@integrity-labs/agt-cli 0.28.174 → 0.28.176

package/dist/bin/agt.js

@@ -37,7 +37,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-YCPOBKU7.js";
+} from "../chunk-YNCNFORO.js";
 import {
   CHANNEL_REGISTRY,
   DEFAULT_FRAMEWORK,
@@ -65,7 +65,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-NFJIFCWR.js";
+} from "../chunk-ULPUDU4J.js";
 
 // src/bin/agt.ts
 import { join as join22 } from "path";
@@ -4749,7 +4749,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.174" : "dev";
+var cliVersion = true ? "0.28.176" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5763,7 +5763,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.174" : "dev";
+var cliVersion2 = true ? "0.28.176" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-ET5DSDYO.js → chunk-NZLZICAD.js}

@@ -3,7 +3,7 @@ import {
   formatMissingVar,
   isClaudeFastMode,
   probeMcpEnvSubstitution
-} from "./chunk-NFJIFCWR.js";
+} from "./chunk-ULPUDU4J.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -1588,4 +1588,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-ET5DSDYO.js.map
+//# sourceMappingURL=chunk-NZLZICAD.js.map

package/dist/{chunk-NFJIFCWR.js → chunk-ULPUDU4J.js}

@@ -1804,6 +1804,18 @@ var FLAG_REGISTRY = [
     // Declared safe value is `false`: this drives outbound surveys to customer
     // contacts, so the absent-flag / fail-safe direction is "send nothing".
     defaultValue: false
+  },
+  {
+    key: "augmented-support-writes",
+    description: "Self-remediation writes on the augmented-support host surface (ENG-7000, ADR-0032 Phase 2b). When on, the org-locked /host/support/* write routes (create_agent, modify_agent, install_integration) are reachable; they call the shared agent write-core scoped to the verified host org. Ships dark: the server-rendered HITL approval gate is ENG-7001 (Phase 2c), so until that lands and provisioning attaches the write scope, this flag stays OFF and the write routes return feature_disabled. The DB stage/org override is the control (no env override).",
+    flagType: "boolean",
+    // Declared safe value is `false`: these are WRITES against customer infrastructure
+    // (creating/modifying agents in the caller's org). The fail-safe / absent-flag
+    // direction is "no self-remediation write is possible".
+    defaultValue: false,
+    // Customer-infrastructure write capability; flipping it on is worth an explicit
+    // confirm (ADR-0022 §4), same posture as admin-send-keys.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -6543,4 +6555,4 @@ export {
   parseEnvIntegrations,
   probeMcpEnvSubstitution
 };
-//# sourceMappingURL=chunk-NFJIFCWR.js.map
+//# sourceMappingURL=chunk-ULPUDU4J.js.map