@integrity-labs/agt-cli 0.28.848 → 0.28.850

package/dist/mcp/slack-channel.js

@@ -38088,10 +38088,22 @@ var FLAG_REGISTRY = [
     // See the description: `shadow` is what prod compiles today, so it is the
     // only default that ships this flag as a no-op.
     defaultValue: "shadow",
-    // enforce changes the admission rule on the platform's front door, and the
-    // families it starts refusing include mcp-proxy — one of the fleet's
-    // dominant callers. This is precisely the deliberate, audited flip ADR-0022
-    // §4 reserves confirmation for.
+    // enforce changes the admission rule on the platform's front door. This is
+    // precisely the deliberate, audited flip ADR-0022 §4 reserves confirmation
+    // for, and it stays `sensitive` — but NOT for the reason first written here.
+    // That read "the families it starts refusing include mcp-proxy, one of the
+    // fleet's dominant callers", and ENG-9895 measured otherwise: mcp-proxy
+    // verifies its own token on a route carrying no `authMiddleware`, so it is a
+    // dominant caller of a different door and cannot be in the refused set. The
+    // measured population at that door is ZERO over 298,839,353 prod log records
+    // / 14 days, and the impersonation families are absent too — one
+    // structurally (`X-Agent-Impersonation` header, own verifier), one by
+    // measurement (307 requests through that door, zero lines). What keeps this
+    // `sensitive` is therefore NOT an unresolved residue: it is that `enforce`
+    // changes an admission rule on the front door, and that the predicate is
+    // structural, so a FUTURE family 13 is born refusable without an edit here.
+    // That is exactly the deliberate, audited flip ADR-0022 §4 reserves
+    // confirmation for. docs/research/eng-9895-prod-shadow-measurement.md
     sensitive: true
   },
   {

package/dist/mcp/telegram-channel.js

@@ -38220,10 +38220,22 @@ var FLAG_REGISTRY = [
     // See the description: `shadow` is what prod compiles today, so it is the
     // only default that ships this flag as a no-op.
     defaultValue: "shadow",
-    // enforce changes the admission rule on the platform's front door, and the
-    // families it starts refusing include mcp-proxy — one of the fleet's
-    // dominant callers. This is precisely the deliberate, audited flip ADR-0022
-    // §4 reserves confirmation for.
+    // enforce changes the admission rule on the platform's front door. This is
+    // precisely the deliberate, audited flip ADR-0022 §4 reserves confirmation
+    // for, and it stays `sensitive` — but NOT for the reason first written here.
+    // That read "the families it starts refusing include mcp-proxy, one of the
+    // fleet's dominant callers", and ENG-9895 measured otherwise: mcp-proxy
+    // verifies its own token on a route carrying no `authMiddleware`, so it is a
+    // dominant caller of a different door and cannot be in the refused set. The
+    // measured population at that door is ZERO over 298,839,353 prod log records
+    // / 14 days, and the impersonation families are absent too — one
+    // structurally (`X-Agent-Impersonation` header, own verifier), one by
+    // measurement (307 requests through that door, zero lines). What keeps this
+    // `sensitive` is therefore NOT an unresolved residue: it is that `enforce`
+    // changes an admission rule on the front door, and that the predicate is
+    // structural, so a FUTURE family 13 is born refusable without an edit here.
+    // That is exactly the deliberate, audited flip ADR-0022 §4 reserves
+    // confirmation for. docs/research/eng-9895-prod-shadow-measurement.md
     sensitive: true
   },
   {

package/dist/{persistent-session-JKES3FMW.js → persistent-session-YGK7YHPR.js}

@@ -54,8 +54,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-PMQNTU7W.js";
-import "./chunk-MFU2FD4N.js";
+} from "./chunk-XCAI3GSF.js";
+import "./chunk-WUXQVP7A.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -114,4 +114,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-JKES3FMW.js.map
+//# sourceMappingURL=persistent-session-YGK7YHPR.js.map

package/dist/{responsiveness-probe-P7EAWN6J.js → responsiveness-probe-NGWO3JK3.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-PMQNTU7W.js";
-import "./chunk-MFU2FD4N.js";
+} from "./chunk-XCAI3GSF.js";
+import "./chunk-WUXQVP7A.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -764,4 +764,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-P7EAWN6J.js.map
+//# sourceMappingURL=responsiveness-probe-NGWO3JK3.js.map

package/dist/{session-auth-dead-IFU2XLHO.js → session-auth-dead-4UZR5655.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-MFU2FD4N.js";
+} from "./chunk-WUXQVP7A.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-IFU2XLHO.js.map
+//# sourceMappingURL=session-auth-dead-4UZR5655.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.848",
+  "version": "0.28.850",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {