@integrity-labs/agt-cli 0.28.260 → 0.28.262

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-PZJRZPJF.js";
+} from "../chunk-G3ETF363.js";
 import {
   CHANNEL_REGISTRY,
   DEFAULT_FRAMEWORK,
@@ -67,7 +67,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-22BZ2WQM.js";
+} from "../chunk-DMNWHJ65.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4826,7 +4826,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.260" : "dev";
+var cliVersion = true ? "0.28.262" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5840,7 +5840,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.260" : "dev";
+var cliVersion2 = true ? "0.28.262" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-22BZ2WQM.js → chunk-DMNWHJ65.js}

@@ -4618,9 +4618,12 @@ var INTEGRATION_REGISTRY = [
     name: "GitHub",
     category: "code",
     description: "Source code hosting, pull requests, and CI/CD",
-    supported_auth_types: ["api_key", "oauth2"],
+    // CS-1441: `github_app` adds BYO GitHub App installation auth (bot identity,
+    // per-repo least-privilege, survives personnel changes) alongside the
+    // existing user OAuth + PAT options.
+    supported_auth_types: ["api_key", "oauth2", "github_app"],
     // ENG-7015: customer-installable native — OAuth-first in the connect UI.
-    installable: { category: "Code", authTypes: ["oauth2", "api_key"] },
+    installable: { category: "Code", authTypes: ["oauth2", "api_key", "github_app"] },
     capabilities: [
       { id: "github:read-repos", name: "Read Repositories", description: "View repos, issues, and PRs", access: "read" },
       { id: "github:write-code", name: "Write Code", description: "Push commits and create PRs", access: "write" },
@@ -7044,10 +7047,24 @@ var FLAG_REGISTRY = [
   },
   {
     key: "ghost-reply-intent-classifier",
-    description: "Intentional-non-reply suppression on the ghost-reply RECOVERY path (ENG-7096). The recovery-outbox consumer in the channel MCP only ever fires for turns where the agent ended with text but did NOT call the matching reply tool for that conversation - a set that includes DELIBERATE non-replies (e.g. the agent narrating that the humans in the thread are talking among themselves and it is staying out). When ON, the consumer asks a cheap model (the conversation-eval backend, AGT_CONV_EVAL_*) whether the recovered text is a real message for the user (deliver) or an internal not-replying note (suppress), biased to DELIVER and fail-open, so a classifier outage degrades to today's behaviour, never to a dropped real reply. Boolean gate; ships dark. When OFF the consumer posts every recovered reply exactly as today.",
-    flagType: "boolean",
-    defaultValue: false,
-    envVar: "AGT_GHOST_REPLY_INTENT_CLASSIFIER_ENABLED"
+    description: `Intentional-non-reply suppression on the ghost-reply RECOVERY path (ENG-7096, ENG-7478). The recovery-outbox consumer in the channel MCP only ever fires for turns where the agent ended with text but did NOT call the matching reply tool for that conversation - a set that includes DELIBERATE non-replies and internal third-person self-status narration ("Filed CS-1443... standing by"). A cheap model (the conversation-eval backend, AGT_CONV_EVAL_*) classifies the recovered text as a real message for the user (deliver) or internal not-replying / self-status narration (suppress), keyed on grammatical person, biased to DELIVER and fail-open (a classifier outage degrades to today's behaviour, never a dropped real reply). off = classifier never runs, every recovered reply is posted exactly as today (ships dark, == the old boolean-false). shadow = classify + log the would-suppress verdict for operator adjudication but STILL DELIVER (measure the suppression rate before acting). enforce = actually suppress on a clean high-confidence suppress verdict. The channel server reads this live from the heartbeat flags-cache (or the env override); enforce is a deliberate, audited per-org flip after a shadow soak.`,
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // Declared safe value is `off`, NOT `shadow` (deliberately diverging from
+    // channel-quarantine-mode). quarantine's shadow is a free local log line;
+    // THIS shadow spends a live Haiku classify per recovery candidate, so
+    // defaulting to shadow would newly bill every host that never opted in. off
+    // preserves the old boolean-false behaviour exactly (classifier never called).
+    // Shadow is opt-in per canary; enforce is the audited flip after soak.
+    defaultValue: "off",
+    // Enum override AGT_GHOST_REPLY_INTENT_CLASSIFIER_MODE (off|shadow|enforce);
+    // resolveGhostReplyMode also grandfathers the old boolean
+    // AGT_GHOST_REPLY_INTENT_CLASSIFIER_ENABLED (true->enforce, false->off).
+    envVar: "AGT_GHOST_REPLY_INTENT_CLASSIFIER_MODE",
+    // enforce suppresses channel egress, and a false-suppress is silent,
+    // unrecoverable loss - so flipping toward enforce is a deliberate, audited
+    // change (ADR-0022 sensitive-flag confirm).
+    sensitive: true
   },
   {
     key: "compaction-notice",
@@ -9196,4 +9213,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-22BZ2WQM.js.map
+//# sourceMappingURL=chunk-DMNWHJ65.js.map