@integrity-labs/agt-cli 0.10.12 → 0.10.14

package/dist/bin/agt.js

@@ -2934,9 +2934,26 @@ function detectShellProfile() {
   if (existsSync4(bashrc)) return bashrc;
   return join10(home, ".bash_profile");
 }
-function maybeWriteEtcEnvironment(apiUrl, apiKey) {
-  if (process.platform === "win32") return false;
-  if (typeof process.getuid !== "function" || process.getuid() !== 0) return false;
+function maybeWriteSystemWideEnv(apiUrl, apiKey) {
+  const empty = { etcEnvironment: false, profileD: false, bashrc: false };
+  if (process.platform === "win32") return empty;
+  if (typeof process.getuid !== "function" || process.getuid() !== 0) return empty;
+  return {
+    etcEnvironment: writeEtcEnvironment(apiUrl, apiKey),
+    profileD: writeProfileDScript(apiUrl, apiKey),
+    // Run for its side-effect (wiring /etc/bashrc to source agt.sh) but
+    // treat it as a supporting channel, not proof that env values were
+    // persisted. Success reporting should reflect actual value writes.
+    bashrc: ensureBashrcSourcesProfileD()
+  };
+}
+function quoteForEtcEnvironment(value) {
+  return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\r?\n/g, "\\n")}"`;
+}
+function quoteForPosixShell(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function writeEtcEnvironment(apiUrl, apiKey) {
   const envPath = "/etc/environment";
   if (!existsSync4(envPath)) return false;
   try {
@@ -2949,8 +2966,8 @@ function maybeWriteEtcEnvironment(apiUrl, apiKey) {
     const stripped = current.split(/\r?\n/).filter((line) => !/^\s*(?:export\s+)?AGT_(?:HOST|API_KEY)=/.test(line)).join("\n");
     const base = stripped.endsWith("\n") || stripped.length === 0 ? stripped : `${stripped}
 `;
-    const appended = `${base}AGT_HOST="${apiUrl}"
-AGT_API_KEY="${apiKey}"
+    const appended = `${base}AGT_HOST=${quoteForEtcEnvironment(apiUrl)}
+AGT_API_KEY=${quoteForEtcEnvironment(apiKey)}
 `;
     writeFileSync5(envPath, appended, { mode: 420 });
     return true;
@@ -2958,6 +2975,54 @@ AGT_API_KEY="${apiKey}"
     return false;
   }
 }
+function writeProfileDScript(apiUrl, apiKey) {
+  const profileD = "/etc/profile.d";
+  if (!existsSync4(profileD)) return false;
+  try {
+    accessSync(profileD, fsConstants.W_OK);
+  } catch {
+    return false;
+  }
+  try {
+    const scriptPath = `${profileD}/agt.sh`;
+    const content = [
+      "# Augmented \u2014 auto-generated by `agt setup`. Do not edit.",
+      `export AGT_HOST=${quoteForPosixShell(apiUrl)}`,
+      `export AGT_API_KEY=${quoteForPosixShell(apiKey)}`,
+      ""
+    ].join("\n");
+    writeFileSync5(scriptPath, content, { mode: 420 });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function ensureBashrcSourcesProfileD() {
+  const bashrc = "/etc/bashrc";
+  if (!existsSync4(bashrc)) return false;
+  try {
+    accessSync(bashrc, fsConstants.W_OK);
+  } catch {
+    return false;
+  }
+  try {
+    const current = readFileSync4(bashrc, "utf-8");
+    const marker = "# Augmented (agt) \u2014 source system-wide AGT env";
+    if (current.includes(marker)) return true;
+    const snippet = [
+      "",
+      marker,
+      "if [ -r /etc/profile.d/agt.sh ]; then",
+      "  . /etc/profile.d/agt.sh",
+      "fi",
+      ""
+    ].join("\n");
+    writeFileSync5(bashrc, current + snippet);
+    return true;
+  } catch {
+    return false;
+  }
+}
 function buildExportLines(shell, apiUrl, apiKey) {
   if (shell.includes("fish")) {
     return [
@@ -3077,9 +3142,15 @@ async function setupCommand(token) {
   if (!json) {
     success(`Environment variables written to ${chalk18.bold(profilePath)}`);
   }
-  const envWritten = maybeWriteEtcEnvironment(finalApiUrl, setupResult.api_key);
-  if (!json && envWritten) {
-    success(`System-wide env written to ${chalk18.bold("/etc/environment")}`);
+  const sys = maybeWriteSystemWideEnv(finalApiUrl, setupResult.api_key);
+  const valueChannelsWritten = sys.etcEnvironment || sys.profileD;
+  if (!json && valueChannelsWritten) {
+    const channels2 = [
+      sys.etcEnvironment ? "/etc/environment" : null,
+      sys.profileD ? "/etc/profile.d/agt.sh" : null,
+      sys.bashrc ? "/etc/bashrc" : null
+    ].filter(Boolean).join(" + ");
+    success(`System-wide env updated: ${channels2}`);
   }
   const managerSpinner = ora13({ text: "Starting manager daemon\u2026", isSilent: json });
   managerSpinner.start();
@@ -3634,7 +3705,7 @@ async function acpxCloseCommand(agent2, _opts, cmd) {
 import { execSync } from "child_process";
 import chalk20 from "chalk";
 import ora15 from "ora";
-var cliVersion = true ? "0.10.12" : "dev";
+var cliVersion = true ? "0.10.14" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4033,7 +4104,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.10.12" : "dev";
+var cliVersion2 = true ? "0.10.14" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {