@integrity-labs/agt-cli 0.28.600 → 0.28.601

package/dist/bin/agt.js

@@ -40,10 +40,10 @@ import {
   success,
   table,
   warn
-} from "../chunk-CA4F6NMI.js";
+} from "../chunk-IXRVFTBR.js";
 import {
   readDirectChatSessionState
-} from "../chunk-Q6LJQ43K.js";
+} from "../chunk-XTLKPF2A.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -73,7 +73,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-PONGSI2H.js";
+} from "../chunk-V2WCVFDA.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4910,7 +4910,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.600" : "dev";
+var cliVersion = true ? "0.28.601" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6090,7 +6090,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.600" : "dev";
+var cliVersion2 = true ? "0.28.601" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-CA4F6NMI.js → chunk-IXRVFTBR.js}

@@ -7,7 +7,7 @@ import {
   expandTemplateVars,
   isolationMode,
   parseEnvIntegrations
-} from "./chunk-Q6LJQ43K.js";
+} from "./chunk-XTLKPF2A.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -48,7 +48,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-PONGSI2H.js";
+} from "./chunk-V2WCVFDA.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6030,7 +6030,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.600" : "dev";
+var agtCliVersion = true ? "0.28.601" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9485,4 +9485,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-CA4F6NMI.js.map
+//# sourceMappingURL=chunk-IXRVFTBR.js.map

package/dist/{chunk-PONGSI2H.js → chunk-V2WCVFDA.js}

@@ -2349,6 +2349,65 @@ var INTEGRATION_REGISTRY = [
       }]
     }
   },
+  {
+    // Ninjafy Notes (ADR-0063, ENG-8842). Meeting capture on the user's own Mac,
+    // delivered to an agent as a tag-granted note the agent reads and summarises.
+    //
+    // No `installable` here, on purpose: ninjafy-notes is a Direct-HTTP SEED
+    // integration (integration-definitions.json), so the seed catalog already
+    // makes it picker-visible. This registry entry exists ONLY to carry the
+    // `premium` descriptor that `isPremiumDefinition` reads — which arms the
+    // per-org opt-in gate and the acknowledgement modal.
+    //
+    // PREMIUM BY ENTITLEMENT, WITH NO METER AND NO RATE CARD (ADR-0063 Decision
+    // 9). Every other premium in this registry is priced because it costs the
+    // platform something per call — a vendor bill, a model call, compute. Notes
+    // costs S3 bytes: speech-to-text runs on the user's Mac, the platform never
+    // summarises (Decision 3 gives that job to the agent, whose context is the
+    // entire value), and a 45-minute meeting is tens of KB of text. The revenue
+    // is the entitlement plus agent-hours — reading and summarising a note burns
+    // the agent's turn, which is already billed, so metering the note as well
+    // would charge for the same work twice through two mechanisms.
+    //
+    // What would change this: a per-note platform-side model call. The concrete
+    // trigger is an AGENTLESS integration destination — "send this meeting
+    // straight to Notion" has no agent to summarise it, so the platform must,
+    // and that call is a real marginal cost. Expect a rate card WITH that slice,
+    // scoped to that path, not applied to every note.
+    //
+    // ADR-0063 Decision 9 cites `agt-live` as the precedent for
+    // entitlement-without-a-rate-card. It is not one: agt-live has no entry in
+    // this registry at all, so `isPremiumDefinition('agt-live')` is false and it
+    // is free on this axis. Its premium tier is `plans.live_premium` via
+    // `getPlanForOrg` (ADR-0043) — a plan-tier entitlement enforced at the
+    // CloudFront edge, a different mechanism that shares a word. Notes is the
+    // first integration to need `pricing: 'included'`, which is why that value
+    // now exists.
+    id: "ninjafy-notes",
+    name: "Ninjafy Notes",
+    category: "workspace-productivity",
+    description: "Meeting notes captured on your Mac and sent to an agent. Ninjafy Notes records and transcribes a meeting on-device \u2014 the audio never leaves your machine \u2014 then hands the transcript to the agents you choose, which read it with your organization's context and write their own summary. Notes are private by default; sending one to an agent is the only thing that grants access.",
+    supported_auth_types: ["none"],
+    capabilities: [
+      {
+        id: "ninjafy-notes:read",
+        name: "Read Notes",
+        description: "List and read the meeting notes this agent has been sent (ninjafy_notes_list, ninjafy_notes_read).",
+        access: "read"
+      },
+      {
+        id: "ninjafy-notes:write-summary",
+        name: "Write Summaries",
+        description: "Write or revise this agent's own summary of a note it was sent (ninjafy_notes_write_summary).",
+        access: "write"
+      }
+    ],
+    beta: true,
+    premium: {
+      pricing: "included",
+      note: "Included in your plan. Transcription runs on your own Mac and no platform summariser runs, so there is nothing metered per note \u2014 the agent turn that reads it is billed as agent-hours like any other."
+    }
+  },
   {
     // Seed-catalog toolkit (composed by the ultimate-app-coder bundle). Registered
     // here only so the manager's ensureToolkitCli installs the binary via the
@@ -4060,6 +4119,20 @@ var KANBAN_NUDGE_ACTIONABLE_STATUSES = ["todo", "in_progress"];
 
 // ../../packages/core/dist/feature-flags/registry.js
 var FLAG_REGISTRY = [
+  {
+    key: "at-rest-v2-writes",
+    description: "ADR-0061 A2\u2192arm cutover (ENG-8944, parent ENG-8764). Gates whether the at-rest writer (encryptSecret/encryptAtRest) emits the v2 AAD-bound envelope when a DecryptContext is supplied; OFF (default) = the legacy v1 envelope (pre-ADR-0061 behaviour). Resolved FLEET-WIDE and process-global via setV2WritesArmed at the API + webapp + cron bootstrap seams, so ONLY the stage value applies \u2014 per-org overrides do not (the crypto writer carries no request/org context). Ships dark. Flip on only once every reader parses v2 (fleet-wide since release A1) AND the re-seal engine can re-seal v2 blobs before any AUTH_ENCRYPTION_KEY rotation (slice 5b). Reversible without redeploy: clearing it returns the writer to v1 within the flag cache TTL; already-written v2 blobs stay readable.",
+    flagType: "boolean",
+    // Declared safe value is `false` = v1 writes, the pre-ADR-0061 behaviour. A
+    // flag-read error must never arm v2 on its own (fail-safe = keep writing v1).
+    defaultValue: false,
+    // Deliberately NOT public (a server/process gate, never read client-side) and
+    // NO envVar (the consumers — API + webapp + cron bootstraps — evaluate the
+    // flag directly; a bare AGT_*_ENABLED env gate would trip check-new-env-gates.sh).
+    // Sensitive: arming changes the durable at-rest ciphertext format fleet-wide, a
+    // deliberate staged security flip, so mutations require explicit confirmation.
+    sensitive: true
+  },
   {
     key: "opencode-host-wizard",
     description: "Show a framework selector (Claude Code | opencode) in the new-host wizard, plus the opencode auth mode (xAI/Grok, per-agent minted keys). Off = the wizard only creates Claude Code hosts (opencode host creation stays CLI/programmatic). Additive UI gate; ships dark. The backend mint + claude_auth_mode=xai are enabled separately.",
@@ -10061,7 +10134,7 @@ var AnchorSessionClient = class {
 // ../../packages/core/dist/auth/oauth-principal.js
 var NOTES_WRITE_SCOPE = "notes:write";
 var USER_PRINCIPAL_SCOPE_LABELS = {
-  [NOTES_WRITE_SCOPE]: "Create meeting notes as you, and read the notes you own"
+  [NOTES_WRITE_SCOPE]: "Create meeting notes as you, read the notes you own, and see the names of your organizations and agents so you can choose where a note goes"
 };
 
 // ../../packages/core/dist/admin-debug/index.js
@@ -11815,4 +11888,4 @@ export {
   minutesSinceLocalMidnight,
   peekCurrentSession
 };
-//# sourceMappingURL=chunk-PONGSI2H.js.map
+//# sourceMappingURL=chunk-V2WCVFDA.js.map