@integrity-labs/agt-cli 0.28.343 → 0.28.344

package/dist/mcp/origami.js

@@ -40489,6 +40489,18 @@ var FLAG_REGISTRY = [
     // flipping it on is worth an explicit confirm (ADR-0022 §4).
     sensitive: true
   },
+  {
+    key: "email-guard-enforce-enabled",
+    description: "Platform enable-gate for the email-domain guardrail ENFORCE stage (ENG-5827 / A5, migrated to a flag under ENG-7899 / ADR-0022). When ON for an org, an org (or scope) at email_guard_stage=enforce actually BLOCKS sends to non-allowed domains: the rollout UI unlocks the Enforce option and PUT /email-guard accepts enforce. When OFF (default) a per-org enforce stage degrades to observe-only (would_block, never blocks) and the UI shows Enforce as not yet available. Ungates a control that blocks real customer email, so flip on per org only once block-spike alerting (ENG-5847) is firing. Evaluated per-org. Operator override: env EMAIL_DOMAIN_ENFORCE_ENABLED (an explicitly-set value wins over the flag; highest precedence per host). Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false` (enforce degrades to observe-only = today's behaviour).
+    // A flag-DB read error degrades here, so a flags outage can never silently start blocking
+    // real email - the fail-closed direction for a blocking compliance control.
+    defaultValue: false,
+    // Flipping it on ARMS a control that blocks real customer email, so it is a
+    // deliberate, audited per-org flip (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "slack-reply-binding",
     description: "Slack reply-target binding (ENG-7396 / WS2, cross-thread reply routing): the model names which inbound it answers (inbound_id) and the server resolves the destination from its own verified record. shadow = classify + count only, routing unchanged; warn = same routing plus a tool-result note so the model self-corrects; enforce = route a bound reply to the registry thread and REJECT a reply whose target matches no inbound this process delivered. The channel server can't evaluate flags, so the manager materializes the resolved value into the AGT_SLACK_REPLY_BINDING spawn env (the operator/canary override, ADR-0022). Ships shadow.",

package/dist/{persistent-session-XWJSAZB4.js → persistent-session-IDWQO7QL.js}

@@ -36,7 +36,7 @@ import {
   writeDirectChatSessionState,
   writeEgressAllowlist,
   writePersistentClaudeWrapper
-} from "./chunk-7OBFGSQS.js";
+} from "./chunk-7MP37HYR.js";
 import "./chunk-XWVM4KPK.js";
 export {
   EGRESS_BASELINE_DOMAINS,
@@ -77,4 +77,4 @@ export {
   writeEgressAllowlist,
   writePersistentClaudeWrapper
 };
-//# sourceMappingURL=persistent-session-XWJSAZB4.js.map
+//# sourceMappingURL=persistent-session-IDWQO7QL.js.map

package/dist/{responsiveness-probe-XLS2FXIX.js → responsiveness-probe-WF3SMLS6.js}

@@ -1,6 +1,6 @@
 import {
   paneLogPath
-} from "./chunk-7OBFGSQS.js";
+} from "./chunk-7MP37HYR.js";
 import "./chunk-XWVM4KPK.js";
 
 // src/lib/responsiveness-probe.ts
@@ -437,4 +437,4 @@ export {
   readAndResetSlackReplyBindingClassifications,
   readAndResetSlackReplyTargetClassifications
 };
-//# sourceMappingURL=responsiveness-probe-XLS2FXIX.js.map
+//# sourceMappingURL=responsiveness-probe-WF3SMLS6.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.28.343",
+  "version": "0.28.344",
   "description": "Augmented Team CLI — agent provisioning and management",
   "type": "module",
   "engines": {