@integrity-labs/agt-cli 0.26.2 → 0.27.0-test.4

package/dist/{chunk-4CESBZPM.js → chunk-CPZIFISH.js}

@@ -9,7 +9,7 @@ import {
   parseDeliveryTarget,
   registerFramework,
   wrapScheduledTaskPrompt
-} from "./chunk-U3HCB23E.js";
+} from "./chunk-CTWY2X4S.js";
 
 // ../../packages/core/dist/integrations/registry.js
 var INTEGRATION_REGISTRY = [
@@ -6694,4 +6694,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-4CESBZPM.js.map
+//# sourceMappingURL=chunk-CPZIFISH.js.map

package/dist/{chunk-U3HCB23E.js → chunk-CTWY2X4S.js}

@@ -1081,6 +1081,13 @@ var MSTEAMS_SCOPE_PRESETS = {
   full: MSTEAMS_SCOPE_REGISTRY.map((s) => s.scope)
 };
 
+// ../../packages/core/dist/alerts/snooze.js
+var FIXED_SECONDS = {
+  "15m": 15 * 60,
+  "1h": 60 * 60,
+  "4h": 4 * 60 * 60
+};
+
 // ../../packages/core/dist/parser/frontmatter.js
 import { parse as parseYaml } from "yaml";
 function extractFrontmatter(content) {
@@ -1514,6 +1521,11 @@ var charter_frontmatter_v1_default = {
         require_approval_to_change: {
           type: "boolean",
           default: true
+        },
+        sender_policy: {
+          type: "string",
+          enum: ["all", "agents_only", "team_agents_only"],
+          description: "Restricts which senders this agent processes. 'all' (default): anyone. 'agents_only': only Augmented-labelled agents. 'team_agents_only': only same-team Augmented agents. Enforced via message metadata labels in Slack and activity entity labels in Teams."
         }
       },
       additionalProperties: false
@@ -2094,13 +2106,6 @@ function validateToolsFrontmatter(data) {
   };
 }
 
-// ../../packages/core/dist/alerts/snooze.js
-var FIXED_SECONDS = {
-  "15m": 15 * 60,
-  "1h": 60 * 60,
-  "4h": 4 * 60 * 60
-};
-
 // ../../packages/core/dist/generation/charter-generator.js
 import { stringify as stringifyYaml } from "yaml";
 function generateCharterMd(input) {
@@ -2404,6 +2409,32 @@ function runChannelRules(charter, orgPolicy) {
       }
     }
   }
+  if (orgPolicy?.sender_policy) {
+    const orgMode = orgPolicy.sender_policy.mode;
+    const agentMode = channels.sender_policy ?? "all";
+    const rank = {
+      all: 0,
+      agents_only: 1,
+      team_agents_only: 2
+    };
+    if (!(agentMode in rank) || !(orgMode in rank)) {
+      diagnostics.push({
+        file: "CHARTER.md",
+        code: "CHARTER.CHANNELS.SENDER_POLICY_CONFLICT",
+        path: "channels.sender_policy",
+        severity: "error",
+        message: `Invalid sender_policy mode (agent="${agentMode}", org="${orgMode}")`
+      });
+    } else if (rank[agentMode] < rank[orgMode]) {
+      diagnostics.push({
+        file: "CHARTER.md",
+        code: "CHARTER.CHANNELS.SENDER_POLICY_CONFLICT",
+        path: "channels.sender_policy",
+        severity: "error",
+        message: `Agent sender_policy "${agentMode}" is less restrictive than the org policy "${orgMode}"`
+      });
+    }
+  }
   return diagnostics;
 }
 
@@ -2845,6 +2876,7 @@ var ROLE_PERMISSIONS = {
     "agent.view",
     "agent.revoke",
     "agent.pause",
+    "agent.impersonate",
     "template.manage",
     "audit_log.view",
     "host.create",
@@ -2864,6 +2896,7 @@ var ROLE_PERMISSIONS = {
     "agent.view",
     "agent.revoke",
     "agent.pause",
+    "agent.impersonate",
     "template.manage",
     "audit_log.view",
     "host.create",
@@ -3894,4 +3927,4 @@ export {
   attributeTranscriptUsageByRun,
   KANBAN_CHECK_COMMAND
 };
-//# sourceMappingURL=chunk-U3HCB23E.js.map
+//# sourceMappingURL=chunk-CTWY2X4S.js.map