@integrity-labs/agt-cli 0.28.943 → 0.28.945

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-44X625BP.js";
+} from "../chunk-U5ETXDXQ.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-NB7WT7MA.js";
+} from "../chunk-XN5MOKSV.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-HF2GMFMJ.js";
+} from "../chunk-YZ5HGHPG.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -5470,7 +5470,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.943" : "dev";
+var cliVersion = true ? "0.28.945" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6730,7 +6730,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.943" : "dev";
+var cliVersion2 = true ? "0.28.945" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-44X625BP.js → chunk-U5ETXDXQ.js}

@@ -16,7 +16,7 @@ import {
   parseEnvIntegrations,
   shellQuote,
   summarizeUnanswerablePane
-} from "./chunk-NB7WT7MA.js";
+} from "./chunk-XN5MOKSV.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -76,7 +76,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-HF2GMFMJ.js";
+} from "./chunk-YZ5HGHPG.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -6965,7 +6965,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.943" : "dev";
+var agtCliVersion = true ? "0.28.945" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -11664,4 +11664,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-44X625BP.js.map
+//# sourceMappingURL=chunk-U5ETXDXQ.js.map

package/dist/{chunk-NB7WT7MA.js → chunk-XN5MOKSV.js}

@@ -19,7 +19,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-HF2GMFMJ.js";
+} from "./chunk-YZ5HGHPG.js";
 import {
   reapOrphanChannelMcps
 } from "./chunk-XWVM4KPK.js";
@@ -5730,4 +5730,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-NB7WT7MA.js.map
+//# sourceMappingURL=chunk-XN5MOKSV.js.map

package/dist/{chunk-HF2GMFMJ.js → chunk-YZ5HGHPG.js}

@@ -11727,7 +11727,24 @@ var composio_approved_egress_default = {
     "WHEN ENG-9426 LANDS THIS GOES RED UNTIL IT IS UPDATED. That is the forcing function",
     "working, not a fault. ENG-9426 adds a NAT in ap-southeast-2b, i.e. a THIRD egress",
     "address: add it here in the same change that lands it, or the detector correctly",
-    "reports that hosts are leaving from an address no key allows. Do not loosen the check."
+    "reports that hosts are leaving from an address no key allows. Do not loosen the check.",
+    "",
+    "         crossing to 2a and stop dying with it. The address does not exist until",
+    "",
+    "15.135.204.192 IS GONE AND MUST NOT BE RE-ADDED (ENG-9426, 2026-09-15).",
+    "The dev NAT was retired and that address was RELEASED back to the AWS pool, so it can",
+    "be reassigned to another AWS customer at any time. An allowlist entry naming it would",
+    "then permit a stranger's host rather than simply failing closed. Nothing was armed when",
+    "this happened, so no key ever held it - but this file IS what an operator pastes from,",
+    "which is why it is removed here the same day.",
+    "",
+    "WHY retainOnDelete DID NOT SAVE IT, because the next person will assume it would.",
+    "The option was added in the SAME change that set dev's natMode to `none`. Pulumi reads",
+    "delete-time options from the STATE recorded at the resource's last registration, and by",
+    "the time this ran the resource was no longer in the program at all - so the state still",
+    "said 'delete normally'. retainOnDelete has to land in a deploy that STILL DECLARES the",
+    "resource before it protects anything. The two prod EIPs above are protected, because",
+    "this apply registered them with the option set."
   ],
   account: "711726113003",
   homeRegion: "ap-southeast-2",
@@ -11739,10 +11756,10 @@ var composio_approved_egress_default = {
       note: "Prod hosts NAT. Measured 2026-09-12 (ENG-10392): 25 of 25 active prod host instances route 0.0.0.0/0 here."
     },
     {
-      ip: "15.135.204.192",
-      stage: "dev",
-      seenAsGateway: "nat-01122e6efaf4c4eaa",
-      note: "Dev-stage hosts NAT, same account. 2 instances measured 2026-09-12; their host rows live in the dev Supabase project."
+      ip: "54.253.255.215",
+      stage: "prod",
+      seenAsGateway: "nat-04384e27ab04973b5",
+      note: "Prod hosts NAT in ap-southeast-2b, created 2026-09-15 by ENG-9426. The 12 prod hosts in the 2b private subnet egress here instead of crossing to 2a. Verified live after the Pulumi apply, not predicted."
     }
   ]
 };
@@ -14783,4 +14800,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-HF2GMFMJ.js.map
+//# sourceMappingURL=chunk-YZ5HGHPG.js.map