@integrity-labs/agt-cli 0.12.6 → 0.12.7

package/dist/bin/agt.js

@@ -3717,7 +3717,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync5, realpathSync } from "fs";
 import chalk20 from "chalk";
 import ora15 from "ora";
-var cliVersion = true ? "0.12.6" : "dev";
+var cliVersion = true ? "0.12.7" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -4166,7 +4166,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.12.6" : "dev";
+var cliVersion2 = true ? "0.12.7" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", (thisCommand) => {

package/dist/lib/manager-worker.js

@@ -40,7 +40,7 @@ import {
 
 // src/lib/manager-worker.ts
 import { createHash } from "crypto";
-import { readFileSync, writeFileSync, mkdirSync, existsSync, rmSync, readdirSync, statSync, unlinkSync, copyFileSync } from "fs";
+import { readFileSync, writeFileSync, appendFileSync, mkdirSync, chmodSync, existsSync, rmSync, readdirSync, statSync, unlinkSync, copyFileSync } from "fs";
 import https from "https";
 import { join as join2, dirname } from "path";
 import { homedir as homedir2 } from "os";
@@ -1119,10 +1119,35 @@ function send(msg) {
     log(`Error: ${msg.message}`);
   }
 }
+var managerLogPath = null;
+function redactForDiskLog(value) {
+  try {
+    return value.replace(/\b(Bearer\s+)[A-Za-z0-9._-]+\b/gi, "$1[REDACTED]").replace(/\bxox[baprs]-[A-Za-z0-9-]+\b/g, "[REDACTED-SLACK]").replace(/\btlk_[A-Za-z0-9._-]+\b/g, "[REDACTED-HOST]").replace(/\bsk-ant-[A-Za-z0-9_-]+\b/g, "[REDACTED-ANTHROPIC]").replace(/\b\d{8,12}:[A-Za-z0-9_-]{30,}\b/g, "[REDACTED-TELEGRAM]").replace(/\b([A-Z0-9_]*(?:TOKEN|SECRET|API[_-]?KEY|PASSWORD)[A-Z0-9_]*)=\S+/gi, "$1=[REDACTED]");
+  } catch {
+    return "[REDACTED]";
+  }
+}
 function log(msg) {
   const ts = (/* @__PURE__ */ new Date()).toISOString();
-  process.stderr.write(`[manager-worker ${ts}] ${msg}
+  const safeMsg = redactForDiskLog(msg);
+  const rawStderrOptIn = process.env["AGT_LOG_RAW_SECRETS"] === "1" && process.stderr.isTTY;
+  const stderrMsg = rawStderrOptIn ? msg : safeMsg;
+  process.stderr.write(`[manager-worker ${ts}] ${stderrMsg}
 `);
+  try {
+    if (!managerLogPath) {
+      managerLogPath = join2(homedir2(), ".augmented", "manager.log");
+      mkdirSync(dirname(managerLogPath), { recursive: true });
+      if (!existsSync(managerLogPath)) {
+        appendFileSync(managerLogPath, "", { mode: 384 });
+      } else {
+        chmodSync(managerLogPath, 384);
+      }
+    }
+    appendFileSync(managerLogPath, `[manager-worker ${ts}] ${safeMsg}
+`);
+  } catch {
+  }
 }
 function sha256(content) {
   return createHash("sha256").update(content, "utf8").digest("hex");