@integrity-labs/agt-cli 0.28.443 → 0.28.445

package/dist/mcp/direct-chat-channel.js

@@ -34848,6 +34848,18 @@ var FLAG_REGISTRY = [
     // utilisation, so mutations require explicit confirmation.
     sensitive: true
   },
+  {
+    key: "account-enforcement-auto-billing",
+    description: 'Auto-trip the ENG-7909 account-enforcement ladder on billing delinquency (the deferred auto-wire). When ON for an org, a Stripe subscription entering `past_due` (payment failed) creates an org-scoped kill_switches row at mode=warn, source=auto (agents keep running; the ladder appends the "there is an issue with your account" support notice); after the grace window (BillingEnforcementSweep, default 7d still past_due) it escalates warn\u2192mute (inbound intercepted). It NEVER auto-halts - halt stays a manual break-glass. Recovery (status back to active/trialing) clears the auto switch; a MANUAL switch is never touched. Off (default) = no auto switch is ever written, so past_due only tightens plan-cap entitlements as today. The mechanism (mode ladder, manual selector) shipped in Slices 1-3; this is the automatic trigger, so it ships dark - flip on per org from the admin Feature Flags page. Evaluated API-side only (webhook + cron); no host-side envVar (the manager materializes the resulting kill_switch, not this flag).',
+    flagType: "boolean",
+    // Declared safe value is `false` = no auto enforcement. Fail-safe direction: a
+    // flag-DB read error must never start muting a customer's agents on its own.
+    defaultValue: false,
+    // Enforcement gate: turning it ON lets a billing event stop a customer's
+    // inbound (mute) without an operator in the loop, so mutations require
+    // explicit confirmation (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "auto-pause",
     description: "Auto-pause agents on sustained hourly-cost breach (ENG-5561). Boolean gate; ships dark.",
@@ -35249,6 +35261,13 @@ var FLAG_REGISTRY = [
     defaultValue: true,
     envVar: "AGT_CLAUDE_MD_SKILLS_INDEX_ENABLED"
   },
+  {
+    key: "claude-md-integrations-section",
+    description: "Manager injects the \"## Integrations\" bullet list (one line per installed integration, name + CLI binary + description) into the agent's project CLAUDE.md. Sibling of claude-md-skills-index and redundant for the same reason: every integration already reaches the model through a surface Claude Code presents natively - an `integration-*` skill for those that ship a skill bundle, and a dynamically-discovered MCP tool (`mcp__augmented__*`, fanned out from integration_definitions.metadata.tools via /host/mcp/tools/list) for those that do not. The list measured 2,302-3,466 chars per agent on agt-aws-1 (2026-07-27), against Claude Code's 40,000-char CLAUDE.md ceiling. Defaults OFF (ENG-8174), which also codifies the observed steady state: the section survives only ~3 minutes after each integration sync before the next provisioning pass strips it (ENG-8170), so the fleet has effectively been running without it - flip ON per org only to restore the list.",
+    flagType: "boolean",
+    defaultValue: false,
+    envVar: "AGT_CLAUDE_MD_INTEGRATIONS_SECTION_ENABLED"
+  },
   {
     key: "wedge-transient-notice",
     description: 'When a wedge-respawn was preceded by a transient LLM-API error (529/429/503/500 that exhausted its retries and wedged the turn), the manager writes the ENG-6058 give-up signal tagged reason=transient_overload so the channel sweeps post a friendly "I hit a brief overload \u2014 please resend" notice instead of leaving the user in silence (ENG-7360, extends ENG-6861 to the retry-exhaustion + wedge path). Boolean gate; ships dark \u2014 channel-visible copy soaks per host before going wide.',

package/dist/mcp/origami.js

@@ -40193,6 +40193,18 @@ var FLAG_REGISTRY = [
     // utilisation, so mutations require explicit confirmation.
     sensitive: true
   },
+  {
+    key: "account-enforcement-auto-billing",
+    description: 'Auto-trip the ENG-7909 account-enforcement ladder on billing delinquency (the deferred auto-wire). When ON for an org, a Stripe subscription entering `past_due` (payment failed) creates an org-scoped kill_switches row at mode=warn, source=auto (agents keep running; the ladder appends the "there is an issue with your account" support notice); after the grace window (BillingEnforcementSweep, default 7d still past_due) it escalates warn\u2192mute (inbound intercepted). It NEVER auto-halts - halt stays a manual break-glass. Recovery (status back to active/trialing) clears the auto switch; a MANUAL switch is never touched. Off (default) = no auto switch is ever written, so past_due only tightens plan-cap entitlements as today. The mechanism (mode ladder, manual selector) shipped in Slices 1-3; this is the automatic trigger, so it ships dark - flip on per org from the admin Feature Flags page. Evaluated API-side only (webhook + cron); no host-side envVar (the manager materializes the resulting kill_switch, not this flag).',
+    flagType: "boolean",
+    // Declared safe value is `false` = no auto enforcement. Fail-safe direction: a
+    // flag-DB read error must never start muting a customer's agents on its own.
+    defaultValue: false,
+    // Enforcement gate: turning it ON lets a billing event stop a customer's
+    // inbound (mute) without an operator in the loop, so mutations require
+    // explicit confirmation (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "auto-pause",
     description: "Auto-pause agents on sustained hourly-cost breach (ENG-5561). Boolean gate; ships dark.",
@@ -40594,6 +40606,13 @@ var FLAG_REGISTRY = [
     defaultValue: true,
     envVar: "AGT_CLAUDE_MD_SKILLS_INDEX_ENABLED"
   },
+  {
+    key: "claude-md-integrations-section",
+    description: "Manager injects the \"## Integrations\" bullet list (one line per installed integration, name + CLI binary + description) into the agent's project CLAUDE.md. Sibling of claude-md-skills-index and redundant for the same reason: every integration already reaches the model through a surface Claude Code presents natively - an `integration-*` skill for those that ship a skill bundle, and a dynamically-discovered MCP tool (`mcp__augmented__*`, fanned out from integration_definitions.metadata.tools via /host/mcp/tools/list) for those that do not. The list measured 2,302-3,466 chars per agent on agt-aws-1 (2026-07-27), against Claude Code's 40,000-char CLAUDE.md ceiling. Defaults OFF (ENG-8174), which also codifies the observed steady state: the section survives only ~3 minutes after each integration sync before the next provisioning pass strips it (ENG-8170), so the fleet has effectively been running without it - flip ON per org only to restore the list.",
+    flagType: "boolean",
+    defaultValue: false,
+    envVar: "AGT_CLAUDE_MD_INTEGRATIONS_SECTION_ENABLED"
+  },
   {
     key: "wedge-transient-notice",
     description: 'When a wedge-respawn was preceded by a transient LLM-API error (529/429/503/500 that exhausted its retries and wedged the turn), the manager writes the ENG-6058 give-up signal tagged reason=transient_overload so the channel sweeps post a friendly "I hit a brief overload \u2014 please resend" notice instead of leaving the user in silence (ENG-7360, extends ENG-6861 to the retry-exhaustion + wedge path). Boolean gate; ships dark \u2014 channel-visible copy soaks per host before going wide.',

package/dist/mcp/slack-channel.js

@@ -34182,6 +34182,18 @@ var FLAG_REGISTRY = [
     // utilisation, so mutations require explicit confirmation.
     sensitive: true
   },
+  {
+    key: "account-enforcement-auto-billing",
+    description: 'Auto-trip the ENG-7909 account-enforcement ladder on billing delinquency (the deferred auto-wire). When ON for an org, a Stripe subscription entering `past_due` (payment failed) creates an org-scoped kill_switches row at mode=warn, source=auto (agents keep running; the ladder appends the "there is an issue with your account" support notice); after the grace window (BillingEnforcementSweep, default 7d still past_due) it escalates warn\u2192mute (inbound intercepted). It NEVER auto-halts - halt stays a manual break-glass. Recovery (status back to active/trialing) clears the auto switch; a MANUAL switch is never touched. Off (default) = no auto switch is ever written, so past_due only tightens plan-cap entitlements as today. The mechanism (mode ladder, manual selector) shipped in Slices 1-3; this is the automatic trigger, so it ships dark - flip on per org from the admin Feature Flags page. Evaluated API-side only (webhook + cron); no host-side envVar (the manager materializes the resulting kill_switch, not this flag).',
+    flagType: "boolean",
+    // Declared safe value is `false` = no auto enforcement. Fail-safe direction: a
+    // flag-DB read error must never start muting a customer's agents on its own.
+    defaultValue: false,
+    // Enforcement gate: turning it ON lets a billing event stop a customer's
+    // inbound (mute) without an operator in the loop, so mutations require
+    // explicit confirmation (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "auto-pause",
     description: "Auto-pause agents on sustained hourly-cost breach (ENG-5561). Boolean gate; ships dark.",
@@ -34583,6 +34595,13 @@ var FLAG_REGISTRY = [
     defaultValue: true,
     envVar: "AGT_CLAUDE_MD_SKILLS_INDEX_ENABLED"
   },
+  {
+    key: "claude-md-integrations-section",
+    description: "Manager injects the \"## Integrations\" bullet list (one line per installed integration, name + CLI binary + description) into the agent's project CLAUDE.md. Sibling of claude-md-skills-index and redundant for the same reason: every integration already reaches the model through a surface Claude Code presents natively - an `integration-*` skill for those that ship a skill bundle, and a dynamically-discovered MCP tool (`mcp__augmented__*`, fanned out from integration_definitions.metadata.tools via /host/mcp/tools/list) for those that do not. The list measured 2,302-3,466 chars per agent on agt-aws-1 (2026-07-27), against Claude Code's 40,000-char CLAUDE.md ceiling. Defaults OFF (ENG-8174), which also codifies the observed steady state: the section survives only ~3 minutes after each integration sync before the next provisioning pass strips it (ENG-8170), so the fleet has effectively been running without it - flip ON per org only to restore the list.",
+    flagType: "boolean",
+    defaultValue: false,
+    envVar: "AGT_CLAUDE_MD_INTEGRATIONS_SECTION_ENABLED"
+  },
   {
     key: "wedge-transient-notice",
     description: 'When a wedge-respawn was preceded by a transient LLM-API error (529/429/503/500 that exhausted its retries and wedged the turn), the manager writes the ENG-6058 give-up signal tagged reason=transient_overload so the channel sweeps post a friendly "I hit a brief overload \u2014 please resend" notice instead of leaving the user in silence (ENG-7360, extends ENG-6861 to the retry-exhaustion + wedge path). Boolean gate; ships dark \u2014 channel-visible copy soaks per host before going wide.',
@@ -35459,6 +35478,15 @@ function shouldReplayMarker(i) {
   }
   return true;
 }
+function markerGcThresholdMs(i) {
+  if (i.discretionary) {
+    return i.discretionaryThresholdMs != null ? Math.min(i.thresholdMs, i.discretionaryThresholdMs) : i.thresholdMs;
+  }
+  if (i.replayEnabled && i.hasPayload && i.replayCount === 0) {
+    return Math.max(i.thresholdMs, i.hardCeilingMs);
+  }
+  return i.thresholdMs;
+}
 function isMarkerGenuinelyAged(receivedAt, nowMs, thresholdMs) {
   const t = Date.parse(receivedAt ?? "");
   return Number.isFinite(t) && t <= nowMs && nowMs - t >= thresholdMs;
@@ -40081,6 +40109,7 @@ function sweepSlackStaleMarkers(thresholdMs) {
     return;
   }
   const now = Date.now();
+  const replayEnabled = channelReplayEnabled();
   let cleared = 0;
   for (const filename of filenames) {
     if (!filename.endsWith(".json")) continue;
@@ -40102,7 +40131,15 @@ function sweepSlackStaleMarkers(thresholdMs) {
       continue;
     }
     const { channel, thread_ts, message_ts, received_at } = marker;
-    const effectiveThresholdMs = marker.discretionary ? Math.min(thresholdMs, DISCRETIONARY_MARKER_MS) : thresholdMs;
+    const effectiveThresholdMs = markerGcThresholdMs({
+      thresholdMs,
+      hardCeilingMs: STALE_MARKER_MS,
+      discretionaryThresholdMs: DISCRETIONARY_MARKER_MS,
+      discretionary: marker.discretionary,
+      hasPayload: Boolean(marker.payload),
+      replayCount: marker.replay_count ?? 0,
+      replayEnabled
+    });
     const structurallyBroken = !channel || !thread_ts || !message_ts;
     const timeStale = isPendingMarkerStale(received_at, now, effectiveThresholdMs);
     if (structurallyBroken || timeStale) {

package/dist/mcp/telegram-channel.js

@@ -34484,6 +34484,18 @@ var FLAG_REGISTRY = [
     // utilisation, so mutations require explicit confirmation.
     sensitive: true
   },
+  {
+    key: "account-enforcement-auto-billing",
+    description: 'Auto-trip the ENG-7909 account-enforcement ladder on billing delinquency (the deferred auto-wire). When ON for an org, a Stripe subscription entering `past_due` (payment failed) creates an org-scoped kill_switches row at mode=warn, source=auto (agents keep running; the ladder appends the "there is an issue with your account" support notice); after the grace window (BillingEnforcementSweep, default 7d still past_due) it escalates warn\u2192mute (inbound intercepted). It NEVER auto-halts - halt stays a manual break-glass. Recovery (status back to active/trialing) clears the auto switch; a MANUAL switch is never touched. Off (default) = no auto switch is ever written, so past_due only tightens plan-cap entitlements as today. The mechanism (mode ladder, manual selector) shipped in Slices 1-3; this is the automatic trigger, so it ships dark - flip on per org from the admin Feature Flags page. Evaluated API-side only (webhook + cron); no host-side envVar (the manager materializes the resulting kill_switch, not this flag).',
+    flagType: "boolean",
+    // Declared safe value is `false` = no auto enforcement. Fail-safe direction: a
+    // flag-DB read error must never start muting a customer's agents on its own.
+    defaultValue: false,
+    // Enforcement gate: turning it ON lets a billing event stop a customer's
+    // inbound (mute) without an operator in the loop, so mutations require
+    // explicit confirmation (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "auto-pause",
     description: "Auto-pause agents on sustained hourly-cost breach (ENG-5561). Boolean gate; ships dark.",
@@ -34885,6 +34897,13 @@ var FLAG_REGISTRY = [
     defaultValue: true,
     envVar: "AGT_CLAUDE_MD_SKILLS_INDEX_ENABLED"
   },
+  {
+    key: "claude-md-integrations-section",
+    description: "Manager injects the \"## Integrations\" bullet list (one line per installed integration, name + CLI binary + description) into the agent's project CLAUDE.md. Sibling of claude-md-skills-index and redundant for the same reason: every integration already reaches the model through a surface Claude Code presents natively - an `integration-*` skill for those that ship a skill bundle, and a dynamically-discovered MCP tool (`mcp__augmented__*`, fanned out from integration_definitions.metadata.tools via /host/mcp/tools/list) for those that do not. The list measured 2,302-3,466 chars per agent on agt-aws-1 (2026-07-27), against Claude Code's 40,000-char CLAUDE.md ceiling. Defaults OFF (ENG-8174), which also codifies the observed steady state: the section survives only ~3 minutes after each integration sync before the next provisioning pass strips it (ENG-8170), so the fleet has effectively been running without it - flip ON per org only to restore the list.",
+    flagType: "boolean",
+    defaultValue: false,
+    envVar: "AGT_CLAUDE_MD_INTEGRATIONS_SECTION_ENABLED"
+  },
   {
     key: "wedge-transient-notice",
     description: 'When a wedge-respawn was preceded by a transient LLM-API error (529/429/503/500 that exhausted its retries and wedged the turn), the manager writes the ENG-6058 give-up signal tagged reason=transient_overload so the channel sweeps post a friendly "I hit a brief overload \u2014 please resend" notice instead of leaving the user in silence (ENG-7360, extends ENG-6861 to the retry-exhaustion + wedge path). Boolean gate; ships dark \u2014 channel-visible copy soaks per host before going wide.',
@@ -37905,6 +37924,15 @@ function shouldReplayMarker(i) {
   }
   return true;
 }
+function markerGcThresholdMs(i) {
+  if (i.discretionary) {
+    return i.discretionaryThresholdMs != null ? Math.min(i.thresholdMs, i.discretionaryThresholdMs) : i.thresholdMs;
+  }
+  if (i.replayEnabled && i.hasPayload && i.replayCount === 0) {
+    return Math.max(i.thresholdMs, i.hardCeilingMs);
+  }
+  return i.thresholdMs;
+}
 function isMarkerGenuinelyAged(receivedAt, nowMs, thresholdMs) {
   const t = Date.parse(receivedAt ?? "");
   return Number.isFinite(t) && t <= nowMs && nowMs - t >= thresholdMs;
@@ -39851,6 +39879,7 @@ function sweepTelegramStaleMarkers(thresholdMs) {
     return;
   }
   const now = Date.now();
+  const replayEnabled = channelReplayEnabled();
   let cleared = 0;
   for (const filename of filenames) {
     if (!filename.endsWith(".json")) continue;
@@ -39872,10 +39901,17 @@ function sweepTelegramStaleMarkers(thresholdMs) {
       continue;
     }
     const { chat_id, message_id, received_at } = marker;
+    const effectiveThresholdMs = markerGcThresholdMs({
+      thresholdMs,
+      hardCeilingMs: STALE_MARKER_MS,
+      hasPayload: Boolean(marker.payload),
+      replayCount: marker.replay_count ?? 0,
+      replayEnabled
+    });
     const structurallyBroken = !chat_id || !message_id;
-    const timeStale = isPendingMarkerStale(received_at, now, thresholdMs);
+    const timeStale = isPendingMarkerStale(received_at, now, effectiveThresholdMs);
     if (structurallyBroken || timeStale) {
-      if (!structurallyBroken && isMarkerGenuinelyAged(received_at, now, thresholdMs) && marker.payload) {
+      if (!structurallyBroken && isMarkerGenuinelyAged(received_at, now, effectiveThresholdMs) && marker.payload) {
         recordChannelDeflection(
           AGENT_DIR,
           "telegram",

package/dist/{persistent-session-6SCIPYQI.js → persistent-session-NTHAZ2LZ.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-IQX7TMYZ.js";
+} from "./chunk-3CTWN3L4.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-6SCIPYQI.js.map
+//# sourceMappingURL=persistent-session-NTHAZ2LZ.js.map

package/dist/{responsiveness-probe-WHDWK62P.js → responsiveness-probe-7FDKX4N6.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-IQX7TMYZ.js";
+} from "./chunk-3CTWN3L4.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -471,4 +471,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-WHDWK62P.js.map
+//# sourceMappingURL=responsiveness-probe-7FDKX4N6.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.443",
+  "version": "0.28.445",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {