@integrity-labs/agt-cli 0.28.780 → 0.28.782

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-VYFQRDSP.js";
+} from "../chunk-WP2NPGER.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-HHFDK7WB.js";
+} from "../chunk-YA5PGNN2.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-REPC7LF2.js";
+} from "../chunk-TNETRPYC.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.780" : "dev";
+var cliVersion = true ? "0.28.782" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.780" : "dev";
+var cliVersion2 = true ? "0.28.782" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-REPC7LF2.js → chunk-TNETRPYC.js}

@@ -6355,6 +6355,27 @@ var FLAG_REGISTRY = [
     // docs/runbooks/async-export-rollout.md, so the placeholder has a named
     // owner and a named moment rather than being a deferral nobody holds.
     since: "0.29.0"
+  },
+  {
+    key: "artefact-export-public-jobs",
+    description: "ADR-0077 / ENG-9730 - whether the PUBLIC Download button may create an async artefact-export job. OFF (default) = today's synchronous render on the public route. SEPARATE FROM artefact-export-jobs-start ON PURPOSE, and the reason is the whole point of the flag. That one is ordered against the agt CLI fleet: a pre-ENG-9729 agent cannot read a job-id body, so arming it early BREAKS an export. This lane's client is a BROWSER, which has no version to converge on - the waiting page is generated fresh by the server on every request. Sharing one lever would hold the customer-facing half hostage to an agent-side constraint that does not apply to it. Note what this flag does NOT gate: a navigation always gets HTML rather than a JSON error body. That is the fix for a live defect (a renderer outage used to navigate a reader off their document to a raw error) and is not conditional on async. Reading artefact-export-jobs-serve as an AND still applies - the master switch turns off both lanes. ONE CHECK BEFORE ARMING, and it is not fleet convergence: the lane assumes a browser NAVIGATES to the waiting page rather than saving it, which holds because the cross-origin download attribute is ignored. Documented for Chrome/Firefox/ WebKit, but unverified on a real Safari - and a phone is where a contract link gets opened. Run the desktop+iOS Safari smoke check in the runbook first. Org-scoped, so it can be armed for one tenant at a time. Deliberately NO envVar (ENG-7972 4KB cap, ENG-8303 pin).",
+    flagType: "boolean",
+    // Dark, like every other lane in this ADR. What it changes is real - a slow
+    // render stops completing in place and starts arriving via a waiting page -
+    // so it wants a deliberate flip per tenant, not a deploy-time default.
+    defaultValue: false
+    // Deliberately NOT sensitive, and the contrast with artefact-export-jobs-start
+    // is the argument. That flag is `sensitive` because arming it can hand a job
+    // id to a binary that answers with a TypeError - an unguarded write breaks a
+    // caller we do not control. Here the worst case is a reader seeing an
+    // explanatory page a few seconds sooner than they otherwise would, on a
+    // client that is re-served from this deploy on every request. Marking it
+    // sensitive would spend a confirmation step on a reversible display change
+    // and blunt the signal on the flags where confirmation is load-bearing.
+    //
+    // No `since` for the same reason: there is no host-side reader and no fleet
+    // to converge, so `classifyHostReach` returning `honors` for every host is
+    // the literal truth here rather than the trap it is one flag above.
   }
 ];
 var REGISTRY_BY_KEY = new Map(FLAG_REGISTRY.map((definition) => [definition.key, definition]));
@@ -13493,4 +13514,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-REPC7LF2.js.map
+//# sourceMappingURL=chunk-TNETRPYC.js.map