@integrity-labs/agt-cli 0.28.456 → 0.28.458

package/dist/mcp/direct-chat-channel.js

@@ -31704,6 +31704,12 @@ var integration_metadata_v1_default = {
               description: "Optional query-string shape with `{arg}` placeholders.",
               additionalProperties: { type: "string" }
             },
+            headers_template: {
+              type: "object",
+              description: 'Optional request-header shape with `{arg}` placeholders (e.g. `{ "x-origami-project": "{project_id}" }`). A header whose template resolves to empty is dropped rather than sent blank, and args consumed only by a header template are excluded from a `{$body}` expansion.',
+              propertyNames: { pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$" },
+              additionalProperties: { type: "string" }
+            },
             idempotency_key_header: {
               type: "string",
               minLength: 1,
@@ -35788,6 +35794,22 @@ var FLAG_REGISTRY = [
     // registry-only (ADR-0022). NOT `public`: it is resolved server-side only, so it
     // must never be serialized into the browser map.
     defaultValue: false
+  },
+  {
+    key: "ninjafy-brand",
+    description: 'Present the product under the Ninjafy brand instead of Augmented Team (ENG-8250). This is the UMBRELLA brand gate, not a one-off nav toggle: every subsequent rebrand surface (page titles, email templates, marketing-facing copy) reads THIS key rather than adding its own flag, so the whole rebrand keeps a single kill switch. First surface is the left-hand nav wordmark \u2014 ON replaces the human+robot mark and the "augmented.team" text with italic lowercase "ninjafy"; OFF renders exactly what shipped before. Scope is USER-FACING BRAND TEXT ONLY: it must never gate a code identifier, package name, env var or CLI name, which stay `Augmented`/`agt` per the CLAUDE.md naming contract (the deep code rename is workstream C of docs/runbooks/rebrand-ninjafy-migration.md and is out of scope here). Set the stage-wide default to flip a whole environment, or add a feature_flag_overrides row to pilot one organization while every other org still sees Augmented. Ships dark.',
+    flagType: "boolean",
+    // Declared safe value is `false`: the pre-rebrand brand. `false` is also the
+    // fail-closed direction — if the flag DB is unreachable we must show the brand
+    // that is currently live and contractually correct, never leak an unannounced
+    // rebrand to every customer at once.
+    defaultValue: false,
+    // Read CLIENT-SIDE: sidebar.tsx is a "use client" component and resolves this
+    // via usePublicBooleanFlag, so the key must be in the browser-exposed public
+    // map. Unlike onboarding-msteams-channel above there is no wrong-org hazard —
+    // the sidebar renders inside the active-org cookie's scope, which is exactly
+    // the org whose brand should be shown.
+    public: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/origami.js

@@ -37203,6 +37203,12 @@ var integration_metadata_v1_default = {
               description: "Optional query-string shape with `{arg}` placeholders.",
               additionalProperties: { type: "string" }
             },
+            headers_template: {
+              type: "object",
+              description: 'Optional request-header shape with `{arg}` placeholders (e.g. `{ "x-origami-project": "{project_id}" }`). A header whose template resolves to empty is dropped rather than sent blank, and args consumed only by a header template are excluded from a `{$body}` expansion.',
+              propertyNames: { pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$" },
+              additionalProperties: { type: "string" }
+            },
             idempotency_key_header: {
               type: "string",
               minLength: 1,
@@ -37249,7 +37255,7 @@ var FIXED_SECONDS = {
 var PLACEHOLDER_RE = /\{([a-zA-Z_][a-zA-Z0-9_]*)\}/g;
 function buildHttpRequest(input) {
   const { tool, args, baseUrl, bearerToken, requestId, extraHeaders } = input;
-  const { method, path_template, query_template, body_template, idempotency_key_header } = tool.http;
+  const { method, path_template, query_template, headers_template, body_template, idempotency_key_header } = tool.http;
   const path = templatePath(path_template, args);
   const query = query_template ? buildQueryString(query_template, args) : "";
   const url2 = joinUrl(baseUrl, path) + query;
@@ -37263,9 +37269,17 @@ function buildHttpRequest(input) {
     const headerName = idempotency_key_header ?? "Idempotency-Key";
     headers[headerName] = requestId;
   }
+  if (headers_template) {
+    const reserved = /* @__PURE__ */ new Set([
+      ...RESERVED_HEADER_NAMES,
+      (idempotency_key_header ?? "Idempotency-Key").toLowerCase()
+    ]);
+    Object.assign(headers, buildTemplatedHeaders(headers_template, args, reserved));
+  }
   let body;
   if (method !== "GET" && body_template !== void 0) {
-    const expanded = expandBodyTemplate(body_template, args);
+    const bodyArgs = body_template === "{$body}" && headers_template ? omitKeys(args, headerOnlyPlaceholders(headers_template, tool.http)) : args;
+    const expanded = expandBodyTemplate(body_template, bodyArgs);
     body = JSON.stringify(expanded);
     headers["Content-Type"] = "application/json";
   }
@@ -37274,6 +37288,65 @@ function buildHttpRequest(input) {
   }
   return { url: url2, method, headers, body };
 }
+var RESERVED_HEADER_NAMES = /* @__PURE__ */ new Set(["authorization", "accept", "content-type"]);
+function buildTemplatedHeaders(template, args, reservedNames) {
+  const out = {};
+  for (const [headerName, valueTemplate] of Object.entries(template)) {
+    if (!isValidHeaderName(headerName)) {
+      throw new TemplateError(`invalid header name in headers_template: ${headerName}`);
+    }
+    if (reservedNames.has(headerName.toLowerCase())) {
+      throw new TemplateError(`headers_template cannot target reserved header: ${headerName}`);
+    }
+    const expanded = valueTemplate.replace(PLACEHOLDER_RE, (_full, key) => {
+      const v = args[key];
+      if (v === void 0 || v === null)
+        return "";
+      if (!isScalar(v)) {
+        throw new TemplateError(`header placeholder {${key}} cannot be substituted with non-scalar value`);
+      }
+      return String(v);
+    });
+    if (expanded === "")
+      continue;
+    if (!isValidHeaderValue(expanded)) {
+      throw new TemplateError(`header ${headerName} resolved to an invalid value`);
+    }
+    out[headerName] = expanded;
+  }
+  return out;
+}
+function headerOnlyPlaceholders(headersTemplate, http) {
+  const elsewhere = /* @__PURE__ */ new Set([
+    ...placeholderKeys(http.path_template),
+    ...Object.values(http.query_template ?? {}).flatMap(placeholderKeys)
+  ]);
+  const out = /* @__PURE__ */ new Set();
+  for (const key of Object.values(headersTemplate).flatMap(placeholderKeys)) {
+    if (!elsewhere.has(key))
+      out.add(key);
+  }
+  return out;
+}
+function placeholderKeys(template) {
+  return [...template.matchAll(PLACEHOLDER_RE)].map((m) => m[1]);
+}
+function omitKeys(args, keys) {
+  if (keys.size === 0)
+    return args;
+  const out = {};
+  for (const [k, v] of Object.entries(args)) {
+    if (!keys.has(k))
+      out[k] = v;
+  }
+  return out;
+}
+function isValidHeaderName(name) {
+  return /^[A-Za-z0-9!#$%&'*+.^_`|~-]+$/.test(name);
+}
+function isValidHeaderValue(value) {
+  return !/[\x00-\x1f\x7f]/.test(value);
+}
 function templatePath(template, args) {
   return template.replace(PLACEHOLDER_RE, (_full, key) => {
     const value = args[key];
@@ -41133,6 +41206,22 @@ var FLAG_REGISTRY = [
     // registry-only (ADR-0022). NOT `public`: it is resolved server-side only, so it
     // must never be serialized into the browser map.
     defaultValue: false
+  },
+  {
+    key: "ninjafy-brand",
+    description: 'Present the product under the Ninjafy brand instead of Augmented Team (ENG-8250). This is the UMBRELLA brand gate, not a one-off nav toggle: every subsequent rebrand surface (page titles, email templates, marketing-facing copy) reads THIS key rather than adding its own flag, so the whole rebrand keeps a single kill switch. First surface is the left-hand nav wordmark \u2014 ON replaces the human+robot mark and the "augmented.team" text with italic lowercase "ninjafy"; OFF renders exactly what shipped before. Scope is USER-FACING BRAND TEXT ONLY: it must never gate a code identifier, package name, env var or CLI name, which stay `Augmented`/`agt` per the CLAUDE.md naming contract (the deep code rename is workstream C of docs/runbooks/rebrand-ninjafy-migration.md and is out of scope here). Set the stage-wide default to flip a whole environment, or add a feature_flag_overrides row to pilot one organization while every other org still sees Augmented. Ships dark.',
+    flagType: "boolean",
+    // Declared safe value is `false`: the pre-rebrand brand. `false` is also the
+    // fail-closed direction — if the flag DB is unreachable we must show the brand
+    // that is currently live and contractually correct, never leak an unannounced
+    // rebrand to every customer at once.
+    defaultValue: false,
+    // Read CLIENT-SIDE: sidebar.tsx is a "use client" component and resolves this
+    // via usePublicBooleanFlag, so the key must be in the browser-exposed public
+    // map. Unlike onboarding-msteams-channel above there is no wrong-org hazard —
+    // the sidebar renders inside the active-org cookie's scope, which is exactly
+    // the org whose brand should be shown.
+    public: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -41182,6 +41271,10 @@ var IdentityError = class extends Error {
     this.status = status;
   }
 };
+function nonEmpty(value) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  return trimmed === "" ? null : trimmed;
+}
 var IdentityResolver = class {
   env;
   fetchImpl;
@@ -41209,7 +41302,10 @@ var IdentityResolver = class {
     return {
       apiKey,
       organizationId: this.env.ORIGAMI_ORG_ID ?? null,
-      teamSlug: this.env.ORIGAMI_TEAM_SLUG ?? null
+      teamSlug: this.env.ORIGAMI_TEAM_SLUG ?? null,
+      // Blank is absent: an empty ORIGAMI_PROJECT_ID must mean "parent org",
+      // not "scope to the empty string" (which the vendor 400s on).
+      projectId: nonEmpty(this.env.ORIGAMI_PROJECT_ID)
     };
   }
   async resolveViaBroker() {
@@ -41255,7 +41351,8 @@ var IdentityResolver = class {
       return {
         apiKey: data.access_token,
         organizationId: data.organization_id ?? null,
-        teamSlug: data.team_slug ?? null
+        teamSlug: data.team_slug ?? null,
+        projectId: nonEmpty(data.project_id)
       };
     }
     throw new IdentityError(401, "Credential fetch failed after JWT re-exchange retry");
@@ -41297,80 +41394,36 @@ var IdentityResolver = class {
   }
 };
 
-// src/server.ts
-var DEFAULT_BASE_URL = "https://origami.chat";
-var VENDOR_TIMEOUT_MS = 3e4;
-function errorResult(text) {
-  return { isError: true, content: [{ type: "text", text: `Error: ${text}` }] };
-}
-function buildOrigamiMcpServer(opts) {
-  const baseUrl = opts.baseUrl ?? DEFAULT_BASE_URL;
-  const fetchImpl = opts.fetchImpl ?? fetch;
-  const newRequestId = opts.newRequestId ?? (() => crypto.randomUUID());
-  const byName = new Map(opts.descriptors.map((d) => [d.name, d]));
-  const server = new Server(
-    { name: "origami", version: "0.1.0" },
-    { capabilities: { tools: {} } }
-  );
-  server.setRequestHandler(ListToolsRequestSchema, async () => ({
-    tools: opts.descriptors.map((d) => ({
-      name: d.name,
-      description: d.description,
-      inputSchema: d.input_schema
-    }))
-  }));
-  server.setRequestHandler(CallToolRequestSchema, async (req) => {
-    const descriptor = byName.get(req.params.name);
-    if (!descriptor) {
-      return errorResult(`unknown tool ${req.params.name}`);
-    }
-    const args = req.params.arguments ?? {};
-    let identity;
-    try {
-      identity = await opts.resolveIdentity();
-    } catch (err) {
-      const msg = err instanceof IdentityError ? err.message : err.message;
-      return errorResult(`credential resolution failed: ${msg}`);
-    }
-    const extraHeaders = {};
-    if (identity.organizationId) extraHeaders["X-Organization-Id"] = identity.organizationId;
-    if (identity.teamSlug) extraHeaders["X-Team-Slug"] = identity.teamSlug;
-    let prepared;
-    try {
-      prepared = buildHttpRequest({
-        tool: descriptor,
-        args,
-        baseUrl,
-        bearerToken: identity.apiKey,
-        requestId: newRequestId(),
-        extraHeaders
-      });
-    } catch (err) {
-      const msg = err instanceof TemplateError ? err.message : err.message;
-      return errorResult(msg);
-    }
-    let resp;
-    try {
-      resp = await fetchImpl(prepared.url, {
-        method: prepared.method,
-        headers: prepared.headers,
-        body: prepared.body,
-        signal: AbortSignal.timeout(VENDOR_TIMEOUT_MS)
-      });
-    } catch (err) {
-      return errorResult(`origami.chat fetch failed: ${err.message}`);
-    }
-    const text = await resp.text();
-    if (!resp.ok) {
-      return errorResult(`origami.chat ${resp.status}: ${text.slice(0, 400)}`);
+// src/descriptors.ts
+var PROJECT_SCOPE_HEADER = "x-origami-project";
+var PROJECT_ID_ARG = "project_id";
+var PROJECT_ID_PROPERTY = {
+  type: ["string", "null"],
+  description: "Optional origami project (child org) id to scope this call to - discover ids with list_projects. Omit to act on the parent org that owns the API key. If the integration has a default project configured it is applied automatically when this is omitted; pass null to override that default and act on the parent org."
+};
+function withProjectScoping(tool) {
+  return {
+    ...tool,
+    input_schema: {
+      ...tool.input_schema,
+      properties: {
+        ...tool.input_schema.properties,
+        [PROJECT_ID_ARG]: PROJECT_ID_PROPERTY
+      }
+    },
+    http: {
+      ...tool.http,
+      headers_template: {
+        ...tool.http.headers_template ?? {},
+        [PROJECT_SCOPE_HEADER]: `{${PROJECT_ID_ARG}}`
+      }
     }
-    return { content: [{ type: "text", text: text || "{}" }] };
-  });
-  return server;
+  };
 }
-
-// src/descriptors.ts
-var ORIGAMI_TOOLS = [
+function supportsProjectScoping(tool) {
+  return tool.http.headers_template?.[PROJECT_SCOPE_HEADER] === `{${PROJECT_ID_ARG}}`;
+}
+var ORG_SCOPED_TOOLS = [
   // ==========================================================================
   // v1 DATA PLANE
   // ==========================================================================
@@ -41650,6 +41703,122 @@ var ORIGAMI_TOOLS = [
     }
   }
 ];
+var PROJECT_TOOLS = [
+  {
+    name: "list_projects",
+    description: "List the projects (child orgs) under the API key's parent org, newest first. Use this to discover the project id to pass as `project_id` on any other tool - without it every call resolves against the parent org, so a project's agents and tables are invisible. Cursor-paginated: pass the previous response's `nextCursor` as `cursor`; `nextCursor: null` means the last page. Optional `search` is a case-insensitive substring match on project name. Returns { object, items[{ id, name, monthlyCredits, usage{spent,reserved}, createdAt }], nextCursor }. Always acts on the parent org - `project_id` is not accepted here.",
+    risk_tier: "Low",
+    input_schema: {
+      type: "object",
+      properties: {
+        cursor: { type: "string", description: "Opaque pagination cursor - the `nextCursor` from a previous page. Omit for the first page." },
+        limit: { type: "integer", minimum: 1, maximum: 100, description: "Projects per page. Default 50, max 100." },
+        search: { type: "string", description: "Optional case-insensitive substring match on project name." }
+      }
+    },
+    http: {
+      method: "GET",
+      path_template: "/api/v2/projects",
+      query_template: { cursor: "{cursor}", limit: "{limit}", search: "{search}" }
+    }
+  },
+  {
+    name: "get_project",
+    description: "Fetch a single project (child org) by id: name, optional monthlyCredits budget cap, current-period usage { spent, reserved } and createdAt. Use it to confirm a project id before scoping calls to it, or to check its remaining budget. Always acts on the parent org - `project_id` is not accepted here.",
+    risk_tier: "Low",
+    input_schema: {
+      type: "object",
+      properties: {
+        projectId: { type: "string", minLength: 1, description: "The project (child org) id (uuid), from list_projects." }
+      },
+      required: ["projectId"]
+    },
+    http: { method: "GET", path_template: "/api/v2/projects/{projectId}" }
+  }
+];
+var ORIGAMI_TOOLS = [
+  ...ORG_SCOPED_TOOLS.map(withProjectScoping),
+  ...PROJECT_TOOLS
+];
+
+// src/server.ts
+var DEFAULT_BASE_URL = "https://origami.chat";
+var VENDOR_TIMEOUT_MS = 3e4;
+function errorResult(text) {
+  return { isError: true, content: [{ type: "text", text: `Error: ${text}` }] };
+}
+function resolveProjectScope(descriptor, args, defaultProjectId) {
+  if (!defaultProjectId) return args;
+  if (!supportsProjectScoping(descriptor)) return args;
+  if (PROJECT_ID_ARG in args) return args;
+  return { ...args, [PROJECT_ID_ARG]: defaultProjectId };
+}
+function buildOrigamiMcpServer(opts) {
+  const baseUrl = opts.baseUrl ?? DEFAULT_BASE_URL;
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const newRequestId = opts.newRequestId ?? (() => crypto.randomUUID());
+  const byName = new Map(opts.descriptors.map((d) => [d.name, d]));
+  const server = new Server(
+    { name: "origami", version: "0.1.0" },
+    { capabilities: { tools: {} } }
+  );
+  server.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: opts.descriptors.map((d) => ({
+      name: d.name,
+      description: d.description,
+      inputSchema: d.input_schema
+    }))
+  }));
+  server.setRequestHandler(CallToolRequestSchema, async (req) => {
+    const descriptor = byName.get(req.params.name);
+    if (!descriptor) {
+      return errorResult(`unknown tool ${req.params.name}`);
+    }
+    const args = req.params.arguments ?? {};
+    let identity;
+    try {
+      identity = await opts.resolveIdentity();
+    } catch (err) {
+      const msg = err instanceof IdentityError ? err.message : err.message;
+      return errorResult(`credential resolution failed: ${msg}`);
+    }
+    const extraHeaders = {};
+    if (identity.organizationId) extraHeaders["X-Organization-Id"] = identity.organizationId;
+    if (identity.teamSlug) extraHeaders["X-Team-Slug"] = identity.teamSlug;
+    const scopedArgs = resolveProjectScope(descriptor, args, identity.projectId);
+    let prepared;
+    try {
+      prepared = buildHttpRequest({
+        tool: descriptor,
+        args: scopedArgs,
+        baseUrl,
+        bearerToken: identity.apiKey,
+        requestId: newRequestId(),
+        extraHeaders
+      });
+    } catch (err) {
+      const msg = err instanceof TemplateError ? err.message : err.message;
+      return errorResult(msg);
+    }
+    let resp;
+    try {
+      resp = await fetchImpl(prepared.url, {
+        method: prepared.method,
+        headers: prepared.headers,
+        body: prepared.body,
+        signal: AbortSignal.timeout(VENDOR_TIMEOUT_MS)
+      });
+    } catch (err) {
+      return errorResult(`origami.chat fetch failed: ${err.message}`);
+    }
+    const text = await resp.text();
+    if (!resp.ok) {
+      return errorResult(`origami.chat ${resp.status}: ${text.slice(0, 400)}`);
+    }
+    return { content: [{ type: "text", text: text || "{}" }] };
+  });
+  return server;
+}
 
 // src/index.ts
 async function main() {

package/dist/mcp/slack-channel.js

@@ -31312,6 +31312,12 @@ var integration_metadata_v1_default = {
               description: "Optional query-string shape with `{arg}` placeholders.",
               additionalProperties: { type: "string" }
             },
+            headers_template: {
+              type: "object",
+              description: 'Optional request-header shape with `{arg}` placeholders (e.g. `{ "x-origami-project": "{project_id}" }`). A header whose template resolves to empty is dropped rather than sent blank, and args consumed only by a header template are excluded from a `{$body}` expansion.',
+              propertyNames: { pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$" },
+              additionalProperties: { type: "string" }
+            },
             idempotency_key_header: {
               type: "string",
               minLength: 1,
@@ -35396,6 +35402,22 @@ var FLAG_REGISTRY = [
     // registry-only (ADR-0022). NOT `public`: it is resolved server-side only, so it
     // must never be serialized into the browser map.
     defaultValue: false
+  },
+  {
+    key: "ninjafy-brand",
+    description: 'Present the product under the Ninjafy brand instead of Augmented Team (ENG-8250). This is the UMBRELLA brand gate, not a one-off nav toggle: every subsequent rebrand surface (page titles, email templates, marketing-facing copy) reads THIS key rather than adding its own flag, so the whole rebrand keeps a single kill switch. First surface is the left-hand nav wordmark \u2014 ON replaces the human+robot mark and the "augmented.team" text with italic lowercase "ninjafy"; OFF renders exactly what shipped before. Scope is USER-FACING BRAND TEXT ONLY: it must never gate a code identifier, package name, env var or CLI name, which stay `Augmented`/`agt` per the CLAUDE.md naming contract (the deep code rename is workstream C of docs/runbooks/rebrand-ninjafy-migration.md and is out of scope here). Set the stage-wide default to flip a whole environment, or add a feature_flag_overrides row to pilot one organization while every other org still sees Augmented. Ships dark.',
+    flagType: "boolean",
+    // Declared safe value is `false`: the pre-rebrand brand. `false` is also the
+    // fail-closed direction — if the flag DB is unreachable we must show the brand
+    // that is currently live and contractually correct, never leak an unannounced
+    // rebrand to every customer at once.
+    defaultValue: false,
+    // Read CLIENT-SIDE: sidebar.tsx is a "use client" component and resolves this
+    // via usePublicBooleanFlag, so the key must be in the browser-exposed public
+    // map. Unlike onboarding-msteams-channel above there is no wrong-org hazard —
+    // the sidebar renders inside the active-org cookie's scope, which is exactly
+    // the org whose brand should be shown.
+    public: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/telegram-channel.js

@@ -31614,6 +31614,12 @@ var integration_metadata_v1_default = {
               description: "Optional query-string shape with `{arg}` placeholders.",
               additionalProperties: { type: "string" }
             },
+            headers_template: {
+              type: "object",
+              description: 'Optional request-header shape with `{arg}` placeholders (e.g. `{ "x-origami-project": "{project_id}" }`). A header whose template resolves to empty is dropped rather than sent blank, and args consumed only by a header template are excluded from a `{$body}` expansion.',
+              propertyNames: { pattern: "^[A-Za-z0-9!#$%&'*+.^_`|~-]+$" },
+              additionalProperties: { type: "string" }
+            },
             idempotency_key_header: {
               type: "string",
               minLength: 1,
@@ -35698,6 +35704,22 @@ var FLAG_REGISTRY = [
     // registry-only (ADR-0022). NOT `public`: it is resolved server-side only, so it
     // must never be serialized into the browser map.
     defaultValue: false
+  },
+  {
+    key: "ninjafy-brand",
+    description: 'Present the product under the Ninjafy brand instead of Augmented Team (ENG-8250). This is the UMBRELLA brand gate, not a one-off nav toggle: every subsequent rebrand surface (page titles, email templates, marketing-facing copy) reads THIS key rather than adding its own flag, so the whole rebrand keeps a single kill switch. First surface is the left-hand nav wordmark \u2014 ON replaces the human+robot mark and the "augmented.team" text with italic lowercase "ninjafy"; OFF renders exactly what shipped before. Scope is USER-FACING BRAND TEXT ONLY: it must never gate a code identifier, package name, env var or CLI name, which stay `Augmented`/`agt` per the CLAUDE.md naming contract (the deep code rename is workstream C of docs/runbooks/rebrand-ninjafy-migration.md and is out of scope here). Set the stage-wide default to flip a whole environment, or add a feature_flag_overrides row to pilot one organization while every other org still sees Augmented. Ships dark.',
+    flagType: "boolean",
+    // Declared safe value is `false`: the pre-rebrand brand. `false` is also the
+    // fail-closed direction — if the flag DB is unreachable we must show the brand
+    // that is currently live and contractually correct, never leak an unannounced
+    // rebrand to every customer at once.
+    defaultValue: false,
+    // Read CLIENT-SIDE: sidebar.tsx is a "use client" component and resolves this
+    // via usePublicBooleanFlag, so the key must be in the browser-exposed public
+    // map. Unlike onboarding-msteams-channel above there is no wrong-org hazard —
+    // the sidebar renders inside the active-org cookie's scope, which is exactly
+    // the org whose brand should be shown.
+    public: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/{persistent-session-Z2UQ4VVF.js → persistent-session-EVLWDI3I.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-UIUYOGPK.js";
+} from "./chunk-KAIH24HZ.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-Z2UQ4VVF.js.map
+//# sourceMappingURL=persistent-session-EVLWDI3I.js.map

package/dist/{responsiveness-probe-WCF2QEVT.js → responsiveness-probe-EGP2F3WD.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-UIUYOGPK.js";
+} from "./chunk-KAIH24HZ.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -528,4 +528,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-WCF2QEVT.js.map
+//# sourceMappingURL=responsiveness-probe-EGP2F3WD.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.456",
+  "version": "0.28.458",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {