@integrity-labs/agt-cli 0.27.162 → 0.27.164

package/dist/bin/agt.js

@@ -33,7 +33,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-H5B4ESA5.js";
+} from "../chunk-OIX32YSR.js";
 import {
   CHANNEL_REGISTRY,
   DEPLOYMENT_TEMPLATES,
@@ -60,7 +60,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-LK7R6HLJ.js";
+} from "../chunk-3A2H4ZLD.js";
 
 // src/bin/agt.ts
 import { join as join21 } from "path";
@@ -5019,7 +5019,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.27.162" : "dev";
+var cliVersion = true ? "0.27.164" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5942,7 +5942,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.27.162" : "dev";
+var cliVersion2 = true ? "0.27.164" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-LK7R6HLJ.js → chunk-3A2H4ZLD.js}

@@ -2360,7 +2360,14 @@ var FLAG_REGISTRY = [
     description: "Optional-channel quarantine (ENG-5932): off = disabled, shadow = log matches only, enforce = quarantine.",
     flagType: "enum",
     allowedValues: ["off", "shadow", "enforce"],
-    defaultValue: "off",
+    // Declared safe value is `shadow` (compute + log "would quarantine X",
+    // takes no action) — NOT `off`. Two reasons: (1) shadow is observe-only, so
+    // it's as non-destructive as off while staying diagnosable; (2) it matches
+    // the live manager's compiled default since ENG-5932, so migrating the host
+    // reader onto this flag (ENG-6252) preserves fleet behaviour rather than
+    // silently disabling the quarantine logic. Enforcement (`enforce`) stays a
+    // deliberate, audited flip via the admin surface.
+    defaultValue: "shadow",
     envVar: "AGT_CHANNEL_QUARANTINE_MODE",
     // Enforcement gate: weakening it (enforce → shadow/off) drops a channel
     // safety control, so mutations require explicit confirmation.
@@ -5069,4 +5076,4 @@ export {
   coerceEnvValue,
   FLAGS_SCHEMA_VERSION
 };
-//# sourceMappingURL=chunk-LK7R6HLJ.js.map
+//# sourceMappingURL=chunk-3A2H4ZLD.js.map