@integrity-labs/agt-cli 0.28.926 → 0.28.928

package/dist/mcp/direct-chat-channel.js

@@ -32947,6 +32947,55 @@ OAUTH_PROVIDERS["xero-control-plane"] = {
 // ../core/dist/integrations/composio-account-probe.js
 var BODY_MAX_BYTES = 1024 * 1024;
 
+// ../core/dist/integrations/composio-approved-egress.json
+var composio_approved_egress_default = {
+  $comment: [
+    "ADR-0032 Part 3, gate item 2 + gate item 3 (ENG-9684). THE single recorded source",
+    "for the addresses Composio's per-key IP allowlist is expected to hold. Read by BOTH",
+    "scripts/fleet-egress-enum.sh (the operator's pre-arming instrument) and the",
+    "ComposioEgressAddressDrift cron (the between-armings watch). They must agree, which",
+    "is why neither carries its own copy.",
+    "",
+    "WHY A REPO FILE AND NOT SSM. Composio's allowlist has no read API, so its contents",
+    "can never be queried - only inferred from a refusal. This file is therefore not a",
+    "cache of vendor state; it is a DECLARATION of what a human pasted into a dashboard.",
+    "A PR is the right ceremony for changing a security boundary nobody can read back.",
+    "SSM would also hit registerCron's five-parameter grant scope (ENG-9940), where a",
+    "sixth parameter fails silently.",
+    "",
+    "THE COMPARISON IS ON `ip` AND NOTHING ELSE. `seenAsGateway` is informational. A NAT",
+    "rebuild that re-adopts the same EIP keeps egress correct while changing the gateway",
+    "id, so comparing ids would red on the safe case - which is precisely the case Part 2's",
+    "EIP adoption exists to create.",
+    "",
+    "WHEN ENG-9426 LANDS THIS GOES RED UNTIL IT IS UPDATED. That is the forcing function",
+    "working, not a fault. ENG-9426 adds a NAT in ap-southeast-2b, i.e. a THIRD egress",
+    "address: add it here in the same change that lands it, or the detector correctly",
+    "reports that hosts are leaving from an address no key allows. Do not loosen the check."
+  ],
+  account: "711726113003",
+  homeRegion: "ap-southeast-2",
+  addresses: [
+    {
+      ip: "32.236.6.24",
+      stage: "prod",
+      seenAsGateway: "nat-00a3dac969c0641a6",
+      note: "Prod hosts NAT. Measured 2026-09-12 (ENG-10392): 25 of 25 active prod host instances route 0.0.0.0/0 here."
+    },
+    {
+      ip: "15.135.204.192",
+      stage: "dev",
+      seenAsGateway: "nat-01122e6efaf4c4eaa",
+      note: "Dev-stage hosts NAT, same account. 2 instances measured 2026-09-12; their host rows live in the dev Supabase project."
+    }
+  ]
+};
+
+// ../core/dist/integrations/composio-approved-egress.js
+var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
+var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
+var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
+
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
   url: "AGT_REMOTE_MCP_URL",

package/dist/mcp/index.js

@@ -25548,6 +25548,55 @@ OAUTH_PROVIDERS["xero-control-plane"] = {
 // ../core/dist/integrations/composio-account-probe.js
 var BODY_MAX_BYTES = 1024 * 1024;
 
+// ../core/dist/integrations/composio-approved-egress.json
+var composio_approved_egress_default = {
+  $comment: [
+    "ADR-0032 Part 3, gate item 2 + gate item 3 (ENG-9684). THE single recorded source",
+    "for the addresses Composio's per-key IP allowlist is expected to hold. Read by BOTH",
+    "scripts/fleet-egress-enum.sh (the operator's pre-arming instrument) and the",
+    "ComposioEgressAddressDrift cron (the between-armings watch). They must agree, which",
+    "is why neither carries its own copy.",
+    "",
+    "WHY A REPO FILE AND NOT SSM. Composio's allowlist has no read API, so its contents",
+    "can never be queried - only inferred from a refusal. This file is therefore not a",
+    "cache of vendor state; it is a DECLARATION of what a human pasted into a dashboard.",
+    "A PR is the right ceremony for changing a security boundary nobody can read back.",
+    "SSM would also hit registerCron's five-parameter grant scope (ENG-9940), where a",
+    "sixth parameter fails silently.",
+    "",
+    "THE COMPARISON IS ON `ip` AND NOTHING ELSE. `seenAsGateway` is informational. A NAT",
+    "rebuild that re-adopts the same EIP keeps egress correct while changing the gateway",
+    "id, so comparing ids would red on the safe case - which is precisely the case Part 2's",
+    "EIP adoption exists to create.",
+    "",
+    "WHEN ENG-9426 LANDS THIS GOES RED UNTIL IT IS UPDATED. That is the forcing function",
+    "working, not a fault. ENG-9426 adds a NAT in ap-southeast-2b, i.e. a THIRD egress",
+    "address: add it here in the same change that lands it, or the detector correctly",
+    "reports that hosts are leaving from an address no key allows. Do not loosen the check."
+  ],
+  account: "711726113003",
+  homeRegion: "ap-southeast-2",
+  addresses: [
+    {
+      ip: "32.236.6.24",
+      stage: "prod",
+      seenAsGateway: "nat-00a3dac969c0641a6",
+      note: "Prod hosts NAT. Measured 2026-09-12 (ENG-10392): 25 of 25 active prod host instances route 0.0.0.0/0 here."
+    },
+    {
+      ip: "15.135.204.192",
+      stage: "dev",
+      seenAsGateway: "nat-01122e6efaf4c4eaa",
+      note: "Dev-stage hosts NAT, same account. 2 instances measured 2026-09-12; their host rows live in the dev Supabase project."
+    }
+  ]
+};
+
+// ../core/dist/integrations/composio-approved-egress.js
+var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
+var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
+var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
+
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
   url: "AGT_REMOTE_MCP_URL",

package/dist/mcp/origami.js

@@ -39652,6 +39652,55 @@ OAUTH_PROVIDERS["xero-control-plane"] = {
 // ../core/dist/integrations/composio-account-probe.js
 var BODY_MAX_BYTES = 1024 * 1024;
 
+// ../core/dist/integrations/composio-approved-egress.json
+var composio_approved_egress_default = {
+  $comment: [
+    "ADR-0032 Part 3, gate item 2 + gate item 3 (ENG-9684). THE single recorded source",
+    "for the addresses Composio's per-key IP allowlist is expected to hold. Read by BOTH",
+    "scripts/fleet-egress-enum.sh (the operator's pre-arming instrument) and the",
+    "ComposioEgressAddressDrift cron (the between-armings watch). They must agree, which",
+    "is why neither carries its own copy.",
+    "",
+    "WHY A REPO FILE AND NOT SSM. Composio's allowlist has no read API, so its contents",
+    "can never be queried - only inferred from a refusal. This file is therefore not a",
+    "cache of vendor state; it is a DECLARATION of what a human pasted into a dashboard.",
+    "A PR is the right ceremony for changing a security boundary nobody can read back.",
+    "SSM would also hit registerCron's five-parameter grant scope (ENG-9940), where a",
+    "sixth parameter fails silently.",
+    "",
+    "THE COMPARISON IS ON `ip` AND NOTHING ELSE. `seenAsGateway` is informational. A NAT",
+    "rebuild that re-adopts the same EIP keeps egress correct while changing the gateway",
+    "id, so comparing ids would red on the safe case - which is precisely the case Part 2's",
+    "EIP adoption exists to create.",
+    "",
+    "WHEN ENG-9426 LANDS THIS GOES RED UNTIL IT IS UPDATED. That is the forcing function",
+    "working, not a fault. ENG-9426 adds a NAT in ap-southeast-2b, i.e. a THIRD egress",
+    "address: add it here in the same change that lands it, or the detector correctly",
+    "reports that hosts are leaving from an address no key allows. Do not loosen the check."
+  ],
+  account: "711726113003",
+  homeRegion: "ap-southeast-2",
+  addresses: [
+    {
+      ip: "32.236.6.24",
+      stage: "prod",
+      seenAsGateway: "nat-00a3dac969c0641a6",
+      note: "Prod hosts NAT. Measured 2026-09-12 (ENG-10392): 25 of 25 active prod host instances route 0.0.0.0/0 here."
+    },
+    {
+      ip: "15.135.204.192",
+      stage: "dev",
+      seenAsGateway: "nat-01122e6efaf4c4eaa",
+      note: "Dev-stage hosts NAT, same account. 2 instances measured 2026-09-12; their host rows live in the dev Supabase project."
+    }
+  ]
+};
+
+// ../core/dist/integrations/composio-approved-egress.js
+var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
+var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
+var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
+
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
   url: "AGT_REMOTE_MCP_URL",

package/dist/mcp/slack-channel.js

@@ -33892,6 +33892,55 @@ OAUTH_PROVIDERS["xero-control-plane"] = {
 // ../core/dist/integrations/composio-account-probe.js
 var BODY_MAX_BYTES = 1024 * 1024;
 
+// ../core/dist/integrations/composio-approved-egress.json
+var composio_approved_egress_default = {
+  $comment: [
+    "ADR-0032 Part 3, gate item 2 + gate item 3 (ENG-9684). THE single recorded source",
+    "for the addresses Composio's per-key IP allowlist is expected to hold. Read by BOTH",
+    "scripts/fleet-egress-enum.sh (the operator's pre-arming instrument) and the",
+    "ComposioEgressAddressDrift cron (the between-armings watch). They must agree, which",
+    "is why neither carries its own copy.",
+    "",
+    "WHY A REPO FILE AND NOT SSM. Composio's allowlist has no read API, so its contents",
+    "can never be queried - only inferred from a refusal. This file is therefore not a",
+    "cache of vendor state; it is a DECLARATION of what a human pasted into a dashboard.",
+    "A PR is the right ceremony for changing a security boundary nobody can read back.",
+    "SSM would also hit registerCron's five-parameter grant scope (ENG-9940), where a",
+    "sixth parameter fails silently.",
+    "",
+    "THE COMPARISON IS ON `ip` AND NOTHING ELSE. `seenAsGateway` is informational. A NAT",
+    "rebuild that re-adopts the same EIP keeps egress correct while changing the gateway",
+    "id, so comparing ids would red on the safe case - which is precisely the case Part 2's",
+    "EIP adoption exists to create.",
+    "",
+    "WHEN ENG-9426 LANDS THIS GOES RED UNTIL IT IS UPDATED. That is the forcing function",
+    "working, not a fault. ENG-9426 adds a NAT in ap-southeast-2b, i.e. a THIRD egress",
+    "address: add it here in the same change that lands it, or the detector correctly",
+    "reports that hosts are leaving from an address no key allows. Do not loosen the check."
+  ],
+  account: "711726113003",
+  homeRegion: "ap-southeast-2",
+  addresses: [
+    {
+      ip: "32.236.6.24",
+      stage: "prod",
+      seenAsGateway: "nat-00a3dac969c0641a6",
+      note: "Prod hosts NAT. Measured 2026-09-12 (ENG-10392): 25 of 25 active prod host instances route 0.0.0.0/0 here."
+    },
+    {
+      ip: "15.135.204.192",
+      stage: "dev",
+      seenAsGateway: "nat-01122e6efaf4c4eaa",
+      note: "Dev-stage hosts NAT, same account. 2 instances measured 2026-09-12; their host rows live in the dev Supabase project."
+    }
+  ]
+};
+
+// ../core/dist/integrations/composio-approved-egress.js
+var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
+var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
+var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
+
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
   url: "AGT_REMOTE_MCP_URL",

package/dist/mcp/telegram-channel.js

@@ -33934,6 +33934,55 @@ OAUTH_PROVIDERS["xero-control-plane"] = {
 // ../core/dist/integrations/composio-account-probe.js
 var BODY_MAX_BYTES = 1024 * 1024;
 
+// ../core/dist/integrations/composio-approved-egress.json
+var composio_approved_egress_default = {
+  $comment: [
+    "ADR-0032 Part 3, gate item 2 + gate item 3 (ENG-9684). THE single recorded source",
+    "for the addresses Composio's per-key IP allowlist is expected to hold. Read by BOTH",
+    "scripts/fleet-egress-enum.sh (the operator's pre-arming instrument) and the",
+    "ComposioEgressAddressDrift cron (the between-armings watch). They must agree, which",
+    "is why neither carries its own copy.",
+    "",
+    "WHY A REPO FILE AND NOT SSM. Composio's allowlist has no read API, so its contents",
+    "can never be queried - only inferred from a refusal. This file is therefore not a",
+    "cache of vendor state; it is a DECLARATION of what a human pasted into a dashboard.",
+    "A PR is the right ceremony for changing a security boundary nobody can read back.",
+    "SSM would also hit registerCron's five-parameter grant scope (ENG-9940), where a",
+    "sixth parameter fails silently.",
+    "",
+    "THE COMPARISON IS ON `ip` AND NOTHING ELSE. `seenAsGateway` is informational. A NAT",
+    "rebuild that re-adopts the same EIP keeps egress correct while changing the gateway",
+    "id, so comparing ids would red on the safe case - which is precisely the case Part 2's",
+    "EIP adoption exists to create.",
+    "",
+    "WHEN ENG-9426 LANDS THIS GOES RED UNTIL IT IS UPDATED. That is the forcing function",
+    "working, not a fault. ENG-9426 adds a NAT in ap-southeast-2b, i.e. a THIRD egress",
+    "address: add it here in the same change that lands it, or the detector correctly",
+    "reports that hosts are leaving from an address no key allows. Do not loosen the check."
+  ],
+  account: "711726113003",
+  homeRegion: "ap-southeast-2",
+  addresses: [
+    {
+      ip: "32.236.6.24",
+      stage: "prod",
+      seenAsGateway: "nat-00a3dac969c0641a6",
+      note: "Prod hosts NAT. Measured 2026-09-12 (ENG-10392): 25 of 25 active prod host instances route 0.0.0.0/0 here."
+    },
+    {
+      ip: "15.135.204.192",
+      stage: "dev",
+      seenAsGateway: "nat-01122e6efaf4c4eaa",
+      note: "Dev-stage hosts NAT, same account. 2 instances measured 2026-09-12; their host rows live in the dev Supabase project."
+    }
+  ]
+};
+
+// ../core/dist/integrations/composio-approved-egress.js
+var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
+var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
+var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
+
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
   url: "AGT_REMOTE_MCP_URL",

package/dist/{persistent-session-PKHXX4LZ.js → persistent-session-O3AKW6IW.js}

@@ -62,8 +62,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-6SKPDXGU.js";
-import "./chunk-UBXUNYTR.js";
+} from "./chunk-NIUBYSLW.js";
+import "./chunk-Y7ERASS6.js";
 import "./chunk-XWVM4KPK.js";
 export {
   CLAUDE_HOST_WIDE,
@@ -130,4 +130,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-PKHXX4LZ.js.map
+//# sourceMappingURL=persistent-session-O3AKW6IW.js.map

package/dist/{responsiveness-probe-JX2TNGQ2.js → responsiveness-probe-MIPUX3BG.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-6SKPDXGU.js";
-import "./chunk-UBXUNYTR.js";
+} from "./chunk-NIUBYSLW.js";
+import "./chunk-Y7ERASS6.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -799,4 +799,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-JX2TNGQ2.js.map
+//# sourceMappingURL=responsiveness-probe-MIPUX3BG.js.map

package/dist/{session-auth-dead-2W2OFAZR.js → session-auth-dead-ZGZZLE4X.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-UBXUNYTR.js";
+} from "./chunk-Y7ERASS6.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-2W2OFAZR.js.map
+//# sourceMappingURL=session-auth-dead-ZGZZLE4X.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.926",
+  "version": "0.28.928",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {