npm - @integrity-labs/agt-cli - Versions diffs - 0.28.678 → 0.28.680 - Mend

@integrity-labs/agt-cli 0.28.678 → 0.28.680

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (23) hide show

package/dist/mcp/origami.js CHANGED Viewed

@@ -38499,6 +38499,15 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // long note on the window-capture click handler for why this is a mode and
   // not just always-on.
   var editMode = false;
+  // ENG-9383: the ONE gate every edit-entry path asks. It exists because the
+  // last time a path was added, the old ones did not come with it: ENG-8477
+  // introduced editMode for the deep-probe handlers and left the ENG-6821
+  // direct click/hover on an arming-only check, so text stayed editable with
+  // the toggle off and the button gated one of two paths. A funnel is the fix
+  // for that class of bug; adding the term twice is only the fix for this
+  // instance of it. A fifth handler cannot forget the mode.
+  function canEdit(){ return editEnabled && editMode && !editing; }
+  var hoverCued = []; // ENG-9383: elements currently wearing the mouseover cue
   // Element-child indices from <body> down to el. Counts ELEMENT children only
   // (children, not childNodes), matching how the server walks source_html; our
@@ -38692,14 +38701,48 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Hover affordance (only when armed and not mid-edit). Highlight leaves AND
   // inline-only containers (their bare text is per-node editable, ENG-6856).
   document.addEventListener('mouseover', function(e){
-    if(!editEnabled||editing) return; var el=e.target;
-    if(editable(el)||inlineOnlyEditable(el)){ el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; }
+    if(!canEdit()) return; var el=e.target;
+    if(editable(el)||inlineOnlyEditable(el)){
+      // ENG-9383: remember what the author's cursor was before we overwrite it.
+      // Blanking it on the way out would delete an inline cursor the artefact
+      // set itself; '' is a legitimate saved value meaning "there was none".
+      if(el.__alCur===undefined) el.__alCur = el.style.cursor || '';
+      el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; hoverCued.push(el);
+    }
   });
   document.addEventListener('mouseout', function(e){
-    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; el.__alHover=0; }
+    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; restoreCursor(el); el.__alHover=0; dropHoverCue(el); }
   });
+  // ENG-9383 (CodeRabbit on #4956): the cue is an outline AND an I-beam cursor.
+  // Clearing only the outline leaves the text still saying "you can type here"
+  // on a page that will now refuse the click - the same misdirection this ticket
+  // is about, one property over.
+  function restoreCursor(el){
+    if(el.__alCur!==undefined){ try{ el.style.cursor=el.__alCur; }catch(e){} el.__alCur=undefined; }
+  }
+  // Keep hoverCued bounded. Without this it grows once per hovered element for
+  // the life of the page and pins every one of them against GC - a list that
+  // only ever empties when the viewer toggles the mode off is a leak on any page
+  // nobody toggles.
+  function dropHoverCue(el){
+    var i=hoverCued.indexOf(el); if(i!==-1) hoverCued.splice(i,1);
+  }
+  // ENG-9383: drop every outline the mouseover cue left behind, without waiting
+  // for a mouseout that may never come - the mode can go off while the pointer is
+  // parked on the text, and then the artefact wears a dashed "editable" outline
+  // on a page where you no longer can. Tracked in a list rather than queried back
+  // out of the DOM: more than one element can carry the cue if the pointer moved
+  // between mouseover and mouseout, and the bridge should not depend on a
+  // selector matching an inline style it wrote.
+  function clearHoverCues(){
+    for(var i=0;i<hoverCued.length;i++){
+      var el=hoverCued[i];
+      if(el && el.__alHover && el!==editing){ try{ el.style.outline=''; }catch(e){} restoreCursor(el); el.__alHover=0; }
+    }
+    hoverCued.length=0;
+  }
   document.addEventListener('click', function(e){
-    if(!editEnabled||editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // a selection => comment flow
     var el=e.target;
     if(editable(el)){ e.preventDefault(); e.stopPropagation(); startEdit(el); return; }
@@ -38743,7 +38786,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Deliberately general: nothing here knows about .clickzone or any class name.
   // It fixes any artefact that covers its own content.
   window.addEventListener('click', function(e){
-    if(!editEnabled || !editMode || editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // selection => comment flow
     var t=e.target;
     // Our own toolbar (Save/Cancel) must keep its clicks.
@@ -38801,7 +38844,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     hoverEl=null;
   }
   document.addEventListener('mousemove', function(e){
-    if(!editEnabled || !editMode || editing){ clearDeepHover(); return; }
+    if(!canEdit()){ clearDeepHover(); return; }
     var t=e.target;
     if(editable(t)||inlineOnlyEditable(t)){ clearDeepHover(); return; }
     var now=Date.now(); if(now-hoverProbeAt<80) return; hoverProbeAt=now;
@@ -38901,12 +38944,17 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     var d=e.data; if(!d || d['${MARKUP_CONTROL_MARKER}']!==true) return;
     if(d.type==='enable-edit'){ editEnabled=true; }
     else if(d.type==='enable-comment'){ commentEnabled=true; }
-    // ENG-8477: the viewer toggled Edit text in the shell. Turning it OFF must
+    // ENG-8477: the viewer toggled Edit mode in the shell. Turning it OFF must
     // also close anything open and drop the hover cue, or the artefact is left
     // wearing our outlines with no way to clear them.
+    // ENG-9383: clearDeepHover() only knows the deep-probe path's outline. The
+    // ENG-6821 mouseover path marks its own element with __alHover and relies on
+    // mouseout to undo it - which never fires if the pointer is still sitting on
+    // the text when the mode goes off, leaving a dashed "you can edit this"
+    // outline on a page where you now cannot. Clear both.
     else if(d.type==='set-edit-mode'){
       editMode = !!d.on;
-      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); }
+      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); clearHoverCues(); }
     }
     else if(d.type==='edit-result'){
       if(d.ok){ /* republish hot-swaps the iframe; nothing to do */ }
@@ -41647,14 +41695,15 @@ var FLAG_REGISTRY = [
     // hand-written process.env gate) — same posture as memory-extraction /
     // tool-call-audit above. Gives a per-host canary before the DB flag exists.
     envVar: "AGT_SECRET_FILES_TMPFS_ENABLED",
-    // Deliberately-unreachable placeholder until this ships: no published CLI
-    // carries the manager reader + core writer yet, so reach must report "no
-    // host honors" rather than the `honors`-for-everyone that omitting `since`
-    // produces. MOVE THIS PIN to the actual auto-published agt-cli version at
-    // merge (auto-publish patch-bumps from main; verify against the tarball, the
-    // ENG-8575/ENG-9350 lesson) — the marker is `setSecretFileTmpfsBacking` in
-    // package/dist/lib/manager-worker.js.
-    since: "99.0.0"
+    // The real published build that carries the manager reader + core writer,
+    // replacing the deliberately-unreachable `99.0.0` this flag shipped with.
+    // Verified against the tarball (`npm pack @integrity-labs/agt-cli@0.28.678`):
+    // `setSecretFileTmpfsBacking` is present in package/dist/lib/manager-worker.js
+    // and the `secret-files-tmpfs` key ships in the bundle. Auto-publish patch-
+    // bumps from main, so if a CLI-touching PR landed between the ENG-9348 merge
+    // and this one the real cut is higher than 0.28.678 and reach under-reports;
+    // re-verify before flipping the flag on for a canary (ENG-8575/ENG-9350).
+    since: "0.28.678"
   },
   {
     key: "memory-file-tombstones",
@@ -42438,6 +42487,17 @@ var FLAG_REGISTRY = [
     // control that does nothing, which is the ENG-8303 class exactly.
     // enforce arms automated downtime on a customer's production host.
     sensitive: true
+  },
+  {
+    key: "live-meeting-advisor",
+    description: "Live meeting advising in Ninja Notes (ENG-9381). When ON for an org, a person recording a meeting on the Mac may arm an agent to watch it in flight: audio chunks stream to POST /notes/live/:id/chunks, a server-side Haiku vet decides moment by moment whether to escalate, and escalations reach the agent in a server-minted chat thread. Gates the CAPABILITY, not a surface: the refusal is in startLiveAdvisorSession, so a client that ignores the flag still cannot open a session, and GET /notes/destinations reports the same answer as advisor_enabled so the app can skip the arming modal entirely. Boolean gate; ships dark. OFF NEVER COSTS THE RECORDING. An unentitled org \u2014 or a flag read that fails \u2014 costs the advisor only; the microphone still starts and the note is still transcribed and delivered. That direction is deliberate: the user pressed Record and a recording is what they are owed, while arming on a failed read would spend money per minute on a session nobody confirmed. Deliberately NO envVar. This is an org-scoped gate, and an envVar is highest-precedence per ADR-0022 \u2014 a literal in sst.config.ts would pin every stage and make the admin control do nothing, the ENG-8303 class exactly.",
+    flagType: "boolean",
+    defaultValue: false,
+    // Turning it ON arms a per-minute-metered capability AND starts streaming
+    // meeting content to a server-side vet. Both halves are the deliberate,
+    // audited decision ADR-0022 §4 reserves confirmation for — same treatment as
+    // agent-hours-billing-enabled.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/slack-channel.js CHANGED Viewed

@@ -32559,6 +32559,15 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // long note on the window-capture click handler for why this is a mode and
   // not just always-on.
   var editMode = false;
+  // ENG-9383: the ONE gate every edit-entry path asks. It exists because the
+  // last time a path was added, the old ones did not come with it: ENG-8477
+  // introduced editMode for the deep-probe handlers and left the ENG-6821
+  // direct click/hover on an arming-only check, so text stayed editable with
+  // the toggle off and the button gated one of two paths. A funnel is the fix
+  // for that class of bug; adding the term twice is only the fix for this
+  // instance of it. A fifth handler cannot forget the mode.
+  function canEdit(){ return editEnabled && editMode && !editing; }
+  var hoverCued = []; // ENG-9383: elements currently wearing the mouseover cue
   // Element-child indices from <body> down to el. Counts ELEMENT children only
   // (children, not childNodes), matching how the server walks source_html; our
@@ -32752,14 +32761,48 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Hover affordance (only when armed and not mid-edit). Highlight leaves AND
   // inline-only containers (their bare text is per-node editable, ENG-6856).
   document.addEventListener('mouseover', function(e){
-    if(!editEnabled||editing) return; var el=e.target;
-    if(editable(el)||inlineOnlyEditable(el)){ el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; }
+    if(!canEdit()) return; var el=e.target;
+    if(editable(el)||inlineOnlyEditable(el)){
+      // ENG-9383: remember what the author's cursor was before we overwrite it.
+      // Blanking it on the way out would delete an inline cursor the artefact
+      // set itself; '' is a legitimate saved value meaning "there was none".
+      if(el.__alCur===undefined) el.__alCur = el.style.cursor || '';
+      el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; hoverCued.push(el);
+    }
   });
   document.addEventListener('mouseout', function(e){
-    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; el.__alHover=0; }
+    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; restoreCursor(el); el.__alHover=0; dropHoverCue(el); }
   });
+  // ENG-9383 (CodeRabbit on #4956): the cue is an outline AND an I-beam cursor.
+  // Clearing only the outline leaves the text still saying "you can type here"
+  // on a page that will now refuse the click - the same misdirection this ticket
+  // is about, one property over.
+  function restoreCursor(el){
+    if(el.__alCur!==undefined){ try{ el.style.cursor=el.__alCur; }catch(e){} el.__alCur=undefined; }
+  }
+  // Keep hoverCued bounded. Without this it grows once per hovered element for
+  // the life of the page and pins every one of them against GC - a list that
+  // only ever empties when the viewer toggles the mode off is a leak on any page
+  // nobody toggles.
+  function dropHoverCue(el){
+    var i=hoverCued.indexOf(el); if(i!==-1) hoverCued.splice(i,1);
+  }
+  // ENG-9383: drop every outline the mouseover cue left behind, without waiting
+  // for a mouseout that may never come - the mode can go off while the pointer is
+  // parked on the text, and then the artefact wears a dashed "editable" outline
+  // on a page where you no longer can. Tracked in a list rather than queried back
+  // out of the DOM: more than one element can carry the cue if the pointer moved
+  // between mouseover and mouseout, and the bridge should not depend on a
+  // selector matching an inline style it wrote.
+  function clearHoverCues(){
+    for(var i=0;i<hoverCued.length;i++){
+      var el=hoverCued[i];
+      if(el && el.__alHover && el!==editing){ try{ el.style.outline=''; }catch(e){} restoreCursor(el); el.__alHover=0; }
+    }
+    hoverCued.length=0;
+  }
   document.addEventListener('click', function(e){
-    if(!editEnabled||editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // a selection => comment flow
     var el=e.target;
     if(editable(el)){ e.preventDefault(); e.stopPropagation(); startEdit(el); return; }
@@ -32803,7 +32846,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Deliberately general: nothing here knows about .clickzone or any class name.
   // It fixes any artefact that covers its own content.
   window.addEventListener('click', function(e){
-    if(!editEnabled || !editMode || editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // selection => comment flow
     var t=e.target;
     // Our own toolbar (Save/Cancel) must keep its clicks.
@@ -32861,7 +32904,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     hoverEl=null;
   }
   document.addEventListener('mousemove', function(e){
-    if(!editEnabled || !editMode || editing){ clearDeepHover(); return; }
+    if(!canEdit()){ clearDeepHover(); return; }
     var t=e.target;
     if(editable(t)||inlineOnlyEditable(t)){ clearDeepHover(); return; }
     var now=Date.now(); if(now-hoverProbeAt<80) return; hoverProbeAt=now;
@@ -32961,12 +33004,17 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     var d=e.data; if(!d || d['${MARKUP_CONTROL_MARKER}']!==true) return;
     if(d.type==='enable-edit'){ editEnabled=true; }
     else if(d.type==='enable-comment'){ commentEnabled=true; }
-    // ENG-8477: the viewer toggled Edit text in the shell. Turning it OFF must
+    // ENG-8477: the viewer toggled Edit mode in the shell. Turning it OFF must
     // also close anything open and drop the hover cue, or the artefact is left
     // wearing our outlines with no way to clear them.
+    // ENG-9383: clearDeepHover() only knows the deep-probe path's outline. The
+    // ENG-6821 mouseover path marks its own element with __alHover and relies on
+    // mouseout to undo it - which never fires if the pointer is still sitting on
+    // the text when the mode goes off, leaving a dashed "you can edit this"
+    // outline on a page where you now cannot. Clear both.
     else if(d.type==='set-edit-mode'){
       editMode = !!d.on;
-      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); }
+      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); clearHoverCues(); }
     }
     else if(d.type==='edit-result'){
       if(d.ok){ /* republish hot-swaps the iframe; nothing to do */ }
@@ -36130,14 +36178,15 @@ var FLAG_REGISTRY = [
     // hand-written process.env gate) — same posture as memory-extraction /
     // tool-call-audit above. Gives a per-host canary before the DB flag exists.
     envVar: "AGT_SECRET_FILES_TMPFS_ENABLED",
-    // Deliberately-unreachable placeholder until this ships: no published CLI
-    // carries the manager reader + core writer yet, so reach must report "no
-    // host honors" rather than the `honors`-for-everyone that omitting `since`
-    // produces. MOVE THIS PIN to the actual auto-published agt-cli version at
-    // merge (auto-publish patch-bumps from main; verify against the tarball, the
-    // ENG-8575/ENG-9350 lesson) — the marker is `setSecretFileTmpfsBacking` in
-    // package/dist/lib/manager-worker.js.
-    since: "99.0.0"
+    // The real published build that carries the manager reader + core writer,
+    // replacing the deliberately-unreachable `99.0.0` this flag shipped with.
+    // Verified against the tarball (`npm pack @integrity-labs/agt-cli@0.28.678`):
+    // `setSecretFileTmpfsBacking` is present in package/dist/lib/manager-worker.js
+    // and the `secret-files-tmpfs` key ships in the bundle. Auto-publish patch-
+    // bumps from main, so if a CLI-touching PR landed between the ENG-9348 merge
+    // and this one the real cut is higher than 0.28.678 and reach under-reports;
+    // re-verify before flipping the flag on for a canary (ENG-8575/ENG-9350).
+    since: "0.28.678"
   },
   {
     key: "memory-file-tombstones",
@@ -36921,6 +36970,17 @@ var FLAG_REGISTRY = [
     // control that does nothing, which is the ENG-8303 class exactly.
     // enforce arms automated downtime on a customer's production host.
     sensitive: true
+  },
+  {
+    key: "live-meeting-advisor",
+    description: "Live meeting advising in Ninja Notes (ENG-9381). When ON for an org, a person recording a meeting on the Mac may arm an agent to watch it in flight: audio chunks stream to POST /notes/live/:id/chunks, a server-side Haiku vet decides moment by moment whether to escalate, and escalations reach the agent in a server-minted chat thread. Gates the CAPABILITY, not a surface: the refusal is in startLiveAdvisorSession, so a client that ignores the flag still cannot open a session, and GET /notes/destinations reports the same answer as advisor_enabled so the app can skip the arming modal entirely. Boolean gate; ships dark. OFF NEVER COSTS THE RECORDING. An unentitled org \u2014 or a flag read that fails \u2014 costs the advisor only; the microphone still starts and the note is still transcribed and delivered. That direction is deliberate: the user pressed Record and a recording is what they are owed, while arming on a failed read would spend money per minute on a session nobody confirmed. Deliberately NO envVar. This is an org-scoped gate, and an envVar is highest-precedence per ADR-0022 \u2014 a literal in sst.config.ts would pin every stage and make the admin control do nothing, the ENG-8303 class exactly.",
+    flagType: "boolean",
+    defaultValue: false,
+    // Turning it ON arms a per-minute-metered capability AND starts streaming
+    // meeting content to a server-side vet. Both halves are the deliberate,
+    // audited decision ADR-0022 §4 reserves confirmation for — same treatment as
+    // agent-hours-billing-enabled.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/mcp/telegram-channel.js CHANGED Viewed

@@ -32709,6 +32709,15 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // long note on the window-capture click handler for why this is a mode and
   // not just always-on.
   var editMode = false;
+  // ENG-9383: the ONE gate every edit-entry path asks. It exists because the
+  // last time a path was added, the old ones did not come with it: ENG-8477
+  // introduced editMode for the deep-probe handlers and left the ENG-6821
+  // direct click/hover on an arming-only check, so text stayed editable with
+  // the toggle off and the button gated one of two paths. A funnel is the fix
+  // for that class of bug; adding the term twice is only the fix for this
+  // instance of it. A fifth handler cannot forget the mode.
+  function canEdit(){ return editEnabled && editMode && !editing; }
+  var hoverCued = []; // ENG-9383: elements currently wearing the mouseover cue
   // Element-child indices from <body> down to el. Counts ELEMENT children only
   // (children, not childNodes), matching how the server walks source_html; our
@@ -32902,14 +32911,48 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Hover affordance (only when armed and not mid-edit). Highlight leaves AND
   // inline-only containers (their bare text is per-node editable, ENG-6856).
   document.addEventListener('mouseover', function(e){
-    if(!editEnabled||editing) return; var el=e.target;
-    if(editable(el)||inlineOnlyEditable(el)){ el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; }
+    if(!canEdit()) return; var el=e.target;
+    if(editable(el)||inlineOnlyEditable(el)){
+      // ENG-9383: remember what the author's cursor was before we overwrite it.
+      // Blanking it on the way out would delete an inline cursor the artefact
+      // set itself; '' is a legitimate saved value meaning "there was none".
+      if(el.__alCur===undefined) el.__alCur = el.style.cursor || '';
+      el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; hoverCued.push(el);
+    }
   });
   document.addEventListener('mouseout', function(e){
-    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; el.__alHover=0; }
+    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; restoreCursor(el); el.__alHover=0; dropHoverCue(el); }
   });
+  // ENG-9383 (CodeRabbit on #4956): the cue is an outline AND an I-beam cursor.
+  // Clearing only the outline leaves the text still saying "you can type here"
+  // on a page that will now refuse the click - the same misdirection this ticket
+  // is about, one property over.
+  function restoreCursor(el){
+    if(el.__alCur!==undefined){ try{ el.style.cursor=el.__alCur; }catch(e){} el.__alCur=undefined; }
+  }
+  // Keep hoverCued bounded. Without this it grows once per hovered element for
+  // the life of the page and pins every one of them against GC - a list that
+  // only ever empties when the viewer toggles the mode off is a leak on any page
+  // nobody toggles.
+  function dropHoverCue(el){
+    var i=hoverCued.indexOf(el); if(i!==-1) hoverCued.splice(i,1);
+  }
+  // ENG-9383: drop every outline the mouseover cue left behind, without waiting
+  // for a mouseout that may never come - the mode can go off while the pointer is
+  // parked on the text, and then the artefact wears a dashed "editable" outline
+  // on a page where you no longer can. Tracked in a list rather than queried back
+  // out of the DOM: more than one element can carry the cue if the pointer moved
+  // between mouseover and mouseout, and the bridge should not depend on a
+  // selector matching an inline style it wrote.
+  function clearHoverCues(){
+    for(var i=0;i<hoverCued.length;i++){
+      var el=hoverCued[i];
+      if(el && el.__alHover && el!==editing){ try{ el.style.outline=''; }catch(e){} restoreCursor(el); el.__alHover=0; }
+    }
+    hoverCued.length=0;
+  }
   document.addEventListener('click', function(e){
-    if(!editEnabled||editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // a selection => comment flow
     var el=e.target;
     if(editable(el)){ e.preventDefault(); e.stopPropagation(); startEdit(el); return; }
@@ -32953,7 +32996,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Deliberately general: nothing here knows about .clickzone or any class name.
   // It fixes any artefact that covers its own content.
   window.addEventListener('click', function(e){
-    if(!editEnabled || !editMode || editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // selection => comment flow
     var t=e.target;
     // Our own toolbar (Save/Cancel) must keep its clicks.
@@ -33011,7 +33054,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     hoverEl=null;
   }
   document.addEventListener('mousemove', function(e){
-    if(!editEnabled || !editMode || editing){ clearDeepHover(); return; }
+    if(!canEdit()){ clearDeepHover(); return; }
     var t=e.target;
     if(editable(t)||inlineOnlyEditable(t)){ clearDeepHover(); return; }
     var now=Date.now(); if(now-hoverProbeAt<80) return; hoverProbeAt=now;
@@ -33111,12 +33154,17 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     var d=e.data; if(!d || d['${MARKUP_CONTROL_MARKER}']!==true) return;
     if(d.type==='enable-edit'){ editEnabled=true; }
     else if(d.type==='enable-comment'){ commentEnabled=true; }
-    // ENG-8477: the viewer toggled Edit text in the shell. Turning it OFF must
+    // ENG-8477: the viewer toggled Edit mode in the shell. Turning it OFF must
     // also close anything open and drop the hover cue, or the artefact is left
     // wearing our outlines with no way to clear them.
+    // ENG-9383: clearDeepHover() only knows the deep-probe path's outline. The
+    // ENG-6821 mouseover path marks its own element with __alHover and relies on
+    // mouseout to undo it - which never fires if the pointer is still sitting on
+    // the text when the mode goes off, leaving a dashed "you can edit this"
+    // outline on a page where you now cannot. Clear both.
     else if(d.type==='set-edit-mode'){
       editMode = !!d.on;
-      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); }
+      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); clearHoverCues(); }
     }
     else if(d.type==='edit-result'){
       if(d.ok){ /* republish hot-swaps the iframe; nothing to do */ }
@@ -36274,14 +36322,15 @@ var FLAG_REGISTRY = [
     // hand-written process.env gate) — same posture as memory-extraction /
     // tool-call-audit above. Gives a per-host canary before the DB flag exists.
     envVar: "AGT_SECRET_FILES_TMPFS_ENABLED",
-    // Deliberately-unreachable placeholder until this ships: no published CLI
-    // carries the manager reader + core writer yet, so reach must report "no
-    // host honors" rather than the `honors`-for-everyone that omitting `since`
-    // produces. MOVE THIS PIN to the actual auto-published agt-cli version at
-    // merge (auto-publish patch-bumps from main; verify against the tarball, the
-    // ENG-8575/ENG-9350 lesson) — the marker is `setSecretFileTmpfsBacking` in
-    // package/dist/lib/manager-worker.js.
-    since: "99.0.0"
+    // The real published build that carries the manager reader + core writer,
+    // replacing the deliberately-unreachable `99.0.0` this flag shipped with.
+    // Verified against the tarball (`npm pack @integrity-labs/agt-cli@0.28.678`):
+    // `setSecretFileTmpfsBacking` is present in package/dist/lib/manager-worker.js
+    // and the `secret-files-tmpfs` key ships in the bundle. Auto-publish patch-
+    // bumps from main, so if a CLI-touching PR landed between the ENG-9348 merge
+    // and this one the real cut is higher than 0.28.678 and reach under-reports;
+    // re-verify before flipping the flag on for a canary (ENG-8575/ENG-9350).
+    since: "0.28.678"
   },
   {
     key: "memory-file-tombstones",
@@ -37065,6 +37114,17 @@ var FLAG_REGISTRY = [
     // control that does nothing, which is the ENG-8303 class exactly.
     // enforce arms automated downtime on a customer's production host.
     sensitive: true
+  },
+  {
+    key: "live-meeting-advisor",
+    description: "Live meeting advising in Ninja Notes (ENG-9381). When ON for an org, a person recording a meeting on the Mac may arm an agent to watch it in flight: audio chunks stream to POST /notes/live/:id/chunks, a server-side Haiku vet decides moment by moment whether to escalate, and escalations reach the agent in a server-minted chat thread. Gates the CAPABILITY, not a surface: the refusal is in startLiveAdvisorSession, so a client that ignores the flag still cannot open a session, and GET /notes/destinations reports the same answer as advisor_enabled so the app can skip the arming modal entirely. Boolean gate; ships dark. OFF NEVER COSTS THE RECORDING. An unentitled org \u2014 or a flag read that fails \u2014 costs the advisor only; the microphone still starts and the note is still transcribed and delivered. That direction is deliberate: the user pressed Record and a recording is what they are owed, while arming on a failed read would spend money per minute on a session nobody confirmed. Deliberately NO envVar. This is an org-scoped gate, and an envVar is highest-precedence per ADR-0022 \u2014 a literal in sst.config.ts would pin every stage and make the admin control do nothing, the ENG-8303 class exactly.",
+    flagType: "boolean",
+    defaultValue: false,
+    // Turning it ON arms a per-minute-metered capability AND starts streaming
+    // meeting content to a server-side vet. Both halves are the deliberate,
+    // audited decision ADR-0022 §4 reserves confirmation for — same treatment as
+    // agent-hours-billing-enabled.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));

package/dist/{persistent-session-EZEYH3PM.js → persistent-session-OQ7MFVEH.js} RENAMED Viewed

@@ -43,8 +43,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-LTOGVWUR.js";
-import "./chunk-5DHJE2G7.js";
+} from "./chunk-ZKNKHAHX.js";
+import "./chunk-OOFJUWMT.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -92,4 +92,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-EZEYH3PM.js.map
+//# sourceMappingURL=persistent-session-OQ7MFVEH.js.map

package/dist/{responsiveness-probe-VS6GODYP.js → responsiveness-probe-MDL53OT2.js} RENAMED Viewed

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-LTOGVWUR.js";
-import "./chunk-5DHJE2G7.js";
+} from "./chunk-ZKNKHAHX.js";
+import "./chunk-OOFJUWMT.js";
 import "./chunk-XWVM4KPK.js";
 // src/lib/responsiveness-probe.ts
@@ -727,4 +727,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-VS6GODYP.js.map
+//# sourceMappingURL=responsiveness-probe-MDL53OT2.js.map

package/dist/{session-auth-dead-7U24PZZS.js → session-auth-dead-4OJ2XLH4.js} RENAMED Viewed

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-5DHJE2G7.js";
+} from "./chunk-OOFJUWMT.js";
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-7U24PZZS.js.map
+//# sourceMappingURL=session-auth-dead-4OJ2XLH4.js.map

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.678",
+  "version": "0.28.680",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {