@integrity-labs/agt-cli 0.28.282 → 0.28.284

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-6SRVCYKR.js";
+} from "../chunk-6Y7K5FLO.js";
 import {
   CHANNEL_REGISTRY,
   DEFAULT_FRAMEWORK,
@@ -67,7 +67,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-C4QMCOAN.js";
+} from "../chunk-TZKHPDOH.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4826,7 +4826,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.282" : "dev";
+var cliVersion = true ? "0.28.284" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5840,7 +5840,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.282" : "dev";
+var cliVersion2 = true ? "0.28.284" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-6SRVCYKR.js → chunk-6Y7K5FLO.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-C4QMCOAN.js";
+} from "./chunk-TZKHPDOH.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5882,7 +5882,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.282" : "dev";
+var agtCliVersion = true ? "0.28.284" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8162,4 +8162,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-6SRVCYKR.js.map
+//# sourceMappingURL=chunk-6Y7K5FLO.js.map

package/dist/{chunk-C4QMCOAN.js → chunk-TZKHPDOH.js}

@@ -6668,7 +6668,8 @@ var KANBAN_STATUSES = [
   "done",
   "failed",
   "cancelled",
-  "needs_attention"
+  "needs_attention",
+  "waiting"
 ];
 var KANBAN_STATUS_SET = new Set(KANBAN_STATUSES);
 
@@ -7028,6 +7029,12 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "integration-multi-connection",
+    description: "Allow adding a SECOND+ connection of one managed integration on the same agent (ENG-7543 / ADR-0045 Phase 3), discriminated by connection_key (e.g. two Gmail mailboxes). When OFF, only the default connection can be created (today's behaviour: a duplicate 409s). Gates 2nd-connection CREATION only; runtime N-server surfacing is a later phase. Evaluated per-org. Additive capability, not an enforcement control. Boolean gate; ships dark.",
+    flagType: "boolean",
+    defaultValue: false
+  },
   {
     key: "augmented-live-stream-producer",
     description: "Augmented Live live-preview streaming producer (ENG-7210). The receiver (codec, artifact-draft channel, stream route, console Live Preview tab) shipped under ENG-6234 but never engages because nothing writes the working file the manager scanner watches. When ON for an org, a host-side PostToolUse hook mirrors agt-live.publish/editing content to ~/.augmented/{codeName}/artifacts/<slug>/index.html, so the scanner mints a draft and streams a keyframe to the console Live Preview tab. Additive, best-effort. Boolean gate; ships dark. Materialized to the host flags-cache; the bash hook reads it (operator/canary override AGT_LIVE_STREAM_PRODUCER_ENABLED).",
@@ -7589,6 +7596,21 @@ var FLAG_REGISTRY = [
     // current behaviour (single-slot injection). Turning it ON only makes the
     // fallback MORE conservative (injects less), so it removes no control.
     defaultValue: false
+  },
+  {
+    key: "kanban-waiting-status",
+    description: "Let managed agents set the 'waiting' kanban status via POST /host/kanban (ADR-0044 / ENG-7493) - work that has started but is parked on a human decision or an external dependency (a PR review, an approval). This is the DEPLOY-ORDER gate (ADR-0044 section 8): the status value + its migration (20260709000003), the webapp Waiting column, and the ~7-day reaper backstop all ship first, and this flag is flipped ON per org LAST, once they are live - the moment agents are allowed to emit `waiting`. Off (default) = the API rejects an agent `waiting` write with the existing 400, exactly as today. The API gate (evaluated per-org in POST /host/kanban via getEvaluatedFlags()) is the authoritative boundary. It is ALSO materialized host-side into AGT_KANBAN_WAITING_ENABLED (ENG-7591) so the kanban_move MCP tool only exposes `waiting` to agents once the host resolves the flag on - a host-grained UX hint, not the security boundary (the per-org API gate still decides). Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false`: agents cannot emit `waiting` until an operator
+    // flips it on for the org, after the migration + webapp column + reaper backstop
+    // are deployed. Turning it ON grants a new capability, so it is not sensitive in
+    // the "relaxing a control" sense, but it MUST stay off until the deploy order is met.
+    defaultValue: false,
+    // Host-side materialization vehicle (ENG-7591): the manager writes this into the
+    // agent's spawn env from the resolved flag so the stdio MCP server (which cannot
+    // call the flag evaluator) can gate the kanban_move `waiting` option. Also the
+    // highest-precedence operator override, per ADR-0022.
+    envVar: "AGT_KANBAN_WAITING_ENABLED"
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -8266,7 +8288,7 @@ function restartEgressSidecar(codeName) {
   }
 }
 function buildDockerRunCommand(args) {
-  const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers } = args;
+  const { codeName, agentId, wrapperPath, projectDir, homeDir, runId, passApiKey, passOpenRouter, egress, forwardSlackReplyBinding, forwardBlockTurnEndAllMarkers, forwardKanbanWaiting } = args;
   const q = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
   const agentDir = join2(homeDir, ".augmented", codeName);
   const agentIdDir = join2(homeDir, ".augmented", agentId);
@@ -8301,6 +8323,7 @@ function buildDockerRunCommand(args) {
   envArgs.push(`-e AGT_IN_CONTAINER=true`);
   if (forwardSlackReplyBinding) envArgs.push("-e AGT_SLACK_REPLY_BINDING");
   if (forwardBlockTurnEndAllMarkers) envArgs.push("-e AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED");
+  if (forwardKanbanWaiting) envArgs.push("-e AGT_KANBAN_WAITING_ENABLED");
   const egressImage = process.env.AGT_EGRESS_IMAGE || "agt-squid:latest";
   const internalNet = `agt-net-${codeName}`;
   const squidName = `agt-squid-${codeName}`;
@@ -8648,6 +8671,9 @@ function spawnSession(config, session) {
     if (config.blockTurnEndAllMarkers && !process.env["AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED"]) {
       tmuxSessionEnvArgs.push("-e", "AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED=true");
     }
+    if (config.kanbanWaitingEnabled && !process.env["AGT_KANBAN_WAITING_ENABLED"]) {
+      tmuxSessionEnvArgs.push("-e", "AGT_KANBAN_WAITING_ENABLED=true");
+    }
     const sessionHomeDir = process.env.HOME?.trim() || homedir2();
     let egress;
     if (egressMode(codeName) === "allowlist") {
@@ -8671,7 +8697,11 @@ function spawnSession(config, session) {
       // ENG-6476: forward the reply-routing flag env if it will be present in the
       // session env (operator-set OR materialized from the flag above).
       forwardSlackReplyBinding: !!process.env["AGT_SLACK_REPLY_BINDING"] || !!config.slackReplyBindingMode && config.slackReplyBindingMode !== "shadow",
-      forwardBlockTurnEndAllMarkers: !!process.env["AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED"] || !!config.blockTurnEndAllMarkers
+      forwardBlockTurnEndAllMarkers: !!process.env["AGT_BLOCK_TURN_END_ALL_MARKERS_ENABLED"] || !!config.blockTurnEndAllMarkers,
+      // feature-gate-allow: registry-flag envVar operator-override precedence, not a new gate
+      // ENG-7493 (ADR-0044): forward AGT_KANBAN_WAITING_ENABLED if it will be in
+      // the session env (operator-set OR materialized from the flag above).
+      forwardKanbanWaiting: !!process.env["AGT_KANBAN_WAITING_ENABLED"] || !!config.kanbanWaitingEnabled
       // feature-gate-allow: registry-flag envVar operator-override precedence, not a new gate
     }) : JSON.stringify(wrapperPath);
     const tmuxEnv = {
@@ -9355,4 +9385,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-C4QMCOAN.js.map
+//# sourceMappingURL=chunk-TZKHPDOH.js.map