@integrity-labs/agt-cli 0.28.1046 → 0.28.1048

package/dist/mcp/direct-chat-channel.js

@@ -36016,6 +36016,16 @@ function encodeClaudeProjectPath(projectDir) {
   return "-" + projectDir.replace(/^\//, "").replace(/[/.]/g, "-");
 }
 
+// ../core/dist/claude-code-usage/failing-turn-run.js
+var NO_FAILING_TURN_RUN = Object.freeze({
+  newestTurn: "other",
+  consecutive: 0,
+  firstFailureAtMs: null,
+  lastFailureAtMs: null,
+  lastStatus: null,
+  lastErrorCode: null
+});
+
 // ../core/dist/account-enforcement/marker.js
 var ACCOUNT_ENFORCEMENT_MARKER_FILENAME = "account-enforcement.json";
 var ACCOUNT_ENFORCEMENT_MARKER_VERSION = 1;
@@ -36564,6 +36574,15 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "live-team-only-default",
+    description: "Make a NEW Ninja Canvas (Augmented Live) page team-only by default (ENG-11089, ADR-0122): when on, a publish that names no visibility is readable only by signed-in members of the publishing agent's team, and sharing it wider is an explicit choice. Evaluated per-org. Chooses the DEFAULT only: it never changes an existing page, and turning it off never un-protects a page that is already team-only. INERT until ENG-11150 lands - until then every publish is public and a non-public request is refused. Boolean gate; ships dark.",
+    flagType: "boolean",
+    defaultValue: false,
+    // An org owner/admin must not arm a confidentiality default before the edge
+    // can enforce it (ENG-11150); the ADR-0120 / ninja-lists precedent.
+    platformAdminOnly: true
+  },
   {
     key: "integration-multi-connection",
     description: "Allow adding a SECOND+ connection of one managed integration on the same agent (ENG-7543 / ADR-0045 Phase 3), discriminated by connection_key (e.g. two Gmail mailboxes). When OFF, only the default connection can be created (today's behaviour: a duplicate 409s). Gates 2nd-connection CREATION only; runtime N-server surfacing is a later phase. Evaluated per-org. Additive capability, not an enforcement control. Boolean gate; ships dark.",

package/dist/mcp/index.js

@@ -28359,6 +28359,16 @@ var UNKNOWN_TURN_FAILURE = Object.freeze({
   maxAttempts: null
 });
 
+// ../core/dist/claude-code-usage/failing-turn-run.js
+var NO_FAILING_TURN_RUN = Object.freeze({
+  newestTurn: "other",
+  consecutive: 0,
+  firstFailureAtMs: null,
+  lastFailureAtMs: null,
+  lastStatus: null,
+  lastErrorCode: null
+});
+
 // ../core/dist/kanban/state-machine.js
 var KANBAN_STATUSES = [
   "backlog",
@@ -28895,6 +28905,15 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "live-team-only-default",
+    description: "Make a NEW Ninja Canvas (Augmented Live) page team-only by default (ENG-11089, ADR-0122): when on, a publish that names no visibility is readable only by signed-in members of the publishing agent's team, and sharing it wider is an explicit choice. Evaluated per-org. Chooses the DEFAULT only: it never changes an existing page, and turning it off never un-protects a page that is already team-only. INERT until ENG-11150 lands - until then every publish is public and a non-public request is refused. Boolean gate; ships dark.",
+    flagType: "boolean",
+    defaultValue: false,
+    // An org owner/admin must not arm a confidentiality default before the edge
+    // can enforce it (ENG-11150); the ADR-0120 / ninja-lists precedent.
+    platformAdminOnly: true
+  },
   {
     key: "integration-multi-connection",
     description: "Allow adding a SECOND+ connection of one managed integration on the same agent (ENG-7543 / ADR-0045 Phase 3), discriminated by connection_key (e.g. two Gmail mailboxes). When OFF, only the default connection can be created (today's behaviour: a duplicate 409s). Gates 2nd-connection CREATION only; runtime N-server surfacing is a later phase. Evaluated per-org. Additive capability, not an enforcement control. Boolean gate; ships dark.",

package/dist/mcp/origami.js

@@ -42294,6 +42294,16 @@ var UNKNOWN_TURN_FAILURE = Object.freeze({
   maxAttempts: null
 });
 
