@integrity-labs/agt-cli 0.28.1128 → 0.28.1130

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-Q272XYOI.js";
+} from "../chunk-EEBMAG52.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-BUCSF5DF.js";
+} from "../chunk-TRZ4SG77.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-EVYDMDOY.js";
+} from "../chunk-KN4GAY5Z.js";
 import "../chunk-B6UYVEMD.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1128" : "dev";
+var cliVersion = true ? "0.28.1130" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1128" : "dev";
+var cliVersion2 = true ? "0.28.1130" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-Q272XYOI.js → chunk-EEBMAG52.js}

@@ -16,7 +16,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-BUCSF5DF.js";
+} from "./chunk-TRZ4SG77.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -79,7 +79,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-EVYDMDOY.js";
+} from "./chunk-KN4GAY5Z.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -8076,7 +8076,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1128" : "dev";
+var agtCliVersion = true ? "0.28.1130" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -13227,4 +13227,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-Q272XYOI.js.map
+//# sourceMappingURL=chunk-EEBMAG52.js.map

package/dist/{chunk-EVYDMDOY.js → chunk-KN4GAY5Z.js}

@@ -2821,6 +2821,78 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://www.framer.com/developers/server-api-quick-start"
   },
+  {
+    // ENG-11540: FlutterFlow, through FlutterFlow's own CLI (`flutterflow ai`).
+    //
+    // WHAT "FLUTTERFLOW MCP" ACTUALLY IS. Not a hosted MCP endpoint. `flutterflow
+    // ai init <dir>` creates a local workspace holding a vendored Dart SDK and an
+    // MCP server registered in a workspace-root `.mcp.json`. The agent's own
+    // `.mcp.json` is platform-rendered, so a workspace-local server is never seen
+    // by the agent's session. The agent drives the same commands over Bash
+    // instead, which is what FlutterFlow's own Claude Code plugin does
+    // (github.com/FlutterFlow/flutterflow-claude) and is the same project state.
+    //
+    // HEADLESS, VERIFIED by running flutterflow_cli 0.0.41 on 2026-10-15: `init`
+    // reads FF_API_KEY from the environment, takes the workspace positionally and
+    // the project as `--project`, and never prompts when stdin is not a TTY. With
+    // no key it fails fast ("API key is required") rather than hanging. A key
+    // from the environment is never written to the CLI's credential store.
+    // Neither `flutterflow --version` nor `flutterflow ai --version` works outside
+    // a workspace, which is why the probe is central HTTP (connectivity-probe.ts).
+    id: "flutterflow",
+    name: "FlutterFlow",
+    category: "code",
+    description: "Build and edit FlutterFlow apps with the FlutterFlow CLI. Start with `flutterflow ai init <dir> --project <project-id>` (the key is already in FF_API_KEY), work inside that folder, inspect and validate before you run, and never read the folder's .flutterflow/.env (it holds the key). Never pass --yes to native-file unlock or lock, and ask a person before publish-library.",
+    supported_auth_types: ["api_key"],
+    // flutterflow_cli is 0.0.x and the AI SDK it downloads is versioned server-side.
+    beta: true,
+    installable: { category: "Code", authTypes: ["api_key"] },
+    capabilities: [
+      {
+        id: "flutterflow:read-project",
+        name: "Read Project",
+        description: "Inspect, search and validate a FlutterFlow project: pages, components, resources, status and run history",
+        access: "read"
+      },
+      {
+        id: "flutterflow:edit-project",
+        name: "Edit Project",
+        description: "Push changes to a FlutterFlow project: pages, widgets, state, actions and theme",
+        access: "write"
+      },
+      {
+        id: "flutterflow:publish-library",
+        name: "Publish Library",
+        description: "Publish a new version of a FlutterFlow library that other projects depend on",
+        access: "write"
+      }
+    ],
+    cli_tool: {
+      package: "flutterflow_cli",
+      binary: "flutterflow",
+      // `flutterflow ai` and the SDK it downloads both authenticate from this
+      // (the legacy FLUTTERFLOW_API_TOKEN feeds only export-code/deploy-firebase).
+      env_key: "FF_API_KEY",
+      installer: "script",
+      // The catalog is the trust boundary for this string (same contract as the
+      // `gh` entry above). The CLI is a Dart pub package, and AL2023 has no Dart
+      // rpm, so this installs Google's official SDK zip into a private prefix
+      // (about 650 MB, which is why it is per-integration and not in the base
+      // image) and puts a wrapper, not pub's shim, at /usr/local/bin/flutterflow.
+      // pub's shim runs a bare `dart`, so a different Dart earlier on PATH would
+      // reject the 3.13.5 snapshot; the wrapper pins our Dart for the CLI AND for
+      // the `dart run` the downloaded SDK does. Re-runnable: a timed-out run
+      // (180s) resumes from whatever finished. The SDK is unzipped into a
+      // staging dir INSIDE the prefix and renamed into place last (CodeRabbit on
+      // #7007): a run killed mid-unzip must never leave a partial dart-sdk that
+      // passes the version check and then fails every retry. Staging on the same
+      // filesystem is what makes the final `mv` a rename rather than a copy.
+      // Versions pinned on purpose: bump
+      // them together, after re-running the headless check above.
+      script: `set -e; d=/usr/local/flutterflow; v=3.13.5; case "$(uname -m)" in x86_64) a=x64;; aarch64|arm64) a=arm64;; *) echo "flutterflow: unsupported architecture $(uname -m)" >&2; exit 1;; esac; if ! "$d/dart-sdk/bin/dart" --version 2>&1 | grep -q "version: $v "; then if ! command -v unzip >/dev/null 2>&1; then if command -v dnf >/dev/null 2>&1; then dnf install -y unzip; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip; else echo "flutterflow: unzip missing and no supported installer (need dnf or apt-get)" >&2; exit 1; fi; fi; mkdir -p "$d"; t=$(mktemp -d "$d/.stage.XXXXXX"); trap 'rm -rf "$t"' EXIT; curl -fsSL "https://storage.googleapis.com/dart-archive/channels/stable/release/$v/sdk/dartsdk-linux-$a-release.zip" -o "$t/dart.zip"; unzip -q "$t/dart.zip" -d "$t/x"; rm -rf "$d/dart-sdk"; mv "$t/x/dart-sdk" "$d/dart-sdk"; fi; PATH="$d/dart-sdk/bin:$PATH" PUB_CACHE="$d/pub-cache" "$d/dart-sdk/bin/dart" pub global activate flutterflow_cli 0.0.41; printf '#!/bin/sh\\nPATH="%s/dart-sdk/bin:$PATH" PUB_CACHE="%s/pub-cache" exec "%s/pub-cache/bin/flutterflow" "$@"\\n' "$d" "$d" "$d" > /usr/local/bin/flutterflow; chmod 755 /usr/local/bin/flutterflow`
+    },
+    docs_url: "https://docs.flutterflow.io/flutterflow-cli/build/"
+  },
   {
     id: "v0",
     name: "v0 by Vercel",
@@ -7698,6 +7770,20 @@ var FLAG_REGISTRY = [
     // on for their own org. Only a platform admin can (PR #6522 review).
     platformAdminOnly: true
   },
+  {
+    key: "direct-chat-voice",
+    description: "Show the microphone (voice) button in the web Direct Chat composer - the Direct Chat drawer and the agent-screen chat dock (ENG-11542). Off by default: voice set expectations it does not yet meet for customers, but the team still needs it for testing, so it is enabled per org rather than removed. Does not gate the mobile PWA voice switch or the server voice-session routes.",
+    flagType: "boolean",
+    // PUBLIC (ADR-0022 §2): read in the browser via usePublicBooleanFlag, so it
+    // must be in the GET /flags map. No env override (UI rollout, not an
+    // operator gate). Ships dark (default false).
+    public: true,
+    defaultValue: false,
+    // Platform admin only: the point of the flag is keeping a not-ready feature
+    // away from customers, so a customer org admin must not be able to switch
+    // it back on for their own org.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',
@@ -12287,7 +12373,14 @@ var HTTP_PROBE_PROVIDERS = /* @__PURE__ */ new Set([
   // the integration is read-only, so without a probe a dead key would surface
   // only as failed reports. Routes to `probeOmnisend` against
   // `GET /brands/current`, never the rate-capped analytics endpoints.
-  "omnisend"
+  "omnisend",
+  // ENG-11540: FlutterFlow, added with the integration. Without it the CLI
+  // default (`flutterflow --version`) runs, and that exits 1 outside a
+  // workspace, so every healthy install would read broken from its first probe.
+  // A FlutterFlow API key never expires on its own; it dies when regenerated or
+  // when the account leaves a paid plan, and only a call can tell. Routes to
+  // `probeFlutterFlow`: the CLI's own `sdkWhoAmI` key check.
+  "flutterflow"
   // ENG-6100: GitHub is deliberately NOT here. This set drives the ASYNC
   // connectivity monitor's routing, where github (source_type='native')
   // stays host-side (cli_command — `gh`, the credential the agent actually
@@ -13064,6 +13157,56 @@ async function probeOmnisend(creds, fetchImpl) {
     return networkOutcome(err, String(key));
   }
 }
+async function probeFlutterFlow(creds, fetchImpl) {
+  const key = creds.api_key ?? creds.access_token;
+  if (!key)
+    return { status: "down", message: "No FlutterFlow API key present" };
+  try {
+    const res = await timedFetch(fetchImpl, "https://api.flutterflow.io/v1/l/sdkWhoAmI", {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${key}`,
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      },
+      body: "{}",
+      // CodeRabbit on #7007: the key rides in Authorization, and fetch forwards
+      // it on a same-origin redirect. FlutterFlow's key check never redirects, so
+      // a 3xx is a proxy or a moved endpoint, never a verdict on the key.
+      redirect: "manual"
+    });
+    if (res.status >= 300 && res.status < 400) {
+      return { status: "down", message: `FlutterFlow API redirected (${res.status}) - not a FlutterFlow API response` };
+    }
+    if (res.status === 401 || res.status === 403) {
+      return {
+        status: "down",
+        cause: "auth_rejected",
+        message: `FlutterFlow rejected the API key (${res.status}) - it was regenerated, mistyped, or the account is no longer on a paid plan`
+      };
+    }
+    if (!res.ok) {
+      const message = res.status === 429 ? rateLimitMessage("FlutterFlow", res.status) : `FlutterFlow API returned ${res.status}`;
+      return { status: statusForHttp(res.status), cause: causeForHttp(res.status), message };
+    }
+    let body = null;
+    try {
+      body = await res.json();
+    } catch {
+      body = null;
+    }
+    if (body === null || typeof body !== "object" || !("success" in body)) {
+      return { status: "down", message: "FlutterFlow returned 200 without a result - not a FlutterFlow API response" };
+    }
+    if (body.success !== true) {
+      const reason = typeof body.reason === "string" && body.reason.trim() !== "" ? `: ${redactSecret(body.reason.trim(), key).slice(0, 200)}` : "";
+      return { status: "down", cause: "auth_rejected", message: `FlutterFlow did not accept the API key${reason}` };
+    }
+    return { status: "ok", message: "Connected to FlutterFlow (API key accepted)" };
+  } catch (err) {
+    return networkOutcome(err, String(key));
+  }
+}
 async function probeHttpProvider(definitionId, credentials, fetchImpl = fetch, config) {
   switch (definitionId) {
     case "storrito":
@@ -13088,6 +13231,8 @@ async function probeHttpProvider(definitionId, credentials, fetchImpl = fetch, c
       return probeProjectworks(credentials, fetchImpl);
     case "omnisend":
       return probeOmnisend(credentials, fetchImpl);
+    case "flutterflow":
+      return probeFlutterFlow(credentials, fetchImpl);
     case "google-workspace":
       return probeBearerJson("https://www.googleapis.com/oauth2/v2/userinfo", credentials, fetchImpl, (body) => {
         const info = body;
@@ -16865,4 +17010,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-EVYDMDOY.js.map
+//# sourceMappingURL=chunk-KN4GAY5Z.js.map