@integrity-labs/agt-cli 0.28.746 → 0.28.747

package/dist/bin/agt.js

@@ -41,12 +41,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-EQMRNMLX.js";
+} from "../chunk-OYASDDR4.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-4JHG7DJW.js";
+} from "../chunk-R35LZDRH.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-PD3Y3C46.js";
+} from "../chunk-62TAD4HO.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -5467,7 +5467,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.746" : "dev";
+var cliVersion = true ? "0.28.747" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6654,7 +6654,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.746" : "dev";
+var cliVersion2 = true ? "0.28.747" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-PD3Y3C46.js → chunk-62TAD4HO.js}

@@ -4808,6 +4808,21 @@ var FLAG_REGISTRY = [
     // approval requests; flipping it is a capability change worth confirming.
     sensitive: true
   },
+  {
+    key: "agent-self-pause",
+    description: "CS-1632: let an agent stop ITSELF via the self_pause tool when it believes its channel is compromised or is being used to inject instructions. Writes agents.status=paused with paused_reason=agent_self_pause, and only a human can resume from the console. DEFAULTS ON, unlike most gates here: a safety control that has to be armed in advance is missing on every agent nobody armed, including the one being attacked. Turn it OFF per org if an agent misuses it \u2014 that is the reverse lever, and it is instant and central, which a host env var would not be. NO envVar: the consumer is the API route, and a bare AGT_*_ENABLED gate would trip check-new-env-gates.sh (same reasoning as v2-writes above).",
+    flagType: "boolean",
+    // Declared safe value is TRUE, and that inverts the usual posture on purpose.
+    // For most gates the safe default is "off, ships dark". Here OFF means an
+    // agent under a suspected compromise cannot stop, so a flag-read error must
+    // NOT disable the control — the route evaluates this fail-OPEN.
+    defaultValue: true,
+    // Turning it off removes an agent's ability to stop itself during an
+    // injection attempt; turning it on grants a (possibly prompt-injected) agent
+    // a denial-of-service primitive against itself. Both directions are a
+    // capability change worth confirming.
+    sensitive: true
+  },
   {
     key: "approval-sod",
     description: "Separation-of-duties (SoD) guard for the HITL approval FSM (ENG-6459): off = disabled, shadow = resolve principals + audit conflicts only (no block), enforce = fail-closed refuse of a self-approval or an unresolvable approver. Compares approver vs requesting-human on a canonical organization_people.person_id. This is the org-wide DEFAULT; a per-(team, verb) approval_policies.sod_mode row overrides it (ENG-6678: relax low-risk verbs while keeping enforce on money verbs). Ships dark (off); soak in shadow before enforce.",
@@ -13037,4 +13052,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-PD3Y3C46.js.map
+//# sourceMappingURL=chunk-62TAD4HO.js.map