slice();
-    while (cells.length < colCount)
-      cells.push("");
-    return cells.map((c) => c.replace(/\|/g, "\\|"));
-  };
-  const lines = [];
-  const header = rows[0] ?? [];
-  const body = rows.slice(1);
-  lines.push(`| ${pad(header).join(" | ")} |`);
-  lines.push(`| ${Array.from({ length: colCount }, () => "---").join(" | ")} |`);
-  for (const r of body)
-    lines.push(`| ${pad(r).join(" | ")} |`);
-  return lines.join("\n");
-}
-function renderSection(section, depth) {
-  if (depth > MAX_DEPTH || !isRecord(section))
-    return "";
-  const type = asString(section.type);
-  if (isTableElement(section))
-    return renderTable(section);
-  switch (type) {
-    case "rich_text_section":
-      return renderInline(asArray(section.elements));
-    case "rich_text_preformatted": {
-      const code = renderInline(asArray(section.elements));
-      return code ? `\`\`\`
-${code}
-\`\`\`` : "";
-    }
-    case "rich_text_quote": {
-      const quoted = renderInline(asArray(section.elements));
-      return quoted ? quoted.split("\n").map((l) => `> ${l}`).join("\n") : "";
-    }
-    case "rich_text_list": {
-      const ordered = asString(section.style) === "ordered";
-      const items = asArray(section.elements).map((item, i) => {
-        const body = renderSection(item, depth + 1) || renderInline(asArray(item?.elements));
-        const marker = ordered ? `${i + 1}.` : "-";
-        return `${marker} ${body}`.trimEnd();
-      });
-      return items.join("\n");
-    }
-    default:
-      if (Array.isArray(section.elements))
-        return renderInline(asArray(section.elements));
-      return deepText(section, depth + 1);
-  }
-}
-function renderSlackBlocks(blocks) {
-  let hadTable = false;
-  const out = [];
-  try {
-    for (const block of asArray(blocks)) {
-      if (!isRecord(block))
-        continue;
-      if (isTableElement(block)) {
-        hadTable = true;
-        const rendered = renderTable(block);
-        if (rendered.trim().length > 0)
-          out.push(rendered);
-        continue;
-      }
-      if (asString(block.type) !== "rich_text")
-        continue;
-      for (const section of asArray(block.elements)) {
-        if (isTableElement(section))
-          hadTable = true;
-        const rendered = renderSection(section, 0);
-        if (rendered.trim().length > 0)
-          out.push(rendered);
-      }
-    }
-  } catch {
-  }
-  const text = out.join("\n\n").replace(/[ \t]+$/gm, "").replace(/\n{3,}/g, "\n\n").trim();
-  return { text, hadTable };
-}
-function mergeInboundText(text, blocks) {
-  const { text: rendered, hadTable } = renderSlackBlocks(blocks);
-  if (!hadTable)
-    return { content: text, recoveredTable: false };
-  const content = rendered.length > 0 ? rendered : text;
-  return { content, recoveredTable: rendered.length > 0 && content !== text };
-}
-
-// ../core/dist/channels/governance/slack-forwarded.js
-function asTrimmed(v) {
-  return typeof v === "string" ? v.trim() : "";
-}
-function extractForwardedContent(attachments) {
-  if (!Array.isArray(attachments))
-    return { text: "", files: [] };
-  const parts = [];
-  const files = [];
-  for (const raw of attachments) {
-    if (!raw || typeof raw !== "object")
-      continue;
-    const att = raw;
-    const textBody = asTrimmed(att.text);
-    let body = textBody || asTrimmed(att.fallback);
-    const blockSources = [];
-    if (Array.isArray(att.blocks))
-      blockSources.push(att.blocks);
-    if (Array.isArray(att.message_blocks)) {
-      for (const mb of att.message_blocks)
-        blockSources.push(mb?.message?.blocks);
-    }
-    for (const source of blockSources) {
-      const rendered = renderSlackBlocks(source);
-      const renderedText = rendered.text.trim();
-      if (renderedText && (!textBody || rendered.hadTable)) {
-        body = renderedText;
-        break;
-      }
-    }
-    const title = asTrimmed(att.title);
-    const link = asTrimmed(att.title_link) || asTrimmed(att.from_url);
-    const imageUrl = asTrimmed(att.image_url) || asTrimmed(att.thumb_url);
-    const lines = [];
-    if (body)
-      lines.push(body);
-    if (title && title !== body)
-      lines.push(title);
-    if (link)
-      lines.push(link);
-    if (imageUrl)
-      lines.push(`[image] ${imageUrl}`);
-    if (lines.length)
-      parts.push(lines.join("\n"));
-    if (Array.isArray(att.files))
-      files.push(...att.files);
-  }
-  return { text: parts.join("\n\n"), files };
-}
-function hasForwardedContent(attachments) {
