@integrity-labs/agt-cli 0.28.787 → 0.28.789

package/dist/{claude-pair-runtime-ML7KET4B.js → claude-pair-runtime-AFLT3FOT.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-5OCP47I3.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-EU44RQZN.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-ML7KET4B.js.map
+//# sourceMappingURL=claude-pair-runtime-AFLT3FOT.js.map

package/dist/lib/manager-worker.js

@@ -58,7 +58,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-IEBDDVAG.js";
+} from "../chunk-HV5D3USK.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -120,7 +120,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-EXCWZPDJ.js";
+} from "../chunk-2GZ7EG7V.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -212,7 +212,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-LLDK74IY.js";
+} from "../chunk-PUEQQOJI.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -12915,7 +12915,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-QYSMGG5E.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-ENOEURQY.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13575,7 +13575,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.787" : "dev";
+var agtCliVersion = true ? "0.28.789" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15122,7 +15122,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-5OCP47I3.js");
+      const { collectDiagnostics } = await import("../persistent-session-EU44RQZN.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15263,7 +15263,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-5OCP47I3.js");
+      const { collectDiagnostics } = await import("../persistent-session-EU44RQZN.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15432,7 +15432,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-QYSMGG5E.js");
+      } = await import("../responsiveness-probe-ENOEURQY.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15542,7 +15542,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-QYSMGG5E.js");
+        } = await import("../responsiveness-probe-ENOEURQY.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15698,7 +15698,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-WFXDJQ5L.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-TWWJAF7O.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -19799,7 +19799,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-5OCP47I3.js");
+        const { collectDiagnostics } = await import("../persistent-session-EU44RQZN.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19845,7 +19845,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-5OCP47I3.js");
+      const { collectDiagnostics } = await import("../persistent-session-EU44RQZN.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20481,7 +20481,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-ML7KET4B.js");
+  } = await import("../claude-pair-runtime-AFLT3FOT.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -37635,31 +37635,31 @@ var FLAG_REGISTRY = [
     // survive it). The dependency is real; it is on the CLI's ability to SURVIVE
     // the flag, not to READ it, and the modal cannot tell those apart.
     //
-    // Pinned ABOVE every published release on purpose, the `agt-bin-path`
-    // precedent: it classifies EVERY host as `stale`, so the modal reports no
-    // reach rather than reach it has no basis for. A guessed number would be
-    // worse than a placeholder, and the two directions are not symmetric —
-    // too HIGH over-warns (annoying), too LOW promises reach to a build that
-    // answers a job id with a TypeError inside file-write logic (a broken export
-    // reported to the agent as "download failed").
+    // VERIFIED AGAINST THE PUBLISHED TARBALL, NOT THE MERGE (2026-09-03).
+    // `npm pack @integrity-labs/agt-cli@<version>`, then grep the extracted
+    // `package/dist/mcp/index.js`. That file is present in BOTH builds and both
+    // carry `exportArtefactToFile`, so the absences below are an absence of the
+    // CODE rather than of the file:
     //
-    // The exact version cannot be known here: the CLI auto-publishes ON MERGE of
-    // this change, patch-bumping from whatever is current, so any pre-merge
-    // value is a guess. Do NOT read it off `apps/cli/package.json`, and do NOT
-    // trust a version produced by re-running a failed publish job (ENG-9647: a
-    // re-run rebuilds the ORIGINAL tree under a HIGHER number, so the version
-    // string would claim a capability the bytes do not carry).
+    //   0.28.773 — `classifyExportResponse`, `pendingExportText` and
+    //              `artefact-export-response` all ABSENT.
+    //   0.28.774 — all three PRESENT.
+    //
+    // Hence the pin. Do NOT read a replacement off `apps/cli/package.json`, and
+    // do NOT trust a version produced by re-running a failed publish job
+    // (ENG-9647: a re-run rebuilds the ORIGINAL tree under a HIGHER number, so
+    // the version string would claim a capability the bytes do not carry). The
+    // publish workflow's output only identifies a CANDIDATE; the tarball is what
+    // proves it, so re-run the same two greps if this pin ever has to move.
     //
     // AND `since` IS ADVISORY, NOT A GUARD. It is read in exactly one place —
     // the flip-reach modal. Nothing in the evaluation or override-write path
     // consults it, so this changes what an operator is TOLD and does not stop a
     // flip on an under-`since` host. What holds the line is `defaultValue:
-    // false` + `sensitive: true` + the runbook.
-    //
-    // REPLACING IT IS STEP 1 OF THE ARMING PROCEDURE in
-    // docs/runbooks/async-export-rollout.md, so the placeholder has a named
-    // owner and a named moment rather than being a deferral nobody holds.
-    since: "0.29.0"
+    // false` + `sensitive: true` + the runbook. It is likewise excluded from
+    // `projectDefinition` in schema-version.ts, so moving it does not roll
+    // FLAGS_SCHEMA_VERSION for a fleet that cannot read it anyway.
+    since: "0.28.774"
   },
   {
     key: "artefact-export-public-jobs",

package/dist/mcp/index.js

@@ -44695,31 +44695,31 @@ var FLAG_REGISTRY = [
     // survive it). The dependency is real; it is on the CLI's ability to SURVIVE
     // the flag, not to READ it, and the modal cannot tell those apart.
     //
-    // Pinned ABOVE every published release on purpose, the `agt-bin-path`
-    // precedent: it classifies EVERY host as `stale`, so the modal reports no
-    // reach rather than reach it has no basis for. A guessed number would be
-    // worse than a placeholder, and the two directions are not symmetric —
-    // too HIGH over-warns (annoying), too LOW promises reach to a build that
-    // answers a job id with a TypeError inside file-write logic (a broken export
-    // reported to the agent as "download failed").
+    // VERIFIED AGAINST THE PUBLISHED TARBALL, NOT THE MERGE (2026-09-03).
+    // `npm pack @integrity-labs/agt-cli@<version>`, then grep the extracted
+    // `package/dist/mcp/index.js`. That file is present in BOTH builds and both
+    // carry `exportArtefactToFile`, so the absences below are an absence of the
+    // CODE rather than of the file:
     //
-    // The exact version cannot be known here: the CLI auto-publishes ON MERGE of
-    // this change, patch-bumping from whatever is current, so any pre-merge
-    // value is a guess. Do NOT read it off `apps/cli/package.json`, and do NOT
-    // trust a version produced by re-running a failed publish job (ENG-9647: a
-    // re-run rebuilds the ORIGINAL tree under a HIGHER number, so the version
-    // string would claim a capability the bytes do not carry).
+    //   0.28.773 — `classifyExportResponse`, `pendingExportText` and
+    //              `artefact-export-response` all ABSENT.
+    //   0.28.774 — all three PRESENT.
+    //
+    // Hence the pin. Do NOT read a replacement off `apps/cli/package.json`, and
+    // do NOT trust a version produced by re-running a failed publish job
+    // (ENG-9647: a re-run rebuilds the ORIGINAL tree under a HIGHER number, so
+    // the version string would claim a capability the bytes do not carry). The
+    // publish workflow's output only identifies a CANDIDATE; the tarball is what
+    // proves it, so re-run the same two greps if this pin ever has to move.
     //
     // AND `since` IS ADVISORY, NOT A GUARD. It is read in exactly one place —
     // the flip-reach modal. Nothing in the evaluation or override-write path
     // consults it, so this changes what an operator is TOLD and does not stop a
     // flip on an under-`since` host. What holds the line is `defaultValue:
-    // false` + `sensitive: true` + the runbook.
-    //
-    // REPLACING IT IS STEP 1 OF THE ARMING PROCEDURE in
-    // docs/runbooks/async-export-rollout.md, so the placeholder has a named
-    // owner and a named moment rather than being a deferral nobody holds.
-    since: "0.29.0"
+    // false` + `sensitive: true` + the runbook. It is likewise excluded from
+    // `projectDefinition` in schema-version.ts, so moving it does not roll
+    // FLAGS_SCHEMA_VERSION for a fleet that cannot read it anyway.
+    since: "0.28.774"
   },
   {
     key: "artefact-export-public-jobs",

package/dist/mcp/origami.js

@@ -43359,31 +43359,31 @@ var FLAG_REGISTRY = [
     // survive it). The dependency is real; it is on the CLI's ability to SURVIVE
     // the flag, not to READ it, and the modal cannot tell those apart.
     //
-    // Pinned ABOVE every published release on purpose, the `agt-bin-path`
-    // precedent: it classifies EVERY host as `stale`, so the modal reports no
-    // reach rather than reach it has no basis for. A guessed number would be
-    // worse than a placeholder, and the two directions are not symmetric —
-    // too HIGH over-warns (annoying), too LOW promises reach to a build that
-    // answers a job id with a TypeError inside file-write logic (a broken export
-    // reported to the agent as "download failed").
+    // VERIFIED AGAINST THE PUBLISHED TARBALL, NOT THE MERGE (2026-09-03).
+    // `npm pack @integrity-labs/agt-cli@<version>`, then grep the extracted
+    // `package/dist/mcp/index.js`. That file is present in BOTH builds and both
+    // carry `exportArtefactToFile`, so the absences below are an absence of the
+    // CODE rather than of the file:
     //
-    // The exact version cannot be known here: the CLI auto-publishes ON MERGE of
-    // this change, patch-bumping from whatever is current, so any pre-merge
-    // value is a guess. Do NOT read it off `apps/cli/package.json`, and do NOT
-    // trust a version produced by re-running a failed publish job (ENG-9647: a
-    // re-run rebuilds the ORIGINAL tree under a HIGHER number, so the version
-    // string would claim a capability the bytes do not carry).
+    //   0.28.773 — `classifyExportResponse`, `pendingExportText` and
+    //              `artefact-export-response` all ABSENT.
+    //   0.28.774 — all three PRESENT.
+    //
+    // Hence the pin. Do NOT read a replacement off `apps/cli/package.json`, and
+    // do NOT trust a version produced by re-running a failed publish job
+    // (ENG-9647: a re-run rebuilds the ORIGINAL tree under a HIGHER number, so
+    // the version string would claim a capability the bytes do not carry). The
+    // publish workflow's output only identifies a CANDIDATE; the tarball is what
+    // proves it, so re-run the same two greps if this pin ever has to move.
     //
     // AND `since` IS ADVISORY, NOT A GUARD. It is read in exactly one place —
     // the flip-reach modal. Nothing in the evaluation or override-write path
     // consults it, so this changes what an operator is TOLD and does not stop a
     // flip on an under-`since` host. What holds the line is `defaultValue:
-    // false` + `sensitive: true` + the runbook.
-    //
-    // REPLACING IT IS STEP 1 OF THE ARMING PROCEDURE in
-    // docs/runbooks/async-export-rollout.md, so the placeholder has a named
-    // owner and a named moment rather than being a deferral nobody holds.
-    since: "0.29.0"
+    // false` + `sensitive: true` + the runbook. It is likewise excluded from
+    // `projectDefinition` in schema-version.ts, so moving it does not roll
+    // FLAGS_SCHEMA_VERSION for a fleet that cannot read it anyway.
+    since: "0.28.774"
   },
   {
     key: "artefact-export-public-jobs",

package/dist/mcp/slack-channel.js

@@ -37882,31 +37882,31 @@ var FLAG_REGISTRY = [
     // survive it). The dependency is real; it is on the CLI's ability to SURVIVE
     // the flag, not to READ it, and the modal cannot tell those apart.
     //
-    // Pinned ABOVE every published release on purpose, the `agt-bin-path`
-    // precedent: it classifies EVERY host as `stale`, so the modal reports no
-    // reach rather than reach it has no basis for. A guessed number would be
-    // worse than a placeholder, and the two directions are not symmetric —
-    // too HIGH over-warns (annoying), too LOW promises reach to a build that
-    // answers a job id with a TypeError inside file-write logic (a broken export
-    // reported to the agent as "download failed").
+    // VERIFIED AGAINST THE PUBLISHED TARBALL, NOT THE MERGE (2026-09-03).
+    // `npm pack @integrity-labs/agt-cli@<version>`, then grep the extracted
+    // `package/dist/mcp/index.js`. That file is present in BOTH builds and both
+    // carry `exportArtefactToFile`, so the absences below are an absence of the
+    // CODE rather than of the file:
     //
-    // The exact version cannot be known here: the CLI auto-publishes ON MERGE of
-    // this change, patch-bumping from whatever is current, so any pre-merge
-    // value is a guess. Do NOT read it off `apps/cli/package.json`, and do NOT
-    // trust a version produced by re-running a failed publish job (ENG-9647: a
-    // re-run rebuilds the ORIGINAL tree under a HIGHER number, so the version
-    // string would claim a capability the bytes do not carry).
+    //   0.28.773 — `classifyExportResponse`, `pendingExportText` and
+    //              `artefact-export-response` all ABSENT.
+    //   0.28.774 — all three PRESENT.
+    //
+    // Hence the pin. Do NOT read a replacement off `apps/cli/package.json`, and
+    // do NOT trust a version produced by re-running a failed publish job
+    // (ENG-9647: a re-run rebuilds the ORIGINAL tree under a HIGHER number, so
+    // the version string would claim a capability the bytes do not carry). The
+    // publish workflow's output only identifies a CANDIDATE; the tarball is what
+    // proves it, so re-run the same two greps if this pin ever has to move.
     //
     // AND `since` IS ADVISORY, NOT A GUARD. It is read in exactly one place —
     // the flip-reach modal. Nothing in the evaluation or override-write path
     // consults it, so this changes what an operator is TOLD and does not stop a
     // flip on an under-`since` host. What holds the line is `defaultValue:
-    // false` + `sensitive: true` + the runbook.
-    //
-    // REPLACING IT IS STEP 1 OF THE ARMING PROCEDURE in
-    // docs/runbooks/async-export-rollout.md, so the placeholder has a named
-    // owner and a named moment rather than being a deferral nobody holds.
-    since: "0.29.0"
+    // false` + `sensitive: true` + the runbook. It is likewise excluded from
+    // `projectDefinition` in schema-version.ts, so moving it does not roll
+    // FLAGS_SCHEMA_VERSION for a fleet that cannot read it anyway.
+    since: "0.28.774"
   },
   {
     key: "artefact-export-public-jobs",
@@ -42790,6 +42790,20 @@ async function actuateHostRestart(opts) {
   }
 }
 
+// src/slack-thread-drop-line.ts
+function formatThreadDropLine(input) {
+  return `slack-channel(${input.agentCodeName}): thread-reply drop reason=${input.reason} follow_mode=${input.followMode} mentions_bot=${input.mentionsBot} channel=${input.channelHash} ts=${normaliseTs(input.ts)}
+`;
+}
+function normaliseTs(ts) {
+  if (ts === null || ts === void 0 || ts === "" || ts === "<none>") return "none";
+  return ts;
+}
+function textMentionsBot(text, botId) {
+  if (!botId || typeof text !== "string") return false;
+  return text.includes(`<@${botId}>`);
+}
+
 // src/mcp-spawn-lock.ts
 import {
   existsSync as existsSync9,
@@ -48158,11 +48172,18 @@ async function connectSocketMode() {
       }
       if (evt.type === "message" && evt.channel && !isDirectMessage) {
         if (isThreadReply) {
+          const mentionsBot = textMentionsBot(evt.text, botUserId);
           const logThreadDrop = (reason) => {
             const channelHash = createHash3("sha256").update(evt.channel ?? "").digest("hex").slice(0, 8);
             process.stderr.write(
-              `slack-channel(${AGENT_CODE_NAME}): thread-reply drop reason=${reason} auto_follow=${THREAD_AUTO_FOLLOW} channel=${channelHash} ts=${redactSlackId(evt.ts)}
-`
+              formatThreadDropLine({
+                agentCodeName: AGENT_CODE_NAME,
+                reason,
+                followMode: THREAD_AUTO_FOLLOW,
+                mentionsBot,
+                channelHash,
+                ts: redactSlackId(evt.ts)
+              })
             );
           };
           if (THREAD_AUTO_FOLLOW === "off") {

package/dist/mcp/telegram-channel.js

@@ -38040,31 +38040,31 @@ var FLAG_REGISTRY = [
     // survive it). The dependency is real; it is on the CLI's ability to SURVIVE
     // the flag, not to READ it, and the modal cannot tell those apart.
     //
-    // Pinned ABOVE every published release on purpose, the `agt-bin-path`
-    // precedent: it classifies EVERY host as `stale`, so the modal reports no
-    // reach rather than reach it has no basis for. A guessed number would be
-    // worse than a placeholder, and the two directions are not symmetric —
-    // too HIGH over-warns (annoying), too LOW promises reach to a build that
-    // answers a job id with a TypeError inside file-write logic (a broken export
-    // reported to the agent as "download failed").
+    // VERIFIED AGAINST THE PUBLISHED TARBALL, NOT THE MERGE (2026-09-03).
+    // `npm pack @integrity-labs/agt-cli@<version>`, then grep the extracted
+    // `package/dist/mcp/index.js`. That file is present in BOTH builds and both
+    // carry `exportArtefactToFile`, so the absences below are an absence of the
+    // CODE rather than of the file:
     //
-    // The exact version cannot be known here: the CLI auto-publishes ON MERGE of
-    // this change, patch-bumping from whatever is current, so any pre-merge
-    // value is a guess. Do NOT read it off `apps/cli/package.json`, and do NOT
-    // trust a version produced by re-running a failed publish job (ENG-9647: a
-    // re-run rebuilds the ORIGINAL tree under a HIGHER number, so the version
-    // string would claim a capability the bytes do not carry).
+    //   0.28.773 — `classifyExportResponse`, `pendingExportText` and
+    //              `artefact-export-response` all ABSENT.
+    //   0.28.774 — all three PRESENT.
+    //
+    // Hence the pin. Do NOT read a replacement off `apps/cli/package.json`, and
+    // do NOT trust a version produced by re-running a failed publish job
+    // (ENG-9647: a re-run rebuilds the ORIGINAL tree under a HIGHER number, so
+    // the version string would claim a capability the bytes do not carry). The
+    // publish workflow's output only identifies a CANDIDATE; the tarball is what
+    // proves it, so re-run the same two greps if this pin ever has to move.
     //
     // AND `since` IS ADVISORY, NOT A GUARD. It is read in exactly one place —
     // the flip-reach modal. Nothing in the evaluation or override-write path
     // consults it, so this changes what an operator is TOLD and does not stop a
     // flip on an under-`since` host. What holds the line is `defaultValue:
-    // false` + `sensitive: true` + the runbook.
-    //
-    // REPLACING IT IS STEP 1 OF THE ARMING PROCEDURE in
-    // docs/runbooks/async-export-rollout.md, so the placeholder has a named
-    // owner and a named moment rather than being a deferral nobody holds.
-    since: "0.29.0"
+    // false` + `sensitive: true` + the runbook. It is likewise excluded from
+    // `projectDefinition` in schema-version.ts, so moving it does not roll
+    // FLAGS_SCHEMA_VERSION for a fleet that cannot read it anyway.
+    since: "0.28.774"
   },
   {
     key: "artefact-export-public-jobs",

package/dist/{persistent-session-5OCP47I3.js → persistent-session-EU44RQZN.js}

@@ -49,8 +49,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-EXCWZPDJ.js";
-import "./chunk-LLDK74IY.js";
+} from "./chunk-2GZ7EG7V.js";
+import "./chunk-PUEQQOJI.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -104,4 +104,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-5OCP47I3.js.map
+//# sourceMappingURL=persistent-session-EU44RQZN.js.map

package/dist/{responsiveness-probe-QYSMGG5E.js → responsiveness-probe-ENOEURQY.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-EXCWZPDJ.js";
-import "./chunk-LLDK74IY.js";
+} from "./chunk-2GZ7EG7V.js";
+import "./chunk-PUEQQOJI.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -745,4 +745,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-QYSMGG5E.js.map
+//# sourceMappingURL=responsiveness-probe-ENOEURQY.js.map

package/dist/{session-auth-dead-WFXDJQ5L.js → session-auth-dead-TWWJAF7O.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-LLDK74IY.js";
+} from "./chunk-PUEQQOJI.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-WFXDJQ5L.js.map
+//# sourceMappingURL=session-auth-dead-TWWJAF7O.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.787",
+  "version": "0.28.789",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {