@integrity-labs/agt-cli 0.28.1195 → 0.28.1197

package/dist/{chunk-MLIFIEIF.js → chunk-LBQSZVUX.js}

@@ -1,6 +1,6 @@
 import {
   encodeClaudeProjectPath
-} from "./chunk-2HAH3TZ4.js";
+} from "./chunk-I2ZT7SV2.js";
 
 // src/lib/daily-session.ts
 import { randomUUID } from "crypto";
@@ -240,4 +240,4 @@ export {
   peekPreviousSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-MLIFIEIF.js.map
+//# sourceMappingURL=chunk-LBQSZVUX.js.map

package/dist/{chunk-KL35IHP2.js → chunk-QAOYRG2J.js}

@@ -4,7 +4,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-MLIFIEIF.js";
+} from "./chunk-LBQSZVUX.js";
 import {
   classifyUnanswerablePane,
   customApiKeyDialogKeys,
@@ -51,7 +51,7 @@ import {
   remoteMcpConnectionEnvInfix,
   remoteMcpConnectionLabel,
   remoteMcpConnectionScopedEnvVar
-} from "./chunk-2HAH3TZ4.js";
+} from "./chunk-I2ZT7SV2.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   approveApiKeyInClaudeConfig,
@@ -6173,4 +6173,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-KL35IHP2.js.map
+//# sourceMappingURL=chunk-QAOYRG2J.js.map

package/dist/{chunk-WUYF7RDA.js → chunk-W4WVX7D4.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-XWVM4KPK.js";
 import {
   FORCED_UPDATE_HARD_DEADLINE_MS
-} from "./chunk-2HAH3TZ4.js";
+} from "./chunk-I2ZT7SV2.js";
 import {
   effectiveClaudeJsonPath
 } from "./chunk-AIUIMEUS.js";
@@ -722,4 +722,4 @@ export {
   probeClaudeInstalls,
   maybeUpdateClaudeCode
 };
-//# sourceMappingURL=chunk-WUYF7RDA.js.map
+//# sourceMappingURL=chunk-W4WVX7D4.js.map

package/dist/{claude-code-updater-DLTAAQOT.js → claude-code-updater-MO64U3D6.js}

@@ -13,9 +13,9 @@ import {
   probeClaudeInstalls,
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
-} from "./chunk-WUYF7RDA.js";
+} from "./chunk-W4WVX7D4.js";
 import "./chunk-XWVM4KPK.js";
-import "./chunk-2HAH3TZ4.js";
+import "./chunk-I2ZT7SV2.js";
 import "./chunk-AIUIMEUS.js";
 import "./chunk-DGUM43GV.js";
 export {
@@ -34,4 +34,4 @@ export {
   readsAsNativeInstall,
   shouldRunClaudeCodeUpdater
 };
-//# sourceMappingURL=claude-code-updater-DLTAAQOT.js.map
+//# sourceMappingURL=claude-code-updater-MO64U3D6.js.map

package/dist/{claude-pair-runtime-XAUZPAUP.js → claude-pair-runtime-HDMTFKOY.js}

@@ -8,7 +8,7 @@ import {
 import {
   redactPaneFrame,
   sanitizeTerminalFrame
-} from "./chunk-2HAH3TZ4.js";
+} from "./chunk-I2ZT7SV2.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -321,7 +321,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-TV4FIBN4.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-FMSMQ34K.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -836,4 +836,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-XAUZPAUP.js.map
+//# sourceMappingURL=claude-pair-runtime-HDMTFKOY.js.map

package/dist/lib/manager-worker.js

@@ -84,7 +84,7 @@ import {
   tripClass,
   writeEtcEnvironment,
   writeProfileDScript
-} from "../chunk-YTM5HQRH.js";
+} from "../chunk-2IQ6KNPD.js";
 import {
   CLAUDE_CODE_SECURITY_FLOOR,
   SELF_UPDATE_TIMEOUTS,
@@ -98,7 +98,7 @@ import {
   runSafeCleanup,
   tightestDiskStat,
   withPackageCacheLock
-} from "../chunk-WUYF7RDA.js";
+} from "../chunk-W4WVX7D4.js";
 import {
   rewriteSupervisorApiKey,
   supervisorChannelsRefusing
@@ -191,7 +191,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-KL35IHP2.js";
+} from "../chunk-QAOYRG2J.js";
 import {
   isAgentIdle,
   isStaleForToday,
@@ -201,7 +201,7 @@ import {
   sessionTranscriptDir,
   subagentActivityAgeSeconds,
   transcriptActivityAgeSeconds
-} from "../chunk-MLIFIEIF.js";
+} from "../chunk-LBQSZVUX.js";
 import {
   classifyUnanswerablePane,
   focusedConfirmDialogBlock,
@@ -329,7 +329,7 @@ import {
   stabiliseResetInstant,
   sumTranscriptUsageInWindow,
   summarizeTranscriptActivity
-} from "../chunk-2HAH3TZ4.js";
+} from "../chunk-I2ZT7SV2.js";
 import {
   CLAUDE_CONFIG_DIR_ENV,
   claudeConfigDirFor,
@@ -15560,7 +15560,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-BBAAYANU.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-AZOLKKQD.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -16357,7 +16357,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1195" : "dev";
+var agtCliVersion = true ? "0.28.1197" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -18261,7 +18261,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-TV4FIBN4.js");
+      const { collectDiagnostics } = await import("../persistent-session-FMSMQ34K.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor)
@@ -18404,7 +18404,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-TV4FIBN4.js");
+      const { collectDiagnostics } = await import("../persistent-session-FMSMQ34K.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor) : void 0;
       let tailscaleHostname;
@@ -18662,7 +18662,7 @@ async function pollCycleInner() {
       }
       try {
         const desiredClaudeCodeVersion = hbResp?.desired_claude_code_version?.trim();
-        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-DLTAAQOT.js");
+        const { maybeUpdateClaudeCode, shouldRunClaudeCodeUpdater } = await import("../claude-code-updater-MO64U3D6.js");
         const securityFloor = currentSecurityFloor();
         claudeUpdaterInFlight = true;
         if (desiredClaudeCodeVersion && (claudePairLoop.busy || claudePairingInProgress())) {
@@ -18697,7 +18697,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-BBAAYANU.js");
+      } = await import("../responsiveness-probe-AZOLKKQD.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -18814,7 +18814,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-BBAAYANU.js");
+        } = await import("../responsiveness-probe-AZOLKKQD.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -19100,7 +19100,7 @@ async function pollCycleInner() {
                 }
               }
             );
-            const { parkPendingInbound } = await import("../responsiveness-probe-BBAAYANU.js");
+            const { parkPendingInbound } = await import("../responsiveness-probe-AZOLKKQD.js");
             const { parked, deadLettered } = parkPendingInbound(codeName, new Date(fatalNowMs));
             paneFatalStreak.delete(codeName);
             paneFatalRestarts.set(codeName, [...history, fatalNowMs]);
@@ -19131,7 +19131,7 @@ async function pollCycleInner() {
         TRANSCRIPT_MOUNT_ESCALATION_REFRESH_MS,
         bindSourceEscalations
       } = await import("../transcript-mount-health-OHE6IVJV.js");
-      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-TV4FIBN4.js");
+      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-FMSMQ34K.js");
       const mountConfig = resolveTranscriptMountConfig();
       const liveAgents = agentState.persistentSessionAgents;
       for (const tracked of [
@@ -19296,7 +19296,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-JMYATIQN.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-SXJSD34M.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -24026,7 +24026,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-BBAAYANU.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-AZOLKKQD.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -24069,7 +24069,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-TV4FIBN4.js");
+        const { collectDiagnostics } = await import("../persistent-session-FMSMQ34K.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor)
@@ -24120,7 +24120,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-TV4FIBN4.js");
+      const { collectDiagnostics } = await import("../persistent-session-FMSMQ34K.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor, sessionActivityFor)
@@ -24822,7 +24822,7 @@ async function processClaudePairSessions(agents) {
     snapshotPairConfig,
     // ENG-11659: result -> report body + the manager.log line that records it.
     planPairStartReport
-  } = await import("../claude-pair-runtime-XAUZPAUP.js");
+  } = await import("../claude-pair-runtime-HDMTFKOY.js");
   const { resetClaudeSignin, describeSigninResetForLog, describeSigninResetFailure } = await import("../claude-signin-reset-6IJMMVYG.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);

package/dist/mcp/direct-chat-channel.js

@@ -42182,6 +42182,7 @@ var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
 var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
 var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
 var ORG_EGRESS_ADDRESSES = composio_approved_egress_default.orgAddresses ?? {};
+var SELF_HOST_SILENCE_WINDOW_MS = 7 * 24 * 60 * 60 * 1e3;
 
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
@@ -44251,6 +44252,14 @@ var FLAG_REGISTRY = [
     // be in the browser-exposed public map.
     public: true
   },
+  {
+    key: "host-wizard-managed-tokens",
+    description: 'ENG-11861: show the "Ninjafy supplies the tokens" (OpenRouter, claude_auth_mode=openrouter) option in the new-host wizard, including onboarding. Off = customers are offered BYO Claude Max (and BYO API key outside onboarding) only. Hides the CHOICE only: the mode itself, existing OpenRouter hosts, admin tooling and ENG-7515 auto-failover are untouched. Ships dark; turn on per org for anyone who should still be offered it.',
+    flagType: "boolean",
+    defaultValue: false,
+    // Read client-side by the new-host wizard (usePublicBooleanFlag).
+    public: true
+  },
   {
     key: "opencode-live-view",
     description: "opencode-native Live View / Diagnostics (ENG-7927): the agent Diagnostics tab renders a structured session transcript (messages + tool calls + reasoning) for opencode agents instead of the tmux pane, by polling GET /admin/agents/:id/opencode-transcript (which SSM-reads a redacted snapshot the manager writes) ~every 3s for a bounded window. Boolean gate; ships dark; when OFF the route returns feature_disabled and opencode agents show the static diagnostics snapshot. Claude Code agents are unaffected (they keep the tmux pane).",
@@ -46668,7 +46677,7 @@ var FLAG_REGISTRY = [
     sensitive: true
     // Not public: the browser makes no decision from this. The only consumer is
     // packages/api/src/middleware/ip-allowlist.ts.
-  }
+  },
   // THERE IS DELIBERATELY NO `ip-allowlist-enforce-mcp` FLAG.
   //
   // The per-agent MCP surface (POST /agents/:codeName/mcp) is allowlist
@@ -46704,6 +46713,16 @@ var FLAG_REGISTRY = [
   // adding the flag here and a key in ENFORCE_FLAG is a small diff - but it is a
   // decision to own someone else's egress, not a discovery that the population
   // was allowlistable all along.
+  {
+    key: "composio-arm-key-at-mint",
+    description: "ENG-11446 - mint a new org's Composio project key with its IP allowlist already set, from composio-approved-egress.json. OFF (default) = keys are minted unrestricted, as before, and an operator arms them in the dashboard. ON = armed in the create call. Off by default because a wrong set is unrepairable from here: there is no API to read or edit the allowlist, so every key minted from a stale file refuses its callers until someone edits it by hand. Turn on per stage only after the file is confirmed current and a key armed from it returns 200 from an agt-hosts instance (probe-allowed-ips.ts --host-verify). Prod only for now: the file holds prod addresses, so an armed test-stage key would refuse test hosts. Turning it off affects future mints only; keys already armed stay armed.",
+    flagType: "boolean",
+    defaultValue: false,
+    sensitive: true,
+    // Fleet-wide security posture, not an org's choice: an org override must not be able
+    // to arm or unarm its own keys (CodeRabbit on #7359).
+    platformAdminOnly: true
+  }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
 

package/dist/mcp/index.js

@@ -28250,6 +28250,7 @@ var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
 var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
 var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
 var ORG_EGRESS_ADDRESSES = composio_approved_egress_default.orgAddresses ?? {};
+var SELF_HOST_SILENCE_WINDOW_MS = 7 * 24 * 60 * 60 * 1e3;
 
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
@@ -29889,6 +29890,14 @@ var FLAG_REGISTRY = [
     // be in the browser-exposed public map.
     public: true
   },
+  {
+    key: "host-wizard-managed-tokens",
+    description: 'ENG-11861: show the "Ninjafy supplies the tokens" (OpenRouter, claude_auth_mode=openrouter) option in the new-host wizard, including onboarding. Off = customers are offered BYO Claude Max (and BYO API key outside onboarding) only. Hides the CHOICE only: the mode itself, existing OpenRouter hosts, admin tooling and ENG-7515 auto-failover are untouched. Ships dark; turn on per org for anyone who should still be offered it.',
+    flagType: "boolean",
+    defaultValue: false,
+    // Read client-side by the new-host wizard (usePublicBooleanFlag).
+    public: true
+  },
   {
     key: "opencode-live-view",
     description: "opencode-native Live View / Diagnostics (ENG-7927): the agent Diagnostics tab renders a structured session transcript (messages + tool calls + reasoning) for opencode agents instead of the tmux pane, by polling GET /admin/agents/:id/opencode-transcript (which SSM-reads a redacted snapshot the manager writes) ~every 3s for a bounded window. Boolean gate; ships dark; when OFF the route returns feature_disabled and opencode agents show the static diagnostics snapshot. Claude Code agents are unaffected (they keep the tmux pane).",
@@ -32306,7 +32315,7 @@ var FLAG_REGISTRY = [
     sensitive: true
     // Not public: the browser makes no decision from this. The only consumer is
     // packages/api/src/middleware/ip-allowlist.ts.
-  }
+  },
   // THERE IS DELIBERATELY NO `ip-allowlist-enforce-mcp` FLAG.
   //
   // The per-agent MCP surface (POST /agents/:codeName/mcp) is allowlist
@@ -32342,6 +32351,16 @@ var FLAG_REGISTRY = [
   // adding the flag here and a key in ENFORCE_FLAG is a small diff - but it is a
   // decision to own someone else's egress, not a discovery that the population
   // was allowlistable all along.
+  {
+    key: "composio-arm-key-at-mint",
+    description: "ENG-11446 - mint a new org's Composio project key with its IP allowlist already set, from composio-approved-egress.json. OFF (default) = keys are minted unrestricted, as before, and an operator arms them in the dashboard. ON = armed in the create call. Off by default because a wrong set is unrepairable from here: there is no API to read or edit the allowlist, so every key minted from a stale file refuses its callers until someone edits it by hand. Turn on per stage only after the file is confirmed current and a key armed from it returns 200 from an agt-hosts instance (probe-allowed-ips.ts --host-verify). Prod only for now: the file holds prod addresses, so an armed test-stage key would refuse test hosts. Turning it off affects future mints only; keys already armed stay armed.",
+    flagType: "boolean",
+    defaultValue: false,
+    sensitive: true,
+    // Fleet-wide security posture, not an org's choice: an org override must not be able
+    // to arm or unarm its own keys (CodeRabbit on #7359).
+    platformAdminOnly: true
+  }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
 

package/dist/mcp/origami.js

@@ -42339,6 +42339,7 @@ var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
 var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
 var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
 var ORG_EGRESS_ADDRESSES = composio_approved_egress_default.orgAddresses ?? {};
+var SELF_HOST_SILENCE_WINDOW_MS = 7 * 24 * 60 * 60 * 1e3;
 
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
@@ -43757,6 +43758,14 @@ var FLAG_REGISTRY = [
     // be in the browser-exposed public map.
     public: true
   },
+  {
+    key: "host-wizard-managed-tokens",
+    description: 'ENG-11861: show the "Ninjafy supplies the tokens" (OpenRouter, claude_auth_mode=openrouter) option in the new-host wizard, including onboarding. Off = customers are offered BYO Claude Max (and BYO API key outside onboarding) only. Hides the CHOICE only: the mode itself, existing OpenRouter hosts, admin tooling and ENG-7515 auto-failover are untouched. Ships dark; turn on per org for anyone who should still be offered it.',
+    flagType: "boolean",
+    defaultValue: false,
+    // Read client-side by the new-host wizard (usePublicBooleanFlag).
+    public: true
+  },
   {
     key: "opencode-live-view",
     description: "opencode-native Live View / Diagnostics (ENG-7927): the agent Diagnostics tab renders a structured session transcript (messages + tool calls + reasoning) for opencode agents instead of the tmux pane, by polling GET /admin/agents/:id/opencode-transcript (which SSM-reads a redacted snapshot the manager writes) ~every 3s for a bounded window. Boolean gate; ships dark; when OFF the route returns feature_disabled and opencode agents show the static diagnostics snapshot. Claude Code agents are unaffected (they keep the tmux pane).",
@@ -46174,7 +46183,7 @@ var FLAG_REGISTRY = [
     sensitive: true
     // Not public: the browser makes no decision from this. The only consumer is
     // packages/api/src/middleware/ip-allowlist.ts.
-  }
+  },
   // THERE IS DELIBERATELY NO `ip-allowlist-enforce-mcp` FLAG.
   //
   // The per-agent MCP surface (POST /agents/:codeName/mcp) is allowlist
@@ -46210,6 +46219,16 @@ var FLAG_REGISTRY = [
   // adding the flag here and a key in ENFORCE_FLAG is a small diff - but it is a
   // decision to own someone else's egress, not a discovery that the population
   // was allowlistable all along.
+  {
+    key: "composio-arm-key-at-mint",
+    description: "ENG-11446 - mint a new org's Composio project key with its IP allowlist already set, from composio-approved-egress.json. OFF (default) = keys are minted unrestricted, as before, and an operator arms them in the dashboard. ON = armed in the create call. Off by default because a wrong set is unrepairable from here: there is no API to read or edit the allowlist, so every key minted from a stale file refuses its callers until someone edits it by hand. Turn on per stage only after the file is confirmed current and a key armed from it returns 200 from an agt-hosts instance (probe-allowed-ips.ts --host-verify). Prod only for now: the file holds prod addresses, so an armed test-stage key would refuse test hosts. Turning it off affects future mints only; keys already armed stay armed.",
+    flagType: "boolean",
+    defaultValue: false,
+    sensitive: true,
+    // Fleet-wide security posture, not an org's choice: an org override must not be able
+    // to arm or unarm its own keys (CodeRabbit on #7359).
+    platformAdminOnly: true
+  }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
 

package/dist/mcp/slack-channel.js

@@ -36748,6 +36748,7 @@ var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
 var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
 var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
 var ORG_EGRESS_ADDRESSES = composio_approved_egress_default.orgAddresses ?? {};
+var SELF_HOST_SILENCE_WINDOW_MS = 7 * 24 * 60 * 60 * 1e3;
 
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
@@ -38588,6 +38589,14 @@ var FLAG_REGISTRY = [
     // be in the browser-exposed public map.
     public: true
   },
+  {
+    key: "host-wizard-managed-tokens",
+    description: 'ENG-11861: show the "Ninjafy supplies the tokens" (OpenRouter, claude_auth_mode=openrouter) option in the new-host wizard, including onboarding. Off = customers are offered BYO Claude Max (and BYO API key outside onboarding) only. Hides the CHOICE only: the mode itself, existing OpenRouter hosts, admin tooling and ENG-7515 auto-failover are untouched. Ships dark; turn on per org for anyone who should still be offered it.',
+    flagType: "boolean",
+    defaultValue: false,
+    // Read client-side by the new-host wizard (usePublicBooleanFlag).
+    public: true
+  },
   {
     key: "opencode-live-view",
     description: "opencode-native Live View / Diagnostics (ENG-7927): the agent Diagnostics tab renders a structured session transcript (messages + tool calls + reasoning) for opencode agents instead of the tmux pane, by polling GET /admin/agents/:id/opencode-transcript (which SSM-reads a redacted snapshot the manager writes) ~every 3s for a bounded window. Boolean gate; ships dark; when OFF the route returns feature_disabled and opencode agents show the static diagnostics snapshot. Claude Code agents are unaffected (they keep the tmux pane).",
@@ -41005,7 +41014,7 @@ var FLAG_REGISTRY = [
     sensitive: true
     // Not public: the browser makes no decision from this. The only consumer is
     // packages/api/src/middleware/ip-allowlist.ts.
-  }
+  },
   // THERE IS DELIBERATELY NO `ip-allowlist-enforce-mcp` FLAG.
   //
   // The per-agent MCP surface (POST /agents/:codeName/mcp) is allowlist
@@ -41041,6 +41050,16 @@ var FLAG_REGISTRY = [
   // adding the flag here and a key in ENFORCE_FLAG is a small diff - but it is a
   // decision to own someone else's egress, not a discovery that the population
   // was allowlistable all along.
+  {
+    key: "composio-arm-key-at-mint",
+    description: "ENG-11446 - mint a new org's Composio project key with its IP allowlist already set, from composio-approved-egress.json. OFF (default) = keys are minted unrestricted, as before, and an operator arms them in the dashboard. ON = armed in the create call. Off by default because a wrong set is unrepairable from here: there is no API to read or edit the allowlist, so every key minted from a stale file refuses its callers until someone edits it by hand. Turn on per stage only after the file is confirmed current and a key armed from it returns 200 from an agt-hosts instance (probe-allowed-ips.ts --host-verify). Prod only for now: the file holds prod addresses, so an armed test-stage key would refuse test hosts. Turning it off affects future mints only; keys already armed stay armed.",
+    flagType: "boolean",
+    defaultValue: false,
+    sensitive: true,
+    // Fleet-wide security posture, not an org's choice: an org override must not be able
+    // to arm or unarm its own keys (CodeRabbit on #7359).
+    platformAdminOnly: true
+  }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
 

package/dist/mcp/telegram-channel.js

@@ -36965,6 +36965,7 @@ var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
 var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
 var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
 var ORG_EGRESS_ADDRESSES = composio_approved_egress_default.orgAddresses ?? {};
+var SELF_HOST_SILENCE_WINDOW_MS = 7 * 24 * 60 * 60 * 1e3;
 
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
@@ -38799,6 +38800,14 @@ var FLAG_REGISTRY = [
     // be in the browser-exposed public map.
     public: true
   },
+  {
+    key: "host-wizard-managed-tokens",
+    description: 'ENG-11861: show the "Ninjafy supplies the tokens" (OpenRouter, claude_auth_mode=openrouter) option in the new-host wizard, including onboarding. Off = customers are offered BYO Claude Max (and BYO API key outside onboarding) only. Hides the CHOICE only: the mode itself, existing OpenRouter hosts, admin tooling and ENG-7515 auto-failover are untouched. Ships dark; turn on per org for anyone who should still be offered it.',
+    flagType: "boolean",
+    defaultValue: false,
+    // Read client-side by the new-host wizard (usePublicBooleanFlag).
+    public: true
+  },
   {
     key: "opencode-live-view",
     description: "opencode-native Live View / Diagnostics (ENG-7927): the agent Diagnostics tab renders a structured session transcript (messages + tool calls + reasoning) for opencode agents instead of the tmux pane, by polling GET /admin/agents/:id/opencode-transcript (which SSM-reads a redacted snapshot the manager writes) ~every 3s for a bounded window. Boolean gate; ships dark; when OFF the route returns feature_disabled and opencode agents show the static diagnostics snapshot. Claude Code agents are unaffected (they keep the tmux pane).",
@@ -41216,7 +41225,7 @@ var FLAG_REGISTRY = [
     sensitive: true
     // Not public: the browser makes no decision from this. The only consumer is
     // packages/api/src/middleware/ip-allowlist.ts.
-  }
+  },
   // THERE IS DELIBERATELY NO `ip-allowlist-enforce-mcp` FLAG.
   //
   // The per-agent MCP surface (POST /agents/:codeName/mcp) is allowlist
@@ -41252,6 +41261,16 @@ var FLAG_REGISTRY = [
   // adding the flag here and a key in ENFORCE_FLAG is a small diff - but it is a
   // decision to own someone else's egress, not a discovery that the population
   // was allowlistable all along.
+  {
+    key: "composio-arm-key-at-mint",
+    description: "ENG-11446 - mint a new org's Composio project key with its IP allowlist already set, from composio-approved-egress.json. OFF (default) = keys are minted unrestricted, as before, and an operator arms them in the dashboard. ON = armed in the create call. Off by default because a wrong set is unrepairable from here: there is no API to read or edit the allowlist, so every key minted from a stale file refuses its callers until someone edits it by hand. Turn on per stage only after the file is confirmed current and a key armed from it returns 200 from an agt-hosts instance (probe-allowed-ips.ts --host-verify). Prod only for now: the file holds prod addresses, so an armed test-stage key would refuse test hosts. Turning it off affects future mints only; keys already armed stay armed.",
+    flagType: "boolean",
+    defaultValue: false,
+    sensitive: true,
+    // Fleet-wide security posture, not an org's choice: an org override must not be able
+    // to arm or unarm its own keys (CodeRabbit on #7359).
+    platformAdminOnly: true
+  }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
 

package/dist/{persistent-session-TV4FIBN4.js → persistent-session-FMSMQ34K.js}

@@ -68,12 +68,12 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-KL35IHP2.js";
-import "./chunk-MLIFIEIF.js";
+} from "./chunk-QAOYRG2J.js";
+import "./chunk-LBQSZVUX.js";
 import "./chunk-OO36JBFI.js";
 import "./chunk-6HBXEJHO.js";
 import "./chunk-XWVM4KPK.js";
-import "./chunk-2HAH3TZ4.js";
+import "./chunk-I2ZT7SV2.js";
 import "./chunk-AIUIMEUS.js";
 import "./chunk-DGUM43GV.js";
 export {
@@ -147,4 +147,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-TV4FIBN4.js.map
+//# sourceMappingURL=persistent-session-FMSMQ34K.js.map

package/dist/{responsiveness-probe-BBAAYANU.js → responsiveness-probe-AZOLKKQD.js}

@@ -1,11 +1,11 @@
 import {
   paneLogPath
-} from "./chunk-KL35IHP2.js";
-import "./chunk-MLIFIEIF.js";
+} from "./chunk-QAOYRG2J.js";
+import "./chunk-LBQSZVUX.js";
 import "./chunk-OO36JBFI.js";
 import "./chunk-6HBXEJHO.js";
 import "./chunk-XWVM4KPK.js";
-import "./chunk-2HAH3TZ4.js";
+import "./chunk-I2ZT7SV2.js";
 import "./chunk-AIUIMEUS.js";
 import "./chunk-DGUM43GV.js";
 
@@ -804,4 +804,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-BBAAYANU.js.map
+//# sourceMappingURL=responsiveness-probe-AZOLKKQD.js.map

package/dist/{session-auth-dead-JMYATIQN.js → session-auth-dead-SXJSD34M.js}

@@ -1,7 +1,7 @@
 import {
   sessionTranscriptDir
-} from "./chunk-MLIFIEIF.js";
-import "./chunk-2HAH3TZ4.js";
+} from "./chunk-LBQSZVUX.js";
+import "./chunk-I2ZT7SV2.js";
 import "./chunk-DGUM43GV.js";
 
 // src/lib/session-auth-dead.ts
@@ -205,4 +205,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-JMYATIQN.js.map
+//# sourceMappingURL=session-auth-dead-SXJSD34M.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.1195",
+  "version": "0.28.1197",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {