@integrity-labs/agt-cli 0.28.805 → 0.28.806

package/dist/{chunk-2FL6V4E5.js → chunk-RMBASAMS.js}

@@ -5661,6 +5661,38 @@ var FLAG_REGISTRY = [
     // envVar — this is a net-new control with no pre-flags env gate to migrate.
     defaultValue: false
   },
+  {
+    key: "skill-dreaming-support-intake",
+    description: "Route skill dreaming's GLOBAL-scope proposals into Integrity Labs' own support-intake Linear workspace (ENG-9926). 42% of dreaming output targets a global skill no product surface can change, so those drafts can only ever become an agent-scoped fork that never reaches the thing it improves \u2014 the improvement is therefore ALSO filed as a support-intake issue, deduped per target skill with one Linear customer need per requesting org. Boolean gate; ships dark \u2014 when off nothing is filed and the fork behaviour is exactly today's.",
+    flagType: "boolean",
+    // Arming this starts exporting customer-derived text to a third-party tracker, so it
+    // takes the ADR-0022 §4 explicit-confirmation step rather than a single unguarded
+    // write — matching every comparable export gate in this file
+    // (`org-email-domain-derivation`, `kanban-push-status`,
+    // `augmented-support-auto-provision`, `email-guard-enforce-enabled`).
+    // (CodeRabbit, PR #5519: the first cut documented the risk in the comment below and
+    // then omitted the marker that acts on it.)
+    sensitive: true,
+    // THIS GATES A DATA CROSSING, NOT A COST. Read that before arming it.
+    //
+    // Everything skill dreaming does today stays inside the control plane: it reads
+    // `agent_memories` and writes a `skill_definitions` row in the same Postgres, same
+    // org, same RLS. This flag is what sends LLM-written rationale, confidence, and the
+    // verbatim NAMES of the memories that motivated a proposal OUT to Linear — and
+    // `feature-request-intake.ts` already calls Linear "the third-party tracker" where it
+    // refuses to export a requester's contact details there. Via
+    // linkFeatureRequestCustomerNeed it also sends the org's verified email domains.
+    //
+    // That is strictly more than ADR-0052 §6 gated for PostHog, and ENG-8247 is the
+    // precedent for why a credential must not BE the gate: holding a support-intake key
+    // is not the same as being cleared to send customer-derived text to a vendor's
+    // tracker. Hence a separate flag rather than leaning on isFeatureIntakeConfigured.
+    //
+    // Declared safe value is `false` (nothing filed). Fail-safe direction: a flag-DB read
+    // error must never start exporting on its own. No envVar — net-new control with no
+    // pre-flags env gate to migrate (ADR-0022).
+    defaultValue: false
+  },
   {
     key: "skill-draft-review-notify",
     description: "Pending skill-draft review nudge (ENG-6505): when a skill lands as a status=draft awaiting operator review, send a low-severity informational notification to the right reviewer(s) by scope \u2014 agent-scoped \u2192 the agent's manager (reports_to_person), falling back to team owners/admins; team-scoped \u2192 team owners/admins; org-scoped \u2192 org owners/admins \u2014 with a deep link to the Pending Skills card. Distinct from (and never doubles up on) the HIGH+ SkillSpector security alert. Covers both the agent-authored (ENG-4589) and skill-dreaming (ENG-6500) draft paths. Boolean gate; ships dark \u2014 when off no nudge is sent, so the steady state until an org is armed is silence.",
@@ -13655,4 +13687,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-2FL6V4E5.js.map
+//# sourceMappingURL=chunk-RMBASAMS.js.map