@integrity-labs/agt-cli 0.28.838 → 0.28.839

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-MZNTGZA7.js";
+} from "../chunk-V2JMDOOU.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.838" : "dev";
+var cliVersion = true ? "0.28.839" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.838" : "dev";
+var cliVersion2 = true ? "0.28.839" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-MZNTGZA7.js → chunk-V2JMDOOU.js}

@@ -6566,7 +6566,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.838" : "dev";
+var agtCliVersion = true ? "0.28.839" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10924,4 +10924,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-MZNTGZA7.js.map
+//# sourceMappingURL=chunk-V2JMDOOU.js.map

package/dist/lib/manager-worker.js

@@ -60,7 +60,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-MZNTGZA7.js";
+} from "../chunk-V2JMDOOU.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -9598,6 +9598,15 @@ function decideSenderPolicyForward(evt, policy) {
 
 // ../../packages/core/dist/channels/governance/slack-peer-classifier.js
 var CODE_NAME_RE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
+function findThirdPartyGrant(msg, cfg) {
+  return cfg.third_party_bots?.find((b) => {
+    if (msg.user && b.bot_user_id === msg.user)
+      return true;
+    if (!msg.bot_id)
+      return false;
+    return b.bot_id === msg.bot_id || b.bot_user_id === msg.bot_id;
+  });
+}
 function classifyPeerMessage(msg, cfg, self) {
   if (!msg.bot_id)
     return { kind: "human" };
@@ -9607,6 +9616,18 @@ function classifyPeerMessage(msg, cfg, self) {
   if (cfg.peer_disabled_mode === "all") {
     return { kind: "drop", reason: "peer_disabled_all" };
   }
+  if (!cfg.peers.some((p) => p.bot_user_id === msg.user)) {
+    const grant = findThirdPartyGrant(msg, cfg);
+    if (grant) {
+      if (cfg.peer_disabled_mode === "cross_team_only") {
+        return { kind: "drop", reason: "peer_disabled_cross_team" };
+      }
+      if (grant.channel_ids.includes(msg.channel)) {
+        return { kind: "bot-ingress", bot: grant };
+      }
+      return { kind: "drop", reason: "third_party_channel_not_allowlisted" };
+    }
+  }
   if (cfg.peer_agent_mode === "off") {
     return { kind: "drop", reason: "mode_off" };
   }
@@ -9619,22 +9640,6 @@ function classifyPeerMessage(msg, cfg, self) {
   }
   const peer = cfg.peers.find((p) => p.bot_user_id === msg.user);
   if (!peer) {
-    const thirdParty = cfg.third_party_bots?.find((b) => {
-      if (msg.user && b.bot_user_id === msg.user)
-        return true;
-      if (!msg.bot_id)
-        return false;
-      return b.bot_id === msg.bot_id || b.bot_user_id === msg.bot_id;
-    });
-    if (thirdParty) {
-      if (cfg.peer_disabled_mode === "cross_team_only") {
-        return { kind: "drop", reason: "peer_disabled_cross_team" };
-      }
-      if (thirdParty.channel_ids.includes(msg.channel)) {
-        return { kind: "bot-ingress", bot: thirdParty };
-      }
-      return { kind: "drop", reason: "third_party_channel_not_allowlisted" };
-    }
     return { kind: "drop", reason: "unknown_peer" };
   }
   if (peer.gate_path === null) {
@@ -13669,7 +13674,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.838" : "dev";
+var agtCliVersion = true ? "0.28.839" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();