@integrity-labs/agt-cli 0.28.806 → 0.28.808

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-7TIQODEK.js";
+} from "../chunk-LLR42RME.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-TWZFTSGP.js";
+} from "../chunk-TLPQULYH.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-RMBASAMS.js";
+} from "../chunk-SWUBTUYM.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.806" : "dev";
+var cliVersion = true ? "0.28.808" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.806" : "dev";
+var cliVersion2 = true ? "0.28.808" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-7TIQODEK.js → chunk-LLR42RME.js}

@@ -16,7 +16,7 @@ import {
   parseEnvIntegrations,
   shellQuote,
   summarizeUnanswerablePane
-} from "./chunk-TWZFTSGP.js";
+} from "./chunk-TLPQULYH.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -71,7 +71,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-RMBASAMS.js";
+} from "./chunk-SWUBTUYM.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6523,7 +6523,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.806" : "dev";
+var agtCliVersion = true ? "0.28.808" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -10818,4 +10818,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-7TIQODEK.js.map
+//# sourceMappingURL=chunk-LLR42RME.js.map

package/dist/{chunk-RMBASAMS.js → chunk-SWUBTUYM.js}

@@ -357,6 +357,32 @@ function checkClaudeMdSize(md) {
     overBy: Math.max(0, chars - CLAUDE_MD_CONTEXT_ALARM_CHARS)
   };
 }
+var CLAUDE_MD_WARN_DELTA_CHARS = 1e3;
+var CLAUDE_MD_WARN_INTERVAL_MS = 60 * 60 * 1e3;
+var CLAUDE_MD_WARN_STATE_MAX = 256;
+var claudeMdWarnState = /* @__PURE__ */ new Map();
+function shouldWarnClaudeMdOverBudget(codeName, size, nowMs = Date.now()) {
+  const prev = claudeMdWarnState.get(codeName);
+  const changedSeverity = prev !== void 0 && prev.ok !== size.ok;
+  const movedMaterially = prev !== void 0 && Math.abs(size.chars - prev.chars) >= CLAUDE_MD_WARN_DELTA_CHARS;
+  const stale = prev !== void 0 && nowMs - prev.atMs >= CLAUDE_MD_WARN_INTERVAL_MS;
+  if (prev !== void 0 && !changedSeverity && !movedMaterially && !stale)
+    return false;
+  if (claudeMdWarnState.size >= CLAUDE_MD_WARN_STATE_MAX && !claudeMdWarnState.has(codeName)) {
+    let oldestKey;
+    let oldestAt = Infinity;
+    for (const [key, st] of claudeMdWarnState) {
+      if (st.atMs < oldestAt) {
+        oldestAt = st.atMs;
+        oldestKey = key;
+      }
+    }
+    if (oldestKey !== void 0)
+      claudeMdWarnState.delete(oldestKey);
+  }
+  claudeMdWarnState.set(codeName, { chars: size.chars, ok: size.ok, atMs: nowMs });
+  return true;
+}
 function buildMemorySection() {
   const recall = `### Recall
 
@@ -1485,9 +1511,9 @@ Reversible and internal actions stay liberal \u2014 draft, edit, open a PR.
 - Before concluding that an agent or person doesn't exist, call \`directory_lookup\` first. Only report "not found" after the directory confirms no match. (ENG-7955)
 ${frontmatter.environment === "prod" ? "- Production environment: exercise extra caution with all operations.\n" : ""}`;
   const size = checkClaudeMdSize(body);
-  if (!size.withinBudget) {
+  if (!size.withinBudget && shouldWarnClaudeMdOverBudget(frontmatter.code_name, size)) {
     const share = (size.contextShare * 100).toFixed(1);
-    console.warn(`[generateClaudeMd] CLAUDE.md for ${frontmatter.code_name} is ${size.chars} chars (~${size.tokens} tokens, ~${share}% of a ${CLAUDE_MD_CONTEXT_WINDOW_TOKENS}-token context window), over the ${CLAUDE_MD_BUDGET_CHARS}-char generator budget by ${size.chars - CLAUDE_MD_BUDGET_CHARS}${size.ok ? "" : ` \u2014 and past the ${CLAUDE_MD_CONTEXT_ALARM_CHARS}-char operational threshold`}. Nothing is truncated; this is context the agent pays for on every request. Trim the generated sections (ENG-8105 / ENG-9459).`);
+    console.warn(`[generateClaudeMd] CLAUDE.md for ${frontmatter.code_name} is ${size.chars} chars (~${size.tokens} tokens, ~${share}% of a ${CLAUDE_MD_CONTEXT_WINDOW_TOKENS}-token context window), over the ${CLAUDE_MD_BUDGET_CHARS}-char generator budget by ${size.chars - CLAUDE_MD_BUDGET_CHARS}${size.ok ? "" : ` \u2014 and past the ${CLAUDE_MD_CONTEXT_ALARM_CHARS}-char operational threshold`}. Nothing is truncated; this is context the agent pays for on every request. Trim the generated sections \u2014 the largest movers are the per-agent role/charter prose, the Active-tasks block and the Integrations list. packages/core/src/__tests__/claudemd-size-budget.test.ts is the CI gate.`);
   }
   return body;
 }
@@ -6041,6 +6067,26 @@ var FLAG_REGISTRY = [
     // env var is retired.
     envVar: "AUGMENTED_CONNECTIVITY_ESCALATION_ENABLED"
   },
+  {
+    key: "slack-manifest-remediate",
+    description: "Let the Slack manifest drift monitor PUSH, not just alert (ENG-9963). updateSlackManifest had exactly one caller \u2014 a console button \u2014 so nothing but a human click ever pushed a manifest; ENG-7762 changed the generator with no rollout mechanism and 26 agents went 53 days with no working per-agent slash commands. When on, the daily drift cron pushes the generated manifest for a drifted agent. When off it alerts exactly as before. NOTE what arming this authorises: a push REPLACES a customer-owned Slack app's entire manifest, so the cron only ever pushes drift whose diffs are purely additive (isSafelyRemediable) \u2014 an app with live-only entries a push would destroy is declined and left for a human. Boolean gate; ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false` (alert-only), matching the cron's compiled
+    // default. The fail-safe direction is the opposite of a paging gate's and
+    // matters more: a flag-DB read error must never authorise a WRITE to a
+    // customer's Slack app.
+    defaultValue: false,
+    // Operator override, same precedence and vocabulary as the connectivity
+    // escalation gate above, so an operator who knows one knows both.
+    envVar: "AUGMENTED_SLACK_MANIFEST_REMEDIATE_ENABLED",
+    // ADR-0022 §4. NOTE this is where it diverges from the connectivity gate it
+    // otherwise mirrors, and the divergence is the point: arming THAT one only
+    // causes alerts to open, while arming THIS one authorises a cron to REPLACE
+    // manifests on customer-owned Slack apps. That is precisely the class the
+    // sensitive marker exists for — a control whose relaxation should not be one
+    // unguarded write away.
+    sensitive: true
+  },
   {
     key: "integration-reauth-reminders",
     description: "Re-notify an integration that stays in needs_reauth (ENG-8370). Failure notification is at-most-once PER TRANSITION, so an integration nobody repairs is announced once and then silent forever - prod carried a row failing every 30-minute tick for ~21 days on a single day-one notification. When on, the IntegrationReauthReminder cron re-fires the existing reconnect notification on a backoff measured from failure ONSET (+1d, +3d, +7d, then weekly), skipping rows an operator has muted. When off the cron still scans and logs what it WOULD have sent, so the volume can be sized before anyone is messaged. Boolean gate; ships dark.",
@@ -13687,4 +13733,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-RMBASAMS.js.map
+//# sourceMappingURL=chunk-SWUBTUYM.js.map