-  const { text, files } = extractForwardedContent(attachments);
-  return text.length > 0 || files.length > 0;
-}
-
 // ../core/dist/channels/governance/slack-inbound-filter.js
 var ALLOWED_MESSAGE_SUBTYPES = /* @__PURE__ */ new Set([
   void 0,
@@ -37152,7 +37314,14 @@ async function fetchThreadTranscript(channel, threadTs, limit, deps) {
     for (const msg of data.messages ?? []) {
       allMessages.push({
         user: msg.user ?? msg.bot_id ?? "unknown",
-        text: msg.text ?? "",
+        // ENG-8635: blocks/attachments are how bots post. `msg.text` alone
+        // rendered every Amazon Q / CloudWatch / GitHub alert as an empty line.
+        // Composed through the same single owner as the live inbound path, so a
+        // forwarded message reads identically whether the agent sees it arrive
+        // or reads it back out of the thread - including the nested
+        // `message_blocks` and unfurl metadata the generic flattener misses.
+        // (CodeRabbit, PR #4263.)
+        text: composeInboundText(msg).content,
         ts: msg.ts ?? ""
       });
     }
@@ -37198,7 +37367,15 @@ async function fetchChannelHistory(channel, limit, deps, options = {}) {
     for (const msg of data.messages ?? []) {
       allMessages.push({
         user: msg.user ?? msg.bot_id ?? "unknown",
-        text: msg.text ?? "",
+        // ENG-8635: flatten blocks/attachments, and route through the SAME
+        // single-owner composition the live inbound path uses. Calling
+        // `slackMessageText` directly here read attachments with the generic
+        // flattener, which does not see a forwarded message's nested
+        // `message_blocks` or its unfurl link/image metadata - so history
+        // silently showed less of a shared message than the inbound tag did for
+        // the identical event. Two readers of one source will always drift;
+        // there is now one. (CodeRabbit, PR #4263.)
+        text: composeInboundText(msg).content,
         ts: msg.ts ?? ""
       });
     }
@@ -45510,7 +45687,8 @@ async function connectSocketMode() {
             return;
         }
       }
-      const text = evt.text ?? "";
+      const composed = composeInboundText(evt);
+      const text = composed.gateText;
       const channel = evt.channel ?? "";
       const ts = evt.ts ?? "";
       const threadTs = evt.thread_ts ?? ts;
@@ -45598,9 +45776,8 @@ async function connectSocketMode() {
         }
       }
       const userName = await resolveUserName(user);
-      const forwarded = extractForwardedContent(evt.attachments);
       const fileMeta = await buildInboundFileMeta(
-        [...evt.files ?? [], ...forwarded.files],
+        [...evt.files ?? [], ...composed.files],
         AGENT_CODE_NAME,
         channel
       );
@@ -45631,18 +45808,14 @@ async function connectSocketMode() {
           );
         }
       }
-      const { content: mergedText, recoveredTable } = mergeInboundText(text, evt.blocks);
-      if (recoveredTable) {
+      const inboundContent = composed.content;
+      if (composed.recoveredTable) {
         process.stderr.write(
           `slack-channel(${AGENT_CODE_NAME}): recovered rich_text table from blocks (channel=${redactSlackId(channel)} ts=${redactSlackId(ts)})
 `
         );
       }
-      let inboundContent = mergedText;
-      if (forwarded.text) {
-        inboundContent = mergedText.trim().length > 0 ? `${mergedText}
-
-${forwarded.text}` : forwarded.text;
+      if (composed.recoveredForwarded) {
         process.stderr.write(
           `slack-channel(${AGENT_CODE_NAME}): recovered forwarded message content (channel=${redactSlackId(channel)} ts=${redactSlackId(ts)})
 `

package/dist/{persistent-session-FM5746XM.js → persistent-session-KVONGDAL.js}

@@ -41,7 +41,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-QPSEQLSI.js";
+} from "./chunk-ST4PZ6RF.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -87,4 +87,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-FM5746XM.js.map
+//# sourceMappingURL=persistent-session-KVONGDAL.js.map

package/dist/{responsiveness-probe-WZMDBY3T.js → responsiveness-probe-OUHRYJYH.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-QPSEQLSI.js";
+} from "./chunk-ST4PZ6RF.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -689,4 +689,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-WZMDBY3T.js.map
+//# sourceMappingURL=responsiveness-probe-OUHRYJYH.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.545",
+  "version": "0.28.547",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {