@integrity-labs/agt-cli 0.28.541 → 0.28.543

package/dist/bin/agt.js

@@ -40,7 +40,7 @@ import {
   success,
   table,
   warn
-} from "../chunk-JQNSKZIC.js";
+} from "../chunk-VGOV5SSL.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -71,7 +71,7 @@ import {
   requiredMcpWildcard,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-F63RM2RQ.js";
+} from "../chunk-QDCKLUU7.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4834,7 +4834,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.541" : "dev";
+var cliVersion = true ? "0.28.543" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6006,7 +6006,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.541" : "dev";
+var cliVersion2 = true ? "0.28.543" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-F63RM2RQ.js → chunk-QDCKLUU7.js}

@@ -3558,9 +3558,10 @@ function formatEmailDomainConfigLines(config) {
   }
   const stage = typeof config.stage === "string" ? config.stage : void 0;
   const enforceLive = config.enforce_live === true;
+  const approvalLive = config.approval_live === true;
   if (stage) {
     lines.push(`  - stage: ${stage}`);
-    if (stage === "require_approval") {
+    if (stage === "require_approval" && approvalLive) {
       lines.push(`  *Human approval: sending to a non-allowed domain is allowed but held for a person to approve. You MUST attempt the send as you normally would - do NOT refuse it and do NOT tell the user to send it themselves. The platform automatically holds the send and routes it to an approver (an Approve/Deny card); it executes if approved, is blocked if denied, and you are told the outcome. Just send; the approval is handled for you.*`);
     } else if (!(stage === "enforce" && enforceLive)) {
       lines.push(`  *Currently observe-only: the API records domain decisions to guardrail_audit_log but does not block sends at this stage. Honor the restriction as authoritative guidance; the runtime flip is operator-side.*`);
@@ -3627,8 +3628,9 @@ function effectiveEmailEnforcement(g) {
     return g.enforcement;
   if (stage === "warn")
     return g.enforcement === "enforce" ? "warn" : g.enforcement;
-  if (stage === "require_approval")
+  if (stage === "require_approval" && g.config?.["approval_live"] === true) {
     return g.enforcement === "enforce" ? "warn" : g.enforcement;
+  }
   return "log";
 }
 function buildGuardrailsSection(guardrails) {
@@ -15692,4 +15694,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-F63RM2RQ.js.map
+//# sourceMappingURL=chunk-QDCKLUU7.js.map