@integrity-labs/agt-cli 0.28.814 → 0.28.816

package/dist/{claude-pair-runtime-HFNDYS4V.js → claude-pair-runtime-ZG6I4NMN.js}

@@ -100,7 +100,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-5XVEPXBT.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-YX4JTHMC.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -373,4 +373,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-HFNDYS4V.js.map
+//# sourceMappingURL=claude-pair-runtime-ZG6I4NMN.js.map

package/dist/lib/manager-worker.js

@@ -58,7 +58,7 @@ import {
   safeWriteJsonAtomic,
   setConfigHash,
   tripClass
-} from "../chunk-ZBKYMWD4.js";
+} from "../chunk-PNHF5TJN.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -123,7 +123,7 @@ import {
   takeZombieDetection,
   toOpencodeModel,
   writeEgressAllowlist
-} from "../chunk-Y33QUAGQ.js";
+} from "../chunk-5RZBTMBD.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -215,7 +215,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-IABI5AX5.js";
+} from "../chunk-SZ47B4KO.js";
 import {
   reapOrphanChannelMcps
 } from "../chunk-XWVM4KPK.js";
@@ -12918,7 +12918,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-7LZMXEWA.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-63R3PUAU.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname10(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -13580,7 +13580,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.814" : "dev";
+var agtCliVersion = true ? "0.28.816" : "dev";
 function resolveBrewPath(execFileSync2) {
   try {
     const out = execFileSync2("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -15131,7 +15131,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-5XVEPXBT.js");
+      const { collectDiagnostics } = await import("../persistent-session-YX4JTHMC.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -15272,7 +15272,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-6PDFG7F5.js");
-      const { collectDiagnostics } = await import("../persistent-session-5XVEPXBT.js");
+      const { collectDiagnostics } = await import("../persistent-session-YX4JTHMC.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor) : void 0;
       let tailscaleHostname;
@@ -15441,7 +15441,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-7LZMXEWA.js");
+      } = await import("../responsiveness-probe-63R3PUAU.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -15558,7 +15558,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-7LZMXEWA.js");
+        } = await import("../responsiveness-probe-63R3PUAU.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-NDP36U7O.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -15714,7 +15714,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-JA437JIB.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-CDFUCZPH.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-2NFR7OFR.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -19882,7 +19882,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-5XVEPXBT.js");
+        const { collectDiagnostics } = await import("../persistent-session-YX4JTHMC.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -19928,7 +19928,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-5XVEPXBT.js");
+      const { collectDiagnostics } = await import("../persistent-session-YX4JTHMC.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor)
@@ -20564,7 +20564,7 @@ async function processClaudePairSessions(agents) {
     killPairSession,
     pairTmuxSession,
     finalizeClaudePairOnboarding
-  } = await import("../claude-pair-runtime-HFNDYS4V.js");
+  } = await import("../claude-pair-runtime-ZG6I4NMN.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -30377,13 +30377,16 @@ import { join as join9 } from "path";
 
 // ../core/dist/types/agent.js
 var FRAMEWORK_MODEL_SLOTS = {
-  "claude-code": ["primary", "small_fast"],
+  "claude-code": ["primary", "small_fast", "advisor"],
   "opencode": ["primary"]
 };
 var KNOWN_MODEL_SLOTS = new Set(Object.values(FRAMEWORK_MODEL_SLOTS).flat());
 
 // ../core/dist/types/model-policy.js
 var KNOWN_MODEL_POLICY_SLOTS = [...KNOWN_MODEL_SLOTS].sort();
+var MODEL_POLICY_SLOTS_IN_ORDER = [...KNOWN_MODEL_SLOTS];
+var MODEL_POLICY_SLOTS_PENDING_ACTUATOR = /* @__PURE__ */ new Set(["advisor"]);
+var OFFERABLE_MODEL_POLICY_SLOTS = MODEL_POLICY_SLOTS_IN_ORDER.filter((slot) => !MODEL_POLICY_SLOTS_PENDING_ACTUATOR.has(slot));
 
 // ../core/dist/types/integration.js
 var HITL_TIER_ORDER = [
@@ -36673,6 +36676,29 @@ var FLAG_REGISTRY = [
     // which is the ADR-0022 sensitive-flag shape.
     sensitive: true
   },
+  {
+    key: "host-alarm-reconciler-repair",
+    description: "Arms the CREATE and DRIFT-REPAIR halves of the ENG-8325 host-alarm reconciler. The cron computes and LOGS the full diff for every host on every run regardless of this flag, on the host-poll-rate-alarm precedent, so the fleet diff is measurable before anything mutates. Off = measure and log, create nothing and re-put nothing. Evaluated PER ORGANIZATION from the host row, so arming can be staged one org at a time and watched. It does NOT gate the reap - see host-alarm-reconciler-reap, which is deliberately fleet-wide because an orphan alarm whose host row is gone has no organization to scope by. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces BOTH gates on fleet-wide; it is deliberately not declared as this flag's envVar, because it is a master override of two flags rather than the operator override of this one. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // Safe value is `false` for a specific reason, not a habitual one: the
+    // first applying run creates one alarm per host that lacks one, and a
+    // PutMetricAlarm on a fleet whose expected set is wrong is not a no-op you
+    // can shrug off - it is monitoring that now exists and will page.
+    defaultValue: false,
+    // It mutates CloudWatch for every host in the armed org, which is the
+    // ADR-0022 sensitive-flag shape.
+    sensitive: true
+  },
+  {
+    key: "host-alarm-reconciler-reap",
+    description: "Arms the REAP half of the ENG-8325 host-alarm reconciler: deleting alarms under augmented/{env}/host/ whose parsed host id is not in the live set. Off = count and name the orphan candidates, delete nothing. DELIBERATELY EVALUATED GLOBALLY, with no organization scope, and that is not an oversight to be tidied up later. An orphan is defined as an alarm whose host id resolves to no live host; where the host row is gone entirely there is no organization to scope by, so the property that makes an alarm an orphan is the same one that makes it unattributable. A per-org gate here would silently reap other orgs' orphans the moment any one org was armed, which is staged creates with an unstaged reap - the more dangerous half. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces both gates on. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // The destructive half. Measured on prod 2026-09-03: a first applying run
+    // deletes 84 alarms across 33 dead instance ids. Nothing about that is
+    // recoverable by re-running, so the safe value is not a formality.
+    defaultValue: false,
+    sensitive: true
+  },
   {
     key: "agt-version-drift-alarm",
     description: "Arms the ENG-8341 agt CLI version-drift alert. When a host has fallen behind its EFFECTIVE target (env pin > DB pin > release channel) across two or more of its OWN maintenance windows, the monitor opens a host_agt_version_drift alert. OBSERVE-FIRST rollout gate: the cron computes and LOGS the drift for every host on every run regardless of this flag, so the real fleet spread is measurable before anyone is paged - the ticket asks for the threshold to be set from observed data rather than a guess. Off = compute and log, open nothing. Boolean gate; ships dark. Evaluated API-side, in the cron.",
@@ -36704,6 +36730,12 @@ var FLAG_REGISTRY = [
     // flip wants a deliberate confirm rather than a casual toggle. Before flipping,
     // check which orgs sit at the `enforce` / `require_approval` email-guard stage:
     // those are the ones where a newly-effective policy can reach a real block.
+    //
+    // Run that pre-flight per `docs/runbooks/org-email-domain-derivation-rollout.md`,
+    // and read it before acting on the result: the dry run reports `would-derive`
+    // for orgs where arming is provably inert (an unverified row for the candidate
+    // domain makes the insert collide and write nothing), so the report reads as
+    // riskier than it is and invites per-org overrides that are not needed.
     sensitive: true
   },
   {

package/dist/mcp/index.js

@@ -22405,13 +22405,16 @@ ${data.duplicate_hint}` : confirmation;
 
 // ../core/dist/types/agent.js
 var FRAMEWORK_MODEL_SLOTS = {
-  "claude-code": ["primary", "small_fast"],
+  "claude-code": ["primary", "small_fast", "advisor"],
   "opencode": ["primary"]
 };
 var KNOWN_MODEL_SLOTS = new Set(Object.values(FRAMEWORK_MODEL_SLOTS).flat());
 
 // ../core/dist/types/model-policy.js
 var KNOWN_MODEL_POLICY_SLOTS = [...KNOWN_MODEL_SLOTS].sort();
+var MODEL_POLICY_SLOTS_IN_ORDER = [...KNOWN_MODEL_SLOTS];
+var MODEL_POLICY_SLOTS_PENDING_ACTUATOR = /* @__PURE__ */ new Set(["advisor"]);
+var OFFERABLE_MODEL_POLICY_SLOTS = MODEL_POLICY_SLOTS_IN_ORDER.filter((slot) => !MODEL_POLICY_SLOTS_PENDING_ACTUATOR.has(slot));
 
 // ../core/dist/types/integration.js
 var HITL_TIER_ORDER = [
@@ -28444,6 +28447,29 @@ var FLAG_REGISTRY = [
     // which is the ADR-0022 sensitive-flag shape.
     sensitive: true
   },
+  {
+    key: "host-alarm-reconciler-repair",
+    description: "Arms the CREATE and DRIFT-REPAIR halves of the ENG-8325 host-alarm reconciler. The cron computes and LOGS the full diff for every host on every run regardless of this flag, on the host-poll-rate-alarm precedent, so the fleet diff is measurable before anything mutates. Off = measure and log, create nothing and re-put nothing. Evaluated PER ORGANIZATION from the host row, so arming can be staged one org at a time and watched. It does NOT gate the reap - see host-alarm-reconciler-reap, which is deliberately fleet-wide because an orphan alarm whose host row is gone has no organization to scope by. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces BOTH gates on fleet-wide; it is deliberately not declared as this flag's envVar, because it is a master override of two flags rather than the operator override of this one. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // Safe value is `false` for a specific reason, not a habitual one: the
+    // first applying run creates one alarm per host that lacks one, and a
+    // PutMetricAlarm on a fleet whose expected set is wrong is not a no-op you
+    // can shrug off - it is monitoring that now exists and will page.
+    defaultValue: false,
+    // It mutates CloudWatch for every host in the armed org, which is the
+    // ADR-0022 sensitive-flag shape.
+    sensitive: true
+  },
+  {
+    key: "host-alarm-reconciler-reap",
+    description: "Arms the REAP half of the ENG-8325 host-alarm reconciler: deleting alarms under augmented/{env}/host/ whose parsed host id is not in the live set. Off = count and name the orphan candidates, delete nothing. DELIBERATELY EVALUATED GLOBALLY, with no organization scope, and that is not an oversight to be tidied up later. An orphan is defined as an alarm whose host id resolves to no live host; where the host row is gone entirely there is no organization to scope by, so the property that makes an alarm an orphan is the same one that makes it unattributable. A per-org gate here would silently reap other orgs' orphans the moment any one org was armed, which is staged creates with an unstaged reap - the more dangerous half. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces both gates on. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // The destructive half. Measured on prod 2026-09-03: a first applying run
+    // deletes 84 alarms across 33 dead instance ids. Nothing about that is
+    // recoverable by re-running, so the safe value is not a formality.
+    defaultValue: false,
+    sensitive: true
+  },
   {
     key: "agt-version-drift-alarm",
     description: "Arms the ENG-8341 agt CLI version-drift alert. When a host has fallen behind its EFFECTIVE target (env pin > DB pin > release channel) across two or more of its OWN maintenance windows, the monitor opens a host_agt_version_drift alert. OBSERVE-FIRST rollout gate: the cron computes and LOGS the drift for every host on every run regardless of this flag, so the real fleet spread is measurable before anyone is paged - the ticket asks for the threshold to be set from observed data rather than a guess. Off = compute and log, open nothing. Boolean gate; ships dark. Evaluated API-side, in the cron.",
@@ -28475,6 +28501,12 @@ var FLAG_REGISTRY = [
     // flip wants a deliberate confirm rather than a casual toggle. Before flipping,
     // check which orgs sit at the `enforce` / `require_approval` email-guard stage:
     // those are the ones where a newly-effective policy can reach a real block.
+    //
+    // Run that pre-flight per `docs/runbooks/org-email-domain-derivation-rollout.md`,
+    // and read it before acting on the result: the dry run reports `would-derive`
+    // for orgs where arming is provably inert (an unverified row for the candidate
+    // domain makes the insert collide and write nothing), so the report reads as
+    // riskier than it is and invites per-org overrides that are not needed.
     sensitive: true
   },
   {

package/dist/mcp/origami.js

@@ -36378,13 +36378,16 @@ var Server = class extends Protocol {
 
 // ../core/dist/types/agent.js
 var FRAMEWORK_MODEL_SLOTS = {
-  "claude-code": ["primary", "small_fast"],
+  "claude-code": ["primary", "small_fast", "advisor"],
   "opencode": ["primary"]
 };
 var KNOWN_MODEL_SLOTS = new Set(Object.values(FRAMEWORK_MODEL_SLOTS).flat());
 
 // ../core/dist/types/model-policy.js
 var KNOWN_MODEL_POLICY_SLOTS = [...KNOWN_MODEL_SLOTS].sort();
+var MODEL_POLICY_SLOTS_IN_ORDER = [...KNOWN_MODEL_SLOTS];
+var MODEL_POLICY_SLOTS_PENDING_ACTUATOR = /* @__PURE__ */ new Set(["advisor"]);
+var OFFERABLE_MODEL_POLICY_SLOTS = MODEL_POLICY_SLOTS_IN_ORDER.filter((slot) => !MODEL_POLICY_SLOTS_PENDING_ACTUATOR.has(slot));
 
 // ../core/dist/types/integration.js
 var HITL_TIER_ORDER = [
@@ -42397,6 +42400,29 @@ var FLAG_REGISTRY = [
     // which is the ADR-0022 sensitive-flag shape.
     sensitive: true
   },
+  {
+    key: "host-alarm-reconciler-repair",
+    description: "Arms the CREATE and DRIFT-REPAIR halves of the ENG-8325 host-alarm reconciler. The cron computes and LOGS the full diff for every host on every run regardless of this flag, on the host-poll-rate-alarm precedent, so the fleet diff is measurable before anything mutates. Off = measure and log, create nothing and re-put nothing. Evaluated PER ORGANIZATION from the host row, so arming can be staged one org at a time and watched. It does NOT gate the reap - see host-alarm-reconciler-reap, which is deliberately fleet-wide because an orphan alarm whose host row is gone has no organization to scope by. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces BOTH gates on fleet-wide; it is deliberately not declared as this flag's envVar, because it is a master override of two flags rather than the operator override of this one. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // Safe value is `false` for a specific reason, not a habitual one: the
+    // first applying run creates one alarm per host that lacks one, and a
+    // PutMetricAlarm on a fleet whose expected set is wrong is not a no-op you
+    // can shrug off - it is monitoring that now exists and will page.
+    defaultValue: false,
+    // It mutates CloudWatch for every host in the armed org, which is the
+    // ADR-0022 sensitive-flag shape.
+    sensitive: true
+  },
+  {
+    key: "host-alarm-reconciler-reap",
+    description: "Arms the REAP half of the ENG-8325 host-alarm reconciler: deleting alarms under augmented/{env}/host/ whose parsed host id is not in the live set. Off = count and name the orphan candidates, delete nothing. DELIBERATELY EVALUATED GLOBALLY, with no organization scope, and that is not an oversight to be tidied up later. An orphan is defined as an alarm whose host id resolves to no live host; where the host row is gone entirely there is no organization to scope by, so the property that makes an alarm an orphan is the same one that makes it unattributable. A per-org gate here would silently reap other orgs' orphans the moment any one org was armed, which is staged creates with an unstaged reap - the more dangerous half. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces both gates on. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // The destructive half. Measured on prod 2026-09-03: a first applying run
+    // deletes 84 alarms across 33 dead instance ids. Nothing about that is
+    // recoverable by re-running, so the safe value is not a formality.
+    defaultValue: false,
+    sensitive: true
+  },
   {
     key: "agt-version-drift-alarm",
     description: "Arms the ENG-8341 agt CLI version-drift alert. When a host has fallen behind its EFFECTIVE target (env pin > DB pin > release channel) across two or more of its OWN maintenance windows, the monitor opens a host_agt_version_drift alert. OBSERVE-FIRST rollout gate: the cron computes and LOGS the drift for every host on every run regardless of this flag, so the real fleet spread is measurable before anyone is paged - the ticket asks for the threshold to be set from observed data rather than a guess. Off = compute and log, open nothing. Boolean gate; ships dark. Evaluated API-side, in the cron.",
@@ -42428,6 +42454,12 @@ var FLAG_REGISTRY = [
     // flip wants a deliberate confirm rather than a casual toggle. Before flipping,
     // check which orgs sit at the `enforce` / `require_approval` email-guard stage:
     // those are the ones where a newly-effective policy can reach a real block.
+    //
+    // Run that pre-flight per `docs/runbooks/org-email-domain-derivation-rollout.md`,
+    // and read it before acting on the result: the dry run reports `would-derive`
+    // for orgs where arming is provably inert (an unverified row for the candidate
+    // domain makes the insert collide and write nothing), so the report reads as
+    // riskier than it is and invites per-org overrides that are not needed.
     sensitive: true
   },
   {

package/dist/mcp/slack-channel.js

@@ -30704,13 +30704,16 @@ function isMaintenanceModeActive(opts) {
 
 // ../core/dist/types/agent.js
 var FRAMEWORK_MODEL_SLOTS = {
-  "claude-code": ["primary", "small_fast"],
+  "claude-code": ["primary", "small_fast", "advisor"],
   "opencode": ["primary"]
 };
 var KNOWN_MODEL_SLOTS = new Set(Object.values(FRAMEWORK_MODEL_SLOTS).flat());
 
 // ../core/dist/types/model-policy.js
 var KNOWN_MODEL_POLICY_SLOTS = [...KNOWN_MODEL_SLOTS].sort();
+var MODEL_POLICY_SLOTS_IN_ORDER = [...KNOWN_MODEL_SLOTS];
+var MODEL_POLICY_SLOTS_PENDING_ACTUATOR = /* @__PURE__ */ new Set(["advisor"]);
+var OFFERABLE_MODEL_POLICY_SLOTS = MODEL_POLICY_SLOTS_IN_ORDER.filter((slot) => !MODEL_POLICY_SLOTS_PENDING_ACTUATOR.has(slot));
 
 // ../core/dist/types/integration.js
 var HITL_TIER_ORDER = [
@@ -36952,6 +36955,29 @@ var FLAG_REGISTRY = [
     // which is the ADR-0022 sensitive-flag shape.
     sensitive: true
   },
+  {
+    key: "host-alarm-reconciler-repair",
+    description: "Arms the CREATE and DRIFT-REPAIR halves of the ENG-8325 host-alarm reconciler. The cron computes and LOGS the full diff for every host on every run regardless of this flag, on the host-poll-rate-alarm precedent, so the fleet diff is measurable before anything mutates. Off = measure and log, create nothing and re-put nothing. Evaluated PER ORGANIZATION from the host row, so arming can be staged one org at a time and watched. It does NOT gate the reap - see host-alarm-reconciler-reap, which is deliberately fleet-wide because an orphan alarm whose host row is gone has no organization to scope by. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces BOTH gates on fleet-wide; it is deliberately not declared as this flag's envVar, because it is a master override of two flags rather than the operator override of this one. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // Safe value is `false` for a specific reason, not a habitual one: the
+    // first applying run creates one alarm per host that lacks one, and a
+    // PutMetricAlarm on a fleet whose expected set is wrong is not a no-op you
+    // can shrug off - it is monitoring that now exists and will page.
+    defaultValue: false,
+    // It mutates CloudWatch for every host in the armed org, which is the
+    // ADR-0022 sensitive-flag shape.
+    sensitive: true
+  },
+  {
+    key: "host-alarm-reconciler-reap",
+    description: "Arms the REAP half of the ENG-8325 host-alarm reconciler: deleting alarms under augmented/{env}/host/ whose parsed host id is not in the live set. Off = count and name the orphan candidates, delete nothing. DELIBERATELY EVALUATED GLOBALLY, with no organization scope, and that is not an oversight to be tidied up later. An orphan is defined as an alarm whose host id resolves to no live host; where the host row is gone entirely there is no organization to scope by, so the property that makes an alarm an orphan is the same one that makes it unattributable. A per-org gate here would silently reap other orgs' orphans the moment any one org was armed, which is staged creates with an unstaged reap - the more dangerous half. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces both gates on. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // The destructive half. Measured on prod 2026-09-03: a first applying run
+    // deletes 84 alarms across 33 dead instance ids. Nothing about that is
+    // recoverable by re-running, so the safe value is not a formality.
+    defaultValue: false,
+    sensitive: true
+  },
   {
     key: "agt-version-drift-alarm",
     description: "Arms the ENG-8341 agt CLI version-drift alert. When a host has fallen behind its EFFECTIVE target (env pin > DB pin > release channel) across two or more of its OWN maintenance windows, the monitor opens a host_agt_version_drift alert. OBSERVE-FIRST rollout gate: the cron computes and LOGS the drift for every host on every run regardless of this flag, so the real fleet spread is measurable before anyone is paged - the ticket asks for the threshold to be set from observed data rather than a guess. Off = compute and log, open nothing. Boolean gate; ships dark. Evaluated API-side, in the cron.",
@@ -36983,6 +37009,12 @@ var FLAG_REGISTRY = [
     // flip wants a deliberate confirm rather than a casual toggle. Before flipping,
     // check which orgs sit at the `enforce` / `require_approval` email-guard stage:
     // those are the ones where a newly-effective policy can reach a real block.
+    //
+    // Run that pre-flight per `docs/runbooks/org-email-domain-derivation-rollout.md`,
+    // and read it before acting on the result: the dry run reports `would-derive`
+    // for orgs where arming is provably inert (an unverified row for the candidate
+    // domain makes the insert collide and write nothing), so the report reads as
+    // riskier than it is and invites per-org overrides that are not needed.
     sensitive: true
   },
   {

package/dist/mcp/telegram-channel.js

@@ -30842,13 +30842,16 @@ function isMaintenanceModeActive(opts) {
 
 // ../core/dist/types/agent.js
 var FRAMEWORK_MODEL_SLOTS = {
-  "claude-code": ["primary", "small_fast"],
+  "claude-code": ["primary", "small_fast", "advisor"],
   "opencode": ["primary"]
 };
 var KNOWN_MODEL_SLOTS = new Set(Object.values(FRAMEWORK_MODEL_SLOTS).flat());
 
 // ../core/dist/types/model-policy.js
 var KNOWN_MODEL_POLICY_SLOTS = [...KNOWN_MODEL_SLOTS].sort();
+var MODEL_POLICY_SLOTS_IN_ORDER = [...KNOWN_MODEL_SLOTS];
+var MODEL_POLICY_SLOTS_PENDING_ACTUATOR = /* @__PURE__ */ new Set(["advisor"]);
+var OFFERABLE_MODEL_POLICY_SLOTS = MODEL_POLICY_SLOTS_IN_ORDER.filter((slot) => !MODEL_POLICY_SLOTS_PENDING_ACTUATOR.has(slot));
 
 // ../core/dist/types/integration.js
 var HITL_TIER_ORDER = [
@@ -37084,6 +37087,29 @@ var FLAG_REGISTRY = [
     // which is the ADR-0022 sensitive-flag shape.
     sensitive: true
   },
+  {
+    key: "host-alarm-reconciler-repair",
+    description: "Arms the CREATE and DRIFT-REPAIR halves of the ENG-8325 host-alarm reconciler. The cron computes and LOGS the full diff for every host on every run regardless of this flag, on the host-poll-rate-alarm precedent, so the fleet diff is measurable before anything mutates. Off = measure and log, create nothing and re-put nothing. Evaluated PER ORGANIZATION from the host row, so arming can be staged one org at a time and watched. It does NOT gate the reap - see host-alarm-reconciler-reap, which is deliberately fleet-wide because an orphan alarm whose host row is gone has no organization to scope by. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces BOTH gates on fleet-wide; it is deliberately not declared as this flag's envVar, because it is a master override of two flags rather than the operator override of this one. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // Safe value is `false` for a specific reason, not a habitual one: the
+    // first applying run creates one alarm per host that lacks one, and a
+    // PutMetricAlarm on a fleet whose expected set is wrong is not a no-op you
+    // can shrug off - it is monitoring that now exists and will page.
+    defaultValue: false,
+    // It mutates CloudWatch for every host in the armed org, which is the
+    // ADR-0022 sensitive-flag shape.
+    sensitive: true
+  },
+  {
+    key: "host-alarm-reconciler-reap",
+    description: "Arms the REAP half of the ENG-8325 host-alarm reconciler: deleting alarms under augmented/{env}/host/ whose parsed host id is not in the live set. Off = count and name the orphan candidates, delete nothing. DELIBERATELY EVALUATED GLOBALLY, with no organization scope, and that is not an oversight to be tidied up later. An orphan is defined as an alarm whose host id resolves to no live host; where the host row is gone entirely there is no organization to scope by, so the property that makes an alarm an orphan is the same one that makes it unattributable. A per-org gate here would silently reap other orgs' orphans the moment any one org was armed, which is staged creates with an unstaged reap - the more dangerous half. AGT_HOST_ALARM_RECONCILER_APPLY outranks this flag and forces both gates on. Boolean gate; ships dark. Evaluated API-side, in the cron.",
+    flagType: "boolean",
+    // The destructive half. Measured on prod 2026-09-03: a first applying run
+    // deletes 84 alarms across 33 dead instance ids. Nothing about that is
+    // recoverable by re-running, so the safe value is not a formality.
+    defaultValue: false,
+    sensitive: true
+  },
   {
     key: "agt-version-drift-alarm",
     description: "Arms the ENG-8341 agt CLI version-drift alert. When a host has fallen behind its EFFECTIVE target (env pin > DB pin > release channel) across two or more of its OWN maintenance windows, the monitor opens a host_agt_version_drift alert. OBSERVE-FIRST rollout gate: the cron computes and LOGS the drift for every host on every run regardless of this flag, so the real fleet spread is measurable before anyone is paged - the ticket asks for the threshold to be set from observed data rather than a guess. Off = compute and log, open nothing. Boolean gate; ships dark. Evaluated API-side, in the cron.",
@@ -37115,6 +37141,12 @@ var FLAG_REGISTRY = [
     // flip wants a deliberate confirm rather than a casual toggle. Before flipping,
     // check which orgs sit at the `enforce` / `require_approval` email-guard stage:
     // those are the ones where a newly-effective policy can reach a real block.
+    //
+    // Run that pre-flight per `docs/runbooks/org-email-domain-derivation-rollout.md`,
+    // and read it before acting on the result: the dry run reports `would-derive`
+    // for orgs where arming is provably inert (an unverified row for the candidate
+    // domain makes the insert collide and write nothing), so the report reads as
+    // riskier than it is and invites per-org overrides that are not needed.
     sensitive: true
   },
   {

package/dist/{persistent-session-5XVEPXBT.js → persistent-session-YX4JTHMC.js}

@@ -49,8 +49,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-Y33QUAGQ.js";
-import "./chunk-IABI5AX5.js";
+} from "./chunk-5RZBTMBD.js";
+import "./chunk-SZ47B4KO.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -104,4 +104,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-5XVEPXBT.js.map
+//# sourceMappingURL=persistent-session-YX4JTHMC.js.map

package/dist/{responsiveness-probe-7LZMXEWA.js → responsiveness-probe-63R3PUAU.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-Y33QUAGQ.js";
-import "./chunk-IABI5AX5.js";
+} from "./chunk-5RZBTMBD.js";
+import "./chunk-SZ47B4KO.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -745,4 +745,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-7LZMXEWA.js.map
+//# sourceMappingURL=responsiveness-probe-63R3PUAU.js.map

package/dist/{session-auth-dead-CDFUCZPH.js → session-auth-dead-2NFR7OFR.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-IABI5AX5.js";
+} from "./chunk-SZ47B4KO.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-CDFUCZPH.js.map
+//# sourceMappingURL=session-auth-dead-2NFR7OFR.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.814",
+  "version": "0.28.816",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {