@integrity-labs/agt-cli 0.28.326 → 0.28.328

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-3PT6JAFU.js";
+} from "../chunk-XRO2EOEM.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -68,7 +68,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-BSTFCC62.js";
+} from "../chunk-GAWNDPGM.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4827,7 +4827,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.326" : "dev";
+var cliVersion = true ? "0.28.328" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5931,7 +5931,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.326" : "dev";
+var cliVersion2 = true ? "0.28.328" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-BSTFCC62.js → chunk-GAWNDPGM.js}

@@ -7175,7 +7175,8 @@ var WAITING_KINDS = [
   "pr-merged",
   "human",
   "external",
-  "other"
+  "other",
+  "approval"
 ];
 var WAITING_KIND_SET = new Set(WAITING_KINDS);
 
@@ -7637,6 +7638,16 @@ var FLAG_REGISTRY = [
     defaultValue: false,
     envVar: "AGT_LIVE_STREAM_PRODUCER_ENABLED"
   },
+  {
+    key: "auto-provision-agt-live",
+    description: "Auto-provision the Augmented Live integration (free tier, watermarked) into every NEW organization as an org-scoped install (ENG-7819). Consumed in TWO places: the seed_default_live_integration AFTER INSERT trigger on organizations reads the EXPLICIT feature_flags row (a plpgsql trigger cannot see this compiled default, so dark = no row = trigger no-ops; flipping the flag on this page writes the row the trigger reads - GLOBAL value only, per-org overrides are not consulted by the trigger), and the POST /organizations route evaluates it normally to send the owner provisioning notice. Restricted-posture orgs are skipped; opt-out (remove/block) is permanent - no reconciler. Boolean gate; ships dark. Pre-flip gates: docs/operator/default-integrations-admission.md.",
+    flagType: "boolean",
+    defaultValue: false,
+    // Grants every new open org a public-publishing capability by default;
+    // flipping it on is fleet-shaping and worth an explicit confirm (ADR-0022
+    // §4, same treatment as augmented-support-auto-provision).
+    sensitive: true
+  },
   {
     key: "admin-live-pane",
     description: "Live agent pane streaming on the platform-admin surfaces (ENG-6588): the agent Diagnostics tab and the /admin embed poll GET /admin/agents/:id/pane (tmux capture-pane over SSM) ~every 3s for a bounded window. Boolean gate; ships dark; when OFF the route returns feature_disabled and the UI falls back to the 30s static diagnostics snapshot. It is the no-deploy kill switch bounding the shared-SSM blast radius (SSM SendCommand throttles account-wide, shared with incident-response runbooks).",
@@ -10040,4 +10051,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-BSTFCC62.js.map
+//# sourceMappingURL=chunk-GAWNDPGM.js.map