@integrity-labs/agt-cli 0.28.357 → 0.28.358

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-GAWEPU6C.js";
+} from "../chunk-OUHANHOH.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -70,7 +70,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-LDIKBFDR.js";
+} from "../chunk-HTBXOXPI.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.357" : "dev";
+var cliVersion = true ? "0.28.358" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.357" : "dev";
+var cliVersion2 = true ? "0.28.358" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-LDIKBFDR.js → chunk-HTBXOXPI.js}

@@ -8152,7 +8152,7 @@ var FLAG_REGISTRY = [
   },
   {
     key: "composio-hitl-mode",
-    description: "Composio managed-toolkits HITL gate (ENG-6027): off = kill switch, shadow = resolve + audit the tier decision but never block, enforce = block write_high_risk+ calls (routed to approval when hitl-approval-routing is on). Per-org rollout from the admin Feature Flags page; ENG-7672 migrated this off the fleet-wide COMPOSIO_HITL_MODE env var.",
+    description: "Composio managed-toolkits HITL gate (ENG-6027): off = kill switch, shadow = resolve + audit the tier decision but never block, enforce = block write_high_risk+ calls and route them to Human Approval (an Approve/Deny card). Since ENG-7828 enforce ALWAYS routes to a Human Approval card by default; set hitl-approval-routing=off to make enforce a hard block with no approval instead. Per-org rollout from the admin Feature Flags page; ENG-7672 migrated this off the fleet-wide COMPOSIO_HITL_MODE env var.",
     flagType: "enum",
     allowedValues: ["off", "shadow", "enforce"],
     // Declared safe value is `shadow` (resolve + audit, never block) — NOT `off`.
@@ -8171,18 +8171,23 @@ var FLAG_REGISTRY = [
   },
   {
     key: "hitl-approval-routing",
-    description: "Routing for HITL-blocked integration calls (ENG-6028): off = blocked calls return the terminal block, on = route them into the approval-core flow (approval_requests row + Slack approval card). Needs a block first (composio-hitl-mode=enforce, or the always-on Direct-HTTP lane). Per-org rollout; ENG-7672 migrated this off the fleet-wide HITL_APPROVAL_ROUTING env var.",
+    description: "Routing for HITL-blocked integration calls (ENG-6028, ENG-7828): on (default) = route a blocked call into the Human Approval flow (an approval_requests row + an Approve/Deny card on Slack/Telegram, or a structured reply-to-approve prompt on channels with no buttons). off = kill switch: the blocked call hard-stops with an honest terminal block and NO approval is offered, for an org/agent that must never send even with approval. Needs a block first (composio-hitl-mode=enforce, or the always-on Direct-HTTP lane). ENG-7828 flipped the default from off to on so an org at enforce always produces a Human Approval card instead of a prose dead-end. Per-org rollout; ENG-7672 migrated this off the fleet-wide HITL_APPROVAL_ROUTING env var.",
     flagType: "enum",
     allowedValues: ["off", "on"],
-    // Declared safe value is `off` (terminal block, no new side effects) — the
-    // most-restrictive-known state, matching the pre-flag default. A flag-DB read
-    // error degrades here.
-    defaultValue: "off",
+    // Steady-state default is `on` (ENG-7828): an org at composio-hitl-mode=enforce routes
+    // blocked calls to a Human Approval card rather than dead-ending in prose. `off` is the
+    // explicit operator kill switch (honest hard block, nothing executes) for "never send,
+    // even with approval". NOTE the split from the DB-READ-ERROR fallback:
+    // resolveHitlApprovalRoutingMode still degrades to `off` when it cannot READ the flag
+    // (the conservative direction when the value is unknown), which is distinct from this
+    // absent-override default of `on`. Either way the call is blocked; only card-vs-terminal
+    // differs, so degrading to `off` never leaks a send.
+    defaultValue: "on",
     // Migration override (ADR-0022): only injected onto the Lambdas when an operator
     // explicitly sets it (sst.config.ts) — otherwise this flag governs.
     envVar: "HITL_APPROVAL_ROUTING",
-    // Turning routing on starts minting approval cards / approval_requests rows — an
-    // egress + workflow change worth an explicit confirm.
+    // Flipping this to `off` disables the Human Approval card for enforce-blocked calls
+    // (hard block instead), a policy change worth an explicit confirm.
     sensitive: true
   },
   {
@@ -10172,4 +10177,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-LDIKBFDR.js.map
+//# sourceMappingURL=chunk-HTBXOXPI.js.map