@integrity-labs/agt-cli 0.28.419 → 0.28.421

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-W63FDJBY.js";
+} from "../chunk-HVVEMQWZ.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -70,7 +70,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-IKQHNN7I.js";
+} from "../chunk-B4NX2T2H.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.419" : "dev";
+var cliVersion = true ? "0.28.421" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.419" : "dev";
+var cliVersion2 = true ? "0.28.421" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-IKQHNN7I.js → chunk-B4NX2T2H.js}

@@ -2968,19 +2968,27 @@ function resolveAvatarEnvUrl(raw) {
 
 // ../../packages/core/dist/provisioning/ec2-capacity.js
 var CAPACITY_TABLE = {
-  // t3 family — burst-credit instances. Lookup is per-vCPU plus
-  // headroom for the manager process itself.
+  // t3 family — burstable (CPU credits). Fine for these mostly-I/O-bound
+  // agents; the monitor + resize path cover the rare sustained-load case.
   "t3.micro": 1,
-  //   1 vCPU /  1 GB — barely fits one agent
-  "t3.small": 1,
-  //   2 vCPU /  2 GB — still tight
-  "t3.medium": 2,
-  //  2 vCPU /  4 GB — the sweet spot for a 2-agent host
-  "t3.large": 4,
-  //   2 vCPU /  8 GB — bursts cover the headroom
-  "t3.xlarge": 8,
+  //    2 vCPU /  1 GB — floor
+  "t3.small": 2,
+  //    2 vCPU /  2 GB
+  "t3.medium": 4,
+  //   2 vCPU /  4 GB
+  "t3.large": 8,
+  //    2 vCPU /  8 GB
+  "t3.xlarge": 16,
   //  4 vCPU / 16 GB
-  "t3.2xlarge": 16
+  "t3.2xlarge": 32,
+  // 8 vCPU / 32 GB
+  // m6i family — fixed performance (no burst-credit cliff), the preferred
+  // family for dense / sustained multi-agent hosts (e.g. Enterprise default).
+  "m6i.large": 8,
+  //    2 vCPU /  8 GB
+  "m6i.xlarge": 16,
+  //  4 vCPU / 16 GB
+  "m6i.2xlarge": 32
   // 8 vCPU / 32 GB
 };
 var KNOWN_INSTANCE_TYPES = Object.keys(CAPACITY_TABLE);
@@ -4126,6 +4134,13 @@ var BROKER_TOOLKIT_PROVIDERS = {
 function isBrokerToolkit(definitionId) {
   return definitionId in BROKER_TOOLKIT_PROVIDERS;
 }
+var APPROVAL_BROKER_TOOLKITS = /* @__PURE__ */ new Set(["xero-broker"]);
+function isApprovalBrokerToolkit(definitionId) {
+  return APPROVAL_BROKER_TOOLKITS.has(definitionId);
+}
+function isHostUnprobeableBroker(definitionId) {
+  return isBrokerToolkit(definitionId) || isApprovalBrokerToolkit(definitionId);
+}
 var HTTP_PROBE_PROVIDERS = /* @__PURE__ */ new Set([
   "linear",
   "google-workspace",
@@ -4176,12 +4191,12 @@ function mcpOverrideFrom(ct) {
 }
 function resolveConnectivityProbe(input) {
   const { definitionId, sourceType, authType } = input;
-  if (isBrokerToolkit(definitionId) && (authType === "managed" || sourceType === "managed")) {
+  if (isHostUnprobeableBroker(definitionId) && (authType === "managed" || sourceType === "managed")) {
     return {
       kind: "unsupported",
       sourceType: "managed",
       readOnly: true,
-      label: `${definitionId}: broker-managed \u2014 credentials minted per task; no host probe (central enrolment check only)`,
+      label: isApprovalBrokerToolkit(definitionId) ? `${definitionId}: approval broker \u2014 no stored credential; writes authenticate server-side (no host probe)` : `${definitionId}: broker-managed \u2014 credentials minted per task; no host probe (central enrolment check only)`,
       centralReachable: false
     };
   }
@@ -8034,6 +8049,27 @@ var FLAG_REGISTRY = [
     // change (ADR-0022 sensitive-flag confirm).
     sensitive: true
   },
+  {
+    key: "slack-scheduled-channel-guard",
+    description: 'Guard on slack.reply that refuses to let an active scheduled-task destination silently move a reply to a DIFFERENT channel than the agent named (ENG-8137). CS-1505 gave an explicit inbound_id priority over the task destination but left the no-inbound_id case treating "no inbound reference" as "no destination specified" - and `channel` is a REQUIRED argument, so every call names one. The symptom: a question asked in one channel answered in another, and a reply meant as a DM landing in a public channel. Fires only when the marker carries an EXPLICIT target, the named channel differs from it, and neither an inbound_id, an enforce binding, nor an ENG-7542 channel correction is available to arbitrate. off = never runs (today behaviour: silent retarget). shadow = count + log the would-block but STILL route as today, so the false-positive rate is measurable before anyone refuses a send. enforce = block the reply and tell the agent to retry. Read live from the heartbeat flags-cache (or the env override). NOTE: enforce is currently CLAMPED to shadow host-side and setting it here will not take effect - it stays blocked until ENG-8142 teaches the Stop hook to tell a refused reply from a delivered one, because until then a blocked send fails silently (no recovery, no re-prompt, nothing in the channel). Lifting the clamp is a code change, not a flag flip.',
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // Ships in SHADOW, not off: the counter is the whole point - the fleet metric
+    // is currently blind to this misroute, which is why it went unnoticed. shadow
+    // is a free local log line + counter (no model spend, no behaviour change), so
+    // it measures the fire rate immediately. enforce turns a misroute into a
+    // REFUSED send, which trades a confidentiality risk for an availability one -
+    // that is the audited per-org flip, taken after reading the shadow numbers and
+    // after ENG-8143 shrinks the stale-marker window that dominates the false
+    // positives.
+    defaultValue: "shadow",
+    // Enum override AGT_SLACK_SCHEDULED_CHANNEL_GUARD_MODE (off|shadow|enforce),
+    // resolved by resolveSlackScheduledChannelGuardMode in the channel-server bundle.
+    envVar: "AGT_SLACK_SCHEDULED_CHANNEL_GUARD_MODE",
+    // enforce REFUSES a send the agent asked to make - a visible availability
+    // change, so flipping toward it is deliberate (ADR-0022 sensitive-flag confirm).
+    sensitive: true
+  },
   {
     key: "slack-hot-thread-guard",
     description: "Server-side hot-thread guard on the slack.reply surface (ENG-7462). Prevents an agent posting a NEW top-level Slack message when it meant to reply inside the thread it is already working in - a prompt/memory rule proved insufficient (the agent had the rule and still slipped). When a reply would otherwise post to channel ROOT (no thread_ts / message_ts / inbound_id, no active kanban card) and the agent has a recent active thread in that channel (its last bot-posted thread, from the persisted trackedThreads cache, within a freshness window), the reply is redirected into that thread. proactive:true no longer implies channel root; posting at root becomes a deliberate action (the to_channel_root flag, or the thread_ts:null sentinel). off = guard never runs, replies with no coords root exactly as today (ships dark). shadow = compute + log the would-redirect but STILL post to root (measure the fire rate before acting). enforce = apply the redirect (a soft-block: redirect + inform, never a hard rejection). Read live from the heartbeat flags-cache (or the env override); enforce is a deliberate per-org flip after a shadow soak.",
@@ -12691,4 +12727,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-IKQHNN7I.js.map
+//# sourceMappingURL=chunk-B4NX2T2H.js.map