@integrity-labs/agt-cli 0.28.384 → 0.28.386

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-IXN2AFOX.js";
+} from "../chunk-O37EMHVE.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -70,7 +70,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-MQHDPJZD.js";
+} from "../chunk-LAO2CUZU.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.384" : "dev";
+var cliVersion = true ? "0.28.386" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.384" : "dev";
+var cliVersion2 = true ? "0.28.386" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-MQHDPJZD.js → chunk-LAO2CUZU.js}

@@ -8240,6 +8240,19 @@ var FLAG_REGISTRY = [
     // with no pre-flags env gate to migrate (ADR-0022 / check-new-env-gates.sh).
     defaultValue: "off"
   },
+  {
+    key: "mcp-quarantine-mode",
+    description: "MCP bind-failure auto-quarantine (ENG-7916): off = disabled, shadow = log only (would-quarantine without acting), enforce = mark integration status=unhealthy after DEFAULT_BIND_FAILURE_QUARANTINE_THRESHOLD consecutive missing|unreachable session-tool-bind verdicts. Unhealthy integrations are excluded from .mcp.json by the existing ENG-5292 writer, breaking the storm \u2192 restart \u2192 probe \u2192 storm loop for permanently-failing MCPs. Declared safe value is shadow (observe-only, non-destructive, stays diagnosable). A flag-DB read error degrades here. Flip to enforce only after shadow metrics confirm the threshold is tuned correctly.",
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // shadow = observe-only safe default. See comment block above.
+    defaultValue: "shadow",
+    // Enforcement-mode control: like the sibling off/shadow/enforce flags
+    // (channel-quarantine-mode, composio-hitl-mode) it's masked on public
+    // surfaces and mutations require explicit confirmation (CodeRabbit PR #3576).
+    sensitive: true
+    // No envVar - net-new API-side control with no pre-flags env gate to migrate (ADR-0022).
+  },
   {
     key: "channel-quarantine-mode",
     description: "Optional-channel quarantine (ENG-5932): off = disabled, shadow = log matches only, enforce = quarantine.",
@@ -11907,8 +11920,9 @@ function resetRestartCount(codeName) {
   const session = sessions2.get(codeName);
   if (session) session.restartCount = 0;
 }
-function collectDiagnostics(codeNames) {
+function collectDiagnostics(codeNames, quarantineEntriesFor) {
   return codeNames.map((codeName) => {
+    const quarantinedChannels = quarantineEntriesFor?.(codeName) ?? [];
     const oc = getOpencodeSessionState(codeName);
     if (oc) {
       const serveAlive = isOpencodeSessionHealthy(codeName);
@@ -11925,7 +11939,8 @@ function collectDiagnostics(codeNames) {
         screenCapture: null,
         launchArgs: null,
         channelStatus: null,
-        isolated: isolationMode(codeName) === "docker"
+        isolated: isolationMode(codeName) === "docker",
+        quarantinedChannels
       };
     }
     const session = sessions2.get(codeName);
@@ -11986,7 +12001,8 @@ function collectDiagnostics(codeNames) {
       // limit size
       launchArgs,
       channelStatus,
-      isolated: isolationMode(codeName) === "docker"
+      isolated: isolationMode(codeName) === "docker",
+      quarantinedChannels
     };
   });
 }
@@ -12159,4 +12175,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-MQHDPJZD.js.map
+//# sourceMappingURL=chunk-LAO2CUZU.js.map