@integrity-labs/agt-cli 0.28.679 → 0.28.680

package/dist/bin/agt.js

@@ -40,10 +40,10 @@ import {
   success,
   table,
   warn
-} from "../chunk-CLNFPTVG.js";
+} from "../chunk-4JTDWOBW.js";
 import {
   readDirectChatSessionState
-} from "../chunk-HLJKOJVJ.js";
+} from "../chunk-ZKNKHAHX.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -73,7 +73,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-GDT7JHV6.js";
+} from "../chunk-OOFJUWMT.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4909,7 +4909,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.679" : "dev";
+var cliVersion = true ? "0.28.680" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6089,7 +6089,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.679" : "dev";
+var cliVersion2 = true ? "0.28.680" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-CLNFPTVG.js → chunk-4JTDWOBW.js}

@@ -12,7 +12,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-HLJKOJVJ.js";
+} from "./chunk-ZKNKHAHX.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -59,7 +59,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-GDT7JHV6.js";
+} from "./chunk-OOFJUWMT.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6445,7 +6445,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.679" : "dev";
+var agtCliVersion = true ? "0.28.680" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10187,4 +10187,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-CLNFPTVG.js.map
+//# sourceMappingURL=chunk-4JTDWOBW.js.map

package/dist/{chunk-GDT7JHV6.js → chunk-OOFJUWMT.js}

@@ -4964,14 +4964,15 @@ var FLAG_REGISTRY = [
     // hand-written process.env gate) — same posture as memory-extraction /
     // tool-call-audit above. Gives a per-host canary before the DB flag exists.
     envVar: "AGT_SECRET_FILES_TMPFS_ENABLED",
-    // Deliberately-unreachable placeholder until this ships: no published CLI
-    // carries the manager reader + core writer yet, so reach must report "no
-    // host honors" rather than the `honors`-for-everyone that omitting `since`
-    // produces. MOVE THIS PIN to the actual auto-published agt-cli version at
-    // merge (auto-publish patch-bumps from main; verify against the tarball, the
-    // ENG-8575/ENG-9350 lesson) — the marker is `setSecretFileTmpfsBacking` in
-    // package/dist/lib/manager-worker.js.
-    since: "99.0.0"
+    // The real published build that carries the manager reader + core writer,
+    // replacing the deliberately-unreachable `99.0.0` this flag shipped with.
+    // Verified against the tarball (`npm pack @integrity-labs/agt-cli@0.28.678`):
+    // `setSecretFileTmpfsBacking` is present in package/dist/lib/manager-worker.js
+    // and the `secret-files-tmpfs` key ships in the bundle. Auto-publish patch-
+    // bumps from main, so if a CLI-touching PR landed between the ENG-9348 merge
+    // and this one the real cut is higher than 0.28.678 and reach under-reports;
+    // re-verify before flipping the flag on for a canary (ENG-8575/ENG-9350).
+    since: "0.28.678"
   },
   {
     key: "memory-file-tombstones",
@@ -5755,6 +5756,17 @@ var FLAG_REGISTRY = [
     // control that does nothing, which is the ENG-8303 class exactly.
     // enforce arms automated downtime on a customer's production host.
     sensitive: true
+  },
+  {
+    key: "live-meeting-advisor",
+    description: "Live meeting advising in Ninja Notes (ENG-9381). When ON for an org, a person recording a meeting on the Mac may arm an agent to watch it in flight: audio chunks stream to POST /notes/live/:id/chunks, a server-side Haiku vet decides moment by moment whether to escalate, and escalations reach the agent in a server-minted chat thread. Gates the CAPABILITY, not a surface: the refusal is in startLiveAdvisorSession, so a client that ignores the flag still cannot open a session, and GET /notes/destinations reports the same answer as advisor_enabled so the app can skip the arming modal entirely. Boolean gate; ships dark. OFF NEVER COSTS THE RECORDING. An unentitled org \u2014 or a flag read that fails \u2014 costs the advisor only; the microphone still starts and the note is still transcribed and delivered. That direction is deliberate: the user pressed Record and a recording is what they are owed, while arming on a failed read would spend money per minute on a session nobody confirmed. Deliberately NO envVar. This is an org-scoped gate, and an envVar is highest-precedence per ADR-0022 \u2014 a literal in sst.config.ts would pin every stage and make the admin control do nothing, the ENG-8303 class exactly.",
+    flagType: "boolean",
+    defaultValue: false,
+    // Turning it ON arms a per-minute-metered capability AND starts streaming
+    // meeting content to a server-side vet. Both halves are the deliberate,
+    // audited decision ADR-0022 §4 reserves confirmation for — same treatment as
+    // agent-hours-billing-enabled.
+    sensitive: true
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -8076,6 +8088,15 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // long note on the window-capture click handler for why this is a mode and
   // not just always-on.
   var editMode = false;
+  // ENG-9383: the ONE gate every edit-entry path asks. It exists because the
+  // last time a path was added, the old ones did not come with it: ENG-8477
+  // introduced editMode for the deep-probe handlers and left the ENG-6821
+  // direct click/hover on an arming-only check, so text stayed editable with
+  // the toggle off and the button gated one of two paths. A funnel is the fix
+  // for that class of bug; adding the term twice is only the fix for this
+  // instance of it. A fifth handler cannot forget the mode.
+  function canEdit(){ return editEnabled && editMode && !editing; }
+  var hoverCued = []; // ENG-9383: elements currently wearing the mouseover cue
 
   // Element-child indices from <body> down to el. Counts ELEMENT children only
   // (children, not childNodes), matching how the server walks source_html; our
@@ -8269,14 +8290,48 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Hover affordance (only when armed and not mid-edit). Highlight leaves AND
   // inline-only containers (their bare text is per-node editable, ENG-6856).
   document.addEventListener('mouseover', function(e){
-    if(!editEnabled||editing) return; var el=e.target;
-    if(editable(el)||inlineOnlyEditable(el)){ el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; }
+    if(!canEdit()) return; var el=e.target;
+    if(editable(el)||inlineOnlyEditable(el)){
+      // ENG-9383: remember what the author's cursor was before we overwrite it.
+      // Blanking it on the way out would delete an inline cursor the artefact
+      // set itself; '' is a legitimate saved value meaning "there was none".
+      if(el.__alCur===undefined) el.__alCur = el.style.cursor || '';
+      el.style.cursor='text'; el.style.outline=el.style.outline||'1px dashed rgba(110,231,183,.6)'; el.__alHover=1; hoverCued.push(el);
+    }
   });
   document.addEventListener('mouseout', function(e){
-    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; el.__alHover=0; }
+    var el=e.target; if(el&&el.__alHover&&el!==editing){ el.style.outline=''; restoreCursor(el); el.__alHover=0; dropHoverCue(el); }
   });
+  // ENG-9383 (CodeRabbit on #4956): the cue is an outline AND an I-beam cursor.
+  // Clearing only the outline leaves the text still saying "you can type here"
+  // on a page that will now refuse the click - the same misdirection this ticket
+  // is about, one property over.
+  function restoreCursor(el){
+    if(el.__alCur!==undefined){ try{ el.style.cursor=el.__alCur; }catch(e){} el.__alCur=undefined; }
+  }
+  // Keep hoverCued bounded. Without this it grows once per hovered element for
+  // the life of the page and pins every one of them against GC - a list that
+  // only ever empties when the viewer toggles the mode off is a leak on any page
+  // nobody toggles.
+  function dropHoverCue(el){
+    var i=hoverCued.indexOf(el); if(i!==-1) hoverCued.splice(i,1);
+  }
+  // ENG-9383: drop every outline the mouseover cue left behind, without waiting
+  // for a mouseout that may never come - the mode can go off while the pointer is
+  // parked on the text, and then the artefact wears a dashed "editable" outline
+  // on a page where you no longer can. Tracked in a list rather than queried back
+  // out of the DOM: more than one element can carry the cue if the pointer moved
+  // between mouseover and mouseout, and the bridge should not depend on a
+  // selector matching an inline style it wrote.
+  function clearHoverCues(){
+    for(var i=0;i<hoverCued.length;i++){
+      var el=hoverCued[i];
+      if(el && el.__alHover && el!==editing){ try{ el.style.outline=''; }catch(e){} restoreCursor(el); el.__alHover=0; }
+    }
+    hoverCued.length=0;
+  }
   document.addEventListener('click', function(e){
-    if(!editEnabled||editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // a selection => comment flow
     var el=e.target;
     if(editable(el)){ e.preventDefault(); e.stopPropagation(); startEdit(el); return; }
@@ -8320,7 +8375,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
   // Deliberately general: nothing here knows about .clickzone or any class name.
   // It fixes any artefact that covers its own content.
   window.addEventListener('click', function(e){
-    if(!editEnabled || !editMode || editing) return;
+    if(!canEdit()) return;
     var sel=document.getSelection(); if(sel && String(sel).trim()) return; // selection => comment flow
     var t=e.target;
     // Our own toolbar (Save/Cancel) must keep its clicks.
@@ -8378,7 +8433,7 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     hoverEl=null;
   }
   document.addEventListener('mousemove', function(e){
-    if(!editEnabled || !editMode || editing){ clearDeepHover(); return; }
+    if(!canEdit()){ clearDeepHover(); return; }
     var t=e.target;
     if(editable(t)||inlineOnlyEditable(t)){ clearDeepHover(); return; }
     var now=Date.now(); if(now-hoverProbeAt<80) return; hoverProbeAt=now;
@@ -8478,12 +8533,17 @@ var MARKUP_BRIDGE_SCRIPT = `<script>(function(){
     var d=e.data; if(!d || d['${MARKUP_CONTROL_MARKER}']!==true) return;
     if(d.type==='enable-edit'){ editEnabled=true; }
     else if(d.type==='enable-comment'){ commentEnabled=true; }
-    // ENG-8477: the viewer toggled Edit text in the shell. Turning it OFF must
+    // ENG-8477: the viewer toggled Edit mode in the shell. Turning it OFF must
     // also close anything open and drop the hover cue, or the artefact is left
     // wearing our outlines with no way to clear them.
+    // ENG-9383: clearDeepHover() only knows the deep-probe path's outline. The
+    // ENG-6821 mouseover path marks its own element with __alHover and relies on
+    // mouseout to undo it - which never fires if the pointer is still sitting on
+    // the text when the mode goes off, leaving a dashed "you can edit this"
+    // outline on a page where you now cannot. Clear both.
     else if(d.type==='set-edit-mode'){
       editMode = !!d.on;
-      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); }
+      if(!editMode){ if(editing) endEdit(false); clearDeepHover(); clearHoverCues(); }
     }
     else if(d.type==='edit-result'){
       if(d.ok){ /* republish hot-swaps the iframe; nothing to do */ }
@@ -12546,4 +12606,4 @@ export {
   minutesSinceLocalMidnight,
   peekCurrentSession
 };
-//# sourceMappingURL=chunk-GDT7JHV6.js.map
+//# sourceMappingURL=chunk-OOFJUWMT.js.map