@integrity-labs/agt-cli 0.28.1138 → 0.28.1140

package/dist/mcp/direct-chat-channel.js

@@ -45521,6 +45521,19 @@ var FLAG_REGISTRY = [
     // refuses aal1 there too.
     platformAdminOnly: true
   },
+  {
+    key: "two-factor-reminder-banner",
+    description: "Show a banner across the console asking every user without an authenticator app to set one up before two-factor becomes required (ENG-11619). Also makes Settings > Two-factor authentication reachable, as `two-factor-settings` does, because the banner links there. Closing it hides it for a day in that browser.",
+    flagType: "boolean",
+    // PUBLIC: the nav reads it client-side; the layout and the settings page read
+    // it server-side. Ships dark (default false): turn it on for one org first.
+    public: true,
+    defaultValue: false,
+    // Staff only, for the same reason as `two-factor-settings` above: it opens
+    // the settings page, and phase 1 still accepts an aal1 session outside page
+    // loads, so an org admin must not be the one deciding they are covered.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',

package/dist/mcp/index.js

@@ -31100,6 +31100,19 @@ var FLAG_REGISTRY = [
     // refuses aal1 there too.
     platformAdminOnly: true
   },
+  {
+    key: "two-factor-reminder-banner",
+    description: "Show a banner across the console asking every user without an authenticator app to set one up before two-factor becomes required (ENG-11619). Also makes Settings > Two-factor authentication reachable, as `two-factor-settings` does, because the banner links there. Closing it hides it for a day in that browser.",
+    flagType: "boolean",
+    // PUBLIC: the nav reads it client-side; the layout and the settings page read
+    // it server-side. Ships dark (default false): turn it on for one org first.
+    public: true,
+    defaultValue: false,
+    // Staff only, for the same reason as `two-factor-settings` above: it opens
+    // the settings page, and phase 1 still accepts an aal1 session outside page
+    // loads, so an org admin must not be the one deciding they are covered.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',

package/dist/mcp/origami.js

@@ -45027,6 +45027,19 @@ var FLAG_REGISTRY = [
     // refuses aal1 there too.
     platformAdminOnly: true
   },
+  {
+    key: "two-factor-reminder-banner",
+    description: "Show a banner across the console asking every user without an authenticator app to set one up before two-factor becomes required (ENG-11619). Also makes Settings > Two-factor authentication reachable, as `two-factor-settings` does, because the banner links there. Closing it hides it for a day in that browser.",
+    flagType: "boolean",
+    // PUBLIC: the nav reads it client-side; the layout and the settings page read
+    // it server-side. Ships dark (default false): turn it on for one org first.
+    public: true,
+    defaultValue: false,
+    // Staff only, for the same reason as `two-factor-settings` above: it opens
+    // the settings page, and phase 1 still accepts an aal1 session outside page
+    // loads, so an org admin must not be the one deciding they are covered.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',

package/dist/mcp/slack-channel.js

@@ -39853,6 +39853,19 @@ var FLAG_REGISTRY = [
     // refuses aal1 there too.
     platformAdminOnly: true
   },
+  {
+    key: "two-factor-reminder-banner",
+    description: "Show a banner across the console asking every user without an authenticator app to set one up before two-factor becomes required (ENG-11619). Also makes Settings > Two-factor authentication reachable, as `two-factor-settings` does, because the banner links there. Closing it hides it for a day in that browser.",
+    flagType: "boolean",
+    // PUBLIC: the nav reads it client-side; the layout and the settings page read
+    // it server-side. Ships dark (default false): turn it on for one org first.
+    public: true,
+    defaultValue: false,
+    // Staff only, for the same reason as `two-factor-settings` above: it opens
+    // the settings page, and phase 1 still accepts an aal1 session outside page
+    // loads, so an org admin must not be the one deciding they are covered.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',

package/dist/mcp/telegram-channel.js

@@ -40064,6 +40064,19 @@ var FLAG_REGISTRY = [
     // refuses aal1 there too.
     platformAdminOnly: true
   },
+  {
+    key: "two-factor-reminder-banner",
+    description: "Show a banner across the console asking every user without an authenticator app to set one up before two-factor becomes required (ENG-11619). Also makes Settings > Two-factor authentication reachable, as `two-factor-settings` does, because the banner links there. Closing it hides it for a day in that browser.",
+    flagType: "boolean",
+    // PUBLIC: the nav reads it client-side; the layout and the settings page read
+    // it server-side. Ships dark (default false): turn it on for one org first.
+    public: true,
+    defaultValue: false,
+    // Staff only, for the same reason as `two-factor-settings` above: it opens
+    // the settings page, and phase 1 still accepts an aal1 session outside page
+    // loads, so an org admin must not be the one deciding they are covered.
+    platformAdminOnly: true
+  },
   {
     key: "platform-maintenance-mode",
     description: 'Platform-wide maintenance mode (ENG-6506; widened to modes by ENG-11436). off = normal operation (ships dark; channels behave exactly as today). tools-offline = every agent KEEPS conversing but every Augmented tool that WRITES to the control plane refuses with a reason, so nothing is created during a window whose database restore would discard it; reads are untouched. fleet-offline = the previous boolean-true behaviour AND the write gate: admitted human inbound gets a "we are offline for maintenance" notice instead of being dispatched, for whole-platform downtime such as DB upgrades. The modes are CUMULATIVE \u2014 fleet-offline gates writes too, because silencing channel inbound does not stop a /loop or a scheduled task filing work. Read host-side per inbound and per tool call from the flags cache (no MCP restart). (Proactive "back online" follow-up is the ENG-6508 fast-follow, not this flag.)',

package/dist/{persistent-session-ZBKLEYUQ.js → persistent-session-6O66QEI4.js}

@@ -68,8 +68,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-J6ORWGUB.js";
-import "./chunk-EIXOI2ZB.js";
+} from "./chunk-7U4VSBOE.js";
+import "./chunk-DYFE224A.js";
 import "./chunk-B6UYVEMD.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -145,4 +145,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-ZBKLEYUQ.js.map
+//# sourceMappingURL=persistent-session-6O66QEI4.js.map

package/dist/{responsiveness-probe-FXDO35IT.js → responsiveness-probe-WGD3NDWG.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-J6ORWGUB.js";
-import "./chunk-EIXOI2ZB.js";
+} from "./chunk-7U4VSBOE.js";
+import "./chunk-DYFE224A.js";
 import "./chunk-B6UYVEMD.js";
 import "./chunk-XWVM4KPK.js";
 import "./chunk-EL5MWGGH.js";
@@ -802,4 +802,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-FXDO35IT.js.map
+//# sourceMappingURL=responsiveness-probe-WGD3NDWG.js.map

package/dist/{session-auth-dead-OGNOSJIB.js → session-auth-dead-6N2AEFKX.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-EIXOI2ZB.js";
+} from "./chunk-DYFE224A.js";
 import "./chunk-DGUM43GV.js";
 
 // src/lib/session-auth-dead.ts
@@ -204,4 +204,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-OGNOSJIB.js.map
+//# sourceMappingURL=session-auth-dead-6N2AEFKX.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1138",
+  "version": "0.28.1140",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {