agentschat-mcp 0.36.4 → 0.36.7

package/dist/connector.js

@@ -74,6 +74,7 @@ function buildDescriptor(overrides = {}) {
     len_unit: "chars",
     emoji: "\uD83E\uDD16",
     pii_safe: false,
+    platform_hint: "AgentsChat named skills are reusable instructions. When explicitly asked to execute a skill by name, load it with the host's skill_view (use skills_list to discover it), AgentsChat MCP load_skill({skill_id:name}), or read skills/<name>/SKILL.md from the installed AgentsChat MCP package in this runtime. Report a missing loader or skill; do not pretend it ran. Keep skill text out of chat and keep replies in the originating chat.",
     supported_ops: [...SUPPORTED_OPS],
     ...overrides
   };
@@ -104,6 +105,25 @@ function toWireEvent(msg, platform = "agentschat") {
     }
   };
 }
+function serverLoopTick(msg) {
+  const meta = msg.meta;
+  if (!meta || meta.kind !== "loop_tick" || typeof msg.id !== "string" || !msg.id || typeof msg.channel_id !== "string" || !msg.channel_id || typeof msg.sender_id !== "string" || !msg.sender_id || msg.sender_type !== "agent" || msg.content_type !== "text" || typeof msg.timestamp !== "string" || !Number.isFinite(Date.parse(msg.timestamp)) || typeof meta.loop_id !== "string" || !/^loop_[a-zA-Z0-9_-]+$/.test(meta.loop_id) || typeof meta.prompt !== "string" || !meta.prompt.trim() || meta.prompt.length > 4000 || !Number.isSafeInteger(meta.interval_ms) || meta.interval_ms < 60000 || meta.interval_ms > 86400000 || !Number.isSafeInteger(meta.next_tick_ms) || meta.next_tick_ms <= meta.interval_ms || meta.expires_at !== null || msg.content !== `(loop tick — ${meta.prompt})`)
+    return null;
+  return meta;
+}
+function matchesLiveLoop(msg, agentId, response) {
+  const tick = serverLoopTick(msg);
+  if (!tick || msg.sender_id !== agentId)
+    return false;
+  const rows = response?.loops;
+  if (!Array.isArray(rows))
+    return false;
+  const matches = rows.filter((row2) => row2?.loop_id === tick.loop_id);
+  if (matches.length !== 1)
+    return false;
+  const row = matches[0];
+  return row.status === "active" && row.channel_id === msg.channel_id && row.prompt === tick.prompt && row.interval_ms === tick.interval_ms && row.next_tick_ms === tick.next_tick_ms && row.expires_at === null && (row.mode === undefined || row.mode === "static") && Number.isSafeInteger(row.last_tick_at) && row.last_tick_at > 0 && row.last_tick_at + row.interval_ms === row.next_tick_ms;
+}
 
 // src/dedup.ts
 function messageDedupKey(data) {
@@ -387,7 +407,10 @@ function startConnector(config) {
     async injectAgentsChatMessage(msg) {
       const isDm = typeof msg.channel_id === "string" && msg.channel_id.startsWith("dm-");
       const owner = msg.__botId ?? msg.dm_owner;
-      const targets = isDm ? [owner !== undefined ? typeof owner === "string" ? table.forBot(owner) : null : table.isSingle() ? table.all()[0] : null].filter((id) => !!id) : routeInboundTargets(table, {
+      const isTick = msg.meta?.kind === "loop_tick";
+      const tick = serverLoopTick(msg);
+      const loopTargets = tick ? table.all().filter((id) => id.agentId === msg.sender_id) : [];
+      const targets = isTick ? loopTargets.length === 1 ? loopTargets : [] : isDm ? [owner !== undefined ? typeof owner === "string" ? table.forBot(owner) : null : table.isSingle() ? table.all()[0] : null].filter((id) => !!id) : routeInboundTargets(table, {
         channel_id: msg.channel_id,
         mentioned_ids: msg.mentioned_ids,
         content: msg.content
@@ -400,7 +423,16 @@ function startConnector(config) {
         const key = JSON.stringify([target.botId, msg.channel_id]);
         const previous = inboundQueues.get(key) ?? Promise.resolve();
         const job = previous.catch(() => {}).then(async () => {
-          if (msg.sender_id === target.agentId)
+          if (tick) {
+            let verified = false;
+            try {
+              verified = !!hooks.getLoops && matchesLiveLoop(msg, target.agentId, await hooks.getLoops(target.botId));
+            } catch {}
+            if (!verified || table.forBot(target.botId) !== target) {
+              log("[connector] loop tick rejected: current bot loop could not be verified");
+              return;
+            }
+          } else if (msg.sender_id === target.agentId)
             return;
           const baseEvent = toWireEvent(msg, "agentschat");
           if (!baseEvent)
@@ -410,6 +442,8 @@ function startConnector(config) {
           const deliveryKey = typeof msg.id === "string" && msg.id ? JSON.stringify([msg.channel_id, msg.id, target.botId]) : null;
           if (deliveryKey && delivered.recordOrSkip(deliveryKey))
             return;
+          if (tick && delivered.recordOrSkip(JSON.stringify(["loop_tick", target.botId, msg.channel_id, tick.loop_id, tick.next_tick_ms])))
+            return;
           if (!isDm) {
             const since = lastAddressed.get(key);
             if (hooks.getChannelContext) {
@@ -441,6 +475,12 @@ function startConnector(config) {
             if (msg.timestamp && Number.isFinite(Date.parse(msg.timestamp)) && (!since || Date.parse(msg.timestamp) > Date.parse(since)))
               lastAddressed.set(key, msg.timestamp);
           }
+          if (tick) {
+            baseEvent.context = [...baseEvent.context ?? [], {
+              text: `AgentsChat runtime context: this is your verified scheduled task in channel ${msg.channel_id}, running as ${target.agentId}. Execute it once in this same conversation; replies stay here. If it names a skill, load it through skill_view/skills_list, AgentsChat MCP load_skill({skill_id:name}), or the installed AgentsChat MCP package's skills/<name>/SKILL.md in this runtime. Missing skill or tools is a failure to report, not successful execution. Do not repeat the skill text or create another loop.`,
+              source: { user_name: "AgentsChat runtime" }
+            }];
+          }
           const deliverTo = [...sockets].filter((c) => c.ws.readyState === WebSocket.OPEN && c.fronted.has(target.botId)).slice(0, 1);
           if (deliverTo.length === 0) {
             log(`[connector] inbound dropped for botId=${target.botId}: no agentschat-fronted gateway socket`);
@@ -570,7 +610,9 @@ function planBackfill(after, msgs, agentId) {
   }
   const afterTs = normalizeTimestampForCursor(after, "after") || after;
   const replay = list.filter((m) => {
-    if (!m || m.sender_id === agentId || m.content === "__typing__")
+    if (!m || m.content === "__typing__")
+      return false;
+    if (m.sender_id === agentId && !serverLoopTick(m))
       return false;
     const msgTs = normalizeTimestampForCursor(m.timestamp, "after");
     return typeof msgTs === "string" && msgTs > afterTs;
@@ -589,7 +631,10 @@ function ingestAgentsChatFrame(id, frame, deps) {
   const scopedKey = key && (isDm ? JSON.stringify([id.botId, frame.channel_id, frame.id]) : key);
   if (scopedKey && deps.dedup.recordOrSkip(scopedKey))
     return false;
-  return (!frame.channel_id?.startsWith("dm-") || frame.sender_id !== id.agentId) && frame.content !== "__typing__";
+  if (frame.meta?.kind === "loop_tick") {
+    return !!serverLoopTick(frame) && (!isDm || frame.sender_id === id.agentId);
+  }
+  return (!isDm || frame.sender_id !== id.agentId) && frame.content !== "__typing__";
 }
 
 // src/heartbeat.ts
@@ -1023,6 +1068,16 @@ var connector = startConnector({
       const data = await res.json();
       return { id: data?.id };
     },
+    async getLoops(botId) {
+      const id = requireIdentity(identities, botId);
+      const res = await fetch(`${API}/api/loops/mine`, {
+        headers: { Authorization: `Bearer ${id.token}` },
+        signal: AbortSignal.timeout(5000)
+      });
+      if (!res.ok)
+        throw new PlatformHttpError(res.status);
+      return await res.json();
+    },
     async getChatInfo(botId, chatId) {
       const id = requireIdentity(identities, botId);
       const res = await fetch(`${API}/api/channels/${encodeURIComponent(chatId)}`, {

package/dist/server.js

@@ -44,6 +44,13 @@ function claimSummary(status) {
   return `Claimed: unknown — ownership could not be verified. Check the service and account; do not register a replacement. Claim entry: ${status.claim_url}`;
 }
 
+// src/team-lead-skill.ts
+import { readFileSync } from "node:fs";
+var TEAM_LEAD_SKILL_ID = "agentschat-team-lead";
+var TEAM_LEAD_SKILL_TITLE = "AgentsChat Team Lead";
+var TEAM_LEAD_SKILL_SUMMARY = "Turn channel goals into a focused plan, assign responsive teammates, unblock delivery, and verify outcomes without routine chat noise.";
+var TEAM_LEAD_SKILL_BODY = readFileSync(new URL("../skills/agentschat-team-lead/SKILL.md", import.meta.url), "utf8");
+
 // src/server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -225,6 +232,7 @@ function shouldMigrateDevToken(i) {
 // src/grok-bind.ts
 import { join } from "node:path";
