@integrity-labs/agt-cli 0.28.931 → 0.28.933

package/dist/{chunk-HSXAGIVO.js → chunk-UAC3N4QQ.js}

@@ -16,7 +16,7 @@ import {
   parseEnvIntegrations,
   shellQuote,
   summarizeUnanswerablePane
-} from "./chunk-HC3EDWKC.js";
+} from "./chunk-3ZYWTOUW.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -76,7 +76,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-7F32775G.js";
+} from "./chunk-TH3HADAH.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6942,7 +6942,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.931" : "dev";
+var agtCliVersion = true ? "0.28.933" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11567,4 +11567,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-HSXAGIVO.js.map
+//# sourceMappingURL=chunk-UAC3N4QQ.js.map

package/dist/{claude-pair-runtime-TDP2NJTT.js → claude-pair-runtime-GMAY5E45.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-Z7S2MMRH.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-JL7QVQJH.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-TDP2NJTT.js.map
+//# sourceMappingURL=claude-pair-runtime-GMAY5E45.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-HSXAGIVO.js";
+} from "../chunk-UAC3N4QQ.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -136,7 +136,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-HC3EDWKC.js";
+} from "../chunk-3ZYWTOUW.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -232,7 +232,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-7F32775G.js";
+} from "../chunk-TH3HADAH.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -13230,7 +13230,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-SR62Y32C.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-H5HCW7HT.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13915,7 +13915,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.931" : "dev";
+var agtCliVersion = true ? "0.28.933" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15505,7 +15505,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-Z7S2MMRH.js");
+      const { collectDiagnostics } = await import("../persistent-session-JL7QVQJH.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15647,7 +15647,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-Z7S2MMRH.js");
+      const { collectDiagnostics } = await import("../persistent-session-JL7QVQJH.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15822,7 +15822,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-SR62Y32C.js");
+      } = await import("../responsiveness-probe-H5HCW7HT.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15939,7 +15939,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-SR62Y32C.js");
+        } = await import("../responsiveness-probe-H5HCW7HT.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -16095,7 +16095,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-25KP23AU.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-PRK7BNLU.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -20359,7 +20359,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-SR62Y32C.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-H5HCW7HT.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -20402,7 +20402,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-Z7S2MMRH.js");
+        const { collectDiagnostics } = await import("../persistent-session-JL7QVQJH.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20453,7 +20453,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-Z7S2MMRH.js");
+      const { collectDiagnostics } = await import("../persistent-session-JL7QVQJH.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -21095,7 +21095,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-TDP2NJTT.js");
+  } = await import("../claude-pair-runtime-GMAY5E45.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -30596,6 +30596,11 @@ var integration_metadata_v1_default = {
       pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$",
       description: "Authorization scheme word placed before the credential, e.g. `Key` for Higgsfield's `Authorization: Key KEY_ID:KEY_SECRET` (ENG-8440). Omit for the `Bearer` default. Constrained to a single RFC 7230 token because it is concatenated straight into a header value."
     },
+    auth_encoding: {
+      type: "string",
+      enum: ["basic_username"],
+      description: "How the credential is encoded into Authorization (ENG-10524). `basic_username` sends it as the HTTP Basic username with an empty password (`Authorization: Basic base64(<credential>:)`), Sportsyear's API-key form. Omit for `<auth_scheme> <credential>`. Must not be combined with `auth_scheme`."
+    },
     runtime_scopes: {
       type: "object",
       description: "Per-runtime-scope support map. Each slot is either null (the integration does not support installs at this scope) or an object describing how token resolution and auth work for that scope.",
@@ -30630,6 +30635,10 @@ var integration_metadata_v1_default = {
     required: ["tools"]
   },
   then: { required: ["base_url"] },
+  not: {
+    description: "auth_scheme and auth_encoding are mutually exclusive (ENG-10524). The templater refuses the combination on every call, so catalog validation refuses it first.",
+    required: ["auth_scheme", "auth_encoding"]
+  },
   $defs: {
     scopeConfig: {
       oneOf: [
@@ -39891,7 +39900,7 @@ async function readCursorAdvanceBody(res) {
 function buildDirectChatMcpInstructions() {
   return [
     "CRITICAL: every response to a direct-chat <channel> tag MUST go through direct_chat.reply (passing the session_id verbatim). Text in your session WITHOUT a direct_chat.reply call never reaches the operator \u2014 the reply dies inside the agent process.",
-    'Messages from the webapp Direct Chat arrive as <channel source="direct-chat" session_id="..." user="...">.',
+    "Messages from the webapp Direct Chat arrive as a channel tag whose source is direct-chat, carrying session_id and user.",
     "When the tag carries user_name (and sometimes user_email / user_role), that is the verified human you are talking with; address them by name and tailor your reply to who they are. If those attributes are absent, the sender is unknown, so just reply helpfully without personalization.",
     "Reply using the direct_chat.reply tool, passing the session_id from the tag.",
     "Always reply to every direct chat message that expects a reply (its meta has requires_reply=true, or no requires_reply field) \u2014 the user is waiting in the webapp.",

package/dist/mcp/index.js

@@ -23172,6 +23172,11 @@ var integration_metadata_v1_default = {
       pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$",
       description: "Authorization scheme word placed before the credential, e.g. `Key` for Higgsfield's `Authorization: Key KEY_ID:KEY_SECRET` (ENG-8440). Omit for the `Bearer` default. Constrained to a single RFC 7230 token because it is concatenated straight into a header value."
     },
+    auth_encoding: {
+      type: "string",
+      enum: ["basic_username"],
+      description: "How the credential is encoded into Authorization (ENG-10524). `basic_username` sends it as the HTTP Basic username with an empty password (`Authorization: Basic base64(<credential>:)`), Sportsyear's API-key form. Omit for `<auth_scheme> <credential>`. Must not be combined with `auth_scheme`."
+    },
     runtime_scopes: {
       type: "object",
       description: "Per-runtime-scope support map. Each slot is either null (the integration does not support installs at this scope) or an object describing how token resolution and auth work for that scope.",
@@ -23206,6 +23211,10 @@ var integration_metadata_v1_default = {
     required: ["tools"]
   },
   then: { required: ["base_url"] },
+  not: {
+    description: "auth_scheme and auth_encoding are mutually exclusive (ENG-10524). The templater refuses the combination on every call, so catalog validation refuses it first.",
+    required: ["auth_scheme", "auth_encoding"]
+  },
   $defs: {
     scopeConfig: {
       oneOf: [

package/dist/mcp/origami.js

@@ -37118,6 +37118,11 @@ var integration_metadata_v1_default = {
       pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$",
       description: "Authorization scheme word placed before the credential, e.g. `Key` for Higgsfield's `Authorization: Key KEY_ID:KEY_SECRET` (ENG-8440). Omit for the `Bearer` default. Constrained to a single RFC 7230 token because it is concatenated straight into a header value."
     },
+    auth_encoding: {
+      type: "string",
+      enum: ["basic_username"],
+      description: "How the credential is encoded into Authorization (ENG-10524). `basic_username` sends it as the HTTP Basic username with an empty password (`Authorization: Basic base64(<credential>:)`), Sportsyear's API-key form. Omit for `<auth_scheme> <credential>`. Must not be combined with `auth_scheme`."
+    },
     runtime_scopes: {
       type: "object",
       description: "Per-runtime-scope support map. Each slot is either null (the integration does not support installs at this scope) or an object describing how token resolution and auth work for that scope.",
@@ -37152,6 +37157,10 @@ var integration_metadata_v1_default = {
     required: ["tools"]
   },
   then: { required: ["base_url"] },
+  not: {
+    description: "auth_scheme and auth_encoding are mutually exclusive (ENG-10524). The templater refuses the combination on every call, so catalog validation refuses it first.",
+    required: ["auth_scheme", "auth_encoding"]
+  },
   $defs: {
     scopeConfig: {
       oneOf: [
@@ -37284,7 +37293,7 @@ var FIXED_SECONDS = {
 // ../core/dist/integrations/integration-broker/http-templater.js
 var PLACEHOLDER_RE = /\{([a-zA-Z_][a-zA-Z0-9_]*)\}/g;
 function buildHttpRequest(input) {
-  const { tool, args, baseUrl, bearerToken, authScheme, requestId, extraHeaders } = input;
+  const { tool, args, baseUrl, bearerToken, authScheme, authEncoding, requestId, extraHeaders } = input;
   const { method, path_template, query_template, headers_template, body_template, idempotency_key_header } = tool.http;
   const path = templatePath(path_template, args);
   const query = query_template ? buildQueryString(query_template, args) : "";
@@ -37293,7 +37302,7 @@ function buildHttpRequest(input) {
     Accept: "application/json"
   };
   if (bearerToken) {
-    headers["Authorization"] = `${resolveAuthScheme(authScheme)} ${bearerToken}`;
+    headers["Authorization"] = authorizationValue(bearerToken, authScheme, authEncoding);
   }
   if (method !== "GET") {
     const headerName = idempotency_key_header ?? "Idempotency-Key";
@@ -37371,6 +37380,32 @@ function omitKeys(args, keys) {
   }
   return out;
 }
+function authorizationValue(token, scheme, encoding) {
+  if (encoding === void 0 || encoding.trim() === "") {
+    return `${resolveAuthScheme(scheme)} ${token}`;
+  }
+  const trimmed = encoding.trim();
+  if (trimmed !== "basic_username") {
+    throw new TemplateError(`unsupported auth_encoding: ${trimmed}`);
+  }
+  if (scheme !== void 0 && scheme.trim() !== "") {
+    throw new TemplateError("auth_scheme cannot be combined with auth_encoding");
+  }
+  return basicUsernameAuthorization(token);
+}
+function basicUsernameAuthorization(credential) {
+  if (credential.includes(":")) {
+    throw new TemplateError('credential for basic_username auth must not contain ":"');
+  }
+  if (!isValidHeaderValue(credential)) {
+    throw new TemplateError("credential for basic_username auth contains control characters");
+  }
+  const bytes = new TextEncoder().encode(`${credential}:`);
+  let binary = "";
+  for (const b of bytes)
+    binary += String.fromCharCode(b);
+  return `Basic ${btoa(binary)}`;
+}
 function resolveAuthScheme(scheme) {
   if (scheme === void 0)
     return "Bearer";

package/dist/mcp/slack-channel.js

@@ -31542,6 +31542,11 @@ var integration_metadata_v1_default = {
       pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$",
       description: "Authorization scheme word placed before the credential, e.g. `Key` for Higgsfield's `Authorization: Key KEY_ID:KEY_SECRET` (ENG-8440). Omit for the `Bearer` default. Constrained to a single RFC 7230 token because it is concatenated straight into a header value."
     },
+    auth_encoding: {
+      type: "string",
+      enum: ["basic_username"],
+      description: "How the credential is encoded into Authorization (ENG-10524). `basic_username` sends it as the HTTP Basic username with an empty password (`Authorization: Basic base64(<credential>:)`), Sportsyear's API-key form. Omit for `<auth_scheme> <credential>`. Must not be combined with `auth_scheme`."
+    },
     runtime_scopes: {
       type: "object",
       description: "Per-runtime-scope support map. Each slot is either null (the integration does not support installs at this scope) or an object describing how token resolution and auth work for that scope.",
@@ -31576,6 +31581,10 @@ var integration_metadata_v1_default = {
     required: ["tools"]
   },
   then: { required: ["base_url"] },
+  not: {
+    description: "auth_scheme and auth_encoding are mutually exclusive (ENG-10524). The templater refuses the combination on every call, so catalog validation refuses it first.",
+    required: ["auth_scheme", "auth_encoding"]
+  },
   $defs: {
     scopeConfig: {
       oneOf: [
@@ -42842,7 +42851,7 @@ function buildSlackMcpInstructions(opts) {
   const { ackReaction, skipReactionOn, skipReaction } = opts;
   return [
     "CRITICAL: every response to a Slack <channel> tag MUST go through slack.reply - typed text never reaches the user. Slow work: interim ack (slack.reply interim:true), then your FINAL answer as a separate slack.reply (interim omitted). An ack is not the answer.",
-    `Inbound: <channel ... inbound_id="ib_..." message_ts="..." [thread_context="..."]>. Reply with slack.reply passing inbound_id (copy it verbatim from the tag you are answering) + text; the server routes it to the right thread. Multiple <channel> tags = separate conversations: NEVER answer one user in another's inbound_id/thread. thread_context = pre-loaded thread; ground replies ONLY in it. For a self-initiated message (not a reply) set proactive:true.`,
+    "Each inbound tag carries inbound_id and message_ts, and sometimes thread_context. Reply with slack.reply passing inbound_id (copy it verbatim from the tag you are answering) + text; the server routes it to the right thread. Multiple <channel> tags = separate conversations: NEVER answer one user in another's inbound_id/thread. thread_context = pre-loaded thread; ground replies ONLY in it. For a self-initiated message (not a reply) set proactive:true.",
     "Attachments: <channel> `files` is a JSON string - JSON.parse it. Entry with `path` (or a top-level `image_path`) is already downloaded - Read it; do NOT call slack.download_attachment. Only entries with `file_id` and no `path` (PDF/docx/csv) need slack.download_attachment (pass file_id + channel), then Read the returned path. Don't surface file-handling errors that don't affect the answer.",
     "Address users by user_name, never raw user ID. In multi-participant threads the CURRENT speaker is on the latest <channel> tag.",
     `Reactions (slack.react sparingly - prefer a reply): :${ackReaction}: = ack (auto-added on inbound, don't duplicate); \u2705 = success.` + (skipReactionOn ? ` "${skipReaction}" = seen, not replying.` : "") + " NEVER react to signal failure of your work - on failure slack.reply one sentence explaining it (no stack traces/secrets). \u23F3 and \u274C are system-only; never add them.",

package/dist/mcp/teams-channel.js

@@ -15707,7 +15707,7 @@ var mcp = new Server(
       // High-priority lines first — Claude Code truncates instructions at
       // 2048 chars, so anything appended late silently disappears.
       "CRITICAL: every response to an MS Teams <channel> tag MUST go through teams.reply. Text in your session without a teams.reply call never reaches the user.",
-      'Messages from Teams arrive as <channel source="msteams" user="<aad-id>" user_name="<display>" conversation_id="..." service_url="..." reply_to_id="..." />. Pass conversation_id + service_url + reply_to_id from the tag to teams.reply verbatim; threaded replies must include reply_to_id.',
+      "Messages from Teams arrive as a channel tag carrying user (an AAD id), user_name, conversation_id, service_url and reply_to_id. Pass conversation_id + service_url + reply_to_id from the tag to teams.reply verbatim; threaded replies must include reply_to_id.",
       "Address users by user_name, never by raw user id (AAD object ids leak directory information).",
       "service_url is region-specific and arrives on every inbound \u2014 NEVER hardcode it, always echo the inbound value.",
       'Channel message + auto_followed="true": only reply if you have something useful to add; otherwise silently skip.',

package/dist/mcp/telegram-channel.js

@@ -31584,6 +31584,11 @@ var integration_metadata_v1_default = {
       pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$",
       description: "Authorization scheme word placed before the credential, e.g. `Key` for Higgsfield's `Authorization: Key KEY_ID:KEY_SECRET` (ENG-8440). Omit for the `Bearer` default. Constrained to a single RFC 7230 token because it is concatenated straight into a header value."
     },
+    auth_encoding: {
+      type: "string",
+      enum: ["basic_username"],
+      description: "How the credential is encoded into Authorization (ENG-10524). `basic_username` sends it as the HTTP Basic username with an empty password (`Authorization: Basic base64(<credential>:)`), Sportsyear's API-key form. Omit for `<auth_scheme> <credential>`. Must not be combined with `auth_scheme`."
+    },
     runtime_scopes: {
       type: "object",
       description: "Per-runtime-scope support map. Each slot is either null (the integration does not support installs at this scope) or an object describing how token resolution and auth work for that scope.",
@@ -31618,6 +31623,10 @@ var integration_metadata_v1_default = {
     required: ["tools"]
   },
   then: { required: ["base_url"] },
+  not: {
+    description: "auth_scheme and auth_encoding are mutually exclusive (ENG-10524). The templater refuses the combination on every call, so catalog validation refuses it first.",
+    required: ["auth_scheme", "auth_encoding"]
+  },
   $defs: {
     scopeConfig: {
       oneOf: [
@@ -42288,7 +42297,7 @@ function buildTelegramMcpInstructions(opts) {
   const skipReactionOn = opts.skipReactionOn && emoji2.length > 0 && emoji2.length <= MAX_SKIP_REACTION_UNITS;
   return [
     "CRITICAL: every response to a Telegram <channel> tag MUST go through telegram.reply with the chat_id from the tag \u2014 typed text never reaches the user. Slow work: interim ack (telegram.reply interim:true), then your FINAL answer as a separate telegram.reply (interim omitted). An ack is not the answer.",
-    'Messages from Telegram arrive as <channel source="telegram" chat_id="..." user="..." user_name="..." message_id="...">. Pass reply_to_message_id from the tag so the response lands as a quote-reply in busy chats.',
+    "Messages from Telegram arrive as a channel tag carrying chat_id, user, user_name and message_id. Pass reply_to_message_id from the tag so the response lands as a quote-reply in busy chats.",
     "Deliberately NOT replying (a standing rule bars you from that chat, or the message only changed state)? Call telegram.consume with the chat_id and a short reason: it settles the message without posting anything. Without a reply or a consume it counts as undelivered and re-delivers to you forever.",
     "Inbound attachments: `files` on the tag is a JSON string \u2014 JSON.parse it. An entry with `path` (or top-level `image_path`) is already downloaded \u2014 Read it. Entries with `file_id` and no `path` need telegram.download_attachment (file_id + chat_id), then Read the returned path.",
     'For work >30s follow the CLAUDE.md kanban flow: kanban_add \u2192 reply "On it \u2014 tracking here: <kanban URL>" \u2192 in_progress \u2192 reply the result. Simple lookups skip kanban but still reply.',

package/dist/mcp/whatsapp-channel.js

@@ -156050,11 +156050,11 @@ var mcp = new Server(
     },
     instructions: (IS_BAILEYS ? [
       "CRITICAL: every response to a WhatsApp <channel> tag MUST go through whatsapp.reply. Text in your session without a tool call never reaches the user.",
-      'Messages arrive as <channel source="whatsapp" sender="<jid>" conversation_id="..." message_id="..." />. Pass the `sender` value verbatim as the `to` argument to whatsapp.reply.',
+      "Messages arrive as a channel tag carrying sender (a JID), conversation_id and message_id. Pass the `sender` value verbatim as the `to` argument to whatsapp.reply.",
       "whatsapp.reply sends free-form text with no restrictions (this is a linked personal number, not a business template flow)."
     ] : [
       "CRITICAL: every response to a WhatsApp <channel> tag MUST go through whatsapp.reply (or whatsapp.send_template). Text in your session without a tool call never reaches the user.",
-      'Messages arrive as <channel source="whatsapp" sender="<id>" conversation_id="..." message_id="..." />. Pass the `sender` value verbatim as the `to` argument to whatsapp.reply.',
+      "Messages arrive as a channel tag carrying sender, conversation_id and message_id. Pass the `sender` value verbatim as the `to` argument to whatsapp.reply.",
       "whatsapp.reply sends free-form text and only works inside the 24h customer-service window (24h since the user last messaged). If it reports the window is closed, use whatsapp.send_template with a pre-approved template instead."
     ]).join(" ")
   }

package/dist/{persistent-session-Z7S2MMRH.js → persistent-session-JL7QVQJH.js}

@@ -62,8 +62,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-HC3EDWKC.js";
-import "./chunk-7F32775G.js";
+} from "./chunk-3ZYWTOUW.js";
+import "./chunk-TH3HADAH.js";
 import "./chunk-XWVM4KPK.js";
 export {
   CLAUDE_HOST_WIDE,
@@ -130,4 +130,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-Z7S2MMRH.js.map
+//# sourceMappingURL=persistent-session-JL7QVQJH.js.map

package/dist/{responsiveness-probe-SR62Y32C.js → responsiveness-probe-H5HCW7HT.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-HC3EDWKC.js";
-import "./chunk-7F32775G.js";
+} from "./chunk-3ZYWTOUW.js";
+import "./chunk-TH3HADAH.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -799,4 +799,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-SR62Y32C.js.map
+//# sourceMappingURL=responsiveness-probe-H5HCW7HT.js.map

package/dist/{session-auth-dead-25KP23AU.js → session-auth-dead-PRK7BNLU.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-7F32775G.js";
+} from "./chunk-TH3HADAH.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-25KP23AU.js.map
+//# sourceMappingURL=session-auth-dead-PRK7BNLU.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.931",
+  "version": "0.28.933",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {