@integrity-labs/agt-cli 0.28.518 → 0.28.520

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-RDDUP6Z4.js";
+} from "../chunk-LK3VJYFU.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-SSRYNA7T.js";
+} from "../chunk-XH3O62OZ.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4834,7 +4834,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.518" : "dev";
+var cliVersion = true ? "0.28.520" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6006,7 +6006,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.518" : "dev";
+var cliVersion2 = true ? "0.28.520" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-RDDUP6Z4.js → chunk-LK3VJYFU.js}

@@ -42,7 +42,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-SSRYNA7T.js";
+} from "./chunk-XH3O62OZ.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -5317,7 +5317,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.518" : "dev";
+var agtCliVersion = true ? "0.28.520" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8629,4 +8629,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-RDDUP6Z4.js.map
+//# sourceMappingURL=chunk-LK3VJYFU.js.map

package/dist/{chunk-SSRYNA7T.js → chunk-XH3O62OZ.js}

@@ -4563,11 +4563,60 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
       e.preventDefault(); e.stopPropagation(); startEditTextNode(tn, el);
     }
   }, true);
-  document.addEventListener('keydown', function(e){
+  // ENG-8500: while the inline editor is focused, the artefact's OWN keyboard
+  // handlers must not see the keystroke.
+  //
+  // Decks ship as a single self-contained file with their own slide navigation
+  // bound to space and the arrow keys, and that script is agent-authored content
+  // we neither control nor can retro-patch - the published object is immutable,
+  // so every deck already out there has its handler baked in. It also runs FIRST:
+  // the bridge is appended after the artefact HTML (frame.srcdoc = html +
+  // MARKUP_BRIDGE in publisher.ts), so the deck registers its listener before we
+  // register ours.
+  //
+  // The consequence was not a keyboard annoyance, it was silent data corruption.
+  // The deck's handler called preventDefault() on space, so the spaces a viewer
+  // typed never reached the editor and words concatenated -
+  // "albreakevenreached in June 2026" - with Save sitting right there. In English
+  // prose a reader might catch it; in a number, a product name or a URL they
+  // would not.
+  //
+  // Registration order cannot be won, so win on PHASE instead. The capture path
+  // is window -> document -> ... -> target, so a capture listener on the window object
+  // fires before any document-level or bubble-phase listener no matter when it
+  // was registered. stopImmediatePropagation() then keeps the event from ever
+  // reaching the deck.
+  //
+  // The one case this does not beat is an artefact that itself registers on
+  // the window object with capture BEFORE the bridge loads. Deck templates use
+  // document.addEventListener for keydown, so that is theoretical rather
+  // than observed - but it is a real limit and worth knowing before someone
+  // assumes this is airtight.
+  //
+  // Note what is deliberately NOT called for ordinary keys: preventDefault(). The
+  // whole point is that space, arrows, Home/End and PageUp/PageDown do their
+  // normal text-editing work. We suppress the artefact, not the browser.
+  window.addEventListener('keydown', function(e){
+    // Not editing: the artefact keeps its keyboard entirely. Slide navigation
+    // must behave exactly as it does today (ENG-8500 AC2).
     if(!editing) return;
-    if(e.key==='Escape'){ e.preventDefault(); endEdit(false); }
-    else if(e.key==='Enter' && !e.shiftKey){ e.preventDefault(); endEdit(true); }
-  });
+    // Editing, but the keystroke is going somewhere else (the viewer clicked
+    // away, or is in the shell's own UI). Not ours to swallow.
+    var t=e.target;
+    var inEditor = t===editing || (editing.contains && t && t.nodeType && editing.contains(t));
+    if(!inEditor) return;
+
+    // Escape cancels the edit; Enter commits. Both are deliberate terminal
+    // actions rather than text input, so they DO preventDefault - Enter must not
+    // also insert a newline into the field it is closing. Shift+Enter is left
+    // alone as a genuine newline.
+    if(e.key==='Escape'){ e.preventDefault(); e.stopImmediatePropagation(); endEdit(false); return; }
+    if(e.key==='Enter' && !e.shiftKey){ e.preventDefault(); e.stopImmediatePropagation(); endEdit(true); return; }
+
+    // Everything else: let the browser handle it as text input, and stop the
+    // artefact's own handlers from seeing it at all.
+    e.stopImmediatePropagation();
+  }, true);
 
   document.addEventListener('mouseup', function(){
     if(editing) return; // a selection inside the editor is for the cursor, not a comment
@@ -15063,4 +15112,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-SSRYNA7T.js.map
+//# sourceMappingURL=chunk-XH3O62OZ.js.map