@integrity-labs/agt-cli 0.28.804 → 0.28.806

package/dist/mcp/direct-chat-channel.js

@@ -36899,6 +36899,38 @@ var FLAG_REGISTRY = [
     // envVar — this is a net-new control with no pre-flags env gate to migrate.
     defaultValue: false
   },
+  {
+    key: "skill-dreaming-support-intake",
+    description: "Route skill dreaming's GLOBAL-scope proposals into Integrity Labs' own support-intake Linear workspace (ENG-9926). 42% of dreaming output targets a global skill no product surface can change, so those drafts can only ever become an agent-scoped fork that never reaches the thing it improves \u2014 the improvement is therefore ALSO filed as a support-intake issue, deduped per target skill with one Linear customer need per requesting org. Boolean gate; ships dark \u2014 when off nothing is filed and the fork behaviour is exactly today's.",
+    flagType: "boolean",
+    // Arming this starts exporting customer-derived text to a third-party tracker, so it
+    // takes the ADR-0022 §4 explicit-confirmation step rather than a single unguarded
+    // write — matching every comparable export gate in this file
+    // (`org-email-domain-derivation`, `kanban-push-status`,
+    // `augmented-support-auto-provision`, `email-guard-enforce-enabled`).
+    // (CodeRabbit, PR #5519: the first cut documented the risk in the comment below and
+    // then omitted the marker that acts on it.)
+    sensitive: true,
+    // THIS GATES A DATA CROSSING, NOT A COST. Read that before arming it.
+    //
+    // Everything skill dreaming does today stays inside the control plane: it reads
+    // `agent_memories` and writes a `skill_definitions` row in the same Postgres, same
+    // org, same RLS. This flag is what sends LLM-written rationale, confidence, and the
+    // verbatim NAMES of the memories that motivated a proposal OUT to Linear — and
+    // `feature-request-intake.ts` already calls Linear "the third-party tracker" where it
+    // refuses to export a requester's contact details there. Via
+    // linkFeatureRequestCustomerNeed it also sends the org's verified email domains.
+    //
+    // That is strictly more than ADR-0052 §6 gated for PostHog, and ENG-8247 is the
+    // precedent for why a credential must not BE the gate: holding a support-intake key
+    // is not the same as being cleared to send customer-derived text to a vendor's
+    // tracker. Hence a separate flag rather than leaning on isFeatureIntakeConfigured.
+    //
+    // Declared safe value is `false` (nothing filed). Fail-safe direction: a flag-DB read
+    // error must never start exporting on its own. No envVar — net-new control with no
+    // pre-flags env gate to migrate (ADR-0022).
+    defaultValue: false
+  },
   {
     key: "skill-draft-review-notify",
     description: "Pending skill-draft review nudge (ENG-6505): when a skill lands as a status=draft awaiting operator review, send a low-severity informational notification to the right reviewer(s) by scope \u2014 agent-scoped \u2192 the agent's manager (reports_to_person), falling back to team owners/admins; team-scoped \u2192 team owners/admins; org-scoped \u2192 org owners/admins \u2014 with a deep link to the Pending Skills card. Distinct from (and never doubles up on) the HIGH+ SkillSpector security alert. Covers both the agent-authored (ENG-4589) and skill-dreaming (ENG-6500) draft paths. Boolean gate; ships dark \u2014 when off no nudge is sent, so the steady state until an org is armed is silence.",

package/dist/mcp/index.js

@@ -43983,6 +43983,38 @@ var FLAG_REGISTRY = [
     // envVar — this is a net-new control with no pre-flags env gate to migrate.
     defaultValue: false
   },
+  {
+    key: "skill-dreaming-support-intake",
+    description: "Route skill dreaming's GLOBAL-scope proposals into Integrity Labs' own support-intake Linear workspace (ENG-9926). 42% of dreaming output targets a global skill no product surface can change, so those drafts can only ever become an agent-scoped fork that never reaches the thing it improves \u2014 the improvement is therefore ALSO filed as a support-intake issue, deduped per target skill with one Linear customer need per requesting org. Boolean gate; ships dark \u2014 when off nothing is filed and the fork behaviour is exactly today's.",
+    flagType: "boolean",
+    // Arming this starts exporting customer-derived text to a third-party tracker, so it
+    // takes the ADR-0022 §4 explicit-confirmation step rather than a single unguarded
+    // write — matching every comparable export gate in this file
+    // (`org-email-domain-derivation`, `kanban-push-status`,
+    // `augmented-support-auto-provision`, `email-guard-enforce-enabled`).
+    // (CodeRabbit, PR #5519: the first cut documented the risk in the comment below and
+    // then omitted the marker that acts on it.)
+    sensitive: true,
+    // THIS GATES A DATA CROSSING, NOT A COST. Read that before arming it.
+    //
+    // Everything skill dreaming does today stays inside the control plane: it reads
+    // `agent_memories` and writes a `skill_definitions` row in the same Postgres, same
+    // org, same RLS. This flag is what sends LLM-written rationale, confidence, and the
+    // verbatim NAMES of the memories that motivated a proposal OUT to Linear — and
+    // `feature-request-intake.ts` already calls Linear "the third-party tracker" where it
+    // refuses to export a requester's contact details there. Via
+    // linkFeatureRequestCustomerNeed it also sends the org's verified email domains.
+    //
+    // That is strictly more than ADR-0052 §6 gated for PostHog, and ENG-8247 is the
+    // precedent for why a credential must not BE the gate: holding a support-intake key
+    // is not the same as being cleared to send customer-derived text to a vendor's
+    // tracker. Hence a separate flag rather than leaning on isFeatureIntakeConfigured.
+    //
+    // Declared safe value is `false` (nothing filed). Fail-safe direction: a flag-DB read
+    // error must never start exporting on its own. No envVar — net-new control with no
+    // pre-flags env gate to migrate (ADR-0022).
+    defaultValue: false
+  },
   {
     key: "skill-draft-review-notify",
     description: "Pending skill-draft review nudge (ENG-6505): when a skill lands as a status=draft awaiting operator review, send a low-severity informational notification to the right reviewer(s) by scope \u2014 agent-scoped \u2192 the agent's manager (reports_to_person), falling back to team owners/admins; team-scoped \u2192 team owners/admins; org-scoped \u2192 org owners/admins \u2014 with a deep link to the Pending Skills card. Distinct from (and never doubles up on) the HIGH+ SkillSpector security alert. Covers both the agent-authored (ENG-4589) and skill-dreaming (ENG-6500) draft paths. Boolean gate; ships dark \u2014 when off no nudge is sent, so the steady state until an org is armed is silence.",

package/dist/mcp/origami.js

@@ -42623,6 +42623,38 @@ var FLAG_REGISTRY = [
     // envVar — this is a net-new control with no pre-flags env gate to migrate.
     defaultValue: false
   },
+  {
+    key: "skill-dreaming-support-intake",
+    description: "Route skill dreaming's GLOBAL-scope proposals into Integrity Labs' own support-intake Linear workspace (ENG-9926). 42% of dreaming output targets a global skill no product surface can change, so those drafts can only ever become an agent-scoped fork that never reaches the thing it improves \u2014 the improvement is therefore ALSO filed as a support-intake issue, deduped per target skill with one Linear customer need per requesting org. Boolean gate; ships dark \u2014 when off nothing is filed and the fork behaviour is exactly today's.",
+    flagType: "boolean",
+    // Arming this starts exporting customer-derived text to a third-party tracker, so it
+    // takes the ADR-0022 §4 explicit-confirmation step rather than a single unguarded
+    // write — matching every comparable export gate in this file
+    // (`org-email-domain-derivation`, `kanban-push-status`,
+    // `augmented-support-auto-provision`, `email-guard-enforce-enabled`).
+    // (CodeRabbit, PR #5519: the first cut documented the risk in the comment below and
+    // then omitted the marker that acts on it.)
+    sensitive: true,
+    // THIS GATES A DATA CROSSING, NOT A COST. Read that before arming it.
+    //
+    // Everything skill dreaming does today stays inside the control plane: it reads
+    // `agent_memories` and writes a `skill_definitions` row in the same Postgres, same
+    // org, same RLS. This flag is what sends LLM-written rationale, confidence, and the
+    // verbatim NAMES of the memories that motivated a proposal OUT to Linear — and
+    // `feature-request-intake.ts` already calls Linear "the third-party tracker" where it
+    // refuses to export a requester's contact details there. Via
+    // linkFeatureRequestCustomerNeed it also sends the org's verified email domains.
+    //
+    // That is strictly more than ADR-0052 §6 gated for PostHog, and ENG-8247 is the
+    // precedent for why a credential must not BE the gate: holding a support-intake key
+    // is not the same as being cleared to send customer-derived text to a vendor's
+    // tracker. Hence a separate flag rather than leaning on isFeatureIntakeConfigured.
+    //
+    // Declared safe value is `false` (nothing filed). Fail-safe direction: a flag-DB read
+    // error must never start exporting on its own. No envVar — net-new control with no
+    // pre-flags env gate to migrate (ADR-0022).
+    defaultValue: false
+  },
   {
     key: "skill-draft-review-notify",
     description: "Pending skill-draft review nudge (ENG-6505): when a skill lands as a status=draft awaiting operator review, send a low-severity informational notification to the right reviewer(s) by scope \u2014 agent-scoped \u2192 the agent's manager (reports_to_person), falling back to team owners/admins; team-scoped \u2192 team owners/admins; org-scoped \u2192 org owners/admins \u2014 with a deep link to the Pending Skills card. Distinct from (and never doubles up on) the HIGH+ SkillSpector security alert. Covers both the agent-authored (ENG-4589) and skill-dreaming (ENG-6500) draft paths. Boolean gate; ships dark \u2014 when off no nudge is sent, so the steady state until an org is armed is silence.",

package/dist/mcp/slack-channel.js

@@ -37146,6 +37146,38 @@ var FLAG_REGISTRY = [
     // envVar — this is a net-new control with no pre-flags env gate to migrate.
     defaultValue: false
   },
+  {
+    key: "skill-dreaming-support-intake",
+    description: "Route skill dreaming's GLOBAL-scope proposals into Integrity Labs' own support-intake Linear workspace (ENG-9926). 42% of dreaming output targets a global skill no product surface can change, so those drafts can only ever become an agent-scoped fork that never reaches the thing it improves \u2014 the improvement is therefore ALSO filed as a support-intake issue, deduped per target skill with one Linear customer need per requesting org. Boolean gate; ships dark \u2014 when off nothing is filed and the fork behaviour is exactly today's.",
+    flagType: "boolean",
+    // Arming this starts exporting customer-derived text to a third-party tracker, so it
+    // takes the ADR-0022 §4 explicit-confirmation step rather than a single unguarded
+    // write — matching every comparable export gate in this file
+    // (`org-email-domain-derivation`, `kanban-push-status`,
+    // `augmented-support-auto-provision`, `email-guard-enforce-enabled`).
+    // (CodeRabbit, PR #5519: the first cut documented the risk in the comment below and
+    // then omitted the marker that acts on it.)
+    sensitive: true,
+    // THIS GATES A DATA CROSSING, NOT A COST. Read that before arming it.
+    //
+    // Everything skill dreaming does today stays inside the control plane: it reads
+    // `agent_memories` and writes a `skill_definitions` row in the same Postgres, same
+    // org, same RLS. This flag is what sends LLM-written rationale, confidence, and the
+    // verbatim NAMES of the memories that motivated a proposal OUT to Linear — and
+    // `feature-request-intake.ts` already calls Linear "the third-party tracker" where it
+    // refuses to export a requester's contact details there. Via
+    // linkFeatureRequestCustomerNeed it also sends the org's verified email domains.
+    //
+    // That is strictly more than ADR-0052 §6 gated for PostHog, and ENG-8247 is the
+    // precedent for why a credential must not BE the gate: holding a support-intake key
+    // is not the same as being cleared to send customer-derived text to a vendor's
+    // tracker. Hence a separate flag rather than leaning on isFeatureIntakeConfigured.
+    //
+    // Declared safe value is `false` (nothing filed). Fail-safe direction: a flag-DB read
+    // error must never start exporting on its own. No envVar — net-new control with no
+    // pre-flags env gate to migrate (ADR-0022).
+    defaultValue: false
+  },
   {
     key: "skill-draft-review-notify",
     description: "Pending skill-draft review nudge (ENG-6505): when a skill lands as a status=draft awaiting operator review, send a low-severity informational notification to the right reviewer(s) by scope \u2014 agent-scoped \u2192 the agent's manager (reports_to_person), falling back to team owners/admins; team-scoped \u2192 team owners/admins; org-scoped \u2192 org owners/admins \u2014 with a deep link to the Pending Skills card. Distinct from (and never doubles up on) the HIGH+ SkillSpector security alert. Covers both the agent-authored (ENG-4589) and skill-dreaming (ENG-6500) draft paths. Boolean gate; ships dark \u2014 when off no nudge is sent, so the steady state until an org is armed is silence.",

package/dist/mcp/telegram-channel.js

@@ -37304,6 +37304,38 @@ var FLAG_REGISTRY = [
     // envVar — this is a net-new control with no pre-flags env gate to migrate.
     defaultValue: false
   },
+  {
+    key: "skill-dreaming-support-intake",
+    description: "Route skill dreaming's GLOBAL-scope proposals into Integrity Labs' own support-intake Linear workspace (ENG-9926). 42% of dreaming output targets a global skill no product surface can change, so those drafts can only ever become an agent-scoped fork that never reaches the thing it improves \u2014 the improvement is therefore ALSO filed as a support-intake issue, deduped per target skill with one Linear customer need per requesting org. Boolean gate; ships dark \u2014 when off nothing is filed and the fork behaviour is exactly today's.",
+    flagType: "boolean",
+    // Arming this starts exporting customer-derived text to a third-party tracker, so it
+    // takes the ADR-0022 §4 explicit-confirmation step rather than a single unguarded
+    // write — matching every comparable export gate in this file
+    // (`org-email-domain-derivation`, `kanban-push-status`,
+    // `augmented-support-auto-provision`, `email-guard-enforce-enabled`).
+    // (CodeRabbit, PR #5519: the first cut documented the risk in the comment below and
+    // then omitted the marker that acts on it.)
+    sensitive: true,
+    // THIS GATES A DATA CROSSING, NOT A COST. Read that before arming it.
+    //
+    // Everything skill dreaming does today stays inside the control plane: it reads
+    // `agent_memories` and writes a `skill_definitions` row in the same Postgres, same
+    // org, same RLS. This flag is what sends LLM-written rationale, confidence, and the
+    // verbatim NAMES of the memories that motivated a proposal OUT to Linear — and
+    // `feature-request-intake.ts` already calls Linear "the third-party tracker" where it
+    // refuses to export a requester's contact details there. Via
+    // linkFeatureRequestCustomerNeed it also sends the org's verified email domains.
+    //
+    // That is strictly more than ADR-0052 §6 gated for PostHog, and ENG-8247 is the
+    // precedent for why a credential must not BE the gate: holding a support-intake key
+    // is not the same as being cleared to send customer-derived text to a vendor's
+    // tracker. Hence a separate flag rather than leaning on isFeatureIntakeConfigured.
+    //
+    // Declared safe value is `false` (nothing filed). Fail-safe direction: a flag-DB read
+    // error must never start exporting on its own. No envVar — net-new control with no
+    // pre-flags env gate to migrate (ADR-0022).
+    defaultValue: false
+  },
   {
     key: "skill-draft-review-notify",
     description: "Pending skill-draft review nudge (ENG-6505): when a skill lands as a status=draft awaiting operator review, send a low-severity informational notification to the right reviewer(s) by scope \u2014 agent-scoped \u2192 the agent's manager (reports_to_person), falling back to team owners/admins; team-scoped \u2192 team owners/admins; org-scoped \u2192 org owners/admins \u2014 with a deep link to the Pending Skills card. Distinct from (and never doubles up on) the HIGH+ SkillSpector security alert. Covers both the agent-authored (ENG-4589) and skill-dreaming (ENG-6500) draft paths. Boolean gate; ships dark \u2014 when off no nudge is sent, so the steady state until an org is armed is silence.",

package/dist/{persistent-session-7YEKAGRY.js → persistent-session-GPVAPK4S.js}

@@ -49,8 +49,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-H37X4QPC.js";
-import "./chunk-MJ3YHZSR.js";
+} from "./chunk-TWZFTSGP.js";
+import "./chunk-RMBASAMS.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -104,4 +104,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-7YEKAGRY.js.map
+//# sourceMappingURL=persistent-session-GPVAPK4S.js.map

package/dist/{responsiveness-probe-VL6EANMM.js → responsiveness-probe-7FEKDJZW.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-H37X4QPC.js";
-import "./chunk-MJ3YHZSR.js";
+} from "./chunk-TWZFTSGP.js";
+import "./chunk-RMBASAMS.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -745,4 +745,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-VL6EANMM.js.map
+//# sourceMappingURL=responsiveness-probe-7FEKDJZW.js.map

package/dist/{session-auth-dead-JJEZ4XWO.js → session-auth-dead-ZBMVGQYW.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-MJ3YHZSR.js";
+} from "./chunk-RMBASAMS.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-JJEZ4XWO.js.map
+//# sourceMappingURL=session-auth-dead-ZBMVGQYW.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.804",
+  "version": "0.28.806",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {