@integrity-labs/agt-cli 0.28.733 → 0.28.734

package/dist/{chunk-LT7UGH4O.js → chunk-RLOZVCRY.js}

@@ -13,7 +13,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-7KT2QNXF.js";
+} from "./chunk-5CF4DRXA.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -6427,7 +6427,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.733" : "dev";
+var agtCliVersion = true ? "0.28.734" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10473,4 +10473,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-LT7UGH4O.js.map
+//# sourceMappingURL=chunk-RLOZVCRY.js.map

package/dist/{claude-pair-runtime-K5OUT4QN.js → claude-pair-runtime-AWLXOAV6.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-H7CP2TUX.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-4KGDH66U.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-K5OUT4QN.js.map
+//# sourceMappingURL=claude-pair-runtime-AWLXOAV6.js.map

package/dist/lib/manager-worker.js

@@ -57,7 +57,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-LT7UGH4O.js";
+} from "../chunk-RLOZVCRY.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -118,7 +118,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-7KT2QNXF.js";
+} from "../chunk-5CF4DRXA.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -9218,6 +9218,9 @@ function decideInboundAccess(input) {
   if (input.orgBoundary && !input.orgBoundary.forward) {
     return { kind: "drop", reason: "org_boundary" };
   }
+  if (input.chatType && !input.chatType.forward) {
+    return { kind: "drop", reason: "chat_type" };
+  }
   if (input.senderPolicy && !input.senderPolicy.forward) {
     const reason = input.senderPolicy.reason;
     const declineWorthy = input.sameOrg && reason !== "internal_only";
@@ -9993,6 +9996,11 @@ function parsePeerAgentModeEnv2(raw) {
   return "off";
 }
 
+// ../../packages/core/dist/channels/governance/telegram-chat-type.js
+function isTelegramPrivateChat(chatType) {
+  return chatType === "private";
+}
+
 // ../../packages/core/dist/channels/governance/telegram-sender-gate.js
 function evaluateTelegramInboundGate(evt, deps) {
   const isBot = Boolean(evt.from?.is_bot);
@@ -10029,6 +10037,10 @@ function evaluateTelegramInboundGate(evt, deps) {
     // TELEGRAM_ALLOWED_CHATS is Telegram's org-boundary axis. An unlisted chat is
     // external ⇒ silent drop.
     orgBoundary: deps.allowedChats.size > 0 && !deps.allowedChats.has(chatId) ? { forward: false } : { forward: true },
+    // CS-1628: the chat-kind axis. Only ever restricts - when the policy is off
+    // this is `{ forward: true }`, which the composer treats identically to the
+    // field being absent.
+    chatType: deps.privateChatsOnly && !isTelegramPrivateChat(evt.chat.type) ? { forward: false } : { forward: true },
     // No sender-policy mode system and no command dispatch on the injection gate.
     sameOrg: false
   });
@@ -12347,7 +12359,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-MPPDJSOL.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-HNUYLIFJ.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -12995,7 +13007,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.733" : "dev";
+var agtCliVersion = true ? "0.28.734" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14522,7 +14534,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-H7CP2TUX.js");
+      const { collectDiagnostics } = await import("../persistent-session-4KGDH66U.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -14663,7 +14675,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-H7CP2TUX.js");
+      const { collectDiagnostics } = await import("../persistent-session-4KGDH66U.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -14832,7 +14844,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-MPPDJSOL.js");
+      } = await import("../responsiveness-probe-HNUYLIFJ.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -14942,7 +14954,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-MPPDJSOL.js");
+        } = await import("../responsiveness-probe-HNUYLIFJ.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -19009,7 +19021,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-H7CP2TUX.js");
+        const { collectDiagnostics } = await import("../persistent-session-4KGDH66U.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19055,7 +19067,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-H7CP2TUX.js");
+      const { collectDiagnostics } = await import("../persistent-session-4KGDH66U.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19687,7 +19699,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-K5OUT4QN.js");
+  } = await import("../claude-pair-runtime-AWLXOAV6.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));