@integrity-labs/agt-cli 0.28.617 → 0.28.619

package/dist/{claude-pair-runtime-QCL2TB6N.js → claude-pair-runtime-3356FFTC.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-GM3EH2ZU.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-AGPLISL3.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-QCL2TB6N.js.map
+//# sourceMappingURL=claude-pair-runtime-3356FFTC.js.map

package/dist/lib/manager-worker.js

@@ -34,6 +34,7 @@ import {
   liveProxyTokenVars,
   markQuarantinedForProbe,
   migrateAgentDirToIdKeyed,
+  mintAgentKey,
   pinAllowsUrgent,
   provision,
   provisionAutoKanbanProgressHook,
@@ -53,7 +54,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-NJHZL7CZ.js";
+} from "../chunk-WY7QPFBK.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -109,7 +110,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-6SJJM4FT.js";
+} from "../chunk-RXC3MTSN.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -186,7 +187,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-TYVQNCBU.js";
+} from "../chunk-P6KFZVKA.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -4696,6 +4697,13 @@ function classifyPollError(message) {
   return "other";
 }
 
+// src/lib/per-agent-key.ts
+async function resolvePerAgentApiKey(opts) {
+  const isPool = opts.hostKind === "pool";
+  if (!isPool && !opts.dedicatedEnabled) return null;
+  return await opts.mint(opts.rawHostKey, opts.agentId);
+}
+
 // src/lib/integration-context-render.ts
 var PLUGIN_CONTEXT_PLACEHOLDER_RE = /\{\{\s*context\.([a-zA-Z_][a-zA-Z0-9_]*)\s*\}\}/g;
 var TEAM_OVERRIDES_HEADER = "## Team Overrides\n\n> **The following overrides anything you've read above.** If any rule here conflicts with earlier instructions in this skill, follow what is written here. These are user-supplied directives that take precedence over the plugin's default guidance.\n";
@@ -8022,14 +8030,23 @@ var ALLOWED_MESSAGE_SUBTYPES = /* @__PURE__ */ new Set([
   "file_share",
   "thread_broadcast"
 ]);
-function decideSlackMessageForward(evt) {
+function matchesThirdPartyGrant(evt, thirdPartyBots) {
+  const botId = evt.bot_id;
+  if (!botId || !thirdPartyBots?.length)
+    return false;
+  return thirdPartyBots.some((b) => b.bot_id === botId || b.bot_user_id === botId);
+}
+function decideSlackMessageForward(evt, thirdPartyBots) {
   if (evt.type !== "message") {
     return { forward: true };
   }
+  const granted = matchesThirdPartyGrant(evt, thirdPartyBots);
   if (!ALLOWED_MESSAGE_SUBTYPES.has(evt.subtype)) {
-    return { forward: false, reason: "subtype" };
+    if (!granted || evt.subtype !== "bot_message") {
+      return { forward: false, reason: "subtype" };
+    }
   }
-  if (!evt.user) {
+  if (!evt.user && !granted) {
     return { forward: false, reason: "no_user" };
   }
   const hasText = typeof evt.text === "string" && evt.text.trim().length > 0;
@@ -8124,7 +8141,13 @@ function classifyPeerMessage(msg, cfg, self) {
   }
   const peer = cfg.peers.find((p) => p.bot_user_id === msg.user);
   if (!peer) {
-    const thirdParty = cfg.third_party_bots?.find((b) => b.bot_user_id === msg.user);
+    const thirdParty = cfg.third_party_bots?.find((b) => {
+      if (msg.user && b.bot_user_id === msg.user)
+        return true;
+      if (!msg.bot_id)
+        return false;
+      return b.bot_id === msg.bot_id || b.bot_user_id === msg.bot_id;
+    });
     if (thirdParty) {
       if (cfg.peer_disabled_mode === "cross_team_only") {
         return { kind: "drop", reason: "peer_disabled_cross_team" };
@@ -8241,6 +8264,39 @@ function parsePeerGroupIdsEnv(raw) {
     return [];
   return raw.split(",").map((s) => s.trim()).filter(Boolean);
 }
+function parseThirdPartyBotsEnv(raw) {
+  if (!raw || !raw.trim())
+    return [];
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return [];
+  }
+  if (!Array.isArray(parsed))
+    return [];
+  const out = [];
+  for (const item of parsed) {
+    if (!item || typeof item !== "object")
+      continue;
+    const rec = item;
+    const botUserId = typeof rec["bot_user_id"] === "string" ? rec["bot_user_id"].trim() : "";
+    if (!botUserId)
+      continue;
+    if (!Array.isArray(rec["channel_ids"]))
+      continue;
+    const channels = rec["channel_ids"].filter((c) => typeof c === "string" && c.trim() !== "").map((c) => c.trim());
+    const label = typeof rec["label"] === "string" && rec["label"].trim() ? rec["label"].trim() : void 0;
+    const botId = typeof rec["bot_id"] === "string" && rec["bot_id"].trim() ? rec["bot_id"].trim() : void 0;
+    out.push({
+      bot_user_id: botUserId,
+      channel_ids: channels,
+      ...botId ? { bot_id: botId } : {},
+      ...label ? { label } : {}
+    });
+  }
+  return out;
+}
 function parsePeerAgentModeEnv(raw) {
   if (raw === "listen" || raw === "respond")
     return raw;
@@ -8322,7 +8378,7 @@ function decideInboundAccess(input) {
 // ../../packages/core/dist/channels/governance/slack-sender-gate.js
 function evaluateSlackInboundGate(evt, deps) {
   const isBot = Boolean(evt.bot_id);
-  const content = decideSlackMessageForward(evt);
+  const content = decideSlackMessageForward(evt, deps.peerConfig.third_party_bots);
   const spDecision = decideSenderPolicyForward(evt, deps.senderPolicy);
   const senderPolicy = spDecision.forward ? { forward: true } : { forward: false, reason: classifySlackPolicyBlock(evt, deps.senderPolicy) };
   const peer = isBot ? (() => {
@@ -8420,7 +8476,15 @@ function buildSlackPeerClassifierConfigFromEnv(env, opts) {
     peer_agent_mode: parsePeerAgentModeEnv(env["SLACK_PEER_AGENT_MODE"]),
     peer_group_ids: parsePeerGroupIdsEnv(env["SLACK_PEER_GROUP_IDS"]),
     peers: parsePeersEnv(env["SLACK_PEERS"], env["SLACK_PEERS_GATE"]),
-    peer_disabled_mode: parseSlackPeerDisabledModeEnv(env, opts?.onWarn)
+    peer_disabled_mode: parseSlackPeerDisabledModeEnv(env, opts?.onWarn),
+    // ENG-8669 follow-up: this builder never populated the third-party
+    // allowlist. ENG-8669 read `SLACK_THIRD_PARTY_BOTS` only in the MCP
+    // adapter's own inline config, so every consumer of THIS builder — the
+    // opencode manager-side SenderGate among them — saw `third_party_bots`
+    // as undefined and could not admit a third-party bot under any
+    // configuration. The allowlist was wired into one of the two Slack ingress
+    // paths. Reading it here makes the two agree.
+    third_party_bots: parseThirdPartyBotsEnv(env["SLACK_THIRD_PARTY_BOTS"])
   };
 }
 
@@ -11330,7 +11394,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-VSSJC3MN.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-ITYPPSHM.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname9(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -11969,7 +12033,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.617" : "dev";
+var agtCliVersion = true ? "0.28.619" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -13276,7 +13340,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-GM3EH2ZU.js");
+      const { collectDiagnostics } = await import("../persistent-session-AGPLISL3.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -13392,7 +13456,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-GM3EH2ZU.js");
+      const { collectDiagnostics } = await import("../persistent-session-AGPLISL3.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor) : void 0;
       let tailscaleHostname;
@@ -13515,7 +13579,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-VSSJC3MN.js");
+      } = await import("../responsiveness-probe-ITYPPSHM.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -13621,7 +13685,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-VSSJC3MN.js");
+        } = await import("../responsiveness-probe-ITYPPSHM.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -13777,7 +13841,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-KOKVXPPQ.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-Y6ABNWNM.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -16659,6 +16723,8 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
   let claudeAuthMode;
   let anthropicApiKey;
   let anthropicApiKeyFingerprint;
+  let hostKind = null;
+  let rawHostKey = null;
   try {
     const apiKey = getApiKey();
     if (!apiKey) {
@@ -16673,6 +16739,8 @@ async function ensurePersistentSession(agent, tasks, boardItems, refreshData) {
     claudeAuthMode = exchange.claudeAuthMode;
     anthropicApiKey = exchange.anthropicApiKey;
     anthropicApiKeyFingerprint = exchange.anthropicApiKeyFingerprint;
+    hostKind = exchange.hostKind;
+    rawHostKey = apiKey;
   } catch (err) {
     const msg = err.message;
     const healthyBefore = isSessionHealthy(codeName);
@@ -16923,6 +16991,37 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash17("sha256")
       refreshData.tools?.raw_content
     );
     egressAllowlistBySession.set(codeName, egressAllowlist);
+    let perAgentApiKey = null;
+    try {
+      perAgentApiKey = await resolvePerAgentApiKey({
+        hostKind,
+        // Non-null on every path that reaches here: the auth block above returns
+        // 'skipped-no-api-key' when getApiKey() is empty. `?? ''` keeps the types
+        // honest without inventing a fallback credential — an empty key cannot
+        // authenticate the mint, so it fails closed like any other bad key.
+        rawHostKey: rawHostKey ?? "",
+        agentId: agent.agent_id,
+        dedicatedEnabled: hostFlagStore().getBoolean("per-agent-host-credentials"),
+        mint: mintAgentKey
+      });
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      log(
+        `[persistent-session] '${codeName}' (host_kind=${hostKind ?? "dedicated"}): per-agent key mint FAILED (${msg}) \u2014 refusing to spawn rather than fall back to the shared host key`
+      );
+      closeSessionRunForCode(codeName, "failed", "per-agent key mint failed");
+      return {
+        decision: "skipped-per-agent-key-mint-failed",
+        spawnAttempted: false,
+        sessionHealthyAfter: isSessionHealthy(codeName),
+        detail: msg
+      };
+    }
+    if (perAgentApiKey) {
+      log(
+        `[persistent-session] '${codeName}' (host_kind=${hostKind ?? "dedicated"}): injecting per-agent org-scoped key (ADR-0042 pt3b)`
+      );
+    }
     startPersistentSession({
       codeName,
       agentId: agent.agent_id,
@@ -16971,6 +17070,9 @@ ${truncateForLog(ctx.tail)}` : `; pane_tail_hash=sha256:${createHash17("sha256")
       // this the flip reaches nothing running under Docker isolation.
       turnFailureNoticeEnabled: hostFlagStore().getBoolean("wedge-transient-notice"),
       egressAllowlist,
+      // ADR-0042 pt3b (ENG-7607 / ENG-8992): this agent's own org-scoped key
+      // (null when unarmed). The spawn env carries it as this agent's AGT_API_KEY.
+      perAgentApiKey,
       log
     });
     agentState.persistentSessionAgents.add(codeName);
@@ -17266,7 +17368,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-GM3EH2ZU.js");
+        const { collectDiagnostics } = await import("../persistent-session-AGPLISL3.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -17317,7 +17419,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-GM3EH2ZU.js");
+      const { collectDiagnostics } = await import("../persistent-session-AGPLISL3.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -17913,7 +18015,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-QCL2TB6N.js");
+  } = await import("../claude-pair-runtime-3356FFTC.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));