@integrity-labs/agt-cli 0.10.13 → 0.10.14

package/dist/bin/agt.js

@@ -2935,13 +2935,23 @@ function detectShellProfile() {
   return join10(home, ".bash_profile");
 }
 function maybeWriteSystemWideEnv(apiUrl, apiKey) {
-  if (process.platform === "win32") return false;
-  if (typeof process.getuid !== "function" || process.getuid() !== 0) return false;
-  let wrote = false;
-  wrote = writeEtcEnvironment(apiUrl, apiKey) || wrote;
-  wrote = writeProfileDScript(apiUrl, apiKey) || wrote;
-  wrote = ensureBashrcSourcesProfileD() || wrote;
-  return wrote;
+  const empty = { etcEnvironment: false, profileD: false, bashrc: false };
+  if (process.platform === "win32") return empty;
+  if (typeof process.getuid !== "function" || process.getuid() !== 0) return empty;
+  return {
+    etcEnvironment: writeEtcEnvironment(apiUrl, apiKey),
+    profileD: writeProfileDScript(apiUrl, apiKey),
+    // Run for its side-effect (wiring /etc/bashrc to source agt.sh) but
+    // treat it as a supporting channel, not proof that env values were
+    // persisted. Success reporting should reflect actual value writes.
+    bashrc: ensureBashrcSourcesProfileD()
+  };
+}
+function quoteForEtcEnvironment(value) {
+  return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\r?\n/g, "\\n")}"`;
+}
+function quoteForPosixShell(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 function writeEtcEnvironment(apiUrl, apiKey) {
   const envPath = "/etc/environment";
@@ -2956,8 +2966,8 @@ function writeEtcEnvironment(apiUrl, apiKey) {
     const stripped = current.split(/\r?\n/).filter((line) => !/^\s*(?:export\s+)?AGT_(?:HOST|API_KEY)=/.test(line)).join("\n");
     const base = stripped.endsWith("\n") || stripped.length === 0 ? stripped : `${stripped}
 `;
-    const appended = `${base}AGT_HOST="${apiUrl}"
-AGT_API_KEY="${apiKey}"
+    const appended = `${base}AGT_HOST=${quoteForEtcEnvironment(apiUrl)}
+AGT_API_KEY=${quoteForEtcEnvironment(apiKey)}
 `;
     writeFileSync5(envPath, appended, { mode: 420 });
     return true;
@@ -2977,8 +2987,8 @@ function writeProfileDScript(apiUrl, apiKey) {
     const scriptPath = `${profileD}/agt.sh`;
     const content = [
       "# Augmented \u2014 auto-generated by `agt setup`. Do not edit.",
-      `export AGT_HOST="${apiUrl}"`,
-      `export AGT_API_KEY="${apiKey}"`,
+      `export AGT_HOST=${quoteForPosixShell(apiUrl)}`,
+      `export AGT_API_KEY=${quoteForPosixShell(apiKey)}`,
       ""
     ].join("\n");
     writeFileSync5(scriptPath, content, { mode: 420 });
@@ -3132,9 +3142,15 @@ async function setupCommand(token) {
   if (!json) {
     success(`Environment variables written to ${chalk18.bold(profilePath)}`);
   }
-  const envWritten = maybeWriteSystemWideEnv(finalApiUrl, setupResult.api_key);
-  if (!json && envWritten) {
-    success("System-wide env written to /etc/environment + /etc/profile.d/agt.sh");
+  const sys = maybeWriteSystemWideEnv(finalApiUrl, setupResult.api_key);
+  const valueChannelsWritten = sys.etcEnvironment || sys.profileD;
+  if (!json && valueChannelsWritten) {
+    const channels2 = [
+      sys.etcEnvironment ? "/etc/environment" : null,
+      sys.profileD ? "/etc/profile.d/agt.sh" : null,
+      sys.bashrc ? "/etc/bashrc" : null
+    ].filter(Boolean).join(" + ");
+    success(`System-wide env updated: ${channels2}`);
   }
   const managerSpinner = ora13({ text: "Starting manager daemon\u2026", isSilent: json });
   managerSpinner.start();
@@ -3689,7 +3705,7 @@ async function acpxCloseCommand(agent2, _opts, cmd) {
 import { execSync } from "child_process";
 import chalk20 from "chalk";
 import ora15 from "ora";
-var cliVersion = true ? "0.10.13" : "dev";
+var cliVersion = true ? "0.10.14" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4088,7 +4104,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.10.13" : "dev";
+var cliVersion2 = true ? "0.10.14" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {