@integrity-labs/agt-cli 0.28.292 → 0.28.294

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-PTJHDSJU.js";
+} from "../chunk-5F23HET3.js";
 import {
   CHANNEL_REGISTRY,
   DEFAULT_FRAMEWORK,
@@ -67,7 +67,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-BNQPLUUB.js";
+} from "../chunk-IGADZDYT.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4826,7 +4826,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.292" : "dev";
+var cliVersion = true ? "0.28.294" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5843,7 +5843,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.292" : "dev";
+var cliVersion2 = true ? "0.28.294" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-PTJHDSJU.js → chunk-5F23HET3.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-BNQPLUUB.js";
+} from "./chunk-IGADZDYT.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5882,7 +5882,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.292" : "dev";
+var agtCliVersion = true ? "0.28.294" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8181,4 +8181,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-PTJHDSJU.js.map
+//# sourceMappingURL=chunk-5F23HET3.js.map

package/dist/{chunk-BNQPLUUB.js → chunk-IGADZDYT.js}

@@ -7066,6 +7066,20 @@ var FLAG_REGISTRY = [
     // sensitive.
     public: true
   },
+  {
+    key: "integration-cap-enforcement",
+    description: "Enforce the per-agent integration cap (ENG-7180 / ENG-7639). When ON for an org, adding an integration to an agent already at its plan cap (plans.max_integrations_per_agent, default 10) is refused with a 409 across all three attach paths (POST /integrations, the OAuth callback, and the GitHub App manifest-init), and GET /integrations/agent-cap reports at_limit so the webapp Add control blocks. When OFF (default) the cap is not enforced - an agent can add integrations without limit and agent-cap reports at_limit=false. Evaluated per-org API-side via getEvaluatedFlags; the authoritative BEFORE INSERT DB trigger was removed in ENG-7639, so the flag-gated app-level pre-flights are the sole enforcement point. Boolean gate; ships OFF (enforcement disabled) - flip ON per org from the admin Feature Flags page to re-arm the cap.",
+    flagType: "boolean",
+    // Declared safe value is `false` = NOT enforced. This is both the ENG-7639
+    // intent (disable the cap for now) and the fail-safe direction for the route
+    // read: a flag-DB error degrades to "don't enforce", so a flags outage never
+    // blocks a customer's integration add. Flip on per org to re-arm enforcement.
+    defaultValue: false,
+    // Enforcement gate: leaving it OFF relaxes a plan-capacity control and turning
+    // it ON blocks customer adds - either way it is a deliberate, audited decision,
+    // so mutations require explicit confirmation (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "augmented-live-stream-producer",
     description: "Augmented Live live-preview streaming producer (ENG-7210). The receiver (codec, artifact-draft channel, stream route, console Live Preview tab) shipped under ENG-6234 but never engages because nothing writes the working file the manager scanner watches. When ON for an org, a host-side PostToolUse hook mirrors agt-live.publish/editing content to ~/.augmented/{codeName}/artifacts/<slug>/index.html, so the scanner mints a draft and streams a keyframe to the console Live Preview tab. Additive, best-effort. Boolean gate; ships dark. Materialized to the host flags-cache; the bash hook reads it (operator/canary override AGT_LIVE_STREAM_PRODUCER_ENABLED).",
@@ -9416,4 +9430,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-BNQPLUUB.js.map
+//# sourceMappingURL=chunk-IGADZDYT.js.map