@integrity-labs/agt-cli 0.28.787 → 0.28.789

package/dist/{chunk-IEBDDVAG.js → chunk-HV5D3USK.js}

@@ -14,7 +14,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-EXCWZPDJ.js";
+} from "./chunk-2GZ7EG7V.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -66,7 +66,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-LLDK74IY.js";
+} from "./chunk-PUEQQOJI.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6518,7 +6518,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.787" : "dev";
+var agtCliVersion = true ? "0.28.789" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10755,4 +10755,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-IEBDDVAG.js.map
+//# sourceMappingURL=chunk-HV5D3USK.js.map

package/dist/{chunk-LLDK74IY.js → chunk-PUEQQOJI.js}

@@ -6342,31 +6342,31 @@ var FLAG_REGISTRY = [
     // survive it). The dependency is real; it is on the CLI's ability to SURVIVE
     // the flag, not to READ it, and the modal cannot tell those apart.
     //
-    // Pinned ABOVE every published release on purpose, the `agt-bin-path`
-    // precedent: it classifies EVERY host as `stale`, so the modal reports no
-    // reach rather than reach it has no basis for. A guessed number would be
-    // worse than a placeholder, and the two directions are not symmetric —
-    // too HIGH over-warns (annoying), too LOW promises reach to a build that
-    // answers a job id with a TypeError inside file-write logic (a broken export
-    // reported to the agent as "download failed").
+    // VERIFIED AGAINST THE PUBLISHED TARBALL, NOT THE MERGE (2026-09-03).
+    // `npm pack @integrity-labs/agt-cli@<version>`, then grep the extracted
+    // `package/dist/mcp/index.js`. That file is present in BOTH builds and both
+    // carry `exportArtefactToFile`, so the absences below are an absence of the
+    // CODE rather than of the file:
     //
-    // The exact version cannot be known here: the CLI auto-publishes ON MERGE of
-    // this change, patch-bumping from whatever is current, so any pre-merge
-    // value is a guess. Do NOT read it off `apps/cli/package.json`, and do NOT
-    // trust a version produced by re-running a failed publish job (ENG-9647: a
-    // re-run rebuilds the ORIGINAL tree under a HIGHER number, so the version
-    // string would claim a capability the bytes do not carry).
+    //   0.28.773 — `classifyExportResponse`, `pendingExportText` and
+    //              `artefact-export-response` all ABSENT.
+    //   0.28.774 — all three PRESENT.
+    //
+    // Hence the pin. Do NOT read a replacement off `apps/cli/package.json`, and
+    // do NOT trust a version produced by re-running a failed publish job
+    // (ENG-9647: a re-run rebuilds the ORIGINAL tree under a HIGHER number, so
+    // the version string would claim a capability the bytes do not carry). The
+    // publish workflow's output only identifies a CANDIDATE; the tarball is what
+    // proves it, so re-run the same two greps if this pin ever has to move.
     //
     // AND `since` IS ADVISORY, NOT A GUARD. It is read in exactly one place —
     // the flip-reach modal. Nothing in the evaluation or override-write path
     // consults it, so this changes what an operator is TOLD and does not stop a
     // flip on an under-`since` host. What holds the line is `defaultValue:
-    // false` + `sensitive: true` + the runbook.
-    //
-    // REPLACING IT IS STEP 1 OF THE ARMING PROCEDURE in
-    // docs/runbooks/async-export-rollout.md, so the placeholder has a named
-    // owner and a named moment rather than being a deferral nobody holds.
-    since: "0.29.0"
+    // false` + `sensitive: true` + the runbook. It is likewise excluded from
+    // `projectDefinition` in schema-version.ts, so moving it does not roll
+    // FLAGS_SCHEMA_VERSION for a fleet that cannot read it anyway.
+    since: "0.28.774"
   },
   {
     key: "artefact-export-public-jobs",
@@ -13527,4 +13527,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-LLDK74IY.js.map
+//# sourceMappingURL=chunk-PUEQQOJI.js.map