@integrity-labs/agt-cli 0.28.1129 → 0.28.1130

package/dist/{chunk-23GMWGOP.js → chunk-TRZ4SG77.js}

@@ -24,7 +24,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-JFABPA3Z.js";
+} from "./chunk-KN4GAY5Z.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -6114,4 +6114,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-23GMWGOP.js.map
+//# sourceMappingURL=chunk-TRZ4SG77.js.map

package/dist/{claude-pair-runtime-LDJXKNWF.js → claude-pair-runtime-WSUD7FHJ.js}

@@ -269,7 +269,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-QSE66QYT.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-YDKIHRCX.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -739,4 +739,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-LDJXKNWF.js.map
+//# sourceMappingURL=claude-pair-runtime-WSUD7FHJ.js.map

package/dist/lib/manager-worker.js

@@ -76,7 +76,7 @@ import {
   setConfigHash,
   shellGuard,
   tripClass
-} from "../chunk-2YWHPXY7.js";
+} from "../chunk-EEBMAG52.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -163,7 +163,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-23GMWGOP.js";
+} from "../chunk-TRZ4SG77.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -274,7 +274,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-JFABPA3Z.js";
+} from "../chunk-KN4GAY5Z.js";
 import {
   classifyUnanswerablePane,
   focusedConfirmDialogBlock,
@@ -14491,7 +14491,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-NC4A3FCR.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-5LEQ4ZFE.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -15249,7 +15249,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1129" : "dev";
+var agtCliVersion = true ? "0.28.1130" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -16879,7 +16879,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-QSE66QYT.js");
+      const { collectDiagnostics } = await import("../persistent-session-YDKIHRCX.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -17021,7 +17021,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-QSE66QYT.js");
+      const { collectDiagnostics } = await import("../persistent-session-YDKIHRCX.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -17229,7 +17229,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-NC4A3FCR.js");
+      } = await import("../responsiveness-probe-5LEQ4ZFE.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -17346,7 +17346,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-NC4A3FCR.js");
+        } = await import("../responsiveness-probe-5LEQ4ZFE.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -17632,7 +17632,7 @@ async function pollCycleInner() {
                 }
               }
             );
-            const { parkPendingInbound } = await import("../responsiveness-probe-NC4A3FCR.js");
+            const { parkPendingInbound } = await import("../responsiveness-probe-5LEQ4ZFE.js");
             const { parked, deadLettered } = parkPendingInbound(codeName, new Date(fatalNowMs));
             paneFatalStreak.delete(codeName);
             paneFatalRestarts.set(codeName, [...history, fatalNowMs]);
@@ -17663,7 +17663,7 @@ async function pollCycleInner() {
         TRANSCRIPT_MOUNT_ESCALATION_REFRESH_MS,
         bindSourceEscalations
       } = await import("../transcript-mount-health-OHE6IVJV.js");
-      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-QSE66QYT.js");
+      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-YDKIHRCX.js");
       const mountConfig = resolveTranscriptMountConfig();
       const liveAgents = agentState.persistentSessionAgents;
       for (const tracked of [
@@ -17828,7 +17828,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-23ERZN4N.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-C3GYATAO.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -22423,7 +22423,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-NC4A3FCR.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-5LEQ4ZFE.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -22466,7 +22466,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-QSE66QYT.js");
+        const { collectDiagnostics } = await import("../persistent-session-YDKIHRCX.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -22517,7 +22517,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-QSE66QYT.js");
+      const { collectDiagnostics } = await import("../persistent-session-YDKIHRCX.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -23190,7 +23190,7 @@ async function processClaudePairSessions(agents) {
     // cannot take it for itself — by the time it runs, the write it is looking
     // for may already have happened.
     snapshotPairConfig
-  } = await import("../claude-pair-runtime-LDJXKNWF.js");
+  } = await import("../claude-pair-runtime-WSUD7FHJ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -34314,6 +34314,78 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://www.framer.com/developers/server-api-quick-start"
   },
+  {
+    // ENG-11540: FlutterFlow, through FlutterFlow's own CLI (`flutterflow ai`).
+    //
+    // WHAT "FLUTTERFLOW MCP" ACTUALLY IS. Not a hosted MCP endpoint. `flutterflow
+    // ai init <dir>` creates a local workspace holding a vendored Dart SDK and an
+    // MCP server registered in a workspace-root `.mcp.json`. The agent's own
+    // `.mcp.json` is platform-rendered, so a workspace-local server is never seen
+    // by the agent's session. The agent drives the same commands over Bash
+    // instead, which is what FlutterFlow's own Claude Code plugin does
+    // (github.com/FlutterFlow/flutterflow-claude) and is the same project state.
+    //
+    // HEADLESS, VERIFIED by running flutterflow_cli 0.0.41 on 2026-10-15: `init`
+    // reads FF_API_KEY from the environment, takes the workspace positionally and
+    // the project as `--project`, and never prompts when stdin is not a TTY. With
+    // no key it fails fast ("API key is required") rather than hanging. A key
+    // from the environment is never written to the CLI's credential store.
+    // Neither `flutterflow --version` nor `flutterflow ai --version` works outside
+    // a workspace, which is why the probe is central HTTP (connectivity-probe.ts).
+    id: "flutterflow",
+    name: "FlutterFlow",
+    category: "code",
+    description: "Build and edit FlutterFlow apps with the FlutterFlow CLI. Start with `flutterflow ai init <dir> --project <project-id>` (the key is already in FF_API_KEY), work inside that folder, inspect and validate before you run, and never read the folder's .flutterflow/.env (it holds the key). Never pass --yes to native-file unlock or lock, and ask a person before publish-library.",
+    supported_auth_types: ["api_key"],
+    // flutterflow_cli is 0.0.x and the AI SDK it downloads is versioned server-side.
+    beta: true,
+    installable: { category: "Code", authTypes: ["api_key"] },
+    capabilities: [
+      {
+        id: "flutterflow:read-project",
+        name: "Read Project",
+        description: "Inspect, search and validate a FlutterFlow project: pages, components, resources, status and run history",
+        access: "read"
+      },
+      {
+        id: "flutterflow:edit-project",
+        name: "Edit Project",
+        description: "Push changes to a FlutterFlow project: pages, widgets, state, actions and theme",
+        access: "write"
+      },
+      {
+        id: "flutterflow:publish-library",
+        name: "Publish Library",
+        description: "Publish a new version of a FlutterFlow library that other projects depend on",
+        access: "write"
+      }
+    ],
+    cli_tool: {
+      package: "flutterflow_cli",
+      binary: "flutterflow",
+      // `flutterflow ai` and the SDK it downloads both authenticate from this
+      // (the legacy FLUTTERFLOW_API_TOKEN feeds only export-code/deploy-firebase).
+      env_key: "FF_API_KEY",
+      installer: "script",
+      // The catalog is the trust boundary for this string (same contract as the
+      // `gh` entry above). The CLI is a Dart pub package, and AL2023 has no Dart
+      // rpm, so this installs Google's official SDK zip into a private prefix
+      // (about 650 MB, which is why it is per-integration and not in the base
+      // image) and puts a wrapper, not pub's shim, at /usr/local/bin/flutterflow.
+      // pub's shim runs a bare `dart`, so a different Dart earlier on PATH would
+      // reject the 3.13.5 snapshot; the wrapper pins our Dart for the CLI AND for
+      // the `dart run` the downloaded SDK does. Re-runnable: a timed-out run
+      // (180s) resumes from whatever finished. The SDK is unzipped into a
+      // staging dir INSIDE the prefix and renamed into place last (CodeRabbit on
+      // #7007): a run killed mid-unzip must never leave a partial dart-sdk that
+      // passes the version check and then fails every retry. Staging on the same
+      // filesystem is what makes the final `mv` a rename rather than a copy.
+      // Versions pinned on purpose: bump
+      // them together, after re-running the headless check above.
+      script: `set -e; d=/usr/local/flutterflow; v=3.13.5; case "$(uname -m)" in x86_64) a=x64;; aarch64|arm64) a=arm64;; *) echo "flutterflow: unsupported architecture $(uname -m)" >&2; exit 1;; esac; if ! "$d/dart-sdk/bin/dart" --version 2>&1 | grep -q "version: $v "; then if ! command -v unzip >/dev/null 2>&1; then if command -v dnf >/dev/null 2>&1; then dnf install -y unzip; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip; else echo "flutterflow: unzip missing and no supported installer (need dnf or apt-get)" >&2; exit 1; fi; fi; mkdir -p "$d"; t=$(mktemp -d "$d/.stage.XXXXXX"); trap 'rm -rf "$t"' EXIT; curl -fsSL "https://storage.googleapis.com/dart-archive/channels/stable/release/$v/sdk/dartsdk-linux-$a-release.zip" -o "$t/dart.zip"; unzip -q "$t/dart.zip" -d "$t/x"; rm -rf "$d/dart-sdk"; mv "$t/x/dart-sdk" "$d/dart-sdk"; fi; PATH="$d/dart-sdk/bin:$PATH" PUB_CACHE="$d/pub-cache" "$d/dart-sdk/bin/dart" pub global activate flutterflow_cli 0.0.41; printf '#!/bin/sh\\nPATH="%s/dart-sdk/bin:$PATH" PUB_CACHE="%s/pub-cache" exec "%s/pub-cache/bin/flutterflow" "$@"\\n' "$d" "$d" "$d" > /usr/local/bin/flutterflow; chmod 755 /usr/local/bin/flutterflow`
+    },
+    docs_url: "https://docs.flutterflow.io/flutterflow-cli/build/"
+  },
   {
     id: "v0",
     name: "v0 by Vercel",
@@ -38757,6 +38829,20 @@ var FLAG_REGISTRY = [
     // on for their own org. Only a platform admin can (PR #6522 review).
     platformAdminOnly: true
   },
+  {
+    key: "direct-chat-voice",
+    description: "Show the microphone (voice) button in the web Direct Chat composer - the Direct Chat drawer and the agent-screen chat dock (ENG-11542). Off by default: voice set expectations it does not yet meet for customers, but the team still needs it for testing, so it is enabled per org rather than removed. Does not gate the mobile PWA voice switch or the server voice-session routes.",
+    flagType: "boolean",
+    // PUBLIC (ADR-0022 §2): read in the browser via usePublicBooleanFlag, so it
+    // must be in the GET /flags map. No env override (UI rollout, not an
+    // operator gate). Ships dark (default false).
+    public: true,
+    defaultValue: false,
+    // Platform admin only: the point of the flag is keeping a not-ready feature
+    // away from customers, so a customer org admin must not be able to switch
+    // it back on for their own org.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',

package/dist/mcp/index.js

@@ -26816,6 +26816,78 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://www.framer.com/developers/server-api-quick-start"
   },
+  {
+    // ENG-11540: FlutterFlow, through FlutterFlow's own CLI (`flutterflow ai`).
+    //
+    // WHAT "FLUTTERFLOW MCP" ACTUALLY IS. Not a hosted MCP endpoint. `flutterflow
+    // ai init <dir>` creates a local workspace holding a vendored Dart SDK and an
+    // MCP server registered in a workspace-root `.mcp.json`. The agent's own
+    // `.mcp.json` is platform-rendered, so a workspace-local server is never seen
+    // by the agent's session. The agent drives the same commands over Bash
+    // instead, which is what FlutterFlow's own Claude Code plugin does
+    // (github.com/FlutterFlow/flutterflow-claude) and is the same project state.
+    //
+    // HEADLESS, VERIFIED by running flutterflow_cli 0.0.41 on 2026-10-15: `init`
+    // reads FF_API_KEY from the environment, takes the workspace positionally and
+    // the project as `--project`, and never prompts when stdin is not a TTY. With
+    // no key it fails fast ("API key is required") rather than hanging. A key
+    // from the environment is never written to the CLI's credential store.
+    // Neither `flutterflow --version` nor `flutterflow ai --version` works outside
+    // a workspace, which is why the probe is central HTTP (connectivity-probe.ts).
+    id: "flutterflow",
+    name: "FlutterFlow",
+    category: "code",
+    description: "Build and edit FlutterFlow apps with the FlutterFlow CLI. Start with `flutterflow ai init <dir> --project <project-id>` (the key is already in FF_API_KEY), work inside that folder, inspect and validate before you run, and never read the folder's .flutterflow/.env (it holds the key). Never pass --yes to native-file unlock or lock, and ask a person before publish-library.",
+    supported_auth_types: ["api_key"],
+    // flutterflow_cli is 0.0.x and the AI SDK it downloads is versioned server-side.
+    beta: true,
+    installable: { category: "Code", authTypes: ["api_key"] },
+    capabilities: [
+      {
+        id: "flutterflow:read-project",
+        name: "Read Project",
+        description: "Inspect, search and validate a FlutterFlow project: pages, components, resources, status and run history",
+        access: "read"
+      },
+      {
+        id: "flutterflow:edit-project",
+        name: "Edit Project",
+        description: "Push changes to a FlutterFlow project: pages, widgets, state, actions and theme",
+        access: "write"
+      },
+      {
+        id: "flutterflow:publish-library",
+        name: "Publish Library",
+        description: "Publish a new version of a FlutterFlow library that other projects depend on",
+        access: "write"
+      }
+    ],
+    cli_tool: {
+      package: "flutterflow_cli",
+      binary: "flutterflow",
+      // `flutterflow ai` and the SDK it downloads both authenticate from this
+      // (the legacy FLUTTERFLOW_API_TOKEN feeds only export-code/deploy-firebase).
+      env_key: "FF_API_KEY",
+      installer: "script",
+      // The catalog is the trust boundary for this string (same contract as the
+      // `gh` entry above). The CLI is a Dart pub package, and AL2023 has no Dart
+      // rpm, so this installs Google's official SDK zip into a private prefix
+      // (about 650 MB, which is why it is per-integration and not in the base
+      // image) and puts a wrapper, not pub's shim, at /usr/local/bin/flutterflow.
+      // pub's shim runs a bare `dart`, so a different Dart earlier on PATH would
+      // reject the 3.13.5 snapshot; the wrapper pins our Dart for the CLI AND for
+      // the `dart run` the downloaded SDK does. Re-runnable: a timed-out run
+      // (180s) resumes from whatever finished. The SDK is unzipped into a
+      // staging dir INSIDE the prefix and renamed into place last (CodeRabbit on
+      // #7007): a run killed mid-unzip must never leave a partial dart-sdk that
+      // passes the version check and then fails every retry. Staging on the same
+      // filesystem is what makes the final `mv` a rename rather than a copy.
+      // Versions pinned on purpose: bump
+      // them together, after re-running the headless check above.
+      script: `set -e; d=/usr/local/flutterflow; v=3.13.5; case "$(uname -m)" in x86_64) a=x64;; aarch64|arm64) a=arm64;; *) echo "flutterflow: unsupported architecture $(uname -m)" >&2; exit 1;; esac; if ! "$d/dart-sdk/bin/dart" --version 2>&1 | grep -q "version: $v "; then if ! command -v unzip >/dev/null 2>&1; then if command -v dnf >/dev/null 2>&1; then dnf install -y unzip; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip; else echo "flutterflow: unzip missing and no supported installer (need dnf or apt-get)" >&2; exit 1; fi; fi; mkdir -p "$d"; t=$(mktemp -d "$d/.stage.XXXXXX"); trap 'rm -rf "$t"' EXIT; curl -fsSL "https://storage.googleapis.com/dart-archive/channels/stable/release/$v/sdk/dartsdk-linux-$a-release.zip" -o "$t/dart.zip"; unzip -q "$t/dart.zip" -d "$t/x"; rm -rf "$d/dart-sdk"; mv "$t/x/dart-sdk" "$d/dart-sdk"; fi; PATH="$d/dart-sdk/bin:$PATH" PUB_CACHE="$d/pub-cache" "$d/dart-sdk/bin/dart" pub global activate flutterflow_cli 0.0.41; printf '#!/bin/sh\\nPATH="%s/dart-sdk/bin:$PATH" PUB_CACHE="%s/pub-cache" exec "%s/pub-cache/bin/flutterflow" "$@"\\n' "$d" "$d" "$d" > /usr/local/bin/flutterflow; chmod 755 /usr/local/bin/flutterflow`
+    },
+    docs_url: "https://docs.flutterflow.io/flutterflow-cli/build/"
+  },
   {
     id: "v0",
     name: "v0 by Vercel",
@@ -30840,6 +30912,20 @@ var FLAG_REGISTRY = [
     // on for their own org. Only a platform admin can (PR #6522 review).
     platformAdminOnly: true
   },
+  {
+    key: "direct-chat-voice",
+    description: "Show the microphone (voice) button in the web Direct Chat composer - the Direct Chat drawer and the agent-screen chat dock (ENG-11542). Off by default: voice set expectations it does not yet meet for customers, but the team still needs it for testing, so it is enabled per org rather than removed. Does not gate the mobile PWA voice switch or the server voice-session routes.",
+    flagType: "boolean",
+    // PUBLIC (ADR-0022 §2): read in the browser via usePublicBooleanFlag, so it
+    // must be in the GET /flags map. No env override (UI rollout, not an
+    // operator gate). Ships dark (default false).
+    public: true,
+    defaultValue: false,
+    // Platform admin only: the point of the flag is keeping a not-ready feature
+    // away from customers, so a customer org admin must not be able to switch
+    // it back on for their own org.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',

package/dist/mcp/origami.js

@@ -40948,6 +40948,78 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://www.framer.com/developers/server-api-quick-start"
   },
+  {
+    // ENG-11540: FlutterFlow, through FlutterFlow's own CLI (`flutterflow ai`).
+    //
+    // WHAT "FLUTTERFLOW MCP" ACTUALLY IS. Not a hosted MCP endpoint. `flutterflow
+    // ai init <dir>` creates a local workspace holding a vendored Dart SDK and an
+    // MCP server registered in a workspace-root `.mcp.json`. The agent's own
+    // `.mcp.json` is platform-rendered, so a workspace-local server is never seen
+    // by the agent's session. The agent drives the same commands over Bash
+    // instead, which is what FlutterFlow's own Claude Code plugin does
+    // (github.com/FlutterFlow/flutterflow-claude) and is the same project state.
+    //
+    // HEADLESS, VERIFIED by running flutterflow_cli 0.0.41 on 2026-10-15: `init`
+    // reads FF_API_KEY from the environment, takes the workspace positionally and
+    // the project as `--project`, and never prompts when stdin is not a TTY. With
+    // no key it fails fast ("API key is required") rather than hanging. A key
+    // from the environment is never written to the CLI's credential store.
+    // Neither `flutterflow --version` nor `flutterflow ai --version` works outside
+    // a workspace, which is why the probe is central HTTP (connectivity-probe.ts).
+    id: "flutterflow",
+    name: "FlutterFlow",
+    category: "code",
+    description: "Build and edit FlutterFlow apps with the FlutterFlow CLI. Start with `flutterflow ai init <dir> --project <project-id>` (the key is already in FF_API_KEY), work inside that folder, inspect and validate before you run, and never read the folder's .flutterflow/.env (it holds the key). Never pass --yes to native-file unlock or lock, and ask a person before publish-library.",
+    supported_auth_types: ["api_key"],
+    // flutterflow_cli is 0.0.x and the AI SDK it downloads is versioned server-side.
+    beta: true,
+    installable: { category: "Code", authTypes: ["api_key"] },
+    capabilities: [
+      {
+        id: "flutterflow:read-project",
+        name: "Read Project",
+        description: "Inspect, search and validate a FlutterFlow project: pages, components, resources, status and run history",
+        access: "read"
+      },
+      {
+        id: "flutterflow:edit-project",
+        name: "Edit Project",
+        description: "Push changes to a FlutterFlow project: pages, widgets, state, actions and theme",
+        access: "write"
+      },
+      {
+        id: "flutterflow:publish-library",
+        name: "Publish Library",
+        description: "Publish a new version of a FlutterFlow library that other projects depend on",
+        access: "write"
+      }
+    ],
+    cli_tool: {
+      package: "flutterflow_cli",
+      binary: "flutterflow",
+      // `flutterflow ai` and the SDK it downloads both authenticate from this
+      // (the legacy FLUTTERFLOW_API_TOKEN feeds only export-code/deploy-firebase).
+      env_key: "FF_API_KEY",
+      installer: "script",
+      // The catalog is the trust boundary for this string (same contract as the
+      // `gh` entry above). The CLI is a Dart pub package, and AL2023 has no Dart
+      // rpm, so this installs Google's official SDK zip into a private prefix
+      // (about 650 MB, which is why it is per-integration and not in the base
+      // image) and puts a wrapper, not pub's shim, at /usr/local/bin/flutterflow.
+      // pub's shim runs a bare `dart`, so a different Dart earlier on PATH would
+      // reject the 3.13.5 snapshot; the wrapper pins our Dart for the CLI AND for
+      // the `dart run` the downloaded SDK does. Re-runnable: a timed-out run
+      // (180s) resumes from whatever finished. The SDK is unzipped into a
+      // staging dir INSIDE the prefix and renamed into place last (CodeRabbit on
+      // #7007): a run killed mid-unzip must never leave a partial dart-sdk that
+      // passes the version check and then fails every retry. Staging on the same
+      // filesystem is what makes the final `mv` a rename rather than a copy.
+      // Versions pinned on purpose: bump
+      // them together, after re-running the headless check above.
+      script: `set -e; d=/usr/local/flutterflow; v=3.13.5; case "$(uname -m)" in x86_64) a=x64;; aarch64|arm64) a=arm64;; *) echo "flutterflow: unsupported architecture $(uname -m)" >&2; exit 1;; esac; if ! "$d/dart-sdk/bin/dart" --version 2>&1 | grep -q "version: $v "; then if ! command -v unzip >/dev/null 2>&1; then if command -v dnf >/dev/null 2>&1; then dnf install -y unzip; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip; else echo "flutterflow: unzip missing and no supported installer (need dnf or apt-get)" >&2; exit 1; fi; fi; mkdir -p "$d"; t=$(mktemp -d "$d/.stage.XXXXXX"); trap 'rm -rf "$t"' EXIT; curl -fsSL "https://storage.googleapis.com/dart-archive/channels/stable/release/$v/sdk/dartsdk-linux-$a-release.zip" -o "$t/dart.zip"; unzip -q "$t/dart.zip" -d "$t/x"; rm -rf "$d/dart-sdk"; mv "$t/x/dart-sdk" "$d/dart-sdk"; fi; PATH="$d/dart-sdk/bin:$PATH" PUB_CACHE="$d/pub-cache" "$d/dart-sdk/bin/dart" pub global activate flutterflow_cli 0.0.41; printf '#!/bin/sh\\nPATH="%s/dart-sdk/bin:$PATH" PUB_CACHE="%s/pub-cache" exec "%s/pub-cache/bin/flutterflow" "$@"\\n' "$d" "$d" "$d" > /usr/local/bin/flutterflow; chmod 755 /usr/local/bin/flutterflow`
+    },
+    docs_url: "https://docs.flutterflow.io/flutterflow-cli/build/"
+  },
   {
     id: "v0",
     name: "v0 by Vercel",
@@ -44769,6 +44841,20 @@ var FLAG_REGISTRY = [
     // on for their own org. Only a platform admin can (PR #6522 review).
     platformAdminOnly: true
   },
+  {
+    key: "direct-chat-voice",
+    description: "Show the microphone (voice) button in the web Direct Chat composer - the Direct Chat drawer and the agent-screen chat dock (ENG-11542). Off by default: voice set expectations it does not yet meet for customers, but the team still needs it for testing, so it is enabled per org rather than removed. Does not gate the mobile PWA voice switch or the server voice-session routes.",
+    flagType: "boolean",
+    // PUBLIC (ADR-0022 §2): read in the browser via usePublicBooleanFlag, so it
+    // must be in the GET /flags map. No env override (UI rollout, not an
+    // operator gate). Ships dark (default false).
+    public: true,
+    defaultValue: false,
+    // Platform admin only: the point of the flag is keeping a not-ready feature
+    // away from customers, so a customer org admin must not be able to switch
+    // it back on for their own org.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',

package/dist/mcp/slack-channel.js

@@ -35335,6 +35335,78 @@ var INTEGRATION_REGISTRY = [
     },
     docs_url: "https://www.framer.com/developers/server-api-quick-start"
   },
+  {
+    // ENG-11540: FlutterFlow, through FlutterFlow's own CLI (`flutterflow ai`).
+    //
+    // WHAT "FLUTTERFLOW MCP" ACTUALLY IS. Not a hosted MCP endpoint. `flutterflow
+    // ai init <dir>` creates a local workspace holding a vendored Dart SDK and an
+    // MCP server registered in a workspace-root `.mcp.json`. The agent's own
+    // `.mcp.json` is platform-rendered, so a workspace-local server is never seen
+    // by the agent's session. The agent drives the same commands over Bash
+    // instead, which is what FlutterFlow's own Claude Code plugin does
+    // (github.com/FlutterFlow/flutterflow-claude) and is the same project state.
+    //
+    // HEADLESS, VERIFIED by running flutterflow_cli 0.0.41 on 2026-10-15: `init`
+    // reads FF_API_KEY from the environment, takes the workspace positionally and
+    // the project as `--project`, and never prompts when stdin is not a TTY. With
+    // no key it fails fast ("API key is required") rather than hanging. A key
+    // from the environment is never written to the CLI's credential store.
+    // Neither `flutterflow --version` nor `flutterflow ai --version` works outside
+    // a workspace, which is why the probe is central HTTP (connectivity-probe.ts).
+    id: "flutterflow",
+    name: "FlutterFlow",
+    category: "code",
+    description: "Build and edit FlutterFlow apps with the FlutterFlow CLI. Start with `flutterflow ai init <dir> --project <project-id>` (the key is already in FF_API_KEY), work inside that folder, inspect and validate before you run, and never read the folder's .flutterflow/.env (it holds the key). Never pass --yes to native-file unlock or lock, and ask a person before publish-library.",
+    supported_auth_types: ["api_key"],
+    // flutterflow_cli is 0.0.x and the AI SDK it downloads is versioned server-side.
+    beta: true,
+    installable: { category: "Code", authTypes: ["api_key"] },
+    capabilities: [
+      {
+        id: "flutterflow:read-project",
+        name: "Read Project",
+        description: "Inspect, search and validate a FlutterFlow project: pages, components, resources, status and run history",
+        access: "read"
+      },
+      {
+        id: "flutterflow:edit-project",
+        name: "Edit Project",
+        description: "Push changes to a FlutterFlow project: pages, widgets, state, actions and theme",
+        access: "write"
+      },
+      {
+        id: "flutterflow:publish-library",
+        name: "Publish Library",
+        description: "Publish a new version of a FlutterFlow library that other projects depend on",
+        access: "write"
+      }
+    ],
+    cli_tool: {
+      package: "flutterflow_cli",
+      binary: "flutterflow",
+      // `flutterflow ai` and the SDK it downloads both authenticate from this
+      // (the legacy FLUTTERFLOW_API_TOKEN feeds only export-code/deploy-firebase).
+      env_key: "FF_API_KEY",
+      installer: "script",
+      // The catalog is the trust boundary for this string (same contract as the
+      // `gh` entry above). The CLI is a Dart pub package, and AL2023 has no Dart
+      // rpm, so this installs Google's official SDK zip into a private prefix
+      // (about 650 MB, which is why it is per-integration and not in the base
+      // image) and puts a wrapper, not pub's shim, at /usr/local/bin/flutterflow.
+      // pub's shim runs a bare `dart`, so a different Dart earlier on PATH would
+      // reject the 3.13.5 snapshot; the wrapper pins our Dart for the CLI AND for
+      // the `dart run` the downloaded SDK does. Re-runnable: a timed-out run
+      // (180s) resumes from whatever finished. The SDK is unzipped into a
+      // staging dir INSIDE the prefix and renamed into place last (CodeRabbit on
+      // #7007): a run killed mid-unzip must never leave a partial dart-sdk that
+      // passes the version check and then fails every retry. Staging on the same
+      // filesystem is what makes the final `mv` a rename rather than a copy.
+      // Versions pinned on purpose: bump
+      // them together, after re-running the headless check above.
+      script: `set -e; d=/usr/local/flutterflow; v=3.13.5; case "$(uname -m)" in x86_64) a=x64;; aarch64|arm64) a=arm64;; *) echo "flutterflow: unsupported architecture $(uname -m)" >&2; exit 1;; esac; if ! "$d/dart-sdk/bin/dart" --version 2>&1 | grep -q "version: $v "; then if ! command -v unzip >/dev/null 2>&1; then if command -v dnf >/dev/null 2>&1; then dnf install -y unzip; elif command -v apt-get >/dev/null 2>&1; then apt-get update && apt-get install -y unzip; else echo "flutterflow: unzip missing and no supported installer (need dnf or apt-get)" >&2; exit 1; fi; fi; mkdir -p "$d"; t=$(mktemp -d "$d/.stage.XXXXXX"); trap 'rm -rf "$t"' EXIT; curl -fsSL "https://storage.googleapis.com/dart-archive/channels/stable/release/$v/sdk/dartsdk-linux-$a-release.zip" -o "$t/dart.zip"; unzip -q "$t/dart.zip" -d "$t/x"; rm -rf "$d/dart-sdk"; mv "$t/x/dart-sdk" "$d/dart-sdk"; fi; PATH="$d/dart-sdk/bin:$PATH" PUB_CACHE="$d/pub-cache" "$d/dart-sdk/bin/dart" pub global activate flutterflow_cli 0.0.41; printf '#!/bin/sh\\nPATH="%s/dart-sdk/bin:$PATH" PUB_CACHE="%s/pub-cache" exec "%s/pub-cache/bin/flutterflow" "$@"\\n' "$d" "$d" "$d" > /usr/local/bin/flutterflow; chmod 755 /usr/local/bin/flutterflow`
+    },
+    docs_url: "https://docs.flutterflow.io/flutterflow-cli/build/"
+  },
   {
     id: "v0",
     name: "v0 by Vercel",
@@ -39578,6 +39650,20 @@ var FLAG_REGISTRY = [
     // on for their own org. Only a platform admin can (PR #6522 review).
     platformAdminOnly: true
   },
+  {
+    key: "direct-chat-voice",
+    description: "Show the microphone (voice) button in the web Direct Chat composer - the Direct Chat drawer and the agent-screen chat dock (ENG-11542). Off by default: voice set expectations it does not yet meet for customers, but the team still needs it for testing, so it is enabled per org rather than removed. Does not gate the mobile PWA voice switch or the server voice-session routes.",
+    flagType: "boolean",
+    // PUBLIC (ADR-0022 §2): read in the browser via usePublicBooleanFlag, so it
+    // must be in the GET /flags map. No env override (UI rollout, not an
+    // operator gate). Ships dark (default false).
+    public: true,
+    defaultValue: false,
+    // Platform admin only: the point of the flag is keeping a not-ready feature
+    // away from customers, so a customer org admin must not be able to switch
+    // it back on for their own org.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',