@integrity-labs/agt-cli 0.28.565 → 0.28.566

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-I6EWKBSV.js";
+} from "../chunk-IEYDYCXL.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-TOGADVFR.js";
+} from "../chunk-2DEE3OVI.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4834,7 +4834,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.565" : "dev";
+var cliVersion = true ? "0.28.566" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6009,7 +6009,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.565" : "dev";
+var cliVersion2 = true ? "0.28.566" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-TOGADVFR.js → chunk-2DEE3OVI.js}

@@ -10584,6 +10584,35 @@ var FLAG_REGISTRY = [
     // AGT_MEMORY_EXTRACTION_ENABLED set keeps that value until the env is retired.
     envVar: "AGT_MEMORY_EXTRACTION_ENABLED"
   },
+  {
+    key: "tool-call-audit",
+    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; ships dark \u2014 when off the manager reads no transcripts and sends nothing, so 0 agent_tool_calls rows fleet-wide is the expected steady state until it is armed. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
+    flagType: "boolean",
+    // Declared safe value is `false` (no extraction). Fail-safe direction: a
+    // flag-DB read error must never start shipping tool-call metadata across the
+    // host→control-plane boundary on its own. Same posture as memory-extraction
+    // above, and for the same reason — both read agent transcripts.
+    defaultValue: false,
+    // ADR-0022 operator override. Read by the host flag store's env layer, not
+    // by a hand-written process.env gate — so check-new-env-gates.sh stays quiet
+    // and the escape hatch still exists for a per-host canary.
+    envVar: "AGT_TOOL_CALL_AUDIT_ENABLED",
+    // PLACEHOLDER, deliberately unreachable — see the identical treatment on
+    // `github-broker-credentials` below for the full reasoning. `since` is
+    // advisory: it is read only by computeFlagReach behind GET /admin/reach, so
+    // it changes what an operator is TOLD and does not itself stop a flip.
+    //
+    // The host-side reader ships in whichever agt-cli patch the auto-publish
+    // cuts after this merges, and that number cannot be known while writing
+    // this line. Omitting `since` is NOT the safe default here: it resolves to
+    // `honors`, reporting every host as honouring the flip — including hosts
+    // whose agt-cli has no reader at all. An unreachable value reports `stale`
+    // instead: conservative, and visibly wrong rather than invisibly wrong.
+    //
+    // BEFORE THIS FLAG IS FLIPPED ANYWHERE: replace this with the first
+    // published agt-cli version containing `maybeScanToolCalls`.
+    since: "0.29.0"
+  },
   {
     key: "conversation-eval-backend",
     description: "Backend for host-side conversation-success scoring AND memory extraction (ENG-6581), which share one scorer: anthropic-api = Haiku via a direct Anthropic Messages API fetch (no subprocess); claude-p = Haiku via the `claude -p` subprocess (reuses the agent auth, effectively free under Max but a heavy spawn); local = an OpenAI-compatible loopback endpoint (transcript never leaves the host). Auth for the anthropic-api path comes from AGT_CONV_EVAL_ANTHROPIC_API_KEY (falls back to ANTHROPIC_API_KEY); with no key that path fails closed (eval disabled) rather than reverting to claude-p. Enum.",
@@ -15763,4 +15792,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-TOGADVFR.js.map
+//# sourceMappingURL=chunk-2DEE3OVI.js.map