@integrity-labs/agt-cli 0.28.176 → 0.28.177

package/dist/{chunk-ULPUDU4J.js → chunk-ODMNVKDO.js}

@@ -1816,6 +1816,18 @@ var FLAG_REGISTRY = [
     // Customer-infrastructure write capability; flipping it on is worth an explicit
     // confirm (ADR-0022 §4), same posture as admin-send-keys.
     sensitive: true
+  },
+  {
+    key: "augmented-support-auto-provision",
+    description: 'Org-create auto-provision of the per-org system_support concierge agent ("Augmented Support") (ENG-7026, ADR-0032 \xA77). This is the FINAL rollout stage: when on, every newly created organization gets a support agent provisioned (in draft - arming still needs first-run consent) by a best-effort hook in the org-create handler. The earlier rollout stages (dogfood Integrity Labs, then design partners) are driven by the explicit admin command (provision-support --org <slug>), NOT this flag. Ships dark: default OFF means the hook is inert, so there is no fleet-wide first deploy - existing orgs are never touched and new orgs get nothing until this is flipped on. The DB stage value is the control (no env override).',
+    flagType: "boolean",
+    // Declared safe value is `false`: the fail-safe / absent-flag direction is
+    // "no org auto-provisions a support agent", so a misread can never silently
+    // create agents across the fleet.
+    defaultValue: false,
+    // Auto-creates an org-admin-equivalent agent in every new org; flipping it on
+    // is fleet-shaping and worth an explicit confirm (ADR-0022 §4).
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -2853,6 +2865,9 @@ Store repositories under \`~/code/\` and create worktrees alongside them for par
 `;
 }
 
+// ../../packages/core/dist/generation/support-agent.js
+import { stringify as stringifyYaml3 } from "yaml";
+
 // ../../packages/core/dist/lint/rules/schema.js
 function runSchemaRules(file, result) {
   if (result.valid)
@@ -4127,7 +4142,11 @@ var ASSET_TYPES = {
   "image/gif": { ext: "gif", maxBytes: 10 * MB, enabled: true },
   // Forward path — enable in a later phase alongside multipart + range serving:
   "video/mp4": { ext: "mp4", maxBytes: 50 * MB, enabled: false },
-  "audio/mpeg": { ext: "mp3", maxBytes: 20 * MB, enabled: false }
+  // ENG-7048: enabled for server-generated ElevenLabs voiceover (text-to-speech).
+  // MP3 is an inert binary container (like the rasters above), so serving it as a
+  // top-level same-origin asset URL is safe — the SVG/HTML-polyglot risk in the
+  // module header does not apply. Embedded as <audio src=...> in the page HTML.
+  "audio/mpeg": { ext: "mp3", maxBytes: 20 * MB, enabled: true }
 };
 
 // ../../packages/core/dist/integrations/augmented-live/codec.js
@@ -6555,4 +6574,4 @@ export {
   parseEnvIntegrations,
   probeMcpEnvSubstitution
 };
-//# sourceMappingURL=chunk-ULPUDU4J.js.map
+//# sourceMappingURL=chunk-ODMNVKDO.js.map