@integrity-labs/agt-cli 0.28.384 → 0.28.386

package/dist/mcp/direct-chat-channel.js

@@ -34875,6 +34875,19 @@ var FLAG_REGISTRY = [
     // with no pre-flags env gate to migrate (ADR-0022 / check-new-env-gates.sh).
     defaultValue: "off"
   },
+  {
+    key: "mcp-quarantine-mode",
+    description: "MCP bind-failure auto-quarantine (ENG-7916): off = disabled, shadow = log only (would-quarantine without acting), enforce = mark integration status=unhealthy after DEFAULT_BIND_FAILURE_QUARANTINE_THRESHOLD consecutive missing|unreachable session-tool-bind verdicts. Unhealthy integrations are excluded from .mcp.json by the existing ENG-5292 writer, breaking the storm \u2192 restart \u2192 probe \u2192 storm loop for permanently-failing MCPs. Declared safe value is shadow (observe-only, non-destructive, stays diagnosable). A flag-DB read error degrades here. Flip to enforce only after shadow metrics confirm the threshold is tuned correctly.",
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // shadow = observe-only safe default. See comment block above.
+    defaultValue: "shadow",
+    // Enforcement-mode control: like the sibling off/shadow/enforce flags
+    // (channel-quarantine-mode, composio-hitl-mode) it's masked on public
+    // surfaces and mutations require explicit confirmation (CodeRabbit PR #3576).
+    sensitive: true
+    // No envVar - net-new API-side control with no pre-flags env gate to migrate (ADR-0022).
+  },
   {
     key: "channel-quarantine-mode",
     description: "Optional-channel quarantine (ENG-5932): off = disabled, shadow = log matches only, enforce = quarantine.",

package/dist/mcp/origami.js

@@ -40539,6 +40539,19 @@ var FLAG_REGISTRY = [
     // with no pre-flags env gate to migrate (ADR-0022 / check-new-env-gates.sh).
     defaultValue: "off"
   },
+  {
+    key: "mcp-quarantine-mode",
+    description: "MCP bind-failure auto-quarantine (ENG-7916): off = disabled, shadow = log only (would-quarantine without acting), enforce = mark integration status=unhealthy after DEFAULT_BIND_FAILURE_QUARANTINE_THRESHOLD consecutive missing|unreachable session-tool-bind verdicts. Unhealthy integrations are excluded from .mcp.json by the existing ENG-5292 writer, breaking the storm \u2192 restart \u2192 probe \u2192 storm loop for permanently-failing MCPs. Declared safe value is shadow (observe-only, non-destructive, stays diagnosable). A flag-DB read error degrades here. Flip to enforce only after shadow metrics confirm the threshold is tuned correctly.",
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // shadow = observe-only safe default. See comment block above.
+    defaultValue: "shadow",
+    // Enforcement-mode control: like the sibling off/shadow/enforce flags
+    // (channel-quarantine-mode, composio-hitl-mode) it's masked on public
+    // surfaces and mutations require explicit confirmation (CodeRabbit PR #3576).
+    sensitive: true
+    // No envVar - net-new API-side control with no pre-flags env gate to migrate (ADR-0022).
+  },
   {
     key: "channel-quarantine-mode",
     description: "Optional-channel quarantine (ENG-5932): off = disabled, shadow = log matches only, enforce = quarantine.",

package/dist/mcp/slack-channel.js

@@ -34458,6 +34458,19 @@ var FLAG_REGISTRY = [
     // with no pre-flags env gate to migrate (ADR-0022 / check-new-env-gates.sh).
     defaultValue: "off"
   },
+  {
+    key: "mcp-quarantine-mode",
+    description: "MCP bind-failure auto-quarantine (ENG-7916): off = disabled, shadow = log only (would-quarantine without acting), enforce = mark integration status=unhealthy after DEFAULT_BIND_FAILURE_QUARANTINE_THRESHOLD consecutive missing|unreachable session-tool-bind verdicts. Unhealthy integrations are excluded from .mcp.json by the existing ENG-5292 writer, breaking the storm \u2192 restart \u2192 probe \u2192 storm loop for permanently-failing MCPs. Declared safe value is shadow (observe-only, non-destructive, stays diagnosable). A flag-DB read error degrades here. Flip to enforce only after shadow metrics confirm the threshold is tuned correctly.",
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // shadow = observe-only safe default. See comment block above.
+    defaultValue: "shadow",
+    // Enforcement-mode control: like the sibling off/shadow/enforce flags
+    // (channel-quarantine-mode, composio-hitl-mode) it's masked on public
+    // surfaces and mutations require explicit confirmation (CodeRabbit PR #3576).
+    sensitive: true
+    // No envVar - net-new API-side control with no pre-flags env gate to migrate (ADR-0022).
+  },
   {
     key: "channel-quarantine-mode",
     description: "Optional-channel quarantine (ENG-5932): off = disabled, shadow = log matches only, enforce = quarantine.",

package/dist/mcp/telegram-channel.js

@@ -34808,6 +34808,19 @@ var FLAG_REGISTRY = [
     // with no pre-flags env gate to migrate (ADR-0022 / check-new-env-gates.sh).
     defaultValue: "off"
   },
+  {
+    key: "mcp-quarantine-mode",
+    description: "MCP bind-failure auto-quarantine (ENG-7916): off = disabled, shadow = log only (would-quarantine without acting), enforce = mark integration status=unhealthy after DEFAULT_BIND_FAILURE_QUARANTINE_THRESHOLD consecutive missing|unreachable session-tool-bind verdicts. Unhealthy integrations are excluded from .mcp.json by the existing ENG-5292 writer, breaking the storm \u2192 restart \u2192 probe \u2192 storm loop for permanently-failing MCPs. Declared safe value is shadow (observe-only, non-destructive, stays diagnosable). A flag-DB read error degrades here. Flip to enforce only after shadow metrics confirm the threshold is tuned correctly.",
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // shadow = observe-only safe default. See comment block above.
+    defaultValue: "shadow",
+    // Enforcement-mode control: like the sibling off/shadow/enforce flags
+    // (channel-quarantine-mode, composio-hitl-mode) it's masked on public
+    // surfaces and mutations require explicit confirmation (CodeRabbit PR #3576).
+    sensitive: true
+    // No envVar - net-new API-side control with no pre-flags env gate to migrate (ADR-0022).
+  },
   {
     key: "channel-quarantine-mode",
     description: "Optional-channel quarantine (ENG-5932): off = disabled, shadow = log matches only, enforce = quarantine.",

package/dist/{persistent-session-MDQVHXKX.js → persistent-session-KQHWYEQF.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-MQHDPJZD.js";
+} from "./chunk-LAO2CUZU.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-MDQVHXKX.js.map
+//# sourceMappingURL=persistent-session-KQHWYEQF.js.map

package/dist/{responsiveness-probe-CG7XM7GL.js → responsiveness-probe-5X6WVKUZ.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-MQHDPJZD.js";
+} from "./chunk-LAO2CUZU.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -437,4 +437,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-CG7XM7GL.js.map
+//# sourceMappingURL=responsiveness-probe-5X6WVKUZ.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.384",
+  "version": "0.28.386",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {