@integrity-labs/agt-cli 0.28.804 → 0.28.806

package/dist/{chunk-MJ3YHZSR.js → chunk-RMBASAMS.js}

@@ -517,10 +517,20 @@ is the failure this rule exists to stop.
 `;
 }
 var ACTIVE_TASKS_MAX_CHARS = 800;
+var ACTIVE_TASKS_TITLE_MAX_CHARS = 60;
 var ACTIVE_TASKS_TRUNCATION_SUFFIX = "\u2026 (truncated)\n\n";
 function sanitizePromptText(value) {
   return value.replace(/[\u0000-\u001F\u007F]+/g, " ").replace(/\s+/g, " ").trim();
 }
+function truncateActiveTaskTitle(title) {
+  if (title.length <= ACTIVE_TASKS_TITLE_MAX_CHARS)
+    return title;
+  let cut = title.slice(0, ACTIVE_TASKS_TITLE_MAX_CHARS - 1);
+  const last = cut.charCodeAt(cut.length - 1);
+  if (last >= 55296 && last <= 56319)
+    cut = cut.slice(0, -1);
+  return cut + "\u2026";
+}
 function buildActiveTasksSection(activeTasks) {
   if (!activeTasks || activeTasks.length === 0)
     return "";
@@ -536,13 +546,14 @@ function buildActiveTasksSection(activeTasks) {
   for (const t of activeTasks) {
     const status = sanitizePromptText(t.status);
     const id = sanitizePromptText(t.id);
-    const title = sanitizePromptText(t.title);
+    const title = truncateActiveTaskTitle(sanitizePromptText(t.title));
     const sourceParts = [];
     if (t.source_channel && t.source_thread_id) {
       sourceParts.push(`${sanitizePromptText(t.source_channel)} thread ${sanitizePromptText(t.source_thread_id)}`);
     }
-    if (t.source_url)
+    if (t.source_url && sourceParts.length === 0) {
       sourceParts.push(sanitizePromptText(t.source_url));
+    }
     const source = sourceParts.length > 0 ? ` \u2014 ${sourceParts.join(" \u2022 ")}` : "";
     lines.push(`- [${status}] ${id}: "${title}"${source}`);
   }
@@ -5650,6 +5661,38 @@ var FLAG_REGISTRY = [
     // envVar — this is a net-new control with no pre-flags env gate to migrate.
     defaultValue: false
   },
+  {
+    key: "skill-dreaming-support-intake",
+    description: "Route skill dreaming's GLOBAL-scope proposals into Integrity Labs' own support-intake Linear workspace (ENG-9926). 42% of dreaming output targets a global skill no product surface can change, so those drafts can only ever become an agent-scoped fork that never reaches the thing it improves \u2014 the improvement is therefore ALSO filed as a support-intake issue, deduped per target skill with one Linear customer need per requesting org. Boolean gate; ships dark \u2014 when off nothing is filed and the fork behaviour is exactly today's.",
+    flagType: "boolean",
+    // Arming this starts exporting customer-derived text to a third-party tracker, so it
+    // takes the ADR-0022 §4 explicit-confirmation step rather than a single unguarded
+    // write — matching every comparable export gate in this file
+    // (`org-email-domain-derivation`, `kanban-push-status`,
+    // `augmented-support-auto-provision`, `email-guard-enforce-enabled`).
+    // (CodeRabbit, PR #5519: the first cut documented the risk in the comment below and
+    // then omitted the marker that acts on it.)
+    sensitive: true,
+    // THIS GATES A DATA CROSSING, NOT A COST. Read that before arming it.
+    //
+    // Everything skill dreaming does today stays inside the control plane: it reads
+    // `agent_memories` and writes a `skill_definitions` row in the same Postgres, same
+    // org, same RLS. This flag is what sends LLM-written rationale, confidence, and the
+    // verbatim NAMES of the memories that motivated a proposal OUT to Linear — and
+    // `feature-request-intake.ts` already calls Linear "the third-party tracker" where it
+    // refuses to export a requester's contact details there. Via
+    // linkFeatureRequestCustomerNeed it also sends the org's verified email domains.
+    //
+    // That is strictly more than ADR-0052 §6 gated for PostHog, and ENG-8247 is the
+    // precedent for why a credential must not BE the gate: holding a support-intake key
+    // is not the same as being cleared to send customer-derived text to a vendor's
+    // tracker. Hence a separate flag rather than leaning on isFeatureIntakeConfigured.
+    //
+    // Declared safe value is `false` (nothing filed). Fail-safe direction: a flag-DB read
+    // error must never start exporting on its own. No envVar — net-new control with no
+    // pre-flags env gate to migrate (ADR-0022).
+    defaultValue: false
+  },
   {
     key: "skill-draft-review-notify",
     description: "Pending skill-draft review nudge (ENG-6505): when a skill lands as a status=draft awaiting operator review, send a low-severity informational notification to the right reviewer(s) by scope \u2014 agent-scoped \u2192 the agent's manager (reports_to_person), falling back to team owners/admins; team-scoped \u2192 team owners/admins; org-scoped \u2192 org owners/admins \u2014 with a deep link to the Pending Skills card. Distinct from (and never doubles up on) the HIGH+ SkillSpector security alert. Covers both the agent-authored (ENG-4589) and skill-dreaming (ENG-6500) draft paths. Boolean gate; ships dark \u2014 when off no nudge is sent, so the steady state until an org is armed is silence.",
@@ -13644,4 +13687,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-MJ3YHZSR.js.map
+//# sourceMappingURL=chunk-RMBASAMS.js.map