@integrity-labs/agt-cli 0.28.492 → 0.28.494

package/dist/mcp/direct-chat-channel.js

@@ -34365,6 +34365,18 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "id-keyed-layout-migration",
+    description: "Dark migration engine (ENG-7891 / ADR-0049 slice 3): convert an EXISTING legacy codename-keyed agent host dir to the agent_id-keyed layout (real ~/.augmented/{agent_id} dir + codename compatibility symlink) at the next pre-spawn tick, moving the Claude transcript store so the agent keeps its history. Resolved PER-AGENT (getBooleanForAgent) so a one-way-door migration can be armed one agent at a time. Ships dark; NOT armed until a test-host rehearsal passes (the last ENG-7891 acceptance gate). Crash recovery + the per-agent preconditions (session-down, WhatsApp-writer quiesce, id-aware hook regen by the spawn funnel) are always-on and flag-independent; this flag only gates INITIATING a fresh conversion. Deliberately no host-wide env override - arming is per-agent to avoid flipping every legacy agent on a host at once.",
+    flagType: "boolean",
+    // Declared safe value is `false` = no migration. A flag-DB read error must
+    // never move a customer agent's on-disk state on its own (fail-safe = leave
+    // the legacy layout untouched).
+    defaultValue: false,
+    // One-way-door filesystem migration of a live agent's durable state: arming
+    // it MOVES data, so mutations require explicit confirmation (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "agent-hours-billing-enabled",
     description: "Agent-hours (utilisation) billing (ENG-7910). Per-org gate; ships dark. When on for an org, its closed billing periods are settled into org_agent_hours_settlements from the plan/override agent-hours terms, and the customer billing surface shows used-vs-included hours + projected overage. Off = no settlement written, no charge, surface hidden. Launch prices are seeded in plan_billing_terms; flip on per-org for a controlled rollout.",

package/dist/mcp/origami.js

@@ -40312,6 +40312,18 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "id-keyed-layout-migration",
+    description: "Dark migration engine (ENG-7891 / ADR-0049 slice 3): convert an EXISTING legacy codename-keyed agent host dir to the agent_id-keyed layout (real ~/.augmented/{agent_id} dir + codename compatibility symlink) at the next pre-spawn tick, moving the Claude transcript store so the agent keeps its history. Resolved PER-AGENT (getBooleanForAgent) so a one-way-door migration can be armed one agent at a time. Ships dark; NOT armed until a test-host rehearsal passes (the last ENG-7891 acceptance gate). Crash recovery + the per-agent preconditions (session-down, WhatsApp-writer quiesce, id-aware hook regen by the spawn funnel) are always-on and flag-independent; this flag only gates INITIATING a fresh conversion. Deliberately no host-wide env override - arming is per-agent to avoid flipping every legacy agent on a host at once.",
+    flagType: "boolean",
+    // Declared safe value is `false` = no migration. A flag-DB read error must
+    // never move a customer agent's on-disk state on its own (fail-safe = leave
+    // the legacy layout untouched).
+    defaultValue: false,
+    // One-way-door filesystem migration of a live agent's durable state: arming
+    // it MOVES data, so mutations require explicit confirmation (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "agent-hours-billing-enabled",
     description: "Agent-hours (utilisation) billing (ENG-7910). Per-org gate; ships dark. When on for an org, its closed billing periods are settled into org_agent_hours_settlements from the plan/override agent-hours terms, and the customer billing surface shows used-vs-included hours + projected overage. Off = no settlement written, no charge, surface hidden. Launch prices are seeded in plan_billing_terms; flip on per-org for a controlled rollout.",

package/dist/mcp/remote-oauth-proxy.js

@@ -234,33 +234,60 @@ function mergeToolsListInto(ct, text) {
 }
 function ensureUnionManifest(token) {
   if (unionOnce) return unionOnce;
-  unionOnce = (async () => {
+  const build = (async () => {
+    let reached = false;
+    let clean = true;
     try {
       const seed = await postRpc(token, buildToolsListRequest());
-      mergeToolsListInto(seed.ct, seed.text);
+      if (seed.ok) {
+        reached = true;
+        mergeToolsListInto(seed.ct, seed.text);
+      } else {
+        clean = false;
+        logErr(`union: seed tools/list HTTP ${seed.status}`);
+      }
     } catch (err) {
+      clean = false;
       logErr(`union: seed tools/list failed: ${err.message}`);
     }
     for (const group of preEnableToolsets) {
       try {
         const en = await postRpc(token, buildEnableToolsetRequest(group));
         if (!en.ok) {
+          clean = false;
           logErr(`union: enable "${group}" HTTP ${en.status}`);
           continue;
         }
+        reached = true;
         for (const m of extractJsonRpcMessages(en.ct, en.text)) {
           for (const nm of parseEnableToolsetResponse(m).newlyAvailable) toolGroupByName.set(nm, group);
         }
         for (const nm of parseEnableToolsetResponse(en.text).newlyAvailable) toolGroupByName.set(nm, group);
         const li = await postRpc(token, buildToolsListRequest());
-        mergeToolsListInto(li.ct, li.text);
+        if (li.ok) {
+          mergeToolsListInto(li.ct, li.text);
+        } else {
+          clean = false;
+          logErr(`union: post-enable tools/list "${group}" HTTP ${li.status}`);
+        }
         logErr(`union: enabled "${group}" (union now ${unionToolByName.size} tools, ${toolGroupByName.size} mapped)`);
       } catch (err) {
+        clean = false;
         logErr(`union: enable "${group}" failed: ${err.message}`);
       }
     }
+    return { reached, clean };
   })();
-  return unionOnce;
+  unionOnce = build;
+  void build.then(
+    (r) => {
+      if (!r.reached) unionOnce = null;
+    },
+    () => {
+      unionOnce = null;
+    }
+  );
+  return build;
 }
 async function forward(line, id, isNotification, method, params) {
   if (preEnableToolsets.length > 0 && isManagedActivationCall(method, params)) {
@@ -273,10 +300,15 @@ async function forward(line, id, isNotification, method, params) {
     return isNotification ? [] : [jsonRpcError(id, -32e3, `${label}: no current access token available (reconnect the integration)`)];
   }
   if (method === "tools/list" && preEnableToolsets.length > 0) {
-    await ensureUnionManifest(token);
+    const build = await ensureUnionManifest(token);
     let tools = [...unionToolByName.values()];
     if (toolAllowlist.size > 0) tools = tools.filter((t) => toolAllowlist.has(toolName(t)));
     tools = stripActivationTool(tools);
+    if (tools.length === 0 && !build.clean) {
+      const why = build.reached ? "upstream calls failed while building it" : "upstream unreachable or token rejected";
+      logErr(`tools/list: refusing empty manifest (${why})`);
+      return isNotification ? [] : [jsonRpcError(id, -32003, `${label}: could not build the tool manifest (${why}) - reconnect the integration or retry`)];
+    }
     return [JSON.stringify({ jsonrpc: "2.0", id: id ?? null, result: { tools } })];
   }
   if (method === "tools/call" && preEnableToolsets.length > 0) {

package/dist/mcp/slack-channel.js

@@ -34590,6 +34590,18 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "id-keyed-layout-migration",
+    description: "Dark migration engine (ENG-7891 / ADR-0049 slice 3): convert an EXISTING legacy codename-keyed agent host dir to the agent_id-keyed layout (real ~/.augmented/{agent_id} dir + codename compatibility symlink) at the next pre-spawn tick, moving the Claude transcript store so the agent keeps its history. Resolved PER-AGENT (getBooleanForAgent) so a one-way-door migration can be armed one agent at a time. Ships dark; NOT armed until a test-host rehearsal passes (the last ENG-7891 acceptance gate). Crash recovery + the per-agent preconditions (session-down, WhatsApp-writer quiesce, id-aware hook regen by the spawn funnel) are always-on and flag-independent; this flag only gates INITIATING a fresh conversion. Deliberately no host-wide env override - arming is per-agent to avoid flipping every legacy agent on a host at once.",
+    flagType: "boolean",
+    // Declared safe value is `false` = no migration. A flag-DB read error must
+    // never move a customer agent's on-disk state on its own (fail-safe = leave
+    // the legacy layout untouched).
+    defaultValue: false,
+    // One-way-door filesystem migration of a live agent's durable state: arming
+    // it MOVES data, so mutations require explicit confirmation (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "agent-hours-billing-enabled",
     description: "Agent-hours (utilisation) billing (ENG-7910). Per-org gate; ships dark. When on for an org, its closed billing periods are settled into org_agent_hours_settlements from the plan/override agent-hours terms, and the customer billing surface shows used-vs-included hours + projected overage. Off = no settlement written, no charge, surface hidden. Launch prices are seeded in plan_billing_terms; flip on per-org for a controlled rollout.",

package/dist/mcp/telegram-channel.js

@@ -34916,6 +34916,18 @@ var FLAG_REGISTRY = [
     flagType: "boolean",
     defaultValue: false
   },
+  {
+    key: "id-keyed-layout-migration",
+    description: "Dark migration engine (ENG-7891 / ADR-0049 slice 3): convert an EXISTING legacy codename-keyed agent host dir to the agent_id-keyed layout (real ~/.augmented/{agent_id} dir + codename compatibility symlink) at the next pre-spawn tick, moving the Claude transcript store so the agent keeps its history. Resolved PER-AGENT (getBooleanForAgent) so a one-way-door migration can be armed one agent at a time. Ships dark; NOT armed until a test-host rehearsal passes (the last ENG-7891 acceptance gate). Crash recovery + the per-agent preconditions (session-down, WhatsApp-writer quiesce, id-aware hook regen by the spawn funnel) are always-on and flag-independent; this flag only gates INITIATING a fresh conversion. Deliberately no host-wide env override - arming is per-agent to avoid flipping every legacy agent on a host at once.",
+    flagType: "boolean",
+    // Declared safe value is `false` = no migration. A flag-DB read error must
+    // never move a customer agent's on-disk state on its own (fail-safe = leave
+    // the legacy layout untouched).
+    defaultValue: false,
+    // One-way-door filesystem migration of a live agent's durable state: arming
+    // it MOVES data, so mutations require explicit confirmation (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "agent-hours-billing-enabled",
     description: "Agent-hours (utilisation) billing (ENG-7910). Per-org gate; ships dark. When on for an org, its closed billing periods are settled into org_agent_hours_settlements from the plan/override agent-hours terms, and the customer billing surface shows used-vs-included hours + projected overage. Off = no settlement written, no charge, surface hidden. Launch prices are seeded in plan_billing_terms; flip on per-org for a controlled rollout.",

package/dist/{persistent-session-Y3WIXJPW.js → persistent-session-JEN37LZS.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-34E3FHOS.js";
+} from "./chunk-JHEJP3KC.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-Y3WIXJPW.js.map
+//# sourceMappingURL=persistent-session-JEN37LZS.js.map

package/dist/{responsiveness-probe-AEFEFKOQ.js → responsiveness-probe-MSXL7NVR.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-34E3FHOS.js";
+} from "./chunk-JHEJP3KC.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -596,4 +596,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-AEFEFKOQ.js.map
+//# sourceMappingURL=responsiveness-probe-MSXL7NVR.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.492",
+  "version": "0.28.494",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {