@integrity-labs/agt-cli 0.28.1126 → 0.28.1127

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-DIOP5LSU.js";
+} from "../chunk-7W5TLMFG.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-C5YNHEST.js";
+} from "../chunk-37PZYGGA.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-JI2D2TA2.js";
+} from "../chunk-6J7WE4J4.js";
 import "../chunk-OCMJ5E6J.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1126" : "dev";
+var cliVersion = true ? "0.28.1127" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1126" : "dev";
+var cliVersion2 = true ? "0.28.1127" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-C5YNHEST.js → chunk-37PZYGGA.js}

@@ -24,7 +24,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-JI2D2TA2.js";
+} from "./chunk-6J7WE4J4.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -6114,4 +6114,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-C5YNHEST.js.map
+//# sourceMappingURL=chunk-37PZYGGA.js.map

package/dist/{chunk-JI2D2TA2.js → chunk-6J7WE4J4.js}

@@ -1119,6 +1119,7 @@ function formatEmailDomainConfigLines(config) {
   const enforceLive = config.enforce_live === true;
   const approvalLive = config.approval_live === true;
   const approvalCoveredActions = stringList(config.approval_covered_actions);
+  const noVerifiedDomain = config.not_live_reason === "no_verified_domain";
   if (stage) {
     const stageName = isEmailGuardStage(stage) ? EMAIL_GUARD_STAGE_LABELS[stage] : stage;
     lines.push(stageName === stage ? `  - setting: ${stage}` : `  - setting: ${stageName} (stage ${stage})`);
@@ -1129,8 +1130,12 @@ function formatEmailDomainConfigLines(config) {
         lines.push(`  *SCOPE - the hold below does NOT cover every route to sending mail, and this host does not report which routes it covers. Where you cannot confirm a send is covered - an unusual provider or tool, a mail rule or filter, a draft-send whose recipients are not in the call - treat it as unheld: produce the draft and hand it to a human.*`);
       }
       lines.push(`  *Human approval: sending to a non-allowed domain is allowed but routed to a person for approval. Attempt the send as you normally would - do NOT refuse it outright, and do NOT tell the user to go and send it themselves: the platform is configured to hold it and route it to an approver (an Approve/Deny card), and you are told the outcome. Two limits on that. (1) An explicit user instruction WINS: if the user asked you to route it for their review, to leave it in drafts, or to check with them before it goes, do THAT - leave the message unsent and tell them it is ready. Their instruction is not satisfied by the platform's hold. (2) Do NOT assume the hold engaged. If the send tool returns a sent/delivered result rather than a pending/held one, the hold did not fire - say so plainly in the same turn, treat the message as already gone, and do not send again to a non-allowed domain until a human confirms the gate is working.*`);
+    } else if (stage === "require_approval" && noVerifiedDomain) {
+      lines.push(`  *Approval routing is armed, but your organization has no verified email domain yet, so nothing can tell internal from external recipients and no send would be held. A message to a non-allowed domain would go straight out. Do NOT send one. Prepare it as a draft, tell the user it is ready and needs them to send it, and tell them an operator needs to verify the organization's email domain (Organization \u2192 Settings \u2192 Email domains in the console) before the hold can work.*`);
     } else if (stage === "require_approval") {
       lines.push(`  *Currently observe-only for approval: the API records the domain decision to guardrail_audit_log but does not block sends at this stage, and approval routing is NOT armed - so nothing would hold a message to a non-allowed domain. It would go straight out. Do NOT send one. Prepare it as a draft, tell the user it is ready and needs them to send it, and let them decide. This is deliberate fail-closed behaviour: a hold the platform cannot confirm is treated as no hold at all. Treat the restriction as authoritative guidance; the runtime flip is operator-side.*`);
+    } else if (stage === "enforce" && !enforceLive && noVerifiedDomain) {
+      lines.push(`  *Blocking is armed, but your organization has no verified email domain yet, so nothing can tell internal from external recipients and no send would be blocked. A message to a non-allowed domain would go straight out. Do NOT send one. Prepare it as a draft, tell the user it is ready and needs them to send it, and tell them an operator needs to verify the organization's email domain (Organization \u2192 Settings \u2192 Email domains in the console) before the block can work.*`);
     } else if (!(stage === "enforce" && enforceLive)) {
       lines.push(`  *Currently observe-only: the API records domain decisions to guardrail_audit_log but does not block sends at this stage. Honor the restriction as authoritative guidance; the runtime flip is operator-side.*`);
     }
@@ -1300,7 +1305,7 @@ function requireApprovalHowLines(g, level, holds) {
   const emailHold = holds.requireApproval;
   const domainHold = emailHold === null ? holds.domain : null;
   const actions = requireApprovalActions(g.config);
-  const namesEmail = actions === null || actions.includes(REQUIRE_APPROVAL_EMAIL_ACTION);
+  const namesEmail = actions === null ? domainHold === null : actions.includes(REQUIRE_APPROVAL_EMAIL_ACTION);
   const namesOther = actions === null || actions.some((a) => a !== REQUIRE_APPROVAL_EMAIL_ACTION);
   const asksAboutEmail = namesEmail && emailHold === null && domainHold === null;
   const ask = namesOther || asksAboutEmail || namesEmail && domainHold !== null;
@@ -1364,6 +1369,9 @@ function effectiveEmailEnforcement(g) {
   if (stage === "require_approval") {
     return g.enforcement === "enforce" ? "warn" : g.enforcement;
   }
+  if (stage === "enforce" && g.config?.["not_live_reason"] === "no_verified_domain") {
+    return g.enforcement === "enforce" ? "warn" : g.enforcement;
+  }
   return "log";
 }
 function buildGuardrailsSection(guardrails) {
@@ -5258,6 +5266,8 @@ var NOTICE_KIND_AUDIENCE = {
   aws_grant_denied: "agent",
   gcp_grant_resolved: "agent",
   gcp_grant_denied: "agent",
+  azure_grant_resolved: "agent",
+  azure_grant_denied: "agent",
   // HITL tool-call approvals: "Do NOT call this tool again, do NOT claim the
   // action happened, and do NOT poll".
   integration_invoke_resolved: "agent",
@@ -16836,4 +16846,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-JI2D2TA2.js.map
+//# sourceMappingURL=chunk-6J7WE4J4.js.map