@integrity-labs/agt-cli 0.28.1067 → 0.28.1069

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-NZF55T6D.js";
+} from "../chunk-CO2ODT4I.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-OW6XCSOU.js";
+} from "../chunk-FHUYRSCF.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-PN7B4DLS.js";
+} from "../chunk-CFJONCHN.js";
 import "../chunk-OCMJ5E6J.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1067" : "dev";
+var cliVersion = true ? "0.28.1069" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1067" : "dev";
+var cliVersion2 = true ? "0.28.1069" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-PN7B4DLS.js → chunk-CFJONCHN.js}

@@ -7009,6 +7009,16 @@ var FLAG_REGISTRY = [
     // blocks customer email - so not `sensitive`, unlike the email-guard enable gates above.
     sensitive: false
   },
+  {
+    key: "approval-core-manager-console",
+    description: "Console approval authority from the routed approver set (ENG-11206, ADR-0124 Phase 0a). When ON for an org, the Approvals page also lets a non-admin decide a request if they are in its resolved approver set: the approval_assignments rows, else the legacy routed_to JSON, else the rule 6 fallback (the agent's manager). The main effect: an agent's manager can decide its integration and broker approvals in the console, which non-admins cannot do today. Owners and admins are unaffected. OFF (default) keeps the console exactly as before: owners/admins, plus the person named in routed_to.person_id. Evaluated per-org. Ships dark.",
+    flagType: "boolean",
+    // Safe/default value is `false` (today's console authority). A flag-DB read error degrades to
+    // this, so an outage can only narrow who may decide, never widen it.
+    defaultValue: false,
+    // It widens who may DECIDE an approval, so it is a control, not a display toggle.
+    sensitive: true
+  },
   {
     key: "slack-reply-binding",
     description: "Slack reply-target binding (ENG-7396 / WS2, cross-thread reply routing): the model names which inbound it answers (inbound_id) and the server resolves the destination from its own verified record. shadow = classify + count only, routing unchanged; warn = same routing plus a tool-result note so the model self-corrects; enforce = route a bound reply to the registry thread and REJECT a reply whose target matches no inbound this process delivered. The channel server can't evaluate flags, so the manager materializes the resolved value into the AGT_SLACK_REPLY_BINDING spawn env (the operator/canary override, ADR-0022). Ships shadow.",
@@ -16014,4 +16024,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-PN7B4DLS.js.map
+//# sourceMappingURL=chunk-CFJONCHN.js.map