@integrity-labs/agt-cli 0.28.306 → 0.28.307

package/dist/bin/agt.js

@@ -38,7 +38,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-2EHOMRDS.js";
+} from "../chunk-BV55I3J5.js";
 import {
   CHANNEL_REGISTRY,
   DEFAULT_FRAMEWORK,
@@ -67,7 +67,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-A546IARM.js";
+} from "../chunk-QVYGYEBX.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4826,7 +4826,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.306" : "dev";
+var cliVersion = true ? "0.28.307" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5843,7 +5843,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.306" : "dev";
+var cliVersion2 = true ? "0.28.307" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-2EHOMRDS.js → chunk-BV55I3J5.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-A546IARM.js";
+} from "./chunk-QVYGYEBX.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -991,9 +991,20 @@ function renderGuardrailBullet(g) {
     lines.push(`  ${g.description.trim()}`);
   }
   lines.push(...g.definitionId === EMAIL_DOMAIN_RESTRICT_DEF ? formatEmailDomainConfigLines(g.config) : g.definitionId === CALENDAR_CONFIDENTIALITY_DEF ? formatCalendarConfidentialityLines(g.config) : formatConfigLines(g.config));
-  if (g.overrideApplied && g.overrideReason?.trim()) {
-    lines.push(`  *Override applied: ${g.overrideReason.trim()}*`);
+  return lines.join("\n");
+}
+function renderOverriddenGuardrailBullet(g) {
+  const reason = g.overrideReason?.trim() ?? "";
+  const lines = [`- **${g.displayName}** (${g.category}, from ${g.source})`];
+  if (g.enforcement === "disabled") {
+    lines.push(`  **This guardrail has been lifted by an approved operator override and no longer applies to you.**` + (reason ? ` Reason: ${reason}.` : "") + ` You are not bound by the original restriction.`);
+    return lines.join("\n");
   }
+  lines.push(`  **An approved operator override applies to this policy and takes precedence over the original restriction.**` + (reason ? ` Reason: ${reason}.` : "") + ` Follow the policy exactly as written below; it already reflects this exception. Do not re-impose the original restriction or refuse on its basis.`);
+  if (g.description?.trim()) {
+    lines.push(`  ${g.description.trim()}`);
+  }
+  lines.push(...g.definitionId === EMAIL_DOMAIN_RESTRICT_DEF ? formatEmailDomainConfigLines(g.config) : g.definitionId === CALENDAR_CONFIDENTIALITY_DEF ? formatCalendarConfidentialityLines(g.config) : formatConfigLines(g.config));
   return lines.join("\n");
 }
 function effectiveCalendarEnforcement(g) {
@@ -1009,12 +1020,15 @@ function effectiveCalendarEnforcement(g) {
 function buildGuardrailsSection(guardrails) {
   if (!guardrails || guardrails.length === 0)
     return "";
-  const active = guardrails.map((g) => ({ ...g, enforcement: effectiveCalendarEnforcement(g) })).filter((g) => g.enforcement !== "disabled");
+  const active = guardrails.map((g) => ({ ...g, enforcement: effectiveCalendarEnforcement(g) })).filter((g) => g.enforcement !== "disabled" || !!(g.overrideApplied && g.overrideReason?.trim()));
   if (active.length === 0)
     return "";
-  const enforce = active.filter((g) => g.enforcement === "enforce");
-  const warn2 = active.filter((g) => g.enforcement === "warn");
-  const logOnly = active.filter((g) => g.enforcement === "log");
+  const isOverridden = (g) => !!(g.overrideApplied && g.overrideReason?.trim());
+  const overridden = active.filter(isOverridden);
+  const normal = active.filter((g) => !isOverridden(g));
+  const enforce = normal.filter((g) => g.enforcement === "enforce");
+  const warn2 = normal.filter((g) => g.enforcement === "warn");
+  const logOnly = normal.filter((g) => g.enforcement === "log");
   const blocks = [
     `## Guardrails`,
     ``,
@@ -1036,6 +1050,10 @@ function buildGuardrailsSection(guardrails) {
     blocks.push(``, `### Logged (observability only)`, ``);
     blocks.push(logOnly.map(renderGuardrailBullet).join("\n"));
   }
+  if (overridden.length > 0) {
+    blocks.push(``, `### Approved exceptions (an operator override applies - follow the adjusted policy)`, ``);
+    blocks.push(overridden.map(renderOverriddenGuardrailBullet).join("\n"));
+  }
   return blocks.join("\n") + "\n";
 }
 function generateClaudeMd(input) {
@@ -5882,7 +5900,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.306" : "dev";
+var agtCliVersion = true ? "0.28.307" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -8181,4 +8199,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-2EHOMRDS.js.map
+//# sourceMappingURL=chunk-BV55I3J5.js.map