@integrity-labs/agt-cli 0.28.764 → 0.28.766

package/dist/lib/manager-worker.js

@@ -58,7 +58,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-SMY25FCN.js";
+} from "../chunk-HAYQ6DYC.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -246,6 +246,49 @@ import { join as join41, dirname as dirname10, delimiter as pathDelimiter } from
 import { homedir as homedir17 } from "os";
 import { fileURLToPath } from "url";
 
+// ../../packages/core/dist/provisioning/channel-policy-env.js
+var TELEGRAM_RESTART_ON_CHANGE_ENV_KEYS = [
+  /** Who may talk to the agent — and, at four MCP call sites, who it may send to. */
+  "TELEGRAM_ALLOWED_CHATS",
+  /** Drops every group / supergroup / channel message. A containment control. */
+  "TELEGRAM_PRIVATE_CHATS_ONLY",
+  /** Peer kill switch. A switch whose purpose is stopping something promptly. */
+  "PEER_DISABLED",
+  /** Derived boolean mirror of the same switch, kept for the rollout. */
+  "TELEGRAM_PEER_DISABLED"
+];
+function telegramPolicyEnvBasis(env) {
+  const parts = [];
+  for (const key of [...TELEGRAM_RESTART_ON_CHANGE_ENV_KEYS].sort()) {
+    const raw = env[key];
+    if (raw === void 0)
+      continue;
+    const value = key === "TELEGRAM_ALLOWED_CHATS" ? [...new Set(raw.split(",").map((v) => v.trim()).filter((v) => v.length > 0))].sort().join(",") : raw.trim();
+    parts.push(`${key}=${value}`);
+  }
+  return parts.join("\n");
+}
+function telegramPolicyEnvFromInputs(config2, opts) {
+  const env = {};
+  const allowedChats = config2["allowed_chats"];
+  if (Array.isArray(allowedChats)) {
+    const ids = allowedChats.map((v) => typeof v === "string" || typeof v === "number" ? String(v).trim() : "").filter((v) => v.length > 0);
+    if (ids.length > 0)
+      env["TELEGRAM_ALLOWED_CHATS"] = ids.join(",");
+  }
+  if (config2["private_chats_only"] === true)
+    env["TELEGRAM_PRIVATE_CHATS_ONLY"] = "1";
+  const mode = opts?.peerDisabledMode;
+  if (mode && mode !== "off")
+    env["PEER_DISABLED"] = mode;
+  if (mode === "all")
+    env["TELEGRAM_PEER_DISABLED"] = "true";
+  return env;
+}
+function isTelegramPolicyRestrictive(env) {
+  return telegramPolicyEnvBasis(env).length > 0;
+}
+
 // src/lib/single-flight.ts
 function createSingleFlight(task, opts = {}) {
   let running2 = false;
@@ -5993,12 +6036,23 @@ import { existsSync as existsSync10, readFileSync as readFileSync21 } from "fs";
 import { join as join27 } from "path";
 var BASELINE_FILENAME = "sender-policy-baseline.json";
 var SENDER_POLICY_BASELINE_VERSION = 1;
-var BASELINE_CONCERNS = ["senderPolicy", "slackBehaviour", "msteamsBehaviour"];
+var BASELINE_CONCERNS = [
+  "senderPolicy",
+  "slackBehaviour",
+  "msteamsBehaviour",
+  // ENG-9802: the telegram chat policy (allowlist / private-chats-only / peer
+  // kill switch). Same shape and same reason as senderPolicy — the MCP child
+  // reads it once at boot, so a change has to be delivered by a respawn, and
+  // the baseline has to survive a manager restart or every deploy would look
+  // like a first poll and respawn the fleet (ENG-7771).
+  "telegramPolicy"
+];
 function createDeliveryBaselineMaps() {
   return {
     senderPolicy: /* @__PURE__ */ new Map(),
     slackBehaviour: /* @__PURE__ */ new Map(),
-    msteamsBehaviour: /* @__PURE__ */ new Map()
+    msteamsBehaviour: /* @__PURE__ */ new Map(),
+    telegramPolicy: /* @__PURE__ */ new Map()
   };
 }
 function getSenderPolicyBaselineFile(configDir) {
@@ -6575,6 +6629,8 @@ var agentState = {
    * (they read SLACK_SENDER_POLICY / MSTEAMS_SENDER_POLICY only at boot).
    */
   knownSenderPolicyHashes: /* @__PURE__ */ new Map(),
+  /** ENG-9802: per-agent telegram chat-policy hash (allowlist / private-chats-only / peer kill switch). */
+  knownTelegramPolicyHashes: /* @__PURE__ */ new Map(),
   /**
    * ENG-6024: hash of the Teams behaviour subset (thread_auto_follow,
    * channel_response_mode, adaptive_cards_enabled/_ask_user_enabled) from the
@@ -6662,6 +6718,7 @@ function clearAgentState(agentId, codeName) {
   agentState.knownManagedMcpHashes.delete(agentId);
   agentState.knownManagedMcpStructure.delete(agentId);
   agentState.knownSenderPolicyHashes.delete(agentId);
+  agentState.knownTelegramPolicyHashes.delete(agentId);
   agentState.knownMsTeamsBehaviourHashes.delete(agentId);
   agentState.knownSlackBehaviourHashes.delete(agentId);
   agentState.knownGlobalSkillIds.delete(agentId);
@@ -12659,6 +12716,11 @@ function scheduleSessionRestart(codeName, delayMs, reason, breakerReason = "hot-
           baselineAgentId,
           agentState.knownMsTeamsBehaviourHashes.get(baselineAgentId)
         );
+        persistDeliveryBaselineEntry(
+          "telegramPolicy",
+          baselineAgentId,
+          agentState.knownTelegramPolicyHashes.get(baselineAgentId)
+        );
       }
     }
     runningMcpHashes.delete(codeName);
@@ -13468,7 +13530,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.764" : "dev";
+var agtCliVersion = true ? "0.28.766" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -14723,6 +14785,9 @@ function loadSenderPolicyBaseline2() {
   for (const [agentId, hash] of persistedDeliveryBaseline.msteamsBehaviour) {
     agentState.knownMsTeamsBehaviourHashes.set(agentId, hash);
   }
+  for (const [agentId, hash] of persistedDeliveryBaseline.telegramPolicy) {
+    agentState.knownTelegramPolicyHashes.set(agentId, hash);
+  }
 }
 var deliveryBaselineDirty = false;
 function saveDeliveryBaseline() {
@@ -16491,6 +16556,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
   const known = agentState.knownVersions.get(agent.agent_id);
   let lastProvisionAt = state8.agents.find((a) => a.agentId === agent.agent_id)?.lastProvisionAt ?? null;
   const quarantinedChannels = channelQuarantineStore().getQuarantinedKeys(agent.code_name);
+  let telegramPolicyEnvForRestart;
   const currentChannelIds = setWithout(
     launchableChannelIds(refreshData.channel_configs),
     quarantinedChannels
@@ -16805,6 +16871,12 @@ async function processAgent(agent, agentStates, managedToolkits) {
             if (next === "off" || next === "cross_team_only" || next === "all") return next;
             return teamSettings?.["telegram_peer_disabled"] === true ? "all" : "off";
           })();
+          if (channelId === "telegram") {
+            telegramPolicyEnvForRestart = telegramPolicyEnvFromInputs(
+              entry.config,
+              { peerDisabledMode }
+            );
+          }
           const agentTimezone = (() => {
             const tz = teamSettings?.["timezone"];
             return typeof tz === "string" && tz.trim() !== "" ? tz.trim() : void 0;
@@ -17092,6 +17164,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
       persistDeliveryBaselineEntry("senderPolicy", agent.agent_id, senderPolicyHash);
     }
     let msteamsBehaviourRestartScheduled = false;
+    let slackBehaviourRestartScheduled = false;
     if (currentChannelIds.has("msteams")) {
       const msteamsEntry = refreshData.channel_configs?.["msteams"];
       const behaviourSubset = extractMsTeamsBehaviourSubset(
@@ -17194,6 +17267,7 @@ async function processAgent(agent, agentStates, managedToolkits) {
           "channel-behaviour-change"
         );
       }
+      if (slackBehaviourDecision.restart) slackBehaviourRestartScheduled = true;
       agentState.knownSlackBehaviourHashes.set(agent.agent_id, slackBehaviourHash);
       const hasLiveSlackBehaviourConsumer = spSessionHealthy && spSessionMode === "persistent" && spFramework === "claude-code";
       if (!hasLiveSlackBehaviourConsumer) {
@@ -17205,6 +17279,59 @@ async function processAgent(agent, agentStates, managedToolkits) {
       agentState.knownSlackBehaviourHashes.delete(agent.agent_id);
       removeDeliveryBaselineEntry("slackBehaviour", agent.agent_id);
     }
+    if (currentChannelIds.has("telegram")) {
+      const telegramPolicyEnv = telegramPolicyEnvForRestart ?? {};
+      const telegramPolicyHash = createHash20("sha256").update(telegramPolicyEnvBasis(telegramPolicyEnv)).digest("hex");
+      const prevTelegramPolicyHash = agentState.knownTelegramPolicyHashes.get(agent.agent_id);
+      const telegramPolicyRestrictive = isTelegramPolicyRestrictive(telegramPolicyEnv);
+      const telegramPolicyDecision = decideSenderPolicyRestart({
+        previousHash: prevTelegramPolicyHash,
+        currentPolicyRestrictive: telegramPolicyRestrictive,
+        currentHash: telegramPolicyHash,
+        sessionMode: spSessionMode,
+        framework: spFramework,
+        sessionHealthy: spSessionHealthy,
+        // Any earlier restart scheduled this tick already respawns the MCP
+        // children with the freshly-written env.
+        channelSetRestartAlreadyScheduled: channelSetRestartScheduled || senderPolicyDecision.restart || msteamsBehaviourRestartScheduled || slackBehaviourRestartScheduled
+      });
+      if (telegramPolicyDecision.restart) {
+        const isTelegramVerifyRestart = telegramPolicyDecision.firstPoll;
+        log(
+          isTelegramVerifyRestart ? `[hot-reload] telegram chat-policy delivery baseline unknown for '${agent.code_name}' with a policy set (\u2192 ${telegramPolicyHash.slice(0, 8)}) \u2014 restarting session to guarantee enforcement (fail closed, ENG-9802)` : `[hot-reload] telegram chat policy changed for '${agent.code_name}' (${prevTelegramPolicyHash?.slice(0, 8) ?? "first"} \u2192 ${telegramPolicyHash.slice(0, 8)}) \u2014 restarting session`
+        );
+        const telegramNotice = isTelegramVerifyRestart ? "Your manager was updated and needs to restart your session to make sure your configured Telegram chat policy is enforced by the channel MCP server." : "Your Telegram chat policy has been updated. Restarting session shortly so the channel MCP server picks up the new allowlist.";
+        const telegramDelivered = await injectMessage(
+          agent.code_name,
+          "system",
+          telegramNotice + BACK_ONLINE_GREETING_GUIDANCE,
+          { task_name: "telegram-policy-update" },
+          log
+        ).catch(() => false);
+        const telegramDelay = telegramDelivered ? 8e3 : 3e3;
+        if (!telegramDelivered) {
+          log(
+            `[hot-reload] Inject notification unconfirmed for '${agent.code_name}' \u2014 proceeding with shorter delay`
+          );
+        }
+        scheduleSessionRestart(
+          agent.code_name,
+          telegramDelay,
+          isTelegramVerifyRestart ? "telegram chat-policy verify (unknown baseline)" : "telegram chat-policy change",
+          "telegram-policy-change"
+        );
+      }
+      agentState.knownTelegramPolicyHashes.set(agent.agent_id, telegramPolicyHash);
+      const hasLiveTelegramPolicyConsumer = spSessionHealthy && spSessionMode === "persistent" && spFramework === "claude-code";
+      if (!hasLiveTelegramPolicyConsumer) {
+        persistDeliveryBaselineEntry("telegramPolicy", agent.agent_id, telegramPolicyHash);
+      } else if (telegramPolicyDecision.firstPoll && !telegramPolicyRestrictive) {
+        persistDeliveryBaselineEntry("telegramPolicy", agent.agent_id, telegramPolicyHash);
+      }
+    } else {
+      agentState.knownTelegramPolicyHashes.delete(agent.agent_id);
+      removeDeliveryBaselineEntry("telegramPolicy", agent.agent_id);
+    }
   }
   const agentSessionMode = refreshData.agent.session_mode;
   if (agentSessionMode === "persistent" && (agentFrameworkCache.get(agent.code_name) ?? DEFAULT_FRAMEWORK) === "claude-code") {