@integrity-labs/agt-cli 0.28.565 → 0.28.567

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-I6EWKBSV.js";
+} from "../chunk-IALXJ6H3.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-TOGADVFR.js";
+} from "../chunk-FSWAPB5J.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4834,7 +4834,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.565" : "dev";
+var cliVersion = true ? "0.28.567" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6009,7 +6009,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.565" : "dev";
+var cliVersion2 = true ? "0.28.567" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-TOGADVFR.js → chunk-FSWAPB5J.js}

@@ -10584,6 +10584,35 @@ var FLAG_REGISTRY = [
     // AGT_MEMORY_EXTRACTION_ENABLED set keeps that value until the env is retired.
     envVar: "AGT_MEMORY_EXTRACTION_ENABLED"
   },
+  {
+    key: "tool-call-audit",
+    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; ships dark \u2014 when off the manager reads no transcripts and sends nothing, so 0 agent_tool_calls rows fleet-wide is the expected steady state until it is armed. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
+    flagType: "boolean",
+    // Declared safe value is `false` (no extraction). Fail-safe direction: a
+    // flag-DB read error must never start shipping tool-call metadata across the
+    // host→control-plane boundary on its own. Same posture as memory-extraction
+    // above, and for the same reason — both read agent transcripts.
+    defaultValue: false,
+    // ADR-0022 operator override. Read by the host flag store's env layer, not
+    // by a hand-written process.env gate — so check-new-env-gates.sh stays quiet
+    // and the escape hatch still exists for a per-host canary.
+    envVar: "AGT_TOOL_CALL_AUDIT_ENABLED",
+    // PLACEHOLDER, deliberately unreachable — see the identical treatment on
+    // `github-broker-credentials` below for the full reasoning. `since` is
+    // advisory: it is read only by computeFlagReach behind GET /admin/reach, so
+    // it changes what an operator is TOLD and does not itself stop a flip.
+    //
+    // The host-side reader ships in whichever agt-cli patch the auto-publish
+    // cuts after this merges, and that number cannot be known while writing
+    // this line. Omitting `since` is NOT the safe default here: it resolves to
+    // `honors`, reporting every host as honouring the flip — including hosts
+    // whose agt-cli has no reader at all. An unreachable value reports `stale`
+    // instead: conservative, and visibly wrong rather than invisibly wrong.
+    //
+    // BEFORE THIS FLAG IS FLIPPED ANYWHERE: replace this with the first
+    // published agt-cli version containing `maybeScanToolCalls`.
+    since: "0.29.0"
+  },
   {
     key: "conversation-eval-backend",
     description: "Backend for host-side conversation-success scoring AND memory extraction (ENG-6581), which share one scorer: anthropic-api = Haiku via a direct Anthropic Messages API fetch (no subprocess); claude-p = Haiku via the `claude -p` subprocess (reuses the agent auth, effectively free under Max but a heavy spawn); local = an OpenAI-compatible loopback endpoint (transcript never leaves the host). Auth for the anthropic-api path comes from AGT_CONV_EVAL_ANTHROPIC_API_KEY (falls back to ANTHROPIC_API_KEY); with no key that path fails closed (eval disabled) rather than reverting to claude-p. Enum.",
@@ -15434,9 +15463,10 @@ function resetRestartCount(codeName) {
   const session = sessions2.get(codeName);
   if (session) session.restartCount = 0;
 }
-function collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor) {
+function collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeFor) {
   return codeNames.map((codeName) => {
     const quarantinedChannels = quarantineEntriesFor?.(codeName) ?? [];
+    const spawnOutcome = spawnOutcomeFor?.(codeName);
     const oc = getOpencodeSessionState(codeName);
     if (oc) {
       const serveAlive = isOpencodeSessionHealthy(codeName);
@@ -15456,6 +15486,10 @@ function collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor) {
         channelStatus: null,
         isolated: isolationMode(codeName) === "docker",
         quarantinedChannels,
+        // ENG-7188: undefined when the accessor is absent = NO SIGNAL. Both
+        // return paths carry it; a field on only one is the divergence class
+        // this card is about.
+        spawnOutcome,
         // opencode does not use CLAUDE.md as its identity file, so there is
         // nothing to measure and nothing to alarm on — explicit null (no
         // signal) rather than whatever a stale file might happen to contain.
@@ -15531,6 +15565,10 @@ function collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor) {
       channelStatus,
       isolated: isolationMode(codeName) === "docker",
       quarantinedChannels,
+      // ENG-7188: undefined when the accessor is absent = NO SIGNAL. Both
+      // return paths carry it; a field on only one is the divergence class
+      // this card is about.
+      spawnOutcome,
       claudeMd
     };
   });
@@ -15763,4 +15801,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-TOGADVFR.js.map
+//# sourceMappingURL=chunk-FSWAPB5J.js.map