@integrity-labs/agt-cli 0.28.670 → 0.28.671

package/dist/{chunk-Z4O42VGJ.js → chunk-ZU2BHLUS.js}

@@ -9,7 +9,7 @@ import {
   isolationMode,
   log,
   parseEnvIntegrations
-} from "./chunk-5GDKWIB3.js";
+} from "./chunk-57XP5OG6.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -56,7 +56,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-HGVJVYKW.js";
+} from "./chunk-DWFN5PMF.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6347,7 +6347,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.670" : "dev";
+var agtCliVersion = true ? "0.28.671" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10089,4 +10089,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-Z4O42VGJ.js.map
+//# sourceMappingURL=chunk-ZU2BHLUS.js.map

package/dist/{claude-pair-runtime-W6KBVHK4.js → claude-pair-runtime-ANNQRKO4.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-RZH67PNC.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-LTFB4M53.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-W6KBVHK4.js.map
+//# sourceMappingURL=claude-pair-runtime-ANNQRKO4.js.map

package/dist/lib/manager-worker.js

@@ -55,7 +55,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-Z4O42VGJ.js";
+} from "../chunk-ZU2BHLUS.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -111,7 +111,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-5GDKWIB3.js";
+} from "../chunk-57XP5OG6.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -192,7 +192,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-HGVJVYKW.js";
+} from "../chunk-DWFN5PMF.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -11611,7 +11611,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-NPNMNOFF.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-P2S3UMRE.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -12256,7 +12256,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.670" : "dev";
+var agtCliVersion = true ? "0.28.671" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -13620,7 +13620,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-RZH67PNC.js");
+      const { collectDiagnostics } = await import("../persistent-session-LTFB4M53.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -13736,7 +13736,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-RZH67PNC.js");
+      const { collectDiagnostics } = await import("../persistent-session-LTFB4M53.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor) : void 0;
       let tailscaleHostname;
@@ -13888,7 +13888,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-NPNMNOFF.js");
+      } = await import("../responsiveness-probe-P2S3UMRE.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -13998,7 +13998,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-NPNMNOFF.js");
+        } = await import("../responsiveness-probe-P2S3UMRE.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -14154,7 +14154,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-CFAYSZ43.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-YHSQBOB4.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -17891,7 +17891,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-RZH67PNC.js");
+        const { collectDiagnostics } = await import("../persistent-session-LTFB4M53.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -17942,7 +17942,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-RZH67PNC.js");
+      const { collectDiagnostics } = await import("../persistent-session-LTFB4M53.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -18573,7 +18573,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-W6KBVHK4.js");
+  } = await import("../claude-pair-runtime-ANNQRKO4.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -36599,6 +36599,27 @@ var FLAG_REGISTRY = [
     // never auto-attach an integration nobody asked for, and both ENG-8332
     // prerequisites above are still open.
     defaultValue: false
+  },
+  {
+    key: "host-right-sizing",
+    description: 'ADR-0072. Gates the HostRightSizer cron, which evaluates every managed EC2 host against 7 days of memory and CPU and (at enforce) resizes it one rung inside the host\'s own maintenance window. off = the cron returns immediately: nothing is read, nothing is written. shadow = evaluate, persist a verdict row per host, and post the weekly summary \u2014 NO resize, and no actor code runs. enforce = as shadow, plus enqueue resizes. AS OF PHASE 1 (ENG-9324) THERE IS NO ACTOR, SO `enforce` BEHAVES EXACTLY LIKE `shadow`: selecting it records the mode on each verdict row and changes nothing else, and no host is resized. This note comes out when the Phase 3 actor lands; until then treat enforce as shadow-with-a-label, not as an armed fleet. Ships dark: this mechanism ends in a stop/start of a customer production host, so an unreachable flag store must resolve to NOT acting. TWO BOUNDS WORTH KNOWING BEFORE FLIPPING. (1) off is not a stop button for in-flight work \u2014 HostResizeDispatcher reads only ec2_pending_instance_type and knows nothing about this flag, so flipping to off stops new enqueues and lets every already-enqueued host complete its stop/modify/start; combined with the ~5-minute eval cache the true blast unit is one tick of open windows. A real kill switch has to live inside the dispatcher. (2) BYO hosts (ADR-0028) are EXCLUDED in Phase 1, not merely clamped to shadow: their instances live in the customer AWS account while the cron authenticates only with the platform provisioner role, so their metrics read as empty and every evaluation would land as unknown. ADR-0072 \xA79 intends them to be shadow-only ("we recommend; they resize") and making that real needs the per-host cross_account_role_arn resolved - its own slice. Pool hosts (ADR-0042) are excluded too, while host_kind is unset in prod. Both are eligibility predicates applied by the cron, documented here so the admin page showing enforce for such an org is not read as behaviour.',
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // Ships dark at `off`, NOT `shadow`. Diverging deliberately from
+    // slack-scheduled-channel-guard, whose shadow is a free local log line:
+    // THIS shadow spends a fleet-wide CloudWatch GetMetricData sweep per tick
+    // and writes a row per host, so defaulting to shadow would newly bill and
+    // newly write for every org that never opted in. shadow is the per-canary
+    // opt-in; enforce is the audited flip after the Phase 2 review.
+    defaultValue: "off",
+    // Evaluated centrally, in the API cron — there is no host-side reader, so
+    // no `since` and no dependence on fleet agt-cli convergence.
+    // NOTE: deliberately NO envVar. ADR-0072 §9 wants this gate scoped per
+    // org/host, and an envVar would be highest-precedence (ADR-0022) — a
+    // literal in sst.config.ts would pin every stage and make the admin page a
+    // control that does nothing, which is the ENG-8303 class exactly.
+    // enforce arms automated downtime on a customer's production host.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/index.js

@@ -43538,6 +43538,27 @@ var FLAG_REGISTRY = [
     // never auto-attach an integration nobody asked for, and both ENG-8332
     // prerequisites above are still open.
     defaultValue: false
+  },
+  {
+    key: "host-right-sizing",
+    description: 'ADR-0072. Gates the HostRightSizer cron, which evaluates every managed EC2 host against 7 days of memory and CPU and (at enforce) resizes it one rung inside the host\'s own maintenance window. off = the cron returns immediately: nothing is read, nothing is written. shadow = evaluate, persist a verdict row per host, and post the weekly summary \u2014 NO resize, and no actor code runs. enforce = as shadow, plus enqueue resizes. AS OF PHASE 1 (ENG-9324) THERE IS NO ACTOR, SO `enforce` BEHAVES EXACTLY LIKE `shadow`: selecting it records the mode on each verdict row and changes nothing else, and no host is resized. This note comes out when the Phase 3 actor lands; until then treat enforce as shadow-with-a-label, not as an armed fleet. Ships dark: this mechanism ends in a stop/start of a customer production host, so an unreachable flag store must resolve to NOT acting. TWO BOUNDS WORTH KNOWING BEFORE FLIPPING. (1) off is not a stop button for in-flight work \u2014 HostResizeDispatcher reads only ec2_pending_instance_type and knows nothing about this flag, so flipping to off stops new enqueues and lets every already-enqueued host complete its stop/modify/start; combined with the ~5-minute eval cache the true blast unit is one tick of open windows. A real kill switch has to live inside the dispatcher. (2) BYO hosts (ADR-0028) are EXCLUDED in Phase 1, not merely clamped to shadow: their instances live in the customer AWS account while the cron authenticates only with the platform provisioner role, so their metrics read as empty and every evaluation would land as unknown. ADR-0072 \xA79 intends them to be shadow-only ("we recommend; they resize") and making that real needs the per-host cross_account_role_arn resolved - its own slice. Pool hosts (ADR-0042) are excluded too, while host_kind is unset in prod. Both are eligibility predicates applied by the cron, documented here so the admin page showing enforce for such an org is not read as behaviour.',
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // Ships dark at `off`, NOT `shadow`. Diverging deliberately from
+    // slack-scheduled-channel-guard, whose shadow is a free local log line:
+    // THIS shadow spends a fleet-wide CloudWatch GetMetricData sweep per tick
+    // and writes a row per host, so defaulting to shadow would newly bill and
+    // newly write for every org that never opted in. shadow is the per-canary
+    // opt-in; enforce is the audited flip after the Phase 2 review.
+    defaultValue: "off",
+    // Evaluated centrally, in the API cron — there is no host-side reader, so
+    // no `since` and no dependence on fleet agt-cli convergence.
+    // NOTE: deliberately NO envVar. ADR-0072 §9 wants this gate scoped per
+    // org/host, and an envVar would be highest-precedence (ADR-0022) — a
+    // literal in sst.config.ts would pin every stage and make the admin page a
+    // control that does nothing, which is the ENG-8303 class exactly.
+    // enforce arms automated downtime on a customer's production host.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/origami.js

@@ -42349,6 +42349,27 @@ var FLAG_REGISTRY = [
     // never auto-attach an integration nobody asked for, and both ENG-8332
     // prerequisites above are still open.
     defaultValue: false
+  },
+  {
+    key: "host-right-sizing",
+    description: 'ADR-0072. Gates the HostRightSizer cron, which evaluates every managed EC2 host against 7 days of memory and CPU and (at enforce) resizes it one rung inside the host\'s own maintenance window. off = the cron returns immediately: nothing is read, nothing is written. shadow = evaluate, persist a verdict row per host, and post the weekly summary \u2014 NO resize, and no actor code runs. enforce = as shadow, plus enqueue resizes. AS OF PHASE 1 (ENG-9324) THERE IS NO ACTOR, SO `enforce` BEHAVES EXACTLY LIKE `shadow`: selecting it records the mode on each verdict row and changes nothing else, and no host is resized. This note comes out when the Phase 3 actor lands; until then treat enforce as shadow-with-a-label, not as an armed fleet. Ships dark: this mechanism ends in a stop/start of a customer production host, so an unreachable flag store must resolve to NOT acting. TWO BOUNDS WORTH KNOWING BEFORE FLIPPING. (1) off is not a stop button for in-flight work \u2014 HostResizeDispatcher reads only ec2_pending_instance_type and knows nothing about this flag, so flipping to off stops new enqueues and lets every already-enqueued host complete its stop/modify/start; combined with the ~5-minute eval cache the true blast unit is one tick of open windows. A real kill switch has to live inside the dispatcher. (2) BYO hosts (ADR-0028) are EXCLUDED in Phase 1, not merely clamped to shadow: their instances live in the customer AWS account while the cron authenticates only with the platform provisioner role, so their metrics read as empty and every evaluation would land as unknown. ADR-0072 \xA79 intends them to be shadow-only ("we recommend; they resize") and making that real needs the per-host cross_account_role_arn resolved - its own slice. Pool hosts (ADR-0042) are excluded too, while host_kind is unset in prod. Both are eligibility predicates applied by the cron, documented here so the admin page showing enforce for such an org is not read as behaviour.',
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // Ships dark at `off`, NOT `shadow`. Diverging deliberately from
+    // slack-scheduled-channel-guard, whose shadow is a free local log line:
+    // THIS shadow spends a fleet-wide CloudWatch GetMetricData sweep per tick
+    // and writes a row per host, so defaulting to shadow would newly bill and
+    // newly write for every org that never opted in. shadow is the per-canary
+    // opt-in; enforce is the audited flip after the Phase 2 review.
+    defaultValue: "off",
+    // Evaluated centrally, in the API cron — there is no host-side reader, so
+    // no `since` and no dependence on fleet agt-cli convergence.
+    // NOTE: deliberately NO envVar. ADR-0072 §9 wants this gate scoped per
+    // org/host, and an envVar would be highest-precedence (ADR-0022) — a
+    // literal in sst.config.ts would pin every stage and make the admin page a
+    // control that does nothing, which is the ENG-8303 class exactly.
+    // enforce arms automated downtime on a customer's production host.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/slack-channel.js

@@ -36832,6 +36832,27 @@ var FLAG_REGISTRY = [
     // never auto-attach an integration nobody asked for, and both ENG-8332
     // prerequisites above are still open.
     defaultValue: false
+  },
+  {
+    key: "host-right-sizing",
+    description: 'ADR-0072. Gates the HostRightSizer cron, which evaluates every managed EC2 host against 7 days of memory and CPU and (at enforce) resizes it one rung inside the host\'s own maintenance window. off = the cron returns immediately: nothing is read, nothing is written. shadow = evaluate, persist a verdict row per host, and post the weekly summary \u2014 NO resize, and no actor code runs. enforce = as shadow, plus enqueue resizes. AS OF PHASE 1 (ENG-9324) THERE IS NO ACTOR, SO `enforce` BEHAVES EXACTLY LIKE `shadow`: selecting it records the mode on each verdict row and changes nothing else, and no host is resized. This note comes out when the Phase 3 actor lands; until then treat enforce as shadow-with-a-label, not as an armed fleet. Ships dark: this mechanism ends in a stop/start of a customer production host, so an unreachable flag store must resolve to NOT acting. TWO BOUNDS WORTH KNOWING BEFORE FLIPPING. (1) off is not a stop button for in-flight work \u2014 HostResizeDispatcher reads only ec2_pending_instance_type and knows nothing about this flag, so flipping to off stops new enqueues and lets every already-enqueued host complete its stop/modify/start; combined with the ~5-minute eval cache the true blast unit is one tick of open windows. A real kill switch has to live inside the dispatcher. (2) BYO hosts (ADR-0028) are EXCLUDED in Phase 1, not merely clamped to shadow: their instances live in the customer AWS account while the cron authenticates only with the platform provisioner role, so their metrics read as empty and every evaluation would land as unknown. ADR-0072 \xA79 intends them to be shadow-only ("we recommend; they resize") and making that real needs the per-host cross_account_role_arn resolved - its own slice. Pool hosts (ADR-0042) are excluded too, while host_kind is unset in prod. Both are eligibility predicates applied by the cron, documented here so the admin page showing enforce for such an org is not read as behaviour.',
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // Ships dark at `off`, NOT `shadow`. Diverging deliberately from
+    // slack-scheduled-channel-guard, whose shadow is a free local log line:
+    // THIS shadow spends a fleet-wide CloudWatch GetMetricData sweep per tick
+    // and writes a row per host, so defaulting to shadow would newly bill and
+    // newly write for every org that never opted in. shadow is the per-canary
+    // opt-in; enforce is the audited flip after the Phase 2 review.
+    defaultValue: "off",
+    // Evaluated centrally, in the API cron — there is no host-side reader, so
+    // no `since` and no dependence on fleet agt-cli convergence.
+    // NOTE: deliberately NO envVar. ADR-0072 §9 wants this gate scoped per
+    // org/host, and an envVar would be highest-precedence (ADR-0022) — a
+    // literal in sst.config.ts would pin every stage and make the admin page a
+    // control that does nothing, which is the ENG-8303 class exactly.
+    // enforce arms automated downtime on a customer's production host.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/telegram-channel.js

@@ -36976,6 +36976,27 @@ var FLAG_REGISTRY = [
     // never auto-attach an integration nobody asked for, and both ENG-8332
     // prerequisites above are still open.
     defaultValue: false
+  },
+  {
+    key: "host-right-sizing",
+    description: 'ADR-0072. Gates the HostRightSizer cron, which evaluates every managed EC2 host against 7 days of memory and CPU and (at enforce) resizes it one rung inside the host\'s own maintenance window. off = the cron returns immediately: nothing is read, nothing is written. shadow = evaluate, persist a verdict row per host, and post the weekly summary \u2014 NO resize, and no actor code runs. enforce = as shadow, plus enqueue resizes. AS OF PHASE 1 (ENG-9324) THERE IS NO ACTOR, SO `enforce` BEHAVES EXACTLY LIKE `shadow`: selecting it records the mode on each verdict row and changes nothing else, and no host is resized. This note comes out when the Phase 3 actor lands; until then treat enforce as shadow-with-a-label, not as an armed fleet. Ships dark: this mechanism ends in a stop/start of a customer production host, so an unreachable flag store must resolve to NOT acting. TWO BOUNDS WORTH KNOWING BEFORE FLIPPING. (1) off is not a stop button for in-flight work \u2014 HostResizeDispatcher reads only ec2_pending_instance_type and knows nothing about this flag, so flipping to off stops new enqueues and lets every already-enqueued host complete its stop/modify/start; combined with the ~5-minute eval cache the true blast unit is one tick of open windows. A real kill switch has to live inside the dispatcher. (2) BYO hosts (ADR-0028) are EXCLUDED in Phase 1, not merely clamped to shadow: their instances live in the customer AWS account while the cron authenticates only with the platform provisioner role, so their metrics read as empty and every evaluation would land as unknown. ADR-0072 \xA79 intends them to be shadow-only ("we recommend; they resize") and making that real needs the per-host cross_account_role_arn resolved - its own slice. Pool hosts (ADR-0042) are excluded too, while host_kind is unset in prod. Both are eligibility predicates applied by the cron, documented here so the admin page showing enforce for such an org is not read as behaviour.',
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    // Ships dark at `off`, NOT `shadow`. Diverging deliberately from
+    // slack-scheduled-channel-guard, whose shadow is a free local log line:
+    // THIS shadow spends a fleet-wide CloudWatch GetMetricData sweep per tick
+    // and writes a row per host, so defaulting to shadow would newly bill and
+    // newly write for every org that never opted in. shadow is the per-canary
+    // opt-in; enforce is the audited flip after the Phase 2 review.
+    defaultValue: "off",
+    // Evaluated centrally, in the API cron — there is no host-side reader, so
+    // no `since` and no dependence on fleet agt-cli convergence.
+    // NOTE: deliberately NO envVar. ADR-0072 §9 wants this gate scoped per
+    // org/host, and an envVar would be highest-precedence (ADR-0022) — a
+    // literal in sst.config.ts would pin every stage and make the admin page a
+    // control that does nothing, which is the ENG-8303 class exactly.
+    // enforce arms automated downtime on a customer's production host.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/{persistent-session-RZH67PNC.js → persistent-session-LTFB4M53.js}

@@ -43,8 +43,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-5GDKWIB3.js";
-import "./chunk-HGVJVYKW.js";
+} from "./chunk-57XP5OG6.js";
+import "./chunk-DWFN5PMF.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -92,4 +92,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-RZH67PNC.js.map
+//# sourceMappingURL=persistent-session-LTFB4M53.js.map

package/dist/{responsiveness-probe-NPNMNOFF.js → responsiveness-probe-P2S3UMRE.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-5GDKWIB3.js";
-import "./chunk-HGVJVYKW.js";
+} from "./chunk-57XP5OG6.js";
+import "./chunk-DWFN5PMF.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -727,4 +727,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-NPNMNOFF.js.map
+//# sourceMappingURL=responsiveness-probe-P2S3UMRE.js.map

package/dist/{session-auth-dead-CFAYSZ43.js → session-auth-dead-YHSQBOB4.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-HGVJVYKW.js";
+} from "./chunk-DWFN5PMF.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-CFAYSZ43.js.map
+//# sourceMappingURL=session-auth-dead-YHSQBOB4.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.670",
+  "version": "0.28.671",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {