@integrity-labs/agt-cli 0.28.407 → 0.28.409

package/dist/{chunk-RD7MIR3G.js → chunk-YLLK4G3B.js}

@@ -8620,6 +8620,15 @@ var FLAG_REGISTRY = [
     // fleet onto the rail that broke prod twice. Net-new gate, so registry-only (ADR-0022);
     // consumed by the manager's own logic, not an in-container MCP, so no env materialization.
     defaultValue: false
+  },
+  {
+    key: "scheduled-task-confirmation-card",
+    description: `Post the \u{1F44D}/\u{1F44E} "Task complete?" kanban confirmation card for completed scheduled_task runs (ENG-4576 / ENG-6048). OFF (default) kills these cards fleet-wide: ENG-8072 found they mis-thread onto the run's captured slack_delivery, which in the persistent-session model is frequently a conversational reply rather than the task's own output - so a routine cron's confirmation card lands in an unrelated human thread (e.g. a half-hourly reconciliation card posted into a "you're back online" DM), and a clean cron emits a human \u{1F44D}/\u{1F44E} prompt on every tick regardless. The card was net-negative, so it is disabled by default. Turn it ON per org to restore scheduled-task ratings for a customer who wants them (e.g. a daily digest delivered to a channel). Evaluated per-org in the API (POST /host/runs/finish + the manager rating-prompt route) via getEvaluatedFlags(); the decision is passed into postScheduledTaskKanbanConfirmation. API-only gate - no host env materialization. Ships dark (cards off).`,
+    flagType: "boolean",
+    // Declared safe value is `false`: cards suppressed. `false` is also the fail-closed
+    // direction - a flag-DB read error must not resurrect the mis-threading/noise the kill
+    // fixes. Net-new gate, registry-only (ADR-0022); API-evaluated, no env materialization.
+    defaultValue: false
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -9810,11 +9819,15 @@ function readConfig(codeName) {
   const p2 = configPath(codeName);
   if (!existsSync2(p2))
     return {};
+  let parsed;
   try {
-    return JSON.parse(readFileSync3(p2, "utf8"));
+    parsed = JSON.parse(readFileSync3(p2, "utf8"));
   } catch {
     return {};
   }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+    return {};
+  return parsed;
 }
 function writeConfig(codeName, config) {
   const p2 = configPath(codeName);
@@ -10020,6 +10033,22 @@ var opencodeAdapter = {
       writeConfig(codeName, cfg);
     }
   },
+  /**
+   * ENG-7994: opencode declares its servers under `mcp` in `opencode.json`, not
+   * under claude-code's `mcpServers`. The manager's stale-MCP prunes used to
+   * parse `mcpServers` off whatever file `getMcpPath()` returned, so for
+   * opencode they iterated an empty set and never removed anything: a revoked
+   * managed toolkit (prod agent nora's composio_googledocs, 2026-07-22) kept its
+   * broken remote MCP entry and wedged her turns until it was deleted by hand.
+   * `readConfig` already fails soft on a missing/unparseable file, so a
+   * not-yet-provisioned agent reports no servers rather than throwing.
+   */
+  readMcpServers(codeName) {
+    const mcp = readConfig(codeName)["mcp"];
+    if (!mcp || typeof mcp !== "object" || Array.isArray(mcp))
+      return {};
+    return mcp;
+  },
   hasChannelCredentials(codeName, channelId) {
     const mcp = readConfig(codeName)["mcp"];
     return Boolean(mcp && mcp[channelId]);
@@ -12473,4 +12502,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-RD7MIR3G.js.map
+//# sourceMappingURL=chunk-YLLK4G3B.js.map