@integrity-labs/agt-cli 0.28.1189 → 0.28.1191

package/dist/{chunk-GYY5LC6U.js → chunk-7T4CZ2NS.js}

@@ -1,6 +1,6 @@
 import {
   encodeClaudeProjectPath
-} from "./chunk-M5QY6SXB.js";
+} from "./chunk-GRU6GNLP.js";
 
 // src/lib/daily-session.ts
 import { randomUUID } from "crypto";
@@ -240,4 +240,4 @@ export {
   peekPreviousSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-GYY5LC6U.js.map
+//# sourceMappingURL=chunk-7T4CZ2NS.js.map

package/dist/{chunk-M5QY6SXB.js → chunk-GRU6GNLP.js}

@@ -1260,6 +1260,25 @@ var REQUIRE_APPROVAL_HOW = {
     `  \`check_approval\` says it is approved.`
   ]
 };
+var REQUIRE_APPROVAL_DELETE_SCOPE = [
+  `  What \`delete\` covers: removing anything that cannot be recovered or is not only`,
+  `  yours.`,
+  `  - work that exists only in your directory: uncommitted changes, unpushed commits,`,
+  `    stashes, customer documents, memory files;`,
+  `  - anything shared or outside your own agent directory: remote branches, databases,`,
+  `    other agents' files, \`/tmp\`;`,
+  `  - anything customers or the platform can see.`,
+  `  It does not cover your own rebuildable files, which need no approval: package caches,`,
+  `  build output, and your own scratch files under your agent directory (never \`/tmp\`,`,
+  `  which other agents share). A git worktree or local branch joins that group only`,
+  `  when you have checked, against the remote as it is now and at the moment you remove`,
+  `  it, that its tree is clean with ignored files included, there are no stashes, nothing`,
+  `  is unpushed, and it is merged into, or fully on a branch that still exists on, the`,
+  `  remote, and that it is not your base clone, has no open pull request, and is not in`,
+  `  use by a task of yours that is still in progress or waiting (the`,
+  `  \`reclaim-stale-worktrees\` skill, where your org has it, walks through these).`,
+  `  If you cannot check, or are unsure which list something is on, treat it as a delete.`
+];
 var REQUIRE_APPROVAL_EMAIL_DETAIL = [
   `  For an email, pass \`detail.email\` = { to, from, subject } so your manager sees who it`,
   `  goes to.`
@@ -1308,7 +1327,7 @@ function requireApprovalActions(config) {
   const raw = config?.["actions"];
   if (!Array.isArray(raw))
     return null;
-  const actions = raw.filter((a) => typeof a === "string" && a.trim() !== "").map((a) => a.trim());
+  const actions = raw.filter((a) => typeof a === "string" && a.trim() !== "").map((a) => a.trim().toLowerCase());
   return actions.length > 0 ? actions : null;
 }
 function requireApprovalHowLines(g, level, holds) {
@@ -1319,8 +1338,10 @@ function requireApprovalHowLines(g, level, holds) {
   const namesOther = actions === null || actions.some((a) => a !== REQUIRE_APPROVAL_EMAIL_ACTION);
   const asksAboutEmail = namesEmail && emailHold === null && domainHold === null;
   const ask = namesOther || asksAboutEmail || namesEmail && domainHold !== null;
+  const namesDelete = actions === null || actions.includes("delete");
   return [
     ...ask ? REQUIRE_APPROVAL_HOW[level] : [],
+    ...namesDelete ? REQUIRE_APPROVAL_DELETE_SCOPE : [],
     ...asksAboutEmail ? REQUIRE_APPROVAL_EMAIL_DETAIL : [],
     ...namesEmail && emailHold !== null ? requireApprovalEmailException(emailHold) : [],
     ...namesEmail && domainHold !== null ? requireApprovalDomainHoldException(domainHold.covered) : []
@@ -14366,6 +14387,9 @@ async function parseRpc2(res, expectedId) {
     return msg;
   return null;
 }
+function redactSentHeaders(text, headers) {
+  return Object.values(headers ?? {}).filter((value) => value.length >= 8).reduce((out, value) => out.split(value).join("[redacted]"), text);
+}
 async function probeComposioMcpToolCall(config, fetchImpl = fetch) {
   const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
   const baseHeaders = {
@@ -14440,8 +14464,9 @@ async function probeComposioMcpToolCall(config, fetchImpl = fetch) {
       const errText = callRpc?.["error"]?.message;
       const resContent = callRpc?.["result"]?.content;
       const raw = errText ?? (resContent ?? []).map((c) => c.text ?? "").join(" ").trim();
-      if (raw)
-        baseDetails.response = raw.length > 2e3 ? `${raw.slice(0, 2e3)}\u2026` : raw;
+      const response = redactSentHeaders(raw, config.headers);
+      if (response)
+        baseDetails.response = response.length > 2e3 ? `${response.slice(0, 2e3)}\u2026` : response;
     }
     const rpcErrMsg = callRpc && "error" in callRpc ? callRpc["error"]?.message ?? "" : "";
     const result = callRpc?.["result"];
@@ -14449,7 +14474,8 @@ async function probeComposioMcpToolCall(config, fetchImpl = fetch) {
     const failed = Boolean(rpcErrMsg) || Boolean(result?.isError) || isComposioFailureEnvelope(contentText2);
     if (failed) {
       const failureText = [rpcErrMsg, contentText2].filter(Boolean).join(" ");
-      const snippet = failureText.length > 200 ? `${failureText.slice(0, 200)}\u2026` : failureText;
+      const redactedFailure = redactSentHeaders(failureText, config.headers);
+      const snippet = redactedFailure.length > 200 ? `${redactedFailure.slice(0, 200)}\u2026` : redactedFailure;
       const kind = classifyToolCallFailure(failureText);
       if (kind === "account") {
         return {
@@ -17585,4 +17611,4 @@ export {
   isForcedUpdatePastDeadline,
   shouldMintReplacementKey
 };
-//# sourceMappingURL=chunk-M5QY6SXB.js.map
+//# sourceMappingURL=chunk-GRU6GNLP.js.map