+// ../core/dist/claude-code-usage/failing-turn-run.js
+var NO_FAILING_TURN_RUN = Object.freeze({
+  newestTurn: "other",
+  consecutive: 0,
+  firstFailureAtMs: null,
+  lastFailureAtMs: null,
+  lastStatus: null,
+  lastErrorCode: null
+});
+
 // ../core/dist/kanban/state-machine.js
 var KANBAN_STATUSES = [
   "backlog",
@@ -42809,6 +42819,15 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "live-team-only-default",
+    description: "Make a NEW Ninja Canvas (Augmented Live) page team-only by default (ENG-11089, ADR-0122): when on, a publish that names no visibility is readable only by signed-in members of the publishing agent's team, and sharing it wider is an explicit choice. Evaluated per-org. Chooses the DEFAULT only: it never changes an existing page, and turning it off never un-protects a page that is already team-only. INERT until ENG-11150 lands - until then every publish is public and a non-public request is refused. Boolean gate; ships dark.",
+    flagType: "boolean",
+    defaultValue: false,
+    // An org owner/admin must not arm a confidentiality default before the edge
+    // can enforce it (ENG-11150); the ADR-0120 / ninja-lists precedent.
+    platformAdminOnly: true
+  },
   {
     key: "integration-multi-connection",
     description: "Allow adding a SECOND+ connection of one managed integration on the same agent (ENG-7543 / ADR-0045 Phase 3), discriminated by connection_key (e.g. two Gmail mailboxes). When OFF, only the default connection can be created (today's behaviour: a duplicate 409s). Gates 2nd-connection CREATION only; runtime N-server surfacing is a later phase. Evaluated per-org. Additive capability, not an enforcement control. Boolean gate; ships dark.",

package/dist/mcp/slack-channel.js

@@ -36897,6 +36897,16 @@ function encodeClaudeProjectPath(projectDir) {
   return "-" + projectDir.replace(/^\//, "").replace(/[/.]/g, "-");
 }
 
+// ../core/dist/claude-code-usage/failing-turn-run.js
+var NO_FAILING_TURN_RUN = Object.freeze({
+  newestTurn: "other",
+  consecutive: 0,
+  firstFailureAtMs: null,
+  lastFailureAtMs: null,
+  lastStatus: null,
+  lastErrorCode: null
+});
+
 // ../core/dist/account-enforcement/marker.js
 var ACCOUNT_ENFORCEMENT_MARKER_FILENAME = "account-enforcement.json";
 var ACCOUNT_ENFORCEMENT_MARKER_VERSION = 1;
@@ -37448,6 +37458,15 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "live-team-only-default",
+    description: "Make a NEW Ninja Canvas (Augmented Live) page team-only by default (ENG-11089, ADR-0122): when on, a publish that names no visibility is readable only by signed-in members of the publishing agent's team, and sharing it wider is an explicit choice. Evaluated per-org. Chooses the DEFAULT only: it never changes an existing page, and turning it off never un-protects a page that is already team-only. INERT until ENG-11150 lands - until then every publish is public and a non-public request is refused. Boolean gate; ships dark.",
+    flagType: "boolean",
+    defaultValue: false,
+    // An org owner/admin must not arm a confidentiality default before the edge
+    // can enforce it (ENG-11150); the ADR-0120 / ninja-lists precedent.
+    platformAdminOnly: true
+  },
   {
     key: "integration-multi-connection",
     description: "Allow adding a SECOND+ connection of one managed integration on the same agent (ENG-7543 / ADR-0045 Phase 3), discriminated by connection_key (e.g. two Gmail mailboxes). When OFF, only the default connection can be created (today's behaviour: a duplicate 409s). Gates 2nd-connection CREATION only; runtime N-server surfacing is a later phase. Evaluated per-org. Additive capability, not an enforcement control. Boolean gate; ships dark.",

package/dist/mcp/telegram-channel.js

@@ -37003,6 +37003,16 @@ function encodeClaudeProjectPath(projectDir) {
   return "-" + projectDir.replace(/^\//, "").replace(/[/.]/g, "-");
 }
 
+// ../core/dist/claude-code-usage/failing-turn-run.js
+var NO_FAILING_TURN_RUN = Object.freeze({
+  newestTurn: "other",
+  consecutive: 0,
+  firstFailureAtMs: null,
+  lastFailureAtMs: null,
+  lastStatus: null,
+  lastErrorCode: null
+});
+
 // ../core/dist/account-enforcement/marker.js
 var ACCOUNT_ENFORCEMENT_MARKER_FILENAME = "account-enforcement.json";
 var ACCOUNT_ENFORCEMENT_MARKER_VERSION = 1;
@@ -37554,6 +37564,15 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "live-team-only-default",
+    description: "Make a NEW Ninja Canvas (Augmented Live) page team-only by default (ENG-11089, ADR-0122): when on, a publish that names no visibility is readable only by signed-in members of the publishing agent's team, and sharing it wider is an explicit choice. Evaluated per-org. Chooses the DEFAULT only: it never changes an existing page, and turning it off never un-protects a page that is already team-only. INERT until ENG-11150 lands - until then every publish is public and a non-public request is refused. Boolean gate; ships dark.",
+    flagType: "boolean",
+    defaultValue: false,
+    // An org owner/admin must not arm a confidentiality default before the edge
+    // can enforce it (ENG-11150); the ADR-0120 / ninja-lists precedent.
+    platformAdminOnly: true
+  },
   {
     key: "integration-multi-connection",
     description: "Allow adding a SECOND+ connection of one managed integration on the same agent (ENG-7543 / ADR-0045 Phase 3), discriminated by connection_key (e.g. two Gmail mailboxes). When OFF, only the default connection can be created (today's behaviour: a duplicate 409s). Gates 2nd-connection CREATION only; runtime N-server surfacing is a later phase. Evaluated per-org. Additive capability, not an enforcement control. Boolean gate; ships dark.",

package/dist/{persistent-session-VZANOGV5.js → persistent-session-OSQVHP6N.js}

@@ -65,8 +65,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-TAINRP4T.js";
-import "./chunk-46YPCLWA.js";
+} from "./chunk-QGGDQMWF.js";
+import "./chunk-APAEM42J.js";
 import "./chunk-TQDIIS3X.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -139,4 +139,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-VZANOGV5.js.map
+//# sourceMappingURL=persistent-session-OSQVHP6N.js.map

package/dist/{responsiveness-probe-Z3K7LFCV.js → responsiveness-probe-BFDPJWZE.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-TAINRP4T.js";
-import "./chunk-46YPCLWA.js";
+} from "./chunk-QGGDQMWF.js";
+import "./chunk-APAEM42J.js";
 import "./chunk-TQDIIS3X.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -802,4 +802,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-Z3K7LFCV.js.map
+//# sourceMappingURL=responsiveness-probe-BFDPJWZE.js.map

package/dist/{session-auth-dead-3NF6MPSR.js → session-auth-dead-A3WD2YRK.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-46YPCLWA.js";
+} from "./chunk-APAEM42J.js";
 import "./chunk-DGUM43GV.js";
 
 // src/lib/session-auth-dead.ts
@@ -204,4 +204,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-3NF6MPSR.js.map
+//# sourceMappingURL=session-auth-dead-A3WD2YRK.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1046",
+  "version": "0.28.1048",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {