@integrity-labs/agt-cli 0.28.984 → 0.28.986

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-PVMVQ5IL.js";
+} from "../chunk-XEI5QMZ7.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-72J5FCKI.js";
+} from "../chunk-6KYXH6ZZ.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-DI4Q2OVR.js";
+} from "../chunk-TGCA3LTI.js";
 import "../chunk-DHWNVVX4.js";
 import "../chunk-XWVM4KPK.js";
 
@@ -5472,7 +5472,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.984" : "dev";
+var cliVersion = true ? "0.28.986" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6732,7 +6732,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.984" : "dev";
+var cliVersion2 = true ? "0.28.986" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-72J5FCKI.js → chunk-6KYXH6ZZ.js}

@@ -20,7 +20,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-DI4Q2OVR.js";
+} from "./chunk-TGCA3LTI.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -5575,4 +5575,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-72J5FCKI.js.map
+//# sourceMappingURL=chunk-6KYXH6ZZ.js.map

package/dist/{chunk-DI4Q2OVR.js → chunk-TGCA3LTI.js}

@@ -12119,9 +12119,51 @@ var composio_approved_egress_default = {
     "Trimming it would make the allowlist incomplete, which is a fleet-wide 401 rather than",
     "a tidy file.",
     "",
-    "PASTE ALL FOUR, ALWAYS. Composio's field takes explicit comma-delimited addresses and",
-    "no CIDR, so a key armed with the hosts pair alone locks out every server-side call the",
-    "control plane makes, and one armed with the bridge pair alone locks out the fleet."
+    "PASTE THE WHOLE SHARED SET, ALWAYS. Composio's field takes explicit comma-delimited",
+    "addresses and no CIDR, so a key armed with the hosts pair alone locks out every",
+    "server-side call the control plane makes, and one armed with the bridge pair alone locks",
+    "out the fleet. This used to read 'PASTE ALL FOUR, ALWAYS', which `orgAddresses` below",
+    "makes false: for an org with a BYO host the shared set is NOT the whole value, and an",
+    "operator following the old sentence would arm a key that refuses that org's own agents.",
+    "",
+    "`orgAddresses` - THE SHARED SET IS NOT EVERY ORG'S SET (ENG-10718).",
+    "An org whose agents run on a host we do not operate the network for - a BYO host in the",
+    "customer's AWS account, or a `self` host on hardware we never see - egresses from an",
+    "address no shared entry above carries. These are recorded per org rather than",
+    "merged into `addresses`, because they are not fleet-wide: pasting one org's BYO address",
+    "into another org's key widens that key for no reason. The drift detector and",
+    "fleet-egress-enum.sh both read `addresses` and only `addresses`, so nothing here is ever",
+    "compared against a hosts-account scan - which is correct, since these addresses live in",
+    "accounts neither ever enumerates.",
+    "",
+    "AN OBSERVED ADDRESS IS NOT AN APPROVED ONE, AND THAT IS THE WHOLE POINT OF THIS FILE.",
+    "`host_attested_egress` (ENG-10666) records the address a BYO host was SEEN calling from,",
+    "and it is the only way to learn one - the `augmented-byo-provisioner` role grants neither",
+    "`DescribeRouteTables` nor `DescribeNatGateways`, so enumeration cannot answer it. But",
+    "seeing an address is not deciding it may hold a key. A row appears here when a human",
+    "decides it, in a PR, which is the same ceremony every other entry gets. So an org can",
+    "legitimately have a known egress address and no entry here - see Zanda below - and the",
+    "posture page must withhold its paste value rather than offer the shared set.",
+    "",
+    "ZANDA IS THE LIVE EXAMPLE, AND ITS ABSENCE BELOW IS DELIBERATE.",
+    "Zanda has an active BYO host - d0a78e4f-7a21-4d8d-85db-66a167fdd8cb in account",
+    "585819234046, created 2026-09-16 - and as of 2026-09-20 its egress address IS known:",
+    "3.107.131.133, resolved from `host_attested_egress` after an account enumeration failed",
+    "to find it (it is a THIRD account, which no census had thought to scan). It is not",
+    "recorded because nobody has approved it. That host carries ZERO assigned agents, so it",
+    "makes no Composio calls and the omission costs nothing today; the approval queue for",
+    "exactly this decision is ENG-10668, unbuilt. The consequence is intended and measured:",
+    "Zanda's org IS `fully_managed` (read from prod 2026-09-20), so it holds a",
+    "platform-managed Composio key and DOES appear on /admin/composio-key-posture - with no",
+    "paste value and a reason. That row is the feature working. Do not 'fix' it by adding",
+    "3.107.131.133 below - add the approval.",
+    "",
+    "THE SAME READ FOUND ZERO `self` HOSTS FLEET-WIDE (2026-09-20), which is why widening the",
+    "rule beyond the BYO pointer costs nothing today: exactly two orgs have a host outside our",
+    "NATs, both BYO, and only Zanda's lacks a recorded address. Every other org's row is the",
+    "shared set, byte-identical to what ENG-10713 already served it. If that ratio ever",
+    "inverts - many orgs withholding - the answer is to record addresses or build ENG-10668,",
+    "NOT to narrow the rule back."
   ],
   account: "711726113003",
   homeRegion: "ap-southeast-2",
@@ -12158,13 +12200,29 @@ var composio_approved_egress_default = {
       seenAsGateway: "nat-02a4721d4ce678cf7",
       note: "The us-east-2b half of the same managed multi-AZ NAT. Two addresses is what `az: 2` costs on the allowlist, accepted deliberately in ENG-9684: adding an address AFTER arming is a blind hand edit of every key with production 401s as the only completion signal."
     }
-  ]
+  ],
+  orgAddresses: {
+    "a4bba5c8-f664-46fe-a894-c95679c615ac": {
+      orgSlug: "integritylabs",
+      addresses: [
+        {
+          ip: "54.153.194.237",
+          stage: "prod-byo",
+          account: "436812233703",
+          region: null,
+          seenAsGateway: "nat-0c3cc231a8701a0e9",
+          note: 'The BYO "Agents" account\'s NAT, serving `asha` on prod-integritylabs-integritylabs-4. Measured 2026-09-19 (ENG-10718) and again in the 24h /host/* census on 2026-09-20: 55,109 requests from 32 distinct paths. `region` is null because it is NOT RECORDED and cannot be enumerated from here - see the $comment; the comparison is on `ip` alone, so a null costs nothing, whereas a guessed region would be a fact this file states without evidence. THIS ORG WAS ARMED DURING THE GATE 5 REHEARSAL (ENG-10712) WITHOUT THIS ADDRESS. It passed only because nothing on that host called Composio inside the ~15-minute window; had it, the call would have been refused.'
+        }
+      ]
+    }
+  }
 };
 
 // ../../packages/core/dist/integrations/composio-approved-egress.js
 var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
 var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
 var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
+var ORG_EGRESS_ADDRESSES = composio_approved_egress_default.orgAddresses ?? {};
 
 // ../../packages/core/dist/integrations/composio-tool-call-probe.js
 var MCP_ACCEPT2 = "application/json, text/event-stream";
@@ -15200,4 +15258,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-DI4Q2OVR.js.map
+//# sourceMappingURL=chunk-TGCA3LTI.js.map