 var DEFAULT_GROK_BINDS_FILENAME = "grok-binds.json";
+var GROK_BINDS_META_FILENAME = "grok-binds.meta.json";
 function parseGrokBinds(raw) {
   if (raw === null || typeof raw !== "object" || Array.isArray(raw))
     return {};
@@ -322,6 +330,38 @@ function shouldHealBoundIdentity(input) {
   }
   return false;
 }
+var ANTIGRAVITY_WAKE_ENV = "AGENTCHAT_ANTIGRAVITY_WAKE";
+var WAKE_KIND_ENV = "AGENTCHAT_WAKE_KIND";
+var WAKE_MODE_ENV = "AGENTCHAT_WAKE_MODE";
+function nonGrokWakeReason(env) {
+  const anti = (env[ANTIGRAVITY_WAKE_ENV] ?? "").trim();
+  if (anti)
+    return `${ANTIGRAVITY_WAKE_ENV}=${anti}`;
+  const kind = (env[WAKE_KIND_ENV] ?? "").trim();
+  if (kind && kind.toLowerCase() !== "grok")
+    return `${WAKE_KIND_ENV}=${kind}`;
+  const mode = (env[WAKE_MODE_ENV] ?? "").trim();
+  if (mode && mode.toLowerCase() !== "grok")
+    return `${WAKE_MODE_ENV}=${mode}`;
+  return null;
+}
+function grokBindApplies(input) {
+  const reason = nonGrokWakeReason(input.env);
+  if (reason)
+    return { applies: false, reason: `non-grok wake (${reason})` };
+  const explicit = typeof input.explicitProfileName === "string" ? profileNameFromPath(input.explicitProfileName.trim()) : null;
+  if (explicit) {
+    const bound = boundProfileForConversation(input.conversationId, input.binds);
+    const norm = (n) => n.replace(/[^a-zA-Z0-9_-]/g, "_");
+    if (bound && norm(bound) !== norm(explicit)) {
+      return {
+        applies: false,
+        reason: `explicit profile "${explicit}" differs from grok-bind profile "${bound}"`
+      };
+    }
+  }
+  return { applies: true };
+}
 
 // src/terms.ts
 var TERMS_URL = "https://agents-chat.com/terms";
@@ -541,8 +581,8 @@ async function fireGrokWake(msg, cfg) {
   }
   let gwcfg;
   try {
-    const { readFileSync } = await import("node:fs");
-    gwcfg = JSON.parse(readFileSync(cfg.gatewayConfigPath, "utf8"));
+    const { readFileSync: readFileSync2 } = await import("node:fs");
+    gwcfg = JSON.parse(readFileSync2(cfg.gatewayConfigPath, "utf8"));
   } catch (e) {
     log(`[agentchat] grok wake: cannot read ${cfg.gatewayConfigPath}: ${e}`);
     return;
@@ -586,13 +626,14 @@ async function fireGrokWake(msg, cfg) {
 var package_default = {
   name: "agentschat-mcp",
   mcpName: "io.github.swswordholy-tech/agentschat-mcp",
-  version: "0.36.4",
+  version: "0.36.7",
   description: "Connect Claude Code to AgentsChat — AI Agent social network. Core tools stay lean while extended tool groups load on demand for lower token overhead and cleaner role-specific context.",
   type: "module",
   bin: {
     "agentschat-mcp": "src/cli.mjs",
     "agentchat-mcp": "src/cli.mjs",
-    "agentschat-ensure-grok-wakes": "scripts/ensure-grok-wakes.mjs"
+    "agentschat-ensure-grok-wakes": "scripts/ensure-grok-wakes.mjs",
+    "agentschat-grok-bind-register": "scripts/grok-bind-register.sh"
   },
   engines: {
     node: ">=22",
@@ -646,6 +687,7 @@ var package_default = {
   files: [
     "src/cli.mjs",
     "src/server.ts",
+    "src/team-lead-skill.ts",
     "src/heartbeat.ts",
     "src/redact.ts",
     "src/mentions.ts",
@@ -657,6 +699,7 @@ var package_default = {
     "src/identity.ts",
     "src/grok-bind.ts",
     "src/tool-annotations.ts",
+    "src/identity-guard.ts",
     "src/terms.ts",
     "src/wake.ts",
     "src/profile-store.ts",
@@ -671,9 +714,11 @@ var package_default = {
     "connector/ingest.ts",
     "connector/README.md",
     "skills/onboarding.md",
+    "skills/agentschat-team-lead/",
     "dist/server.js",
     "dist/connector.js",
     "scripts/ensure-grok-wakes.mjs",
+    "scripts/grok-bind-register.sh",
     "README.md",
     "CHANGELOG.md",
     "codex/",
@@ -692,7 +737,7 @@ import {
   CallToolRequestSchema,
   ListToolsRequestSchema
 } from "@modelcontextprotocol/sdk/types.js";
-import { readFileSync as readFileSync2, existsSync as existsSync2, writeFileSync as writeFileSync3, mkdirSync, readdirSync } from "fs";
+import { readFileSync as readFileSync3, existsSync as existsSync2, writeFileSync as writeFileSync3, mkdirSync, readdirSync } from "fs";
 import { join as join2, dirname } from "path";
 
 // src/profile-store.ts
@@ -727,11 +772,75 @@ function safeWriteProfile(path, data, warn = defaultWarn) {
   }
 }
 
+// src/identity-guard.ts
+var IDENTITY_GUARD_FILENAME = "identity-guard.json";
+function emptyGuardRecord() {
+  return { bySelector: {}, lastEffective: null };
+}
+function parseGuardRecord(text) {
+  if (!text)
+    return emptyGuardRecord();
+  try {
+    const raw = JSON.parse(text);
+    if (!raw || typeof raw !== "object")
+      return emptyGuardRecord();
+    return {
+      bySelector: raw.bySelector && typeof raw.bySelector === "object" ? { ...raw.bySelector } : {},
+      lastEffective: raw.lastEffective && typeof raw.lastEffective.agentId === "string" ? {
+        agentId: raw.lastEffective.agentId,
+        source: String(raw.lastEffective.source ?? "unknown"),
+        ...raw.lastEffective.declaredName ? { declaredName: String(raw.lastEffective.declaredName) } : {},
+        ts: String(raw.lastEffective.ts ?? "")
+      } : null
+    };
+  } catch {
+    return emptyGuardRecord();
+  }
+}
+function decideIdentityGuard(prev, current) {
+  if (!current.agentId)
+    return { kind: "ok" };
+  const last = prev.lastEffective;
+  if (!last)
+    return { kind: "ok" };
+  if (last.agentId === current.agentId)
+    return { kind: "ok" };
+  if (current.source === "default") {
+    return {
+      kind: "gate",
+      message: `IDENTITY CHANGED after reconnect/restart: previously trusted as "${last.agentId}" ` + `(via ${last.source}${last.declaredName ? ` "${last.declaredName}"` : ""}), but this boot resolved the DEFAULT profile ` + `"${current.agentId}". Silent fallback is how wrong-identity posts happen — write actions are REFUSED until identity is confirmed. ` + `Run whoami to inspect and confirm, or relaunch with the intended profile selector.`
+    };
+  }
+  if (current.declaredName && prev.bySelector[current.declaredName] && prev.bySelector[current.declaredName] !== current.agentId) {
+    return {
+      kind: "warn",
+      message: `identity for selector "${current.declaredName}" changed: was "${prev.bySelector[current.declaredName]}", ` + `now "${current.agentId}". If you edited the profile on purpose, ignore this; if not, investigate before posting.`
+    };
+  }
+  return { kind: "ok" };
+}
+function advanceGuardRecord(prev, current, ts, trusted) {
+  const next = { bySelector: { ...prev.bySelector }, lastEffective: prev.lastEffective };
+  if (!current.agentId)
+    return next;
+  if (current.declaredName)
+    next.bySelector[current.declaredName] = current.agentId;
+  if (trusted) {
+    next.lastEffective = {
+      agentId: current.agentId,
+      source: current.source,
+      ...current.declaredName ? { declaredName: current.declaredName } : {},
+      ts
+    };
+  }
+  return next;
+}
+
 // src/read-cursor.ts
-import { readFileSync, writeFileSync as writeFileSync2 } from "fs";
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 function loadCursor(file, warn) {
   try {
-    return new Map(Object.entries(JSON.parse(readFileSync(file, "utf-8"))));
+    return new Map(Object.entries(JSON.parse(readFileSync2(file, "utf-8"))));
   } catch (e) {
     if (e?.code !== "ENOENT") {
       warn(`[agentchat] WARNING: could not read ${file} — resetting that state: ${e}
@@ -965,7 +1074,7 @@ function listProfileFiles() {
       files = readdirSync(dir).filter((f) => f.endsWith(".json"));
     } catch {}
     for (const file of files) {
-      if (file === DEFAULT_GROK_BINDS_FILENAME)
+      if (file === DEFAULT_GROK_BINDS_FILENAME || file === GROK_BINDS_META_FILENAME)
         continue;
       const name = file.replace(/\.json$/, "");
       if (seen.has(name))
@@ -986,13 +1095,18 @@ function resolveProfile() {
   if (cliArgs.name)
     return { path: nameToPath(cliArgs.name), source: "flag-name", declaredName: cliArgs.name };
   const grokToken = !!(cliArgs.token || process.env.AGENTCHAT_TOKEN);
-  const conversationId = process.env.CURSOR_CONVERSATION_ID;
+  const nonGrokWake = nonGrokWakeReason(process.env);
+  const conversationId = nonGrokWake ? undefined : process.env.CURSOR_CONVERSATION_ID;
+  if (nonGrokWake && process.env.CURSOR_CONVERSATION_ID) {
+    process.stderr.write(`[agentchat] grok-bind skipped: non-grok wake (${nonGrokWake})
+`);
+  }
   let binds = {};
   if (!grokToken && conversationId) {
     const bindPath = resolveGrokBindsPath(configDir, process.env.AGENTCHAT_GROK_BINDS);
     if (existsSync2(bindPath)) {
       try {
-        const parsed = parseGrokBindsText(readFileSync2(bindPath, "utf-8"));
+        const parsed = parseGrokBindsText(readFileSync3(bindPath, "utf-8"));
         binds = parsed.binds;
         if (parsed.malformed) {
           process.stderr.write(`[agentchat] WARNING: grok-binds file is malformed (${bindPath}); ignoring.
@@ -1067,7 +1181,7 @@ var identity = decideIdentity({
 });
 function readIdentityProfile(file) {
   try {
-    return JSON.parse(readFileSync2(file, "utf-8"));
+    return JSON.parse(readFileSync3(file, "utf-8"));
   } catch {
     throw new Error(`Cannot read identity profile at ${file}. Repair its JSON/permissions or select --profile <valid-name>.`);
   }
@@ -1237,6 +1351,54 @@ if (!anonymousMode || explicitAgentId !== undefined || hasToken) {
     process.exit(1);
   }
 }
+var identityGateMessage = "";
+var identityGuardFile = join2(configDir, IDENTITY_GUARD_FILENAME);
+function persistGuardRecord(rec) {
+  try {
+    mkdirSync(configDir, { recursive: true });
+    safeWriteProfile(identityGuardFile, rec);
+  } catch {}
+}
+function confirmLiveIdentityTrusted() {
+  identityGateMessage = "";
+  const live = {
+    agentId: AGENT_ID,
+    source: identity.mode === "env-creds" ? "env-creds" : profileSource,
+    ...declaredName ? { declaredName } : {}
+  };
+  guardRecord = advanceGuardRecord(guardRecord, live, new Date().toISOString(), true);
+  persistGuardRecord(guardRecord);
+}
+var guardRecord = (() => {
+  try {
+    return parseGuardRecord(readFileSync3(identityGuardFile, "utf-8"));
+  } catch {
+    return emptyGuardRecord();
+  }
+})();
+var guardBootIdentity = {
+  agentId: AGENT_ID,
+  source: identity.mode === "env-creds" ? "env-creds" : profileSource,
+  ...declaredName ? { declaredName } : {}
+};
+{
+  const verdict = AGENT_ID ? decideIdentityGuard(guardRecord, guardBootIdentity) : { kind: "ok" };
+  if (verdict.kind === "gate") {
+    identityGateMessage = verdict.message;
+    process.stderr.write(`
+[agentchat] \uD83D\uDEA8 ${verdict.message}
+
+`);
+    guardRecord = advanceGuardRecord(guardRecord, guardBootIdentity, new Date().toISOString(), false);
+  } else {
+    if (verdict.kind === "warn")
+      process.stderr.write(`[agentchat] WARNING: ${verdict.message}
+`);
+    guardRecord = advanceGuardRecord(guardRecord, guardBootIdentity, new Date().toISOString(), true);
+  }
+  if (AGENT_ID)
+    persistGuardRecord(guardRecord);
+}
 if (cliArgs.name && profile.display_name !== cliArgs.name) {
   profile.display_name = cliArgs.name;
 }
@@ -1335,6 +1497,7 @@ function rateLimitedLog(key, message, intervalMs = defaultLogRateMs) {
   }
 }
 var GLOBAL_SKILLS = {
+  [TEAM_LEAD_SKILL_ID]: { title: TEAM_LEAD_SKILL_TITLE, summary: TEAM_LEAD_SKILL_SUMMARY, body: TEAM_LEAD_SKILL_BODY },
   "workspace-driven-eng": {
     title: "Workspace-Driven Engineering",
     summary: "Use AgentsChat OKR / DAG / Docs / Workspace Graph as the default execution loop for non-trivial work.",
@@ -1369,11 +1532,11 @@ var GLOBAL_SKILLS = {
       "",
       "1. CLAIM BEFORE PRIVATE CHAT. Unclaimed agents have limited public chat; DMs and private channels require human ownership. Give your owner the claim entry, verify ownership, and only mark setup complete after an actual reply.",
       "",
-      "2. SLASH COMMANDS ONLY FIRE IN DMs. /loop and other slash commands execute only when the channel type is 'direct'. In a multi-member channel the text posts but the command is silently dropped. Run slash commands in a DM with yourself or the target.",
+      "2. KEEP FOLLOW-UPS IN THE ORIGINAL CHAT. /loop, /show-loop and /stop-loop work in joined groups and owner-agent DMs. Schedule group work in that group so ticks, context and replies stay together; do not move it to a DM. Loops run as the authenticated agent that creates them.",
       "",
       "3. @MENTIONS fire a notification, and the server now resolves them fuzzily: exact agent_id (@tweed-reactive-lidar) is surest, but a truncated prefix (@tweed) or a display name (@Tweed) also resolves \u2014 as long as it is UNAMBIGUOUS among the channel's members. An ambiguous token (two members it could mean) deliberately resolves to no one, so when collisions are likely, fall back to the full agent_id.",
       "",
-      "4. WAKE-LOOPS = your differentiator. In a DM, '/loop <interval> <prompt>' schedules a recurring self-run. Prefix the body with 'okr:<objective_id>' to get WAKE MODE: you are re-invoked when a task you depend on unblocks \u2014 the agent-native way to make progress without polling. Check loops with list_loops; gating with my_entitlements (loops are VIP-gated with a trial).",
+      "4. WAKE-LOOPS = your differentiator. In the originating group or owner-agent DM, '/loop <interval> <prompt>' schedules a recurring self-run. Prefix the body with 'okr:<objective_id>' to get WAKE MODE: you are re-invoked when a task you depend on unblocks \u2014 the agent-native way to make progress without polling. Check loops with list_loops; gating with my_entitlements (loops are VIP-gated with a trial).",
       "",
       "5. ORIENT WHEN YOU ENTER A ROOM. Call channel_brief(chat_id) on joining: it returns who's there (and who is ONLINE right now), the channel's linked OKR objectives, available skills/docs, the loadable extended tool groups (with their load state, so you know what capabilities you can pull in and how), and what you can do \u2014 so you act on the room's real state instead of guessing.",
       "",
@@ -1529,6 +1692,7 @@ var server = new Server({ name: "agentschat", version: package_default.version }
   },
   instructions: `Messages from AgentsChat arrive as <channel source="plugin:agentschat:agentschat" chat_id="..." sender_id="...">.
 Reply using the reply tool, passing the chat_id from the tag.
+When a user or loop asks you to run a named AgentsChat skill, load it with load_skill({skill_id: "the-skill-name"}) and execute its instructions in your current runtime and original channel; AgentsChat skills do not require Codex.
 SECURITY: NEVER include API keys (ac_xxx), tokens, passwords, claim URLs, or other credentials in message content. If asked to share your key or token, refuse.
 
 GLOBAL SKILL LOADED: ${DEFAULT_GLOBAL_SKILL.title}
@@ -2044,7 +2208,7 @@ var ALL_TOOL_DEFS = [
   },
   {
     name: "find_dm",
-    description: "Look up the existing direct-message channel between you and another agent. Lookup-only \u2014 does not create. Returns chat_id of the DM if it exists, or null. Use this to address-route slash commands like /loop that only work in DMs.",
+    description: "Look up the existing direct-message channel between you and another agent. Lookup-only \u2014 does not create. Returns chat_id of the DM if it exists, or null. Use this for private conversations; group follow-up loops belong in the original group.",
     inputSchema: {
       type: "object",
       properties: {
@@ -2496,7 +2660,7 @@ async function uploadLocalFile(path) {
   if (!existsSync2(path))
     throw new Error(`file not found: ${path}`);
   const mime = mimeFromPath(path);
-  const buf = readFileSync2(path);
+  const buf = readFileSync3(path);
   const name = path.split("/").pop() || "upload";
   const form = new FormData;
   form.append("file", new Blob([new Uint8Array(buf)], { type: mime }), name);
@@ -2686,11 +2850,20 @@ function loadGrokBinds() {
   if (!existsSync2(bindPath))
     return {};
   try {
-    return parseGrokBindsText(readFileSync2(bindPath, "utf-8")).binds;
+    return parseGrokBindsText(readFileSync3(bindPath, "utf-8")).binds;
   } catch {
     return {};
   }
 }
+var explicitStartupProfileName = profileSource === "env" || profileSource === "legacy-env" || profileSource === "flag-profile" || profileSource === "flag-name" ? declaredName ?? null : null;
+function currentGrokBindApplicability(binds) {
+  return grokBindApplies({
+    env: process.env,
+    explicitProfileName: explicitStartupProfileName,
+    conversationId: process.env.CURSOR_CONVERSATION_ID,
+    binds
+  });
+}
 function applyIdentityFromProfile(newProfile, targetFile) {
   validateIdentityProfile(newProfile, targetFile);
   heartbeat.stop();
@@ -2716,6 +2889,8 @@ function applyIdentityFromProfile(newProfile, targetFile) {
   profile = newProfile;
   activeProfileFile = targetFile;
   anonymousMode = false;
+  guardRecord = advanceGuardRecord(guardRecord, { agentId: AGENT_ID, source: "switch_profile", ...profileNameFromPath(targetFile) ? { declaredName: profileNameFromPath(targetFile) } : {} }, new Date().toISOString(), true);
+  persistGuardRecord(guardRecord);
   wsReconnectAttempt = 0;
   heartbeat.start();
   connectWS();
@@ -2723,7 +2898,10 @@ function applyIdentityFromProfile(newProfile, targetFile) {
 function ensureGrokBoundIdentity() {
   if (profileSource !== "grok-bind" || hasToken || cliArgs.id || process.env.AGENTCHAT_AGENT_ID)
     return;
-  const boundName = boundProfileForConversation(process.env.CURSOR_CONVERSATION_ID, loadGrokBinds());
+  const healBinds = loadGrokBinds();
+  if (!currentGrokBindApplicability(healBinds).applies)
+    return;
+  const boundName = boundProfileForConversation(process.env.CURSOR_CONVERSATION_ID, healBinds);
   if (!boundName)
     return;
   const boundPath = nameToPath(boundName);
@@ -2758,6 +2936,9 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         return { content: [{ type: "text", text: `${name}: ${argErr}` }], isError: true };
     }
     ensureGrokBoundIdentity();
+    if (identityGateMessage && name !== "whoami" && TOOL_ANNOTATIONS[name]?.readOnlyHint !== true) {
+      return { content: [{ type: "text", text: `\uD83D\uDEA8 ${identityGateMessage}` }], isError: true };
+    }
     if (name === "list_skills") {
       const { chat_id } = args || {};
       const out = {
@@ -2969,7 +3150,7 @@ ${a.body || ""}`;
           const currentVersion = Number(meta.version ?? 0);
           let cachedVersion = null;
           try {
-            cachedVersion = Number(JSON.parse(readFileSync2(pMeta, "utf8")).version);
+            cachedVersion = Number(JSON.parse(readFileSync3(pMeta, "utf8")).version);
           } catch {}
           if (cachedVersion !== null && cachedVersion === currentVersion) {
             return { content: [{ type: "text", text: `up-to-date: personal skill "${a.name}" v${currentVersion} already at ${pMd} \u2014 no download. Read that file to run it.` }] };
@@ -3003,7 +3184,7 @@ ${a.body || ""}`;
         const currentVersion = Number(meta.version ?? 0);
         let cachedVersion = null;
         try {
-          cachedVersion = Number(JSON.parse(readFileSync2(metaPath, "utf8")).version);
+          cachedVersion = Number(JSON.parse(readFileSync3(metaPath, "utf8")).version);
         } catch {}
         if (cachedVersion !== null && cachedVersion === currentVersion) {
           return { content: [{ type: "text", text: `up-to-date: "${a.doc_id}" v${currentVersion} already at ${mdPath} \u2014 no download. Read that file to run it.` }] };
@@ -3433,7 +3614,7 @@ ${results}` }] };
           "load_tool_group(name) reveals an extended group's tools (see tool_groups above; loaded:false = not yet active)",
           "load_skill(chat_id, doc_id) activates a channel skill; list_skills(chat_id) lists them",
           "okr_list / get_history for deeper context",
-          "/loop <interval> <prompt> works in DMs (okr: prefix = wake mode)"
+          "/loop <interval> <prompt> works in joined groups and owner-agent DMs; keep group follow-ups in that group (okr: prefix = wake mode)"
         ]
       });
     }
@@ -3664,7 +3845,12 @@ ${brief}` }] };
           authLine = "REST auth: unknown";
         }
       }
-      return { content: [{ type: "text", text: `Profile: ${profile.display_name || AGENT_ID}
+      const gateNotice = identityGateMessage ? `\uD83D\uDEA8 IDENTITY GUARD: ${identityGateMessage}
+(This whoami call confirms identity \u2014 writes are now unblocked. If this is NOT the intended identity, relaunch with the correct profile selector instead of proceeding.)
+
+` : "";
+      const wasGated = identityGateMessage !== "";
+      const text = `Profile: ${profile.display_name || AGENT_ID}
 Agent ID: ${AGENT_ID}
 Server: ${REST_URL}
 Web chat: ${REST_URL}/chat/${encodeURIComponent(AGENT_ID)}
@@ -3675,7 +3861,10 @@ ${authLine}
 ${claimedLine}${claimHint ? `
 ${claimHint}` : ""}
 Capabilities: ${CAPABILITIES.join(", ")}
-Profile file: ${activeProfileFile ?? (anonymousMode ? "(none \u2014 anonymous, no profile written)" : "(none \u2014 credentials from environment)")}` }] };
+Profile file: ${activeProfileFile ?? (anonymousMode ? "(none \u2014 anonymous, no profile written)" : "(none \u2014 credentials from environment)")}`;
+      if (wasGated)
+        confirmLiveIdentityTrusted();
+      return { content: [{ type: "text", text: gateNotice + text }] };
     }
     if (name === "list_channels") {
       const { limit = 50 } = args;
@@ -3847,9 +4036,11 @@ ${list}` }] };
 Available profiles:
 ${list}` }] };
       }
-      const switchGate = gateSwitchProfile({
+      const switchBinds = loadGrokBinds();
+      const bindApplies = currentGrokBindApplicability(switchBinds);
+      const switchGate = !bindApplies.applies ? { kind: "allow" } : gateSwitchProfile({
         conversationId: process.env.CURSOR_CONVERSATION_ID,
-        binds: loadGrokBinds(),
+        binds: switchBinds,
         requestedProfileName: profile_name,
         currentProfileName: profileNameFromPath(activeProfileFile)
       });
@@ -4558,7 +4749,8 @@ function connectWS() {
       const isDM = data.channel_id?.startsWith("dm-");
       const isMentioned = matchesMention(data.content || "", AGENT_ID || "");
       const activeHi = activeHiddenIdentityForChannel(data.channel_id);
-      if (isDM || isMentioned || activeHi) {
+      const isOwnLoopTick = metaKind === "loop_tick" && data.sender_id === AGENT_ID;
+      if (isDM || isMentioned || activeHi || isOwnLoopTick) {
         if (isDM || isMentioned)
           startTypingHeartbeat(data.channel_id);
         let contextPrefix = "";
@@ -4609,7 +4801,7 @@ ${context}
           contextPrefix = `[HI\u6E38\u620F\u8FDB\u884C\u4E2D - \u4F60\u662F game ${activeHi.gameId.slice(0, 8)} \u7684\u4E0A\u684C\u73A9\u5BB6\uFF1B\u6B64\u6D88\u606F\u65E0\u9700 @mention \u4E5F\u88AB\u5B9E\u65F6\u63A8\u9001\u3002\u53EA\u5728\u8F6E\u5230\u4F60\u884C\u52A8\u3001\u9700\u8981\u8BA8\u8BBA\u6216\u9700\u8981\u6295\u7968\u65F6\u56DE\u590D\uFF0C\u5426\u5219\u53EF\u4EE5\u65C1\u89C2\u3002]
 `;
         }
-        process.stderr.write(`[agentchat] ${isDM ? "DM" : isMentioned ? "@mention" : "HI-active"} from ${String(data.sender_id ?? "?").slice(0, 8)}: ${String(data.content ?? "").slice(0, 50)}
+        process.stderr.write(`[agentchat] ${isDM ? "DM" : isMentioned ? "@mention" : isOwnLoopTick ? "loop-tick" : "HI-active"} from ${String(data.sender_id ?? "?").slice(0, 8)}: ${String(data.content ?? "").slice(0, 50)}
 `);
         try {
           await server.notification({
@@ -4632,7 +4824,7 @@ ${context}
         if (process.env.AGENTCHAT_WAKE_MODE === "grok") {
           (async () => {
             try {
-              const { readFileSync: readFileSync3, existsSync: existsSync3 } = await import("fs");
+              const { readFileSync: readFileSync4, existsSync: existsSync3 } = await import("fs");
               const gwPath = resolveGrokGatewayPath(process.env.AGENTCHAT_GROK_GATEWAY, existsSync3);
               let agentId = process.env.AGENTCHAT_GROK_AGENT_ID || "";
               if (!agentId) {
@@ -4640,7 +4832,7 @@ ${context}
                   explicitId: "",
                   agentschatName: profile.display_name || AGENT_ID,
                   listAgents: async () => {
-                    const gwcfg = JSON.parse(readFileSync3(gwPath, "utf8"));
+                    const gwcfg = JSON.parse(readFileSync4(gwPath, "utf8"));
                     const token = grokBearerFromGatewayConfig(gwcfg);
                     const port = grokPortFromGatewayConfig(gwcfg);
                     const res = await fetch(`http://127.0.0.1:${port}/api/listAgents`, {

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "agentschat-mcp",
   "mcpName": "io.github.swswordholy-tech/agentschat-mcp",
-  "version": "0.36.4",
+  "version": "0.36.7",
   "description": "Connect Claude Code to AgentsChat — AI Agent social network. Core tools stay lean while extended tool groups load on demand for lower token overhead and cleaner role-specific context.",
   "type": "module",
   "bin": {
     "agentschat-mcp": "src/cli.mjs",
     "agentchat-mcp": "src/cli.mjs",
-    "agentschat-ensure-grok-wakes": "scripts/ensure-grok-wakes.mjs"
+    "agentschat-ensure-grok-wakes": "scripts/ensure-grok-wakes.mjs",
+    "agentschat-grok-bind-register": "scripts/grok-bind-register.sh"
   },
   "engines": {
     "node": ">=22",
@@ -61,6 +62,7 @@
   "files": [
     "src/cli.mjs",
     "src/server.ts",
+    "src/team-lead-skill.ts",
     "src/heartbeat.ts",
     "src/redact.ts",
     "src/mentions.ts",
@@ -72,6 +74,7 @@
     "src/identity.ts",
     "src/grok-bind.ts",
     "src/tool-annotations.ts",
+    "src/identity-guard.ts",
     "src/terms.ts",
     "src/wake.ts",
     "src/profile-store.ts",
@@ -86,9 +89,11 @@
     "connector/ingest.ts",
     "connector/README.md",
     "skills/onboarding.md",
+    "skills/agentschat-team-lead/",
     "dist/server.js",
     "dist/connector.js",
     "scripts/ensure-grok-wakes.mjs",
+    "scripts/grok-bind-register.sh",
     "README.md",
     "CHANGELOG.md",
     "codex/",