@integrity-labs/agt-cli 0.28.951 → 0.28.953

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-5BEWHNQN.js";
+} from "../chunk-DNJDTNWX.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
@@ -5471,7 +5471,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.951" : "dev";
+var cliVersion = true ? "0.28.953" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6731,7 +6731,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.951" : "dev";
+var cliVersion2 = true ? "0.28.953" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-5BEWHNQN.js → chunk-DNJDTNWX.js}

@@ -6967,7 +6967,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.951" : "dev";
+var agtCliVersion = true ? "0.28.953" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11666,4 +11666,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-5BEWHNQN.js.map
+//# sourceMappingURL=chunk-DNJDTNWX.js.map

package/dist/lib/manager-worker.js

@@ -63,7 +63,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-5BEWHNQN.js";
+} from "../chunk-DNJDTNWX.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -13943,7 +13943,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.951" : "dev";
+var agtCliVersion = true ? "0.28.953" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();

package/dist/mcp/augmented-admin.js

@@ -21546,8 +21546,8 @@ var checkActionStatusSchema = strictObject({
 });
 var requestSsmRunSchema = strictObject({
   target_agent_id: external_exports.string().min(1).max(64).describe("UUID of the customer agent whose host to run the diagnostic on."),
-  command: external_exports.enum(["host_health", "manager_status", "manager_journal", "process_list", "agent_dir"]).describe(
-    "The allowlisted, READ-ONLY diagnostic to run (closed set \u2014 no free-form shell). host_health = uptime + df -h + free -m (is the box wedged / out of disk / out of memory?); manager_status = systemctl status agt-manager.service (is the manager daemon up?); manager_journal = journalctl -u agt-manager.service -n 200 (recent systemd-captured manager output); process_list = ps (pid/ppid/user/etime/rss/comm, no argv/env) filtered to claude + agt-manager; agent_dir = ls -la ~/.augmented/<code_name>/ (file NAMES only \u2014 stuck markers, state files; never contents). For file CONTENTS use debug_tail_logs (it covers manager.log/pane.log/channel-stderr/manager-state.json)."
+  command: external_exports.enum(["host_health", "manager_status", "manager_journal", "process_list", "agent_dir", "rpm_verify"]).describe(
+    "The allowlisted, READ-ONLY diagnostic to run (closed set \u2014 no free-form shell). host_health = uptime + df -h + free -m (is the box wedged / out of disk / out of memory?); manager_status = systemctl status agt-manager.service (is the manager daemon up?); manager_journal = journalctl -u agt-manager.service -n 200 (recent systemd-captured manager output); process_list = ps (pid/ppid/user/etime/rss/comm, no argv/env) filtered to claude + agt-manager; agent_dir = ls -la ~/.augmented/<code_name>/ (file NAMES only \u2014 stuck markers, state files; never contents). rpm_verify = rpm -Va --nofiledigest --noscripts filtered to 'missing' (no package %verifyscript is executed; which files rpm OWNS and cannot find, on the HOST filesystem - the ENG-8637 deleted-under-the-package-manager census; lists paths, never contents). For file CONTENTS use debug_tail_logs (it covers manager.log/pane.log/channel-stderr/manager-state.json)."
   ),
   reason: external_exports.string().min(1).max(2e3).describe("Why this diagnostic is needed \u2014 shown verbatim to the human approver. Be specific.")
 });

package/dist/mcp/teams-channel.js

@@ -13880,6 +13880,39 @@ import { homedir as homedir3 } from "os";
 import { join as join7, resolve as resolvePath2 } from "path";
 import { basename } from "path";
 
+// ../core/dist/channels/msteams-api.js
+var MsTeamsApiError = class extends Error {
+  status;
+  aadError;
+  constructor(message, status, aadError) {
+    super(message);
+    this.status = status;
+    this.aadError = aadError;
+    this.name = "MsTeamsApiError";
+  }
+};
+var joinUrl = (base, path) => `${base.replace(/\/+$/, "")}/${path.replace(/^\/+/, "")}`;
+var ALLOWED_SERVICE_URL_HOSTS = /* @__PURE__ */ new Set(["smba.trafficmanager.net"]);
+function isAllowedTeamsServiceUrl(serviceUrl) {
+  try {
+    const url = new URL(serviceUrl);
+    return url.protocol === "https:" && ALLOWED_SERVICE_URL_HOSTS.has(url.hostname) && // Scheme + hostname is not an origin. A non-default port is a different
+    // service on the same host, credentials in the authority are sent as a
+    // Basic header, and a query or fragment on the BASE corrupts the path
+    // joined after it. `URL` normalises an explicit `:443` to '' so the
+    // canonical form of a real serviceUrl still passes. (CodeRabbit, PR #6151.)
+    url.port === "" && url.username === "" && url.password === "" && url.search === "" && url.hash === "";
+  } catch {
+    return false;
+  }
+}
+function botFrameworkUrl(serviceUrl, path) {
+  if (!isAllowedTeamsServiceUrl(serviceUrl)) {
+    throw new MsTeamsApiError(`Refusing to call a non-Bot-Framework serviceUrl (ENG-8991). Allowed hosts: ${[...ALLOWED_SERVICE_URL_HOSTS].join(", ")} over https.`);
+  }
+  return joinUrl(serviceUrl, path);
+}
+
 // src/slack-loop-throttle.ts
 var DEFAULT_THROTTLE = {
   threshold: 3,
@@ -15316,7 +15349,6 @@ async function acquireBotToken(scope = BOT_FRAMEWORK_SCOPE) {
   });
   return data.access_token;
 }
-var joinUrl = (base, path) => `${base.replace(/\/+$/, "")}/${path.replace(/^\/+/, "")}`;
 function buildAugmentedTeamsEntity() {
   if (!AGT_TEAM_ID) return null;
   return {
@@ -15334,14 +15366,14 @@ async function sendActivity(serviceUrl, conversationId, activity) {
       augmentedEntity
     ]
   } : activity;
-  const token = await acquireBotToken();
-  const url = activity.replyToId ? joinUrl(
+  const url = activity.replyToId ? botFrameworkUrl(
     serviceUrl,
     `/v3/conversations/${encodeURIComponent(conversationId)}/activities/${encodeURIComponent(activity.replyToId)}`
-  ) : joinUrl(
+  ) : botFrameworkUrl(
     serviceUrl,
     `/v3/conversations/${encodeURIComponent(conversationId)}/activities`
   );
+  const token = await acquireBotToken();
   const response = await fetch(url, {
     method: "POST",
     headers: {
@@ -15349,7 +15381,10 @@ async function sendActivity(serviceUrl, conversationId, activity) {
       "Content-Type": "application/json"
     },
     body: JSON.stringify(activityWithLabel),
-    signal: AbortSignal.timeout(1e4)
+    signal: AbortSignal.timeout(1e4),
+    // ENG-8991: botFrameworkUrl validated the FIRST hop only; a 307/308 keeps
+    // method and body. Never follow a redirect off a validated serviceUrl.
+    redirect: "error"
   });
   if (!response.ok) {
     const text = await response.text().catch(() => "");
@@ -15969,15 +16004,17 @@ async function handleReadThread(args) {
     return errResult("conversation_id and service_url are required");
   }
   try {
-    const token = await acquireBotToken();
     const qs = continuationToken ? `?continuationToken=${encodeURIComponent(continuationToken)}` : "";
-    const url = joinUrl(
+    const url = botFrameworkUrl(
       serviceUrl,
       `/v3/conversations/${encodeURIComponent(conversationId)}/activities${qs}`
     );
+    const token = await acquireBotToken();
     const res = await fetch(url, {
       method: "GET",
-      headers: { Authorization: `Bearer ${token}` }
+      headers: { Authorization: `Bearer ${token}` },
+      redirect: "error"
+      // ENG-8991: never follow a redirect off a validated serviceUrl
     });
     if (!res.ok) {
       const body = await res.text().catch(() => "");
@@ -16017,14 +16054,16 @@ async function handleChannelInfo(args) {
     return errResult("conversation_id and service_url are required");
   }
   try {
-    const token = await acquireBotToken();
-    const url = joinUrl(
+    const url = botFrameworkUrl(
       serviceUrl,
       `/v3/conversations/${encodeURIComponent(conversationId)}/members`
     );
+    const token = await acquireBotToken();
     const res = await fetch(url, {
       method: "GET",
-      headers: { Authorization: `Bearer ${token}` }
+      headers: { Authorization: `Bearer ${token}` },
+      redirect: "error"
+      // ENG-8991: never follow a redirect off a validated serviceUrl
     });
     let result;
     if (!res.ok) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.951",
+  "version": "0.28.953",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {