@integrity-labs/agt-cli 0.28.72 → 0.28.73

package/dist/{chunk-Z2BMTZQK.js → chunk-PXMYLQWB.js}

@@ -1039,6 +1039,18 @@ var FLAG_REGISTRY = [
     // approval requests; flipping it is a capability change worth confirming.
     sensitive: true
   },
+  {
+    key: "approval-sod",
+    description: "Separation-of-duties (SoD) guard for the HITL approval FSM (ENG-6459): off = disabled, shadow = resolve principals + audit conflicts only (no block), enforce = fail-closed refuse of a self-approval or an unresolvable approver. Compares approver vs requesting-human on a canonical organization_people.person_id. Ships dark (off); soak in shadow before enforce.",
+    flagType: "enum",
+    allowedValues: ["off", "shadow", "enforce"],
+    defaultValue: "off",
+    envVar: "AGT_APPROVAL_SOD_MODE",
+    // Access-control gate: flipping to enforce can REFUSE approvals (incl. a
+    // legitimate approver whose Slack id isn't linked to a person row), so it
+    // must soak in shadow first and is worth confirming on mutation.
+    sensitive: true
+  },
   {
     key: "direct-chat-doorbell",
     description: "Direct-chat doorbell + pull-cursor delivery (ENG-5927, ADR-0020): the manager rings a content-free doorbell and the agent's in-session MCP pulls via the capped /host/direct-chat/poll claim, replacing send-keys/one-shot delivery. Boolean gate; ships dark.",
@@ -5563,4 +5575,4 @@ export {
   parseEnvIntegrations,
   probeMcpEnvSubstitution
 };
-//# sourceMappingURL=chunk-Z2BMTZQK.js.map
+//# sourceMappingURL=chunk-PXMYLQWB.js.map