@integrity-labs/agt-cli 0.28.1190 → 0.28.1191

package/dist/bin/agt.js

@@ -40,17 +40,17 @@ import {
   success,
   table,
   warn
-} from "../chunk-NVLV6XHL.js";
+} from "../chunk-5RDPFXWO.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-EFTLDAKN.js";
+} from "../chunk-L5BWZX3Z.js";
 import {
   markDailySessionSpawn,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-KV6ZNGTG.js";
+} from "../chunk-7T4CZ2NS.js";
 import "../chunk-OO36JBFI.js";
 import "../chunk-6HBXEJHO.js";
 import "../chunk-XWVM4KPK.js";
@@ -83,7 +83,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-7GZKHF45.js";
+} from "../chunk-GRU6GNLP.js";
 import "../chunk-AIUIMEUS.js";
 import "../chunk-DGUM43GV.js";
 
@@ -5200,7 +5200,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk17 from "chalk";
 import ora15 from "ora";
-var cliVersion = true ? "0.28.1190" : "dev";
+var cliVersion = true ? "0.28.1191" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6460,7 +6460,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1190" : "dev";
+var cliVersion2 = true ? "0.28.1191" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-NVLV6XHL.js → chunk-5RDPFXWO.js}

@@ -16,11 +16,11 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-EFTLDAKN.js";
+} from "./chunk-L5BWZX3Z.js";
 import {
   readDailySessionPin,
   sessionTranscriptDir
-} from "./chunk-KV6ZNGTG.js";
+} from "./chunk-7T4CZ2NS.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -91,7 +91,7 @@ import {
   scanConfigForLiteralSecrets,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-7GZKHF45.js";
+} from "./chunk-GRU6GNLP.js";
 import {
   claudeJsonPathFor,
   effectiveClaudeJsonPath,
@@ -8079,7 +8079,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1190" : "dev";
+var agtCliVersion = true ? "0.28.1191" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -13647,4 +13647,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-NVLV6XHL.js.map
+//# sourceMappingURL=chunk-5RDPFXWO.js.map

package/dist/{chunk-KV6ZNGTG.js → chunk-7T4CZ2NS.js}

@@ -1,6 +1,6 @@
 import {
   encodeClaudeProjectPath
-} from "./chunk-7GZKHF45.js";
+} from "./chunk-GRU6GNLP.js";
 
 // src/lib/daily-session.ts
 import { randomUUID } from "crypto";
@@ -240,4 +240,4 @@ export {
   peekPreviousSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-KV6ZNGTG.js.map
+//# sourceMappingURL=chunk-7T4CZ2NS.js.map

package/dist/{chunk-7GZKHF45.js → chunk-GRU6GNLP.js}

@@ -1260,6 +1260,25 @@ var REQUIRE_APPROVAL_HOW = {
     `  \`check_approval\` says it is approved.`
   ]
 };
+var REQUIRE_APPROVAL_DELETE_SCOPE = [
+  `  What \`delete\` covers: removing anything that cannot be recovered or is not only`,
+  `  yours.`,
+  `  - work that exists only in your directory: uncommitted changes, unpushed commits,`,
+  `    stashes, customer documents, memory files;`,
+  `  - anything shared or outside your own agent directory: remote branches, databases,`,
+  `    other agents' files, \`/tmp\`;`,
+  `  - anything customers or the platform can see.`,
+  `  It does not cover your own rebuildable files, which need no approval: package caches,`,
+  `  build output, and your own scratch files under your agent directory (never \`/tmp\`,`,
+  `  which other agents share). A git worktree or local branch joins that group only`,
+  `  when you have checked, against the remote as it is now and at the moment you remove`,
+  `  it, that its tree is clean with ignored files included, there are no stashes, nothing`,
+  `  is unpushed, and it is merged into, or fully on a branch that still exists on, the`,
+  `  remote, and that it is not your base clone, has no open pull request, and is not in`,
+  `  use by a task of yours that is still in progress or waiting (the`,
+  `  \`reclaim-stale-worktrees\` skill, where your org has it, walks through these).`,
+  `  If you cannot check, or are unsure which list something is on, treat it as a delete.`
+];
 var REQUIRE_APPROVAL_EMAIL_DETAIL = [
   `  For an email, pass \`detail.email\` = { to, from, subject } so your manager sees who it`,
   `  goes to.`
@@ -1308,7 +1327,7 @@ function requireApprovalActions(config) {
   const raw = config?.["actions"];
   if (!Array.isArray(raw))
     return null;
-  const actions = raw.filter((a) => typeof a === "string" && a.trim() !== "").map((a) => a.trim());
+  const actions = raw.filter((a) => typeof a === "string" && a.trim() !== "").map((a) => a.trim().toLowerCase());
   return actions.length > 0 ? actions : null;
 }
 function requireApprovalHowLines(g, level, holds) {
@@ -1319,8 +1338,10 @@ function requireApprovalHowLines(g, level, holds) {
   const namesOther = actions === null || actions.some((a) => a !== REQUIRE_APPROVAL_EMAIL_ACTION);
   const asksAboutEmail = namesEmail && emailHold === null && domainHold === null;
   const ask = namesOther || asksAboutEmail || namesEmail && domainHold !== null;
+  const namesDelete = actions === null || actions.includes("delete");
   return [
     ...ask ? REQUIRE_APPROVAL_HOW[level] : [],
+    ...namesDelete ? REQUIRE_APPROVAL_DELETE_SCOPE : [],
     ...asksAboutEmail ? REQUIRE_APPROVAL_EMAIL_DETAIL : [],
     ...namesEmail && emailHold !== null ? requireApprovalEmailException(emailHold) : [],
     ...namesEmail && domainHold !== null ? requireApprovalDomainHoldException(domainHold.covered) : []
@@ -17590,4 +17611,4 @@ export {
   isForcedUpdatePastDeadline,
   shouldMintReplacementKey
 };
-//# sourceMappingURL=chunk-7GZKHF45.js.map
+//# sourceMappingURL=chunk-GRU6GNLP.js.map