@integrity-labs/agt-cli 0.28.806 → 0.28.807

package/dist/{claude-pair-runtime-YEW7Y5N2.js → claude-pair-runtime-XZLX2PEL.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-GPVAPK4S.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-LEICQMWY.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-YEW7Y5N2.js.map
+//# sourceMappingURL=claude-pair-runtime-XZLX2PEL.js.map

package/dist/lib/manager-worker.js

@@ -58,7 +58,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-7TIQODEK.js";
+} from "../chunk-SHQCTBFE.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -123,7 +123,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-TWZFTSGP.js";
+} from "../chunk-GIV6ORI3.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -215,7 +215,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-RMBASAMS.js";
+} from "../chunk-VK35F6O7.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -12918,7 +12918,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-7FEKDJZW.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-WEXP254C.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13578,7 +13578,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.806" : "dev";
+var agtCliVersion = true ? "0.28.807" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15125,7 +15125,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-GPVAPK4S.js");
+      const { collectDiagnostics } = await import("../persistent-session-LEICQMWY.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15266,7 +15266,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-GPVAPK4S.js");
+      const { collectDiagnostics } = await import("../persistent-session-LEICQMWY.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15435,7 +15435,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-7FEKDJZW.js");
+      } = await import("../responsiveness-probe-WEXP254C.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15552,7 +15552,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-7FEKDJZW.js");
+        } = await import("../responsiveness-probe-WEXP254C.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15708,7 +15708,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-ZBMVGQYW.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-AROKHZET.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -19868,7 +19868,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-GPVAPK4S.js");
+        const { collectDiagnostics } = await import("../persistent-session-LEICQMWY.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19914,7 +19914,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-GPVAPK4S.js");
+      const { collectDiagnostics } = await import("../persistent-session-LEICQMWY.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20550,7 +20550,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-YEW7Y5N2.js");
+  } = await import("../claude-pair-runtime-XZLX2PEL.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -37279,6 +37279,26 @@ var FLAG_REGISTRY = [
     // env var is retired.
     envVar: "AUGMENTED_CONNECTIVITY_ESCALATION_ENABLED"
   },
+  {
+    key: "slack-manifest-remediate",
+    description: "Let the Slack manifest drift monitor PUSH, not just alert (ENG-9963). updateSlackManifest had exactly one caller \u2014 a console button \u2014 so nothing but a human click ever pushed a manifest; ENG-7762 changed the generator with no rollout mechanism and 26 agents went 53 days with no working per-agent slash commands. When on, the daily drift cron pushes the generated manifest for a drifted agent. When off it alerts exactly as before. NOTE what arming this authorises: a push REPLACES a customer-owned Slack app's entire manifest, so the cron only ever pushes drift whose diffs are purely additive (isSafelyRemediable) \u2014 an app with live-only entries a push would destroy is declined and left for a human. Boolean gate; ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false` (alert-only), matching the cron's compiled
+    // default. The fail-safe direction is the opposite of a paging gate's and
+    // matters more: a flag-DB read error must never authorise a WRITE to a
+    // customer's Slack app.
+    defaultValue: false,
+    // Operator override, same precedence and vocabulary as the connectivity
+    // escalation gate above, so an operator who knows one knows both.
+    envVar: "AUGMENTED_SLACK_MANIFEST_REMEDIATE_ENABLED",
+    // ADR-0022 §4. NOTE this is where it diverges from the connectivity gate it
+    // otherwise mirrors, and the divergence is the point: arming THAT one only
+    // causes alerts to open, while arming THIS one authorises a cron to REPLACE
+    // manifests on customer-owned Slack apps. That is precisely the class the
+    // sensitive marker exists for — a control whose relaxation should not be one
+    // unguarded write away.
+    sensitive: true
+  },
   {
     key: "integration-reauth-reminders",
     description: "Re-notify an integration that stays in needs_reauth (ENG-8370). Failure notification is at-most-once PER TRANSITION, so an integration nobody repairs is announced once and then silent forever - prod carried a row failing every 30-minute tick for ~21 days on a single day-one notification. When on, the IntegrationReauthReminder cron re-fires the existing reconnect notification on a backoff measured from failure ONSET (+1d, +3d, +7d, then weekly), skipping rows an operator has muted. When off the cron still scans and logs what it WOULD have sent, so the volume can be sized before anyone is messaged. Boolean gate; ships dark.",

package/dist/mcp/index.js

@@ -37099,7 +37099,7 @@ function renderKanbanList(items, nowMs = Date.now()) {
   return lines.join("\n");
 }
 var BLOCKED_ON_ME_SECTION_HEADING = "You are blocking these (another agent has stopped)";
-var BLOCKED_ON_ME_SECTION_NOTE = "_Another agent has PARKED its own work until you act. These are not your cards and not pullable work \u2014 you cannot move, note or complete them, and they do not count toward your in-progress load. Do the thing named, then tell the agent so it can resume; it un-parks its own card._";
+var BLOCKED_ON_ME_SECTION_NOTE = "_Another agent has PARKED its own work until you act. These are not your cards and not pullable work \u2014 you cannot move, note or complete them, and they do not count toward your in-progress load. Do the thing named, then answer with `kanban_respond` (card_id + your answer) \u2014 that delivers it ON the parked card and un-parks it. Do NOT open a second card to carry the answer._";
 var HUMAN_ASSIGNED_SECTION_HEADING = "Assigned to a person (not yours to action)";
 var HUMAN_ASSIGNED_SECTION_NOTE = "_These belong to a person, not to you. You cannot move, note or complete them \u2014 every kanban write is refused. If the work is finished (or was never really theirs), use `kanban_recall` to pull the card back onto your board, then close it as normal._";
 
@@ -37824,6 +37824,27 @@ function formatKanbanLogResult(label, data, match = {}) {
   };
 }
 
+// src/kanban-respond-outcome.ts
+function describeKanbanRespondOutcome(data) {
+  if (data.ok && data.delivered !== false) {
+    return "Answer delivered. Their card is un-parked and back on their board \u2014 they will pick it up from here, so it is off your plate.";
+  }
+  if (data.reason === "recorded_undelivered" || data.ok && data.delivered === false) {
+    return "Your answer was recorded and the card un-parked, but delivery to that agent could not be confirmed \u2014 tell them directly as well so it is not lost.";
+  }
+  const refusal = REFUSAL_MESSAGES[data.reason ?? ""];
+  if (refusal) return refusal(data);
+  return data.error ?? "Could not send your answer.";
+}
+var REFUSAL_MESSAGES = {
+  not_found: () => 'No card is parked on you with that id. Re-read kanban_list \u2014 only cards under "You are blocking these" can be answered here, and the id must be copied exactly.',
+  self_block: () => "That card is parked on YOU by you \u2014 a self-block, almost always a mistyped code_name when it was parked. Fix it on your own card rather than answering it.",
+  already_responded: () => "Someone already answered that card, so it has resumed. Nothing more to do.",
+  not_actionable: (d) => `That card is no longer parked (status: ${d.status ?? "unknown"}), so there is nothing to un-park. The agent has moved on.`,
+  recorded_not_unparked: () => "Your answer was recorded but the card could not be un-parked, so the agent is still blocked \u2014 tell them directly and check the card."
+};
+var HANDLED_REFUSAL_REASONS = Object.keys(REFUSAL_MESSAGES).sort();
+
 // src/kanban-update.ts
 function buildKanbanUpdateItem(id, fields) {
   const item = { id };
@@ -44363,6 +44384,26 @@ var FLAG_REGISTRY = [
     // env var is retired.
     envVar: "AUGMENTED_CONNECTIVITY_ESCALATION_ENABLED"
   },
+  {
+    key: "slack-manifest-remediate",
+    description: "Let the Slack manifest drift monitor PUSH, not just alert (ENG-9963). updateSlackManifest had exactly one caller \u2014 a console button \u2014 so nothing but a human click ever pushed a manifest; ENG-7762 changed the generator with no rollout mechanism and 26 agents went 53 days with no working per-agent slash commands. When on, the daily drift cron pushes the generated manifest for a drifted agent. When off it alerts exactly as before. NOTE what arming this authorises: a push REPLACES a customer-owned Slack app's entire manifest, so the cron only ever pushes drift whose diffs are purely additive (isSafelyRemediable) \u2014 an app with live-only entries a push would destroy is declined and left for a human. Boolean gate; ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false` (alert-only), matching the cron's compiled
+    // default. The fail-safe direction is the opposite of a paging gate's and
+    // matters more: a flag-DB read error must never authorise a WRITE to a
+    // customer's Slack app.
+    defaultValue: false,
+    // Operator override, same precedence and vocabulary as the connectivity
+    // escalation gate above, so an operator who knows one knows both.
+    envVar: "AUGMENTED_SLACK_MANIFEST_REMEDIATE_ENABLED",
+    // ADR-0022 §4. NOTE this is where it diverges from the connectivity gate it
+    // otherwise mirrors, and the divergence is the point: arming THAT one only
+    // causes alerts to open, while arming THIS one authorises a cron to REPLACE
+    // manifests on customer-owned Slack apps. That is precisely the class the
+    // sensitive marker exists for — a control whose relaxation should not be one
+    // unguarded write away.
+    sensitive: true
+  },
   {
     key: "integration-reauth-reminders",
     description: "Re-notify an integration that stays in needs_reauth (ENG-8370). Failure notification is at-most-once PER TRANSITION, so an integration nobody repairs is announced once and then silent forever - prod carried a row failing every 30-minute tick for ~21 days on a single day-one notification. When on, the IntegrationReauthReminder cron re-fires the existing reconnect notification on a backoff measured from failure ONSET (+1d, +3d, +7d, then weekly), skipping rows an operator has muted. When off the cron still scans and logs what it WOULD have sent, so the volume can be sized before anyone is messaged. Boolean gate; ships dark.",
@@ -45968,6 +46009,37 @@ server.tool(
     }
   }
 );
+server.tool(
+  "kanban_respond",
+  'Answer a card ANOTHER agent parked on you, and un-park it so they can resume. Use this for any card in the "You are blocking these" section of kanban_list: that agent has STOPPED until you act, and this is the only way your answer reaches the card they are blocked on. Do the thing they asked, then send the answer here. Do NOT create a second card to carry it - they would end up with the parked card AND a separate one holding the thing that unblocks it, joined by nothing. You can only respond to a card that names YOU in its wait.',
+  {
+    card_id: external_exports.string().describe(
+      'The card id, exactly as kanban_list shows it under "You are blocking these".'
+    ),
+    text: external_exports.string().optional().describe(
+      "Your answer, self-contained. This is what the blocked agent resumes on, so give it the ANSWER rather than a pointer to one - it cannot see your board, your session or your files. Required unless you are picking a choice with `value`."
+    ),
+    value: external_exports.string().optional().describe("Machine value of a choice, when the card offered options. Otherwise omit."),
+    label: external_exports.string().optional().describe("Human label for that choice, when it differs from the value.")
+  },
+  async (params) => {
+    let data;
+    try {
+      data = await apiPost("/host/kanban/respond", {
+        agent_id: AGT_AGENT_ID,
+        card_id: params.card_id,
+        ...params.text ? { text: params.text } : {},
+        ...params.value ? { value: params.value } : {},
+        ...params.label ? { label: params.label } : {}
+      });
+    } catch (err) {
+      return {
+        content: [{ type: "text", text: `Could not send your answer: ${err.message}` }]
+      };
+    }
+    return { content: [{ type: "text", text: describeKanbanRespondOutcome(data) }] };
+  }
+);
 server.tool(
   "kanban_recall",
   'Pull a card you assigned to a HUMAN teammate back onto your own board. Use this when a card shows under "Assigned to a person" in kanban_list and you need to act on it - typically because the person finished the work (or it is no longer needed) and the card has to be closed. While a card is assigned to a person, every kanban write to it is refused; recall makes it yours again so kanban_move / kanban_done / kanban_log work. Recall does NOT complete the card - after recalling, close it yourself with kanban_done and a result. You can only recall a card you assigned.',
@@ -47848,6 +47920,11 @@ var LOCAL_TOOL_NAMES = /* @__PURE__ */ new Set([
   // ENG-8281: the inverse of assign_kanban_to_human — take a human-assigned
   // card back so the agent can finally close it.
   "kanban_recall",
+  // ENG-9838: the UNBLOCKING direction of waiting_on_agent. Parking already
+  // notified the target; the answer had no route back, so every agent-to-agent
+  // park needed a second, unlinked card carrying the answer beside the card it
+  // was meant to unblock.
+  "kanban_respond",
   // ENG-9050: the return path for delegated work.
   "kanban_reopen",
   // ENG-9375: the READ path over a teammate's board (counts only).

package/dist/mcp/origami.js

@@ -43003,6 +43003,26 @@ var FLAG_REGISTRY = [
     // env var is retired.
     envVar: "AUGMENTED_CONNECTIVITY_ESCALATION_ENABLED"
   },
+  {
+    key: "slack-manifest-remediate",
+    description: "Let the Slack manifest drift monitor PUSH, not just alert (ENG-9963). updateSlackManifest had exactly one caller \u2014 a console button \u2014 so nothing but a human click ever pushed a manifest; ENG-7762 changed the generator with no rollout mechanism and 26 agents went 53 days with no working per-agent slash commands. When on, the daily drift cron pushes the generated manifest for a drifted agent. When off it alerts exactly as before. NOTE what arming this authorises: a push REPLACES a customer-owned Slack app's entire manifest, so the cron only ever pushes drift whose diffs are purely additive (isSafelyRemediable) \u2014 an app with live-only entries a push would destroy is declined and left for a human. Boolean gate; ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false` (alert-only), matching the cron's compiled
+    // default. The fail-safe direction is the opposite of a paging gate's and
+    // matters more: a flag-DB read error must never authorise a WRITE to a
+    // customer's Slack app.
+    defaultValue: false,
+    // Operator override, same precedence and vocabulary as the connectivity
+    // escalation gate above, so an operator who knows one knows both.
+    envVar: "AUGMENTED_SLACK_MANIFEST_REMEDIATE_ENABLED",
+    // ADR-0022 §4. NOTE this is where it diverges from the connectivity gate it
+    // otherwise mirrors, and the divergence is the point: arming THAT one only
+    // causes alerts to open, while arming THIS one authorises a cron to REPLACE
+    // manifests on customer-owned Slack apps. That is precisely the class the
+    // sensitive marker exists for — a control whose relaxation should not be one
+    // unguarded write away.
+    sensitive: true
+  },
   {
     key: "integration-reauth-reminders",
     description: "Re-notify an integration that stays in needs_reauth (ENG-8370). Failure notification is at-most-once PER TRANSITION, so an integration nobody repairs is announced once and then silent forever - prod carried a row failing every 30-minute tick for ~21 days on a single day-one notification. When on, the IntegrationReauthReminder cron re-fires the existing reconnect notification on a backoff measured from failure ONSET (+1d, +3d, +7d, then weekly), skipping rows an operator has muted. When off the cron still scans and logs what it WOULD have sent, so the volume can be sized before anyone is messaged. Boolean gate; ships dark.",

package/dist/mcp/slack-channel.js

@@ -37526,6 +37526,26 @@ var FLAG_REGISTRY = [
     // env var is retired.
     envVar: "AUGMENTED_CONNECTIVITY_ESCALATION_ENABLED"
   },
+  {
+    key: "slack-manifest-remediate",
+    description: "Let the Slack manifest drift monitor PUSH, not just alert (ENG-9963). updateSlackManifest had exactly one caller \u2014 a console button \u2014 so nothing but a human click ever pushed a manifest; ENG-7762 changed the generator with no rollout mechanism and 26 agents went 53 days with no working per-agent slash commands. When on, the daily drift cron pushes the generated manifest for a drifted agent. When off it alerts exactly as before. NOTE what arming this authorises: a push REPLACES a customer-owned Slack app's entire manifest, so the cron only ever pushes drift whose diffs are purely additive (isSafelyRemediable) \u2014 an app with live-only entries a push would destroy is declined and left for a human. Boolean gate; ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false` (alert-only), matching the cron's compiled
+    // default. The fail-safe direction is the opposite of a paging gate's and
+    // matters more: a flag-DB read error must never authorise a WRITE to a
+    // customer's Slack app.
+    defaultValue: false,
+    // Operator override, same precedence and vocabulary as the connectivity
+    // escalation gate above, so an operator who knows one knows both.
+    envVar: "AUGMENTED_SLACK_MANIFEST_REMEDIATE_ENABLED",
+    // ADR-0022 §4. NOTE this is where it diverges from the connectivity gate it
+    // otherwise mirrors, and the divergence is the point: arming THAT one only
+    // causes alerts to open, while arming THIS one authorises a cron to REPLACE
+    // manifests on customer-owned Slack apps. That is precisely the class the
+    // sensitive marker exists for — a control whose relaxation should not be one
+    // unguarded write away.
+    sensitive: true
+  },
   {
     key: "integration-reauth-reminders",
     description: "Re-notify an integration that stays in needs_reauth (ENG-8370). Failure notification is at-most-once PER TRANSITION, so an integration nobody repairs is announced once and then silent forever - prod carried a row failing every 30-minute tick for ~21 days on a single day-one notification. When on, the IntegrationReauthReminder cron re-fires the existing reconnect notification on a backoff measured from failure ONSET (+1d, +3d, +7d, then weekly), skipping rows an operator has muted. When off the cron still scans and logs what it WOULD have sent, so the volume can be sized before anyone is messaged. Boolean gate; ships dark.",

package/dist/mcp/telegram-channel.js

@@ -37684,6 +37684,26 @@ var FLAG_REGISTRY = [
     // env var is retired.
     envVar: "AUGMENTED_CONNECTIVITY_ESCALATION_ENABLED"
   },
+  {
+    key: "slack-manifest-remediate",
+    description: "Let the Slack manifest drift monitor PUSH, not just alert (ENG-9963). updateSlackManifest had exactly one caller \u2014 a console button \u2014 so nothing but a human click ever pushed a manifest; ENG-7762 changed the generator with no rollout mechanism and 26 agents went 53 days with no working per-agent slash commands. When on, the daily drift cron pushes the generated manifest for a drifted agent. When off it alerts exactly as before. NOTE what arming this authorises: a push REPLACES a customer-owned Slack app's entire manifest, so the cron only ever pushes drift whose diffs are purely additive (isSafelyRemediable) \u2014 an app with live-only entries a push would destroy is declined and left for a human. Boolean gate; ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false` (alert-only), matching the cron's compiled
+    // default. The fail-safe direction is the opposite of a paging gate's and
+    // matters more: a flag-DB read error must never authorise a WRITE to a
+    // customer's Slack app.
+    defaultValue: false,
+    // Operator override, same precedence and vocabulary as the connectivity
+    // escalation gate above, so an operator who knows one knows both.
+    envVar: "AUGMENTED_SLACK_MANIFEST_REMEDIATE_ENABLED",
+    // ADR-0022 §4. NOTE this is where it diverges from the connectivity gate it
+    // otherwise mirrors, and the divergence is the point: arming THAT one only
+    // causes alerts to open, while arming THIS one authorises a cron to REPLACE
+    // manifests on customer-owned Slack apps. That is precisely the class the
+    // sensitive marker exists for — a control whose relaxation should not be one
+    // unguarded write away.
+    sensitive: true
+  },
   {
     key: "integration-reauth-reminders",
     description: "Re-notify an integration that stays in needs_reauth (ENG-8370). Failure notification is at-most-once PER TRANSITION, so an integration nobody repairs is announced once and then silent forever - prod carried a row failing every 30-minute tick for ~21 days on a single day-one notification. When on, the IntegrationReauthReminder cron re-fires the existing reconnect notification on a backoff measured from failure ONSET (+1d, +3d, +7d, then weekly), skipping rows an operator has muted. When off the cron still scans and logs what it WOULD have sent, so the volume can be sized before anyone is messaged. Boolean gate; ships dark.",

package/dist/{persistent-session-GPVAPK4S.js → persistent-session-LEICQMWY.js}

@@ -49,8 +49,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-TWZFTSGP.js";
-import "./chunk-RMBASAMS.js";
+} from "./chunk-GIV6ORI3.js";
+import "./chunk-VK35F6O7.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -104,4 +104,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-GPVAPK4S.js.map
+//# sourceMappingURL=persistent-session-LEICQMWY.js.map

package/dist/{responsiveness-probe-7FEKDJZW.js → responsiveness-probe-WEXP254C.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-TWZFTSGP.js";
-import "./chunk-RMBASAMS.js";
+} from "./chunk-GIV6ORI3.js";
+import "./chunk-VK35F6O7.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -745,4 +745,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-7FEKDJZW.js.map
+//# sourceMappingURL=responsiveness-probe-WEXP254C.js.map

package/dist/{session-auth-dead-ZBMVGQYW.js → session-auth-dead-AROKHZET.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-RMBASAMS.js";
+} from "./chunk-VK35F6O7.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-ZBMVGQYW.js.map
+//# sourceMappingURL=session-auth-dead-AROKHZET.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.806",
+  "version": "0.28.807",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {