@integrity-labs/agt-cli 0.28.282 → 0.28.283

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-6SRVCYKR.js";
+} from "../chunk-DDQKILX6.js";
 import {
   CHANNEL_REGISTRY,
   DEFAULT_FRAMEWORK,
@@ -67,7 +67,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-C4QMCOAN.js";
+} from "../chunk-CUQUOIPW.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4826,7 +4826,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.282" : "dev";
+var cliVersion = true ? "0.28.283" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5840,7 +5840,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.282" : "dev";
+var cliVersion2 = true ? "0.28.283" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-C4QMCOAN.js → chunk-CUQUOIPW.js}

@@ -6668,7 +6668,8 @@ var KANBAN_STATUSES = [
   "done",
   "failed",
   "cancelled",
-  "needs_attention"
+  "needs_attention",
+  "waiting"
 ];
 var KANBAN_STATUS_SET = new Set(KANBAN_STATUSES);
 
@@ -7589,6 +7590,21 @@ var FLAG_REGISTRY = [
     // current behaviour (single-slot injection). Turning it ON only makes the
     // fallback MORE conservative (injects less), so it removes no control.
     defaultValue: false
+  },
+  {
+    key: "kanban-waiting-status",
+    description: "Let managed agents set the 'waiting' kanban status via POST /host/kanban (ADR-0044 / ENG-7493) - work that has started but is parked on a human decision or an external dependency (a PR review, an approval). This is the DEPLOY-ORDER gate (ADR-0044 section 8): the status value + its migration (20260709000003), the webapp Waiting column, and the ~7-day reaper backstop all ship first, and this flag is flipped ON per org LAST, once they are live - the moment agents are allowed to emit `waiting`. Off (default) = the API rejects an agent `waiting` write with the existing 400, exactly as today. The API gate (evaluated per-org in POST /host/kanban via getEvaluatedFlags()) is the authoritative boundary. It is ALSO materialized host-side into AGT_KANBAN_WAITING_ENABLED (ENG-7591) so the kanban_move MCP tool only exposes `waiting` to agents once the host resolves the flag on - a host-grained UX hint, not the security boundary (the per-org API gate still decides). Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`: agents cannot emit `waiting` until an operator
+    // flips it on for the org, after the migration + webapp column + reaper backstop
+    // are deployed. Turning it ON grants a new capability, so it is not sensitive in
+    // the "relaxing a control" sense, but it MUST stay off until the deploy order is met.
+    defaultValue: false,
+    // Host-side materialization vehicle (ENG-7591): the manager writes this into the
+    // agent's spawn env from the resolved flag so the stdio MCP server (which cannot
+    // call the flag evaluator) can gate the kanban_move `waiting` option. Also the
+    // highest-precedence operator override, per ADR-0022.
+    envVar: "AGT_KANBAN_WAITING_ENABLED"
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -8266,7 +8282,7 @@ function restartEgressSidecar(codeName) {
   }
 }
 function buildDockerRunCommand(args) {
-  const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers } = args;
+  const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting } = args;
   const q = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
   const agentDir = join2(homeDir, ".augmented", codeName);
   const agentIdDir = join2(homeDir, ".augmented", agentId);
@@ -8301,6 +8317,7 @@ function buildDockerRunCommand(args) {
   envArgs.push(`-e AGT_IN_CONTAINER=true`);
   if (forwardSlackReplyBinding) envArgs.push("-e AGT_SLACK_REPLY_BINDING");
   if (forwardBlockTurnEndAllMarkers) envArgs.push("-e AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED");
+  if (forwardKanbanWaiting) envArgs.push("-e AGT_KANBAN_WAITING_ENABLED");
   const egressImage = process.env.AGT_EGRESS_IMAGE || "agt-squid:latest";
   const internalNet = `agt-net-${codeName}`;
   const squidName = `agt-squid-${codeName}`;
@@ -8648,6 +8665,9 @@ function spawnSession(config, session) {
     if (config.blockTurnEndAllMarkers && !process.env["AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED"]) {
       tmuxSessionEnvArgs.push("-e", "AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED=true");
     }
+    if (config.kanbanWaitingEnabled && !process.env["AGT_KANBAN_WAITING_ENABLED"]) {
+      tmuxSessionEnvArgs.push("-e", "AGT_KANBAN_WAITING_ENABLED=true");
+    }
     const sessionHomeDir = process.env.HOME?.trim() || homedir2();
     let egress;
     if (egressMode(codeName) === "allowlist") {
@@ -8671,7 +8691,11 @@ function spawnSession(config, session) {
       // ENG-6476: forward the reply-routing flag env if it will be present in the
       // session env (operator-set OR materialized from the flag above).
       forwardSlackReplyBinding: !!process.env["AGT_SLACK_REPLY_BINDING"] || !!config.slackReplyBindingMode && config.slackReplyBindingMode !== "shadow",
-      forwardBlockTurnEndAllMarkers: !!process.env["AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED"] || !!config.blockTurnEndAllMarkers
+      forwardBlockTurnEndAllMarkers: !!process.env["AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED"] || !!config.blockTurnEndAllMarkers,
+      // feature-gate-allow: registry-flag envVar operator-override precedence, not a new gate
+      // ENG-7493 (ADR-0044): forward AGT_KANBAN_WAITING_ENABLED if it will be in
+      // the session env (operator-set OR materialized from the flag above).
+      forwardKanbanWaiting: !!process.env["AGT_KANBAN_WAITING_ENABLED"] || !!config.kanbanWaitingEnabled
       // feature-gate-allow: registry-flag envVar operator-override precedence, not a new gate
     }) : JSON.stringify(wrapperPath);
     const tmuxEnv = {
@@ -9355,4 +9379,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-C4QMCOAN.js.map
+//# sourceMappingURL=chunk-CUQUOIPW.js.map