@integrity-labs/agt-cli 0.28.870 → 0.28.872

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-NZFBUFF6.js";
+} from "../chunk-NYL5IUK4.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-EK7QNCEO.js";
+} from "../chunk-TD2ZUI3R.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-EOEAZDKE.js";
+} from "../chunk-6SRLNMAP.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.870" : "dev";
+var cliVersion = true ? "0.28.872" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6658,7 +6658,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.870" : "dev";
+var cliVersion2 = true ? "0.28.872" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-EOEAZDKE.js → chunk-6SRLNMAP.js}

@@ -1579,17 +1579,17 @@ edit, one-off scripts - in your **scratch directory**:
 ~/.augmented/{agent_id}/scratch/    working files, disposable
 \`\`\`
 
-**Do not use \`/tmp\`.** It is shared by every agent on the host, all running as
-root. If you download a customer's document into \`/tmp\`, every other customer's
-agent on that box can read it. That is a tenancy leak, not an untidiness
-problem, and it does not become acceptable because the file is small or the task
-is quick.
+**Do not use \`/tmp\`.** Every agent on the host shares it, all as root, so a
+customer document there is readable by every other customer's agent: a tenancy
+leak, however small the file. Moving it elsewhere on this host fixes nothing,
+your own directory is not private either (ENG-10266), and the guard catches
+careless paths, not determined ones.
 
 **Your working directory is \`project/\`, and \`scratch/\` is its SIBLING** - so
 from where you are, the path is \`../scratch/\`, not \`scratch/\`:
 
 \`\`\`
-cd ~/.augmented/{agent_id}/scratch     # or just work with ../scratch/ from project/
+cd ~/.augmented/{agent_id}/scratch
 curl -o ../scratch/report.pdf https://...
 \`\`\`
 
@@ -14303,4 +14303,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-EOEAZDKE.js.map
+//# sourceMappingURL=chunk-6SRLNMAP.js.map