@integrity-labs/agt-cli 0.28.359 → 0.28.360

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-TVFNWNSP.js";
+} from "../chunk-U62E42YH.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -70,7 +70,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-FAGXXKWZ.js";
+} from "../chunk-Z7QR2YEJ.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4829,7 +4829,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.359" : "dev";
+var cliVersion = true ? "0.28.360" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6001,7 +6001,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.359" : "dev";
+var cliVersion2 = true ? "0.28.360" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-TVFNWNSP.js → chunk-U62E42YH.js}

@@ -20,7 +20,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-FAGXXKWZ.js";
+} from "./chunk-Z7QR2YEJ.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -7226,7 +7226,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.359" : "dev";
+var agtCliVersion = true ? "0.28.360" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -9679,4 +9679,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-TVFNWNSP.js.map
+//# sourceMappingURL=chunk-U62E42YH.js.map

package/dist/{chunk-FAGXXKWZ.js → chunk-Z7QR2YEJ.js}

@@ -8224,6 +8224,19 @@ var FLAG_REGISTRY = [
     // deliberate, audited per-org flip (ADR-0022 §4).
     sensitive: true
   },
+  {
+    key: "email-guard-require-approval-enabled",
+    description: "Platform enable-gate for the email-domain guardrail REQUIRE_APPROVAL stage (ENG-7939). When ON for an org, a scope at email_guard_stage=require_approval routes a send to a non-allowed domain into Human Approval (an Approve/Deny card) instead of a hard block: the rollout UI unlocks the option and the write routes accept require_approval. When OFF (default) the write routes reject require_approval and the UI shows it as not yet available, so no scope can select it. Structurally also depends on hitl-approval-routing being on (the approval broker fails closed to a hard block when routing is off). Evaluated per-org. Ships dark.",
+    flagType: "boolean",
+    // Declared safe value is `false` (require_approval is unselectable / inert). A flag-DB read
+    // error degrades here, so a flags outage can never start routing customer email through a
+    // half-wired approval path - the fail-closed direction. No envVar: net-new control with no
+    // pre-flags env gate to migrate (ADR-0022).
+    defaultValue: false,
+    // Ungates a stage that changes how real customer email is handled (block becomes approval),
+    // so it is a deliberate, audited per-org flip (ADR-0022 §4).
+    sensitive: true
+  },
   {
     key: "slack-reply-binding",
     description: "Slack reply-target binding (ENG-7396 / WS2, cross-thread reply routing): the model names which inbound it answers (inbound_id) and the server resolves the destination from its own verified record. shadow = classify + count only, routing unchanged; warn = same routing plus a tool-result note so the model self-corrects; enforce = route a bound reply to the registry thread and REJECT a reply whose target matches no inbound this process delivered. The channel server can't evaluate flags, so the manager materializes the resolved value into the AGT_SLACK_REPLY_BINDING spawn env (the operator/canary override, ADR-0022). Ships shadow.",
@@ -10187,4 +10200,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-FAGXXKWZ.js.map
+//# sourceMappingURL=chunk-Z7QR2YEJ.js.map