@integrity-labs/agt-cli 0.28.1076 → 0.28.1078

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-DSRPF6KS.js";
+} from "../chunk-R5IN7H32.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-XNIN4UH6.js";
+} from "../chunk-PJWMW6ET.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-HE3ZAMGG.js";
+} from "../chunk-UDJINPUK.js";
 import "../chunk-OCMJ5E6J.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1076" : "dev";
+var cliVersion = true ? "0.28.1078" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1076" : "dev";
+var cliVersion2 = true ? "0.28.1078" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-XNIN4UH6.js → chunk-PJWMW6ET.js}

@@ -24,7 +24,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-HE3ZAMGG.js";
+} from "./chunk-UDJINPUK.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -6113,4 +6113,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-XNIN4UH6.js.map
+//# sourceMappingURL=chunk-PJWMW6ET.js.map

package/dist/{chunk-DSRPF6KS.js → chunk-R5IN7H32.js}

@@ -16,7 +16,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-XNIN4UH6.js";
+} from "./chunk-PJWMW6ET.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -79,7 +79,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-HE3ZAMGG.js";
+} from "./chunk-UDJINPUK.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -7122,7 +7122,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1076" : "dev";
+var agtCliVersion = true ? "0.28.1078" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -12095,4 +12095,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-DSRPF6KS.js.map
+//# sourceMappingURL=chunk-R5IN7H32.js.map

package/dist/{chunk-HE3ZAMGG.js → chunk-UDJINPUK.js}

@@ -1170,6 +1170,34 @@ function formatEmptyChannelAllowlistLines() {
     `  the removal (ENG-9663).`
   ];
 }
+var EMAIL_MAIL_RULES_DEF = "email.mail_rules";
+var MAIL_RULE_DISPOSITION_TEXT = {
+  egress: "forwards or redirects mail to another address",
+  suppression: "hides mail from its owner (trash, delete, archive or mark as read)",
+  opaque: "has an effect that can't be read from the request (including deleting a rule)"
+};
+function formatMailRuleHoldLines(hold) {
+  const which = hold.heldDispositions.map((d) => `  - a rule that ${MAIL_RULE_DISPOSITION_TEXT[d] ?? d}`);
+  if (hold.live) {
+    return [
+      `  The platform holds these mail-rule changes for an Approve/Deny card, and approving`,
+      `  the card releases the change:`,
+      ...which,
+      `  When asked for one, attempt it: do not decline on this guardrail's basis. Tell the`,
+      `  user it is waiting for approval, and do not say it was made until it is approved.`
+    ];
+  }
+  return [`  Not held by the platform yet: these mail-rule changes go through and are only recorded:`, ...which];
+}
+function effectiveMailRuleEnforcement(g) {
+  if (g.definitionId !== EMAIL_MAIL_RULES_DEF)
+    return g.enforcement;
+  if (g.mailRuleHold === void 0)
+    return g.enforcement;
+  if (g.enforcement !== "enforce")
+    return g.enforcement;
+  return g.mailRuleHold.live ? "warn" : "log";
+}
 function renderGuardrailBullet(g) {
   const lines = [];
   const header = `- **${g.displayName}** (${g.category}, from ${g.source})`;
@@ -1177,7 +1205,7 @@ function renderGuardrailBullet(g) {
   if (g.description?.trim()) {
     lines.push(`  ${g.description.trim()}`);
   }
-  lines.push(...g.definitionId === EMAIL_DOMAIN_RESTRICT_DEF ? formatEmailDomainConfigLines(g.config) : g.definitionId === CALENDAR_CONFIDENTIALITY_DEF ? formatCalendarConfidentialityLines(g.config) : (
+  lines.push(...g.definitionId === EMAIL_DOMAIN_RESTRICT_DEF ? formatEmailDomainConfigLines(g.config) : g.definitionId === CALENDAR_CONFIDENTIALITY_DEF ? formatCalendarConfidentialityLines(g.config) : g.definitionId === EMAIL_MAIL_RULES_DEF && g.mailRuleHold ? formatMailRuleHoldLines(g.mailRuleHold) : (
     // ENG-9663: checked AFTER the two named formatters, so an email or
     // calendar guardrail can never be captured by the structural match.
     hasEmptyChannelAllowlist(g) ? formatEmptyChannelAllowlistLines() : formatConfigLines(g.config)
@@ -1197,12 +1225,14 @@ var REQUIRE_APPROVAL_HOW = {
     `  with the request_id and act only once it is approved; if it is denied or expires, do`,
     `  not act, and tell the user. Never just say you are waiting for, or cannot reach, your`,
     `  manager without filing the request. If \`request_approval\` fails, say so and leave the`,
-    `  action undone.`
+    `  action undone. For an email, pass \`detail.email\` = { to, from, subject } so your`,
+    `  manager sees who it goes to.`
   ],
   warn: [
     `  When one of these actions is not clearly justified, ask rather than decline: call`,
     `  \`request_approval\` (it goes to your manager), end your turn, and act only once`,
-    `  \`check_approval\` says it is approved.`
+    `  \`check_approval\` says it is approved. For an email, pass \`detail.email\` =`,
+    `  { to, from, subject }.`
   ]
 };
 var REQUIRE_APPROVAL_EMAIL_ACTION = "send_email";
@@ -1304,9 +1334,12 @@ function buildGuardrailsSection(guardrails) {
   const active = guardrails.map((g) => {
     const enforcement = effectiveChannelAllowlistEnforcement({
       ...g,
-      enforcement: effectiveEmailEnforcement({
+      enforcement: effectiveMailRuleEnforcement({
         ...g,
-        enforcement: effectiveCalendarEnforcement(g)
+        enforcement: effectiveEmailEnforcement({
+          ...g,
+          enforcement: effectiveCalendarEnforcement(g)
+        })
       })
     });
     return { ...g, enforcement };
@@ -5043,7 +5076,14 @@ var NOTICE_KIND_AUDIENCE = {
   // text is explicitly second-person to the machine ("you are the only party who
   // can check the fix"). Deliberately out of scope: messaging that end user
   // automatically.
-  feature_request_resolved: "agent"
+  feature_request_resolved: "agent",
+  // ENG-11195: a customer replied by email to a support request. 'agent': the
+  // text is second-person to the machine ("decide whether a reply is needed"),
+  // names a raw request id, and carries the customer's email as quoted
+  // UNTRUSTED data. Shown to a human reader in direct chat, it would be
+  // platform-authored instructions addressed to someone else, wrapped around
+  // a stranger's text.
+  support_email_reply: "agent"
 };
 var USER_FACING_KIND_SET = new Set(Object.entries(NOTICE_KIND_AUDIENCE).filter(([, audience]) => audience === "user").map(([kind]) => kind));
 var USER_FACING_NOTICE_KINDS = Object.freeze([
@@ -5722,7 +5762,7 @@ var FLAG_REGISTRY = [
   },
   {
     key: "live-team-only-default",
-    description: "Make a NEW Ninja Canvas (Augmented Live) page team-only by default (ENG-11089, ADR-0122): when on, a publish that names no visibility is readable only by signed-in members of the publishing agent's team, and sharing it wider is an explicit choice. Evaluated per-org. Chooses the DEFAULT only: it never changes an existing page, and turning it off never un-protects a page that is already team-only. INERT until ENG-11150 lands - until then every publish is public and a non-public request is refused. Boolean gate; ships dark.",
+    description: "Make a NEW Ninja Canvas (Augmented Live) page team-only by default (ENG-11089, ADR-0122): when on, a publish that names no visibility is readable only by signed-in members of the publishing agent's team, and sharing it wider is an explicit choice. Evaluated per-org. Chooses the DEFAULT only: it never changes an existing page, and turning it off never un-protects a page that is already team-only, and an explicit visibility always wins. The edge can enforce it since ENG-11150; ENG-11094 wires it into the publish default. It is the PLATFORM default: an org's own canvas_default_visibility setting (ENG-11159) wins over it. Boolean gate; ships dark.",
     flagType: "boolean",
     defaultValue: false,
     // An org owner/admin must not arm a confidentiality default before the edge
@@ -16118,4 +16158,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-HE3ZAMGG.js.map
+//# sourceMappingURL=chunk-UDJINPUK.js.map