@integrity-labs/agt-cli 0.28.695 → 0.28.696

package/dist/bin/agt.js

@@ -40,10 +40,10 @@ import {
   success,
   table,
   warn
-} from "../chunk-A2W4K7IH.js";
+} from "../chunk-WB6ERJPU.js";
 import {
   readDirectChatSessionState
-} from "../chunk-OUERGATQ.js";
+} from "../chunk-QCYRC5FK.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -73,7 +73,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-XB2RCS5S.js";
+} from "../chunk-Y7AHOXHP.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4909,7 +4909,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.695" : "dev";
+var cliVersion = true ? "0.28.696" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6089,7 +6089,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.695" : "dev";
+var cliVersion2 = true ? "0.28.696" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-OUERGATQ.js → chunk-QCYRC5FK.js}

@@ -17,7 +17,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-XB2RCS5S.js";
+} from "./chunk-Y7AHOXHP.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -4531,4 +4531,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-OUERGATQ.js.map
+//# sourceMappingURL=chunk-QCYRC5FK.js.map

package/dist/{chunk-A2W4K7IH.js → chunk-WB6ERJPU.js}

@@ -12,7 +12,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-OUERGATQ.js";
+} from "./chunk-QCYRC5FK.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -59,7 +59,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-XB2RCS5S.js";
+} from "./chunk-Y7AHOXHP.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6329,7 +6329,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.695" : "dev";
+var agtCliVersion = true ? "0.28.696" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10070,4 +10070,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-A2W4K7IH.js.map
+//# sourceMappingURL=chunk-WB6ERJPU.js.map

package/dist/{chunk-XB2RCS5S.js → chunk-Y7AHOXHP.js}

@@ -4936,7 +4936,7 @@ var FLAG_REGISTRY = [
   },
   {
     key: "tool-call-audit",
-    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; ships dark \u2014 when off the manager reads no transcripts and sends nothing, so 0 agent_tool_calls rows fleet-wide is the expected steady state until it is armed. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
+    description: "Host-side tool-call audit extraction (ENG-8575, slice 3 of ENG-8427): the manager scans agent transcripts for tool calls, redacts each to identity-without-content, and POSTs them to /host/tool-calls. Boolean gate; when off the manager reads no transcripts and sends nothing. ARMED STAGE-WIDE SINCE 2026-08-17 \u2014 the compiled default below is what a host resolves when nothing else says otherwise, NOT a description of the fleet. This text once asserted the opposite and outlived its truth by nine days, which is what got ENG-9472 filed to arm an already-armed flag. Query the table, do not infer it from this line. NOT the commercial gate: /host/tool-calls independently re-checks the advanced_governance entitlement and refuses regardless of this flag, because the host is customer-owned infrastructure. This flag is rollout control only.",
     flagType: "boolean",
     // Declared safe value is `false` (no extraction). Fail-safe direction: a
     // flag-DB read error must never start shipping tool-call metadata across the
@@ -12797,4 +12797,4 @@ export {
   minutesSinceLocalMidnight,
   peekCurrentSession
 };
-//# sourceMappingURL=chunk-XB2RCS5S.js.map
+//# sourceMappingURL=chunk-Y7AHOXHP.js.map