@integrity-labs/agt-cli 0.28.917 → 0.28.919

package/dist/mcp/index.js

@@ -45752,6 +45752,50 @@ function describeFeatureRequestResult(resp) {
     isError: true
   };
 }
+var FEATURE_REQUEST_LIST_STATES = [
+  "open",
+  "in_progress",
+  "resolved",
+  "closed",
+  "unknown"
+];
+var DESCRIPTION_NOT_RECORDED = "(body not recorded: this request was filed before request_feature_list existed; only the title is known)";
+function describeFeatureRequestList(resp, stateFilter) {
+  if (resp.status !== "listed" || !Array.isArray(resp.requests)) {
+    return {
+      text: `Could not list feature requests${resp.message ? `: ${resp.message}` : ""}. Do not assume nothing was filed; tell your operator.`,
+      isError: true
+    };
+  }
+  const rows = resp.requests;
+  const total = resp.total ?? rows.length;
+  const notes = [];
+  if (resp.state_source === "unavailable") {
+    notes.push(
+      'Status could not be read from the support tracker, so every state below is "unknown". Do not read unknown as open or resolved.'
+    );
+  }
+  if (resp.truncated) {
+    notes.push(
+      `Only the newest ${resp.scanned ?? rows.length} of ${total} requests were examined; older ones are not listed${stateFilter ? " and were not checked against the filter" : ""}.`
+    );
+  }
+  if (rows.length === 0) {
+    const head = total === 0 ? "Your team has no feature requests on record." : `None of your team's ${resp.scanned ?? total} most recent feature requests are in state "${stateFilter}".`;
+    return { text: [head, ...notes].join("\n"), isError: false };
+  }
+  const header = `${rows.length} feature request${rows.length === 1 ? "" : "s"} filed by your team${stateFilter ? ` in state "${stateFilter}"` : ""} (newest first):`;
+  const body = rows.map((r) => {
+    const kind = [r.feature_type, r.provider].filter(Boolean).join(", ");
+    const who = r.filed_by_me ? "by you" : "by a teammate";
+    const day = r.created_at ? r.created_at.slice(0, 10) : "unknown date";
+    return [
+      `- [${r.state}] ${r.title}${kind ? ` (${kind})` : ""}, filed ${day} ${who}, id: ${r.id}`,
+      `  ${r.description ?? DESCRIPTION_NOT_RECORDED}`
+    ].join("\n");
+  });
+  return { text: [header, ...notes, ...body].join("\n"), isError: false };
+}
 
 // src/recruit-agent.ts
 function describeRecruitAgentResult(resp) {
@@ -47586,6 +47630,47 @@ server.tool(
     return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
   }
 );
+server.tool(
+  "request_feature_list",
+  'List the feature requests your TEAM has already sent to Ninjafy support with request_feature, newest first. Call this BEFORE request_feature so you do not file a duplicate: each entry shows the full request body as it was submitted (never a preview), its current state (open, in_progress, resolved, closed, or unknown), and whether you or a teammate filed it. "closed" means it was declined or merged into another request; "unknown" means the status could not be read, not that it is open. Requests filed before this tool existed show their title but no body. Support ticket numbers and links are internal and are never shown. A request whose record failed to save when it was filed cannot appear here, so an empty list is strong evidence, not proof, that nothing was asked.',
+  {
+    state: external_exports.enum(FEATURE_REQUEST_LIST_STATES).optional().describe('Only return requests in this state, e.g. "open" to see what is still outstanding. Omit for all.')
+  },
+  async (params) => {
+    if (!AGT_AGENT_CODE_NAME) {
+      return {
+        content: [{ type: "text", text: "Error: AGT_AGENT_CODE_NAME not configured." }],
+        isError: true
+      };
+    }
+    let resp;
+    try {
+      resp = await apiPost(
+        "/host/request-feature/list",
+        {
+          agent_code_name: AGT_AGENT_CODE_NAME,
+          ...params.state ? { state: params.state } : {}
+        },
+        false,
+        15e3,
+        "request_feature_list",
+        true
+      );
+    } catch (err) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Could not reach the feature-request service (${err instanceof Error ? err.message : String(err)}). Do not assume nothing was filed.`
+          }
+        ],
+        isError: true
+      };
+    }
+    const { text, isError } = describeFeatureRequestList(resp, params.state);
+    return { content: [{ type: "text", text }], ...isError ? { isError: true } : {} };
+  }
+);
 server.tool(
   "list_agent_roles",
   "List the predefined agent roles available to your organization. Call this BEFORE recruit_agent, and go through the results with the person who asked, so the new teammate is created from a curated role rather than a label you invented. Each role carries a vetted description, a risk tier, scheduled tasks and bundled skills that are provisioned automatically when the role is used \u2014 a made-up role label gets none of that. Pass the chosen role_id to recruit_agent.",
@@ -49452,6 +49537,9 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   // this name, so the forwarding-skip is a no-op; listed here to keep the
   // lockstep guard green.
   "request_feature",
+  // ENG-10427: the read half of request_feature (always registered). No API tool
+  // shares this name; listed here to keep the lockstep guard green.
+  "request_feature_list",
   // ENG-7495: agent-requested integration reconnect (always registered). No
   // API tool shares this name; listed here to keep the lockstep guard green.
   "request_reconnect",

package/dist/mcp/slack-channel.js

@@ -30525,6 +30525,9 @@ function decideSenderPolicyForward(evt, policy) {
 }
 
 // ../core/dist/channels/governance/sender-policy-decline.js
+function teamOnlyReason(allowlist) {
+  return allowlist && allowlist.length > 0 ? "mode_team_only" : "mode_team_only_no_principals";
+}
 function classifySlackPolicyBlock(evt, policy) {
   if (policy.internalOnly && (!policy.homeTeamId || evt.team !== policy.homeTeamId)) {
     return "internal_only";
@@ -30533,7 +30536,7 @@ function classifySlackPolicyBlock(evt, policy) {
     case "manager_only":
       return "mode_manager_only";
     case "team_only":
-      return "mode_team_only";
+      return teamOnlyReason(policy.teamPrincipalSlackUserIds);
     case "team_agents_only":
       return "mode_team_agents_only";
     case "agents_only":
@@ -30550,12 +30553,21 @@ function politeDeclineCopy(reason) {
       return "Sorry, I only respond to my manager in this channel.";
     case "mode_team_only":
       return "Sorry, this agent only replies to its team members.";
+    case "mode_team_only_no_principals":
+      return "Sorry, I can't reply to anyone in this channel yet: none of my team members' accounts here are linked to me. An admin needs to link them first.";
     case "mode_team_agents_only":
       return "Sorry, I only respond to agents on my team in this channel.";
     case "mode_agents_only":
       return "Sorry, I only respond to other agents in this channel.";
   }
 }
+function isSlackDeclineAddressed(input) {
+  if (input.eventType === "app_mention")
+    return true;
+  if (typeof input.channelId === "string" && input.channelId.startsWith("D"))
+    return true;
+  return !!input.botUserId && typeof input.text === "string" && input.text.includes(`<@${input.botUserId}>`);
+}
 function decideDeclineReply(input) {
   const last = input.cache.get(input.key);
   if (last !== void 0) {
@@ -30581,6 +30593,10 @@ function readDeclineCooldownMs(envVarName, defaultSeconds = 1800) {
 }
 
 // ../core/dist/channels/governance/inbound-access.js
+function isSameSlackWorkspace(input) {
+  const home = (input.provisionedHomeTeamId && input.provisionedHomeTeamId.length > 0 ? input.provisionedHomeTeamId : null) ?? input.authTestHomeTeamId;
+  return !!home && typeof input.senderTeamId === "string" && input.senderTeamId === home;
+}
 function decideInboundAccess(input) {
   if (!input.content.forward) {
     return { kind: "drop", reason: `content:${input.content.reason}` };
@@ -46853,12 +46869,16 @@ var SLACK_AUTH_FAILURE_CODES = /* @__PURE__ */ new Set([
   "account_inactive",
   "not_authed"
 ]);
+var authTestHomeTeamId = null;
 async function getBotUserId() {
   try {
     const res = await fetch("https://slack.com/api/auth.test", {
       headers: { Authorization: `Bearer ${BOT_TOKEN}` }
     });
     const data = await res.json();
+    if (data.ok && typeof data.team_id === "string" && data.team_id.length > 0) {
+      authTestHomeTeamId = data.team_id;
+    }
     if (data.ok) return { id: data.user_id ?? null, authFailed: false };
     return { id: null, authFailed: !!data.error && SLACK_AUTH_FAILURE_CODES.has(data.error) };
   } catch {
@@ -49081,8 +49101,11 @@ async function connectSocketMode() {
       const isWatchDm = evt.channel?.startsWith("D") ?? false;
       const isWatchCommand = !isBot && watchArgsFromText(strippedText, AGENT_CODE_NAME, { allowBare: isWatchDm }) !== null;
       const command = isBot ? void 0 : isHelpCommand ? { command: "help", authorized: true } : isWatchCommand ? { command: "watch", authorized: isRestartSenderAllowed(getEffectiveAllowedUsers(), evt.user) } : isRestartCommand ? { command: "restart", authorized: isRestartSenderAllowed(getEffectiveAllowedUsers(), evt.user) } : void 0;
-      const slackHomeTeamId = process.env.SLACK_HOME_TEAM_ID;
-      const sameOrg = !!slackHomeTeamId && evt.team === slackHomeTeamId;
+      const sameOrg = isSameSlackWorkspace({
+        senderTeamId: evt.team,
+        provisionedHomeTeamId: process.env.SLACK_HOME_TEAM_ID,
+        authTestHomeTeamId
+      });
       const access = decideInboundAccess({
         content: filterDecision.forward ? { forward: true } : { forward: false, reason: filterDecision.reason },
         // The agent's own user-echo was already skipped above; peer 'self'
@@ -49125,7 +49148,12 @@ async function connectSocketMode() {
           if (hint) process.stderr.write(`${hint}
 `);
         }
-        if (access.decline !== void 0 && policyBlockReason) {
+        if (access.decline !== void 0 && policyBlockReason && isSlackDeclineAddressed({
+          eventType: evt.type,
+          channelId: evt.channel,
+          text: evt.text,
+          botUserId
+        })) {
           await maybeSendSenderPolicyDecline({
             channel: evt.channel,
             senderId: evt.user,

package/dist/mcp/teams-channel.js

@@ -14863,6 +14863,9 @@ function decideSenderPolicyForwardTeams(activity, policy) {
 }
 
 // ../core/dist/channels/governance/sender-policy-decline.js
+function teamOnlyReason(allowlist) {
+  return allowlist && allowlist.length > 0 ? "mode_team_only" : "mode_team_only_no_principals";
+}
 function classifyTeamsPolicyBlock(activity, policy) {
   const senderTenantId = activity.channelData?.tenant?.id ?? activity.conversation?.tenantId;
   if (policy.internalOnly && (!policy.homeTenantId || policy.homeTenantId === "common" || senderTenantId !== policy.homeTenantId)) {
@@ -14872,7 +14875,7 @@ function classifyTeamsPolicyBlock(activity, policy) {
     case "manager_only":
       return "mode_manager_only";
     case "team_only":
-      return "mode_team_only";
+      return teamOnlyReason(policy.teamPrincipalAadObjectIds);
     case "team_agents_only":
       return "mode_team_agents_only";
     case "agents_only":
@@ -14889,6 +14892,8 @@ function politeDeclineCopy(reason) {
       return "Sorry, I only respond to my manager in this channel.";
     case "mode_team_only":
       return "Sorry, this agent only replies to its team members.";
+    case "mode_team_only_no_principals":
+      return "Sorry, I can't reply to anyone in this channel yet: none of my team members' accounts here are linked to me. An admin needs to link them first.";
     case "mode_team_agents_only":
       return "Sorry, I only respond to agents on my team in this channel.";
     case "mode_agents_only":

package/dist/mcp/telegram-channel.js

@@ -30680,6 +30680,8 @@ function politeDeclineCopy(reason) {
       return "Sorry, I only respond to my manager in this channel.";
     case "mode_team_only":
       return "Sorry, this agent only replies to its team members.";
+    case "mode_team_only_no_principals":
+      return "Sorry, I can't reply to anyone in this channel yet: none of my team members' accounts here are linked to me. An admin needs to link them first.";
     case "mode_team_agents_only":
       return "Sorry, I only respond to agents on my team in this channel.";
     case "mode_agents_only":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.917",
+  "version": "0.28.919",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {