@integrity-labs/agt-cli 0.28.676 → 0.28.678

package/dist/{chunk-AJNES24H.js → chunk-5DHJE2G7.js}

@@ -4950,6 +4950,29 @@ var FLAG_REGISTRY = [
     // first the real cut is higher than this and the pin under-reports.
     since: "0.28.570"
   },
+  {
+    key: "secret-files-tmpfs",
+    description: "Host-side RAM-backing of the per-agent .env.integrations secret files (ENG-9348, epic ENG-9347). When on, the manager turns both copies (the agent-dir file and the project/ mirror) into symlinks pointing at a 0700 per-agent directory under tmpfs (/dev/shm, else /run), so plaintext channel/integration tokens live only in RAM: the persistent EBS volume holds a symlink (no token bytes), an EBS snapshot captures nothing, and a host shutdown is a genuine wipe. Every consumer path is unchanged (same file paths). Boolean gate; ships dark. Fail-safe in every direction \u2014 off is byte-for-byte today; a host with no genuine tmpfs root (e.g. macOS dev) silently keeps the persistent files; a symlink-setup error logs and falls back to the persistent path. Reboot clears tmpfs, and the manager re-backs on its next refresh (surviving reboot is not required \u2014 secrets are re-fetched on refresh).",
+    flagType: "boolean",
+    // Declared safe value is `false` (persistent files, today's behaviour).
+    // Fail-safe direction: a flag-DB read error must never, on its own, start
+    // relocating where prod secret files physically live. Flip on per-host for a
+    // canary, verify no plaintext lands on the persistent volume, then fleet-wide
+    // from the admin Feature Flags page.
+    defaultValue: false,
+    // ADR-0022 operator override, read by the host flag store's env layer (not a
+    // hand-written process.env gate) — same posture as memory-extraction /
+    // tool-call-audit above. Gives a per-host canary before the DB flag exists.
+    envVar: "AGT_SECRET_FILES_TMPFS_ENABLED",
+    // Deliberately-unreachable placeholder until this ships: no published CLI
+    // carries the manager reader + core writer yet, so reach must report "no
+    // host honors" rather than the `honors`-for-everyone that omitting `since`
+    // produces. MOVE THIS PIN to the actual auto-published agt-cli version at
+    // merge (auto-publish patch-bumps from main; verify against the tarball, the
+    // ENG-8575/ENG-9350 lesson) — the marker is `setSecretFileTmpfsBacking` in
+    // package/dist/lib/manager-worker.js.
+    since: "99.0.0"
+  },
   {
     key: "memory-file-tombstones",
     description: "Host-side removal of RETIRED agent memory files (ENG-9257). The control plane sends an explicit tombstone list on /host/memories and the manager moves the matching .md out of the agent's memory directory \u2014 but only when its write-time manifest says the manager itself wrote that exact file and the sha256 still matches, so an agent-edited or hand-authored file is retained and reported instead. Boolean gate; ships dark. Scope is retirement only, never expiry: /host/memories has always withheld expired rows, so an expiry-driven list would make months of accumulated backlog deletable on the first armed tick. This is the ONLY thing that makes retirement visible to the agent, which reads its memory directory straight off disk \u2014 every server-side reader already excludes retired rows, so with this off a retired memory is gone everywhere except the one surface that changes the agent's behaviour.",
@@ -5621,6 +5644,28 @@ var FLAG_REGISTRY = [
     // exactly the org whose brand should be shown.
     public: true
   },
+  {
+    key: "ninjafy-logo",
+    description: "Which Ninjafy logo TREATMENT the console chrome renders (ENG-9365). This is a SUB-SELECTION under ninjafy-brand, not a second brand gate: it is consulted only once ninjafy-brand has already resolved ON, so with the brand off the value is inert and the half-branded state that flag's description calls unreachable stays unreachable. ninjafy-brand remains the single kill switch for the rebrand. It exists so candidate logo treatments can be put in front of a human and compared in the running console, rather than judged from a static export. lockup = mark and wordmark together, both in the brand blue \u2014 exactly what ENG-9298 shipped, so an unset flag is a no-op. two-tone = the mark in brand blue with the wordmark in the neutral text colour (the treatment of the blue-icon/black-wordmark artwork). wordmark = the word alone, no mark. Every treatment is composed from the ENG-9298 geometry \u2014 ENG-9312 pins that the lockup's blue path IS the mark subpath followed by the wordmark subpaths, byte for byte \u2014 so a new treatment is a composition, never a fresh trace, and the three drawings cannot drift apart. Surfaces are the dashboard sidebar and the top nav. The top nav shows the WORDMARK portion at every width whatever the treatment, because ENG-9342 decided that deliberately (a full lockup at the header's icon height crowds the team switcher on a phone) \u2014 so a treatment changes the word's colour there, never whether a mark appears. The admin sidebar (ENG-9323) is NOT wired to this key and always renders the mark; widening it is a separate decision. Resolved SERVER-SIDE in (dashboard)/layout.tsx via getPublicEnumFlagServer, beside ninjafy-brand and in the same single GET /flags round trip, then passed down as a required prop. That is not a style preference: the client hook starts at its default and updates after an async fetch, so a client read would paint one logo and swap it after hydration \u2014 the exact flash ENG-9227 removed from the wordmark and ENG-8858 removed from the palette. Org and team are the useful pilot grains, as for ninjafy-brand: the single consumer evaluates in the active-org cookie scope, so a host- or agent-scoped override row is accepted by the table but never reached by the console.",
+    flagType: "enum",
+    allowedValues: ["lockup", "two-tone", "wordmark"],
+    // Declared safe value is `lockup` — what ENG-9298 shipped. This flag has no
+    // "off" direction: it selects among presentations that are all live-safe, so
+    // fail-safe here means "the treatment currently in production", not the
+    // narrowest one. A flag-DB read error, an archived row, or a stored value
+    // outside allowedValues all resolve here (evaluate.ts normalizeFlagValue),
+    // which is what makes an experimental value impossible to strand.
+    defaultValue: "lockup",
+    // Same trap as ninjafy-brand, and it bites harder here because there are no
+    // client readers of this key AT ALL — it is server-resolved by construction.
+    // `public` does NOT mean "read by a browser"; it means "readable through the
+    // public map". getPublicEnumFlagServer resolves against the same GET /flags
+    // endpoint the browser uses, and that route filters to listPublicFlagKeys()
+    // (routes/flags.ts). Drop `public` and the key is simply absent from the map,
+    // so the helper falls through to its default and returns `lockup` FOREVER —
+    // the dropdown appearing to do nothing, with no error raised anywhere.
+    public: true
+  },
   {
     key: "agent-recruit",
     description: "The `recruit_agent` MCP tool (ENG-8159): lets an ordinary managed agent PROPOSE a new teammate in its own org. The proposal is filed under the `agent.recruit` approval verb and routed to an org owner as a server-rendered card, so this gates the ASK \u2014 nothing is created until a human taps Approve. Deliberately distinct from augmented-support-writes, which gates the concierge's own create_agent surface: the two requesters are separately controllable because an org may well want its support concierge to propose agents without giving every agent in the fleet the same power. Ships dark.",
@@ -10555,6 +10600,9 @@ var USER_PRINCIPAL_SCOPE_LABELS = {
   [NOTES_WRITE_SCOPE]: "Create meeting notes as you, read the notes you own, and see the names of your organizations and agents so you can choose where a note goes"
 };
 
+// ../../packages/core/dist/admin-debug/resume-precondition.js
+var DEFAULT_RESUME_LOOKBACK_MS = 14 * 24 * 60 * 60 * 1e3;
+
 // ../../packages/core/dist/admin-debug/index.js
 var STUCK_RESTART_THRESHOLD_SECONDS = 15 * 60;
 
@@ -12498,4 +12546,4 @@ export {
   minutesSinceLocalMidnight,
   peekCurrentSession
 };
-//# sourceMappingURL=chunk-AJNES24H.js.map
+//# sourceMappingURL=chunk-5DHJE2G7.js.map