@integrity-labs/agt-cli 0.28.678 → 0.28.680

package/dist/{chunk-LTOGVWUR.js → chunk-ZKNKHAHX.js}

@@ -17,7 +17,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-5DHJE2G7.js";
+} from "./chunk-OOFJUWMT.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -4531,4 +4531,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-LTOGVWUR.js.map
+//# sourceMappingURL=chunk-ZKNKHAHX.js.map

package/dist/{claude-pair-runtime-X6CWJNW2.js → claude-pair-runtime-HPCXQDVY.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-EZEYH3PM.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-OQ7MFVEH.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-X6CWJNW2.js.map
+//# sourceMappingURL=claude-pair-runtime-HPCXQDVY.js.map

package/dist/lib/manager-worker.js

@@ -55,7 +55,7 @@ import {
   setConfigHash,
   setSecretFileTmpfsBacking,
   tripClass
-} from "../chunk-3PCP5NT2.js";
+} from "../chunk-4JTDWOBW.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -113,7 +113,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-LTOGVWUR.js";
+} from "../chunk-ZKNKHAHX.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -194,7 +194,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-5DHJE2G7.js";
+} from "../chunk-OOFJUWMT.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -11712,7 +11712,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-VS6GODYP.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-MDL53OT2.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -12360,7 +12360,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.678" : "dev";
+var agtCliVersion = true ? "0.28.680" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -13821,7 +13821,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-EZEYH3PM.js");
+      const { collectDiagnostics } = await import("../persistent-session-OQ7MFVEH.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -13938,7 +13938,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-EZEYH3PM.js");
+      const { collectDiagnostics } = await import("../persistent-session-OQ7MFVEH.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor) : void 0;
       let tailscaleHostname;
@@ -14090,7 +14090,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-VS6GODYP.js");
+      } = await import("../responsiveness-probe-MDL53OT2.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -14200,7 +14200,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-VS6GODYP.js");
+        } = await import("../responsiveness-probe-MDL53OT2.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -14356,7 +14356,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-7U24PZZS.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-4OJ2XLH4.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -18117,7 +18117,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-EZEYH3PM.js");
+        const { collectDiagnostics } = await import("../persistent-session-OQ7MFVEH.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -18168,7 +18168,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-EZEYH3PM.js");
+      const { collectDiagnostics } = await import("../persistent-session-OQ7MFVEH.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor)
@@ -18800,7 +18800,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-X6CWJNW2.js");
+  } = await import("../claude-pair-runtime-HPCXQDVY.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -32291,6 +32291,15 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // long note on the window-capture click handler for why this is a mode and
   // not just always-on.
   var editMode = false;
+  // ENG-9383: the ONE gate every edit-entry path asks. It exists because the
+  // last time a path was added, the old ones did not come with it: ENG-8477
+  // introduced editMode for the deep-probe handlers and left the ENG-6821
+  // direct click/hover on an arming-only check, so text stayed editable with
+  // the toggle off and the button gated one of two paths. A funnel is the fix
+  // for that class of bug; adding the term twice is only the fix for this
+  // instance of it. A fifth handler cannot forget the mode.
+  function canEdit(){ return editEnabled && editMode && !editing; }
+  var hoverCued = []; // ENG-9383: elements currently wearing the mouseover cue
 
   // Element-child indices from <body> down to el. Counts ELEMENT children only
   // (children, not childNodes), matching how the server walks source_html; our
@@ -32484,14 +32493,48 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Hover affordance (only when armed and not mid-edit). Highlight leaves AND
   // inline-only containers (their bare text is per-node editable, ENG-6856).
   document.addEventListener('mouseover', function(e){
-    if(!editEnabled||editing) return; var el=e.target;
-    if(editable(el)||inlineOnlyEditable(el)){ el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; }
+    if(!canEdit()) return; var el=e.target;
+    if(editable(el)||inlineOnlyEditable(el)){
+      // ENG-9383: remember what the author's cursor was before we overwrite it.
+      // Blanking it on the way out would delete an inline cursor the artefact
+      // set itself; '' is a legitimate saved value meaning "there was none".
+      if(el.__alCur===undefined) el.__alCur = el.style.cursor || '';
+      el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; hoverCued.push(el);
+    }
   });
   document.addEventListener('mouseout', function(e){
-    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; el.__alHover=0; }
+    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; restoreCursor(el); el.__alHover=0; dropHoverCue(el); }
   });
+  // ENG-9383 (CodeRabbit on #4956): the cue is an outline AND an I-beam cursor.
+  // Clearing only the outline leaves the text still saying "you can type here"
+  // on a page that will now refuse the click - the same misdirection this ticket
+  // is about, one property over.
+  function restoreCursor(el){
+    if(el.__alCur!==undefined){ try{ el.style.cursor=el.__alCur; }catch(e){} el.__alCur=undefined; }
+  }
+  // Keep hoverCued bounded. Without this it grows once per hovered element for
+  // the life of the page and pins every one of them against GC - a list that
+  // only ever empties when the viewer toggles the mode off is a leak on any page
+  // nobody toggles.
+  function dropHoverCue(el){
+    var i=hoverCued.indexOf(el); if(i!==-1) hoverCued.splice(i,1);
+  }
+  // ENG-9383: drop every outline the mouseover cue left behind, without waiting
+  // for a mouseout that may never come - the mode can go off while the pointer is
+  // parked on the text, and then the artefact wears a dashed "editable" outline
+  // on a page where you no longer can. Tracked in a list rather than queried back
+  // out of the DOM: more than one element can carry the cue if the pointer moved
+  // between mouseover and mouseout, and the bridge should not depend on a
+  // selector matching an inline style it wrote.
+  function clearHoverCues(){
+    for(var i=0;i<hoverCued.length;i++){
+      var el=hoverCued[i];
+      if(el && el.__alHover && el!==editing){ try{ el.style.outline=''; }catch(e){} restoreCursor(el); el.__alHover=0; }
+    }
+    hoverCued.length=0;
+  }
   document.addEventListener('click', function(e){
-    if(!editEnabled||editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // a selection => comment flow
     var el=e.target;
     if(editable(el)){ e.preventDefault(); e.stopPropagation(); startEdit(el); return; }
@@ -32535,7 +32578,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Deliberately general: nothing here knows about .clickzone or any class name.
   // It fixes any artefact that covers its own content.
   window.addEventListener('click', function(e){
-    if(!editEnabled || !editMode || editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // selection => comment flow
     var t=e.target;
     // Our own toolbar (Save/Cancel) must keep its clicks.
@@ -32593,7 +32636,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     hoverEl=null;
   }
   document.addEventListener('mousemove', function(e){
-    if(!editEnabled || !editMode || editing){ clearDeepHover(); return; }
+    if(!canEdit()){ clearDeepHover(); return; }
     var t=e.target;
     if(editable(t)||inlineOnlyEditable(t)){ clearDeepHover(); return; }
     var now=Date.now(); if(now-hoverProbeAt<80) return; hoverProbeAt=now;
@@ -32693,12 +32736,17 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     var d=e.data; if(!d || d['${MARKUP_CONTROL_MARKER}']!==true) return;
     if(d.type==='enable-edit'){ editEnabled=true; }
     else if(d.type==='enable-comment'){ commentEnabled=true; }
-    // ENG-8477: the viewer toggled Edit text in the shell. Turning it OFF must
+    // ENG-8477: the viewer toggled Edit mode in the shell. Turning it OFF must
     // also close anything open and drop the hover cue, or the artefact is left
     // wearing our outlines with no way to clear them.
+    // ENG-9383: clearDeepHover() only knows the deep-probe path's outline. The
+    // ENG-6821 mouseover path marks its own element with __alHover and relies on
+    // mouseout to undo it - which never fires if the pointer is still sitting on
+    // the text when the mode goes off, leaving a dashed "you can edit this"
+    // outline on a page where you now cannot. Clear both.
     else if(d.type==='set-edit-mode'){
       editMode = !!d.on;
-      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); }
+      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); clearHoverCues(); }
     }
     else if(d.type==='edit-result'){
       if(d.ok){ /* republish hot-swaps the iframe; nothing to do */ }
@@ -35909,14 +35957,15 @@ var FLAG_REGISTRY = [
     // hand-written process.env gate) — same posture as memory-extraction /
     // tool-call-audit above. Gives a per-host canary before the DB flag exists.
     envVar: "AGT_SECRET_FILES_TMPFS_ENABLED",
-    // Deliberately-unreachable placeholder until this ships: no published CLI
-    // carries the manager reader + core writer yet, so reach must report "no
-    // host honors" rather than the `honors`-for-everyone that omitting `since`
-    // produces. MOVE THIS PIN to the actual auto-published agt-cli version at
-    // merge (auto-publish patch-bumps from main; verify against the tarball, the
-    // ENG-8575/ENG-9350 lesson) — the marker is `setSecretFileTmpfsBacking` in
-    // package/dist/lib/manager-worker.js.
-    since: "99.0.0"
+    // The real published build that carries the manager reader + core writer,
+    // replacing the deliberately-unreachable `99.0.0` this flag shipped with.
+    // Verified against the tarball (`npm pack @integrity-labs/agt-cli@0.28.678`):
+    // `setSecretFileTmpfsBacking` is present in package/dist/lib/manager-worker.js
+    // and the `secret-files-tmpfs` key ships in the bundle. Auto-publish patch-
+    // bumps from main, so if a CLI-touching PR landed between the ENG-9348 merge
+    // and this one the real cut is higher than 0.28.678 and reach under-reports;
+    // re-verify before flipping the flag on for a canary (ENG-8575/ENG-9350).
+    since: "0.28.678"
   },
   {
     key: "memory-file-tombstones",
@@ -36700,6 +36749,17 @@ var FLAG_REGISTRY = [
     // control that does nothing, which is the ENG-8303 class exactly.
     // enforce arms automated downtime on a customer's production host.
     sensitive: true
+  },
+  {
+    key: "live-meeting-advisor",
+    description: "Live meeting advising in Ninja Notes (ENG-9381). When ON for an org, a person recording a meeting on the Mac may arm an agent to watch it in flight: audio chunks stream to POST /notes/live/:id/chunks, a server-side Haiku vet decides moment by moment whether to escalate, and escalations reach the agent in a server-minted chat thread. Gates the CAPABILITY, not a surface: the refusal is in startLiveAdvisorSession, so a client that ignores the flag still cannot open a session, and GET /notes/destinations reports the same answer as advisor_enabled so the app can skip the arming modal entirely. Boolean gate; ships dark. OFF NEVER COSTS THE RECORDING. An unentitled org \u2014 or a flag read that fails \u2014 costs the advisor only; the microphone still starts and the note is still transcribed and delivered. That direction is deliberate: the user pressed Record and a recording is what they are owed, while arming on a failed read would spend money per minute on a session nobody confirmed. Deliberately NO envVar. This is an org-scoped gate, and an envVar is highest-precedence per ADR-0022 \u2014 a literal in sst.config.ts would pin every stage and make the admin control do nothing, the ENG-8303 class exactly.",
+    flagType: "boolean",
+    defaultValue: false,
+    // Turning it ON arms a per-minute-metered capability AND starts streaming
+    // meeting content to a server-side vet. Both halves are the deliberate,
+    // audited decision ADR-0022 §4 reserves confirmation for — same treatment as
+    // agent-hours-billing-enabled.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/index.js

@@ -37038,6 +37038,30 @@ var BLOCKED_ON_ME_SECTION_NOTE = "_Another agent has PARKED its own work until y
 var HUMAN_ASSIGNED_SECTION_HEADING = "Assigned to a person (not yours to action)";
 var HUMAN_ASSIGNED_SECTION_NOTE = "_These belong to a person, not to you. You cannot move, note or complete them \u2014 every kanban write is refused. If the work is finished (or was never really theirs), use `kanban_recall` to pull the card back onto your board, then close it as normal._";
 
+// src/kanban-peek-render.ts
+var PEEK_RENDER_COLUMNS = [
+  ["in_progress", "in progress"],
+  ["todo", "todo"],
+  ["backlog", "backlog"],
+  ["waiting", "waiting"],
+  ["needs_attention", "needs attention"]
+];
+function formatPeekAge(ageHours) {
+  if (!Number.isFinite(ageHours) || ageHours <= 0) return "<1h";
+  if (ageHours < 48) return `${Math.floor(ageHours)}h`;
+  return `${Math.floor(ageHours / 24)}d`;
+}
+function renderKanbanPeek(data, fallbackTeam) {
+  const parts = PEEK_RENDER_COLUMNS.map(([key, label]) => {
+    const count = data[key];
+    const oldest = data.oldest?.[key];
+    const age = oldest === void 0 ? "" : ` (oldest ${formatPeekAge(oldest.age_hours)}, id ${oldest.card_id})`;
+    return `${label}: ${count}${age}`;
+  });
+  const where = data.cross_team ? ` on team ${data.target_team ?? fallbackTeam ?? "?"}` : "";
+  return `${data.target_agent}${where} \u2014 ${parts.join(" \xB7 ")}`;
+}
+
 // src/kanban-person-waiting-kind.ts
 function isPersonWaitingKindMcp(kind) {
   if (kind === void 0 || kind === null || kind === "") return true;
@@ -39667,6 +39691,15 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // long note on the window-capture click handler for why this is a mode and
   // not just always-on.
   var editMode = false;
+  // ENG-9383: the ONE gate every edit-entry path asks. It exists because the
+  // last time a path was added, the old ones did not come with it: ENG-8477
+  // introduced editMode for the deep-probe handlers and left the ENG-6821
+  // direct click/hover on an arming-only check, so text stayed editable with
+  // the toggle off and the button gated one of two paths. A funnel is the fix
+  // for that class of bug; adding the term twice is only the fix for this
+  // instance of it. A fifth handler cannot forget the mode.
+  function canEdit(){ return editEnabled && editMode && !editing; }
+  var hoverCued = []; // ENG-9383: elements currently wearing the mouseover cue
 
   // Element-child indices from <body> down to el. Counts ELEMENT children only
   // (children, not childNodes), matching how the server walks source_html; our
@@ -39860,14 +39893,48 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Hover affordance (only when armed and not mid-edit). Highlight leaves AND
   // inline-only containers (their bare text is per-node editable, ENG-6856).
   document.addEventListener('mouseover', function(e){
-    if(!editEnabled||editing) return; var el=e.target;
-    if(editable(el)||inlineOnlyEditable(el)){ el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; }
+    if(!canEdit()) return; var el=e.target;
+    if(editable(el)||inlineOnlyEditable(el)){
+      // ENG-9383: remember what the author's cursor was before we overwrite it.
+      // Blanking it on the way out would delete an inline cursor the artefact
+      // set itself; '' is a legitimate saved value meaning "there was none".
+      if(el.__alCur===undefined) el.__alCur = el.style.cursor || '';
+      el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; hoverCued.push(el);
+    }
   });
   document.addEventListener('mouseout', function(e){
-    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; el.__alHover=0; }
+    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; restoreCursor(el); el.__alHover=0; dropHoverCue(el); }
   });
+  // ENG-9383 (CodeRabbit on #4956): the cue is an outline AND an I-beam cursor.
+  // Clearing only the outline leaves the text still saying "you can type here"
+  // on a page that will now refuse the click - the same misdirection this ticket
+  // is about, one property over.
+  function restoreCursor(el){
+    if(el.__alCur!==undefined){ try{ el.style.cursor=el.__alCur; }catch(e){} el.__alCur=undefined; }
+  }
+  // Keep hoverCued bounded. Without this it grows once per hovered element for
+  // the life of the page and pins every one of them against GC - a list that
+  // only ever empties when the viewer toggles the mode off is a leak on any page
+  // nobody toggles.
+  function dropHoverCue(el){
+    var i=hoverCued.indexOf(el); if(i!==-1) hoverCued.splice(i,1);
+  }
+  // ENG-9383: drop every outline the mouseover cue left behind, without waiting
+  // for a mouseout that may never come - the mode can go off while the pointer is
+  // parked on the text, and then the artefact wears a dashed "editable" outline
+  // on a page where you no longer can. Tracked in a list rather than queried back
+  // out of the DOM: more than one element can carry the cue if the pointer moved
+  // between mouseover and mouseout, and the bridge should not depend on a
+  // selector matching an inline style it wrote.
+  function clearHoverCues(){
+    for(var i=0;i<hoverCued.length;i++){
+      var el=hoverCued[i];
+      if(el && el.__alHover && el!==editing){ try{ el.style.outline=''; }catch(e){} restoreCursor(el); el.__alHover=0; }
+    }
+    hoverCued.length=0;
+  }
   document.addEventListener('click', function(e){
-    if(!editEnabled||editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // a selection => comment flow
     var el=e.target;
     if(editable(el)){ e.preventDefault(); e.stopPropagation(); startEdit(el); return; }
@@ -39911,7 +39978,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Deliberately general: nothing here knows about .clickzone or any class name.
   // It fixes any artefact that covers its own content.
   window.addEventListener('click', function(e){
-    if(!editEnabled || !editMode || editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // selection => comment flow
     var t=e.target;
     // Our own toolbar (Save/Cancel) must keep its clicks.
@@ -39969,7 +40036,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     hoverEl=null;
   }
   document.addEventListener('mousemove', function(e){
-    if(!editEnabled || !editMode || editing){ clearDeepHover(); return; }
+    if(!canEdit()){ clearDeepHover(); return; }
     var t=e.target;
     if(editable(t)||inlineOnlyEditable(t)){ clearDeepHover(); return; }
     var now=Date.now(); if(now-hoverProbeAt<80) return; hoverProbeAt=now;
@@ -40069,12 +40136,17 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     var d=e.data; if(!d || d['${MARKUP_CONTROL_MARKER}']!==true) return;
     if(d.type==='enable-edit'){ editEnabled=true; }
     else if(d.type==='enable-comment'){ commentEnabled=true; }
-    // ENG-8477: the viewer toggled Edit text in the shell. Turning it OFF must
+    // ENG-8477: the viewer toggled Edit mode in the shell. Turning it OFF must
     // also close anything open and drop the hover cue, or the artefact is left
     // wearing our outlines with no way to clear them.
+    // ENG-9383: clearDeepHover() only knows the deep-probe path's outline. The
+    // ENG-6821 mouseover path marks its own element with __alHover and relies on
+    // mouseout to undo it - which never fires if the pointer is still sitting on
+    // the text when the mode goes off, leaving a dashed "you can edit this"
+    // outline on a page where you now cannot. Clear both.
     else if(d.type==='set-edit-mode'){
       editMode = !!d.on;
-      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); }
+      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); clearHoverCues(); }
     }
     else if(d.type==='edit-result'){
       if(d.ok){ /* republish hot-swaps the iframe; nothing to do */ }
@@ -42836,14 +42908,15 @@ var FLAG_REGISTRY = [
     // hand-written process.env gate) — same posture as memory-extraction /
     // tool-call-audit above. Gives a per-host canary before the DB flag exists.
     envVar: "AGT_SECRET_FILES_TMPFS_ENABLED",
-    // Deliberately-unreachable placeholder until this ships: no published CLI
-    // carries the manager reader + core writer yet, so reach must report "no
-    // host honors" rather than the `honors`-for-everyone that omitting `since`
-    // produces. MOVE THIS PIN to the actual auto-published agt-cli version at
-    // merge (auto-publish patch-bumps from main; verify against the tarball, the
-    // ENG-8575/ENG-9350 lesson) — the marker is `setSecretFileTmpfsBacking` in
-    // package/dist/lib/manager-worker.js.
-    since: "99.0.0"
+    // The real published build that carries the manager reader + core writer,
+    // replacing the deliberately-unreachable `99.0.0` this flag shipped with.
+    // Verified against the tarball (`npm pack @integrity-labs/agt-cli@0.28.678`):
+    // `setSecretFileTmpfsBacking` is present in package/dist/lib/manager-worker.js
+    // and the `secret-files-tmpfs` key ships in the bundle. Auto-publish patch-
+    // bumps from main, so if a CLI-touching PR landed between the ENG-9348 merge
+    // and this one the real cut is higher than 0.28.678 and reach under-reports;
+    // re-verify before flipping the flag on for a canary (ENG-8575/ENG-9350).
+    since: "0.28.678"
   },
   {
     key: "memory-file-tombstones",
@@ -43627,6 +43700,17 @@ var FLAG_REGISTRY = [
     // control that does nothing, which is the ENG-8303 class exactly.
     // enforce arms automated downtime on a customer's production host.
     sensitive: true
+  },
+  {
+    key: "live-meeting-advisor",
+    description: "Live meeting advising in Ninja Notes (ENG-9381). When ON for an org, a person recording a meeting on the Mac may arm an agent to watch it in flight: audio chunks stream to POST /notes/live/:id/chunks, a server-side Haiku vet decides moment by moment whether to escalate, and escalations reach the agent in a server-minted chat thread. Gates the CAPABILITY, not a surface: the refusal is in startLiveAdvisorSession, so a client that ignores the flag still cannot open a session, and GET /notes/destinations reports the same answer as advisor_enabled so the app can skip the arming modal entirely. Boolean gate; ships dark. OFF NEVER COSTS THE RECORDING. An unentitled org \u2014 or a flag read that fails \u2014 costs the advisor only; the microphone still starts and the note is still transcribed and delivered. That direction is deliberate: the user pressed Record and a recording is what they are owed, while arming on a failed read would spend money per minute on a session nobody confirmed. Deliberately NO envVar. This is an org-scoped gate, and an envVar is highest-precedence per ADR-0022 \u2014 a literal in sst.config.ts would pin every stage and make the admin control do nothing, the ENG-8303 class exactly.",
+    flagType: "boolean",
+    defaultValue: false,
+    // Turning it ON arms a per-minute-metered capability AND starts streaming
+    // meeting content to a server-side vet. Both halves are the deliberate,
+    // audited decision ADR-0022 §4 reserves confirmation for — same treatment as
+    // agent-hours-billing-enabled.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -44570,6 +44654,64 @@ server.tool(
     }
   }
 );
+server.tool(
+  "kanban_peek",
+  "Look at ANOTHER agent's board WITHOUT seeing what is on it: how many cards sit in each column, and how long the oldest card in each column has been sitting there. Use it before routing work with kanban_assign, to tell an agent that is genuinely free from one that is buried, and to spot a board where something has been rotting for days. You get NUMBERS ONLY \u2014 no titles, descriptions, results or notes ever cross between agents, so this tells you the SHAPE of their queue, never its content. A deep board is not automatically a problem and an empty one is not automatically fine: the age of the oldest card is usually the more useful of the two. By default the target must be an agent on your OWN team; pass `target_team` to peek across teams in your organization, which works only where your org has enabled cross-team assignment and a peer grant links the teams \u2014 otherwise it reads as not-found, exactly like kanban_assign. Don't know the agent's code_name? Call directory_lookup first.",
+  {
+    target_agent: external_exports.string().describe(
+      "The agent whose board you want to size up: their agent code_name (kebab-case) or agent UUID. On your own team unless target_team is also set."
+    ),
+    target_team: external_exports.string().trim().min(1).optional().describe(
+      "Optional: the slug (or UUID) of ANOTHER team in your organization, to peek across teams. Omit for a teammate on your own team. Requires the org to have cross-team assignment enabled and a peer grant; otherwise the target reads as not-found."
+    )
+  },
+  async (params) => {
+    try {
+      const data = await apiPost(
+        "/host/kanban/peek",
+        {
+          agent_id: AGT_AGENT_ID,
+          target_agent: params.target_agent,
+          // Only sent when peeking across teams — the route branches on its
+          // presence, so omit it for the same-team path (identical contract to
+          // kanban_assign). The schema rejects empty strings, so a present value
+          // is always meaningful; check presence, not truthiness.
+          ...params.target_team !== void 0 ? { target_team: params.target_team } : {}
+        },
+        false,
+        15e3,
+        "kanban_peek",
+        // Genuinely read-only: a timeout or transport error here can never have
+        // committed anything, and saying so keeps the retry decision obvious.
+        true
+      );
+      return {
+        content: [
+          {
+            type: "text",
+            // Rendering lives in a sibling module so it is reachable by a test —
+            // importing this file boots the stdio server, so anything inline
+            // here is checked exactly once, on the day it is written.
+            text: renderKanbanPeek(data, params.target_team)
+          }
+        ]
+      };
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      const notFound = /returned 404/.test(msg);
+      const notFoundText = params.target_team ? `Could not peek: no agent "${params.target_agent}" reachable on team "${params.target_team}". Check the team slug and agent code_name, and note cross-team access only works when your org has enabled it and a peer grant links the teams.` : `Could not peek: no agent "${params.target_agent}" found on your team. Check the code_name and make sure they're a teammate on the same team.`;
+      return {
+        content: [
+          {
+            type: "text",
+            text: notFound ? notFoundText : `Could not peek at ${params.target_agent}: ${msg}`
+          }
+        ],
+        isError: true
+      };
+    }
+  }
+);
 server.tool(
   "kanban_reassign",
   "Move an EXISTING kanban card to ANOTHER agent\u2019s board, preserving its id, history, comments, priority and status. Use this to re-home a task you already have (e.g. you picked up a card but it\u2019s really another specialist\u2019s job) - it removes the card from the current board and places the same card on the target agent\u2019s board. This is different from kanban_assign, which CREATES a new card. The card must currently live on your team. To move across teams in your organization, also pass `target_team` (same cross-team rules as kanban_assign). Don\u2019t know the agent code_name or team slug? Call directory_lookup first.",
@@ -46357,6 +46499,8 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   "kanban_recall",
   // ENG-9050: the return path for delegated work.
   "kanban_reopen",
+  // ENG-9375: the READ path over a teammate's board (counts only).
+  "kanban_peek",
   // ENG-6953: agent + people directory lookup (always registered locally).
   "directory_lookup",
   "status_standup",