@integrity-labs/agt-cli 0.28.984 → 0.28.986

package/dist/mcp/telegram-channel.js

@@ -34102,9 +34102,51 @@ var composio_approved_egress_default = {
     "Trimming it would make the allowlist incomplete, which is a fleet-wide 401 rather than",
     "a tidy file.",
     "",
-    "PASTE ALL FOUR, ALWAYS. Composio's field takes explicit comma-delimited addresses and",
-    "no CIDR, so a key armed with the hosts pair alone locks out every server-side call the",
-    "control plane makes, and one armed with the bridge pair alone locks out the fleet."
+    "PASTE THE WHOLE SHARED SET, ALWAYS. Composio's field takes explicit comma-delimited",
+    "addresses and no CIDR, so a key armed with the hosts pair alone locks out every",
+    "server-side call the control plane makes, and one armed with the bridge pair alone locks",
+    "out the fleet. This used to read 'PASTE ALL FOUR, ALWAYS', which `orgAddresses` below",
+    "makes false: for an org with a BYO host the shared set is NOT the whole value, and an",
+    "operator following the old sentence would arm a key that refuses that org's own agents.",
+    "",
+    "`orgAddresses` - THE SHARED SET IS NOT EVERY ORG'S SET (ENG-10718).",
+    "An org whose agents run on a host we do not operate the network for - a BYO host in the",
+    "customer's AWS account, or a `self` host on hardware we never see - egresses from an",
+    "address no shared entry above carries. These are recorded per org rather than",
+    "merged into `addresses`, because they are not fleet-wide: pasting one org's BYO address",
+    "into another org's key widens that key for no reason. The drift detector and",
+    "fleet-egress-enum.sh both read `addresses` and only `addresses`, so nothing here is ever",
+    "compared against a hosts-account scan - which is correct, since these addresses live in",
+    "accounts neither ever enumerates.",
+    "",
+    "AN OBSERVED ADDRESS IS NOT AN APPROVED ONE, AND THAT IS THE WHOLE POINT OF THIS FILE.",
+    "`host_attested_egress` (ENG-10666) records the address a BYO host was SEEN calling from,",
+    "and it is the only way to learn one - the `augmented-byo-provisioner` role grants neither",
+    "`DescribeRouteTables` nor `DescribeNatGateways`, so enumeration cannot answer it. But",
+    "seeing an address is not deciding it may hold a key. A row appears here when a human",
+    "decides it, in a PR, which is the same ceremony every other entry gets. So an org can",
+    "legitimately have a known egress address and no entry here - see Zanda below - and the",
+    "posture page must withhold its paste value rather than offer the shared set.",
+    "",
+    "ZANDA IS THE LIVE EXAMPLE, AND ITS ABSENCE BELOW IS DELIBERATE.",
+    "Zanda has an active BYO host - d0a78e4f-7a21-4d8d-85db-66a167fdd8cb in account",
+    "585819234046, created 2026-09-16 - and as of 2026-09-20 its egress address IS known:",
+    "3.107.131.133, resolved from `host_attested_egress` after an account enumeration failed",
+    "to find it (it is a THIRD account, which no census had thought to scan). It is not",
+    "recorded because nobody has approved it. That host carries ZERO assigned agents, so it",
+    "makes no Composio calls and the omission costs nothing today; the approval queue for",
+    "exactly this decision is ENG-10668, unbuilt. The consequence is intended and measured:",
+    "Zanda's org IS `fully_managed` (read from prod 2026-09-20), so it holds a",
+    "platform-managed Composio key and DOES appear on /admin/composio-key-posture - with no",
+    "paste value and a reason. That row is the feature working. Do not 'fix' it by adding",
+    "3.107.131.133 below - add the approval.",
+    "",
+    "THE SAME READ FOUND ZERO `self` HOSTS FLEET-WIDE (2026-09-20), which is why widening the",
+    "rule beyond the BYO pointer costs nothing today: exactly two orgs have a host outside our",
+    "NATs, both BYO, and only Zanda's lacks a recorded address. Every other org's row is the",
+    "shared set, byte-identical to what ENG-10713 already served it. If that ratio ever",
+    "inverts - many orgs withholding - the answer is to record addresses or build ENG-10668,",
+    "NOT to narrow the rule back."
   ],
   account: "711726113003",
   homeRegion: "ap-southeast-2",
@@ -34141,13 +34183,29 @@ var composio_approved_egress_default = {
       seenAsGateway: "nat-02a4721d4ce678cf7",
       note: "The us-east-2b half of the same managed multi-AZ NAT. Two addresses is what `az: 2` costs on the allowlist, accepted deliberately in ENG-9684: adding an address AFTER arming is a blind hand edit of every key with production 401s as the only completion signal."
     }
-  ]
+  ],
+  orgAddresses: {
+    "a4bba5c8-f664-46fe-a894-c95679c615ac": {
+      orgSlug: "integritylabs",
+      addresses: [
+        {
+          ip: "54.153.194.237",
+          stage: "prod-byo",
+          account: "436812233703",
+          region: null,
+          seenAsGateway: "nat-0c3cc231a8701a0e9",
+          note: 'The BYO "Agents" account\'s NAT, serving `asha` on prod-integritylabs-integritylabs-4. Measured 2026-09-19 (ENG-10718) and again in the 24h /host/* census on 2026-09-20: 55,109 requests from 32 distinct paths. `region` is null because it is NOT RECORDED and cannot be enumerated from here - see the $comment; the comparison is on `ip` alone, so a null costs nothing, whereas a guessed region would be a fact this file states without evidence. THIS ORG WAS ARMED DURING THE GATE 5 REHEARSAL (ENG-10712) WITHOUT THIS ADDRESS. It passed only because nothing on that host called Composio inside the ~15-minute window; had it, the call would have been refused.'
+        }
+      ]
+    }
+  }
 };
 
 // ../core/dist/integrations/composio-approved-egress.js
 var APPROVED_EGRESS_ACCOUNT = composio_approved_egress_default.account;
 var APPROVED_EGRESS_HOME_REGION = composio_approved_egress_default.homeRegion;
 var APPROVED_EGRESS_ADDRESSES = composio_approved_egress_default.addresses;
+var ORG_EGRESS_ADDRESSES = composio_approved_egress_default.orgAddresses ?? {};
 
 // ../core/dist/integrations/remote-mcp-proxy-env.js
 var REMOTE_MCP_PROXY_ENV = {
@@ -41765,6 +41823,34 @@ function telegramInboundId(chatId, messageId) {
   return hashInboundId(`${chatId}|${messageId}`);
 }
 
+// ../core/dist/channels/progress-step.js
+var AUTO_PROGRESS_FALLBACK_STEP = "Working\u2026";
+var VERBS = [
+  ["Running", "Running a command"],
+  ["Editing", "Editing a file"],
+  ["Writing", "Writing a file"],
+  ["Reading", "Reading a file"],
+  ["Searching the web", "Searching the web"],
+  ["Searching", "Searching"],
+  ["Finding files", "Searching"],
+  ["Fetching", "Fetching a page"],
+  ["Working on", "Working on a subtask"],
+  ["Using", "Using a tool"]
+];
+function sanitizeAutoProgressStep(raw) {
+  const text = raw.trim();
+  if (!text)
+    return "";
+  for (const [prefix, label] of VERBS) {
+    if (!text.startsWith(prefix))
+      continue;
+    const next = text.charAt(prefix.length);
+    if (next === "" || next === " " || next === ":")
+      return label;
+  }
+  return AUTO_PROGRESS_FALLBACK_STEP;
+}
+
 // src/channel-progress.ts
 function channelLiveProgressEnabled() {
   return resolveHostBooleanFlag({
@@ -41821,7 +41907,7 @@ function parseProgressHeartbeat(raw) {
   if (!raw) return null;
   try {
     const obj = JSON.parse(raw);
-    const step = typeof obj.step === "string" ? obj.step.trim() : "";
+    const step = typeof obj.step === "string" ? sanitizeAutoProgressStep(obj.step) : "";
     const updatedAtMs = typeof obj.updated_at_ms === "number" ? obj.updated_at_ms : NaN;
     if (!step || !Number.isFinite(updatedAtMs)) return null;
     return { step, updatedAtMs };

package/dist/{persistent-session-R6WKQT2N.js → persistent-session-PYYD53GZ.js}

@@ -62,8 +62,8 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-72J5FCKI.js";
-import "./chunk-DI4Q2OVR.js";
+} from "./chunk-6KYXH6ZZ.js";
+import "./chunk-TGCA3LTI.js";
 import "./chunk-DHWNVVX4.js";
 import "./chunk-XWVM4KPK.js";
 export {
@@ -131,4 +131,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-R6WKQT2N.js.map
+//# sourceMappingURL=persistent-session-PYYD53GZ.js.map

package/dist/{responsiveness-probe-M3QTWJGG.js → responsiveness-probe-JENZOOKG.js}

@@ -1,7 +1,7 @@
 import {
   paneLogPath
-} from "./chunk-72J5FCKI.js";
-import "./chunk-DI4Q2OVR.js";
+} from "./chunk-6KYXH6ZZ.js";
+import "./chunk-TGCA3LTI.js";
 import "./chunk-DHWNVVX4.js";
 import "./chunk-XWVM4KPK.js";
 
@@ -800,4 +800,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-M3QTWJGG.js.map
+//# sourceMappingURL=responsiveness-probe-JENZOOKG.js.map

package/dist/{session-auth-dead-FQ3N3BJ5.js → session-auth-dead-BGXRQB27.js}

@@ -1,6 +1,6 @@
 import {
   sessionTranscriptDir
-} from "./chunk-DI4Q2OVR.js";
+} from "./chunk-TGCA3LTI.js";
 
 // src/lib/session-auth-dead.ts
 import { closeSync, openSync, readSync, readdirSync, statSync } from "fs";
@@ -203,4 +203,4 @@ export {
   decideSessionAuthState,
   probeSessionAuth
 };
-//# sourceMappingURL=session-auth-dead-FQ3N3BJ5.js.map
+//# sourceMappingURL=session-auth-dead-BGXRQB27.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.984",
+  "version": "0.28.986",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {